Comment supprimer startsear.ch
Résolu/Fermé
zeroberto79
Messages postés
17
Date d'inscription
dimanche 30 octobre 2011
Statut
Membre
Dernière intervention
3 novembre 2011
-
31 oct. 2011 à 00:57
zeroberto79 Messages postés 17 Date d'inscription dimanche 30 octobre 2011 Statut Membre Dernière intervention 3 novembre 2011 - 3 nov. 2011 à 20:30
zeroberto79 Messages postés 17 Date d'inscription dimanche 30 octobre 2011 Statut Membre Dernière intervention 3 novembre 2011 - 3 nov. 2011 à 20:30
A voir également:
- Comment supprimer startsear.ch
- Comment supprimer une page sur word - Guide
- Supprimer compte instagram - Guide
- Supprimer pub youtube - Accueil - Streaming
- Comment recuperer un message supprimé sur whatsapp - Guide
- Impossible de supprimer un fichier - Guide
26 réponses
Bleuet'
Messages postés
579
Date d'inscription
dimanche 16 octobre 2011
Statut
Membre
Dernière intervention
12 octobre 2018
32
Modifié par Bleuet' le 31/10/2011 à 12:13
Modifié par Bleuet' le 31/10/2011 à 12:13
Salut,
* Relancer AdwCleaner en mode "suppression".
--------
* Télécharge AD-Remover >
Phase 1 Rercherche :
[*]Télécharge AD-Remover (de C_XX) sur le bureau.
https://www.commentcamarche.net/telecharger/securite/2547-ad-remover/
/ ! \ Déconnecte toi et ferme toutes les applications en cours / ! \
[*]Désactive l'UAC ( si Vista, Windows 7)
[*]Désactive le Team-Timer de Spybot S&D (si installé)
[*]Double-clique sur l'icône AD-Remover
[*]Au menu principal, clique sur "Scanner"
[*]Confirme le lancement de l'analyse et laisse l'outil travailler
[*]Poste le rapport qui apparait à la fin (il est aussi sauvegardé sous C:\Ad-report-SCAN.txt )
(CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )
--------
* télécharge ZHPDiag >
https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html
ou >
https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/
/!\Il est très important de l'enregistrer sur le bureau / !\
Une icône apparaitra alors sur le bureau.
Ouvrir le fichier, (clic droit exécuter en tant qu'administrateur pour Vista/W 7) pour lancer le programme d'assistant d'installation.
Installer le avec les paramètres par défaut sans oublier de cocher la case "Créer une icône sur le bureau"
Lancement et diagnostic :
En même temps que ZHPDiag, sont créés les icônes de ZHPFix et MBRCheck qui peuvent être utilisés.
[*] Cliquer alors sur la loupe pour lancer le diagnostic.
Patientez jusqu'à la fin de l'analyse. Il peut arriver que le logiciel donne l'impression d'être bloqué ; patienter.
En cas de blocage sur la section O80, cliquer sur le tournevis pour le décocher.
[*] Le diagnostic terminé,sauvegarder le rapport sur le Bureau en cliquant sur la disquette bleue.
[*] Enregistrer le rapport sur le bureau.
Héberger comme suit (le rapport risque d'être très long) :
A partir de ce lien :
http://www.cijoint.fr/
ou celui-ci
https://www.cjoint.com/
Il ne reste plus qu'à copier/coller ce lien sur le forum.
---------------
* Copier/coller tous les rapports.
---------------
"L'expérience est une lanterne accrochée dans le dos et qui ne sert qu'à éclairer le chemin parcouru."Confucius
* Relancer AdwCleaner en mode "suppression".
--------
* Télécharge AD-Remover >
Phase 1 Rercherche :
[*]Télécharge AD-Remover (de C_XX) sur le bureau.
https://www.commentcamarche.net/telecharger/securite/2547-ad-remover/
/ ! \ Déconnecte toi et ferme toutes les applications en cours / ! \
[*]Désactive l'UAC ( si Vista, Windows 7)
[*]Désactive le Team-Timer de Spybot S&D (si installé)
[*]Double-clique sur l'icône AD-Remover
[*]Au menu principal, clique sur "Scanner"
[*]Confirme le lancement de l'analyse et laisse l'outil travailler
[*]Poste le rapport qui apparait à la fin (il est aussi sauvegardé sous C:\Ad-report-SCAN.txt )
(CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )
--------
* télécharge ZHPDiag >
https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html
ou >
https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/
/!\Il est très important de l'enregistrer sur le bureau / !\
Une icône apparaitra alors sur le bureau.
Ouvrir le fichier, (clic droit exécuter en tant qu'administrateur pour Vista/W 7) pour lancer le programme d'assistant d'installation.
Installer le avec les paramètres par défaut sans oublier de cocher la case "Créer une icône sur le bureau"
Lancement et diagnostic :
En même temps que ZHPDiag, sont créés les icônes de ZHPFix et MBRCheck qui peuvent être utilisés.
[*] Cliquer alors sur la loupe pour lancer le diagnostic.
Patientez jusqu'à la fin de l'analyse. Il peut arriver que le logiciel donne l'impression d'être bloqué ; patienter.
En cas de blocage sur la section O80, cliquer sur le tournevis pour le décocher.
[*] Le diagnostic terminé,sauvegarder le rapport sur le Bureau en cliquant sur la disquette bleue.
[*] Enregistrer le rapport sur le bureau.
Héberger comme suit (le rapport risque d'être très long) :
A partir de ce lien :
http://www.cijoint.fr/
ou celui-ci
https://www.cjoint.com/
Il ne reste plus qu'à copier/coller ce lien sur le forum.
---------------
* Copier/coller tous les rapports.
---------------
"L'expérience est une lanterne accrochée dans le dos et qui ne sert qu'à éclairer le chemin parcouru."Confucius
zeroberto79
Messages postés
17
Date d'inscription
dimanche 30 octobre 2011
Statut
Membre
Dernière intervention
3 novembre 2011
31 oct. 2011 à 13:35
31 oct. 2011 à 13:35
Bonjour bleuet, merci d'avoir pris le temps de me répondre.
Voila le rapport ad-remover:
======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======
Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org
C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 13:29:02 le 31/10/2011, Mode normal
Microsoft® Windows Vista(TM) Édition Familiale Basique Service Pack 2 (X86)
Sélim@PC-DE-SÉLIM (Packard Bell BV EASYNOTE ML65)
============== RECHERCHE ==============
Fichier trouvé: C:\Users\Sélim\AppData\Local\knqfimim.bat
Fichier trouvé: C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default\searchplugins\askcom.xml
Dossier trouvé: C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default\conduit
Dossier trouvé: C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default\ConduitEngine
Dossier trouvé: C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default\extensions\engine@conduit.com
Dossier trouvé: C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default\extensions\{33E0DAA6-3AF3-D8B5-6752-10E949C61516}
Dossier trouvé: C:\Users\Sélim\AppData\LocalLow\Conduit
Dossier trouvé: C:\Users\Sélim\AppData\Roaming\freeTVRadio
Dossier trouvé: C:\Program Files\freeTVRadio
Dossier trouvé: C:\Users\Sélim\AppData\LocalLow\PriceGong
Dossier trouvé: C:\Users\Sélim\AppData\LocalLow\Radio_Bar_1
Dossier trouvé: C:\Users\Sélim\AppData\Roaming\OfferBox
Dossier trouvé: C:\Program Files\OfferBox
Fichier trouvé: C:\Users\Sélim\AppData\Local\qbueois_nav.dat
Fichier trouvé: C:\Users\Sélim\AppData\Local\qbueois.dat
Fichier trouvé: C:\Users\Sélim\AppData\Local\qbueois_navps.dat
Fichier trouvé: C:\Users\Sélim\Downloads\vshare-plugin.exe
-- Fichier ouvert: C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default\Prefs.js --
Ligne trouvée: user_pref("CT2849852.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT284...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1241893/1237566/FR", "\"0\"...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/FR", "\"0\"")...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2849852", ...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63433363123173...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=1/11/20...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=11/8/20...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/21/2...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/27/2...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/30/2...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/17/20...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/22/20...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2849852/CT2849852...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=fr", "\"634...
Ligne trouvée: user_pref("CommunityToolbar.EngineHiddenByUser", true);
Ligne trouvée: user_pref("CommunityToolbar.EngineOwner", "CT2849852");
Ligne trouvée: user_pref("CommunityToolbar.EngineOwnerGuid", "{ef79f67a-6ad7-4715-a0f8-932fca442023}");
Ligne trouvée: user_pref("CommunityToolbar.EngineOwnerToolbarId", "bittorrentbar_fr");
Ligne trouvée: user_pref("CommunityToolbar.IsEngineShown", false);
Ligne trouvée: user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Ligne trouvée: user_pref("CommunityToolbar.OriginalEngineOwner", "CT2849852");
Ligne trouvée: user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{ef79f67a-6ad7-4715-a0f8-932fca442023}");
Ligne trouvée: user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "bittorrentbar_fr");
Ligne trouvée: user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr...
Ligne trouvée: user_pref("CommunityToolbar.ToolbarsList", "ConduitEngine,CT2849852");
Ligne trouvée: user_pref("CommunityToolbar.ToolbarsList2", "ConduitEngine,CT2849852");
Ligne trouvée: user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sat Apr 09 2011 19:10:06 GMT+02...
Ligne trouvée: user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Ligne trouvée: user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Wed Jul 13 2011 23:09:23 GMT+0200");
Ligne trouvée: user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Ligne trouvée: user_pref("CommunityToolbar.alert.locale", "en");
Ligne trouvée: user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Ligne trouvée: user_pref("CommunityToolbar.alert.loginLastCheckTime", "Wed Jul 13 2011 23:09:22 GMT+0200");
Ligne trouvée: user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Ligne trouvée: user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Ligne trouvée: user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Ligne trouvée: user_pref("CommunityToolbar.alert.showTrayIcon", false);
Ligne trouvée: user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Ligne trouvée: user_pref("CommunityToolbar.alert.userId", "b0915569-7edd-43ca-9133-c6e09ed06389");
Ligne trouvée: user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Tue Mar 22 2011 02:37:25 GMT+0100");
Ligne trouvée: user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Ligne trouvée: user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Ligne trouvée: user_pref("ConduitEngine.AppTrackingLastCheckTime", "Wed Jul 13 2011 23:09:33 GMT+0200");
Ligne trouvée: user_pref("ConduitEngine.CTID", "ConduitEngine");
Ligne trouvée: user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Sat Apr 09 2011 19:10:00 GMT+0200");
Ligne trouvée: user_pref("ConduitEngine.FirstServerDate", "12/23/2010 02");
Ligne trouvée: user_pref("ConduitEngine.FirstTime", true);
Ligne trouvée: user_pref("ConduitEngine.FirstTimeFF3", true);
Ligne trouvée: user_pref("ConduitEngine.FixPageNotFoundErrors", false);
Ligne trouvée: user_pref("ConduitEngine.HasUserGlobalKeys", true);
Ligne trouvée: user_pref("ConduitEngine.Initialize", true);
Ligne trouvée: user_pref("ConduitEngine.InitializeCommonPrefs", true);
Ligne trouvée: user_pref("ConduitEngine.InstallationType", "UnknownIntegration");
Ligne trouvée: user_pref("ConduitEngine.InstalledDate", "Sun Dec 12 2010 13:27:35 GMT+0100");
Ligne trouvée: user_pref("ConduitEngine.IsMulticommunity", false);
Ligne trouvée: user_pref("ConduitEngine.IsOpenThankYouPage", false);
Ligne trouvée: user_pref("ConduitEngine.IsOpenUninstallPage", false);
Ligne trouvée: user_pref("ConduitEngine.LanguagePackLastCheckTime", "Sat Apr 09 2011 19:10:04 GMT+0200");
Ligne trouvée: user_pref("ConduitEngine.LastLogin_3.2.5.2", "Sun Mar 20 2011 09:33:39 GMT+0100");
Ligne trouvée: user_pref("ConduitEngine.LastLogin_3.3.3.2", "Sun Apr 10 2011 01:34:21 GMT+0200");
Ligne trouvée: user_pref("ConduitEngine.PublisherContainerWidth", 0);
Ligne trouvée: user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Ligne trouvée: user_pref("ConduitEngine.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=C...
Ligne trouvée: user_pref("ConduitEngine.SettingsLastCheckTime", "Sun Apr 10 2011 03:10:34 GMT+0200");
Ligne trouvée: user_pref("ConduitEngine.UserID", "UN84095988850809199");
Ligne trouvée: user_pref("ConduitEngine.engineLocale", "fr");
Ligne trouvée: user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Sat Apr 09 2011 19:10:04 GMT+0200");
Ligne trouvée: user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Sun Apr 10 2011 03:10:33 GMT+0200");
Ligne trouvée: user_pref("ConduitEngine.initDone", true);
Ligne trouvée: user_pref("ConduitEngine.isAppTrackingManagerOn", true);
Ligne trouvée: user_pref("ConduitEngine.usagesFlag", 2);
Ligne trouvée: user_pref("browser.search.order.1", "Ask.com");
-- Fichier Fermé --
Clé trouvée: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\knqfimim
Clé trouvée: HKLM\Software\Classes\Conduit.Engine
Clé trouvée: HKLM\Software\Classes\Toolbar.CT2405725
Clé trouvée: HKLM\Software\Classes\Toolbar.CT2849852
Clé trouvée: HKLM\Software\Conduit
Clé trouvée: HKLM\Software\OfferBox
Clé trouvée: HKCU\Software\freeTVRadio
Clé trouvée: HKCU\Software\OfferBox
Clé trouvée: HKCU\Software\Poker 770
Clé trouvée: HKCU\Software\AppDataLow\Software\PriceGong
Clé trouvée: HKCU\Software\AppDataLow\Software\Radio_Bar_1
Clé trouvée: HKCU\Software\AppDataLow\Software\Toolbar
Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Clé trouvée: HKLM\Software\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom
Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}
Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{30F9B915-B755-4826-820B-08FBA6BD249D}
============== SCAN ADDITIONNEL ==============
**** Mozilla Firefox Version [7.0.1 (fr)] ****
Plugins\npvsharetvplg.dll (vShare.tv )
HKLM_MozillaPlugins\Adobe Reader (x)
Searchplugins\bing.xml ( hxxp://www.bing.com/search)
Components\browsercomps.dll (Mozilla Foundation)
HKLM_Extensions|{7BA52691-1876-45ce-9EE6-54BCB3B04BBC} - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn\
-- C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default --
Extensions\cacaoweb@cacaoweb.org (cacaoweb)
Extensions\engine@conduit.com (Conduit Engine )
Extensions\vinceturk@gmail.com (KwiClick)
Extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516} (Complitly - Speed up your search with your personal search suggestions tool)
Extensions\{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829} (PriceGong)
Extensions\{ef79f67a-6ad7-4715-a0f8-932fca442023} (BittorrentBar_FR Community Toolbar)
Searchplugins\askcom.xml (?)
Searchplugins\startsear.xml (?)
Prefs.js - browser.download.lastDir, C:\\Users\\Sélim\\Desktop
Prefs.js - browser.search.defaultenginename, Web Search
Prefs.js - browser.search.selectedEngine, Google
Prefs.js - browser.startup.homepage, hxxp://startsear.ch/?aff=1
Prefs.js - browser.startup.homepage_override.buildID, 20110928134238
Prefs.js - browser.startup.homepage_override.mstone, rv:7.0.1
Prefs.js - keyword.URL, hxxp://www.google.com.my/search?q=
========================================
**** Internet Explorer Version [9.0.8112.16421] ****
HKCU_Main|Default_Page_URL - hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=040c&s=2&o=vb32&d=0309&m=easynote_ml65
HKCU_Main|Search bar - hxxp://www.google.com/ie
HKCU_Main|Search Page - hxxp://www.google.com
HKCU_Main|Start Page - hxxp://www.google.fr/
HKLM_Main|Default_Page_URL - hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=040c&s=2&o=vb32&d=0309&m=easynote_ml65
HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Start Page - hxxp://www.google.com
HKCU_URLSearchHooks|{0fc85f5d-6207-4515-a490-45a549d285c0} (x)
HKCU_URLSearchHooks|{ef79f67a-6ad7-4715-a0f8-932fca442023} (x)
HKCU_SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} - "Ask Search" (hxxp://websearch.ask.com/redirect?client=ie&tb=SPC2&o=15000&src=crm&q={searchTer...)
HKCU_SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64} - "?" (?)
HKCU_SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E} - "Google Desktop" (hxxp://127.0.0.1:4664/search&s=ORPcYSwwQWjPEb6JeEXCz4UUgiU?q={searchTerms})
HKCU_SearchScopes\{9D5BD211-422C-4164-9298-BB4186A30F31} - "Web Search" (hxxp://startsear.ch/?aff=1&src=sp&cf=b2721710-0256-11e1-a3e8-00238b8c89d3&q={sea...)
