PC ralentit par un svchost.exe

Résolu

Device

fablc56 Messages postés 29 Date d'inscription Statut Membre Dernière intervention -
2011N2 Messages postés 13352 Date d'inscription Statut Contributeur sécurité Dernière intervention - 4 août 2011 à 20:32

Bonjour,

Mon PC est devenu hyper lent depuis qques tps. En vérifiant ds le gestionnaire de tache, j'ai un processus svchost.exe qui se lance et qui prend 100% de la ressource. Je dois systématiquement terminer ce processus pour revenir à la normal, ms il revient tout le temps.

J'ai fait un scan par Avast et ça n'a rien changé

Qq'un pourrait il me filer un coup de main pour supprimer ce que je pense etre un virus?

Merci d'avance...

J'ai fait une analyse par hijack this :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:19:13, on 01/08/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\PROGRA~1\LAUNCH~1\LManager.exe
C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\PROGRA~1\WI9130~1\Datamngr\DATAMN~1.EXE
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Acer\Acer VCM\AcerVCM.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Documents and Settings\Le Corronc\Application Data\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\igfxext.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Acer\Acer VCM\RS_Service.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\DOCUME~1\LECORR~1\LOCALS~1\Temp\RtkBtMnt.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Acer\Acer VCM\Vc.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\Le Corronc\Mes documents\Téléchargements\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=0&o=xph&d=0709&m=aspire_one
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2542115
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer fourni par 01net.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\prxtbSof0.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
O2 - BHO: Softonic_France - {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\prxtbSof0.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Searchqu Toolbar - {7FF99715-3016-4381-84CE-E4E4C9673020} - C:\PROGRA~1\WI9130~1\ToolBar\SearchquDx.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: (no name) - {66886C4D-B307-4ECA-A228-52CA9B9851A4} - (no file)
O3 - Toolbar: Searchqu Toolbar - {7FF99715-3016-4381-84CE-E4E4C9673020} - C:\PROGRA~1\WI9130~1\ToolBar\SearchquDx.dll
O3 - Toolbar: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\prxtbSof0.dll
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\Audio\Drivers\AzMixerSel.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [PLFSetL] C:\WINDOWS\PLFSetL.exe
O4 - HKLM\..\Run: [snp2uvc] rundll32.exe C:\WINDOWS\system32\csnp2uvc.dll,ResetCIDS
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Babylon Client] C:\Program Files\Babylon\Babylon-Pro\Babylon.exe -AutoStart
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [asuifpqwycofxt] C:\WINDOWS\System32\regsvr32.exe /s "C:\WINDOWS\system32\vdvisqaqiplpnkx.dll"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [DATAMNGR] C:\PROGRA~1\WI9130~1\Datamngr\DATAMN~1.EXE
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [FB6BEC19] C:\Documents and Settings\Le Corronc\Application Data\svchost.exe
O4 - HKLM\..\Run: [H5DGJS598963DH] C:\Documents and Settings\Le Corronc\Application Data\Avir\svchost.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Whigocalolac] rundll32.exe "C:\WINDOWS\FR3gfa.dll",Startup
O4 - HKCU\..\Run: [5Z3U4G4I5X6G3F7JXBZOJQSGFEOCE] C:\newdnswatch\newdnswatch.exe /q
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [FB6BEC19] C:\Documents and Settings\Le Corronc\Application Data\svchost.exe
O4 - HKCU\..\Run: [H5DGJS598963DH] C:\Documents and Settings\Le Corronc\Application Data\Avir\svchost.exe
O4 - HKLM\..\Policies\Explorer\Run: [FB6BEC19] C:\Documents and Settings\Le Corronc\Application Data\svchost.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [FB6BEC19] C:\Documents and Settings\LocalService\Application Data\svchost.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [H5DGJS598963DH] C:\Documents and Settings\LocalService\Application Data\Avir\svchost.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Acer VCM.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
O8 - Extra context menu item: Translate this web page with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm
O8 - Extra context menu item: Translate with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: PokerStars.fr - {90EAE591-7E7E-434a-8E28-ECFD00071806} - C:\Program Files\PokerStars.FR\PokerStarsUpdate.exe
O9 - Extra button: Afficher ou masquer l'HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (file missing)
O9 - Extra 'Tools' menuitem: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www.01net.com/
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O20 - AppInit_DLLs: c:\progra~1\wi9130~1\datamngr\datamngr.dll
O21 - SSODL: SwUpdate - {003541A1-3BC0-1B1C-AAF3-040114001C01} - C:\Documents and Settings\All Users\Application Data\Macromedia\SwUpdate\swupdate.dll (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: Raw Socket Service (RS_Service) - Acer Incorporated - C:\Program Files\Acer\Acer VCM\RS_Service.exe
O23 - Service: PC Tools Security Service (sdCoreService) - Unknown owner - C:\Program Files\PC Tools Security\pctsSvc.exe (file missing)

Afficher la suite

A voir également:

Asw tools svc.exe
Svchost.exe - Guide
Pc ralenti - Guide
Réinitialiser un pc - Guide
Test performance pc - Guide
Downloader for pc - Télécharger - Téléchargement & Transfert

53 réponses

Réponse 21 / 53

2011N2 Messages postés 13352 Date d'inscription Statut Contributeur sécurité Dernière intervention 917

Oulah ! Effectivement.

Refais moi un ZHPdiag STP ;)

Sinon, tu cracks (Emule par exemple) ou pas ?

@+

Gabriel.

Réponse 22 / 53

fablc56 Messages postés 29 Date d'inscription Statut Membre Dernière intervention

OK je lance l'analyse ZHPdiag.
J'ai Emule ms sinon j'ai pas de logiciel cracké.

Réponse 23 / 53

2011N2 Messages postés 13352 Date d'inscription Statut Contributeur sécurité Dernière intervention 917

Ok.
Et tu t'en sert d'Emule ?

@+

Gabriel.

Réponse 24 / 53

fablc56 Messages postés 29 Date d'inscription Statut Membre Dernière intervention

voici le lien généré : https://www.cjoint.com/?AHcwHjRCb2E

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question

Réponse 25 / 53

fablc56 Messages postés 29 Date d'inscription Statut Membre Dernière intervention

je me suis resservie d'Emule ce WE, ms ca faisait un moment que je l'avais plus utilisé. Par contre le processus Svchost est arrivé il y a 1 mois de ça, avant que je retourne sur Emule

Réponse 26 / 53

2011N2 Messages postés 13352 Date d'inscription Statut Contributeur sécurité Dernière intervention 917

Tu es à nouveau très infecté !!!

Tu t'es servit d'Emule depuis le début du sujet ?

Refais ça STP ==> https://forums.commentcamarche.net/forum/affich-22776401-pc-ralentit-par-un-svchost-exe#3

@+

Gabriel.

Réponse 27 / 53

fablc56 Messages postés 29 Date d'inscription Statut Membre Dernière intervention

non je me suis pas servi d'emule depuis le départ. Voici le rapport :

======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [3]) -> Lancé à 22:48:14 le 02/08/2011, Mode normal

Microsoft Windows XP Édition familiale Service Pack 3 (X86)
Le Corronc@ACER-932E1ED6FF ( )

============== ACTION(S) ==============

(!) -- Fichiers temporaires supprimés.

-- Fichier ouvert: C:\Documents and Settings\Le Corronc\Application Data\Mozilla\FireFox\Profiles\we25yd7x.default\Prefs.js --
/!\ Impossible d'ouvrir le fichier, nettoyage interrompu /!\
-- Fichier Fermé --

============== SCAN ADDITIONNEL ==============

**** Mozilla Firefox Version [5.0 (fr)] ****

Searchplugins\babylon.xml (hxxp://isearch.babylon.com/web/{searchTerms})
Searchplugins\bing.xml ( hxxp://www.bing.com/search)
Components\browsercomps.dll (Mozilla Foundation)
Extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} (Skype extension )
HKLM_Extensions|smartwebprinting@hp.com - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
HKCU_Extensions|smartwebprinting@hp.com - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

-- C:\Documents and Settings\Le Corronc\Application Data\Mozilla\FireFox\Profiles\we25yd7x.default --
Searchplugins\Mp3Tube.xml (?)
User.js - keyword.URL, hxxp://mp3tubetoolbarsearch.com/?prt=pinballtb02ff&Keywords=
Prefs.js - browser.download.lastDir, C:\\Documents and Settings\\Le Corronc\\Bureau
Prefs.js - browser.search.defaultenginename, Web Search
Prefs.js - browser.search.defaulturl, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2542115&SearchSource=3&q={searchTerms}
Prefs.js - browser.search.selectedEngine, Web Search
Prefs.js - browser.search.selectedEngineURL, hxxp://mp3tubetoolbarsearch.com/?tmp=toolbar_mp3tube_results&prt=pinballtb01ff&clid=c8...
Prefs.js - browser.startup.homepage, hxxp://www.facebook.com/?ref=hp
Prefs.js - browser.startup.homepage_override.buildID, 20110615151330
Prefs.js - browser.startup.homepage_override.mstone, rv:5.0
Prefs.js - keyword.URL, hxxp://mp3tubetoolbarsearch.com/?prt=pinballtb02ff&Keywords=

========================================

**** Internet Explorer Version [6.0.2900.5512] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKCU_URLSearchHooks|{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files\Softonic_France\prxtbSof0.dll)
HKCU_SearchScopes\{7E98B47D-FC93-4F33-9822-3DAC925F4059} - "Yahoo-Mp3Tube" (hxxp://mp3tubetoolbarsearch.com/?tmp=toolbar_Mp3Tube_results&prt=pinballtb01ie&K...)
HKCU_Toolbar\WebBrowser|{4DAAC69C-CBA7-45E2-9BC8-1044483D3352} (C:\Program Files\Softonic_France\prxtbSof0.dll)
HKCU_Toolbar\WebBrowser|{472734EA-242A-422B-ADF8-83D1E48CC825} (x)
HKLM_Toolbar|{4daac69c-cba7-45e2-9bc8-1044483d3352} (C:\Program Files\Softonic_France\prxtbSof0.dll)
HKLM_ElevationPolicy\{74351F14-5437-4d87-805B-04D409B09976} - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (x)
HKLM_ElevationPolicy\{8958F25D-F443-4068-A0B3-A291EDA5B14F} - C:\Documents and Settings\Le Corronc\Local Settings\Application Data\Conduit\CT2542115\Softonic_FranceAutoUpdaterHelper.exe (x)
HKLM_Extensions\{85d1f590-48f4-11d9-9669-0800200c9a66} - "?" (?)
HKLM_Extensions\{90EAE591-7E7E-434a-8E28-ECFD00071806} - "PokerStars.fr" (C:\Program Files\PokerStars.FR\main.ico)
HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
HKLM_Extensions\{F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - "Translate this web page with Babylon" (C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll,202)
BHO\{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files\Softonic_France\prxtbSof0.dll)
BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)
BHO\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - "Skype Browser Helper" (C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 609 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 31 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 01/08/2011 21:23:28 (12586 Octet(s))
C:\Ad-Report-CLEAN[2].txt - 01/08/2011 23:10:10 (5252 Octet(s))
C:\Ad-Report-CLEAN[3].txt - 02/08/2011 22:48:21 (4674 Octet(s))
C:\Ad-Report-SCAN[1].txt - 01/08/2011 20:45:58 (17551 Octet(s))
C:\Ad-Report-SCAN[2].txt - 01/08/2011 23:03:58 (8061 Octet(s))
C:\Ad-Report-SCAN[3].txt - 01/08/2011 23:05:53 (8126 Octet(s))

Fin à: 22:49:42, 02/08/2011

============== E.O.F ==============

Réponse 28 / 53

fablc56 Messages postés 29 Date d'inscription Statut Membre Dernière intervention

RogueKiller V5.2.7 [30/06/2011] par Tigzy
contact sur https://www.luanagames.com/index.fr.html
mail: tigzyRK<at>gmail<dot>com
Remontees: https://www.luanagames.com/index.fr.html

Systeme d'exploitation: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Demarrage : Mode normal
Utilisateur: Le Corronc [Droits d'admin]
Mode: Recherche -- Date : 02/08/2011 23:07:32

Processus malicieux: 0

Entrees de registre: 9
[BLACKLIST DLL] HKCU\[...]\Run : Whigocalolac (rundll32.exe "C:\WINDOWS\FR3gfa.dll",Startup) -> FOUND
[SUSP PATH] HKUS\.DEFAULT[...]\Run : 8DDYX0ZBPZ (C:\WINDOWS\TEMP\Fdg.exe) -> FOUND
[SUSP PATH] HKUS\.DEFAULT[...]\Run : XMZH42I4GI (C:\WINDOWS\TEMP\Fdf.exe) -> FOUND
[SUSP PATH] HKUS\.DEFAULT[...]\Run : H5DGJS598963DH (C:\Documents and Settings\LocalService\Application Data\Avir\svchost.exe) -> FOUND
[BLACKLIST DLL] HKUS\S-1-5-21-1110412475-604499833-2237029002-1005[...]\Run : Whigocalolac (rundll32.exe "C:\WINDOWS\FR3gfa.dll",Startup) -> FOUND
[SUSP PATH] HKUS\S-1-5-18[...]\Run : 8DDYX0ZBPZ (C:\WINDOWS\TEMP\Fdg.exe) -> FOUND
[SUSP PATH] HKUS\S-1-5-18[...]\Run : XMZH42I4GI (C:\WINDOWS\TEMP\Fdf.exe) -> FOUND
[SUSP PATH] HKUS\S-1-5-18[...]\Run : H5DGJS598963DH (C:\Documents and Settings\LocalService\Application Data\Avir\svchost.exe) -> FOUND
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

Fichier HOSTS:
127.0.0.1 localhost
74.125.45.100 4-open-davinci.com
74.125.45.100 securitysoftwarepayments.com
74.125.45.100 privatesecuredpayments.com
74.125.45.100 secure.privatesecuredpayments.com
74.125.45.100 getantivirusplusnow.com
74.125.45.100 secure-plus-payments.com
74.125.45.100 www.getantivirusplusnow.com
74.125.45.100 www.secure-plus-payments.com
74.125.45.100 www.getavplusnow.com
74.125.45.100 safebrowsing-cache.google.com
74.125.45.100 urs.microsoft.com
74.125.45.100 www.securesoftwarebill.com
74.125.45.100 secure.paysecuresystem.com
74.125.45.100 paysoftbillsolution.com
74.125.45.100 protected.maxisoftwaremart.com

Termine : << RKreport[1].txt >>
RKreport[1].txt

Réponse 29 / 53

2011N2 Messages postés 13352 Date d'inscription Statut Contributeur sécurité Dernière intervention 917

Re,

Ok.
Relance RogueKiller en mode 2 (suppression).

Merci,

Gabriel.

Réponse 30 / 53

fablc56 Messages postés 29 Date d'inscription Statut Membre Dernière intervention

OK fait.

le rapport :

RogueKiller V5.2.7 [30/06/2011] par Tigzy
contact sur https://www.luanagames.com/index.fr.html
mail: tigzyRK<at>gmail<dot>com
Remontees: https://www.luanagames.com/index.fr.html

Systeme d'exploitation: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Demarrage : Mode normal
Utilisateur: Le Corronc [Droits d'admin]
Mode: Suppression -- Date : 02/08/2011 23:18:30

Processus malicieux: 0

Entrees de registre: 5
[BLACKLIST DLL] HKCU\[...]\Run : Whigocalolac (rundll32.exe "C:\WINDOWS\FR3gfa.dll",Startup) -> DELETED
[SUSP PATH] HKUS\.DEFAULT[...]\Run : 8DDYX0ZBPZ (C:\WINDOWS\TEMP\Fdg.exe) -> DELETED
[SUSP PATH] HKUS\.DEFAULT[...]\Run : XMZH42I4GI (C:\WINDOWS\TEMP\Fdf.exe) -> DELETED
[SUSP PATH] HKUS\.DEFAULT[...]\Run : H5DGJS598963DH (C:\Documents and Settings\LocalService\Application Data\Avir\svchost.exe) -> DELETED
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

Fichier HOSTS:
127.0.0.1 localhost
74.125.45.100 4-open-davinci.com
74.125.45.100 securitysoftwarepayments.com
74.125.45.100 privatesecuredpayments.com
74.125.45.100 secure.privatesecuredpayments.com
74.125.45.100 getantivirusplusnow.com
74.125.45.100 secure-plus-payments.com
74.125.45.100 www.getantivirusplusnow.com
74.125.45.100 www.secure-plus-payments.com
74.125.45.100 www.getavplusnow.com
74.125.45.100 safebrowsing-cache.google.com
74.125.45.100 urs.microsoft.com
74.125.45.100 www.securesoftwarebill.com
74.125.45.100 secure.paysecuresystem.com
74.125.45.100 paysoftbillsolution.com
74.125.45.100 protected.maxisoftwaremart.com

Termine : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt

Réponse 31 / 53

2011N2 Messages postés 13352 Date d'inscription Statut Contributeur sécurité Dernière intervention 917

Ok.

