Il y a actuellement 302 visiteurs
Jeudi 28 Mars 2024
accueilactualitésdossierscomparer les prixtélécharger gratuitement vos logicielsoffres d'emploiforum informatique
Connexion
Créer un compte

RAGUS

Ce membre n'a pas encore choisi d'avatar
Visiteur
Visiteur
Nom d'utilisateur:
RAGUS
Groupes:

Contacter RAGUS

Statistiques de l’utilisateur

Inscription:
09 Déc 2012 15:29
Dernière visite:
14 Déc 2012 23:50
Messages:
8 (0.00% de tous les messages / 0.00 messages par jour)
Forum le plus actif:
Forum sécurité, virus et publicité (adware)
(8 Messages / 100.00% des messages de l'utilisateur)
Sujet le plus actif:
[Réglé] supprimer ECOSTARTPAGE de mon navigateur Firefox
(8 Messages / 100.00% des messages de l'utilisateur)

Le matériel informatique de RAGUS

Catégorie Marque Produit

Les derniers messages de RAGUS

Message [Réglé] supprimer ECOSTARTPAGE de mon navigateur Firefox
Bonjour a tous ,
je suis embêter depuis une semaine sur mon navigateur Firefox, mon moteur de recherche Google
a était remplacer par EcoStartPage . J ai essayer Avast, malwarebyte, spybot... rien n y fait.
Aidez moi svp car la je sèche a trouver une solution ...



Voici le rapport fait avec AdwCleaner:__________________________________________________________________


Code: Tout sélectionner
# AdwCleaner v2.011 - Rapport créé le 09/12/2012 à 16:25:37
# Mis à jour le 02/12/2012 par Xplode
# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)
# Nom d'utilisateur : Ragus - HAL
# Mode de démarrage : Normal
# Exécuté depuis : C:\Documents and Settings\Ragus\Mes documents\Téléchargements\adwcleaner.exe
# Option [Recherche]


***** [Services] *****


***** [Fichiers / Dossiers] *****


***** [Registre] *****


***** [Navigateurs] *****

-\\ Internet Explorer v8.0.6001.18702

[OK] Le registre ne contient aucune entrée illégitime.

-\\ Mozilla Firefox v17.0.1 (fr)

Nom du profil : default
Fichier : C:\Documents and Settings\Ragus\Application Data\Mozilla\Firefox\Profiles\dj7n94o6.default\prefs.js

[OK] Le fichier ne contient aucune entrée illégitime.

*************************

AdwCleaner[R1].txt - [2385 octets] - [09/12/2012 14:19:04]
AdwCleaner[R2].txt - [2445 octets] - [09/12/2012 14:27:34]
AdwCleaner[R3].txt - [966 octets] - [09/12/2012 16:25:37]
AdwCleaner[S2].txt - [2369 octets] - [09/12/2012 14:28:29]

########## EOF - C:\AdwCleaner[R3].txt - [1085 octets] ##########


Ainsi que le rapport de ZHPDiag:____________________________________________________________________

Code: Tout sélectionner
Rapport de ZHPDiag v1.32.11 par Nicolas Coolman, Update du 08/12/2012
Run by Ragus at 09/12/2012 14:47:29
State : Version à jour.
UAC : Not Found


---\\ Web Browser
MSIE: Internet Explorer v8.0.6001.18702
MFIE: Mozilla Firefox 17.0.1 v17.0.1 (Defaut)

---\\ Windows Product Information
~ Langage: Français
Windows XP Professional Service Pack 3 (Build 2600)
Windows Automatic Updates : OK
Windows Genuine Advantage : KO

---\\ System Information
~ Processor: x86 Family 15 Model 6 Stepping 4, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2046 MB (64% free)
System Restore: Activé (Enable)
System drive C: has 211 GB (45%) free of 466 GB

---\\ Logged in mode
~ Computer Name: HAL
~ User Name: Ragus
~ All Users Names: UpdatusUser, SUPPORT_388945a0, Ragus, HelpAssistant, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Documents and Settings\Ragus\Application Data\
~ %Desktop% : C:\Documents and Settings\Ragus\Bureau\
~ %Favorites% : C:\Documents and Settings\Ragus\Favoris\
~ %LocalAppData% : C:\Documents and Settings\Ragus\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\Ragus\Menu Démarrer\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\system32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 211 Go of 466 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 208 Go of 596 Go)
E:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
F:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
I:\ CD-ROM drive (Free 0 Go of 1 Go)
T:\ Hard drive, Flash drive, Thumb drive (Free 154 Go of 932 Go)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  Out Of Date
~ Scan Security Center in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.13/04/2008 - 18:34:04.) -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.D0E5BB7F1F2B2A86CE809CC8EA9CB5B5] - (.Microsoft Corporation - Internet Extensions for Win32.) (.28/08/2012 - 16:04:59.) -- C:\WINDOWS\system32\wininet.dll [916992]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.13/04/2008 - 18:34:30.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 14:49:54.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138496]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 11:40:32.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512]
[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/04/2008 - 11:14:22.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744]
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/04/2008 - 10:40:48.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976]
[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.13/04/2008 - 17:57:40.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44672]
[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.13/04/2008 - 08:36:06.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.13/04/2008 - 18:00:54.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [54144]
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.13/04/2008 - 10:41:00.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [42112]
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.13/04/2008 - 10:57:16.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [152832]
[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.13/04/2008 - 11:19:44.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264]
[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 14:29:31.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [456320]
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.13/04/2008 - 11:21:02.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 - 11:15:54.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574976]
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.13/04/2008 - 18:47:24.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80384]
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/04/2008 - 11:19:44.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328]
[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 10:32:52.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.13/04/2008 - 19:57:36.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58752]
[MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.13/04/2008 - 17:56:06.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [53376]
~ Scan Generic Processes in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 3/33
~ Mes musiques (My Musics) : 1/14
~ Mes Videos (My Videos) : 2/6
~ Mes Favoris (My Favorites) : 1/9
~ Mes Documents (My Documents) : 1/6103
~ Mon Bureau (My Desktop) : 1/5842
~ Menu demarrer (Programs) : 1/59
~ Scan Hidden Files in 00mn 59s



---\\ Processus lancés
[MD5.8FA553E9AE69808D99C164733A0F9590] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe   [44808] [PID.]
[MD5.3DE014DFC14E8530F3A85572E2763446] - (.C-Dilla Ltd - C-Dilla RTS Service.) -- C:\WINDOWS\system32\drivers\CDAC11BA.exe   [39936] [PID.]
[MD5.793EF38A5FD086C3C8E48A8A861562ED] - (.Microsoft Corporation - Content Index service.) -- C:\WINDOWS\system32\cisvc.exe   [5632] [PID.]
[MD5.4A56CDAEA7120054C8C93F496E41F8F1] - (.Nero AG - incdsrv.) -- C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe   [849408] [PID.]
[MD5.691B9B7C0CC1653732717D292D6B305D] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe   [153584] [PID.]
[MD5.FFD30DAAF62D605069F6EB42D2E807C3] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 306.8.) -- C:\WINDOWS\system32\nvsvc32.exe   [164200] [PID.]
[MD5.8EF654045E518AC00E52E7A1E2D3AD70] - (.Canon Inc. - Canon Camera Access Library 8.) -- C:\Program Files\Canon\CAL\CALMAIN.exe   [96370] [PID.]
[MD5.DB90709B3EA5F42B1A5BF498C8902FD3] - (.artArmin - Changes "My Computer" drive icons to Window.) -- C:\Program Files\Vista Drive Icon\DrvIcon.exe   [49152] [PID.]
[MD5.93AD0B78C7357A05F50E594EC7C22300] - (...) -- ystem32\rundll32.exe   [0] [PID.]
[MD5.083649EF692A066880C9326020915AFE] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe   [4297136] [PID.]
[MD5.3B01B800A43CF3FAF5AAA78315BC2148] - (.Nullsoft, Inc. - Winamp Agent.) -- C:\Program Files\Winamp\winampa.exe   [74752] [PID.]
[MD5.B77081F8221968C7DAB794B0BA55C43E] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe   [254896] [PID.]
[MD5.4CB7C0105E9BF50EF2C2F220FBEDBF49] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.exe   [20053608] [PID.]
[MD5.70F40294A8BF20CF0A5473BC60730BD5] - (.Logitech, Inc. - Logitech SetPoint Event Manager (UNICODE).) -- C:\Program Files\Logitech\SetPointP\SetPoint.exe   [1851192] [PID.]
[MD5.0A27753C1E3254B28BDEC19717CBC505] - (.Nero AG - Nero Home.) -- C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe   [139264] [PID.]
[MD5.0CF162FB0EA6E227406C669FD83A271C] - (.Nero AG - Nero Home.) -- C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe   [876544] [PID.]
[MD5.DD7DB552EDAC50143B97EFFCA154B2AD] - (.Binary Fortress Software - DisplayFusion.) -- C:\Program Files\DisplayFusion\DisplayFusion.exe   [4008392] [PID.]
[MD5.E13EA4860E8F2AA845B53BFD2B6FEC5B] - (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe   [1695232] [PID.]
[MD5.06EB82143478B8EA270E5BD06EFA1534] - (.Logitech, Inc. - Logitech KHAL Main Process.) -- C:\Program Files\Fichiers communs\LogiShrd\KHAL3\KHALMNPR.exe   [150328] [PID.]
[MD5.0DFD8BBA8830B024CF0B7E376AE9F5B3] - (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe   [3508624] [PID.]
[MD5.E9657378449777E319E383745E2BE853] - (.Pas de propriétaire - KiesPDLR.) -- C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe   [21392] [PID.]
[MD5.63E1DFA0FFA0CC920FE09710291782D8] - (.The CoolMon Project - CoolMon Executeable.) -- C:\_download\CoolMon\CoolMon.exe   [1539584] [PID.]
[MD5.6E491A7FECB845974F8F6F65B419C7B1] - (...) -- D:\_transfert\HFS\hfs.exe   [572928] [PID.]
[MD5.72999AA48322DA948CE50C08B414A0EC] - (.Microsoft Corporation - Indexing Service filter daemon.) -- C:\WINDOWS\system32\cidaemon.exe   [8192] [PID.]
[MD5.21BE527D03CB39D4390701BAEF7C64D8] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe   [3779072] [PID.]
[MD5.210EE09CB9C2655E55BD48D851369DC1] - (.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe   [1258856] [PID.]
[MD5.5E9A6658A2A69AE7EB195113B7A2E7A9] - (.Microsoft Corporation - Application Layer Gateway Service.) -- C:\WINDOWS\System32\alg.exe   [44544] [PID.]
[MD5.8BA7C024070F2B7FDD98ED8A4BA41789] - (.Microsoft Corporation - PresentationFontCache.exe.) -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe   [46104] [PID.]
~ Scan Processes Running in 00mn 02s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Documents and Settings\Ragus\Application Data\Mozilla\Firefox\Profiles\bzxpw76w.default\prefs.js
C:\Documents and Settings\Ragus\Application Data\Mozilla\Firefox\Profiles\dj7n94o6.default\prefs.js
M3 - MFPP: Plugins - [Ragus] -- C:\Documents and Settings\Ragus\Application Data\Mozilla\Firefox\Profiles\bzxpw76w.default\searchplugins\EcoStartPage.xml
M3 - MFPP: Plugins - [Ragus] -- C:\Documents and Settings\Ragus\Application Data\Mozilla\Firefox\Profiles\dj7n94o6.default\searchplugins\EcoStartPage.xml
M3 - MFPP: Plugins - [Ragus] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [Ragus] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [Ragus] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [Ragus] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [Ragus] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [Ragus] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [Ragus] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
M0 - MFSP: prefs.js [Ragus - bzxpw76w.default] http://ecostartpage.com
M0 - MFSP: prefs.js [Ragus - dj7n94o6.default] http://www.google.fr
M2 - MFEP: prefs.js [Ragus - bzxpw76w.default\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}] [dwhelper] DownloadHelper v4.9.4 (.Michel Gutierrez.)
M2 - MFEP: prefs.js [Ragus - dj7n94o6.default\info@djzig.com] [] LavaFox V2 v2.0.7 (.Zigboom.)
M2 - MFEP: prefs.js [Ragus - dj7n94o6.default\zigboom.designs@gmail.com] [] BlackFox V2-Blue v2.0.7 (.Zigboom.)
M2 - MFEP: prefs.js [Ragus - dj7n94o6.default\zigboom@ymail.com] [] LavaFox V2-Green v2.0.7 (.Zigboom.)
M2 - MFEP: prefs.js [Ragus - dj7n94o6.default\{5b35cb30-16b4-11de-8c30-0800200c9a66}] [] Orange Fox v13.0.05.05.12 (.Jivko Evgeniev.)
M2 - MFEP: prefs.js [Ragus - dj7n94o6.default\{77d2ed30-4cd2-11e0-b8af-0800200c9a66}] [] FT DeepDark v5.4 (.Steva.)
M2 - MFEP: prefs.js [Ragus - dj7n94o6.default\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}] [dwhelper] DownloadHelper v4.9.12 (.Michel Gutierrez.)
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.4.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN:Firefox Plugin Navigator . (.Nullsoft, Inc. - Winamp Application Detector.) -- C:\Program Files\Mozilla Firefox\Plugins\npwachk.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll
P2 - FPN: [HKLM] [@canon.com/EPPEX] - (.CANON INC. - CANON iMAGE GATEWAY Album Plugin Utility Module.) -- C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.dll
P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=1.6.0_37] - (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\WINDOWS\system32\npdeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_37 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.0.2] - (.VideoLAN - VLC media player Web Plugin 2.0.2.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.4.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
~ Scan Firefox Browser in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ecostartpage.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.4.) (No version) -- (.not file.)
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Scan Keys in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 06s
~ Nombre de lignes (Lines number): 15065



