Redirection de page internet sur firefox

bonjour

Télécharge ZHPDiag ( de Nicolas coolman ).
https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

(outil de diagnostic)

Double clique sur le fichier d'installation, puis installe le avec les paramètres par défaut ( N'oublie pas de cocher " Créer une icône sur le bureau " )

Lance ZHPDiag en double cliquant sur l'icône présente sur ton bureau (Clique droit -> Executer en tant qu'admin ( vista )

Clique sur la loupe en haut à gauche, puis laisse l'outil scanner.

Une fois le scan terminé, clique sur l'icône en forme de disquette et enregistre le fichier sur ton bureau.

Rend toi sur Cjoint : http://www.cijoint.fr/

Clique sur "Parcourir " dans la partie " Joindre un fichier[...] "

Sélectionne le rapport ZHPdiag.txt qui se trouve sur ton bureau

Clique ensuite sur "Cliquez ici pour déposer le fichier " et copie/colle le lien dans ton prochain message

Bonjour fbisptv,

Je ne pense pas que cela va changer grand chose au fait que je dois avoir des virus ou autre bibitte...

Je dois faire un nettoyage sur mon ordinateur. :)

Mais merci quand même.

Merci,

j'exécute ceci et te reviens la dessus aussitôt que c'est fait :)

Bonjour moment de grace,

Alors voici le lien

http://www.cijoint.fr/cjlink.php?file=cj201008/cijPUZMnv3.txt

ok

1)

Téléchargez USBFIX de El Desaparecido, C_xx

http://pagesperso-orange.fr/NosTools/Chiquitine29/UsbFix.exe
ou
https://www.ionos.fr/?affiliate_id=77097

/!\ Utilisateur de vista et windows 7 :
ne pas oublier de désactiver Le contrôle des comptes utilisateurs
https://www.commentcamarche.net/faq/8343-vista-desactiver-l-uac

/!\ Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d'avoir été infectées sans les ouvrir

Double clic sur le raccourci UsbFix présent sur le bureau .

Choisir l'option suppression
(d'autres options disponibles, voir le tutoriel).
Laissez travailler l'outil.
Le menu démarrer et les icônes vont disparaître.. c'est normal.

Si un message te demande de redémarrer l'ordinateur fais le ...

Au redémarrage, le fix se relance... laisses l'opération s'effectuer.

Le bloc note s'ouvre avec un rapport, envoies le dans la prochaine réponse

* Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )

( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

* Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

* Tuto : http://pagesperso-orange.fr/NosTools/usbfix.html

UsbFix peut te demander d'uploader un dossier compressé à cette adresse : https://www.ionos.fr/?affiliate_id=77097

Il est enregistré sur ton bureau.

Merci de l'envoyer à l'adresse indiquée afin d'aider l'auteur de UsbFix dans ses recherches.

......................................

2)

/!\ Utilisateur de vista et windows 7 : ne pas oublier de désactiver Le contrôle des comptes utilisateurs(uac)

https://www.commentcamarche.net/faq/8343-vista-desactiver-l-uac
Téléchargez Lop S&D.exe sur le Bueau

https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
Certaines infections bloquent les telechargements d' outils de desinfection utilisez ce lien alternatif:
http://ww38.toofiles.com/fr/oip/documents/exe/yop4.html

Lop S&D est détecté par certains antivirus : il ne s'agit pas d'un virus (faux positif), mais d'un utilitaire destiné à mettre fin à des processus. Dans le cas d'une alerte de la part de votre antivirus, veuillez désactiver votre antivirus pendant la procédure

* Double-cliquez dessus pour lancer l'installation
* Puis double-cliquez sur le raccourci Lop S&D présent sur le Bureau
* Séléctionnez la langue souhaitée, puis choisir l'option 1 (Recherche)
* Patientez jusqu'à la fin du scan
* Postez le rapport généré sur un forum(C:\lopR.txt)

Bonjour moment de grace,

Je n'utilise aucun disque dur externet ni de clee usb !

Mais j'ai fait l'étape numéros 2 et voici le rapport !
Encore merci de votre aide.

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft® Windows Vista(TM) Édition Familiale Premium ( v6.0.6002 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU T3200 @ 2.00GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A16
USER : Myriam ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:220 Go (Free:94 Go)
D:\ (Local Disk) - NTFS - Total:9 Go (Free:4 Go)
E:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 2010-08-22|12:08 )

[ UAC => 0 ]

--------------------\\ Listing des dossiers dans Local

[2009-02-13|18:47] C:\Users\Myriam\AppData\Local\Adobe
[2009-01-29|02:52] C:\Users\Myriam\AppData\Local\Apple
[2009-01-29|02:59] C:\Users\Myriam\AppData\Local\Apple Computer
[2009-01-28|20:04] C:\Users\Myriam\AppData\Local\Application Data
[2010-03-16|19:40] C:\Users\Myriam\AppData\Local\Apps
[2010-03-23|19:44] C:\Users\Myriam\AppData\Local\AVG Security Toolbar
[2010-08-16|12:59] C:\Users\Myriam\AppData\Local\d3d9caps.dat
[2010-08-21|13:01] C:\Users\Myriam\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-04-13|20:51] C:\Users\Myriam\AppData\Local\Deployment
[2010-02-25|11:43] C:\Users\Myriam\AppData\Local\GDIPFONTCACHEV1.DAT
[2009-12-10|23:29] C:\Users\Myriam\AppData\Local\Google
[2009-01-28|20:04] C:\Users\Myriam\AppData\Local\Historique
[2010-08-22|11:49] C:\Users\Myriam\AppData\Local\IconCache.db
[2010-03-16|19:40] C:\Users\Myriam\AppData\Local\ICS
[2009-11-11|23:36] C:\Users\Myriam\AppData\Local\MediaDirect
[2010-01-05|08:14] C:\Users\Myriam\AppData\Local\Microsoft
[2009-04-15|20:33] C:\Users\Myriam\AppData\Local\Microsoft Games
[2009-01-28|22:35] C:\Users\Myriam\AppData\Local\Mozilla
[2010-08-22|11:13] C:\Users\Myriam\AppData\Local\prvlcl.dat
[2009-09-16|00:14] C:\Users\Myriam\AppData\Local\Real
[2009-01-31|02:12] C:\Users\Myriam\AppData\Local\Stardock_Corporation
[2009-01-30|18:22] C:\Users\Myriam\AppData\Local\SupportSoft
[2010-08-22|12:06] C:\Users\Myriam\AppData\Local\Temp
[2009-01-28|20:04] C:\Users\Myriam\AppData\Local\Temporary Internet Files
[2009-09-24|13:20] C:\Users\Myriam\AppData\Local\VirtualStore
[2009-05-10|10:53] C:\Users\Myriam\AppData\Local\WinZip E-Mail Companion

--------------------\\ Tâches planifiées dans C:\Windows\tasks

[2010-08-22 11:29][--a------] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010-08-22 12:00][--a------] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010-08-22 12:00][--ah-----] C:\Windows\tasks\SA.DAT
[2010-08-22 11:50][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Listing des dossiers dans C:\ProgramData

[2010-06-20|14:01] C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010-08-22|12:00] C:\ProgramData\1318893737
[2010-08-22|10:15] C:\ProgramData\2091835342
[2010-08-22|12:00] C:\ProgramData\516745465
[2009-03-01|15:30] C:\ProgramData\Adobe
[2009-01-29|02:52] C:\ProgramData\Apple
[2009-01-29|02:54] C:\ProgramData\Apple Computer
[2009-01-28|20:01] C:\ProgramData\Application Data
[2010-04-15|17:46] C:\ProgramData\AVG Security Toolbar
[2010-03-22|19:25] C:\ProgramData\avg9
[2009-09-15|22:41] C:\ProgramData\AVS4YOU
[2009-01-29|00:38] C:\ProgramData\Azureus
[2010-08-20|22:00] C:\ProgramData\bcdsrv32.dll
[2009-01-28|20:01] C:\ProgramData\Bureau
[2009-05-27|20:49] C:\ProgramData\CanonBJ
[2010-08-17|22:10] C:\ProgramData\CNMLM9H32.dll
[2009-01-28|21:45] C:\ProgramData\CyberLink
[2010-08-18|21:01] C:\ProgramData\ddraw32.dll
[2008-11-04|12:03] C:\ProgramData\Dell
[2010-08-18|18:51] C:\ProgramData\dfsrres32.dll
[2010-08-13|10:27] C:\ProgramData\DivX
[2010-08-22|10:13] C:\ProgramData\dmintf32.dll
[2010-08-17|11:28] C:\ProgramData\dmscript32.dll
[2009-01-28|20:01] C:\ProgramData\Documents
[2010-08-21|18:48] C:\ProgramData\dot3api32.dll
[2010-08-15|13:56] C:\ProgramData\dsquery32.dll
[2010-08-22|11:47] C:\ProgramData\duser32.dll
[2010-01-24|12:44] C:\ProgramData\DVD Shrink
[2009-01-28|20:01] C:\ProgramData\Favoris
[2010-08-18|10:58] C:\ProgramData\gacinstall32.dll
[2009-09-17|21:27] C:\ProgramData\Google
[2008-11-04|11:53] C:\ProgramData\InstallShield
[2010-06-23|10:30] C:\ProgramData\McAfee
[2009-01-28|20:01] C:\ProgramData\Menu D'marrer
[2009-12-23|14:10] C:\ProgramData\Messenger Plus!
[2010-06-05|03:01] C:\ProgramData\Microsoft
[2009-01-28|20:01] C:\ProgramData\ModSles
[2009-01-28|20:42] C:\ProgramData\QuickTime
[2010-04-19|10:43] C:\ProgramData\Real
[2010-08-14|19:54] C:\ProgramData\Roxio
[2009-09-15|21:18] C:\ProgramData\Skype
[2010-08-21|15:25] C:\ProgramData\sl2133686891
[2010-08-14|19:53] C:\ProgramData\Sonic
[2010-08-18|18:37] C:\ProgramData\Spybot - Search & Destroy
[2008-11-04|11:49] C:\ProgramData\SupportSoft
[2009-01-28|22:44] C:\ProgramData\Symantec
[2010-08-22|10:16] C:\ProgramData\SysWoW32
[2010-01-13|22:35] C:\ProgramData\TEMP
[2008-11-04|11:55] C:\ProgramData\Uninstall
[2010-08-15|13:56] C:\ProgramData\unrar.exe
[2009-09-17|20:47] C:\ProgramData\WinZip
[2009-05-07|20:47] C:\ProgramData\WinZipEC
[2010-05-23|15:29] C:\ProgramData\Zylom

