Virus (ça alors ^^) (w/ scan hijackthis)

RogueKiller V8.2.0 [22/10/2012] par Tigzy
mail: tigzyRK<at>gmail<dot>com
Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html
Website: http://www.sur-la-toile.com/RogueKiller/
Blog: http://tigzyrk.blogspot.com

Systeme d'exploitation: Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Demarrage : Mode normal
Utilisateur : arielle [Droits d'admin]
Mode : Recherche -- Date : 27/10/2012 05:06:55

¤¤¤ Processus malicieux : 0 ¤¤¤

¤¤¤ Entrees de registre : 4 ¤¤¤
[DNS] HKLM\[...]\ControlSet001\Services\Interfaces\{AA4B7CB3-4B99-4600-818F-5606312BF0B9} : NameServer (178.33.41.181,46.4.70.20) -> TROUVÉ
[DNS] HKLM\[...]\ControlSet002\Services\Interfaces\{AA4B7CB3-4B99-4600-818F-5606312BF0B9} : NameServer (178.33.41.181,46.4.70.20) -> TROUVÉ
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> TROUVÉ
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> TROUVÉ

¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

¤¤¤ Driver : [CHARGE] ¤¤¤

¤¤¤ Fichier HOSTS: ¤¤¤
--> C:\Windows\system32\drivers\etc\hosts



¤¤¤ MBR Verif: ¤¤¤

+++++ PhysicalDrive0: SAMSUNG HM250HJ +++++
--- User ---
[MBR] 972af0f3a1302f0e42e1b7bb8b91fcfe
[BSP] 05e73a7831dbb3fce59353c3efbc62f3 : Windows Vista/7 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 199 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 409600 | Size: 219031 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 448985088 | Size: 19140 Mo
3 - [XXXXXX] FAT32-LBA (0x0c) [VISIBLE] Offset (sectors): 488183808 | Size: 103 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Termine : << RKreport[1].txt >>
RKreport[1].txt

Pour anticiper un peu : le rapport avec l'option 1
https://pastebin.com/TuvMTp3C

n'anticipe rien Stp? attend mes indications même si elles te semblent longues à venir^^

Et voilà que je ne peut ni utiliser mon clavier (donc je prend le virtuel) et que je ne peut plus rien héberger (pastebin, cijoint).
Est-ce que je doit prendre le risque de mettre le rapport sur une clef pour faire ça avec un autre PC ?

as tu vérifié si les DNS sont en acquisition auto ?
as tu pu désinstaller le programme penwes?
je vois pas le rapport entre ce qu'on a fait et la perte du clavier, avais tu déjà eu ce souci?

Le logiciel est bien désinstallé et le DNS est en auto.
Je n'ai jamais eut ce soucis.
Le son est aussi désactivé (LED allumées sur le clavier et les HP).

Avira m'avait détecté un truc.

Dans le fichier 'C:\Windows\System32\drivers\Wdf01000.sys'
un virus ou un programme indésirable 'TR/Agent.445008.1' [trojan] a été détecté.
Action exécutée : Refuser l'accès

Quand je le lance, j'ai une fenêtre "Do not run combofix in compatibility mode" qui s'affiche.

ComboFix est compatible Win7 64b

cela se traduit par "ne pas utiliser comboFix en mode de compatibilité" peux tu cliquer sur OK?

exécute le en tant qu'Admin

Le prog se ferme juste après.
Il est déjà executé en admin

essaie de renommer le fichier "combofix .exe" en "winlogon.exe" avant de le lancer

Ça ne marche pas non plus :/

http://pastebin.com/Dm5TH1kU
Hop :)

Oups, effectivement ^^'
https://pastebin.com/LFGBn964

L'upload de fichiers ne marche plus :/
"La connexion a été réinitialisée
La connexion avec le serveur a été réinitialisée pendant le chargement de la page.
etc..."

c'est soit un souci de DNS es tu sûr que tout est bon à ce niveau?
soit un problème au niveau du pare-feu,lequel utilises tu?

Je ne sais pas ce que c'est donc je pense que je n'ait pas pu le modifier consciemment ^^
Le pare-feu Windows mais je viens d'aller voir si il marche bien mais j'obtiens un code d'erreur.
Je vais essayer de faire hoster le texte par un pote.

Rapport de ZHPFix 1.12.3378 par Nicolas Coolman, Update du 10/01/2011
Fichier d'export Registre :
Run by user at 14/01/2012 23:16:52
Windows 7 Ultimate Edition, 32-bit (Build 7600)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Web site : http://nicolascoolman.skyrock.com/

========== Valeur(s) du Registre ==========
ABSENT Valeur Standard Profile: FirewallRaz :
ABSENT Valeur Domain Profile: FirewallRaz :
SUPPRIME FirewallRaz (Domain) : {EEF22787-6329-4AD9-91E1-1168FEDA8BE4}
SUPPRIME FirewallRaz (Domain) : {4F437C0A-405D-474E-B35D-5E1211EC070C}
SUPPRIME FirewallRaz (Public) : {DFFC3C7A-7353-4198-8187-17723DDACFDE}
SUPPRIME FirewallRaz (Public) : {83A22A4A-8047-4D53-97EC-20FD3A7B3D05}
SUPPRIME FirewallRaz (Domain) : {CF14CA4B-AAF4-4798-901F-7133ECD4E1D4}
SUPPRIME FirewallRaz (Domain) : {4D2E3535-2498-4550-845F-ECF9567B78F0}
SUPPRIME FirewallRaz (Domain) : {DD366C98-8091-4C70-A10E-DA38EA05024B}
SUPPRIME FirewallRaz (Domain) : {E6572F62-42CA-46AC-9087-7399D97AECF5}
SUPPRIME FirewallRaz (Public) : {80E0DBBF-EF89-4E02-ADEF-FC15A9A5C816}
SUPPRIME FirewallRaz (Public) : {AABC9EB0-FCA2-4E92-B3C1-E636964C6C0A}
SUPPRIME FirewallRaz (Public) : {97F44E42-2458-4D21-93EF-694CBFEFFA22}
SUPPRIME FirewallRaz (Public) : {5A6BC3AA-92AB-4FD9-8FCE-A6D8F8042CEA}
SUPPRIME FirewallRaz (Private) : TCP Query User{850EC65F-E5F4-4939-B8A0-4FB801B9394B}C:\program files\steam\steamapps\common\red faction guerrilla\rfg.exe
SUPPRIME FirewallRaz (Private) : UDP Query User{FCC25178-E5A6-4D42-A81B-36DD6C035A70}C:\program files\steam\steamapps\common\red faction guerrilla\rfg.exe
SUPPRIME FirewallRaz (Public) : {8A0F3642-C935-4FCF-9273-CF7C64198CE5}
SUPPRIME FirewallRaz (Public) : {45A3407F-67D1-4B4B-873E-209D9F14D953}
SUPPRIME FirewallRaz (Public) : {33535C33-F941-4FAE-9444-26D27C793EB0}
SUPPRIME FirewallRaz (Public) : {EB98BF32-7581-416E-A929-C077512444D4}

========== Dossier(s) ==========
SUPPRIME Temporaires Windows: : 599

========== Fichier(s) ==========
SUPPRIME Temporaires Windows: : 2231


========== Récapitulatif ==========
20 : Valeur(s) du Registre
1 : Dossier(s)
1 : Fichier(s)


End of clean in 00mn 03s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 14/01/2012 23:16:52 [2238]

donc tu dois pouvoir me montrer le ZHPDiag maintenant.... ou pas

Ben non, ça ne marche toujours pas :/

essaie à nouveau comboFix?

