[Résolu] Toolbar new_tab.html

[klykoo]

Bonjour à tous,

Je suis sous Windows 7 et j'ai du téléchargé une connerie car à chaque onglet, j'ai "toolbar:new_tab.html" et non pas google comme je le demande à chaque fois. Je n'ai pas vraiment à trouver l'aide adéquate en faisant une recherche par mots clés aussi bien sur le forum que sur le net.

J'ai lancé ccleaner.

Quelqu'un pourrait-il m'aider ? Merci mille fois !

Modifié le 28 décembre 2012 par klykoo

[Apollo]

Bonjour,

 

1) Télécharge AdwCleaner par Xplode: Téléchargements - Outils de Xplode - AdwCleaner

 

Enregistre-le sur le bureau (et pas ailleurs).

 

Si tu es sous XP double clique sur AdwCleaner pour lancer l'outil.

Si tu es sous Vista/Seven, clique droit sur AdwCleaner et choisis exécuter en temps qu'administrateur.

 

Clique sur Suppression et laisse travailler l'outil.

 

Le rapport va s'ouvrir en fichier texte; copie la totalité de son contenu et colle-le dans ta réponse.

 

Le rapport est en outre sauvegardé sous C:\AdwCleaner[s1]

 

NB: Si l'outil "cale" en mode normal, le lancer en mode sans échec: Comment démarrer Windows en mode sans échec : Astuces pour Dépanner Windows XP

 

-------------------------

 

2) ZHPDiag :

 

• Télécharge ZHPDiag de Nicolas Coolman. et enregistre-le sur le BUREAU.
   
  
• Double-clique sur ZHPDiag.exe pour lancer l'installation
  
  • Important:
    Sous Vista et Windows 7 : il faut lancer le fichier par clic-droit -> Exécuter en tant qu'administrateur

N'oublie pas de cocher la case qui permet de mettre un raccourci sur le Bureau.

 

[*]L'outil a créé 2 icônes ZHPDiag et ZHPFix sur le Bureau.

 

[*]Double-clique sur ZHPDiag pour lancer l'exécution

• Important:
  Sous Vista et Windows 7 : il faut lancer le fichier par clic-droit -> Exécuter en tant qu'administrateur

 

[*]Clique sur le petit tournevis et clique sur TOUS.

 

Décocher 045 et 061.

 

[*]Clique sur la loupe pour lancer l'analyse. Tu patientes jusqu'à ce que le scan affiche 100%

Tu refermes ZHPDiag

 

[*]Le rapport ZHPDiag.txt se trouve sur le Bureau. (et sous c:\ZHP\ZHPDiag.txt)

Ce rapport étant trop long pour le forum, héberge le :

• soit directement sur le forum en pièce jointe dans ta réponse : Ajouter un fichier en pièce jointe sur le forum <<< Seulement pour le forum Vista-XP.fr!
  
• soit sur Cjoint et copie-colle le lien fourni dans ta réponse. OU >>
  
• Free large file hosting. Send big files the easy way! copier/coller le tout premier lien fourni.

 

 

@++

[klykoo]

Allo Appollo,

Le téléchargement par le lien que tu me proposes est bloqué par le filtre SmartScreen ...

EDIT: bon j'ai vu qu'il y avait un petit passage concernant ce bloquage ... je m'en vais donc le lire

Modifié le 17 octobre 2012 par klykoo

[Apollo]

Désactive le SmartScreen, tu le réactiveras plus tard si nécessaire; moi je l'ai désactivé définitivement, il bloque tous les outils ce c**-là :lol

 

@++

[klykoo]

Allo,

 

Encore faut-il que je sache comment désactiver le filtre smartscreen ... Je n'ai aps forcément acces au bouton "action" :S

 

Alors voici les rapports, c'est grave Docteur ???

 

- Hijackthis

Lien CJoint.com BJrqhR5s9vs

 

- ADWCleaner

# AdwCleaner v2.005 - Rapport créé le 17/10/2012 à 09:48:11

# Mis à jour le 14/10/2012 par Xplode

# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)

# Nom d'utilisateur : Claire - CLAIRE-PC

# Mode de démarrage : Normal

# Exécuté depuis : C:\Users\Claire\Desktop\adwcleaner.exe

# Option [suppression]

 

 

***** [services] *****

 

 

***** [Fichiers / Dossiers] *****

 

Dossier Supprimé : C:\Program Files (x86)\Conduit

Dossier Supprimé : C:\Program Files (x86)\Giant Savings

Dossier Supprimé : C:\Program Files (x86)\Mozilla Firefox\Extensions\quickstores@quickstores.de

Dossier Supprimé : C:\Program Files (x86)\RechercherWeb Toolbar

Dossier Supprimé : C:\ProgramData\Partner

Dossier Supprimé : C:\Users\Claire\AppData\Local\Conduit

Dossier Supprimé : C:\Users\Claire\AppData\Local\Giant Savings

Dossier Supprimé : C:\Users\Claire\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndkhncnongaclekkbelchmeafffimifj

Dossier Supprimé : C:\Users\Claire\AppData\LocalLow\Conduit

Dossier Supprimé : C:\Users\Claire\AppData\LocalLow\PriceGong

Dossier Supprimé : C:\Users\Claire\AppData\LocalLow\Toolbar4

Dossier Supprimé : C:\Users\Claire\AppData\Roaming\pdfforge

Dossier Supprimé : C:\Windows\assembly\GAC_MSIL\QuickStoresToolbar

Fichier Supprimé : C:\user.js

Fichier Supprimé : C:\Users\Claire\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\QuickStores.url

Fichier Supprimé : C:\Users\Claire\AppData\Roaming\Microsoft\Windows\Start Menu\QuickStores.url

 

***** [Registre] *****

 

Clé Supprimée : HKCU\Software\{1CB94A15-4515-4A88-A296-36DDCA34AF50}

Clé Supprimée : HKCU\Software\AppDataLow\Software\Conduit

Clé Supprimée : HKCU\Software\AppDataLow\Software\ConduitSearchScopes

Clé Supprimée : HKCU\Software\AppDataLow\Software\Crossrider

Clé Supprimée : HKCU\Software\AppDataLow\Software\Giant Savings

Clé Supprimée : HKCU\Software\AppDataLow\Software\PriceGong

Clé Supprimée : HKCU\Software\AppDataLow\Software\SmartBar

Clé Supprimée : HKCU\Software\Conduit

Clé Supprimée : HKCU\Software\InstalledBrowserExtensions

Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{10EDB994-47F8-43F7-AE96-F2EA63E9F90F}

Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8FFA7469-654F-423E-84FE-6A583CB1C284}

Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}

Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10EDB994-47F8-43F7-AE96-F2EA63E9F90F}

Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8FFA7469-654F-423E-84FE-6A583CB1C284}

Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}

Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE

Clé Supprimée : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler

Clé Supprimée : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler.1

Clé Supprimée : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils

Clé Supprimée : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1

Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager

Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager.1

Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager

Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager.1

Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbRequest

Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbRequest.1

Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbTask

Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbTask.1

Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper

Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper.1

Clé Supprimée : HKLM\SOFTWARE\Classes\TBSB01555.IEToolbar

Clé Supprimée : HKLM\SOFTWARE\Classes\TBSB01555.IEToolbar.1

Clé Supprimée : HKLM\SOFTWARE\Classes\TBSB01555.TBSB01555

Clé Supprimée : HKLM\SOFTWARE\Classes\TBSB01555.TBSB01555.3

Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT3027459

Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier

Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier.1

Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl

Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl.1

Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager

Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager.1

Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.TBSB01555

Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.TBSB01555.1

Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}

Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}

Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{EC4085F2-8DB3-45A6-AD0B-CA289F3C5D7E}

Clé Supprimée : HKLM\Software\Conduit

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{22222222-2222-2222-2222-220022442279}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{33333333-3333-3333-3333-330033443379}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{57CADC46-58FF-4105-B733-5A9F3FC9783C}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{8FFA7469-654F-423E-84FE-6A583CB1C284}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D433A9D0-8267-40CB-8AD5-24F22FA5373F}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0FA32667-9A8A-4E9C-902F-CA3323180003}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{66666666-6666-6666-6666-660066446679}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{6B458F62-592F-4B25-8967-E6A350A59328}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{77777777-7777-7777-7777-770077447779}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FCC9CDD3-EFFF-11D1-A9F0-00A0244AC403}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ndkhncnongaclekkbelchmeafffimifj

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\RechercherWeb Toolbar

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0FA32667-9A8A-4E9C-902F-CA3323180003}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550055445579}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660066446679}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{6B458F62-592F-4B25-8967-E6A350A59328}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{77777777-7777-7777-7777-770077447779}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FCC9CDD3-EFFF-11D1-A9F0-00A0244AC403}

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}

Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{10EDB994-47F8-43F7-AE96-F2EA63E9F90F}]

Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{8FFA7469-654F-423E-84FE-6A583CB1C284}]

 

***** [Navigateurs] *****

 

-\\ Internet Explorer v9.0.8112.16421

 

[OK] Le registre ne contient aucune entrée illégitime.

 

-\\ Mozilla Firefox v15.0 (fr)

 

Nom du profil : default

Fichier : C:\Users\Claire\AppData\Roaming\Mozilla\Firefox\Profiles\wdcd05ai.default\prefs.js

 

[OK] Le fichier ne contient aucune entrée illégitime.

 

-\\ Google Chrome v [impossible d'obtenir la version]

 

Fichier : C:\Users\Claire\AppData\Local\Google\Chrome\User Data\Default\Preferences

 

[OK] Le fichier ne contient aucune entrée illégitime.

 

*************************

 

AdwCleaner[s1].txt - [11783 octets] - [17/10/2012 09:48:11]

 

########## EOF - C:\AdwCleaner[s1].txt - [11844 octets] ##########

[Apollo]

Faut savoir chercher un peu soi-même dans la vie: http://support.microsoft.com/kb/930168/fr

 

1) Télécharger SFT.exe de Pierre13. A enregistrer absolument sur le BUREAU!

 

Si l'antivirus fait des siennes: désactive-le provisoirement. Si tu ne sais pas comment faire, reporte-toi à cet article.

 

• Double clique (xp) sur SFT.exe.
  Clic droit sur le fichier et choisir Exécuter en tant qu’administrateur. (sous Vista/7).
  Patienter le temps du nettoyage...dépend du nombre de fichiers à nettoyer.
   
  
   
  Un rapport va s'ouvrir à la fin.
   
  Le rapport se trouve sur le bureau (SFT.txt)

 

>>Le rapport est très long, l'héberger sur Accueil de Cjoint.com et me communiquer le lien, stp.<<

 

Compatible avec XP, Windows Vista et Windows 7 en 32 et 64 bits.

 

 

--------------------------

 

2) Télécharge Malwarebytes' Anti-Malware (MBAM).

 

Enregistre l'exécutable sur le bureau. Malwarebytes : Téléchargement gratuit anti-malware, antivirus et anti-espion

 

Télécharger Malwarebytes´ Anti-Malware - Logithèque PC Astuces

 

Attention, ne rien installer d'autre que MBAM car il est parfois proposé des trucs inutiles comme Registry Booster ou autres bêtises. A éviter donc.

 

 

Si MBAM est déjà installé, aller directement à la mise à jour puis à l'analyse.

 

Ce logiciel est à garder.

 

Uniquement en cas de problème de mise à jour:

 

Télécharger mises à jour MBAM

 

Exécute le fichier après l'installation de MBAM

 

Connecter les supports amovibles (clés usb etc.) avant de lancer l'analyse.

 

• Double clique sur le fichier téléchargé pour lancer le processus d'installation.
  
• Dans l'onglet "Mise à jour", clique sur le bouton "Recherche de mise à jour": si le pare-feu demande l'autorisation à MBAM de se connecter, accepte.
  
• Une fois la mise à jour terminée, rends-toi dans l'onglet "Recherche".
  
• Sélectionne "Exécuter un examen complet"
  
• Clique sur "Rechercher"
  
• L'analyse démarre, le scan est relativement long, c'est normal.
  
• A la fin de l'analyse, un message s'affiche :

  L'examen s'est terminé normalement. Clique sur 'Afficher les résultats' pour afficher tous les objets trouvés.

  Clique sur "Ok" pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
  
• Ferme tes navigateurs.
  
• Si des malwares ont été détectés, clique sur Afficher les résultats.
  Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
  
• MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport et poste-le dans ta prochaine réponse.

Si MBAM demande à redémarrer le pc, fais-le.

 

Si au redémarrage Windows te dit qu'il a bloqué certains programmes de démarrage, clique sur la bulle puis sur Exécuter les programmes bloqués/Malwarebytes Anti-Malware.

 

@++

[klykoo]

Allo,

J'ai fait une fausse manip pour le rapport de SFT.exe ... Je l'ai ouvert sans passer par "en tant qu'administrateur". J'en ai donc relancer un autre et ... le rapport est beaucoup plus court :S Il a du etre overwritté :S

Voilà ce que j'ai :

 

Rapport de SFT (Pierre13) du Mercredi 17 Octobre 2012 à 10:40:29

Mis à jour le 02/05/2012

Outil lancé en Mode normal et En tant qu'administrateur

Windows 7 Service Pack 1 (64 bits)

 

Tool start in C:\Users\Claire\Desktop

 

2 éléments supprimés => 37.26 Mo libérés. (4 s)

 

C:\Users\Claire\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache

C:\Users\Claire\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\MLERUOEO\CBS_expandvideo[1].flv

 

Corbeille vidée.

 

 

Fin du rapport.

 

Forum

Blog

 

rapport de antimalware

Malwarebytes Anti-Malware 1.65.0.1400

www.malwarebytes.org

 

Version de la base de données: v2012.10.17.06

 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 9.0.8112.16421

Claire :: CLAIRE-PC [administrateur]

 

17/10/2012 07:58:38

mbam-log-2012-10-17 (07-58-38).txt

 

Type d'examen: Examen complet (C:\|D:\|)

Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM

Options d'examen désactivées: P2P

Elément(s) analysé(s): 367245

Temps écoulé: 50 minute(s), 6 seconde(s)

 

Processus mémoire détecté(s): 0

(Aucun élément nuisible détecté)

 

Module(s) mémoire détecté(s): 0

(Aucun élément nuisible détecté)

 

Clé(s) du Registre détectée(s): 1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Giant Savings (PUP.GamePlayLabs) -> Mis en quarantaine et supprimé avec succès.

 

Valeur(s) du Registre détectée(s): 0

(Aucun élément nuisible détecté)

 

Elément(s) de données du Registre détecté(s): 0

(Aucun élément nuisible détecté)

 

Dossier(s) détecté(s): 0

(Aucun élément nuisible détecté)

 

Fichier(s) détecté(s): 2

C:\Program Files (x86)\Giant Savings\Uninstall.exe (PUP.GamePlayLabs) -> Mis en quarantaine et supprimé avec succès.

C:\Users\Claire\Documents\office\Keygen Office 2007.exe (RiskWare.Tool.CK) -> Mis en quarantaine et supprimé avec succès.

 

(fin)

[Apollo]

Comment va l'ordi?