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: (no name) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} Clé orpheline
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} Clé orpheline
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} Clé orpheline
O2 - BHO: (no name) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} Clé orpheline
O2 - BHO: (no name) - {9030D464-4C02-4ABF-8ECC-5164760863C6} Clé orpheline
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} Clé orpheline
O2 - BHO: (no name) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} Clé orpheline
~ Scan BHO in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: (no name) - [HKLM]{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (...) --  (.not file.)
~ Scan Toolbar in 00mn 00s



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [WinSys2] . (.Pas de propriétaire - DOT MFC Application.) -- C:\WINDOWS\system32\winsys2.exe
O4 - HKLM\..\Run: [DrvIcon] . (.artArmin - Changes "My Computer" drive icons to Window.) -- C:\Program Files\Vista Drive Icon\DrvIcon.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent]  bthprops.cpl
O4 - HKLM\..\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe
O4 - HKLM\..\Run: [WinampAgent] . (.Nullsoft, Inc. - Winamp Agent.) -- C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] . (...) -- C:\WINDOWS\system32\PSDrvCheck.exe
O4 - HKLM\..\Run: [CanonSolutionMenu] . (.CANON INC. - CNSLMAIN.) -- C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe
O4 - HKLM\..\Run: [CanonMyPrinter] . (.CANON INC. - Canon My Printer.) -- C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.exe
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll
O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\WINDOWS\system32\NvMCTray.dll
O4 - HKLM\..\Run: [nwiz] . (...) -- C:\Program Files\NVIDIA Corporation\nview\nwiz.exe
O4 - HKLM\..\Run: [NeroFilterCheck] . (.Nero AG - NeroCheck.) -- C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [EvtMgr6] . (.Logitech, Inc. - Logitech SetPoint Event Manager (UNICODE).) -- C:\Program Files\Logitech\SetPointP\SetPoint.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] . (.Nero AG - Nero Home.) -- C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
O4 - HKCU\..\Run: [DisplayFusion] . (.Binary Fortress Software - DisplayFusion.) -- C:\Program Files\DisplayFusion\DisplayFusion.exe
O4 - HKCU\..\Run: [MSMSGS] . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
O4 - HKCU\..\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
O4 - HKCU\..\Run: [KiesPDLR] . (.Pas de propriétaire - KiesPDLR.) -- C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKCU\..\Run: [KiesHelper] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\KiesHelper.exe
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-21-507921405-1284227242-1417001333-1004-507921405-1284227242-1417001333-1003\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] . (.Nero AG - Nero Home.) -- C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
O4 - HKUS\S-1-5-21-507921405-1284227242-1417001333-1004-507921405-1284227242-1417001333-1003\..\Run: [DisplayFusion] . (.Binary Fortress Software - DisplayFusion.) -- C:\Program Files\DisplayFusion\DisplayFusion.exe
O4 - HKUS\S-1-5-21-507921405-1284227242-1417001333-1004-507921405-1284227242-1417001333-1003\..\Run: [MSMSGS] . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
O4 - HKUS\S-1-5-21-507921405-1284227242-1417001333-1004-507921405-1284227242-1417001333-1003\..\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
O4 - HKUS\S-1-5-21-507921405-1284227242-1417001333-1004-507921405-1284227242-1417001333-1003\..\Run: [KiesPDLR] . (.Pas de propriétaire - KiesPDLR.) -- C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKUS\S-1-5-21-507921405-1284227242-1417001333-1004-507921405-1284227242-1417001333-1003\..\Run: [KiesHelper] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\KiesHelper.exe
O4 - HKUS\S-1-5-21-507921405-1284227242-1417001333-1004-507921405-1284227242-1417001333-1003\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
~ Scan Application in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader X.lnk . (...)  -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AA1000000001}\SC_Reader.ico
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Reader.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Microsoft Reader\msreader.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Mozilla Firefox.lnk . (.Mozilla Corporation.)  -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN.lnk . (.Microsoft Corporation.)  -- C:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Visionneuse Microsoft Office PowerPoint 2007.lnk . (...)  -- C:\WINDOWS\Installer\{95120000-00AF-040C-0000-0000000FF1CE}\ppvwicon.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Movie Maker\moviemk.exe
O4 - Global Startup: C:\Documents And Settings\UpdatusUser\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\Ragus\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\Ragus\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\Ragus\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Outlook Express\msimn.exe
O4 - Global Startup: C:\Documents And Settings\Ragus\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Documents And Settings\Administrateur\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader X.lnk . (...)  -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AA1000000001}\SC_Reader.ico
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Reader.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Microsoft Reader\msreader.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Mozilla Firefox.lnk . (.Mozilla Corporation.)  -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\MSN.lnk . (.Microsoft Corporation.)  -- C:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Visionneuse Microsoft Office PowerPoint 2007.lnk . (...)  -- C:\WINDOWS\Installer\{95120000-00AF-040C-0000-0000000FF1CE}\ppvwicon.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Movie Maker\moviemk.exe
O4 - Global Startup: C:\Documents And Settings\UpdatusUser\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\Ragus\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\Ragus\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\Ragus\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Outlook Express\msimn.exe
O4 - Global Startup: C:\Documents And Settings\Ragus\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Documents And Settings\Administrateur\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS\system32\rcimlby.exe
~ Scan Global Startup in 00mn 01s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
~ Scan IE Extra Buttons in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\WINDOWS\system32\wshbth.dll
~ Scan Winsock in 00mn 00s



---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
~ Scan Objets ActiveX in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{A326FD65-1B4B-4A88-97BC-F9FBFEA8FA5B}: NameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{2B9E7A4A-E0E2-49CD-947B-2502D89C4693}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{A326FD65-1B4B-4A88-97BC-F9FBFEA8FA5B}: NameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{2B9E7A4A-E0E2-49CD-947B-2502D89C4693}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{A326FD65-1B4B-4A88-97BC-F9FBFEA8FA5B}: NameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{2B9E7A4A-E0E2-49CD-947B-2502D89C4693}: DhcpNameServer = 192.168.1.1
~ Scan Domain in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
~ Scan Protocole Additionnel in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll
O20 - Winlogon Notify: LBTWlgn . (.Logitech, Inc. - Logitech Bluetooth Service.) -- c:\program files\fichiers communs\logishrd\bluetooth\LBTWlgn.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
~ Scan Winlogon in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll
~ Scan SSODL in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: C-DillaCdaC11BA (C-DillaCdaC11BA) . (.C-Dilla Ltd - C-Dilla RTS Service.) - C:\WINDOWS\system32\drivers\CDAC11BA.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) . (.Canon Inc. - Canon Camera Access Library 8.) - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InCD Helper (InCDsrv) . (.Nero AG - incdsrv.) - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 306.8.) - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) . (.NVIDIA Corporation - NVIDIA Settings Update Manager.) - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
~ Scan Services in 00mn 00s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)
~ Scan Desktop Component in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\avast! Emergency Update.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
[MD5.0CB0AA071C7B86A64F361DCFDF357329] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
[MD5.7F19838AC317C34FCED020BE529AF71E] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
~ Scan Scheduled Task in 00mn 00s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Mise à jour de la version d’Internet Explorer - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utility.) -- C:\WINDOWS\system32\ieudinit.exe
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media de Microsoft.) -- C:\WINDOWS\inf\unregmp2.exe
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - IEAK branding.) -- C:\WINDOWS\system32\iedkcs32.dll
O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} . (.Microsoft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\shmgrate.exe
O40 - ASIC: Microsoft Reader - {05466845-FF44-4671-92C1-A5FD0F9EEE1C} . (.Microsoft Corporation - Microsoft Reader.) -- C:\Program Files\Microsoft Reader\msreader.exe
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll
O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system32\wmpdxm.dll
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\WINDOWS\system32\themeui.dll
O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe
O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -- C:\WINDOWS\INF\msnetmtg.inf
O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (...) -- C:\WINDOWS\INF\msmsgs.inf
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\WINDOWS\system32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (...) -- C:\WINDOWS\INF\wmp11.inf
O40 - ASIC: Carnet d'adresses 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} . (.Microsoft Corporation - Bibliothèque d'installation Outlook Express.) -- C:\Program Files\Outlook Express\setup50.exe
O40 - ASIC: Mise à jour du Bureau Windows - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d’initialisation d’Internet Explorer par utilisateur.) -- C:\WINDOWS\system32\ie4uinit.exe.mui
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\WINDOWS\system32\mscories.dll
O40 - ASIC: Shockwave Flash Object - {D27CDB6E-AE6D-11cf-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 11.4 r402.) -- C:\WINDOWS\system32\Macromed\Flash\Flash32_11_4_402_287.ocx
~ Scan Active Setup in 00mn 00s



