Rapport de ZHPDiag v1.31.13 par Nicolas Coolman, Update du 31/07/2012
Run by A1 at 01/09/2012 17:02:13
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Web site : http://nicolascoolman.skyrock.com/
State : Version à jour.
---\\ Web Browser
MSIE: Internet Explorer v9.0.8112.16421 (Defaut)
---\\ Windows Product Information
~ Langage: Français
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
Software Protection Service (Protection logicielle) : KO
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ System Information
~ Processor: AMD64 Family 16 Model 6 Stepping 2, AuthenticAMD
~ Operating System: 64 Bits
Boot mode: Sans échec avec prise en charge du réseau (Fail-safe with network boot)
Total RAM: 3838 MB (73% free)
System Restore: Activé (Enable)
System drive C: has 49 GB (63%) free of 77 GB
---\\ Logged in mode
~ Computer Name: TOSH
~ User Name: A1
~ All Users Names: HomeGroupUser$, ASPNET, Administrateur, A1,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator
---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\A1\AppData\Roaming\
~ %Desktop% : C:\Users\A1\Desktop\
~ %Favorites% : D:\MesDossiers\MonInternet\Favoris\Favoris\
~ %LocalAppData% : C:\Users\A1\AppData\Local\
~ %StartMenu% : C:\Users\A1\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 49 Go of 77 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 108 Go of 149 Go)
E:\ CD-ROM drive (Not Inserted)
G:\ Hard drive, Flash drive, Thumb drive (Free 236 Go of 293 Go)
H:\ Hard drive, Flash drive, Thumb drive (Free 235 Go of 293 Go)
I:\ Hard drive, Flash drive, Thumb drive (Free 290 Go of 346 Go)
S:\ Hard drive, Flash drive, Thumb drive (Free 51 Go of 52 Go)
W:\ Hard drive, Flash drive, Thumb drive (Free 17 Go of 20 Go)
---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyComputer: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date
~ Scan Security Center in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.8EA68FD3780DDDD5072F8CB830B3CB3D] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.29/06/2012 - 04:49:11.) -- C:\Windows\System32\wininet.dll [1392128]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.A2F74975097F52A00745F9637451FDD8] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.11/03/2011 - 07:41:34.) -- C:\Windows\system32\Drivers\ntfs.sys [1659776]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Scan Generic Processes in 00mn 00s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/10606
~ Mes musiques (My Musics) : 2/9
~ Mes Videos (My Video) : 0/0
~ Mes Favoris (My Favorites) : 1/158
~ Mes Documents (My Documents) : 1/2514
~ Mon Bureau (My Desktop) : 0/16
~ Menu demarrer (Programs) : 1/38
~ Scan Hidden Files in 00mn 20s
---\\ Processus lancés
[MD5.FCB13D9E3D55075C8FACA9CA3C55B263] - (...) -- D:\ZHPDiag\ZHPDiag.exe [3763200] [PID.1160]
~ Scan Processes Running in 00mn 00s
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
M3 - MFPP: Plugins - [A1] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\fcmdSrchadj.xml
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.5.0] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Windows\system32\npDeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.5.0] - (.Oracle Corporation - Next Generation Java Plug-in 10.5.0 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.10411.0.) -- C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
~ Scan Firefox Browser in 00mn 00s
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://saamu.net
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKCU\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.helperbar.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.helperbar.com
R3 - URLSearchHook: (no name) [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (. Microsoft Corporation - 5.1.10411.0.) (No version) -- (.not file.)
R3 - URLSearchHook: (no name) [64Bits] - {b80f591e-fe9a-46cf-a13e-180377240586} . (. Microsoft Corporation - 5.1.10411.0.) (No version) -- (.not file.)
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0
~ Scan IE Browser in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s
---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Scan Keys in 00mn 00s
---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 04s
~ Nombre de lignes (Lines number): 15170
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: (no name) [64Bits] - {02478D38-C3F9-4efb-9B51-7695ECA05670} Clé orpheline
O2 - BHO: (no name) [64Bits] - {1d970ed5-3eda-438d-bffd-715931e2775b} Clé orpheline
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\
O2 - BHO: AVG Security Toolbar [64Bits] - {95B7759C-8C7F-4BF1-B163-73684A933233} . (...) -- C:\Program Files (x86)\AVG Secure Search\11.1.0.7\AVG Secure Search_toolbar.dll (.not file.)
O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: (no name) [64Bits] - {b80f591e-fe9a-46cf-a13e-180377240586} Clé orpheline
~ Scan BHO in 00mn 00s
---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Google Toolbar [64Bits] - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
~ Scan Toolbar in 00mn 00s
---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [Toshiba TEMPRO] . (.Toshiba Europe GmbH - Toshiba TEMPRO.) -- C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
O4 - HKLM\..\Run: [TosNC] C:\Program Files (x86)\Toshiba\BulletinBoard\TosNcCore.exe (.not file.)
O4 - HKLM\..\Run: [TosReelTimeMonitor] C:\Program Files (x86)\TOSHIBA\ReelTime\TosReelTimeMonitor.exe (.not file.)
O4 - HKLM\..\Run: [SmoothView] C:\Program Files (x86)\Toshiba\SmoothView\SmoothView.exe (.not file.)
O4 - HKLM\..\Run: [TPwrMain] C:\Program Files (x86)\TOSHIBA\Power Saver\TPwrMain.exe (.not file.)
O4 - HKLM\..\Run: [HSON] C:\Program Files (x86)\TOSHIBA\TBS\HSON.exe (.not file.)
O4 - HKLM\..\Run: [00TCrdMain] C:\Program Files (x86)\TOSHIBA\FlashCards\TCrdMain.exe (.not file.)
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.)
O4 - HKLM\..\Run: [SmartFaceVWatcher] C:\Program Files (x86)\Toshiba\SmartFaceV\SmartFaceVWatcher.exe (.not file.)
O4 - HKLM\..\Run: [TosSENotify] . (.TOSHIBA Corporation - Pas de description.) -- C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe
O4 - HKLM\..\Run: [Teco] C:\Program Files (x86)\TOSHIBA\TECO\Teco.exe (.not file.)
O4 - HKLM\..\Run: [TosWaitSrv] C:\Program Files (x86)\TOSHIBA\TPHM\TosWaitSrv.exe (.not file.)