HKLM_SearchScopes\{9D5BD211-422C-4164-9298-BB4186A30F31} - "Web Search" (hxxp://startsear.ch/?aff=1&src=sp&cf=b2721710-0256-11e1-a3e8-00238b8c89d3&q={sea...)
HKCU_Toolbar\WebBrowser|{0FC85F5D-6207-4515-A490-45A549D285C0} (x)
HKCU_Toolbar\WebBrowser|{30F9B915-B755-4826-820B-08FBA6BD249D} (x)
HKCU_Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} (x)
HKCU_Toolbar\WebBrowser|{EF79F67A-6AD7-4715-A0F8-932FCA442023} (x)
HKCU_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files\Veetle\Player\vtl_hfs.exe (?)
HKCU_ElevationPolicy\{6052FE92-D706-4756-AC4E-71361F909996} - C:\Program Files\BitTorrent\bittorrent.exe (BitTorrent, Inc.)
HKCU_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files\Veetle\Player\player.exe (?)
HKCU_ElevationPolicy\{AF235069-AACC-46C0-A984-EB9A5CB94DA4} - C:\Program Files\eMule\emule.exe (http://www.emule-project.net)
HKCU_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files\Veetle\Player\vtl_hfax.exe (?)
HKLM_ElevationPolicy\{442E3CEB-D71B-11DA-8750-001185653D78} - c:\program files\google\googletoolbar1user.exe (?)
HKLM_ElevationPolicy\{50A6102E-D757-409e-97B7-6EA4EEEA5BC3} - C:\Program Files\Common Files\Apple\Internet Services\BookmarkDAV_client.exe (Apple Inc.)
HKLM_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files\Veetle\Player\vtl_hfs.exe (?)
HKLM_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files\Veetle\Player\player.exe (?)
HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x)
HKLM_ElevationPolicy\{74351F14-5437-4d87-805B-04D409B09976} - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
HKLM_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files\Veetle\Player\vtl_hfax.exe (?)
HKCU_Extensions\{97ED3A9F-CD6F-473A-8FE1-7505C1B844C3} - "Billeo" (billeo.dll,219)
HKLM_Extensions\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - "?" (?)
========================================
C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 1 Fichier(s)
C:\Ad-Report-SCAN[1].txt - 31/10/2011 13:29:29 (15619 Octet(s))
Fin à: 13:30:16, 31/10/2011
============== E.O.F ==============
Voila le rapport ad-remover:
======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======
Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org
C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 13:29:02 le 31/10/2011, Mode normal
Microsoft® Windows Vista(TM) Édition Familiale Basique Service Pack 2 (X86)
Sélim@PC-DE-SÉLIM (Packard Bell BV EASYNOTE ML65)
============== RECHERCHE ==============
Fichier trouvé: C:\Users\Sélim\AppData\Local\knqfimim.bat
Fichier trouvé: C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default\searchplugins\askcom.xml
Dossier trouvé: C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default\conduit
Dossier trouvé: C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default\ConduitEngine
Dossier trouvé: C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default\extensions\engine@conduit.com
Dossier trouvé: C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default\extensions\{33E0DAA6-3AF3-D8B5-6752-10E949C61516}
Dossier trouvé: C:\Users\Sélim\AppData\LocalLow\Conduit
Dossier trouvé: C:\Users\Sélim\AppData\Roaming\freeTVRadio
Dossier trouvé: C:\Program Files\freeTVRadio
Dossier trouvé: C:\Users\Sélim\AppData\LocalLow\PriceGong
Dossier trouvé: C:\Users\Sélim\AppData\LocalLow\Radio_Bar_1
Dossier trouvé: C:\Users\Sélim\AppData\Roaming\OfferBox
Dossier trouvé: C:\Program Files\OfferBox
Fichier trouvé: C:\Users\Sélim\AppData\Local\qbueois_nav.dat
Fichier trouvé: C:\Users\Sélim\AppData\Local\qbueois.dat
Fichier trouvé: C:\Users\Sélim\AppData\Local\qbueois_navps.dat
Fichier trouvé: C:\Users\Sélim\Downloads\vshare-plugin.exe
-- Fichier ouvert: C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default\Prefs.js --
Ligne trouvée: user_pref("CT2849852.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT284...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1241893/1237566/FR", "\"0\"...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/FR", "\"0\"")...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2849852", ...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63433363123173...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=1/11/20...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=11/8/20...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/21/2...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/27/2...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/30/2...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/17/20...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/22/20...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2849852/CT2849852...
Ligne trouvée: user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=fr", "\"634...
Ligne trouvée: user_pref("CommunityToolbar.EngineHiddenByUser", true);
Ligne trouvée: user_pref("CommunityToolbar.EngineOwner", "CT2849852");
Ligne trouvée: user_pref("CommunityToolbar.EngineOwnerGuid", "{ef79f67a-6ad7-4715-a0f8-932fca442023}");
Ligne trouvée: user_pref("CommunityToolbar.EngineOwnerToolbarId", "bittorrentbar_fr");
Ligne trouvée: user_pref("CommunityToolbar.IsEngineShown", false);
Ligne trouvée: user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Ligne trouvée: user_pref("CommunityToolbar.OriginalEngineOwner", "CT2849852");
Ligne trouvée: user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{ef79f67a-6ad7-4715-a0f8-932fca442023}");
Ligne trouvée: user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "bittorrentbar_fr");
Ligne trouvée: user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr...
Ligne trouvée: user_pref("CommunityToolbar.ToolbarsList", "ConduitEngine,CT2849852");
Ligne trouvée: user_pref("CommunityToolbar.ToolbarsList2", "ConduitEngine,CT2849852");
Ligne trouvée: user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sat Apr 09 2011 19:10:06 GMT+02...
Ligne trouvée: user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Ligne trouvée: user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Wed Jul 13 2011 23:09:23 GMT+0200");
Ligne trouvée: user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Ligne trouvée: user_pref("CommunityToolbar.alert.locale", "en");
Ligne trouvée: user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Ligne trouvée: user_pref("CommunityToolbar.alert.loginLastCheckTime", "Wed Jul 13 2011 23:09:22 GMT+0200");
Ligne trouvée: user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Ligne trouvée: user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Ligne trouvée: user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Ligne trouvée: user_pref("CommunityToolbar.alert.showTrayIcon", false);
Ligne trouvée: user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Ligne trouvée: user_pref("CommunityToolbar.alert.userId", "b0915569-7edd-43ca-9133-c6e09ed06389");
Ligne trouvée: user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Tue Mar 22 2011 02:37:25 GMT+0100");
Ligne trouvée: user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Ligne trouvée: user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Ligne trouvée: user_pref("ConduitEngine.AppTrackingLastCheckTime", "Wed Jul 13 2011 23:09:33 GMT+0200");
Ligne trouvée: user_pref("ConduitEngine.CTID", "ConduitEngine");
Ligne trouvée: user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Sat Apr 09 2011 19:10:00 GMT+0200");
Ligne trouvée: user_pref("ConduitEngine.FirstServerDate", "12/23/2010 02");
Ligne trouvée: user_pref("ConduitEngine.FirstTime", true);
Ligne trouvée: user_pref("ConduitEngine.FirstTimeFF3", true);
Ligne trouvée: user_pref("ConduitEngine.FixPageNotFoundErrors", false);
Ligne trouvée: user_pref("ConduitEngine.HasUserGlobalKeys", true);
Ligne trouvée: user_pref("ConduitEngine.Initialize", true);
Ligne trouvée: user_pref("ConduitEngine.InitializeCommonPrefs", true);
Ligne trouvée: user_pref("ConduitEngine.InstallationType", "UnknownIntegration");
Ligne trouvée: user_pref("ConduitEngine.InstalledDate", "Sun Dec 12 2010 13:27:35 GMT+0100");
Ligne trouvée: user_pref("ConduitEngine.IsMulticommunity", false);
Ligne trouvée: user_pref("ConduitEngine.IsOpenThankYouPage", false);
Ligne trouvée: user_pref("ConduitEngine.IsOpenUninstallPage", false);
Ligne trouvée: user_pref("ConduitEngine.LanguagePackLastCheckTime", "Sat Apr 09 2011 19:10:04 GMT+0200");
Ligne trouvée: user_pref("ConduitEngine.LastLogin_3.2.5.2", "Sun Mar 20 2011 09:33:39 GMT+0100");
Ligne trouvée: user_pref("ConduitEngine.LastLogin_3.3.3.2", "Sun Apr 10 2011 01:34:21 GMT+0200");
Ligne trouvée: user_pref("ConduitEngine.PublisherContainerWidth", 0);
Ligne trouvée: user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Ligne trouvée: user_pref("ConduitEngine.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=C...
Ligne trouvée: user_pref("ConduitEngine.SettingsLastCheckTime", "Sun Apr 10 2011 03:10:34 GMT+0200");
Ligne trouvée: user_pref("ConduitEngine.UserID", "UN84095988850809199");
Ligne trouvée: user_pref("ConduitEngine.engineLocale", "fr");
Ligne trouvée: user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Sat Apr 09 2011 19:10:04 GMT+0200");
Ligne trouvée: user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Sun Apr 10 2011 03:10:33 GMT+0200");
Ligne trouvée: user_pref("ConduitEngine.initDone", true);
Ligne trouvée: user_pref("ConduitEngine.isAppTrackingManagerOn", true);
Ligne trouvée: user_pref("ConduitEngine.usagesFlag", 2);
Ligne trouvée: user_pref("browser.search.order.1", "Ask.com");
-- Fichier Fermé --
Clé trouvée: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\knqfimim
Clé trouvée: HKLM\Software\Classes\Conduit.Engine
Clé trouvée: HKLM\Software\Classes\Toolbar.CT2405725
Clé trouvée: HKLM\Software\Classes\Toolbar.CT2849852
Clé trouvée: HKLM\Software\Conduit
Clé trouvée: HKLM\Software\OfferBox
Clé trouvée: HKCU\Software\freeTVRadio
Clé trouvée: HKCU\Software\OfferBox
Clé trouvée: HKCU\Software\Poker 770
Clé trouvée: HKCU\Software\AppDataLow\Software\PriceGong
Clé trouvée: HKCU\Software\AppDataLow\Software\Radio_Bar_1
Clé trouvée: HKCU\Software\AppDataLow\Software\Toolbar
Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Clé trouvée: HKLM\Software\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom
Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}
Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{30F9B915-B755-4826-820B-08FBA6BD249D}
============== SCAN ADDITIONNEL ==============
**** Mozilla Firefox Version [7.0.1 (fr)] ****
Plugins\npvsharetvplg.dll (vShare.tv )
HKLM_MozillaPlugins\Adobe Reader (x)
Searchplugins\bing.xml ( hxxp://www.bing.com/search)
Components\browsercomps.dll (Mozilla Foundation)
HKLM_Extensions|{7BA52691-1876-45ce-9EE6-54BCB3B04BBC} - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn\
-- C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default --
Extensions\cacaoweb@cacaoweb.org (cacaoweb)
Extensions\engine@conduit.com (Conduit Engine )
Extensions\vinceturk@gmail.com (KwiClick)
Extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516} (Complitly - Speed up your search with your personal search suggestions tool)
Extensions\{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829} (PriceGong)
Extensions\{ef79f67a-6ad7-4715-a0f8-932fca442023} (BittorrentBar_FR Community Toolbar)
Searchplugins\askcom.xml (?)
Searchplugins\startsear.xml (?)
Prefs.js - browser.download.lastDir, C:\\Users\\Sélim\\Desktop
Prefs.js - browser.search.defaultenginename, Web Search
Prefs.js - browser.search.selectedEngine, Google
Prefs.js - browser.startup.homepage, hxxp://startsear.ch/?aff=1
Prefs.js - browser.startup.homepage_override.buildID, 20110928134238
Prefs.js - browser.startup.homepage_override.mstone, rv:7.0.1
Prefs.js - keyword.URL, hxxp://www.google.com.my/search?q=
========================================
**** Internet Explorer Version [9.0.8112.16421] ****
HKCU_Main|Default_Page_URL - hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=040c&s=2&o=vb32&d=0309&m=easynote_ml65
HKCU_Main|Search bar - hxxp://www.google.com/ie
HKCU_Main|Search Page - hxxp://www.google.com
HKCU_Main|Start Page - hxxp://www.google.fr/
HKLM_Main|Default_Page_URL - hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=040c&s=2&o=vb32&d=0309&m=easynote_ml65
HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Start Page - hxxp://www.google.com
HKCU_URLSearchHooks|{0fc85f5d-6207-4515-a490-45a549d285c0} (x)
HKCU_URLSearchHooks|{ef79f67a-6ad7-4715-a0f8-932fca442023} (x)
HKCU_SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} - "Ask Search" (hxxp://websearch.ask.com/redirect?client=ie&tb=SPC2&o=15000&src=crm&q={searchTer...)
HKCU_SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64} - "?" (?)
HKCU_SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E} - "Google Desktop" (hxxp://127.0.0.1:4664/search&s=ORPcYSwwQWjPEb6JeEXCz4UUgiU?q={searchTerms})
HKCU_SearchScopes\{9D5BD211-422C-4164-9298-BB4186A30F31} - "Web Search" (hxxp://startsear.ch/?aff=1&src=sp&cf=b2721710-0256-11e1-a3e8-00238b8c89d3&q={sea...)
HKLM_SearchScopes\{9D5BD211-422C-4164-9298-BB4186A30F31} - "Web Search" (hxxp://startsear.ch/?aff=1&src=sp&cf=b2721710-0256-11e1-a3e8-00238b8c89d3&q={sea...)
HKCU_Toolbar\WebBrowser|{0FC85F5D-6207-4515-A490-45A549D285C0} (x)
HKCU_Toolbar\WebBrowser|{30F9B915-B755-4826-820B-08FBA6BD249D} (x)
HKCU_Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} (x)
HKCU_Toolbar\WebBrowser|{EF79F67A-6AD7-4715-A0F8-932FCA442023} (x)
HKCU_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files\Veetle\Player\vtl_hfs.exe (?)
HKCU_ElevationPolicy\{6052FE92-D706-4756-AC4E-71361F909996} - C:\Program Files\BitTorrent\bittorrent.exe (BitTorrent, Inc.)
HKCU_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files\Veetle\Player\player.exe (?)
HKCU_ElevationPolicy\{AF235069-AACC-46C0-A984-EB9A5CB94DA4} - C:\Program Files\eMule\emule.exe (http://www.emule-project.net)
HKCU_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files\Veetle\Player\vtl_hfax.exe (?)
HKLM_ElevationPolicy\{442E3CEB-D71B-11DA-8750-001185653D78} - c:\program files\google\googletoolbar1user.exe (?)
HKLM_ElevationPolicy\{50A6102E-D757-409e-97B7-6EA4EEEA5BC3} - C:\Program Files\Common Files\Apple\Internet Services\BookmarkDAV_client.exe (Apple Inc.)
HKLM_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files\Veetle\Player\vtl_hfs.exe (?)
HKLM_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files\Veetle\Player\player.exe (?)
HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x)
HKLM_ElevationPolicy\{74351F14-5437-4d87-805B-04D409B09976} - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
HKLM_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files\Veetle\Player\vtl_hfax.exe (?)
HKCU_Extensions\{97ED3A9F-CD6F-473A-8FE1-7505C1B844C3} - "Billeo" (billeo.dll,219)
HKLM_Extensions\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - "?" (?)
========================================
C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 1 Fichier(s)
C:\Ad-Report-SCAN[1].txt - 31/10/2011 13:29:29 (15619 Octet(s))
Fin à: 13:30:16, 31/10/2011
============== E.O.F ==============
zeroberto79
Messages postés
17
Date d'inscription
dimanche 30 octobre 2011
Statut
Membre
Dernière intervention
3 novembre 2011
31 oct. 2011 à 13:52
31 oct. 2011 à 13:52
Voila bleuet, je viens de t'envoyer le rapport ZHPDiag!
J'espère avoir bien fait !!
Encore merci de ton aide
J'espère avoir bien fait !!
Encore merci de ton aide
Bleuet'
Messages postés
579
Date d'inscription
dimanche 16 octobre 2011
Statut
Membre
Dernière intervention
12 octobre 2018
32
31 oct. 2011 à 14:21
31 oct. 2011 à 14:21
Re,
Pour un bon suivi, peux-tu suivre les diverses opérations demandées stp:
1/. As-tu relancer Adwcleaner en "suppression" et mettre le rapport ?
2/. Car AD-Remover trouve des doublons Adwcleaner.
Relance quand même AD-R en mode [suppression]>
Phase 2 Suppression:
/!\ Déconnecte toi et ferme toutes les applications en cours /!\
[*]Relance AD-Remover.
[*]Désactive l'UAC ( si Vista, Windows 7)
[*]Désactive le Team-Timer de Spybot S&D (si installé)
[*] Double-clique sur l'icône AD-Remover
[*] Au menu principal, clique sur "Nettoyer"
[*] Confirme le lancement de l'analyse et laisse l'outil travailler
[*] Précision du message " AD-R va fermer tous les programmes pour faciliter le nettoyage"
Le Bureau se vide. Ecran vide.