 

Fais ces vérifications de sécurité stp:

 

Apollo Et Compagnie :: A vérifier de temps en temps, important!

 

Le PSI n'est pas obligatoire mais il est pratique pour connaître les failles dans diverses applications.

 

En français depuis la version 3.0. Très simple d'utilisation.

 

------------

Après ça, fais un nouveau ZHPDiag que tu voudras bien héberger stp.

 

@++

[klykoo]

Allo,

Alors, j'ai toujours le même problème mais est-ce vraiment un problème ? Car à part que l'adresse n'est pas "google.ca" mais "toolbar:new_tab.html ", ca n'a pas l'air vraiment un problème. J'ai essayé de télécharger l'image de l'imprime-écran mais je n'y arrive pas :S

J'ai fait les dernières choses demandées, ainsi que le PSI.

 

Voici le rapport Hikackthis demandé, voir plus bas.

 

Tout va bien selon le rapport ? Que vois-tu de particulier ? De mon côté, je n'ai pas de soucis particulier ...

 

J4ai une question, pourquoi est-ce improtant d'enregistrer sur le bureau ?

 

 

Rapport de ZHPDiag v1.31.28 par Nicolas Coolman, Update du 30/09/2012

Run by Claire at 17/10/2012 11:25:45

Web site : Blog de NicolasCoolman - ZebHelpProcess - Skyrock.com

State : Version à jour.

UAC : Deactivate by program

 

 

---\\ Web Browser

MSIE: Internet Explorer v9.0.8112.16421 (Defaut)

MFIE: Mozilla Firefox 15.0 v15.0

GCIE: Google Chrome v22.0.1229.94

 

---\\ Windows Product Information

~ Langage: Français

Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Windows Server License Manager Script : OK

~ Windows® 7, OEM_SLP channel

System Locked Preinstallation (OEM_SLP) : OK

Windows ID Activation : OK

~ Windows Partial Key : 9YQTR

Windows License : OK

~ Windows Remaining Initializations Number : 1

Software Protection Service (Protection logicielle) : KO

Windows Automatic Updates : OK

Windows Activation Technologies : OK

 

---\\ System Information

~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel

~ Operating System: 64 Bits

Boot mode: Normal (Normal boot)

Total RAM: 4007 MB (42% free)

System Restore: Activé (Enable)

System drive C: has 226 GB (75%) free of 300 GB

 

---\\ Logged in mode

~ Computer Name: CLAIRE-PC

~ User Name: Claire

~ All Users Names: UpdatusUser, HomeGroupUser$, Claire, Administrateur,

~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89

Logged in as Administrator

 

---\\ Environnement Variables

~ System Unit : C:\

~ %AppData% : C:\Users\Claire\AppData\Roaming\

~ %Desktop% : C:\Users\Claire\Desktop\

~ %Favorites% : C:\Users\Claire\Favorites\

~ %LocalAppData% : C:\Users\Claire\AppData\Local\

~ %StartMenu% : C:\Users\Claire\AppData\Roaming\Microsoft\Windows\Start Menu\

~ %Windir% : C:\Windows\

~ %System% : C:\Windows\System32\

 

---\\ DOS/Devices

C:\ Hard drive, Flash drive, Thumb drive (Free 226 Go of 300 Go)

D:\ Hard drive, Flash drive, Thumb drive (Free 137 Go of 374 Go)

E:\ CD-ROM drive (Not Inserted)

 

 

 

---\\ Security Center & Tools Informations

~ UAC deactivate by user

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

~ Scan Security Center in 00mn 00s

 

 

 

---\\ Recherche particulière de fichiers génériques

[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 02:19:30.) -- C:\Windows\Explorer.exe [2871808]

[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.13/07/2009 - 21:39:52.) -- C:\Windows\System32\Wininit.exe [129024]

[MD5.3D165C53E40236A68B7102D1A622D4E0] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.24/08/2012 - 06:21:18.) -- C:\Windows\System32\wininet.dll [1392128]

[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.20/11/2010 - 09:25:32.) -- C:\Windows\System32\Winlogon.exe [390656]

[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 09:27:28.) -- C:\Windows\System32\sppcomapi.dll [232448]

[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.27/12/2011 - 23:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]

[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.13/07/2009 - 21:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]

[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/07/2009 - 19:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]

[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 05:19:22.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]

[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 05:26:34.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]

[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 06:43:44.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]

[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.13/07/2009 - 19:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]

[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.13/07/2009 - 20:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]

[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.26/04/2011 - 22:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]

[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 05:23:22.) -- C:\Windows\system32\Drivers\netBT.sys [261632]

[MD5.E453ACF4E7D44E5530B5D5F2B9CA8563] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.31/08/2012 - 14:19:35.) -- C:\Windows\system32\Drivers\ntfs.sys [1659760]

[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.13/07/2009 - 20:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]

[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 06:52:36.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]

[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.13/07/2009 - 20:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]

[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 05:21:58.) -- C:\Windows\system32\Drivers\tdx.sys [119296]

[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 09:34:04.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]

~ Scan Generic Processes in 00mn 00s

 

 

 

---\\ Etat des fichiers cachés (Caché/Total)

~ Mes images (My Pictures) : 2/1435

~ Mes musiques (My Musics) : 1/3192

~ Mes Favoris (My Favorites) : 1/39

~ Mes Documents (My Documents) : 1/319

~ Mon Bureau (My Desktop) : 1/65

~ Menu demarrer (Programs) : 1/34

~ Scan Hidden Files in 00mn 04s

 

 

 

---\\ Processus lancés

[MD5.E0D2F6BF46E6053193FAA3E294D657FF] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [766536] [PID.2992]

[MD5.37DEB76A2CF005841C4E45DE2B94D84F] - (.ASUS - AsScrPro.) -- C:\Windows\AsScrPro.exe [3058304] [PID.3732]

[MD5.5BB1F77C8AF725A15EC9366498D275BB] - (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992] [PID.3840]

[MD5.BAD0D303EF0A519409C625738F3E10A3] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4282728] [PID.4712]

[MD5.FD22B00049F775E952371E9C3DAC631B] - (.Pas de propriétaire - Wireless Console 3.) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536] [PID.5040]

[MD5.7EE22E13DEC8A6D18F4643C1EA34B0F0] - (.Virage Logic Corporation / Sonic Focus - ASUS_MATray.exe.) -- C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [984400] [PID.4804]

[MD5.5AEBF6FA9805C9101220AA4FB4FA17E7] - (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016] [PID.4652]

[MD5.79A3B950988F8D2B81906D0C0473158B] - (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624] [PID.5036]

[MD5.4AFFDCAADCB1DBBFFAF06C7F82E7F6FC] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776] [PID.4792]

[MD5.ADC791328EA38BA2E3EEC817C95A7D35] - (.Dropbox, Inc. - Dropbox.) -- C:\Users\Claire\AppData\Roaming\Dropbox\bin\Dropbox.exe [26909544] [PID.4680]

[MD5.22CC6CDBA678790046693654C3B212E4] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe [748680] [PID.5088]

[MD5.1DAC4ABDD489EF891A924F4954C13172] - (.Google Inc. - Google Toolbar Broker.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe [277104] [PID.4464]

[MD5.8709C95E4EC55378D5BF27F02B0ED5A5] - (.Adobe Systems Incorporated - Adobe® Flash® Player Installer/Uninstaller.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_4_402_287_ActiveX.exe [692152] [PID.6368]

[MD5.41D0F8FD52CA4B98D21F9D137F0F5FF9] - (...) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [3769856] [PID.6716]

~ Scan Processes Running in 00mn 02s

 

 

 

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)

C:\Users\Claire\AppData\Local\Google\Chrome\User Data\Default\Preferences

G0 - GCSP: Preference [user Data\Default][HomePage] Google

G0 - GCSP: Preference [user Data\Default] Google

G1 - GCS: Preference [user Data\Default] None

~ Scan Google Browser in 00mn 00s

 

 

 

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)

C:\Users\Claire\AppData\Roaming\Mozilla\Firefox\Profiles\wdcd05ai.default\prefs.js

M3 - MFPP: Plugins - [Claire] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\amazon-france.xml

M3 - MFPP: Plugins - [Claire] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\bing.xml

M3 - MFPP: Plugins - [Claire] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml

M3 - MFPP: Plugins - [Claire] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\eBay-france.xml

M3 - MFPP: Plugins - [Claire] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\google.xml

M3 - MFPP: Plugins - [Claire] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\wikipedia-fr.xml

M3 - MFPP: Plugins - [Claire] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\yahoo-france.xml

P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_287.dll

P2 - FPN: [HKCU] [@talk.google.com/GoogleTalkPlugin] - (.Google - Version 3.9.1.9832.) -- C:\Users\Claire\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll

P2 - FPN: [HKCU] [@talk.google.com/O3DPlugin] - (.Pas de propriétaire - Google Talk Plugin Video Accelerator version:0.1.44.23.) -- C:\Users\Claire\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll

P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\Claire\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll

P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\Claire\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll

~ Scan Firefox Browser in 00mn 00s

 

 

 

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)

R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google

R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = MSN Hotmail.fr, Messenger, Skype, Actualité, Sport, People, Femmes - MSN France

R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = MSN Hotmail.fr, Messenger, Skype, Actualité, Sport, People, Femmes - MSN France

R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Search Microsoft.com

R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Hotmail.fr, Messenger, Skype, Actualité, Sport, People, Femmes - MSN France

R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons

R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk

R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons

R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk

R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = Page d'accueil

R3 - URLSearchHook: (no name) [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Google Inc. - Google Update.) (No version) -- (.not file.)

R3 - URLSearchHook: (no name) [64Bits] - {d4330680-c0ae-4226-8a21-0afe2fd1ac24} . (.Google Inc. - Google Update.) (No version) -- (.not file.)

R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1

R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1

~ Scan IE Browser in 00mn 00s

 

 

 

---\\ Internet Explorer, Proxy Management (R5)

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

~ Scan Proxy management in 00mn 00s

 

 

 

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)

F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,

F2 - REG:system.ini: Shell=C:\Windows\explorer.exe

F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe

~ Scan Keys in 00mn 00s

 

 

 

---\\ Redirection du fichier Hosts (O1)

~ Le fichier hosts est sain (The hosts file is clean).

~ Scan Hosts File in 00mn 00s

~ Nombre de lignes (Lines number): 21

 

 

 

---\\ Browser Helper Objects de navigateur (O2)

O2 - BHO: (no name) [64Bits] - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} Clé orpheline

O2 - BHO: (no name) [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} Clé orpheline

O2 - BHO: (no name) [64Bits] - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} Clé orpheline

O2 - BHO: (no name) [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} Clé orpheline

O2 - BHO: (no name) [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} Clé orpheline

O2 - BHO: (no name) [64Bits] - {90EFF544-3981-4d46-85C9-C0361D0931D6} Clé orpheline

O2 - BHO: (no name) [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} Clé orpheline

O2 - BHO: (no name) [64Bits] - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} Clé orpheline

O2 - BHO: (no name) [64Bits] - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} Clé orpheline

O2 - BHO: (no name) [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} Clé orpheline

~ Scan BHO in 00mn 00s

 

 

 

---\\ Internet Explorer Toolbars (O3)

O3 - Toolbar: (no name) [64Bits] - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (...) -- (.not file.)

O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} . (...) -- (.not file.)

~ Scan Toolbar in 00mn 00s

 

 

 

---\\ Applications démarrées par registre & par dossier (O4)

O4 - HKLM\..\Run: [setwallpaper] c:\programdata\SetWallpaper.cmd (.not file.)

O4 - HKLM\..\Run: [RtHDVBg] . (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe

O4 - HKLM\..\Run: [intelTBRunOnce] . (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe

O4 - HKLM\..\Run: [igfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe

O4 - HKLM\..\Run: [ETDCtrl] C:\Program Files (x86)\Elantech\ETDCtrl.exe (.not file.)

O4 - HKLM\..\Run: [AtherosBtStack] . (.Atheros Communications - Serveur Stack Bluetooth.) -- C:\Program Files (x86)\Atheros\Bluetooth Suite\BtvStack.exe

O4 - HKLM\..\Run: [AthBtTray] . (.Atheros Commnucations - Bluetooth Suite Common Rescource.) -- C:\Program Files (x86)\Atheros\Bluetooth Suite\AthBtTray.exe

O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Claire\AppData\Local\Google\Update\GoogleUpdate.exe

O4 - HKCU\..\Run: [browserChoice] . (.Microsoft Corporation - Choix de navigateur .) -- C:\Windows\System32\browserchoice.exe

O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe

O4 - HKLM\..\Wow6432Node\Run: [Wireless Console 3] . (.Pas de propriétaire - Wireless Console 3.) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe

O4 - HKLM\..\Wow6432Node\Run: [sonicMasterTray] . (.Virage Logic Corporation / Sonic Focus - ASUS_MATray.exe.) -- C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe

O4 - HKLM\..\Wow6432Node\Run: [HControlUser] . (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe

O4 - HKLM\..\Wow6432Node\Run: [ATKMEDIA] . (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

O4 - HKLM\..\Wow6432Node\Run: [ASUSWebStorage] . (.ecareme - AsusWebStorage.) -- C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe

O4 - HKLM\..\Wow6432Node\Run: [ASUSPRP] . (.ASUSTek Computer Inc. - ASUS Product Register Program.) -- C:\Program Files (x86)\ASUS\APRP\APRP.exe

O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe

O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe

O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

O4 - HKLM\..\Wow6432Node\Run: [sunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

O4 - HKUS\S-1-5-21-2928702837-1124302004-3776087247-1001-2928702837-1124302004-3776087247-1000\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Claire\AppData\Local\Google\Update\GoogleUpdate.exe

O4 - HKUS\S-1-5-21-2928702837-1124302004-3776087247-1001-2928702837-1124302004-3776087247-1000\..\Run: [browserChoice] . (.Microsoft Corporation - Choix de navigateur .) -- C:\Windows\System32\browserchoice.exe

~ Scan Application in 00mn 00s

 

 

 

---\\ Autres liens utilisateurs (O4)

O4 - Global Startup: C:\Users\Claire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Users\Claire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

O4 - Global Startup: C:\Users\Claire\Desktop\Dropbox.lnk . (.Dropbox, Inc..) -- C:\Users\Claire\AppData\Roaming\Dropbox\bin\Dropbox.exe

O4 - Global Startup: C:\Users\Claire\Desktop\Débrancher port USB.lnk . (.Microsoft Corporation.) -- C:\Windows\System32\rundll32.exe

O4 - Global Startup: C:\Users\Claire\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

O4 - Global Startup: C:\Users\Claire\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

~ Scan Global Startup in 00mn 00s

 

 

 

---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)

O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no

~ Scan IE Control Panel in 00mn 00s

 

 

 

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)

O9 - Extra button: Send by Bluetooth to [64Bits] - {7815BE26-237D-41A8-A98F-F7BD75F71086} -- Clé orpheline

~ Scan IE Extra Buttons in 00mn 00s

 

 

 

---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll

O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll

O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll

O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll

O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll

O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll

O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll

O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll

O10 - WLSP:\000000000010\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll

~ Scan Winsock in 00mn 00s

 

 

 

---\\ Modification Domaine/Adresses DNS (O17)

O17 - HKLM\System\CCS\Services\Tcpip\..\{825A25C1-2ADF-4184-AEF9-A65929326E14}: DhcpNameServer = 192.168.0.1

O17 - HKLM\System\CS1\Services\Tcpip\..\{825A25C1-2ADF-4184-AEF9-A65929326E14}: DhcpNameServer = 192.168.0.1

O17 - HKLM\System\CS2\Services\Tcpip\..\{825A25C1-2ADF-4184-AEF9-A65929326E14}: DhcpNameServer = 192.168.0.1

~ Scan Domain in 00mn 00s

 

 

 

---\\ Protocole additionnel (O18)

O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\System32\mshtml.dll

O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll

O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll

O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\System32\mshtml.dll

O18 - Handler: livecall [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll

O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\System32\mshtml.dll

O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll

O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll

O18 - Handler: ms-help [64Bits] - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll

O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll

O18 - Handler: msnim [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll

O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\System32\mshtml.dll

O18 - Handler: skype4com [64Bits] - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll

O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll

O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\System32\mshtml.dll

O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll

O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll

O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll

O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll

O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll

~ Scan Protocole Additionnel in 00mn 00s

 

 

 

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll

~ Scan Winlogon in 00mn 00s

 

 

 

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)

O20 - AppInit_DLLs: . (.NVIDIA Corporation - NVIDIA Compatible NVIDIA shim initializatio.) - C:\Windows\system32\nvinitx.dll

~ Scan AppInit DLL in 00mn 00s

 

 

 

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.

