Pc lent qui marque souvent "ne répond pas"

tout d abord merci

ensuite j'ai bien téléchargé cela et lancé la recherche mais ca bloque a 54% donc je ne peux pas envoyer le rapport

bonjour, perso je vois pasde traces d'infection sur ton pc , mais il semblerait que naorton soit mal désinstaller , tu va utiliser l'outil spéciphique pour nettoyer les restes , tu vas passer list&kill"em comme demandé erpuis ccleaner ettu me dira après un redémarrage comment il va !!


1) utilises l'outils spéciphique pour supprimr toutes traces de norton

http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fr_docid/20050414110429924

2) passes list&kill"em dans les deux modes


A) passes lis&kill"em option Search



DESACTIVE TON ANTIVIRUS ET TON PAREFEU SI PRESENTS !!!!!(car il est detecté a tort comme infection)

Télécharge List_Kill'em et enregistre le sur ton bureau

double clique ( clic droit "executer en tant qu'administrateur" pour Vista/7 ) sur le raccourci sur ton bureau pour lancer l'installation

une fois terminée , clic sur "terminer" et le programme se lancera seul

choisis l'option Search

un icone blanc et noir va s'afficher sur le bureau , il te servira à relancer le programme par la suite.
un autre rouge et noir te servira a desinstaller le prog a la fin de la desinfection.

laisse travailler l'outil

à l'apparition de la fenetre blanche , c'est un peu long , c'est normal , le programme n'est pas bloqué.

un rapport du nom de catchme apparait sur ton bureau , ignore-le,ne le poste pas , , il s'auto supprimera a la fin du scan

Poste le contenu du rapport qui s'ouvre aux 100 % du scan à l'ecran "COMPLETED"





B) list&kill"em option Clean



Relance List_Kill'em(soit en clic droit pour vista/7),avec le raccourci sur ton bureau.
mais cette fois-ci :

choisis l'Option Clean

ton PC va redemarrer,

laisse travailler l'outil.

en fin de scan la fenetre se ferme , et tu as un rapport du nom de Kill'em.txt sur ton bureau ,

colle le contenu dans ta reponse




3) passes ccleaner avec les réglages donnés



télécharges Ccleaner à partir de cette adresses

https://www.commentcamarche.net/telecharger/utilitaires/5647-ccleaner/


.enregistres le sur le bureau
.double-cliques sur le fichier pour lancer l'installation
.sur la fenêtre de l'installation langage bien choisir français et OK
.cliques sur suivant
.lis la licence et j'accepte
.cliques sur suivant
.la tu ne gardes de coché que mettre un raccourci sur le bureau et puis contrôler automatiquement les mises à jour de Ccleaner
.cliques sur intaller
.cliques sur fermer
.double-cliques sur l'icône de Ccleaner pour l'ouvrir
.une fois ouvert tu cliques sur option et puis avancé
.tu décoches effacer uniquement les fichiers, du dossier temp de windows plus vieux que 24 heures
.cliques sur nettoyeur
.cliques sur windows et dans la colonne avancé
.cochesla première case vieilles données du perfetch que celle-la
.cliques sur analyse une fois l'analyse terminé
.cliques sur lancer le nettoyage et sur la demande de confirmation OK il vas falloir que tu le refasses une autre fois une fois fini vériffis en appuiant de nouveau sur analyse pour être sur qu'il n'y est plus rien
.cliques maintenant sur registre et puis sur rechercher les erreurs
.laisses tout cochées et cliques sur réparrer les erreurs sélectionnées
.il te demande de sauvegarder OUI
.tu lui donnes un nom pour pouvoir la retrouver et enregistre
.cliques sur corriger toutes les erreurs sélectionnées et sur la demande de confirmation OK
.il supprime et fermer tu vériffis en relancant rechercher les erreurs
.tu retournes dans option et tu recoches la case effacer uniquement les fichiers, du dossier temp de windows plus vieux que 24 heures et sur nettoyeur, windows sous avancé tu décoches la première case vieilles données du perfetch
.tu peux fermer Ccleaner

pour aider si besion tutoriel: https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php




après un redémarrage tu me dira comment va le pc

j'ai désinstallé norton mais je n'arrive pas à installer list_kill'em, ca me met ce message d'erreur : impossibilité d'executer le fichier , l'opération nécessite une élévation.
alors je ne sais pas comment faire.
de plus j'ai remarqué que j'avais beaucoup de processus, dans le gestionnaire des taches ca me met 83 processus mais il n'yen a pas autant d'inscrit sur la page donc je ne sais pas si cela est normal
merci

list&kill"em tu le lances bien avec un clique droit et en tant que administrateur ??

désolé pour le retard mais c'était assez long: voici le premier rapport avec search ;
¤¤¤¤¤¤¤¤¤¤ List'em by g3n-h@ckm@n 2.1.0.2 ¤¤¤¤¤¤¤¤¤¤

User : Tiffany (Administrateurs)
Update on 30/08/2010 by g3n-h@ckm@n ::::: 15.00
Start at: 21:29:09 | 31/08/2010