[*] AD-R propose un redémarrage " optionnel " : clic sur OUI. A défaut de curseur : touche "Entrée".
[*] Poster le rapport établi au redémarrage du PC (il est aussi sauvegardé sous C:\Ad-report-CLEAN.txt )
(CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )
Note : Pour désinstaller AD-Remover, lancer avec l'option "Désinstaller" puis supprimer l'icône du bureau.
------
* Le rapport DIAG n'ayant pas encore été fait, fais d'abord 1/. et 2/. et envoyer les rapports.
Pour un bon suivi, peux-tu suivre les diverses opérations demandées stp:
1/. As-tu relancer Adwcleaner en "suppression" et mettre le rapport ?
2/. Car AD-Remover trouve des doublons Adwcleaner.
Relance quand même AD-R en mode [suppression]>
Phase 2 Suppression:
/!\ Déconnecte toi et ferme toutes les applications en cours /!\
[*]Relance AD-Remover.
[*]Désactive l'UAC ( si Vista, Windows 7)
[*]Désactive le Team-Timer de Spybot S&D (si installé)
[*] Double-clique sur l'icône AD-Remover
[*] Au menu principal, clique sur "Nettoyer"
[*] Confirme le lancement de l'analyse et laisse l'outil travailler
[*] Précision du message " AD-R va fermer tous les programmes pour faciliter le nettoyage"
Le Bureau se vide. Ecran vide.
[*] AD-R propose un redémarrage " optionnel " : clic sur OUI. A défaut de curseur : touche "Entrée".
[*] Poster le rapport établi au redémarrage du PC (il est aussi sauvegardé sous C:\Ad-report-CLEAN.txt )
(CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )
Note : Pour désinstaller AD-Remover, lancer avec l'option "Désinstaller" puis supprimer l'icône du bureau.
------
* Le rapport DIAG n'ayant pas encore été fait, fais d'abord 1/. et 2/. et envoyer les rapports.
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
zeroberto79
Messages postés
17
Date d'inscription
dimanche 30 octobre 2011
Statut
Membre
Dernière intervention
3 novembre 2011
31 oct. 2011 à 19:58
31 oct. 2011 à 19:58
re,
voila le rapport Adwcleaner
# AdwCleaner v1.315 - Rapport créé le 31/10/2011 à 19:49:47
# Mis à jour le 27/10/11 à 14h par Xplode
# Système d'exploitation : Windows Vista (TM) Home Basic Service Pack 2 (32 bits)
# Nom d'utilisateur : Sélim - PC-DE-SÉLIM (Droits Limités)
# Exécuté depuis : C:\Users\Sélim\Downloads\adwcleaner0.exe
# Option [Suppression]
***** [KillNav] *****
# firefox.exe [PID:2112] -> Tué
***** [Processus] *****
Tué : [PID:3040] cacaoweb.exe
***** [Services] *****
***** [Fichiers / Dossiers] *****
Dossier Supprimé : C:\Users\Sélim\AppData\Roaming\cacaoweb
Dossier Supprimé : C:\Users\Sélim\AppData\Roaming\freeTVRadio
Dossier Supprimé : C:\Users\Sélim\AppData\Roaming\OfferBox
Dossier Supprimé : C:\Users\Sélim\AppData\Local\freetvradio Air
Dossier Supprimé : C:\Users\Sélim\AppData\LocalLow\Conduit
Dossier Supprimé : C:\Users\Sélim\AppData\LocalLow\PriceGong
Dossier Supprimé : C:\Program Files\freeTVRadio
Dossier Supprimé : C:\Program Files\OfferBox
Dossier Supprimé : C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\Conduit
Dossier Supprimé : C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\ConduitEngine
Dossier Supprimé : C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\extensions\{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}
Dossier Supprimé : C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\extensions\cacaoweb@cacaoweb.org
Dossier Supprimé : C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\extensions\engine@conduit.com
Fichier Supprimé : C:\Users\Sélim\Desktop\cacaoweb.exe
Fichier Supprimé : C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\searchplugins\Askcom.xml
***** [Registre] *****
Clé Supprimée : HKCU\Software\cacaoweb
Clé Supprimée : HKCU\Software\freeTVRadio
Clé Supprimée : HKCU\Software\Offerbox
Clé Supprimée : HKCU\Software\AppDataLow\Software\PriceGong
Clé Supprimée : HKLM\SOFTWARE\Conduit
Clé Supprimée : HKLM\SOFTWARE\Offerbox
Clé Supprimée : HKLM\SOFTWARE\Classes\Conduit.Engine
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44a1-AF6E-957C64278AB1}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{30F9B915-B755-4826-820B-08FBA6BD249D}]
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [cacaoweb]
***** [Navigateurs] *****
-\\ Internet Explorer v9.0.8112.16421
[OK] Le registre ne contient aucune entrée illégitime.
-\\ Mozilla Firefox v7.0.1 (fr)
Profil : o0hf2ewt.default
Fichier : C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\prefs.js
C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\user.js ... Supprimé !
Supprimée : user_pref("CT2849852..clientLogIsEnabled", false);
Supprimée : user_pref("CT2849852..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Supprimée : user_pref("CT2849852..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Supprimée : user_pref("CT2849852.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Supprimée : user_pref("CT2849852.CTID", "CT2849852");
Supprimée : user_pref("CT2849852.CurrentServerDate", "22-3-2011");
Supprimée : user_pref("CT2849852.DialogsAlignMode", "LTR");
Supprimée : user_pref("CT2849852.DownloadReferralCookieData", "");
Supprimée : user_pref("CT2849852.EMailNotifierPollDate", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.FeedLastCount129349795937781608", 550);
Supprimée : user_pref("CT2849852.FeedPollDate129313974171006416", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.FeedPollDate129313975698350231", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.FeedPollDate129313976370850190", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.FeedPollDate129313976648818968", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.FeedPollDate129313977444757117", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.FeedPollDate129313980389131455", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.FeedPollDate129313980655381977", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.FeedPollDate129313980886163259", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.FeedPollDate129313981234756535", "Tue Mar 22 2011 02:37:26 GMT+0100");
Supprimée : user_pref("CT2849852.FeedPollDate129313983226631720", "Tue Mar 22 2011 02:37:26 GMT+0100");
Supprimée : user_pref("CT2849852.FeedPollDate129313983607725691", "Tue Mar 22 2011 02:37:26 GMT+0100");
Supprimée : user_pref("CT2849852.FeedTTL129313974171006416", 10);
Supprimée : user_pref("CT2849852.FeedTTL129313977444757117", 15);
Supprimée : user_pref("CT2849852.FeedTTL129313980655381977", 5);
Supprimée : user_pref("CT2849852.FeedTTL129313981234756535", 5);
Supprimée : user_pref("CT2849852.FirstServerDate", "12-12-2010");
Supprimée : user_pref("CT2849852.FirstTime", true);
Supprimée : user_pref("CT2849852.FirstTimeFF3", true);
Supprimée : user_pref("CT2849852.FixPageNotFoundErrors", false);
Supprimée : user_pref("CT2849852.GroupingServerCheckInterval", 1440);
Supprimée : user_pref("CT2849852.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Supprimée : user_pref("CT2849852.HasUserGlobalKeys", true);
Supprimée : user_pref("CT2849852.Initialize", true);
Supprimée : user_pref("CT2849852.InitializeCommonPrefs", true);
Supprimée : user_pref("CT2849852.InstallationAndCookieDataSentCount", 3);
Supprimée : user_pref("CT2849852.InstallationType", "UnknownIntegration");
Supprimée : user_pref("CT2849852.InstalledDate", "Sun Dec 12 2010 13:27:40 GMT+0100");
Supprimée : user_pref("CT2849852.IsGrouping", false);
Supprimée : user_pref("CT2849852.IsMulticommunity", false);
Supprimée : user_pref("CT2849852.IsOpenThankYouPage", true);
Supprimée : user_pref("CT2849852.IsOpenUninstallPage", false);
Supprimée : user_pref("CT2849852.LanguagePackLastCheckTime", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.LanguagePackReloadIntervalMM", 1440);
Supprimée : user_pref("CT2849852.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Supprimée : user_pref("CT2849852.LastLogin_3.2.5.2", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.LatestVersion", "3.2.5.2");
Supprimée : user_pref("CT2849852.Locale", "fr");
Supprimée : user_pref("CT2849852.MCDetectTooltipHeight", "83");
Supprimée : user_pref("CT2849852.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Supprimée : user_pref("CT2849852.MCDetectTooltipWidth", "295");
Supprimée : user_pref("CT2849852.SearchFromAddressBarIsInit", true);
Supprimée : user_pref("CT2849852.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2849852&q=");
Supprimée : user_pref("CT2849852.SearchInNewTabEnabled", true);
Supprimée : user_pref("CT2849852.SearchInNewTabIntervalMM", 1440);
Supprimée : user_pref("CT2849852.SearchInNewTabLastCheckTime", "Tue Mar 22 2011 02:37:24 GMT+0100");
Supprimée : user_pref("CT2849852.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
Supprimée : user_pref("CT2849852.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
Supprimée : user_pref("CT2849852.SearchInNewTabUserEnabled", false);
Supprimée : user_pref("CT2849852.ServiceMapLastCheckTime", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.SettingsLastCheckTime", "Tue Mar 22 2011 02:37:24 GMT+0100");
Supprimée : user_pref("CT2849852.SettingsLastUpdate", "1298681880");
Supprimée : user_pref("CT2849852.ThirdPartyComponentsInterval", 504);
Supprimée : user_pref("CT2849852.ThirdPartyComponentsLastCheck", "Thu Mar 10 2011 11:23:16 GMT+0100");
Supprimée : user_pref("CT2849852.ThirdPartyComponentsLastUpdate", "1255348267");
Supprimée : user_pref("CT2849852.TrusteLinkUrl", "hxxp://trust.conduit.com/EB_ORIGINAL_CTID");
Supprimée : user_pref("CT2849852.UserID", "UN36853177291076744");
Supprimée : user_pref("CT2849852.ValidationData_Search", 2);
Supprimée : user_pref("CT2849852.ValidationData_Toolbar", 2);
Supprimée : user_pref("CT2849852.WeatherNetwork", "");
Supprimée : user_pref("CT2849852.WeatherPollDate", "Mon Jan 17 2011 19:50:19 GMT+0100");
Supprimée : user_pref("CT2849852.WeatherUnit", "C");
Supprimée : user_pref("CT2849852.alertChannelId", "1241893");
Supprimée : user_pref("CT2849852.backendstorage.enableinj", "");
Supprimée : user_pref("CT2849852.backendstorage.pairingkey", "");
Supprimée : user_pref("CT2849852.backendstorage.scriptsource", "687474703A2F2F3132372E302E302E313A31303030302F6775692F");
Supprimée : user_pref("CT2849852.backendstorage.uttorrents", "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");
Supprimée : user_pref("CT2849852.components.1000234", false);
Supprimée : user_pref("CT2849852.components.129349795937937860", false);
Supprimée : user_pref("CT2849852.myStuffEnabled", true);
Supprimée : user_pref("CT2849852.myStuffPublihserMinWidth", 400);
Supprimée : user_pref("CT2849852.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Supprimée : user_pref("CT2849852.myStuffServiceIntervalMM", 1440);
Supprimée : user_pref("CT2849852.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Supprimée : user_pref("CT2849852.testingCtid", "");
Supprimée : user_pref("CT2849852.toolbarAppMetaDataLastCheckTime", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.toolbarContextMenuLastCheckTime", "Sun Dec 12 2010 13:27:40 GMT+0100");
Supprimée : user_pref("CT2849852.usagesFlag", 2);
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1241893/1237566/FR", "\"0\"");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/FR", "\"0\"");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2849852", "\"0\"");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=fr", "ZSqe5hKaZ5ArucBehsFKPg==");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=fr", "4QEZsg21gcAcM1vZlOyj4g==");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=fr", "q6quHA6+Jio7VU9PnyyrZw==");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=fr", "A4BF15en2mpzA5wEihSZog==");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"01ffa8b1cc6cb1:0\"");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3.2", "\"0652eeacc6cb1:0\"");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"634333631231730000\"");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "634248284990000000");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=1/11/2011 5:25:10 PM", "634335443890000000");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=11/8/2010 3:54:59 PM", "634285417620000000");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/21/2010 3:22:42 PM", "634290505850000000");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/27/2010 12:43:05 PM", "634290505850000000");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/30/2010 4:33:06 PM", "634303635100000000");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/17/2011 12:59:49 PM", "634339976460000000");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/22/2011 6:54:06 PM", "634356118310000000");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/2011 11:17:11 AM", "634356118310000000");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2849852/CT2849852", "\"1298681880\"");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=fr", "\"634351849102130000\"");
Supprimée : user_pref("CommunityToolbar.EngineHiddenByUser", true);
Supprimée : user_pref("CommunityToolbar.EngineOwner", "CT2849852");
Supprimée : user_pref("CommunityToolbar.EngineOwnerGuid", "{ef79f67a-6ad7-4715-a0f8-932fca442023}");
Supprimée : user_pref("CommunityToolbar.EngineOwnerToolbarId", "bittorrentbar_fr");
Supprimée : user_pref("CommunityToolbar.IsEngineShown", false);
Supprimée : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Supprimée : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2849852");
Supprimée : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{ef79f67a-6ad7-4715-a0f8-932fca442023}");
Supprimée : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "bittorrentbar_fr");
Supprimée : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
Supprimée : user_pref("CommunityToolbar.ToolbarsList", "ConduitEngine,CT2849852");
Supprimée : user_pref("CommunityToolbar.ToolbarsList2", "ConduitEngine,CT2849852");
Supprimée : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sat Apr 09 2011 19:10:06 GMT+0200");
Supprimée : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Supprimée : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Wed Jul 13 2011 23:09:23 GMT+0200");
Supprimée : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Supprimée : user_pref("CommunityToolbar.alert.locale", "en");
Supprimée : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Supprimée : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Wed Jul 13 2011 23:09:22 GMT+0200");
Supprimée : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Supprimée : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Supprimée : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Supprimée : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Supprimée : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Supprimée : user_pref("CommunityToolbar.alert.userId", "b0915569-7edd-43ca-9133-c6e09ed06389");
Supprimée : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Supprimée : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Supprimée : user_pref("ConduitEngine.AppTrackingLastCheckTime", "Wed Jul 13 2011 23:09:33 GMT+0200");
Supprimée : user_pref("ConduitEngine.CTID", "ConduitEngine");
Supprimée : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Sat Apr 09 2011 19:10:00 GMT+0200");
Supprimée : user_pref("ConduitEngine.FirstServerDate", "12/23/2010 02");
Supprimée : user_pref("ConduitEngine.FirstTime", true);
Supprimée : user_pref("ConduitEngine.FirstTimeFF3", true);
Supprimée : user_pref("ConduitEngine.FixPageNotFoundErrors", false);
Supprimée : user_pref("ConduitEngine.HasUserGlobalKeys", true);
Supprimée : user_pref("ConduitEngine.Initialize", true);
Supprimée : user_pref("ConduitEngine.InitializeCommonPrefs", true);
Supprimée : user_pref("ConduitEngine.InstallationType", "UnknownIntegration");
Supprimée : user_pref("ConduitEngine.InstalledDate", "Sun Dec 12 2010 13:27:35 GMT+0100");
Supprimée : user_pref("ConduitEngine.IsMulticommunity", false);
Supprimée : user_pref("ConduitEngine.IsOpenThankYouPage", false);
Supprimée : user_pref("ConduitEngine.IsOpenUninstallPage", false);
Supprimée : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Sat Apr 09 2011 19:10:04 GMT+0200");
Supprimée : user_pref("ConduitEngine.LastLogin_3.2.5.2", "Sun Mar 20 2011 09:33:39 GMT+0100");
Supprimée : user_pref("ConduitEngine.LastLogin_3.3.3.2", "Sun Apr 10 2011 01:34:21 GMT+0200");
Supprimée : user_pref("ConduitEngine.PublisherContainerWidth", 0);
Supprimée : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Supprimée : user_pref("ConduitEngine.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CTXXXX&q=");
Supprimée : user_pref("ConduitEngine.SettingsLastCheckTime", "Sun Apr 10 2011 03:10:34 GMT+0200");
Supprimée : user_pref("ConduitEngine.UserID", "UN84095988850809199");
Supprimée : user_pref("ConduitEngine.engineLocale", "fr");
Supprimée : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Sat Apr 09 2011 19:10:04 GMT+0200");
Supprimée : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Sun Apr 10 2011 03:10:33 GMT+0200");
Supprimée : user_pref("ConduitEngine.initDone", true);
Supprimée : user_pref("ConduitEngine.isAppTrackingManagerOn", true);
Supprimée : user_pref("ConduitEngine.usagesFlag", 2);
Supprimée : user_pref("extensions.BabylonToolbar.bbDpng", 7);
Supprimée : user_pref("extensions.BabylonToolbar.cntry", "FR");
Supprimée : user_pref("extensions.BabylonToolbar.firstRun", false);
Supprimée : user_pref("extensions.BabylonToolbar.hdrMd5", "11CA9682F631689247EF7F279A0A2507");
Supprimée : user_pref("extensions.BabylonToolbar.lastActv", "7");
Supprimée : user_pref("extensions.BabylonToolbar.lastDP", 7);
Supprimée : user_pref("extensions.enabledItems", "{20a82645-c095-46ed-80e3-08825760534b}:1.2.1,{7BA52691-1876-45ce-9EE6-54BCB3B04BBC}:3.7.2,{8545daff-ad1e-493f-a37e-eed1ac79682b}:1.0,engine@conduit.com:3.3.3.2,{ef79f67a-6ad7-4715-a0f8-932fca442023}:3.3.3.2,vinceturk@gmail.com:2.7.1.830,{33e0daa6-3af3-d8b5-6752-10e949c61516}:1.1,{4be68a18-deba-49e0-9e09-ee7796f3b62a}:2.1.1.1,{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}:2.1.0,ffxtlbr@babylon.com:1.1.3,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.16");
-\\ Google Chrome v [Impossible d'obtenir la version]
Fichier : C:\Users\Sélim\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] Le fichier ne contient aucune entrée illégitime.
