Problème avec le virus QuestScan! Résolu/Fermé

Question

Bonsoir, depuis quelques jours, en entrant une recherche dans la barre d'adresse, j'ai la page http://www.questscan.com qui s'ouvre à chaque fois. J'ai essayé avec Ad-remover, est voici le rapport. Merci beaucoup d'avance.


======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files (x86)\Ad-Remover\main.exe (CLEAN [3]) -> Lancé à 22:27:51 le 21/07/2011, Mode normal

Microsoft Windows 7 Édition Familiale Premium  Service Pack 1 (X64) 
jib@JIB-PC (ASUSTeK Computer Inc. K50IP) 
 
============== ACTION(S) ==============



(!) -- Fichiers temporaires supprimés.




============== SCAN ADDITIONNEL ==============

**** Mozilla Firefox Version [5.0 (fr)] ****

Plugins
pBitCometAgent.dll (BitComet)
Searchplugins\babylon.xml (hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=0877667b0000000000001c4bd698de69&tlver=1.4.19.19&ss=1&affID=18026/)
Searchplugins\bing.xml (    hxxp://www.bing.com/search)
Components\browsercomps.dll (Mozilla Foundation)
Extensions\{F0E1168A-B4B5-484C-B77E-0D28E6B64096} (QuestScan)

-- C:\Users\jib\AppData\Roaming\Mozilla\FireFox\Profiles\22jiz7u4.default --
Extensions\ffox@bandoo.com (Bandoo for Firefox)
Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} (Google Toolbar for Firefox)
Extensions\{364d4e0c-543f-4b85-abe3-19551139da4f} (Softonic France Community Toolbar)
Extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB} (BitComet Video Downloader)
Extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}-trash (?)
Searchplugins\facebook.xml (?)
Prefs.js - browser.download.dir, D:\Téléchargements
Prefs.js - browser.download.lastDir, C:\Users\jib\Downloads
Prefs.js - browser.search.defaultenginename, Google
Prefs.js - browser.search.selectedEngine, Search the web (Babylon)
Prefs.js - browser.startup.homepage, hxxp://search.babylon.com/?babsrc=HP_ss&mntrId=0877667b0000000000001c4bd698de69&tlver=1.4.19.1...
Prefs.js - browser.startup.homepage_override.buildID, 20110615151330
Prefs.js - browser.startup.homepage_override.mstone, rv:5.0
Prefs.js - keyword.URL, hxxp://search.babylon.com/?babsrc=toolbar2&q=

========================================

**** Internet Explorer Version [8.0.7601.17514] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKCU_URLSearchHooks|{364d4e0c-543f-4b85-abe3-19551139da4f} - "Softonic France Toolbar" (C:\Program Files (x86)\Softonic_France	bSoft.dll)
HKLM_URLSearchHooks|{364d4e0c-543f-4b85-abe3-19551139da4f} - "Softonic France Toolbar" (C:\Program Files (x86)\Softonic_France	bSoft.dll)
HKCU_SearchScopes\{4B8C28A7-A9BC-45F8-990D-21499EED643C} - "QuestScan" (hxxp://www.questscan.com/?prt=QstscanPB&keywords={searchTerms})
HKCU_SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64} - "?" (?)
HKCU_Toolbar\WebBrowser|{364D4E0C-543F-4B85-ABE3-19551139DA4F} (C:\Program Files (x86)\Softonic_France	bSoft.dll)
HKLM_Toolbar|{364d4e0c-543f-4b85-abe3-19551139da4f} (C:\Program Files (x86)\Softonic_France	bSoft.dll)
HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\SysWOW64\wpcer.exe (x)
HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\SysWOW64\winfxdocobj.exe (x)
HKLM_ElevationPolicy\{2c27f5f6-6501-467c-b313-cbe72d71a688} - C:\Program Files (x86)\BitSpirit\BitSpirit.exe (LANSPIRIT.NET)
HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files (x86)\Internet Explorer\iedw.exe (x)
HKLM_ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7} - C:\Program Files (x86)\FREEzeFrog\bin\1.0.670.0\Weather.exe (x)
HKLM_ElevationPolicy\{A6E2003F-95C5-4591-BA9A-0093080FDB5C} - C:\Program Files (x86)\Common Files\Oberon Media\OberonBroker\1.0.0.63\OberonBroker.exe (?)
HKLM_ElevationPolicy\{B43A0C1E-B63F-4691-B68F-CD807A45DA01} - C:\Windows\system32\TSWbPrxy.exe (x)
HKLM_Extensions\{D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - "BitComet" (C:\Program Files (x86)\BitComet	ools\BitCometBHO_1.5.4.11.dll,203)
BHO\{364d4e0c-543f-4b85-abe3-19551139da4f} - "Softonic France Toolbar" (C:\Program Files (x86)\Softonic_France	bSoft.dll)
BHO\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - "BitComet Helper" (C:\Program Files (x86)\BitComet	ools\BitCometBHO_1.5.4.11.dll)
BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)
BHO\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - "Search Helper" (C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll)

========================================

C:\Program Files (x86)\Ad-Remover\Quarantine: 507 Fichier(s)
C:\Program Files (x86)\Ad-Remover\Backup: 19 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 21/07/2011 20:52:12 (23210 Octet(s)) 
C:\Ad-Report-CLEAN[2].txt - 21/07/2011 22:22:53 (5367 Octet(s)) 
C:\Ad-Report-CLEAN[3].txt - 21/07/2011 22:27:54 (5229 Octet(s)) 
C:\Ad-Report-SCAN[1].txt - 21/07/2011 22:20:33 (5256 Octet(s)) 

Fin à: 22:29:12, 21/07/2011 
 
============== E.O.F ==============

Smart91 · Answer

Bonjour,

On va faire un diagnostic de ton PC:

Télécharge ZHPDiag (de Nicolas Coolman) sur ton bureau 
https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html
ou depuis ce lien si le premier a des soucis:
http://www.moncompteur.com/compteurclick.php?idLink=18026 

Une fois le téléchargement achevé, double clique sur ZHPDiag.exe et suis les instructions.
 
/!\Utilisateurs de Vista et Windows 7 : Clique droit sur le logo de ZHPDiag.exe, « exécuter en tant qu'Administrateur »

N'oublie pas de cocher la case qui permet de mettre un raccourci sur le Bureau. 
-  Double clique sur le raccourci ZHPDiag sur ton Bureau pour le lancer.
- Si tu possèdes Avast 6 comme antivirus, à l'alerte choisis "lancer normalement" 
(/!\L'outil a créé 2 icônes ZHPDiag et ZHPFix)
-  Clique sur la loupe pour lancer l'analyse. 
-  Laisse l'outil travailler, il peut être assez long. 
-  Ferme ZHPDiag en fin d'analyse. 
-  Pour transmettre le rapport clique sur ce lien : http://www.cijoint.fr/ 
-  Clique sur Parcourir et cherche le répertoire où est installé ZHPDiag (en général C:\Program Files\ZHPDiag). 
-  Sélectionne le fichier ZHPDiag.txt. 
-  Clique sur "Cliquez ici pour déposer le fichier". 
-  Un lien de cette forme : http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt est ajouté dans la page. 
-  Copie ce lien dans ta réponse.

Smart

Belia83 · Answer

Bonjour désolé mais j'ai eu un peu de mal car toujours basculée sur QuestScan pour publier le rapport. Mais j'ai réussi à copier le lien vite vite merci de ton aide.

http://www.cijoint.fr/cjlink.php?file=cj201107/cijiplzXgU.txt

Smart91 · Answer

Est-ce que as bien lancé ZHPDiah en tant qu'administrateur ? 
Peux-tu poster ce rapport, directement das ta réponse: 
C:\Ad-Report-CLEAN[1].txt 

Ensuite tu vas faire ceci: 

- Ferme toutes tes applications en cours 
- Lance ZHPFix (soit via le raccourci sur ton Bureau, soit via ZHPDiag en cliquant sur l'écusson vert)  
Si tu ne l'as pas, télécharge le depuis ce lien: https://www.zebulon.fr/telechargements/securite/systeme/zhpfix.html 
Copie/colle les lignes en gras suivantes : 
  
----------------------------------------------------------  
[MD5.EEF85A2015527C7BF77EA524FAE0F840] - (...) -- C:\Program Files (x86)\FREEzeFrog\bin\1.0.670.0\FREEzeFrogSA.exe   [1150976] 
M0 - MFSP: prefs.js [jib - 22jiz7u4.default] http://search.babylon.com/?babsrc=HP_ss&mntrId=0877667b0000000000001c4bd698de69&tlver=1.4.19.19&ss=1&affID=18026 
M2 - MFEP: prefs.js [jib - 22jiz7u4.default\ffox@bandoo.com] [] Bandoo for Firefox v5.1 (..) 
O4 - HKLM\..\Wow6432Node\Run: [ApnUpdater] C:\Program Files (x86)\Ask.com\Updater\Updater.exe (.not file.) 
O4 - HKLM\..\Wow6432Node\Run: [FREEzeFrogSA] . (...) -- C:\Program Files (x86)\FREEzeFrog\bin\1.0.670.0\FREEzeFrogSA.exe 
[MD5.EEF85A2015527C7BF77EA524FAE0F840] [APT] [RunAsStdUser Task] (...) -- C:\Program Files (x86)\FREEzeFrog\bin\1.0.670.0\FREEzeFrogSA.exe 
O42 - Logiciel: FREEzeFrog - (.Pas de propriétaire.) [HKLM][64Bits] -- FREEzeFrogSA 
[HKCU\Software\AppDataLow\Software\PriceGong] 
[HKLM\Software\FREEzeFrog] 
[HKLM\Software\QuestScan] 
O43 - CFD: 13/07/2011 - 13:19:52 - [0] ----D- C:\Users\jib\AppData\Roaming\FREEzeFrog 
O43 - CFD: 13/07/2011 - 13:19:52 - [2009933] ----D- C:\Program Files (x86)\FREEzeFrog 
O43 - CFD: 13/07/2011 - 13:15:26 - [35787874] ----D- C:\Program Files (x86)\iLivid 
O69 - SBI: SearchScopes [HKCU] {4B8C28A7-A9BC-45F8-990D-21499EED643C} - (QuestScan) - http://www.questscan.com 
O69 - SBI: SearchScopes [HKCU] {67A2568C-7A0A-4EED-AECC-B5405DE63B64} - (QuestScan) - http://www.questscan.com 
O69 - SBI: SearchScopes [HKUS\.DEFAULT] {4B8C28A7-A9BC-45F8-990D-21499EED643C} - (QuestScan) - http://www.questscan.com 
O69 - SBI: SearchScopes [HKUS\S-1-5-18] {4B8C28A7-A9BC-45F8-990D-21499EED643C} - (QuestScan) - http://www.questscan.com 
[HKLM\Software\Classes\Interface\{01222E21-6BD0-4EB3-94F1-967EB09CCED5}] 
[HKLM\Software\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}] 
[HKLM\Software\Classes\Interface\{21BA420E-161C-413A-B21E-4E42AE1F4226}] 
[HKLM\Software\Classes\Wow6432Node\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}] 
[HKLM\Software\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}] 
[HKLM\Software\Classes\Interface\{33DDFC61-F531-4982-8C32-4212B7835D44}] 
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624f4-c5dd-4e1d-bdd0-1e9c9b7799cc}] 
[HKLM\Software\Classes\Interface\{453db0c5-f41c-4d97-8dd6-cc72ecd5f699}] 
[HKLM\Software\Classes\Interface\{477f210a-2a86-4666-9c4b-1189634d2c84}] 
[HKLM\Software\Classes\Interface\{4AFC07D0-59BB-46B8-B097-1A46E88EEF71}] 
[HKLM\Software\Classes\Interface\{6511ce4c-4722-40d0-ad3d-4afa2f50978a}] 
[HKLM\Software\Classes\Interface\{65A16874-2ED0-460E-A547-5FE2EC3A13A7}] 
[HKLM\Software\Classes\Interface\{71E02280-5212-45C3-B174-4D5A35DA254F}] 
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7f000001-db8e-f89c-2fec-49bf726f8c12}] 
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}] 
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}] 
[HKLM\Software\Classes\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB}] 
[HKLM\Software\Classes\Interface\{9bec9b38-bf39-4899-806e-a1c5dfeb60a2}] 
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9c8a3ca5-889e-4554-beec-ec0876e4e96a}] 
[HKLM\Software\Classes\AppID\{A01A3335-0C30-4312-A430-92356CC37A92}] 
[HKLM\Software\Wow6432Node\Classes\AppID\{A01A3335-0C30-4312-A430-92356CC37A92}] 
[HKLM\Software\Classes\Interface\{A9005ED5-4A1D-4606-A4DF-1A25E7D7B417}] 
[HKLM\Software\Classes\Interface\{aebf09e2-0c15-43c8-99bf-928c645d98a0}] 
[HKLM\Software\Classes\Interface\{b86d82bf-d39f-439a-a07c-43eddc6f6ea6}] 
[HKLM\Software\Classes\Interface\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082}] 
[HKLM\Software\Classes\Interface\{da6305b9-0869-4235-8c1d-533a65e639e5}] 
[HKLM\Software\Classes\Interface\{E25DA6D6-C365-46CF-ABAF-DC5893135D7A}] 
[HKLM\Software\Classes\Interface\{e6961c59-cfce-4ccd-b794-bc78db98413a}] 
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f9189560-573a-4fde-b055-ae7b0f4cf080}] 
[HKLM\Software\Classes\Interface\{ff871e51-2655-4d06-aed5-745962a96b32}] 
[HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF] 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF] 
[HKCU\Software\AppDataLow\Software\PriceGong] 
[HKLM\Software\Wow6432Node\QuestScan] 
C:\Users\jib\AppData\Roaming\FREEzeFrog 
C:\Users\jib\AppData\LocalLow\PriceGong 
C:\Program Files (x86)\FREEzeFrog 
C:\Windows\system32\Tasks\Scheduled Update for Ask Toolbar 
M2 - MFEP: prefs.js [jib - 22jiz7u4.default\{364d4e0c-543f-4b85-abe3-19551139da4f}] [] Softonic France Community Toolbar v3.5.0.12 (.Conduit Ltd..) 
R3 - URLSearchHook: Softonic France Toolbar [64Bits] - {364d4e0c-543f-4b85-abe3-19551139da4f} . (.Conduit Ltd. - Conduit Toolbar.) (5, 7, 2, 2) -- C:\Program Files (x86)\Softonic_France	bSoft.dll 
O2 - BHO: Softonic France Toolbar [64Bits] - {364d4e0c-543f-4b85-abe3-19551139da4f} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files (x86)\Softonic_France	bSoft.dll 
[MD5.00000000000000000000000000000000] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files (x86)\Ask.com\UpdateTask.exe (.not file.) 
[HKCU\Software\AppDataLow\Software\Conduit] 
[HKLM\Software\Classes\AppID\GIFAnimator.DLL] 
[HKLM\Software\Wow6432Node\Classes\AppID\GIFAnimator.DLL] 
[HKLM\Software\Classes\Interface\{6087829B-114F-42A1-A72B-B4AEDCEA4E5B}] 
[HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}] 
[HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}] 
[HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}] 
[HKCU\Software\AppDataLow\Software\Conduit] 
C:\Users\jib\AppData\LocalLow\Conduit 
C:\Users\jib\AppData\LocalLow\Softonic_France 
----------------------------------------------------------  
- Clique sur l'icone représentant la lettre H (« coller les lignes Helper »)  
- Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes  
- Clique sur le bouton « GO » pour le lancer le nettoyage 
- Copie/colle la totalité du rapport dans ta prochaine réponse 

Et redémarre le PC
  
Smart 
"Si tu n'as pas d'ambitions, tu t'installes au bord de la chute" (Kundera)

Belia83 · Answer

Et coucou Smart

Alors très bonne nouvelle ça à l'air de marcher très bien. Je te remercie bien et voici le rapport.