Pentium(R) Dual-Core CPU T4200 @ 2.00GHz
Microsoft® Windows Vista(TM) Édition Familiale Premium (6.0.6002 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18943
Windows Firewall Status : Disabled

C:\ -> Disque fixe local | 287,5 Go (246,42 Go free) | NTFS
D:\ -> Disque fixe local | 10,59 Go (1,75 Go free) [RECOVERY] | NTFS
E:\ -> Disque CD-ROM

Boot: Normal

¤¤¤¤¤¤ Processes ------- Memory(Ko) ------- Priority ------ Command ------- Signer


C:\Windows\System32\smss.exe ---- 724 Ko ---- Normal ---- \SystemRoot\System32\smss.exe ----
C:\Windows\system32\csrss.exe ---- 6248 Ko ---- Normal ---- C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16 ----
C:\Windows\system32\wininit.exe ---- 4032 Ko ---- High ---- wininit.exe ----
C:\Windows\system32\csrss.exe ---- 12188 Ko ---- Normal ---- C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16 ----
C:\Windows\system32\services.exe ---- 7084 Ko ---- Normal ---- C:\Windows\system32\services.exe ----
C:\Windows\system32\lsass.exe ---- 2656 Ko ---- Normal ---- C:\Windows\system32\lsass.exe ----
C:\Windows\system32\lsm.exe ---- 3972 Ko ---- Normal ---- C:\Windows\system32\lsm.exe ----
C:\Windows\system32\winlogon.exe ---- 5604 Ko ---- High ---- winlogon.exe ----
C:\Windows\system32\svchost.exe ---- 6824 Ko ---- Normal ---- C:\Windows\system32\svchost.exe -k DcomLaunch ----
C:\Windows\system32\svchost.exe ---- 7328 Ko ---- Normal ---- C:\Windows\system32\svchost.exe -k rpcss ----
C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe ---- 7364 Ko ---- Idle ---- "C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe" /service ---- BITDEFENDER LLC
C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe ---- 19160 Ko ---- Normal ---- "C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe" /service ---- BITDEFENDER LLC
C:\Windows\system32\Ati2evxx.exe ---- 3904 Ko ---- Normal ---- C:\Windows\system32\Ati2evxx.exe ----
C:\Windows\System32\svchost.exe ---- 13988 Ko ---- Normal ---- C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted ----
C:\Windows\System32\svchost.exe ---- 86320 Ko ---- Normal ---- C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted ----
C:\Windows\system32\svchost.exe ---- 86004 Ko ---- Normal ---- C:\Windows\system32\svchost.exe -k netsvcs ----
C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_52c73ccb\STacSV.exe ---- 6720 Ko ---- Normal ---- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_52c73ccb\STacSV.exe ----
C:\Windows\system32\svchost.exe ---- 4904 Ko ---- Normal ---- C:\Windows\system32\svchost.exe -k GPSvcGroup ----
C:\Windows\system32\SLsvc.exe ---- 11624 Ko ---- Normal ---- C:\Windows\system32\SLsvc.exe ----
C:\Windows\system32\svchost.exe ---- 14556 Ko ---- Normal ---- C:\Windows\system32\svchost.exe -k LocalService ----
C:\Windows\system32\Ati2evxx.exe ---- 6332 Ko ---- Normal ---- Ati2evxx.exe -Client ----
C:\Windows\system32\Hpservice.exe ---- 4644 Ko ---- Normal ---- C:\Windows\system32\Hpservice.exe ----
C:\Windows\system32\svchost.exe ---- 16168 Ko ---- Normal ---- C:\Windows\system32\svchost.exe -k NetworkService ----
C:\Windows\system32\Dwm.exe ---- 58240 Ko ---- High ---- "C:\Windows\system32\Dwm.exe" ----
C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe ---- 1448 Ko ---- Normal ---- "C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe" ---- BITDEFENDER LLC
C:\Windows\Explorer.EXE ---- 45528 Ko ---- Normal ---- C:\Windows\Explorer.EXE ----
C:\Windows\system32\WLANExt.exe ---- 5188 Ko ---- Normal ---- C:\Windows\system32\WLANExt.exe 3161320 ----
C:\Windows\System32\spoolsv.exe ---- 10192 Ko ---- Normal ---- C:\Windows\System32\spoolsv.exe ----
C:\Windows\system32\svchost.exe ---- 16696 Ko ---- Normal ---- C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork ----
C:\Windows\system32\taskeng.exe ---- 5764 Ko ---- Below Normal ---- taskeng.exe {C41B8B07-3F4D-4081-8073-B668DAB21659} ----
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe ---- 7932 Ko ---- Above Normal ---- "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" ---- Synaptics Incorporated
C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe ---- 10052 Ko ---- Normal ---- "C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe" ---- CyberLink
C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe ---- 12880 Ko ---- Normal ---- "C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe" ---- CyberLink
C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe ---- 20192 Ko ---- Below Normal ---- "C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe" ---- CyberLink
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe ---- 7652 Ko ---- Normal ---- "C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe" /Start ---- Hewlett-Packard Company
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe ---- 3108 Ko ---- Normal ---- "C:\Program Files\HP\HP Software Update\hpwuSchd2.exe" ---- Hewlett-Packard Company
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe ---- 20732 Ko ---- Normal ---- "C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" ---- Hewlett-Packard Company
C:\Program Files\IDT\WDM\sttray.exe ---- 13760 Ko ---- Normal ---- "C:\Program Files\IDT\WDM\sttray.exe" ----
C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe ---- 20580 Ko ---- Normal ---- "C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe" ---- CyberLink
C:\Windows\system32\taskeng.exe ---- 10684 Ko ---- Normal ---- taskeng.exe {45451E20-C983-4390-A270-B08FFA4F08C1} ----