*************************
AdwCleaner[R1].txt - [46081 octets] - [30/10/2011 19:21:15]
AdwCleaner[S1].txt - [46372 octets] - [31/10/2011 19:49:47]
*************************
Dossier Temporaire : 107 dossier(s)et 5 fichier(s) supprimés
########## EOF - C:\AdwCleaner[S1].txt - [46594 octets] ##########
voila le rapport Adwcleaner
# AdwCleaner v1.315 - Rapport créé le 31/10/2011 à 19:49:47
# Mis à jour le 27/10/11 à 14h par Xplode
# Système d'exploitation : Windows Vista (TM) Home Basic Service Pack 2 (32 bits)
# Nom d'utilisateur : Sélim - PC-DE-SÉLIM (Droits Limités)
# Exécuté depuis : C:\Users\Sélim\Downloads\adwcleaner0.exe
# Option [Suppression]
***** [KillNav] *****
# firefox.exe [PID:2112] -> Tué
***** [Processus] *****
Tué : [PID:3040] cacaoweb.exe
***** [Services] *****
***** [Fichiers / Dossiers] *****
Dossier Supprimé : C:\Users\Sélim\AppData\Roaming\cacaoweb
Dossier Supprimé : C:\Users\Sélim\AppData\Roaming\freeTVRadio
Dossier Supprimé : C:\Users\Sélim\AppData\Roaming\OfferBox
Dossier Supprimé : C:\Users\Sélim\AppData\Local\freetvradio Air
Dossier Supprimé : C:\Users\Sélim\AppData\LocalLow\Conduit
Dossier Supprimé : C:\Users\Sélim\AppData\LocalLow\PriceGong
Dossier Supprimé : C:\Program Files\freeTVRadio
Dossier Supprimé : C:\Program Files\OfferBox
Dossier Supprimé : C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\Conduit
Dossier Supprimé : C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\ConduitEngine
Dossier Supprimé : C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\extensions\{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}
Dossier Supprimé : C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\extensions\cacaoweb@cacaoweb.org
Dossier Supprimé : C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\extensions\engine@conduit.com
Fichier Supprimé : C:\Users\Sélim\Desktop\cacaoweb.exe
Fichier Supprimé : C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\searchplugins\Askcom.xml
***** [Registre] *****
Clé Supprimée : HKCU\Software\cacaoweb
Clé Supprimée : HKCU\Software\freeTVRadio
Clé Supprimée : HKCU\Software\Offerbox
Clé Supprimée : HKCU\Software\AppDataLow\Software\PriceGong
Clé Supprimée : HKLM\SOFTWARE\Conduit
Clé Supprimée : HKLM\SOFTWARE\Offerbox
Clé Supprimée : HKLM\SOFTWARE\Classes\Conduit.Engine
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44a1-AF6E-957C64278AB1}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{30F9B915-B755-4826-820B-08FBA6BD249D}]
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [cacaoweb]
***** [Navigateurs] *****
-\\ Internet Explorer v9.0.8112.16421
[OK] Le registre ne contient aucune entrée illégitime.
-\\ Mozilla Firefox v7.0.1 (fr)
Profil : o0hf2ewt.default
Fichier : C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\prefs.js
C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\user.js ... Supprimé !
Supprimée : user_pref("CT2849852..clientLogIsEnabled", false);
Supprimée : user_pref("CT2849852..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Supprimée : user_pref("CT2849852..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Supprimée : user_pref("CT2849852.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Supprimée : user_pref("CT2849852.CTID", "CT2849852");
Supprimée : user_pref("CT2849852.CurrentServerDate", "22-3-2011");
Supprimée : user_pref("CT2849852.DialogsAlignMode", "LTR");
Supprimée : user_pref("CT2849852.DownloadReferralCookieData", "");
Supprimée : user_pref("CT2849852.EMailNotifierPollDate", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.FeedLastCount129349795937781608", 550);
Supprimée : user_pref("CT2849852.FeedPollDate129313974171006416", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.FeedPollDate129313975698350231", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.FeedPollDate129313976370850190", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.FeedPollDate129313976648818968", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.FeedPollDate129313977444757117", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.FeedPollDate129313980389131455", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.FeedPollDate129313980655381977", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.FeedPollDate129313980886163259", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.FeedPollDate129313981234756535", "Tue Mar 22 2011 02:37:26 GMT+0100");
Supprimée : user_pref("CT2849852.FeedPollDate129313983226631720", "Tue Mar 22 2011 02:37:26 GMT+0100");
Supprimée : user_pref("CT2849852.FeedPollDate129313983607725691", "Tue Mar 22 2011 02:37:26 GMT+0100");
Supprimée : user_pref("CT2849852.FeedTTL129313974171006416", 10);
Supprimée : user_pref("CT2849852.FeedTTL129313977444757117", 15);
Supprimée : user_pref("CT2849852.FeedTTL129313980655381977", 5);
Supprimée : user_pref("CT2849852.FeedTTL129313981234756535", 5);
Supprimée : user_pref("CT2849852.FirstServerDate", "12-12-2010");
Supprimée : user_pref("CT2849852.FirstTime", true);
Supprimée : user_pref("CT2849852.FirstTimeFF3", true);
Supprimée : user_pref("CT2849852.FixPageNotFoundErrors", false);
Supprimée : user_pref("CT2849852.GroupingServerCheckInterval", 1440);
Supprimée : user_pref("CT2849852.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Supprimée : user_pref("CT2849852.HasUserGlobalKeys", true);
Supprimée : user_pref("CT2849852.Initialize", true);
Supprimée : user_pref("CT2849852.InitializeCommonPrefs", true);
Supprimée : user_pref("CT2849852.InstallationAndCookieDataSentCount", 3);
Supprimée : user_pref("CT2849852.InstallationType", "UnknownIntegration");
Supprimée : user_pref("CT2849852.InstalledDate", "Sun Dec 12 2010 13:27:40 GMT+0100");
Supprimée : user_pref("CT2849852.IsGrouping", false);
Supprimée : user_pref("CT2849852.IsMulticommunity", false);
Supprimée : user_pref("CT2849852.IsOpenThankYouPage", true);
Supprimée : user_pref("CT2849852.IsOpenUninstallPage", false);
Supprimée : user_pref("CT2849852.LanguagePackLastCheckTime", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.LanguagePackReloadIntervalMM", 1440);
Supprimée : user_pref("CT2849852.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Supprimée : user_pref("CT2849852.LastLogin_3.2.5.2", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.LatestVersion", "3.2.5.2");
Supprimée : user_pref("CT2849852.Locale", "fr");
Supprimée : user_pref("CT2849852.MCDetectTooltipHeight", "83");
Supprimée : user_pref("CT2849852.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Supprimée : user_pref("CT2849852.MCDetectTooltipWidth", "295");
Supprimée : user_pref("CT2849852.SearchFromAddressBarIsInit", true);
Supprimée : user_pref("CT2849852.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2849852&q=");
Supprimée : user_pref("CT2849852.SearchInNewTabEnabled", true);
Supprimée : user_pref("CT2849852.SearchInNewTabIntervalMM", 1440);
Supprimée : user_pref("CT2849852.SearchInNewTabLastCheckTime", "Tue Mar 22 2011 02:37:24 GMT+0100");
Supprimée : user_pref("CT2849852.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
Supprimée : user_pref("CT2849852.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
Supprimée : user_pref("CT2849852.SearchInNewTabUserEnabled", false);
Supprimée : user_pref("CT2849852.ServiceMapLastCheckTime", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.SettingsLastCheckTime", "Tue Mar 22 2011 02:37:24 GMT+0100");
Supprimée : user_pref("CT2849852.SettingsLastUpdate", "1298681880");
Supprimée : user_pref("CT2849852.ThirdPartyComponentsInterval", 504);
Supprimée : user_pref("CT2849852.ThirdPartyComponentsLastCheck", "Thu Mar 10 2011 11:23:16 GMT+0100");
Supprimée : user_pref("CT2849852.ThirdPartyComponentsLastUpdate", "1255348267");
Supprimée : user_pref("CT2849852.TrusteLinkUrl", "hxxp://trust.conduit.com/EB_ORIGINAL_CTID");
Supprimée : user_pref("CT2849852.UserID", "UN36853177291076744");
Supprimée : user_pref("CT2849852.ValidationData_Search", 2);
Supprimée : user_pref("CT2849852.ValidationData_Toolbar", 2);
Supprimée : user_pref("CT2849852.WeatherNetwork", "");
Supprimée : user_pref("CT2849852.WeatherPollDate", "Mon Jan 17 2011 19:50:19 GMT+0100");
Supprimée : user_pref("CT2849852.WeatherUnit", "C");
Supprimée : user_pref("CT2849852.alertChannelId", "1241893");
Supprimée : user_pref("CT2849852.backendstorage.enableinj", "");
Supprimée : user_pref("CT2849852.backendstorage.pairingkey", "");
Supprimée : user_pref("CT2849852.backendstorage.scriptsource", "687474703A2F2F3132372E302E302E313A31303030302F6775692F");
Supprimée : user_pref("CT2849852.backendstorage.uttorrents", "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");
Supprimée : user_pref("CT2849852.components.1000234", false);
Supprimée : user_pref("CT2849852.components.129349795937937860", false);
Supprimée : user_pref("CT2849852.myStuffEnabled", true);
Supprimée : user_pref("CT2849852.myStuffPublihserMinWidth", 400);
Supprimée : user_pref("CT2849852.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Supprimée : user_pref("CT2849852.myStuffServiceIntervalMM", 1440);
Supprimée : user_pref("CT2849852.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Supprimée : user_pref("CT2849852.testingCtid", "");
Supprimée : user_pref("CT2849852.toolbarAppMetaDataLastCheckTime", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CT2849852.toolbarContextMenuLastCheckTime", "Sun Dec 12 2010 13:27:40 GMT+0100");
Supprimée : user_pref("CT2849852.usagesFlag", 2);
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1241893/1237566/FR", "\"0\"");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/FR", "\"0\"");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2849852", "\"0\"");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=fr", "ZSqe5hKaZ5ArucBehsFKPg==");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=fr", "4QEZsg21gcAcM1vZlOyj4g==");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=fr", "q6quHA6+Jio7VU9PnyyrZw==");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=fr", "A4BF15en2mpzA5wEihSZog==");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"01ffa8b1cc6cb1:0\"");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3.2", "\"0652eeacc6cb1:0\"");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"634333631231730000\"");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "634248284990000000");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=1/11/2011 5:25:10 PM", "634335443890000000");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=11/8/2010 3:54:59 PM", "634285417620000000");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/21/2010 3:22:42 PM", "634290505850000000");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/27/2010 12:43:05 PM", "634290505850000000");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/30/2010 4:33:06 PM", "634303635100000000");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/17/2011 12:59:49 PM", "634339976460000000");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/22/2011 6:54:06 PM", "634356118310000000");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/2011 11:17:11 AM", "634356118310000000");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2849852/CT2849852", "\"1298681880\"");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=fr", "\"634351849102130000\"");
Supprimée : user_pref("CommunityToolbar.EngineHiddenByUser", true);
Supprimée : user_pref("CommunityToolbar.EngineOwner", "CT2849852");
Supprimée : user_pref("CommunityToolbar.EngineOwnerGuid", "{ef79f67a-6ad7-4715-a0f8-932fca442023}");
Supprimée : user_pref("CommunityToolbar.EngineOwnerToolbarId", "bittorrentbar_fr");
Supprimée : user_pref("CommunityToolbar.IsEngineShown", false);
Supprimée : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Supprimée : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2849852");
Supprimée : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{ef79f67a-6ad7-4715-a0f8-932fca442023}");
Supprimée : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "bittorrentbar_fr");
Supprimée : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
Supprimée : user_pref("CommunityToolbar.ToolbarsList", "ConduitEngine,CT2849852");
Supprimée : user_pref("CommunityToolbar.ToolbarsList2", "ConduitEngine,CT2849852");
Supprimée : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sat Apr 09 2011 19:10:06 GMT+0200");
Supprimée : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Supprimée : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Wed Jul 13 2011 23:09:23 GMT+0200");
Supprimée : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Supprimée : user_pref("CommunityToolbar.alert.locale", "en");
Supprimée : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Supprimée : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Wed Jul 13 2011 23:09:22 GMT+0200");
Supprimée : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Supprimée : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Supprimée : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Supprimée : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Supprimée : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Supprimée : user_pref("CommunityToolbar.alert.userId", "b0915569-7edd-43ca-9133-c6e09ed06389");
Supprimée : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Tue Mar 22 2011 02:37:25 GMT+0100");
Supprimée : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Supprimée : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Supprimée : user_pref("ConduitEngine.AppTrackingLastCheckTime", "Wed Jul 13 2011 23:09:33 GMT+0200");
Supprimée : user_pref("ConduitEngine.CTID", "ConduitEngine");
Supprimée : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Sat Apr 09 2011 19:10:00 GMT+0200");
Supprimée : user_pref("ConduitEngine.FirstServerDate", "12/23/2010 02");
Supprimée : user_pref("ConduitEngine.FirstTime", true);
Supprimée : user_pref("ConduitEngine.FirstTimeFF3", true);
Supprimée : user_pref("ConduitEngine.FixPageNotFoundErrors", false);
Supprimée : user_pref("ConduitEngine.HasUserGlobalKeys", true);
Supprimée : user_pref("ConduitEngine.Initialize", true);
Supprimée : user_pref("ConduitEngine.InitializeCommonPrefs", true);
Supprimée : user_pref("ConduitEngine.InstallationType", "UnknownIntegration");
Supprimée : user_pref("ConduitEngine.InstalledDate", "Sun Dec 12 2010 13:27:35 GMT+0100");
Supprimée : user_pref("ConduitEngine.IsMulticommunity", false);
Supprimée : user_pref("ConduitEngine.IsOpenThankYouPage", false);
Supprimée : user_pref("ConduitEngine.IsOpenUninstallPage", false);
Supprimée : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Sat Apr 09 2011 19:10:04 GMT+0200");
Supprimée : user_pref("ConduitEngine.LastLogin_3.2.5.2", "Sun Mar 20 2011 09:33:39 GMT+0100");
Supprimée : user_pref("ConduitEngine.LastLogin_3.3.3.2", "Sun Apr 10 2011 01:34:21 GMT+0200");
Supprimée : user_pref("ConduitEngine.PublisherContainerWidth", 0);
Supprimée : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Supprimée : user_pref("ConduitEngine.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CTXXXX&q=");
Supprimée : user_pref("ConduitEngine.SettingsLastCheckTime", "Sun Apr 10 2011 03:10:34 GMT+0200");
Supprimée : user_pref("ConduitEngine.UserID", "UN84095988850809199");
Supprimée : user_pref("ConduitEngine.engineLocale", "fr");
Supprimée : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Sat Apr 09 2011 19:10:04 GMT+0200");
Supprimée : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Sun Apr 10 2011 03:10:33 GMT+0200");
Supprimée : user_pref("ConduitEngine.initDone", true);
Supprimée : user_pref("ConduitEngine.isAppTrackingManagerOn", true);
Supprimée : user_pref("ConduitEngine.usagesFlag", 2);
Supprimée : user_pref("extensions.BabylonToolbar.bbDpng", 7);
Supprimée : user_pref("extensions.BabylonToolbar.cntry", "FR");
Supprimée : user_pref("extensions.BabylonToolbar.firstRun", false);
Supprimée : user_pref("extensions.BabylonToolbar.hdrMd5", "11CA9682F631689247EF7F279A0A2507");
Supprimée : user_pref("extensions.BabylonToolbar.lastActv", "7");
Supprimée : user_pref("extensions.BabylonToolbar.lastDP", 7);
Supprimée : user_pref("extensions.enabledItems", "{20a82645-c095-46ed-80e3-08825760534b}:1.2.1,{7BA52691-1876-45ce-9EE6-54BCB3B04BBC}:3.7.2,{8545daff-ad1e-493f-a37e-eed1ac79682b}:1.0,engine@conduit.com:3.3.3.2,{ef79f67a-6ad7-4715-a0f8-932fca442023}:3.3.3.2,vinceturk@gmail.com:2.7.1.830,{33e0daa6-3af3-d8b5-6752-10e949c61516}:1.1,{4be68a18-deba-49e0-9e09-ee7796f3b62a}:2.1.1.1,{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}:2.1.0,ffxtlbr@babylon.com:1.1.3,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.16");
-\\ Google Chrome v [Impossible d'obtenir la version]
Fichier : C:\Users\Sélim\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] Le fichier ne contient aucune entrée illégitime.