~ Scan SSODL in 00mn 00s

 

 

 

---\\ Liste des services NT non Microsoft et non désactivés (O23)

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: AFBAgent (AFBAgent) . (.ASUSTeK Computer Inc. - ASUS FastBoot.) - C:\Windows\system32\FBAgent.exe

O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: ASLDR Service (ASLDRService) . (.ASUS - ASLDR Service.) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

O23 - Service: Atheros Bt&Wlan Coex Agent (Atheros Bt&Wlan Coex Agent) . (.Atheros - Atheros Coex Service Application.) - C:\Program Files (x86)\Atheros\Ath_CoexAgent.exe

O23 - Service: AtherosSvc (AtherosSvc) . (.Atheros Commnucations - AdminService Application.) - C:\Program Files (x86)\Atheros\Bluetooth Suite\adminservice.exe

O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) . (.ASUS - GFNEXSrv.) - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Google Update Service (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: InstallClick Connector (InstallClick) . (...) - C:\Program Files (x86)\RIFT Technologies\InstallClick Connector\installclick.exe

O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

O23 - Service: NVIDIA Driver Helper Service (NVSvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 266.8.) - C:\Windows\System32\nvvsvc.exe

O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) . (.NVIDIA Corporation - NVIDIA Settings Update Manager.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

O23 - Service: Secunia PSI Agent (Secunia PSI Agent) . (.Secunia - Secunia PSI Agent.) - C:\Program Files (x86)\Secunia\PSI\PSIA.exe

O23 - Service: Secunia Update Agent (Secunia Update Agent) . (.Secunia - Secunia Update Agent.) - C:\Program Files (x86)\Secunia\PSI\sua.exe

O23 - Service: TeamViewer 7 (TeamViewer7) . (.TeamViewer GmbH - TeamViewer Remote Control Application.) - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe

O23 - Service: Intel® Turbo Boost Technology Monitor (TurboBoost) . (.Intel® Corporation - Turbo Boost Monitor Service.) - C:\Program Files\Intel\TurboBoost\TurboBoost.exe

O23 - Service: (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)

~ Scan Services in 00mn 00s

 

 

 

---\\ Enumération Active Desktop & MHTML Editor (O24)

O24 - Default MHTML Editor: Last - .(...) - (.not file.)

~ Scan Desktop Component in 00mn 00s

 

 

 

---\\ BootExecute (O34)

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

~ Scan Keys in 00mn 00s

 

 

 

---\\ Tâches planifiées en automatique (O39)

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2928702837-1124302004-3776087247-1001Core.job

O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2928702837-1124302004-3776087247-1001UA.job

[MD5.5BB1F77C8AF725A15EC9366498D275BB] [APT] [ATKOSD2] (.ASUS.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskUserS-1-5-21-2928702837-1124302004-3776087247-1001Core] (.Google Inc..) -- C:\Users\Claire\AppData\Local\Google\Update\GoogleUpdate.exe

[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskUserS-1-5-21-2928702837-1124302004-3776087247-1001UA] (.Google Inc..) -- C:\Users\Claire\AppData\Local\Google\Update\GoogleUpdate.exe

[MD5.00000000000000000000000000000000] [APT] [{155C950E-A305-4C56-848B-8C7ADE2C2F15}] (...) -- C:\Program Files (x86)\Internet Explorer\iexplore.exearpresentégoogle-chrome:notoffered;systemlevelpre (.not file.)

[MD5.00000000000000000000000000000000] [APT] [{806842A7-28E4-433B-A4CE-149DA90B408B}] (...) -- C:\Users\Claire\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2V7R1Y88\65934_ENU_i386_zip.exe (.not file.)

[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe

~ Scan Scheduled Task in 00mn 04s

 

 

 

---\\ Composants installés (ActiveSetup Installed Components) (O40)

O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll

O40 - ASIC: Internet Explorer [64Bits] - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe

O40 - ASIC: Browser Customizations [64Bits] - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d’IEAK.) -- C:\Windows\System32\iedkcs32.dll

O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll

O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll

O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe

O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll

O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll

O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll

O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe

O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll

~ Scan Active Setup in 00mn 00s

 

 

 

---\\ Pilotes lancés au démarrage (O41)

O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys

O41 - Driver: (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\Drivers\aswrdr2.sys

O41 - Driver: (ATKWMIACPIIO) . (.ASUS - ATK WMIACPI Utility.) - C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys

O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys

O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys

O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys

O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys

O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\System32\DRIVERS\mssmbios.sys

O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys

O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys

O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys

O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys

O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys

O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys

O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys

O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys

O41 - Driver: (SASDIFSV) . (. - .) - C:\Users\Claire\AppData\Local\Temp\SAS_SelfExtract\SASDIFSV64.sys (.not file.)

O41 - Driver: (SASKUTIL) . (. - .) - C:\Users\Claire\AppData\Local\Temp\SAS_SelfExtract\SASKUTIL64.sys (.not file.)

O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys

O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys

O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys

O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys

O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys

O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys

~ Scan Drivers in 00mn 00s

 

 

 

---\\ Logiciels installés (O42)

O42 - Logiciel: ASUS AI Recovery - (.ASUS.) [HKLM][64Bits] -- {38253529-D97D-4901-AE53-5CC9736D3A2E}

O42 - Logiciel: ASUS FancyStart - (.ASUSTeK Computer Inc..) [HKLM][64Bits] -- {2B81872B-A054-48DA-BE3B-FA5C164C303A}

O42 - Logiciel: ASUS K3 Series ScreenSaver - (.ASUS.) [HKLM][64Bits] -- ASUS K3 Series ScreenSaver

O42 - Logiciel: ASUS LifeFrame3 - (.ASUS.) [HKLM][64Bits] -- {1DBD1F12-ED93-49C0-A7CC-56CBDE488158}

O42 - Logiciel: ASUS Power4Gear Hybrid - (.ASUS.) [HKLM][64Bits] -- {9B6239BF-4E85-4590-8D72-51E30DB1A9AA}

O42 - Logiciel: ASUS SmartLogon - (.ASUS.) [HKLM][64Bits] -- {64452561-169F-4A36-A2FF-B5E118EC65F5}

O42 - Logiciel: ASUS Splendid Video Enhancement Technology - (.ASUS.) [HKLM][64Bits] -- {0969AF05-4FF6-4C00-9406-43599238DE0D}

O42 - Logiciel: ASUS Virtual Camera - (.asus.) [HKLM][64Bits] -- {EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}

O42 - Logiciel: ASUS WebStorage - (.eCareme Technologies, Inc..) [HKLM][64Bits] -- ASUS WebStorage

O42 - Logiciel: ATK Package - (.ASUS.) [HKLM][64Bits] -- {AB5C933E-5C7D-4D30-B314-9C83A49B94BE}

O42 - Logiciel: AdblockIE - (.af0.net.) [HKLM][64Bits] -- {5508128A-2C7B-46B5-81F9-58E8E8115F0B}

O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX

O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin

O42 - Logiciel: Adobe Photoshop Lightroom 3.2 64-bit - (.Adobe.) [HKLM][64Bits] -- {A94AABAE-52F0-48C4-9F94-A4CA4B423576}

O42 - Logiciel: Adobe Reader XI - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}

O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {63EC2120-1742-4625-AA47-C6A8AEC9C64C}

O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {7446FE8D-C1F9-4D42-AAAE-5DBCE58605A6}

O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}

O42 - Logiciel: AsusVibe2.0 - (.ASUSTEK.) [HKLM][64Bits] -- Asus Vibe2.0

O42 - Logiciel: Atheros WLAN and Bluetooth Client Installation Program - (.Atheros.) [HKLM][64Bits] -- {28006915-2739-4EBE-B5E8-49B25D32EB33}

O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}

O42 - Logiciel: Bookworm Deluxe - (.Oberon Media Inc..) [HKLM][64Bits] -- Bookworm Deluxe

O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner

O42 - Logiciel: Control ActiveX de Windows Live Mesh para conexiones remotas - (.Microsoft Corporation.) [HKLM][64Bits] -- {04668DF2-D32F-4555-9C7E-35523DCD6544}

O42 - Logiciel: Controlo ActiveX do Windows Live Mesh para Ligações Remotas - (.Microsoft Corporation.) [HKLM][64Bits] -- {E54EEB5D-41ED-40FE-B4A8-8565DB81469B}

O42 - Logiciel: Contrôle ActiveX Windows Live Mesh pour connexions à distance - (.Microsoft Corporation.) [HKLM][64Bits] -- {55D003F4-9599-44BF-BA9E-95D060730DD3}

O42 - Logiciel: Cooking Dash - (.Oberon Media Inc..) [HKLM][64Bits] -- Cooking Dash

O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}

O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKCU][64Bits] -- Dropbox

O42 - Logiciel: ETDWare PS/2-X64 8.0.5.0_WHQL - (.ELAN Microelectronic Corp..) [HKLM][64Bits] -- Elantech

O42 - Logiciel: Fast Boot - (.ASUS.) [HKLM][64Bits] -- {13F4A7F3-EABC-4261-AF6B-1317777F0755}

O42 - Logiciel: Fnacmusic - Gestionnaire de téléchargement - V2 - (.Fnacmusic.) [HKLM][64Bits] -- {3C4F57EF-B5ED-40A7-ABEB-F1604BF6E41B}

O42 - Logiciel: Galeria de Fotografias do Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {0EC0B576-90F9-43C3-8FAD-A4902DF4B8F4}

O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {488F0347-C4A7-4374-91A7-30818BEDA710}

O42 - Logiciel: Galería fotográfica de Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66}

O42 - Logiciel: Game Park Console - (.Oberon Media, Inc..) [HKLM][64Bits] -- {E71E60C1-533E-45A5-8D80-E475E88D2B17}_is1

O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome

O42 - Logiciel: Google Talk Plugin - (.Google.) [HKLM][64Bits] -- {DFD30824-6BD0-34E1-ABE8-308AD3CBB9A0}

O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}

O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}

O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

O42 - Logiciel: Governor of Poker - (.Oberon Media Inc..) [HKLM][64Bits] -- Governor of Poker

O42 - Logiciel: Hotel Dash Suite Success - (.Oberon Media Inc..) [HKLM][64Bits] -- Hotel Dash Suite Success

O42 - Logiciel: InstallClick Connector - (.RIFT Technologies.) [HKLM][64Bits] -- {2F57C004-1FED-4C30-81FC-EE305D4D0A2E}

O42 - Logiciel: Intel® Control Center - (.Intel Corporation.) [HKLM][64Bits] -- {F8A9085D-4C7A-41a9-8A77-C8998A96C421}

O42 - Logiciel: Intel® Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}

O42 - Logiciel: Intel® Turbo Boost Technology Monitor - (.Intel.) [HKLM][64Bits] -- {39F4C6F9-618A-4E5B-8FB2-6BD661174E32}

O42 - Logiciel: Java 7 Update 9 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217009FF}

O42 - Logiciel: Jewel Quest 3 - (.Oberon Media Inc..) [HKLM][64Bits] -- Jewel Quest 3

O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}

O42 - Logiciel: Luxor 3 - (.Oberon Media Inc..) [HKLM][64Bits] -- Luxor 3

O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}

O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}

O42 - Logiciel: Mahjongg dimensions - (.Oberon Media Inc..) [HKLM][64Bits] -- Mahjongg dimensions

O42 - Logiciel: Malwarebytes Anti-Malware version 1.65.0.1400 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes' Anti-Malware_is1

O42 - Logiciel: Media Player Codec Pack 4.2.2 - (.Media Player Codec Pack.) [HKLM][64Bits] -- Media Player - Codec Pack

O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM][64Bits] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E}

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft .NET Framework 4 Client Profile

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM][64Bits] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}

O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {4B5F58F7-C7D1-3CE3-9B37-B657F0852643}

O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}

O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}

O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}

O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}

O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}

O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}

O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}

O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM][64Bits] -- {90120000-002A-0000-1000-0000000FF1CE}_PROPLUS_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}

O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM][64Bits] -- {90120000-002A-040C-1000-0000000FF1CE}_PROPLUS_{8283FD64-6A3B-4104-9E12-7CA25EF29A1A}

O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}

O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM][64Bits] -- {90120000-006E-040C-0000-0000000FF1CE}_PROPLUS_{8283FD64-6A3B-4104-9E12-7CA25EF29A1A}

O42 - Logiciel: Microsoft Office 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {95140000-0070-0000-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0015-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0016-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office File Validation Add-In - (.Microsoft Corporation.) [HKLM][64Bits] -- {90140000-2005-0000-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0044-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Office 64-bit Components 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-002A-0000-1000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001A-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0018-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- PROPLUS

O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0401-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0413-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0409-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0407-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0C0A-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-002C-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0401-0000-0000000FF1CE}_PROPLUS_{3E8EA473-ECCE-405F-A9CA-59446AEADD3A}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{928D7B99-2BEA-49F9-83B8-20FA57860643}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0413-0000-0000000FF1CE}_PROPLUS_{2C95E7EE-FEA7-4B3A-A6E5-DF90A88B816A}

O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}

O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0019-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Shared 64-bit MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-002A-040C-1000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-006E-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001B-040C-0000-0000000FF1CE}