Rapport de ZHPFix 1.12.3344 par Nicolas Coolman, Update du 21/07/2011
Fichier d'export Registre : 
Run by jib at 23/07/2011 13:48:51
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Logiciel(s) ==========
ABSENT Software Key: FREEzeFrogSA

========== Processus mémoire ==========
SUPPRIME Reboot Memory Process: C:\Program Files (x86)\FREEzeFrog\bin\1.0.670.0\FREEzeFrogSA.exe
SUPPRIME Reboot Memory Process: C:\Windows\system32\Tasks\Scheduled Update for Ask Toolbar

========== Clé(s) du Registre ==========
SUPPRIME Key: HKCU\Software\AppDataLow\Software\PriceGong
ABSENT Key: HKLM\Software\FREEzeFrog
ABSENT Key: HKLM\Software\QuestScan
SUPPRIME Key: SearchScopes :{4B8C28A7-A9BC-45F8-990D-21499EED643C}
SUPPRIME Key: SearchScopes :{67A2568C-7A0A-4EED-AECC-B5405DE63B64}
SUPPRIME Key: HKLM\Software\Classes\Interface\{01222E21-6BD0-4EB3-94F1-967EB09CCED5}
SUPPRIME Key: HKLM\Software\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}
SUPPRIME Key: HKLM\Software\Classes\Interface\{21BA420E-161C-413A-B21E-4E42AE1F4226}
SUPPRIME Key: HKLM\Software\Classes\Wow6432Node\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}
ABSENT Key: HKLM\Software\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}
SUPPRIME Key: HKLM\Software\Classes\Interface\{33DDFC61-F531-4982-8C32-4212B7835D44}
SUPPRIME Key: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624f4-c5dd-4e1d-bdd0-1e9c9b7799cc}
SUPPRIME Key: HKLM\Software\Classes\Interface\{453db0c5-f41c-4d97-8dd6-cc72ecd5f699}
SUPPRIME Key: HKLM\Software\Classes\Interface\{477f210a-2a86-4666-9c4b-1189634d2c84}
SUPPRIME Key: HKLM\Software\Classes\Interface\{4AFC07D0-59BB-46B8-B097-1A46E88EEF71}
SUPPRIME Key: HKLM\Software\Classes\Interface\{6511ce4c-4722-40d0-ad3d-4afa2f50978a}
SUPPRIME Key: HKLM\Software\Classes\Interface\{65A16874-2ED0-460E-A547-5FE2EC3A13A7}
SUPPRIME Key: HKLM\Software\Classes\Interface\{71E02280-5212-45C3-B174-4D5A35DA254F}
SUPPRIME Key: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7f000001-db8e-f89c-2fec-49bf726f8c12}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}
SUPPRIME Key: HKLM\Software\Classes\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB}
SUPPRIME Key: HKLM\Software\Classes\Interface\{9bec9b38-bf39-4899-806e-a1c5dfeb60a2}
SUPPRIME Key: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9c8a3ca5-889e-4554-beec-ec0876e4e96a}
SUPPRIME Key: HKLM\Software\Classes\AppID\{A01A3335-0C30-4312-A430-92356CC37A92}
ABSENT Key: HKLM\Software\Wow6432Node\Classes\AppID\{A01A3335-0C30-4312-A430-92356CC37A92}
SUPPRIME Key: HKLM\Software\Classes\Interface\{A9005ED5-4A1D-4606-A4DF-1A25E7D7B417}
SUPPRIME Key: HKLM\Software\Classes\Interface\{aebf09e2-0c15-43c8-99bf-928c645d98a0}
SUPPRIME Key: HKLM\Software\Classes\Interface\{b86d82bf-d39f-439a-a07c-43eddc6f6ea6}
SUPPRIME Key: HKLM\Software\Classes\Interface\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082}
SUPPRIME Key: HKLM\Software\Classes\Interface\{da6305b9-0869-4235-8c1d-533a65e639e5}
SUPPRIME Key: HKLM\Software\Classes\Interface\{E25DA6D6-C365-46CF-ABAF-DC5893135D7A}
SUPPRIME Key: HKLM\Software\Classes\Interface\{e6961c59-cfce-4ccd-b794-bc78db98413a}
SUPPRIME Key: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f9189560-573a-4fde-b055-ae7b0f4cf080}
SUPPRIME Key: HKLM\Software\Classes\Interface\{ff871e51-2655-4d06-aed5-745962a96b32}
SUPPRIME Key: HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
SUPPRIME Key: HKLM\Software\Wow6432Node\QuestScan
ABSENT Key: CLSID BHO: {364d4e0c-543f-4b85-abe3-19551139da4f}
SUPPRIME Key: HKCU\Software\AppDataLow\Software\Conduit
SUPPRIME Key: HKLM\Software\Classes\AppID\GIFAnimator.DLL
ABSENT Key: HKLM\Software\Wow6432Node\Classes\AppID\GIFAnimator.DLL
SUPPRIME Key: HKLM\Software\Classes\Interface\{6087829B-114F-42A1-A72B-B4AEDCEA4E5B}
SUPPRIME Key: HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
SUPPRIME Key: HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
SUPPRIME Key: HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}

========== Valeur(s) du Registre ==========
SUPPRIME RunValue: ApnUpdater
SUPPRIME RunValue: FREEzeFrogSA
SUPPRIME URLSearchHook: {364d4e0c-543f-4b85-abe3-19551139da4f}

========== Préférences navigateur ==========
SUPPRIME Mozilla Pref: http://search.babylon.com/?babsrc=HP_ss&mntrId=0877667b0000000000001c4bd698de69&tlver=1.4.19.19&ss=1&affID=18026

========== Dossier(s) ==========
SUPPRIME Folder: C:\Users\jib\AppData\Roaming\Mozilla\Firefox\Profiles\22jiz7u4.default\extensions\ffox@bandoo.com
SUPPRIME Folder: C:\Users\jib\AppData\Roaming\FREEzeFrog
SUPPRIME Folder*: C:\Program Files (x86)\FREEzeFrog
SUPPRIME Folder*: C:\Program Files (x86)\iLivid
SUPPRIME Folder: c:\users\jib\appdata\locallow\pricegong
SUPPRIME Folder: C:\Users\jib\AppData\Roaming\Mozilla\Firefox\Profiles\22jiz7u4.default\extensions\{364d4e0c-543f-4b85-abe3-19551139da4f}
SUPPRIME Folder: c:\users\jib\appdata\locallow\conduit
SUPPRIME Folder: c:\users\jib\appdata\locallow\softonic_france

========== Fichier(s) ==========
ABSENT File: c:\program files (x86)\ask.com
SUPPRIME File: c:\program files (x86)\freezefrog\bin\1.0.670.0\freezefrogsa.exe
ABSENT Folder/File: c:\program files (x86)\freezefrog\bin\1.0.670.0\freezefrogsa.exe
ABSENT Folder/File: c:\users\jib\appdataoaming\freezefrog
SUPPRIME c:\program files (x86)\softonic_france	bsoft.dll

========== Tache planifiée ==========
SUPPRIME Task: RunAsStdUser Task
SUPPRIME Task: Scheduled Update for Ask Toolbar


========== Récapitulatif ==========
2 : Processus mémoire
46 : Clé(s) du Registre
3 : Valeur(s) du Registre
8 : Dossier(s)
5 : Fichier(s)
1 : Logiciel(s)
1 : Préférences navigateur
2 : Tache planifiée


========== Chemin du fichier rapport ==========
C:\Program Files (x86)\ZHPDiag\ZHPFixReport.txt



End of the scan in 01mn 45s


Belia

Smart91 · Answer

Redémarre le PC.
Relance ZHPDiag, clique sur la flèche verte ppour installer ma lise à jour, refais un scan et poste le rapport via cijoint

Smart

Belia83 · Answer

Alors, J'ai bien redémarrer le PC, relancer ZHPDiag fait le scan mais impossible de poster sur cijoin, car ils ne veulent plus suite à des abus répétés. 
Le voilà:

Rapport de ZHPDiag v1.27.2424 par Nicolas Coolman, Update du 22/07/2011
Run by jib at 24/07/2011 18:02:31
Web site :  http://www.premiumorange.com/zeb-help-process/zhpdiag.html


---\ Web Browser
MSIE: Internet Explorer v8.0.7601.17514
MFIE: Mozilla Firefox 5.0 v (Defaut)

---\ System Information
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
~ Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 64 Bits
~ Boot mode: ~ Normal (Normal boot)
Total RAM: 4095 MB (69% free)
~ System Restore: Activé (Enable)
System drive C: has 34 GB (46%) free of 75 GB

---\ Logged in mode
~ Computer Name: JIB-PC
~ User Name: jib
~ All Users Names: jib, HomeGroupUser$, Administrateur, 
~ Unselected Option: O45,O61,O62,O65,O66,O82
~ Logged in as Administrator

---\ Environnement Variables
~ %AppData%=C:\Users\jib\AppData\Roaming\
~ %Desktop%=C:\Users\jib\Desktop\
~ %Favorites%=C:\Users\jib\Favorites\
~ %LocalAppData%=C:\Users\jib\AppData\Local\
~ %StartMenu%=C:\Users\jib\AppData\Roaming\Microsoft\Windows\Start Menu\

---\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 34 Go of 75 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 198 Go of 209 Go)
E:\ CD-ROM drive (Not Inserted)



---\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoStartMenuSubFolder: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoResolveSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc :  OK



---\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.30/04/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.DD81D91FF3B0763C392422865C9AC12E] - (....) (.14/07/2009 - 02:39:31.) -- C:\Windows\system32undll32.exe [45568]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\system32\Wininit.exe [129024]
[MD5.2DCA688631F71722B0B5E57F526BB2EB] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.15/06/2011 - 23:08:29.) -- C:\Windows\system32\wininet.dll [1188864]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.24/06/2011 - 14:25:30.) -- C:\Windows\system32\Winlogon.exe [390656]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\drivers\atapi.sys [24128]
[MD5.A2F74975097F52A00745F9637451FDD8] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.30/04/2011 - 07:41:34.) -- C:\Windows\system32\drivers
tfs.sys [1659776]



---\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/360
~ Mes musiques (My Musics) : 9/902
~ Mes Favoris (My Favorites) : 2/22
~ Mes Documents (My Documents) : 1/4
~ Mon Bureau (My Desktop) : 1/6
~ Menu demarrer (Programs) : 6/30



---\ Processus lancés
[MD5.A2A262FBC053861C778EA512328E6C10] - (.Pas de propriétaire - Wireless Console 3.) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe   [1593344]
[MD5.F4DCD4912B185C3AAEB92A7040832AD1] - (.Pas de propriétaire - ALU.) -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe   [51768]
[MD5.1971D838A88F58D59543E9B3CDA5FFC4] - (.ASUS - SmartLogon Application.) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe   [305720]
[MD5.BA2B4E07561CF877F61B0EEED654BC96] - (...) -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe   [53888]
[MD5.5AEBF6FA9805C9101220AA4FB4FA17E7] - (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe   [105016]
[MD5.32F43BE36AAC4E10C88EC24B34770C0D] - (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe   [6859392]
[MD5.5666955DC9FD455A003D86A21E0483A9] - (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe   [170624]
[MD5.53D96678FB89F056D5285101481297D9] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe   [421160]
[MD5.13E7CFE8E269ED15E7FC9C3EBBCB7E2B] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe   [254696]
[MD5.E7CF222185411C6A3E68273C452B3283] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe   [3493720]
[MD5.452FA961163EF4AEE4815796A13AB2CF] - (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe   [35696]
[MD5.3ECCDD3FE310DD8F82D085447089ADB0] - (.ASUSTek Computer Inc. - ADSMTray.) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe   [272952]
[MD5.37DEB76A2CF005841C4E45DE2B94D84F] - (.ASUS - AsScrPro.) -- C:\Windows\AsScrPro.exe   [3058304]
[MD5.57B4D34232852BFE4453BE571DF90D21] - (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe   [103720]
[MD5.0E8A6A1BC5B08EA29E363EE5E06F7ECB] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [658944]



---\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Users\jib\AppData\Roaming\Mozilla\Firefox\Profiles\22jiz7u4.default\prefs.js
M3 - MFPP: Plugins - [jib] -- C:\Users\jib\AppData\Roaming\Mozilla\Firefox\Profiles\22jiz7u4.default\searchplugins\facebook.xml
M2 - MFEP: prefs.js [jib - 22jiz7u4.default\{3112ca9c-de6d-4884-a869-9855de68056c}] [] Google Toolbar for Firefox v7.1.20110512W (.Google Inc..)



