Lenteur de pc

clovis19 Messages postés 9 Statut Membre -  
Vent d'ouest Messages postés 714 Statut Membre -
Bonjour,
Nouveau sur ce forum, je vous passe le bonjour à tous.
Avant de vous exposer mon problème, je préfère vous dire que j'ai cherché un peu partout sur le forum et tout ce que j'y ai trouvé n'a toujours pas arrangé mon problème.
Donc voilà. Lorsque je navigue sur internet, je trouve que mon pc rame énormément, à du mal à ouvrir les pages, parfois se bloque, ce qui devient vraiment pénible.
Donc j'ai essayé de "nettoyer" cet ordi avec ccleaner, puis les registres, ensuite j'ai ai enlevé les applications qui s'ouvrent au démarrage dans msconfig, puis j'ai trouvé sur votre forum comment supprimer certains fichiers qui ne servent à rien puis j'ai défragmenté mais malheureusement rien y fait. Je suppose une collection de virus....
Je m'en remet à vous et votre savoir pour m'aider.
Voici un rapport hijackthis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:47:30, on 01/06/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Program Files\InstallPedia\lnetworker.exe
C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\DATAMN~1.EXE
C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Consumer Input\dca-ua.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\SFR\Kit\9props.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Documents and Settings\HP_Administrator\Mes documents\Downloads\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=d490c8d0000000000000002264b5bac6&tlver=1.4.19.19&affID=17160
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Aide à la navigation SFR - {0F6E720A-1A6B-40E1-A294-1D4D19F156C8} - C:\Program Files\SFR\Kit\SFRNavErrorHelper.dll
O2 - BHO: PriceGong - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files\PriceGong\2.1.0\PriceGongIE.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll
O2 - BHO: (no name) - {465E08E7-F005-4389-980F-1D8764B3486C} - (no file)
O2 - BHO: UrlHelper Class - {474597C5-AB09-49d6-A4D5-2E8D7341384E} - C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\IEBHO.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: (no name) - {8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6} - (no file)
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: MediaBar - {ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} - C:\PROGRA~1\IMESHA~1\MediaBar\ToolBar\iMeshMediaBarDx.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll
O2 - BHO: DCA - {B49699FC-1665-4414-A1CB-C4A2A4A13EEC} - C:\Program Files\Consumer Input\dca-bho.dll
O2 - BHO: Menu Orange IE - {C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53} - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\MenuOrange.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: kikin Plugin - {E601996F-E400-41CA-804B-CD6373A7EEE2} - C:\Program Files\kikin\ie_kikin.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: MediaBar - {ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} - C:\PROGRA~1\IMESHA~1\MediaBar\ToolBar\iMeshMediaBarDx.dll
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [IP Network] C:\Program Files\InstallPedia\lnetworker.exe
O4 - HKLM\..\Run: [DATAMNGR] C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\DATAMN~1.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Consumer Input Update] C:\Program Files\Consumer Input\dca-ua.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Connexion SFR 9props.exe] "C:\Program Files\SFR\Kit\9props.exe" /trayicon
O4 - HKCU\..\Run: [X'nBeep] C:\Program Files\X'nBeep 1.1\XnBeep.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O8 - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~1\MI1933~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
O8 - Extra context menu item: _ajouter cette page à vos favoris Orange - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\addfavorites_html\addfavorites.html
O8 - Extra context menu item: _envoyer le texte sélectionné par sms - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\sendsmsselectedtext_html\sendsmsselectedtext.html
O8 - Extra context menu item: _envoyer par sms - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\sendsms_html\sendsms.html
O8 - Extra context menu item: _envoyer un mail - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\sendmail_html\sendmail.html
O8 - Extra context menu item: _orange.fr - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\orange_html\orange.html
O8 - Extra context menu item: _rechercher le texte sélectionné - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\selectedsearch_html\selectedsearch.html
O8 - Extra context menu item: _traduire la page - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\translate_html\translate.html
O8 - Extra context menu item: _traduire le texte sélectionné - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\translateSelectedText_html\translateSelectedText.html
O9 - Extra button: (no name) - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - C:\Program Files\kikin\ie_kikin.dll
O9 - Extra 'Tools' menuitem: My kikin - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - C:\Program Files\kikin\ie_kikin.dll
O9 - Extra button: Afficher ou masquer l'HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: https://applications-et-logiciels.orange.fr/
O15 - Trusted Zone: https://www.orange.fr/portail
O16 - DPF: {0972B098-DEE9-4279-AC7E-4BAAA029102D} (PhotoboxPhotowaysUploader5 Control) - http://assets.photobox.com/assets/aurigma/ImageUploader5.cab?20090806143003
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-4/ZwinkyInitialSetup1.0.1.1.cab
O16 - DPF: {3A226D85-574D-4272-B73C-DBCAECF709B3} (TNSClickerb.Clicker) - http://www.consoclicker.com/TNSClickrb.CAB
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} - http://copainsdavant.linternaute.com/framework/lib/objimageuploader/html_include/5.1.1.0/ImageUploader5.cab
O16 - DPF: {6EBC6744-5383-4213-AD5E-66434ECA1812} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/nordnet/orange/so-4.1/resources/fslauncher.cab
O16 - DPF: {70A5EBDC-3EA6-464A-9FF7-084BC150C417} (TNSClickera.Clicker) - http://www.consoclicker.com/TNSClickra.CAB
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O20 - AppInit_DLLs: C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\datamngr.dll C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\IEBHO.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - Unknown owner - C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: service de mise a jour pour I.P services (I.P services) - Unknown owner - C:\Program Files\InstallPedia\service.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Norton Internet Security - Unknown owner - C:\Program Files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe (file missing)
O23 - Service: Orange update Core Service - Unknown owner - C:\Program Files\Orange\OrangeUpdate\Service\OUCore.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Sony Ericsson PCCompanion - Avanquest Software - C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe

--
End of file - 13471 bytes

Merci pour votre aide

9 réponses

  1. pierre-13300
     
    Acheter du RAM est une bonne solution .
    0
  2. roberto-3 Messages postés 99 Statut Membre 2
     
    bonjour

    commence à désinstaller Babylon

    ensuite il faut la version hijackthis V2.0.4
    0
  3. Vent d'ouest Messages postés 714 Statut Membre 41
     
    Salut,

    * Télécharge de AD-Remover sur ton Bureau. (Merci à C_XX)
    http://www.teamxscript.org/adremoverTelechargement.html

    /!\ Déconnecte-toi d'internet et ferme toutes applications en cours /!\

    Désactive provisoirement et seulement le temps de l'utilisation de ADremover, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.

    - Double-clique sur l'icône Ad-remover située sur ton Bureau.
    - Sur la page, clique sur le bouton « NETTOYER »
    - Confirme lancement du scan
    - Laisse travailler l'outil.
    - Poste le rapport qui apparaît à la fin.

    (Le rapport est sauvegardé aussi sous C:\Ad-report(Scan/clean).Txt)

    Ensuite:

    Télécharge MBAM et installe le selon l'emplacement par défaut
    http://www.malwarebytes.org/mbam.php
    * Effectue la mise à jour et lance Malwarebytes' Anti-Malware
    * Clique dans l'onglet du haut "Recherche"
    * Coche l'option "Exécuter un examen rapide" puis sur le bouton "Rechercher"
    * Choisis de scanner tous tes disques durs, puis clique sur 'Lancer l'examen"

    A la fin de l'analyse, si MBAM n'a rien trouvé :

    * Clique sur OK, le rapport s'ouvre spontanément

    Si des menaces ont été détectées :

    * Clique sur OK puis "Afficher les résultats"
    * Choisis l'option "Supprimer la sélection"
    * Si MBAM demande le redémarrage de Windows : Clique sur "Oui"
    * Une fois le PC redémarré, le rapport se trouve dans l'onglet "Rapports/Logs"
    * Sinon le rapport s'ouvre automatiquement après la suppression

    Quelque soit le résultat, copie/colle le rapport dans le prochain message

    ....
    0
    1. clovis19 Messages postés 9 Statut Membre
       
      Ok merci, je fais tout ça et au prochain message je donne les rapports
      0
    2. clovis19 Messages postés 9 Statut Membre
       
      Alors j'ai fait ce que vous m'avez tous demandé.
      J'ai désinstallé babylon comme demandé par roberto-3
      Puis j'ai fait les 2 nettoyages demandé par Vent d'ouest.
      Voici le rapport de AD-Remover:

      ======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

      Mis à jour par TeamXscript le 12/04/11
      Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
      Site web: http://www.teamxscript.org

      C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 21:05:46 le 01/06/2011, Mode normal

      Microsoft Windows XP Édition familiale Service Pack 3 (X86)
      HP_Administrator@COUTE ( )

      ============== ACTION(S) ==============

      Service: "I.P services" Stoppé et supprimé

      Fichier supprimé: C:\WINDOWS\Downloaded Program Files\F3initialsetup1.0.1.1.inf
      Dossier supprimé: C:\Program Files\InstallPedia
      Fichier supprimé: C:\WINDOWS\system32\Utils.dll
      Dossier supprimé: C:\Documents and Settings\HP_Administrator\Application Data\FunWebProducts
      Dossier supprimé: C:\Program Files\FunWebProducts
      Dossier supprimé: C:\Program Files\MyWebSearch
      Dossier supprimé: C:\Documents and Settings\HP_Administrator\Application Data\PriceGong
      Dossier supprimé: C:\Program Files\PriceGong
      Dossier supprimé: C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\networker
      Dossier supprimé: C:\Documents and Settings\HP_Administrator\Application Data\OfferBox
      Dossier supprimé: C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\iMesh
      Dossier supprimé: C:\Program Files\iMesh Applications
      Dossier supprimé: C:\Documents and Settings\HP_Administrator\Application Data\iMeshMediabarTb

      (!) -- Fichiers temporaires supprimés.