O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM][64Bits] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}

O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}

O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}

O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM][64Bits] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F}

O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack

O42 - Logiciel: Mozilla Firefox 15.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 15.0 (x86 fr)

O42 - Logiciel: Mozilla Firefox 16.0.1 (x86 fr) - (.Mozilla.) [HKCU][64Bits] -- Mozilla Firefox 16.0.1 (x86 fr)

O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService

O42 - Logiciel: NVIDIA Graphics Driver 266.86 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver

O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM][64Bits] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}

O42 - Logiciel: Plants vs Zombies - (.Oberon Media Inc..) [HKLM][64Bits] -- Plants vs Zombies

O42 - Logiciel: Raccolta foto di Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {ED16B700-D91F-44B0-867C-7EB5253CA38D}

O42 - Logiciel: Realtek Ethernet Controller Driver For Windows 7 - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}

O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}

O42 - Logiciel: Realtek USB 2.0 Reader Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {62BBB2F0-E220-4821-A564-730807D2C34D}

O42 - Logiciel: Secunia PSI (3.0.0.4001) - (.Secunia.) [HKLM][64Bits] -- Secunia PSI

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2604121

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656351

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656368v2

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656405

O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2686827

O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C6997D22-CC93-4ED9-AD8A-02C3F3D2F1F9}

O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5DD3FF90-B302-45B2-A188-C5EA7ACD5D46}

O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{D33B9EF5-3801-496A-A2D6-B7F4BE972D75}

O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{B145DBBB-7778-4A5D-9D2B-DA6569F02391}

O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{A0D5F849-D9D5-48ED-99D0-C74D7BFA6A09}

O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{E34960DB-2A93-45DB-A208-02650F7AB09C}

O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596856) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{2623A96B-78E5-42CC-AB55-6A3969B32E36}

O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596856) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90120000-002A-0000-1000-0000000FF1CE}_PROPLUS_{2623A96B-78E5-42CC-AB55-6A3969B32E36}

O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{293FB6BE-D3EB-4162-B522-F9108040B9FE}

O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2597162) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3069CE04-082C-4669-9BA1-E6AA66330C1F}

O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{2B3C041A-A7F2-4A24-968D-4BEB6A123D15}

O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2687314) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C8F44A46-5C2F-43D8-A0E7-B32E098EDA63}

O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2687439) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3579CE34-B225-4B19-A3AF-DE5F562A212F}

O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2687441) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{EF5B5C7F-20CB-4A3A-AC3D-F5DE2C2BFDC7}

O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2597161) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{B4C12F08-B0EF-4CC4-AD5F-381DD62BF640}

O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Editi - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{8F311D6C-D8DD-4C32-9457-1A129CABD1A5}

O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edi - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{AEA16A27-0B97-4670-818F-A98D06EC0A6F}

O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edi - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0EF0D4FB-BB23-4515-AAEA-1240AC2DA525}

O42 - Logiciel: Security Update for Microsoft Office Publisher 2007 (KB2596705) 32-Bit Edit - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5A8732F0-C20F-4A9B-A2A9-66FE7A586C35}

O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2687315) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{71190DF4-8724-4A56-9054-AE97FDC57115}

O42 - Logiciel: Skype™ 5.10 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}

O42 - Logiciel: Sonic Focus - (.Virage Logic, Corp..) [HKLM][64Bits] -- {09BCB9CE-964B-4BDA-AE46-B5A0ABEF1D3F}

O42 - Logiciel: TVO version 3.73_RecTV - (.Pas de propriétaire.) [HKLM][64Bits] -- {0886B9CF-BFF9-42E6-BFDC-4C882A91E02A}_is1

O42 - Logiciel: TeamViewer 7 - (.TeamViewer.) [HKLM][64Bits] -- TeamViewer 7

O42 - Logiciel: Unlocker 1.9.1-x64 - (.Cedrick Collomb.) [HKLM][64Bits] -- Unlocker

O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}

O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2468871) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871

O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2533523) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523

O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2600217) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217

O42 - Logiciel: Update for Microsoft Office Outlook 2007 (KB2596598) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{8B689F89-5E1C-4DA9-B2B1-7B3843275596}

O42 - Logiciel: Update for Microsoft Office Outlook 2007 (KB2596598) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{E425BC5B-458F-4084-9C7D-2BE4020BFA35}

O42 - Logiciel: Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2687407) 32-B - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{824C8467-C873-4D17-BDA5-80578FBF3D0A}

O42 - Logiciel: Win7codecs - (.Shark007.) [HKLM][64Bits] -- {8C0CAA7A-3272-4991-A808-2C7559DE3409}

O42 - Logiciel: WinFlash - (.ASUS.) [HKLM][64Bits] -- {8F21291E-0444-4B1D-B9F9-4370A73E346D}

O42 - Logiciel: WinRAR 4.11 (32-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver

O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}

O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM][64Bits] -- {D45240D3-B6B3-4FF9-B243-54ECE3E10066}

O42 - Logiciel: Windows Live Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- WinLiveSuite

O42 - Logiciel: Windows Live Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- {17F99FCE-8F03-4439-860A-25C5A5434E18}

O42 - Logiciel: Windows Live Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- {2A07C35B-8384-4DA4-9A95-442B6C89A073}

O42 - Logiciel: Windows Live Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- {7D1C7B9F-2744-4388-B128-5C75B8BCCC84}

O42 - Logiciel: Windows Live Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- {84A411F9-40A5-4CDA-BF46-E09FBB2BC313}

O42 - Logiciel: Windows Live Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- {ABD534B7-E951-470E-92C2-CD5AF1735726}

O42 - Logiciel: Windows Live Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- {B618C3BF-5142-4630-81DD-F96864F97C7E}

O42 - Logiciel: Windows Live Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- {DEF91E0F-D266-453D-B6F2-1BA002B40CB6}

O42 - Logiciel: Windows Live Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- {F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}

O42 - Logiciel: Windows Live Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- {FE044230-9CA5-43F7-9B58-5AC5A28A1F33}

O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM][64Bits] -- {0F696557-180C-4813-A754-5D43969B0691}

O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM][64Bits] -- {169C77B7-69C9-4648-9DD0-72B152AF269F}

O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM][64Bits] -- {1AAF3A3B-7B32-4DDF-8ABB-438DAEB46EEC}

O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM][64Bits] -- {1C55470A-7C9E-4C63-B466-6AFFC69E94E9}

O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM][64Bits] -- {289809B1-078A-49F3-83D0-7E51715B3915}

O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM][64Bits] -- {3946328A-5B3A-434C-A22B-64CF6652FBAD}

O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM][64Bits] -- {401C50F6-B443-43EE-8F27-A80DB19B03FD}

O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM][64Bits] -- {46A5FBE9-ADB3-4493-A1CC-B4CFFD24D26A}

O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM][64Bits] -- {7734509D-A1F7-4A5E-AF9D-77CD17AE41AF}

O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM][64Bits] -- {9210D7A2-DC28-43F6-92F9-E6CD4C729F7B}

O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM][64Bits] -- {B22C8566-D522-4B40-A7AF-525F5A70D832}

O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM][64Bits] -- {CB7935EF-43EE-4C0F-AC02-B0E4DD5DAC17}

O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM][64Bits] -- {FE4BE0BD-1EDB-4D24-9614-847B3C472887}

O42 - Logiciel: Windows Live Fotogalerie - (.Microsoft Corporation.) [HKLM][64Bits] -- {B113D18C-67B0-4FB7-B329-E89B66194AE6}

O42 - Logiciel: Windows Live ID Sign-in Assistant - (.Microsoft Corporation.) [HKLM][64Bits] -- {1B8ABA62-74F0-47ED-B18C-A43128E591B8}

O42 - Logiciel: Windows Live Installer - (.Microsoft Corporation.) [HKLM][64Bits] -- {0B0F231F-CE6A-483D-AA23-77B364F75917}

O42 - Logiciel: Windows Live Language Selector - (.Microsoft Corporation.) [HKLM][64Bits] -- {D07A61E5-A59C-433C-BCBD-22025FA2287B}

O42 - Logiciel: Windows Live MIME IFilter - (.Microsoft Corporation.) [HKLM][64Bits] -- {DA54F80E-261C-41A2-A855-549A144F2F59}

O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM][64Bits] -- {0D261C88-454B-46FE-B43B-640E621BDA11}

O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM][64Bits] -- {25A381E1-0AB9-4E7A-ACCE-BA49D519CF4E}

O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM][64Bits] -- {677AAD91-1790-4FC5-B285-0E6A9D65F7DC}

O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM][64Bits] -- {9D56775A-93F3-44A3-8092-840E3826DE30}

O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM][64Bits] -- {9FAE6E8D-E686-49F5-A574-0A58DFD9580C}

O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM][64Bits] -- {A0B91308-6666-4249-8FF6-1E11AFD75FE1}

O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM][64Bits] -- {ADE85655-8D1E-4E4B-BF88-5E312FB2C74F}

O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM][64Bits] -- {B1239994-A850-44E2-BED8-E70A21124E16}

O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM][64Bits] -- {C66824E4-CBB3-4851-BB3F-E8CFD6350923}

O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM][64Bits] -- {D588365A-AE39-4F27-BDAE-B4E72C8E900C}

O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM][64Bits] -- {DBAA2B17-D596-4195-A169-BA2166B0D69B}

O42 - Logiciel: Windows Live Mesh - (.Microsoft Corporation.) [HKLM][64Bits] -- {039480EE-6933-4845-88B8-77FD0C3D059D}

O42 - Logiciel: Windows Live Mesh - (.Microsoft Corporation.) [HKLM][64Bits] -- {2C865FB0-051E-4D22-AC62-428E035AEAF0}

O42 - Logiciel: Windows Live Mesh - (.Microsoft Corporation.) [HKLM][64Bits] -- {3F4143A1-9C21-4011-8679-3BC1014C6886}

O42 - Logiciel: Windows Live Mesh - (.Microsoft Corporation.) [HKLM][64Bits] -- {46872828-6453-4138-BE1C-CE35FBF67978}

O42 - Logiciel: Windows Live Mesh - (.Microsoft Corporation.) [HKLM][64Bits] -- {7496FD31-E5CB-4AE4-82D3-31099558BF6A}

O42 - Logiciel: Windows Live Mesh - (.Microsoft Corporation.) [HKLM][64Bits] -- {78DAE910-CA72-450E-AD22-772CB1A00678}

O42 - Logiciel: Windows Live Mesh - (.Microsoft Corporation.) [HKLM][64Bits] -- {841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}

O42 - Logiciel: Windows Live Mesh - (.Microsoft Corporation.) [HKLM][64Bits] -- {A0C91188-C88F-4E86-93E6-CD7C9A266649}

O42 - Logiciel: Windows Live Mesh - (.Microsoft Corporation.) [HKLM][64Bits] -- {ACFBE99B-6981-4513-B17E-A2683CEB9EE5}

O42 - Logiciel: Windows Live Mesh - (.Microsoft Corporation.) [HKLM][64Bits] -- {AF01B90A-D25C-4F60-AECD-6EEDF509DC11}

O42 - Logiciel: Windows Live Mesh - (.Microsoft Corporation.) [HKLM][64Bits] -- {DECDCB7C-58CC-4865-91AF-627F9798FE48}

O42 - Logiciel: Windows Live Mesh - (.Microsoft Corporation.) [HKLM][64Bits] -- {F7E80BA7-A09D-4DD1-828B-C4A0274D4720}

O42 - Logiciel: Windows Live Mesh - (.Microsoft Corporation.) [HKLM][64Bits] -- {FCDE76CB-989D-4E32-9739-6A272D2B0ED7}

O42 - Logiciel: Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen - (.Microsoft Corporation.) [HKLM][64Bits] -- {C32CE55C-12BA-4951-8797-0967FDEF556F}

O42 - Logiciel: Windows Live Mesh ActiveX Control for Remote Connections - (.Microsoft Corporation.) [HKLM][64Bits] -- {2902F983-B4C1-44BA-B85D-5C6D52E2C441}

O42 - Logiciel: Windows Live Mesh ActiveX Control for Remote Connections - (.Microsoft Corporation.) [HKLM][64Bits] -- {C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}

O42 - Logiciel: Windows Live Mesh ActiveX control for remote connections - (.Microsoft Corporation.) [HKLM][64Bits] -- {C5398A89-516C-4DAF-BA07-EE7949090E56}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {0A9256E0-C924-46DE-921B-F6C4548A1C64}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {2AD2DD70-27F7-4343-BB4E-DE50A32D854B}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {3D0C22FA-96D7-4789-BC5B-991A5A99BFFA}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {4A275FD1-2F24-4274-8C01-813F5AD1A92D}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {5F6E678A-7E61-448A-86CB-BC2AD1E04138}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {6057E21C-ABE9-4059-AE3E-3BEB9925E660}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {63AE67AA-1AB1-4565-B4EF-ABBC5C841E8D}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {6A563426-3474-41C6-B847-42B39F1485B2}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {709E38A9-7F80-4598-96CC-44B0D553FECE}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {80956555-A512-4190-9CAD-B000C36D6B6B}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {873E4648-6F6E-47F6-A7B2-A6F8DFABDCE6}

O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {EB4DF488-AAEF-406F-A341-CB2AAA315B90}

O42 - Logiciel: Windows Live Messenger - (.?????????? ??????????.) [HKLM][64Bits] -- {6986737B-F286-40D1-87AF-938339DCF6AB}

O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM][64Bits] -- {19BA08F7-C728-469C-8A35-BFBD3633BE08}

O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM][64Bits] -- {5D273F60-0525-48BA-A5FB-D0CAA4A952AE}

O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM][64Bits] -- {6CB36609-E3A6-446C-A3C1-C71E311D2B9C}

O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM][64Bits] -- {6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}

O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM][64Bits] -- {7465A996-0FCA-4D2D-A52C-F833B0829B5B}

O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM][64Bits] -- {92EA4134-10D1-418A-91E1-5A0453131A38}

O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM][64Bits] -- {9DB90178-B5B0-45BD-B0A7-D40A6A1DF1CA}

O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM][64Bits] -- {BF022D76-9F72-4203-B8FA-6522DC66DFDA}

O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM][64Bits] -- {CB7224D9-6DCA-43F1-8F83-6B1E39A00F92}

O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM][64Bits] -- {DAEF48AD-89C8-4A93-B1DD-45B7E4FB6071}

O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM][64Bits] -- {E4E88B54-4777-4659-967A-2EED1E6AFD83}

O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM][64Bits] -- {FF105207-8423-4E13-B0B1-50753170B245}

O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM][64Bits] -- {FF3DFA01-1E98-46B4-A065-DA8AD47C9598}

O42 - Logiciel: Windows Live PIMT Platform - (.Microsoft Corporation.) [HKLM][64Bits] -- {83C292B7-38A5-440B-A731-07070E81A64F}

O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {168E7302-890A-4138-9109-A225ACAF7AD1}

O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {29373E24-AC72-424E-8F2A-FB0F9436F21F}

O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {370F888E-42A7-4911-9E34-7D74632E17EB}