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver:  (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver:  (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver:  (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
O41 - Driver:  (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\system32\DRIVERS\imapi.sys
O41 - Driver:  (InCDPass) . (.Nero AG - Ahead RW Filter Driver.) - C:\WINDOWS\system32\drivers\InCDPass.sys
O41 - Driver:  (incdrm) . (.Nero AG - Nero MRW Filter Driver.) - C:\WINDOWS\system32\drivers\InCDRm.sys
O41 - Driver:  (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\system32\DRIVERS\intelppm.sys
O41 - Driver:  (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\system32\DRIVERS\ipsec.sys
O41 - Driver:  (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
O41 - Driver:  (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\WINDOWS\system32\DRIVERS\kbdhid.sys
O41 - Driver:  (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
O41 - Driver:  (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver:  (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\system32\DRIVERS\netbt.sys
O41 - Driver:  (PCLEPCI) . (.Pinnacle Systems GmbH - PCLEPCI.) - C:\WINDOWS\system32\drivers\pclepci.sys
O41 - Driver:  (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys
O41 - Driver:  (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
O41 - Driver:  (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\system32\DRIVERS\redbook.sys
O41 - Driver:  (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\WINDOWS\system32\DRIVERS\serial.sys
O41 - Driver:  (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\system32\DRIVERS\tcpip.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
~ Scan Drivers in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader X (10.1.4) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
O42 - Logiciel: Alky for Applications (Windows XP) - (.Alky Team.) [HKLM] -- {BB05D173-9681-4812-A7FA-BD4042A3DA00}
O42 - Logiciel: ArcSoft Collage Creator - (.ArcSoft.) [HKLM] -- {80FC797D-FDC4-4585-9551-E00A39274CD0}
O42 - Logiciel: ArcSoft Multimedia Email - (.Pas de propriétaire.) [HKLM] -- {DD54CF66-090B-43E7-97C1-110EF526474D}
O42 - Logiciel: ArcSoft PhotoImpression 5 - (.ArcSoft.) [HKLM] -- {FC888095-A35E-4993-A9E0-366BF6F0CCE0}
O42 - Logiciel: ArcSoft PhotoStudio 5.5 - (.ArcSoft.) [HKLM] -- {85309D89-7BE9-4094-BB17-24999C6118FC}
O42 - Logiciel: ArcSoft VideoImpression 2 - (.ArcSoft.) [HKLM] -- {1136B2B6-60BD-4D79-94E9-2E0E8C395F54}
O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
O42 - Logiciel: Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver - (.Atheros Communications Inc..) [HKLM] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549}
O42 - Logiciel: BSC Cleanitol TM - (.Pas de propriétaire.) [HKCU] -- BSC Cleanitol TM
O42 - Logiciel: Bullzip PDF Printer 7.2.0.1338 - (.Bullzip.) [HKLM] -- Bullzip PDF Printer_is1
O42 - Logiciel: CANON iMAGE GATEWAY Task for ZoomBrowser EX - (.Pas de propriétaire.) [HKLM] -- CANON iMAGE GATEWAY Task
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: Canon Camera Access Library - (.Pas de propriétaire.) [HKLM] -- CAL
O42 - Logiciel: Canon G.726 WMP-Decoder - (.Pas de propriétaire.) [HKLM] -- Canon G.726 WMP-Decoder
O42 - Logiciel: Canon Internet Library for ZoomBrowser EX - (.Pas de propriétaire.) [HKLM] -- Canon Internet Library for ZoomBrowser EX
O42 - Logiciel: Canon MP Navigator EX 3.0 - (.Pas de propriétaire.) [HKLM] -- MP Navigator EX 3.0
O42 - Logiciel: Canon MP270 series MP Drivers - (.Pas de propriétaire.) [HKLM] -- {1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP270_series
O42 - Logiciel: Canon MovieEdit Task for ZoomBrowser EX - (.Pas de propriétaire.) [HKLM] -- MovieEditTask
O42 - Logiciel: Canon RAW Image Task for ZoomBrowser EX - (.Pas de propriétaire.) [HKLM] -- RAW Image Task
O42 - Logiciel: Canon Utilities CameraWindow - (.Pas de propriétaire.) [HKLM] -- CameraWindowLauncher
O42 - Logiciel: Canon Utilities CameraWindow DC - (.Pas de propriétaire.) [HKLM] -- CameraWindowDC
O42 - Logiciel: Canon Utilities CameraWindow DC_DV 5 for ZoomBrowser EX - (.Pas de propriétaire.) [HKLM] -- CameraWindowDVC5
O42 - Logiciel: Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX - (.Pas de propriétaire.) [HKLM] -- CameraWindowDVC6
O42 - Logiciel: Canon Utilities EOS Utility - (.Pas de propriétaire.) [HKLM] -- EOS Utility
O42 - Logiciel: Canon Utilities Easy-PhotoPrint - (.Pas de propriétaire.) [HKLM] -- Easy-PhotoPrint
O42 - Logiciel: Canon Utilities Easy-PhotoPrint EX - (.Pas de propriétaire.) [HKLM] -- Easy-PhotoPrint EX
O42 - Logiciel: Canon Utilities My Printer - (.Pas de propriétaire.) [HKLM] -- CanonMyPrinter
O42 - Logiciel: Canon Utilities MyCamera - (.Pas de propriétaire.) [HKLM] -- MyCamera
O42 - Logiciel: Canon Utilities MyCamera DC - (.Pas de propriétaire.) [HKLM] -- MyCameraDC
O42 - Logiciel: Canon Utilities PhotoStitch - (.Pas de propriétaire.) [HKLM] -- PhotoStitch
O42 - Logiciel: Canon Utilities RemoteCapture DC - (.Pas de propriétaire.) [HKLM] -- RemoteCaptureDC
O42 - Logiciel: Canon Utilities RemoteCapture Task for ZoomBrowser EX - (.Pas de propriétaire.) [HKLM] -- RemoteCaptureTask
O42 - Logiciel: Canon Utilities Solution Menu - (.Pas de propriétaire.) [HKLM] -- CanonSolutionMenu
O42 - Logiciel: Canon Utilities ZoomBrowser EX - (.Pas de propriétaire.) [HKLM] -- ZoomBrowser EX
O42 - Logiciel: Canon ZoomBrowser EX Memory Card Utility - (.Pas de propriétaire.) [HKLM] -- ZoomBrowser EX Memory Card Utility
O42 - Logiciel: Cda Product Service - shared component - (.Pas de propriétaire.) [HKLM] -- CdaC13Ba
O42 - Logiciel: Creative WebCam Center - (.Pas de propriétaire.) [HKLM] -- Creative WebCam Center
O42 - Logiciel: Creative WebCam Live! Pro Driver (1.01.01.1011) - (.Pas de propriétaire.) [HKLM] -- Creative VF0080
O42 - Logiciel: DVD Shrink 3.2 - (.DVD Shrink.) [HKLM] -- DVD Shrink_is1
O42 - Logiciel: DVD de bonus Studio 10 - (.Pas de propriétaire.) [HKLM] -- {6A012D9C-2E2E-405A-B87C-E909F5297C3F}
O42 - Logiciel: DiscAPI - (.Pinnacle Systems.) [HKLM] -- {A77F3C2D-50CC-4A29-A1FB-1E018BE4DCA2}
O42 - Logiciel: DisplayFusion 4.2 - (.Binary Fortress Software.) [HKLM] -- B076073A-5527-4f4f-B46B-B10692277DA2_is1
O42 - Logiciel: DivX - (.DivXNetworks, Inc..) [HKLM] -- {7B63B2922B174135AFC0E1377DD81EC2}
O42 - Logiciel: Détection de l'application Winamp - (.Nullsoft, Inc.) [HKCU] -- Winamp Detect
O42 - Logiciel: FormatFactory 3.00 - (.Free Time.) [HKLM] -- FormatFactory
O42 - Logiciel: GIMP 2.6.11 - (.The GIMP Team.) [HKLM] -- WinGimp-2.0_is1
O42 - Logiciel: Gadget Documents récents Microsoft Office 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-008A-040C-0000-0000000FF1CE}
O42 - Logiciel: Gadget Installer - (.VistaExperience.org.) [HKLM] -- {3F3733A5-8322-454D-A638-3B74E1C83752}
O42 - Logiciel: Google Earth Plug-in - (.Google.) [HKLM] -- {33286280-8617-11E1-8FF6-B8AC6F97B88E}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}
O42 - Logiciel: Java(TM) 6 Update 37 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216033FF}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619}
O42 - Logiciel: KhalInstallWrapper - (.Logitech.) [HKLM] -- {3101CB58-3482-4D21-AF1A-7057FC935355}
O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player
O42 - Logiciel: Logitech SetPoint 6.51 - (.Logitech.) [HKLM] -- sp6
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Malwarebytes Anti-Malware version 1.65.1.1000 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Manuel d'utilisation de Creative WebCam Live! Pro (Français) - (.Pas de propriétaire.) [HKLM] -- Manuel d'utilisation de Creative WebCam Live! Pro French
O42 - Logiciel: MaxiCompte - (.EuroSoft Software Development.) [HKLM] -- MaxiCompte 3.13_is1
O42 - Logiciel: Micro Application - Etiquettes CD-DVD Edition Classic - (.Pas de propriétaire.) [HKLM] -- {D712874A-B387-4B99-9172-F42E157A82E5}
O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1
O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.9 - (.Microsoft Corporation.) [HKLM] -- Wdf01009
O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM] -- NLSDownlevelMapping
O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Reader - (.Pas de propriétaire.) [HKLM] -- {B6F7DBE7-2FE2-458F-A738-B10832746036}
O42 - Logiciel: Microsoft Reader Text-to-Speech pour le français - (.Microsoft Corporation.) [HKLM] -- {6F1547AA-8DA7-4FAC-BA11-BE1659E7086E}
O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 - (.Microsoft Corporation.) [HKLM] -- {CC1DB186-550F-3CFE-A2A9-EBA5E5A34BC1}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 - (.Microsoft Corporation.) [HKLM] -- {5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F}
O42 - Logiciel: Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 - (.Microsoft Corporation.) [HKLM] -- {196BB40D-1578-3D01-B289-BEFC77A11A1E}
O42 - Logiciel: Mises à jour NVIDIA 1.10.8 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update
O42 - Logiciel: MotoGP URT 3 - (.THQ.) [HKLM] -- MotoGP URT 3_is1
O42 - Logiciel: Mozilla Firefox 17.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 17.0.1 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
O42 - Logiciel: MyFreeCodec - (.Pas de propriétaire.) [HKCU] -- MyFreeCodec
O42 - Logiciel: NAM Hotfix Package 301 (13 April 2012) - (.The NAM Team.) [HKCU] -- NAM Hotfix Package
O42 - Logiciel: NVIDIA Logiciel système PhysX 9.12.0604 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {2FDD750F-49B7-40C1-9D5E-D2955BC0E2D8}
O42 - Logiciel: NVIDIA Pilote graphique 306.81 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver
O42 - Logiciel: NVIDIA nView 136.28 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView
O42 - Logiciel: Nero 7 Premium - (.Nero AG.) [HKLM] -- {11439F51-B8D2-4736-9CDF-8889FEBE1036}
O42 - Logiciel: Network Addon Mod Version 30 with Essentials r132 - (.The NAM Team.) [HKCU] -- Network Addon Mod
O42 - Logiciel: Network Widening Mod Version 2.0.0 - (.The NAM Team.) [HKCU] -- Network Widening Mod
O42 - Logiciel: OpenOffice.org 3.4 - (.OpenOffice.org.) [HKLM] -- {2F90A789-DD1E-41CE-BFCA-BD78213BABC7}
O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}
O42 - Logiciel: Pinnacle Hollywood FX for Studio - (.Pas de propriétaire.) [HKLM] -- Hollywood FX for Studio
O42 - Logiciel: Pinnacle Instant DVD Recorder - (.Pas de propriétaire.) [HKLM] -- {EF781A5C-58F5-4BFD-87F9-E4F14D382F25}
O42 - Logiciel: RAPID - (.Pinnacle Systems.) [HKLM] -- {EEECE229-49F6-4851-A73A-99B058221F8C}
O42 - Logiciel: REALTEK GbE & FE Ethernet PCI NIC Driver - (.Realtek.) [HKLM] -- {ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}
O42 - Logiciel: Realtek AC'97 Audio - (.Realtek Semiconductor Corp..) [HKLM] -- {FB08F381-6533-4108-B7DD-039E11FBC27E}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Royal Games - (.Pas de propriétaire.) [HKLM] -- Royal Games
O42 - Logiciel: SAMSUNG USB Driver for Mobile Phones - (.SAMSUNG Electronics Co., Ltd..) [HKLM] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44}
O42 - Logiciel: SC4 PIM Extended - (.Pas de propriétaire.) [HKCU] -- SC4 PIM Extended
O42 - Logiciel: STDU Viewer version 1.6.66.0 - (.STDUtility.) [HKLM] -- STDU Viewer_is1
O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- InstallShield_{758C8301-2696-4855-AF45-534B1200980A}
O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- {758C8301-2696-4855-AF45-534B1200980A}
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2604111
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2657424
O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
O42 - Logiciel: SimCity 4 Deluxe - (.Pas de propriétaire.) [HKLM] -- {3F0D0ABE-CDAF-431A-00BC-CBBE018EA74E}
O42 - Logiciel: SmartSound Quicktracks Plugin - (.SmartSound Software Inc.) [HKLM] -- InstallShield_{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}
O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1
O42 - Logiciel: Street Addon Mod Beta v3 - (.The NAM Team.) [HKLM] -- Street Addon Mod
O42 - Logiciel: Studio 10 - (.Pinnacle Systems.) [HKLM] -- {3CB05291-F546-458E-A796-B5BCF5A3CDC4}
O42 - Logiciel: Traqueur 3.1.15 - (.Pas de propriétaire.) [HKLM] -- Traqueur_is1
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
O42 - Logiciel: VLC media player 2.0.2 - (.VideoLAN.) [HKLM] -- VLC media player
O42 - Logiciel: VirtualDub 1.6.9 Fr - (.Pas de propriétaire.) [HKLM] -- VirtualDub 1.6.9 Fr
O42 - Logiciel: VirtualDubMOD 1.5.10.2 b2540 Fr - (.Pas de propriétaire.) [HKLM] -- VirtualDubMOD 1.5.10.2 b2540 Fr
O42 - Logiciel: VisiPics V1.30 - (.Ozone.) [HKLM] -- VisiPics_is1
O42 - Logiciel: Vista Drive Icon 1.4 - (.artArmin.) [HKLM] -- Vista Drive Icon
O42 - Logiciel: Volet Windows - (.Microsoft Corporation.) [HKLM] -- Windows Sidebar
O42 - Logiciel: Waddle's Drive-in - (.Pas de propriétaire.) [HKLM] -- Waddle's Drive-in
O42 - Logiciel: WinRAR 4.01 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver
O42 - Logiciel: Winamp - (.Nullsoft, Inc.) [HKLM] -- Winamp
O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {4634B21A-CC07-4396-890C-2B8168661FEA}
O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKLM] -- WMFDist11
O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime
O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wmp11
O42 - Logiciel: Xvid 1.1.2 final uninstall - (.Xvid team (Koepi).) [HKLM] -- Xvid_is1
O42 - Logiciel: avast! Free Antivirus v7.0.1474.0 - (.AVAST Software.) [HKLM] -- avast
O42 - Logiciel: eMule - (.Pas de propriétaire.) [HKLM] -- eMule
O42 - Logiciel: eReg - (.Logitech, Inc..) [HKLM] -- {3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}
O42 - Logiciel: ffdshow [rev 2527] [2008-12-19] - (.Pas de propriétaire.) [HKLM] -- ffdshow_is1
O42 - Logiciel: gmax - (.Discreet.) [HKLM] -- {3FA7A919-87DA-42B1-814B-86DE8DCA17C2}
O42 - Logiciel: iG Winamp Icon Pack 1.0 - (.GrayWz.) [HKLM] -- iG Winamp Icon Pack
O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}
O42 - Logiciel: proDAD Heroglyph 2.0 - (.Pas de propriétaire.) [HKLM] -- proDAD-Heroglyph-2.0