--------------------\\ Listing des dossiers dans C:\Program Files

[2008-11-04|11:48] C:\Program Files\Adobe
[2009-01-28|21:24] C:\Program Files\Ahead
[2009-01-29|02:52] C:\Program Files\Apple Software Update
[2010-01-30|23:58] C:\Program Files\Atari
[2010-03-22|19:25] C:\Program Files\AVG
[2009-09-16|00:15] C:\Program Files\AVS4YOU
[2010-06-20|13:57] C:\Program Files\Bonjour
[2009-02-06|17:15] C:\Program Files\CCleaner
[2009-12-23|14:09] C:\Program Files\Circle Developemnt
[2008-11-04|11:38] C:\Program Files\Cisco
[2008-11-04|11:59] C:\Program Files\Citrix
[2010-07-01|15:28] C:\Program Files\Common Files
[2010-06-17|23:41] C:\Program Files\Conduit
[2008-11-04|05:21] C:\Program Files\CONEXANT
[2008-11-04|11:42] C:\Program Files\Creative
[2008-11-04|11:41] C:\Program Files\Creative Live! Cam
[2009-01-28|21:42] C:\Program Files\CyberLink
[2008-11-04|12:03] C:\Program Files\Dell
[2008-11-04|11:49] C:\Program Files\Dell Support Center
[2008-11-04|13:16] C:\Program Files\DellTPad
[2008-11-04|11:37] C:\Program Files\Digital Line Detect
[2010-08-13|10:27] C:\Program Files\DivX
[2009-01-28|21:30] C:\Program Files\DVD Shrink
[2009-01-28|20:01] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[2009-09-15|22:20] C:\Program Files\Free Video Converter
[2010-08-13|10:26] C:\Program Files\Google
[2010-02-09|20:51] C:\Program Files\InstallShield Installation Information
[2008-11-04|11:47] C:\Program Files\Intel
[2010-04-19|11:08] C:\Program Files\Internet Explorer
[2010-06-20|14:01] C:\Program Files\iPod
[2010-06-20|14:01] C:\Program Files\iTunes
[2008-11-04|11:35] C:\Program Files\Java
[2009-12-22|14:08] C:\Program Files\Lavasoft
[2010-06-20|14:05] C:\Program Files\LimeWire
[2010-01-25|00:02] C:\Program Files\Machinarium
[2010-08-04|19:07] C:\Program Files\Messenger Plus! Live
[2010-08-13|16:00] C:\Program Files\Microsoft
[2009-01-28|20:15] C:\Program Files\Microsoft ActiveSync
[2006-11-02|08:37] C:\Program Files\Microsoft Games
[2009-01-28|20:13] C:\Program Files\Microsoft Office
[2010-06-06|23:16] C:\Program Files\Microsoft Silverlight
[2009-03-11|21:43] C:\Program Files\Microsoft SQL Server Compact Edition
[2009-03-11|21:44] C:\Program Files\Microsoft Sync Framework
[2010-08-13|03:08] C:\Program Files\Microsoft Works
[2010-06-25|09:14] C:\Program Files\Microsoft.NET
[2008-11-04|11:36] C:\Program Files\Modem Diagnostic Tool
[2010-08-13|03:24] C:\Program Files\Movie Maker
[2010-07-24|08:36] C:\Program Files\Mozilla Firefox
[2006-11-02|08:37] C:\Program Files\MSBuild
[2008-11-04|11:37] C:\Program Files\NetWaiting
[2010-05-05|16:10] C:\Program Files\QuickTime
[2010-07-01|15:28] C:\Program Files\Real
[2006-11-02|08:37] C:\Program Files\Reference Assemblies
[2008-11-04|11:55] C:\Program Files\Roxio
[2008-11-04|05:21] C:\Program Files\Sigmatel
[2010-02-18|20:30] C:\Program Files\SoftLogica
[2009-03-31|18:33] C:\Program Files\Spybot - Search & Destroy
[2010-08-22|10:10] C:\Program Files\Trend Micro
[2006-11-02|09:01] C:\Program Files\Uninstall Information
[2010-04-19|11:08] C:\Program Files\Windows Calendar
[2010-04-19|11:08] C:\Program Files\Windows Collaboration
[2010-04-19|11:08] C:\Program Files\Windows Defender
[2010-04-19|11:08] C:\Program Files\Windows Journal
[2009-12-21|21:00] C:\Program Files\Windows Live
[2009-01-28|20:30] C:\Program Files\Windows Live SkyDrive
[2010-08-13|15:59] C:\Program Files\Windows Mail
[2010-04-19|11:08] C:\Program Files\Windows Media Player
[2009-01-28|20:01] C:\Program Files\Windows NT
[2010-04-19|11:08] C:\Program Files\Windows Photo Gallery
[2010-04-20|08:26] C:\Program Files\Windows Portable Devices
[2010-04-19|11:08] C:\Program Files\Windows Sidebar
[2010-05-21|17:04] C:\Program Files\WinRAR
[2010-08-22|11:01] C:\Program Files\ZHPDiag
[2010-05-23|15:29] C:\Program Files\Zylom Games

--------------------\\ Listing des dossiers dans C:\Program Files\Common Files

[2008-11-04|11:48] C:\Program Files\Common Files\Adobe
[2009-01-28|21:24] C:\Program Files\Common Files\Ahead
[2010-06-20|14:01] C:\Program Files\Common Files\Apple
[2009-09-16|00:14] C:\Program Files\Common Files\AVSMedia
[2009-01-28|20:15] C:\Program Files\Common Files\Designer
[2010-08-13|10:27] C:\Program Files\Common Files\DivX Shared
[2009-01-28|20:46] C:\Program Files\Common Files\InstallShield
[2008-11-04|11:35] C:\Program Files\Common Files\Java
[2010-08-13|16:00] C:\Program Files\Common Files\microsoft shared
[2009-11-27|13:57] C:\Program Files\Common Files\PX Storage Engine
[2010-07-01|15:28] C:\Program Files\Common Files\Real
[2008-11-04|11:42] C:\Program Files\Common Files\Reallusion
[2008-11-04|11:54] C:\Program Files\Common Files\Roxio Shared
[2006-11-02|07:18] C:\Program Files\Common Files\Services
[2008-11-04|11:54] C:\Program Files\Common Files\Sonic Shared
[2006-11-02|07:18] C:\Program Files\Common Files\SpeechEngines
[2008-11-04|11:49] C:\Program Files\Common Files\supportsoft
[2008-11-04|11:55] C:\Program Files\Common Files\SureThing Shared
[2009-01-29|01:10] C:\Program Files\Common Files\Symantec Shared
[2010-04-19|11:08] C:\Program Files\Common Files\System
[2009-01-28|20:27] C:\Program Files\Common Files\Windows Live
[2010-07-01|15:28] C:\Program Files\Common Files\xing shared

--------------------\\ Process

( 84 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-08-22 12:08:19
Windows 6.0.6002 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 10

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\Users\Myriam\Desktop\J'r'mie\Musique\OLD MP3\PSY\01-vibe_tribe_-_wise_cracks-psycz.mp3
C:\Users\Myriam\Desktop\J'r'mie\Musique\PSY\01-vibe_tribe_-_wise_cracks-psycz.mp3
C:\Users\Myriam\Music\iTunes\iTunes Music\Compilations\Greatest Hits [Explicit]\09 Ten Crack Commandments.mp3
C:\Users\Myriam\Music\iTunes\iTunes Music\Edan\Primitive Plus\06 Emcees Smoke Crack.mp3
C:\Users\Myriam\Music\Jay's Music\Compilations\Greatest Hits [Explicit]\._09 Ten Crack Commandments.mp3
C:\Users\Myriam\Music\Jay's Music\Compilations\Greatest Hits [Explicit]\09 Ten Crack Commandments.mp3
C:\Users\Myriam\Music\Jay's Music\Edan\Primitive Plus\._06 Emcees Smoke Crack.mp3
C:\Users\Myriam\Music\Jay's Music\Edan\Primitive Plus\06 Emcees Smoke Crack.mp3

[F:132][D:13]-> C:\Users\Myriam\AppData\Local\Temp
[F:9][D:1]-> C:\Users\Myriam\AppData\Roaming\MICROS~1\Windows\Cookies
[F:4][D:1]-> C:\Users\Myriam\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:1][D:1]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 2010-08-22|12:11 - Option : [1]

--------------------\\ Fin du rapport a 12:11:13
[ UAC => 1 ]

ok

1)

fais usbfix quand même stp

.............

2)
* Télécharge de AD-Remover sur ton Bureau. (Merci à C_XX)
http://pagesperso-orange.fr/NosTools/C_XX/AD-R.exe

Miroir:

https://www.androidworld.fr/

/!\ Déconnecte-toi d'internet et ferme toutes applications en cours /!\

Désactive provisoirement et seulement le temps de l'utilisation de ADremover, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.

- Double-clique sur l'icône Ad-remover située sur ton Bureau.
- Sur la page, clique sur le bouton « NETTOYER »
- Confirme lancement du scan
- Laisse travailler l'outil.
- Poste le rapport qui apparaît à la fin.

(Le rapport est sauvegardé aussi sous C:\Ad-report(Scan/clean).Txt)

(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

...........................

3)

Téléchargez MalwareByte's Anti-Malware (que tu pourras garder ensuite)

https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/

. Enregistres le sur le bureau
. Double cliques sur le fichier téléchargé pour lancer le processus d'installation.
. Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour
. Si le pare-feu demande l'autorisation de se connecter pour malwarebytes, accepte
. Une fois la mise à jour terminé
. Rend-toi dans l'onglet, Recherche
. Sélectionnes Exécuter un examen complet (examen assez long)
. Cliques sur Rechercher
. Le scan démarre.
. A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
. Cliques sur Ok pour poursuivre.
. Si des malwares ont été détectés, clique sur Afficher les résultats
. Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
. Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse.
. Rends toi dans l'onglet rapport/log
. Tu cliques dessus pour l'afficher, une fois affiché
. Tu cliques sur edition en haut du boc notes, et puis sur sélectionner tous
. Tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse
. tu cliques droit dans le cadre de la reponse et coller

Si tu as besoin d'aide regarde ces tutoriels :
Aide: https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
http://www.infos-du-net.com/forum/278396-11-tuto-malwarebytes-anti-malware-mbam

Bonjour moment de grace,

impossible d'effectuer usbfix... l'application fait son scan et par la suite mon ordi ce redémarre seul pour me donner un écran totalement noir....