O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {4D83F339-5A5C-4B21-8FD3-5D407B981E72}

O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {73FC3510-6421-40F7-9503-EDAE4D0CF70D}

O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {9BD262D0-B788-4546-A0A5-F4F56EC3834B}

O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {A41A708E-3BE6-4561-855D-44027C1CF0F8}

O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {A9BDCA6B-3653-467B-AC83-94367DA3BFE3}

O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {ADFE4AED-7F8E-4658-8D6E-742B15B9F120}

O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {B2BCA478-EC0F-45EE-A9E9-5EABE87EA72D}

O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {C2AB7DC4-489E-4BE9-887A-52262FBADBE0}

O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {C893D8C0-1BA0-4517-B11C-E89B65E72F70}

O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {D436F577-1695-4D2F-8B44-AC76C99E0002}

O42 - Logiciel: Windows Live Photo Gallery - (.Microsoft Corporation.) [HKLM][64Bits] -- {3336F667-9049-4D46-98B6-4C743EEBC5B1}

O42 - Logiciel: Windows Live Photo Gallery - (.Microsoft Corporation.) [HKLM][64Bits] -- {34F4D9A4-42C2-4348-BEF4-E553C84549E7}

O42 - Logiciel: Windows Live Photo Gallery - (.Microsoft Corporation.) [HKLM][64Bits] -- {A60B3BF0-954B-42AF-B8D8-2C1D34B613AA}

O42 - Logiciel: Windows Live Remote Client - (.Microsoft Corporation.) [HKLM][64Bits] -- {DF6D988A-EEA0-4277-AAB8-158E086E439B}

O42 - Logiciel: Windows Live Remote Client Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {692CCE55-9EAE-4F57-A834-092882E7FE0B}

O42 - Logiciel: Windows Live Remote Client Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {825C7D3F-D0B3-49D5-A42B-CBB0FBE85E99}

O42 - Logiciel: Windows Live Remote Client Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}

O42 - Logiciel: Windows Live Remote Client Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {8970AE69-40BE-4058-9916-0ACB1B974A3D}

O42 - Logiciel: Windows Live Remote Client Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {8EB588BD-D398-40D0-ADF7-BE1CEEF7C116}

O42 - Logiciel: Windows Live Remote Client Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {B0BF8602-EA52-4B0A-A2BD-EDABB0977030}

O42 - Logiciel: Windows Live Remote Client Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {B750FA38-7AB0-42CB-ACBB-E7DBE9FF603F}

O42 - Logiciel: Windows Live Remote Client Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {C504EC13-E122-4939-BD6E-EE5A3BAA5FEC}

O42 - Logiciel: Windows Live Remote Client Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {C9F05151-95A9-4B9B-B534-1760E2D014A5}

O42 - Logiciel: Windows Live Remote Client Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {D5876F0A-B2E9-4376-B9F5-CD47B7B8D820}

O42 - Logiciel: Windows Live Remote Client Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {DBEDAF67-C5A3-4C91-951D-31F3FE63AF3F}

O42 - Logiciel: Windows Live Remote Client Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {FAD0EC0B-753B-4A97-AD34-32AC1EC8DB69}

O42 - Logiciel: Windows Live Remote Service - (.Microsoft Corporation.) [HKLM][64Bits] -- {E02A6548-6FDE-40E2-8ED9-119D7D7E641F}

O42 - Logiciel: Windows Live Remote Service Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {0919C44F-F18A-4E3B-A737-03685272CE72}

O42 - Logiciel: Windows Live Remote Service Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {17A4FD95-A507-43F1-BC92-D8572AF8340A}

O42 - Logiciel: Windows Live Remote Service Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {19F09425-3C20-4730-9E2A-FC2E17C9F362}

O42 - Logiciel: Windows Live Remote Service Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {1EB2CFC3-E1C5-4FC4-B1F8-549DD6242C67}

O42 - Logiciel: Windows Live Remote Service Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {5E2CD4FB-4538-4831-8176-05D653C3E6D4}

O42 - Logiciel: Windows Live Remote Service Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {5FEAD3E5-A158-4B66-B92B-0C959D7CF838}

O42 - Logiciel: Windows Live Remote Service Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {656DEEDE-F6AC-47CA-A568-A1B4E34B5760}

O42 - Logiciel: Windows Live Remote Service Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {6CBFDC3C-CF21-4C02-A6DC-A5A2707FAF55}

O42 - Logiciel: Windows Live Remote Service Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {A679FBE4-BA2D-4514-8834-030982C8B31A}

O42 - Logiciel: Windows Live Remote Service Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {D930AF5C-5193-4616-887D-B974CEFC4970}

O42 - Logiciel: Windows Live Remote Service Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {EFB20CF5-1A6D-41F3-8895-223346CE6291}

O42 - Logiciel: Windows Live Remote Service Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {FAA3933C-6F0D-4350-B66B-9D7F7031343E}

O42 - Logiciel: Windows Live SOXE - (.Microsoft Corporation.) [HKLM][64Bits] -- {682B3E4F-696A-42DE-A41C-4C07EA1678B4}

O42 - Logiciel: Windows Live SOXE Definitions - (.Microsoft Corporation.) [HKLM][64Bits] -- {200FEC62-3C34-4D60-9CE8-EC372E01C08F}

O42 - Logiciel: Windows Live UX Platform - (.Microsoft Corporation.) [HKLM][64Bits] -- {CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}

O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {05E379CC-F626-4E7D-8354-463865B303BF}

O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {128133D3-037A-4C62-B1B7-55666A10587A}

O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {2C4E06CC-1F04-4C25-8B3C-93A9049EC42C}

O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {37B33B16-2535-49E7-8990-32668708A0A3}

O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {40BFD84C-64CD-42CC-9909-8734C50429C6}

O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {506FC723-8E6C-4417-9CFF-351F99130425}

O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}

O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {6A4ABCDC-0A49-4132-944E-01FBCCB3465C}

O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {74E8A7F6-575D-42C7-9178-E87D1B3BEFE8}

O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {77477AEA-5757-47D8-8B33-939F43D82218}

O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {D299197D-CDEA-41A6-A363-F532DE4114FD}

O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {D6F25CF9-4E87-43EB-B324-C12BE9CDD668}

O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {198EA334-8A3F-4CB2-9D61-6C10B8168A6F}

O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {1A82AE99-84D3-486D-BAD6-675982603E14}

O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {3B9A92DA-6374-4872-B646-253F18624D5F}

O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {48C0DC5E-820A-44F2-890E-29B68EDD3C78}

O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {4B28D47A-5FF0-45F8-8745-11DC2A1C9D0F}

O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {7E017923-16F8-4E32-94EF-0A150BD196FE}

O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {804DE397-F82C-4867-9085-E0AA539A3294}

O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {859D4022-B76D-40DE-96EF-C90CDA263F44}

O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {A726AE06-AAA3-43D1-87E3-70F510314F04}

O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {AAAFC670-569B-4A2F-82B4-42945E0DE3EF}

O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {AAF454FC-82CA-4F29-AB31-6A109485E76E}

O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {CDC39BF2-9697-4959-B893-A2EE05EF6ACB}

O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {DE7C13A6-E4EA-4296-B0D5-5D7E8AD69501}

O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {E62E0550-C098-43A2-B54B-03FB1E634483}

O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {14B441B7-774D-4170-98EA-A13667AE6218}

O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}

O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {2511AAD7-82DF-4B97-B0B3-E1B933317010}

O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {62687B11-58B5-4A18-9BC3-9DF4CE03F194}

O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {6807427D-8D68-4D30-AF5B-0B38F8F948C8}

O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {7FF11E53-C002-4F40-8D68-6BE751E5DD62}

O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {93E464B3-D075-4989-87FD-A828B5C308B1}

O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {C29FC15D-E84B-4EEC-8505-4DED94414C59}

O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {DDC8BDEE-DCAC-404D-8257-3E8D4B782467}

O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {DE8F99FD-2FC7-4C98-AA67-2729FDE1F040}

O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {E727A662-AF9F-4DEE-81C5-F4A1686F3DFC}

O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {F52C5BE7-3F57-464E-8A54-908402E43CE8}

O42 - Logiciel: Windows Live ???? - (.Microsoft Corporation.) [HKLM][64Bits] -- {EEF99142-3357-402C-B298-DEC303E12D92}

O42 - Logiciel: Windows Live ??? - (.Microsoft Corporation.) [HKLM][64Bits] -- {EF7EAB13-46FC-49DD-8E3C-AAF8A286C5BB}

O42 - Logiciel: Wireless Console 3 - (.ASUS.) [HKLM][64Bits] -- {20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}

O42 - Logiciel: World of Goo - (.Oberon Media Inc..) [HKLM][64Bits] -- World of Goo

O42 - Logiciel: avast! Free Antivirus v7.0.1466.0 - (.AVAST Software.) [HKLM][64Bits] -- avast

O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {1493B2AE-0261-47D2-B1AA-F4DAD0F6C48B}

O42 - Logiciel: syncables desktop SE - (.syncables.) [HKLM][64Bits] -- {341697D8-9923-445E-B42A-529E5A99CB7A}

O42 - Logiciel: St???e?? e?????? ActiveX t?? Windows Live Mesh ??a ap?µa???sµ??e? s??d?se?? - (.Microsoft Corporation.) [HKLM][64Bits] -- {F665F3B8-01B4-46A9-8E47-FF8DC2208C9F}

O42 - Logiciel: S?????? f?t???af??? t?? Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {C00C2A91-6CB3-483F-80B3-2958E29468F1}

O42 - Logiciel: ???????? ?????????? Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {E83DC314-C926-4214-AD58-147691D6FE9F}

O42 - Logiciel: ????? Windows Live - (.?????????? ??????????.) [HKLM][64Bits] -- {B63F0CE3-CCD0-490A-9A9C-E1A3B3A17137}

O42 - Logiciel: ?????????? Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {77F69CA1-E53D-4D77-8BA3-FA07606CC851}

O42 - Logiciel: ??????? ?????????? Windows Live Mesh ActiveX ??? ????????? ??????????? - (.Microsoft Corporation.) [HKLM][64Bits] -- {BCB0D6F7-7EAB-4009-A6F2-8E0E7F317773}

O42 - Logiciel: ?????? ??????? ?? Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {CE929F09-3853-4180-BD90-30764BFF7136}

O42 - Logiciel: ??? ActiveX ?? Windows Live Mesh ???? ??????? ??????? - (.Microsoft Corporation.) [HKLM][64Bits] -- {9D4C7DFA-CBBB-4F06-BDAC-94D831406DF0}

O42 - Logiciel: ???? Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {0A4C4B29-5A9D-4910-A13C-B920D5758744}

O42 - Logiciel: ???? ???? ActiveX ????? ?? Windows Live Mesh ????????? ??????? - (.Microsoft Corporation.) [HKLM][64Bits] -- {E18B30AA-6E2D-480C-B918-AF61009F4010}

O42 - Logiciel: ???? ??? Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {FBCA06D2-4642-4F33-B20A-A7AB3F0D2E69}

O42 - Logiciel: ??????? Windows Live Mesh ActiveX ??? - (.Microsoft Corporation.) [HKLM][64Bits] -- {622DE1BE-9EDE-49D3-B349-29D64760342A}

 

---\\ HKCU & HKLM Software Keys

[HKCU\Software\AC3filter]

[HKCU\Software\ASUS]

[HKCU\Software\ATK0100]

[HKCU\Software\Adobe Lightroom]

[HKCU\Software\Adobe]

[HKCU\Software\AppDataLow\Software\Google]

[HKCU\Software\AppDataLow\Software\Microsoft]

[HKCU\Software\AppDataLow\Software]

[HKCU\Software\AppDataLow]

[HKCU\Software\Apple Computer, Inc.]

[HKCU\Software\Apple Inc.]

[HKCU\Software\Atheros]

[HKCU\Software\Avast Software]

[HKCU\Software\Classes]

[HKCU\Software\CyberLink]

[HKCU\Software\DivX]

[HKCU\Software\ECAREME]

[HKCU\Software\Elantech]

[HKCU\Software\FLEXnet]

[HKCU\Software\GNU]

[HKCU\Software\Gabest]

[HKCU\Software\Google]

[HKCU\Software\Haali]

[HKCU\Software\Icaros]

[HKCU\Software\InstallCore]

[HKCU\Software\Intel]

[HKCU\Software\LAV]

[HKCU\Software\Macromedia]

[HKCU\Software\Malwarebytes' Anti-Malware]

[HKCU\Software\Media Player - Codec Pack]

[HKCU\Software\MozillaPlugins]

[HKCU\Software\Mozilla]

[HKCU\Software\NVIDIA Corporation]

[HKCU\Software\Netscape]

[HKCU\Software\ODBC]

[HKCU\Software\PDFCreator]

[HKCU\Software\Piriform]

[HKCU\Software\Policies]

[HKCU\Software\Realtek]

[HKCU\Software\SUPERAntiSpyware.com]

[HKCU\Software\Safer Networking Limited]

[HKCU\Software\Secunia]

[HKCU\Software\Skype]

[HKCU\Software\TeamViewer]

[HKCU\Software\TeleCharger]

[HKCU\Software\VB and VBA Program Settings]

[HKCU\Software\WinRAR SFX]

[HKCU\Software\WinRAR]

[HKCU\Software\Windows Live Writer]

[HKCU\Software\Wow6432Node]

[HKCU\Software\ZebHelpProcess Helper]

[HKCU\Software\Zeon]

[HKCU\Software\madFlac]

[HKLM\Software\ASUS]

[HKLM\Software\ATHEROS]

[HKLM\Software\ATI Technologies]

[HKLM\Software\ATK0100]

[HKLM\Software\Apple Computer, Inc.]

[HKLM\Software\Apple Inc.]

[HKLM\Software\BrowserChoice]

[HKLM\Software\Classes]

[HKLM\Software\Clients]

[HKLM\Software\CoreSecurity]

[HKLM\Software\DTS]

[HKLM\Software\GEAR Software]

[HKLM\Software\GNU]

[HKLM\Software\Google]

[HKLM\Software\HaaliMkx]

[HKLM\Software\Intel]

[HKLM\Software\Khronos]

[HKLM\Software\Macromedia]

[HKLM\Software\MozillaPlugins]

[HKLM\Software\Mozilla]

[HKLM\Software\NVIDIA Corporation]

[HKLM\Software\ODBC]

[HKLM\Software\Piriform]

[HKLM\Software\Policies]

[HKLM\Software\RTLSetup]

[HKLM\Software\Realtek Semiconductor Corp.]

[HKLM\Software\Realtek]

[HKLM\Software\RegisteredApplications]

[HKLM\Software\SRS Labs]

[HKLM\Software\SUPERAntiSpyware.com]

[HKLM\Software\SonicFocus]

[HKLM\Software\Sonic]

[HKLM\Software\Volatile]

[HKLM\Software\Waves Audio]

[HKLM\Software\Wow6432Node\ASUS]

[HKLM\Software\Wow6432Node\AVAST Software]

[HKLM\Software\Wow6432Node\Adobe]

[HKLM\Software\Wow6432Node\AdwCleaner]

[HKLM\Software\Wow6432Node\Apple Computer, Inc.]