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- C:\Program Files\Microsoft Security Client\msseces.exe
O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
O4 - HKCU\..\Run: [MailNotifier] . (...) -- C:\Program Files (x86)\Orange\MailNotifier\MailNotifier.exe
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O4 - HKCU\..\Run: [PicPick Start] . (.NTeWORKS - PicPick.) -- C:\Program Files (x86)\PicPick\picpick.exe
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] . (.Microsoft Corporation - Pense-bête.) -- C:\Windows\System32\StikyNot.exe
O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Wow6432Node\Run: [hpqSRMon] . (.Hewlett-Packard - HpqSRmon.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-21-2361314600-1348788477-4057349206-1000\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
O4 - HKUS\S-1-5-21-2361314600-1348788477-4057349206-1000\..\Run: [MailNotifier] . (...) -- C:\Program Files (x86)\Orange\MailNotifier\MailNotifier.exe
O4 - HKUS\S-1-5-21-2361314600-1348788477-4057349206-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O4 - HKUS\S-1-5-21-2361314600-1348788477-4057349206-1000\..\Run: [PicPick Start] . (.NTeWORKS - PicPick.) -- C:\Program Files (x86)\PicPick\picpick.exe
O4 - HKUS\S-1-5-21-2361314600-1348788477-4057349206-1000\..\Run: [RESTART_STICKY_NOTES] . (.Microsoft Corporation - Pense-bête.) -- C:\Windows\System32\StikyNot.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
~ Scan Application in 00mn 00s
---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\A1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\A1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\A1\Desktop\7zFM.exe - Raccourci.lnk . (.Igor Pavlov.) -- C:\Program Files (x86)\7-Zip\7zFM.exe
O4 - Global Startup: C:\Users\A1\Desktop\Advanced Uninstaller PRO 11.lnk . (.Innovative Solutions.) -- C:\Program Files (x86)\Innovative Solutions\Advanced Uninstaller PRO\uninstaller.exe
O4 - Global Startup: C:\Users\A1\Desktop\CrystalDiskInfo.lnk . (.Crystal Dew World.) -- C:\Program Files (x86)\CrystalDiskInfo\DiskInfo.exe
O4 - Global Startup: C:\Users\A1\Desktop\Disk Cleanup.lnk . (.Microsoft Corporation.) -- C:\Windows\system32\cleanmgr.exe
O4 - Global Startup: C:\Users\A1\Desktop\Dropbox.lnk . (.Dropbox, Inc..) -- C:\Users\A1\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: C:\Users\A1\Desktop\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\A1\Desktop\Microsoft Office Excel 2003.lnk . (...) -- C:\Windows\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe
O4 - Global Startup: C:\Users\A1\Desktop\Microsoft Office Outlook 2003.lnk . (...) -- C:\Windows\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\outicon.exe
O4 - Global Startup: C:\Users\A1\Desktop\Microsoft Office Word 2003.lnk . (...) -- C:\Windows\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe
O4 - Global Startup: C:\Users\A1\Desktop\Microsoft Security Essentials.lnk . (...) -- C:\Program Files (x86)\Microsoft Security Client\msseces.exe (.not file.)
O4 - Global Startup: C:\Users\A1\Desktop\Snipping Tool.lnk . (.Microsoft Corporation.) -- C:\Windows\system32\SnippingTool.exe
O4 - Global Startup: C:\Users\A1\Desktop\SumatraPDF.lnk . (.Krzysztof Kowalczyk.) -- C:\Program Files (x86)\SumatraPDF\SumatraPDF.exe
O4 - Global Startup: C:\Users\A1\Desktop\SUMo Home Page.URL . (.Krzysztof Kowalczyk.) -- C:\Users\A1\Desktop\SUMo Home Page.URL
O4 - Global Startup: C:\Users\A1\Desktop\SUMo.lnk . (.KC Softwares.) -- C:\Program Files (x86)\KC Softwares\SUMo\SUMo.exe
O4 - Global Startup: C:\Users\A1\Desktop\SyncToy 2.1(x64).lnk . (...) -- C:\Windows\Installer\{88DAAF05-5A72-46D2-A7C5-C3759697E943}\_6FEFF9B68218417F98F549.exe
O4 - Global Startup: C:\Users\A1\Desktop\Windows Live Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
O4 - Global Startup: C:\Users\A1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Démarrer Microsoft Office Outlook.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Microsoft Office\OFFICE11\OUTLOOK.EXE
O4 - Global Startup: C:\Users\A1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\IE 64.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\A1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\A1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\les-pages.com.lnk - Clé orpheline
O4 - Global Startup: C:\Users\A1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Vos Démarches Administratives.lnk - Clé orpheline
O4 - Global Startup: C:\Users\A1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\WLM.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
~ Scan Global Startup in 00mn 00s
---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
~ Scan Winsock in 00mn 00s
---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {5A779DC0-837B-4590-AC42-C7C0847478C5} () - http://logicielsgratuits.orange.fr/download_service/Install/OrangeInstaller.cab
~ Scan Objets ActiveX in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{7B359C13-9336-4F28-81C6-6602D4964BBA}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{92F782BF-2D42-4980-ADCB-D15BEDC586B7}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{7B359C13-9336-4F28-81C6-6602D4964BBA}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{92F782BF-2D42-4980-ADCB-D15BEDC586B7}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{7B359C13-9336-4F28-81C6-6602D4964BBA}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{92F782BF-2D42-4980-ADCB-D15BEDC586B7}: DhcpNameServer = 192.168.1.1
~ Scan Domain in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (...) --
O18 - Handler: dvd [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (...) --
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (...) --
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (...) --
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (...) --
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (...) --
O18 - Handler: its [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (...) --
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (...) --
O18 - Handler: livecall [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (...) --
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (...) --
O18 - Handler: mhtml [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (...) --
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (...) --
O18 - Handler: ms-its [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (...) --
O18 - Handler: ms-itss [64Bits] - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Information Retrieval\MSITSS.dll