      Clé supprimée: HKLM\Software\Classes\CLSID\{1631550F-191D-4826-B069-D9439253D926}
      Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1631550F-191D-4826-B069-D9439253D926}
      Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1631550F-191D-4826-B069-D9439253D926}
      Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1631550F-191D-4826-B069-D9439253D926}
      Clé supprimée: HKLM\Software\Classes\AppID\{835315FC-1BF6-4CA9-80CD-F6C158D40692}
      Clé supprimée: HKLM\Software\Classes\CLSID\{474597C5-AB09-49d6-A4D5-2E8D7341384E}
      Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{474597C5-AB09-49d6-A4D5-2E8D7341384E}
      Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{474597C5-AB09-49d6-A4D5-2E8D7341384E}
      Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{474597C5-AB09-49d6-A4D5-2E8D7341384E}
      Clé supprimée: HKLM\Software\Classes\CLSID\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}
      Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}
      Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}
      Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}
      Clé supprimée: HKLM\Software\Classes\CLSID\{D2A2595C-4FE4-4315-AA9B-19DBD6271B71}
      Clé supprimée: HKLM\Software\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}
      Clé supprimée: HKLM\Software\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
      Clé supprimée: HKLM\Software\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}
      Clé supprimée: HKLM\Software\Classes\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE}
      Clé supprimée: HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
      Clé supprimée: HKLM\Software\Classes\TypeLib\{8B3372D0-09F0-41A5-8D9B-134E148672FB}
      Clé supprimée: HKLM\Software\Classes\TypeLib\{A147AA03-820F-4A0F-9F34-D6CB4004A2F9}
      Clé supprimée: HKLM\Software\Classes\TypeLib\{AA2E16F2-387A-415F-BA95-B89BAF3AF109}
      Clé supprimée: HKLM\Software\Classes\TypeLib\{D518921A-4A03-425E-9873-B9A71756821E}
      Clé supprimée: HKLM\Software\Classes\iMeshIEHelper.DNSGuard
      Clé supprimée: HKLM\Software\Classes\iMeshIEHelper.DNSGuard.1
      Clé supprimée: HKLM\Software\Classes\PriceFactorIE.PriceGongBHO
      Clé supprimée: HKLM\Software\Classes\PriceFactorIE.PriceGongBHO.1
      Clé supprimée: HKLM\Software\Classes\PriceGongIE.PriceGongCtrl
      Clé supprimée: HKLM\Software\Classes\PriceGongIE.PriceGongCtrl.1
      Clé supprimée: HKLM\Software\Classes\AppID\PriceGongIE.DLL
      Clé supprimée: HKLM\Software\DataMngr
      Clé supprimée: HKLM\Software\FocusInteractive
      Clé supprimée: HKLM\Software\Fun Web Products
      Clé supprimée: HKLM\Software\FunWebProducts
      Clé supprimée: HKLM\Software\InstallPedia
      Clé supprimée: HKLM\Software\MyWebSearch
      Clé supprimée: HKLM\Software\OfferBox
      Clé supprimée: HKCU\Software\DataMngr
      Clé supprimée: HKCU\Software\Fun Web Products
      Clé supprimée: HKCU\Software\FunWebProducts
      Clé supprimée: HKCU\Software\iMesh
      Clé supprimée: HKCU\Software\MyWebSearch
      Clé supprimée: HKCU\Software\OfferBox
      Clé supprimée: HKCU\Software\PriceGong
      Clé supprimée: HKCU\Software\Winsudate
      Clé supprimée: HKU\.DEFAULT\Software\FBSearch
      Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}
      Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59}
      Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}
      Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59}
      Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{271DCEE5-75F4-4120-AB9A-2397631FE099}
      Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28D35620-51D9-11DE-9D13-2DB156D89593}
      Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3441C289-2158-4b32-9E5B-DB30573329AA}
      Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481}
      Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8D3A6FAF-2E3E-478a-9051-A895149DD1BE}
      Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907}
      Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C6FB7C8A-5532-4d47-85D2-3AD59F0C8A7F}
      Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C87A99E0-0979-4f66-B035-4B9134AD879E}
      Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48dd-9B6D-7A13A3E42127}
      Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40fd-8DAE-FF14757F60C7}
      Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA}
      Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F8F572AF-2E67-405f-BBD6-40B87307BE77}
      Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\pricegong
      Clé supprimée: HKLM\Software\Classes\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239}
      Clé supprimée: HKLM\Software\Classes\CLSID\{A4730EBE-43A6-443e-9776-36915D323AD3}
      Clé supprimée: HKLM\Software\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom
      Clé supprimée: HKLM\Software\Microsoft\Code Store Database\Distribution Units\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
      Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45DD-9B68-D6A12C30E5D7}
      Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll
      Clé supprimée: HKLM\Software\Microsoft\Multimedia\WMPlayer\Schemes\f3pss

      Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|DataMngr
      Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|IP Network
      Valeur supprimée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}


      ============== SCAN ADDITIONNEL ==============

      **** Google Chrome Version [11.0.696.65] ****

      Extension\dbknnmebcajacipdbplichlbfjbjamlf (c:\Facemoi\facemoi_chrome.crx) (?)
      Extension\dhkplhfnhceodhffomolpfigojocbpcb (C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbar.crx) (?)
      Extension\hfdldabepacecakhpnhldhpejjfaaidf (c:\Facemoi\facemoi_chrome.crx) (?)
      Extension\icmlaeflemplmjndnaapfdbbnpncnbda (C:\Program Files\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChrome.crx) (?)

      -- C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default --
      Preferences - default_search_provider: "Google" (Activé: true) (hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7GZAZ_fr)
      Plugin - Chrome NaCl (Activé: false) (C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\11.0.696.65\ppGoogleNaClPluginChrome.dll)
      Plugin - Media Go Detector (Activé: true) (C:\Program Files\Sony\Media Go\npmediago.dll)
      Plugin - Unity Player (Activé: true) (C:\Program Files\Unity\WebPlayer\loader\npUnity3D32.dll)
      Plugin - "Java" (Activé: true)
      Plugin - "Silverlight" (Activé: true)
      Plugin - "Chrome NaCl" (Activé: false)
      Plugin - "Babylon Chrome Plugin" (Activé: true)
      Plugin - "Media Go Detector" (Activé: true)
      Plugin - "Unity Player" (Activé: true)

      ========================================

      **** Internet Explorer Version [8.0.6001.18702] ****

      HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
      HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
      HKCU_Main|Start Page - hxxp://fr.msn.com/
      HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
      HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
      HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      HKLM_Main|Start Page - hxxp://fr.msn.com/
      HKCU_URLSearchHooks|{08C06D61-F1F3-4799-86F8-BE1A89362C85} (x)
      HKCU_SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} - "?" (?)
      HKCU_SearchScopes\{814C76CB-2623-43F4-AAD0-58A0E5190A20} - "Orange" (hxxp://www.orange.fr/bin/frame1px.cgi?u=hxxp%3A//r.voila.fr/se%3Frdata%3D{search...)
      HKCU_SearchScopes\{AC129BF9-68BF-4bc4-A1DC-ECB62712FF99} - "kikin Search" (hxxp://search.kikin.com/search/?q={searchTerms})
      HKLM_Toolbar|{98889811-442D-49dd-99D7-DC866BE87DBC} (C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll)
      HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll)
      HKCU_ElevationPolicy\{8F8BAD52-D4D2-4669-9E8E-A7AAE8393056} - C:\Program Files\kikin\KikinBroker.exe (kikin)
      HKCU_ElevationPolicy\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D} - C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Update\1.3.21.53\GoogleUpdateOnDemand.exe (x)
      HKCU_ElevationPolicy\{C442AC41-9200-4770-8CC0-7CDB4F245C55} - C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Update\GoogleUpdate.exe (x)
      HKLM_ElevationPolicy\${ELV_GUID} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe (Babylon Ltd.)
      HKLM_ElevationPolicy\{B2321D2F-1154-4d97-AD3E-2FE0BAE2897B} - C:\Program Files\SFR\Kit\9launch.exe (SFR)
      HKLM_Extensions\{0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - "?" (?)
      HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
      BHO\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8} - "Objet d'aide à la navigation SFR" (C:\Program Files\SFR\Kit\SFRNavErrorHelper.dll)
      BHO\{2EECD738-5844-4a99-B4B6-146BF802613B} - "CescrtHlpr Object" (C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll)
      BHO\{465E08E7-F005-4389-980F-1D8764B3486C} (?)
      BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)
      BHO\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - "Search Helper" (C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll)
      BHO\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6} (?)
      BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll)
      BHO\{B49699FC-1665-4414-A1CB-C4A2A4A13EEC} - "DCA BHO" (C:\Program Files\Consumer Input\dca-bho.dll)
      BHO\{C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53} - "OrangeMenu Object" (C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\MenuOrange.dll)
      BHO\{E601996F-E400-41CA-804B-CD6373A7EEE2} - "kikin Plugin" (C:\Program Files\kikin\ie_kikin.dll)

      ========================================

      C:\Program Files\Ad-Remover\Quarantine: 574 Fichier(s)
      C:\Program Files\Ad-Remover\Backup: 13 Fichier(s)

      C:\Ad-Report-CLEAN[1].txt - 01/06/2011 21:06:00 (12645 Octet(s))

      Fin à: 21:07:31, 01/06/2011

      ============== E.O.F ==============
      0
    3. clovis19 Messages postés 9 Statut Membre
       
      Voici le rapport de MBAM:


      Malwarebytes' Anti-Malware 1.51.0.1200
      www.malwarebytes.org

      Version de la base de données: 6748

      Windows 5.1.2600 Service Pack 3
      Internet Explorer 8.0.6001.18702

      01/06/2011 22:09:05
      mbam-log-2011-06-01 (22-09-05).txt

      Type d'examen: Examen rapide
      Elément(s) analysé(s): 150057
      Temps écoulé: 3 minute(s), 27 seconde(s)

      Processus mémoire infecté(s): 0
      Module(s) mémoire infecté(s): 0
      Clé(s) du Registre infectée(s): 10
      Valeur(s) du Registre infectée(s): 1
      Elément(s) de données du Registre infecté(s): 1
      Dossier(s) infecté(s): 1
      Fichier(s) infecté(s): 3

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Clé(s) du Registre infectée(s):
      HKEY_CLASSES_ROOT\AppID\{90A52F08-64AC-4DC6-9D7D-4516670275D3} (Trojan.Downloader) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\CLSID\{C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53} (Trojan.Downloader) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\TypeLib\{90A52F08-64AC-4DC6-9D7D-4516670275D3} (Trojan.Downloader) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\Interface\{6C51F7E9-8542-4F25-A30F-2060157752E1} (Trojan.Downloader) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\Orange.MenuIE.1 (Trojan.Downloader) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\Orange.MenuIE (Trojan.Downloader) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53} (Trojan.Downloader) -> Quarantined and deleted successfully.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53} (Trojan.Downloader) -> Quarantined and deleted successfully.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53} (Trojan.Downloader) -> Quarantined and deleted successfully.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> Quarantined and deleted successfully.