- Télécharge UsbFix (créé par El Desaparecido & C_XX) sur ton Bureau : http://www.teamxscript.org/usbfixTelechargement.html Si ton antivirus affiche une alerte, ignore la et désactive l'antivirus temporairement.
- Branche toutes tes sources de données externes à ton PC (clé USB, disque dur externe, etc...) sans les ouvrir
- Double clique sur le raccourci UsbFix sur ton Bureau, l'installation se fera automatiquement.
- Clique sur "Recherche".
- Laisse travailler l'outil.
- À la fin du scan, un rapport va s'afficher : post-le dans ta prochaine réponse sur le forum (il est aussi sauvegardé a la racine du disque dur).

Merci,

Gabriel.

Réponse 32 / 53

fablc56 Messages postés 29 Date d'inscription Statut Membre Dernière intervention

le rapport, en périphérique, j'ai juste une clé USB, rien d'autre :

############################## | UsbFix 7.053 | [Recherche]

Utilisateur: Le Corronc (Administrateur) # ACER-932E1ED6FF [ ]
Mis à jour le 30/07/2011 par El Desaparecido
Lancé à 23:28:33 | 02/08/2011
Site Web: http://www.teamxscript.org
Submit your sample: http://www.teamxscript.org/Upload.php
Contact: TeamXscript.ElDesaparecido@gmail.com

CPU: Intel(R) Atom(TM) CPU N270 @ 1.60GHz
CPU 2: Intel(R) Atom(TM) CPU N270 @ 1.60GHz
Microsoft Windows XP Édition familiale (5.1.2600 32-Bit) # Service Pack 3
Internet Explorer 6.0.2900.5512

Pare-feu Windows: Désactivé /!\
Antivirus: avast! Antivirus 5.0.83886757 [(!) Disabled | Updated]
RAM -> 1014 Mo
C:\ (%systemdrive%) -> Disque fixe # 143 Go (77 Go libre(s) - 54%) [ACER] # NTFS
D:\ -> Disque amovible # 7 Go (7 Go libre(s) - 88%) [SWIVEL] # FAT32

################## | Éléments infectieux |

Présent! C:\DOCUME~1\LECORR~1\LOCALS~1\Temp\SetupDataMngr_Searchqu.exe

################## | Registre |

################## | Mountpoints2 |

HKCU\.\.\.\.\Explorer\MountPoints2\{834c8e1b-45bb-11df-bd52-00235a5baa67}
Shell\AutoRun\Command = ph.exe
Shell\open\Command = ph.exe

HKCU\.\.\.\.\Explorer\MountPoints2\{b5667d5f-14dd-11df-bd09-00235a5baa67}
Shell\AutoRun\Command = D:\Setup.exe

################## | Vaccin |

(!) Cet ordinateur n'est pas vacciné!

################## | E.O.F |

Réponse 33 / 53

2011N2 Messages postés 13352 Date d'inscription Statut Contributeur sécurité Dernière intervention 917

Ok.
Passe USBfix en mode suppression puis poste le rapport ;)

/!\ Désactive provisoirement et seulement le temps de l'utilisation d'USBFIX, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...."

sur l'icône Usbfix située sur ton Bureau.
Sur la page, clique sur le bouton :

▶ choisi l'option Suppression

▶ UsbFix scannera ton pc, laisse travailler l outil.

▶ Ensuite post le rapport UsbFix.txt qui apparaitra avec le bureau .

▶ Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.(C:\UsbFix.txt)

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller)

@+

Gabriel.

Réponse 34 / 53

fablc56 Messages postés 29 Date d'inscription Statut Membre Dernière intervention

le rapport :

############################## | UsbFix 7.053 | [Suppression]

Utilisateur: Le Corronc (Administrateur) # ACER-932E1ED6FF [ ]
Mis à jour le 30/07/2011 par El Desaparecido
Lancé à 23:43:17 | 02/08/2011
Site Web: http://www.teamxscript.org
Submit your sample: http://www.teamxscript.org/Upload.php
Contact: TeamXscript.ElDesaparecido@gmail.com

CPU: Intel(R) Atom(TM) CPU N270 @ 1.60GHz
CPU 2: Intel(R) Atom(TM) CPU N270 @ 1.60GHz
Microsoft Windows XP Édition familiale (5.1.2600 32-Bit) # Service Pack 3
Internet Explorer 6.0.2900.5512

Pare-feu Windows: Désactivé /!\
Antivirus: avast! Antivirus 5.0.83886757 [Enabled | Updated]
RAM -> 1014 Mo
C:\ (%systemdrive%) -> Disque fixe # 143 Go (77 Go libre(s) - 54%) [ACER] # NTFS
D:\ -> Disque amovible # 7 Go (7 Go libre(s) - 88%) [SWIVEL] # FAT32

################## | Éléments infectieux |

Supprimé! C:\DOCUME~1\LECORR~1\LOCALS~1\Temp\SetupDataMngr_Searchqu.exe
Supprimé! C:\Recycler\S-1-5-21-1110412475-604499833-2237029002-1005

################## | Registre |

################## | Mountpoints2 |

Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{834c8e1b-45bb-11df-bd52-00235a5baa67}
Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{b5667d5f-14dd-11df-bd09-00235a5baa67}

################## | Listing |

[08/05/2010 - 13:20:20 | D ] C:\33596a1adf5d5e38ec39e95d
[11/08/2009 - 23:43:16 | D ] C:\86a244746c5cdbb802e765150d90bb
[22/04/2009 - 22:04:51 | D ] C:\ACER
[01/08/2011 - 21:28:02 | N | 12586] C:\Ad-Report-CLEAN[1].txt
[01/08/2011 - 23:13:02 | N | 5252] C:\Ad-Report-CLEAN[2].txt
[02/08/2011 - 22:49:42 | N | 5251] C:\Ad-Report-CLEAN[3].txt
[01/08/2011 - 20:46:55 | N | 17551] C:\Ad-Report-SCAN[1].txt
[01/08/2011 - 23:05:30 | N | 8061] C:\Ad-Report-SCAN[2].txt
[01/08/2011 - 23:07:20 | N | 8126] C:\Ad-Report-SCAN[3].txt
[09/05/2010 - 10:34:37 | N | 27808] C:\ASLog.txt
[20/01/2009 - 02:42:35 | N | 0] C:\AUTOEXEC.BAT
[20/01/2009 - 04:18:23 | D ] C:\Book
[17/03/2010 - 15:48:17 | N | 217] C:\boot.ini
[14/04/2008 - 14:00:00 | N | 4952] C:\Bootfont.bin
[31/07/2011 - 15:47:32 | D ] C:\Config.Msi
[20/01/2009 - 02:42:35 | N | 0] C:\CONFIG.SYS
[16/07/2009 - 05:02:09 | D ] C:\Documents and Settings
[28/11/2009 - 18:03:11 | D ] C:\Downloads
[02/08/2011 - 22:50:36 | ASH | 1063202816] C:\hiberfil.sys
[01/08/2011 - 19:42:45 | D ] C:\i386
[20/01/2009 - 03:29:34 | D ] C:\Intel
[20/01/2009 - 02:42:35 | N | 0] C:\IO.SYS
[11/09/2008 - 11:27:43 | N | 2488] C:\MOD01WOS02FRP20001.enc
[20/01/2009 - 02:42:35 | N | 0] C:\MSDOS.SYS
[20/01/2009 - 03:39:19 | RHD ] C:\MSOCache
[14/04/2008 - 14:00:00 | N | 47564] C:\NTDETECT.COM
[14/04/2008 - 14:00:00 | N | 252240] C:\ntldr
[02/08/2011 - 22:50:35 | ASH | 1598029824] C:\pagefile.sys
[02/08/2011 - 22:28:41 | N | 512] C:\PhysicalDisk0_MBR.bin
[02/08/2011 - 20:10:29 | D ] C:\Program Files
[02/08/2011 - 22:22:26 | N | 0] C:\Program1
[02/08/2011 - 23:45:37 | SHD ] C:\RECYCLER
[20/01/2009 - 03:33:55 | N | 1701] C:\RHDSetup.log
[22/04/2009 - 13:16:06 | N | 215] C:\Setup.log
[10/07/2011 - 13:07:02 | SHD ] C:\System Volume Information
[01/08/2011 - 22:23:07 | N | 51722] C:\TDSSKiller.2.5.13.0_01.08.2011_22.10.34_log.txt
[02/08/2011 - 23:45:37 | D ] C:\UsbFix
[02/08/2011 - 23:45:37 | A | 1043] C:\UsbFix.txt
[11/09/2008 - 11:21:58 | D ] C:\VALUEADD
[02/08/2011 - 22:23:10 | D ] C:\WINDOWS
[15/03/2010 - 17:24:18 | N | 1916928] D:\ImationLOCK.exe
[15/12/2009 - 17:49:58 | N | 773100] D:\ImationLOCKv20-D Manual.pdf
[12/04/2011 - 09:25:30 | N | 86677630] D:\ATEX1_echantillon_SANDERS.flv
[17/05/2011 - 10:48:50 | N | 21943296] D:\formation ATEX v2011.ppt
[02/06/2011 - 14:03:48 | N | 4096] D:\._.Trashes
[02/06/2011 - 14:03:48 | D ] D:\.Trashes
[02/06/2011 - 14:03:48 | D ] D:\.Spotlight-V100
[02/06/2011 - 14:03:54 | D ] D:\FCS - Heillecourt 15.05.11 Match de la montée
[02/06/2011 - 14:03:54 | D ] D:\FCS - HdL Demi-finale Coupe District 22.05.11
[10/07/2011 - 19:04:48 | N | 4320051] D:\01-la_fouine-toute_la_night (STREET-RLZ).mp3
[10/07/2011 - 19:09:22 | N | 6223404] D:\04.La Fouine - d'où l'on vient.mp3
[10/07/2011 - 19:13:08 | N | 5430699] D:\08 - KEEN V & SAP - J'aimerais trop ....mp3
[10/07/2011 - 19:16:42 | N | 8552528] D:\11 Swedish House Mafia - Save The World.mp3
[10/07/2011 - 19:20:52 | N | 3980190] D:\13 - keen'v - Génération sexe, drogue et vodka.mp3
[10/07/2011 - 19:25:08 | N | 4579263] D:\014 - Michael Jackson - Black Or White.mp3
[31/05/2011 - 22:25:34 | N | 4628951] D:\50 Cent ft. Jeremih - Down On Me (Prod. By Drummaboy) (2010) [www.RnB4U.in].mp3
[10/07/2011 - 19:32:12 | N | 4786145] D:\109-lucenzo_feat_big_ali-vem_dancar_kuduro.mp3
[10/07/2011 - 19:35:36 | N | 5711585] D:\114-pitbull_feat_t-pain-hey_baby_(drop_it_to_the_floor).mp3
[10/07/2011 - 19:39:28 | N | 9195740] D:\Adele - Rolling In The Deep.mp3
[31/05/2011 - 22:20:50 | N | 7853884] D:\Alexandra Stan- mr saxobeat.mp3
[31/05/2011 - 22:53:20 | N | 4946643] D:\Black Eyed Peas - I Gotta Feeling(1).mp3
[31/05/2011 - 22:38:32 | N | 6811507] D:\Black Eyed Peas - Rock that body (2).mp3
[31/05/2011 - 22:45:12 | N | 7442912] D:\Black Eyed Peas - The Time (The Dirty Bit).mp3
[31/05/2011 - 23:02:26 | N | 4049024] D:\Bob Sinclar feat. Raffaella Carra - Far lAmore.mp3
[11/06/2011 - 11:20:56 | N | 8297625] D:\Booba - Comme une etoile.mp3
[31/05/2011 - 21:54:22 | N | 9535075] D:\Britney spears - Till the world ends.mp3
[17/06/2011 - 09:22:28 | N | 5325018] D:\Bruno Mars - The Lazy Song.mp3
[31/05/2011 - 22:37:32 | N | 3348002] D:\Chris Brown - Forever (1).mp3
[31/05/2011 - 22:41:42 | N | 4575264] D:\Chris Brown - Look At Me Now (Feat..mp3
[31/05/2011 - 22:39:34 | N | 5087232] D:\Chris Brown - With You .mp3
[31/05/2011 - 22:30:46 | N | 3606657] D:\Chris Brown - Yeah 3x (1).mp3
[01/06/2011 - 00:57:04 | N | 10399092] D:\Collectif metisse - Laisse Tomber Tes Problèmes (Extended Mix).mp3
[30/07/2011 - 22:32:32 | N | 3887232] D:\Colonel Reyel - Aurélie - LA VRAI!!!.mp3
[31/05/2011 - 21:16:08 | N | 4890585] D:\Colonel Reyel - Celui mp3.mp3
[31/05/2011 - 21:29:04 | N | 3271816] D:\Colonel Reyel - Toutes les nuits - Paroles officiel.mp3
[29/05/2011 - 19:24:20 | N | 5459200] D:\David Guetta feat. Nicki Minaj & Flo Rida - Where Them Girls At.mp3
[31/05/2011 - 23:46:24 | N | 7813116] D:\Dj Antoine Vs Timati Feat Kalenna - Welcome To St Tropez (Dj Antoine Vs Mad Mark Radio Edit).mp3
[31/05/2011 - 23:21:40 | N | 12060226] D:\Dj Frank - discotex (club mix).mp3
[31/05/2011 - 22:13:00 | N | 6425472] D:\Inna - 10 Minutes.mp3
[30/07/2011 - 22:40:34 | N | 5012838] D:\INNA - Amazing.mp3
[31/05/2011 - 22:07:08 | N | 5290008] D:\Inna - Hot.mp3
[31/05/2011 - 21:57:50 | N | 8957793] D:\INNA - Sun is UP.mp3
[31/05/2011 - 22:19:10 | N | 3779636] D:\Inna feat. Bob Taylor - Deja Vu.mp3
[29/05/2011 - 19:38:14 | N | 5541549] D:\Jennifer Lopez - On The Floor (Feat. Pitbull) (Final Version and Untagged) HQ.mp3
[29/05/2011 - 18:48:44 | N | 4682661] D:\Jennifer Lopez Ft. Pitbull - On The Floor.mp3
[31/05/2011 - 22:26:34 | N | 3664170] D:\Jeremih-Birthday Sex.mp3
[31/05/2011 - 23:06:04 | N | 7058304] D:\Jessie J-Price Tag (Feat. B.o.B)-HIF.mp3
[01/06/2011 - 00:52:00 | N | 4794240] D:\Keen V - Phenom'n.mp3
[01/06/2011 - 13:53:54 | N | 4431979] D:\Keen'v - A L'horizontal.mp3
[01/06/2011 - 13:47:18 | N | 2009122] D:\Keen'V - J'perd Le Controle.mp3
[01/06/2011 - 13:52:34 | N | 3254275] D:\Keen'v - Si It'es En Soirée.mp3
[11/06/2011 - 10:58:52 | N | 4229736] D:\La Fouine Toute la night.mp3
[30/07/2011 - 22:48:34 | N | 19283144] D:\LAURENT WOLF - SUZY (CLUB MIX).mp3
[30/07/2011 - 22:24:08 | N | 10907734] D:\LMFAO - Party Rock Anthem (Feat. Lauren Bennett & Goon Rock) - NewJams.net(1).mp3
[05/06/2011 - 12:52:30 | N | 7298008] D:\Loona - Vamos A La Playa 2010.mp3
[31/05/2011 - 22:53:46 | N | 3291737] D:\M Pokora - A Nos Actes Manqués.mp3
[31/05/2011 - 21:58:52 | N | 3550723] D:\Magic System - Cherie Coco Feat Soprano By Hraco.mp3
[31/05/2011 - 23:30:24 | N | 7276755] D:\Magic systeme - Ambiance à l'africaine.mp3
[01/06/2011 - 14:08:18 | N | 5239789] D:\Mohombi feat. Nicole Scherzinger - Coconut Tree (Prod. by RedOne).mp3
[31/05/2011 - 21:55:10 | N | 8165647] D:\Pitbull feat. Ne-Yo & Nayer - Give me everything (Tonight) (Prod. by Afrojack).mp3
[30/07/2011 - 22:16:16 | N | 5864519] D:\Rihanna - S&M.mp3
[31/05/2011 - 23:40:16 | N | 6265813] D:\Rihanna Feat David Guetta-Who's That Chick.mp3
[31/05/2011 - 22:40:54 | N | 5203909] D:\Sexion D Assaut - A bout de souffle.mp3
[31/05/2011 - 22:06:50 | N | 3759156] D:\Sexion D Assaut - Paris va bien OFFICIEL Les chroniques du 75 vol2 En attendant l Apoge .mp3
[31/05/2011 - 22:12:10 | N | 8100943] D:\Sexion D'Assaut - Qui T'A Dit .mp3
[31/05/2011 - 22:58:26 | N | 7142508] D:\Shakira - Sale El Sol - 08 - Rabiosa (Feat. Pitbull).mp3
[30/07/2011 - 21:55:18 | N | 7832817] D:\Snoop Dogg - David Guetta - Sweat (Remix).mp3
[31/05/2011 - 22:44:20 | N | 6723041] D:\Swedish House Mafia ft.Pharrell Williams - One (Your Name) (Radio Edit).mp3
[31/05/2011 - 23:02:46 | N | 5312640] D:\Swedish House Mafia vs. Tinie Tempah - Miami 2 Ibiza (OFFICIAL released version) - (high quality).mp3
[31/05/2011 - 22:44:30 | N | 8813056] D:\the Black Eyed Peas - Just Can't Get Enough.mp3
[31/05/2011 - 23:08:18 | N | 6637824] D:\The Swedish House Mafia & Laidback Luke - Leave The World Behind (FG HQ RADIO RIP).mp3
[31/05/2011 - 22:05:46 | N | 3366739] D:\Tinie Tempah ft. Eric Turner - Written in the Stars.mp3
[11/06/2011 - 11:59:20 | N | 3254219] D:\Toute la night La Fouine.mp3
[01/06/2011 - 13:51:18 | N | 7318182] D:\Willy william Feat. lylloo Hula hoop.mp3
[05/06/2011 - 13:24:28 | N | 4233781] D:\Wiz Khalifa - No sleep.mp3
[29/05/2011 - 17:46:28 | N | 9243225] D:\Wiz Khalifa - Roll Up.mp3
[29/05/2011 - 19:40:02 | N | 3797682] D:\Yannick Noah - Angela (2010).mp3
[12/06/2011 - 11:32:44 | N | 3130339] D:\- Michael Jackson - Smooth Criminal.mp3
[10/07/2011 - 22:08:02 | N | 4670133] D:\[19] Radio Killer - Lonely Heart (2010).mp3
[10/07/2011 - 18:57:46 | N | 4573208] D:\01 - Alexandra Stan - Get Back (ASAP).mp3
[10/07/2011 - 19:01:50 | N | 3948843] D:\01 - keen'v - Jeux sensuels.mp3
[02/08/2011 - 22:32:38 | N | 112168] D:\ZHPDiag.txt