*************************
AdwCleaner[R1].txt - [46081 octets] - [30/10/2011 19:21:15]
AdwCleaner[S1].txt - [46372 octets] - [31/10/2011 19:49:47]
*************************
Dossier Temporaire : 107 dossier(s)et 5 fichier(s) supprimés
########## EOF - C:\AdwCleaner[S1].txt - [46594 octets] ##########
zeroberto79
Messages postés
17
Date d'inscription
dimanche 30 octobre 2011
Statut
Membre
Dernière intervention
3 novembre 2011
31 oct. 2011 à 23:42
31 oct. 2011 à 23:42
voila la suite...
======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======
Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org
C:\Program Files\Ad-Remover\main.exe (SCAN [2]) -> Lancé à 23:37:34 le 31/10/2011, Mode normal
Microsoft® Windows Vista(TM) Édition Familiale Basique Service Pack 2 (X86)
Sélim@PC-DE-SÉLIM (Packard Bell BV EASYNOTE ML65)
============== RECHERCHE ==============
Fichier trouvé: C:\Users\Sélim\AppData\Local\knqfimim.bat
Dossier trouvé: C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default\extensions\{33E0DAA6-3AF3-D8B5-6752-10E949C61516}
Dossier trouvé: C:\Users\Sélim\AppData\LocalLow\Radio_Bar_1
Fichier trouvé: C:\Users\Sélim\AppData\Local\qbueois_nav.dat
Fichier trouvé: C:\Users\Sélim\AppData\Local\qbueois.dat
Fichier trouvé: C:\Users\Sélim\AppData\Local\qbueois_navps.dat
Fichier trouvé: C:\Users\Sélim\Downloads\vshare-plugin.exe
-- Fichier ouvert: C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default\Prefs.js --
Ligne trouvée: user_pref("browser.search.order.1", "Ask.com");
-- Fichier Fermé --
Clé trouvée: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\knqfimim
Clé trouvée: HKLM\Software\Classes\Toolbar.CT2405725
Clé trouvée: HKLM\Software\Classes\Toolbar.CT2849852
Clé trouvée: HKCU\Software\Poker 770
Clé trouvée: HKCU\Software\AppDataLow\Software\Radio_Bar_1
Clé trouvée: HKCU\Software\AppDataLow\Software\Toolbar
Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
============== SCAN ADDITIONNEL ==============
**** Mozilla Firefox Version [7.0.1 (fr)] ****
Plugins\npvsharetvplg.dll (vShare.tv )
HKLM_MozillaPlugins\Adobe Reader (x)
Searchplugins\bing.xml ( hxxp://www.bing.com/search)
Components\browsercomps.dll (Mozilla Foundation)
HKLM_Extensions|{7BA52691-1876-45ce-9EE6-54BCB3B04BBC} - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn\
-- C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default --
Extensions\vinceturk@gmail.com (KwiClick)
Extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516} (Complitly - Speed up your search with your personal search suggestions tool)
Extensions\{ef79f67a-6ad7-4715-a0f8-932fca442023} (BittorrentBar_FR Community Toolbar)
Searchplugins\startsear.xml (?)
Prefs.js - browser.download.lastDir, C:\\Users\\Sélim\\Desktop
Prefs.js - browser.search.defaultenginename, Web Search
Prefs.js - browser.search.selectedEngine, Google
Prefs.js - browser.startup.homepage, hxxp://startsear.ch/?aff=1
Prefs.js - browser.startup.homepage_override.buildID, 20110928134238
Prefs.js - browser.startup.homepage_override.mstone, rv:7.0.1
Prefs.js - keyword.URL, hxxp://www.google.com.my/search?q=
========================================
**** Internet Explorer Version [9.0.8112.16421] ****
HKCU_Main|Default_Page_URL - hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=040c&s=2&o=vb32&d=0309&m=easynote_ml65
HKCU_Main|Search bar - hxxp://www.google.com/ie
HKCU_Main|Search Page - hxxp://www.google.com
HKCU_Main|Start Page - hxxp://www.google.fr/
HKLM_Main|Default_Page_URL - hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=040c&s=2&o=vb32&d=0309&m=easynote_ml65
HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Start Page - hxxp://www.google.com
HKCU_URLSearchHooks|{0fc85f5d-6207-4515-a490-45a549d285c0} (x)
HKCU_URLSearchHooks|{ef79f67a-6ad7-4715-a0f8-932fca442023} (x)
HKCU_SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64} - "?" (?)
HKCU_SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E} - "Google Desktop" (hxxp://127.0.0.1:4664/search&s=ORPcYSwwQWjPEb6JeEXCz4UUgiU?q={searchTerms})
HKCU_SearchScopes\{9D5BD211-422C-4164-9298-BB4186A30F31} - "Web Search" (hxxp://startsear.ch/?aff=1&src=sp&cf=b2721710-0256-11e1-a3e8-00238b8c89d3&q={sea...)
HKLM_SearchScopes\{9D5BD211-422C-4164-9298-BB4186A30F31} - "Web Search" (hxxp://startsear.ch/?aff=1&src=sp&cf=b2721710-0256-11e1-a3e8-00238b8c89d3&q={sea...)
HKCU_Toolbar\WebBrowser|{0FC85F5D-6207-4515-A490-45A549D285C0} (x)
HKCU_Toolbar\WebBrowser|{EF79F67A-6AD7-4715-A0F8-932FCA442023} (x)
HKCU_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files\Veetle\Player\vtl_hfs.exe (?)
HKCU_ElevationPolicy\{6052FE92-D706-4756-AC4E-71361F909996} - C:\Program Files\BitTorrent\bittorrent.exe (BitTorrent, Inc.)
HKCU_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files\Veetle\Player\player.exe (?)
HKCU_ElevationPolicy\{AF235069-AACC-46C0-A984-EB9A5CB94DA4} - C:\Program Files\eMule\emule.exe (http://www.emule-project.net)
HKCU_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files\Veetle\Player\vtl_hfax.exe (?)
HKLM_ElevationPolicy\{442E3CEB-D71B-11DA-8750-001185653D78} - c:\program files\google\googletoolbar1user.exe (?)
HKLM_ElevationPolicy\{50A6102E-D757-409e-97B7-6EA4EEEA5BC3} - C:\Program Files\Common Files\Apple\Internet Services\BookmarkDAV_client.exe (Apple Inc.)
HKLM_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files\Veetle\Player\vtl_hfs.exe (?)
HKLM_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files\Veetle\Player\player.exe (?)
HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x)
HKLM_ElevationPolicy\{74351F14-5437-4d87-805B-04D409B09976} - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
HKLM_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files\Veetle\Player\vtl_hfax.exe (?)
HKCU_Extensions\{97ED3A9F-CD6F-473A-8FE1-7505C1B844C3} - "Billeo" (billeo.dll,219)
========================================
C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 2 Fichier(s)
C:\Ad-Report-SCAN[1].txt - 31/10/2011 13:29:29 (15758 Octet(s))
C:\Ad-Report-SCAN[2].txt - 31/10/2011 23:37:43 (6056 Octet(s))
Fin à: 23:38:29, 31/10/2011
============== E.O.F ==============
======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======
Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org
C:\Program Files\Ad-Remover\main.exe (SCAN [2]) -> Lancé à 23:37:34 le 31/10/2011, Mode normal
Microsoft® Windows Vista(TM) Édition Familiale Basique Service Pack 2 (X86)
Sélim@PC-DE-SÉLIM (Packard Bell BV EASYNOTE ML65)
============== RECHERCHE ==============
Fichier trouvé: C:\Users\Sélim\AppData\Local\knqfimim.bat
Dossier trouvé: C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default\extensions\{33E0DAA6-3AF3-D8B5-6752-10E949C61516}
Dossier trouvé: C:\Users\Sélim\AppData\LocalLow\Radio_Bar_1
Fichier trouvé: C:\Users\Sélim\AppData\Local\qbueois_nav.dat
Fichier trouvé: C:\Users\Sélim\AppData\Local\qbueois.dat
Fichier trouvé: C:\Users\Sélim\AppData\Local\qbueois_navps.dat
Fichier trouvé: C:\Users\Sélim\Downloads\vshare-plugin.exe
-- Fichier ouvert: C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default\Prefs.js --
Ligne trouvée: user_pref("browser.search.order.1", "Ask.com");
-- Fichier Fermé --
Clé trouvée: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\knqfimim
Clé trouvée: HKLM\Software\Classes\Toolbar.CT2405725
Clé trouvée: HKLM\Software\Classes\Toolbar.CT2849852
Clé trouvée: HKCU\Software\Poker 770
Clé trouvée: HKCU\Software\AppDataLow\Software\Radio_Bar_1
Clé trouvée: HKCU\Software\AppDataLow\Software\Toolbar
Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
============== SCAN ADDITIONNEL ==============
**** Mozilla Firefox Version [7.0.1 (fr)] ****
Plugins\npvsharetvplg.dll (vShare.tv )
HKLM_MozillaPlugins\Adobe Reader (x)
Searchplugins\bing.xml ( hxxp://www.bing.com/search)
Components\browsercomps.dll (Mozilla Foundation)
HKLM_Extensions|{7BA52691-1876-45ce-9EE6-54BCB3B04BBC} - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn\
-- C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default --
Extensions\vinceturk@gmail.com (KwiClick)
Extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516} (Complitly - Speed up your search with your personal search suggestions tool)
Extensions\{ef79f67a-6ad7-4715-a0f8-932fca442023} (BittorrentBar_FR Community Toolbar)
Searchplugins\startsear.xml (?)
Prefs.js - browser.download.lastDir, C:\\Users\\Sélim\\Desktop
Prefs.js - browser.search.defaultenginename, Web Search
Prefs.js - browser.search.selectedEngine, Google
Prefs.js - browser.startup.homepage, hxxp://startsear.ch/?aff=1
Prefs.js - browser.startup.homepage_override.buildID, 20110928134238
Prefs.js - browser.startup.homepage_override.mstone, rv:7.0.1
Prefs.js - keyword.URL, hxxp://www.google.com.my/search?q=
========================================
**** Internet Explorer Version [9.0.8112.16421] ****
HKCU_Main|Default_Page_URL - hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=040c&s=2&o=vb32&d=0309&m=easynote_ml65
HKCU_Main|Search bar - hxxp://www.google.com/ie
HKCU_Main|Search Page - hxxp://www.google.com
HKCU_Main|Start Page - hxxp://www.google.fr/
HKLM_Main|Default_Page_URL - hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=040c&s=2&o=vb32&d=0309&m=easynote_ml65
HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Start Page - hxxp://www.google.com
HKCU_URLSearchHooks|{0fc85f5d-6207-4515-a490-45a549d285c0} (x)
HKCU_URLSearchHooks|{ef79f67a-6ad7-4715-a0f8-932fca442023} (x)
HKCU_SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64} - "?" (?)
HKCU_SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E} - "Google Desktop" (hxxp://127.0.0.1:4664/search&s=ORPcYSwwQWjPEb6JeEXCz4UUgiU?q={searchTerms})
HKCU_SearchScopes\{9D5BD211-422C-4164-9298-BB4186A30F31} - "Web Search" (hxxp://startsear.ch/?aff=1&src=sp&cf=b2721710-0256-11e1-a3e8-00238b8c89d3&q={sea...)
HKLM_SearchScopes\{9D5BD211-422C-4164-9298-BB4186A30F31} - "Web Search" (hxxp://startsear.ch/?aff=1&src=sp&cf=b2721710-0256-11e1-a3e8-00238b8c89d3&q={sea...)
HKCU_Toolbar\WebBrowser|{0FC85F5D-6207-4515-A490-45A549D285C0} (x)
HKCU_Toolbar\WebBrowser|{EF79F67A-6AD7-4715-A0F8-932FCA442023} (x)
HKCU_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files\Veetle\Player\vtl_hfs.exe (?)
HKCU_ElevationPolicy\{6052FE92-D706-4756-AC4E-71361F909996} - C:\Program Files\BitTorrent\bittorrent.exe (BitTorrent, Inc.)
HKCU_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files\Veetle\Player\player.exe (?)
HKCU_ElevationPolicy\{AF235069-AACC-46C0-A984-EB9A5CB94DA4} - C:\Program Files\eMule\emule.exe (http://www.emule-project.net)
HKCU_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files\Veetle\Player\vtl_hfax.exe (?)
HKLM_ElevationPolicy\{442E3CEB-D71B-11DA-8750-001185653D78} - c:\program files\google\googletoolbar1user.exe (?)
HKLM_ElevationPolicy\{50A6102E-D757-409e-97B7-6EA4EEEA5BC3} - C:\Program Files\Common Files\Apple\Internet Services\BookmarkDAV_client.exe (Apple Inc.)
HKLM_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files\Veetle\Player\vtl_hfs.exe (?)
HKLM_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files\Veetle\Player\player.exe (?)
HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x)
HKLM_ElevationPolicy\{74351F14-5437-4d87-805B-04D409B09976} - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
HKLM_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files\Veetle\Player\vtl_hfax.exe (?)
HKCU_Extensions\{97ED3A9F-CD6F-473A-8FE1-7505C1B844C3} - "Billeo" (billeo.dll,219)
========================================
C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 2 Fichier(s)
C:\Ad-Report-SCAN[1].txt - 31/10/2011 13:29:29 (15758 Octet(s))
C:\Ad-Report-SCAN[2].txt - 31/10/2011 23:37:43 (6056 Octet(s))
Fin à: 23:38:29, 31/10/2011
============== E.O.F ==============
Bleuet'
Messages postés
579
Date d'inscription
dimanche 16 octobre 2011
Statut
Membre
Dernière intervention
12 octobre 2018
32
1 nov. 2011 à 11:04
1 nov. 2011 à 11:04
Salut,
On avance bien.
* Redémarre AD-Remover >
Phase 2 Suppression:
/!\ Déconnecte toi et ferme toutes les applications en cours /!\
[*]Relance AD-Remover.
[*]Désactive l'UAC ( si Vista, Windows 7)
[*]Désactive le Team-Timer de Spybot S&D (si installé)
[*] Double-clique sur l'icône AD-Remover
[*] Au menu principal, clique sur "Nettoyer"
[*] Confirme le lancement de l'analyse et laisse l'outil travailler
[*] Précision du message " AD-R va fermer tous les programmes pour faciliter le nettoyage"
Le Bureau se vide. Ecran vide.
[*] AD-R propose un redémarrage " optionnel " : clic sur OUI. A défaut de curseur : touche "Entrée".
[*] Poster le rapport établi au redémarrage du PC (il est aussi sauvegardé sous C:\Ad-report-CLEAN.txt )
(CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )
Note : Pour désinstaller AD-Remover, lancer avec l'option "Désinstaller" puis supprimer l'icône du bureau.
-------------------
* Faire une analyse avec ZHPDIAG et copier/coller le rapport avec celui de AD-Remover [CLEAN].
+ ;)
On avance bien.
* Redémarre AD-Remover >
Phase 2 Suppression:
/!\ Déconnecte toi et ferme toutes les applications en cours /!\
[*]Relance AD-Remover.
[*]Désactive l'UAC ( si Vista, Windows 7)
[*]Désactive le Team-Timer de Spybot S&D (si installé)
[*] Double-clique sur l'icône AD-Remover
[*] Au menu principal, clique sur "Nettoyer"
[*] Confirme le lancement de l'analyse et laisse l'outil travailler
[*] Précision du message " AD-R va fermer tous les programmes pour faciliter le nettoyage"
Le Bureau se vide. Ecran vide.
[*] AD-R propose un redémarrage " optionnel " : clic sur OUI. A défaut de curseur : touche "Entrée".
[*] Poster le rapport établi au redémarrage du PC (il est aussi sauvegardé sous C:\Ad-report-CLEAN.txt )
(CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )
Note : Pour désinstaller AD-Remover, lancer avec l'option "Désinstaller" puis supprimer l'icône du bureau.
-------------------
* Faire une analyse avec ZHPDIAG et copier/coller le rapport avec celui de AD-Remover [CLEAN].