      Valeur(s) du Registre infectée(s):
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell (Worm.AutoRun) -> Value: Shell -> Delete on reboot.

      Elément(s) de données du Registre infecté(s):
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell (Hijack.Shell) -> Bad: (C:\RECYCLER\S-1-5-21-2027305432-4603279265-559897194-4583\recycle.exe,explorer.exe) Good: (Explorer.exe) -> Quarantined and deleted successfully.

      Dossier(s) infecté(s):
      c:\RECYCLER\s-1-5-21-0324232222-888888379-781133308-1995 (Trojan.Agent.M) -> Quarantined and deleted successfully.

      Fichier(s) infecté(s):
      c:\documents and settings\hp_administrator\application data\Orange\orangeinside\menuorange.dll (Trojan.Downloader) -> Quarantined and deleted successfully.
      c:\documents and settings\hp_administrator\mes documents\downloads\aviconvertersetup.exe (Adware.Agent) -> Quarantined and deleted successfully.
      c:\RECYCLER\s-1-5-21-0324232222-888888379-781133308-1995\Desktop.ini (Trojan.Agent.M) -> Quarantined and deleted successfully.

      J'ai fait la suppression de la sélection....
      0
    4. clovis19 Messages postés 9 Statut Membre
       
      Enfin pour finir je met un nouveau rapport hijack this:

      Logfile of Trend Micro HijackThis v2.0.4
      Scan saved at 22:20:19, on 01/06/2011
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v8.00 (8.00.6001.18702)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\RTHDCPL.EXE
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\hkcmd.exe
      C:\WINDOWS\system32\igfxpers.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
      C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Consumer Input\dca-ua.exe
      C:\Program Files\Windows Media Player\WMPNSCFG.exe
      C:\Program Files\X'nBeep 1.1\XnBeep.exe
      C:\WINDOWS\system32\igfxsrvc.exe
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\WINDOWS\system32\NOTEPAD.EXE
      C:\WINDOWS\system32\NOTEPAD.EXE
      C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
      C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
      C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
      C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
      C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
      C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
      C:\WINDOWS\system32\msiexec.exe
      C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
      O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
      O2 - BHO: Aide à la navigation SFR - {0F6E720A-1A6B-40E1-A294-1D4D19F156C8} - C:\Program Files\SFR\Kit\SFRNavErrorHelper.dll
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: (no name) - {465E08E7-F005-4389-980F-1D8764B3486C} - (no file)
      O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
      O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
      O2 - BHO: (no name) - {8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6} - (no file)
      O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll
      O2 - BHO: DCA - {B49699FC-1665-4414-A1CB-C4A2A4A13EEC} - C:\Program Files\Consumer Input\dca-bho.dll
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: kikin Plugin - {E601996F-E400-41CA-804B-CD6373A7EEE2} - C:\Program Files\kikin\ie_kikin.dll
      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
      O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
      O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
      O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
      O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
      O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
      O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
      O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
      O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
      O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
      O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe"
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [Consumer Input Update] C:\Program Files\Consumer Input\dca-ua.exe
      O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
      O4 - HKCU\..\Run: [Connexion SFR 9props.exe] "C:\Program Files\SFR\Kit\9props.exe" /trayicon
      O4 - HKCU\..\Run: [X'nBeep] C:\Program Files\X'nBeep 1.1\XnBeep.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
      O8 - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~1\MI1933~1\Office14\ONBttnIE.dll/105
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office14\EXCEL.EXE/3000
      O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
      O8 - Extra context menu item: _ajouter cette page à vos favoris Orange - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\addfavorites_html\addfavorites.html
      O8 - Extra context menu item: _envoyer le texte sélectionné par sms - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\sendsmsselectedtext_html\sendsmsselectedtext.html
      O8 - Extra context menu item: _envoyer par sms - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\sendsms_html\sendsms.html
      O8 - Extra context menu item: _envoyer un mail - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\sendmail_html\sendmail.html
      O8 - Extra context menu item: _orange.fr - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\orange_html\orange.html
      O8 - Extra context menu item: _rechercher le texte sélectionné - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\selectedsearch_html\selectedsearch.html
      O8 - Extra context menu item: _traduire la page - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\translate_html\translate.html
      O8 - Extra context menu item: _traduire le texte sélectionné - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\translateSelectedText_html\translateSelectedText.html
      O9 - Extra button: (no name) - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - C:\Program Files\kikin\ie_kikin.dll
      O9 - Extra 'Tools' menuitem: My kikin - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - C:\Program Files\kikin\ie_kikin.dll
      O9 - Extra button: Afficher ou masquer l'HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O15 - Trusted Zone: https://applications-et-logiciels.orange.fr/
      O15 - Trusted Zone: https://www.orange.fr/portail
      O16 - DPF: {0972B098-DEE9-4279-AC7E-4BAAA029102D} (PhotoboxPhotowaysUploader5 Control) - http://assets.photobox.com/assets/aurigma/ImageUploader5.cab?20090806143003
      O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
      O16 - DPF: {3A226D85-574D-4272-B73C-DBCAECF709B3} (TNSClickerb.Clicker) - http://www.consoclicker.com/TNSClickrb.CAB
      O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
      O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} - http://copainsdavant.linternaute.com/framework/lib/objimageuploader/html_include/5.1.1.0/ImageUploader5.cab
      O16 - DPF: {6EBC6744-5383-4213-AD5E-66434ECA1812} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/nordnet/orange/so-4.1/resources/fslauncher.cab
      O16 - DPF: {70A5EBDC-3EA6-464A-9FF7-084BC150C417} (TNSClickera.Clicker) - http://www.consoclicker.com/TNSClickra.CAB
      O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
      O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
      O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
      O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
      O23 - Service: ArcSoft Connect Daemon (ACDaemon) - Unknown owner - C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe (file missing)
      O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
      O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
      O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
      O23 - Service: Service Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe
      O23 - Service: Service Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe
      O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
      O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
      O23 - Service: Norton Internet Security - Unknown owner - C:\Program Files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe (file missing)
      O23 - Service: Orange update Core Service - Unknown owner - C:\Program Files\Orange\OrangeUpdate\Service\OUCore.exe
      O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
      O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
      O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
      O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      O23 - Service: Sony Ericsson PCCompanion - Avanquest Software - C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe
      O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
      O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
      O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
      O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe
      0
  4. Vent d'ouest Messages postés 714 Statut Membre 41
     
    Ok ,

    La suite demandée stp:

    Télécharge MBAM et installe le selon l'emplacement par défaut
    http://www.malwarebytes.org/mbam.php
    * Effectue la mise à jour et lance Malwarebytes' Anti-Malware
    * Clique dans l'onglet du haut "Recherche"
    * Coche l'option "Exécuter un examen rapide" puis sur le bouton "Rechercher"
    * Choisis de scanner tous tes disques durs, puis clique sur 'Lancer l'examen"

    A la fin de l'analyse, si MBAM n'a rien trouvé :

    * Clique sur OK, le rapport s'ouvre spontanément

    Si des menaces ont été détectées :

    * Clique sur OK puis "Afficher les résultats"
    * Choisis l'option "Supprimer la sélection"
    * Si MBAM demande le redémarrage de Windows : Clique sur "Oui"
    * Une fois le PC redémarré, le rapport se trouve dans l'onglet "Rapports/Logs"
    * Sinon le rapport s'ouvre automatiquement après la suppression

    Quelque soit le résultat, copie/colle le rapport dans le prochain message
    0
    1. clovis19 Messages postés 9 Statut Membre
       
      Voilà le dernier rapport:

      Malwarebytes' Anti-Malware 1.51.0.1200
      www.malwarebytes.org

      Version de la base de données: 6748

      Windows 5.1.2600 Service Pack 3
      Internet Explorer 8.0.6001.18702

      01/06/2011 22:52:24
      mbam-log-2011-06-01 (22-52-24).txt

      Type d'examen: Examen rapide
      Elément(s) analysé(s): 149417
      Temps écoulé: 3 minute(s), 9 seconde(s)

      Processus mémoire infecté(s): 0
      Module(s) mémoire infecté(s): 0
      Clé(s) du Registre infectée(s): 0
      Valeur(s) du Registre infectée(s): 0
      Elément(s) de données du Registre infecté(s): 0
      Dossier(s) infecté(s): 0
      Fichier(s) infecté(s): 0

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Clé(s) du Registre infectée(s):
      (Aucun élément nuisible détecté)

      Valeur(s) du Registre infectée(s):
      (Aucun élément nuisible détecté)

      Elément(s) de données du Registre infecté(s):
      (Aucun élément nuisible détecté)