J'ai toujours l'erreur de compatibilité.

23:41:29.0269 3980 TDSS rootkit removing tool 2.7.1.0 Jan 13 2012 15:24:05
23:41:29.0409 3980 ============================================================
23:41:29.0409 3980 Current date / time: 2012/01/14 23:41:29.0409
23:41:29.0409 3980 SystemInfo:
23:41:29.0409 3980
23:41:29.0409 3980 OS Version: 6.1.7600 ServicePack: 0.0
23:41:29.0409 3980 Product type: Workstation
23:41:29.0409 3980 ComputerName: USER-PC
23:41:29.0409 3980 UserName: user
23:41:29.0409 3980 Windows directory: C:\Windows
23:41:29.0409 3980 System windows directory: C:\Windows
23:41:29.0409 3980 Processor architecture: Intel x86
23:41:29.0409 3980 Number of processors: 2
23:41:29.0409 3980 Page size: 0x1000
23:41:29.0409 3980 Boot type: Normal boot
23:41:29.0409 3980 ============================================================
23:41:31.0001 3980 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000, SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K', Flags 0x00000050
23:41:31.0016 3980 Drive \Device\Harddisk1\DR1 - Size: 0x3A38B2E000, SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K', Flags 0x00000050
23:41:31.0032 3980 Drive \Device\Harddisk2\DR2 - Size: 0x75E00000, SectorSize: 0x200, Cylinders: 0xF0, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
23:41:31.0125 3980 Initialize success

J'ai pas l'impression que ça soit le bon :/

Le rapport ZHPDiag précédent (j'avais oublié qu'on pouvait simplement le coller ici ^^)

Rapport de ZHPDiag v1.28.311 par Nicolas Coolman, Update du 14/01/2012 
Run by user at 14/01/2012 22:28:06 
Web site :  http://www.premiumorange.com/zeb-help-process/zhpdiag.html 
Web site :  http://nicolascoolman.skyrock.com/ 
State : Version à jour. 


---\\ Web Browser 
MSIE: Internet Explorer v8.0.7600.16385 
MFIE: Mozilla Firefox 9.0.1 v9.0.1 (Defaut) 

---\\ Windows Product Information 
~ Langage: Français 
Windows 7 Ultimate Edition, 32-bit  (Build 7600) 
Windows Server License Manager Script : OK 
~ Windows(R) 7, OEM_SLP channel 
System Locked Preinstallation (OEM_SLP) : OK 
Windows ID Activation : OK 
~ Windows Partial Key : VKM6G 
Windows License : OK 
~ Windows Remaining Initializations Number : 3 
Software Protection Service (Protection logicielle)  : OK 
Windows Automatic Updates : OK 
Windows Activation Technologies : OK 

---\\ System Information 
~ Processor: x86 Family 16 Model 6 Stepping 2, AuthenticAMD 
~ Operating System: 32 Bits 
Boot mode: Normal (Normal boot) 
Total RAM: 3582 MB (68% free) 
System Restore: Activé (Enable) 
System drive C: has 3 GB (2%) free of 113 GB 

---\\ Logged in mode 
~ Computer Name: USER-PC 
~ User Name: user 
~ All Users Names: user, UpdatusUser, HomeGroupUser$, Administrateur,  
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89 
Logged in as Administrator 

---\\ Environnement Variables 
~ System Unit : C:\ 
~ %AppData% : C:\Users\user\AppData\Roaming\ 
~ %Desktop% : C:\Users\user\Desktop\ 
~ %Favorites% : C:\Users\user\Favorites\ 
~ %LocalAppData% : C:\Users\user\AppData\Local\ 
~ %StartMenu% : C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\ 
~ %Windir% : C:\Windows\ 
~ %System% : C:\Windows\system32\ 

---\\ DOS/Devices 
C:\ Hard drive, Flash drive, Thumb drive (Free 3 Go of 113 Go) 
D:\ Hard drive, Flash drive, Thumb drive (Free 34 Go of 56 Go) 
E:\ Floppy drive, Flash card reader, USB Key (Free 1 Go of 2 Go) 
G:\ Hard drive, Flash drive, Thumb drive (Free 872 Go of 932 Go) 



---\\ Security Center & Tools Informations 
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK 
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK 
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK 
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK 
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK 
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK 
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK 
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK 
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK 
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK 
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK 
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK 
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK 
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK 
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK 
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK 
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK 
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK 
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoStartMenuSubFolder: OK 
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoResolveSearch: OK 
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK 
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK 
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK 
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK 
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoDispScrSavPage: OK 
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK 
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK 
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK 
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyComputer: OK 
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK 
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK 
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK 
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK 
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  Out Of Date 
~ Scan Security Center in 00mn 00s 