---\\ HKCU & HKLM Software Keys
[HKCU\Software\AVAST Software]
[HKCU\Software\Adobe]
[HKCU\Software\Ahead audio RAW convertor]
[HKCU\Software\Ahead]
[HKCU\Software\AlterGeo]
[HKCU\Software\ArcSoft]
[HKCU\Software\AudioPluginManager]
[HKCU\Software\Autodesk]
[HKCU\Software\Badoo]
[HKCU\Software\Binary Fortress Software]
[HKCU\Software\Borland]
[HKCU\Software\Bullzip]
[HKCU\Software\CDDB]
[HKCU\Software\Canneverbe Limited]
[HKCU\Software\CanonBJ]
[HKCU\Software\Canon]
[HKCU\Software\Canon_Inc_IC]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Comical]
[HKCU\Software\Common]
[HKCU\Software\Creative Tech]
[HKCU\Software\Crystal Dynamics]
[HKCU\Software\DIMIN]
[HKCU\Software\DVD Shrink]
[HKCU\Software\DaisyManSoftware]
[HKCU\Software\DivXNetworks]
[HKCU\Software\DownloadCenter]
[HKCU\Software\Electronic Arts]
[HKCU\Software\EuroSoft Software Development]
[HKCU\Software\FreeCDRIP]
[HKCU\Software\FreeTime]
[HKCU\Software\Freeware]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\Google]
[HKCU\Software\Haali]
[HKCU\Software\HookNetwork]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\Lavalys]
[HKCU\Software\Leadertech]
[HKCU\Software\Licenses]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Logitech]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\Media Organizing Systems, Inc.]
[HKCU\Software\Micro Application]
[HKCU\Software\Mozilla]
[HKCU\Software\MyFree Codec]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\OpenOffice.org]
[HKCU\Software\Ozone]
[HKCU\Software\Pinnacle Systems]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\PreviewSoft]
[HKCU\Software\Realtek]
[HKCU\Software\Safer Networking Limited]
[HKCU\Software\Samsung]
[HKCU\Software\SecuROM]
[HKCU\Software\The CoolMon Project]
[HKCU\Software\UnFREEz]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\VOB]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Winamp]
[HKCU\Software\Windows Media Audio]
[HKCU\Software\eMule]
[HKLM\Software\AGEIA Technologies]
[HKLM\Software\AVAST Software]
[HKLM\Software\Acorn]
[HKLM\Software\Adobe]
[HKLM\Software\AdwCleaner]
[HKLM\Software\Ahead]
[HKLM\Software\Alienware]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\ArcSoft]
[HKLM\Software\Atheros Communications Inc.]
[HKLM\Software\Audible]
[HKLM\Software\Autodesk]
[HKLM\Software\AviSynth]
[HKLM\Software\BisonCam]
[HKLM\Software\Bullzip]
[HKLM\Software\C-Dilla]
[HKLM\Software\C07ft5Y]
[HKLM\Software\CDDB]
[HKLM\Software\Canon]
[HKLM\Software\Canon_Inc_IC]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Creative Tech]
[HKLM\Software\DVC150]
[HKLM\Software\DivXNetworks]
[HKLM\Software\Electronic Arts]
[HKLM\Software\FAST Multimedia]
[HKLM\Software\GNU]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\HaaliMkx]
[HKLM\Software\ImageMagick]
[HKLM\Software\InstallShield]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\Khronos]
[HKLM\Software\L&H]
[HKLM\Software\Licenses]
[HKLM\Software\Logitech]
[HKLM\Software\MSI]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\MarkAny]
[HKLM\Software\Maxis]
[HKLM\Software\McAfee.com]
[HKLM\Software\Micro Application]
[HKLM\Software\MovieBox USB]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\MyFree Codec]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\Nero]
[HKLM\Software\Nullsoft]
[HKLM\Software\ODBC]
[HKLM\Software\OpenOffice.org]
[HKLM\Software\PeeringPortal]
[HKLM\Software\Pegasus Imaging]
[HKLM\Software\PegasusImaging]
[HKLM\Software\Pinnacle Systems]
[HKLM\Software\Piriform]
[HKLM\Software\Poikosoft]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SAMSUNG]
[HKLM\Software\Safer Networking Limited]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\SmartSound Software]
[HKLM\Software\Systweak]
[HKLM\Software\THQ]
[HKLM\Software\Trad-FR]
[HKLM\Software\Ulead Systems]
[HKLM\Software\VOB]
[HKLM\Software\VideoLAN]
[HKLM\Software\WinRAR]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\Windows]
[HKLM\Software\mozilla.org]
[HKLM\Software\proDAD]
~ Scan Softwares in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 24/08/2011 - 22:27:40 - [113,196] ----D C:\Program Files\Adobe
O43 - CFD: 12/11/2011 - 13:54:32 - [138,971] ----D C:\Program Files\AdorageI-GfxDatas
O43 - CFD: 12/11/2011 - 13:54:03 - [2,493] ----D C:\Program Files\AdorageI-SAL
O43 - CFD: 16/03/2012 - 18:53:06 - [70,123] ----D C:\Program Files\adslTV
O43 - CFD: 04/12/2012 - 16:47:26 - [0] ----D C:\Program Files\AGEIA Technologies
O43 - CFD: 09/12/2012 - 10:07:50 - [0,884] ----D C:\Program Files\Alky for Applications
O43 - CFD: 21/08/2011 - 00:47:32 - [602,078] ----D C:\Program Files\ArcSoft
O43 - CFD: 16/03/2012 - 16:43:21 - [392,270] ----D C:\Program Files\AVAST Software
O43 - CFD: 16/08/2012 - 15:52:34 - [6,419] ----D C:\Program Files\BSCCleanitol
O43 - CFD: 19/02/2012 - 17:49:00 - [23,151] ----D C:\Program Files\Bullzip
O43 - CFD: 06/07/2012 - 14:17:42 - [732,576] ----D C:\Program Files\Canon
O43 - CFD: 14/08/2011 - 23:42:43 - [14,844] --H-D C:\Program Files\CanonBJ
O43 - CFD: 19/10/2011 - 11:12:46 - [3,584] ----D C:\Program Files\CCleaner
O43 - CFD: 27/01/2012 - 23:49:12 - [0,246] ----D C:\Program Files\Comical
O43 - CFD: 14/08/2011 - 02:46:48 - [0] ----D C:\Program Files\ComPlus Applications
O43 - CFD: 04/09/2012 - 13:38:18 - [0] ----D C:\Program Files\Comptes et Budget Free V6.0
O43 - CFD: 15/08/2011 - 03:03:48 - [13,711] ----D C:\Program Files\Creative
O43 - CFD: 31/10/2012 - 14:17:43 - [25,040] ----D C:\Program Files\DisplayFusion
O43 - CFD: 12/11/2011 - 15:19:08 - [0,308] ----D C:\Program Files\DivX
O43 - CFD: 04/04/2012 - 17:33:40 - [0,934] ----D C:\Program Files\DVD Shrink
O43 - CFD: 15/09/2012 - 09:45:07 - [1,195] ----D C:\Program Files\El Juky
O43 - CFD: 06/12/2012 - 08:47:24 - [0,370] ----D C:\Program Files\Emsisoft Anti-Malware
O43 - CFD: 06/07/2012 - 14:47:17 - [-976,304] ----D C:\Program Files\eMule
O43 - CFD: 15/08/2011 - 18:23:41 - [15,940] ----D C:\Program Files\Everest
O43 - CFD: 19/10/2011 - 16:34:43 - [13,483] ----D C:\Program Files\ffdshow
O43 - CFD: 23/10/2012 - 21:24:08 - [200,425] ----D C:\Program Files\Fichiers communs
O43 - CFD: 04/09/2011 - 16:55:56 - [0,065] ----D C:\Program Files\Free Audio Converter(2)
O43 - CFD: 26/08/2012 - 01:00:25 - [0,116] ----D C:\Program Files\Free CD Ripper
O43 - CFD: 19/10/2011 - 12:48:37 - [135,745] ----D C:\Program Files\FreeTime
O43 - CFD: 09/09/2011 - 15:56:34 - [107,888] ----D C:\Program Files\GIMP-2.0
O43 - CFD: 20/07/2012 - 15:34:15 - [67,148] ----D C:\Program Files\Google
O43 - CFD: 04/12/2012 - 21:15:55 - [83,725] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 04/12/2012 - 21:12:56 - [0,092] ----D C:\Program Files\Intel
O43 - CFD: 26/09/2012 - 05:01:28 - [4,506] ----D C:\Program Files\Internet Explorer
O43 - CFD: 23/10/2012 - 21:23:35 - [77,647] ----D C:\Program Files\Java
O43 - CFD: 16/03/2012 - 14:06:24 - [64,567] ----D C:\Program Files\Java(2)
O43 - CFD: 09/12/2012 - 13:55:47 - [47,214] ----D C:\Program Files\Logitech
O43 - CFD: 15/08/2011 - 01:42:54 - [3,778] ----D C:\Program Files\Logitech(2)
O43 - CFD: 04/12/2012 - 17:24:25 - [12,774] ----D C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 28/08/2011 - 11:57:32 - [2,414] ----D C:\Program Files\MarkAny
O43 - CFD: 25/09/2012 - 14:43:33 - [16,265] ----D C:\Program Files\MaxiCompte 3
O43 - CFD: 19/08/2011 - 17:06:42 - [1357,837] ----D C:\Program Files\Maxis
O43 - CFD: 15/08/2011 - 05:12:19 - [2,053] ----D C:\Program Files\Messenger
O43 - CFD: 20/08/2011 - 15:39:53 - [669,286] ----D C:\Program Files\Micro Application
O43 - CFD: 15/08/2011 - 05:54:06 - [0,216] ----D C:\Program Files\Microsoft
O43 - CFD: 14/08/2011 - 02:50:20 - [0] ----D C:\Program Files\microsoft frontpage
O43 - CFD: 19/08/2011 - 18:22:26 - [29,204] ----D C:\Program Files\Microsoft Office
O43 - CFD: 09/09/2011 - 12:34:56 - [2,569] ----D C:\Program Files\Microsoft Reader
O43 - CFD: 16/03/2012 - 14:08:40 - [0,005] ----D C:\Program Files\Microsoft Silverlight
O43 - CFD: 15/08/2011 - 05:02:51 - [9,894] ----D C:\Program Files\Movie Maker
O43 - CFD: 05/12/2012 - 18:29:27 - [42,714] ----D C:\Program Files\Mozilla Firefox
O43 - CFD: 15/08/2011 - 02:47:18 - [6,600] ----D C:\Program Files\Mozilla Firefox(2)
O43 - CFD: 05/12/2012 - 19:12:01 - [0,212] ----D C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 15/08/2011 - 18:48:09 - [0,025] ----D C:\Program Files\MSBuild
O43 - CFD: 19/08/2011 - 18:22:13 - [26,600] ----D C:\Program Files\MSECache
O43 - CFD: 14/08/2011 - 02:45:44 - [18,385] ----D C:\Program Files\MSN
O43 - CFD: 14/08/2011 - 02:46:35 - [8,341] ----D C:\Program Files\MSN Gaming Zone
O43 - CFD: 19/10/2011 - 11:22:47 - [0] ----D C:\Program Files\MSXML 4.0
O43 - CFD: 07/01/2012 - 18:37:48 - [10,471] ----D C:\Program Files\MyFree Codec
O43 - CFD: 19/10/2011 - 10:46:24 - [466,655] ----D C:\Program Files\Nero
O43 - CFD: 14/08/2011 - 02:48:24 - [3,133] ----D C:\Program Files\NetMeeting
O43 - CFD: 04/12/2012 - 16:48:26 - [468,211] ----D C:\Program Files\NVIDIA Corporation
O43 - CFD: 14/08/2011 - 02:46:45 - [0,002] ----D C:\Program Files\Online Services
O43 - CFD: 27/06/2012 - 23:15:21 - [285,319] ----D C:\Program Files\OpenOffice.org 3
O43 - CFD: 15/08/2011 - 05:03:16 - [4,176] ----D C:\Program Files\Outlook Express
O43 - CFD: 16/03/2012 - 14:04:36 - [4,248] ----D C:\Program Files\PDFCreator
O43 - CFD: 12/11/2011 - 13:31:39 - [46,526] ----D C:\Program Files\Pinnacle
O43 - CFD: 12/11/2011 - 13:59:05 - [54,877] ----D C:\Program Files\proDAD
O43 - CFD: 20/12/2011 - 22:06:23 - [0,002] ----D C:\Program Files\QuickTime
O43 - CFD: 04/12/2012 - 21:15:08 - [110,572] ----D C:\Program Files\Realtek
O43 - CFD: 15/08/2011 - 06:22:38 - [41,545] ----D C:\Program Files\Realtek AC97
O43 - CFD: 15/08/2011 - 18:48:03 - [34,726] ----D C:\Program Files\Reference Assemblies
O43 - CFD: 28/08/2011 - 11:58:32 - [238,009] ----D C:\Program Files\Samsung
O43 - CFD: 13/09/2012 - 23:37:18 - [16,638] ----D C:\Program Files\SC4PIM
O43 - CFD: 14/08/2011 - 02:49:03 - [0,001] ----D C:\Program Files\Services en ligne
O43 - CFD: 12/11/2011 - 13:25:51 - [7,101] ----D C:\Program Files\SmartSound Software
O43 - CFD: 15/08/2011 - 13:57:24 - [51,407] ----D C:\Program Files\Spybot - Search & Destroy
O43 - CFD: 16/03/2012 - 14:04:27 - [3,188] ----D C:\Program Files\STDU Viewer
O43 - CFD: 30/04/2012 - 16:16:22 - [632,109] ----D C:\Program Files\THQ
O43 - CFD: 08/12/2011 - 23:26:59 - [-866,895] ----D C:\Program Files\Tomb Raider - Legend
O43 - CFD: 19/09/2012 - 16:38:43 - [0] ----D C:\Program Files\Traffic Simulator Configuration Tool
O43 - CFD: 11/09/2011 - 15:02:37 - [0,086] ----D C:\Program Files\UnFREEz
O43 - CFD: 14/08/2011 - 02:54:27 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 14/08/2011 - 05:38:42 - [118,817] ----D C:\Program Files\VideoLAN
O43 - CFD: 20/10/2011 - 11:30:33 - [1,747] ----D C:\Program Files\VirtualDub
O43 - CFD: 19/10/2011 - 16:51:36 - [3,092] ----D C:\Program Files\VirtualDubMOD
O43 - CFD: 05/12/2011 - 16:41:47 - [5,113] ----D C:\Program Files\VisiPics
O43 - CFD: 19/08/2011 - 02:06:59 - [0,781] ----D C:\Program Files\Vista Drive Icon
O43 - CFD: 09/12/2012 - 10:31:09 - [0,969] ----D C:\Program Files\VistaExperience.org
O43 - CFD: 09/09/2012 - 19:19:32 - [95,234] ----D C:\Program Files\Winamp
O43 - CFD: 09/09/2012 - 17:43:56 - [0,148] ----D C:\Program Files\Winamp Detect
O43 - CFD: 15/08/2011 - 05:54:01 - [107,977] ----D C:\Program Files\Windows Live
O43 - CFD: 15/08/2011 - 05:53:49 - [0,234] ----D C:\Program Files\Windows Live SkyDrive
O43 - CFD: 25/08/2012 - 18:54:57 - [0] ----D C:\Program Files\Windows Media Connect 2
O43 - CFD: 25/08/2012 - 18:54:57 - [7,024] ----D C:\Program Files\Windows Media Player
O43 - CFD: 14/08/2011 - 02:46:22 - [3,760] ----D C:\Program Files\Windows NT
O43 - CFD: 09/12/2012 - 10:22:52 - [20,073] ----D C:\Program Files\Windows Sidebar
O43 - CFD: 14/08/2011 - 02:49:04 - [0] --H-D C:\Program Files\WindowsUpdate
O43 - CFD: 15/08/2011 - 06:40:54 - [3,951] ----D C:\Program Files\WinRAR
O43 - CFD: 14/08/2011 - 02:50:20 - [0] ----D C:\Program Files\xerox
O43 - CFD: 23/08/2011 - 12:56:54 - [2,578] ----D C:\Program Files\xp-royale-black-theme_xp_royale_black_theme_anglais_253508
O43 - CFD: 20/10/2011 - 11:23:46 - [0,730] ----D C:\Program Files\Xvid
O43 - CFD: 09/12/2012 - 14:48:33 - [10,412] ----D C:\Program Files\ZHPDiag
O43 - CFD: 24/08/2011 - 22:27:50 - [3,661] ----D C:\Program Files\Fichiers communs\Adobe
O43 - CFD: 19/10/2011 - 10:46:13 - [89,241] ----D C:\Program Files\Fichiers communs\Ahead
O43 - CFD: 20/08/2011 - 15:16:48 - [0,000] ----D C:\Program Files\Fichiers communs\ArcSoft
O43 - CFD: 29/06/2012 - 17:54:16 - [0,059] ----D C:\Program Files\Fichiers communs\Bullzip
O43 - CFD: 14/08/2011 - 23:45:44 - [1,449] ----D C:\Program Files\Fichiers communs\Canon
O43 - CFD: 30/04/2012 - 17:41:04 - [0,015] ----D C:\Program Files\Fichiers communs\DirectX
O43 - CFD: 12/11/2011 - 13:25:39 - [9,005] ----D C:\Program Files\Fichiers communs\InstallShield
O43 - CFD: 23/10/2012 - 21:24:08 - [1,202] ----D C:\Program Files\Fichiers communs\Java
O43 - CFD: 01/11/2011 - 15:26:44 - [0,002] ----D C:\Program Files\Fichiers communs\Java(2)
O43 - CFD: 16/03/2012 - 14:06:19 - [0,002] ----D C:\Program Files\Fichiers communs\Java(3)
O43 - CFD: 09/09/2011 - 12:19:11 - [2,282] ----D C:\Program Files\Fichiers communs\L&H
O43 - CFD: 09/12/2012 - 13:57:40 - [25,924] ----D C:\Program Files\Fichiers communs\Logishrd
O43 - CFD: 09/09/2011 - 12:34:55 - [53,090] ----D C:\Program Files\Fichiers communs\Microsoft Shared
O43 - CFD: 14/08/2011 - 02:48:17 - [0,271] ----D C:\Program Files\Fichiers communs\MSSoap
O43 - CFD: 18/10/2011 - 22:59:16 - [0] ----D C:\Program Files\Fichiers communs\Nero
O43 - CFD: 14/08/2011 - 04:39:11 - [0] ----D C:\Program Files\Fichiers communs\ODBC
O43 - CFD: 14/08/2011 - 02:48:23 - [0,008] ----D C:\Program Files\Fichiers communs\Services
O43 - CFD: 14/08/2011 - 04:39:07 - [3,612] ----D C:\Program Files\Fichiers communs\SpeechEngines
O43 - CFD: 16/03/2012 - 14:04:27 - [4,105] ----D C:\Program Files\Fichiers communs\STDUtility
O43 - CFD: 14/08/2011 - 02:47:24 - [6,496] ----D C:\Program Files\Fichiers communs\System
O43 - CFD: 14/08/2011 - 23:52:14 - [0] ----D C:\Program Files\Fichiers communs\Windows Live
O43 - CFD: 09/12/2012 - 14:28:29 - [509,750] R-H-D C:\Documents and Settings\All Users\Application Data
O43 - CFD: 09/12/2012 - 14:43:04 - [0,006] ----D C:\Documents and Settings\All Users\Bureau
O43 - CFD: 27/06/2012 - 23:26:28 - [39,102] R---D C:\Documents and Settings\All Users\Documents
O43 - CFD: 14/10/2011 - 13:37:07 - [0,187] -SH-D C:\Documents and Settings\All Users\DRM
O43 - CFD: 14/08/2011 - 04:38:40 - [0] ----D C:\Documents and Settings\All Users\Favoris
O43 - CFD: 05/12/2011 - 16:35:32 - [0,399] R---D C:\Documents and Settings\All Users\Menu Démarrer
O43 - CFD: 27/06/2012 - 23:16:48 - [0,030] --H-D C:\Documents and Settings\All Users\Modèles
O43 - CFD: 24/08/2011 - 22:29:07 - [14,619] ----D C:\Documents and Settings\Ragus\Application Data\Adobe
O43 - CFD: 09/11/2011 - 13:21:47 - [0,330] ----D C:\Documents and Settings\Ragus\Application Data\Ahead
O43 - CFD: 04/09/2012 - 12:43:16 - [0,149] ----D C:\Documents and Settings\Ragus\Application Data\AlauxSoft
O43 - CFD: 27/06/2012 - 22:43:45 - [0,904] ----D C:\Documents and Settings\Ragus\Application Data\ArcSoft
O43 - CFD: 26/08/2012 - 01:24:37 - [0,001] ----D C:\Documents and Settings\Ragus\Application Data\Canneverbe Limited
O43 - CFD: 29/08/2011 - 23:58:51 - [0,038] ----D C:\Documents and Settings\Ragus\Application Data\Canon
O43 - CFD: 31/10/2012 - 14:17:58 - [0,000] -SH-D C:\Documents and Settings\Ragus\Application Data\Common
O43 - CFD: 05/12/2011 - 16:34:09 - [0,156] ----D C:\Documents and Settings\Ragus\Application Data\Delete Duplicate Pictures
O43 - CFD: 14/11/2012 - 13:50:53 - [11,124] ----D C:\Documents and Settings\Ragus\Application Data\DisplayFusion
O43 - CFD: 04/12/2012 - 16:34:35 - [0,034] ----D C:\Documents and Settings\Ragus\Application Data\driveridentifier
O43 - CFD: 07/08/2012 - 22:35:40 - [0,000] ----D C:\Documents and Settings\Ragus\Application Data\dvdcss
