Seven déjà vérolé !

El_Desaparecido bonjour, et heureux de te croiser il y a bien longtemps depuis que chiquitine29 est plus la !! lol !!

tu n'as pas à t'excusé si tu interviens sur un sujet que j'ai pris , car je sais très bien que c'est pour la bonne cause !! @+

;)

Prend soin de toi Jacques & bonne suite ;)

Cédric .

"Re lorientale ,

Je ne pensais pas te vexer , c'est juste que quelques fois la "bétise" des gens est quelque peut navrante :( "

La tienne de bêtise elle est CON sternante...

voici le log mbam appès suppression:
Malwarebytes' Anti-Malware 1.50
www.malwarebytes.org

Version de la base de données: 5248

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

05/12/2010 19:20:45
mbam-log-2010-12-05 (19-20-45).txt

Type d'examen: Examen complet (C:\|)
Elément(s) analysé(s): 345814
Temps écoulé: 47 minute(s), 37 seconde(s)

Processus mémoire infecté(s): 1
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 4
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 11

Processus mémoire infecté(s):
c:\Windows\SysWOW64\mp43decd32.exe (Trojan.Tracur.S) -> 4692 -> Unloaded process successfully.

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LightScribeService32 (Trojan.Tracur.S) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{130779F6-5A9E-442B-9390-C305BF41DBA6} (Trojan.Tracur.S) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{130779F6-5A9E-442B-9390-C305BF41DBA6} (Trojan.Tracur.S) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\.fsharproj (Trojan.BHO) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
c:\Windows\System32\config\systemprofile\AppData\Roaming\SysWin (Trojan.Agent) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
c:\Windows\SysWOW64\mp43decd32.exe (Trojan.Tracur.S) -> Quarantined and deleted successfully.
c:\Windows\System32\mp43decd32.exe (Trojan.Tracur.S) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-032.dll (Trojan.Tracur.S) -> Quarantined and deleted successfully.
c:\$RECYCLE.BIN\s-1-5-21-1583531660-1144649996-3238233660-1001\$R26CBZ8.exe (Trojan.Tracur.S) -> Quarantined and deleted successfully.
c:\$RECYCLE.BIN\s-1-5-21-1583531660-1144649996-3238233660-1001\$RANDH23.exe (Trojan.Tracur.S) -> Quarantined and deleted successfully.
c:\$RECYCLE.BIN\s-1-5-21-1583531660-1144649996-3238233660-1001\$R9IWLQ7\patch.exe (Trojan.Tracur.S) -> Quarantined and deleted successfully.
c:\Windows\System32\api-ms-win-core-misc-l1-1-032.dll (Trojan.Tracur.S) -> Quarantined and deleted successfully.
c:\Windows\System32\hhsetup32.exe (Trojan.Tracur.S) -> Quarantined and deleted successfully.
c:\Windows\System32\config\systemprofile\AppData\Roaming\SysWin\lsass.exe (Trojan.Tracur.S) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\hhsetup32.exe (Trojan.Tracur.S) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\SysWin\lsass.exe (Trojan.Tracur.S) -> Quarantined and deleted successfully.


Quant à ad-remover j'avais tenté de l'installer mais il ne s'exécute pas ou 7 64 bits . !

bon je te demandais de faire ad-remover en mode nettoyage en cliquand sur nettoyer , c'est pas très grave mais c'est une perte de temps le savais se qu'il y avait , donc tu vas relancer ad-remover et faire le nettoyage et puis tu posteras un zhpdiag pour contrôle , merci

1) tu relances ad-remover

Double clique sur ad-remover
à l'écran qui apparait, clique sur "Nettoyer".
Laisse travailler l'outil.
Poste le rapport qui s'affiche à l'écran quand l'analyse est terminée.



( Le rapport est sauvegardé sous C:\Ad-report-clean.log )


2) postes un zhpdiag de contrôle

Ouvre ce lien et télécharge ZHPDiag :

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

cliques sur télécharger "celui du bas"

ou directement ici: https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

et si problème : http://www.premiumorange.com/zeb-help-process/zhpdiag.html

tu vas en bas de la page et tu télécharges le premier tu et tu dézippes

ou lien direct http://www.moncompteur.com/compteurclick.php?idLink=18026

tu décompresses et tu lances !!


Enregistres le sur ton Bureau.

Une fois le téléchargement achevé

pour XP, double-clique sur ZHPDiag

pour Vista,et seven tu fais un clic droit sur l'icône et exécute en tant qu'administrateur.

N'oublies pas de cocher la case qui permet de mettre un raccourci sur le Bureau.

/|\ l'outil a créé 2 icônes ZHPDiag et ZHPFix.

Double cliques sur le raccourci ZHPDiag sur ton Bureau pour XP sinon clique droit et en tant que administrateur !!

Cliques sur la loupe pour lancer l'analyse.

si tu as un message te demandant la validation pour SIGCHECK acceptes avec OK cela est pour nous faire un rapport plus complet et pouvoir en faire une lecture plus approfondis

Laisses l'outil travailler, il peut être assez long

A la fin de l'analyse,clique sur l'appareil photo et enregistre le rapport sur ton Bureau.


Fermes ZHPDiag en fin d'analyse.


Pour me le transmettre clique sur ce lien :

http://www.cijoint.fr/index.php


Clique sur Parcourir et cherche le fichier C:\Documents and settings\le_nom_de_ta_session\bureau\.ZHPDiag.txt

ou directement en choisissant bureau et ZHPDiag.txt clique dessus

Clique sur Ouvrir.

Clique sur "Cliquez ici pour déposer le fichier".

Un lien de cette forme :

http://www.cijoint.fr/cjlink.php?file=cj200905/cib7SU.txt

est ajouté dans la page.

Copie ce lien dans ta réponse.


et si problème passe par celui ci : http://cjoint.com/

as tu passé ad-remover en mode nettoyage , car pas vu de rapport et la sur le zhpdiag il y a des choses que normalement il devrait supprimer ???

tu utilises quoi comme protection anti-virus car la c'est pas claire ??
car je vois bien des chose sur norton mais j'ai pas l'impression que se soit une anti-virus installer et actif en temps réel sur ton pc

bon tu fais cela et tu me répond !!

. Copie les lignes suivantes en GRAS



M2 - MFEP: prefs.js [syberia - egfu4trz.default\{4fbe8f9b-2615-49da-819f-9fb384598ee8}] [xul] XUL Cache v1.0 (.Canonical Ltd..) => Infection BT
O43 - CFD: 11/30/2010 - 9:18:34 PM ----D- C:\ProgramData\Wild Tangent => Infection BT (WildTangent.Spy)
MBRFix



. Lance ZHPFix de Nicolas Coolman qui se trouve sur ton bureau
. Pour XP, double-clique sur ZHPFix
. pour Vista et seven, faire un clic droit sur l'icône et exécute en tant qu'administrateur.
. Clique sur l'icone représentant la lettre H (« coller les lignes Helper »)

Dans l'encadré principal tu verras donc les lignes que tu as copié précédemment apparaitrent .

Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.