################## | Vaccin |

C:\Autorun.inf -> Vaccin créé par UsbFix (TeamXscript)
D:\Autorun.inf -> Vaccin créé par UsbFix (TeamXscript)

################## | Upload |

Veuillez envoyer le fichier: C:\UsbFix_Upload_Me_ACER-932E1ED6FF.zip
http://www.teamxscript.org/Upload.php
Merci de votre contribution.

################## | E.O.F |

Réponse 35 / 53

2011N2 Messages postés 13352 Date d'inscription Statut Contributeur sécurité Dernière intervention 917

Très bien.
Vaccine tes supports, puis refais moi un ZHPdiag STP ;)

Merci,

Gabriel.

Réponse 36 / 53

Tigzy Messages postés 7498 Date d'inscription Statut Contributeur sécurité Dernière intervention 582

Salut

Fichier HOSTS:
127.0.0.1 localhost
74.125.45.100 4-open-davinci.com
74.125.45.100 securitysoftwarepayments.com
74.125.45.100 privatesecuredpayments.com
74.125.45.100 secure.privatesecuredpayments.com
74.125.45.100 getantivirusplusnow.com
74.125.45.100 secure-plus-payments.com
74.125.45.100 www.getantivirusplusnow.com
74.125.45.100 www.secure-plus-payments.com

Hum...

Réponse 37 / 53

fablc56 Messages postés 29 Date d'inscription Statut Membre Dernière intervention

j'ai vacciné ma clé (j'espère que ça a marché).

Voici le rapport après vaccination.

Rapport de ZHPDiag v1.28.09 par Nicolas Coolman, Update du 01/08/2011
Run by Le Corronc at 03/08/2011 20:10:49
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html

---\\ Web Browser
MSIE: Internet Explorer v6.0.2900.5512
MFIE: Mozilla Firefox 5.0 v (Defaut)

---\\ System Information
Windows XP Home Edition Service Pack 3 (Build 2600)
~ Processor: x86 Family 6 Model 28 Stepping 2, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 1013 MB (17% free)
System Restore: Activé (Enable)
System drive C: has 77 GB (54%) free of 143 GB

---\\ Logged in mode
~ Computer Name: ACER-932E1ED6FF
~ User Name: Le Corronc
~ All Users Names: SUPPORT_388945a0, Le Corronc, HelpAssistant, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O82
Logged in as Administrator

---\\ Environnement Variables
~ %AppData%=C:\Documents and Settings\Le Corronc\Application Data\
~ %Desktop%=C:\Documents and Settings\Le Corronc\Bureau\
~ %Favorites%=C:\Documents and Settings\Le Corronc\Favoris\
~ %LocalAppData%=C:\Documents and Settings\Le Corronc\Local Settings\Application Data\
~ %StartMenu%=C:\Documents and Settings\Le Corronc\Menu Démarrer\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 77 Go of 143 Go)
D:\ Floppy drive, Flash card reader, USB Key (Free 7 Go of 7 Go)

---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: Modified
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: Modified
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : Modified
~ Scan Security Center in 00mn 00s

---\\ Recherche particulière de fichiers génériques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.03/08/2011 - 13:00:00.) -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.93AD0B78C7357A05F50E594EC7C22300] - (....) (.03/08/2011 - 13:00:00.) -- C:\WINDOWS\system32\rundll32.exe [33792]
[MD5.05033943FF61ABD13B93C00337D04E92] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.03/08/2011 - 02:01:38.) -- C:\WINDOWS\system32\wininet.dll [670208]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.03/08/2011 - 13:00:00.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.03/08/2011 - 13:00:00.) -- C:\WINDOWS\system32\drivers\atapi.sys [96512]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.03/08/2011 - 13:00:00.) -- C:\WINDOWS\system32\drivers\ntfs.sys [574976]
~ Scan Generic Processes in 00mn 00s

---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 134/9326
~ Mes musiques (My Musics) : 620/3547
~ Mes Videos (My Videos) : 1/242
~ Mes Favoris (My Favorites) : 2/29
~ Mes Documents (My Documents) : 800/14691
~ Mon Bureau (My Desktop) : 2/15
~ Menu demarrer (Programs) : 5/27
~ Scan Hidden Files in 00mn 46s

---\\ Processus lancés
[MD5.B2386A8E66891F7CFEC9F5A03F0F1210] - (.AVAST Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [40384]
[MD5.6E1AC019C8FD1997BF5A17DA93627510] - (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [178712]
[MD5.415A6F70B64C224BED321B33F1874EB9] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.EXE [18081280]
[MD5.4C53C44E7C20E65445037954DC3A6BA4] - (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe [166424]
[MD5.D8F3B455D3FA4B40C9BF544F55647C19] - (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe [137752]
[MD5.1ABF80D4F4941ECEE600AEC768173523] - (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1430824]
[MD5.4520BAAA19759DD57F2F65A410A6933C] - (.Dritek System Inc. - Launch Manager.) -- C:\PROGRA~1\LAUNCH~1\LManager.exe [875016]
[MD5.F56197D5CBDCC6A87C242DC8B8EEEE34] - (.Intel Corporation - igfxsrvc Module.) -- C:\WINDOWS\system32\igfxsrvc.exe [256536]
[MD5.13E7CFE8E269ED15E7FC9C3EBBCB7E2B] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [254696]
[MD5.38AE7A942FC3FAB1C6A27EB65DE8F827] - (.AVAST Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2837864]
[MD5.5516C26A6AF8EB4E2CAB48EC98A74398] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [54576]
[MD5.33BFCE71F407F24E5DFDB7DD46CE2D6D] - (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [449584]
[MD5.5D539617604E953FD2DF852F4B51A383] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [15141768]
[MD5.33966F2BAB2FDDE7A436FB2C26C4F2AB] - (.Acer Incorporated - Acer VCM.) -- C:\Program Files\Acer\Acer VCM\AcerVCM.exe [565248]
[MD5.93AD0B78C7357A05F50E594EC7C22300] - (...) -- C:\WINDOWS\system32\rundll32.exe [33792]
[MD5.EAA666E9DD8DCDA6E075087091CB85EE] - (.Hewlett-Packard Co. - HP Digital Imaging Monitor.) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [275072]
[MD5.3A19B2D2B5659D375FFFBA9EB71987B8] - (.OpenOffice.org - OpenOffice.org 3.1.) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe [7424000]
[MD5.EEBD0B763F32A26421A35CC2C735E8E3] - (.OpenOffice.org - OpenOffice.org 3.1.) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin [7418368]
[MD5.CB686F44BF955EA02520710A56874FA4] - (.Intel Corporation - RAID Monitor.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [354840]
[MD5.9DBA73C2F1E76EC4CB837E67C5743596] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376]
[MD5.37036C07983EF1024B2FF3C28AAE5700] - (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [366640]
[MD5.7C36AFFA39FF126EB483F289604EFCC1] - (.Intel Corporation - igfxext Module.) -- C:\WINDOWS\system32\igfxext.exe [170520]
[MD5.38494041F19F6CD005B711F5E08FAE08] - (.Acer Incorporated - Raw Socket Service.) -- C:\Program Files\Acer\Acer VCM\RS_Service.exe [237568]
[MD5.A1953A905B76837B637863012E8641A9] - (.Realtek Semiconductor Corp. - Realtek HD Audio Data Rerouter.) -- C:\DOCUME~1\LECORR~1\LOCALS~1\Temp\RtkBtMnt.exe [212992]
[MD5.C180E890FFE0FDED8306427D3C836AF2] - (.Hewlett-Packard Co. - HP CUE Status Root.) -- C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe [174952]
[MD5.B29A08A0CB56CD5A4B9C53A011819657] - (.Hewlett-Packard Co. - HP CUE Alert Popup Window Objects.) -- C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe [565096]
[MD5.66BB5B07696219FA334452D6F51FD648] - (.Hewlett-Packard - GPCore COM object.) -- C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe [366720]
[MD5.6C9CD3ECBA6732661C8BBE37A877A2BD] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [924632]
[MD5.FF7D10C2F3891B9CB489F3F31D71D9BC] - (.Acer Incoporated - Acer Video Quality Enhancement.) -- C:\Program Files\Acer\Acer VCM\Vc.exe [1671168]
[MD5.4486AD32BB05628967695FCA1BADD46E] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [16856]
[MD5.D314901F9F9F1B0CB4F7C7B09AE1AF13] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [662528]
~ Scan Processes Running in 00mn 01s

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Documents and Settings\Le Corronc\Local Settings\Application Data\Mozilla\Firefox\Profiles\we25yd7x.default\prefs.js
M3 - MFPP: Plugins - [Le Corronc] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [Le Corronc] -- C:\Program Files\Mozilla FireFox\searchplugins\babylon.xml
M3 - MFPP: Plugins - [Le Corronc] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [Le Corronc] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [Le Corronc] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [Le Corronc] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [Le Corronc] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [Le Corronc] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
P2 - FPN: [HKLM] [@google.com/npPicasa3,version=3.0.0] - (.Google, Inc. - Picasa plugin.) -- C:\Program Files\Google\Picasa3\npPicasa3.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_26 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8117.0416] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll
P2 - FPN: [HKCU] [@facebook.com/FBPlugin,version=1.0.1] - (.Pas de propriétaire - Provides additional functionality on Facebook. See <a href="http://www.) -- C:\Documents and Settings\Le Corronc\Application Data\Facebook\npfbplugin_1_0_1.dll
P2 - FPN: [HKCU] [@facebook.com/FBPlugin,version=1.0.3] - (.Pas de propriétaire - Provides additional functionality on Facebook. See <a href="http://www.) -- C:\Documents and Settings\Le Corronc\Application Data\Facebook\npfbplugin_1_0_3.dll
~ Scan Firefox Browser in 00mn 02s

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKUS\S-1-5-21-1110412475-604499833-2237029002-1005\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKUS\S-1-5-21-1110412475-604499833-2237029002-1005\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Bibliothèque d'objets et de contrôles de do.) (No version) -- %SystemRoot%\system32\shdocvw.dll
R3 - URLSearchHook: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) (6.3.2.0) -- C:\Program Files\Softonic_France\prxtbSof0.dll
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2
~ Scan IE Browser in 00mn 00s

---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Scan Keys in 00mn 00s

---\\ Redirection du fichier Hosts (O1)
O1 - Hosts: 74.125.45.100 4-open-davinci.com
O1 - Hosts: 74.125.45.100 securitysoftwarepayments.com
O1 - Hosts: 74.125.45.100 privatesecuredpayments.com
O1 - Hosts: 74.125.45.100 secure.privatesecuredpayments.com
O1 - Hosts: 74.125.45.100 getantivirusplusnow.com
O1 - Hosts: 74.125.45.100 secure-plus-payments.com
O1 - Hosts: 74.125.45.100 www.getantivirusplusnow.com
O1 - Hosts: 74.125.45.100 www.secure-plus-payments.com
O1 - Hosts: 74.125.45.100 www.getavplusnow.com
O1 - Hosts: 74.125.45.100 safebrowsing-cache.google.com
O1 - Hosts: 74.125.45.100 urs.microsoft.com
O1 - Hosts: 74.125.45.100 www.securesoftwarebill.com
O1 - Hosts: 74.125.45.100 secure.paysecuresystem.com
O1 - Hosts: 74.125.45.100 paysoftbillsolution.com
O1 - Hosts: 74.125.45.100 protected.maxisoftwaremart.com
~ Scan Hosts File in 00mn 00s

---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Softonic_France - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\prxtbSof0.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
~ Scan BHO in 00mn 00s

---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\prxtbSof0.dll
~ Scan Toolbar in 00mn 00s