---\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
R0 - HKUS\S-1-5-21-74153979-4069849450-1168929862-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (8.00.7600.16385 (win7_rtm.090713-1255)) -- C:\Windows\System32\ieframe.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1



---\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll



---\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe



---\ Browser Helper Objects de navigateur (O2)
O2 - BHO: avast! WebRep [64Bits] - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
O2 - BHO: Windows Live Family Safety Browser Helper [64Bits] - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} . (.Microsoft Corporation - Family Safety Browser Helper Object Library.) -- C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: AcroIEHelperStub [64Bits] - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Softonic France Toolbar [64Bits] - {364d4e0c-543f-4b85-abe3-19551139da4f} . (...) -- C:\Program Files (x86)\Softonic_France	bSoft.dll (.not file.)
O2 - BHO: (no name) [64Bits] - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
O2 - BHO: Search Helper [64Bits] - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: avast! WebRep [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper [64Bits] - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll



---\ Internet Explorer Toolbars (O3)
O3 - Toolbar: avast! WebRep [64Bits] - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll



---\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [ASUS WebStorage] . (...) -- C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe 
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\Windows\system32\NvCpl.dll 
O4 - HKLM\..\Run: [ETDWare] . (.ELAN Microelectronic Corp. - ETD Control Center.) -- C:\Program Files\Elantech\ETDCtrl.exe 
O4 - HKLM\..\Run: [AmIcoSinglun64] . (.AlcorMicro Co., Ltd. - Single LUN Icon Utility for VID 058F PID 63.) -- C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe 
O4 - HKCU\..\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files (x86)\Samsung\Kies\\KiesTrayAgent.exe 
O4 - HKCU\..\Run: [BitComet] C:\Program Files (x86)\BitComet\BitComet.exe (.not file.) 
O4 - HKLM\..\Wow6432Node\Run: [UpdateLBPShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe 
O4 - HKLM\..\Wow6432Node\Run: [UpdateP2GoShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe 
O4 - HKLM\..\Wow6432Node\Run: [HControlUser] . (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe 
O4 - HKLM\..\Wow6432Node\Run: [ATKOSD2] . (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe 
O4 - HKLM\..\Wow6432Node\Run: [ATKMEDIA] . (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe 
O4 - HKLM\..\Wow6432Node\Run: [Setwallpaper] c:\programdata\SetWallpaper.cmd (.not file.) 
O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe 
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe 
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe 
O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe 
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-21-74153979-4069849450-1168929862-1000\..\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files (x86)\Samsung\Kies\\KiesTrayAgent.exe 
O4 - HKUS\S-1-5-21-74153979-4069849450-1168929862-1000\..\Run: [BitComet] C:\Program Files (x86)\BitComet\BitComet.exe (.not file.) 
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FancyStart daemon.lnk . (...)  -- C:\Windows\Installer\{F0DF4513-3C4C-4EB8-8012-2C5F70AF3988}\_A1DDD39913A1970387B7B3.exe
O4 - Global Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRS Premium Sound.lnk . (.Acresso Software Inc..)  -- C:\Windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe



---\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\jib\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\jib\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\jib\Desktop\AD-R.lnk . (...)  -- C:\Program Files (x86)\Ad-Remover\main.exe
O4 - Global Startup: C:\Users\jib\Desktop\EZ Vinyl Converter.lnk . (.MixMeister Technology LLC.)  -- C:\Program Files (x86)\MixMeister EZ Vinyl Converter\EZVinylConverter.exe
O4 - Global Startup: C:\Users\jib\Desktop\Téléchargements - Raccourci.lnk . (...)  -- D:\Téléchargements
O4 - Global Startup: C:\Users\jib\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\jib\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.)  -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Users\jib\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Picasa 3.lnk . (.Google Inc..)  -- C:\Program Files (x86)\Google\Picasa3\Picasa3.exe



---\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: Add to Google Photos Screensa&ver - (.not file.) - C:\Windows\system32\GPhotos.scr
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~2\MICROS~1\Office12\EXCEL.exe



---\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32
apinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll



---\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{A8030063-B766-4451-B616-DC7780E9749D}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{AA9CB36B-91C1-46B9-ABAF-C3585550A2AE}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{A8030063-B766-4451-B616-DC7780E9749D}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{AA9CB36B-91C1-46B9-ABAF-C3585550A2AE}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{A8030063-B766-4451-B616-DC7780E9749D}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{AA9CB36B-91C1-46B9-ABAF-C3585550A2AE}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1



---\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.



---\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: AFBAgent (AFBAgent) . (.ASUSTeK Computer Inc. - ASUS FastBoot.) - C:\Windows\system32\FBAgent.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) . (.ASUS - ASLDR Service.) - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) . (.Pas de propriétaire - GFNEXSrv.) - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: Device Error Recovery Service (dgdersvc) . (.Devguru Co., Ltd. - Device Error Recovery SDK(x86).) - C:\Windows\SysWOW64\dgdersvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 188.8.) - C:\Windows\system32
vvsvc.exe



---\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)



---\ Tâches planifiées en automatique (O39)
[MD5.A6C20CBD1B10FEF25DAA4F1CF9FBC4FF] [APT] [ACMON] (.ATK.) -- C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
[MD5.F4DCD4912B185C3AAEB92A7040832AD1] [APT] [ASUS Live Update] (...) -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
[MD5.994D67F895FAD6060056DD510303C3C5] [APT] [ASUS P4G] (.ATK.) -- C:\Program Files\P4G\BatteryLife.exe
[MD5.1971D838A88F58D59543E9B3CDA5FFC4] [APT] [ASUS SmartLogon Console Sensor] (.ASUS.) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
[MD5.BA2B4E07561CF877F61B0EEED654BC96] [APT] [ASUSControlDeck] (...) -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
[MD5.6FB8AF00F473A0BF98EEC8C05A8264B3] [APT] [P4GIntlCtrl] (.TODO: <Company name>.) -- C:\Program Files\P4G\IntlCtrl.exe
[MD5.A2A262FBC053861C778EA512328E6C10] [APT] [WC3] (...) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
[MD5.7B43567B4C32AD7ADED537CD3B1342B9] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe



---\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver:  (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver:  (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS
etbios.sys
O41 - Driver: C:\Windows\system32\drivers
etbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS
etbt.sys
O41 - Driver: C:\Windows\system32\drivers
siproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers
siproxy.sys
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERSdbss.sys
O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\driversdpencdd.sys
O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\driversdprefmp.sys
O41 - Driver: C:\Windows\system32	cpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS	dx.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers	ermdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver:  (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\system32ascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver:  (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys



---\ Logiciels installés (O42)
O42 - Logiciel:  Update for Microsoft Office 2007 (KB2508958) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}
O42 - Logiciel: ASUS AI Recovery - (.ASUS.) [HKLM][64Bits] -- {06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}
O42 - Logiciel: ASUS Data Security Manager - (.ASUS.) [HKLM][64Bits] -- {FA2092C5-7979-412D-A962-6485274AE1EE}
O42 - Logiciel: ASUS FancyStart - (.ASUSTeK Computer Inc..) [HKLM][64Bits] -- {F0DF4513-3C4C-4EB8-8012-2C5F70AF3988}
O42 - Logiciel: ASUS LifeFrame3 - (.ASUS.) [HKLM][64Bits] -- {1DBD1F12-ED93-49C0-A7CC-56CBDE488158}
O42 - Logiciel: ASUS Live Update - (.ASUS.) [HKLM][64Bits] -- {E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}
O42 - Logiciel: ASUS MultiFrame - (.ASUS.) [HKLM][64Bits] -- {9D48531D-2135-49FC-BC29-ACCDA5396A76}
O42 - Logiciel: ASUS Power4Gear Hybrid - (.ASUS.) [HKLM] -- {91EFE3A1-585E-4F66-B5F6-F118F56C4C47}
O42 - Logiciel: ASUS SmartLogon - (.ASUS.) [HKLM][64Bits] -- {64452561-169F-4A36-A2FF-B5E118EC65F5}
O42 - Logiciel: ASUS Splendid Video Enhancement Technology - (.ASUS.) [HKLM][64Bits] -- {0969AF05-4FF6-4C00-9406-43599238DE0D}
O42 - Logiciel: ASUS USB2.0 UVC VGA WebCam - (.Sonix.) [HKLM] -- ASUS USB2.0 UVC VGA WebCam
O42 - Logiciel: ASUS Virtual Camera - (.asus.) [HKLM][64Bits] -- {EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}
O42 - Logiciel: ASUS WebStorage - (.eCareme Technologies, Inc..) [HKLM] -- ASUS WebStorage
O42 - Logiciel: ASUS_Screensaver - (.Pas de propriétaire.) [HKLM][64Bits] -- ASUS_Screensaver
O42 - Logiciel: ATK Generic Function Service - (.ATK.) [HKLM][64Bits] -- {D3D54F3E-C5C3-443D-978F-87A72E5616E8}
O42 - Logiciel: ATK Hotkey - (.ASUS.) [HKLM][64Bits] -- {7C05592D-424B-46CB-B505-E0013E8E75C9}
O42 - Logiciel: ATK Media - (.ASUS.) [HKLM][64Bits] -- {D1E5870E-E3E5-4475-98A6-ADD614524ADF}
O42 - Logiciel: ATKOSD2 - (.ASUS.) [HKLM][64Bits] -- {3B05F2FB-745B-4012-ADF2-439F36B2E70B}
O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {A5B48A19-F319-6BFB-82DE-A18ED1087221}
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM][64Bits] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM][64Bits] -- {A2BCA9F1-566C-4805-97D1-7FDC93386723}
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader 9.1 MUI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-FFFF-7B44-A91000000001}
O42 - Logiciel: Alcor Micro USB Card Reader - (.Alcor Micro Corp..) [HKLM][64Bits] -- InstallShield_{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {B3575D00-27EF-49C2-B9E0-14B3D954E992}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {439760BC-7737-4386-9B1D-A90A3E8A22EA}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {6956856F-B6B3-4BE0-BA0B-8F495BE32033}
O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {0E543634-7E25-4B8F-8D5B-97880E5E5088}
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: Choice Guard - (.Microsoft Corporation.) [HKLM][64Bits] -- {8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
O42 - Logiciel: ControlDeck - (.ASUS.) [HKLM][64Bits] -- {5B65EF64-1DFA-414A-8C94-7BB726158E21}
O42 - Logiciel: CyberLink LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}
O42 - Logiciel: CyberLink LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243}
O42 - Logiciel: CyberLink Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: CyberLink Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- {40BF1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: ETDWare PS/2-x64 7.0.5.7_WHQL - (.Pas de propriétaire.) [HKLM] -- Elantech
O42 - Logiciel: EZ Vinyl Converter by MixMeister 1.0.6 - (.MixMeister Technology LLC.) [HKLM][64Bits] -- EZ Vinyl Converter by MixMeister_is1
O42 - Logiciel: FREEzeFrog - (.Pas de propriétaire.) [HKLM][64Bits] -- FREEzeFrogSA
O42 - Logiciel: Fast Boot - (.ASUS.) [HKLM] -- {13F4A7F3-EABC-4261-AF6B-1317777F0755}
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {43563ACB-371B-4C58-8979-B192B390424C}
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- WinLiveSuite_Wave3
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {3CCB732A-E472-4CF9-B1EE-F18365341FE0}
O42 - Logiciel: Java(TM) 6 Update 26 - (.Sun Microsystems, Inc..) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83216018FF}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {4AB8B41B-3AF1-46BE-99B0-0ACD3B300C0A}
O42 - Logiciel: Kies - (.Nom de votre société.) [HKLM][64Bits] -- InstallShield_{D6CD26FD-CD7F-4C86-96A3-EEBFABE5FE47}
O42 - Logiciel: Kies - (.Nom de votre société.) [HKLM][64Bits] -- {D6CD26FD-CD7F-4C86-96A3-EEBFABE5FE47}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: MSXML 4.0 SP3 Parser (KB973685) - (.Microsoft Corporation.) [HKLM][64Bits] -- {859DFA95-E4A6-48CD-B88E-A3E483E89B44}
O42 - Logiciel: Macromedia Flash Player 8 - (.Macromedia.) [HKLM][64Bits] -- ShockwaveFlash
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-002A-0000-1000-0000000FF1CE}_PROPLUS_{E64BA721-2310-4B55-BE5A-2925F9706192}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-002A-040C-1000-0000000FF1CE}_PROPLUS_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-006E-040C-0000-0000000FF1CE}_PROPLUS_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0015-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0016-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0044-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Office 64-bit Components 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002A-0000-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Outlook Connector - (.Microsoft Corporation.) [HKLM][64Bits] -- {95120000-0120-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001A-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0018-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- PROPLUS
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0401-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0413-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0407-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001F-0C0A-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-002C-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0401-0000-0000000FF1CE}_PROPLUS_{14809F99-C601-4D4A-9391-F1E8FAA964C5}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{A0516415-ED61-419A-981D-93596DA74165}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{F580DDD5-8D37-4998-968E-EBB76BB86787}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0413-0000-0000000FF1CE}_PROPLUS_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM][64Bits] -- {90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{187308AB-5FA7-4F14-9AB9-D290383A10D9}
O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0019-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Shared 64-bit MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002A-040C-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-006E-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-001B-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM][64Bits] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM][64Bits] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5}
O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM][64Bits] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 - (.Microsoft Corporation.) [HKLM][64Bits] -- {86CE85E6-DBAC-3FFD-B977-E4B79F83C909}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM][64Bits] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F}
O42 - Logiciel: Mozilla Firefox 5.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 5.0 (x86 fr)
O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers
O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM][64Bits] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}
O42 - Logiciel: PC Connectivity Solution - (.Nokia.) [HKLM][64Bits] -- {34610DE0-3C13-42CA-8E32-01FFA38AB6E8}
O42 - Logiciel: Package de pilotes Windows - Nokia pccsmcfd  (08/22/2008 7.0.0.0) - (.Nokia.) [HKLM] -- FCEC33AD40CEA5E0FC4CEE6E42041A0DA189652D
O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM][64Bits] -- Picasa 3
O42 - Logiciel: ProtectDisc Driver, Version 11 - (.ProtectDisc Software GmbH.) [HKLM][64Bits] -- ProtectDisc Driver 11
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM][64Bits] -- {57752979-A1C9-4C02-856B-FBB27AC4E02C}
O42 - Logiciel: Realtek Ethernet Controller  Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: SAMSUNG USB Driver for Mobile Phones - (.SAMSUNG Electronics Co., Ltd..) [HKLM] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44}
O42 - Logiciel: SRS Premium Sound Control Panel - (.SRS Labs, Inc..) [HKLM] -- {E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288621) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5C497F0B-2061-4CC9-A61C-6B45B867354D}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288931) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CD769337-C8AC-46DB-A7DC-643E50089263}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2345043) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{536FB502-775F-4494-BACE-C02CC90B7A5B}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2509488) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{AD0DE453-0804-4495-9C91-33D0F9AA5463}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB976321) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{7F207DCA-3399-40CB-A968-6E5991B1421A}
O42 - Logiciel: Security Update for Microsoft Office 2007 System (KB2541012) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CD907315-705A-4475-A1A0-2A1245803E4D}
O42 - Logiciel: Security Update for Microsoft Office Access 2007 (KB979440) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1142CCEC-ACA9-484B-BA90-C3A5CA1988C5}
O42 - Logiciel: Security Update for Microsoft Office Access 2007 (KB979440) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5A4E43D5-858F-49BD-BA72-8F30E1793060}
O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2541007) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{A0173254-F442-4D04-9154-43FA157B83D0}
O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB2510061) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{5D930261-AA5B-48D1-931F-425C9D767490}
O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1109D0B3-EFA3-4553-AAED-4C3E9AD130E8}
O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}
O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2535818) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{8588DD11-6BD7-4400-B55C-DD5AB74B43E1}
O42 - Logiciel: Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{D75E6D0C-BADF-4F41-98B2-0C0F02C15062}
O42 - Logiciel: Security Update for Microsoft Office Publisher 2007 (KB2284697) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3A4CDE54-2403-483D-8D9A-15E3264410DF}
O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2344993) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}
O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3D019598-7B59-447A-80AE-815B703B84FF}
O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{FCD742B9-7A55-44BC-A776-F795F21FEDDC}
O42 - Logiciel: Softonic France Toolbar - (.Softonic France.) [HKLM][64Bits] -- Softonic_France Toolbar
O42 - Logiciel: Update for 2007 Microsoft Office System (KB2284654) - (.Microsoft.) [HKLM][64Bits] -- {90120000-002A-0000-1000-0000000FF1CE}_PROPLUS_{FB166E7C-8AA6-48C8-B726-1F25BEE7825A}
O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}
O42 - Logiciel: Update for Microsoft Office 2007 System (KB2539530) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B4CEEAE-AA88-490C-BCB2-AAC3421981A4}
O42 - Logiciel: Update for Microsoft Office Outlook 2007 (KB2509470) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{1365864D-4C58-489D-9982-844D75691CCC}
O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (KB2553975) - (.Microsoft.) [HKLM][64Bits] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{59D8F1FE-7B08-4F0E-840C-D1BF93D22A6C}
O42 - Logiciel: VLC media player 1.1.9 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player
O42 - Logiciel: WinFlash - (.ASUS.) [HKLM][64Bits] -- {8F21291E-0444-4B1D-B9F9-4370A73E346D}
O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM][64Bits] -- {01523985-2098-43AF-9C97-12B07BE02A9B}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM][64Bits] -- {F69E83CF-B440-43F8-89E6-6EA80712109B}
O42 - Logiciel: Windows Live Contrôle parental - (.Microsoft Corporation.) [HKLM] -- {CE50C1E2-10AF-400F-A53A-4A3E0AD486B2}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM][64Bits] -- {63DC2DA0-2A6C-4C38-9249-B75395458657}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {059C042E-796A-4ACC-A81A-ECC2010BB78C}
O42 - Logiciel: Windows Live Sync - (.Microsoft Corporation.) [HKLM][64Bits] -- {67D0313C-4F15-437D-9A2D-C1564088A26A}
O42 - Logiciel: Windows Live Toolbar - (.Microsoft Corporation.) [HKLM][64Bits] -- {915809D6-1F93-45F2-9699-5F1DA64DC24B}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {2231CE39-B963-4B9D-823A-F412ECA637B1}
O42 - Logiciel: Wireless Console 3 - (.ASUS.) [HKLM][64Bits] -- {20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}
O42 - Logiciel: avast! Free Antivirus - (.AVAST Software.) [HKLM][64Bits] -- avast
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {28D73032-5DAA-4F83-B154-85105DBCCB92}