. cliques sur OK
. Clique sur « Tous », puis sur « Nettoyer »
. Copie/colle la totalité du rapport dans ta prochaine réponse
tu le trouveras dans le dossier de zhpdiag dans program files sous le nom de ZHPFixReport

Voici le dernier rapport :
Rapport de ZHPDiag v1.27.139 par Nicolas Coolman, Update du 04/12/2010
Run by syberia at 12/5/2010 10:25:57 PM
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Contact : nicolascoolman@yahoo.fr

---\\ Web Browser
MSIE: Internet Explorer v8.0.7600.16385
MFIE: Mozilla Firefox v3.6.12 (fr) (Defaut)
GCIE: Google Chrome v

---\\ System Information
Windows 7 Home Premium Edition, 64-bit (Build 7600)
Processor: AMD64 Family 16 Model 4 Stepping 3, AuthenticAMD
Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 4095.3 MB (74% free)
System drive C: has 844 GB (91%) free of 919 GB

---\\ Logged in mode
Computer Name: SYBERIA-HP
User Name: syberia
All Users Names: syberia, HomeGroupUser$, Administrateur,
Unselected Option: O1,O45,O61,O62,O65,O82
Logged in as Administrator

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 844 Go of 919 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 1 Go of 13 Go)
E:\ CD-ROM drive (Not Inserted)
F:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)


---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableRegistryTools: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] NoDispScrSavPage: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified


---\\ Recherche particulière de fichiers génériques
[MD5.9AAAEC8DAC27AA17B053E6352AD233AE] - (.Microsoft Corporation - Explorateur Windows.) (.10/31/2009 7:34:59 AM.) -- C:\Windows\Explorer.exe [2870272]
[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.7/14/2009 2:14:45 AM.) -- C:\Windows\System32\Wininit.exe [96256]


---\\ Processus lancés
[MD5.8E643FD5F38FA9A2EDA27268A1E9499F] - (.Symantec Corporation - Symantec Service Framework.) -- C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\ccSvcHst.exe [126392]
[MD5.554A50B5310E702029D3A675459108FF] - (.Hewlett-Packard - hpsysdrv.) -- C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe [62768]
[MD5.63A648C5FEB5DE641E1174ACB6CF78C6] - (.Pas de propriétaire - SmartMenu.) -- C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [568888]
[MD5.F599794A7598CD430E345C7E3FE8A154] - (.Sonix - CameraMonitor Application.) -- C:\Windows\vphc600.exe [344064]
[MD5.5945FF26096AA0E2878297C75A78A46D] - (.SPAMfighter ApS - SPAMfighter Agent.) -- C:\Program Files (x86)\Fighters\SPAMfighter\sfagent.exe [821384]
[MD5.869513CA8428F231C7CAC62A6F9B974A] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [274608]
[MD5.93DB1FF92B03D24738A71E6E4992DFD3] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [248552]
[MD5.E1AB298BAFC8ECCA8C322A29C5FDC68C] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [912344]
[MD5.6F7ECB12B6782A2122DEBE9EC9DF2C5D] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [16856]
[MD5.97ADB2078EF32B0C2CC47FD5A7703D40] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [620032]
[MD5.AE22197774B91282D1744EF9C4B46CF2] - (.RealNetworks, Inc. - RealPlayer.) -- C:\Program Files (x86)\Real\RealPlayer\RealPlay.exe [491168]


---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2)
P2 - FPN:Firefox Plugin Navigator . (.Oracle - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npdeployJava1.dll
P2 - FPN:Firefox Plugin Navigator . (.RealNetworks - 1.2.0.1256.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npgcplug.dll
P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npnul32.dll
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.0.0.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppl3260.dll
P2 - FPN:Firefox Plugin Navigator . (.RealNetworks - Allows browsing on RealArcade sites with Mozilla browsers..) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npracplug.dll
P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nprjplug.dll
P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - 12.0.1.609.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nprpjplug.dll
P2 - FPN:Firefox Plugin Navigator . (.Nullsoft, Inc. - Winamp Application Detector.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npwachk.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@google.com/npPicasa3,version=3.0.0] - (.Google, Inc. - Picasa plugin.) -- C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Oracle - Next Generation Java Plug-in 1.6.0_21 for Mozilla browsers.) -- C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.50917.0.) -- c:\Program Files (x86)\Microsoft Silverlight\4.0.50917.0\npctrl.dll
P2 - FPN: [HKLM] [@real.com/nppl3260;version=12.0.1.609] - (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll
P2 - FPN: [HKLM] [@real.com/npracplug;version=1.0.0.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files (x86)\Real\RealArcade\Plugins\Mozilla\npracplug.dll (.not file.)
P2 - FPN: [HKLM] [@real.com/nprjplug;version=12.0.1.609] - (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll
P2 - FPN: [HKLM] [@real.com/nprphtml5videoshim;version=12.0.1.609] - (.RealNetworks, Inc. - RealPlayer(tm) HTML5VideoShim Plug-In.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
P2 - FPN: [HKLM] [@real.com/nprpjplug;version=12.0.1.609] - (.RealNetworks, Inc. - 12.0.1.609.) -- C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=1.1.5] - (.the VideoLAN Team - Version 1.1.5, copyright 1996-2010 The VideoLAN Team<br><a href="http:.) -- C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
M2 - MFEP: prefs.js [syberia - egfu4trz.default\abhere2@moztw.org] [] Add Bookmark Here ² v3.6.20101102 (.yuoo2k.)
M2 - MFEP: prefs.js [syberia - egfu4trz.default\deezermsn@akryus.net] [] DeezerMSN v3.6.20101102 (.Bandikaz.)
M2 - MFEP: prefs.js [syberia - egfu4trz.default\djziggy@gmail.com] [] LavaFox V1-Blue v1.2.3 (.Zigboom.)
M2 - MFEP: prefs.js [syberia - egfu4trz.default\forcetls@sid.stamm] [] Force-TLS v2.0 (.Sid Stamm.)
M2 - MFEP: prefs.js [syberia - egfu4trz.default\{4fbe8f9b-2615-49da-819f-9fb384598ee8}] [xul] XUL Cache v1.0 (.Canonical Ltd..)
M2 - MFEP: prefs.js [syberia - egfu4trz.default\{64161300-e22b-11db-8314-0800200c9a66}] [] Speed Dial v0.9.5.6 (.Josep del Rio.)
M2 - MFEP: prefs.js [syberia - egfu4trz.default\{73a6fe31-595d-460b-a920-fcc0f8843232}] [noscript] NoScript v2.0.7 (.Giorgio Maone.)
M2 - MFEP: prefs.js [syberia - egfu4trz.default\{9D7B21FA-0991-472C-8F8E-2CD6CC1CB7BC}] [] LibertyGuard v2.0.7 (.Liberty Reserve.)
M2 - MFEP: prefs.js [syberia - egfu4trz.default\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}] [WOT] WOT v20100908 (.WOT Services Oy.)
M2 - MFEP: prefs.js [syberia - egfu4trz.default\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}] [dwhelper] DownloadHelper v4.8.1 (.Michel Gutierrez.)
M2 - MFEP: prefs.js [syberia - egfu4trz.default\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}] [adblockplus] Adblock Plus v1.3.1 (.Wladimir Palant.)


---\\ Internet Explorer, Démarrage,Recherche,URSearchHook (R0,R1,R3)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (8.00.7600.16385 (win7_rtm.090713-1255)) -- C:\Windows\SysWOW64\ieframe.dll


---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=userinit.exe,
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe


---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} . (.Symantec Corporation - coIEPlugIn.) -- C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} . (.Symantec Corporation - IPS Browser Helper DLL.) -- C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\IPSBHO.DLL
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll


---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} . (.Symantec Corporation - coIEPlugIn.) -- C:\Program Files (x86)\Norton Internet Security\Engine\17.8.0.5\coIEPlg.dll


---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [NortonOnlineBackupReminder] . (.Symantec Corporation - Norton Online Backup Service.) -- C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NOBuActivation.exe
O4 - HKLM\..\Run: [Easybits Recovery] . (.EasyBits Software AS - Pas de description.) -- C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
O4 - HKLM\..\Run: [sfagent] . (.SPAMfighter ApS - SPAMfighter Agent.) -- C:\Program Files (x86)\Fighters\SPAMfighter\sfagent.exe
O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKLM\..\Wow6432Node\Run: [NortonOnlineBackupReminder] . (.Symantec Corporation - Norton Online Backup Service.) -- C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NOBuActivation.exe
O4 - HKLM\..\Wow6432Node\Run: [Easybits Recovery] . (.EasyBits Software AS - Pas de description.) -- C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
O4 - HKLM\..\Wow6432Node\Run: [sfagent] . (.SPAMfighter ApS - SPAMfighter Agent.) -- C:\Program Files (x86)\Fighters\SPAMfighter\sfagent.exe
O4 - HKLM\..\Wow6432Node\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-21-1583531660-1144649996-3238233660-1001\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (.not file.)
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (.not file.)