+ ;)
zeroberto79
Messages postés
17
Date d'inscription
dimanche 30 octobre 2011
Statut
Membre
Dernière intervention
3 novembre 2011
1 nov. 2011 à 13:01
1 nov. 2011 à 13:01
Bonjour Bleuet, je t'envoie les rapports comme tu m'as demandé :
======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======
Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org
C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 12:45:29 le 01/11/2011, Mode normal
Microsoft® Windows Vista(TM) Édition Familiale Basique Service Pack 2 (X86)
Sélim@PC-DE-SÉLIM (Packard Bell BV EASYNOTE ML65)
============== ACTION(S) ==============
Fichier supprimé: C:\Users\Sélim\AppData\Local\knqfimim.bat
Dossier supprimé: C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default\extensions\{33E0DAA6-3AF3-D8B5-6752-10E949C61516}
Dossier supprimé: C:\Users\Sélim\AppData\LocalLow\Radio_Bar_1
Fichier supprimé: C:\Users\Sélim\AppData\Local\qbueois_nav.dat
Fichier supprimé: C:\Users\Sélim\AppData\Local\qbueois.dat
Fichier supprimé: C:\Users\Sélim\AppData\Local\qbueois_navps.dat
Fichier supprimé: C:\Users\Sélim\Downloads\vshare-plugin.exe
(!) -- Fichiers temporaires supprimés.
-- Fichier ouvert: C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default\Prefs.js --
Ligne supprimée: user_pref("browser.search.order.1", "Ask.com");
-- Fichier Fermé --
Clé supprimée: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\knqfimim
Clé supprimée: HKLM\Software\Classes\Toolbar.CT2405725
Clé supprimée: HKLM\Software\Classes\Toolbar.CT2849852
Clé supprimée: HKCU\Software\Poker 770
Clé supprimée: HKCU\Software\AppDataLow\Software\Radio_Bar_1
Clé supprimée: HKCU\Software\AppDataLow\Software\Toolbar
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
============== SCAN ADDITIONNEL ==============
**** Mozilla Firefox Version [7.0.1 (fr)] ****
Plugins\npvsharetvplg.dll (vShare.tv )
HKLM_MozillaPlugins\Adobe Reader (x)
Searchplugins\bing.xml ( hxxp://www.bing.com/search)
Components\browsercomps.dll (Mozilla Foundation)
HKLM_Extensions|{7BA52691-1876-45ce-9EE6-54BCB3B04BBC} - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn\
-- C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default --
Extensions\vinceturk@gmail.com (KwiClick)
Extensions\{ef79f67a-6ad7-4715-a0f8-932fca442023} (BittorrentBar_FR Community Toolbar)
Searchplugins\startsear.xml (?)
Prefs.js - browser.download.lastDir, C:\\Users\\Sélim\\Desktop
Prefs.js - browser.search.defaultenginename, Web Search
Prefs.js - browser.search.selectedEngine, Google
Prefs.js - browser.startup.homepage, hxxp://startsear.ch/?aff=1
Prefs.js - browser.startup.homepage_override.buildID, 20110928134238
Prefs.js - browser.startup.homepage_override.mstone, rv:7.0.1
Prefs.js - keyword.URL, hxxp://www.google.com.my/search?q=
========================================
**** Internet Explorer Version [9.0.8112.16421] ****
HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKCU_URLSearchHooks|{0fc85f5d-6207-4515-a490-45a549d285c0} (x)
HKCU_URLSearchHooks|{ef79f67a-6ad7-4715-a0f8-932fca442023} (x)
HKCU_SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64} - "?" (?)
HKCU_SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E} - "Google Desktop" (hxxp://127.0.0.1:4664/search&s=ORPcYSwwQWjPEb6JeEXCz4UUgiU?q={searchTerms})
HKCU_SearchScopes\{9D5BD211-422C-4164-9298-BB4186A30F31} - "Web Search" (hxxp://startsear.ch/?aff=1&src=sp&cf=b2721710-0256-11e1-a3e8-00238b8c89d3&q={sea...)
HKLM_SearchScopes\{9D5BD211-422C-4164-9298-BB4186A30F31} - "Web Search" (hxxp://startsear.ch/?aff=1&src=sp&cf=b2721710-0256-11e1-a3e8-00238b8c89d3&q={sea...)
HKCU_Toolbar\WebBrowser|{0FC85F5D-6207-4515-A490-45A549D285C0} (x)
HKCU_Toolbar\WebBrowser|{EF79F67A-6AD7-4715-A0F8-932FCA442023} (x)
HKCU_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files\Veetle\Player\vtl_hfs.exe (?)
HKCU_ElevationPolicy\{6052FE92-D706-4756-AC4E-71361F909996} - C:\Program Files\BitTorrent\bittorrent.exe (BitTorrent, Inc.)
HKCU_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files\Veetle\Player\player.exe (?)
HKCU_ElevationPolicy\{AF235069-AACC-46C0-A984-EB9A5CB94DA4} - C:\Program Files\eMule\emule.exe (http://www.emule-project.net)
HKCU_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files\Veetle\Player\vtl_hfax.exe (?)
HKLM_ElevationPolicy\{442E3CEB-D71B-11DA-8750-001185653D78} - c:\program files\google\googletoolbar1user.exe (?)
HKLM_ElevationPolicy\{50A6102E-D757-409e-97B7-6EA4EEEA5BC3} - C:\Program Files\Common Files\Apple\Internet Services\BookmarkDAV_client.exe (Apple Inc.)
HKLM_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files\Veetle\Player\vtl_hfs.exe (?)
HKLM_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files\Veetle\Player\player.exe (?)
HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x)
HKLM_ElevationPolicy\{74351F14-5437-4d87-805B-04D409B09976} - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
HKLM_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files\Veetle\Player\vtl_hfax.exe (?)
HKCU_Extensions\{97ED3A9F-CD6F-473A-8FE1-7505C1B844C3} - "Billeo" (billeo.dll,219)
========================================
C:\Program Files\Ad-Remover\Quarantine: 15 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 17 Fichier(s)
C:\Ad-Report-CLEAN[1].txt - 01/11/2011 12:45:34 (6018 Octet(s))
C:\Ad-Report-SCAN[1].txt - 31/10/2011 13:29:29 (15758 Octet(s))
C:\Ad-Report-SCAN[2].txt - 31/10/2011 23:37:43 (6194 Octet(s))
Fin à: 12:46:34, 01/11/2011
============== E.O.F ==============
Rapport de ZHPDiag v1.28.2155 par Nicolas Coolman, Update du 28/10/2011
Run by Sélim at 01/11/2011 12:53:19
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
State : Version à jour.
---\\ Web Browser
MSIE: Internet Explorer v9.0.8112.16421
MFIE: Mozilla Firefox 7.0.1 v7.0.1 (Defaut)
GCIE: Google Chrome v15.0.874.106
OBIE: Safari v5.34.51.22
---\\ Windows Product Information
Windows Vista Home Basic Edition, 32-bit Service Pack 2 (Build 6002)
Windows Server License Manager Script : OK
~ Vista, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : KRDMH
Windows License : OK
Windows Automatic Updates : OK
---\\ System Information
~ Processor: x86 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3065 MB (67% free)
System Restore: Activé (Enable)
System drive C: has 25 GB (8%) free of 285 GB
---\\ Logged in mode
~ Computer Name: PC-DE-SÉLIM
~ User Name: Sélim
~ All Users Names: Sélim, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O82,O89
Logged in as Administrator
---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Sélim\AppData\Roaming\
~ %Desktop% : C:\Users\Sélim\Desktop\
~ %Favorites% : C:\Users\Sélim\Favorites\
~ %LocalAppData% : C:\Users\Sélim\AppData\Local\
~ %StartMenu% : C:\Users\Sélim\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\system32\
---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 25 Go of 285 Go)
D:\ CD-ROM drive (Not Inserted)
E:\ CD-ROM drive (Not Inserted)
---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoStartMenuSubFolder: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoResolveSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoDispScrSavPage: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK
~ Scan Security Center in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.25/01/2010 - 07:27:36.) -- C:\Windows\Explorer.exe [2926592]
[MD5.4B555106290BD117334E9A08761C035A] - (....) (.02/11/2006 - 10:45:37.) -- C:\Windows\system32\rundll32.exe [44544]
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 - 03:33:13.) -- C:\Windows\system32\Wininit.exe [96768]
[MD5.D3788D91530CFA005BD516189A4C676E] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.23/10/2011 - 03:28:15.) -- C:\Windows\system32\wininet.dll [1126912]
[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.25/01/2010 - 07:28:13.) -- C:\Windows\system32\Winlogon.exe [314368]
[MD5.95F5FF73B076576C41740F1A842B9B57] - (....) (.21/01/2008 - 08:20:47.) -- C:\Windows\system32\fr-FR\user32.dll.mui [20480]
[MD5.3911B972B55FEA0478476B2E777B29FA] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.16/06/2011 - 14:58:27.) -- C:\Windows\system32\drivers\AFD.sys [273408]
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.25/01/2010 - 07:32:26.) -- C:\Windows\system32\drivers\atapi.sys [19944]
[MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.21/01/2008 - 03:33:23.) -- C:\Windows\system32\drivers\Cdfs.sys [70144]
[MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.25/01/2010 - 05:39:17.) -- C:\Windows\system32\drivers\Cdrom.sys [67072]
[MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.15/06/2011 - 15:59:03.) -- C:\Windows\system32\drivers\DfsC.sys [75264]
[MD5.062452B7FFD68C8C042A6261FE8DFF4A] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.25/01/2010 - 05:42:42.) -- C:\Windows\system32\drivers\HDAudBus.sys [561152]
[MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) (.21/01/2008 - 03:32:45.) -- C:\Windows\system32\drivers\i8042prt.sys [54784]
[MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.21/01/2008 - 03:34:06.) -- C:\Windows\system32\drivers\IpNat.sys [100864]
[MD5.1E94971C4B446AB2290DEB71D01CF0C2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/06/2011 - 14:24:40.) -- C:\Windows\system32\drivers\MRxSmb.sys [106496]
[MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) (.25/01/2010 - 05:45:37.) -- C:\Windows\system32\drivers\netBT.sys [185856]
[MD5.6A4A98CEE84CF9E99564510DDA4BAA47] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.25/01/2010 - 07:32:49.) -- C:\Windows\system32\drivers\ntfs.sys [1083880]
[MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) (.02/11/2006 - 09:51:30.) -- C:\Windows\system32\drivers\Parport.sys [79360]
[MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/01/2008 - 03:34:44.) -- C:\Windows\system32\drivers\Rasl2tp.sys [76288]
[MD5.FBC0BACD9C3D7F6956853F64A66E252D] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/01/2008 - 03:32:22.) -- C:\Windows\system32\drivers\rdpdr.sys [248832]
[MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) (.25/01/2010 - 05:45:22.) -- C:\Windows\system32\drivers\smb.sys [66560]
[MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) (.25/01/2010 - 05:45:56.) -- C:\Windows\system32\drivers\tdx.sys [72192]
~ Scan Generic Processes in 00mn 00s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/89
~ Mes musiques (My Musics) : 9/680
~ Mes Videos (My Videos) : 1/2
~ Mes Favoris (My Favorites) : 8/52
~ Mes Documents (My Documents) : 20/108
~ Mon Bureau (My Desktop) : 29/6553
~ Menu demarrer (Programs) : 7/35
~ Scan Hidden Files in 00mn 09s
---\\ Processus lancés
[MD5.6E1AC019C8FD1997BF5A17DA93627510] - (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [178712] [PID.2840]
[MD5.50F5E1205E8DCA4EE482198B30DB4206] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe [6294048] [PID.2860]
[MD5.8C6BC84B3513BE42EC204FEE5FB29446] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [894512] [PID.2876]
[MD5.893C0CE7AD243FC4C9EF66A3EF449278] - (.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files\CyberLink\PowerCinema\PCMAgent.exe [143360] [PID.2884]
[MD5.550EA4A351D7E15F75A99185269BC906] - (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\CyberLink\PowerCinema\Kernel\CLML\CLMLSvc.exe [196608] [PID.2892]
[MD5.9D5E8B45BD348DF0882C69EED0E83111] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [281768] [PID.2900]
[MD5.D743372A621ED03A274539A88EEB3450] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [421736] [PID.2996]
[MD5.CB2B9EB1447D8A264E46948DF46C1212] - (.Packard Bell BV - SmpSys.exe.) -- C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe [1038136] [PID.3020]
[MD5.BC9C9BE7BB74D629362608ACE470E7DA] - (.Microsoft Corporation - Notification de cadeaux MSN.) -- C:\Users\Sélim\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe [135680] [PID.3036]
[MD5.E681281D9BFC9D45D3B72532717E5880] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [49152] [PID.3248]
[MD5.25CA1677AAA3CDC99CD4FCF940886F3C] - (.ATI Technologies Inc. - Catalyst Control Centre: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [49152] [PID.4076]
[MD5.9F323EEAFAD860204EAA0630E0A3D7F9] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [696320] [PID.3344]
[MD5.6080A176D09435FC8E6E800996656E18] - (.Microsoft Corporation - Console IME.) -- C:\Windows\system32\conime.exe [69120] [PID.1864]
[MD5.4604DB6D5ECA6362873CC3A76D2204BA] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\Windows\system32\Ati2evxx.exe [692224] [PID.]
[MD5.862BB4CBC05D80C5B45BE430E5EF872F] - (.Microsoft Corporation - Service de gestion des licences Microsoft.) -- C:\Windows\system32\SLsvc.exe [3408896] [PID.]
[MD5.A5BCBAF0477C4869B67E0195AEA4A9CD] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [136360] [PID.]
[MD5.E8FE4FCE23D2809BD88BCC1D0F8408CE] - (...) -- C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe [124832] [PID.]
[MD5.3CCE4AFA4AACDB28E01A148394212186] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [269480] [PID.]
[MD5.D8E18021F91AD79CA8491CB5A5DA22D4] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55144] [PID.]
[MD5.DB5BEA73EDAF19AC68B2C0FAD0F92B1A] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [390504] [PID.]
[MD5.23112102BC2A8FE44B8AC44A05BDF4C3] - (.Pas de propriétaire - Acer Empowering Technology Framework Servic.) -- C:\Program Files\Packard Bell\Packard Bell Recovery Management\Service\ETService.exe [24576] [PID.]
[MD5.CDE000884FD7BAF0C1FDFE029B0891DE] - (.Avira GmbH - AntiVir shadow copy service.) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe [76968] [PID.]
[MD5.CB686F44BF955EA02520710A56874FA4] - (.Intel Corporation - RAID Monitor.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [354840] [PID.]
[MD5.875E4E0661F3A5994DF9E5E3A0A4F96B] - (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) -- C:\Windows\system32\IoctlSvc.exe [81920] [PID.]
[MD5.33642C17C232AA272C68E446A2619899] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [821608] [PID.]
[MD5.94E920BE59B9AB65D95E582DBAA136AC] - (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [366152] [PID.]
[MD5.F8D8BB3F6173FFF00128612F33D3197A] - (.Microsoft Corporation - WMI Reverse Performance Adapter Maintenance.) -- C:\Windows\system32\wbem\WMIADAP.EXE [117248] [PID.]
~ Scan Processes Running in 00mn 00s
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Sélim\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] https://www.bing.com/?toHttps=1&redig=69DA0EF8272048D9864AF4DB37211DE8
G0 - GCSP: Preference [User Data\Default][HomePage] http://startsear.ch
~ Scan Google Browser in 00mn 00s
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\prefs.js
C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\user.js (.not file.)
M3 - MFPP: Plugins - [Sélim] -- C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\searchplugins\bing.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\searchplugins\startsear.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\googledesktop.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
M0 - MFSP: prefs.js [Sélim - o0hf2ewt.default] http://startsear.ch
M2 - MFEP: prefs.js [Sélim - o0hf2ewt.default\vinceturk@gmail.com] [] KwiClick v2.7.2.884 (.KwiClick, LLC.)
M2 - MFEP: prefs.js [Sélim - o0hf2ewt.default\{20a82645-c095-46ed-80e3-08825760534b}] [MicrosoftCG] Microsoft .NET Framework Assistant v1.2.1 (.Microsoft.)
M2 - MFEP: prefs.js [Sélim - o0hf2ewt.default\{ef79f67a-6ad7-4715-a0f8-932fca442023}] [] BittorrentBar_FR Community Toolbar v3.7.0.6 (.Conduit Ltd..)