      Dossier(s) infecté(s):
      (Aucun élément nuisible détecté)

      Fichier(s) infecté(s):
      (Aucun élément nuisible détecté)
      0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Vent d'ouest Messages postés 714 Statut Membre 41
     
    Un nouveau ZHPdiag pour vérif stp.....
    0
  7. clovis19 Messages postés 9 Statut Membre
     
    Qu'est-ce qu'un ZHPdiag
    0
  8. clovis19 Messages postés 9 Statut Membre
     
    Ok j'ai trouvé, je télécharge et je poste
    0
  9. clovis19 Messages postés 9 Statut Membre
     
    Voici le rapport:

    Rapport de ZHPDiag v1.27.218 par Nicolas Coolman, Update du 31/05/2011
    Run by HP_Administrator at 01/06/2011 23:20:46
    Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html

    ---\\ Web Browser
    MSIE: Internet Explorer v8.0.6001.18702
    GCIE: Google Chrome v11.0.696.65 (Defaut)

    ---\\ System Information
    Windows XP Home Edition Service Pack 3 (Build 2600)
    Processor: x86 Family 6 Model 28 Stepping 2, GenuineIntel
    Operating System: 32 Bits
    Boot mode: Normal (Normal boot)
    Total RAM: 1015 MB (55% free)
    System Restore: Activé (Enable)
    System drive C: has 38 GB (27%) free of 139 GB

    ---\\ Logged in mode
    Computer Name: COUTE
    User Name: HP_Administrator
    All Users Names: SUPPORT_fddfa904, SUPPORT_388945a0, HP_Administrator, HelpAssistant, Administrateur,
    Unselected Option: O45,O61,O62,O65,O66,O82
    Logged in as Administrator

    ---\\ Environnement Variables
    %AppData%=C:\Documents and Settings\HP_Administrator\Application Data
    %LocalAppData%=C:\Documents and Settings\HP_Administrator\Local Settings\Application Data
    %StartMenu%=C:\Documents and Settings\HP_Administrator\Menu Démarrer

    ---\\ DOS/Devices
    C:\ Hard drive, Flash drive, Thumb drive (Free 38 Go of 139 Go)
    D:\ Hard drive, Flash drive, Thumb drive (Free 6 Go of 10 Go)
    E:\ CD-ROM drive (Not Inserted)
    F:\ CD-ROM drive (Not Inserted)
    G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

    ---\\ Security Center & Tools Informations
    [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

    ---\\ Recherche particulière de fichiers génériques
    [MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 13:00:00.) -- C:\WINDOWS\Explorer.exe [1037824]
    [MD5.77C66BD5CED4E555919A5FB713322CDD] - (.Microsoft Corporation - Internet Extensions for Win32.) (.23/02/2011 00:05:48.) -- C:\WINDOWS\system32\wininet.dll [916480]
    [MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 13:00:00.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
    [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 11:40:32.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512]
    [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.14/04/2008 13:00:00.) -- C:\WINDOWS\system32\drivers\ntfs.sys [574976]

    ---\\ Processus lancés
    [MD5.7DE3EE7DBEE14C1F8375CB82466C9321] - (.AVAST Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [42184]
    [MD5.B762C41370476B1D8BE37C3BFC7B8021] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE [17021440]
    [MD5.4C53C44E7C20E65445037954DC3A6BA4] - (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe [166424]
    [MD5.D8F3B455D3FA4B40C9BF544F55647C19] - (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe [137752]
    [MD5.FF473648E7B1B37C7F3249A6549FAC72] - (.Hewlett-Packard - HpqSRmon.) -- C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [150016]
    [MD5.4C6898F15701AE7C41775C14E423FE25] - (.AVAST Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [3459712]
    [MD5.2E5212A0BFB98FE0167C92C76C87AFE3] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [249064]
    [MD5.C8EFC20CAD7F2F85E4A68829224678A6] - (.Compete, Inc. - Compete DCA Update Agent.) -- C:\Program Files\Consumer Input\dca-ua.exe [175800]
    [MD5.F56197D5CBDCC6A87C242DC8B8EEEE34] - (.Intel Corporation - igfxsrvc Module.) -- C:\WINDOWS\system32\igfxsrvc.exe [256536]
    [MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408]
    [MD5.5E06A9D23727DAF96FAA796F1135FDCD] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376]
    [MD5.5DD44F27BBC1EF834145F109F154ECC7] - (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe [1010232]
    [MD5.FE30E4A6C01FF9B821725DE37DAF3B98] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [657920]

    ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
    M3 - MFPP: Plugins - [HP_Administrator] -- C:\Program Files\Mozilla FireFox\searchplugins\babylon.xml
    P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
    P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.9.620.) -- C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
    P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
    P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_24 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
    P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60310.0.) -- c:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll
    P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
    P2 - FPN: [HKLM] [@SonyCreativeSoftware.com/Media Go,version=1.0] - (.Sony Media Software and Services Inc - 1.6.) -- C:\Program Files\Sony\Media Go\npmediago.dll
    P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll
    P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll
    P2 - FPN: [HKLM] [@unity3d.com/UnityPlayer] - (.Unity Technologies ApS - Unity Player 2.5.1f5.) -- C:\Program Files\Unity\WebPlayer\loader\npUnity3D32.dll
    P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Pas de propriétaire - Pas de description.) -- C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Update\1.3.21.53\npGoogleUpdate3.dll (.not file.)
    P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Pas de propriétaire - Pas de description.) -- C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Update\1.3.21.53\npGoogleUpdate3.dll (.not file.)

    ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
    G1 - GCS: Preference [User Data\Default] https://www.google.com/?gws_rd=ssl
    G2 - GCE: Preference [User Data\Default] [dhkplhfnhceodhffomolpfigojocbpcb] Babylon Chrome OCR v.1.0 (Activé)

    ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
    R0 - HKUS\S-1-5-21-322340657-3154053047-287275718-1006\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
    R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} Clé orpheline
    R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19048 (longhorn_ie8_gdr.110221-1700)) -- C:\WINDOWS\system32\ieframe.dll

    ---\\ Internet Explorer, Proxy Management (R5)
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

    ---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
    F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,
    F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

    ---\\ Browser Helper Objects de navigateur (O2)
    O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
    O2 - BHO: Aide à la navigation SFR - {0F6E720A-1A6B-40E1-A294-1D4D19F156C8} . (.SFR - Aide à la navigation SFR.) -- C:\Program Files\SFR\Kit\SFRNavErrorHelper.dll
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: (no name) - {465E08E7-F005-4389-980F-1D8764B3486C} Clé orpheline
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
    O2 - BHO: (no name) - {8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6} Clé orpheline
    O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll
    O2 - BHO: DCA - {B49699FC-1665-4414-A1CB-C4A2A4A13EEC} . (.Compete, Inc. - Compete DCA Browser Helper Object.) -- C:\Program Files\Consumer Input\dca-bho.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: kikin Plugin - {E601996F-E400-41CA-804B-CD6373A7EEE2} . (.kikin - kikin plugin.) -- C:\Program Files\kikin\ie_kikin.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

    ---\\ Internet Explorer Toolbars (O3)
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
    O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll

    ---\\ ---\\ Applications démarrées par registre & par dossier (O4)
    O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.exe
    O4 - HKLM\..\Run: [Alcmtr] . (.Realtek Semiconductor Corp. - Realtek Azalia Audio - Event Monitor.) -- C:\WINDOWS\ALCMTR.exe
    O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
    O4 - HKLM\..\Run: [UpdateP2GoShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe
    O4 - HKLM\..\Run: [hpqSRMon] . (.Hewlett-Packard - HpqSRmon.) -- C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
    O4 - HKLM\..\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe
    O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
    O4 - HKLM\..\Run: [MSConfig] . (.Microsoft Corporation - Utilitaire de configuration système.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe
    O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Consumer Input Update] . (.Compete, Inc. - Compete DCA Update Agent.) -- C:\Program Files\Consumer Input\dca-ua.exe
    O4 - HKCU\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKCU\..\Run: [Connexion SFR 9props.exe] . (.SFR - Propriétés de la connexion SFR.) -- C:\Program Files\SFR\Kit\9props.exe
    O4 - HKCU\..\Run: [X'nBeep] . (.© Une création http://GraphysWeb.com - X'nBeep, réveil digital pour Windows XP.) -- C:\Program Files\X'nBeep 1.1\XnBeep.exe
    O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKUS\S-1-5-21-322340657-3154053047-287275718-1006\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
    O4 - HKUS\S-1-5-21-322340657-3154053047-287275718-1006\..\Run: [Consumer Input Update] . (.Compete, Inc. - Compete DCA Update Agent.) -- C:\Program Files\Consumer Input\dca-ua.exe
    O4 - HKUS\S-1-5-21-322340657-3154053047-287275718-1006\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKUS\S-1-5-21-322340657-3154053047-287275718-1006\..\Run: [Connexion SFR 9props.exe] . (.SFR - Propriétés de la connexion SFR.) -- C:\Program Files\SFR\Kit\9props.exe
    O4 - HKUS\S-1-5-21-322340657-3154053047-287275718-1006\..\Run: [X'nBeep] . (.© Une création http://GraphysWeb.com - X'nBeep, réveil digital pour Windows XP.) -- C:\Program Files\X'nBeep 1.1\XnBeep.exe
    O4 - HKUS\S-1-5-21-322340657-3154053047-287275718-1006\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