---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\syberia\Desktop\FrostWire 4.20.9.lnk . (.FrostWire Group.) -- C:\Program Files (x86)\FrostWire\FrostWire.exe
O4 - Global Startup: C:\Documents And Settings\syberia\Desktop\Luxor 5th Passage.lnk . (.Pas de propriétaire.) -- C:\Users\syberia\Desktop\JEUX\Luxor 5th Passage\Luxor - 5th Passage.exe
O4 - Global Startup: C:\Documents And Settings\syberia\Desktop\Musique -.lnk . (.Pas de propriétaire.) -- C:\Users\syberia\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms
O4 - Global Startup: C:\Documents And Settings\syberia\Desktop\Ordinateur.lnk - Clé orpheline
O4 - Global Startup: C:\Documents And Settings\syberia\Desktop\syberia.lnk . (.Pas de propriétaire.) -- C:\Users\syberia
O4 - Global Startup: C:\Users\syberia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\syberia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\syberia\Desktop\FrostWire 4.20.9.lnk . (.FrostWire Group.) -- C:\Program Files (x86)\FrostWire\FrostWire.exe
O4 - Global Startup: C:\Users\syberia\Desktop\Luxor 5th Passage.lnk . (.Pas de propriétaire.) -- C:\Users\syberia\Desktop\JEUX\Luxor 5th Passage\Luxor - 5th Passage.exe
O4 - Global Startup: C:\Users\syberia\Desktop\Musique -.lnk . (.Pas de propriétaire.) -- C:\Users\syberia\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms
O4 - Global Startup: C:\Users\syberia\Desktop\Ordinateur.lnk - Clé orpheline
O4 - Global Startup: C:\Users\syberia\Desktop\syberia.lnk . (.Pas de propriétaire.) -- C:\Users\syberia
O4 - Global Startup: C:\Users\syberia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\FrostWire 4.20.9.lnk . (.FrostWire Group.) -- C:\Program Files (x86)\FrostWire\FrostWire.exe
O4 - Global Startup: C:\Users\syberia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\syberia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Users\syberia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Thunderbird.lnk . (.Mozilla Messaging.) -- C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
O4 - Global Startup: C:\Users\syberia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Play HP Games.lnk . (.Pas de propriétaire.) -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsole-wt.exe (.not file.)
O4 - Global Startup: C:\Users\syberia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\RealArcade.lnk . (.Pas de propriétaire.) -- C:\Program Files (x86)\Real\RealArcade\RNArcade.exe (.not file.)
O4 - Global Startup: C:\Users\syberia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Samsung New PC Studio.lnk . (.Samsung Electronics Co., Ltd..) -- C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSGuide.exe
O4 - Global Startup: C:\Users\syberia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - Clé orpheline
O4 - Global Startup: C:\Users\syberia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Winamp.lnk . (.Nullsoft, Inc..) -- C:\Program Files (x86)\Winamp\winamp.exe
O4 - Global Startup: C:\Users\syberia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - Clé orpheline
O4 - Global Startup: C:\Users\syberia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk . (.BitTorrent, Inc..) -- C:\Program Files (x86)\uTorrent\uTorrent.exe


---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: Add to Google Photos Screensa&ver . (.Google Inc. - Google Photos Screensaver.) -- C:\Windows\system32\GPhotos.scr


---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL


---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{04EA7BF5-591B-43B2-A575-4701BBF147E6}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{D8746CA5-ED89-42B4-91CC-5CDB94BCD9FF}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{04EA7BF5-591B-43B2-A575-4701BBF147E6}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{D8746CA5-ED89-42B4-91CC-5CDB94BCD9FF}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{04EA7BF5-591B-43B2-A575-4701BBF147E6}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{D8746CA5-ED89-42B4-91CC-5CDB94BCD9FF}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1


---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.


---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: (ezSharedSvc) . (.EasyBits Software AS - Shared EasyBits services for Windows.) - C:\Windows\System32\ezSharedSvcHost.exe
O23 - Service: (HP Health Check Service) . (.Hewlett-Packard - HP Health Check Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: C:\Program Files (x86)\Nero\Update\NASvc.exe (NAUpdate) . (.Nero AG - NeroUpdate.) - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: (NIS) - Clé orpheline
O23 - Service: (nvsvc) - Clé orpheline
O23 - Service: (SPAMfighter Update Service) . (.SPAMfighter ApS - SPAMfighter Update Service.) - C:\Program Files (x86)\Fighters\SPAMfighter\sfus.exe
O23 - Service: (Suite Service) . (.SPAMfighter ApS - Fighter Suite Service.) - C:\Program Files (x86)\Fighters\FighterSuiteService.exe


---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Pas de propriétaire - Pas de description.) - (.not file.)


---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GlaryInitialize.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\HPCeeScheduleForsyberia.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\PCDRScheduledMaintenance.job
[MD5.00000000000000000000000000000000] [APT] [CLMLSvc] (.Pas de propriétaire.) -- c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Music\Kernel\CLML\CLMLSvc.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [DVDAgent] (.Pas de propriétaire.) -- c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe (.not file.)
[MD5.45AD8AA455CA1535C57CC3DD71A60A7A] [APT] [GlaryInitialize] (.Glarysoft Ltd.) -- C:\Program Files (x86)\Glary Utilities\initialize.exe
[MD5.BEAEC745256D3158495FEE10BA673E7C] [APT] [HPCeeScheduleForsyberia] (.Hewlett-Packard.) -- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
[MD5.F05DBDB807DE2DB50CA2C7B0286FE7B5] [APT] [PCDRScheduledMaintenance] (.PC-Doctor, Inc..) -- C:\Program Files\PC-Doctor for Windows\pcdrcui.exe
[MD5.BDEE1AEE61C63AB26A8A4F6B760B7388] [APT] [RealUpgradeLogonTaskS-1-5-21-1583531660-1144649996-3238233660-1001] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
[MD5.BDEE1AEE61C63AB26A8A4F6B760B7388] [APT] [RealUpgradeScheduledTaskS-1-5-21-1583531660-1144649996-3238233660-1001] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
[MD5.13C1807C9E4C5021EF47B6807A6122E5] [APT] [RecoveryCDWin7] (.Pas de propriétaire.) -- C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe
[MD5.13C1807C9E4C5021EF47B6807A6122E5] [APT] [Registration] (.Pas de propriétaire.) -- C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe
[MD5.C4587F33EF0EB6398968E191DDCCE58E] [APT] [syberia] (.Nero AG.) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe
[MD5.76D94909D7CD006062F29DA7DD5112F2] [APT] [syberia NBAgent 5 4] (.Nero AG.) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe
[MD5.F09ECABC38854A22C94B223C2ED5C25D] [APT] [{0EFACB61-0BE4-4CE6-B9FE-9736BA136F07}] (.Pas de propriétaire.) -- C:\Users\syberia\Downloads\UXTheme Multi-Patcher 7.1.exe
[MD5.FEDA99C9757421CD8295C51FCFBCD5DB] [APT] [{3919DD6D-CE0B-4DD0-B57C-ADD30521E970}] (.Ahead Software AG.) -- C:\Program Files (x86)\Ahead\Nero StartSmart\NeroStartSmart.exe
[MD5.F09ECABC38854A22C94B223C2ED5C25D] [APT] [{43A023A2-2A02-46EC-ACA8-4FFE5AE65B5A}] (.Pas de propriétaire.) -- C:\Users\syberia\Downloads\UXTheme Multi-Patcher 7.1.exe
[MD5.E1AB298BAFC8ECCA8C322A29C5FDC68C] [APT] [{61AD09C9-D808-4BC6-A95F-18D573F6972D}] (.Mozilla Corporation.) -- c:\program files (x86)\mozilla firefox\firefox.exe
[MD5.FEDA99C9757421CD8295C51FCFBCD5DB] [APT] [{6727E500-0D95-466D-A622-3450497256CE}] (.Ahead Software AG.) -- C:\Program Files (x86)\Ahead\Nero StartSmart\NeroStartSmart.exe
[MD5.6A5DA85D0D2FD7F959F2C4C804171103] [APT] [{79DE977D-1E68-48B7-846E-758444ACDB88}] (.Google Inc..) -- C:\Program Files (x86)\Google\Picasa3\Picasa3.exe
[MD5.9433D5AC20EDCF7D39C454FE2F67B43D] [APT] [{8F865095-FE86-4BAC-91C5-E31D75D35816}] (.Indigo Rose Corporation.) -- C:\Windows\iun6002.exe
[MD5.893714FF41B635483C4ECB14F38F4A83] [APT] [{C667EE56-EAD0-4CA5-BDED-BF2D45954D22}] (.Pas de propriétaire.) -- C:\Users\syberia\Downloads\Luxor 4\Luxor4.exe
[MD5.DACB699B2072D5C347C3AB67E046EA37] [APT] [PC Health Analysis] (.Hewlett-Packard.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
[MD5.DACB699B2072D5C347C3AB67E046EA37] [APT] [PC Tuneup] (.Hewlett-Packard.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe


---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Oracle - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\regutils.dll
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11CF-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.1 r53.) -- C:\Windows\SysWOW64\Macromed\Flash\Flash10h.ocx


---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (BHDrvx64) . (.Symantec Corporation - BASH Driver.) - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\BASHDefs\20101123.003\BHDrvx64.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys
O41 - Driver: (ccHP) . (.Symantec Corporation - Common Client Hash Provider Driver.) - C:\Windows\system32\drivers\NISx64\1108000.005\ccHPx64.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (eeCtrl) . (.Symantec Corporation - Symantec Eraser Control Driver.) - C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
O41 - Driver: (IDSVia64) . (.Symantec Corporation - IDS Core Driver.) - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\IPSDefs\20101130.001\IDSvia64.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\DRIVERS\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\system32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: (SRTSPX) . (.Symantec Corporation - Symantec AutoProtect.) - C:\Windows\system32\drivers\NISx64\1108000.005\SRTSPX64.sys
O41 - Driver: (SymIRON) . (.Symantec Corporation - Iron Driver.) - C:\Windows\system32\drivers\NISx64\1108000.005\Ironx64.sys
O41 - Driver: (SYMTDIv) . (.Symantec Corporation - Network Dispatch Driver.) - C:\Windows\system32\Drivers\NISx64\1108000.005\SYMTDIV.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\system32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys


---\\ Logiciels installés (O42)
O42 - Logiciel: 7-Zip 9.20 - (.Pas de propriétaire.) [HKLM] -- 7-Zip
O42 - Logiciel: AMD USB Filter Driver - (.Advanced Micro Devices, Inc..) [HKLM] -- {5BDA2F58-1F21-4D10-9910-92B01EBCC958}
O42 - Logiciel: ActiveCheck component for HP Active Support Library - (.Hewlett-Packard.) [HKLM] -- {254C37AA-6B72-4300-84F6-98A82419187E}
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader X - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA0000000001}
O42 - Logiciel: Arc Aether Anomalies - (.Pas de propriétaire.) [HKLM] -- ArcAetherAnomalies
O42 - Logiciel: Chompster 3D - PacMan Returns Again! 1.5 - (.Pas de propriétaire.) [HKLM] -- Chompster3d1.5
O42 - Logiciel: ConvertHelper 2.2 - (.DownloadHelper.) [HKLM] -- {27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1
O42 - Logiciel: CyberLink DVD Suite Deluxe - (.CyberLink Corp..) [HKLM] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: CyberLink DVD Suite Deluxe - (.CyberLink Corp..) [HKLM] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: DFX for Windows Media Player - (.Power Technology.) [HKLM] -- DFX for Windows Media Player
O42 - Logiciel: DVD Menu Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM] -- InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}
O42 - Logiciel: DVD Menu Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM] -- {FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}
O42 - Logiciel: Détection de l'application Winamp - (.Nullsoft, Inc.) [HKCU] -- Winamp Detect
O42 - Logiciel: Earthworm Jim - (.GameFabrique.) [HKLM] -- Earthworm Jim_is1
O42 - Logiciel: FrostWire 4.20.9 - (.FrostWire, LLC.) [HKLM] -- FrostWire
O42 - Logiciel: Glary Utilities 2.30.0.1066 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1
O42 - Logiciel: HP Advisor - (.Hewlett-Packard.) [HKLM] -- {40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}
O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM] -- {07FA4960-B038-49EB-891B-9F95930AA544}
O42 - Logiciel: HP MediaSmart DVD - (.Hewlett-Packard.) [HKLM] -- InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}
O42 - Logiciel: HP MediaSmart DVD - (.Hewlett-Packard.) [HKLM] -- {DCCAD079-F92C-44DA-B258-624FC6517A5A}
O42 - Logiciel: HP MediaSmart Music - (.Hewlett-Packard.) [HKLM] -- InstallShield_{91A34181-9FAD-43AB-A35F-E7A8945B7E1C}
O42 - Logiciel: HP MediaSmart Music - (.Hewlett-Packard.) [HKLM] -- {91A34181-9FAD-43AB-A35F-E7A8945B7E1C}
O42 - Logiciel: HP MediaSmart Photo - (.Hewlett-Packard.) [HKLM] -- InstallShield_{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF}
O42 - Logiciel: HP MediaSmart Photo - (.Hewlett-Packard.) [HKLM] -- {6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF}
O42 - Logiciel: HP MediaSmart Video - (.Hewlett-Packard.) [HKLM] -- InstallShield_{D12E3E7F-1B13-4933-A915-16C7DD37A095}
O42 - Logiciel: HP MediaSmart Video - (.Hewlett-Packard.) [HKLM] -- {D12E3E7F-1B13-4933-A915-16C7DD37A095}
O42 - Logiciel: HP Setup - (.Hewlett-Packard.) [HKLM] -- {F5C7FD70-2C0A-401E-95E9-916363567DDA}
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {DE77FE3F-A33D-499A-87AD-5FC406617B40}
O42 - Logiciel: HPAsset component for HP Active Support Library - (.Hewlett-Packard.) [HKLM] -- {669D4A35-146B-4314-89F1-1AC3D7B88367}
O42 - Logiciel: High-Definition Video Playback - (.Nero AG.) [HKLM] -- {237CCB62-8454-43E3-B158-3ACD0134852E}
O42 - Logiciel: IZArc 4.1.2 - (.Ivan Zahariev.) [HKLM] -- {97C82B44-D408-4F14-9252-47FC1636D23E}_is1
O42 - Logiciel: Internet TV pour Windows Media Center - (.Microsoft Corporation.) [HKLM] -- {9D318C86-AF4C-409F-A6AC-7183FF4CF424}
O42 - Logiciel: Java(TM) 6 Update 21 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216021FF}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM] -- InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}
O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243}
O42 - Logiciel: LightScribe System Software - (.LightScribe.) [HKLM] -- {FA8BFB25-BF48-4F8B-8859-B30810745190}
O42 - Logiciel: Lotus SmartSuite Version 9.5 - (.Pas de propriétaire.) [HKLM] -- SmartSuite V99.0
O42 - Logiciel: Luxor 5th Passage 1.00 - (.Pas de propriétaire.) [HKLM] -- Luxor 5th Passage 1.00
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Magic Desktop - (.EasyBits Software AS.) [HKLM] -- EasyBits Magic Desktop
O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft SQL Server Compact 3.5 SP1 English - (.Microsoft Corporation.) [HKLM] -- {E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {3B160861-7250-451E-B5EE-8B92BF30A710}
O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}
O42 - Logiciel: Movie Theme Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM] -- InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}
O42 - Logiciel: Movie Theme Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM] -- {3023EBDA-BF1B-4831-B347-E5018555F26E}
O42 - Logiciel: Mozilla Firefox (3.6.12) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.12)
O42 - Logiciel: Mozilla Thunderbird (3.1.6) - (.Mozilla.) [HKLM] -- Mozilla Thunderbird (3.1.6)
O42 - Logiciel: MusicStation - (.Hewlett-Packard.) [HKLM] -- {E74E7F63-E70F-43f2-873F-35FB66F263B2}
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {E10DB5DA-E576-40EA-A7FC-1CB2A7B283A6}
O42 - Logiciel: Nero 10 Menu TemplatePack Basic - (.Nero AG.) [HKLM] -- {63AA3EAB-23BB-48B2-9AD0-44F878075604}
O42 - Logiciel: Nero 10 Movie ThemePack Basic - (.Nero AG.) [HKLM] -- {F5CB822F-B365-43D1-BCC0-4FDA1A2017A7}
O42 - Logiciel: Nero BackItUp 10 - (.Nero AG.) [HKLM] -- {68AB6930-5BFF-4FF6-923B-516A91984FE6}
O42 - Logiciel: Nero BackItUp 10 Help (CHM) - (.Nero AG.) [HKLM] -- {08C8666B-C502-4AB3-B4CB-D74AC42D14FE}
O42 - Logiciel: Nero BurnRights 10 - (.Nero AG.) [HKLM] -- {943CFD7D-5336-47AF-9418-E02473A5A517}
O42 - Logiciel: Nero BurnRights 10 Help (CHM) - (.Nero AG.) [HKLM] -- {555868C6-49FB-484F-BB43-8980651A1B00}
O42 - Logiciel: Nero Burning ROM 10 - (.Nero AG.) [HKLM] -- {7A5D731D-B4B3-490E-B339-75685712BAAB}
O42 - Logiciel: Nero BurningROM 10 Help (CHM) - (.Nero AG.) [HKLM] -- {9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}
O42 - Logiciel: Nero Control Center 10 - (.Nero AG.) [HKLM] -- {6DFB899F-17A2-48F0-A533-ED8D6866CF38}
O42 - Logiciel: Nero ControlCenter 10 Help (CHM) - (.Nero AG.) [HKLM] -- {523B2B1B-D8DB-4B41-90FF-C4D799E2758A}
O42 - Logiciel: Nero Core Components 10 - (.Nero AG.) [HKLM] -- {2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}
O42 - Logiciel: Nero CoverDesigner 10 - (.Nero AG.) [HKLM] -- {FCF00A6E-FB58-477A-ABE9-232907105521}
O42 - Logiciel: Nero CoverDesigner 10 Help (CHM) - (.Nero AG.) [HKLM] -- {C3273C55-E1E4-41FF-8D69-0158090DB8D8}
O42 - Logiciel: Nero DiscSpeed 10 - (.Nero AG.) [HKLM] -- {34490F4E-48D0-492E-8249-B48BECF0537C}
O42 - Logiciel: Nero DiscSpeed 10 Help (CHM) - (.Nero AG.) [HKLM] -- {C18A0418-442A-4186-AF98-D08F5054A2FC}
O42 - Logiciel: Nero Dolby Files 10 - (.Nero AG.) [HKLM] -- {C3580AC4-C827-4332-B935-9A282ED5BB97}
O42 - Logiciel: Nero Express 10 - (.Nero AG.) [HKLM] -- {70550193-1C22-445C-8FA4-564E155DB1A7}
O42 - Logiciel: Nero Express 10 Help (CHM) - (.Nero AG.) [HKLM] -- {33643918-7957-4839-92C7-EA96CB621A98}
O42 - Logiciel: Nero InfoTool 10 - (.Nero AG.) [HKLM] -- {F412B4AF-388C-4FF5-9B2F-33DB1C536953}
O42 - Logiciel: Nero InfoTool 10 Help (CHM) - (.Nero AG.) [HKLM] -- {66049135-9659-4AAD-9169-9CCA269EBB3E}
O42 - Logiciel: Nero MediaHub 10 - (.Nero AG.) [HKLM] -- {1F7FB68F-52F6-46A3-B42F-38CE46295AE5}
O42 - Logiciel: Nero MediaHub 10 Help (CHM) - (.Nero AG.) [HKLM] -- {F467862A-D9CA-47ED-8D81-B4B3C9399272}
O42 - Logiciel: Nero Multimedia Suite 10 - (.Nero AG.) [HKLM] -- {277C1559-4CF7-44FF-8D07-98AA9C13AABD}
O42 - Logiciel: Nero Recode 10 - (.Nero AG.) [HKLM] -- {8ECEC853-5C3D-4B10-B5C7-FF11FF724807}
O42 - Logiciel: Nero Recode 10 Help (CHM) - (.Nero AG.) [HKLM] -- {DB7C1D4A-08BA-4C7E-A8AA-B7F9BB372DCF}
O42 - Logiciel: Nero RescueAgent 10 - (.Nero AG.) [HKLM] -- {E337E787-CF61-4B7B-B84F-509202A54023}
O42 - Logiciel: Nero RescueAgent 10 Help (CHM) - (.Nero AG.) [HKLM] -- {92E25238-61A3-4ACD-A407-3C480EEF47A7}
O42 - Logiciel: Nero SoundTrax 10 - (.Nero AG.) [HKLM] -- {E1EE5339-5D32-458F-BAAB-B19F6301BCE2}
O42 - Logiciel: Nero SoundTrax 10 Help (CHM) - (.Nero AG.) [HKLM] -- {16987E99-C95C-4513-9239-7B44A0A71DB5}
O42 - Logiciel: Nero StartSmart 10 - (.Nero AG.) [HKLM] -- {F61D489E-6C44-49AC-AD02-7DA8ACA73A65}
O42 - Logiciel: Nero StartSmart 10 Help (CHM) - (.Nero AG.) [HKLM] -- {F6117F9C-ADB5-4590-9BE4-12C7BEC28702}
O42 - Logiciel: Nero Update - (.Nero AG.) [HKLM] -- {65BB0407-4CC8-4DC7-952E-3EEFDF05602A}
O42 - Logiciel: Nero Vision 10 - (.Nero AG.) [HKLM] -- {9A4297F3-2A51-4ED9-92CA-4BCB8380947E}
O42 - Logiciel: Nero Vision 10 Help (CHM) - (.Nero AG.) [HKLM] -- {329411A0-19F3-4740-874F-17400B126F27}
O42 - Logiciel: Nero WaveEditor 10 - (.Nero AG.) [HKLM] -- {EDCDFAD5-DF80-4600-A493-E9DAD6810230}
O42 - Logiciel: Nero WaveEditor 10 Help (CHM) - (.Nero AG.) [HKLM] -- {7A295D8F-484B-4FFB-89AB-C1FD497591FE}
O42 - Logiciel: Neuf - Kit de connexion - (.Neuf.) [HKLM] -- Neuf_Kit
O42 - Logiciel: Norton Internet Security - (.Symantec Corporation.) [HKLM] -- NIS
O42 - Logiciel: Norton Online Backup - (.Symantec.) [HKLM] -- {C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}
O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM] -- {69B040CC-E9B1-4769-950E-87786C9E16AD}
O42 - Logiciel: Philips SPC 600NC PC Camera - (.Pas de propriétaire.) [HKLM] -- {E3F26FE7-4BFF-4740-A5C5-A7DC32ED14BD}
O42 - Logiciel: Philips VLounge - (.ArcSoft.) [HKLM] -- {269A4095-DB55-4D35-8FD0-39957D26BEEC}
O42 - Logiciel: PhotoNow! - (.CyberLink Corp..) [HKLM] -- InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}
O42 - Logiciel: PhotoNow! - (.CyberLink Corp..) [HKLM] -- {D36DD326-7280-11D8-97C8-000129760CBE}
O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3
O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- {40BF1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM] -- InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}
O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM] -- {CB099890-1D5F-11D5-9EA9-0050BAE317E1}
O42 - Logiciel: Real Alternative 2.0.2 - (.Pas de propriétaire.) [HKLM] -- RealAlt_is1
O42 - Logiciel: RealNetworks - Microsoft Visual C++ 2008 Runtime - (.RealNetworks, Inc.) [HKLM] -- {7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}
O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM] -- RealPlayer 12.0
O42 - Logiciel: RealUpgrade 1.1 - (.RealNetworks, Inc..) [HKLM] -- {28C2DED6-325B-4CC7-983A-1777C8F7FBAB}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Recovery Manager - (.CyberLink Corp..) [HKLM] -- {44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}
O42 - Logiciel: SPAMfighter - (.SPAMfighter ApS.) [HKLM] -- SPAMfighter
O42 - Logiciel: SPAMfighter Client - (.SPAMfighter ApS.) [HKLM] -- {1D0AB230-E7BC-41CB-A50C-F282273E897B}
O42 - Logiciel: SPC 600NC PC Camera - (.Pas de propriétaire.) [HKLM] -- {2A7927AE-0E32-4AA7-A205-9E1DDB4D8AB3}
O42 - Logiciel: Samsung New PC Studio - (.Samsung Electronics Co., Ltd..) [HKLM] -- InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}
O42 - Logiciel: Samsung New PC Studio - (.Samsung Electronics Co., Ltd..) [HKLM] -- {F193FC0E-9E18-40FC-A974-509A1BDD240A}
O42 - Logiciel: Samsung Theme Designer - (.Samsung.) [HKLM] -- {CE6F531A-92B0-474A-93EE-5DDA0B66F611}
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2160841
O42 - Logiciel: Ski Challenge 2010 (FTV) - (.Pas de propriétaire.) [HKCU] -- sc10-FR_FTV_MAIN
O42 - Logiciel: VLC media player 1.1.5 - (.VideoLAN.) [HKLM] -- VLC media player
O42 - Logiciel: Version de démonstration de Microsoft Office Home and Student 2007 - (.Pas de propriétaire.) [HKLM] -- OfficeTrial
O42 - Logiciel: Winamp - (.Nullsoft, Inc.) [HKLM] -- Winamp
O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite
O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- {34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {D45240D3-B6B3-4FF9-B243-54ECE3E10066}
O42 - Logiciel: Windows Live Installer - (.Microsoft Corporation.) [HKLM] -- {0B0F231F-CE6A-483D-AA23-77B364F75917}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9D56775A-93F3-44A3-8092-840E3826DE30}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9FAE6E8D-E686-49F5-A574-0A58DFD9580C}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {6057E21C-ABE9-4059-AE3E-3BEB9925E660}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {EB4DF488-AAEF-406F-A341-CB2AAA315B90}
O42 - Logiciel: Windows Live PIMT Platform - (.Microsoft Corporation.) [HKLM] -- {4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}
O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {A9BDCA6B-3653-467B-AC83-94367DA3BFE3}
O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {C893D8C0-1BA0-4517-B11C-E89B65E72F70}
O42 - Logiciel: Windows Live UX Platform - (.Microsoft Corporation.) [HKLM] -- {CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}
O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM] -- {09F56A49-A7B1-4AAB-95B9-D13094254AD1}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {AAAFC670-569B-4A2F-82B4-42945E0DE3EF}
O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM] -- {62687B11-58B5-4A18-9BC3-9DF4CE03F194}
O42 - Logiciel: XnView 1.97.8 - (.Gougelet Pierre-e.) [HKLM] -- XnView_is1
O42 - Logiciel: Yeti Bubbles - (.Media Contact LLC.) [HKLM] -- YetiBubbles_is1
O42 - Logiciel: µTorrent - (.Pas de propriétaire.) [HKLM] -- uTorrent