O18 - Handler: msnim [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll
O18 - Handler: mso-offdap11 [64Bits] - {32505114-5902-49B2-880A-1F7738E5A384} . (.Microsoft Corporation - Microsoft Office Web Components 2003.) -- C:\Program Files (x86)\Common Files\microsoft shared\Web Components\11\OWC11.dll
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (...) --
O18 - Handler: skype4com [64Bits] - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
O18 - Handler: viprotocol [64Bits] - {B658800C-F66E-4EF3-AB85-6C0C227862A9} . (...) -- C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\11.1.0\ViProtocol.dll
O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (...) --
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (...) --
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (...) --
O18 - Filter: text/xml [64Bits] - {807553E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.dll
~ Scan Protocole Additionnel in 00mn 00s
---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ Scan SSODL in 00mn 00s
---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe
O23 - Service: ConfigFree WiMAX Service (cfWiMAXService) . (.TOSHIBA CORPORATION - ConfigFree Service Process.) - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe
O23 - Service: ConfigFree Gadget Service (ConfigFree Gadget Service) . (.TOSHIBA CORPORATION - ConfigFree Gadget Process Service.) - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe
O23 - Service: ConfigFree Service (ConfigFree Service) . (.TOSHIBA CORPORATION - ConfigFree Service Process.) - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Orange update Core Service (Orange update Core Service) . (.France Telecom SA - Orange Upd@te.) - C:\Program Files (x86)\Orange\OrangeUpdate\Service\OUCore.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: TeamViewer 7 (TeamViewer7) . (.TeamViewer GmbH - TeamViewer Remote Control Application.) - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: Notebook Performance Tuning Service (TEM (TemproMonitoringService) . (.Toshiba Europe GmbH - Toshiba TEMPRO.) - C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) . (.TOSHIBA Corporation - TDCSrv Application.) - C:\Windows\system32\TODDSrv.exe
O23 - Service: (vToolbarUpdater11.1.0) . (.Pas de propriétaire - ToolbarU Application.) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.1.0\ToolbarUpdater.exe
O23 - Service: (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
~ Scan Services in 00mn 00s
---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Scan Desktop Component in 00mn 00s
---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
~ Scan Scheduled Task in 00mn 00s
---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Internet Explorer [64Bits] - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Scan Active Setup in 00mn 00s
---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Scan Drivers in 00mn 00s
---\\ Logiciels installés (O42)
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Advanced Uninstaller PRO - Version 11 - (.Innovative Solutions.) [HKLM] -- AU11_is1
O42 - Logiciel: ArcSoft Panorama Maker 3 - (.ArcSoft.) [HKLM] -- {A5F68DC8-0278-4AD8-B413-861509B5F25B}
O42 - Logiciel: BurnAware Free 4.4 - (.Burnaware Technologies.) [HKLM] -- BurnAware Free_is1
O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM] -- {E3D63B95-4B21-414A-A2C7-D6D6A6AC6D79}
O42 - Logiciel: CrystalDiskInfo 5.0.0 - (.Crystal Dew World.) [HKLM] -- CrystalDiskInfo_is1
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: Digital Image Recovery 1.47 - (.Alexander Grau.) [HKLM] -- Digital Image Recovery_is1
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: HD Tune 2.55 - (.EFD Software.) [HKLM] -- HD Tune_is1
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}
O42 - Logiciel: HPDiagnosticAlert - (.Microsoft.) [HKLM] -- {846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: KC Softwares SUMo - (.KC Softwares.) [HKLM] -- KC Softwares SUMo_is1
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
O42 - Logiciel: Microsoft .NET Framework 1.1 French Language Pack - (.Microsoft.) [HKLM] -- {9A394342-4A68-4EBA-85A6-55B559F4E700}
O42 - Logiciel: Microsoft Office File Validation Add-In - (.Microsoft Corporation.) [HKLM] -- {90140000-2005-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Outlook Connector - (.Microsoft Corporation.) [HKLM] -- {95140000-007A-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Standard Edition 2003 - (.Microsoft Corporation.) [HKLM] -- {9112040C-6000-11D3-8CFE-0150048383C9}
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 - (.Microsoft Corporation.) [HKLM] -- {86CE85E6-DBAC-3FFD-B977-E4B79F83C909}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 - (.Microsoft Corporation.) [HKLM] -- {FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 - (.Microsoft Corporation.) [HKLM] -- {E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F}
O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}
O42 - Logiciel: Nikon FotoShare - (.Pas de propriétaire.) [HKLM] -- Nikon FotoShare
O42 - Logiciel: Nikon Message Center - (.Pas de propriétaire.) [HKLM] -- {D2FCC1AE-6311-47C5-8130-C6C66D77DD71}
O42 - Logiciel: Notification Mail - (.Orange.) [HKLM] -- MailNotifier
O42 - Logiciel: Orange Web Player 1.213932 - (.Orange.) [HKLM] -- Orange Web Player_is1
O42 - Logiciel: Orange update - (.Orange.) [HKLM] -- OrangeUpdateManager
O42 - Logiciel: PicPick - (.NTeWORKS.) [HKLM] -- PicPick
O42 - Logiciel: PictureProject - (.Nikon.) [HKLM] -- {FF3999BE-1A7B-4738-88AA-97BF14094A4A}
O42 - Logiciel: PrintPratic - (.Micro Application.) [HKLM] -- PrintPratic
O42 - Logiciel: Realtek 8136 8168 8169 Ethernet Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM] -- {96AE7E41-E34E-47D0-AC07-1091A8127911}
O42 - Logiciel: Realtek WLAN Driver - (.Realtek.) [HKLM] -- {0FB630AB-7BD8-40AE-B223-60397D57C3C9}
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2160841
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2446708
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2478663
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2518870
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2539636
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2572078
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2604121
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2633870
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656351
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656368
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656368v2
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656405