Je vais effectuer les autres tâches que tu m'as demander et vais réessayer usbfix

Bonjour moment de grace,

Voici le rapport Ad-Remover:

Je t'enverrais les autres quand tout cela sera terminer ! Merci encore de ton aide

======= RAPPORT D'AD-REMOVER 2.0.0.1,D | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par C_XX le 26/07/10 à 12:00
Contact: AdRemover.contact[AT]gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html

C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 12:54:26 le 22/08/2010, Mode normal

Microsoft® Windows Vista(TM) Édition Familiale Premium Service Pack 2 (X86)
Myriam@PC-DE-MYRIAM (Dell Inc. Inspiron 1525)

============== ACTION(S) ==============

0,Fichier supprimé: C:\Program Files\Mozilla FireFox\Components\AskSearch.js
0,Dossier supprimé: C:\Users\Myriam\AppData\Roaming\SystemProc
0,Fichier supprimé: C:\Users\Myriam\AppData\Roaming\Mozilla\FireFox\Profiles\al09c4zz.default\prefs.js.ask.bak
0,Fichier supprimé: C:\Users\Myriam\AppData\Roaming\Mozilla\FireFox\Profiles\al09c4zz.default\searchplugins\ask.xml
0,Dossier supprimé: C:\Users\Myriam\AppData\LocalLow\Conduit
0,Dossier supprimé: C:\Program Files\Conduit

(!) -- Fichiers temporaires supprimés.

-- Fichier ouvert: C:\Users\Myriam\AppData\Roaming\Mozilla\FireFox\Profiles\al09c4zz.default\Prefs.js --
Ligne supprimée: user_pref("CT2535290.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER...
Ligne supprimée: user_pref("CT2535290.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT253...
Ligne supprimée: user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://www.fastbrowsersearch.com/results...
Ligne supprimée: user_pref("browser.search.defaultenginename", "Fast Browser Search");
Ligne supprimée: user_pref("browser.search.defaultthis.engineName", "Messenger Plus Live CA-EN Customized Web Search"...
Ligne supprimée: user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2535290&Sea...
Ligne supprimée: user_pref("browser.search.order.1", "Fast Browser Search");
Ligne supprimée: user_pref("extensions.snipit.askTbInstalled", true);
Ligne supprimée: user_pref("extensions.snipit.chromeURL", "hxxp://toolbar.ask.com/toolbarv/askRedirect?o=10607&gct=&g...
Ligne supprimée: user_pref("keyword.URL", "hxxp://www.fastbrowsersearch.com/results/results.aspx?s=NAUS&v=19&tid={2D8...
Ligne supprimée: user_pref("sweetim.toolbar.previous.keyword.URL", "hxxp://toolbar.ask.com/toolbarv/askRedirect?o=106...
-- Fichier Fermé --

0,Clé supprimée: HKLM\Software\Classes\Toolbar.CT2535290
0,Clé supprimée: HKLM\Software\Conduit
0,Clé supprimée: HKCU\Software\AppDataLow\Software\Conduit
3,Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
3,Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
3,Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}

0,Valeur supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Run|RTHDBPL

============== SCAN ADDITIONNEL ==============

** Mozilla Firefox Version [3.6.8 (fr)] **

-- C:\Users\Myriam\AppData\Roaming\Mozilla\FireFox\Profiles\al09c4zz.default\Prefs.js --
browser.download.dir, C:\\Users\\Myriam\\Downloads
browser.download.lastDir, C:\\Users\\Myriam\\Desktop\\Jérémie\\Images
browser.startup.homepage, www.google.com
browser.startup.homepage_override.mstone, rv:1.9.2.8
sweetim.toolbar.previous.browser.search.defaultenginename, Ask
sweetim.toolbar.previous.browser.search.selectedEngine, Google
sweetim.toolbar.previous.browser.startup.homepage, hxxp://www.google.ca/

========================================

** Internet Explorer Version [7.0.6002.18005] **

[HKCU\Software\Microsoft\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
SearchAssistant:
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm

========================================

C:\Program Files\Ad-Remover\Quarantine: 9 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 16 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 22/08/2010 (4832 Octet(s))

Fin à: 12:58:43, 22/08/2010

============== E.O.F ==============

voici celui de Usbfix:

############################## | UsbFix 7.021 | [Suppression]

Utilisateur: Myriam (Administrateur) # PC-DE-MYRIAM [Dell Inc. Inspiron 1525]
Mis à jour le 20/08/10 par El Desaparecido / C_XX
Lancé à 13:10:19 | 22/08/2010
Site Web: http://pagesperso-orange.fr/NosTools/index.html
Contact: FindyKill.Contact@gmail.com

CPU: Intel(R) Pentium(R) Dual CPU T3200 @ 2.00GHz
CPU 2: Intel(R) Pentium(R) Dual CPU T3200 @ 2.00GHz
Microsoft® Windows Vista(TM) Édition Familiale Premium (6.0.6002 32-Bit) # Service Pack 2
Internet Explorer 7.0.6002.18005

Pare-feu Windows: Activé
RAM -> 3061 Mo
C:\ (%systemdrive%) -> Disque fixe # 221 Go (95 Go libre(s) - 43%) [OS] # NTFS
D:\ -> Disque fixe # 10 Go (5 Go libre(s) - 48%) [RECOVERY] # NTFS
E:\ -> CD-ROM

################## | Éléments infectieux |

################## | Registre |

################## | Mountpoints2 |

################## | Listing |

[06/04/2010 - 22:47:09 | D ] C:\ Fichiers récupérés
[22/03/2010 - 19:28:20 | HD ] C:\$AVG
[22/08/2010 - 13:13:33 | SHD ] C:\$Recycle.Bin
[04/09/2009 - 11:28:51 | D ] C:\98d6ae9209fcdb98ba
[22/08/2010 - 12:58:44 | A | 4962] C:\Ad-Report-CLEAN[1].txt
[18/09/2006 - 17:43:36 | A | 24] C:\autoexec.bat
[22/08/2010 - 12:28:58 | RASHD ] C:\Autorun.inf
[24/05/2010 - 14:54:54 | D ] C:\BigFishGamesCache
[19/04/2010 - 11:13:29 | SHD ] C:\boot
[11/04/2009 - 02:36:36 | RASH | 333257] C:\bootmgr
[18/09/2006 - 17:43:37 | A | 10] C:\config.sys
[31/12/2009 - 14:42:56 | D ] C:\DELL
[04/11/2008 - 13:16:40 | RAH | 3713] C:\dell.sdr
[09/02/2010 - 12:19:14 | D ] C:\DISTRICT_9
[04/11/2008 - 13:00:44 | D ] C:\doctemp
[04/11/2008 - 11:42:57 | D ] C:\Documents and Settings
[06/09/2007 - 12:43:24 | D ] C:\Drivers
[13/05/2010 - 22:49:24 | D ] C:\e4b06b196965d14fb84e0630b7
[08/10/2008 - 16:42:09 | D ] C:\EFI
[15/07/2010 - 03:04:34 | D ] C:\fb286555cd4e1b1c4209acd7
[31/01/2010 - 12:17:34 | D ] C:\Intel
[14/08/2010 - 23:50:07 | RASH | 0] C:\IO.SYS
[22/08/2010 - 12:11:13 | D ] C:\Lop SD
[22/08/2010 - 12:11:15 | A | 13110] C:\lopR.txt
[14/08/2010 - 23:50:07 | RASH | 0] C:\MSDOS.SYS
[22/08/2010 - 13:02:39 | ASH | 3524587520] C:\pagefile.sys
[20/01/2008 - 22:32:31 | D ] C:\PerfLogs
[22/08/2010 - 12:58:34 | RD ] C:\Program Files
[22/08/2010 - 13:03:11 | HD ] C:\ProgramData
[15/08/2010 - 13:36:57 | D ] C:\SIERRA
[17/08/2010 - 09:08:58 | SHD ] C:\System Volume Information
[22/08/2010 - 13:13:33 | D ] C:\UsbFix
[22/08/2010 - 13:10:20 | A | 2483] C:\UsbFix.txt
[22/08/2010 - 12:28:59 | A | 110365] C:\UsbFix_Upload_Me_PC-DE-MYRIAM.zip
[28/01/2009 - 21:42:54 | RD ] C:\Users
[22/08/2010 - 12:07:54 | D ] C:\Windows
[22/08/2010 - 13:13:33 | SHD ] D:\$RECYCLE.BIN
[22/08/2010 - 12:28:58 | RASHD ] D:\Autorun.inf
[04/11/2008 - 05:14:27 | D ] D:\dell
[30/01/2010 - 23:51:58 | D ] D:\Program Files
[19/01/2008 - 04:45:30 | HD ] D:\ProgramData
[29/01/2008 - 13:53:24 | D ] D:\sources
[04/11/2008 - 05:19:44 | SHD ] D:\System Volume Information
[23/01/2009 - 14:08:08 | D ] D:\Tools
[19/01/2008 - 04:45:30 | RD ] D:\Users
[04/11/2008 - 05:13:51 | D ] D:\Windows

################## | Vaccin |

C:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)
D:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)

################## | Upload |

Veuillez envoyer le fichier: C:\UsbFix_Upload_Me_PC-DE-MYRIAM.zip
https://www.ionos.fr/?affiliate_id=77097
Merci de votre contribution.

################## | E.O.F |

ad remover => vu

usbfix

il y a des infections sur des supports nommés F et G qui n'étaient branchés lors du scan

Bonsoir moment de grace,

Je m'excuse de ce long délai... Mon ordinateur à planté plusieurs fois avant que je ne soit capable d'effectuer le scan avec Malwarebyte's.

Donc voici mon log: ( le logiciel na pas été capable de supprimer certain trojan)
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Version de la base de données: 4462

Windows 6.0.6002 Service Pack 2
Internet Explorer 7.0.6002.18005

2010-08-22 20:46:28
mbam-log-2010-08-22 (20-46-28).txt

Type d'examen: Examen complet (C:\|D:\|E:\|)
Elément(s) analysé(s): 289281
Temps écoulé: 1 heure(s), 57 minute(s), 34 seconde(s)

Processus mémoire infecté(s): 1
Module(s) mémoire infecté(s): 3
Clé(s) du Registre infectée(s): 7
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 2
Dossier(s) infecté(s): 2
Fichier(s) infecté(s): 29

Processus mémoire infecté(s):
C:\Users\Myriam\AppData\Roaming\SystemProc\lsass.exe (Trojan.Tracur) -> Unloaded process successfully.