---\ HKCU & HKLM Software Keys
[HKCU\Software\ALWIL Software]
[HKCU\Software\APN]
[HKCU\Software\ATK0100]
[HKCU\Software\AVAST Software]
[HKCU\Software\Ad-Remover]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Google]
[HKCU\Software\AppDataLow\Software\MarkAny]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software\Monitored]
[HKCU\Software\AppDataLow\Software\Softonic_France]
[HKCU\Software\AppDataLow\Software\settings]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\BitComet]
[HKCU\Software\CDDB]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CyberLink]
[HKCU\Software\ECAREME]
[HKCU\Software\Elantech]
[HKCU\Software\Google]
[HKCU\Software\JavaSoft]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Macromedia]
[HKCU\Software\Magnet]
[HKCU\Software\MimarSinan]
[HKCU\Software\Mozilla]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Oberon Media]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Protect Software GmbH]
[HKCU\Software\Realtek]
[HKCU\Software\RegisteredApplications]
[HKCU\Software\Samsung]
[HKCU\Software\Softonic]
[HKCU\Software\Trolltech]
[HKCU\Software\Vodafone]
[HKCU\Software\Wow6432Node]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\freezefrogsa]
[HKLM\Software\ALWIL Software]
[HKLM\Software\APN]
[HKLM\Software\ASUS]
[HKLM\Software\ATI Technologies]
[HKLM\Software\ATK0100]
[HKLM\Software\ATK]
[HKLM\Software\AVAST Software]
[HKLM\Software\Adobe]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Arobas Music]
[HKLM\Software\AsLdr]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\CoreSecurity]
[HKLM\Software\CyberLink]
[HKLM\Software\DivXNetworks]
[HKLM\Software\ECAREME]
[HKLM\Software\FREEzeFrog]
[HKLM\Software\GEAR Software]
[HKLM\Software\Google]
[HKLM\Software\InstallShield]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\Macromedia]
[HKLM\Software\MimarSinan]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\ODBC]
[HKLM\Software\Oberon Media]
[HKLM\Software\PC Connectivity Solution]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SAMSUNG]
[HKLM\Software\SONIX]
[HKLM\Software\SRS Labs]
[HKLM\Software\Softonic_France]
[HKLM\Software\Sonic]
[HKLM\Software\Thomson]
[HKLM\Software\Trolltech]
[HKLM\Software\VideoLAN]
[HKLM\Software\Volatile]
[HKLM\Software\Windows]
[HKLM\Software\Wow6432Node]
[HKLM\Software\mozilla.org]