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2686827
O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client P - (.Microsoft Corporation.) [HKLM] -- {4B5F58F7-C7D1-3CE3-9B37-B657F0852643}.KB2478663
O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client P - (.Microsoft Corporation.) [HKLM] -- {4B5F58F7-C7D1-3CE3-9B37-B657F0852643}.KB2518870
O42 - Logiciel: Skype™ 5.10 - (.Skype Technologies S.A..) [HKLM] -- {EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}
O42 - Logiciel: SumatraPDF - (.Krzysztof Kowalczyk.) [HKLM] -- SumatraPDF
O42 - Logiciel: TOSHIBA Bulletin Board - (.TOSHIBA Corporation.) [HKLM] -- InstallShield_{1E9E8BA6-FD0B-465D-AFA2-ECE10BF095F9}
O42 - Logiciel: TOSHIBA ConfigFree - (.TOSHIBA Corporation.) [HKLM] -- {F3529665-D75E-4D6D-98F0-745C78C68E9B}
O42 - Logiciel: TOSHIBA DVD PLAYER - (.TOSHIBA Corporation.) [HKLM] -- {6C5F3BDC-0A1B-4436-A696-5939629D5C31}
O42 - Logiciel: TOSHIBA Extended Tiles for Windows Mobility Center - (.Pas de propriétaire.) [HKLM] -- InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}
O42 - Logiciel: TOSHIBA Face Recognition - (.TOSHIBA Corporation.) [HKLM] -- InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}
O42 - Logiciel: TOSHIBA HDD/SSD Alert - (.TOSHIBA Corporation.) [HKLM] -- InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}
O42 - Logiciel: TOSHIBA Hardware Setup - (.TOSHIBA CORPORATION.) [HKLM] -- InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}
O42 - Logiciel: TOSHIBA Hardware Setup - (.TOSHIBA CORPORATION.) [HKLM] -- {5279374D-87FE-4879-9385-F17278EBB9D3}
O42 - Logiciel: TOSHIBA Mot de passe responsable - (.TOSHIBA CORPORATION.) [HKLM] -- InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}
O42 - Logiciel: TOSHIBA Recovery Media Creator Reminder - (.TOSHIBA.) [HKLM] -- InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}
O42 - Logiciel: TOSHIBA ReelTime - (.TOSHIBA Corporation.) [HKLM] -- InstallShield_{C2DDF845-7107-40E8-8D2A-8719F1799570}
O42 - Logiciel: TOSHIBA Service Station - (.TOSHIBA.) [HKLM] -- {AC6569FA-6919-442A-8552-073BE69E247A}
O42 - Logiciel: TOSHIBA Supervisor Password - (.TOSHIBA CORPORATION.) [HKLM] -- {51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}
O42 - Logiciel: TOSHIBA TEMPRO - (.Toshiba Europe GmbH.) [HKLM] -- {3A9B3B6D-3C08-4283-AF50-FD82C49DD71E}
O42 - Logiciel: TOSHIBA Value Added Package - (.TOSHIBA Corporation.) [HKLM] -- InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}
O42 - Logiciel: TOSHIBA Web Camera Application - (.TOSHIBA Corporation.) [HKLM] -- {5E6F6CF3-BACC-4144-868C-E14622C658F3}
O42 - Logiciel: TOSHIBA eco Utility - (.TOSHIBA Corporation.) [HKLM] -- InstallShield_{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}
O42 - Logiciel: TRORMCLauncher - (.Pas de propriétaire.) [HKLM] -- InstallShield_{E65C7D8E-186D-484B-BEA8-DEF0331CE600}
O42 - Logiciel: TeamViewer 7 - (.TeamViewer.) [HKLM] -- TeamViewer 7
O42 - Logiciel: Toshiba Assist - (.TOSHIBA.) [HKLM] -- {1B87C40B-A60B-4EF3-9A68-706CF4B69978}
O42 - Logiciel: Toshiba Manuals - (.TOSHIBA.) [HKLM] -- {90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}
O42 - Logiciel: Toshiba Online Product Information - (.TOSHIBA.) [HKLM] -- {2290A680-4083-410A-ADCC-7092C67FC052}
O42 - Logiciel: Toshiba Photo Service - powered by myphotobook - (.myphotobook GmbH.) [HKLM] -- eu.myphotobook.001F9DF2D0BAABEB11F42CCEE43224607B61109C.1
O42 - Logiciel: Toshiba Photo Service - powered by myphotobook - (.myphotobook GmbH.) [HKLM] -- {0823A2E3-69DD-A37A-7CD9-1CBEB037545C}
O42 - Logiciel: Unlocker 1.9.1 - (.Cedrick Collomb.) [HKLM] -- Unlocker
O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2468871) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871
O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2533523) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523
O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2600217) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217
O42 - Logiciel: VLC media player 2.0.3 - (.VideoLAN.) [HKLM] -- VLC media player
O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite
O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- {34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {D45240D3-B6B3-4FF9-B243-54ECE3E10066}
O42 - Logiciel: Windows Live Installer - (.Microsoft Corporation.) [HKLM] -- {0B0F231F-CE6A-483D-AA23-77B364F75917}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9D56775A-93F3-44A3-8092-840E3826DE30}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9FAE6E8D-E686-49F5-A574-0A58DFD9580C}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {AB61A2E9-37D3-485D-9085-19FBDF8CEF4A}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {E5B21F11-6933-4E0B-A25C-7963E3C07D11}
O42 - Logiciel: Windows Live PIMT Platform - (.Microsoft Corporation.) [HKLM] -- {83C292B7-38A5-440B-A731-07070E81A64F}
O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {A9BDCA6B-3653-467B-AC83-94367DA3BFE3}
O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {C893D8C0-1BA0-4517-B11C-E89B65E72F70}
O42 - Logiciel: Windows Live SOXE - (.Microsoft Corporation.) [HKLM] -- {682B3E4F-696A-42DE-A41C-4C07EA1678B4}
O42 - Logiciel: Windows Live SOXE Definitions - (.Microsoft Corporation.) [HKLM] -- {200FEC62-3C34-4D60-9CE8-EC372E01C08F}
O42 - Logiciel: Windows Live UX Platform - (.Microsoft Corporation.) [HKLM] -- {CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}
O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM] -- {05E379CC-F626-4E7D-8354-463865B303BF}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {AAAFC670-569B-4A2F-82B4-42945E0DE3EF}
O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM] -- {62687B11-58B5-4A18-9BC3-9DF4CE03F194}
---\\ HKCU & HKLM Software Keys
[HKCU\Software\AppDataLow\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Loc]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software\Orange]
[HKCU\Software\AppDataLow\Software\Yahoo]
[HKCU\Software\AppDataLow\Software]
[HKLM\Software\7-Zip]
[HKLM\Software\ATI Technologies]
[HKLM\Software\ATI]
[HKLM\Software\AVG Secure Search]
[HKLM\Software\Adobe]
[HKLM\Software\AdwCleaner]
[HKLM\Software\America Online]
[HKLM\Software\ArcSoft]
[HKLM\Software\Big Fish Games]
[HKLM\Software\Borland]
[HKLM\Software\COMPAL]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Corel]
[HKLM\Software\Cygnus Solutions]
[HKLM\Software\Debug]
[HKLM\Software\Elf_1.13]
[HKLM\Software\GPL Ghostscript]
[HKLM\Software\Google]
[HKLM\Software\HP]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\I.R.I.S.]