O43 - CFD: 28/08/2011 - 18:24:14 - [0] ----D C:\Documents and Settings\Ragus\Application Data\FastStone
O43 - CFD: 25/08/2012 - 19:12:36 - [0,001] ----D C:\Documents and Settings\Ragus\Application Data\FreeCDRipper
O43 - CFD: 20/07/2012 - 15:35:44 - [0] ----D C:\Documents and Settings\Ragus\Application Data\Google
O43 - CFD: 11/09/2011 - 17:55:14 - [0,000] ----D C:\Documents and Settings\Ragus\Application Data\gtk-2.0
O43 - CFD: 11/09/2011 - 16:09:58 - [0] ----D C:\Documents and Settings\Ragus\Application Data\Help
O43 - CFD: 14/08/2011 - 02:54:30 - [0] ----D C:\Documents and Settings\Ragus\Application Data\Identities
O43 - CFD: 14/08/2011 - 04:34:10 - [0,000] ----D C:\Documents and Settings\Ragus\Application Data\Leadertech
O43 - CFD: 15/08/2011 - 05:44:36 - [0,827] ----D C:\Documents and Settings\Ragus\Application Data\Logishrd
O43 - CFD: 15/08/2011 - 05:46:45 - [0,043] ----D C:\Documents and Settings\Ragus\Application Data\Logitech
O43 - CFD: 14/08/2011 - 06:47:53 - [0,029] ----D C:\Documents and Settings\Ragus\Application Data\Macromedia
O43 - CFD: 05/04/2012 - 13:27:45 - [121,524] ----D C:\Documents and Settings\Ragus\Application Data\Malwarebytes
O43 - CFD: 28/08/2011 - 12:00:24 - [4,684] -S--D C:\Documents and Settings\Ragus\Application Data\Microsoft
O43 - CFD: 03/09/2011 - 20:52:36 - [78,976] ----D C:\Documents and Settings\Ragus\Application Data\Mozilla
O43 - CFD: 18/10/2011 - 22:16:41 - [0,628] ----D C:\Documents and Settings\Ragus\Application Data\Nero
O43 - CFD: 05/09/2011 - 12:17:53 - [22,483] ----D C:\Documents and Settings\Ragus\Application Data\OpenOffice.org
O43 - CFD: 29/06/2012 - 17:56:27 - [0,002] ----D C:\Documents and Settings\Ragus\Application Data\PDF Writer
O43 - CFD: 28/08/2011 - 11:56:38 - [178,409] ----D C:\Documents and Settings\Ragus\Application Data\Samsung
O43 - CFD: 05/09/2011 - 12:07:59 - [14,308] ----D C:\Documents and Settings\Ragus\Application Data\Sun
O43 - CFD: 26/11/2011 - 17:40:22 - [2,950] ----D C:\Documents and Settings\Ragus\Application Data\Temp
O43 - CFD: 14/08/2011 - 18:50:12 - [0,144] ----D C:\Documents and Settings\Ragus\Application Data\Todae
O43 - CFD: 09/12/2012 - 12:24:37 - [0,079] ----D C:\Documents and Settings\Ragus\Application Data\vlc
O43 - CFD: 09/12/2012 - 12:53:19 - [0,199] ----D C:\Documents and Settings\Ragus\Application Data\Winamp
O43 - CFD: 14/08/2011 - 07:18:04 - [0,000] ----D C:\Documents and Settings\Ragus\Application Data\WinRAR
O43 - CFD: 30/08/2011 - 00:06:21 - [0] ----D C:\Documents and Settings\Ragus\Application Data\ZoomBrowser EX
O43 - CFD: 19/10/2011 - 10:42:03 - [0,006] ----D C:\Documents and Settings\Ragus\Local Settings\Application Data\.SIPPS
O43 - CFD: 24/08/2011 - 22:29:07 - [15,202] ----D C:\Documents and Settings\Ragus\Local Settings\Application Data\Adobe
O43 - CFD: 20/10/2011 - 15:22:32 - [40,293] ----D C:\Documents and Settings\Ragus\Local Settings\Application Data\Ahead
O43 - CFD: 15/08/2011 - 04:25:42 - [0,000] ----D C:\Documents and Settings\Ragus\Local Settings\Application Data\ArcSoft
O43 - CFD: 28/08/2011 - 11:53:47 - [70,011] ----D C:\Documents and Settings\Ragus\Local Settings\Application Data\Downloaded Installations
O43 - CFD: 25/08/2012 - 19:18:56 - [0,227] ----D C:\Documents and Settings\Ragus\Local Settings\Application Data\Easy CD-DA Extractor
O43 - CFD: 20/07/2012 - 15:35:44 - [143,815] ----D C:\Documents and Settings\Ragus\Local Settings\Application Data\Google
O43 - CFD: 11/09/2011 - 16:09:58 - [0] ----D C:\Documents and Settings\Ragus\Local Settings\Application Data\Help
O43 - CFD: 24/08/2011 - 22:34:24 - [0,222] ----D C:\Documents and Settings\Ragus\Local Settings\Application Data\Identities
O43 - CFD: 16/03/2012 - 14:41:45 - [0] ----D C:\Documents and Settings\Ragus\Local Settings\Application Data\Logishrd
O43 - CFD: 09/12/2012 - 10:31:59 - [367,465] ----D C:\Documents and Settings\Ragus\Local Settings\Application Data\Microsoft
O43 - CFD: 14/08/2011 - 03:38:35 - [-1692,235] ----D C:\Documents and Settings\Ragus\Local Settings\Application Data\Mozilla
O43 - CFD: 29/06/2012 - 17:56:27 - [0] ----D C:\Documents and Settings\Ragus\Local Settings\Application Data\PDF Writer
O43 - CFD: 28/08/2011 - 11:59:42 - [0,037] ----D C:\Documents and Settings\Ragus\Local Settings\Application Data\Samsung
O43 - CFD: 26/06/2012 - 22:26:44 - [0,007] ----D C:\Documents and Settings\Ragus\Local Settings\Application Data\STDUViewer
O43 - CFD: 05/12/2011 - 16:30:19 - [0] ----D C:\Documents and Settings\Ragus\Local Settings\Application Data\StreamingFileProcessing
O43 - CFD: 24/08/2011 - 22:29:07 - [0] ----D C:\Documents and Settings\Ragus\Local Settings\Application Data\Temp
O43 - CFD: 06/12/2011 - 20:57:48 - [0] ----D C:\Documents and Settings\Ragus\Local Settings\Application Data\WMTools Downloaded Files
O43 - CFD: 16/03/2012 - 15:20:58 - [0,014] R---D C:\Documents and Settings\Ragus\Menu Démarrer\Programmes\Accessoires
O43 - CFD: 16/03/2012 - 14:07:10 - [0,010] ----D C:\Documents and Settings\Ragus\Menu Démarrer\Programmes\adsl TV
O43 - CFD: 10/09/2012 - 15:27:58 - [0,000] ----D C:\Documents and Settings\Ragus\Menu Démarrer\Programmes\discreet
O43 - CFD: 09/12/2012 - 13:58:12 - [0,002] R---D C:\Documents and Settings\Ragus\Menu Démarrer\Programmes\Démarrage
O43 - CFD: 09/09/2012 - 17:43:56 - [0,001] ----D C:\Documents and Settings\Ragus\Menu Démarrer\Programmes\Détection de l'application Winamp
O43 - CFD: 31/10/2012 - 14:35:37 - [0,003] ----D C:\Documents and Settings\Ragus\Menu Démarrer\Programmes\FormatFactory
O43 - CFD: 19/09/2012 - 16:49:51 - [0,003] ----D C:\Documents and Settings\Ragus\Menu Démarrer\Programmes\Network Addon Mod
O43 - CFD: 29/08/2011 - 12:41:55 - [0,000] R---D C:\Documents and Settings\Ragus\Menu Démarrer\Programmes\Outils d'administration
O43 - CFD: 12/09/2012 - 21:19:40 - [0,003] ----D C:\Documents and Settings\Ragus\Menu Démarrer\Programmes\SC4 Utilities
O43 - CFD: 11/09/2011 - 15:02:38 - [0,001] ----D C:\Documents and Settings\Ragus\Menu Démarrer\Programmes\UnFREEz 2.1
O43 - CFD: 19/08/2011 - 02:06:59 - [0,004] ----D C:\Documents and Settings\Ragus\Menu Démarrer\Programmes\Vista Drive Icon
O43 - CFD: 15/08/2011 - 06:41:22 - [0,002] ----D C:\Documents and Settings\Ragus\Menu Démarrer\Programmes\WinRAR
~ Scan Program Folder in 01mn 21s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.74E444A216E29C3B25C977039BDC0192] - 09/12/2012 - 14:35:18 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log   [1958047]
O44 - LFC:[MD5.FA55903784A3483B8E49CF9991EA90E0] - 09/12/2012 - 14:33:19 ---A- . (...) -- C:\WINDOWS\wiadebug.log   [157]
O44 - LFC:[MD5.F848650C8FD02A163177C5140DB0991F] - 09/12/2012 - 14:33:07 ---A- . (...) -- C:\WINDOWS\wiaservc.log   [0]
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 09/12/2012 - 14:32:09 -S-A- . (...) -- C:\WINDOWS\bootstat.dat   [2048]
O44 - LFC:[MD5.0BB3D266294E59A25064A437B00C0E58] - 09/12/2012 - 14:29:44 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt   [32506]
O44 - LFC:[MD5.79191BD142249AAA600957E743C44549] - 09/12/2012 - 14:28:43 ---A- . (...) -- C:\AdwCleaner[S2].txt   [2369]
O44 - LFC:[MD5.D36E1D5264F0342213F1D06AB38450E5] - 09/12/2012 - 14:27:45 ---A- . (...) -- C:\AdwCleaner[R2].txt   [2445]
O44 - LFC:[MD5.67CA4E317BFB30FBBDE838C7A90B6B3C] - 09/12/2012 - 14:19:16 ---A- . (...) -- C:\AdwCleaner[R1].txt   [2385]
O44 - LFC:[MD5.FE4FB90AAF77160CD5C0C4B5DE1D7388] - 09/12/2012 - 13:57:39 ---A- . (...) -- C:\WINDOWS\LDPINST.LOG   [9960]
O44 - LFC:[MD5.6508F6827672C9792091BB1BB4CE80D9] - 09/12/2012 - 13:57:39 ---A- . (...) -- C:\WINDOWS\setupapi.log   [2788742]
O44 - LFC:[MD5.4520AB549EED36E0B28C762F9FD36AFF] - 09/12/2012 - 13:57:31 ---A- . (...) -- C:\WINDOWS\setupact.log   [965]
O44 - LFC:[MD5.8C37E1BCCAB40CDADDAE8878D4FA79FD] - 09/12/2012 - 13:57:28 ---A- . (...) -- C:\WINDOWS\LkmdfCoInst.log   [1017]
O44 - LFC:[MD5.C0382C12B784394BF16C2D8F0F1F17DC] - 09/12/2012 - 13:57:07 ---A- . (.Logitech, Inc. - Logitech Non-Plug and Play Driver..) -- C:\WINDOWS\system32\Drivers\LNonPnP.sys   [16400]
O44 - LFC:[MD5.C5C1D314CCE6FF2E14EA363A848439BB] - 09/12/2012 - 10:28:24 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl   [2206]
O44 - LFC:[MD5.8E3E9F16350B7D9824060F54B0684444] - 09/12/2012 - 10:28:03 ---A- . (...) -- C:\WINDOWS\system32\FNTCACHE.DAT   [235960]
O44 - LFC:[MD5.4BE0BAEBD3FD275A388EA48DBDDD9B3B] - 09/12/2012 - 10:12:01 ---A- . (.Microsoft - lcid.) -- C:\WINDOWS\system32\lcid.exe   [16384]
O44 - LFC:[MD5.B4C44D4D580E6D29D90DD5A14304CD54] - 09/12/2012 - 10:09:27 ---A- . (...) -- C:\WINDOWS\FaxSetup.log   [18549]
O44 - LFC:[MD5.54398015E8581F658CE5453FAE838D65] - 09/12/2012 - 10:09:27 ---A- . (...) -- C:\WINDOWS\MedCtrOC.log   [1275]
O44 - LFC:[MD5.CD892B13D17169963CA74A8115421EE3] - 09/12/2012 - 10:09:27 ---A- . (...) -- C:\WINDOWS\NLSDownlevelMapping.log   [7924]
O44 - LFC:[MD5.F79257D146C131F5F16A8FA31A0D1D94] - 09/12/2012 - 10:09:27 ---A- . (...) -- C:\WINDOWS\comsetup.log   [6158]
O44 - LFC:[MD5.661CF5716E695AD5EC222BCC4F09404A] - 09/12/2012 - 10:09:27 ---A- . (...) -- C:\WINDOWS\iis6.log   [20179]
O44 - LFC:[MD5.772E77400B7EF490C18CB87A64418CDE] - 09/12/2012 - 10:09:27 ---A- . (...) -- C:\WINDOWS\imsins.log   [1374]
O44 - LFC:[MD5.0E5CA86AE73C12EC80D05B78604149D2] - 09/12/2012 - 10:09:27 ---A- . (...) -- C:\WINDOWS\msgsocm.log   [927]
O44 - LFC:[MD5.B20DA128364156E58D399457CE760C7D] - 09/12/2012 - 10:09:27 ---A- . (...) -- C:\WINDOWS\netfxocm.log   [3249]
O44 - LFC:[MD5.B0F494A90D10DB2E31410263694A3098] - 09/12/2012 - 10:09:27 ---A- . (...) -- C:\WINDOWS\ntdtcsetup.log   [3723]
O44 - LFC:[MD5.B511CFEAED8274ADA2374FF627944E51] - 09/12/2012 - 10:09:27 ---A- . (...) -- C:\WINDOWS\ocgen.log   [8868]
O44 - LFC:[MD5.DBA365E1414C5EFDC9A7B6365CAF2470] - 09/12/2012 - 10:09:27 ---A- . (...) -- C:\WINDOWS\ocmsn.log   [1026]
O44 - LFC:[MD5.940DEE0D5B22CDA356639EF45CF572A8] - 09/12/2012 - 10:09:27 ---A- . (...) -- C:\WINDOWS\tabletoc.log   [933]
O44 - LFC:[MD5.DEF751C78608B5E610EFA5DFEF541D30] - 09/12/2012 - 10:09:27 ---A- . (...) -- C:\WINDOWS\tsoc.log   [8463]
O44 - LFC:[MD5.47A682C27F84BDEACE7C960418E7514E] - 09/12/2012 - 10:09:26 ---A- . (...) -- C:\WINDOWS\msmqinst.log   [5764]
O44 - LFC:[MD5.C9DD76D0EF94637C77FF8CA5E0FB0684] - 06/12/2012 - 16:21:37 ---A- . (...) -- C:\WINDOWS\system.ini   [227]
O44 - LFC:[MD5.7DA7F577C2774722772D9EF771DAB34A] - 06/12/2012 - 16:21:37 ---A- . (...) -- C:\WINDOWS\win.ini   [114]
O44 - LFC:[MD5.775E188DD15C9AC9E735A556FB95578E] - 06/12/2012 - 16:21:37 -SH-- . (...) -- C:\boot.ini   [212]
O44 - LFC:[MD5.01B626D58478FD71A4A0286CA366359A] - 05/12/2012 - 17:05:36 ---A- . (...) -- C:\WINDOWS\system32\nvdrsdb1.bin   [1101436]
O44 - LFC:[MD5.55A54008AD1BA589AA210D2629C1DF41] - 05/12/2012 - 17:05:36 ---A- . (...) -- C:\WINDOWS\system32\nvdrssel.bin   [1]
O44 - LFC:[MD5.0A2E5A1963708AEE3BEE39D17726D736] - 04/12/2012 - 21:16:35 R--A- . (.Atheros Communications, Inc. - Atheros AR813x/AR815x PCI-E Ethernet Contro.) -- C:\WINDOWS\system32\Drivers\l1c51x86.sys   [65136]
O44 - LFC:[MD5.D94DA294C79A1F6CB4D9BC5DABF6C2A4] - 04/12/2012 - 21:15:59 ---A- . (.Realtek Semiconductor Crop. - Noise Canceling Program.) -- C:\WINDOWS\vncutil.exe   [359016]
O44 - LFC:[MD5.048EFA87303BC48BB38DFAFEA9DF87F8] - 04/12/2012 - 21:15:55 ---A- . (.Realtek Semiconductor Corp. - Realtek Voice  Manager.) -- C:\WINDOWS\SkyTel.exe   [1833576]
O44 - LFC:[MD5.6781BB98748C5D4F66B3CD2D5D04DDD3] - 04/12/2012 - 21:15:53 ---A- . (.Realtek Semiconductor Corp. - Realtek HD Audio Coinstaller.) -- C:\WINDOWS\system32\RtkCoInstXP.dll   [59496]
O44 - LFC:[MD5.129BBDFFE4D3AE373DFA1779E6ED8989] - 04/12/2012 - 21:15:52 ---A- . (.Realtek Semiconductor - Realtek Audio Service.) -- C:\WINDOWS\RtkAudioService.exe   [129640]
O44 - LFC:[MD5.C7D9F9717916B34C1B00DD4834AF485C] - 04/12/2012 - 21:15:27 ---A- . (.Creative Technology Ltd. - Creative WDM Audio Driver (32-bit).) -- C:\WINDOWS\system32\Drivers\Monfilt.sys   [1395800]
O44 - LFC:[MD5.267FC636801EDC5AB28E14036349E3BE] - 04/12/2012 - 21:15:08 ---A- . (.Creative - Creative WDM 3D Audio Driver.) -- C:\WINDOWS\system32\Drivers\Ambfilt.sys   [1691480]
O44 - LFC:[MD5.8C7297E446D38919CA9ED904947F773B] - 04/12/2012 - 21:14:41 ---A- . (...) -- C:\WINDOWS\KB888111.log   [681]
O44 - LFC:[MD5.055849B604CE156BF13ACAF68C246224] - 04/12/2012 - 21:12:56 R--A- . (.Windows XP Bundled build C-Centric Single U - CSVer.) -- C:\WINDOWS\system32\CSVer.dll   [53248]
O44 - LFC:[MD5.B0298D443D172BA9E5DBEF60AAE29480] - 04/12/2012 - 21:10:45 ---A- . (...) -- C:\WINDOWS\GSetup.ini   [10]
O44 - LFC:[MD5.46E77AB5E91094D6C1EE518CA4626972] - 04/12/2012 - 21:10:45 R--A- . (.Pas de propriétaire - GSetup MFC Application.) -- C:\WINDOWS\GSetup.exe   [207400]
O44 - LFC:[MD5.5866F5AC5FA90002CC1275789B715A60] - 04/12/2012 - 17:36:23 ---A- . (...) -- C:\WINDOWS\NeroDigital.ini   [116]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 04/12/2012 - 17:16:08 -SHA- . (...) -- C:\pagefile.sys   [2145824768]
O44 - LFC:[MD5.48CA021AE344256575EB2F204818BEB3] - 04/12/2012 - 16:46:08 ---A- . (.Khronos Group - OpenCL Client DLL.) -- C:\WINDOWS\system32\OpenCL.dll   [65536]
O44 - LFC:[MD5.9BFDC0C4E2DDC23436C0402738B219F4] - 04/12/2012 - 16:46:06 ---A- . (...) -- C:\WINDOWS\system32\nvdrsdb0.bin   [1101436]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 04/12/2012 - 16:46:02 ---A- . (...) -- C:\WINDOWS\system32\nvdrswr.lk   [0]
O44 - LFC:[MD5.9D86086F1A92DB49911F9973F3BB5AC3] - 04/12/2012 - 16:45:30 ---A- . (.NVIDIA Corporation - Display Driver Coinstaller.) -- C:\WINDOWS\system32\nvdispco32.dll   [1009512]
O44 - LFC:[MD5.45364B62553E38AAB8567A76C944339B] - 04/12/2012 - 16:45:30 ---A- . (.NVIDIA Corporation - Generic Coinstaller.) -- C:\WINDOWS\system32\nvdispgenco32.dll   [888168]
O44 - LFC:[MD5.93B42940343D72FF487B698EBCD4B4E5] - 04/12/2012 - 16:45:30 ---A- . (.NVIDIA Corporation - NVIDIA CUDA Driver, Version 306.81.) -- C:\WINDOWS\system32\nvopencl.dll   [5947392]
O44 - LFC:[MD5.AEB4192F9C340EF711BE42DFAB9AE523] - 04/12/2012 - 16:45:28 ---A- . (.NVIDIA Corporation - NVIDIA Compiler, Version 306.81.) -- C:\WINDOWS\system32\nvcompiler.dll   [17551360]
O44 - LFC:[MD5.01720A63925AFDC76F5F16C0C21273C1] - 04/12/2012 - 16:31:41 ---A- . (...) -- C:\WINDOWS\system32\d3d9caps.dat   [664]
O44 - LFC:[MD5.DDA7E15D930459358780B493E47BAFEA] - 04/12/2012 - 16:12:07 ---A- . (...) -- C:\WINDOWS\system32\perfc009.dat   [99734]
O44 - LFC:[MD5.57A8CF6E894B3C3A972C812708BA2BD3] - 04/12/2012 - 16:12:07 ---A- . (...) -- C:\WINDOWS\system32\perfc00C.dat   [120628]
O44 - LFC:[MD5.DB8164973236C0C449C02CBB1969BBE0] - 04/12/2012 - 16:12:07 ---A- . (...) -- C:\WINDOWS\system32\perfh009.dat   [545506]
O44 - LFC:[MD5.7BF437818BAC5165B0E6945488A13D1E] - 04/12/2012 - 16:12:07 ---A- . (...) -- C:\WINDOWS\system32\perfh00C.dat   [628866]
O44 - LFC:[MD5.036CDA8D6360541206B983712E56D258] - 04/12/2012 - 16:12:05 ---A- . (...) -- C:\WINDOWS\system32\PerfStringBackup.INI   [1412228]
O44 - LFC:[MD5.4842E02A00CE18B54F566E3C4E3D73E8] - 04/12/2012 - 16:03:03 ---A- . (...) -- C:\RHDSetup.log   [2108]
O44 - LFC:[MD5.84DCF946931CD359A86D3B98FDCFCD99] - 04/12/2012 - 16:03:03 ---A- . (...) -- C:\csb.log   [195]
O44 - LFC:[MD5.840D18AE1F63886A1482E629EDAE885C] - 24/11/2012 - 13:17:38 ---A- . (...) -- C:\WINDOWS\system32\NvApps.xml   [229488]
O44 - LFC:[MD5.5328EC5799AF3055F7B4BBC66C860E1E] - 21/11/2012 - 14:26:34 ---A- . (...) -- C:\WINDOWS\LEPROP.INI   [18]
O44 - LFC:[MD5.CFA851C2EA7F175021A0E9B6B1896C24] - 18/11/2012 - 17:53:19 ---A- . (...) -- C:\WINDOWS\KB2727528.log   [23184]
O44 - LFC:[MD5.21FF2142C7F911D642886F68833699DE] - 18/11/2012 - 17:53:19 ---A- . (...) -- C:\WINDOWS\imsins.BAK   [1393]
O44 - LFC:[MD5.C9B14B7E11FA9AE1F8832531926CB7EE] - 18/11/2012 - 17:53:07 ---A- . (...) -- C:\WINDOWS\KB2761226.log   [25973]
O44 - LFC:[MD5.B40289D6306AFCF1D3007525A7C5395F] - 23/09/2012 - 15:28:00 ---A- . (...) -- C:\WINDOWS\system32\nvdata.data   [2811988]
O44 - LFC:[MD5.3C623C023D9CF6E267C1C6FCD4A40B41] - 23/09/2012 - 15:28:00 ---A- . (...) -- C:\WINDOWS\system32\nvinfo.pb   [12210]
~ Scan Files in 00mn 19s