---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 02/06/2010 - 04:00:12 - [0] ----D- C:\Program Files\Alwil Software
O43 - CFD: 08/04/2010 - 13:07:56 - [1498241] ----D- C:\Program Files\ASUS
O43 - CFD: 08/04/2010 - 13:03:34 - [464496] ----D- C:\Program Files\ATKGFNEX
O43 - CFD: 21/07/2011 - 23:29:56 - [169355298] ----D- C:\Program Files\AVAST Software
O43 - CFD: 10/06/2011 - 10:55:06 - [195922] ----D- C:\Program Files\Bonjour
O43 - CFD: 04/11/2010 - 23:18:18 - [6175224] ----D- C:\Program Files\CCleaner
O43 - CFD: 30/07/2010 - 07:03:54 - [77997047] ----D- C:\Program Files\Common Files
O43 - CFD: 21/11/2010 - 17:39:32 - [930272] ----D- C:\Program Files\DIFX
O43 - CFD: 28/06/2011 - 10:59:34 - [90256916] ----D- C:\Program Files\DVD Maker
O43 - CFD: 08/04/2010 - 13:05:36 - [7103232] ----D- C:\Program Files\Elantech
O43 - CFD: 02/06/2010 - 04:42:12 - [0] ----D- C:\Program Files\Google
O43 - CFD: 28/06/2011 - 10:59:34 - [5183665] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 10/06/2011 - 10:57:12 - [1939563] ----D- C:\Program Files\iPod
O43 - CFD: 10/06/2011 - 10:57:42 - [2345448] ----D- C:\Program Files\iTunes
O43 - CFD: 14/07/2009 - 09:45:56 - [149237810] ----D- C:\Program Files\Microsoft Games
O43 - CFD: 09/06/2010 - 21:44:28 - [1141526] ----D- C:\Program Files\Microsoft Office
O43 - CFD: 14/07/2009 - 07:32:40 - [25757] ----D- C:\Program Files\MSBuild
O43 - CFD: 08/04/2010 - 13:05:54 - [11327783] ----D- C:\Program Files\P4G
O43 - CFD: 08/04/2010 - 13:04:30 - [10748512] ----D- C:\Program Files\Realtek
O43 - CFD: 14/07/2009 - 07:32:40 - [36813993] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 21/11/2010 - 17:39:58 - [32026742] ----D- C:\Program Files\SAMSUNG
O43 - CFD: 08/04/2010 - 13:04:48 - [1963261] ----D- C:\Program Files\SRS Labs
O43 - CFD: 14/07/2009 - 07:09:28 - [0] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 28/06/2011 - 10:59:32 - [4039680] ----D- C:\Program Files\Windows Defender
O43 - CFD: 28/06/2011 - 10:59:32 - [9224824] ----D- C:\Program Files\Windows Journal
O43 - CFD: 01/06/2010 - 05:14:10 - [194510] ----D- C:\Program Files\Windows Live
O43 - CFD: 28/06/2011 - 10:59:34 - [6667776] ----D- C:\Program Files\Windows Mail
O43 - CFD: 28/06/2011 - 10:59:34 - [7687085] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 14/07/2009 - 07:32:40 - [12627636] ----D- C:\Program Files\Windows NT
O43 - CFD: 28/06/2011 - 10:59:32 - [5516056] ----D- C:\Program Files\Windows Photo Viewer
O43 - CFD: 28/06/2011 - 10:59:34 - [244736] ----D- C:\Program Files\Windows Portable Devices
O43 - CFD: 28/06/2011 - 10:59:34 - [11521872] ----D- C:\Program Files\Windows Sidebar
O43 - CFD: 30/07/2010 - 07:03:54 - [6580905] ----D- C:\Program Files\Common Files\Apple
O43 - CFD: 09/06/2010 - 21:46:08 - [58610381] ----D- C:\Program Files\Common Files\Microsoft Shared
O43 - CFD: 14/07/2009 - 05:20:10 - [2702] ----D- C:\Program Files\Common Files\Services
O43 - CFD: 14/07/2009 - 05:20:10 - [608768] ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 19/06/2010 - 11:29:40 - [12194291] ----D- C:\Program Files\Common Files\System
O43 - CFD: 08/04/2010 - 12:56:48 - [767] ----D- C:\ProgramData\Adobe
O43 - CFD: 21/07/2011 - 23:29:56 - [29576320] ----D- C:\ProgramData\Alwil Software
O43 - CFD: 08/04/2010 - 13:05:48 - [495] ----D- C:\ProgramData\AmUStor
O43 - CFD: 01/07/2010 - 11:31:24 - [101819904] ----D- C:\ProgramData\Apple
O43 - CFD: 10/06/2011 - 10:57:10 - [92481832] ----D- C:\ProgramData\Apple Computer
O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Application Data
O43 - CFD: 25/09/2010 - 18:15:02 - [44704] ----D- C:\ProgramData\CyberLink
O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Documents
O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Favorites
O43 - CFD: 23/07/2011 - 13:38:26 - [1407408] ----D- C:\ProgramData\FREEzeFrogSA
O43 - CFD: 18/11/2010 - 16:48:16 - [0] ----D- C:\ProgramData\Google
O43 - CFD: 08/06/2010 - 23:32:16 - [0] ----D- C:\ProgramData\InstallShield
O43 - CFD: 11/06/2010 - 08:43:54 - [186274433] -S--D- C:\ProgramData\Microsoft
O43 - CFD: 13/07/2011 - 14:38:54 - [241722] ----D- C:\ProgramData\Microsoft Help
O43 - CFD: 08/04/2010 - 13:02:58 - [247299] ----D- C:\ProgramData\NVIDIA
O43 - CFD: 27/02/2011 - 10:07:08 - [2186] ----D- C:\ProgramData\P4G
O43 - CFD: 02/06/2010 - 04:42:12 - [1025] ----D- C:\ProgramData\Partner
O43 - CFD: 21/11/2010 - 17:42:54 - [0] ----D- C:\ProgramData\PC Suite
O43 - CFD: 21/11/2010 - 17:39:10 - [3432711] ----D- C:\ProgramData\Samsung
O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Start Menu
O43 - CFD: 28/11/2010 - 16:05:58 - [259] ----D- C:\ProgramData\Sun
O43 - CFD: 01/06/2010 - 05:30:26 - [143502] ---AD- C:\ProgramData\Temp
O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Templates
O43 - CFD: 08/06/2010 - 23:31:34 - [142] ----D- C:\ProgramData\Vodafone
O43 - CFD: 30/07/2010 - 07:06:04 - [893135] ----D- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
O43 - CFD: 02/06/2010 - 04:14:46 - [20092782] ----D- C:\Users\jib\AppData\Roaming\Adobe
O43 - CFD: 23/10/2010 - 13:06:06 - [569681] ----D- C:\Users\jib\AppData\Roaming\Apple Computer
O43 - CFD: 02/06/2010 - 03:50:34 - [40960] ----D- C:\Users\jib\AppData\Roaming\Asus WebStorage
O43 - CFD: 22/07/2011 - 10:29:56 - [992726] ----D- C:\Users\jib\AppData\Roaming\BitComet
O43 - CFD: 28/11/2010 - 16:23:54 - [0] ----D- C:\Users\jib\AppData\Roaming\BitSpirit
O43 - CFD: 02/06/2010 - 04:14:26 - [662] ----D- C:\Users\jib\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
O43 - CFD: 07/06/2010 - 22:27:40 - [0] ----D- C:\Users\jib\AppData\Roaming\CyberLink
O43 - CFD: 02/06/2010 - 04:12:40 - [0] ----D- C:\Users\jib\AppData\Roaming\Google
O43 - CFD: 01/06/2010 - 05:18:00 - [0] ----D- C:\Users\jib\AppData\Roaming\Identities
O43 - CFD: 02/06/2010 - 03:40:12 - [42606] ----D- C:\Users\jib\AppData\Roaming\Macromedia
O43 - CFD: 14/07/2009 - 09:44:40 - [0] ----D- C:\Users\jib\AppData\Roaming\Media Center Programs
O43 - CFD: 27/06/2011 - 20:58:16 - [2280236] -S--D- C:\Users\jib\AppData\Roaming\Microsoft
O43 - CFD: 02/06/2010 - 04:06:46 - [21820683] ----D- C:\Users\jib\AppData\Roaming\Mozilla
O43 - CFD: 21/11/2010 - 17:42:52 - [354] ----D- C:\Users\jib\AppData\Roaming\PC Suite
O43 - CFD: 29/07/2010 - 10:07:04 - [3103704] ----D- C:\Users\jib\AppData\Roaming\ProtectDisc
O43 - CFD: 21/11/2010 - 17:35:30 - [61992873] ----D- C:\Users\jib\AppData\Roaming\Samsung
O43 - CFD: 18/07/2011 - 16:39:40 - [1567204] ----D- C:\Users\jib\AppData\Roaming\vlc
O43 - CFD: 08/06/2010 - 23:32:18 - [408712] ----D- C:\Users\jib\AppData\Roaming\Vodafone
O43 - CFD: 02/06/2010 - 04:15:04 - [23638394] ----D- C:\Users\jib\AppData\Local\Adobe
O43 - CFD: 01/07/2010 - 11:31:26 - [0] ----D- C:\Users\jib\AppData\Local\Apple
O43 - CFD: 01/07/2010 - 11:32:52 - [17952665] ----D- C:\Users\jib\AppData\Local\Apple Computer
O43 - CFD: 01/06/2010 - 05:06:44 - [0] -SH-D- C:\Users\jib\AppData\Local\Application Data
O43 - CFD: 21/06/2011 - 10:12:42 - [0] ----D- C:\Users\jib\AppData\Local\Diagnostics
O43 - CFD: 08/05/2011 - 12:32:36 - [0] ----D- C:\Users\jib\AppData\Local\ElevatedDiagnostics
O43 - CFD: 21/07/2011 - 23:33:40 - [274542840] ----D- C:\Users\jib\AppData\Local\Google
O43 - CFD: 01/06/2010 - 05:06:44 - [0] -SH-D- C:\Users\jib\AppData\Local\Historique
O43 - CFD: 13/07/2011 - 13:14:02 - [14057] ----D- C:\Users\jib\AppData\Local\Ilivid Player
O43 - CFD: 30/07/2010 - 07:11:04 - [41968358] ----D- C:\Users\jib\AppData\Local\Microsoft
O43 - CFD: 06/04/2011 - 18:45:22 - [629544] ----D- C:\Users\jib\AppData\Local\Microsoft Games
O43 - CFD: 09/06/2010 - 21:43:44 - [0] ----D- C:\Users\jib\AppData\Local\Microsoft Help
O43 - CFD: 02/06/2010 - 04:06:42 - [50768979] ----D- C:\Users\jib\AppData\Local\Mozilla
O43 - CFD: 13/07/2011 - 13:11:56 - [0] ----D- C:\Users\jib\AppData\Local\PackageAware
O43 - CFD: 01/06/2010 - 05:07:44 - [40960] ----D- C:\Users\jib\AppData\Local\Power2Go
O43 - CFD: 02/06/2010 - 04:08:16 - [285696] ----D- C:\Users\jib\AppData\Local\Seven Zip
O43 - CFD: 01/06/2010 - 05:18:54 - [7353] ----D- C:\Users\jib\AppData\Local\SRS Labs
O43 - CFD: 24/07/2011 - 18:00:42 - [1621838] ----D- C:\Users\jib\AppData\Local\Temp
O43 - CFD: 01/06/2010 - 05:06:44 - [0] -SH-D- C:\Users\jib\AppData\Local\Temporary Internet Files
O43 - CFD: 28/11/2010 - 16:25:20 - [100017] ----D- C:\Users\jib\AppData\Local\VirtualStore
O43 - CFD: 08/06/2010 - 23:30:32 - [11620864] ----D- C:\Users\jib\AppData\Local\{D53238E8-3427-491E-A57E-097FA966AAC1}
O43 - CFD: 21/07/2011 - 20:50:58 - [129098442] ----D- C:\Program Files (x86)\Ad-Remover
O43 - CFD: 02/06/2010 - 04:17:30 - [687536391] ----D- C:\Program Files (x86)\Adobe
O43 - CFD: 08/04/2010 - 13:05:48 - [3036551] ----D- C:\Program Files (x86)\AmIcoSingLun
O43 - CFD: 30/07/2010 - 06:59:30 - [2221118] ----D- C:\Program Files (x86)\Apple Software Update
O43 - CFD: 02/06/2010 - 04:13:48 - [133080463] ----D- C:\Program Files (x86)\ASUS
O43 - CFD: 22/07/2011 - 10:30:10 - [141657] ----D- C:\Program Files (x86)\BitSpirit
O43 - CFD: 10/06/2011 - 10:55:06 - [621242] ----D- C:\Program Files (x86)\Bonjour
O43 - CFD: 22/07/2011 - 10:30:10 - [806931074] ----D- C:\Program Files (x86)\Common Files
O43 - CFD: 08/04/2010 - 12:34:46 - [266716046] ----D- C:\Program Files (x86)\CyberLink
O43 - CFD: 22/07/2011 - 11:08:20 - [75985114] ----D- C:\Program Files (x86)\Google
O43 - CFD: 21/11/2010 - 17:42:24 - [49896322] --H-D- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 28/06/2011 - 10:59:36 - [5718297] ----D- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 09/06/2010 - 21:05:50 - [14146977] ----D- C:\Program Files (x86)\Inventel
O43 - CFD: 10/06/2011 - 10:57:42 - [126499047] ----D- C:\Program Files (x86)\iTunes
O43 - CFD: 02/07/2011 - 09:32:44 - [89486776] ----D- C:\Program Files (x86)\Java
O43 - CFD: 22/07/2011 - 10:30:56 - [4] ----D- C:\Program Files (x86)\LimeWire
O43 - CFD: 21/11/2010 - 17:34:50 - [2044848] ----D- C:\Program Files (x86)\MarkAny
O43 - CFD: 02/06/2010 - 04:11:02 - [1019880] ----D- C:\Program Files (x86)\Microsoft
O43 - CFD: 09/06/2010 - 21:47:44 - [585922732] ----D- C:\Program Files (x86)\Microsoft Office
O43 - CFD: 01/06/2010 - 05:14:46 - [1562204] ----D- C:\Program Files (x86)\Microsoft Office Outlook Connector
O43 - CFD: 15/06/2011 - 10:51:08 - [38411899] ----D- C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 01/06/2010 - 05:10:28 - [1829877] ----D- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 01/06/2010 - 05:13:02 - [2188837] ----D- C:\Program Files (x86)\Microsoft Sync Framework
O43 - CFD: 09/06/2010 - 21:47:42 - [14904] ----D- C:\Program Files (x86)\Microsoft Visual Studio
O43 - CFD: 09/06/2010 - 21:44:22 - [1387249] ----D- C:\Program Files (x86)\Microsoft Visual Studio 8
O43 - CFD: 17/06/2010 - 19:54:30 - [3726168] ----D- C:\Program Files (x86)\Microsoft Works
O43 - CFD: 24/06/2010 - 23:59:36 - [8167779] ----D- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 01/07/2010 - 11:29:02 - [13737502] ----D- C:\Program Files (x86)\MixMeister EZ Vinyl Converter
O43 - CFD: 22/06/2011 - 18:20:58 - [37000609] ----D- C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 09/06/2010 - 21:47:54 - [26521] ----D- C:\Program Files (x86)\MSBuild
O43 - CFD: 08/04/2010 - 12:39:16 - [154033] ----D- C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 21/11/2010 - 17:39:20 - [18491486] ----D- C:\Program Files (x86)\PC Connectivity Solution
O43

Smart91 · Answer

Essaie de le poster sur ce site:
http://pjjoint.malekal.com/

Smart

belia83 · Answer

Et voilà c'est fait merci.

http://pjjoint.malekal.com/files.php?id=v12b6k119i12z15w14b7g6f8q7j6o710p7j13p12s15u8z8

Belia

Smart91 · Answer

Tu as bien redémarré après ZHPFix, car il reste encore des races 

- Ferme toutes tes applications en cours 
- Lance ZHPFix (soit via le raccourci sur ton Bureau, soit via ZHPDiag en cliquant sur l'écusson vert)  
Si tu ne l'as pas, télécharge le depuis ce lien: https://www.zebulon.fr/telechargements/securite/systeme/zhpfix.html 
Copie/colle les lignes en gras suivantes : 
  
----------------------------------------------------------  
O42 - Logiciel: FREEzeFrog - (.Pas de propriétaire.) [HKLM][64Bits] -- FREEzeFrogSA 
[HKLM\Software\FREEzeFrog] 
O69 - SBI: SearchScopes [HKUS\.DEFAULT] {4B8C28A7-A9BC-45F8-990D-21499EED643C} - (QuestScan) - http://www.questscan.com 
O69 - SBI: SearchScopes [HKUS\S-1-5-18] {4B8C28A7-A9BC-45F8-990D-21499EED643C} - (QuestScan) - http://www.questscan.com 
[HKLM\Software\Classes\Interface\{01222E21-6BD0-4EB3-94F1-967EB09CCED5}] 
[HKLM\Software\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}] 
[HKLM\Software\Classes\Interface\{21BA420E-161C-413A-B21E-4E42AE1F4226}] 
[HKLM\Software\Classes\Interface\{33DDFC61-F531-4982-8C32-4212B7835D44}] 
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624f4-c5dd-4e1d-bdd0-1e9c9b7799cc}] 
[HKLM\Software\Classes\Interface\{453db0c5-f41c-4d97-8dd6-cc72ecd5f699}] 
[HKLM\Software\Classes\Interface\{477f210a-2a86-4666-9c4b-1189634d2c84}] 
[HKLM\Software\Classes\Interface\{4AFC07D0-59BB-46B8-B097-1A46E88EEF71}] 
[HKLM\Software\Classes\Interface\{6511ce4c-4722-40d0-ad3d-4afa2f50978a}] 
[HKLM\Software\Classes\Interface\{65A16874-2ED0-460E-A547-5FE2EC3A13A7}] 
[HKLM\Software\Classes\Interface\{71E02280-5212-45C3-B174-4D5A35DA254F}] 
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7f000001-db8e-f89c-2fec-49bf726f8c12}] 
[HKLM\Software\Classes\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB}] 
[HKLM\Software\Classes\Interface\{9bec9b38-bf39-4899-806e-a1c5dfeb60a2}] 
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9c8a3ca5-889e-4554-beec-ec0876e4e96a}] 
[HKLM\Software\Classes\Interface\{A9005ED5-4A1D-4606-A4DF-1A25E7D7B417}] 
[HKLM\Software\Classes\Interface\{aebf09e2-0c15-43c8-99bf-928c645d98a0}] 
[HKLM\Software\Classes\Interface\{b86d82bf-d39f-439a-a07c-43eddc6f6ea6}] 
[HKLM\Software\Classes\Interface\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082}] 
[HKLM\Software\Classes\Interface\{da6305b9-0869-4235-8c1d-533a65e639e5}] 
[HKLM\Software\Classes\Interface\{E25DA6D6-C365-46CF-ABAF-DC5893135D7A}] 
[HKLM\Software\Classes\Interface\{e6961c59-cfce-4ccd-b794-bc78db98413a}] 
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f9189560-573a-4fde-b055-ae7b0f4cf080}] 
[HKLM\Software\Classes\Interface\{ff871e51-2655-4d06-aed5-745962a96b32}] 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF] 
EmptyTemp 
EmptyFlash
----------------------------------------------------------  
- Clique sur l'icone représentant la lettre H (« coller les lignes Helper »)  
- Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes  
- Clique sur le bouton « GO » pour le lancer le nettoyage 
- Copie/colle la totalité du rapport dans ta prochaine réponse 

Smart  
"Si tu n'as pas d'ambitions, tu t'installes au bord de la chute" (Kundera)

belia83 · Answer

Salut Smart 

Et voilà le rapport j'espère qu'il n'y a plus de trace de ce satané virus 

Merci Belia


Rapport de ZHPFix 1.12.3344 par Nicolas Coolman, Update du 21/07/2011
Fichier d'export Registre : 
Run by jib at 26/07/2011 17:13:33
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Logiciel(s) ==========
ABSENT Software Key: FREEzeFrogSA