[HKLM\Software\ICE]
[HKLM\Software\INNOVATIVE]
[HKLM\Software\IncrediMail]
[HKLM\Software\Innovative Solutions]
[HKLM\Software\InstallShield]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\KC Softwares]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\McAfee.com]
[HKLM\Software\McAfeeInstaller]
[HKLM\Software\MimarSinan]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\Nikon]
[HKLM\Software\ODBC]
[HKLM\Software\Orange]
[HKLM\Software\Planets]
[HKLM\Software\Policies]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\RtWLan]
[HKLM\Software\SecureDigitalServices]
[HKLM\Software\SiteAdvisor]
[HKLM\Software\Skype]
[HKLM\Software\TOSHIBA]
[HKLM\Software\TeamViewer]
[HKLM\Software\Uniblue]
[HKLM\Software\VideoLAN]
[HKLM\Software\Volatile]
[HKLM\Software\Windows]
[HKLM\Software\Yahoo]
[HKLM\Software\pixology]
~ Scan Softwares in 00mn 00s
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 04/02/2011 - 19:39:03 - [0,054] ----D C:\Program Files (x86)\123envoi
O43 - CFD: 22/04/2011 - 00:25:13 - [4,591] ----D C:\Program Files (x86)\7-Zip
O43 - CFD: 01/03/2010 - 15:13:11 - [37,840] ----D C:\Program Files (x86)\ArcSoft
O43 - CFD: 23/02/2010 - 15:51:31 - [80,729] ----D C:\Program Files (x86)\ATI Technologies
O43 - CFD: 02/06/2012 - 22:13:30 - [23,132] ----D C:\Program Files (x86)\BurnAware Free
O43 - CFD: 01/09/2012 - 16:08:09 - [430,115] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 01/09/2012 - 16:08:38 - [3,466] ----D C:\Program Files (x86)\CrystalDiskInfo
O43 - CFD: 22/05/2012 - 14:25:51 - [1066,342] ----D C:\Program Files (x86)\Digital Image Recovery
O43 - CFD: 16/04/2011 - 17:04:09 - [0] ----D C:\Program Files (x86)\EASEUS
O43 - CFD: 23/08/2012 - 13:16:14 - [22,283] ----D C:\Program Files (x86)\Google
O43 - CFD: 09/11/2010 - 20:46:27 - [7,701] ----D C:\Program Files (x86)\GPLGS
O43 - CFD: 10/05/2012 - 08:56:16 - [1,239] ----D C:\Program Files (x86)\HD Tune
O43 - CFD: 06/02/2011 - 18:05:34 - [233,650] ----D C:\Program Files (x86)\HP
O43 - CFD: 27/03/2012 - 01:16:59 - [0,061] ----D C:\Program Files (x86)\hpmon
O43 - CFD: 14/07/2012 - 15:36:56 - [20,760] ----D C:\Program Files (x86)\Innovative Solutions
O43 - CFD: 06/09/2010 - 19:27:58 - [143,304] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 15/08/2012 - 14:10:43 - [5,363] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 31/08/2012 - 11:47:02 - [92,509] ----D C:\Program Files (x86)\Java
O43 - CFD: 30/12/2011 - 02:52:35 - [3,285] ----D C:\Program Files (x86)\KC Softwares
O43 - CFD: 07/05/2010 - 20:44:29 - [0] ----D C:\Program Files (x86)\Logitech Touch Mouse Server
O43 - CFD: 14/07/2012 - 15:05:21 - [5,645] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 25/02/2010 - 03:26:54 - [62,083] ----D C:\Program Files (x86)\Micro Application
O43 - CFD: 20/12/2010 - 01:57:01 - [0] ----D C:\Program Files (x86)\Microsoft Antimalware
O43 - CFD: 29/06/2011 - 09:42:19 - [227,030] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 28/05/2012 - 10:12:45 - [1,126] ----D C:\Program Files (x86)\Microsoft Security Client
O43 - CFD: 10/05/2012 - 11:16:48 - [40,838] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 24/02/2010 - 12:53:35 - [0,014] ----D C:\Program Files (x86)\Microsoft Visual Studio
O43 - CFD: 24/02/2010 - 17:45:11 - [4,312] ----D C:\Program Files (x86)\Microsoft Works
O43 - CFD: 01/10/2010 - 10:55:04 - [0,140] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 08/01/2012 - 21:32:18 - [0,002] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 14/07/2009 - 07:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 07/02/2011 - 12:21:04 - [38,094] ----D C:\Program Files (x86)\MSECache
O43 - CFD: 11/06/2010 - 13:09:37 - [27,989] ----D C:\Program Files (x86)\Nikon
O43 - CFD: 14/07/2012 - 15:40:03 - [50,164] ----D C:\Program Files (x86)\Orange
O43 - CFD: 27/05/2012 - 21:22:40 - [7,641] ----D C:\Program Files (x86)\PicPick
O43 - CFD: 23/02/2010 - 16:05:30 - [13,562] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 23/02/2010 - 16:08:08 - [3,987] ----D C:\Program Files (x86)\Realtek WLAN Driver
O43 - CFD: 14/07/2009 - 07:32:38 - [37,349] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 18/07/2012 - 22:37:06 - [16,855] R---D C:\Program Files (x86)\Skype
O43 - CFD: 26/09/2011 - 23:52:22 - [8,194] ----D C:\Program Files (x86)\SumatraPDF
O43 - CFD: 30/11/2011 - 15:09:34 - [28,452] ----D C:\Program Files (x86)\TeamViewer
O43 - CFD: 23/02/2010 - 16:00:23 - [0] --H-D C:\Program Files (x86)\Temp