[HKLM\Software\Wow6432Node\Apple Inc.]

[HKLM\Software\Wow6432Node\AsLdr]

[HKLM\Software\Wow6432Node\Atheros]

[HKLM\Software\Wow6432Node\Classes]

[HKLM\Software\Wow6432Node\Clients]

[HKLM\Software\Wow6432Node\Debug]

[HKLM\Software\Wow6432Node\ECAREME]

[HKLM\Software\Wow6432Node\GNU]

[HKLM\Software\Wow6432Node\Google]

[HKLM\Software\Wow6432Node\HaaliMkx]

[HKLM\Software\Wow6432Node\Intel]

[HKLM\Software\Wow6432Node\JavaSoft]

[HKLM\Software\Wow6432Node\JreMetrics]

[HKLM\Software\Wow6432Node\Khronos]

[HKLM\Software\Wow6432Node\Macromedia]

[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware (Trial)]

[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]

[HKLM\Software\Wow6432Node\MozillaPlugins]

[HKLM\Software\Wow6432Node\Mozilla]

[HKLM\Software\Wow6432Node\NVIDIA Corporation]

[HKLM\Software\Wow6432Node\ODBC]

[HKLM\Software\Wow6432Node\Oberon Media]

[HKLM\Software\Wow6432Node\PDFCreator]

[HKLM\Software\Wow6432Node\Policies]

[HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.]

[HKLM\Software\Wow6432Node\Realtek]

[HKLM\Software\Wow6432Node\RegisteredApplications]

[HKLM\Software\Wow6432Node\Safer Networking Limited]

[HKLM\Software\Wow6432Node\Secunia]

[HKLM\Software\Wow6432Node\Skype]

[HKLM\Software\Wow6432Node\SuppHelpDir]

[HKLM\Software\Wow6432Node\TeamViewer]

[HKLM\Software\Wow6432Node\TrendMicro]

[HKLM\Software\Wow6432Node\Volatile]

[HKLM\Software\Wow6432Node\WinRAR]

[HKLM\Software\Wow6432Node\mozilla.org]

[HKLM\Software\Wow6432Node\syncables]

[HKLM\Software\Wow6432Node]

~ Scan Softwares in 00mn 01s

 

 

 

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 17/10/2012 - 11:13:55 - [114,758] ----D C:\Program Files (x86)\Adobe

O43 - CFD: 09/08/2012 - 08:44:02 - [9,472] ----D C:\Program Files (x86)\af0.net

O43 - CFD: 12/09/2012 - 09:32:23 - [2,316] ----D C:\Program Files (x86)\Apple Software Update

O43 - CFD: 31/07/2012 - 15:56:28 - [525,147] ----D C:\Program Files (x86)\ASUS

O43 - CFD: 19/04/2012 - 18:24:44 - [47,523] ----D C:\Program Files (x86)\Atheros

O43 - CFD: 12/09/2012 - 09:31:37 - [0,602] ----D C:\Program Files (x86)\Bonjour

O43 - CFD: 17/10/2012 - 11:16:44 - [443,163] ----D C:\Program Files (x86)\Common Files

O43 - CFD: 17/10/2012 - 07:41:18 - [677,301] ----D C:\Program Files (x86)\Google

O43 - CFD: 19/04/2012 - 18:29:36 - [169,832] --H-D C:\Program Files (x86)\InstallShield Installation Information

O43 - CFD: 19/04/2012 - 18:14:25 - [6,100] ----D C:\Program Files (x86)\Intel

O43 - CFD: 24/09/2012 - 07:35:12 - [7,105] ----D C:\Program Files (x86)\Internet Explorer

O43 - CFD: 14/10/2012 - 14:00:49 - [142,398] ----D C:\Program Files (x86)\iTunes

O43 - CFD: 17/10/2012 - 11:15:50 - [121,165] ----D C:\Program Files (x86)\Java

O43 - CFD: 17/10/2012 - 07:57:36 - [12,747] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware

O43 - CFD: 12/09/2012 - 11:01:49 - [0] ----D C:\Program Files (x86)\Microsoft

O43 - CFD: 03/08/2012 - 02:13:29 - [566,411] ----D C:\Program Files (x86)\Microsoft Office

O43 - CFD: 31/07/2012 - 16:19:03 - [36,641] ----D C:\Program Files (x86)\Microsoft Silverlight

O43 - CFD: 12/04/2011 - 22:42:56 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition

O43 - CFD: 20/05/2012 - 08:47:54 - [0,014] ----D C:\Program Files (x86)\Microsoft Visual Studio

O43 - CFD: 20/05/2012 - 08:45:16 - [1,323] ----D C:\Program Files (x86)\Microsoft Visual Studio 8

O43 - CFD: 02/08/2012 - 03:42:02 - [3,554] ----D C:\Program Files (x86)\Microsoft Works

O43 - CFD: 20/05/2012 - 12:10:39 - [7,789] ----D C:\Program Files (x86)\Microsoft.NET

O43 - CFD: 16/10/2012 - 17:27:53 - [39,952] ----D C:\Program Files (x86)\Mozilla Firefox

O43 - CFD: 17/10/2012 - 09:49:10 - [0,212] ----D C:\Program Files (x86)\Mozilla Maintenance Service

O43 - CFD: 20/05/2012 - 08:47:58 - [0,025] ----D C:\Program Files (x86)\MSBuild

O43 - CFD: 19/04/2012 - 18:15:37 - [6,592] ----D C:\Program Files (x86)\NVIDIA Corporation

O43 - CFD: 12/09/2012 - 11:13:53 - [32,729] ----D C:\Program Files (x86)\PDFCreator

O43 - CFD: 19/04/2012 - 18:26:54 - [22,213] ----D C:\Program Files (x86)\Realtek

O43 - CFD: 14/07/2009 - 01:32:38 - [37,349] ----D C:\Program Files (x86)\Reference Assemblies

O43 - CFD: 26/08/2012 - 16:48:56 - [2,229] ----D C:\Program Files (x86)\RIFT Technologies

O43 - CFD: 17/10/2012 - 11:17:34 - [6,586] ----D C:\Program Files (x86)\Secunia

O43 - CFD: 31/07/2012 - 18:10:59 - [16,855] R---D C:\Program Files (x86)\Skype

O43 - CFD: 12/09/2012 - 10:59:04 - [4,372] ----D C:\Program Files (x86)\Spybot - Search & Destroy

O43 - CFD: 12/04/2011 - 22:49:28 - [161,465] ----D C:\Program Files (x86)\syncables

O43 - CFD: 04/08/2012 - 16:09:40 - [16,007] ----D C:\Program Files (x86)\TeamViewer

O43 - CFD: 19/04/2012 - 18:19:59 - [0] --H-D C:\Program Files (x86)\Temp

O43 - CFD: 17/10/2012 - 07:50:02 - [0,767] ----D C:\Program Files (x86)\trend micro

O43 - CFD: 14/07/2009 - 00:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information

O43 - CFD: 17/09/2012 - 08:57:23 - [60,912] ----D C:\Program Files (x86)\Win7codecs

O43 - CFD: 20/05/2012 - 11:44:35 - [0,500] ----D C:\Program Files (x86)\Windows Defender

O43 - CFD: 12/04/2011 - 22:45:11 - [314,625] ----D C:\Program Files (x86)\Windows Live

O43 - CFD: 20/05/2012 - 11:44:36 - [5,895] ----D C:\Program Files (x86)\Windows Mail

O43 - CFD: 20/05/2012 - 11:44:35 - [4,791] ----D C:\Program Files (x86)\Windows Media Player

O43 - CFD: 14/07/2009 - 01:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT

O43 - CFD: 20/05/2012 - 11:44:35 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer

O43 - CFD: 18/02/2011 - 16:09:10 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices

O43 - CFD: 20/05/2012 - 11:44:35 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar

O43 - CFD: 17/10/2012 - 11:26:01 - [10,018] ----D C:\Program Files (x86)\ZHPDiag

O43 - CFD: 17/10/2012 - 11:14:02 - [6,224] ----D C:\Program Files (x86)\Common Files\Adobe

O43 - CFD: 14/10/2012 - 14:00:22 - [105,862] ----D C:\Program Files (x86)\Common Files\Apple

O43 - CFD: 19/04/2012 - 18:22:28 - [0,012] ----D C:\Program Files (x86)\Common Files\Atheros

O43 - CFD: 20/05/2012 - 08:47:54 - [0,089] ----D C:\Program Files (x86)\Common Files\DESIGNER

O43 - CFD: 19/04/2012 - 18:29:36 - [3,111] ----D C:\Program Files (x86)\Common Files\InstallShield

O43 - CFD: 19/04/2012 - 18:14:23 - [13,605] ----D C:\Program Files (x86)\Common Files\Intel

O43 - CFD: 17/10/2012 - 11:16:44 - [1,184] ----D C:\Program Files (x86)\Common Files\Java

O43 - CFD: 02/08/2012 - 03:42:08 - [229,227] ----D C:\Program Files (x86)\Common Files\microsoft shared

O43 - CFD: 12/04/2011 - 22:48:00 - [0,338] ----D C:\Program Files (x86)\Common Files\Oberon Media

O43 - CFD: 13/07/2009 - 23:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services

O43 - CFD: 31/07/2012 - 18:10:58 - [2,056] ----D C:\Program Files (x86)\Common Files\Skype

O43 - CFD: 13/07/2009 - 23:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines

O43 - CFD: 03/08/2012 - 02:04:27 - [42,254] ----D C:\Program Files (x86)\Common Files\System

O43 - CFD: 12/04/2011 - 22:33:36 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live

O43 - CFD: 14/10/2012 - 14:00:51 - [2,775] ----D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

O43 - CFD: 17/10/2012 - 11:18:07 - [407,072] ----D C:\ProgramData\Adobe

O43 - CFD: 12/09/2012 - 09:32:17 - [65,805] ----D C:\ProgramData\Apple

O43 - CFD: 14/10/2012 - 14:00:22 - [49,870] ----D C:\ProgramData\Apple Computer

O43 - CFD: 14/07/2009 - 01:08:56 - [0] --H-D C:\ProgramData\Application Data

O43 - CFD: 12/09/2012 - 15:10:06 - [0,004] ----D C:\ProgramData\ASUS

O43 - CFD: 09/08/2012 - 11:58:35 - [0,678] ----D C:\ProgramData\Atheros

O43 - CFD: 20/05/2012 - 11:57:11 - [15,579] ----D C:\ProgramData\AVAST Software

O43 - CFD: 19/04/2012 - 04:02:29 - [4,522] ----D C:\ProgramData\ChangeFolderView

O43 - CFD: 14/07/2009 - 01:08:56 - [0] --H-D C:\ProgramData\Desktop

O43 - CFD: 14/07/2009 - 01:08:56 - [0] --H-D C:\ProgramData\Documents

O43 - CFD: 12/04/2011 - 22:33:02 - [18,933] ----D C:\ProgramData\Downloaded Installations

O43 - CFD: 14/07/2009 - 01:08:56 - [0] --H-D C:\ProgramData\Favorites

O43 - CFD: 12/04/2011 - 22:33:04 - [0,000] ----D C:\ProgramData\FLEXnet

O43 - CFD: 19/04/2012 - 03:59:29 - [1,048] ----D C:\ProgramData\FolderView

O43 - CFD: 12/04/2011 - 22:33:20 - [0,498] ----D C:\ProgramData\Google

O43 - CFD: 19/04/2012 - 18:18:18 - [0,002] ----D C:\ProgramData\Intel

O43 - CFD: 22/08/2012 - 04:02:02 - [15,964] ----D C:\ProgramData\Malwarebytes

O43 - CFD: 12/09/2012 - 11:01:49 - [518,237] -S--D C:\ProgramData\Microsoft

O43 - CFD: 10/10/2012 - 21:15:52 - [0,062] ----D C:\ProgramData\Microsoft Help

O43 - CFD: 29/08/2012 - 16:48:18 - [0,013] ----D C:\ProgramData\Mozilla

O43 - CFD: 12/09/2012 - 10:59:52 - [0] ----D C:\ProgramData\Nuance

O43 - CFD: 19/04/2012 - 18:17:10 - [9,482] ----D C:\ProgramData\NVIDIA

O43 - CFD: 19/04/2012 - 18:14:50 - [0,804] ----D C:\ProgramData\NVIDIA Corporation

O43 - CFD: 12/04/2011 - 22:48:44 - [27,601] ----D C:\ProgramData\OberonGameConsole

O43 - CFD: 19/04/2012 - 18:27:48 - [0,002] ----D C:\ProgramData\P4G

O43 - CFD: 31/07/2012 - 18:11:05 - [36,511] ----D C:\ProgramData\Skype

O43 - CFD: 19/04/2012 - 18:19:48 - [0,008] ----D C:\ProgramData\SonicFocus

O43 - CFD: 12/09/2012 - 10:59:03 - [0,074] ----D C:\ProgramData\Spybot - Search & Destroy

O43 - CFD: 14/07/2009 - 01:08:56 - [0] --H-D C:\ProgramData\Start Menu

O43 - CFD: 17/10/2012 - 11:16:45 - [0,000] ----D C:\ProgramData\Sun

O43 - CFD: 03/08/2012 - 14:03:56 - [0] ----D C:\ProgramData\SUPERAntiSpyware.com

O43 - CFD: 14/07/2009 - 01:08:56 - [0] --H-D C:\ProgramData\Templates

O43 - CFD: 12/09/2012 - 10:57:28 - [5,646] ----D C:\ProgramData\Trend Micro

O43 - CFD: 17/09/2012 - 08:57:40 - [27,031] ----D C:\ProgramData\Win7codecs

O43 - CFD: 12/09/2012 - 09:33:44 - [0,004] ----D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}

O43 - CFD: 17/09/2012 - 20:39:15 - [9,858] ----D C:\Users\Claire\AppData\Roaming\Adobe

O43 - CFD: 12/09/2012 - 11:11:10 - [0,192] ----D C:\Users\Claire\AppData\Roaming\Apple Computer

O43 - CFD: 25/04/2012 - 14:36:21 - [0] ----D C:\Users\Claire\AppData\Roaming\ASUS WebStorage

O43 - CFD: 17/10/2012 - 11:07:15 - [40,522] ----D C:\Users\Claire\AppData\Roaming\Dropbox

O43 - CFD: 25/04/2012 - 14:39:55 - [0,000] ----D C:\Users\Claire\AppData\Roaming\FLEXnet

O43 - CFD: 17/10/2012 - 07:43:56 - [0,000] ----D C:\Users\Claire\AppData\Roaming\Google

O43 - CFD: 25/04/2012 - 10:30:47 - [0] ----D C:\Users\Claire\AppData\Roaming\Identities

O43 - CFD: 20/05/2012 - 08:57:39 - [0,001] ----D C:\Users\Claire\AppData\Roaming\Macromedia

O43 - CFD: 22/08/2012 - 04:02:08 - [1,190] ----D C:\Users\Claire\AppData\Roaming\Malwarebytes