---\\ Recherche particulière de fichiers génériques 
[MD5.2AF58D15EDC06EC6FDACCE1F19482BBF] - (.Microsoft Corporation - Explorateur Windows.) (.26/02/2011 - 06:33:07.) -- C:\Windows\Explorer.exe [2614784] 
[MD5.51138BEEA3E2C21EC44D0932C71762A8] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) (.14/07/2009 - 02:14:31.) -- C:\Windows\system32\rundll32.exe [44544] 
[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:14:45.) -- C:\Windows\system32\Wininit.exe [96256] 
[MD5.7F5B51FACA193430346970283C50769F] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.05/11/2011 - 05:35:50.) -- C:\Windows\system32\wininet.dll [981504] 
[MD5.37CDB7E72EB66BA85A87CBE37E7F03FD] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.28/10/2009 - 07:17:59.) -- C:\Windows\system32\Winlogon.exe [285696] 
[MD5.58C94EAE54BF0C5E2B80B2E5E7744D4C] - (.Microsoft Corporation - Bibliothèque de licences.) (.14/07/2009 - 02:16:15.) -- C:\Windows\system32\sppcomapi.dll [193024] 
[MD5.F6180F2E6484AC4012174D0982B93364] - (.Microsoft Corporation - DLL client de l'API uilisateur de Windows multi-utilisateurs.) (.19/07/2009 - 14:10:56.) -- C:\Windows\system32\fr-FR\user32.dll.mui [19968] 
[MD5.0DB7A48388D54D154EBEC120461A0FCD] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.25/04/2011 - 03:35:40.) -- C:\Windows\system32\drivers\AFD.sys [338944] 
[MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:26:15.) -- C:\Windows\system32\drivers\atapi.sys [21584] 
[MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:11:15.) -- C:\Windows\system32\drivers\Cdfs.sys [70656] 
[MD5.BA6E70AA0E6091BC39DE29477D866A77] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.14/07/2009 - 00:11:26.) -- C:\Windows\system32\drivers\Cdrom.sys [108544] 
[MD5.83D1ECEA8FAAE75604C0FA49AC7AD996] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.27/04/2011 - 03:33:46.) -- C:\Windows\system32\drivers\DfsC.sys [78336] 
[MD5.717A2207FD6F13AD3E664C7D5A43C7BF] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.14/07/2009 - 00:50:56.) -- C:\Windows\system32\drivers\HDAudBus.sys [108544] 
[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:11:24.) -- C:\Windows\system32\drivers\i8042prt.sys [80896] 
[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 00:54:29.) -- C:\Windows\system32\drivers\IpNat.sys [101888] 
[MD5.CA7570E42522E24324A12161DB14EC02] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.04/05/2011 - 03:43:41.) -- C:\Windows\system32\drivers\MRxSmb.sys [123392] 
[MD5.DD52A733BF4CA5AF84562A5E2F963B91] - (.Microsoft Corporation - MBT Transport driver.) (.14/07/2009 - 00:12:21.) -- C:\Windows\system32\drivers\netBT.sys [187904] 
[MD5.187002CE05693C306F43C873F821381F] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.11/03/2011 - 06:44:01.) -- C:\Windows\system32\drivers\ntfs.sys [1210240] 
[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 00:45:35.) -- C:\Windows\system32\drivers\Parport.sys [79360] 
[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.14/07/2009 - 00:54:34.) -- C:\Windows\system32\drivers\Rasl2tp.sys [78848] 
[MD5.C5FF95883FFEF704D50C40D21CFB3AB5] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.14/07/2009 - 01:02:58.) -- C:\Windows\system32\drivers\rdpdr.sys [133120] 
[MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 00:53:41.) -- C:\Windows\system32\drivers\smb.sys [71168] 
[MD5.CB39E896A2A83702D1737BFD402B3542] - (.Microsoft Corporation - TDI Translation Driver.) (.14/07/2009 - 00:12:11.) -- C:\Windows\system32\drivers\tdx.sys [74240] 
[MD5.58DF9D2481A56EDDE167E51B334D44FD] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.14/07/2009 - 02:19:10.) -- C:\Windows\system32\drivers\volsnap.sys [245328] 
~ Scan Generic Processes in 00mn 00s 



---\\ Etat des fichiers cachés (Caché/Total) 
~ Mes images (My Pictures) : 1/28 
~ Mes musiques (My Musics) : 1/12 
~ Mes Favoris (My Favorites) : 2/18 
~ Mes Documents (My Documents) : 150/4542 
~ Mon Bureau (My Desktop) : 1/57 
~ Menu demarrer (Programs) : 6/27 
~ Scan Hidden Files in 00mn 03s 



---\\ Processus lancés 
[MD5.385B9A26DBE3D97B483D977C037C4BEC] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe   [460872] [PID.2776] 
[MD5.11CCA710674739E3DB8F7450A5B650B6] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe   [924632] [PID.3144] 
[MD5.0619C9E7A3682C54BD226A831897CD06] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe   [16856] [PID.4068] 
[MD5.B0DA80FF42A0819D162A86612896AAF2] - (.Microsoft Corporation - Windows Update.) -- C:\Windows\system32\wuauclt.exe   [47104] [PID.3292] 
[MD5.C9E27369BE36DE0BCDED061FA4A557F6] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe   [2210816] [PID.2996] 
[MD5.F0CE586AEAF318BDDD443651A2E672E7] - (.Microsoft Corporation - Accessibilité au Clavier visuel.) -- C:\Windows\System32\osk.exe   [646144] [PID.3588] 
~ Scan Processes Running in 00mn 00s 



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3) 
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\rmx3wydv.default\prefs.js 
M3 - MFPP: Plugins - [user] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml 
M3 - MFPP: Plugins - [user] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml 
M3 - MFPP: Plugins - [user] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml 
M3 - MFPP: Plugins - [user] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml 
M3 - MFPP: Plugins - [user] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml 
M3 - MFPP: Plugins - [user] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml 
M3 - MFPP: Plugins - [user] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml 
M2 - MFEP: prefs.js [user - rmx3wydv.default\foxmarks@kei.com] [] Xmarks v (.Todd Agulnick.) 
M2 - MFEP: prefs.js [user - rmx3wydv.default\jid0-XWJxt5VvCXkKzQK99PhZqAn7Xbg@jetpack] [] Google Search link fix v1.2 (.Wladimir Palant.) 
M2 - MFEP: prefs.js [user - rmx3wydv.default\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}] [greasemonkey] Greasemonkey v0.9.13 (.Aaron Boodman; http://youngpup.net/ 
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\System32\Macromed\Flash\NPSWF32.dll 
P2 - FPN: [HKLM] [@esn.me/esnsonar,version=0.70.4] - (.ESN Social Software AB - 0.70.4.) -- C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll 
P2 - FPN: [HKLM] [@esn/esnlaunch,version=1.104.0] - (.ESN Social Software AB - 1.104.0.) -- C:\Program Files\Battlelog Web Plugins\1.104.0\npesnlaunch.dll 
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_29 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll 
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60831.0.) -- C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll 
P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\Program Files\Microsoft Office\Office14\NPAUTHZ.dll 
P2 - FPN: [HKLM] [@microsoft.com/SharePoint,version=14.0] - (.Microsoft Corporation - The plug-in allows you to open and edit files using Microsoft Office a.) -- C:\Program Files\Microsoft Office\Office14\NPSPWRAP.dll 
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.1.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll 
~ Scan Firefox Browser in 00mn 00s 



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) 
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/ 
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/ 
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/ 
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons 
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk 
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm 
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (8.00.7264.0 (win7_rtm.090622-1900)) -- C:\Windows\System32\ieframe.dll 
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 
~ Scan IE Browser in 00mn 00s 



---\\ Internet Explorer, Proxy Management (R5) 
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key 
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll 
~ Scan Proxy management in 00mn 00s 



---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2) 
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe, 
F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe 
~ Scan Keys in 00mn 00s 



---\\ Redirection du fichier Hosts (O1) 
~ Le fichier hosts est sain (The hosts file is clean). 
~ Scan Hosts File in 00mn 00s 
~ Nombre de lignes (Lines number): 0 



---\\ Browser Helper Objects de navigateur (O2) 
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll 
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.dll 
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll 
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files\Microsoft Office\Office14\URLREDIR.dll 
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll 
~ Scan BHO in 00mn 00s 



---\\ Applications démarrées par registre & par dossier (O4) 
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe  
O4 - HKCU\..\Run: [AdobeBridge] Clé orpheline  
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe  
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe  
O4 - HKUS\S-1-5-21-3930447667-458242724-1548986627-1004-3930447667-458242724-1548986627-1000\..\Run: [AdobeBridge] Clé orpheline  
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe  
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe  
~ Scan Application in 00mn 00s 