O43 - CFD: 10/05/2012 - 17:14:28 - [0,000] ----D C:\Program Files (x86)\Toolbar Uninstaller
O43 - CFD: 23/02/2010 - 16:13:13 - [285,899] ----D C:\Program Files (x86)\TOSHIBA
O43 - CFD: 04/02/2011 - 13:52:24 - [10,895] ----D C:\Program Files (x86)\Toshiba TEMPRO
O43 - CFD: 10/04/2010 - 01:26:02 - [0,055] ----D C:\Program Files (x86)\Total Immersion
O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 25/02/2010 - 12:06:48 - [0,221] ----D C:\Program Files (x86)\Unlocker
O43 - CFD: 16/04/2010 - 18:48:48 - [92,145] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 21/05/2012 - 15:19:50 - [0] ----D C:\Program Files (x86)\VS Revo Group
O43 - CFD: 14/07/2009 - 17:24:08 - [0,500] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 14/07/2012 - 15:46:49 - [94,272] ----D C:\Program Files (x86)\Windows Live
O43 - CFD: 23/02/2011 - 02:33:31 - [5,895] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 23/02/2011 - 02:33:30 - [4,791] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 23/02/2011 - 02:33:30 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 23/02/2011 - 02:33:30 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 23/02/2011 - 02:33:31 - [6,780] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 21/05/2012 - 01:17:22 - [18,490] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 01/09/2012 - 16:08:35 - [4,953] ----D C:\Program Files (x86)\Common Files\AVG Secure Search
O43 - CFD: 17/01/2011 - 01:19:36 - [7,320] ----D C:\Program Files (x86)\Common Files\Borland Shared
O43 - CFD: 24/02/2010 - 12:53:46 - [0,082] ----D C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 01/03/2010 - 18:31:02 - [0,951] ----D C:\Program Files (x86)\Common Files\Hewlett-Packard
O43 - CFD: 01/03/2010 - 18:31:21 - [5,403] ----D C:\Program Files (x86)\Common Files\HP
O43 - CFD: 14/07/2012 - 15:37:12 - [1,012] ----D C:\Program Files (x86)\Common Files\Innovative Solutions
O43 - CFD: 02/01/2011 - 14:21:19 - [12,546] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 30/08/2012 - 09:30:49 - [0,003] ----D C:\Program Files (x86)\Common Files\Java
O43 - CFD: 14/07/2012 - 15:43:50 - [284,385] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 26/02/2010 - 13:45:09 - [7,413] ----D C:\Program Files (x86)\Common Files\muvee Technologies
O43 - CFD: 11/06/2010 - 13:10:07 - [28,237] ----D C:\Program Files (x86)\Common Files\Nikon
O43 - CFD: 14/07/2009 - 05:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 06/02/2012 - 03:55:40 - [2,056] ----D C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 14/07/2012 - 15:47:45 - [27,228] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 23/02/2010 - 16:13:19 - [0,759] ----D C:\Program Files (x86)\Common Files\Toshiba Shared
O43 - CFD: 09/09/2009 - 17:51:19 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 04/02/2011 - 13:52:29 - [8,563] ----D C:\Program Files (x86)\Common Files\Wise Installation Wizard
O43 - CFD: 23/08/2012 - 13:16:29 - [0] ----D C:\ProgramData\Adobe
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 23/02/2010 - 15:53:10 - [0,000] ----D C:\ProgramData\ATI
O43 - CFD: 24/06/2012 - 12:03:08 - [0,385] ----D C:\ProgramData\AVG Secure Search
O43 - CFD: 23/02/2010 - 17:54:06 - [0] --H-D C:\ProgramData\Bureau
O43 - CFD: 04/10/2011 - 13:29:14 - [0] ----D C:\ProgramData\Canneverbe Limited
O43 - CFD: 21/05/2012 - 12:50:41 - [0,000] --H-D C:\ProgramData\Common Files
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 26/02/2010 - 13:46:53 - [0,000] ----D C:\ProgramData\EnterNHelp
O43 - CFD: 23/02/2010 - 17:54:06 - [0] --H-D C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Favorites
O43 - CFD: 28/12/2011 - 22:11:17 - [0,020] ----D C:\ProgramData\Freemake
O43 - CFD: 23/08/2012 - 13:16:18 - [0,491] ----D C:\ProgramData\Google
O43 - CFD: 23/02/2010 - 20:50:12 - [0,215] ----D C:\ProgramData\Hewlett-Packard
O43 - CFD: 06/02/2011 - 18:04:42 - [28,488] ----D C:\ProgramData\HP
O43 - CFD: 06/02/2011 - 18:03:52 - [0,009] ----D C:\ProgramData\HP Product Assistant
O43 - CFD: 02/07/2011 - 22:53:27 - [0,000] ----D C:\ProgramData\HPSSUPPLY
O43 - CFD: 24/06/2012 - 12:42:04 - [9,566] ----D C:\ProgramData\Innovative Solutions
O43 - CFD: 02/01/2011 - 14:21:54 - [0] ----D C:\ProgramData\InstallShield
O43 - CFD: 11/12/2011 - 12:29:02 - [0,004] ----D C:\ProgramData\iolo
O43 - CFD: 23/02/2010 - 15:45:41 - [0,025] ----D C:\ProgramData\IsolatedStorage
O43 - CFD: 03/03/2010 - 03:24:01 - [0,000] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 14/07/2012 - 15:45:16 - [549,301] -S--D C:\ProgramData\Microsoft