O43 - CFD: 14/07/2009 - 03:44:38 - [0] ----D C:\Users\Claire\AppData\Roaming\Media Center Programs

O43 - CFD: 14/10/2012 - 14:31:28 - [18,842] -S--D C:\Users\Claire\AppData\Roaming\Microsoft

O43 - CFD: 10/10/2012 - 07:52:06 - [22,126] ----D C:\Users\Claire\AppData\Roaming\Mozilla

O43 - CFD: 25/04/2012 - 14:39:54 - [0,000] ----D C:\Users\Claire\AppData\Roaming\Nuance

O43 - CFD: 17/10/2012 - 11:02:40 - [11,103] ----D C:\Users\Claire\AppData\Roaming\Skype

O43 - CFD: 03/08/2012 - 14:03:56 - [0] ----D C:\Users\Claire\AppData\Roaming\SUPERAntiSpyware.com

O43 - CFD: 17/09/2012 - 08:57:38 - [0,001] ----D C:\Users\Claire\AppData\Roaming\Win7codecs

O43 - CFD: 14/10/2012 - 19:14:24 - [0] ----D C:\Users\Claire\AppData\Roaming\Windows Live Writer

O43 - CFD: 20/05/2012 - 10:19:56 - [0,000] ----D C:\Users\Claire\AppData\Roaming\WinRAR

O43 - CFD: 25/04/2012 - 14:39:52 - [0,061] ----D C:\Users\Claire\AppData\Roaming\Zeon

O43 - CFD: 17/09/2012 - 20:39:15 - [14,818] ----D C:\Users\Claire\AppData\Local\Adobe

O43 - CFD: 12/09/2012 - 09:32:30 - [0] ----D C:\Users\Claire\AppData\Local\Apple

O43 - CFD: 12/09/2012 - 09:34:32 - [7,303] ----D C:\Users\Claire\AppData\Local\Apple Computer

O43 - CFD: 25/04/2012 - 10:30:25 - [0] ----D C:\Users\Claire\AppData\Local\Application Data

O43 - CFD: 12/09/2012 - 15:10:03 - [1,310] ----D C:\Users\Claire\AppData\Local\ASUS

O43 - CFD: 25/04/2012 - 10:32:07 - [0] ----D C:\Users\Claire\AppData\Local\BMExplorer

O43 - CFD: 17/10/2012 - 08:07:30 - [4,676] ----D C:\Users\Claire\AppData\Local\CrashDumps

O43 - CFD: 05/09/2012 - 13:58:17 - [0] ----D C:\Users\Claire\AppData\Local\Diagnostics

O43 - CFD: 05/09/2012 - 13:58:17 - [0] ----D C:\Users\Claire\AppData\Local\ElevatedDiagnostics

O43 - CFD: 16/09/2012 - 22:16:55 - [0,234] ----D C:\Users\Claire\AppData\Local\Fnacmusic

O43 - CFD: 17/10/2012 - 07:43:16 - [56,175] ----D C:\Users\Claire\AppData\Local\Google

O43 - CFD: 25/04/2012 - 10:30:25 - [0] ----D C:\Users\Claire\AppData\Local\Historique

O43 - CFD: 17/09/2012 - 07:38:40 - [215,304] ----D C:\Users\Claire\AppData\Local\Microsoft

O43 - CFD: 20/05/2012 - 12:06:57 - [0] ----D C:\Users\Claire\AppData\Local\Microsoft Games

O43 - CFD: 17/08/2012 - 10:29:17 - [0,101] ----D C:\Users\Claire\AppData\Local\Microsoft Help

O43 - CFD: 29/08/2012 - 16:48:22 - [57,988] ----D C:\Users\Claire\AppData\Local\Mozilla

O43 - CFD: 17/10/2012 - 11:18:02 - [0] ----D C:\Users\Claire\AppData\Local\Secunia PSI

O43 - CFD: 17/10/2012 - 11:24:46 - [9,812] ----D C:\Users\Claire\AppData\Local\Temp

O43 - CFD: 25/04/2012 - 10:30:25 - [0] ----D C:\Users\Claire\AppData\Local\Temporary Internet Files

O43 - CFD: 12/09/2012 - 15:10:03 - [1,913] ----D C:\Users\Claire\AppData\Local\VirtualStore

O43 - CFD: 07/09/2012 - 17:18:03 - [0,035] ----D C:\Users\Claire\AppData\Local\Windows Live

O43 - CFD: 14/10/2012 - 19:14:34 - [0,620] ----D C:\Users\Claire\AppData\Local\Windows Live Writer

O43 - CFD: 14/07/2009 - 00:54:32 - [0,014] R---D C:\Users\Claire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

O43 - CFD: 02/08/2012 - 05:16:28 - [0,000] R---D C:\Users\Claire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

O43 - CFD: 31/07/2012 - 16:32:10 - [0,002] ----D C:\Users\Claire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

O43 - CFD: 14/07/2009 - 00:49:38 - [0,001] R---D C:\Users\Claire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

O43 - CFD: 10/08/2012 - 05:03:15 - [0,001] R---D C:\Users\Claire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

O43 - CFD: 18/09/2012 - 09:36:03 - [0,003] ----D C:\Users\Claire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker

O43 - CFD: 20/05/2012 - 09:30:07 - [0,003] ----D C:\Users\Claire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

O43 - CFD: 17/10/2012 - 11:13:55 - [114,758] ----D C:\Program Files (x86)\Adobe

O43 - CFD: 09/08/2012 - 08:44:02 - [9,472] ----D C:\Program Files (x86)\af0.net

O43 - CFD: 12/09/2012 - 09:32:23 - [2,316] ----D C:\Program Files (x86)\Apple Software Update

O43 - CFD: 31/07/2012 - 15:56:28 - [525,147] ----D C:\Program Files (x86)\ASUS

O43 - CFD: 19/04/2012 - 18:24:44 - [47,523] ----D C:\Program Files (x86)\Atheros

O43 - CFD: 12/09/2012 - 09:31:37 - [0,602] ----D C:\Program Files (x86)\Bonjour

O43 - CFD: 17/10/2012 - 11:16:44 - [443,163] ----D C:\Program Files (x86)\Common Files

O43 - CFD: 17/10/2012 - 07:41:18 - [677,301] ----D C:\Program Files (x86)\Google

O43 - CFD: 19/04/2012 - 18:29:36 - [169,832] --H-D C:\Program Files (x86)\InstallShield Installation Information

O43 - CFD: 19/04/2012 - 18:14:25 - [6,100] ----D C:\Program Files (x86)\Intel

O43 - CFD: 24/09/2012 - 07:35:12 - [7,105] ----D C:\Program Files (x86)\Internet Explorer

O43 - CFD: 14/10/2012 - 14:00:49 - [142,398] ----D C:\Program Files (x86)\iTunes

O43 - CFD: 17/10/2012 - 11:15:50 - [121,165] ----D C:\Program Files (x86)\Java

O43 - CFD: 17/10/2012 - 07:57:36 - [12,747] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware

O43 - CFD: 12/09/2012 - 11:01:49 - [0] ----D C:\Program Files (x86)\Microsoft

O43 - CFD: 03/08/2012 - 02:13:29 - [566,411] ----D C:\Program Files (x86)\Microsoft Office

O43 - CFD: 31/07/2012 - 16:19:03 - [36,641] ----D C:\Program Files (x86)\Microsoft Silverlight

O43 - CFD: 12/04/2011 - 22:42:56 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition

O43 - CFD: 20/05/2012 - 08:47:54 - [0,014] ----D C:\Program Files (x86)\Microsoft Visual Studio

O43 - CFD: 20/05/2012 - 08:45:16 - [1,323] ----D C:\Program Files (x86)\Microsoft Visual Studio 8

O43 - CFD: 02/08/2012 - 03:42:02 - [3,554] ----D C:\Program Files (x86)\Microsoft Works

O43 - CFD: 20/05/2012 - 12:10:39 - [7,789] ----D C:\Program Files (x86)\Microsoft.NET

O43 - CFD: 16/10/2012 - 17:27:53 - [39,952] ----D C:\Program Files (x86)\Mozilla Firefox

O43 - CFD: 17/10/2012 - 09:49:10 - [0,212] ----D C:\Program Files (x86)\Mozilla Maintenance Service

O43 - CFD: 20/05/2012 - 08:47:58 - [0,025] ----D C:\Program Files (x86)\MSBuild

O43 - CFD: 19/04/2012 - 18:15:37 - [6,592] ----D C:\Program Files (x86)\NVIDIA Corporation

O43 - CFD: 12/09/2012 - 11:13:53 - [32,729] ----D C:\Program Files (x86)\PDFCreator

O43 - CFD: 19/04/2012 - 18:26:54 - [22,213] ----D C:\Program Files (x86)\Realtek

O43 - CFD: 14/07/2009 - 01:32:38 - [37,349] ----D C:\Program Files (x86)\Reference Assemblies

O43 - CFD: 26/08/2012 - 16:48:56 - [2,229] ----D C:\Program Files (x86)\RIFT Technologies

O43 - CFD: 17/10/2012 - 11:17:34 - [6,586] ----D C:\Program Files (x86)\Secunia

O43 - CFD: 31/07/2012 - 18:10:59 - [16,855] R---D C:\Program Files (x86)\Skype

O43 - CFD: 12/09/2012 - 10:59:04 - [4,372] ----D C:\Program Files (x86)\Spybot - Search & Destroy

O43 - CFD: 12/04/2011 - 22:49:28 - [161,465] ----D C:\Program Files (x86)\syncables

O43 - CFD: 04/08/2012 - 16:09:40 - [16,007] ----D C:\Program Files (x86)\TeamViewer

O43 - CFD: 19/04/2012 - 18:19:59 - [0] --H-D C:\Program Files (x86)\Temp

O43 - CFD: 17/10/2012 - 07:50:02 - [0,767] ----D C:\Program Files (x86)\trend micro

O43 - CFD: 14/07/2009 - 00:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information

O43 - CFD: 17/09/2012 - 08:57:23 - [60,912] ----D C:\Program Files (x86)\Win7codecs

O43 - CFD: 20/05/2012 - 11:44:35 - [0,500] ----D C:\Program Files (x86)\Windows Defender

O43 - CFD: 12/04/2011 - 22:45:11 - [314,625] ----D C:\Program Files (x86)\Windows Live

O43 - CFD: 20/05/2012 - 11:44:36 - [5,895] ----D C:\Program Files (x86)\Windows Mail

O43 - CFD: 20/05/2012 - 11:44:35 - [4,791] ----D C:\Program Files (x86)\Windows Media Player

O43 - CFD: 14/07/2009 - 01:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT

O43 - CFD: 20/05/2012 - 11:44:35 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer

O43 - CFD: 18/02/2011 - 16:09:10 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices

O43 - CFD: 20/05/2012 - 11:44:35 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar

O43 - CFD: 17/10/2012 - 11:26:01 - [10,018] ----D C:\Program Files (x86)\ZHPDiag

O43 - CFD: 17/10/2012 - 11:14:02 - [6,224] ----D C:\Program Files (x86)\Common Files\Adobe

O43 - CFD: 14/10/2012 - 14:00:22 - [105,862] ----D C:\Program Files (x86)\Common Files\Apple

O43 - CFD: 19/04/2012 - 18:22:28 - [0,012] ----D C:\Program Files (x86)\Common Files\Atheros

O43 - CFD: 20/05/2012 - 08:47:54 - [0,089] ----D C:\Program Files (x86)\Common Files\DESIGNER

O43 - CFD: 19/04/2012 - 18:29:36 - [3,111] ----D C:\Program Files (x86)\Common Files\InstallShield

O43 - CFD: 19/04/2012 - 18:14:23 - [13,605] ----D C:\Program Files (x86)\Common Files\Intel

O43 - CFD: 17/10/2012 - 11:16:44 - [1,184] ----D C:\Program Files (x86)\Common Files\Java

O43 - CFD: 02/08/2012 - 03:42:08 - [229,227] ----D C:\Program Files (x86)\Common Files\microsoft shared

O43 - CFD: 12/04/2011 - 22:48:00 - [0,338] ----D C:\Program Files (x86)\Common Files\Oberon Media

O43 - CFD: 13/07/2009 - 23:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services

O43 - CFD: 31/07/2012 - 18:10:58 - [2,056] ----D C:\Program Files (x86)\Common Files\Skype

O43 - CFD: 13/07/2009 - 23:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines

O43 - CFD: 03/08/2012 - 02:04:27 - [42,254] ----D C:\Program Files (x86)\Common Files\System

O43 - CFD: 12/04/2011 - 22:33:36 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live

~ Scan Program Folder in 00mn 03s

 

 

 

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)

O44 - LFC:[MD5.53F7FAAE48D1AEB57DDEB22E4F568B09] - 17/10/2012 - 11:19:23 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1485159]

O44 - LFC:[MD5.6BCAF46E2B7FA9ACE92B4D39F3037C5C] - 17/10/2012 - 11:06:16 . (...) -- C:\Windows\System32\acovcnt.exe []

O44 - LFC:[MD5.6BCAF46E2B7FA9ACE92B4D39F3037C5C] - 17/10/2012 - 11:06:16 ---A- . (...) -- C:\Windows\SysNative\acovcnt.exe [45056]

O44 - LFC:[MD5.85269B850C69423807E3873B0F6C188A] - 17/10/2012 - 11:05:53 ---A- . (...) -- C:\log2.txt [0]

O44 - LFC:[MD5.9982DE5B241F4776F71698EB4D4FC7E9] - 17/10/2012 - 11:05:28 ---A- . (...) -- C:\Windows\setupact.log [168]

O44 - LFC:[MD5.90A54FAAB871A3F6B9F24C4900AA12B0] - 17/10/2012 - 11:05:26 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]

O44 - LFC:[MD5.6AEB8A6652F91E2964D8F198769A5224] - 17/10/2012 - 09:49:58 ---A- . (...) -- C:\Windows\SysNative\ServiceFilter.ini [1424]

O44 - LFC:[MD5.03F84E43B5207B0C795F40C76B34BF50] - 17/10/2012 - 09:48:21 ---A- . (...) -- C:\AdwCleaner[s1].txt [11868]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 17/10/2012 - 08:50:26 ---A- . (...) -- C:\Windows\setuperr.log [0]

O44 - LFC:[MD5.9938BE62CF5763D74EA2493FC26534EB] - 17/10/2012 - 08:50:12 ---A- . (...) -- C:\Windows\PFRO.log [600]

O44 - LFC:[MD5.42E3CB0AD02B16B5D2B6A5F9AAB6F2C4] - 13/10/2012 - 22:07:58 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI [1580460]

O44 - LFC:[MD5.65A7F77E2E2CAB3B337FC5080D2B0135] - 13/10/2012 - 22:07:58 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat [110140]

O44 - LFC:[MD5.7DB41A61AB2DD0EDDE28C796BD5EF7A8] - 13/10/2012 - 22:07:58 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat [134506]

O44 - LFC:[MD5.DD44A752135261AFC96C7E1E823042D0] - 13/10/2012 - 22:07:58 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat [627420]

O44 - LFC:[MD5.A9F7609A857A66C768D0A599321E3D5D] - 13/10/2012 - 22:07:58 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat [715892]

O44 - LFC:[MD5.914902083020773258CCC0A3382BC545] - 02/10/2012 - 07:47:47 ---A- . (...) -- C:\Windows\SysNative\AutoRunFilter.ini [2072]

~ Scan Files in 00mn 27s

 

 

 

---\\ Déni du service (Local Security Authority) (O48)

O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll

O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\livessp.dll

~ Scan Keys in 00mn 00s

 

 

 

---\\ Contrôle du Safe Boot (CSB) (O49)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys

~ Scan CSB in 00mn 00s

 

 

 

---\\ MountPoints2 Shell Key (O51) (None)

 

---\\ Trojan Driver Search Data (HKLM) (O52)

O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

O52 - TDSD: \Drivers32\"vidc.ffds"="ff_vfw.dll" . (.Pas de propriétaire - ffdshow VFW.) -- C:\Windows\System32\ff_vfw.dll

O52 - TDSD: \Drivers32\"vidc.lags"="lagarith.dll" . (.Pas de propriétaire - Lagarith.) -- C:\Windows\System32\lagarith.dll

O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow Video Codec" . (.Pas de propriétaire - ffdshow VFW.) -- C:\Windows\System32\ff_vfw.dll

O52 - TDSD: \drivers.desc\"lagarith.dll"="Lagarith lossless codec [LAGS]" . (.Pas de propriétaire - Lagarith.) -- C:\Windows\System32\lagarith.dll

~ Scan Keys in 00mn 00s

 

 

 

---\\ ShareTools MSconfig StartupReg (O53)

O53 - SMSR:HKLM\...\startupreg\ASUS Screen Saver Protector [Key] . (.ASUS - AsScrPro.) -- C:\Windows\AsScrPro.exe

O53 - SMSR:HKLM\...\startupreg\RtHDVCpl [Key] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

O53 - SMSR:HKLM\...\startupreg\Skype [Key] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe

O53 - SMSR:HKLM\...\startupreg\Trend Micro Titanium [Key] . (...) -- C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe (.not file.)