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files\Mozilla Firefox\Plugins\np-mswmp.dll
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll
P2 - FPN:Firefox Plugin Navigator . (.vShare.tv - vShare.tv plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npvsharetvplg.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60831.0.) -- c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3502.0922] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3508.1109] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@veetle.com/veetleCorePlugin,version=0.9.18] - (.Veetle Inc - Version 0.9.18, Copyright 2006-2009 Veetle Inc<br><a href="http://www..) -- C:\Program Files\Veetle\plugins\npVeetle.dll
P2 - FPN: [HKLM] [@veetle.com/veetlePlayerPlugin,version=0.9.18] - (.Veetle Inc - Version 0.9.18, copyright 2006-2010 Veetle Inc<br><a href="http://www..) -- C:\Program Files\Veetle\Player\npvlc.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=1.1.7] - (.the VideoLAN Team - Version 1.1.7, copyright 1996-2011 The VideoLAN Team<br><a href="http:.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
~ Scan Firefox Browser in 00mn 00s
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)) -- C:\Windows\system32\ieframe.dll
R3 - URLSearchHook: (no name) - {0fc85f5d-6207-4515-a490-45a549d285c0} . (...) (No version) -- (.not file.)
R3 - URLSearchHook: (no name) - {ef79f67a-6ad7-4715-a0f8-932fca442023} . (...) (No version) -- (.not file.)
~ Scan IE Browser in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;*.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:9666
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s
---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\ezShellStart.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Scan Keys in 00mn 00s
---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} . (.Symantec Corporation - coIEPlugIn.) -- C:\Program Files\Norton Internet Security\Engine\16.8.0.41\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} . (.Symantec Corporation - IPS Browser Helper DLL.) -- C:\Program Files\Norton Internet Security\Engine\16.8.0.41\IPSBHO.DLL
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Barre d'outils pour IE.) -- c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\3.1.415.1646\swg.dll
~ Scan BHO in 00mn 00s
---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} . (.Symantec Corporation - coIEPlugIn.) -- C:\Program Files\Norton Internet Security\Engine\16.8.0.41\coIEPlg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Barre d'outils pour IE.) -- c:\program files\google\googletoolbar1.dll
~ Scan Toolbar in 00mn 00s
---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [SmpcSys] . (.Packard Bell BV - SmpSys.exe.) -- C:\Program Files\Packard Bell\SetupMyPC\SmpSys.exe
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe
O4 - HKLM\..\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PCMAgent] . (.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files\CyberLink\PowerCinema\PCMAgent.exe
O4 - HKLM\..\Run: [CLMLServer] . (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\CyberLink\PowerCinema\Kernel\CLML\CLMLSvc.exe
O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] . (.Apple Inc. - AppleSyncNotifier.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
O4 - HKCU\..\Run: [SmpcSys] . (.Packard Bell BV - SmpSys.exe.) -- C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [Hide IP Platinum] C:\Program Files\Hide IP Platinum\hideippla.exe (.not file.)
O4 - HKCU\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] oobefldr.dll
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] oobefldr.dll
O4 - HKUS\S-1-5-21-3741062476-2126192684-2213182580-1000\..\Run: [SmpcSys] . (.Packard Bell BV - SmpSys.exe.) -- C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe
O4 - HKUS\S-1-5-21-3741062476-2126192684-2213182580-1000\..\Run: [Hide IP Platinum] C:\Program Files\Hide IP Platinum\hideippla.exe (.not file.)
O4 - HKUS\S-1-5-21-3741062476-2126192684-2213182580-1000\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe
~ Scan Application in 00mn 00s
---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Users\Sélim\Desktop\AD-R.lnk . (...) -- C:\Program Files\Ad-Remover\main.exe
O4 - Global Startup: C:\Users\Sélim\Desktop\Incoming - Raccourci.lnk . (...) -- C:\Users\Sélim\Downloads\eMule\Incoming
O4 - Global Startup: C:\Users\Sélim\Desktop\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Sélim\Desktop\OTL - Raccourci.lnk . (.OldTimer Tools.) -- C:\Users\Sélim\Downloads\OTL.exe
O4 - Global Startup: C:\Users\Sélim\Desktop\Play PKR.lnk . (.PKR Ltd.) -- C:\Program Files\PKR\pkr.exe
O4 - Global Startup: C:\Users\Sélim\Desktop\Run.lnk - Clé orpheline
O4 - Global Startup: C:\Users\Sélim\Desktop\SopCast.lnk . (.www.sopcast.com.) -- C:\Program Files\SopCast\SopCast.exe
O4 - Global Startup: C:\Users\Sélim\Desktop\Téléchargement - Raccourci.lnk . (...) -- C:\Users\Sélim\Downloads
O4 - Global Startup: C:\Users\Sélim\Desktop\VirtualDJ Home FREE.lnk . (.Atomix Productions.) -- C:\Program Files\VirtualDJ\virtualdj_home.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk . (...) -- C:\Windows\Installer\{5E453519-60F6-4A4D-A0BF-16663F9B3536}\SafariIco.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\bwin Poker.lnk . (...) -- C:\bwinPoker\StartbwinPoker.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Samsung PC Studio 3.lnk . (...) -- C:\Program Files\Samsung\Samsung PC Studio 3\Launcher.exe
~ Scan Global Startup in 00mn 00s
---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe
~ Scan IE Menu Contextuel in 00mn 00s
---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} . (.Microsoft Corporation - Windows Live Messenger Companion core resources.) -- C:\Program Files\Windows Live\Companion\companion
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBro
O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: &Envoyer à OneNote - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO
~ Scan IE Extra Buttons in 00mn 00s
---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll
~ Scan Winsock in 00mn 00s
---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} (WRC Class) - http://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx
O16 - DPF: {D4003189-95B1-4A2F-9A87-F2B03665960D} (VodClient Control Class) - http://www.vexcast.com/download/vexcast.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
~ Scan Objets ActiveX in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{CB4A5545-23B8-467B-97E4-710D0D719845}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CCS\Services\Tcpip\..\{D03778D2-EEBE-46F6-A30E-98613A0AC1DF}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CCS\Services\Tcpip\..\{D98CCC19-CB2A-40E0-A567-281ED5F033AC}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{CB4A5545-23B8-467B-97E4-710D0D719845}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS1\Services\Tcpip\..\{D03778D2-EEBE-46F6-A30E-98613A0AC1DF}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS1\Services\Tcpip\..\{D98CCC19-CB2A-40E0-A567-281ED5F033AC}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{CB4A5545-23B8-467B-97E4-710D0D719845}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS3\Services\Tcpip\..\{D03778D2-EEBE-46F6-A30E-98613A0AC1DF}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS3\Services\Tcpip\..\{D98CCC19-CB2A-40E0-A567-281ED5F033AC}: DhcpNameServer = 192.168.1.1
~ Scan Domain in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Handler: symres - {AA1061FE-6C41-421f-9344-69640C9732AB} . (.Symantec Corporation - coIEPlugIn.) -- C:\Program Files\Norton Internet Security\Engine\16.8.0.41\coIEPlg.dll
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll
O18 - Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
~ Scan Protocole Additionnel in 00mn 00s
---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll
~ Scan SSODL in 00mn 00s
---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll
~ Scan STS/SSO in 00mn 00s
---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) . (...) - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: (Ati External Event Utility) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Empowering Technology Service (ETService) . (.Pas de propriétaire - Acer Empowering Technology Framework Servic.) - C:\Program Files\Packard Bell\Packard Bell Recovery Management\Service\ETService.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) . (.Intel Corporation - RAID Monitor.) - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: PLFlash DeviceIoControl Service (PLFlash DeviceIoControl Service) . (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) - C:\Windows\system32\IoctlSvc.exe
O23 - Service: {49DE1C67-83F8-4102-99E0-C16DCC7EEC796} ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) . (.Cyberlink Corp. - FCL Driver.) - C:\Program Files\CyberLink\PlayMovie\000.fcl
~ Scan Services in 00mn 00s
---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe
~ Scan Desktop Component in 00mn 00s
---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.47C1DE0A890613FFCFF1D67648EEDF90] [APT] [Programme de mise ... jour en ligne de Adobe] (.Adobe Systems Incorporated.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
[MD5.4E5585800B561FBEF64B27425365A36F] [APT] [{29E07E35-5810-4CAA-A852-1EB627EECBBF}] (.Mozilla Corporation.) -- c:\program files\mozilla firefox\firefox.exe
[MD5.70B6D0C45256B688B7DBC10E922FB402] [APT] [{50644107-7E7D-41E0-91B0-90C5224DC581}] (.Skype Technologies S.A..) -- C:\Program Files\Skype\Phone\Skype.exe
[MD5.00000000000000000000000000000000] [APT] [{8A81893A-02D3-40B6-953A-4C0224314153}] (...) -- C:\Program Files\Hide IP Platinum\unins000.exe (.not file.)
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
~ Scan Scheduled Task in 00mn 02s
---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\Windows\system32\DRIVERS\avipbb.sys
O41 - Driver: (BHDrvx86) . (.Symantec Corporation - BASH Driver.) - C:\Windows\system32\Drivers\NIS\1008000.029\BHDrvx86.sys
O41 - Driver: (ccHP) . (.Symantec Corporation - Common Client Hash Provider Driver.) - C:\Windows\system32\Drivers\NIS\1008000.029\ccHPx86.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\system32\Drivers\dfsc.sys
O41 - Driver: (eeCtrl) . (.Symantec Corporation - Symantec Eraser Control Driver.) - C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\system32\DRIVERS\i8042prt.sys
O41 - Driver: (IDSVix86) . (.Symantec Corporation - IDS Core Driver.) - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\ipsdefs\20100415.001\IDSvix86.sys
O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\system32\DRIVERS\kbdclass.sys
O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\system32\DRIVERS\kbdhid.sys
O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\system32\DRIVERS\mouclass.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\system32\DRIVERS\netbios.sys
O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\system32\DRIVERS\netbt.sys
O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\system32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\system32\DRIVERS\rasacd.sys
O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\DRIVERS\RDPCDD.sys
O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\system32\DRIVERS\smb.sys
O41 - Driver: (SRTSPX) . (.Symantec Corporation - Symantec AutoProtect.) - C:\Windows\system32\drivers\NIS\1008000.029\SRTSPX.sys
O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\system32\DRIVERS\ssmdrv.sys
O41 - Driver: (SymIM) . (.Symantec Corporation - NDIS 6.0 Filter Driver for Windows Vista.) - C:\Windows\system32\DRIVERS\SymIMv.sys
O41 - Driver: (SYMTDI) . (.Symantec Corporation - Network Dispatch Driver.) - C:\Windows\system32\Drivers\NIS\1008000.029\SYMTDI.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\system32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys
~ Scan Drivers in 00mn 00s
---\\ Logiciels installés (O42)
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Photoshop Elements 6.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Photoshop Elements 6
O42 - Logiciel: Adobe Premiere Elements 4.0 - (.Adobe Systems Incorporated.) [HKLM] -- PremElem40
O42 - Logiciel: Adobe Premiere Elements 4.0 - (.Adobe Systems Incorporated.) [HKLM] -- {3E2C691B-B7E6-4053-B5C3-94B8BC407E7A}
O42 - Logiciel: Adobe Premiere Elements 4.0 Templates - (.Adobe Systems Incorporated.) [HKLM] -- PremElem40Templates
O42 - Logiciel: Adobe Premiere Elements 4.0 Templates - (.Adobe Systems Incorporated.) [HKLM] -- {F85C7118-F3DC-4ED9-AB27-3E7931EA3D88}
O42 - Logiciel: Adobe Reader 9.4.6 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A94000000001}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {A83279FD-CA4B-4206-9535-90974DE76654}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {A00B9A50-3090-4CFF-9CDA-82DA0BEDAA21}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop
O42 - Logiciel: BetClic Poker.fr (Remove Only) - (.Pas de propriétaire.) [HKLM] -- BetClic Poker.fr
O42 - Logiciel: BitTorrent - (.BitTorrent, Inc.) [HKLM] -- BitTorrent
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B}
O42 - Logiciel: Canon MP550 series MP Drivers - (.Pas de propriétaire.) [HKLM] -- {1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP550_series
O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}
O42 - Logiciel: Contrôle ActiveX Windows Live Mesh pour connexions à distance - (.Microsoft Corporation.) [HKLM] -- {55D003F4-9599-44BF-BA9E-95D060730DD3}
O42 - Logiciel: CyberLink PowerCinema - (.CyberLink Corp..) [HKLM] -- InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}
O42 - Logiciel: CyberLink PowerCinema - (.CyberLink Corp..) [HKLM] -- {2637C347-9DAD-11D6-9EA2-00055D0CA761}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: EasyBits Magic Desktop - (.Pas de propriétaire.) [HKLM] -- EasyBits Magic Desktop
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {488F0347-C4A7-4374-91A7-30818BEDA710}
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
O42 - Logiciel: Google Desktop - (.Google.) [HKLM] -- Google Desktop
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {DBEA1034-5882-4A88-8033-81C4EF0CFA29}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Pas de propriétaire.) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: HDReg France - (.Acxiom.) [HKLM] -- {0ED40D2A-7131-4FE7-941E-5C329336F712}
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Intel(R) Matrix Storage Manager - (.Intel Corporation.) [HKLM] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.2.1300 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E}
O42 - Logiciel: MetaBoli - (.Pas de propriétaire.) [HKLM] -- {709817E4-5439-4206-8738-796B34B623BD}
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_HOMESTUDENTR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2)
======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======
Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org
C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 12:45:29 le 01/11/2011, Mode normal
Microsoft® Windows Vista(TM) Édition Familiale Basique Service Pack 2 (X86)
Sélim@PC-DE-SÉLIM (Packard Bell BV EASYNOTE ML65)
============== ACTION(S) ==============
Fichier supprimé: C:\Users\Sélim\AppData\Local\knqfimim.bat
Dossier supprimé: C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default\extensions\{33E0DAA6-3AF3-D8B5-6752-10E949C61516}
Dossier supprimé: C:\Users\Sélim\AppData\LocalLow\Radio_Bar_1
Fichier supprimé: C:\Users\Sélim\AppData\Local\qbueois_nav.dat
Fichier supprimé: C:\Users\Sélim\AppData\Local\qbueois.dat
Fichier supprimé: C:\Users\Sélim\AppData\Local\qbueois_navps.dat
Fichier supprimé: C:\Users\Sélim\Downloads\vshare-plugin.exe
(!) -- Fichiers temporaires supprimés.
-- Fichier ouvert: C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default\Prefs.js --
Ligne supprimée: user_pref("browser.search.order.1", "Ask.com");
-- Fichier Fermé --
Clé supprimée: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\knqfimim
Clé supprimée: HKLM\Software\Classes\Toolbar.CT2405725
Clé supprimée: HKLM\Software\Classes\Toolbar.CT2849852
Clé supprimée: HKCU\Software\Poker 770
Clé supprimée: HKCU\Software\AppDataLow\Software\Radio_Bar_1
Clé supprimée: HKCU\Software\AppDataLow\Software\Toolbar
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
============== SCAN ADDITIONNEL ==============
**** Mozilla Firefox Version [7.0.1 (fr)] ****
Plugins\npvsharetvplg.dll (vShare.tv )
HKLM_MozillaPlugins\Adobe Reader (x)
Searchplugins\bing.xml ( hxxp://www.bing.com/search)
Components\browsercomps.dll (Mozilla Foundation)
HKLM_Extensions|{7BA52691-1876-45ce-9EE6-54BCB3B04BBC} - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn\
-- C:\Users\Sélim\AppData\Roaming\Mozilla\FireFox\Profiles\o0hf2ewt.default --
Extensions\vinceturk@gmail.com (KwiClick)
Extensions\{ef79f67a-6ad7-4715-a0f8-932fca442023} (BittorrentBar_FR Community Toolbar)
Searchplugins\startsear.xml (?)
Prefs.js - browser.download.lastDir, C:\\Users\\Sélim\\Desktop
Prefs.js - browser.search.defaultenginename, Web Search
Prefs.js - browser.search.selectedEngine, Google
Prefs.js - browser.startup.homepage, hxxp://startsear.ch/?aff=1
Prefs.js - browser.startup.homepage_override.buildID, 20110928134238
Prefs.js - browser.startup.homepage_override.mstone, rv:7.0.1
Prefs.js - keyword.URL, hxxp://www.google.com.my/search?q=
========================================
**** Internet Explorer Version [9.0.8112.16421] ****
HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKCU_URLSearchHooks|{0fc85f5d-6207-4515-a490-45a549d285c0} (x)
HKCU_URLSearchHooks|{ef79f67a-6ad7-4715-a0f8-932fca442023} (x)
HKCU_SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64} - "?" (?)
HKCU_SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E} - "Google Desktop" (hxxp://127.0.0.1:4664/search&s=ORPcYSwwQWjPEb6JeEXCz4UUgiU?q={searchTerms})
HKCU_SearchScopes\{9D5BD211-422C-4164-9298-BB4186A30F31} - "Web Search" (hxxp://startsear.ch/?aff=1&src=sp&cf=b2721710-0256-11e1-a3e8-00238b8c89d3&q={sea...)
HKLM_SearchScopes\{9D5BD211-422C-4164-9298-BB4186A30F31} - "Web Search" (hxxp://startsear.ch/?aff=1&src=sp&cf=b2721710-0256-11e1-a3e8-00238b8c89d3&q={sea...)