---\\ Autres liens utilisateurs (O4) 
O4 - Global Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Internet Explorer\iexplore.exe 
O4 - Global Startup: C:\Users\user\Desktop\ArtMoney SE v7.37.lnk . (...)  -- C:\Games\ArtMoney\am737.exe 
O4 - Global Startup: C:\Users\user\Desktop\Bridge.lnk . (.Adobe Systems, Inc..)  -- C:\Program Files\Adobe\Adobe Bridge CS5.1\Bridge.exe 
O4 - Global Startup: C:\Users\user\Desktop\FoFiX.lnk . (.FoFiX Team.)  -- C:\Users\user\Documents\FoFiX\FoFiX.exe 
O4 - Global Startup: C:\Users\user\Desktop\HiJackThis.lnk . (.Trend Micro Inc..)  -- C:\Users\user\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 
O4 - Global Startup: C:\Users\user\Desktop\Photoshop.lnk . (.Adobe Systems, Incorporated.)  -- C:\Program Files\Adobe\Adobe Photoshop CS5.1\Photoshop.exe 
O4 - Global Startup: C:\Users\user\Desktop\Skyrim.lnk . (.Bethesda Softworks.)  -- C:\Program Files\The Elder Scrolls V Skyrim\SkyrimLauncher.exe 
O4 - Global Startup: C:\Users\user\Desktop\Uplink.lnk . (.Introversion Software.)  -- C:\Program Files\Uplink\uplink.exe 
O4 - Global Startup: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Internet Explorer\iexplore.exe 
~ Scan Global Startup in 00mn 00s 



---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5) 
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no 
~ Scan IE Control Panel in 00mn 00s 



---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8) 
O8 - Extra context menu item: E&xport to Microsoft Excel . (.Microsoft Corporation - Microsoft Excel.) -- C:\Program Files\MIF5BA~1\Office14\EXCEL.exe 
~ Scan IE Menu Contextuel in 00mn 00s 



---\\ Winsock hijacker (Layered Service Provider) (O10) 
O10 - Broken Internet access because of LSP provider (.not file.) -- mswsock.dll 
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\System32\winrnr.dll 
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\System32\NapiNSP.dll 
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\System32\pnrpnsp.dll 
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\System32\pnrpnsp.dll 
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDNSP.dll 
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corporation - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDNSP.dll 
~ Scan Winsock in 00mn 00s 



---\\ Objets ActiveX (Downloaded Program Files)(O16) 
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab 
~ Scan Objets ActiveX in 00mn 00s 



---\\ Modification Domaine/Adresses DNS (O17) 
O17 - HKLM\System\CCS\Services\Tcpip\..\{37B2FB6F-12D5-4C41-95BC-760E3A7AB06D}: DhcpNameServer = 192.168.1.1 
O17 - HKLM\System\CCS\Services\Tcpip\..\{68DAEC9C-91F8-410C-8FC7-40B3FEFF6D8B}: DhcpNameServer = 192.168.1.1 
O17 - HKLM\System\CS1\Services\Tcpip\..\{37B2FB6F-12D5-4C41-95BC-760E3A7AB06D}: DhcpNameServer = 192.168.1.1 
O17 - HKLM\System\CS1\Services\Tcpip\..\{68DAEC9C-91F8-410C-8FC7-40B3FEFF6D8B}: DhcpNameServer = 192.168.1.1 
O17 - HKLM\System\CS2\Services\Tcpip\..\{37B2FB6F-12D5-4C41-95BC-760E3A7AB06D}: DhcpNameServer = 192.168.1.1 
O17 - HKLM\System\CS2\Services\Tcpip\..\{68DAEC9C-91F8-410C-8FC7-40B3FEFF6D8B}: DhcpNameServer = 192.168.1.1 
~ Scan Domain in 00mn 00s 



---\\ Protocole additionnel (O18) 
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll 
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll 
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll 
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll 
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll 
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll 
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll 
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll 
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll 
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll 
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll 
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll 
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll 
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\microsoft shared\Help\hxds.dll 
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll 
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll 
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll 
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll 
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll 
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll 
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll 
O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll 
O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll 
O18 - Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.dll 
~ Scan Protocole Additionnel in 00mn 00s 



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) 
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. 
~ Scan SSODL in 00mn 00s 



---\\ Liste des services NT non Microsoft et non désactivés (O23) 
O23 - Service:  (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe 
O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 285.6.) - C:\Windows\System32\nvvsvc.exe 
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) . (.NVIDIA Corporation - NVIDIA Settings Update Manager.) - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe 
O23 - Service: PnkBstrA (PnkBstrA) . (...) - C:\Windows\System32\PnkBstrA.exe 
~ Scan Services in 00mn 00s 



---\\ Enumération Active Desktop & MHTML Editor (O24) 
O24 - Default MHTML Editor: Last - .(...) -  (.not file.) 
~ Scan Desktop Component in 00mn 00s 



---\\ BootExecute (O34) 
O34 - HKLM BootExecute: (autocheck autochk *) - File not found 
~ Scan Keys in 00mn 00s 



---\\ Composants installés (ActiveSetup Installed Components) (O40) 
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe 
O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d'IEAK.) -- C:\Windows\System32\iedkcs32.dll 
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll 
O40 - ASIC: Microsoft Windows Media Player 12.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll 
O40 - ASIC: Internet Explorer - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe 
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Windows Media Player.) -- C:\Windows\system32\wmp.dll 
O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe 
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll 
~ Scan Active Setup in 00mn 00s 



---\\ Pilotes lancés au démarrage (O41) 
O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys 
O41 - Driver:  (AsIO) . (...) - C:\Windows\system32\drivers\AsIO.sys 
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys 
O41 - Driver:  (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\DRIVERS\cdrom.sys 
O41 - Driver: C:\Windows\system32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\system32\drivers\csc.sys 
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\system32\Drivers\dfsc.sys 
O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\system32\drivers\discache.sys 
O41 - Driver:  (dtsoftbus01) . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) - C:\Windows\system32\DRIVERS\dtsoftbus01.sys 
O41 - Driver:  (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\DRIVERS\mssmbios.sys 
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\system32\DRIVERS\netbios.sys 
O41 - Driver: C:\Windows\system32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\system32\DRIVERS\netbt.sys 
O41 - Driver: C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\system32\drivers\nsiproxy.sys 
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys 
O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\system32\DRIVERS\rdbss.sys 
O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\DRIVERS\RDPCDD.sys 
O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\system32\drivers\rdpencdd.sys 
O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\system32\drivers\rdprefmp.sys 
O41 - Driver:  (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\system32\DRIVERS\serial.sys 
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys 
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\DRIVERS\termdd.sys 
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys 
O41 - Driver: C:\Windows\system32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys 
O41 - Driver:  (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\system32\DRIVERS\wfplwf.sys 
~ Scan Drivers in 00mn 00s 