========== Clé(s) du Registre ==========
ABSENT Key: HKLM\Software\FREEzeFrog
SUPPRIME Key: SearchScopes :{4B8C28A7-A9BC-45F8-990D-21499EED643C}
SUPPRIME Key: HKLM\Software\Classes\Interface\{01222E21-6BD0-4EB3-94F1-967EB09CCED5}
SUPPRIME Key: HKLM\Software\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}
SUPPRIME Key: HKLM\Software\Classes\Interface\{21BA420E-161C-413A-B21E-4E42AE1F4226}
SUPPRIME Key: HKLM\Software\Classes\Interface\{33DDFC61-F531-4982-8C32-4212B7835D44}
SUPPRIME Key: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624f4-c5dd-4e1d-bdd0-1e9c9b7799cc}
SUPPRIME Key: HKLM\Software\Classes\Interface\{453db0c5-f41c-4d97-8dd6-cc72ecd5f699}
SUPPRIME Key: HKLM\Software\Classes\Interface\{477f210a-2a86-4666-9c4b-1189634d2c84}
SUPPRIME Key: HKLM\Software\Classes\Interface\{4AFC07D0-59BB-46B8-B097-1A46E88EEF71}
SUPPRIME Key: HKLM\Software\Classes\Interface\{6511ce4c-4722-40d0-ad3d-4afa2f50978a}
SUPPRIME Key: HKLM\Software\Classes\Interface\{65A16874-2ED0-460E-A547-5FE2EC3A13A7}
SUPPRIME Key: HKLM\Software\Classes\Interface\{71E02280-5212-45C3-B174-4D5A35DA254F}
SUPPRIME Key: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7f000001-db8e-f89c-2fec-49bf726f8c12}
SUPPRIME Key: HKLM\Software\Classes\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB}
SUPPRIME Key: HKLM\Software\Classes\Interface\{9bec9b38-bf39-4899-806e-a1c5dfeb60a2}
SUPPRIME Key: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9c8a3ca5-889e-4554-beec-ec0876e4e96a}
SUPPRIME Key: HKLM\Software\Classes\Interface\{A9005ED5-4A1D-4606-A4DF-1A25E7D7B417}
SUPPRIME Key: HKLM\Software\Classes\Interface\{aebf09e2-0c15-43c8-99bf-928c645d98a0}
SUPPRIME Key: HKLM\Software\Classes\Interface\{b86d82bf-d39f-439a-a07c-43eddc6f6ea6}
SUPPRIME Key: HKLM\Software\Classes\Interface\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082}
SUPPRIME Key: HKLM\Software\Classes\Interface\{da6305b9-0869-4235-8c1d-533a65e639e5}
SUPPRIME Key: HKLM\Software\Classes\Interface\{E25DA6D6-C365-46CF-ABAF-DC5893135D7A}
SUPPRIME Key: HKLM\Software\Classes\Interface\{e6961c59-cfce-4ccd-b794-bc78db98413a}
SUPPRIME Key: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f9189560-573a-4fde-b055-ae7b0f4cf080}
SUPPRIME Key: HKLM\Software\Classes\Interface\{ff871e51-2655-4d06-aed5-745962a96b32}
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF

========== Dossier(s) ==========
SUPPRIME Temporaires Windows: : 79
SUPPRIME Flash Cookies: 6

========== Fichier(s) ==========
SUPPRIME Temporaires Windows: : 30
SUPPRIME Flash Cookies: 1


========== Récapitulatif ==========
27 : Clé(s) du Registre
2 : Dossier(s)
2 : Fichier(s)
1 : Logiciel(s)


========== Chemin du fichier rapport ==========
C:\Program Files (x86)\ZHPDiag\ZHPFixReport.txt



End of the scan in 00mn 07s

Smart91 · Answer

OK. On va quand même vérifier

Relance ZHPDiag en tant qu'administrateur, clique sur la flèche verte pour installer la mises à jour, tefais uin scan et poste le rapport via cijoint 

Et redémarre le PC

Smart

Belia83 · Answer

Et coucou Smart,

Désoler mais j'étais parti en vacances et je viens juste de rentrer.
Voilà je viens de faire la mise à jour est le scan.

Merci Belia. 

http://www.cijoint.fr/cjlink.php?file=cj201108/cijdtl6bO4.txt

Smart91 · Answer

On va recommencer. c'est préférable

- Ferme toutes tes applications en cours
- Lance ZHPFix (soit via le raccourci sur ton Bureau, soit via ZHPDiag en cliquant sur l'écusson vert) 
Si tu ne l'as pas, télécharge le depuis ce lien: https://www.zebulon.fr/telechargements/securite/systeme/zhpfix.html
Copie/colle les lignes en gras suivantes :
 
---------------------------------------------------------- 
O42 - Logiciel: FREEzeFrog - (.Pas de propriétaire.) [HKLM] -- FREEzeFrogSA
[HKCU\Software\freezefrogsa]
[HKLM\Software\FREEzeFrog]
O43 - CFD: 23/07/2011 - 13:38:26 - [1407408] ----D- C:\ProgramData\FREEzeFrogSA
O69 - SBI: SearchScopes [HKUS\.DEFAULT] {4B8C28A7-A9BC-45F8-990D-21499EED643C} - (QuestScan) - http://www.questscan.com
O69 - SBI: SearchScopes [HKUS\S-1-5-18] {4B8C28A7-A9BC-45F8-990D-21499EED643C} - (QuestScan) - http://www.questscan.com
[HKLM\Software\Classes\FREEzeFrogAx.Info]
[HKLM\Software\Wow6432Node\Classes\FREEzeFrogAx.Info]
[HKLM\Software\Classes\FREEzeFrogAx.Info.1]
[HKLM\Software\Wow6432Node\Classes\FREEzeFrogAx.Info.1]
[HKLM\Software\Classes\Interface\{01222E21-6BD0-4EB3-94F1-967EB09CCED5}]
[HKLM\Software\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}]
[HKLM\Software\Classes\Interface\{21BA420E-161C-413A-B21E-4E42AE1F4226}]
[HKLM\Software\Classes\Interface\{33DDFC61-F531-4982-8C32-4212B7835D44}]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624f4-c5dd-4e1d-bdd0-1e9c9b7799cc}]
[HKLM\Software\Classes\Interface\{453db0c5-f41c-4d97-8dd6-cc72ecd5f699}]
[HKLM\Software\Classes\Interface\{477f210a-2a86-4666-9c4b-1189634d2c84}]
[HKLM\Software\Classes\Interface\{4AFC07D0-59BB-46B8-B097-1A46E88EEF71}]
[HKLM\Software\Classes\Interface\{6511ce4c-4722-40d0-ad3d-4afa2f50978a}]
[HKLM\Software\Classes\Interface\{65A16874-2ED0-460E-A547-5FE2EC3A13A7}]
[HKLM\Software\Classes\Interface\{71E02280-5212-45C3-B174-4D5A35DA254F}]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7f000001-db8e-f89c-2fec-49bf726f8c12}]
[HKLM\Software\Classes\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB}]
[HKLM\Software\Classes\Interface\{9bec9b38-bf39-4899-806e-a1c5dfeb60a2}]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9c8a3ca5-889e-4554-beec-ec0876e4e96a}]
[HKLM\Software\Classes\Interface\{A9005ED5-4A1D-4606-A4DF-1A25E7D7B417}]
[HKLM\Software\Classes\Interface\{aebf09e2-0c15-43c8-99bf-928c645d98a0}]
[HKLM\Software\Classes\Interface\{b86d82bf-d39f-439a-a07c-43eddc6f6ea6}]
[HKLM\Software\Classes\Interface\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082}]
[HKLM\Software\Classes\Interface\{da6305b9-0869-4235-8c1d-533a65e639e5}]
[HKLM\Software\Classes\Interface\{E25DA6D6-C365-46CF-ABAF-DC5893135D7A}]
[HKLM\Software\Classes\Interface\{e6961c59-cfce-4ccd-b794-bc78db98413a}]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f9189560-573a-4fde-b055-ae7b0f4cf080}]
[HKLM\Software\Classes\Interface\{ff871e51-2655-4d06-aed5-745962a96b32}]
[HKLM\Software\Wow6432Node\FREEzeFrog]
[HKCU\Software\FREEzeFrogSA]
C:\ProgramData\FREEzeFrogSA
O51 - MPSK:{797968e6-733c-11df-9939-485b3947d357}\AutoRun\command. (...) -- F:\setup_vmc_lite.exe (.not file.)
O2 - BHO: Softonic France Toolbar [64Bits] - {364d4e0c-543f-4b85-abe3-19551139da4f} . (...) -- C:\Program Files (x86)\Softonic_France	bSoft.dll (.not file.)
O42 - Logiciel: Softonic France Toolbar - (.Softonic France.) [HKLM] -- Softonic_France Toolbar
[HKCU\Software\APN]
[HKCU\Software\AppDataLow\Software\Softonic_France]
[HKLM\Software\APN]
[HKLM\Software\Softonic_France]
O43 - CFD: 23/07/2011 - 13:48:44 - [208254] ----D- C:\Program Files (x86)\Softonic_France
[HKLM\Software\Classes\Interface\{6087829B-114F-42A1-A72B-B4AEDCEA4E5B}]
[HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}]
[HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}]
[HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF]
[HKCU\Software\APN]
[HKLM\Software\Wow6432Node\APN]
[HKCU\Software\AppDataLow\Software\Softonic_France]
[HKLM\Software\Wow6432Node\Softonic_France]
C:\Program Files (x86)\Softonic_France

---------------------------------------------------------- 
- Clique sur l'icone représentant la lettre H (« coller les lignes Helper ») 
- Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes 
- Clique sur le bouton « GO » pour le lancer le nettoyage
- Copie/colle la totalité du rapport dans ta prochaine réponse 

Smart

Belia83 · Answer

Et voilà  

Rapport de ZHPFix 1.12.3345 par Nicolas Coolman, Update du 29/07/2011 
Fichier d'export Registre :  
Run by jib at 11/08/2011 12:01:17 
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601) 
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html 

========== Logiciel(s) ========== 
ABSENT Software Key: FREEzeFrogSA 
ABSENT Software Key: Softonic_France Toolbar 

========== Clé(s) du Registre ========== 
SUPPRIME Key: HKCU\Software\freezefrogsa 
ABSENT Key: HKLM\Software\FREEzeFrog 
SUPPRIME Key: SearchScopes :{4B8C28A7-A9BC-45F8-990D-21499EED643C} 
SUPPRIME Key: HKLM\Software\Classes\FREEzeFrogAx.Info 
ABSENT Key: HKLM\Software\Wow6432Node\Classes\FREEzeFrogAx.Info 
SUPPRIME Key: HKLM\Software\Classes\FREEzeFrogAx.Info.1 
ABSENT Key: HKLM\Software\Wow6432Node\Classes\FREEzeFrogAx.Info.1 
SUPPRIME Key: HKLM\Software\Classes\Interface\{01222E21-6BD0-4EB3-94F1-967EB09CCED5} 
SUPPRIME Key: HKLM\Software\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5} 
SUPPRIME Key: HKLM\Software\Classes\Interface\{21BA420E-161C-413A-B21E-4E42AE1F4226} 
SUPPRIME Key: HKLM\Software\Classes\Interface\{33DDFC61-F531-4982-8C32-4212B7835D44} 
SUPPRIME Key: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624f4-c5dd-4e1d-bdd0-1e9c9b7799cc} 
SUPPRIME Key: HKLM\Software\Classes\Interface\{453db0c5-f41c-4d97-8dd6-cc72ecd5f699} 
SUPPRIME Key: HKLM\Software\Classes\Interface\{477f210a-2a86-4666-9c4b-1189634d2c84} 
SUPPRIME Key: HKLM\Software\Classes\Interface\{4AFC07D0-59BB-46B8-B097-1A46E88EEF71} 
SUPPRIME Key: HKLM\Software\Classes\Interface\{6511ce4c-4722-40d0-ad3d-4afa2f50978a} 
SUPPRIME Key: HKLM\Software\Classes\Interface\{65A16874-2ED0-460E-A547-5FE2EC3A13A7} 
SUPPRIME Key: HKLM\Software\Classes\Interface\{71E02280-5212-45C3-B174-4D5A35DA254F} 
SUPPRIME Key: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7f000001-db8e-f89c-2fec-49bf726f8c12} 
SUPPRIME Key: HKLM\Software\Classes\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB} 
SUPPRIME Key: HKLM\Software\Classes\Interface\{9bec9b38-bf39-4899-806e-a1c5dfeb60a2} 
SUPPRIME Key: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9c8a3ca5-889e-4554-beec-ec0876e4e96a} 
SUPPRIME Key: HKLM\Software\Classes\Interface\{A9005ED5-4A1D-4606-A4DF-1A25E7D7B417} 
SUPPRIME Key: HKLM\Software\Classes\Interface\{aebf09e2-0c15-43c8-99bf-928c645d98a0} 
SUPPRIME Key: HKLM\Software\Classes\Interface\{b86d82bf-d39f-439a-a07c-43eddc6f6ea6} 
SUPPRIME Key: HKLM\Software\Classes\Interface\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082} 
SUPPRIME Key: HKLM\Software\Classes\Interface\{da6305b9-0869-4235-8c1d-533a65e639e5} 
SUPPRIME Key: HKLM\Software\Classes\Interface\{E25DA6D6-C365-46CF-ABAF-DC5893135D7A} 
SUPPRIME Key: HKLM\Software\Classes\Interface\{e6961c59-cfce-4ccd-b794-bc78db98413a} 
SUPPRIME Key: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f9189560-573a-4fde-b055-ae7b0f4cf080} 
SUPPRIME Key: HKLM\Software\Classes\Interface\{ff871e51-2655-4d06-aed5-745962a96b32} 
SUPPRIME Key: HKLM\Software\Wow6432Node\FREEzeFrog 
ABSENT Key: HKCU\Software\FREEzeFrogSA 
SUPPRIME CLSID MPSK: {797968e6-733c-11df-9939-485b3947d357} 
ABSENT Key: CLSID BHO: {364d4e0c-543f-4b85-abe3-19551139da4f} 
SUPPRIME Key: HKCU\Software\APN  
SUPPRIME Key: HKCU\Software\AppDataLow\Software\Softonic_France 
ABSENT Key: HKLM\Software\APN 
ABSENT Key: HKLM\Software\Softonic_France 
SUPPRIME Key: HKLM\Software\Classes\Interface\{6087829B-114F-42A1-A72B-B4AEDCEA4E5B} 
SUPPRIME Key: HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456} 
SUPPRIME Key: HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92} 
SUPPRIME Key: HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E} 
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF 
SUPPRIME Key: HKLM\Software\Wow6432Node\APN 
SUPPRIME Key: HKLM\Software\Wow6432Node\Softonic_France 

========== Dossier(s) ========== 
SUPPRIME Folder: C:\ProgramData\FREEzeFrogSA 
SUPPRIME Folder*: C:\Program Files (x86)\Softonic_France 

========== Fichier(s) ========== 
ABSENT Folder/File: c:\programdata\freezefrogsa 
ABSENT File: c:\program files (x86)\softonic_france	bsoft.dll 
ABSENT Folder/File: c:\program files (x86)\softonic_france 