C:\Program Files\Common Files\Java\Java Update\jusched.exe ---- 3788 Ko ---- Normal ---- "C:\Program Files\Common Files\Java\Java Update\jusched.exe" ---- Sun Microsystems, Inc.
C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe ---- 4564 Ko ---- Normal ---- "C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe" autorun=AUTORUN ----
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe ---- 1664 Ko ---- Normal ---- "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" ---- Google Inc
C:\Program Files\Windows Media Player\wmpnscfg.exe ---- 4896 Ko ---- Normal ---- "C:\Program Files\Windows Media Player\wmpnscfg.exe" ----
C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_52c73ccb\aestsrv.exe ---- 1624 Ko ---- Normal ---- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_52c73ccb\aestsrv.exe ----
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe ---- 3768 Ko ---- Normal ---- "C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe" ---- Apple Inc.
C:\Program Files\Bonjour\mDNSResponder.exe ---- 4900 Ko ---- Normal ---- "C:\Program Files\Bonjour\mDNSResponder.exe" ---- Apple Inc.
C:\Windows\system32\svchost.exe ---- 3352 Ko ---- Normal ---- C:\Windows\system32\svchost.exe -k bthsvcs ----
C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE ---- 3072 Ko ---- Normal ---- "C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE" ----
C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE ---- 2372 Ko ---- Normal ---- "C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE" ----
C:\Program Files\Common Files\LightScribe\LSSrvc.exe ---- 3708 Ko ---- Normal ---- "C:\Program Files\Common Files\LightScribe\LSSrvc.exe" ----
C:\Windows\system32\svchost.exe ---- 4580 Ko ---- Normal ---- C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted ----
C:\Program Files\SMINST\BLService.exe ---- 3504 Ko ---- Normal ---- "C:\Program Files\SMINST\BLService.exe" ---- SoftThinks
C:\Program Files\CyberLink\Shared files\RichVideo.exe ---- 3696 Ko ---- Normal ---- "C:\Program Files\CyberLink\Shared files\RichVideo.exe" ----
C:\Windows\system32\svchost.exe ---- 6136 Ko ---- Normal ---- C:\Windows\system32\svchost.exe -k imgsvc ----
C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe ---- 14048 Ko ---- Normal ---- "C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe" ---- CyberLink
C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe ---- 6308 Ko ---- Normal ---- "C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe" ---- CyberLink
C:\Windows\System32\svchost.exe ---- 3964 Ko ---- Normal ---- C:\Windows\System32\svchost.exe -k WerSvcGroup ----
C:\Windows\system32\SearchIndexer.exe ---- 17196 Ko ---- Normal ---- C:\Windows\system32\SearchIndexer.exe /Embedding ----
C:\Program Files\Windows Media Player\wmpnetwk.exe ---- 8416 Ko ---- Normal ---- "C:\Program Files\Windows Media Player\wmpnetwk.exe" ----
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe ---- 5132 Ko ---- Normal ---- "C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe" ----
C:\Windows\system32\wbem\wmiprvse.exe ---- 12428 Ko ---- Normal ---- C:\Windows\system32\wbem\wmiprvse.exe ----
C:\Windows\system32\wbem\wmiprvse.exe ---- 5968 Ko ---- Normal ---- C:\Windows\system32\wbem\wmiprvse.exe ----
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe ---- 3628 Ko ---- Normal ---- "C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe" ---- Hewlett-Packard Company
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe ---- 2588 Ko ---- Above Normal ---- "C:\Program Files\Synaptics\SynTP\SynTPHelper.exe" ---- Synaptics Incorporated
C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe ---- 5588 Ko ---- Normal ---- "C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe" -Embedding ---- Hewlett-Packard Company
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe ---- 13196 Ko ---- Normal ---- C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe ---- Microsoft Corporation
c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe ---- 19584 Ko ---- Normal ---- "c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe" ----
C:\Program Files\Hewlett-Packard\HP Advisor\SSDK04.exe ---- 6820 Ko ---- Normal ---- "C:\Program Files\Hewlett-Packard\HP Advisor\SSDK04.exe" -Embedding ---- Symantec Corporation
C:\Windows\system32\conime.exe ---- 5720 Ko ---- Normal ---- C:\Windows\system32\conime.exe ----
C:\Program Files\Windows Live\Messenger\msnmsgr.exe ---- 96844 Ko ---- Normal ---- "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" ---- Microsoft Corporation
C:\Program Files\Windows Live\Contacts\wlcomm.exe ---- 46760 Ko ---- Normal ---- "C:\Program Files\Windows Live\Contacts\wlcomm.exe" -Embedding ---- Microsoft Corporation
C:\Program Files\Microsoft Office\Office12\WINWORD.EXE ---- 53068 Ko ---- Normal ---- "C:\Program Files\Microsoft Office\Office12\WINWORD.EXE" /n /dde ---- Microsoft Corporation
C:\Program Files\Common Files\BitDefender\BitDefender Update Service\upgrepl.exe ---- 6436 Ko ---- Idle ---- /assig /aphsig /utype=12 ----
C:\Windows\system32\SearchProtocolHost.exe ---- 10292 Ko ---- Idle ---- "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe20_ Global\UsGthrCtrlFltPipeMssGthrPipe20 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" ----
C:\Windows\system32\cmd.exe ---- 4632 Ko ---- Normal ---- C:\Windows\system32\cmd.exe /K List'em.bat ----
C:\Program Files\List_Kill'em\pv.exe ---- 7648 Ko ---- Normal ---- pv -o"%f ---- %m Ko ---- %p ---- %l ---- %s" ----