---\\ Logiciels installés (O42) 
O42 - Logiciel: 7-Zip 9.20 - (.Pas de propriétaire.) [HKLM] -- 7-Zip 
O42 - Logiciel: Absolute Nature 2 for S.T.A.L.K.E.R - Call of Pripyat - (.Pas de propriétaire.) [HKLM] -- Absolute Nature Texture Pack 2_is1 
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR 
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB} 
O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated..) [HKLM] -- chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 
O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated..) [HKLM] -- {3521BDBD-D453-5D9F-AA55-44B75D214629} 
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX 
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin 
O42 - Logiciel: Adobe Photoshop CS5.1 - (.Adobe Systems Incorporated.) [HKLM] -- {9158FF30-78D7-40EF-B83E-451AC5334640} 
O42 - Logiciel: Adobe Reader X (10.1.1) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA1000000001} 
O42 - Logiciel: Aquaria - (.Bit Blot.) [HKLM] -- Steam App 24420 
O42 - Logiciel: ArtMoney SE v7.37.2 - (.System SoftLab.) [HKLM] -- ArtMoney SE_is1 
O42 - Logiciel: AtmosFear 3 for S.T.A.L.K.E.R - Call Of Pripyat - (.Pas de propriétaire.) [HKLM] -- AtmosFear 3_is1 
O42 - Logiciel: Audiosurf - (.BestGameEver.) [HKLM] -- Steam App 12900 
O42 - Logiciel: Battlefield 3(TM) - (.Electronic Arts.) [HKLM] -- {76285C16-411A-488A-BCE3-C83CB933D8CF} 
O42 - Logiciel: Battlelog Web Plugins - (.EA Digital Illusions CE AB.) [HKLM] -- Battlelog Web Plugins 
O42 - Logiciel: Cave Story+ - (.Pas de propriétaire.) [HKLM] -- Steam App 200900 
O42 - Logiciel: Cool & Quiet - (.Pas de propriétaire.) [HKLM] -- {1ADE1AA0-7F82-4BB1-B1BD-727DE438057B} 
O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM] -- DAEMON Tools Lite 
O42 - Logiciel: DEFCON - (.Introversion Software.) [HKLM] -- Steam App 1520 
O42 - Logiciel: Definition update for Microsoft Office 2010 (KB982726) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{D9CCC2EB-F15B-4459-838D-09DE0BD5754F} 
O42 - Logiciel: ESN Sonar - (.ESN Social Software AB.) [HKLM] -- ESN Sonar-0.70.4 
O42 - Logiciel: EZ Mask v1.5 for Adobe Photoshop & Photoshop Elements - (.Pas de propriétaire.) [HKLM] -- EZ Mask v1.5 for Adobe Photoshop & Photoshop Elements 
O42 - Logiciel: Far Cry 2 - (.Ubisoft.) [HKLM] -- Steam App 19900 
O42 - Logiciel: GRID - (.Codemasters.) [HKLM] -- Steam App 12750 
O42 - Logiciel: Gestionnaire de Connexion SFR 3.2 - (.SFR.) [HKLM] -- {FC48747D-095F-4CF6-B54E-37D4F4738A15}_is1 
O42 - Logiciel: Grand Theft Auto: Episodes from Liberty City - (.Rockstar.) [HKLM] -- Steam App 12220 
O42 - Logiciel: Imagenomic Noiseware 4.2 Professional Plug-in (build 4205) - (.Pas de propriétaire.) [HKLM] -- ImagenomicNoisewareProPlugin 
O42 - Logiciel: Java(TM) 6 Update 29 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216029FF} 
O42 - Logiciel: Knoll Light Factory Photo - (.Pas de propriétaire.) [HKLM] -- Knoll Light Factory Photo 
O42 - Logiciel: Left 4 Dead 2 - (.Valve.) [HKLM] -- Steam App 550 
O42 - Logiciel: Magic Bullet PhotoLooks - (.Pas de propriétaire.) [HKLM] -- Magic Bullet PhotoLooks 
O42 - Logiciel: Malwarebytes Anti-Malware version 1.60.0.1800 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1 
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile 
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6} 
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E} 
O42 - Logiciel: Microsoft .NET Framework 4 Extended - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Extended 
O42 - Logiciel: Microsoft .NET Framework 4 Extended - (.Microsoft Corporation.) [HKLM] -- {0A0CADCF-78DA-33C4-A350-CD51849B9702} 
O42 - Logiciel: Microsoft Corporation - (.Microsoft Corporation.) [HKLM] -- {B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800} 
O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.) [HKLM] -- {832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F} 
O42 - Logiciel: Microsoft Games for Windows Marketplace - (.Microsoft Corporation.) [HKLM] -- {4CB0307C-565E-4441-86BE-0DF2E4FB828C} 
O42 - Logiciel: Microsoft LifeCam - (.Microsoft Corporation.) [HKLM] -- {5FC7AB5C-61FC-42DF-A923-5139BCF10D42} 
O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{047B0968-E622-4FAA-9B4B-121FA109EDDE} 
O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-0015-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF} 
O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-0016-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF} 
O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-0018-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF} 
O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-0019-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF} 
O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-001A-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF} 
O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-001B-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF} 
O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{99ACCA38-6DD3-48A8-96AE-A283C9759279} 
O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6} 
O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-001F-0C0A-0000-0000000FF1CE}_Office14.PROPLUS_{DEA87BE2-FFCC-4F33-9946-FCBE55A1E998} 
O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-002C-0409-0000-0000000FF1CE}_Office14.PROPLUS_{7CA93DF4-8902-449E-A42E-4C5923CFBDE3} 
O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-0044-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF} 
O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-006E-0409-0000-0000000FF1CE}_Office14.PROPLUS_{4560037C-E356-444A-A015-D21F487D809E} 
O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-00A1-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF} 
O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-00BA-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF} 
O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-0115-0409-0000-0000000FF1CE}_Office14.PROPLUS_{4560037C-E356-444A-A015-D21F487D809E} 
O42 - Logiciel: Microsoft Office 2010 Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90140000-0117-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF} 
O42 - Logiciel: Microsoft Office Access MUI (English) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-0015-0409-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Access Setup Metadata MUI (English) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-0117-0409-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Excel MUI (English) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-0016-0409-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Groove MUI (English) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-00BA-0409-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office InfoPath MUI (English) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-0044-0409-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office OneNote MUI (English) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-00A1-0409-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Outlook MUI (English) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-001A-0409-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office PowerPoint MUI (English) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-0018-0409-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Professional Plus 2010 - (.Microsoft Corporation.) [HKLM] -- Office14.PROPLUS 
O42 - Logiciel: Microsoft Office Professional Plus 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Proof (English) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-001F-0409-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Proof (French) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-001F-040C-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Proof (Spanish) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-001F-0C0A-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Proofing (English) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-002C-0409-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Publisher MUI (English) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-0019-0409-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Shared MUI (English) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-006E-0409-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Shared Setup Metadata MUI (English) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-0115-0409-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Office Word MUI (English) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-001B-0409-0000-0000000FF1CE} 
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} 
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2} 
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d} 
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {A49F249F-0C91-497F-86DF-B2585E8E76B7} 
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 - (.Microsoft Corporation.) [HKLM] -- {FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4} 
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475} 
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989} 
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F} 
O42 - Logiciel: Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 - (.Microsoft Corporation.) [HKLM] -- {F0C3E5D1-1ADE-321E-8167-68EF0DE699A5} 
O42 - Logiciel: Microsoft_VC80_ATL_x86 - (.Adobe.) [HKLM] -- {0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25} 
O42 - Logiciel: Microsoft_VC80_CRT_x86 - (.Adobe.) [HKLM] -- {92D58719-BBC1-4CC3-A08B-56C9E884CC2C} 
O42 - Logiciel: Microsoft_VC80_MFCLOC_x86 - (.Adobe.) [HKLM] -- {D92BBB52-82FF-42ED-8A3C-4E062F944AB7} 
O42 - Logiciel: Microsoft_VC80_MFC_x86 - (.Adobe.) [HKLM] -- {D1A19B02-817E-4296-A45B-07853FD74D57} 
O42 - Logiciel: Microsoft_VC90_ATL_x86 - (.Adobe.) [HKLM] -- {033E378E-6AD3-4AD5-BDEB-CBD69B31046C} 
O42 - Logiciel: Microsoft_VC90_CRT_x86 - (.Adobe.) [HKLM] -- {08D2E121-7F6A-43EB-97FD-629B44903403} 
O42 - Logiciel: Microsoft_VC90_MFCLOC_x86 - (.Adobe.) [HKLM] -- {B6D38690-755E-4F40-A35A-23F8BC2B86AC} 
O42 - Logiciel: Microsoft_VC90_MFC_x86 - (.Adobe.) [HKLM] -- {635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A} 
O42 - Logiciel: Mises à jour NVIDIA 1.5.20 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update 
O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack 
O42 - Logiciel: Mozilla Firefox 9.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 9.0.1 (x86 fr) 
O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers 
O42 - Logiciel: NVIDIA ForceWare Network Access Manager - (.NVIDIA Corporation.) [HKLM] -- InstallShield_{7CFA46E3-CC2F-4355-82AE-6012DC3633FD} 
O42 - Logiciel: NVIDIA ForceWare Network Access Manager - (.NVIDIA Corporation.) [HKLM] -- {7CFA46E3-CC2F-4355-82AE-6012DC3633FD} 