Module(s) mémoire infecté(s):
C:\Windows\System32\dnshc32.dll (Trojan.Tracur) -> Delete on reboot.
C:\Users\Myriam\AppData\Roaming\A667.tmp (Trojan.Tracur) -> Delete on reboot.
C:\Windows\System32\CRPPresentation32.dll (Trojan.Tracur) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{53e6f965-91d9-ad7d-b38f-260dc40ae772} (Trojan.Tracur) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{53e6f965-91d9-ad7d-b38f-260dc40ae772} (Trojan.Tracur) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53e6f965-91d9-ad7d-b38f-260dc40ae772} (Trojan.Tracur) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{10925a76-7eda-4ef9-9660-0e5d409a4164} (Trojan.Tracur) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{10925a76-7eda-4ef9-9660-0e5d409a4164} (Trojan.Tracur) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10925a76-7eda-4ef9-9660-0e5d409a4164} (Trojan.Tracur) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\.fsharproj (Trojan.BHO) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\rthdbpl (Trojan.Tracur) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Tracur) -> Data: c:\windows\system32\dnshc32.dll -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Tracur) -> Data: system32\dnshc32.dll -> Delete on reboot.

Dossier(s) infecté(s):
C:\ProgramData\2091835342 (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Users\Myriam\AppData\Roaming\SystemProc (Trojan.Agent) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Windows\System32\dnshc32.dll (Trojan.Tracur) -> Delete on reboot.
C:\Users\Myriam\AppData\Roaming\A667.tmp (Trojan.Tracur) -> Delete on reboot.
C:\Windows\System32\CRPPresentation32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\Users\Myriam\AppData\Roaming\SystemProc\lsass.exe (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\Program Files\Ad-Remover\Quarantine\C\Users\Myriam\AppData\Roaming\SystemProc\lsass.exe.vir (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\ProgramData\CNMLM9H32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\ProgramData\bcdsrv32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\ProgramData\bcmwlrmt32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\ProgramData\catsrv32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\ProgramData\ddraw32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\ProgramData\dfsrres32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\ProgramData\dmime32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\ProgramData\dmintf32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\ProgramData\dmscript32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\ProgramData\dot3api32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\ProgramData\dot3msm32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\ProgramData\dsquery32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\ProgramData\duser32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\ProgramData\gacinstall32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\UsbFix\Quarantine\C\Users\Myriam\AppData\Roaming\SystemProc\lsass.exe.vir (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\Users\Myriam\AppData\Local\Temp\4F29.tmp (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\Users\Myriam\AppData\Local\Temp\9389.tmp (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\Users\Myriam\AppData\Local\Temp\9685.tmp (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\Users\Myriam\AppData\Roaming\4F91.tmp (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\Users\Myriam\AppData\Roaming\5CA5.tmp (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\Users\Myriam\AppData\Roaming\7B54.tmp (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\Users\Myriam\AppData\Roaming\A010.tmp (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\Windows\System32\dot3api32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\Windows\GnuHashes.ini (Malware.Trace) -> Quarantined and deleted successfully.

ok

redeùmarrer le pc si ce n'est pas déjà fait

vider la quarantaine de mbam

refaire usbfix comme indiqué au dessus

faire un nouveau rapport zhpdiag et poster le lien

Bonjour moment de grace,

Voici le rapport : http://www.cijoint.fr/cjlink.php?file=cj201008/cijbwPTDL5.txt

Usbfix à venir...

Encore un gros merci à toi pour l'aide apporté

ok

le rapport ZHP est bon

en attent d'usbfix

Bonjour Moment de grace,

Je suis désolé de ce long délais. Alors voici le rapport usbfix. J'espère que tout y est !

############################## | UsbFix 7.022 | [Suppression]

Utilisateur: Myriam (Administrateur) # PC-DE-MYRIAM [Dell Inc. Inspiron 1525]
Mis à jour le 29/08/10 par El Desaparecido / C_XX
Lancé à 08:10:08 | 31/08/2010
Site Web: http://pagesperso-orange.fr/NosTools/index.html
Contact: FindyKill.Contact@gmail.com

CPU: Intel(R) Pentium(R) Dual CPU T3200 @ 2.00GHz
CPU 2: Intel(R) Pentium(R) Dual CPU T3200 @ 2.00GHz
Microsoft® Windows Vista(TM) Édition Familiale Premium (6.0.6002 32-Bit) # Service Pack 2
Internet Explorer 7.0.6002.18005

Pare-feu Windows: Activé
RAM -> 3061 Mo
C:\ (%systemdrive%) -> Disque fixe # 221 Go (94 Go libre(s) - 43%) [OS] # NTFS
D:\ -> Disque fixe # 10 Go (5 Go libre(s) - 48%) [RECOVERY] # NTFS
E:\ -> CD-ROM

################## | Éléments infectieux |

################## | Registre |

################## | Mountpoints2 |

################## | Listing |

[06/04/2010 - 22:47:09 | D ] C:\ Fichiers récupérés
[22/03/2010 - 19:28:20 | HD ] C:\$AVG
[31/08/2010 - 08:12:46 | SHD ] C:\$Recycle.Bin
[04/09/2009 - 11:28:51 | D ] C:\98d6ae9209fcdb98ba
[22/08/2010 - 12:58:44 | A | 4962] C:\Ad-Report-CLEAN[1].txt
[18/09/2006 - 17:43:36 | A | 24] C:\autoexec.bat
[31/08/2010 - 07:55:47 | RASHD ] C:\Autorun.inf
[24/05/2010 - 14:54:54 | D ] C:\BigFishGamesCache
[19/04/2010 - 11:13:29 | SHD ] C:\boot
[11/04/2009 - 02:36:36 | RASH | 333257] C:\bootmgr
[18/09/2006 - 17:43:37 | A | 10] C:\config.sys
[31/12/2009 - 14:42:56 | D ] C:\DELL
[04/11/2008 - 13:16:40 | RAH | 3713] C:\dell.sdr
[09/02/2010 - 12:19:14 | D ] C:\DISTRICT_9
[04/11/2008 - 13:00:44 | D ] C:\doctemp
[04/11/2008 - 11:42:57 | D ] C:\Documents and Settings
[06/09/2007 - 12:43:24 | D ] C:\Drivers
[13/05/2010 - 22:49:24 | D ] C:\e4b06b196965d14fb84e0630b7
[08/10/2008 - 16:42:09 | D ] C:\EFI
[15/07/2010 - 03:04:34 | D ] C:\fb286555cd4e1b1c4209acd7
[31/01/2010 - 12:17:34 | D ] C:\Intel
[14/08/2010 - 23:50:07 | RASH | 0] C:\IO.SYS
[22/08/2010 - 12:11:13 | D ] C:\Lop SD
[22/08/2010 - 12:11:15 | A | 13110] C:\lopR.txt
[14/08/2010 - 23:50:07 | RASH | 0] C:\MSDOS.SYS
[31/08/2010 - 08:05:08 | ASH | 3524587520] C:\pagefile.sys
[20/01/2008 - 22:32:31 | D ] C:\PerfLogs
[22/08/2010 - 13:46:32 | RD ] C:\Program Files
[26/08/2010 - 19:42:14 | HD ] C:\ProgramData
[15/08/2010 - 13:36:57 | D ] C:\SIERRA
[30/08/2010 - 22:31:20 | SHD ] C:\System Volume Information
[31/08/2010 - 08:12:46 | D ] C:\UsbFix
[31/08/2010 - 08:10:08 | A | 2483] C:\UsbFix.txt
[31/08/2010 - 07:55:48 | A | 3576] C:\UsbFix_Upload_Me_PC-DE-MYRIAM.zip
[28/01/2009 - 21:42:54 | RD ] C:\Users
[29/08/2010 - 21:10:34 | D ] C:\Windows
[31/08/2010 - 08:12:46 | SHD ] D:\$RECYCLE.BIN
[31/08/2010 - 07:55:47 | RASHD ] D:\Autorun.inf
[04/11/2008 - 05:14:27 | D ] D:\dell
[30/01/2010 - 23:51:58 | D ] D:\Program Files
[19/01/2008 - 04:45:30 | HD ] D:\ProgramData
[29/01/2008 - 13:53:24 | D ] D:\sources
[04/11/2008 - 05:19:44 | SHD ] D:\System Volume Information
[23/01/2009 - 14:08:08 | D ] D:\Tools
[19/01/2008 - 04:45:30 | RD ] D:\Users
[04/11/2008 - 05:13:51 | D ] D:\Windows

################## | Vaccin |

C:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)
D:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)

################## | Upload |

Veuillez envoyer le fichier: C:\UsbFix_Upload_Me_PC-DE-MYRIAM.zip
https://www.ionos.fr/?affiliate_id=77097
Merci de votre contribution.

################## | E.O.F |

bonjour

comment va ce pc depuis ?

poste le lien d'un nouveau zhpdiag stp

Bonjour,

J'ai toujours de la difficulté avec internet... Je me fait constamment diriger vers des page qui non rien à voir avec ce que j'ai demandée. Mais j'ai espoirs :D

Voici le rapport :

Rapport de ZHPDiag v1.26.49 par Nicolas Coolman, Update du 17/08/2010
Run by Myriam at 2010-09-02 07:56:04
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Contact : nicolascoolman@yahoo.fr

---\\ Web Browser
MSIE: Internet Explorer v7.0.6002.18005
MFIE: Mozilla Firefox (3.6.8)

---\\ System Information
Platform : Windows Vista (TM) Home Premium (6.0.6002) Service Pack 2
Processor: x86 Family 6 Model 15 Stepping 13, GenuineIntel
Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3061 MB (53% free)
System drive C: has 97 GB (44%) free of 221 GB

---\\ Logged in mode
Computer Name: PC-DE-MYRIAM
User Name: Myriam
All Users Names: Myriam, Administrateur,
Unselected Option: O1,O45,O61,O65,O82
Logged in as Administrator

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 97 Go of 221 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 5 Go of 10 Go)
E:\ CD-ROM drive (Not Inserted)

---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: Modified
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableRegistryTools: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] NoDispScrSavPage: OK