---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll
~ Scan ShellExecuteHooks in 00mn 00s



---\\ Export de clé d'application autorisée (O47)
O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Messenger\msmsgs.exe" [Enabled] .(.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\muzapp.exe" [Enabled] .(.Musiccity Co.Ltd. - MUZAoDApp Module.) -- C:\WINDOWS\system32\muzapp.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Pinnacle\Studio 10\programs\RM.exe" [Enabled] .(.Pinnacle Systems, Inc. - Render Manager.) -- C:\Program Files\Pinnacle\Studio 10\programs\RM.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Pinnacle\Studio 10\programs\Studio.exe" [Enabled] .(.Pinnacle Systems - Studio program file.) -- C:\Program Files\Pinnacle\Studio 10\programs\Studio.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Pinnacle\Studio 10\programs\PMSRegisterFile.exe" [Enabled] .(...) -- C:\Program Files\Pinnacle\Studio 10\programs\PMSRegisterFile.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Pinnacle\Studio 10\programs\umi.exe" [Enabled] .(.Pinnacle Systems, Inc. - umi.) -- C:\Program Files\Pinnacle\Studio 10\programs\umi.exe
O47 - AAKE:Key Export SP - "C:\Program Files\adslTV\adsltv.exe" [Enabled] .(.adsl TV / FM - Pas de description.) -- C:\Program Files\adslTV\adsltv.exe
O47 - AAKE:Key Export SP - "C:\Program Files\VideoLAN\VLC\vlc.exe" [Enabled] .(...) -- C:\Program Files\VideoLAN\VLC\vlc.exe
O47 - AAKE:Key Export SP - "C:\Program Files\adslTV\VLC\vlc.exe" [Enabled] .(...) -- C:\Program Files\adslTV\VLC\vlc.exe
O47 - AAKE:Key Export SP - "C:\Program Files\Winamp\winamp.exe" [Enabled] .(.Nullsoft, Inc. - Winamp.) -- C:\Program Files\Winamp\winamp.exe
O47 - AAKE:Key Export SP - "C:\Program Files\eMule\emule.exe" [Enabled] .(.http://www.emule-project.net - eMule.) -- C:\Program Files\eMule\emule.exe
O47 - AAKE:Key Export SP - "C:\Program Files\THQ\MotoGP URT 3\motogp.exe" [Disabled] .(...) -- C:\Program Files\THQ\MotoGP URT 3\motogp.exe
O47 - AAKE:Key Export SP - "D:\_transfert\HFS\hfs.exe" [Enabled] .(...) -- D:\_transfert\HFS\hfs.exe
O47 - AAKE:Key Export SP - "C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe" [Enabled] .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Gestionnaire de session de l'aide sur le Bureau à distance de Microsoft®.) -- C:\WINDOWS\system32\sessmgr.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\wlcsdk.exe" [Enabled] .(.Microsoft Corporation - Windows Live Call.) -- C:\Program Files\Windows Live\Messenger\wlcsdk.exe
O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
~ Scan Keys in 00mn 01s