O42 - Logiciel: NVIDIA Logiciel système PhysX 9.11.0621 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX 
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {7F6D7FD9-648D-4DD9-BB6E-3990C675ECA4} 
O42 - Logiciel: NVIDIA Pilote graphique 285.62 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver 
O42 - Logiciel: OpenAL - (.Pas de propriétaire.) [HKLM] -- OpenAL 
O42 - Logiciel: Origin - (.Electronic Arts, Inc..) [HKLM] -- Origin 
O42 - Logiciel: PAYDAY: The Heist - (.Pas de propriétaire.) [HKLM] -- Steam App 24240 
O42 - Logiciel: PDF Settings CS5 - (.Adobe Systems Incorporated.) [HKLM] -- {A78FE97A-C0C8-49CE-89D0-EDD524A17392} 
O42 - Logiciel: PENTAX Digital Camera Utility 4 - (.PENTAX.) [HKLM] -- {433B30F1-3B10-4DDD-8975-C891C56BF992} 
O42 - Logiciel: PixPlant for Photoshop 2.0.43 - (.FaronStudio.) [HKLM] -- PixPlant2_is1 
O42 - Logiciel: Power Retouche Retouching Suite - (.Power Retouche.) [HKLM] -- Power Retouche Retouching Suite 
O42 - Logiciel: PunkBuster Services - (.Pas de propriétaire.) [HKLM] -- PunkBusterSvc 
O42 - Logiciel: S.T.A.L.K.E.R.: Call of Pripyat - (.GSC Game World.) [HKLM] -- Steam App 41700 
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2478663 
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2518870 
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2539636 
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2572078 
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2553091) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{07CA44F3-F5B3-4D12-8C91-EDC5FE91D45C} 
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2553096) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{10802A6D-EDBF-4383-BCBD-9D5B32F56D35} 
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2553353) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{02421C16-2C31-47F8-81FA-CF3B25999D31} 
O42 - Logiciel: Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DCE6D0BF-93E4-46C5-9A7C-F1EFF9707C02} 
O42 - Logiciel: Security Update for Microsoft PowerPoint 2010 (KB2553185) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{61461470-8168-4F4B-97B7-617AF354F028} 
O42 - Logiciel: Security Update for Microsoft SharePoint Workspace 2010 (KB2566445) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{337A3FB9-281D-4EC8-9CC1-7F6DDAC2359F} 
O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2478663 
O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2518870 
O42 - Logiciel: Shadowgrounds - (.Frozenbyte.) [HKLM] -- Steam App 2500 
O42 - Logiciel: Silver Efex Pro - (.Nik Software, Inc..) [HKLM] -- Silver Efex Pro 
O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM] -- {048298C9-A4D3-490B-9FF9-AB023A9238F3} 
O42 - Logiciel: Super Meat Boy - (.Pas de propriétaire.) [HKLM] -- Steam App 40800 
O42 - Logiciel: ToonIt! - (.Digital Anarchy, Inc..) [HKLM] -- ToonIt PS 
O42 - Logiciel: Topaz  InFocus - (.Topaz Labs.) [HKLM] -- Topaz  InFocus 
O42 - Logiciel: Topaz  InFocus - (.Topaz Labs.) [HKLM] -- {5BDEA9E0-E55B-45A7-93F7-6B8F68F851E5} 
O42 - Logiciel: Topaz Adjust 4 - (.Topaz Labs.) [HKLM] -- Topaz Adjust 4 
O42 - Logiciel: Topaz Adjust 4 - (.Topaz Labs.) [HKLM] -- {9FDC7042-CB9F-4336-A14C-DF10F53762E2} 
O42 - Logiciel: Topaz DeJpeg 4 - (.Topaz Labs.) [HKLM] -- Topaz DeJpeg 4 
O42 - Logiciel: Topaz DeJpeg 4 - (.Topaz Labs.) [HKLM] -- {9E146BA1-26DD-4C3B-9F0F-90F2E3CEC9D2} 
O42 - Logiciel: Topaz DeNoise 5 - (.Topaz Labs.) [HKLM] -- Topaz DeNoise 5 
O42 - Logiciel: Topaz DeNoise 5 - (.Topaz Labs.) [HKLM] -- {9E82D1DB-3AFB-4D18-A221-081F1B4B4789} 
O42 - Logiciel: Topaz Detail 2 - (.Topaz Labs.) [HKLM] -- Topaz Detail 2 
O42 - Logiciel: Topaz Detail 2 - (.Topaz Labs.) [HKLM] -- {C921D7C4-24D7-4210-AEE9-DFC5DDC78428} 
O42 - Logiciel: Topaz Fusion Express 2 - (.Topaz Labs.) [HKLM] -- Topaz Fusion Express 2 
O42 - Logiciel: Topaz Fusion Express 2 - (.Topaz Labs.) [HKLM] -- {770D3BDC-19D7-49D0-B60B-C5BB77553FBB} 
O42 - Logiciel: Topaz ReMask 2 - (.Topaz Labs.) [HKLM] -- Topaz ReMask 2 
O42 - Logiciel: Topaz ReMask 2 - (.Topaz Labs.) [HKLM] -- {BCFFAF65-50B7-4419-AFCA-A7BA797E2C3D} 
O42 - Logiciel: Topaz Simplify 3 - (.Topaz Labs.) [HKLM] -- Topaz Simplify 3 
O42 - Logiciel: Topaz Simplify 3 - (.Topaz Labs.) [HKLM] -- {8A1EBF29-7CF8-471E-B90B-95FF36AC8248} 
O42 - Logiciel: Uninstall Mystical - (.Pas de propriétaire.) [HKLM] -- Mystical 
O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2468871) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2468871 
O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2533523) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2533523 
O42 - Logiciel: Update for Microsoft Excel 2010 (KB2553439) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{3D1F379C-AA64-4823-90A4-A8DDD4B48C21} 
O42 - Logiciel: Update for Microsoft Office 2010 (KB2553065) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{A8686D24-1E89-43A1-973E-05A258D2B3F8} 
O42 - Logiciel: Update for Microsoft Office 2010 (KB2553092) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{7AC49FC8-F8D2-4DD8-9086-09E52385A21F} 
O42 - Logiciel: Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{48E1B6C2-7299-4F3F-AA63-42F0ACE55AA4} 
O42 - Logiciel: Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{17E7B9AB-2DD2-457D-8D8E-CD14ACA973FE} 
O42 - Logiciel: Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{15058154-469F-4794-ACD5-94F8420F9B80} 
O42 - Logiciel: Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90140000-001F-0C0A-0000-0000000FF1CE}_Office14.PROPLUS_{995A7832-B512-46D5-87C9-2D71FB541435} 
O42 - Logiciel: Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{C8694FF0-8203-483B-A07A-2BC40433167D} 
O42 - Logiciel: Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90140000-006E-0409-0000-0000000FF1CE}_Office14.PROPLUS_{73E67A3A-8D61-44EF-90C2-1697C3DBE668} 
O42 - Logiciel: Update for Microsoft Office 2010 (KB2553385) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{28FAC187-7C0E-413A-B90A-76F19D0FBF30} 
O42 - Logiciel: Update for Microsoft Office 2010 (KB2553455) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{147E3669-1EA6-454C-B53E-A2BE51D8E520} 
O42 - Logiciel: Update for Microsoft Office 2010 (KB2566458) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{EFB525A0-E1C0-4E32-9968-FE401BC87363} 
O42 - Logiciel: Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{ED31DE9A-3E13-4E2C-9106-E0D8AFFB9FA6} 
O42 - Logiciel: Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BEBC2484-290C-46AD-9834-6DAD1FA80273} 
O42 - Logiciel: Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90140000-00A1-0409-0000-0000000FF1CE}_Office14.PROPLUS_{9865DC3A-2898-48D9-B96A-46397571C934} 
O42 - Logiciel: Update for Microsoft Outlook 2010 (KB2553323) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{29E94638-D92F-4C40-BDA1-FEDCC92F478D} 
O42 - Logiciel: Update for Microsoft Outlook Social Connector (KB2583935) - (.Microsoft.) [HKLM] -- {90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{EDF9874C-9E37-4110-9FC3-094247E114DF} 
O42 - Logiciel: Update for Microsoft Outlook Social Connector (KB2583935) - (.Microsoft.) [HKLM] -- {90140000-001A-0409-0000-0000000FF1CE}_Office14.PROPLUS_{64FDCC43-8AD0-46F0-BF53-0CC27D816202} 
O42 - Logiciel: Uplink (remove only) - (.Pas de propriétaire.) [HKLM] -- Uplink 
O42 - Logiciel: Uplink - (.Introversion Software.) [HKLM] -- Steam App 1510 
O42 - Logiciel: VLC media player 1.1.11 - (.VideoLAN.) [HKLM] -- VLC media player 
O42 - Logiciel: WebcamMax - (.Pas de propriétaire.) [HKLM] -- WebcamMax 
O42 - Logiciel: Windows Live ID Sign-in Assistant - (.Microsoft Corporation.) [HKLM] -- {0840B4D6-7DD1-4187-8523-E6FC0007EFB7} 
O42 - Logiciel: Windows Mobile Device Updater Component - (.Microsoft Corporation.) [HKLM] -- {F2CB8C3C-9C9E-4FAB-9067-655601C5F748} 
O42 - Logiciel: Zaxwerks 3D Invigorator 4.9.0 - (.Pas de propriétaire.) [HKLM] -- Zaxwerks 3D Invigorator 
O42 - Logiciel: Zune - (.Microsoft Corporation.) [HKLM] -- Zune 
O42 - Logiciel: Zune - (.Microsoft Corporation.) [HKLM] -- {9B75648B-6C30-4A0D-9DE6-0D09D20AF5A5} 
O42 - Logiciel: Zune Language Pack (CHS) - (.Microsoft Corporation.) [HKLM] -- {2A9DFFD8-4E09-4B91-B957-454805B0D7C4} 
O42 - Logiciel: Zune Language Pack (CHT) - (.Microsoft Corporation.) [HKLM] -- {A5A53EA8-A11E-49F0-BDF5-AE536426A31A} 
O42 - Logiciel: Zune Language Pack (CSY) - (.Microsoft Corporation.) [HKLM] -- {A8F2E50B-86E2-4D96-9BD2-9758BCC6F9B3} 
O42 - Logiciel: Zune Language Pack (DAN) - (.Microsoft Corporation.) [HKLM] -- {8B112338-2B08-4851-AF84-E7CAD74CEB32} 
O42 - Logiciel: Zune Language Pack (DEU) - (.Microsoft Corporation.) [HKLM] -- {BE236D9A-52EC-4A17-82DA-84B5EAD31E3E} 
O42 - Logiciel: Zune Language Pack (ELL) - (.Microsoft Corporation.) [HKLM] -- {3589A659-F732-4E65-A89A-5438C332E59D} 
O42 - Logiciel: Zune Language Pack (ESP) - (.Microsoft Corporation.) [HKLM] -- {6B33492E-FBBC-4EC3-8738-09E16E395A10} 
O42 - Logiciel: Zune Language Pack (FIN) - (.Microsoft Corporation.) [HKLM] -- {B4870774-5F3A-46D9-9DFE-06FB5599E26B} 
O42 - Logiciel: Zune Language Pack (FRA) - (.Microsoft Corporation.) [HKLM] -- {C68D33B1-0204-4EBE-BC45-A6E432B1D13A} 
O42 - Logiciel: Zune Language Pack (HUN) - (.Microsoft Corporation.) [HKLM] -- {C6BE19C6-B102-4038-B2A6-1C313872DBB4} 
O42 - Logiciel: Zune Language Pack (IND) - (.Microsoft Corporation.) [HKLM] -- {92ECE3F9-591E-4C12-8A62-B9FCE38BF646} 
O42 - Logiciel: Zune Language Pack (ITA) - (.Microsoft Corporation.) [HKLM] -- {C5D37FFA-7483-410B-982B-91E93FD3B7DA} 
O42 - Logiciel: Zune Language Pack (JPN) - (.Microsoft Corporation.) [HKLM] -- {D8A781C9-3892-4E2E-9320-480CF896CFBB} 
O42 - Logiciel: Zune Language Pack (KOR) - (.Microsoft Corporation.) [HKLM] -- {51C839E1-2BE4-4E77-A1BA-CCEA5DAFA741} 
O42 - Logiciel: Zune Language Pack (MSL) - (.Microsoft Corporation.) [HKLM] -- {76BA306B-2AA0-47C0-AB6B-F313AB56C136} 
O42 - Logiciel: Zune Language Pack (NLD) - (.Microsoft Corporation.) [HKLM] -- {6740BCB0-5863-47F4-80F4-44F394DE4FE2} 
O42 - Logiciel: Zune Language Pack (NOR) - (.Microsoft Corporation.) [HKLM] -- {5DEFD397-4012-46C3-B6DA-E8013E660772} 
O42 - Logiciel: Zune Language Pack (PLK) - (.Microsoft Corporation.) [HKLM] -- {8960A0A1-BB5A-479E-92CF-65AB9D684B43} 
O42 - Logiciel: Zune Language Pack (PTB) - (.Microsoft Corporation.) [HKLM] -- {07EEE598-5F21-4B57-B40B-46592625B3D9} 
O42 - Logiciel: Zune Language Pack (PTG) - (.Microsoft Corporation.) [HKLM] -- {5C93E291-A1CC-4E51-85C6-E194209FCDB4} 
O42 - Logiciel: Zune Language Pack (RUS) - (.Microsoft Corporation.) [HKLM] -- {57C51D56-B287-4C11-9192-EC3C46EF76A4} 
O42 - Logiciel: Zune Language Pack (SVE) - (.Microsoft Corporation.) [HKLM] -- {6EB931CD-A7DA-4A44-B74A-89C8EB50086F} 
O42 - Logiciel: µTorrent - (.Pas de propriétaire.) [HKLM] -- uTorrent 