---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [RTHDCPL] . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS\RTHDCPL.exe
O4 - HKLM\..\Run: [Alcmtr] . (.Realtek Semiconductor Corp. - Realtek Azalia Audio - Event Monitor.) -- C:\WINDOWS\ALCMTR.exe
O4 - HKLM\..\Run: [AzMixerSel] . (.Realtek Semiconductor Corp. - Azalia Mixer Selector.) -- C:\Program Files\Realtek\Audio\Drivers\AzMixerSel.exe
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LManager] . (.Dritek System Inc. - Launch Manager.) -- C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] . (.Microsoft Corporation - Microsoft IME.) -- C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe
O4 - HKLM\..\Run: [MSPY2002] . (...) -- C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe
O4 - HKLM\..\Run: [PHIME2002ASync] . (.Microsoft Corporation - ???????? 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe
O4 - HKLM\..\Run: [PHIME2002A] . (.Microsoft Corporation - ???????? 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe
O4 - HKLM\..\Run: [PLFSetL] . (.sonix - DefaultSettingEXE.) -- C:\WINDOWS\PLFSetL.exe
O4 - HKLM\..\Run: [snp2uvc] . (.Pas de propriétaire - The utilities for device installation.) -- C:\WINDOWS\system32\csnp2uvc.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
O4 - HKLM\..\Run: [Babylon Client] . (.Babylon Ltd. - Babylon Information Tool.) -- C:\Program Files\Babylon\Babylon-Pro\Babylon.exe
O4 - HKLM\..\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\qttask.exe
O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Microsoft Default Manager] . (.Microsoft Corporation - Microsoft Default Manager.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
O4 - HKLM\..\Run: [KernelFaultCheck] Clé orpheline
O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-21-1110412475-604499833-2237029002-1005\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-1110412475-604499833-2237029002-1005\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - HKUS\S-1-5-21-1110412475-604499833-2237029002-1005\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
~ Scan Application in 00mn 01s

---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (...) -- C:\WINDOWS\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Default Manager.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Live ID.lnk . (.Microsoft Corporation.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\SIGNINOPTIONS.EXE
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.) -- C:\Program Files\Movie Maker\moviemk.exe
O4 - Global Startup: C:\Documents And Settings\Le Corronc\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: C:\Documents And Settings\Le Corronc\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Documents And Settings\Le Corronc\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Documents And Settings\Le Corronc\Menu Démarrer\Programmes\Orion PC.lnk . (...) -- C:\Program Files\orionpc\bin\startorion.bat
O4 - Global Startup: C:\Documents And Settings\Le Corronc\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.) -- C:\Program Files\Outlook Express\msimn.exe
~ Scan Global Startup in 00mn 01s

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: Add to Google Photos Screensa&ver . (.Google Inc. - Google Photos Screensaver.) -- C:\WINDOWS\system32\GPhotos.scr
O8 - Extra context menu item: E&xporter vers Microsoft Excel - (.not file.) - C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe
O8 - Extra context menu item: Google Sidewiki... - (.not file.) - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll
O8 - Extra context menu item: Translate this web page with Babylon - (.not file.) - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll
O8 - Extra context menu item: Translate with Babylon - (.not file.) - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll
~ Scan IE Menu Contextuel in 00mn 00s

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico
O9 - Extra button: Skype Plug-In - {90EAE591-7E7E-434a-8E28-ECFD00071806} -- C:\Program Files\PokerStars.FR\main.ico (.not file.)
O9 - Extra button: Skype Plug-In - {DDE87865-83C5-48c4-8357-2F5B1AA84522} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet Explorer.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet Explorer.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} -- C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (.not file.)
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
~ Scan IE Extra Buttons in 00mn 00s

---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll
~ Scan Winsock in 00mn 00s

---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
~ Scan Objets ActiveX in 00mn 00s

---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{F3AD0745-FADA-4F95-8000-2FB9A7F08582}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS1\Services\Tcpip\..\{F3AD0745-FADA-4F95-8000-2FB9A7F08582}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS2\Services\Tcpip\..\{F3AD0745-FADA-4F95-8000-2FB9A7F08582}: DhcpNameServer = 212.27.40.241 212.27.40.240
~ Scan Domain in 00mn 00s

---\\ Protocole additionnel (O18)
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll
O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\WINDOWS\system32\urlmon.dll
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
~ Scan Protocole Additionnel in 00mn 00s

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\Windows\System32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\System32\dimsntfy.dll
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\Windows\System32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\Windows\System32\wlnotify.dll
~ Scan Winlogon in 00mn 00s

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\WINDOWS\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
~ Scan SSODL in 00mn 00s

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\system32\browseui.dll
~ Scan STS/SSO in 00mn 00s

---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) . (.Intel Corporation - RAID Monitor.) - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Raw Socket Service (RS_Service) . (.Acer Incorporated - Raw Socket Service.) - C:\Program Files\Acer\Acer VCM\RS_Service.exe
~ Scan Services in 00mn 00s

---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Scan Desktop Component in 00mn 00s

---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Hcuioel.job
~ Scan Scheduled Task in 00mn 00s

---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys
O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS\System32\DRIVERS\cdrom.sys
O41 - Driver: (DritekPortIO) . (.Dritek System Inc. - General Port I/O.) - C:\PROGRA~1\LAUNCH~1\DPortIO.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS\System32\DRIVERS\i8042prt.sys
O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS\System32\DRIVERS\imapi.sys
O41 - Driver: (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS\System32\DRIVERS\intelppm.sys
O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\System32\DRIVERS\ipsec.sys
O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS\System32\DRIVERS\kbdclass.sys
O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\WINDOWS\System32\DRIVERS\kbdhid.sys
O41 - Driver: (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS\System32\DRIVERS\mouclass.sys
O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS\System32\DRIVERS\mrxsmb.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\System32\DRIVERS\netbios.sys
O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS\System32\DRIVERS\netbt.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS\System32\DRIVERS\rasacd.sys
O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS\System32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
O41 - Driver: (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS\System32\DRIVERS\redbook.sys
O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS\System32\DRIVERS\tcpip.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS\System32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys
O41 - Driver: (WmiAcpi) . (.Microsoft Corporation - Windows Management Interface for ACPI.) - C:\WINDOWS\System32\DRIVERS\wmiacpi.sys
~ Scan Drivers in 00mn 01s

---\\ Logiciels installés (O42)
O42 - Logiciel: Acer Product Registration - (.Acer Incorporated.) [HKLM] -- {DA20E1A8-07CB-4EE7-9B72-A7E28C953F0E}
O42 - Logiciel: Acer ScreenSaver - (.Acer Incorporated.) [HKLM] -- {73490214-D4F4-450B-9DAC-416E4CEB3C58}
O42 - Logiciel: Acer VCM - (.Acer Incorporated.) [HKLM] -- {047F790A-7A2A-4B6A-AD02-38092BA63DAC}
O42 - Logiciel: Acer eRecovery Management - (.Acer Incorporated.) [HKLM] -- {7F811A54-5A09-4579-90E1-C93498E230D9}
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Archiveur WinRAR - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver
O42 - Logiciel: Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver - (.Atheros Communications Inc..) [HKLM] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549}
O42 - Logiciel: Facebook Plug-In - (.Facebook, Inc..) [HKCU] -- Facebook Plug-In
O42 - Logiciel: HP Customer Participation Program 14.0 - (.HP.) [HKLM] -- HPExtendedCapabilities
O42 - Logiciel: HP Imaging Device Functions 14.0 - (.HP.) [HKLM] -- HP Imaging Device Functions
O42 - Logiciel: HP Photosmart Wireless B110 All-In-One Driver Software 14.0 Rel. 7 - (.HP.) [HKLM] -- {59C83C08-63F4-4AEC-81D6-392C5E23B843}
O42 - Logiciel: HP Smart Web Printing 4.60 - (.HP.) [HKLM] -- HP Smart Web Printing
O42 - Logiciel: HP Solution Center 14.0 - (.HP.) [HKLM] -- HP Solution Center & Imaging Support Tools
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399
O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5
O42 - Logiciel: Hotfix for Windows XP (KB976002-v5) - (.Microsoft Corporation.) [HKLM] -- KB976002-v5
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Pas de propriétaire.) [HKLM] -- HDMI
O42 - Logiciel: Intel(R) Matrix Storage Manager - (.Intel Corporation.) [HKLM] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}
O42 - Logiciel: Launch Manager - (.Acer Inc..) [HKLM] -- LManager
O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.1.1800 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microsoft Corporation.) [HKLM] -- MSCompPackV1
O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs - (.Microsoft Corporation.) [HKLM] -- IDNMitigationAPIs
O42 - Logiciel: Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 - (.Microsoft Corporation.) [HKLM] -- Wdf01007
O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM] -- NLSDownlevelMapping
O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Microsoft Corporation.) [HKLM] -- Wudf01000
O42 - Logiciel: Mozilla Firefox 5.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 5.0 (x86 fr)
O42 - Logiciel: Orion PC 1.6k - (.Orion.) [HKLM] -- Orion PC
O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM] -- Picasa 3
O42 - Logiciel: PokerStars.fr - (.PokerStars.fr.) [HKLM] -- PokerStars.fr
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
O42 - Logiciel: Softonic_France Toolbar - (.Softonic_France.) [HKLM] -- Softonic_France Toolbar
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM] -- SynTPDeinstKey
O42 - Logiciel: USB2.0 Card Reader Software - (.Realtek.) [HKLM] -- {96AE7E41-E34E-47D0-AC07-1091A8127911}
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
O42 - Logiciel: VLC media player 1.0.1 - (.VideoLAN Team.) [HKLM] -- VLC media player
O42 - Logiciel: WebCam - (.Sonix.) [HKLM] -- {399C37FB-08AF-493B-BFED-20FBD85EDF7F}
O42 - Logiciel: Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray - (.Microsoft Corporation.) [HKLM] -- KB952011
O42 - Logiciel: avast! Free Antivirus - (.Alwil Software.) [HKLM] -- avast5
O42 - Logiciel: eMule - (.Pas de propriétaire.) [HKLM] -- eMule

---\\ HKCU & HKLM Software Keys
[HKCU\Software\3]
[HKCU\Software\ALWIL Software]
[HKCU\Software\AVS4YOU]
[HKCU\Software\AcerUtil]
[HKCU\Software\Acer]
[HKCU\Software\Ad-Remover]
[HKCU\Software\Adobe]
[HKCU\Software\Ahead]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software\{2E37ADCE-E614-9646-6B61-E0BF800F301B}]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Babylon]
[HKCU\Software\Binary Noise]
[HKCU\Software\C:]
[HKCU\Software\CPJXDPE]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Compal]
[HKCU\Software\GNU]
[HKCU\Software\Google]
[HKCU\Software\HP]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\HookNetwork]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\Licenses]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\OpenOffice.org]
[HKCU\Software\Policies]
[HKCU\Software\Realtek]
[HKCU\Software\RegisteredApplications]
[HKCU\Software\Simply Super Software]
[HKCU\Software\Skype]
[HKCU\Software\Softonic]
[HKCU\Software\Softonic_France]
[HKCU\Software\Synaptics]
[HKCU\Software\Usbfix]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\WhiteSmoke]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\eMule]
[HKCU\Software\eSobi]
[HKCU\Software\keyhole.com]
[HKCU\Software\sshelper2]
[HKLM\Software\55423726]
[HKLM\Software\ALWIL Software]
[HKLM\Software\AVS4YOU]
[HKLM\Software\Acer Incorporated]
[HKLM\Software\Adobe]
[HKLM\Software\Ahead]
[HKLM\Software\America Online]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Atheros Communications Inc.]
[HKLM\Software\Atheros]
[HKLM\Software\Audible]
[HKLM\Software\Babylon]
[HKLM\Software\C07ft5Y]
[HKLM\Software\CPJXDPE]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Compal]
[HKLM\Software\Creative Tech]
[HKLM\Software\DivXNetworks]
[HKLM\Software\Gemplus]
[HKLM\Software\Google]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\Licenses]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware (Trial)]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\McAfee.com]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\Nero]
[HKLM\Software\ODBC]
[HKLM\Software\OemSetup]
[HKLM\Software\OpenOffice.org]
[HKLM\Software\PCTools]
[HKLM\Software\Policies]
[HKLM\Software\Program Groups]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Schlumberger]
[HKLM\Software\Secure]
[HKLM\Software\Skype]
[HKLM\Software\Softonic_France]
[HKLM\Software\Sonix]
[HKLM\Software\Sun Microsystems]
[HKLM\Software\Synaptics]
[HKLM\Software\TrendMicro]
[HKLM\Software\VideoLAN]
[HKLM\Software\WhiteSmoke]
[HKLM\Software\Windows 3.1 Migration Status]
[HKLM\Software\Windows]
[HKLM\Software\acer]
[HKLM\Software\knight]
[HKLM\Software\mcafeeupdater]
[HKLM\Software\mozilla.org]
~ Scan Softwares in 00mn 00s