========== Récapitulatif ========== 
46 : Clé(s) du Registre 
2 : Dossier(s) 
3 : Fichier(s) 
2 : Logiciel(s) 


========== Chemin du fichier rapport ========== 
C:\ZHP\ZHPFixReport.txt 



End of the scan in 02mn 11s


Merci Belia

Smart91 · Answer

Redémarre le PC:

Relance ZHPDiag, clique sur la flèche verte pour installer la mise à jour, refais un scan et poste le rapport via cijoint

Smart

Belia83 · Answer

Re et voilà le lien:

http://www.cijoint.fr/cjlink.php?file=cj201108/cijn4JhS4V.txt


Merci Belia

Smart91 · Answer

Il se peut qu'il y aitun pb d'affichage avec ZHPDiag car tu es sous Windows 7 64 Bits. On va vérifier cela:

- Télécharge OTM (OldTimer) sur ton Bureau ==> http://www.itxassociates.com/OT-Tools/OTM.exe
- Clique droit sur "OTM.exe" et choisis "exécuter en tant qu'administrateur" afin de le lancer. 
- Copie (Ctrl+C) le texte suivant en gras ci-dessous : 

--------------------------------------------------------------
:reg
[-HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{4B8C28A7-A9BC-45F8-990D-21499EED643C}]
[-HKEY_CLASSES_ROOT\CLSID\{4B8C28A7-A9BC-45F8-990D-21499EED643C}]
[-HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\{4B8C28A7-A9BC-45F8-990D-21499EED643C}]
[-HKEY_CLASSES_ROOT\CLSID\{4B8C28A7-A9BC-45F8-990D-21499EED643C}]
[-HKEY_LOCAL_MACHINE\Software\Classes\Interface\{01222E21-6BD0-4EB3-94F1-967EB09CCED5}]
[-HKEY_LOCAL_MACHINE\Software\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}]
[-HKEY_LOCAL_MACHINE\Software\Classes\Interface\{21BA420E-161C-413A-B21E-4E42AE1F4226}]
[-HKEY_LOCAL_MACHINE\Software\Classes\Interface\{33DDFC61-F531-4982-8C32-4212B7835D44}]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624f4-c5dd-4e1d-bdd0-1e9c9b7799cc}]
[-HKEY_LOCAL_MACHINE\Software\Classes\Interface\{453db0c5-f41c-4d97-8dd6-cc72ecd5f699}]
[-HKEY_LOCAL_MACHINE\Software\Classes\Interface\{477f210a-2a86-4666-9c4b-1189634d2c84}]
[-HKEY_LOCAL_MACHINE\Software\Classes\Interface\{4AFC07D0-59BB-46B8-B097-1A46E88EEF71}]
[-HKEY_LOCAL_MACHINE\Software\Classes\Interface\{6511ce4c-4722-40d0-ad3d-4afa2f50978a}]
[-HKEY_LOCAL_MACHINE\Software\Classes\Interface\{65A16874-2ED0-460E-A547-5FE2EC3A13A7}]
[-HKEY_LOCAL_MACHINE\Software\Classes\Interface\{71E02280-5212-45C3-B174-4D5A35DA254F}]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7f000001-db8e-f89c-2fec-49bf726f8c12}]
[-HKEY_LOCAL_MACHINE\Software\Classes\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB}]
[-HKEY_LOCAL_MACHINE\Software\Classes\Interface\{9bec9b38-bf39-4899-806e-a1c5dfeb60a2}]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9c8a3ca5-889e-4554-beec-ec0876e4e96a}]
[-HKEY_LOCAL_MACHINE\Software\Classes\Interface\{A9005ED5-4A1D-4606-A4DF-1A25E7D7B417}]
[-HKEY_LOCAL_MACHINE\Software\Classes\Interface\{aebf09e2-0c15-43c8-99bf-928c645d98a0}]
[-HKEY_LOCAL_MACHINE\Software\Classes\Interface\{b86d82bf-d39f-439a-a07c-43eddc6f6ea6}]
[-HKEY_LOCAL_MACHINE\Software\Classes\Interface\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082}]
[-HKEY_LOCAL_MACHINE\Software\Classes\Interface\{da6305b9-0869-4235-8c1d-533a65e639e5}]
[-HKEY_LOCAL_MACHINE\Software\Classes\Interface\{E25DA6D6-C365-46CF-ABAF-DC5893135D7A}]
[-HKEY_LOCAL_MACHINE\Software\Classes\Interface\{e6961c59-cfce-4ccd-b794-bc78db98413a}]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f9189560-573a-4fde-b055-ae7b0f4cf080}]
[-HKEY_LOCAL_MACHINE\Software\Classes\Interface\{ff871e51-2655-4d06-aed5-745962a96b32}]
[-HKEY_LOCAL_MACHINE\Software\Classes\Interface\{6087829B-114F-42A1-A72B-B4AEDCEA4E5B}]
[-HKEY_LOCAL_MACHINE\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}]
[-HKEY_LOCAL_MACHINE\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}]
[-HKEY_LOCAL_MACHINE\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF]

:commands 
[emptytemp] 
[Reboot] 

--------------------------------------------------------------

- Colle (Ctrl+V) le texte précédemment copié dans le cadre:  Paste Instructions for Items to be Moved. 

- Clique maintenant sur le bouton MoveIt! 

Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer. 
Accepte en cliquant sur YES. 

- Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\ 
Le nom du rapport correspond au moment de sa création : date_heure.log

Smart

Belia83 · Answer

Et coucou Smart

alors voilà le rapport 


All processes killed
========== REGISTRY ==========
Registry key HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{4B8C28A7-A9BC-45F8-990D-21499EED643C}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B8C28A7-A9BC-45F8-990D-21499EED643C}\ not found.
Registry key HKEY_CLASSES_ROOT\CLSID\{4B8C28A7-A9BC-45F8-990D-21499EED643C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B8C28A7-A9BC-45F8-990D-21499EED643C}\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\{4B8C28A7-A9BC-45F8-990D-21499EED643C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B8C28A7-A9BC-45F8-990D-21499EED643C}\ not found.
Registry key HKEY_CLASSES_ROOT\CLSID\{4B8C28A7-A9BC-45F8-990D-21499EED643C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B8C28A7-A9BC-45F8-990D-21499EED643C}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{01222E21-6BD0-4EB3-94F1-967EB09CCED5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{01222E21-6BD0-4EB3-94F1-967EB09CCED5}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{21BA420E-161C-413A-B21E-4E42AE1F4226}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21BA420E-161C-413A-B21E-4E42AE1F4226}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{33DDFC61-F531-4982-8C32-4212B7835D44}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33DDFC61-F531-4982-8C32-4212B7835D44}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624f4-c5dd-4e1d-bdd0-1e9c9b7799cc}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{424624f4-c5dd-4e1d-bdd0-1e9c9b7799cc}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{453db0c5-f41c-4d97-8dd6-cc72ecd5f699}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{453db0c5-f41c-4d97-8dd6-cc72ecd5f699}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{477f210a-2a86-4666-9c4b-1189634d2c84}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{477f210a-2a86-4666-9c4b-1189634d2c84}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{4AFC07D0-59BB-46B8-B097-1A46E88EEF71}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4AFC07D0-59BB-46B8-B097-1A46E88EEF71}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{6511ce4c-4722-40d0-ad3d-4afa2f50978a}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6511ce4c-4722-40d0-ad3d-4afa2f50978a}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{65A16874-2ED0-460E-A547-5FE2EC3A13A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{65A16874-2ED0-460E-A547-5FE2EC3A13A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{71E02280-5212-45C3-B174-4D5A35DA254F}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71E02280-5212-45C3-B174-4D5A35DA254F}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7f000001-db8e-f89c-2fec-49bf726f8c12}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7f000001-db8e-f89c-2fec-49bf726f8c12}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{9bec9b38-bf39-4899-806e-a1c5dfeb60a2}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9bec9b38-bf39-4899-806e-a1c5dfeb60a2}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9c8a3ca5-889e-4554-beec-ec0876e4e96a}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9c8a3ca5-889e-4554-beec-ec0876e4e96a}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{A9005ED5-4A1D-4606-A4DF-1A25E7D7B417}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A9005ED5-4A1D-4606-A4DF-1A25E7D7B417}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{aebf09e2-0c15-43c8-99bf-928c645d98a0}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{aebf09e2-0c15-43c8-99bf-928c645d98a0}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{b86d82bf-d39f-439a-a07c-43eddc6f6ea6}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b86d82bf-d39f-439a-a07c-43eddc6f6ea6}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{da6305b9-0869-4235-8c1d-533a65e639e5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{da6305b9-0869-4235-8c1d-533a65e639e5}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{E25DA6D6-C365-46CF-ABAF-DC5893135D7A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E25DA6D6-C365-46CF-ABAF-DC5893135D7A}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{e6961c59-cfce-4ccd-b794-bc78db98413a}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e6961c59-cfce-4ccd-b794-bc78db98413a}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f9189560-573a-4fde-b055-ae7b0f4cf080}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f9189560-573a-4fde-b055-ae7b0f4cf080}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{ff871e51-2655-4d06-aed5-745962a96b32}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ff871e51-2655-4d06-aed5-745962a96b32}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{6087829B-114F-42A1-A72B-B4AEDCEA4E5B}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6087829B-114F-42A1-A72B-B4AEDCEA4E5B}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6C434537-053E-486D-B62A-160059D9D456}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF\ not found.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 41620 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: jib
->Temp folder emptied: 98521989 bytes
->Temporary Internet Files folder emptied: 50965715 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 42120946 bytes
->Google Chrome cache emptied: 6423473 bytes
->Flash cache emptied: 42488 bytes
 
User: Public
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1440618 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 68044 bytes
RecycleBin emptied: 109353 bytes
 
Total Files Cleaned = 191,00 mb
 
 
OTM by OldTimer - Version 3.1.18.0 log created on 08122011_100557

Files moved on Reboot...
C:\Users\jib\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File move failed. C:\Windows	emp\_avast_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...


merci Belia

Smart91 · Answer

Redémarre le PC Ensuite on va passer à la phase finale. il nous reste à faire: - les mises à jour prioritaires - l'optimisation du PC - la désinstallation des outils de désinfection - les conseils de prévention quand on surfe sur Internet Fais les mises à jour suivantes: Mise à Jour Avast: Désinstalle Avast 4 ==> https://www.commentcamarche.net/telecharger/securite/22859-utilitaire-de-desinstallation-de-avast/ Installe Avast 6 ==> https://www.avast.com/fr-fr/free-antivirus-download Mise àjour Firefox vers la version 5.0.1: Allez dans ? > Rechercher des mises à jour ... et cliquez sur "Appliquer la mise à jour" Sinon aller sur ce lien ==> http://www.mozilla-europe.org/fr/firefox/ Mise à jour vers Adobe Reader 10.0.1 Lance Adobe Reader > Clique sur Aide puis recherche des mises à jour Mise à jour flashplayer vers la version 10.3.183.5 * Ferme tous tes navigateurs * A partir du panneau de configuration de Windows, désinstalle Adobe FlashPlayer ActiveX (utilisé par IE) et Adobe FlashPlayer Plugin (utilisé par les autres navigateurs). * Réinstalle http://fpdownload.adobe.com/get/flashplayer/current/install_flash_player_ax.exe ActiveX] (Décoche la case concernant l'installation de la Googlebar) et/ou le plugin Tu dois aussi mettre à jour tous tes autres programmes pour combler des failles de sécurité... Vérifie les mises disponibles à l'aide de ce petit programme (choisis la version sans installation) : https://www.commentcamarche.net/faq/9908-filehippo-app-manager-vos-logiciels-sont-ils-a-jour et lis ceci: Pourquoi tenir ses programmes a jour Optimisation: - Ferme toutes tes applications en cours - Lance ZHPFix (soit via le raccourci sur ton Bureau, soit via ZHPDiag en cliquant sur l'écusson vert) Si tu ne l'as pas, télécharge le depuis ce lien: https://www.zebulon.fr/telechargements/securite/systeme/zhpfix.html Copie/colle les lignes en gras suivantes : ---------------------------------------------------------- OPT:O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe OPT:O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe OPT:O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files (x86)\Bonjour\mDNSResponder.exe OPT:O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher [Key] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe OPT:SR - | Auto 10/06/2011 349472 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files (x86)\Bonjour\mDNSResponder.exe ---------------------------------------------------------- - Clique sur l'icone représentant la lettre H (« coller les lignes Helper ») - Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes - Clique sur le bouton « GO » pour le lancer le nettoyage - Copie/colle la totalité du rapport dans ta prochaine réponse gras>1. Désinstallation des outils - Télécharge DelFix (d'Xplode) sur ton bureau. - Lance le, (avec Vista/Seven, clic droit dessus, et sur exécuter en tant qu'administrateur) - Sélectionne Suppression - Copie/colle le contenu du rapport qui s'ouvrira à l'écran dans ton prochain message. Note : Le rapport est également sauvegardé à la racine du disque dur ( C:\DelFixSuppr.txt ) Une fois le rapport posté sur le forum, relance DelFix en sélectionnant Désinstallation. 2. Télécharge et installe CCleaner (N'installe pas la Yahoo Toolbar) : Avec ce logiciel on va supprimer les fichiers temporaires et inutiles sur ton PC. Ce n'est pas un logiciel qui supprime les infections - Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc.... - Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage. - Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs (Sauvegarde la base de registre). 3. Il est nécessaire dedésactiver puis réactiver la restauration système de Windows 7 pour la purger Quelques conseils de Prévention - Réactive l'UAC si ce n'est pas déjà fait. - Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement. Mais n'oublie pas de faire la mise à jour avant de lancer le scan. Pour naviguer sur internet plus en sécurité et à l'abri des publicités, je te conseille vivement d'installer et d'utiliser le navigateur firefox ==> http://www.mozilla-europe.org/fr/firefox/ Installe l'extension de sécurité adblock plus pour bloquer les publicités ==> http://www.clubic.com/telecharger-fiche45912-adblock-plus.html WOT - Extension pour ton navigateur internet : Voici une extension à télécharger qui te permettra, en faisant tes recherches sur google, de savoir si le site proposé lors de tes recherches est un site de confiance ou un site à éviter car il pourrait infecter ton PC : Pour Firefox : https://addons.mozilla.org/fr/firefox/addon/wot-safe-browsing-tool/ Pour internet explorer : https://chrome.google.com/webstore/detail/wot-web-of-trust-website/bhmmomiinigofkjcapegjjndpbikblnp Ci-dessous un tutoriel pour t'aider à installer WOT: ==> https://www.commentcamarche.net/faq/15620-wot-web-of-trust-essentiel-pour-l-internaute-avise - Par rapport au P2P : http://www.libellules.ch/phpBB2/les-risques-securitaires-du-peer-to-peer-en-10-points-t28947.html - Les logiciels gratuits à éviter - Voici un dossier complet sur le prévention et protection, il est absolument à lire (avec Adobe Reader ou Foxit Reader) : Prévention et Protection Sois plus vigilant(e) sur Internet à l'avenir Voilà pour moi c'est terminé. Si tu as des questions n'hésite pas Smart