---\\ HKCU & HKLM Software Keys
[HKCU\Software\7-Zip]
[HKCU\Software\Adobe]
[HKCU\Software\Ahead]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\BitTorrent]
[HKCU\Software\CDDB]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CyberLink]
[HKCU\Software\DFX]
[HKCU\Software\EasyBits]
[HKCU\Software\Fighters]
[HKCU\Software\Foto-Mosaik-Edda]
[HKCU\Software\Gabest]
[HKCU\Software\GlarySoft]
[HKCU\Software\Google]
[HKCU\Software\Greentube]
[HKCU\Software\Grendel Games]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\HookNetwork]
[HKCU\Software\IM Providers]
[HKCU\Software\IZSoftware]
[HKCU\Software\JavaSoft]
[HKCU\Software\Lotus]
[HKCU\Software\Macromedia]
[HKCU\Software\Magnet]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\Mobileleader]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\Norton]
[HKCU\Software\ODBC]
[HKCU\Software\OpenOffice.org]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\PowerTechnology]
[HKCU\Software\RIT]
[HKCU\Software\RealNetworks]
[HKCU\Software\Realtek]
[HKCU\Software\Samsung]
[HKCU\Software\Skype]
[HKCU\Software\Sysinternals]
[HKCU\Software\Trolltech]
[HKCU\Software\Tutzlglrty]
[HKCU\Software\WildTangent]
[HKCU\Software\Winamp]
[HKCU\Software\Wow6432Node]
[HKCU\Software\wizzgo]
[HKLM\Software\AGEIA Technologies]
[HKLM\Software\Adobe]
[HKLM\Software\Ahead]
[HKLM\Software\ArcAetherAnomalies"]
[HKLM\Software\ArcSoft]
[HKLM\Software\CDDB]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\CyberLink]
[HKLM\Software\DFX]
[HKLM\Software\DivXNetworks]
[HKLM\Software\DownloadHelper]
[HKLM\Software\EasyBits]
[HKLM\Software\Fighters]
[HKLM\Software\Google]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\ICE]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\Khronos]
[HKLM\Software\Licenses]
[HKLM\Software\LightScribe]
[HKLM\Software\Lotus]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\MarkAny]
[HKLM\Software\MimarSinan]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\Name of your company]
[HKLM\Software\Nero]
[HKLM\Software\Neuf]
[HKLM\Software\Norton]
[HKLM\Software\ODBC]
[HKLM\Software\OpenOffice.org]
[HKLM\Software\PC-Doctor]
[HKLM\Software\Policies]
[HKLM\Software\PowerTechnology]
[HKLM\Software\RealAlternative]
[HKLM\Software\RealNetworks]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\RichFX]
[HKLM\Software\Symantec]
[HKLM\Software\TrendMicro]
[HKLM\Software\VideoLAN]
[HKLM\Software\Volatile]
[HKLM\Software\Win32 Services]
[HKLM\Software\Xing Technology Corp.]
[HKLM\Software\XnView]
[HKLM\Software\mozilla.org]