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 16/07/2009 - 05:03:08 - [32165694] ----D- C:\Program Files\Acer
O43 - CFD: 01/08/2011 - 20:45:52 - [110364430] ----D- C:\Program Files\Ad-Remover
O43 - CFD: 19/11/2009 - 12:19:52 - [161280] ----D- C:\Program Files\Adobe
O43 - CFD: 14/08/2010 - 12:38:22 - [144998111] ----D- C:\Program Files\Alwil Software
O43 - CFD: 23/07/2011 - 15:03:40 - [2428606] ----D- C:\Program Files\Apple Software Update
O43 - CFD: 20/01/2009 - 03:37:04 - [1078] ----D- C:\Program Files\Atheros
O43 - CFD: 28/03/2011 - 23:14:58 - [0] ----D- C:\Program Files\AVS4YOU
O43 - CFD: 19/11/2009 - 20:16:42 - [107901492] ----D- C:\Program Files\Babylon
O43 - CFD: 20/01/2009 - 02:40:44 - [0] ----D- C:\Program Files\ComPlus Applications
O43 - CFD: 13/09/2009 - 13:14:50 - [6358175099] ----D- C:\Program Files\eMule
O43 - CFD: 21/01/2010 - 21:58:54 - [0] ----D- C:\Program Files\eSobi
O43 - CFD: 30/07/2011 - 19:36:04 - [547260215] ----D- C:\Program Files\Fichiers communs
O43 - CFD: 23/07/2011 - 00:59:28 - [169698315] ----D- C:\Program Files\Google
O43 - CFD: 10/07/2011 - 12:57:54 - [181156672] ----D- C:\Program Files\HP
O43 - CFD: 10/07/2011 - 12:44:22 - [619730] ----D- C:\Program Files\INFORAD
O43 - CFD: 21/01/2010 - 21:58:56 - [44412921] --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 20/01/2009 - 03:31:52 - [9381418] ----D- C:\Program Files\Intel
O43 - CFD: 10/07/2011 - 13:07:04 - [2311883] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 01/07/2011 - 20:11:10 - [89560321] ----D- C:\Program Files\Java
O43 - CFD: 03/09/2009 - 12:07:56 - [16283032] ----D- C:\Program Files\JRE
O43 - CFD: 20/01/2009 - 03:38:34 - [2530910] ----D- C:\Program Files\Launch Manager
O43 - CFD: 02/08/2011 - 20:10:42 - [6953658] ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 11/08/2009 - 23:51:52 - [2152579] ----D- C:\Program Files\Messenger
O43 - CFD: 28/03/2011 - 23:17:34 - [945952] ----D- C:\Program Files\Microsoft
O43 - CFD: 10/07/2011 - 12:44:50 - [361842] ----D- C:\Program Files\Microsoft ActiveSync
O43 - CFD: 20/01/2009 - 02:42:42 - [0] ----D- C:\Program Files\microsoft frontpage
O43 - CFD: 21/01/2010 - 22:03:52 - [70456] ----D- C:\Program Files\Microsoft Office
O43 - CFD: 20/01/2009 - 03:57:28 - [1829877] ----D- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 21/01/2010 - 22:11:12 - [152968] ----D- C:\Program Files\Microsoft Works
O43 - CFD: 12/08/2010 - 20:15:26 - [10374874] ----D- C:\Program Files\Movie Maker
O43 - CFD: 10/07/2011 - 12:41:00 - [37212599] ----D- C:\Program Files\Mozilla Firefox
O43 - CFD: 11/08/2009 - 23:43:40 - [25757] ----D- C:\Program Files\MSBuild
O43 - CFD: 03/10/2009 - 10:59:42 - [19278399] ----D- C:\Program Files\MSN
O43 - CFD: 20/01/2009 - 02:40:04 - [8745735] ----D- C:\Program Files\MSN Gaming Zone
O43 - CFD: 18/03/2011 - 21:05:30 - [1162120] ----D- C:\Program Files\MSN Toolbar Installer
O43 - CFD: 20/01/2009 - 03:09:50 - [0] ----D- C:\Program Files\MSXML 4.0
O43 - CFD: 08/02/2010 - 22:36:00 - [348160] ----D- C:\Program Files\Nero
O43 - CFD: 20/01/2009 - 02:41:04 - [3285523] ----D- C:\Program Files\NetMeeting
O43 - CFD: 20/01/2009 - 02:40:12 - [1804] ----D- C:\Program Files\Online Services
O43 - CFD: 03/09/2009 - 12:07:52 - [376485936] ----D- C:\Program Files\OpenOffice.org 3
O43 - CFD: 03/07/2011 - 12:02:32 - [115923493] ----D- C:\Program Files\orionpc
O43 - CFD: 16/12/2010 - 00:14:42 - [4379321] ----D- C:\Program Files\Outlook Express
O43 - CFD: 06/07/2011 - 22:00:58 - [64929731] ----D- C:\Program Files\PokerStars.FR
O43 - CFD: 08/01/2011 - 16:31:02 - [76322555] ----D- C:\Program Files\QuickTime
O43 - CFD: 20/01/2009 - 03:35:28 - [69241437] ----D- C:\Program Files\Realtek
O43 - CFD: 11/08/2009 - 23:43:30 - [36400897] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 20/01/2009 - 02:41:14 - [1025] ----D- C:\Program Files\Services en ligne
O43 - CFD: 30/07/2011 - 19:36:44 - [24155848] R---D- C:\Program Files\Skype
O43 - CFD: 22/05/2011 - 12:00:28 - [11968379] ----D- C:\Program Files\Softonic_France
O43 - CFD: 20/01/2009 - 03:38:04 - [21758637] ----D- C:\Program Files\Synaptics
O43 - CFD: 16/06/2011 - 22:44:22 - [1167808] ----D- C:\Program Files\Trojan Remover
O43 - CFD: 20/01/2009 - 02:45:32 - [0] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 17/12/2009 - 21:45:32 - [74467522] ----D- C:\Program Files\VideoLAN
O43 - CFD: 10/07/2011 - 13:02:18 - [0] ----D- C:\Program Files\WhiteSmoke
O43 - CFD: 30/01/2011 - 02:09:58 - [133447713] ----D- C:\Program Files\Windows Live
O43 - CFD: 20/01/2009 - 03:56:24 - [245112] ----D- C:\Program Files\Windows Live SkyDrive
O43 - CFD: 10/07/2011 - 12:43:38 - [0] ----D- C:\Program Files\Windows Media Connect 2
O43 - CFD: 10/07/2011 - 13:07:06 - [3239277] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 20/01/2009 - 02:40:02 - [3942655] ----D- C:\Program Files\Windows NT
O43 - CFD: 20/01/2009 - 02:41:16 - [0] --H-D- C:\Program Files\WindowsUpdate
O43 - CFD: 22/10/2009 - 21:05:12 - [3525705] ----D- C:\Program Files\WinRAR
O43 - CFD: 20/01/2009 - 02:42:42 - [0] ----D- C:\Program Files\xerox
O43 - CFD: 03/08/2011 - 20:11:48 - [4112316] ----D- C:\Program Files\ZHPDiag
O43 - CFD: 28/03/2011 - 23:14:44 - [179547] ----D- C:\Program Files\Fichiers Communs\AVSMedia
O43 - CFD: 18/03/2011 - 21:00:30 - [997653] ----D- C:\Program Files\Fichiers Communs\Hewlett-Packard
O43 - CFD: 18/03/2011 - 21:00:34 - [1408164] ----D- C:\Program Files\Fichiers Communs\HP
O43 - CFD: 08/02/2010 - 22:26:56 - [2037602] ----D- C:\Program Files\Fichiers Communs\InstallShield
O43 - CFD: 01/07/2011 - 20:11:42 - [1258951] ----D- C:\Program Files\Fichiers Communs\Java
O43 - CFD: 18/03/2011 - 21:05:06 - [19151024] ----D- C:\Program Files\Fichiers Communs\Microsoft Shared
O43 - CFD: 20/01/2009 - 02:41:02 - [284160] ----D- C:\Program Files\Fichiers Communs\MSSoap
O43 - CFD: 20/01/2009 - 03:37:42 - [0] ----D- C:\Program Files\Fichiers Communs\ODBC
O43 - CFD: 20/01/2009 - 02:41:04 - [8106] ----D- C:\Program Files\Fichiers Communs\Services
O43 - CFD: 22/04/2009 - 13:13:10 - [5305328] ----D- C:\Program Files\Fichiers Communs\SNP2UVC
O43 - CFD: 20/01/2009 - 03:37:40 - [3787229] ----D- C:\Program Files\Fichiers Communs\SpeechEngines
O43 - CFD: 20/01/2009 - 02:40:52 - [13626525] ----D- C:\Program Files\Fichiers Communs\System
O43 - CFD: 20/01/2009 - 03:54:24 - [499215926] ----D- C:\Program Files\Fichiers Communs\Windows Live
O43 - CFD: 20/01/2009 - 04:12:28 - [491] ----D- C:\Documents and Settings\Le Corronc\Application Data\Acer
O43 - CFD: 07/03/2011 - 12:38:52 - [3140850] ----D- C:\Documents and Settings\Le Corronc\Application Data\Adobe
O43 - CFD: 08/02/2010 - 23:20:30 - [167689] ----D- C:\Documents and Settings\Le Corronc\Application Data\Ahead
O43 - CFD: 02/09/2009 - 14:46:44 - [3624] ----D- C:\Documents and Settings\Le Corronc\Application Data\Apple Computer
O43 - CFD: 02/08/2011 - 21:29:36 - [0] -SH-D- C:\Documents and Settings\Le Corronc\Application Data\Avir
O43 - CFD: 05/02/2011 - 00:49:48 - [0] ----D- C:\Documents and Settings\Le Corronc\Application Data\AVS4YOU
O43 - CFD: 27/04/2011 - 23:12:20 - [1299825] ----D- C:\Documents and Settings\Le Corronc\Application Data\Babylon
O43 - CFD: 27/06/2011 - 20:56:38 - [199] ----D- C:\Documents and Settings\Le Corronc\Application Data\dvdcss
O43 - CFD: 07/04/2010 - 22:01:12 - [12137363] ----D- C:\Documents and Settings\Le Corronc\Application Data\Facebook
O43 - CFD: 16/03/2010 - 18:34:04 - [107785] ----D- C:\Documents and Settings\Le Corronc\Application Data\Google
O43 - CFD: 18/03/2011 - 21:54:26 - [190334] ----D- C:\Documents and Settings\Le Corronc\Application Data\HP
O43 - CFD: 02/08/2011 - 23:49:30 - [232890] ----D- C:\Documents and Settings\Le Corronc\Application Data\HPAppData
O43 - CFD: 26/03/2011 - 22:04:38 - [7957] ----D- C:\Documents and Settings\Le Corronc\Application Data\HpUpdate
O43 - CFD: 20/01/2009 - 02:45:34 - [0] ----D- C:\Documents and Settings\Le Corronc\Application Data\Identities
O43 - CFD: 20/01/2009 - 03:31:44 - [0] ----D- C:\Documents and Settings\Le Corronc\Application Data\InstallShield
O43 - CFD: 20/01/2009 - 04:13:22 - [85123] ----D- C:\Documents and Settings\Le Corronc\Application Data\Macromedia
O43 - CFD: 02/08/2011 - 20:11:18 - [16465] ----D- C:\Documents and Settings\Le Corronc\Application Data\Malwarebytes
O43 - CFD: 10/01/2011 - 21:42:18 - [1802365] -S--D- C:\Documents and Settings\Le Corronc\Application Data\Microsoft
O43 - CFD: 08/01/2011 - 21:08:36 - [40728577] ----D- C:\Documents and Settings\Le Corronc\Application Data\Mozilla
O43 - CFD: 21/07/2009 - 04:13:32 - [856197] ----D- C:\Documents and Settings\Le Corronc\Application Data\MSNInstaller
O43 - CFD: 17/09/2009 - 19:18:54 - [3224622] ----D- C:\Documents and Settings\Le Corronc\Application Data\OpenOffice.org
O43 - CFD: 26/09/2009 - 18:37:36 - [21070426] ----D- C:\Documents and Settings\Le Corronc\Application Data\Python-Eggs
O43 - CFD: 02/08/2011 - 22:51:22 - [6468746] ----D- C:\Documents and Settings\Le Corronc\Application Data\Skype
O43 - CFD: 30/07/2011 - 17:32:58 - [21024] ----D- C:\Documents and Settings\Le Corronc\Application Data\skypePM
O43 - CFD: 10/08/2009 - 22:17:30 - [1332585] ----D- C:\Documents and Settings\Le Corronc\Application Data\Sun
O43 - CFD: 05/10/2010 - 20:21:16 - [467760] ----D- C:\Documents and Settings\Le Corronc\Application Data\Ubikis
O43 - CFD: 30/07/2011 - 01:40:06 - [732849] ----D- C:\Documents and Settings\Le Corronc\Application Data\vlc
O43 - CFD: 03/04/2011 - 22:30:22 - [98] ----D- C:\Documents and Settings\Le Corronc\Application Data\WhiteSmoke
O43 - CFD: 22/10/2009 - 21:05:24 - [0] ----D- C:\Documents and Settings\Le Corronc\Application Data\WinRAR
O43 - CFD: 10/07/2011 - 12:33:50 - [497837] ----D- C:\Documents and Settings\Le Corronc\Local Settings\Application Data\Adobe
O43 - CFD: 08/02/2010 - 23:20:06 - [1973635] ----D- C:\Documents and Settings\Le Corronc\Local Settings\Application Data\Ahead
O43 - CFD: 02/09/2009 - 10:19:54 - [0] ----D- C:\Documents and Settings\Le Corronc\Local Settings\Application Data\Apple
O43 - CFD: 02/09/2009 - 10:19:28 - [68560] ----D- C:\Documents and Settings\Le Corronc\Local Settings\Application Data\Apple Computer
O43 - CFD: 20/11/2009 - 08:42:28 - [10229] ----D- C:\Documents and Settings\Le Corronc\Local Settings\Application Data\Babylon
O43 - CFD: 10/07/2011 - 12:41:34 - [682132652] ----D- C:\Documents and Settings\Le Corronc\Local Settings\Application Data\Google
O43 - CFD: 18/03/2011 - 21:53:10 - [49768] ----D- C:\Documents and Settings\Le Corronc\Local Settings\Application Data\HP
O43 - CFD: 11/08/2009 - 18:38:36 - [226896] ----D- C:\Documents and Settings\Le Corronc\Local Settings\Application Data\Identities
O43 - CFD: 31/07/2011 - 19:45:44 - [478742603] ----D- C:\Documents and Settings\Le Corronc\Local Settings\Application Data\Microsoft
O43 - CFD: 20/01/2009 - 03:39:44 - [0] ----D- C:\Documents and Settings\Le Corronc\Local Settings\Application Data\Microsoft Help
O43 - CFD: 21/07/2009 - 03:25:22 - [66092372] ----D- C:\Documents and Settings\Le Corronc\Local Settings\Application Data\Mozilla
O43 - CFD: 31/07/2011 - 20:20:50 - [7201650] ----D- C:\Documents and Settings\Le Corronc\Local Settings\Application Data\Softonic_France
O43 - CFD: 03/05/2011 - 22:44:38 - [20

Réponse 38 / 53

2011N2 Messages postés 13352 Date d'inscription Statut Contributeur sécurité Dernière intervention 917

Héberge le ici il n'est pas complet ==>

https://www.cjoint.com/

Merci,

Gabriel.

Réponse 39 / 53

fablc56 Messages postés 29 Date d'inscription Statut Membre Dernière intervention

le lien : https://www.cjoint.com/?AHdvirlsNRH

Réponse 40 / 53

2011N2 Messages postés 13352 Date d'inscription Statut Contributeur sécurité Dernière intervention 917

Tu es à nouveau infecté...
Bon, on va fixer toutes les infections et voir après ;)

>Copie les lignes "helpers" (Avec Ctrl + C) :

--------------------------------------------

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: Modified => Infection Diverse (Disabled.SecurityCenter)
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: Modified => Infection Diverse (Disabled.SecurityCenter)
O1 - Hosts: 74.125.45.100 4-open-davinci.com
O1 - Hosts: 74.125.45.100 securitysoftwarepayments.com
O1 - Hosts: 74.125.45.100 privatesecuredpayments.com
O1 - Hosts: 74.125.45.100 secure.privatesecuredpayments.com
O1 - Hosts: 74.125.45.100 getantivirusplusnow.com
O1 - Hosts: 74.125.45.100 secure-plus-payments.com
O1 - Hosts: 74.125.45.100 www.getantivirusplusnow.com
O1 - Hosts: 74.125.45.100 www.secure-plus-payments.com
O1 - Hosts: 74.125.45.100 www.getavplusnow.com
O1 - Hosts: 74.125.45.100 safebrowsing-cache.google.com
O1 - Hosts: 74.125.45.100 urs.microsoft.com
O1 - Hosts: 74.125.45.100 www.securesoftwarebill.com
O1 - Hosts: 74.125.45.100 secure.paysecuresystem.com
O1 - Hosts: 74.125.45.100 paysoftbillsolution.com
O1 - Hosts: 74.125.45.100 protected.maxisoftwaremart.com
O4 - HKLM\..\Run: [Babylon Client] . (.Babylon Ltd. - Babylon Information Tool.) -- C:\Program Files\Babylon\Babylon-Pro\Babylon.exe => Infection BT (Toolbar.Babylon)
O8 - Extra context menu item: Translate this web page with Babylon - (.not file.) - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll => Infection BT (Toolbar.Babylon)
O8 - Extra context menu item: Translate with Babylon - (.not file.) - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll => Infection BT (Toolbar.Babylon)
O9 - Extra button: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} -- C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (.not file.) => Infection BT (Toolbar.Babylon)
[HKCU\Software\3]
[HKCU\Software\Babylon] => Infection BT (Toolbar.Babylon)
[HKCU\Software\C:] => Trojan Remover
[HKCU\Software\WhiteSmoke] => Infection PUP (PUP.Whitesmoke)
[HKLM\Software\Babylon] => Infection BT (Toolbar.Babylon)
[HKLM\Software\WhiteSmoke] => Infection PUP (PUP.Whitesmoke)
O43 - CFD: 19/11/2009 - 20:16:42 - [107901492] ----D- C:\Program Files\Babylon => Infection BT (Toolbar.Babylon)
O43 - CFD: 10/07/2011 - 13:02:18 - [0] ----D- C:\Program Files\WhiteSmoke => Infection PUP (PUP.Whitesmoke)
O43 - CFD: 27/04/2011 - 23:12:20 - [1299825] ----D- C:\Documents and Settings\Le Corronc\Application Data\Babylon => Infection BT (Toolbar.Babylon)
O43 - CFD: 03/04/2011 - 22:30:22 - [98] ----D- C:\Documents and Settings\Le Corronc\Application Data\WhiteSmoke => Infection PUP (PUP.Whitesmoke)
O43 - CFD: 20/11/2009 - 08:42:28 - [10229] ----D- C:\Documents and Settings\Le Corronc\Local Settings\Application Data\Babylon => Infection BT (Toolbar.Babylon)
O47 - AAKE:Key Export SP - "C:\Documents and Settings\LocalService\Application Data\svchost.exe" [Enabled] .(...) -- C:\Documents and Settings\LocalService\Application Data\svchost.exe (.not file.) => Infection Diverse (Trojan.Agent)
O47 - AAKE:Key Export SP - "C:\Documents and Settings\Le Corronc\Application Data\svchost.exe" [Enabled] .(...) -- C:\Documents and Settings\Le Corronc\Application Data\svchost.exe (.not file.) => Infection Diverse (Trojan.Agent)
O59 - HSMI:Heuristic Search MagicControl Infection - (...) -- C:\Documents and Settings\Le Corronc\Local Settings\Application Data\egqbybk_nav.dat.vir
O59 - HSMI:Heuristic Search MagicControl Infection - (...) -- C:\Documents and Settings\Le Corronc\Local Settings\Application Data\egqbybk_navps.dat.vir
O69 - SBI: SearchScopes [HKCU] {7E98B47D-FC93-4F33-9822-3DAC925F4059} - (Yahoo-Mp3Tube) - http://mp3tubetoolbarsearch.com
O81 - IFC: Internet Feature Controls [HKUS\.DEFAULT] [FEATURE_BROWSER_EMULATION] -- svchost.exe => Infection Rootkit (Rootkit.TDSS)
O81 - IFC: Internet Feature Controls [HKUS\S-1-5-18] [FEATURE_BROWSER_EMULATION] -- svchost.exe => Infection Rootkit (Rootkit.TDSS)
[HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Bandoo]
[HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Searchqu MediaBar]
[HKLM\Software\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}] => Infection PUP (Adware.Bandoo)
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EB5CEE80-030A-4ED8-8E20-454E9C68380F}] => Infection PUP (Adware.Bandoo)
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EB5CEE80-030A-4ED8-8E20-454E9C68380F}] => Infection PUP (Adware.Bandoo)
[HKLM\Software\Microsoft\Windows\CurrentVersion\Run]:Babylon Client
C:\Program Files\Babylon => Infection BT (Toolbar.Babylon)
C:\Program Files\WhiteSmoke => Infection PUP (PUP.Whitesmoke)
C:\Documents and Settings\Le Corronc\Application Data\Babylon => Infection BT (Toolbar.Babylon)
C:\Documents and Settings\Le Corronc\Application Data\WhiteSmoke => Infection PUP (PUP.Whitesmoke)
C:\Documents and Settings\Le Corronc\Local Settings\Application Data\Babylon => Infection BT (Toolbar.Babylon)
R3 - URLSearchHook: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) (6.3.2.0) -- C:\Program Files\Softonic_France\prxtbSof0.dll
O2 - BHO: Softonic_France - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\prxtbSof0.dll
O3 - Toolbar: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\prxtbSof0.dll
O42 - Logiciel: Softonic_France Toolbar - (.Softonic_France.) [HKLM] -- Softonic_France Toolbar => Toolbar.Conduit
[HKCU\Software\Softonic_France] => Toolbar.Conduit
[HKLM\Software\Softonic_France] => Toolbar.Conduit
O43 - CFD: 22/05/2011 - 12:00:28 - [11968379] ----D- C:\Program Files\Softonic_France => Toolbar.Conduit
O43 - CFD: 31/07/2011 - 20:20:50 - [7201650] ----D- C:\Documents and Settings\Le Corronc\Local Settings\Application Data\Softonic_France => Toolbar.Conduit
[HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4daac69c-cba7-45e2-9bc8-1044483d3352}] => Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4daac69c-cba7-45e2-9bc8-1044483d3352}] => Toolbar.Conduit
[HKLM\Software\Classes\CLSID\{4daac69c-cba7-45e2-9bc8-1044483d3352}] => Toolbar.Conduit
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4daac69c-cba7-45e2-9bc8-1044483d3352}] => Toolbar.Conduit
[HKCU\Software\Softonic_France] => Toolbar.Conduit
[HKLM\Software\Softonic_France] => Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Toolbar]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Softonic_France Toolbar]
C:\Program Files\Softonic_France => Toolbar.Conduit
C:\Documents and Settings\Le Corronc\Local Settings\Application Data\Softonic_France => Toolbar.Conduit
EmptyTemp
EmptyFlash
SysRestore