¤¤¤¤¤¤¤¤¤¤ Keys "Run" ¤¤¤¤¤¤¤¤¤¤

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
HPAdvisor = C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN
swg = "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
WMPNSCFG = C:\Program Files\Windows Media Player\WMPNSCFG.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
SynTPEnh = C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
DVDAgent = "C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe"
TSMAgent = "C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe"
CLMLServer for HP TouchSmart = "C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe"
UCam_Menu = "C:\Program Files\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Hewlett-Packard\Media\Webcam" update "Software\Hewlett-Packard\Media\Webcam"
UpdateLBPShortCut = "C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
UpdatePSTShortCut = "C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
Windows Defender = %ProgramFiles%\Windows Defender\MSASCui.exe -hide
QlbCtrl.exe = C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
UpdateP2GoShortCut = "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
UpdatePDIRShortCut = "C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\PowerDirector" UpdateWithCreateOnce "SOFTWARE\CyberLink\PowerDirector\7.0"
HP Health Check Scheduler = c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
HP Software Update = C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
WirelessAssistant = C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
SysTrayApp = %ProgramFiles%\IDT\WDM\sttray.exe
TVAgent = "C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe"
ORAHSSSessionManager = "C:\Program Files\Orange\Connexion Internet Orange\SessionManager\SessionManager.exe"
BitDefender Antiphishing Helper = "C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe"
BDAgent = "C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe"
SunJavaUpdateSched = "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

¤¤¤¤¤¤¤¤¤¤ Other System Keys ¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
ConsentPromptBehaviorAdmin = 2 (0x2)
ConsentPromptBehaviorUser = 1 (0x1)
EnableInstallerDetection = 1 (0x1)
EnableLUA = 1 (0x1)
EnableSecureUIAPaths = 1 (0x1)
EnableVirtualization = 1 (0x1)
PromptOnSecureDesktop = 1 (0x1)
ValidateAdminCodeSignatures = 0 (0x0)
dontdisplaylastusername = 0 (0x0)
legalnoticecaption =
legalnoticetext =
scforceoption = 0 (0x0)
shutdownwithoutlogon = 1 (0x1)
undockwithoutlogon = 1 (0x1)
FilterAdministratorToken = 0 (0x0)
EnableUIADesktopToggle = 0 (0x0)

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
BindDirectlyToPropertySetStorage = 0 (0x0)

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
AppInit_DLLS =

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
ReportBootOk = 1
Shell = explorer.exe
Userinit = C:\Windows\system32\userinit.exe,
VmApplet = rundll32 shell32,Control_RunDLL "sysdm.cpl"
AutoRestartShell = 1 (0x1)
LegalNoticeCaption =
LegalNoticeText =
PowerdownAfterShutdown = 0
ShutdownWithoutLogon = 0
cachedlogonscount = 10
forceunlocklogon = 0 (0x0)
passwordexpirywarning = 14 (0xe)
Background = 0 0 0
DebugServerCommand = no
WinStationsDisabled = 0
DisableCAD = 1 (0x1)
scremoveoption = 0
ShutdownFlags = 43 (0x2b)

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤


¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

¤¤¤¤¤¤¤¤¤¤ ActivX | COM ¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{8AD9C840-044E-11D1-B3E9-00805F499D93}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}]

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{26923b43-4d38-484f-9b9e-de460746276c}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{166B1BCA-3F9C-11CF-8075-444553540000}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2A202491-F00D-11cf-87CC-0020AFEECF20}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3af36230-a269-11d1-b5bf-0000f8051515}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3C3901C5-3455-3E0A-A214-0B093A5070A6}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA855-CC51-11CF-AAFA-00AA00B6015F}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{45ea75a0-a269-11d1-b5bf-0000f8051515}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f645220-306d-11d2-995d-00c04f98bbc9}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5fd399c0-a70a-11d1-9948-00c04f98bbc9}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{630b1da0-b465-11d1-9948-00c04f98bbc9}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6fab99d0-bab8-11d1-994a-00c04f98bbc9}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7C028AF8-F614-47B3-82DA-BA94E41B1089}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9381D8F2-0288-11D0-9501-00AA00B911A5}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C9E9A340-D1F1-11D0-821E-444553540600}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CDD7975E-60F8-41d5-8149-19E51D6F71D0}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D27CDB6E-AE6D-11CF-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{de5aed00-a4bf-11d1-9948-00c04f98bbc9}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{E92B03AB-B707-11d2-9CBD-0000F87A369E}]