O43 - CFD: 23/02/2010 - 18:57:17 - [0,055] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 24/02/2010 - 13:26:52 - [0,057] ----D C:\ProgramData\MSScanAppDataDir
O43 - CFD: 17/03/2011 - 02:29:33 - [0] ----D C:\ProgramData\NCH Software
O43 - CFD: 11/06/2010 - 13:10:02 - [6,674] ----D C:\ProgramData\Nikon
O43 - CFD: 26/07/2011 - 16:51:42 - [0,626] ----D C:\ProgramData\Orange
O43 - CFD: 23/02/2010 - 19:02:49 - [0,001] ----D C:\ProgramData\Partner
O43 - CFD: 09/09/2009 - 17:42:19 - [0,000] ----D C:\ProgramData\SiteAdvisor
O43 - CFD: 18/07/2012 - 22:37:14 - [60,828] ----D C:\ProgramData\Skype
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Start Menu
O43 - CFD: 10/04/2010 - 19:45:59 - [0,000] ----D C:\ProgramData\Sun
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Templates
O43 - CFD: 23/02/2010 - 16:13:14 - [5,019] ----D C:\ProgramData\Toshiba
O43 - CFD: 04/02/2011 - 13:52:45 - [0,006] ----D C:\ProgramData\TOSHIBA Tempro
O43 - CFD: 23/02/2010 - 17:54:23 - [0,001] ----D C:\ProgramData\ToshibaEurope
O43 - CFD: 26/02/2010 - 13:46:53 - [0,000] ----D C:\ProgramData\Ultima_T15
O43 - CFD: 23/02/2010 - 15:53:43 - [2,158] ----D C:\ProgramData\Vista32
O43 - CFD: 23/02/2010 - 15:53:43 - [3,146] ----D C:\ProgramData\Vista64
O43 - CFD: 01/03/2010 - 18:55:07 - [0,000] ----D C:\ProgramData\WEBREG
O43 - CFD: 01/11/2010 - 12:35:08 - [4,839] ----D C:\ProgramData\WildTangent
O43 - CFD: 23/02/2010 - 15:55:54 - [2,117] ----D C:\ProgramData\win7_32
O43 - CFD: 23/02/2010 - 15:55:54 - [3,069] ----D C:\ProgramData\win7_64
O43 - CFD: 29/11/2010 - 01:40:12 - [1,577] ----D C:\Users\A1\AppData\Roaming\Adobe
O43 - CFD: 23/02/2010 - 17:57:33 - [0] ----D C:\Users\A1\AppData\Roaming\ATI
O43 - CFD: 03/05/2010 - 23:20:04 - [0] ----D C:\Users\A1\AppData\Roaming\BatteryBar
O43 - CFD: 04/10/2011 - 13:29:13 - [0,001] ----D C:\Users\A1\AppData\Roaming\Canneverbe Limited
O43 - CFD: 01/09/2012 - 16:11:07 - [27,550] ----D C:\Users\A1\AppData\Roaming\Dropbox
O43 - CFD: 06/08/2010 - 18:54:57 - [0,000] ----D C:\Users\A1\AppData\Roaming\FreeBurner
O43 - CFD: 23/02/2010 - 18:16:07 - [0] ----D C:\Users\A1\AppData\Roaming\Google
O43 - CFD: 06/02/2011 - 18:28:02 - [0,130] ----D C:\Users\A1\AppData\Roaming\HP
O43 - CFD: 18/08/2012 - 23:52:58 - [0,021] ----D C:\Users\A1\AppData\Roaming\HpUpdate
O43 - CFD: 30/11/2010 - 18:50:02 - [0,009] ----D C:\Users\A1\AppData\Roaming\Icones
O43 - CFD: 23/02/2010 - 17:56:53 - [0] ----D C:\Users\A1\AppData\Roaming\Identities
O43 - CFD: 04/04/2011 - 16:56:13 - [0] ----D C:\Users\A1\AppData\Roaming\InstallShield
O43 - CFD: 30/12/2011 - 02:53:39 - [0,019] ----D C:\Users\A1\AppData\Roaming\KC Softwares
O43 - CFD: 07/05/2010 - 11:39:37 - [0,003] ----D C:\Users\A1\AppData\Roaming\Logishrd
O43 - CFD: 07/05/2010 - 11:39:37 - [0] ----D C:\Users\A1\AppData\Roaming\Logitech
O43 - CFD: 09/09/2009 - 17:33:54 - [0,000] ----D C:\Users\A1\AppData\Roaming\Macromedia
O43 - CFD: 03/03/2010 - 03:24:08 - [0,109] ----D C:\Users\A1\AppData\Roaming\Malwarebytes
O43 - CFD: 14/07/2009 - 17:35:05 - [0] ----D C:\Users\A1\AppData\Roaming\Media Center Programs
O43 - CFD: 17/06/2012 - 16:20:33 - [6,061] -S--D C:\Users\A1\AppData\Roaming\Microsoft
O43 - CFD: 26/02/2010 - 13:50:06 - [45,913] ----D C:\Users\A1\AppData\Roaming\Nikon
O43 - CFD: 22/04/2012 - 01:45:03 - [0] ----D C:\Users\A1\AppData\Roaming\Orange
O43 - CFD: 10/01/2011 - 13:35:38 - [0] ----D C:\Users\A1\AppData\Roaming\PeerNetworking
O43 - CFD: 27/04/2010 - 00:05:40 - [0,000] ----D C:\Users\A1\AppData\Roaming\PhotoFiltre
O43 - CFD: 01/09/2012 - 16:08:41 - [0,002] ----D C:\Users\A1\AppData\Roaming\picpick
O43 - CFD: 17/01/2011 - 01:33:07 - [0] ----D C:\Users\A1\AppData\Roaming\picpick_temp
O43 - CFD: 01/09/2012 - 16:11:28 - [5,323] ----D C:\Users\A1\AppData\Roaming\Skype
O43 - CFD: 14/12/2010 - 17:01:35 - [0,069] ----D C:\Users\A1\AppData\Roaming\skypePM
O43 - CFD: 05/04/2012 - 00:58:47 - [0,506] ----D C:\Users\A1\AppData\Roaming\SumatraPDF
O43 - CFD: 30/11/2011 - 15:08:03 - [0,901] ----D C:\Users\A1\AppData\Roaming\TeamViewer
O43 - CFD: 14/10/2010 - 10:17:17 - [0] ----D C:\Users\A1\AppData\Roaming\TinyPic Uploader
O43 - CFD: 30/12/2011 - 12:46:57 - [2,102] ----D C:\Users\A1\AppData\Roaming\Toshiba
O43 - CFD: 22/07/2012 - 17:36:57 - [0,080] ----D C:\Users\A1\AppData\Roaming\vlc
O43 - CFD: 28/05/2012 - 10:04:42 - [0,908] ----D C:\Users\A1\AppData\Roaming\Wise Registry Cleaner
O43 - CFD: 26/02/2010 - 03:04:18 - [0] ----D C:\Users\A1\AppData\Roaming\Yahoo!