--------------------------------------------

>Ouvre ZHPfix, icone seringue (Vista et 7 : "Exécuter en tant qu'administrateur").
>Colle les lignes helpers : Pour ce, clique sur la balise document, à droite de l'appareil photo. Ou alors sur le H.
>Faire Ok.
>Clique sur "Tous".
>Clique sur "Nettoyer".
>Copie le rapport, et coller-le dans la prochaine réponse sur le forum.

Si tu as des questions, n'hésite pas à me les poser !

Tu te sers du logiciel "Poker Star" ?

@+

Gabriel.

fablc56 Messages postés 29 Date d'inscription Statut Membre Dernière intervention

il se situe où le rapport? J'en ai trouvé un sur le C, le voici.

Sinon pour poker star, il a été installé ya un mois environ par un pote, ms j'y joue pas. Et c'est vrai que je me suis demandé si c'était pas ça, quand une fenetre antivirus se lancait et bloquait mon écran ainsi que toute les application que je voulais lancer, l'application qui se lancait avait le meme logo que Poker Star (je le supprime du coup),

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Softonic_France Toolbar]
"DisplayName"="Softonic_France Toolbar"
"UninstallString"="C:\\Program Files\\Softonic_France\\uninstall.exe"
"Comments"=""
"Contact"=""
"HelpLink"="http://TheSoftonicFranceToolbar.OurToolbar.com/help"
"Publisher"="Softonic_France"
"DisplayVersion"="6.3.3.3"
"URLInfoAbout"="http://www.ourtoolbar.com/"

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled"=dword:00000001
"AntiVirusDisableNotify"=dword:00000000
"FirewallDisableNotify"=dword:00000000
"UpdatesDisableNotify"=dword:00000000
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\WhiteSmoke]
"SerialKey"="1826048435"

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Babylon]

[HKEY_LOCAL_MACHINE\Software\Babylon\Babylon Client]

[HKEY_LOCAL_MACHINE\Software\Babylon\Babylon Client\DefaultSettings]
"MouseActivation"="right+ctrl"
"KeyboardActivation"="F10"
"InterfaceLanguage"="English"
"SetSearch"=dword:00000007
"ReceiveNewsLetters"=dword:00000000

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\WhiteSmoke]
"SerialKey"="1826048435"

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe:*:Enabled:ActiveSync RAPI Manager"
"C:\\Program Files\\Acer\\Acer VCM\\VC.exe"="C:\\Program Files\\Acer\\Acer VCM\\VC.exe:*:Enabled:Acer Video Quality Enhancement"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
"C:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"="C:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe:*:Enabled:Google Earth"
"C:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"="C:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"="C:\\Program Files\\Mozilla Firefox\\firefox.exe:*:Enabled:Mozilla Firefox"
"C:\\Program Files\\orionpc\\jre\\bin\\javaw.exe"="C:\\Program Files\\orionpc\\jre\\bin\\javaw.exe:*:Enabled:javaw"
"C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe:*:Enabled:ActiveSync Application"
"C:\\Documents and Settings\\Le Corronc\\Local Settings\\Temp\\alg.exe"="C:\\Documents and Settings\\Le Corronc\\Local Settings\\Temp\\alg.exe:*:Enabled:Application Layer Gateway Service"
"C:\\WINDOWS\\system32\\dpvsetup.exe"="C:\\WINDOWS\\system32\\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\\WINDOWS\\system32\\rundll32.exe"="C:\\WINDOWS\\system32\\rundll32.exe:*:Enabled:Exécuter une DLL en tant qu'application"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"="C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe:*:Enabled:hposid01.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe:*:Enabled:hpfccopy.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe:*:Enabled:hpiscnapp.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe:*:Enabled:hpqgpc01.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe:*:Enabled:hpqusgm.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe:*:Enabled:hpqusgh.exe"
"C:\\Program Files\\HP\\HP Software Update\\hpwucli.exe"="C:\\Program Files\\HP\\HP Software Update\\hpwucli.exe:*:Enabled:hpwucli.exe"
"C:\\Program Files\\HP\\Digital Imaging\\smart web printing\\SmartWebPrintExe.exe"="C:\\Program Files\\HP\\Digital Imaging\\smart web printing\\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe"
"D:\\setup\\hpznui01.exe"="D:\\setup\\hpznui01.exe:*:Enabled:hpznui01.exe"
"C:\\WINDOWS\\system32\\svchost.exe"="C:\\WINDOWS\\system32\\svchost.exe:*:Enabled:svchost.exe"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype "
"C:\\Documents and Settings\\LocalService\\Application Data\\svchost.exe"="C:\\Documents and Settings\\LocalService\\Application Data\\svchost.exe:*:Enabled:Windows Messanger"
"C:\\WINDOWS\\TEMP\\tshhee\\setup.exe"="C:\\WINDOWS\\TEMP\\tshhee\\setup.exe:*:Enabled:Windows Messanger"
"C:\\Documents and Settings\\Le Corronc\\Application Data\\svchost.exe"="C:\\Documents and Settings\\Le Corronc\\Application Data\\svchost.exe:*:Enabled:Windows Messanger"

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe:*:Enabled:ActiveSync RAPI Manager"
"C:\\Program Files\\Acer\\Acer VCM\\VC.exe"="C:\\Program Files\\Acer\\Acer VCM\\VC.exe:*:Enabled:Acer Video Quality Enhancement"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
"C:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"="C:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe:*:Enabled:Google Earth"
"C:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"="C:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"="C:\\Program Files\\Mozilla Firefox\\firefox.exe:*:Enabled:Mozilla Firefox"
"C:\\Program Files\\orionpc\\jre\\bin\\javaw.exe"="C:\\Program Files\\orionpc\\jre\\bin\\javaw.exe:*:Enabled:javaw"
"C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe:*:Enabled:ActiveSync Application"
"C:\\Documents and Settings\\Le Corronc\\Local Settings\\Temp\\alg.exe"="C:\\Documents and Settings\\Le Corronc\\Local Settings\\Temp\\alg.exe:*:Enabled:Application Layer Gateway Service"
"C:\\WINDOWS\\system32\\dpvsetup.exe"="C:\\WINDOWS\\system32\\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\\WINDOWS\\system32\\rundll32.exe"="C:\\WINDOWS\\system32\\rundll32.exe:*:Enabled:Exécuter une DLL en tant qu'application"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"="C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe:*:Enabled:hposid01.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe:*:Enabled:hpfccopy.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe:*:Enabled:hpiscnapp.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe:*:Enabled:hpqgpc01.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe:*:Enabled:hpqusgm.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe:*:Enabled:hpqusgh.exe"
"C:\\Program Files\\HP\\HP Software Update\\hpwucli.exe"="C:\\Program Files\\HP\\HP Software Update\\hpwucli.exe:*:Enabled:hpwucli.exe"
"C:\\Program Files\\HP\\Digital Imaging\\smart web printing\\SmartWebPrintExe.exe"="C:\\Program Files\\HP\\Digital Imaging\\smart web printing\\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe"
"D:\\setup\\hpznui01.exe"="D:\\setup\\hpznui01.exe:*:Enabled:hpznui01.exe"
"C:\\WINDOWS\\system32\\svchost.exe"="C:\\WINDOWS\\system32\\svchost.exe:*:Enabled:svchost.exe"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype "
"C:\\WINDOWS\\TEMP\\tshhee\\setup.exe"="C:\\WINDOWS\\TEMP\\tshhee\\setup.exe:*:Enabled:Windows Messanger"
"C:\\Documents and Settings\\Le Corronc\\Application Data\\svchost.exe"="C:\\Documents and Settings\\Le Corronc\\Application Data\\svchost.exe:*:Enabled:Windows Messanger"

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{7E98B47D-FC93-4F33-9822-3DAC925F4059}]
"DisplayName"="Yahoo-Mp3Tube"
"FaviconURL"="https://www.yahoo.com/favicon.ico"
"URL"="http://mp3tubetoolbarsearch.com/?tmp=toolbar_Mp3Tube_results&prt=pinballtb01ie&Keywords={searchTerms}&clid=c80fba6577834d9e9816ee873443ec80"
"FaviconPath"="C:\\Documents and Settings\\Le Corronc\\Local Settings\\Application Data\\Microsoft\\Internet Explorer\\Services\\search_{7E98B47D-FC93-4F33-9822-3DAC925F4059}.ico"

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Bandoo]
"SlowInfoCache"=hex:28,02,00,00,01,00,00,00,00,20,34,01,00,00,00,00,08,cd,f3,\
ae,33,e6,cb,01,00,00,00,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,\
61,00,6d,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,46,00,75,00,6e,00,34,\
00,49,00,4d,00,5c,00,42,00,6e,00,64,00,43,00,6f,00,72,00,65,00,2e,00,65,00,\
78,00,65,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00
"Changed"=dword:00000000

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Searchqu MediaBar]
"SlowInfoCache"=hex:28,02,00,00,01,00,00,00,00,e0,57,00,00,00,00,00,b0,7d,9b,\
68,1a,e6,cb,01,00,00,00,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,\
61,00,6d,00,20,00,46,00,69,00,6c,00,65,00,73,00,5c,00,57,00,69,00,6e,00,64,\
00,6f,00,77,00,73,00,20,00,53,00,65,00,61,00,72,00,63,00,68,00,71,00,75,00,\
20,00,54,00,6f,00,6f,00,6c,00,62,00,61,00,72,00,5c,00,44,00,61,00,74,00,61,\
00,6d,00,6e,00,67,00,72,00,5c,00,64,00,61,00,74,00,61,00,6d,00,6e,00,67,00,\
72,00,55,00,49,00,2e,00,65,00,78,00,65,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00
"Changed"=dword:00000000

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}]
@="IGetResourceCallback"

[HKEY_LOCAL_MACHINE\Software\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}\ProxyStubClsid]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\Software\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\Software\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}\TypeLib]
@="{8F5F1CB6-EA9E-40AF-A5CA-C7FD63CC1971}"
"Version"="1.0"

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}\iexplore]
"Type"=dword:00000003
"Count"=dword:00000006
"Time"=hex:d9,07,07,00,02,00,15,00,01,00,0b,00,0d,00,af,02

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled"=dword:00000001
"AntiVirusDisableNotify"=dword:00000000
"FirewallDisableNotify"=dword:00000000
"UpdatesDisableNotify"=dword:00000000
"AntiVirusOverride"=dword:00000000
"FirewallOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EB5CEE80-030A-4ED8-8E20-454E9C68380F}]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EB5CEE80-030A-4ED8-8E20-454E9C68380F}\iexplore]
"Type"=dword:00000003
"Flags"=dword:00000000
"Count"=dword:0000000a
"Time"=hex:db,07,05,00,00,00,16,00,09,00,35,00,02,00,cb,00
"LoadTime"=dword:000002e0

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EB5CEE80-030A-4ED8-8E20-454E9C68380F}]
"VerCache"=hex:84,fa,36,66,67,af,cb,01,00,c5,a6,11,ba,87,cb,01,00,00,00,00,90,\
93,21,00,00,00,06,00,00,00,00,00,00,00,06,00,d0,75,00,00,09,04,00,00

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"=""
"{4daac69c-cba7-45e2-9bc8-1044483d3352}"=""

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
@="Softonic_France"
"NoExplorer"=dword:00000001

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{4daac69c-cba7-45e2-9bc8-1044483d3352}"="Softonic_France Toolbar"

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Softonic_France]

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar]
"GroupingServerURL"="http://grouping.services.conduit.com/"
"LoginRequestsNum"="0"
"SearchServerUrl"="http://search.conduit.com"
"Server"="users.conduit.com"
"ShouldPerformGroupByOS"="FALSE"
"UsageURL"="http://usage.users.conduit.com/UsersWebService.asmx/UsersRequests"
"WebServerUrl"="http://www.ourtoolbar.com/"
"Write us link"="marc.noguera@softonic.com"
"MultiCommunityEnabled"="FALSE"
"GroupingEnabled"="FALSE"
"DisplayName"="Softonic_France"
"UserID"="UN15904838871551779"
"ImportMyStuffToEngine"="FALSE"
"LoginLastReplyTime"=dword:4e36f1e6
"LoginCache"=dword:00000004
"PrivacyPageURL"="http://www.conduit.com"
"DisplayTrusteSeal"="http://trust.conduit.com/EB_ORIGINAL_CTID"
"ClientLogURL"="http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent"
"UninstallURL"="http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"
"ToolbarDllName"="tbSof0.dll"
"MarkOldApps"="FALSE"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\AppsAdditionalData]