    ---\\ ---\\ Autres liens utilisateurs (O4)
    O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader X.lnk . (...) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AA0000000001}\SC_Reader.ico
    O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Installation du Contrôle Parental.lnk . (.InstallShield Software Corporation.) -- C:\Program Files\Securitoo\Contrôle Parental\Controle_parental.exe
    O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Power2Go.lnk . (.CyberLink Corp..) -- C:\Program Files\Cyberlink\Power2Go\Power2Go.exe
    O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Sécurité et ergonomie du poste de travail.lnk . (...) -- C:\hp\documentation\Safety & Comfort Guide.pdf
    O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Messenger\msmsgs.exe
    O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe
    O4 - Global Startup: C:\Documents And Settings\HP_Administrator\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
    O4 - Global Startup: C:\Documents And Settings\HP_Administrator\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
    O4 - Global Startup: C:\Documents And Settings\HP_Administrator\Menu Démarrer\Programmes\Power2Go.lnk . (.CyberLink Corp..) -- C:\Program Files\Cyberlink\Power2Go\Power2Go.exe
    O4 - Global Startup: C:\Documents And Settings\HP_Administrator\Menu Démarrer\Programmes\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
    O4 - Global Startup: C:\Documents And Settings\HP_Administrator\Menu Démarrer\Programmes\WinRAR.lnk . (...) -- C:\Program Files\WinRAR\WinRAR.exe

    ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
    O8 - Extra context menu item: &Envoyer à OneNote - (.not file.) - C:\PROGRA~1\MI1933~1\Office14\ONBttnIE.dll
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - (.not file.) - C:\PROGRA~1\MI1933~1\Office14\EXCEL.exe
    O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll
    O8 - Extra context menu item: _ajouter cette page à vos favoris Orange - (.not file.) - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\addfavorites_html\addfavorites.html
    O8 - Extra context menu item: _envoyer le texte sélectionné par sms - (.not file.) - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\sendsmsselectedtext_html\sendsmsselectedtext.html
    O8 - Extra context menu item: _envoyer par sms - (.not file.) - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\sendsms_html\sendsms.html
    O8 - Extra context menu item: _envoyer un mail - (.not file.) - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\sendmail_html\sendmail.html
    O8 - Extra context menu item: _orange.fr - (.not file.) - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\orange_html\orange.html
    O8 - Extra context menu item: _rechercher le texte sélectionné - (.not file.) - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\selectedsearch_html\selectedsearch.html
    O8 - Extra context menu item: _traduire la page - (.not file.) - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\translate_html\translate.html
    O8 - Extra context menu item: _traduire le texte sélectionné - (.not file.) - C:\Documents and Settings\HP_Administrator\Application Data\Orange\OrangeInside\src\translateSelectedText_html\translateSelectedText.html

    ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
    O9 - Extra button: My kikin - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} -- Clé orpheline
    O9 - Extra button: My kikin - {DDE87865-83C5-48c4-8357-2F5B1AA84522} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet Explorer.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
    O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet Explorer.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
    O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe

    ---\\ Winsock hijacker (Layered Service Provider) (O10)
    O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
    O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
    O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll

    ---\\ Piratage de l'Option 'Rétablir les paramètres Web' (O14)
    O14 - IERESET.INF: START_PAGE_URL=START_PAGE_URL=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

    ---\\ Site dans la Zone de confiance d'Internet Explorer (O15)
    O15 - Trusted Zone: [HKCU\...\Domains\www] http.orange.fr

    ---\\ Objets ActiveX (Downloaded Program Files)(O16)
    O16 - DPF: {0972B098-DEE9-4279-AC7E-4BAAA029102D} (PhotoboxPhotowaysUploader5 Control) - http://assets.photobox.com/assets/aurigma/ImageUploader5.cab?20090806143003
    O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
    O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    O16 - DPF: {3A226D85-574D-4272-B73C-DBCAECF709B3} (TNSClickerb.Clicker) - http://www.consoclicker.com/TNSClickrb.CAB
    O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
    O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} () - http://copainsdavant.linternaute.com/framework/lib/objimageuploader/html_include/5.1.1.0/ImageUploader5.cab
    O16 - DPF: {6EBC6744-5383-4213-AD5E-66434ECA1812} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/nordnet/orange/so-4.1/resources/fslauncher.cab
    O16 - DPF: {70A5EBDC-3EA6-464A-9FF7-084BC150C417} (TNSClickera.Clicker) - http://www.consoclicker.com/TNSClickra.CAB
    O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

    ---\\ Modification Domaine/Adresses DNS (O17)
    O17 - HKLM\System\CCS\Services\Tcpip\..\{AC554E27-ECA0-4AA4-8C48-CFF9BF08FEFA}: DhcpNameServer = 192.168.1.1
    O17 - HKLM\System\CS1\Services\Tcpip\..\{AC554E27-ECA0-4AA4-8C48-CFF9BF08FEFA}: DhcpNameServer = 192.168.1.1
    O17 - HKLM\System\CS3\Services\Tcpip\..\{AC554E27-ECA0-4AA4-8C48-CFF9BF08FEFA}: DhcpNameServer = 192.168.1.1
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

    ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
    O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll
    O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll
    O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll
    O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll
    O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
    O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
    O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
    O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll
    O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll
    O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
    O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll

    ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
    O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
    O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
    O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
    O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll

    ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
    O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll
    O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll

    ---\\ Liste des services NT non Microsoft et non désactivés (O23)
    O23 - Service: (ACDaemon) - Clé orpheline
    O23 - Service: (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
    O23 - Service: (dmadmin) . (.Microsoft Corp., Veritas Software - Processus du service Gestionnaire de disque.) - C:\WINDOWS\System32\dmadmin.exe
    O23 - Service: (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: (gupdatem) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: (gusvc) . (.Google - gusvc.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: (Norton Internet Security) - Clé orpheline
    O23 - Service: (ServiceLayer) . (.Nokia - ServiceLayer Module.) - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: (Sony Ericsson PCCompanion) . (.Avanquest Software - Sony Ericsson PCCompanion Service.) - C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe

    ---\\ Enumération Active Desktop & MHTML Editor (O24)
    O24 - Default MHTML Editor: Last - .(...) - (.not file.)

    ---\\ Tâches planifiées en automatique (O39)
    O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
    O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
    O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-322340657-3154053047-287275718-1006Core.job
    O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-322340657-3154053047-287275718-1006UA.job
    O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Nettoyage de disque.job

    ---\\ Pilotes lancés au démarrage (O41)
    O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\System32\DRIVERS\tcpip.sys
    O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
    O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\System32\DRIVERS\cdrom.sys
    O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\System32\DRIVERS\i8042prt.sys
    O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\System32\DRIVERS\imapi.sys
    O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\System32\DRIVERS\intelppm.sys
    O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\System32\DRIVERS\ipsec.sys
    O41 - Driver: (ISODrive) . (.EZB Systems, Inc. - ISO DVD/CD-ROM Device Driver.) - C:\Program Files\UltraISO\drivers\ISODrive.sys
    O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\System32\DRIVERS\kbdclass.sys
    O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\System32\DRIVERS\mouclass.sys
    O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\System32\DRIVERS\mrxsmb.sys
    O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\System32\DRIVERS\netbios.sys
    O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\System32\DRIVERS\netbt.sys
    O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\System32\DRIVERS\rasacd.sys
    O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\System32\DRIVERS\rdbss.sys
    O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
    O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\System32\DRIVERS\redbook.sys
    O41 - Driver: (SRTSP) . (. - .) - C:\WINDOWS\system32\drivers\NIS\1000000.07D\SRTSP.sys (.not file.)
    O41 - Driver: (SRTSPX) . (. - .) - C:\WINDOWS\system32\drivers\NIS\1000000.07D\SRTSPX.sys (.not file.)
    O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\System32\DRIVERS\termdd.sys
    O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys

    ---\\ Logiciels installés (O42)
    O42 - Logiciel: 32 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM] -- {2614F54E-A828-49FA-93BA-45A3F756BFAA}
    O42 - Logiciel: AVS Video Converter 6 - (.Online Media Technologies Ltd..) [HKLM] -- AVS4YOU Video Converter 6_is1
    O42 - Logiciel: AVS4YOU Software Navigator 1.3 - (.Online Media Technologies Ltd..) [HKLM] -- AVS4YOU Software Navigator_is1
    O42 - Logiciel: AbiWord 2.8.6 - (.AbiSource Developers.) [HKLM] -- AbiWord2
    O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR
    O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {A2BCA9F1-566C-4805-97D1-7FDC93386723}
    O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
    O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
    O42 - Logiciel: Adobe Reader X (10.0.1) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA0000000001}
    O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
    O42 - Logiciel: Archiveur WinRAR - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver
    O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
    O42 - Logiciel: AviSynth 2.5 - (.Pas de propriétaire.) [HKLM] -- AviSynth
    O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
    O42 - Logiciel: Consumer Input Software (remove only) - (.Compete Inc..) [HKCU] -- Consumer Input Software
    O42 - Logiciel: CyberLink Recovery Manager - (.CyberLink Corp..) [HKLM] -- {44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}
    O42 - Logiciel: DraftSight - (.Dassault Systèmes.) [HKLM] -- {EE7D7509-CC19-4DED-A439-F50B191C9E37}
    O42 - Logiciel: EZface ActiveX 208 - (.Pas de propriétaire.) [HKLM] -- EZface ActiveX
    O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome
    O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
    O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
    O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
    O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {4286E640-B5FB-11DF-AC4B-005056C00008}
    O42 - Logiciel: HP Customer Participation Program 10.0 - (.HP.) [HKLM] -- HPExtendedCapabilities
    O42 - Logiciel: HP Deskjet F4200 All-In-One Driver Software 10.0 Rel .3 - (.HP.) [HKLM] -- {AE9A67F9-ADF1-4a44-BAB5-C1DB302B37A2}
    O42 - Logiciel: HP Imaging Device Functions 10.0 - (.HP.) [HKLM] -- HP Imaging Device Functions
    O42 - Logiciel: HP Photosmart Essential 3.5 - (.HP.) [HKLM] -- HP Photosmart Essential
    O42 - Logiciel: HP Smart Web Printing 4.60 - (.HP.) [HKLM] -- HP Smart Web Printing
    O42 - Logiciel: HP Solution Center 13.0 - (.HP.) [HKLM] -- HP Solution Center & Imaging Support Tools
    O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}
    O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
    O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
    O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399
    O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
    O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
    O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
    O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {133742BA-6F46-4D3E-85AF-78631D9AD8B8}
    O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Pas de propriétaire.) [HKLM] -- HDMI
    O42 - Logiciel: JDownloader - (.AppWork UG (haftungsbeschränkt).) [HKLM] -- JDownloader
    O42 - Logiciel: Java(TM) 6 Update 18 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216018F0}
    O42 - Logiciel: Java(TM) 6 Update 24 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216015FF}
    O42 - Logiciel: Lecteur Windows Media 11 - (.Pas de propriétaire.) [HKLM] -- Windows Media Player
    O42 - Logiciel: MSVC80_x86_v2 - (.Nokia.) [HKLM] -- {6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}
    O42 - Logiciel: MSVC90_x86 - (.Nokia.) [HKLM] -- {AF111648-99A1-453E-81DD-80DBBF6DAD0D}
    O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
    O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
    O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
    O42 - Logiciel: MSXML4 Parser - (.Microsoft Game Studios.) [HKLM] -- {01501EBA-EC35-4F9F-8889-3BE346E5DA13}
    O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.0.1200 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
    O42 - Logiciel: Media Go - (.Sony.) [HKLM] -- {C6AC04F5-5916-4A02-BC36-AF5BC0A3CBD4}
    O42 - Logiciel: MediaBar - (.iMesh Inc..) [HKLM] -- iMesh 1 MediaBar
    O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {3F7924B9-D148-3141-87B1-68F36043A940}
    O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
    O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - FRA - (.Microsoft Corporation.) [HKLM] -- {511DF669-2930-30C0-8EB6-552887E29EC8}
    O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
    O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack - fra - (.Microsoft Corporation.) [HKLM] -- {5B76AEA2-D4E5-3B55-B965-ACC36AE0EAFC}
    O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
    O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
    O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
    O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {06E6E30D-B498-442F-A943-07DE41D7F785}
    O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
    O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
    O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}
    O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - KB2467175 - (.Microsoft Corporation.) [HKLM] -- {a0fe116e-9a8a-466f-aee0-625cb7c207e3}
    O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
    O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 - (.Microsoft Corporation.) [HKLM] -- {86CE85E6-DBAC-3FFD-B977-E4B79F83C909}
    O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 - (.Microsoft Corporation.) [HKLM] -- {FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
    O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
    O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
    O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 - fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack - fra
    O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM] -- {69B040CC-E9B1-4769-950E-87786C9E16AD}
    O42 - Logiciel: Orange Inside - (.Orange.) [HKCU] -- Orange Inside
    O42 - Logiciel: Orange Installeur version 1.2.1.0 - (.Orange.) [HKLM] -- {D13FE823-C575-4451-AC37-E645A67AA581}_1.2.1.0
    O42 - Logiciel: Outils de diagnostic du matériel - (.PC-Doctor, Inc..) [HKLM] -- PC-Doctor for Windows
    O42 - Logiciel: PC Connectivity Solution - (.Nokia.) [HKLM] -- {4B28C077-9958-45F1-8BB4-CBF90A69AD4E}
    O42 - Logiciel: PCIe Soft Data Fax Modem with SmartCP - (.Conexant Systems.) [HKLM] -- CNXT_MODEM_PCI_HSF
    O42 - Logiciel: POB 7 - (.Pas de propriétaire.) [HKLM] -- pob7
    O42 - Logiciel: Package de pilotes Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0) - (.Nokia.) [HKLM] -- 504244733D18C8F63FF584AEB290E3904E791693
    O42 - Logiciel: Package de pilotes Windows - OPTO ELECTRONICS CO.,LTD (optousb) Ports (10/19/2006 1.0.3.0) - (.OPTO ELECTRONICS CO.,LTD.) [HKLM] -- D127120E5ABE3D19A796184C338C39A62539D6AD
    O42 - Logiciel: PlayStation(R)Network Downloader - (.Sony Computer Entertainment Inc..) [HKLM] -- {B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}
    O42 - Logiciel: PlayStation(R)Store - (.Sony Computer Entertainment Inc..) [HKLM] -- {0E532C84-4275-41B3-9D81-D4A1A20D8EE7}
    O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}
    O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- {40BF1E83-20EB-11D8-97C5-0009C5020658}
    O42 - Logiciel: PowerDVD SE - (.Pas de propriétaire.) [HKLM] -- {6811CAA0-BF12-11D4-9EA1-0050BAE317E1}
    O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
    O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM] -- {96AE7E41-E34E-47D0-AC07-1091A8127911}
    O42 - Logiciel: SFR - Kit de connexion - (.SFR.) [HKLM] -- SFR_Kit
    O42 - Logiciel: SFR - Mediacenter Evolution - (.SFR.) [HKLM] -- SFR_Mediacenter Evolution
    O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
    O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
    O42 - Logiciel: Shop for HP Supplies - (.HP.) [HKLM] -- Shop for HP Supplies
    O42 - Logiciel: Sony Ericsson PC Companion 2.01.173 - (.Sony Ericsson.) [HKLM] -- {F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}
    O42 - Logiciel: Sony Ericsson Update Engine - (.Sony Ericsson Mobile Communications AB.) [HKLM] -- Update Engine
    O42 - Logiciel: UltraISO Premium V9.35 - (.Pas de propriétaire.) [HKLM] -- UltraISO_is1
    O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKLM] -- UnityWebPlayer
    O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
    O42 - Logiciel: VLC media player 1.1.7 - (.VideoLAN.) [HKLM] -- VLC media player
    O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8
    O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {B3B487E7-6171-4376-9074-B28082CEB504}
    O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1}
    O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {445B183D-F4F1-45C8-B9DB-F11355CA657B}
    O42 - Logiciel: Windows Media Format 11 runtime - (.Pas de propriétaire.) [HKLM] -- Windows Media Format Runtime
    O42 - Logiciel: X'nBeep 1.1 - (.GraphysWeb © 2001-2007.) [HKLM] -- X'nBeep_is1
    O42 - Logiciel: XML Paper Specification Shared Components Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- XpsEPSC
    O42 - Logiciel: avast! Free Antivirus - (.AVAST Software.) [HKLM] -- avast
    O42 - Logiciel: kikin plugin 2.9 - (.kikin.) [HKLM] -- {E4A71A41-BCC8-480a-9E69-0DA29CBA7ECA}