¤¤¤¤¤¤¤¤¤¤ BHO ¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

¤¤¤¤¤¤¤¤¤¤ DNS ¤¤¤¤¤¤¤¤¤¤


¤¤¤¤¤¤¤¤¤¤ Internet Explorer ¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Start Page = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
Local Page = C:\Windows\System32\blank.htm
Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page = https://www.google.fr/?gws_rd=ssl
Local Page = C:\Windows\system32\blank.htm
Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF

¤¤¤¤¤ Proxy Internet Explorer

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
ProxyEnable = 0 (0x0)


¤¤¤¤¤¤¤¤¤¤ Proxy Firefox ¤¤¤¤¤¤¤¤¤¤


¤¤¤¤¤¤¤¤¤¤ TaskCache ¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\schedule\taskcache\tree\Apple]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\schedule\taskcache\tree\CreateChoiceProcessTask]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\schedule\taskcache\tree\GoogleUpdateTaskMachineCore]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\schedule\taskcache\tree\GoogleUpdateTaskMachineUA]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\schedule\taskcache\tree\HP Health Check]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\schedule\taskcache\tree\InternetServiceOffers]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\schedule\taskcache\tree\Microsoft]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\schedule\taskcache\tree\User_Feed_Synchronization-{1882CBDF-D05D-4D56-BED8-B2AA0FEB14B7}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\schedule\taskcache\tree\WPD]

¤¤¤¤¤¤¤¤¤¤ IFEO ¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\AcroRd32.exe]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\Arrakis3.exe]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\bdagent.exe]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\bdmconlite.exe]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\bdreinit.exe]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\bdsubwiz.exe]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\bdtkexec.exe]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\bdwizreg.exe]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\DllNXOptions]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\IEInstal.exe]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\LIVESRV.exe]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\noviceui.exe]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\seccenter.exe]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\uiscan.exe]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\upgrepl.exe]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\vsserv.exe]

¤¤¤¤¤¤¤¤¤¤ File Protection ¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Windows File Protection]
KnownDllList = nlhtml.dll

¤¤¤¤¤¤¤¤¤¤ Safemode ¤¤¤¤¤¤¤¤¤¤

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot : OK !!
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal : OK !!
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network : OK !!

¤¤¤¤¤¤¤¤¤¤ Atapi.sys ¤¤¤¤¤¤¤¤¤¤

C:\Windows\System32\drivers\atapi.sys :
[MD5.1f05b78ab91c9075565a9d8a4b880bc4]
[SHA256.737be9f9376dab0ccdfed93ea6d67f0c432367ea63cd772a453485be769af3bd]

C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7f3e4ed9\atapi.sys :
[MD5.9c0e70031905adbf94edb9ea14af943b]
[SHA256.88e4a250c22e919decedf1d59566265c473cdfac97440f25a6d05e6200223194]

C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys :
[MD5.1f05b78ab91c9075565a9d8a4b880bc4]
[SHA256.737be9f9376dab0ccdfed93ea6d67f0c432367ea63cd772a453485be769af3bd]

C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b7393fc6\atapi.sys :
[MD5.e26ddfe464b464daf1c739122978d1d6]
[SHA256.e21bf50a64beb5eafdc1d6ba1aa559a75fd31ffb4a85ceb074884c58903c9b68]

C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys :
[MD5.4f4fcb8b6ea06784fb6d475b7ec7300f]
[SHA256.6202d85c9a75e3f01f5f94f069c4cd8a2b9295a182301eae5940ec3bc2c1d896]

C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys :
[MD5.2d9c903dc76a66813d350a562de40ed9]
[SHA256.82609f01a08c6842e4c17c077bb641c1429c0e6657964b7f2d114035e1bdcbf3]

C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20847_none_dbb74a7b3d9afbc1\atapi.sys :
[MD5.e26ddfe464b464daf1c739122978d1d6]
[SHA256.e21bf50a64beb5eafdc1d6ba1aa559a75fd31ffb4a85ceb074884c58903c9b68]

C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys :
[MD5.2d9c903dc76a66813d350a562de40ed9]
[SHA256.82609f01a08c6842e4c17c077bb641c1429c0e6657964b7f2d114035e1bdcbf3]

C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.22193_none_dd6376773aedb5e4\atapi.sys :
[MD5.9c0e70031905adbf94edb9ea14af943b]
[SHA256.88e4a250c22e919decedf1d59566265c473cdfac97440f25a6d05e6200223194]

C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys :
[MD5.1f05b78ab91c9075565a9d8a4b880bc4]
[SHA256.737be9f9376dab0ccdfed93ea6d67f0c432367ea63cd772a453485be769af3bd]