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\AppsAdditionalData\100]
"AppBornDate"="22-5-2011"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\AppsAdditionalData\101]
"IsOldApp"="TRUE"
"AppBornDate"="22-5-2011"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\AppsAdditionalData\103]
"IsOldApp"="TRUE"
"AppBornDate"="22-5-2011"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\AppsAdditionalData\105]
"IsOldApp"="TRUE"
"AppBornDate"="22-5-2011"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\AppsAdditionalData\107]
"IsOldApp"="TRUE"
"AppBornDate"="22-5-2011"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\AppsAdditionalData\129112212600933761]
"IsOldApp"="TRUE"
"AppBornDate"="22-5-2011"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\AppsAdditionalData\129112212601090013]
"IsOldApp"="TRUE"
"AppBornDate"="22-5-2011"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\AppsAdditionalData\129287797665431837]
"IsOldApp"="TRUE"
"AppBornDate"="22-5-2011"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\AppsAdditionalData\129460316972943811]
"IsOldApp"="TRUE"
"AppBornDate"="22-5-2011"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\AppsAdditionalData\129460316973256312]
"IsOldApp"="TRUE"
"AppBornDate"="22-5-2011"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\AppsAdditionalData\129460316974350064]
"IsOldApp"="TRUE"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\AppsAdditionalData\129460316974818815]
"IsOldApp"="TRUE"
"AppBornDate"="22-5-2011"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\AppsAdditionalData\129460316975287566]
"IsOldApp"="TRUE"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\AppsAdditionalData\129460317312788386]
"IsOldApp"="TRUE"
"AppBornDate"="22-5-2011"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\AppsAdditionalData\129460317643412945]
"IsOldApp"="TRUE"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\AppsAdditionalData\129502738556031799]
"IsOldApp"="TRUE"
"AppBornDate"="22-5-2011"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\AppsAdditionalData\129530554216906936]
"AppBornDate"="22-5-2011"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\AppsAdditionalData\129530554349103424]
"AppBornDate"="22-5-2011"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\AppsAdditionalData\3702671119025834822]
"IsOldApp"="TRUE"
"AppBornDate"="22-5-2011"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\AppsAdditionalData\4878870923213707553]
"IsOldApp"="TRUE"
"AppBornDate"="22-5-2011"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\AppsAdditionalData\7075780752558566161]
"IsOldApp"="TRUE"
"AppBornDate"="22-5-2011"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\IE5]
"CabinetVisible"="FALSE"
"ExplorerVisible"="FALSE"
"FirstTime"="TRUE"
"Visible"="TRUE"
"ToolbarRunFirstTimeAfterInstall"="TRUE"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Log]
"LogLevelsString"=""

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Login]
"users.conduit.com Last Login TB Version:6.2.3.0"=dword:4dd91574
"LoginRequestsNum"=dword:0000000d
"FirstLoginServerTime"="25-2-2011"
"LastLoginServerTime"="1-8-2011"
"users.conduit.com Last Login TB Version:6.3.3.3"=dword:4e36f1e6

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Monitored]
"MultiCommunityEnabled"="FALSE"
"GroupingEnabled"="FALSE"
"MultiCommunityID"="CT2542115"
"SHRINK_TOOLBAR"=dword:00000000

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository]

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115]

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115\AppRegisterUsage]
"ServiceName"="AppRegisterUsage"
"ServiceUrl"="http://apps.usage.conduit-services.com/AppOperations/AppRegistration.ashx"
"ServiceReloadInterval"=dword:00000000

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115\AppsMetaData]
"ServiceName"="AppsMetaData"
"ServiceUrl"="http://appsmetadata.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID"
"ServiceReloadInterval"=dword:00015180

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115\AppsSettings]
"ServiceName"="AppsSettings"
"ServiceUrl"="http://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_COMP_ID"
"ServiceReloadInterval"=dword:00000000

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115\AppTrackingFirstTime]
"ServiceName"="AppTrackingFirstTime"
"ServiceUrl"="http://tracking.usage.app.conduit-services.com/FirstTime.ashx?current=EB_APPTRACKING_CURRENT_STATE"
"ServiceReloadInterval"=dword:00003840

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115\AppTrackingUsage]
"ServiceName"="AppTrackingUsage"
"ServiceUrl"="http://tracking.usage.app.conduit-services.com/Usage.ashx"
"ServiceReloadInterval"=dword:00003840

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115\AppUninstallUsage]
"ServiceName"="AppUninstallUsage"
"ServiceUrl"="http://apps.usage.conduit-services.com/AppOperations/AppUninstall.ashx"
"ServiceReloadInterval"=dword:00000000

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115\BrowserToolbarsInfo]
"ServiceName"="BrowserToolbarsInfo"
"ServiceUrl"="http://counting.usage.toolbar.conduit-services.com/usage.ashx"
"ServiceReloadInterval"=dword:12cc0300

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115\ClientErrorLog]
"ServiceName"="ClientErrorLog"
"ServiceUrl"="http://clientlog.users.conduit.com/ClientDiagnostics.asmx?op=ReportDiagnosticsEvent"
"ServiceReloadInterval"=dword:00000000

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115\Coordinator]
"ResetServiceMap"=dword:00000001
"LastRequestTime"=dword:4e36f1c7
"LastReplyTime"=dword:4e36f1cb
"ErrorsCount"=dword:00000000
"ServiceReloadInterval"=dword:00015180

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115\DynamicDialogs]
"ServiceName"="DynamicDialogs"
"ServiceUrl"="http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=EB_TOOLBAR_VERSION"
"ServiceReloadInterval"=dword:0003f480

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115\GottenAppsContextMenu]
"ServiceName"="GottenAppsContextMenu"
"ServiceUrl"="http://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=EB_LOCALE"
"ServiceReloadInterval"=dword:00127500

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115\OtherAppsContextMenu]
"ServiceName"="OtherAppsContextMenu"
"ServiceUrl"="http://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=EB_LOCALE"
"ServiceReloadInterval"=dword:00127500

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115\SharedAppsContextMenu]
"ServiceName"="SharedAppsContextMenu"
"ServiceUrl"="http://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=EB_LOCALE"
"ServiceReloadInterval"=dword:00127500

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115\ToolbarAppComponentUsage]
"ServiceName"="ToolbarAppComponentUsage"
"ServiceUrl"="http://component.usage.toolbar.conduit-services.com/ToolbarComponentUsage.ashx"
"ServiceReloadInterval"=dword:00000000

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115\ToolbarAppUsage]
"ServiceName"="ToolbarAppUsage"
"ServiceUrl"="http://usage.toolbar.conduit-services.com/ToolbarUsage.ashx"
"ServiceReloadInterval"=dword:00000000

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115\ToolbarComponentUsage]
"ServiceName"="ToolbarComponentUsage"
"ServiceUrl"="http://component.usage.toolbar.conduit-services.com/ToolbarComponentUsage.ashx"
"ServiceReloadInterval"=dword:00000000

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115\ToolbarContextMenu]
"ServiceName"="ToolbarContextMenu"
"ServiceUrl"="http://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=EB_LOCALE"
"ServiceReloadInterval"=dword:00127500

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115\ToolbarLogin]
"ServiceName"="ToolbarLogin"
"ServiceUrl"="http://login.toolbar.conduit-services.com/Login.ashx"
"ServiceReloadInterval"=dword:00003840

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115\ToolbarSettings]
"ServiceName"="ToolbarSettings"
"ServiceUrl"="http://settings.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
"ServiceReloadInterval"=dword:00001c20

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115\ToolbarSettingsForPublisher]
"ServiceName"="ToolbarSettingsForPublisher"
"ServiceUrl"="http://settings.publisher.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
"ServiceReloadInterval"=dword:00000000

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115\ToolbarSettingsForSB]
"ServiceName"="ToolbarSettingsForSB"
"ServiceUrl"="http://settings706.toolbar.conduit-services.com/ToolbarSettings/sb.ashx?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
"ServiceReloadInterval"=dword:00001c20

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115\ToolbarTranslation]
"ServiceName"="ToolbarTranslation"
"ServiceUrl"="http://translation.toolbar.conduit-services.com/?locale=EB_LOCALE"
"ServiceReloadInterval"=dword:00015180

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115\ToolbarUninstall]
"ServiceName"="ToolbarUninstall"
"ServiceUrl"="http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"
"ServiceReloadInterval"=dword:00000000

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115\ToolbarUsage]
"ServiceName"="ToolbarUsage"
"ServiceUrl"="http://usage.toolbar.conduit-services.com/ToolbarUsage.ashx"
"ServiceReloadInterval"=dword:00000000

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115_CT2542115]

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115_CT2542115\AppsMetaData]
"LastRequestTime"=dword:4e36f1cd
"ETag"="1308581945"
"LastReplyTime"=dword:4e36f1cd
"ErrorsCount"=dword:00000000

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115_CT2542115\AppTrackingFirstTime]
"LastRequestTime"=dword:4e36f1d6
"LastReplyTime"=dword:4e36f1d6
"ErrorsCount"=dword:00000000
"data"="True"
"data.bck"="True"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115_CT2542115\AppTrackingUsage]
"LastRequestTime"=dword:4e36f1e1
"LastReplyTime"=dword:4e36f1e2
"ErrorsCount"=dword:00000000

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115_CT2542115\BrowserToolbarsInfo]
"LastRequestTime"=dword:4e2c0e42
"LastReplyTime"=dword:4e2c0e43
"ErrorsCount"=dword:00000000

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115_CT2542115\DynamicDialogs]
"LastRequestTime"=dword:4e359cff
"LastReplyTime"=dword:4e359d00
"ErrorsCount"=dword:00000000
"ETag"="8028f138140cc1:0"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115_CT2542115\ToolbarLogin]
"LastRequestTime"=dword:4e36f1e5
"LastReplyTime"=dword:4e36f1e6
"ErrorsCount"=dword:00000000

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115_CT2542115\ToolbarSettings]
"LastRequestTime"=dword:4e36f1c8
"ETag"="1312118234"
"LastReplyTime"=dword:4e36f1cb
"ErrorsCount"=dword:00000000

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115_fr-fr]

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\conduit_CT2542115_fr-fr\ToolbarTranslation]
"LastRequestTime"=dword:4e36f1d6
"ETag"="634477926765570000"
"LastReplyTime"=dword:4e36f1d6
"ErrorsCount"=dword:00000000

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\IndexTable]

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\IndexTable\CT2542115_CT2542115]
"ToolbarSettings"=dword:fdbc6ae7
"ToolbarSettingsForPublisher"=dword:06bfa3cc
"AppsMetaData"=dword:ee039c12
"ToolbarLogin"=dword:30b2b661
"DynamicDialogs"=dword:bfe904c0
"BrowserToolbarsInfo"=dword:caddead0
"AppTrackingFirstTime"=dword:5a30ae5a
"AppTrackingUsage"=dword:009bfb6b

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\IndexTable\CT2542115_fr-fr]
"ToolbarTranslation"=dword:758093cd

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\MetaData]

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\MetaData\10222443]
"dbname"="conduit_CT2542115_CT2542115"
"docdname"="AppTrackingUsage"
"fieldname"="data"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\MetaData\113222604]
"dbname"="conduit_CT2542115_CT2542115"
"docdname"="ToolbarSettingsForPublisher"
"fieldname"="data"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\MetaData\1513139802]
"dbname"="conduit_CT2542115_CT2542115"
"docdname"="AppTrackingFirstTime"
"fieldname"="data"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\MetaData\1971360717]
"dbname"="conduit_CT2542115_fr-fr"
"docdname"="ToolbarTranslation"
"fieldname"="data"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\MetaData\276479352]
"dbname"="conduit_CT2542115_CT2542115"
"docdname"="ToolbarSettingsForPublisher"
"fieldname"="data"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\MetaData\3213515001]
"dbname"="conduit_CT2542115_CT2542115"
"docdname"="ToolbarLogin"
"fieldname"="data"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\MetaData\3219719360]
"dbname"="conduit_CT2542115_CT2542115"
"docdname"="DynamicDialogs"
"fieldname"="data"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\MetaData\3310140145]
"dbname"="conduit_CT2542115_CT2542115"
"docdname"="ToolbarSettings"
"fieldname"="data"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\MetaData\3403541200]
"dbname"="conduit_CT2542115_CT2542115"
"docdname"="BrowserToolbarsInfo"
"fieldname"="data"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\MetaData\3664757290]
"dbname"="conduit_CT2542115_CT2542115"
"docdname"="AppsMetaData"
"fieldname"="data"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\MetaData\3993213970]
"dbname"="conduit_CT2542115_CT2542115"
"docdname"="AppsMetaData"
"fieldname"="data"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\MetaData\4256983783]
"dbname"="conduit_CT2542115_CT2542115"
"docdname"="ToolbarSettings"
"fieldname"="data"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\MetaData\696997124]
"dbname"="conduit_CT2542115_fr-fr"
"docdname"="ToolbarTranslation"
"fieldname"="data"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\Repository\MetaData\817018465]
"dbname"="conduit_CT2542115_CT2542115"
"docdname"="ToolbarLogin"
"fieldname"="data"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\settings]
"AUTOUPDATE"="1"
"FixPageNotFoundError"=dword:00000001
"EnableSearchFromAddress"="TRUE"
"SearchFromAddressUrl"="https://www.bing.com/search?q=MYSEARCHTERM&pc=cosp&ptag=G6C999A6E56D0BB89&form=CONORG&conlogo=CT3210127"
"ShouldSendReferalCookie"="TRUE"
"OpenSetupFinishPage"="FALSE"
"CopyDefaultData"="FALSE"
"VisualLastUpdateTime"=dword:4e3555da
"Locale"="fr-fr"
"LocaleAlignRTL"="FALSE"
"HomePageUrl"="http://search.conduit.com/ResultsExt.aspx?ctid=CT2542115&SearchSource=6"
"AlignMode"=dword:00000000
"EmailNotifierAllowAlerts"="TRUE"
"RadioHelpUrl"="http://TheSoftonicFranceToolbar.OurToolbar.com/help/#2_5"
"WeatherHelpUrl"="http://TheSoftonicFranceToolbar.OurToolbar.com/help/#2_8"
"SendUsageReport"="TRUE"
"3rdPartyLastCheck"=dword:4e2c0e4f
"3rdPartyReloadInterval"=dword:000001f8
"3rdPartyLastUpdate"=dword:4ad3182b
"WriteLog"="TRUE"
"CommunityUpdateLastCheck"=dword:ffffffff
"PublisherShowToolbarCloseButton"=dword:ffffffff
"SendAppsLogin"="TRUE"
"SocialDomains"="social.conduit.com;apps.conduit.com;services.apps.conduit.com"

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\settings\BackHandStorage]