    ---\\ HKCU & HKLM Software Keys
    [HKCU\Software\AC3Filter]
    [HKCU\Software\ALWIL Software]
    [HKCU\Software\AVAST Software]
    [HKCU\Software\AVS4YOU]
    [HKCU\Software\Ad-Remover]
    [HKCU\Software\Adobe]
    [HKCU\Software\AppDataLow\Software\Adobe]
    [HKCU\Software\AppDataLow\Software\Macromedia]
    [HKCU\Software\AppDataLow\Software\Microsoft]
    [HKCU\Software\AppDataLow\Software]
    [HKCU\Software\AppDataLow]
    [HKCU\Software\Apple Computer, Inc.]
    [HKCU\Software\ArcSoft]
    [HKCU\Software\Aurigma]
    [HKCU\Software\CDDB]
    [HKCU\Software\Classes.crx]
    [HKCU\Software\Classes]
    [HKCU\Software\Clients]
    [HKCU\Software\Command]
    [HKCU\Software\CompeteInc]
    [HKCU\Software\Compete]
    [HKCU\Software\CoreAAC]
    [HKCU\Software\Cyberlink]
    [HKCU\Software\Cygnus Solutions]
    [HKCU\Software\Dassault Systemes]
    [HKCU\Software\DirectShow]
    [HKCU\Software\DivXNetworks]
    [HKCU\Software\EasyBoot Systems]
    [HKCU\Software\F-Secure]
    [HKCU\Software\FIXIO PC Utilities]
    [HKCU\Software\Google]
    [HKCU\Software\Graphys]
    [HKCU\Software\Headlight]
    [HKCU\Software\Hewlett-Packard]
    [HKCU\Software\Hilgraeve Inc]
    [HKCU\Software\HookNetwork]
    [HKCU\Software\IM Providers]
    [HKCU\Software\InstallCore]
    [HKCU\Software\Intel]
    [HKCU\Software\JEDI-VCL]
    [HKCU\Software\JavaSoft]
    [HKCU\Software\Jitit Virtual Registry]
    [HKCU\Software\Kayenko]
    [HKCU\Software\Local AppWizard-Generated Applications]
    [HKCU\Software\Macromedia]
    [HKCU\Software\Magnet]
    [HKCU\Software\Malwarebytes' Anti-Malware]
    [HKCU\Software\Minisoft]
    [HKCU\Software\MozillaPlugins]
    [HKCU\Software\Mozilla]
    [HKCU\Software\Netscape]
    [HKCU\Software\Neuf]
    [HKCU\Software\Nokia]
    [HKCU\Software\ODBC]
    [HKCU\Software\Official-eMule]
    [HKCU\Software\OpenOffice.org]
    [HKCU\Software\OrangeInside]
    [HKCU\Software\Piriform]
    [HKCU\Software\Policies]
    [HKCU\Software\Realsil]
    [HKCU\Software\Realtek]
    [HKCU\Software\SWActivation]
    [HKCU\Software\Snapfish]
    [HKCU\Software\Softonic]
    [HKCU\Software\Solidworks Corporation]
    [HKCU\Software\Sony Corporation]
    [HKCU\Software\Sony Creative Software]
    [HKCU\Software\Sony Ericsson]
    [HKCU\Software\SuperSoftwarePackage]
    [HKCU\Software\Trend Micro]
    [HKCU\Software\Trolltech]
    [HKCU\Software\Unity]
    [HKCU\Software\VB and VBA Program Settings]
    [HKCU\Software\Videohost]
    [HKCU\Software\VirginMega]
    [HKCU\Software\WinRAR SFX]
    [HKCU\Software\WinRAR]
    [HKCU\Software\Windows Live Writer]
    [HKCU\Software\Wyzo]
    [HKCU\Software\YahooPartnerToolbar]
    [HKCU\Software\freeplayer.org]
    [HKCU\Software\imeshmediabartb]
    [HKCU\Software\kde.org]
    [HKCU\Software\keyhole.com]
    [HKCU\Software\mkvmergeGUI]
    [HKCU\Software\yahooinstall]
    [HKLM\Software\ALWIL Software]
    [HKLM\Software\AVAST Software]
    [HKLM\Software\AVS4YOU]
    [HKLM\Software\AbiWord]
    [HKLM\Software\Adobe]
    [HKLM\Software\AppDataLow]
    [HKLM\Software\ArcSoft]
    [HKLM\Software\C07ft5Y]
    [HKLM\Software\CDDB]
    [HKLM\Software\CXT]
    [HKLM\Software\Classes]
    [HKLM\Software\Clients]
    [HKLM\Software\CompeteInc]
    [HKLM\Software\Conexant Systems]
    [HKLM\Software\CyberLink]
    [HKLM\Software\Cygnus Solutions]
    [HKLM\Software\Dassault Systemes]
    [HKLM\Software\EZFace]
    [HKLM\Software\EasyBoot Systems]
    [HKLM\Software\GYOZA]
    [HKLM\Software\Gemplus]
    [HKLM\Software\Google]
    [HKLM\Software\HP]
    [HKLM\Software\Hewlett-Packard]
    [HKLM\Software\HighCriteria]
    [HKLM\Software\ICE]
    [HKLM\Software\Intel]
    [HKLM\Software\JavaSoft]
    [HKLM\Software\JreMetrics]
    [HKLM\Software\Kayenko]
    [HKLM\Software\Macromedia]
    [HKLM\Software\Magnet]
    [HKLM\Software\Malwarebytes' Anti-Malware]
    [HKLM\Software\MicroQuill]
    [HKLM\Software\MimarSinan]
    [HKLM\Software\MozillaPlugins]
    [HKLM\Software\Mozilla]
    [HKLM\Software\Neuf]
    [HKLM\Software\Nokia]
    [HKLM\Software\ODBC]
    [HKLM\Software\Official-eMule]
    [HKLM\Software\OpenOffice.org]
    [HKLM\Software\Orange]
    [HKLM\Software\PC Connectivity Solution]
    [HKLM\Software\PC-Doctor]
    [HKLM\Software\PCSuite]
    [HKLM\Software\Piriform]
    [HKLM\Software\PocketSoft]
    [HKLM\Software\Policies]
    [HKLM\Software\Program Groups]
    [HKLM\Software\Realtek Semiconductor Corp.]
    [HKLM\Software\Realtek]
    [HKLM\Software\RegisteredApplications]
    [HKLM\Software\SECURITOO]
    [HKLM\Software\SOFTWARE]
    [HKLM\Software\Sagem]
    [HKLM\Software\Schlumberger]
    [HKLM\Software\Secure]
    [HKLM\Software\Sony Corporation]
    [HKLM\Software\Sony Creative Software]
    [HKLM\Software\Sony Ericsson]
    [HKLM\Software\Sony Media Software]
    [HKLM\Software\Sony]
    [HKLM\Software\Sun Microsystems]
    [HKLM\Software\The Silicon Realms Toolworks]
    [HKLM\Software\TrendMicro]
    [HKLM\Software\Uniblue]
    [HKLM\Software\Unity]
    [HKLM\Software\VideoLAN]
    [HKLM\Software\Windows 3.1 Migration Status]
    [HKLM\Software\Windows]
    [HKLM\Software\iMeshMediabarTb]
    [HKLM\Software\mozilla.org]
    [HKLM\Software\office]

    ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
    O43 - CFD: 01/06/2011 - 22:31:14 - [307759814] ----D- C:\Program Files\Fichiers communs
    O43 - CFD: 01/06/2011 - 23:20:54 - [0] ----D- C:\Program Files\Norton Internet Security
    O43 - CFD: 01/06/2011 - 23:20:58 - [3891672] ----D- C:\Program Files\ZHPDiag
    O43 - CFD: 12/05/2011 - 14:31:12 - [21296762] ----D- C:\Program Files\AbiWord
    O43 - CFD: 01/06/2011 - 23:05:32 - [91837050] ----D- C:\Program Files\Ad-Remover
    O43 - CFD: 02/03/2011 - 15:19:00 - [114310881] ----D- C:\Program Files\Adobe
    O43 - CFD: 12/07/2010 - 10:18:12 - [158521416] ----D- C:\Program Files\Alwil Software
    O43 - CFD: 02/03/2010 - 11:12:10 - [4859926] ----D- C:\Program Files\AviSynth 2.5
    O43 - CFD: 15/10/2009 - 20:20:38 - [9433897] ----D- C:\Program Files\AVS4YOU
    O43 - CFD: 16/10/2009 - 17:20:40 - [22832244] ----D- C:\Program Files\AVSVideoConverter6
    O43 - CFD: 01/06/2011 - 09:36:20 - [3753504] ----D- C:\Program Files\CCleaner
    O43 - CFD: 08/12/2008 - 11:01:36 - [0] ----D- C:\Program Files\ComPlus Applications
    O43 - CFD: 08/12/2008 - 11:17:34 - [1048576] ----D- C:\Program Files\CONEXANT
    O43 - CFD: 21/03/2011 - 16:21:14 - [3693332] ----D- C:\Program Files\Consumer Input
    O43 - CFD: 08/12/2008 - 11:42:14 - [172018212] ----D- C:\Program Files\Cyberlink
    O43 - CFD: 10/04/2011 - 15:37:14 - [167799301] ----D- C:\Program Files\Dassault Systemes
    O43 - CFD: 09/04/2011 - 09:42:32 - [3717088] ----D- C:\Program Files\DIFX
    O43 - CFD: 10/09/2009 - 14:45:02 - [1250993] ----D- C:\Program Files\EZFace
    O43 - CFD: 20/05/2010 - 15:25:12 - [28] ----D- C:\Program Files\Fluendo
    O43 - CFD: 26/09/2010 - 13:22:26 - [123166387] ----D- C:\Program Files\Google
    O43 - CFD: 04/06/2009 - 17:00:58 - [0] ----D- C:\Program Files\Hewlett-Packard
    O43 - CFD: 02/07/2009 - 00:03:56 - [204265568] ----D- C:\Program Files\Hp
    O43 - CFD: 21/05/2011 - 07:59:28 - [37800860] --H-D- C:\Program Files\InstallShield Installation Information
    O43 - CFD: 08/12/2008 - 11:14:32 - [64868] ----D- C:\Program Files\Intel
    O43 - CFD: 13/04/2011 - 07:03:46 - [5362286] ----D- C:\Program Files\Internet Explorer
    O43 - CFD: 05/03/2011 - 12:58:58 - [171303451] ----D- C:\Program Files\Java
    O43 - CFD: 29/05/2011 - 10:12:50 - [57654318] ----D- C:\Program Files\JDownloader
    O43 - CFD: 07/12/2010 - 15:54:32 - [1390226] ----D- C:\Program Files\kikin
    O43 - CFD: 02/01/2011 - 11:12:46 - [17] ----D- C:\Program Files\LimeWire
    O43 - CFD: 01/06/2011 - 22:02:34 - [7566987] ----D- C:\Program Files\Malwarebytes' Anti-Malware
    O43 - CFD: 19/11/2010 - 19:47:52 - [2158723] ----D- C:\Program Files\Messenger
    O43 - CFD: 15/10/2009 - 10:57:22 - [1721508] ----D- C:\Program Files\Microsoft
    O43 - CFD: 08/12/2008 - 11:04:04 - [0] ----D- C:\Program Files\microsoft frontpage
    O43 - CFD: 14/11/2010 - 10:58:10 - [0] ----D- C:\Program Files\Microsoft Office
    O43 - CFD: 22/04/2011 - 06:20:24 - [38388859] ----D- C:\Program Files\Microsoft Silverlight
    O43 - CFD: 13/08/2010 - 03:48:30 - [10374874] ----D- C:\Program Files\Movie Maker
    O43 - CFD: 24/04/2011 - 11:03:20 - [2423] ----D- C:\Program Files\Mozilla Firefox
    O43 - CFD: 08/12/2008 - 11:28:40 - [25757] ----D- C:\Program Files\MSBuild
    O43 - CFD: 19/11/2010 - 19:03:58 - [19278399] ----D- C:\Program Files\MSN
    O43 - CFD: 08/12/2008 - 11:00:44 - [8745735] ----D- C:\Program Files\MSN Gaming Zone
    O43 - CFD: 04/06/2009 - 23:14:46 - [0] ----D- C:\Program Files\MSXML 4.0
    O43 - CFD: 08/12/2008 - 11:02:00 - [3285523] ----D- C:\Program Files\NetMeeting
    O43 - CFD: 08/12/2008 - 11:00:52 - [1804] ----D- C:\Program Files\Online Services
    O43 - CFD: 11/08/2010 - 17:13:02 - [379964498] ----D- C:\Program Files\OpenOffice.org 3
    O43 - CFD: 27/12/2010 - 12:54:44 - [1583030] ----D- C:\Program Files\Orange
    O43 - CFD: 16/12/2010 - 00:32:32 - [4379321] ----D- C:\Program Files\Outlook Express
    O43 - CFD: 19/05/2011 - 14:42:50 - [13568935] ----D- C:\Program Files\PC Connectivity Solution
    O43 - CFD: 08/12/2008 - 11:33:16 - [110460866] ----D- C:\Program Files\PC-Doctor for Windows
    O43 - CFD: 08/05/2011 - 12:12:26 - [102918843] ----D- C:\Program Files\POB 7
    O43 - CFD: 19/05/2010 - 14:09:14 - [62589198] ----D- C:\Program Files\Realtek
    O43 - CFD: 08/12/2008 - 11:28:34 - [37387521] ----D- C:\Program Files\Reference Assemblies
    O43 - CFD: 25/05/2010 - 10:37:18 - [38412056] ----D- C:\Program Files\Securitoo
    O43 - CFD: 08/12/2008 - 11:02:12 - [1025] ----D- C:\Program Files\Services en ligne
    O43 - CFD: 23/04/2011 - 10:52:54 - [62789846] ----D- C:\Program Files\SFR
    O43 - CFD: 02/01/2011 - 11:58:04 - [81920819] ----D- C:\Program Files\Sony
    O43 - CFD: 26/03/2011 - 13:18:30 - [69968136] ----D- C:\Program Files\Sony Ericsson
    O43 - CFD: 02/01/2011 - 11:53:56 - [66146] ----D- C:\Program Files\Sony Media Go Install
    O43 - CFD: 01/06/2011 - 22:16:30 - [401868] ----D- C:\Program Files\Trend Micro
    O43 - CFD: 14/10/2009 - 20:41:24 - [6010610] ----D- C:\Program Files\UltraISO
    O43 - CFD: 01/06/2011 - 09:25:32 - [0] ----D- C:\Program Files\Uniblue
    O43 - CFD: 08/12/2008 - 11:07:08 - [0] --H-D- C:\Program Files\Uninstall Information
    O43 - CFD: 09/10/2009 - 18:16:18 - [24908958] ----D- C:\Program Files\Unity
    O43 - CFD: 30/03/2011 - 06:54:00 - [101457172] ----D- C:\Program Files\VLC
    O43 - CFD: 19/11/2010 - 20:04:08 - [45806173] ----D- C:\Program Files\Windows Live
    O43 - CFD: 15/11/2009 - 13:26:48 - [3596942] ----D- C:\Program Files\Windows Media Connect 2
    O43 - CFD: 29/08/2009 - 16:06:14 - [8278281] ----D- C:\Program Files\Windows Media Player
    O43 - CFD: 08/12/2008 - 11:00:42 - [3942655] ----D- C:\Program Files\Windows NT
    O43 - CFD: 08/12/2008 - 11:02:16 - [0] --H-D- C:\Program Files\WindowsUpdate
    O43 - CFD: 07/08/2009 - 20:48:08 - [3525705] ----D- C:\Program Files\WinRAR
    O43 - CFD: 13/05/2011 - 06:59:30 - [1804395] ----D- C:\Program Files\X'nBeep 1.1
    O43 - CFD: 08/12/2008 - 11:04:04 - [0] ----D- C:\Program Files\xerox
    O43 - CFD: 27/06/2010 - 17:59:34 - [166] ----D- C:\Program Files\Fichiers Communs\ArcSoft
    O43 - CFD: 02/03/2011 - 15:19:12 - [3515885] ----D- C:\Program Files\Fichiers Communs\Adobe
    O43 - CFD: 13/02/2010 - 10:54:22 - [32158176] ----D- C:\Program Files\Fichiers Communs\Adobe AIR
    O43 - CFD: 15/10/2009 - 20:20:34 - [54234772] ----D- C:\Program Files\Fichiers Communs\AVSMedia
    O43 - CFD: 14/10/2009 - 20:41:24 - [262144] ----D- C:\Program Files\Fichiers Communs\EZB Systems
    O43 - CFD: 05/06/2009 - 17:56:14 - [756] ----D- C:\Program Files\Fichiers Communs\France Telecom
    O43 - CFD: 04/06/2009 - 17:00:48 - [469525] ----D- C:\Program Files\Fichiers Communs\Hewlett-Packard
    O43 - CFD: 04/06/2009 - 17:00:30 - [5688484] ----D- C:\Program Files\Fichiers Communs\HP
    O43 - CFD: 08/12/2008 - 11:42:10 - [3179774] ----D- C:\Program Files\Fichiers Communs\InstallShield
    O43 - CFD: 05/03/2011 - 12:59:36 - [1247175] ----D- C:\Program Files\Fichiers Communs\Java
    O43 - CFD: 19/11/2010 - 20:04:00 - [16733215] ----D- C:\Program Files\Fichiers Communs\Microsoft Shared
    O43 - CFD: 08/12/2008 - 11:01:58 - [284160] ----D- C:\Program Files\Fichiers Communs\MSSoap
    O43 - CFD: 08/12/2008 - 11:56:10 - [0] ----D- C:\Program Files\Fichiers Communs\ODBC
    O43 - CFD: 08/12/2008 - 11:02:00 - [8106] ----D- C:\Program Files\Fichiers Communs\Services
    O43 - CFD: 02/01/2011 - 11:58:16 - [341472] ----D- C:\Program Files\Fichiers Communs\Sony Shared
    O43 - CFD: 08/12/2008 - 11:56:08 - [3787229] ----D- C:\Program Files\Fichiers Communs\SpeechEngines
    O43 - CFD: 14/11/2010 - 10:54:36 - [13518053] ----D- C:\Program Files\Fichiers Communs\System
    O43 - CFD: 04/06/2009 - 15:54:18 - [172330722] ----D- C:\Program Files\Fichiers Communs\Windows Live
    O43 - CFD: 02/03/2011 - 15:20:30 - [17412171] ----D- C:\Documents and Settings\HP_Administrator\Application Data\Adobe
    O43 - CFD: 27/06/2010 - 09:43:14 - [3782564] ----D- C:\Documents and Settings\HP_Administrator\Application Data\ArcSoft
    O43 - CFD: 15/10/2009 - 17:16:20 - [0] ----D- C:\Documents and Settings\HP_Administrator\Application Data\AVS4YOU
    O43 - CFD: 24/04/2011 - 11:03:58 - [0] ----D- C:\Documents and Settings\HP_Administrator\Application Data\BabylonToolbar
    O43 - CFD: 23/05/2010 - 17:30:36 - [726742] ----D- C:\Documents and Settings\HP_Administrator\Application Data\banshee-1
    O43 - CFD: 29/11/2009 - 20:22:30 - [554] ----D- C:\Documents and Settings\HP_Administrator\Application Data\com.adobe.example.widget-programmes.40247E01796E652D304FB5752B197AB47987A585.1
    O43 - CFD: 06/06/2009 - 11:04:24 - [0] ----D- C:\Documents and Settings\HP_Administrator\Application Data\CyberLink
    O43 - CFD: 10/04/2011 - 15:38:18 - [3282851] ----D- C:\Documents and Settings\HP_Administrator\Application Data\DraftSight
    O43 - CFD: 28/09/2010 - 20:56:26 - [1031] ----D- C:\Documents and Settings\HP_Administrator\Application Data\dvdcss
    O43 - CFD: 19/01/2010 - 11:50:54 - [14332] ----D- C:\Documents and Settings\HP_Administrator\Application Data\GetRightToGo
    O43 - CFD: 28/03/2010 - 19:08:42 - [100406] ----D- C:\Documents and Settings\HP_Administrator\Application Data\Google
    O43 - CFD: 07/06/2009 - 20:53:20 - [48943] ----D- C:\Documents and Settings\HP_Administrator\Application Data\HP
    O43 - CFD: 01/06/2011 - 17:40:44 - [234775] ----D- C:\Documents and Settings\HP_Administrator\Application Data\HPAppData
    O43 - CFD: 02/07/2010 - 03:35:06 - [21355] ----D- C:\Documents and Settings\HP_Administrator\Application Data\HpUpdate
    O43 - CFD: 08/12/2008 - 11:04:02 - [0] ----D- C:\Documents and Settings\HP_Administrator\Application Data\Identities
    O43 - CFD: 31/10/2010 - 15:51:34 - [4191] ----D- C:\Documents and Settings\HP_Administrator\Application Data\kikin
    O43 - CFD: 01/01/2011 - 20:58:00 - [954728] ----D- C:\Documents and Settings\HP_Administrator\Application Data\LimeWire
    O43 - CFD: 29/06/2009 - 22:45:36 - [2007943] ----D- C:\Documents and Settings\HP_Administrator\Application Data\Macromedia
    O43 - CFD: 01/06/2011 - 22:02:42 - [1208087] ----D- C:\Documents and Settings\HP_Administrator\Application Data\Malwarebytes
    O43 - CFD: 02/03/2011 - 15:20:30 - [37260774] -S--D- C:\Documents and Settings\HP_Administrator\Application Data\Microsoft
    O43 - CFD: 25/04/2011 - 09:27:38 - [0] ----D- C:\Documents and Settings\HP_Administrator\Application Data\mkvtoolnix
    O43 - CFD: 10/04/2011 - 14:41:44 - [0] ----D- C:\Documents and Settings\HP_Administrator\Application Data\Mozilla
    O43 - CFD: 04/06/2009 - 14:31:28 - [24394] ----D- C:\Documents and Settings\HP_Administrator\Application Data\MSNInstaller
    O43 - CFD: 01/06/2011 - 09:45:14 - [3072] ----D- C:\Documents and Settings\HP_Administrator\Application Data\Nokia
    0
  10. Vent d'ouest Messages postés 714 Statut Membre 41
     
    Ton rapport est trop long pour passer sur le forum.
    Héberge le sur http://www.cijoint.fr/
    - Clique sur Parcourir et cherche le répertoire où est installé ZHPDiag (en général C:\Program Files\ZHPDiag).
    - Sélectionne le fichier ZHPDiag.txt.
    - Clique sur "Cliquez ici pour déposer le fichier".
    - Un lien de cette forme : http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt est ajouté dans la page.
    - Copie ce lien dans ta réponse.
    0