O53 - SMSR:HKLM\...\startupreg\VizorHtmlDialog.exe [Key] . (...) -- C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe (.not file.)

~ Scan SMSR Keys in 00mn 00s

 

 

 

---\\ Microsoft Control Security Providers (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Windows Policies System (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3

O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0

O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1

O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1

O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0

O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0

~ Scan Keys in 00mn 00s

 

 

 

---\\ Microsoft Windows Policies Explorer (O56)

O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1

O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1

O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0

~ Scan Keys in 00mn 00s

 

 

 

---\\ Liste des Drivers Système (O58)

O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 13/07/2009 - 21:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088]

O58 - SDL:[MD5.DE8B9C3E0E09D918B394207F34AC16DD] - 08/07/2010 - 04:03:48 ---A- . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driver.) -- C:\Windows\System32\athrx.sys [2228736]

~ Scan Drivers in 00mn 00s

 

 

 

---\\ Liste des outils de nettoyage (O63)

O63 - Logiciel: ZHPDiag 1.31 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1

O63 - Logiciel: RSIT - (.random/random.)

~ Scan ADS in 00mn 00s

 

 

 

---\\ Liste des services Legacy (O64)

O64 - Services: CurCS - 02/07/2009 - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys (ASMMAP64) .(.ASUS - Memory mapping Driver.) - LEGACY_ASMMAP64

O64 - Services: CurCS - ??\??\???? - C:\Windows\System32\Drivers\aswFsBlk.sys (aswFsBlk) .(.AVAST Software - avast! File System Access Blocking Driver.) - LEGACY_ASWFSBLK

O64 - Services: CurCS - 21/08/2012 - C:\Windows\system32\drivers\aswMonFlt.sys (aswMonFlt) .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT

O64 - Services: CurCS - 21/08/2012 - C:\Windows\system32\Drivers\aswrdr2.sys (aswRdr) .(.AVAST Software - avast! WFP Redirect Driver.) - LEGACY_ASWRDR

O64 - Services: CurCS - ??\??\???? - C:\Windows\System32\Drivers\aswSnx.sys (aswSnx) .(.AVAST Software - avast! Virtualization Driver.) - LEGACY_ASWSNX

O64 - Services: CurCS - ??\??\???? - C:\Windows\System32\Drivers\aswSP.sys (aswSP) .(.AVAST Software - avast! self protection module.) - LEGACY_ASWSP

O64 - Services: CurCS - ??\??\???? - C:\Windows\System32\Drivers\aswTdi.sys (aswTdi) .(.AVAST Software - avast! TDI Filter Driver.) - LEGACY_ASWTDI

O64 - Services: CurCS - 26/07/2010 - C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys (ATKWMIACPIIO) .(.ASUS - ATK WMIACPI Utility.) - LEGACY_ATKWMIACPIIO

O64 - Services: CurCS - 07/09/2012 - C:\Windows\system32\drivers\mbam.sys (MBAMProtector) .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBAMPROTECTOR

O64 - Services: CurCS - 16/12/2011 - C:\Windows\System32\DRIVERS\psi_mf.sys (PSI) .(.Secunia - Secunia PSI Driver.) - LEGACY_PSI

O64 - Services: CurCS - ??\??\???? - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV

O64 - Services: CurCS - 16/04/2010 - C:\Windows\System32\DRIVERS\TurboB.sys - Turbo Boost UI Monitor driver (TurboB) .(...) - LEGACY_TURBOB

O64 - Services: CurCS - 01/07/2010 - C:\Program Files\Unlocker\UnlockerDriver5.sys - UnlockerDriver5 (UnlockerDriver5) .(...) - LEGACY_UNLOCKERDRIVER5

~ Scan Services in 00mn 01s

 

 

 

---\\ File Associations Shell Spawning (O67)

O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe

O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe

O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe

O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.evt> <evtfile>[HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe

O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <htmlfile>[HKCR\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe

~ Scan Keys in 00mn 00s

 

 

 

---\\ Start Menu Internet (O68)

O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe

O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe (.not file.)

O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (.not file.)

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.)

O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe (.not file.)

O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (.not file.)

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.)

O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe (.not file.)

O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (.not file.)

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.)

~ Scan Keys in 00mn 00s

 

 

 

---\\ Search Browser Infection (O69)

O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - Google

~ Scan Keys in 00mn 00s

 

 

 

---\\ Recherche des services démarrés par Svchost (O83)

O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192]

O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384]

O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384]

O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [236032]

O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [777728]

O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [853504]

O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [679424]

O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll [99328]

O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064]

O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792]

O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll [64512]

O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [359424]

O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows.) -- C:\Windows\System32\tapisrv.dll [316928]

O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll [680960]

O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\system32\wuaueng.dll [2428952]

O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll [849920]

O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688]

O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [569344]

O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [30720]

O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70656]

O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [156672]

O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll [67584]

O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [242688]

O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll [121856]

O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704]

O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104]

O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [1110016]

O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll [90624]

O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480]

O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [209920]

O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [44544]

O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864]

~ Scan Services in 00mn 00s

 

 

 

---\\ Recherche particuliere à la racine de certains dossiers (O84)

[MD5.90E1D86D979B92738A47D7072CB22DA8] [sPRF][06/07/2010] (...) -- C:\ProgramData\FullRemove.exe [131472]

~ Scan Files in 00mn 00s

 

 

 

---\\ Firewall Active Exception List (FirewallRules) (O87)

O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)

O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)

O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)

O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)

O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)

O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)

O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)

O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)

O87 - FAEL: "NetPres-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)

O87 - FAEL: "NetPres-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)

O87 - FAEL: "NetPres-WSD-In-UDP" |In - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)

O87 - FAEL: "NetPres-WSD-Out-UDP" |Out - None - P17 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)

O87 - FAEL: "NetPres-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)

O87 - FAEL: "NetPres-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Windows\system32\netproj.exe (.not file.)

O87 - FAEL: "{6D591AA7-13E4-4DBA-A0DA-4F3C26CC7A38}" | In - Public - P6 - FALSE | .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

O87 - FAEL: "{D4CAF9ED-9866-44D0-9D5E-E6E88ABF5662}" | In - Public - P17 - FALSE | .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

O87 - FAEL: "{06C4E370-81BA-41EE-A0C6-EE1D7EF1233C}" | In - Private - P6 - TRUE | .(.Dropbox, Inc. - Dropbox.) -- C:\Users\Claire\AppData\Roaming\Dropbox\bin\Dropbox.exe

O87 - FAEL: "{13BB5258-810D-4C3D-880C-FCA66198B288}" | In - Private - P17 - TRUE | .(.Dropbox, Inc. - Dropbox.) -- C:\Users\Claire\AppData\Roaming\Dropbox\bin\Dropbox.exe

O87 - FAEL: "{B1743ADA-C8D8-4078-9F7C-AE8BD557444B}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe

O87 - FAEL: "TCP Query User{5FD0BCAB-36CE-416D-9AC4-5CCFA5BDD5EA}C:\users\claire\appdata\roaming\dropbox\bin\dropbox.exe" | In - Public - P6 - TRUE | .(.Dropbox, Inc. - Dropbox.) -- C:\users\claire\appdata\roaming\dropbox\bin\dropbox.exe

O87 - FAEL: "UDP Query User{F0AAD2FF-1A40-497D-9C64-5351B70DFE8B}C:\users\claire\appdata\roaming\dropbox\bin\dropbox.exe" | In - Public - P17 - TRUE | .(.Dropbox, Inc. - Dropbox.) -- C:\users\claire\appdata\roaming\dropbox\bin\dropbox.exe

O87 - FAEL: "{90D8BAFE-42D4-4A53-B5EA-025D93108A8B}" | In - Private - P6 - TRUE | .(.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe

O87 - FAEL: "{A758B1B2-F46A-40DB-9C69-73EDE0623CF8}" | In - Private - P17 - TRUE | .(.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe

O87 - FAEL: "{5D723D63-62EB-4F84-8822-F7AAA7F5DBFF}" | In - Private - P6 - TRUE | .(.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe

O87 - FAEL: "{B1D44851-DF15-478C-BABF-4BD5E529D742}" | In - Private - P17 - TRUE | .(.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe

O87 - FAEL: "{D1350EF5-267C-41F7-91E5-6BAB0766F6BD}" |Out - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)

O87 - FAEL: "{EB1C799D-1F76-447B-810A-D0687CC73576}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)

O87 - FAEL: "{94F0A601-736A-455A-BE96-E11B42C93C1E}" |Out - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)

O87 - FAEL: "{D1ED4762-E31B-438A-A35D-C3DF69B4AEE5}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)

O87 - FAEL: "{D79D0784-2CE9-4CFF-97F3-30FE991C5A33}" | In - None - P6 - TRUE | .(.Apple Inc. - WebKit2WebProcess.exe.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe

O87 - FAEL: "{F290C33C-D9ED-4C03-A596-89344763E7C5}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O87 - FAEL: "{6C76AD5C-48DB-4F4E-ACBC-EA58265B0AA7}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe

O87 - FAEL: "{9AB9EAAC-3496-43DA-B189-A9090029E920}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe

O87 - FAEL: "{9571D067-8B27-4B72-97F4-F60D3BC25B0A}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe

O87 - FAEL: "{982C7F9B-10C1-40C3-A33A-6597B17BB6BE}" | In - None - P17 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files (x86)\iTunes\iTunes.exe

~ Scan Firewall in 00mn 01s

 

 

 

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)

SS - | Auto 23/09/2012 65192 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

SS - | Demand 17/10/2012 250808 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

SS - | Auto 30/11/2010 379520 | (AFBAgent) . (.ASUSTeK Computer Inc..) - C:\Windows\system32\FBAgent.exe

SS - | Auto 11/08/2012 55184 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

SS - | Auto 15/06/2009 84536 | (ASLDRService) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

SS - | Auto 24/05/2010 151552 | (Atheros Bt&Wlan Coex Agent) . (.Atheros.) - C:\Program Files (x86)\Atheros\Ath_CoexAgent.exe

SS - | Auto 25/11/2010 52896 | (AtherosSvc) . (.Atheros Commnucations.) - C:\Program Files (x86)\Atheros\Bluetooth Suite\adminservice.exe

SS - | Auto 15/12/2009 96896 | (ATKGFNEXSrv) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

SS - | Auto 21/08/2012 44808 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

SS - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe

SS - | Demand 19/03/2012 276248 | (cphs) . (.Intel Corporation.) - C:\Windows\SysWow64\IntelCpHeciSvc.exe

SS - | Auto 12/04/2011 135664 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

SS - | Demand 12/04/2011 135664 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

SS - | Disabled 12/04/2011 182768 | (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

SS - | Auto 149872 | (InstallClick) . (...) - C:\Program Files (x86)\RIFT Technologies\InstallClick Connector\installclick.exe

SS - | Demand 09/09/2012 936848 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe

SS - | Auto 07/09/2012 399432 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

SS - | Auto 07/09/2012 676936 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

SS - | Demand 16/10/2012 115168 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

SS - | Auto 28/01/2011 993896 | (NVSvc) . (.NVIDIA Corporation.) - C:\Windows\System32\nvvsvc.exe

SS - | Auto 07/02/2011 2009704 | (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

SS - | Auto 24/09/2012 1328736 | (Secunia PSI Agent) . (.Secunia.) - C:\Program Files (x86)\Secunia\PSI\PSIA.exe

SS - | Auto 24/09/2012 656480 | (Secunia Update Agent) . (.Secunia.) - C:\Program Files (x86)\Secunia\PSI\sua.exe

SS - | Disabled 13/07/2012 160944 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe

SS - | Auto 16/07/2012 2673064 | (TeamViewer7) . (.TeamViewer GmbH.) - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe

SS - | Auto 16/04/2010 134928 | (TurboBoost) . (.Intel® Corporation.) - C:\Program Files\Intel\TurboBoost\TurboBoost.exe

SS - | Auto 13/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe

SS - | Auto 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe

SS - | Auto 13/07/2009 27136 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe

~ Scan Services in 00mn 14s

 

 

 

End of the scan (1449 lines in 01mn 20s)(0)

[Apollo]

On demande sans cesse d'héberger les gros fichiers... sinon tu risques de planter le sujet, tout simplement.

 

Ton phénomène se passe sur Firefox? (et pas d'autre navigateur?)

 

Regarde dans tes extensions et modules s'il n'y a rien de louche et au cas où, vire ce qui est indésirable.

 

On fait enregistrer sur le bureau parce que certains outils ne peuvent pas être enregistrés ailleurs, tout simplement. C'est surtout le cas de ComboFix et de SFT.

 

Mais aussi pour ne jamais lancer d'outils depuis le net directement sinon ça va se mettre dans un temporaire, ce qui risque d'être très emmerdant parfois...

 

@++

Modifié le 17 octobre 2012 par Apollo