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\settings\BackHandStorage\GlobalKeys]
"_FB_LifetimeSent"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,c2,\
97,eb,01,00,00,00,92,3f,8e,87,f2,f7,95,4f,9b,ee,c9,37,6b,9a,25,b7,04,00,00,\
00,18,00,00,00,44,00,65,00,73,00,63,00,72,00,69,00,70,00,74,00,69,00,6f,00,\
6e,00,00,00,03,66,00,00,a8,00,00,00,10,00,00,00,8b,9d,e5,23,13,f8,6d,d1,08,\
a6,8b,f2,5f,82,59,9f,00,00,00,00,04,80,00,00,a0,00,00,00,10,00,00,00,45,c9,\
66,df,d1,75,80,94,29,df,04,51,ae,f8,52,32,10,00,00,00,38,0a,f8,3f,f3,2d,d6,\
32,0a,85,50,e7,6b,34,34,91,14,00,00,00,0a,d6,da,90,57,5e,19,2a,dd,17,89,39,\
d0,ab,78,1f,49,f5,82,ce
"_FB_DailyActivity"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,c2,\
97,eb,01,00,00,00,92,3f,8e,87,f2,f7,95,4f,9b,ee,c9,37,6b,9a,25,b7,04,00,00,\
00,18,00,00,00,44,00,65,00,73,00,63,00,72,00,69,00,70,00,74,00,69,00,6f,00,\
6e,00,00,00,03,66,00,00,a8,00,00,00,10,00,00,00,52,36,84,c7,2c,d4,5a,82,ba,\
ee,99,42,e6,e7,66,1a,00,00,00,00,04,80,00,00,a0,00,00,00,10,00,00,00,52,d9,\
22,9f,d5,9f,ff,73,94,01,7e,0e,13,45,90,e5,20,00,00,00,d5,8e,80,ae,ef,5d,7a,\
8f,fa,69,d3,72,29,3b,a7,dd,02,76,d3,e2,55,f9,42,b9,43,71,6e,6f,85,70,28,57,\
14,00,00,00,38,fc,5f,31,80,31,89,61,3f,6c,c9,b4,11,3a,4f,b0,5a,be,c8,65
"Facebook_ctid_Connect_send"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,\
c0,4f,c2,97,eb,01,00,00,00,92,3f,8e,87,f2,f7,95,4f,9b,ee,c9,37,6b,9a,25,b7,\
04,00,00,00,18,00,00,00,44,00,65,00,73,00,63,00,72,00,69,00,70,00,74,00,69,\
00,6f,00,6e,00,00,00,03,66,00,00,a8,00,00,00,10,00,00,00,02,0c,e7,c5,dc,e9,\
2c,f9,b1,b2,b2,48,e6,d3,e5,34,00,00,00,00,04,80,00,00,a0,00,00,00,10,00,00,\
00,a3,1f,1a,78,55,d6,b3,a8,97,76,64,f4,fe,5f,21,08,10,00,00,00,4f,a7,9e,3c,\
8e,a0,e1,17,31,ca,b8,51,33,b1,88,1f,14,00,00,00,c7,89,70,c8,cd,a3,bc,71,f6,\
66,cc,5c,a7,5d,77,b7,9d,c5,74,a6
"FOR_ZONEID"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,c2,97,eb,\
01,00,00,00,92,3f,8e,87,f2,f7,95,4f,9b,ee,c9,37,6b,9a,25,b7,04,00,00,00,18,\
00,00,00,44,00,65,00,73,00,63,00,72,00,69,00,70,00,74,00,69,00,6f,00,6e,00,\
00,00,03,66,00,00,a8,00,00,00,10,00,00,00,51,b3,2a,d5,a3,bc,32,82,bd,5e,4c,\
f6,3e,40,e1,a7,00,00,00,00,04,80,00,00,a0,00,00,00,10,00,00,00,50,83,b8,4c,\
b1,bc,e2,73,3b,41,9c,8b,a0,62,d9,81,10,00,00,00,6c,e7,a7,c7,42,10,9f,b5,cb,\
c2,8f,7d,d2,5f,f9,be,14,00,00,00,9a,42,ce,6d,8b,9d,e8,62,00,19,d1,75,1a,48,\
cc,17,cf,55,4f,12
"FOR_PID"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,c2,97,eb,01,\
00,00,00,92,3f,8e,87,f2,f7,95,4f,9b,ee,c9,37,6b,9a,25,b7,04,00,00,00,18,00,\
00,00,44,00,65,00,73,00,63,00,72,00,69,00,70,00,74,00,69,00,6f,00,6e,00,00,\
00,03,66,00,00,a8,00,00,00,10,00,00,00,d0,8b,a3,19,52,82,ae,c4,a0,50,39,79,\
f0,5c,b9,a5,00,00,00,00,04,80,00,00,a0,00,00,00,10,00,00,00,fa,86,0f,0a,be,\
42,c7,a7,4d,cc,39,fb,8b,9b,03,29,10,00,00,00,7d,1b,20,7b,fe,7c,77,47,9f,14,\
26,55,1e,9e,c4,85,14,00,00,00,0f,bb,e7,31,d6,e4,ae,82,f4,26,a9,18,8a,0a,49,\
38,b1,ac,d1,80
"FOR_AOI"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,c2,97,eb,01,\
00,00,00,92,3f,8e,87,f2,f7,95,4f,9b,ee,c9,37,6b,9a,25,b7,04,00,00,00,18,00,\
00,00,44,00,65,00,73,00,63,00,72,00,69,00,70,00,74,00,69,00,6f,00,6e,00,00,\
00,03,66,00,00,a8,00,00,00,10,00,00,00,78,c1,59,ad,86,01,a1,7b,3e,4f,80,17,\
a8,8d,f8,a0,00,00,00,00,04,80,00,00,a0,00,00,00,10,00,00,00,f6,bf,57,64,9a,\
b3,be,2b,77,55,8f,ad,db,56,f1,46,18,00,00,00,24,cd,c8,d0,73,e7,74,63,bf,9e,\
4c,64,d4,1a,0c,a5,64,a7,5d,33,6c,a1,6c,97,14,00,00,00,ab,0d,60,98,ff,02,0d,\
40,62,ce,95,1f,0f,7f,b2,ad,e2,a4,e2,56
"FOR_CDTR5"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,c2,97,eb,01,\
00,00,00,92,3f,8e,87,f2,f7,95,4f,9b,ee,c9,37,6b,9a,25,b7,04,00,00,00,18,00,\
00,00,44,00,65,00,73,00,63,00,72,00,69,00,70,00,74,00,69,00,6f,00,6e,00,00,\
00,03,66,00,00,a8,00,00,00,10,00,00,00,0c,e7,cc,53,c3,d0,f3,66,ba,37,34,a1,\
fa,65,ee,74,00,00,00,00,04,80,00,00,a0,00,00,00,10,00,00,00,ea,9e,af,a4,cd,\
54,55,38,36,5b,7d,2e,b5,4e,3f,5e,18,00,00,00,60,75,e9,fd,d5,ce,57,5e,4b,c6,\
80,f6,d3,b6,f6,fa,ee,5e,7e,ab,00,be,0c,29,14,00,00,00,64,de,07,d2,6e,89,c2,\
dc,56,6d,29,2f,2d,56,3f,15,4b,c4,ee,d7
"FOR_LCUT"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,c2,97,eb,01,\
00,00,00,9c,e8,47,d6,67,ad,98,40,8e,c7,28,93,fc,4b,99,f9,04,00,00,00,18,00,\
00,00,44,00,65,00,73,00,63,00,72,00,69,00,70,00,74,00,69,00,6f,00,6e,00,00,\
00,03,66,00,00,a8,00,00,00,10,00,00,00,ff,0b,43,00,84,24,e7,d8,18,73,3e,3c,\
9f,5c,06,be,00,00,00,00,04,80,00,00,a0,00,00,00,10,00,00,00,9d,14,ff,49,42,\
ff,af,fd,05,72,1b,ec,49,92,01,e6,18,00,00,00,4b,93,4f,62,9f,78,08,7d,de,ee,\
3a,8d,49,5d,ad,03,5e,0f,d0,bd,be,01,35,9e,14,00,00,00,27,ae,ea,f2,bc,6f,2b,\
46,6c,f0,26,5d,f1,ba,9d,64,23,00,86,1f
"FOR_CID"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,c2,97,eb,01,\
00,00,00,9c,e8,47,d6,67,ad,98,40,8e,c7,28,93,fc,4b,99,f9,04,00,00,00,18,00,\
00,00,44,00,65,00,73,00,63,00,72,00,69,00,70,00,74,00,69,00,6f,00,6e,00,00,\
00,03,66,00,00,a8,00,00,00,10,00,00,00,2c,bc,10,12,1d,0e,a4,9d,bf,05,30,6a,\
0a,32,52,35,00,00,00,00,04,80,00,00,a0,00,00,00,10,00,00,00,79,87,02,c7,e8,\
79,ab,e1,a8,84,49,7c,e0,9f,32,6f,08,00,00,00,62,09,1f,ef,6f,c8,35,79,14,00,\
00,00,2c,8c,4e,c5,a8,a6,21,b2,5b,52,ec,a9,a5,1d,e3,0a,27,94,9a,94
"FOR_RID"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,c2,97,eb,01,\
00,00,00,9c,e8,47,d6,67,ad,98,40,8e,c7,28,93,fc,4b,99,f9,04,00,00,00,18,00,\
00,00,44,00,65,00,73,00,63,00,72,00,69,00,70,00,74,00,69,00,6f,00,6e,00,00,\
00,03,66,00,00,a8,00,00,00,10,00,00,00,89,f0,ee,ff,36,f7,08,72,ae,75,28,65,\
f9,49,a2,52,00,00,00,00,04,80,00,00,a0,00,00,00,10,00,00,00,bd,8f,75,18,d0,\
5c,5b,af,46,89,f9,1a,ad,41,81,30,10,00,00,00,88,d7,6f,c0,b6,79,d3,a6,53,2a,\
4f,f8,18,1d,0b,b6,14,00,00,00,82,88,ca,55,0e,2b,4a,88,0d,56,2b,83,cd,c0,76,\
ad,80,4e,55,84
"FOR_CCID"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,c2,97,eb,01,\
00,00,00,9c,e8,47,d6,67,ad,98,40,8e,c7,28,93,fc,4b,99,f9,04,00,00,00,18,00,\
00,00,44,00,65,00,73,00,63,00,72,00,69,00,70,00,74,00,69,00,6f,00,6e,00,00,\
00,03,66,00,00,a8,00,00,00,10,00,00,00,6a,75,a8,c9,d4,34,55,c7,3a,b7,f2,32,\
3d,38,06,cc,00,00,00,00,04,80,00,00,a0,00,00,00,10,00,00,00,0a,89,70,68,b1,\
7d,ae,b3,42,fd,b1,a9,9c,07,88,9d,10,00,00,00,93,1b,e0,25,13,72,16,a1,35,ef,\
a1,b0,7c,55,9d,36,14,00,00,00,d1,99,ec,cb,07,db,d4,ba,a4,b3,fa,0f,1e,b2,5e,\
d3,15,63,18,00
"FOR_IP"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,\
00,00,9c,e8,47,d6,67,ad,98,40,8e,c7,28,93,fc,4b,99,f9,04,00,00,00,18,00,00,\
00,44,00,65,00,73,00,63,00,72,00,69,00,70,00,74,00,69,00,6f,00,6e,00,00,00,\
03,66,00,00,a8,00,00,00,10,00,00,00,03,f5,a4,52,ba,99,01,1c,6c,2f,f2,0c,09,\
43,3f,68,00,00,00,00,04,80,00,00,a0,00,00,00,10,00,00,00,c7,be,23,d2,a3,e3,\
25,34,21,bb,5b,3e,45,91,ef,42,20,00,00,00,f4,68,b7,4a,4b,7a,8e,a2,59,e5,e6,\
5c,22,f7,13,d7,a0,07,50,86,57,c9,33,6a,fa,d1,c4,5b,7c,0d,60,b7,14,00,00,00,\
b2,c9,22,ca,ef,b3,5b,83,29,7d,a3,e9,e6,e9,ea,ba,55,85,25,36

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\settings\BackHandStorage\http___clkads_com_adServe_static_conintsoft-ctx_html_tid=CT2542115]
"EB_SESSION_START_TIME"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,\
c2,97,eb,01,00,00,00,92,3f,8e,87,f2,f7,95,4f,9b,ee,c9,37,6b,9a,25,b7,04,00,\
00,00,18,00,00,00,44,00,65,00,73,00,63,00,72,00,69,00,70,00,74,00,69,00,6f,\
00,6e,00,00,00,03,66,00,00,a8,00,00,00,10,00,00,00,75,47,54,ae,9e,21,5f,2f,\
54,67,8e,1e,4f,c6,90,b1,00,00,00,00,04,80,00,00,a0,00,00,00,10,00,00,00,62,\
ac,73,fe,a0,71,0a,01,88,17,a6,3c,e3,9f,67,cb,08,00,00,00,a9,0a,cf,31,62,6f,\
59,88,14,00,00,00,38,30,9d,24,e4,29,34,6d,94,84,34,e3,2f,9d,bc,2b,a7,e6,bd,\
8c
"EB_SESSION_LAST_CLICK"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,\
c2,97,eb,01,00,00,00,92,3f,8e,87,f2,f7,95,4f,9b,ee,c9,37,6b,9a,25,b7,04,00,\
00,00,18,00,00,00,44,00,65,00,73,00,63,00,72,00,69,00,70,00,74,00,69,00,6f,\
00,6e,00,00,00,03,66,00,00,a8,00,00,00,10,00,00,00,f5,fe,c5,11,5f,32,5a,38,\
81,67,d8,79,d1,e4,4f,66,00,00,00,00,04,80,00,00,a0,00,00,00,10,00,00,00,1c,\
84,8b,44,a5,94,d6,31,df,4f,50,30,25,e2,6a,6d,08,00,00,00,3a,05,17,ce,28,15,\
04,96,14,00,00,00,c9,23,1f,4f,bf,13,de,e1,59,ff,49,2d,ae,85,be,95,bd,38,7f,\
5c

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\settings\BackHandStorage\http___d_gameplaylabs_com_conduit_loader_php_zoneid=9592&pid=1010]
"EB_SESSION_START_TIME"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,\
c2,97,eb,01,00,00,00,92,3f,8e,87,f2,f7,95,4f,9b,ee,c9,37,6b,9a,25,b7,04,00,\
00,00,18,00,00,00,44,00,65,00,73,00,63,00,72,00,69,00,70,00,74,00,69,00,6f,\
00,6e,00,00,00,03,66,00,00,a8,00,00,00,10,00,00,00,b9,e8,da,fe,1e,9d,81,d7,\
5e,ca,24,d9,fd,48,60,61,00,00,00,00,04,80,00,00,a0,00,00,00,10,00,00,00,36,\
40,92,dd,8e,6c,21,af,cb,95,6f,c4,27,af,70,70,08,00,00,00,cf,1c,dc,7c,50,c2,\
8e,94,14,00,00,00,98,1b,ca,47,d2,76,d4,db,b2,a7,23,b0,22,3f,2a,13,bd,00,7b,\
ec
"EB_SESSION_LAST_CLICK"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,\
c2,97,eb,01,00,00,00,92,3f,8e,87,f2,f7,95,4f,9b,ee,c9,37,6b,9a,25,b7,04,00,\
00,00,18,00,00,00,44,00,65,00,73,00,63,00,72,00,69,00,70,00,74,00,69,00,6f,\
00,6e,00,00,00,03,66,00,00,a8,00,00,00,10,00,00,00,03,cd,2b,e7,d0,aa,f9,a0,\
fa,36,7f,12,d8,05,8c,d5,00,00,00,00,04,80,00,00,a0,00,00,00,10,00,00,00,c9,\
2e,24,0b,32,cf,81,01,43,b1,f2,95,9a,23,1f,4c,08,00,00,00,91,c5,fc,d8,4c,52,\
8a,6c,14,00,00,00,98,41,e6,c2,00,a4,28,64,d5,8e,9b,e3,30,b5,f2,50,0f,7d,cb,\
e1

[HKEY_CURRENT_USER\Software\Softonic_France\toolbar\settings\BackHandStorage\http___facebook_conduitapps_com_component_html_mode=2]
"EB_SESSION_START_TIME"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,\
c2,97,eb,01,00,00,00,92,3f,8e,87,f2,f7,95,4f,9b,ee,c9,37,6b,9a,25,b7,04,00,\
00,00,18,00,00,00,44,00,65,00,73,00,63,00,72,00,69,00,70,00,74,00,69,00,6f,\
00,6e,00,00,00,03,66,00,00,a8,00,00,00,10,00,00,00,c7,3e,f2,30,76,0a,b5,8d,\
00,6b,62,80,96,d9,c4,a6,00,00,00,00,04,80,00,00,a0,00,00,00,10,00,00,00,f6,\
bf,88,9d,18,76,c8,7b,a5,c3,b6,40,40,30,4e,e5,08,00,00,00,13,05,49,d2,c4,20,\
5d,b4,14,00,00,00,2e,aa,18,b7,5d,d4,e8,24,cd,b1,fb,85,45,fc,f4,a4,56,4a,c0,\
99
"EB_SESSION_LAST_CLICK"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,\
c2,97,eb,01,00,00,00,92,3f,8e,87,f2,f7,95,4f,9b,ee,c9,37,6b,9a,25,b7,04,00,\
00,00,18,00,00,00,44,00,65,00,73,00,63,00,72,00,69,00,70,00,74,00,69,00,6f,\
00,6e,00,00,00,03,66,00,00,a8,00,00,00,10,00,00,00,01,92,c4,

Discussions similaires

Probléme no boot device detected!

No bootable device ACER ASPIRE ONE

Problème avec mon Controleur Ethernet .

Erreur windows "Boot\BCD'

[Virtualisation] No bootable device

apple device usb drivers supprimé du pc

Votre réponse

Discussions similaires