---\\ Processus lancés
[MD5.D8EEF615DC715CA2E4542D9B9C28CF78] - (.Stardock Corporation - Dell Dock.) -- C:\Program Files\Dell\DellDock\DellDock.exe [1226024]
[MD5.6CCBE90D8EAE1A5A613B0777ED7E96EC] - (.Cyberlink Corp. - PowerDVD RC Service.) -- C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [30208]
[MD5.83A3890B00A43D7504C92AB474B82092] - (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe [133656]
[MD5.7A326CFD159D0E9411A253FBF8150270] - (.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files\Dell\MediaDirect\PCMService.exe [184320]
[MD5.23242FD6C7D4C61807E84FD3A79248C4] - (.Creative Technology Ltd. - Live! Cam Console Auto Launcher.) -- C:\Windows\OEM02Mon.exe [36864]
[MD5.F70A63E713110C6668783DB2CAE94AE8] - (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe [141848]
[MD5.F371C6DF9A810EF2E6E4FA60ACBB5C33] - (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [174872]
[MD5.99B4071862E7BEF7DD4896A3B6E3477B] - (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe [166424]
[MD5.9F5F2F0FB0A7F5AA9F16B9A7B6DAD89F] - (.Google - Google Desktop.) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192]
[MD5.37AE019B337D4533FBB6831B8954E2EF] - (.IDT, Inc. - Sigmatel Audio system tray application.) -- C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe [405504]
[MD5.ED7A6D40B20DC34BE06F4AE196AE7D50] - (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe [421888]
[MD5.0E284B5BB0CDD631461CE7E91DCEE3E2] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [141624]
[MD5.BA55597B5B444990C0BF2E22DD341C48] - (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\DellTPad\Apoint.exe [167936]
[MD5.E9B04FD2921ACE22CA17FA7D5131F491] - (.AVG Technologies CZ, s.r.o. - AVG Tray Monitor.) -- C:\Program Files\AVG\AVG9\avgtray.exe [2065760]
[MD5.2835FEAA282185CD4446164A4F9899C1] - (.Dell Inc. - Dell Wireless WLAN Card Wireless Network Tr.) -- C:\Windows\System32\WLTRAY.EXE [3563520]
[MD5.9ACE8ECDB1EBC519F48AA65DE5875573] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe [202256]
[MD5.91BE30E46577861156595BBCF34F5E71] - (.Intel Corporation - igfxsrvc Module.) -- C:\Windows\system32\igfxsrvc.exe [256536]
[MD5.52DB6CDAC5BC7A1FC884E97C41C91213] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [248040]
[MD5.6AE5C5807E47FA41CAE4FBC25B1A012E] - (.Pas de propriétaire - DivX Update.) -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1164584]
[MD5.896A1DB9A972AD2339C2E8569EC926D1] - (.Safer Networking Limited - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2144088]
[MD5.BF08674925F151BD4537B89A493E3E0C] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe [125952]
[MD5.42370C1DE2B83844B253478DB8A907D5] - (.Alps Electric Co., Ltd. - ApMsgFwd.) -- C:\Program Files\DellTPad\ApMsgFwd.exe [50736]
[MD5.F03FFC962E18F36A922E61F96BE09925] - (.Avanquest Software - Digital Line Detection.) -- C:\Program Files\Digital Line Detect\DLG.exe [50688]
[MD5.3E6166D76669D0332C56F62DFC61B9E0] - (.Dell Inc. - QuickSet.) -- C:\Program Files\Dell\QuickSet\quickset.exe [1193240]
[MD5.0F4195B9B348DE5CF9B822F81704B20E] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\Windows\ehome\ehmsas.exe [37376]
[MD5.8D78BE3690DB07A2FD03D2A6B61E3DCD] - (.Alps Electric Co., Ltd. - Alps Pointing-device Driver for Windows NT/.) -- C:\Program Files\DellTPad\Apntex.exe [49152]
[MD5.C574C551637734B13278898FE2D12D15] - (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\DellTPad\HidFind.exe [40960]
[MD5.16A692EDA8253BEB5F3A588055F7869B] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [482304]

---\\ Plugins de navigateurs Opera/Firefox(P1/P2)
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files\Mozilla Firefox\Plugins\np-mswmp.dll
P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll
P2 - FPN:Firefox Plugin Navigator . (.DivX, Inc - npdivxplayerplugin.) -- C:\Program Files\Mozilla Firefox\Plugins\npDivxPlayerPlugin.dll
P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll
P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\Mozilla Firefox\Plugins\nppl3260.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll
P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Mozilla Firefox\Plugins\nprjplug.dll
P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - 6.0.12.775.) -- C:\Program Files\Mozilla Firefox\Plugins\nprpjplug.dll
P2 - FPN:Firefox Plugin Navigator . (.Zylom - Zylom Plugin.) -- C:\Program Files\Mozilla Firefox\Plugins\npzylomgamesplayer.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@divx.com/DivX Browser Plugin,version=1.0.0] - (.DivX,Inc. - DivX Web Player version 2.0.3.4.) -- C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
P2 - FPN: [HKLM] [@divx.com/DivX Player Plugin,version=1.0.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (.not file.)
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.50524.0.) -- c:\Program Files\Microsoft Silverlight\4.0.50524.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/OfficeLive,version=1.5] - (.Microsoft Corp. - Office Live Update v1.5.) -- C:\Program Files\Microsoft\Office Live\npOLW.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8081.0709] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@real.com/nppl3260;version=6.0.12.775] - (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- c:\program files\real\realplayer\Netscape6\nppl3260.dll
P2 - FPN: [HKLM] [@real.com/nprjplug;version=1.0.3.775] - (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- c:\program files\real\realplayer\Netscape6\nprjplug.dll
P2 - FPN: [HKLM] [@real.com/nprphtml5videoshim;version=1.0.0.0] - (.RealNetworks, Inc. - RealPlayer(tm) HTML5VideoShim Plug-In.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
P2 - FPN: [HKLM] [@real.com/nprpjplug;version=6.0.12.775] - (.RealNetworks, Inc. - 6.0.12.775.) -- c:\program files\real\realplayer\Netscape6\nprpjplug.dll
P2 - FPN: [HKLM] [@zylom.com/ZylomGamesPlayer] - (.Zylom - Zylom Plugin.) -- C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\Userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

---\\ Pages de recherche d'Internet Explorer (R1)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

---\\ Internet Explorer URLSearchHook (R3)
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} . (.Pas de propriétaire - AVG Security Toolbar.) (4.504.019.002) -- C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
R3 - URLSearchHook: AVG Security Toolbar BHO - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (7.00.6000.16386 (vista_rtm.061101-2205)) -- C:\Windows\system32\ieframe.dll

---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- c:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} . (.AVG Technologies CZ, s.r.o. - Safe Search for Internet Explorer.) -- C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} . (.Pas de propriétaire - AVG Security Toolbar.) -- C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} . (.Dell Inc. - BAE.dll.) -- C:\Program Files\Dell\BAE\BAE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll

---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} . (.Pas de propriétaire - AVG Security Toolbar.) -- C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll

---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe
O4 - HKLM\..\Run: [RemoteControl] . (.Cyberlink Corp. - PowerDVD RC Service.) -- C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [PCMService] . (.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files\Dell\MediaDirect\PCMService.exe
O4 - HKLM\..\Run: [OEM02Mon.exe] . (.Creative Technology Ltd. - Live! Cam Console Auto Launcher.) -- C:\Windows\OEM02Mon.exe
O4 - HKLM\..\Run: [NeroFilterCheck] . (.Ahead Software Gmbh - NeroCheck.) -- C:\Windows\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LanguageShortcut] . (.Pas de propriétaire - Language Application.) -- C:\Program Files\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Google Desktop Search] . (.Google - Google Desktop.) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe (.not file.)
O4 - HKLM\..\Run: [dscactivate] . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] . (.IDT, Inc. - Sigmatel Audio system tray application.) -- C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- c:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [Apoint] . (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\DellTPad\Apoint.exe
O4 - HKLM\..\Run: [AVG9_TRAY] . (.AVG Technologies CZ, s.r.o. - AVG Tray Monitor.) -- C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] . (.Dell Inc. - Dell Wireless WLAN Card Wireless Network Tr.) -- C:\Windows\system32\WLTRAY.exe
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe
O4 - HKLM\..\Run: [DivXUpdate] . (.Pas de propriétaire - DivX Update.) -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] . (.Safer Networking Limited - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKUS\S-1-5-21-105361941-1316069885-2475632843-1000\..\Run: [SpybotSD TeaTimer] . (.Safer Networking Limited - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-21-105361941-1316069885-2475632843-1000\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe
O4 - Global Startup: Digital Line Detect.lnk . (.Avanquest Software - Digital Line Detection.) -- C:\Program Files\Digital Line Detect\DLG.exe
O4 - Global Startup: Microsoft Office.lnk . (.Microsoft Corporation - Microsoft Office XP component.) -- C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: QuickSet.lnk . (.Dell Inc. - QuickSet.) -- C:\Program Files\Dell\QuickSet\quickset.exe
O4 - Global Startup: Dell Dock.lnk . (.Stardock Corporation - Dell Dock.) -- C:\Program Files\Dell\DellDock\DellDock.exe

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: E&xport to Microsoft Excel . (.Microsoft Corporation - Microsoft Excel.) -- C:\PROGRA~1\MICROS~2\Office10\EXCEL.exe

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (.not file.) - (.not file.)

---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll

---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{33EBBDDE-EB8A-4A8A-A226-46514FD430C2}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{FA106712-E158-44D3-AD8D-363A0594FBD7}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{33EBBDDE-EB8A-4A8A-A226-46514FD430C2}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{FA106712-E158-44D3-AD8D-363A0594FBD7}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{33EBBDDE-EB8A-4A8A-A226-46514FD430C2}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{FA106712-E158-44D3-AD8D-363A0594FBD7}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{33EBBDDE-EB8A-4A8A-A226-46514FD430C2}: DhcpDomain = gateway.2wire.net
O17 - HKLM\System\CCS\Services\Tcpip\..\{FA106712-E158-44D3-AD8D-363A0594FBD7}: DhcpDomain = gateway.2wire.net
O17 - HKLM\System\CS1\Services\Tcpip\..\{33EBBDDE-EB8A-4A8A-A226-46514FD430C2}: DhcpDomain = gateway.2wire.net
O17 - HKLM\System\CS1\Services\Tcpip\..\{FA106712-E158-44D3-AD8D-363A0594FBD7}: DhcpDomain = gateway.2wire.net
O17 - HKLM\System\CS2\Services\Tcpip\..\{33EBBDDE-EB8A-4A8A-A226-46514FD430C2}: DhcpDomain = gateway.2wire.net
O17 - HKLM\System\CS2\Services\Tcpip\..\{FA106712-E158-44D3-AD8D-363A0594FBD7}: DhcpDomain = gateway.2wire.net
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1

---\\ Protocole additionnel et piratage de protocole (O18)
O18 - Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} . (.Pas de propriétaire - AVG Security Toolbar.) -- C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O18 - Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} . (.AVG Technologies CZ, s.r.o. - Safe Search pluggable protocol.) -- C:\Program Files\AVG\AVG9\avgpp.dll

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: GoToAssist . (.Citrix Online, a division of Citrix Systems - Citrix Online GoToAssist.) -- C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (.Pas de propriétaire - Pas de description.) - C:\WINDOWS\SYSTEM32\DNSHC32.dll (.not file.)