---\\ HKCU & HKLM Software Keys 
[HKCU\Software\7-Zip] 
[HKCU\Software\AMD] 
[HKCU\Software\ATI] 
[HKCU\Software\Adobe] 
[HKCU\Software\AppDataLow\Software\Microsoft] 
[HKCU\Software\AppDataLow\Software] 
[HKCU\Software\AppDataLow] 
[HKCU\Software\BitTorrent] 
[HKCU\Software\Camfrog] 
[HKCU\Software\Classes] 
[HKCU\Software\Clients] 
[HKCU\Software\DT Soft] 
[HKCU\Software\Digital Anarchy] 
[HKCU\Software\EA Games] 
[HKCU\Software\GN2] 
[HKCU\Software\IGA] 
[HKCU\Software\JavaSoft] 
[HKCU\Software\Local AppWizard-Generated Applications] 
[HKCU\Software\Macromedia] 
[HKCU\Software\Malwarebytes' Anti-Malware] 
[HKCU\Software\Mozilla] 
[HKCU\Software\NVIDIA Corporation] 
[HKCU\Software\Netscape] 
[HKCU\Software\Nik Software] 
[HKCU\Software\Nik_Soft] 
[HKCU\Software\ODBC] 
[HKCU\Software\PENTAX] 
[HKCU\Software\PixPlant2] 
[HKCU\Software\Policies] 
[HKCU\Software\QSetup_Dyn_Data] 
[HKCU\Software\Red Giant Software] 
[HKCU\Software\Rockstar Games] 
[HKCU\Software\SFR] 
[HKCU\Software\SecuROM] 
[HKCU\Software\Sysinternals] 
[HKCU\Software\Topaz Labs] 
[HKCU\Software\TopazLabs] 
[HKCU\Software\Trend Micro] 
[HKCU\Software\Trolltech] 
[HKCU\Software\Ubisoft] 
[HKCU\Software\Valve] 
[HKCU\Software\WinRAR] 
[HKCU\Software\Yahoo] 
[HKCU\Software\myfingershurt] 
[HKLM\Software\AGEIA Technologies] 
[HKLM\Software\AMD] 
[HKLM\Software\ASUS] 
[HKLM\Software\ATI Technologies] 
[HKLM\Software\Adobe] 
[HKLM\Software\ArtMoney] 
[HKLM\Software\Bethesda Softworks] 
[HKLM\Software\Canon] 
[HKLM\Software\Classes] 
[HKLM\Software\Clients] 
[HKLM\Software\Codemasters] 
[HKLM\Software\DT Soft] 
[HKLM\Software\Digital Anarchy] 
[HKLM\Software\EA Games] 
[HKLM\Software\ESN Launcher-1.104.0] 
[HKLM\Software\Electronic Arts] 
[HKLM\Software\Even Balance] 
[HKLM\Software\GN2] 
[HKLM\Software\GSC Game World] 
[HKLM\Software\Imagenomic] 
[HKLM\Software\Intel] 
[HKLM\Software\JavaSoft] 
[HKLM\Software\JreMetrics] 
[HKLM\Software\Khronos] 
[HKLM\Software\Macromedia] 
[HKLM\Software\Malwarebytes' Anti-Malware] 
[HKLM\Software\MimarSinan] 
[HKLM\Software\MozillaPlugins] 
[HKLM\Software\Mozilla] 
[HKLM\Software\NVIDIA Corporation] 
[HKLM\Software\Nik Software] 
[HKLM\Software\ODBC] 
[HKLM\Software\PENTAX] 
[HKLM\Software\PixPlant2] 
[HKLM\Software\Policies] 
[HKLM\Software\Power Retouche] 
[HKLM\Software\PowerRetouche] 
[HKLM\Software\Red Giant Software] 
[HKLM\Software\RegisteredApplications] 
[HKLM\Software\Rockstar Games] 
[HKLM\Software\SFR] 
[HKLM\Software\Sonic] 
[HKLM\Software\Swearware] 
[HKLM\Software\TeamMeat] 
[HKLM\Software\Topaz Labs] 
[HKLM\Software\TrendMicro] 
[HKLM\Software\Ubisoft] 
[HKLM\Software\Valve] 
[HKLM\Software\VideoLAN] 
[HKLM\Software\Wizards of the Coast] 
[HKLM\Software\Wow6432Node] 
[HKLM\Software\mozilla.org] 
~ Scan Softwares in 00mn 00s 