---\\ Contenu des dossiers ProgramFiles/ProgramData (O43)
O43 - CFD: 6/26/2010 - 8:17:48 PM ----D- C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
O43 - CFD: 11/26/2010 - 1:11:38 PM ----D- C:\Program Files\CCleaner
O43 - CFD: 11/26/2010 - 1:00:10 PM ----D- C:\Program Files\Common Files
O43 - CFD: 11/26/2010 - 1:00:12 PM ----D- C:\Program Files\DFX
O43 - CFD: 6/26/2010 - 8:15:08 PM ----D- C:\Program Files\DIFX
O43 - CFD: 11/26/2010 - 10:56:54 PM ----D- C:\Program Files\DVD Maker
O43 - CFD: 6/26/2010 - 8:50:44 PM ----D- C:\Program Files\Hewlett-Packard
O43 - CFD: 6/26/2010 - 8:11:56 PM ----D- C:\Program Files\hp
O43 - CFD: 11/27/2010 - 9:44:58 AM ----D- C:\Program Files\Internet Explorer
O43 - CFD: 7/14/2009 - 8:45:56 AM ----D- C:\Program Files\Microsoft Games
O43 - CFD: 11/28/2010 - 12:00:56 PM ----D- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 11/28/2010 - 12:00:56 PM ----D- C:\Program Files\Microsoft Synchronization Services
O43 - CFD: 11/26/2010 - 7:37:56 PM ----D- C:\Program Files\MPC HomeCinema (x64)
O43 - CFD: 7/14/2009 - 6:32:40 AM ----D- C:\Program Files\MSBuild
O43 - CFD: 6/26/2010 - 8:05:24 PM ----D- C:\Program Files\NVIDIA Corporation
O43 - CFD: 6/26/2010 - 8:16:20 PM ----D- C:\Program Files\PC-Doctor for Windows
O43 - CFD: 6/26/2010 - 8:42:20 PM ----D- C:\Program Files\PlayReady
O43 - CFD: 6/26/2010 - 8:05:58 PM ----D- C:\Program Files\Realtek
O43 - CFD: 7/14/2009 - 6:32:40 AM ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 11/25/2010 - 2:07:18 PM ----D- C:\Program Files\Symantec
O43 - CFD: 7/14/2009 - 6:09:28 AM --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 11/26/2010 - 10:56:54 PM ----D- C:\Program Files\Windows Defender
O43 - CFD: 11/26/2010 - 10:56:54 PM ----D- C:\Program Files\Windows Journal
O43 - CFD: 11/27/2010 - 9:58:36 AM ----D- C:\Program Files\Windows Live
O43 - CFD: 11/27/2010 - 9:44:56 AM ----D- C:\Program Files\Windows Mail
O43 - CFD: 11/27/2010 - 9:31:26 AM ----D- C:\Program Files\Windows Media Player
O43 - CFD: 7/14/2009 - 6:32:40 AM ----D- C:\Program Files\Windows NT
O43 - CFD: 11/26/2010 - 10:56:54 PM ----D- C:\Program Files\Windows Photo Viewer
O43 - CFD: 7/14/2009 - 6:32:40 AM ----D- C:\Program Files\Windows Portable Devices
O43 - CFD: 11/26/2010 - 10:56:58 PM ----D- C:\Program Files\Windows Sidebar
O43 - CFD: 11/26/2010 - 1:00:10 PM ----D- C:\Program Files\Common Files\DFX
O43 - CFD: 11/27/2010 - 9:58:24 AM ----D- C:\Program Files\Common Files\Microsoft Shared
O43 - CFD: 7/14/2009 - 4:20:10 AM ----D- C:\Program Files\Common Files\Services
O43 - CFD: 7/14/2009 - 4:20:10 AM ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 11/25/2010 - 2:07:18 PM ----D- C:\Program Files\Common Files\Symantec Shared
O43 - CFD: 11/26/2010 - 10:56:54 PM ----D- C:\Program Files\Common Files\System
O43 - CFD: 11/27/2010 - 11:50:32 AM ----D- C:\ProgramData\Adobe
O43 - CFD: 11/30/2010 - 1:39:48 AM ----D- C:\ProgramData\Ahead
O43 - CFD: 7/14/2009 - 6:08:58 AM -SH-D- C:\ProgramData\Application Data
O43 - CFD: 11/28/2010 - 12:30:48 PM ----D- C:\ProgramData\CyberLink
O43 - CFD: 7/14/2009 - 6:08:58 AM -SH-D- C:\ProgramData\Desktop
O43 - CFD: 11/26/2010 - 1:00:10 PM ----D- C:\ProgramData\DFX
O43 - CFD: 7/14/2009 - 6:08:58 AM -SH-D- C:\ProgramData\Documents
O43 - CFD: 7/14/2009 - 6:08:58 AM -SH-D- C:\ProgramData\Favorites
O43 - CFD: 11/27/2010 - 4:53:56 PM ----D- C:\ProgramData\Fighters
O43 - CFD: 11/28/2010 - 12:01:02 PM ----D- C:\ProgramData\Hewlett-Packard
O43 - CFD: 11/28/2010 - 1:15:02 AM ----D- C:\ProgramData\HP
O43 - CFD: 11/30/2010 - 10:14:08 AM ----D- C:\ProgramData\LightScribe
O43 - CFD: 11/26/2010 - 8:13:32 PM ----D- C:\ProgramData\Malwarebytes
O43 - CFD: 11/27/2010 - 9:59:06 AM -S--D- C:\ProgramData\Microsoft
O43 - CFD: 12/2/2010 - 2:59:44 PM ----D- C:\ProgramData\MumboJumbo
O43 - CFD: 11/30/2010 - 9:42:02 AM ----D- C:\ProgramData\Nero
O43 - CFD: 11/26/2010 - 10:55:22 PM ----D- C:\ProgramData\Norton
O43 - CFD: 6/26/2010 - 8:51:54 PM ----D- C:\ProgramData\NortonInstaller
O43 - CFD: 6/26/2010 - 8:06:26 PM ----D- C:\ProgramData\NVIDIA
O43 - CFD: 6/26/2010 - 8:16:18 PM ----D- C:\ProgramData\PC-Doctor for Windows
O43 - CFD: 12/1/2010 - 11:13:08 AM ----D- C:\ProgramData\PlayFirst
O43 - CFD: 6/26/2010 - 8:15:32 PM ----D- C:\ProgramData\Ralink Driver
O43 - CFD: 11/28/2010 - 5:09:54 PM ----D- C:\ProgramData\Real
O43 - CFD: 11/28/2010 - 12:41:46 AM ----D- C:\ProgramData\Samsung
O43 - CFD: 11/30/2010 - 11:12:16 AM ----D- C:\ProgramData\Skype
O43 - CFD: 7/14/2009 - 6:08:58 AM -SH-D- C:\ProgramData\Start Menu
O43 - CFD: 12/5/2010 - 2:47:24 AM ----D- C:\ProgramData\Sun
O43 - CFD: 6/26/2010 - 8:33:26 PM ----D- C:\ProgramData\Symantec
O43 - CFD: 12/4/2010 - 9:53:52 PM ---AD- C:\ProgramData\Temp
O43 - CFD: 7/14/2009 - 6:08:58 AM -SH-D- C:\ProgramData\Templates
O43 - CFD: 11/30/2010 - 9:18:34 PM ----D- C:\ProgramData\Wild Tangent
O43 - CFD: 12/3/2010 - 2:34:52 PM ----D- C:\ProgramData\WildTangent
O43 - CFD: 11/26/2010 - 1:00:10 PM ----D- C:\Program Files\Common Files\DFX
O43 - CFD: 11/27/2010 - 9:58:24 AM ----D- C:\Program Files\Common Files\Microsoft Shared
O43 - CFD: 7/14/2009 - 4:20:10 AM ----D- C:\Program Files\Common Files\Services
O43 - CFD: 7/14/2009 - 4:20:10 AM ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 11/25/2010 - 2:07:18 PM ----D- C:\Program Files\Common Files\Symantec Shared
O43 - CFD: 11/26/2010 - 10:56:54 PM ----D- C:\Program Files\Common Files\System
O43 - CFD: 11/27/2010 - 12:37:34 PM ----D- C:\Program Files (x86)\7-Zip
O43 - CFD: 6/26/2010 - 8:17:48 PM ----D- C:\Program Files (x86)\Activation Assistant for the 2007 Microsoft Office suites
O43 - CFD: 11/27/2010 - 11:47:36 AM ----D- C:\Program Files (x86)\Adobe
O43 - CFD: 6/26/2010 - 8:05:38 PM ----D- C:\Program Files (x86)\AGEIA Technologies
O43 - CFD: 11/30/2010 - 2:19:46 AM ----D- C:\Program Files (x86)\Ahead
O43 - CFD: 6/26/2010 - 8:15:06 PM ----D- C:\Program Files (x86)\AMD
O43 - CFD: 12/4/2010 - 4:35:14 PM ----D- C:\Program Files (x86)\Arc Aether Anomalies
O43 - CFD: 12/5/2010 - 2:47:24 AM ----D- C:\Program Files (x86)\Common Files
O43 - CFD: 11/26/2010 - 8:33:46 PM ----D- C:\Program Files (x86)\ConvertHelper
O43 - CFD: 6/26/2010 - 8:26:44 PM ----D- C:\Program Files (x86)\CyberLink
O43 - CFD: 12/4/2010 - 10:39:32 AM ----D- C:\Program Files (x86)\Earthworm Jim
O43 - CFD: 11/26/2010 - 2:37:12 PM ----D- C:\Program Files (x86)\EasyBits For Kids
O43 - CFD: 12/5/2010 - 2:08:52 AM ----D- C:\Program Files (x86)\eMule
O43 - CFD: 11/27/2010 - 4:53:58 PM ----D- C:\Program Files (x86)\Fighters
O43 - CFD: 12/5/2010 - 2:50:32 AM ----D- C:\Program Files (x86)\FrostWire
O43 - CFD: 12/4/2010 - 10:33:16 AM ----D- C:\Program Files (x86)\GameTop.com
O43 - CFD: 11/30/2010 - 11:54:24 AM ----D- C:\Program Files (x86)\Glary Utilities
O43 - CFD: 11/30/2010 - 12:56:30 PM ----D- C:\Program Files (x86)\Google
O43 - CFD: 6/26/2010 - 8:40:42 PM ----D- C:\Program Files (x86)\Hewlett-Packard
O43 - CFD: 11/28/2010 - 1:18:52 AM ----D- C:\Program Files (x86)\Hp
O43 - CFD: 12/5/2010 - 8:08:16 PM ----D- C:\Program Files (x86)\HP Games
O43 - CFD: 11/28/2010 - 12:40:42 AM --H-D- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 12/4/2010 - 6:08:46 PM ----D- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 12/3/2010 - 2:10:50 PM ----D- C:\Program Files (x86)\IZArc
O43 - CFD: 12/5/2010 - 2:47:06 AM ----D- C:\Program Files (x86)\Java
O43 - CFD: 12/4/2010 - 1:21:40 PM ----D- C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 11/28/2010 - 12:40:14 AM ----D- C:\Program Files (x86)\MarkAny
O43 - CFD: 6/26/2010 - 8:47:30 PM ----D- C:\Program Files (x86)\Microsoft
O43 - CFD: 11/25/2010 - 2:03:04 PM ----D- C:\Program Files (x86)\Microsoft Office
O43 - CFD: 11/27/2010 - 9:29:08 AM ----D- C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 11/30/2010 - 11:11:24 AM ----D- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 11/28/2010 - 12:00:30 PM ----D- C:\Program Files (x86)\Microsoft Synchronization Services
O43 - CFD: 11/27/2010 - 9:40:54 AM ----D- C:\Program Files (x86)\Microsoft Works
O43 - CFD: 11/27/2010 - 12:23:46 AM ----D- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 12/5/2010 - 8:25:38 PM ----D- C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 12/4/2010 - 6:09:12 PM ----D- C:\Program Files (x86)\Mozilla Thunderbird
O43 - CFD: 7/14/2009 - 6:32:40 AM ----D- C:\Program Files (x86)\MSBuild
O43 - CFD: 11/27/2010 - 9:39:38 AM ----D- C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 11/30/2010 - 9:42:00 AM ----D- C:\Program Files (x86)\Nero
O43 - CFD: 11/25/2010 - 4:03:56 PM ----D- C:\Program Files (x86)\Neuf
O43 - CFD: 6/26/2010 - 8:52:40 PM ----D- C:\Program Files (x86)\Norton Internet Security
O43 - CFD: 6/26/2010 - 8:51:54 PM ----D- C:\Program Files (x86)\NortonInstaller
O43 - CFD: 6/26/2010 - 8:05:38 PM ----D- C:\Program Files (x86)\NVIDIA Corporation
O43 - CFD: 11/25/2010 - 2:02:40 PM R---D- C:\Program Files (x86)\Online Services
O43 - CFD: 11/28/2010 - 1:07:24 PM ----D- C:\Program Files (x86)\OpenOffice.org 3
O43 - CFD: 11/27/2010 - 2:07:40 PM ----D- C:\Program Files (x86)\Philips
O43 - CFD: 12/4/2010 - 6:09:12 PM ----D- C:\Program Files (x86)\Real
O43 - CFD: 11/28/2010 - 4:56:42 PM ----D- C:\Program Files (x86)\Real Alternative
O43 - CFD: 6/26/2010 - 8:13:52 PM ----D- C:\Program Files (x86)\Realtek
O43 - CFD: 7/14/2009 - 6:32:40 AM ----D- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 12/5/2010 - 8:10:10 PM ----D- C:\Program Files (x86)\Samsung
O43 - CFD: 6/26/2010 - 8:33:26 PM ----D- C:\Program Files (x86)\Symantec
O43 - CFD: 6/26/2010 - 8:14:06 PM --H-D- C:\Program Files (x86)\Temp
O43 - CFD: 7/14/2009 - 5:57:08 AM --H-D- C:\Program Files (x86)\Uninstall Information
O43 - CFD: 11/26/2010 - 12:02:46 AM ----D- C:\Program Files (x86)\uTorrent
O43 - CFD: 12/5/2010 - 3:35:10 AM ----D- C:\Program Files (x86)\VideoLAN
O43 - CFD: 11/26/2010 - 7:56:22 PM ----D- C:\Program Files (x86)\Winamp
O43 - CFD: 11/26/2010 - 7:54:58 PM ----D- C:\Program Files (x86)\Winamp Detect
O43 - CFD: 11/26/2010 - 10:56:54 PM ----D- C:\Program Files (x86)\Windows Defender
O43 - CFD: 11/30/2010 - 2:39:36 PM ----D- C:\Program Files (x86)\Windows Live
O43 - CFD: 11/27/2010 - 9:44:56 AM ----D- C:\Program Files (x86)\Windows Mail
O43 - CFD: 11/30/2010