---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\WINDOWS\system32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Kerberos Security Package.) -- C:\WINDOWS\system32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\WINDOWS\system32\wdigest.dll
~ Scan Keys in 00mn 00s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\Wdf01000.sys . (.Microsoft Corporation - Kernel Mode Driver Framework Runtime.) -- C:\WINDOWS\system32\Drivers\Wdf01000.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disque NT.) -- C:\WINDOWS\system32\Drivers\dmboot.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\system32\Drivers\dmio.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Drivers\dmload.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corporation - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS\system32\Drivers\rdpdd.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corporation - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOWS\system32\Drivers\rdpwd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WINDOWS\system32\Drivers\sermouse.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporation - Pilote de filtre de système de fichiers pour la restauration du système.) -- C:\WINDOWS\system32\Drivers\sr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corporation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corporation - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDOWS\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\Wdf01000.sys . (.Microsoft Corporation - Kernel Mode Driver Framework Runtime.) -- C:\WINDOWS\system32\Drivers\Wdf01000.sys
~ Scan CSB in 00mn 00s



---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d
~ Scan IFEO in 00mn 00s



---\\ MountPoints2 Shell Key (O51) (None)

---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\system32\tssoft32.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\system32\iccvid.dll
O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ir32_32.dll
O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax
O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (...) -- C:\WINDOWS\system32\ff_vfw.dll
O52 - TDSD: \Drivers32\"msacm.avis"="ff_acm.acm" . (.Pas de propriétaire - ffdshow Audio Decoder.) -- C:\WINDOWS\system32\ff_acm.acm
O52 - TDSD: \Drivers32\"vidc.XVID"="xvidvfw.dll" . (...) -- C:\WINDOWS\system32\xvidvfw.dll
O52 - TDSD: \Drivers32\"VIDC.MJPG"="Pvmjpg30.dll" . (.Pegasus Imaging Corporation - PICVideo M-JPEG 3 codec.) -- C:\WINDOWS\system32\Pvmjpg30.dll
O52 - TDSD: \Drivers32\"vidc.DIVX"="DivX.dll" . (.DivXNetworks, Inc. - DivX® Codec for Windows.) -- C:\WINDOWS\system32\DivX.dll
O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\system32\iac25_32.ax
O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm
O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (...) -- C:\WINDOWS\system32\ff_vfw.dll
O52 - TDSD: \drivers.desc\"ff_acm.acm"="ffdshow ACM codec" . (.Pas de propriétaire - ffdshow Audio Decoder.) -- C:\WINDOWS\system32\ff_acm.acm
O52 - TDSD: \drivers.desc\"xvidvfw.dll"="Xvid MPEG-4 Video Codec" . (...) -- C:\WINDOWS\system32\xvidvfw.dll
O52 - TDSD: \drivers.desc\"pvmjpg30.dll"="PICVideo 3 M-JPEG VfW Codec" . (.Pegasus Imaging Corporation - PICVideo M-JPEG 3 codec.) -- C:\WINDOWS\system32\pvmjpg30.dll
~ Scan Keys in 00mn 00s



---\\ ShareTools MSconfig StartupReg (O53) (None)

---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Client DPA pour plate-forme 32 bit.) -- C:\WINDOWS\system32\msapsspc.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Package d'authentification Digest SSPI.) -- C:\WINDOWS\system32\digest.dll
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145
~ Scan Keys in 00mn 00s



---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.149A8F7ADF9742554DC323E290551E3E] - 30/10/2012 - 23:51:56 ---A- . (.AVAST Software - avast! Base Kernel-Mode Device Driver for Windows NT/2000/XP.) -- C:\WINDOWS\system32\Drivers\aavmker4.sys   [25256]
O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 03/10/2001 - 13:16:18 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys   [9037]
~ Scan Drivers in 00mn 00s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 1.32 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ Scan ADS in 00mn 00s