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) 
O43 - CFD: 14/01/2012 - 22:03:14 - [0] ----D- C:\Program Files\31498 
O43 - CFD: 05/11/2011 - 15:32:16 - [3,348] ----D- C:\Program Files\7-Zip 
O43 - CFD: 29/12/2011 - 17:56:48 - [1064,614] ----D- C:\Program Files\Adobe 
O43 - CFD: 10/12/2011 - 21:34:34 - [2,749] ----D- C:\Program Files\ASUS 
O43 - CFD: 26/12/2011 - 08:13:04 - [11,045] ----D- C:\Program Files\Battlelog Web Plugins 
O43 - CFD: 13/01/2012 - 21:04:56 - [751,583] ----D- C:\Program Files\Common Files 
O43 - CFD: 10/12/2011 - 15:37:42 - [23,224] ----D- C:\Program Files\DAEMON Tools Lite 
O43 - CFD: 19/07/2009 - 14:19:18 - [79,371] ----D- C:\Program Files\DVD Maker 
O43 - CFD: 05/11/2011 - 14:52:48 - [0] -SH-D- C:\Program Files\Fichiers communs 
O43 - CFD: 0

bonne impression si je regarde les dates

avais tu déjà utiliser ce log?

Il y a peut-être une limitation de caractères sur CCM.
Pour le log tdsskiller, je ne retrouve pas et quand je veut en refaire un il ne me trouve aucune menace .

à lire les rapports de ZHPFix et Adwcleaner ? ;)