¤¤¤¤¤ Reference

Win 2000_SP2 : ff953a8f08ca3f822127654375786bbe
Win 2000_SP4 : 8c718aa8c77041b3285d55a0ce980867
Win XP_32b : a64013e98426e1877cb653685c5c0009
Win XP_SP1_32b : 95b858761a00e1d4f81f79a0da019aca
Win XP_SP2_32b : CDFE4411A69C224BD1D11B2DA92DAC51
Win XP_SP3_32b : 9F3A2F5AA6875C72BF062C712CFA2674
Vista_32b : e03e8c99d15d0381e02743c36afc7c6f
Vista_SP1_32b : 2d9c903dc76a66813d350a562de40ed9
Vista_SP2_32b : 1F05B78AB91C9075565A9D8A4B880BC4
Vista_SP2_64b : 1898FAE8E07D97F2F6C2D5326C633FAC
Windows 7_32b : 338c86357871c167a96ab976519bf59e
Windows 7_64b : 02062C0B390B7729EDC9E69C680A6F3C

¤¤¤¤¤¤¤¤¤¤ Drive ¤¤¤¤¤¤¤¤¤¤

D'fragmenteur de disque Windows
Copyright (c) 2006 Microsoft Corp.

Rapport d'analyse pour le volume C:

Taille du volume = 288 Go
Espace libre = 246 Go
tendue d'espace libre la plus grande = 101 Go
Pourcentage de fragmentation des fichiers = 3 %

Remarqueÿ: sur les volumes NTFS, les fragments de fichiers de plus de 64ÿMo ne sont pas inclus dans les statistiques de fragmentation.

Il n'est pas n'cessaire de d'fragmenter ce volume.

¤¤¤¤¤¤¤¤¤¤ Mountpoints2 ¤¤¤¤¤¤¤¤¤¤


¤¤¤¤¤¤¤¤¤¤ Rogues Infections ¤¤¤¤¤¤¤¤¤¤


¤¤¤¤¤¤¤¤¤¤ Files/folders ¤¤¤¤¤¤¤¤¤¤

Present !! : C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log
Present !! : C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
Present !! : C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log
Present !! : C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
Present !! : C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log
Present !! : C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log
Present !! : C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
Present !! : C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
Present !! : C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log
Present !! : C:\ProgramData\HPWALog.txt
Present !! : C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log
Present !! : C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
Present !! : C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log
Present !! : C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
Present !! : C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log
Present !! : C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log
Present !! : C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
Present !! : C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
Present !! : C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log
Present !! : C:\ProgramData\HPWALog.txt
Present !! : C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log
Present !! : C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
Present !! : C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log
Present !! : C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
Present !! : C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log
Present !! : C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log
Present !! : C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
Present !! : C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
Present !! : C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log
Present !! : C:\ProgramData\HPWALog.txt
Present !! : C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log
Present !! : C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
Present !! : C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log
Present !! : C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
Present !! : C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log
Present !! : C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log
Present !! : C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
Present !! : C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
Present !! : C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log
Present !! : C:\ProgramData\HPWALog.txt
Present !! : C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log
Present !! : C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
Present !! : C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log
Present !! : C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
Present !! : C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log
Present !! : C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log
Present !! : C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
Present !! : C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
Present !! : C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log
Present !! : C:\Windows\System32\pc_drugs.dat
Present !! : C:\Windows\System32\pc_gambling.dat
Present !! : C:\Windows\System32\pc_games.dat
Present !! : C:\Windows\System32\pc_hate.dat
Present !! : C:\Windows\System32\pc_illegal.dat
Present !! : C:\Windows\System32\pc_im.dat
Present !! : C:\Windows\System32\pc_news.dat
Present !! : C:\Windows\System32\pc_onlinedating.dat
Present !! : C:\Windows\System32\pc_onlinepay.dat
Present !! : C:\Windows\System32\pc_onlineshop.dat
Present !! : C:\Windows\System32\pc_pornography.dat
Present !! : C:\Windows\System32\pc_regionaltlds.dat
Present !! : C:\Windows\System32\pc_searchengines.dat
Present !! : C:\Windows\System32\pc_socialnetworks.dat
Present !! : C:\Windows\System32\pc_tabloids.dat
Present !! : C:\Windows\System32\pc_video.dat
Present !! : C:\Windows\System32\pc_webproxy.dat
Present !! : C:\Windows\System32\rezumatenoi.dat
Present !! : C:\Users\Tiffany\AppData\Local\d3d9caps.dat
Present !! : C:\Users\Tiffany\AppData\Local\GDIPFONTCACHEV1.DAT
Present !! : C:\Users\Tiffany\Local Settings\Temp\E1A.tmp

¤¤¤¤¤¤¤¤¤¤ Keys :

Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File execution Options\Arrakis3.exe"
Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File execution Options\bdagent.exe"
Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File execution Options\bdreinit.exe"
Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File execution Options\bdsubwiz.exe"
Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File execution Options\bdwizreg.exe"
Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File execution Options\livesrv.exe"
Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File execution Options\seccenter.exe"
Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File execution Options\uiscan.exe"
Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File execution Options\upgrepl.exe"
Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File execution Options\vsserv.exe"