Belia83 · Answer

Salut smart, 
Voilà le rapport de ZHPFix: 

Rapport de ZHPFix 1.12.3354 par Nicolas Coolman, Update du 14/08/2011 
Fichier d'export Registre :  
Run by jib at 15/08/2011 20:44:29 
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601) 
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html 

========== Clé(s) du Registre ========== 
ABSENT Key: Service: Bonjour Service 
SUPPRIME Key:  StartupReg: Adobe Reader Speed Launcher 

========== Valeur(s) du Registre ========== 
ABSENT RunValue: QuickTime Task 
ABSENT RunValue: iTunesHelper 


========== Récapitulatif ========== 
2 : Clé(s) du Registre 
2 : Valeur(s) du Registre 


End of the scan in 00mn 00s 

========== Chemin de fichier rapport ========== 
C:\ZHP\ZHPFix[R1].txt - 15/08/2011 20:44:29



Et voilà le rapport de DELFix:


# DelFix v8.3 - Rapport créé le 15/08/2011 à 20:49
# Mis à jour le 04/08/11 à 11h par Xplode
# Système d'exploitation : Windows 7 Home Premium (64 bits) [version 6.1.7601] 
# Nom d'utilisateur : jib - JIB-PC (Administrateur)
# Exécuté depuis : D:\Téléchargements\delfix0.exe
# Option [Suppression]


~~~~~~ Dossier(s) ~~~~~~

Supprimé : C:\ZHP
Non supprimé (1) : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP

~~~~~~ Fichier(s) ~~~~~~

Supprimé : C:\Users\jib\Desktop\ZHPFixReport.txt
Supprimé : C:\Users\Public\Desktop\ZHPFix.lnk

~~~~~~ Registre ~~~~~~


~~~~~~ Autre ~~~~~~

-> Prefetch vidé

########## EOF - "C:\DelFixSuppr.txt" - [743 octets] ##########

Smart91 · Answer

OK fais la suite

Smart

belia83 · Answer

Coucou Smart

ok. Je te remercie tu as été super. Merci beaucoup. 

Belia

Smart91 · Answer

Heureux de t'avoir aidé(e)

Smart

byvaal1 · Answer

mon rapport !! je fais quoi maintenant ??? merci            http://www.cijoint.fr/cjlink.php?file=cj201109/cijgwuP6o5.txt

hellor · Answer

======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 17:47:32 le 14/09/2011, Mode normal

Microsoft Windows XP Édition familiale Service Pack 3 (X86) 
rifka mon ange@YOUR-9D307EF4E7 ( ) 
 
============== ACTION(S) ==============


Dossier supprimé: C:\Program Files\Iminent\SearchTheWeb
Fichier supprimé: C:\WINDOWS\system32\ConduitEngine.tmp
Dossier supprimé: C:\Documents and Settingsifka mon ange\Local Settings\Application Data\Conduit
Dossier supprimé: C:\Program Files\Conduit
Dossier supprimé: C:\Documents and Settingsifka mon ange\Local Settings\Application Data\ConduitEngine
Dossier supprimé: C:\Documents and Settings\All Users\Application Data\2ACA5CC3-0F83-453D-A079-1076FE1A8B65
Dossier supprimé: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ClickPotato
Dossier supprimé: C:\Program Files\ClickPotatoLite
Erreur suppression dossier: C:\Documents and Settings\All Users\Application Data\ClickPotatoLiteSA
Dossier supprimé: C:\Program Files\Fast Browser Search
Dossier supprimé: C:\Program Files\SGPSA
Dossier supprimé: C:\Documents and Settings\maman sandra\Application Data\ShoppingReport2
Dossier supprimé: C:\Documents and Settingsené la pomme\Application Data\ShoppingReport2
Dossier supprimé: C:\Documents and Settingsifka mon ange\Application Data\Toolbar4
Dossier supprimé: C:\Documents and Settings\babouche\Application Data\Toolbar4
Dossier supprimé: C:\Documents and Settings\maman sandra\Application Data\Toolbar4
Dossier supprimé: C:\Documents and Settingsené la pomme\Application Data\Toolbar4

(!) -- Fichiers temporaires supprimés.


Clé supprimée: HKLM\Software\Classes\CLSID\{1602F07D-8BF3-4c08-BDD6-DDDB1C48AEDC}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1602F07D-8BF3-4c08-BDD6-DDDB1C48AEDC}
Clé supprimée: HKLM\Software\Classes\CLSID\{1BB22D38-A411-4B13-A746-C2A4F4EC7344}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1BB22D38-A411-4B13-A746-C2A4F4EC7344}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1BB22D38-A411-4B13-A746-C2A4F4EC7344}
Clé supprimée: HKLM\Software\Classes\CLSID\{7A3D6D17-9DD5-4C60-8076-D1784DABAF8C}
Clé supprimée: HKLM\Software\Classes\AppID\{D2083641-E57F-4eab-BB85-0582424F4A29}
Clé supprimée: HKLM\Software\Classes\CLSID\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
Clé supprimée: HKLM\Software\Classes\CLSID\{AC6D819E-AA8F-4418-A3BB-D165C1B18BB5}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{AC6D819E-AA8F-4418-A3BB-D165C1B18BB5}
Clé supprimée: HKLM\Software\Classes\CLSID\{F0626A63-410B-45E2-99A1-3F2475B2D695}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F0626A63-410B-45E2-99A1-3F2475B2D695}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F0626A63-410B-45E2-99A1-3F2475B2D695}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F0626A63-410B-45E2-99A1-3F2475B2D695}
Clé supprimée: HKLM\Software\Classes\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Clé supprimée: HKLM\Software\Classes\Interface\{30B15818-E110-4527-9C05-46ACE5A3460D}
Clé supprimée: HKLM\Software\Classes\Interface\{419EDA30-6DFF-432C-B534-E15D899ABEE4}
Clé supprimée: HKLM\Software\Classes\Interface\{618AAD04-921F-44C2-BE38-C0818AF69861}
Clé supprimée: HKLM\Software\Classes\Interface\{B5D2ED96-62F9-4C2C-956D-E425B1F67337}
Clé supprimée: HKLM\Software\Classes\Interface\{D3A412E8-1E4B-47D2-9B12-F88291F5AFBB}
Clé supprimée: HKLM\Software\Classes\TypeLib\{3088C799-9630-4719-A471-4544D7CABC2D}
Clé supprimée: HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
Clé supprimée: HKLM\Software\Classes\TypeLib\{77AA25E8-6083-4949-A831-9CB11861DC10}
Clé supprimée: HKLM\Software\Classes\TypeLib\{814BAA91-DC22-4350-87D6-0C86E93F7F08}
Clé supprimée: HKLM\Software\Classes\TypeLib\{AA2E16F2-387A-415F-BA95-B89BAF3AF109}
Clé supprimée: HKLM\Software\Classes\TypeLib\{C55CA95C-324B-451C-B2D2-6E895AA75FEC}
Clé supprimée: HKLM\Software\Classes\BHO.PSHelper
Clé supprimée: HKLM\Software\Classes\BHO.PSHelper.1
Clé supprimée: HKLM\Software\Classes\ClickPotatoLiteAX.info
Clé supprimée: HKLM\Software\Classes\ClickPotatoLiteAX.info.1
Clé supprimée: HKLM\Software\Classes\ClickPotatoLiteAX.UserProfiles
Clé supprimée: HKLM\Software\Classes\ClickPotatoLiteAX.UserProfiles.1
Clé supprimée: HKLM\Software\Classes\Conduit.Engine
Clé supprimée: HKLM\Software\Classes\MenuButtonIE.ButtonIE
Clé supprimée: HKLM\Software\Classes\MenuButtonIE.ButtonIE.1
Clé supprimée: HKLM\Software\Classes\Toolbar.CT1098640
Clé supprimée: HKLM\Software\Classes\AppID\BHO.dll
Clé supprimée: HKLM\Software\Classes\AppID\{055069F3-F78B-4BD1-A277-FE66648D3300}
Clé supprimée: HKLM\Software\Classes\AppID\MenuButtonIE.DLL
Clé supprimée: HKLM\Software\ASKInstaller
Clé supprimée: HKLM\Software\ClickPotatoLite
Clé supprimée: HKLM\Software\Conduit
Clé supprimée: HKCU\Software\ClickPotatoLiteSA
Clé supprimée: HKCU\Software\Conduit
Clé supprimée: HKCU\Software\conduitEngine
Clé supprimée: HKCU\Software\ShoppingReport2
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\ClickPotato
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Hotbar
Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CE35C6E1-81BA-4CD5-B360-3DA8E2A6B8A0}
Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}
Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2540EB28-6673-49dc-8A2A-4C6E78E93843}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ClickpotatoliteSA
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2AA2FBF8-9C76-4E97-A226-25C5F4AB6358}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2AA2FBF8-9C76-4E97-A226-25C5F4AB6358}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Extensions\{B58926D6-CFB0-45d2-9C28-4B5A0F0368AE}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE}

Valeur supprimée: HKLM\Software\Mozilla\Firefox\Extensions|ClickPotatoLite@ClickPotatoLite.com
Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|ClickPotatoLiteSA
Valeur supprimée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{1BB22D38-A411-4B13-A746-C2A4F4EC7344}
Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}
Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{1BB22D38-A411-4B13-A746-C2A4F4EC7344}
Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{90B8B761-DF2B-48AC-BBE0-BCC03A819B3B}


============== SCAN ADDITIONNEL ==============

**** Internet Explorer Version [8.0.6001.18702] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKCU_SearchScopes\{4B8C28A7-A9BC-45F8-990D-21499EED643C} - "QuestScan" (hxxp://www.questscan.com/?prt=QstscanPB&keywords={searchTerms})
HKLM_SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} - "SweetIM Search" (hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms})
HKCU_Toolbar\WebBrowser|{F2E259E8-0FC8-438C-A6E0-342DD80FA53E} (x)
HKCU_Toolbar\WebBrowser|{977AE9CC-AF83-45E8-9E03-E2798216E2D5} (C:\Program Files\IMinent Toolbar	bcore3.dll)
HKCU_Toolbar\WebBrowser|{ECDEE021-0D17-467F-A1FF-C7A115230949} (C:\Program Files\free-downloads.net\prxtbfre2.dll)
HKLM_Toolbar|{977AE9CC-AF83-45E8-9E03-E2798216E2D5} (C:\Program Files\IMinent Toolbar	bcore3.dll)
HKLM_Toolbar|{ecdee021-0d17-467f-a1ff-c7a115230949} (C:\Program Files\free-downloads.net\prxtbfre2.dll)
HKLM_Toolbar|{8dcb7100-df86-4384-8842-8fa844297b3f} ("C:\Program Files\Microsoft\BingBar\BingExt.dll") (x)
HKLM_ElevationPolicy\887ba98f-98d3-4014-a0c2-0f0db431e519 - C:\Program Files\free-downloads.net\free-downloads.netToolbarHelper.exe (?)
HKLM_ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291} - C:\Program Files\IMinent Toolbar\TbHelper2.exe (?)
HKLM_ElevationPolicy\{8560E315-89C1-46BE-944A-00EC66BF19D2} - C:\Program Files\free-downloads.net\free-downloads.netToolbarHelper.exe (?)
HKLM_ElevationPolicy\{aa851425-0109-43f3-9ed2-7b7090125861} - C:\Program Files\Microsoft\BingBar\BingBar.exe (Microsoft Corporation.)
HKLM_ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08} - C:\Program Files\Iminent\MMServer\Iminent.MMServer.exe (x)
HKLM_ElevationPolicy\{FD95792D-88FD-441C-B002-289B5CA35067} - C:\Documents and Settingsené la pomme\Local Settings\Application Data\Conduit\CT1098640\free-downloads.netAutoUpdaterHelper.exe (?)
HKLM_Extensions\{CCA281CA-C863-46ef-9331-5C8D4460577F} - "@btrez.dll,-4015" (C:\Program Files\WIDCOMM\Bluetooth Software\bt_cold_icon.ico)
HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
BHO\{58124A0B-DC32-4180-9BFF-E0E21AE34026} - "TBSB01620 Class" (C:\Program Files\IMinent Toolbar	bcore3.dll)
BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)
BHO\{7DB2D5A0-7241-4E79-B68D-6309F01C5231} - "scriptproxy" (c:\PROGRA~1\mcafee\VIRUSS~1\scriptsn.dll)
BHO\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - "Skype Browser Helper" (C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll)
BHO\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "Bing Bar Helper" ("C:\Program Files\Microsoft\BingBar\BingExt.dll") (x)
BHO\{ecdee021-0d17-467f-a1ff-c7a115230949} - "free-downloads.net Toolbar" (C:\Program Files\free-downloads.net\prxtbfre2.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 186 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 13 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 14/09/2011 17:47:40 (10587 Octet(s)) 

Fin à: 17:50:17, 14/09/2011 
 
============== E.O.F ==============

Smart91 · Answer

Je réppète ce que j'ai dit à byvaal1 ICI
C'est-à-dire:
"Un petit bonjour est toujours appréciable et ne coûte rien:-( 

Cette discussion est résolue. Il vaut mieux en créer une nouvelle sur le forum V/S et bien expliquer ton pb."

Smart

Problème avec le virus QuestScan!

26 réponses

Discussions similaires