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\system32\webcheck.dll

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll

---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Andrea ST Filters Service (AESTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) - C:\Windows\system32\aestsrv.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - Apple Mobile Device Service.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AVG Free WatchDog (avg9wd) . (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Dock Login Service (DockLoginService) . (.Stardock Corporation - Dock Login Service.) - C:\Program Files\Dell\DellDock\DockLogin.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) . (.Intel Corporation - RAID Monitor.) - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Pas de propriétaire - RichVideo Module.) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) . (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: SigmaTel Audio Service (STacSV) . (.IDT, Inc. - STacSV Module.) - C:\Windows\system32\STacSV.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) . (.Pas de propriétaire - Pas de description.) - C:\Windows\System32\WLTRYSVC.exe
O23 - Service: XAudioService (XAudioService) . (.Conexant Systems, Inc. - Modem Audio Service.) - C:\Windows\system32\DRIVERS\xaudio.exe

---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Word.) - C:\Program Files\Microsoft Office\Office10\WINWORD.exe

---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11CF-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.0 r22.) -- C:\Windows\system32\Macromed\Flash\Flash10b.ocx

---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: AVG Free AVI Loader Driver x86 (AvgLdx86) . (.AVG Technologies CZ, s.r.o. - AVG AVI Loader Driver.) - C:\Windows\system32\Drivers\avgldx86.sys
O41 - Driver: AVG Free On-access Scanner Minifilter Driver x86 (AvgMfx86) . (.AVG Technologies CZ, s.r.o. - AVG Resident Shield Minifilter Driver.) - C:\Windows\system32\Drivers\avgmfx86.sys
O41 - Driver: AVG Free Network Redirector (AvgTdiX) . (.AVG Technologies CZ, s.r.o. - AVG Network connection watcher.) - C:\Windows\system32\Drivers\avgtdix.sys

---\\ Logiciels installés (O42)
O42 - Logiciel: AVG Free 9.0 - (.AVG Technologies.) [HKLM] -- AVG9Uninstall
O42 - Logiciel: Ad-Aware SE Personal - (.Lavasoft.) [HKLM] -- Ad-Aware SE Personal
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader 9 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A90000000001}
O42 - Logiciel: Advanced Audio FX Engine - (.Pas de propriétaire.) [HKLM] -- Advanced Audio FX Engine
O42 - Logiciel: Advanced Video FX Engine - (.Pas de propriétaire.) [HKLM] -- Advanced Video FX Engine
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {B2D328BE-45AD-4D92-96F9-2151490A203E}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {85991ED2-010C-4930-96FA-52F43C2CE98A}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033}
O42 - Logiciel: Assistant de connexion Windows Live ID - (.Microsoft Corporation.) [HKLM] -- {0840B4D6-7DD1-4187-8523-E6FC0007EFB7}
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {0CB9668D-F979-4F31-B8B8-67FE90F929F8}
O42 - Logiciel: Browser Address Error Redirector - (.Dell.) [HKLM] -- {62230596-37E5-4618-A329-0D21F529A86F}
O42 - Logiciel: CCleaner (remove only) - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM] -- {6D3963B0-E13B-4FC3-B0FF-506A304BB043}
O42 - Logiciel: Cisco LEAP Module - (.Cisco Systems, Inc..) [HKLM] -- {83770D14-21B9-44B3-8689-F7B523F94560}
O42 - Logiciel: Cisco PEAP Module - (.Cisco Systems, Inc..) [HKLM] -- {669C7BD8-DAA2-49B6-966C-F1E2AAE6B17E}
O42 - Logiciel: Conexant HDA D330 MDC V.92 Modem - (.Conexant.) [HKLM] -- CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2C06&SUBSYS_14F1000F
O42 - Logiciel: DVD Shrink 3.2 - (.DVD Shrink.) [HKLM] -- DVD Shrink
O42 - Logiciel: Dell Dock - (.Dell.) [HKLM] -- {F6CB42B9-F033-4152-8813-FF11DA8E6A78}
O42 - Logiciel: Dell Support Center - (.Dell.) [HKLM] -- {E3BFEE55-39E2-4BE0-B966-89FE583822C1}
O42 - Logiciel: Dell Touchpad - (.Alps Electric.) [HKLM] -- {9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}
O42 - Logiciel: Dell Webcam Center - (.Pas de propriétaire.) [HKLM] -- Dell Webcam Center
O42 - Logiciel: Dell Webcam Manager - (.Pas de propriétaire.) [HKLM] -- Dell Webcam Manager
O42 - Logiciel: Dell-eBay - (.Dell.) [HKLM] -- {B935C985-A17F-484B-8470-09E4FC27DC26}
O42 - Logiciel: Digital Line Detect - (.BVRP Software, Inc.) [HKLM] -- {E646DCF0-5A68-11D5-B229-002078017FBF}
O42 - Logiciel: DivX Plus DirectShow Filters - (.DivX, Inc..) [HKLM] -- DivX Plus DirectShow Filters
O42 - Logiciel: DivX Setup - (.DivX, Inc. .) [HKLM] -- DivX Setup.divx.com
O42 - Logiciel: EDocs - (.Pas de propriétaire.) [HKLM] -- {6B7B6D4D-8F9B-4CB3-8CA4-BCA9CC4C1A22}
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {B131E59D-202C-43C6-84C9-68F0C37541F1}
O42 - Logiciel: GoToAssist 8.0.0.514 - (.Pas de propriétaire.) [HKLM] -- GoToAssist
O42 - Logiciel: Google Desktop - (.Google.) [HKLM] -- Google Desktop
O42 - Logiciel: Guide de mise en route Dell - (.Dell Inc..) [HKLM] -- {9954484F-6EE4-4040-94E3-4B380646F867}
O42 - Logiciel: Handy Recovery 4.0 - (.SoftLogica.) [HKLM] -- {4196D960-68B0-4BEB-B312-3C1B4654068D}
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {46ABBC54-1872-4AA3-95E2-F2C063A63F31}
O42 - Logiciel: Intel(R) Matrix Storage Manager - (.Pas de propriétaire.) [HKLM] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}
O42 - Logiciel: Java(TM) 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF}
O42 - Logiciel: Java(TM) 6 Update 7 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160070}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {E2DFE069-083E-4631-9B6C-43C48E991DE5}
O42 - Logiciel: Laptop Integrated Webcam Driver (1.04.01.1011) - (.Pas de propriétaire.) [HKLM] -- Creative OEM002
O42 - Logiciel: LimeWire 5.5.9 - (.Lime Wire, LLC.) [HKLM] -- LimeWire
O42 - Logiciel: Live! Cam Avatar - (.Creative Technology Ltd..) [HKLM] -- {1D5E29AD-39A9-4D0A-A8B6-46A6FCD8C995}
O42 - Logiciel: Live! Cam Avatar Creator - (.Creative Technology Ltd..) [HKLM] -- {65D0C510-D7B6-4438-9FC8-E6B91115AB0D}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: Machinarium - (.Amanita Design, s.r.o..) [HKLM] -- Machinarium
O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware
O42 - Logiciel: MediaDirect - (.Dell.) [HKLM] -- {9C6978E8-B6D0-4AB7-A7A0-D81A74FBF745}
O42 - Logiciel: Messenger Plus! Live - (.Yuna Software.) [HKLM] -- Messenger Plus! Live
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
O42 - Logiciel: Microsoft Office Live Add-in 1.5 - (.Microsoft Corporation.) [HKLM] -- {F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}
O42 - Logiciel: Microsoft Office XP Professional with FrontPage - (.Microsoft Corporation.) [HKLM] -- {40280409-6000-11D3-8CFE-0050048383C9}
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5}
O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}
O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {3B160861-7250-451E-B5EE-8B92BF30A710}
O42 - Logiciel: Modem Diagnostic Tool - (.Dell.) [HKLM] -- {294EAADF-E50F-4DD8-AD8D-19587EA10512}
O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}
O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra
O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack
O42 - Logiciel: Mozilla Firefox (3.6.8) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.8)
O42 - Logiciel: Nanovor - (.Smith & Tinker, Inc..) [HKLM] -- {20422811-5988-4E14-99D0-8B2C3794D684}
O42 - Logiciel: Nero 6 Ultra Edition - (.Pas de propriétaire.) [HKLM] -- Nero - Burning Rom!UninstallKey
O42 - Logiciel: NetWaiting - (.BVRP Software, Inc.) [HKLM] -- {3F92ABBB-6BBF-11D5-B229-002078017FBF}
O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}
O42 - Logiciel: OutlookAddinSetup - (.CyberLink.) [HKLM] -- {9BDEF074-020E-458D-ADC5-8FF68E0C9B56}
O42 - Logiciel: PowerDVD - (.CyberLink Corporation.) [HKLM] -- {6811CAA0-BF12-11D4-9EA1-0050BAE317E1}
O42 - Logiciel: QuickSet - (.Dell Inc..) [HKLM] -- {4B6AD248-D3BF-426A-8D64-847288154F13}
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}
O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM] -- RealPlayer 12.0
O42 - Logiciel: RealUpgrade 1.0 - (.RealNetworks, Inc..) [HKLM] -- {F4F4F84E-804F-4E9A-84D7-C34283F0088F}
O42 - Logiciel: Roxio Creator Audio - (.Roxio.) [HKLM] -- {73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}
O42 - Logiciel: Roxio Creator Copy - (.Roxio.) [HKLM] -- {B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}
O42 - Logiciel: Roxio Creator DE - (.Roxio.) [HKLM] -- {09760D42-E223-42AD-8C3E-55B47D0DDAC3}
O42 - Logiciel: Roxio Creator DE - (.Roxio.) [HKLM] -- {ED439A64-F018-4DD4-8BA5-328D85AB09AB}
O42 - Logiciel: Roxio Creator Data - (.Roxio.) [HKLM] -- {08E81ABD-79F7-49C2-881F-FD6CB0975693}
O42 - Logiciel: Roxio Creator Tools - (.Roxio.) [HKLM] -- {1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}
O42 - Logiciel: Roxio Express Labeler 3 - (.Roxio.) [HKLM] -- {6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
O42 - Logiciel: Roxio Update Manager - (.Roxio.) [HKLM] -- {30465B6C-B53F-49A1-9EBA-A3F187AD502E}
O42 - Logiciel: Sierra On-Line Games (Remove only) - (.Pas de propriétaire.) [HKLM] -- Sierra Uninstall
O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
O42 - Logiciel: Utilitaire de la carte réseau local sans fil Wireless de Dell - (.Dell Inc..) [HKLM] -- Broadcom 802.11b Network Adapter
O42 - Logiciel: VC80CRTRedist - 8.0.50727.4053 - (.DivX, Inc.) [HKLM] -- {5EE7D259-D137-4438-9A5F-42F432EC0421}
O42 - Logiciel: WinRAR archiver - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver
O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {ED00D08A-3C5F-488D-93A0-A04F21F23956}
O42 - Logiciel: Windows Live Contrôle parental - (.Microsoft Corporation.) [HKLM] -- {D5D81435-B8DE-4CAF-867F-7998F2B92CFC}
O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {2075CB0A-D26F-4DAA-B424-5079296B43BA}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {770F1BEC-2871-4E70-B837-FB8525FFA3B1}
O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {53B20C18-D8D4-4588-8737-9BBFE303C354}
O42 - Logiciel: Windows Live Toolbar - (.Microsoft Corporation.) [HKLM] -- {F7D27C70-90F5-49B9-B188-0A133C0CE353}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {4634B21A-CC07-4396-890C-2B8168661FEA}
O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
O42 - Logiciel: Zylom Games Player Plugin - (.Zylom Games.) [HKLM] -- Zylom Games Player Plugin
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {7AB3A249-FB81-416B-917A-A2A10E74C503}