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

catchme 0.3.1398.3 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-08-31 22:18:24
Windows 6.0.6002 Service Pack 2 FAT NTAPI

scanning hidden processes ...

scanning hidden services ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys hpdskflt.sys hal.dll acpi.sys ataport.SYS PCIIDEX.SYS msahci.sys
kernel: MBR read successfully
user & kernel MBR OK

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
cval = 1 (0x1)

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

End of scan : 22:28:50,45




et voici le deuxieme avec clean

¤¤¤¤¤¤¤¤¤¤ Kill'em by g3n-h@ckm@n 2.1.0.2 ¤¤¤¤¤¤¤¤¤¤

User : Tiffany (Administrateurs)
Update on 30/08/2010 by g3n-h@ckm@n ::::: 15.00
Start at: 22:37:52 | 31/08/2010

Pentium(R) Dual-Core CPU T4200 @ 2.00GHz
Microsoft® Windows Vista(TM) Édition Familiale Premium (6.0.6002 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18943
Windows Firewall Status : Disabled

C:\ -> Disque fixe local | 287,5 Go (246,45 Go free) | NTFS
D:\ -> Disque fixe local | 10,59 Go (1,75 Go free) [RECOVERY] | NTFS
E:\ -> Disque CD-ROM


¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes ------- Memory(Ko)

C:\Windows\System32\smss.exe ----736 Ko
C:\Windows\system32\csrss.exe ----6272 Ko
C:\Windows\system32\wininit.exe ----4032 Ko
C:\Windows\system32\csrss.exe ----9372 Ko
C:\Windows\system32\services.exe ----7108 Ko
C:\Windows\system32\lsass.exe ----2316 Ko
C:\Windows\system32\lsm.exe ----4024 Ko
C:\Windows\system32\winlogon.exe ----5640 Ko
C:\Windows\system32\svchost.exe ----6932 Ko
C:\Windows\system32\svchost.exe ----8292 Ko
C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe ----7436 Ko
C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe ----20368 Ko
C:\Windows\system32\Ati2evxx.exe ----3904 Ko
C:\Windows\System32\svchost.exe ----14288 Ko
C:\Windows\System32\svchost.exe ----93008 Ko
C:\Windows\system32\svchost.exe ----82500 Ko
C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_52c73ccb\STacSV.exe ----6760 Ko
C:\Windows\system32\svchost.exe ----4928 Ko
C:\Windows\system32\SLsvc.exe ----11628 Ko
C:\Windows\system32\svchost.exe ----14600 Ko
C:\Windows\system32\Ati2evxx.exe ----6332 Ko
C:\Windows\system32\Hpservice.exe ----4644 Ko
C:\Windows\system32\svchost.exe ----16052 Ko
C:\Windows\system32\Dwm.exe ----53204 Ko
C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe ----1568 Ko
C:\Windows\Explorer.EXE ----43332 Ko
C:\Windows\system32\WLANExt.exe ----5188 Ko
C:\Windows\System32\spoolsv.exe ----10284 Ko
C:\Windows\system32\svchost.exe ----18120 Ko
C:\Windows\system32\taskeng.exe ----5760 Ko
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe ----7952 Ko
C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe ----10100 Ko
C:\Program Files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe ----12912 Ko
C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe ----20184 Ko
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe ----7700 Ko
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe ----3108 Ko
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe ----21100 Ko
C:\Program Files\IDT\WDM\sttray.exe ----13788 Ko
C:\Program Files\Hewlett-Packard\Media\TV\TVAgent.exe ----21648 Ko
C:\Windows\system32\taskeng.exe ----10968 Ko
C:\Program Files\Common Files\Java\Java Update\jusched.exe ----3788 Ko
C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe ----3380 Ko
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe ----1436 Ko
C:\Program Files\Windows Media Player\wmpnscfg.exe ----4896 Ko
C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_52c73ccb\aestsrv.exe ----1624 Ko
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe ----3768 Ko
C:\Program Files\Bonjour\mDNSResponder.exe ----4900 Ko
C:\Windows\system32\svchost.exe ----3372 Ko
C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE ----3072 Ko
C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE ----2372 Ko
C:\Program Files\Common Files\LightScribe\LSSrvc.exe ----3708 Ko
C:\Windows\system32\svchost.exe ----4596 Ko
C:\Program Files\SMINST\BLService.exe ----3504 Ko
C:\Program Files\CyberLink\Shared files\RichVideo.exe ----3696 Ko
C:\Windows\system32\svchost.exe ----6156 Ko
C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe ----14056 Ko
C:\Program Files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe ----6308 Ko
C:\Windows\System32\svchost.exe ----3980 Ko
C:\Windows\system32\SearchIndexer.exe ----17948 Ko
C:\Program Files\Windows Media Player\wmpnetwk.exe ----8416 Ko
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe ----5128 Ko
C:\Windows\system32\wbem\wmiprvse.exe ----13448 Ko
C:\Windows\system32\wbem\wmiprvse.exe ----5968 Ko
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe ----3628 Ko
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe ----2588 Ko
C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe ----5588 Ko
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe ----13196 Ko
c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe ----19700 Ko
C:\Program Files\Hewlett-Packard\HP Advisor\SSDK04.exe ----6820 Ko
C:\Windows\system32\conime.exe ----5724 Ko
C:\Windows\servicing\TrustedInstaller.exe ----12692 Ko
C:\Windows\system32\Macromed\Flash\FlashUtil10i_ActiveX.exe ----7880 Ko
C:\Windows\system32\SearchProtocolHost.exe ----11108 Ko
C:\Windows\system32\SearchFilterHost.exe ----8884 Ko
C:\Windows\system32\cmd.exe ----4780 Ko
C:\Program Files\List_Kill'em\ERUNT.EXE ----8112 Ko
C:\Program Files\List_Kill'em\pv.exe ----7660 Ko