---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\Aavmker4.sys (Aavmker4)  .(.AVAST Software - avast! Base Kernel-Mode Device Driver for W.) - LEGACY_AAVMKER4
O64 - Services: CurCS - 09/11/2012 - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe (AdobeFlashPlayerUpdateSvc)  .(.Adobe Systems Incorporated - Adobe® Flash® Player Update Service 11.5 r5.) - LEGACY_ADOBEFLASHPLAYERUPDATESVC
O64 - Services: CurCS - 03/10/2001 - C:\WINDOWS\system32\DRIVERS\aliide.sys (AliIde)  .(.Acer Laboratories Inc. - ALi mini IDE Driver.) - LEGACY_ALIIDE
O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\aswFsBlk.sys (aswFsBlk)  .(.AVAST Software - avast! File System Access Blocking Driver.) - LEGACY_ASWFSBLK
O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\aswMon2.sys (aswMon2)  .(.AVAST Software - avast! File System Filter Driver for Window.) - LEGACY_ASWMON2
O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\AswRdr.sys (AswRdr)  .(.AVAST Software - avast! TDI Redirect Driver.) - LEGACY_ASWRDR
O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\aswSnx.sys (aswSnx)  .(.AVAST Software - avast! Virtualization Driver.) - LEGACY_ASWSNX
O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\aswSP.sys (aswSP)  .(.AVAST Software - avast! self protection module.) - LEGACY_ASWSP
O64 - Services: CurCS - ??\??\???? - C:\WINDOWS\system32\Drivers\aswTdi.sys (aswTdi)  .(.AVAST Software - avast! TDI Filter Driver.) - LEGACY_ASWTDI
O64 - Services: CurCS - 30/10/2012 - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (avast! Antivirus)  .(.AVAST Software - avast! Service.) - LEGACY_AVAST!_ANTIVIRUS
O64 - Services: CurCS - 20/08/2011 - C:\WINDOWS\system32\drivers\CDAC11BA.exe (C-DillaCdaC11BA)  .(.C-Dilla Ltd - C-Dilla RTS Service.) - LEGACY_C-DILLACDAC11BA
O64 - Services: CurCS - 31/01/2007 - C:\Program Files\Canon\CAL\CALMAIN.exe (CCALib8)  .(.Canon Inc. - Canon Camera Access Library 8.) - LEGACY_CCALIB8
O64 - Services: CurCS - 20/08/2011 - C:\WINDOWS\system32\drivers\CDAC15BA.sys - CdaC15BA (CdaC15BA)  .(...) - LEGACY_CDAC15BA
O64 - Services: CurCS - ??\??\???? -  (DcomLaunch)  .(. - .) - LEGACY_DCOMLAUNCH
O64 - Services: CurCS - 29/01/2011 - C:\WINDOWS\system32\drivers\dgderdrv.sys (dgderdrv)  .(.Devguru Co., Ltd - Device Error Recovery SDK(x86).) - LEGACY_DGDERDRV
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\dmadmin.exe (dmadmin)  .(.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - LEGACY_DMADMIN
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\drivers\dmboot.sys (dmboot)  .(.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) - LEGACY_DMBOOT
O64 - Services: CurCS - 03/10/2001 - C:\WINDOWS\system32\drivers\dmload.sys (dmload)  .(.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) - LEGACY_DMLOAD
O64 - Services: CurCS - 30/03/2010 - C:\Program Files\Everest\EVEREST Ultimate Edition\kerneld.wnt - Lavalys EVEREST Kernel Driver (EverestDriver)  .(...) - LEGACY_EVERESTDRIVER
O64 - Services: CurCS - 20/07/2012 - C:\Program Files\Google\Update\GoogleUpdate.exe (gupdate)  .(.Google Inc. - Programme d'installation de Google.) - LEGACY_GUPDATE
O64 - Services: CurCS - 25/07/2006 - C:\WINDOWS\system32\drivers\InCDFs.sys (InCDfs)  .(.Nero AG - InCD File System Driver.) - LEGACY_INCDFS
O64 - Services: CurCS - 25/07/2006 - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe (InCDsrv)  .(.Nero AG - incdsrv.) - LEGACY_INCDSRV
O64 - Services: CurCS - 24/09/2012 - C:\Program Files\Java\jre6\bin\jqs.exe (JavaQuickStarterService)  .(.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - LEGACY_JAVAQUICKSTARTERSERVICE
O64 - Services: CurCS - 15/12/2004 - C:\WINDOWS\system32\drivers\m5287.sys (m5287)  .(.ULi Electronics Inc. - ULi SATA Controller Driver.) - LEGACY_M5287
O64 - Services: CurCS - 23/09/2012 - C:\WINDOWS\system32\nvsvc32.exe (NVSvc)  .(.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 306.8.) - LEGACY_NVSVC
O64 - Services: CurCS - 23/09/2012 - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (nvUpdatusService)  .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) - LEGACY_NVUPDATUSSERVICE
O64 - Services: CurCS - 09/02/2005 - C:\WINDOWS\system32\drivers\pclepci.sys (PCLEPCI)  .(.Pinnacle Systems GmbH - PCLEPCI.) - LEGACY_PCLEPCI
O64 - Services: CurCS - ??\??\???? -  (RpcSs)  .(. - .) - LEGACY_RPCSS
O64 - Services: CurCS - 13/04/2008 - C:\WINDOWS\system32\DRIVERS\secdrv.sys (Secdrv)  .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
O64 - Services: CurCS - ??\??\???? -  (TermService)  .(. - .) - LEGACY_TERMSERVICE
~ Scan Services in 00mn 00s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe
~ Scan Keys in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\WINDOWS\system32\ie4uinit.exe (.not file.)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\WINDOWS\system32\ie4uinit.exe (.not file.)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\WINDOWS\system32\ie4uinit.exe (.not file.)
~ Scan Keys in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {62AC8A54-15C5-4951-B98E-7EDBD7DB0E7B} - (EcoStartPage) - http://ecostartpage.com
~ Scan Keys in 00mn 00s



---\\ Recherche des services démarrés par Svchost (O83)
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\WINDOWS\system32\appmgmts.dll   [176640]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll   [42496]
O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll   [78336]
O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll   [62464]
O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\system32\dmserver.dll   [24576]
O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\system32\dhcpcsvc.dll   [127488]
O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll   [23040]
O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - Pas de description.) -- C:\WINDOWS\system32\es.dll   [253952]
O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll   [135680]
O83 - Search Svchost Services: HidServ (HidServ) . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\system32\hidserv.dll   [21504]
O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll   [99840]
O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll   [132096]
O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll   [33792]
O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\system32\netman.dll   [198144]
O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll   [247808]
O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll   [438272]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll   [88576]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll   [186368]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll   [53248]
O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll   [194560]
O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\WINDOWS\system32\seclogon.dll   [18944]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll   [39424]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\WINDOWS\system32\ipnathlp.dll   [332800]
O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll   [171520]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\WINDOWS\system32\tapisrv.dll   [249856]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll   [135680]
O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll   [90112]
O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll   [178176]
O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\system32\wzcsvc.dll   [483840]
O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - API avancées Windows 32.) -- C:\WINDOWS\system32\advapi32.dll   [685568]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll   [145408]
O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll   [80896]
O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll   [129024]
O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\system32\qagentrt.dll   [293376]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\system32\kmsvc.dll   [61440]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\WINDOWS\system32\qmgr.dll   [409088]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll   [6656]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll   [135680]
O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll   [38400]
O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Microsoft Media Device Service Provider.) -- C:\WINDOWS\system32\MsPMSNSv.dll   [27136]
~ Scan Services in 00mn 00s



---\\ Recherche particuliere à la racine de certains dossiers (O84)
[MD5.799849C6BEBCEA8522C7A9153B8E92B9] [SPRF][23/04/2004] (.Pas de propriétaire - Application MFC LEProp.) -- C:\Documents and Settings\Ragus\Bureau\LEProp.exe   [679936]
[MD5.9F82E34F8E7BFDC5549BAEC160ACD8B2] [SPRF][22/04/2004] (.Pas de propriétaire - OR_DAT DLL.) -- C:\Documents and Settings\Ragus\Bureau\OR_DAT.dll   [225280]
~ Scan Files in 00mn 00s



---\\ Scan Additionnel (O88)
Database Version : 9966 - (08/12/2012)
Clés trouvées (Keys found) : 2
Valeurs trouvées (Values found) : 0
Dossiers trouvés  (Folders found) : 0
Fichiers trouvés  (Files found) : 0

[HKLM\Software\Classes\CLSID\{ea551c00-2ae5-11d3-8592-00a0c98e9ea4}]   =>Toolbar.Agent
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{56C049BE-79E9-4502-BEA7-9754A3E60F9B}]   =>Toolbar.Agent
~ Scan Additionnel in 00mn 19s



---\\ Product Upgrade Codes (O90)
O90 - PUC: "00002109A800C0400000000000F01FEC" . (.Gadget Documents récents Microsoft Office 2007.) -- C:\WINDOWS\Installer\{90120000-008A-040C-0000-0000000FF1CE}\MruGadgetIcon.exe
O90 - PUC: "00002159FA00C0400000000000F01FEC" . (.Microsoft Office PowerPoint Viewer 2007 (French).) -- C:\WINDOWS\Installer\{95120000-00AF-040C-0000-0000000FF1CE}\ppvwicon.exe,0
O90 - PUC: "0826823371681E11F86F8BCAF6798BE8" . (.Google Earth Plug-in.) -- C:\WINDOWS\Installer\{33286280-8617-11E1-8FF6-B8AC6F97B88E}\ARPPRODUCTICON.exe
O90 - PUC: "1038C85769625584FA5435B4210089A0" . (.Samsung Kies.) -- C:\WINDOWS\Installer\{758C8301-2696-4855-AF45-534B1200980A}\ARPPRODUCTICON.exe
O90 - PUC: "15F934112D8B6374C9FD8898EFEB0163" . (.Nero 7 Premium.) -- C:\WINDOWS\Installer\{11439F51-B8D2-4736-9CDF-8889FEBE1036}\ARPPRODUCTICON.exe
O90 - PUC: "41DC8ECD5FBF46449B4A1EE87453647C" . (.Assistant de connexion Windows Live.) -- C:\WINDOWS\Installer\{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}\prodicon.ico
O90 - PUC: "5A3373F32238D4546A83B3471E8C7325" . (.Gadget Installer.) -- C:\WINDOWS\Installer\{3F3733A5-8322-454D-A638-3B74E1C83752}\_21F3885A18D238E15AAE81.exe
O90 - PUC: "68267DD57EB949849A099E509EA18C81" . (.Windows Live Mail.) -- C:\WINDOWS\Installer\{5DD76286-9BE7-4894-A990-E905E91AC818}\wlmail.exe
O90 - PUC: "68AB67CA7DA76301B744AA0100000010" . (.Adobe Reader X (10.1.4) - Français.) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AA1000000001}\SC_Reader.ico
O90 - PUC: "85BC1013284312D4FAA10775CF393555" . (.KhalInstallWrapper.) -- C:\WINDOWS\Installer\{3101CB58-3482-4D21-AF1A-7057FC935355}\ARPPRODUCTICON.exe
O90 - PUC: "987A09F2E1DDEC14FBACDB8712B3BA7C" . (.OpenOffice.org 3.4.) -- C:\WINDOWS\Installer\{2F90A789-DD1E-41CE-BFCA-BD78213BABC7}\soffice.ico
O90 - PUC: "A12B436470CC693498C0B2188666F1AE" . (.Windows Live Writer.) -- C:\WINDOWS\Installer\{4634B21A-CC07-4396-890C-2B8168661FEA}\ApplicationIcon.ico
O90 - PUC: "D381B5441F4F8C549BBD1F3155AC56B7" . (.Windows Live Messenger.) -- C:\WINDOWS\Installer\{445B183D-F4F1-45C8-B9DB-F11355CA657B}\MsblIco.Exe
O90 - PUC: "D4ADF7A47D4F94A439A460D6954AC3E7" . (.SmartSound Quicktracks Plugin.) -- C:\WINDOWS\Installer\{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}\ARPPRODUCTICON.exe
O90 - PUC: "DDB6C50237B7ED245850A990F3532A83" . (.Outil de téléchargement Windows Live.) -- C:\WINDOWS\Installer\{205C6BDD-7B73-42DE-8505-9A093F35A238}\RichUpload.ico
~ Scan Files in 00mn 00s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 09/11/2012 250808 |  (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 30/10/2012 44808 |  (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SR - | Auto 20/08/2011 39936 |  (C-DillaCdaC11BA) . (.C-Dilla Ltd.) - C:\WINDOWS\system32\drivers\CDAC11BA.exe
SR - | Auto 31/01/2007 96370 |  (CCALib8) . (.Canon Inc..) - C:\Program Files\Canon\CAL\CALMAIN.exe
SS - | Demand 13/04/2008 225280 |  (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\system32\dmadmin.exe
SS - | Demand  27760 |  (EverestDriver) . (...) - C:\Program Files\Everest\EVEREST Ultimate Edition\kerneld.wnt
SS - | Auto 20/07/2012 116648 |  (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 20/07/2012 116648 |  (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SR - | Auto 25/07/2006 849408 |  (InCDsrv) . (.Nero AG.) - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
SR - | Auto 24/09/2012 153584 |  (JavaQuickStarterService) . (.Sun Microsystems, Inc..) - C:\Program Files\Java\jre6\bin\jqs.exe
SS - | Demand 01/10/2012 295224 |  (LBTServ) . (.Logitech, Inc..) - C:\Program Files\Fichiers communs\LogiShrd\Bluetooth\lbtserv.exe
SS - | Demand 05/12/2012 115168 |  (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Demand 31/07/2006 720896 |  (NBService) . (.Nero AG.) - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
SR - | Auto 23/09/2012 164200 |  (NVSvc) . (.NVIDIA Corporation.) - C:\WINDOWS\system32\nvsvc32.exe
SR - | Auto 23/09/2012 1258856 |  (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
~ Scan Services in 00mn 00s



End of the scan (1412 lines in 03mn 32s)(0)



.: Nous contacter :: Flux RSS :: Données personnelles :.