---\\ HKCU & HKLM Software Keys
[HKCU\Software\AVG Security Toolbar]
[HKCU\Software\AVS4YOU]
[HKCU\Software\Ad-Remover]
[HKCU\Software\Adobe]
[HKCU\Software\Ahead]
[HKCU\Software\Alps]
[HKCU\Software\AppDataLow\Avg]
[HKCU\Software\AppDataLow\Software\AVG Security Toolbar]
[HKCU\Software\AppDataLow\Software\Google]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software\Monitored]
[HKCU\Software\AppDataLow\Software\settings]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Avg]
[HKCU\Software\Broadcom]
[HKCU\Software\CDDB]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Creative Tech]
[HKCU\Software\Cyberlink]
[HKCU\Software\DSCLauncher]
[HKCU\Software\DVD Shrink]
[HKCU\Software\Dell Computer Corporation]
[HKCU\Software\Dell]
[HKCU\Software\DivXNetworks]
[HKCU\Software\DivX]
[HKCU\Software\EyePower Games]
[HKCU\Software\GetData]
[HKCU\Software\Google]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\Lake]
[HKCU\Software\Llgyaxidwp]
[HKCU\Software\Macromedia]
[HKCU\Software\Magnet]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\Mirabilis]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\NirSoft]
[HKCU\Software\ODBC]
[HKCU\Software\Patchou]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\RealNetworks]
[HKCU\Software\Roxio]
[HKCU\Software\Safer Networking Limited]
[HKCU\Software\Skype]
[HKCU\Software\SoftLogica]
[HKCU\Software\Sonic]
[HKCU\Software\SupportSoft]
[HKCU\Software\SweetIM]
[HKCU\Software\Trolltech]
[HKCU\Software\Usbfix]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\Zylom]
[HKCU\Software\ej-technologies]
[HKLM\Software\ATI Technologies]
[HKLM\Software\AVG Security Toolbar]
[HKLM\Software\AVG]
[HKLM\Software\AVS4YOU]
[HKLM\Software\Adobe]
[HKLM\Software\Ahead]
[HKLM\Software\Alps]
[HKLM\Software\AppDataLow]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\BVRP Software, Inc]
[HKLM\Software\BcmSetup]
[HKLM\Software\Big Fish Games]
[HKLM\Software\Broadcom]
[HKLM\Software\CDDB]
[HKLM\Software\CXT]
[HKLM\Software\Canon]
[HKLM\Software\Caphyon]
[HKLM\Software\Citrix]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Conexant]
[HKLM\Software\Creative Tech]
[HKLM\Software\Creative]
[HKLM\Software\CyberLink]
[HKLM\Software\Dell Computer Corporation]
[HKLM\Software\Dell Inc.]
[HKLM\Software\Dell]
[HKLM\Software\DivXNetworks]
[HKLM\Software\DivX]
[HKLM\Software\GEAR Software]
[HKLM\Software\Google]
[HKLM\Software\IDT]
[HKLM\Software\InstallShield]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\Lake]
[HKLM\Software\Licenses]
[HKLM\Software\LogMeIn Rescue]
[HKLM\Software\Macromedia]
[HKLM\Software\MicroVision]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\Patchou]
[HKLM\Software\Piriform]
[HKLM\Software\PocketSoft]
[HKLM\Software\Policies]
[HKLM\Software\RealNetworks]
[HKLM\Software\Reallusion]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\RichFX]
[HKLM\Software\Roxio]
[HKLM\Software\Safer Networking Limited]
[HKLM\Software\SierraOnLine]
[HKLM\Software\Sigmatel]
[HKLM\Software\SoftLogica]
[HKLM\Software\Sonic]
[HKLM\Software\SupportSoft]
[HKLM\Software\SweetIM]
[HKLM\Software\Symantec]
[HKLM\Software\TrendMicro]
[HKLM\Software\WOW6432Node]
[HKLM\Software\WinRAR]
[HKLM\Software\Xing Technology Corp.]
[HKLM\Software\ej-technologies]
[HKLM\Software\mcafeeupdater]
[HKLM\Software\mozilla.org]

---\\ Contenu des dossiers ProgramFiles/ProgramData (O43)
O43 - CFD:Common File Directory ----D- C:\Program Files\Ad-Remover
O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe
O43 - CFD:Common File Directory ----D- C:\Program Files\Ahead
O43 - CFD:Common File Directory ----D- C:\Program Files\Apple Software Update
O43 - CFD:Common File Directory ----D- C:\Program Files\Atari
O43 - CFD:Common File Directory ----D- C:\Program Files\AVG
O43 - CFD:Common File Directory ----D- C:\Program Files\AVS4YOU
O43 - CFD:Common File Directory ----D- C:\Program Files\Bonjour
O43 - CFD:Common File Directory ----D- C:\Program Files\CCleaner
O43 - CFD:Common File Directory ----D- C:\Program Files\Circle Developemnt
O43 - CFD:Common File Directory ----D- C:\Program Files\Cisco
O43 - CFD:Common File Directory ----D- C:\Program Files\Citrix
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files
O43 - CFD:Common File Directory ----D- C:\Program Files\CONEXANT
O43 - CFD:Common File Directory ----D- C:\Program Files\Creative
O43 - CFD:Common File Directory ----D- C:\Program Files\Creative Live! Cam
O43 - CFD:Common File Directory ----D- C:\Program Files\CyberLink
O43 - CFD:Common File Directory ----D- C:\Program Files\Dell
O43 - CFD:Common File Directory ----D- C:\Program Files\Dell Support Center
O43 - CFD:Common File Directory ----D- C:\Program Files\DellTPad
O43 - CFD:Common File Directory ----D- C:\Program Files\Digital Line Detect
O43 - CFD:Common File Directory ----D- C:\Program Files\DivX
O43 - CFD:Common File Directory ----D- C:\Program Files\DVD Shrink
O43 - CFD:Common File Directory -SH-D- C:\Program Files\Fichiers communs
O43 - CFD:Common File Directory ----D- C:\Program Files\Free Video Converter
O43 - CFD:Common File Directory ----D- C:\Program Files\Google
O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD:Common File Directory ----D- C:\Program Files\Intel
O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer
O43 - CFD:Common File Directory ----D- C:\Program Files\iPod
O43 - CFD:Common File Directory ----D- C:\Program Files\iTunes
O43 - CFD:Common File Directory ----D- C:\Program Files\Java
O43 - CFD:Common File Directory ----D- C:\Program Files\Lavasoft
O43 - CFD:Common File Directory ----D- C:\Program Files\LimeWire
O43 - CFD:Common File Directory ----D- C:\Program Files\Machinarium
O43 - CFD:Common File Directory ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD:Common File Directory ----D- C:\Program Files\Messenger Plus! Live
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft ActiveSync
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Games
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Silverlight
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Sync Framework
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft.NET
O43 - CFD:Common File Directory ----D- C:\Program Files\Modem Diagnostic Tool
O43 - CFD:Common File Directory ----D- C:\Program Files\Movie Maker
O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Firefox
O43 - CFD:Common File Directory ----D- C:\Program Files\MSBuild
O43 - CFD:Common File Directory ----D- C:\Program Files\NetWaiting
O43 - CFD:Common File Directory ----D- C:\Program Files\QuickTime
O43 - CFD:Common File Directory ----D- C:\Program Files\Real
O43 - CFD:Common File Directory ----D- C:\Program Files\Reference Assemblies
O43 - CFD:Common File Directory ----D- C:\Program Files\Roxio
O43 - CFD:Common File Directory ----D- C:\Program Files\Sigmatel
O43 - CFD:Common File Directory ----D- C:\Program Files\SoftLogica
O43 - CFD:Common File Directory ----D- C:\Program Files\Spybot - Search & Destroy
O43 - CFD:Common File Directory ----D- C:\Program Files\Trend Micro
O43 - CFD:Common File Directory --H-D- C:\Program Files\Uninstall Information
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Calendar
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Collaboration
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Defender
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Journal
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live SkyDrive
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Mail
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Photo Gallery
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Portable Devices
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Sidebar
O43 - CFD:Common File Directory ----D- C:\Program Files\WinRAR
O43 - CFD:Common File Directory ----D- C:\Program Files\ZHPDiag
O43 - CFD:Common File Directory ----D- C:\Program Files\Zylom Games
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Adobe
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Ahead
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Apple
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\AVSMedia
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Designer
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\DivX Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\InstallShield
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Java
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\microsoft shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\PX Storage Engine
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Real
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Reallusion
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Roxio Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Services
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Sonic Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\supportsoft
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\SureThing Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Symantec Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\System
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Windows Live
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\xing shared
O43 - CFD:Common File Directory ----D- C:\ProgramData\Adobe
O43 - CFD:Common File Directory ----D- C:\ProgramData\Apple
O43 - CFD:Common File Directory ----D- C:\ProgramData\Apple Computer
O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Application Data
O43 - CFD:Common File Directory ----D- C:\ProgramData\AVG Security Toolbar
O43 - CFD:Common File Directory ----D- C:\ProgramData\avg9
O43 - CFD:Common File Directory ----D- C:\ProgramData\AVS4YOU
O43 - CFD:Common File Directory ----D- C:\ProgramData\Azureus
O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Bureau
O43 - CFD:Common File Directory --H-D- C:\ProgramData\CanonBJ
O43 - CFD:Common File Directory ----D- C:\ProgramData\CyberLink
O43 - CFD:Common File Directory ----D- C:\ProgramData\Dell
O43 - CFD:Common File Directory ----D- C:\ProgramData\DivX
O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Documents
O43 - CFD:Common File Directory ----D- C:\ProgramData\DVD Shrink
O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Favoris
O43 - CFD:Common File Directory ----D- C:\ProgramData\Google
O43 - CFD:Common File Directory ----D- C:\ProgramData\InstallShield
O43 - CFD:Common File Directory ----D- C:\ProgramData\Malwarebytes
O43 - CFD:Common File Directory ----D- C:\ProgramData\McAfee
O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Menu Démarrer
O43 - CFD:Common File Directory ----D- C:\ProgramData\Messenger Plus!
O43 - CFD:Common File Directory -S--D- C:\ProgramData\Microsoft
O43 - CFD:Common File Directory -SH-D- C:\ProgramData\Modèles
O43 - CFD:Common File Directory ----D- C:\ProgramData\QuickTime
O43 - CFD:Common File Directory ----D- C:\ProgramData\Real
O43 - CFD:Common File Directory ----D- C:\ProgramData\Roxio
O43 - CFD:Common File Directory ----D- C:\ProgramData\Skype
O43 - CFD:Common File Directory ----D- C:\ProgramData\Sonic
O43 - CFD:Common File Directory ----D- C:\ProgramData\Spybot - Search & Destroy
O43 - CFD:Common File Directory ----D- C:\ProgramData\Sun
O43 - CFD:Common File Directory ----D- C:\ProgramData\SupportSoft
O43 - CFD:Common File Directory ----D- C:\ProgramData\Symantec
O43 - CFD:Common File Directory -SH-D- C:\ProgramData\SysWoW32
O43 - CFD:Common File Directory ---AD- C:\ProgramData\TEMP
O43 - CFD:Common File Directory ----D- C:\ProgramData\Uninstall
O43 - CFD:Common File Directory ----D- C:\ProgramData\WinZip
O43 - CFD:Common File Directory ----D- C:\ProgramData\WinZipEC
O43 - CFD:Common File Directory ----D- C:\ProgramData\Zylom
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Adobe
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Ahead
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Apple
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\AVSMedia
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Designer
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\DivX Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\InstallShield
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Java
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\microsoft shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\PX Storage Engine
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Real
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Reallusion
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Roxio Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Services
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Sonic Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\supportsoft
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\SureThing Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Symantec Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\System
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Windows Live
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\xing shared