¤¤¤¤¤¤¤¤¤¤ Files/folders :

Quarantined & Deleted !! : C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log
Quarantined & Deleted !! : C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
Quarantined & Deleted !! : C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log
Quarantined & Deleted !! : C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
Quarantined & Deleted !! : C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log
Quarantined & Deleted !! : C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log
Quarantined & Deleted !! : C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
Quarantined & Deleted !! : C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
Quarantined & Deleted !! : C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log
Quarantined & Deleted !! : C:\ProgramData\HPWALog.txt

Quarantined & Deleted !! : C:\Windows\System32\pc_drugs.dat
Quarantined & Deleted !! : C:\Windows\System32\pc_gambling.dat
Quarantined & Deleted !! : C:\Windows\System32\pc_games.dat
Quarantined & Deleted !! : C:\Windows\System32\pc_hate.dat
Quarantined & Deleted !! : C:\Windows\System32\pc_illegal.dat
Quarantined & Deleted !! : C:\Windows\System32\pc_im.dat
Quarantined & Deleted !! : C:\Windows\System32\pc_news.dat
Quarantined & Deleted !! : C:\Windows\System32\pc_onlinedating.dat
Quarantined & Deleted !! : C:\Windows\System32\pc_onlinepay.dat
Quarantined & Deleted !! : C:\Windows\System32\pc_onlineshop.dat
Quarantined & Deleted !! : C:\Windows\System32\pc_pornography.dat
Quarantined & Deleted !! : C:\Windows\System32\pc_regionaltlds.dat
Quarantined & Deleted !! : C:\Windows\System32\pc_searchengines.dat
Quarantined & Deleted !! : C:\Windows\System32\pc_socialnetworks.dat
Quarantined & Deleted !! : C:\Windows\System32\pc_tabloids.dat
Quarantined & Deleted !! : C:\Windows\System32\pc_video.dat
Quarantined & Deleted !! : C:\Windows\System32\pc_webproxy.dat
Quarantined & Deleted !! : C:\Windows\System32\rezumatenoi.dat
Quarantined & Deleted !! : C:\Users\Tiffany\AppData\Local\d3d9caps.dat
Quarantined & Deleted !! : C:\Users\Tiffany\AppData\Local\GDIPFONTCACHEV1.DAT
Quarantined & Deleted !! : C:\Users\Tiffany\Local Settings\Temp\E1A.tmp

¤¤¤¤¤¤¤¤¤¤ Hosts ¤¤¤¤¤¤¤¤¤¤

127.0.0.1 localhost

¤¤¤¤¤¤¤¤¤¤ Registry ¤¤¤¤¤¤¤¤¤¤


¤¤¤¤¤¤¤¤¤¤ Internet Explorer ¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Start Page = https://www.msn.com/fr-fr/?ocid=iehp
Local Page = C:\WINDOWS\system32\blank.htm
Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page = https://www.google.com/?gws_rd=ssl
Local Page = C:\WINDOWS\system32\blank.htm
Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

¤¤¤¤¤¤¤¤¤¤ Security Center ¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
cval = 1 ()
FirstRunDisabled = 1 ()
AntiVirusDisableNotify = 0 (0x0)
FirewallDisableNotify = 0 (0x0)
UpdatesDisableNotify = 0 (0x0)
AntiVirusOverride = 0 (0x0)
FirewallOverride = 0 (0x0)

¤¤¤¤¤¤¤¤¤¤ Services ¤¤¤¤¤¤¤¤¤¤

Ndisuio : Start = 3
EapHost : Start = 2
Wlansvc : Start = 2
SharedAccess : Start = 2
windefend : Start = 2
wuauserv : Start = 2
wscsvc : Start = 2

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
Disk Cleaned
anti-ver blaster : OK
Prefetch cleaned
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

FEATURE_BROWSER_EMULATION | svchost :
====================================


Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys hpdskflt.sys hal.dll acpi.sys ataport.SYS PCIIDEX.SYS msahci.sys
kernel: MBR read successfully
user & kernel MBR OK




¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ ( EOF ) ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

voila maintenant je me lances avec ccleaner en attendant une réponse
merci

ok comment va le pc !!!