Pour ce qui est du PC je ne me plains de rien si ce n'est qu'il n'y a qu'une semaine que je l'ai DONC NORTON EST EN ETAT DE MARCHE et quand je serai un peu plus disponible je le sécuriserai davantage !.

tu peux suivre la procédure SVP et poster le rapport comme demandé par le biais de ci joint

et c'est celui de zhpfix que je veux !! la c'est le dernier de zhpdiag ??

et ad-remover il a eté passé ??

Voici le lien et désolée je n'arrive pas à me concentrer!!!
http://www.cijoint.fr/cjlink.php?file=cj201012/cij35duRqZ.txt

Pour Jacques voici le ZHPfix après un nettoyage avec ad-remover:
http://www.cijoint.fr/cjlink.php?file=cj201012/cijMSbApME.txt

kapersty est entrain d'effectuer une analyse approfondie du système

Je suis désolée mais le téléchargrmement est très lent : il reste encore 7 minutes ! si tu es fatigué je comprendrai !

pas de soucis je suis là ;)

bah écoute , si toi tu es fatiguée , c'est moi qui comprendrai ;)

Perso je vis plutot la nuit que le jours mais je en suis pas un vampire ^^

Instal ton AntiVirus , en plus Kaspersky demande une bonne configuration ....

Donc ;)

Dis moi quoi .

Sinon on termine demain apres midi , pas avant . Demain je taff pas mais j'ai RDV au garage pour la voiture .

El_Desaparecido pas de problème tu peux finir !!