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.3F337DD54339BEAF26917D3A0A32C1DE] - 2010-08-12 - 17:39:15 ---A- . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll [81920]
O44 - LFC:[MD5.7BAF8AE95F256F05CC4D950F359DA356] - 2010-08-13 - 02:27:12 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\FNTCACHE.DAT [284176]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 2010-08-14 - 22:50:07 RSHA- . (.Pas de propriétaire - Pas de description.) -- C:\IO.SYS [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 2010-08-14 - 22:50:07 RSHA- . (.Pas de propriétaire - Pas de description.) -- C:\MSDOS.SYS [0]
O44 - LFC:[MD5.9053A7CE40402ECF02C6DE551E523FFE] - 2010-08-14 - 22:53:24 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\SIERRA.INI [182]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 2010-08-22 - 10:53:18 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\llgyaxidwp.tmp [0]
O44 - LFC:[MD5.92B0DD2A5283A7FAB002DA5B5D236EDC] - 2010-08-22 - 11:11:15 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\lopR.txt [13110]
O44 - LFC:[MD5.F64E191CFFD2A4282C02C2F5F6B077DB] - 2010-08-22 - 11:58:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Ad-Report-CLEAN[1].txt [4962]
O44 - LFC:[MD5.67B48A903430C6D4FB58CBACA1866601] - 2010-08-22 - 12:46:32 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [20952]
O44 - LFC:[MD5.C7DD7D9739785BD3A6B8499EEC1DEE7E] - 2010-08-22 - 12:46:34 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\System32\drivers\mbamswissarmy.sys [38224]
O44 - LFC:[MD5.8E9F5186C833D16783F8FC1A9C619C9E] - 2010-08-22 - 19:57:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\PFRO.log [1170]
O44 - LFC:[MD5.AE1EFA0FFB9EC7B5072D176AF8E7B8D8] - 2010-08-22 - 20:12:33 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\PerfStringBackup.INI [1500646]
O44 - LFC:[MD5.28E99E408722BFA9C7624DA3025BC0F0] - 2010-08-22 - 20:12:33 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc009.dat [108572]
O44 - LFC:[MD5.20BFFF38A4DD39C576F788DBFBEEDAD2] - 2010-08-22 - 20:12:33 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc00C.dat [126626]
O44 - LFC:[MD5.11805062305CF977A15A546BDF3B2700] - 2010-08-22 - 20:12:33 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh009.dat [595996]
O44 - LFC:[MD5.2350280362FAF1F473C465466EA62F7B] - 2010-08-22 - 20:12:33 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh00C.dat [679042]
O44 - LFC:[MD5.13001EB0A58B4DE96126B16AB15FD8CC] - 2010-08-23 - 11:52:29 ---A- . (.Real Networks, Inc - Real Networks C/C++ Runtime Library.) -- C:\Windows\System32\pncrt.dll [278528]
O44 - LFC:[MD5.33833B3EDA1B07EBD367FA9B38B23E60] - 2010-08-23 - 11:53:00 ---A- . (.RealNetworks, Inc. - 16 bit DirectX helper DLL.) -- C:\Windows\System32\pndx5016.dll [6656]
O44 - LFC:[MD5.B74E422BC81236042529DC8A42A18423] - 2010-08-23 - 11:53:00 ---A- . (.RealNetworks, Inc. - 32 bit DirectX helper DLL.) -- C:\Windows\System32\pndx5032.dll [5632]
O44 - LFC:[MD5.1943C53C625732DEEC2A798CC619EC08] - 2010-08-23 - 11:53:11 ---A- . (.RealNetworks, Inc. - Real Player(tm) ActiveX Control.) -- C:\Windows\System32\rmoc3260.dll [185920]
O44 - LFC:[MD5.B8F7C6CA5F8E97249853DBE1DADD1FBC] - 2010-08-26 - 18:41:34 ---A- . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Windows\System32\deployJava1.dll [411368]
O44 - LFC:[MD5.43F7CA0473BB0FC9DD44ECF328B8D1FA] - 2010-08-26 - 18:41:34 ---A- . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Windows\System32\java.exe [145184]
O44 - LFC:[MD5.4E8CC8BDEBED5AD93539612D4D316FDF] - 2010-08-26 - 18:41:34 ---A- . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Windows\System32\javaw.exe [145184]
O44 - LFC:[MD5.9D452D6B1ED99F88C327349A644EB3A2] - 2010-08-26 - 18:41:34 ---A- . (.Sun Microsystems, Inc. - Java(TM) Web Start Launcher.) -- C:\Windows\System32\javaws.exe [153376]
O44 - LFC:[MD5.A8E2C6AF4282A80C75F1E0BCE0048DA2] - 2010-08-29 - 20:10:34 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\MEMORY.DMP [296299870]
O44 - LFC:[MD5.0F989F519EF528B132D8DEA6306BB615] - 2010-08-31 - 07:12:50 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\UsbFix_Upload_Me_PC-DE-MYRIAM.zip [3580]
O44 - LFC:[MD5.F35CB889F39984201DE00C14EC3F1E2B] - 2010-08-31 - 07:13:05 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\UsbFix.txt [3536]
O44 - LFC:[MD5.007CCF40693220EDFAF699BAC9D67A97] - 2010-09-02 - 06:54:31 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.00000000000000000000000000000000] - 2010-09-02 - 06:54:47 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\WindowsUpdate.log [340621]

---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\

Bonjour,

Malheureusement, j'ai toujours ce maudit problème de redirection vers des page qui non aucun lien avec ce que j'ai demandé. Mais !!! J'ai espoir :D

Voici le rapport que tu m'as demandé.
http://www.cijoint.fr/cjlink.php?file=cj201009/cijudq8ozl.txt

1)

Copie tout le texte présent en gras ci-dessous ( tu le selectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C )

O20 - AppInit_DLLs: . (.Pas de propriétaire - Pas de description.) - C:\WINDOWS\SYSTEM32\DNSHC32.dll (.not file.)
[HKCU\Software\Llgyaxidwp]
O43 - CFD:Common File Directory ----D- C:\Program Files\Circle Developemnt

Puis Lance ZHPFix depuis le raccourci du bureau .

* Une fois l'outil ZHPFix ouvert , clique sur le bouton [ H ] ( "coller les lignes Helper" ) .

* Dans l'encadré principal tu verras donc les lignes que tu as copié précédemment apparaitrent .

Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.

Clique sur " Ok " , puis " Tous " et enfin " Nettoyer ".

Copie/Colle le rapport à l'écran dans ton prochain message

le rapport se trouve dans le dossier de zhpdiag dans program files sous le nom de ZHPFixReport

.......................

2)

* Télécharge Defogger
http://www.jpshortstuff.247fixes.com/Defogger.exe

=> lance le
* Une fenêtre apparait clique sur Disable
* Redémarre le PC si demandé

ensuite

/!\ Il faut impérativement désactiver tous tes logiciels de protection pour utiliser ce programme/!\

? Télécharge : Gmer (by Przemyslaw Gmerek)

http://www.gmer.net/

? Dezippe gmer ,cliques sur l'onglet rootkit,lances le scan,des lignes rouges vont apparaitre.

? Les lignes rouges indiquent la presence d'un rootkit.Postes moi le rapport gmer (cliques sur copy,puis vas dans demarrer ,puis ouvres le bloc note,vas dans edition et cliques sur coller,le rapport gmer va apparaitre,postes moi le)