O43 - CFD: 25/05/2010 - 22:49:09 - [13,830] ----D C:\Users\A1\AppData\Local\Adobe
O43 - CFD: 23/02/2010 - 17:54:13 - [0] ----D C:\Users\A1\AppData\Local\Application Data
O43 - CFD: 16/04/2010 - 18:45:55 - [0] ----D C:\Users\A1\AppData\Local\Apps
O43 - CFD: 23/02/2010 - 17:57:33 - [0,057] ----D C:\Users\A1\AppData\Local\ATI
O43 - CFD: 30/08/2012 - 15:02:28 - [0,266] ----D C:\Users\A1\AppData\Local\ElevatedDiagnostics
O43 - CFD: 13/07/2012 - 00:26:07 - [0] ----D C:\Users\A1\AppData\Local\Google
O43 - CFD: 23/02/2010 - 17:54:13 - [0] ----D C:\Users\A1\AppData\Local\Historique
O43 - CFD: 01/03/2010 - 19:09:07 - [45,323] ----D C:\Users\A1\AppData\Local\HP
O43 - CFD: 14/07/2012 - 15:02:49 - [0,001] ----D C:\Users\A1\AppData\Local\Innovative Solutions
O43 - CFD: 10/03/2010 - 18:55:58 - [1,080] ----D C:\Users\A1\AppData\Local\Micro Application
O43 - CFD: 19/06/2012 - 15:54:39 - [591,315] ----D C:\Users\A1\AppData\Local\Microsoft
O43 - CFD: 10/03/2010 - 18:55:55 - [0,008] ----D C:\Users\A1\AppData\Local\Micro_Application
O43 - CFD: 20/11/2011 - 01:52:15 - [0] ----D C:\Users\A1\AppData\Local\MigWiz
O43 - CFD: 28/02/2010 - 13:55:38 - [0,000] ----D C:\Users\A1\AppData\Local\Orange
O43 - CFD: 22/02/2011 - 14:04:43 - [0] ----D C:\Users\A1\AppData\Local\PackageAware
O43 - CFD: 09/05/2011 - 12:58:53 - [0] ----D C:\Users\A1\AppData\Local\Pixology
O43 - CFD: 13/09/2010 - 18:49:21 - [0,000] ----D C:\Users\A1\AppData\Local\Songr
O43 - CFD: 14/07/2012 - 15:22:17 - [0,003] ----D C:\Users\A1\AppData\Local\Temp
O43 - CFD: 23/02/2010 - 17:54:13 - [0] ----D C:\Users\A1\AppData\Local\Temporary Internet Files
O43 - CFD: 02/03/2010 - 16:35:58 - [0,001] ----D C:\Users\A1\AppData\Local\Toshiba
O43 - CFD: 23/02/2010 - 18:41:30 - [0,000] ----D C:\Users\A1\AppData\Local\TOSHIBA_Corporation
O43 - CFD: 23/02/2010 - 17:56:47 - [0] ----D C:\Users\A1\AppData\Local\VirtualStore
O43 - CFD: 09/06/2012 - 16:16:01 - [0,006] ----D C:\Users\A1\AppData\Local\Western Digital
O43 - CFD: 19/08/2012 - 00:32:50 - [0,066] ----D C:\Users\A1\AppData\Local\Windows Live
O43 - CFD: 25/07/2012 - 12:27:49 - [0] ----D C:\Users\A1\AppData\Local\{002CACF7-E215-4133-9873-6046F3C79C2B}
O43 - CFD: 02/08/2012 - 08:38:22 - [0] ----D C:\Users\A1\AppData\Local\{003A46C5-B31A-4D91-995F-64023B6A3311}
O43 - CFD: 22/08/2012 - 08:56:54 - [0] ----D C:\Users\A1\AppData\Local\{005155D5-2272-4498-A74B-C48FB1162D13}
O43 - CFD: 05/08/2012 - 23:28:28 - [0] ----D C:\Users\A1\AppData\Local\{02060EB8-1FDB-4817-B10F-E969618F1823}
O43 - CFD: 25/07/2012 - 16:14:11 - [0] ----D C:\Users\A1\AppData\Local\{025C508B-8515-4A8F-8A01-021E81C0A9AA}
O43 - CFD: 27/07/2012 - 08:26:33 - [0] ----D C:\Users\A1\AppData\Local\{06F1EAFB-7E00-480A-8758-B2C5B5B4DE2A}
O43 - CFD: 15/08/2012 - 21:06:25 - [0] ----D C:\Users\A1\AppData\Local\{07FC1C66-A9FB-471E-B00E-C536DDB35FDC}
O43 - CFD: 03/08/2012 - 12:23:59 - [0] ----D C:\Users\A1\AppData\Local\{08438E65-0605-42CE-8664-6698C1E699C5}
O43 - CFD: 18/07/2012 - 16:26:54 - [0] ----D C:\Users\A1\AppData\Local\{09D8C7C9-3E01-4CC6-A876-24209C1BE7BF}
O43 - CFD: 21/07/2012 - 08:13:41 - [0] ----D C:\Users\A1\AppData\Local\{0AA7D991-FEC3-4055-8083-0E4814B26888}
O43 - CFD: 18/08/2012 - 00:31:22 - [0] ----D C:\Users\A1\AppData\Local\{0B30F4ED-48E5-44B6-A43C-6BFBC071FB0F}
O43 - CFD: 10/08/2012 - 10:29:21 - [0] ----D C:\Users\A1\AppData\Local\{0BF7D512-3FDA-4B6D-B867-61A53F377E0F}
O43 - CFD: 29/07/2012 - 20:33:52 - [0] ----D C:\Users\A1\AppData\Local\{0C462FEC-EC23-44F2-9CCF-BA3A8327F247}
O43 - CFD: 09/08/2012 - 22:28:24 - [0] ----D C:\Users\A1\AppData\Local\{0C5EB085-D4EC-44B0-8C3C-8AB468475326}
O43 - CFD: 06/08/2012 - 12:14:31 - [0] ----D C:\Users\A1\AppData\Local\{0E33C629-725A-471A-B3D1-4EAAAE3B548E}
O43 - CFD: 14/08/2012 - 14:57:54 - [0] ----D C:\Us