HKCU_Toolbar\WebBrowser|{0FC85F5D-6207-4515-A490-45A549D285C0} (x)
HKCU_Toolbar\WebBrowser|{EF79F67A-6AD7-4715-A0F8-932FCA442023} (x)
HKCU_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files\Veetle\Player\vtl_hfs.exe (?)
HKCU_ElevationPolicy\{6052FE92-D706-4756-AC4E-71361F909996} - C:\Program Files\BitTorrent\bittorrent.exe (BitTorrent, Inc.)
HKCU_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files\Veetle\Player\player.exe (?)
HKCU_ElevationPolicy\{AF235069-AACC-46C0-A984-EB9A5CB94DA4} - C:\Program Files\eMule\emule.exe (http://www.emule-project.net)
HKCU_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files\Veetle\Player\vtl_hfax.exe (?)
HKLM_ElevationPolicy\{442E3CEB-D71B-11DA-8750-001185653D78} - c:\program files\google\googletoolbar1user.exe (?)
HKLM_ElevationPolicy\{50A6102E-D757-409e-97B7-6EA4EEEA5BC3} - C:\Program Files\Common Files\Apple\Internet Services\BookmarkDAV_client.exe (Apple Inc.)
HKLM_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files\Veetle\Player\vtl_hfs.exe (?)
HKLM_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files\Veetle\Player\player.exe (?)
HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x)
HKLM_ElevationPolicy\{74351F14-5437-4d87-805B-04D409B09976} - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
HKLM_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files\Veetle\Player\vtl_hfax.exe (?)
HKCU_Extensions\{97ED3A9F-CD6F-473A-8FE1-7505C1B844C3} - "Billeo" (billeo.dll,219)
========================================
C:\Program Files\Ad-Remover\Quarantine: 15 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 17 Fichier(s)
C:\Ad-Report-CLEAN[1].txt - 01/11/2011 12:45:34 (6018 Octet(s))
C:\Ad-Report-SCAN[1].txt - 31/10/2011 13:29:29 (15758 Octet(s))
C:\Ad-Report-SCAN[2].txt - 31/10/2011 23:37:43 (6194 Octet(s))
Fin à: 12:46:34, 01/11/2011
============== E.O.F ==============
Rapport de ZHPDiag v1.28.2155 par Nicolas Coolman, Update du 28/10/2011
Run by Sélim at 01/11/2011 12:53:19
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
State : Version à jour.
---\\ Web Browser
MSIE: Internet Explorer v9.0.8112.16421
MFIE: Mozilla Firefox 7.0.1 v7.0.1 (Defaut)
GCIE: Google Chrome v15.0.874.106
OBIE: Safari v5.34.51.22
---\\ Windows Product Information
Windows Vista Home Basic Edition, 32-bit Service Pack 2 (Build 6002)
Windows Server License Manager Script : OK
~ Vista, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : KRDMH
Windows License : OK
Windows Automatic Updates : OK
---\\ System Information
~ Processor: x86 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3065 MB (67% free)
System Restore: Activé (Enable)
System drive C: has 25 GB (8%) free of 285 GB
---\\ Logged in mode
~ Computer Name: PC-DE-SÉLIM
~ User Name: Sélim
~ All Users Names: Sélim, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O82,O89
Logged in as Administrator
---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Sélim\AppData\Roaming\
~ %Desktop% : C:\Users\Sélim\Desktop\
~ %Favorites% : C:\Users\Sélim\Favorites\
~ %LocalAppData% : C:\Users\Sélim\AppData\Local\
~ %StartMenu% : C:\Users\Sélim\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\system32\
---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 25 Go of 285 Go)
D:\ CD-ROM drive (Not Inserted)
E:\ CD-ROM drive (Not Inserted)
---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoStartMenuSubFolder: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoResolveSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoDispScrSavPage: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK
~ Scan Security Center in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.25/01/2010 - 07:27:36.) -- C:\Windows\Explorer.exe [2926592]
[MD5.4B555106290BD117334E9A08761C035A] - (....) (.02/11/2006 - 10:45:37.) -- C:\Windows\system32\rundll32.exe [44544]
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 - 03:33:13.) -- C:\Windows\system32\Wininit.exe [96768]
[MD5.D3788D91530CFA005BD516189A4C676E] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.23/10/2011 - 03:28:15.) -- C:\Windows\system32\wininet.dll [1126912]
[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.25/01/2010 - 07:28:13.) -- C:\Windows\system32\Winlogon.exe [314368]
[MD5.95F5FF73B076576C41740F1A842B9B57] - (....) (.21/01/2008 - 08:20:47.) -- C:\Windows\system32\fr-FR\user32.dll.mui [20480]
[MD5.3911B972B55FEA0478476B2E777B29FA] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.16/06/2011 - 14:58:27.) -- C:\Windows\system32\drivers\AFD.sys [273408]
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.25/01/2010 - 07:32:26.) -- C:\Windows\system32\drivers\atapi.sys [19944]
[MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.21/01/2008 - 03:33:23.) -- C:\Windows\system32\drivers\Cdfs.sys [70144]
[MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.25/01/2010 - 05:39:17.) -- C:\Windows\system32\drivers\Cdrom.sys [67072]
[MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.15/06/2011 - 15:59:03.) -- C:\Windows\system32\drivers\DfsC.sys [75264]
[MD5.062452B7FFD68C8C042A6261FE8DFF4A] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.25/01/2010 - 05:42:42.) -- C:\Windows\system32\drivers\HDAudBus.sys [561152]
[MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) (.21/01/2008 - 03:32:45.) -- C:\Windows\system32\drivers\i8042prt.sys [54784]
[MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.21/01/2008 - 03:34:06.) -- C:\Windows\system32\drivers\IpNat.sys [100864]
[MD5.1E94971C4B446AB2290DEB71D01CF0C2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/06/2011 - 14:24:40.) -- C:\Windows\system32\drivers\MRxSmb.sys [106496]
[MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) (.25/01/2010 - 05:45:37.) -- C:\Windows\system32\drivers\netBT.sys [185856]
[MD5.6A4A98CEE84CF9E99564510DDA4BAA47] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.25/01/2010 - 07:32:49.) -- C:\Windows\system32\drivers\ntfs.sys [1083880]
[MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) (.02/11/2006 - 09:51:30.) -- C:\Windows\system32\drivers\Parport.sys [79360]
[MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/01/2008 - 03:34:44.) -- C:\Windows\system32\drivers\Rasl2tp.sys [76288]
[MD5.FBC0BACD9C3D7F6956853F64A66E252D] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/01/2008 - 03:32:22.) -- C:\Windows\system32\drivers\rdpdr.sys [248832]
[MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) (.25/01/2010 - 05:45:22.) -- C:\Windows\system32\drivers\smb.sys [66560]
[MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) (.25/01/2010 - 05:45:56.) -- C:\Windows\system32\drivers\tdx.sys [72192]
~ Scan Generic Processes in 00mn 00s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/89
~ Mes musiques (My Musics) : 9/680
~ Mes Videos (My Videos) : 1/2
~ Mes Favoris (My Favorites) : 8/52
~ Mes Documents (My Documents) : 20/108
~ Mon Bureau (My Desktop) : 29/6553
~ Menu demarrer (Programs) : 7/35
~ Scan Hidden Files in 00mn 09s
---\\ Processus lancés
[MD5.6E1AC019C8FD1997BF5A17DA93627510] - (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [178712] [PID.2840]
[MD5.50F5E1205E8DCA4EE482198B30DB4206] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe [6294048] [PID.2860]
[MD5.8C6BC84B3513BE42EC204FEE5FB29446] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [894512] [PID.2876]
[MD5.893C0CE7AD243FC4C9EF66A3EF449278] - (.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files\CyberLink\PowerCinema\PCMAgent.exe [143360] [PID.2884]
[MD5.550EA4A351D7E15F75A99185269BC906] - (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\CyberLink\PowerCinema\Kernel\CLML\CLMLSvc.exe [196608] [PID.2892]
[MD5.9D5E8B45BD348DF0882C69EED0E83111] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [281768] [PID.2900]
[MD5.D743372A621ED03A274539A88EEB3450] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [421736] [PID.2996]
[MD5.CB2B9EB1447D8A264E46948DF46C1212] - (.Packard Bell BV - SmpSys.exe.) -- C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe [1038136] [PID.3020]
[MD5.BC9C9BE7BB74D629362608ACE470E7DA] - (.Microsoft Corporation - Notification de cadeaux MSN.) -- C:\Users\Sélim\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe [135680] [PID.3036]
[MD5.E681281D9BFC9D45D3B72532717E5880] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [49152] [PID.3248]
[MD5.25CA1677AAA3CDC99CD4FCF940886F3C] - (.ATI Technologies Inc. - Catalyst Control Centre: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [49152] [PID.4076]
[MD5.9F323EEAFAD860204EAA0630E0A3D7F9] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [696320] [PID.3344]
[MD5.6080A176D09435FC8E6E800996656E18] - (.Microsoft Corporation - Console IME.) -- C:\Windows\system32\conime.exe [69120] [PID.1864]
[MD5.4604DB6D5ECA6362873CC3A76D2204BA] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\Windows\system32\Ati2evxx.exe [692224] [PID.]
[MD5.862BB4CBC05D80C5B45BE430E5EF872F] - (.Microsoft Corporation - Service de gestion des licences Microsoft.) -- C:\Windows\system32\SLsvc.exe [3408896] [PID.]
[MD5.A5BCBAF0477C4869B67E0195AEA4A9CD] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [136360] [PID.]
[MD5.E8FE4FCE23D2809BD88BCC1D0F8408CE] - (...) -- C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe [124832] [PID.]
[MD5.3CCE4AFA4AACDB28E01A148394212186] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [269480] [PID.]
[MD5.D8E18021F91AD79CA8491CB5A5DA22D4] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55144] [PID.]
[MD5.DB5BEA73EDAF19AC68B2C0FAD0F92B1A] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [390504] [PID.]
[MD5.23112102BC2A8FE44B8AC44A05BDF4C3] - (.Pas de propriétaire - Acer Empowering Technology Framework Servic.) -- C:\Program Files\Packard Bell\Packard Bell Recovery Management\Service\ETService.exe [24576] [PID.]
[MD5.CDE000884FD7BAF0C1FDFE029B0891DE] - (.Avira GmbH - AntiVir shadow copy service.) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe [76968] [PID.]
[MD5.CB686F44BF955EA02520710A56874FA4] - (.Intel Corporation - RAID Monitor.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [354840] [PID.]
[MD5.875E4E0661F3A5994DF9E5E3A0A4F96B] - (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) -- C:\Windows\system32\IoctlSvc.exe [81920] [PID.]
[MD5.33642C17C232AA272C68E446A2619899] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [821608] [PID.]
[MD5.94E920BE59B9AB65D95E582DBAA136AC] - (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [366152] [PID.]
[MD5.F8D8BB3F6173FFF00128612F33D3197A] - (.Microsoft Corporation - WMI Reverse Performance Adapter Maintenance.) -- C:\Windows\system32\wbem\WMIADAP.EXE [117248] [PID.]
~ Scan Processes Running in 00mn 00s
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Sélim\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] https://www.bing.com/?toHttps=1&redig=69DA0EF8272048D9864AF4DB37211DE8
G0 - GCSP: Preference [User Data\Default][HomePage] http://startsear.ch
~ Scan Google Browser in 00mn 00s
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\prefs.js
C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\user.js (.not file.)
M3 - MFPP: Plugins - [Sélim] -- C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\searchplugins\bing.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\searchplugins\startsear.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\googledesktop.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
M0 - MFSP: prefs.js [Sélim - o0hf2ewt.default] http://startsear.ch
M2 - MFEP: prefs.js [Sélim - o0hf2ewt.default\vinceturk@gmail.com] [] KwiClick v2.7.2.884 (.KwiClick, LLC.)
M2 - MFEP: prefs.js [Sélim - o0hf2ewt.default\{20a82645-c095-46ed-80e3-08825760534b}] [MicrosoftCG] Microsoft .NET Framework Assistant v1.2.1 (.Microsoft.)
M2 - MFEP: prefs.js [Sélim - o0hf2ewt.default\{ef79f67a-6ad7-4715-a0f8-932fca442023}] [] BittorrentBar_FR Community Toolbar v3.7.0.6 (.Conduit Ltd..)
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files\Mozilla Firefox\Plugins\np-mswmp.dll
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll
P2 - FPN:Firefox Plugin Navigator . (.vShare.tv - vShare.tv plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npvsharetvplg.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60831.0.) -- c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3502.0922] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3508.1109] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@veetle.com/veetleCorePlugin,version=0.9.18] - (.Veetle Inc - Version 0.9.18, Copyright 2006-2009 Veetle Inc<br><a href="http://www..) -- C:\Program Files\Veetle\plugins\npVeetle.dll
P2 - FPN: [HKLM] [@veetle.com/veetlePlayerPlugin,version=0.9.18] - (.Veetle Inc - Version 0.9.18, copyright 2006-2010 Veetle Inc<br><a href="http://www..) -- C:\Program Files\Veetle\Player\npvlc.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=1.1.7] - (.the VideoLAN Team - Version 1.1.7, copyright 1996-2011 The VideoLAN Team<br><a href="http:.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
~ Scan Firefox Browser in 00mn 00s
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)) -- C:\Windows\system32\ieframe.dll
R3 - URLSearchHook: (no name) - {0fc85f5d-6207-4515-a490-45a549d285c0} . (...) (No version) -- (.not file.)
R3 - URLSearchHook: (no name) - {ef79f67a-6ad7-4715-a0f8-932fca442023} . (...) (No version) -- (.not file.)
~ Scan IE Browser in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;*.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:9666
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s
---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\ezShellStart.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Scan Keys in 00mn 00s
---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} . (.Symantec Corporation - coIEPlugIn.) -- C:\Program Files\Norton Internet Security\Engine\16.8.0.41\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} . (.Symantec Corporation - IPS Browser Helper DLL.) -- C:\Program Files\Norton Internet Security\Engine\16.8.0.41\IPSBHO.DLL
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Barre d'outils pour IE.) -- c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\3.1.415.1646\swg.dll
~ Scan BHO in 00mn 00s
---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} . (.Symantec Corporation - coIEPlugIn.) -- C:\Program Files\Norton Internet Security\Engine\16.8.0.41\coIEPlg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Barre d'outils pour IE.) -- c:\program files\google\googletoolbar1.dll
~ Scan Toolbar in 00mn 00s
---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [SmpcSys] . (.Packard Bell BV - SmpSys.exe.) -- C:\Program Files\Packard Bell\SetupMyPC\SmpSys.exe
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe
O4 - HKLM\..\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PCMAgent] . (.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files\CyberLink\PowerCinema\PCMAgent.exe
O4 - HKLM\..\Run: [CLMLServer] . (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\CyberLink\PowerCinema\Kernel\CLML\CLMLSvc.exe
O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] . (.Apple Inc. - AppleSyncNotifier.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
O4 - HKCU\..\Run: [SmpcSys] . (.Packard Bell BV - SmpSys.exe.) -- C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [Hide IP Platinum] C:\Program Files\Hide IP Platinum\hideippla.exe (.not file.)
O4 - HKCU\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] oobefldr.dll
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] oobefldr.dll
O4 - HKUS\S-1-5-21-3741062476-2126192684-2213182580-1000\..\Run: [SmpcSys] . (.Packard Bell BV - SmpSys.exe.) -- C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe
O4 - HKUS\S-1-5-21-3741062476-2126192684-2213182580-1000\..\Run: [Hide IP Platinum] C:\Program Files\Hide IP Platinum\hideippla.exe (.not file.)
O4 - HKUS\S-1-5-21-3741062476-2126192684-2213182580-1000\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe
~ Scan Application in 00mn 00s
---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Users\Sélim\Desktop\AD-R.lnk . (...) -- C:\Program Files\Ad-Remover\main.exe
O4 - Global Startup: C:\Users\Sélim\Desktop\Incoming - Raccourci.lnk . (...) -- C:\Users\Sélim\Downloads\eMule\Incoming
O4 - Global Startup: C:\Users\Sélim\Desktop\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Sélim\Desktop\OTL - Raccourci.lnk . (.OldTimer Tools.) -- C:\Users\Sélim\Downloads\OTL.exe
O4 - Global Startup: C:\Users\Sélim\Desktop\Play PKR.lnk . (.PKR Ltd.) -- C:\Program Files\PKR\pkr.exe
O4 - Global Startup: C:\Users\Sélim\Desktop\Run.lnk - Clé orpheline
O4 - Global Startup: C:\Users\Sélim\Desktop\SopCast.lnk . (.www.sopcast.com.) -- C:\Program Files\SopCast\SopCast.exe
O4 - Global Startup: C:\Users\Sélim\Desktop\Téléchargement - Raccourci.lnk . (...) -- C:\Users\Sélim\Downloads
O4 - Global Startup: C:\Users\Sélim\Desktop\VirtualDJ Home FREE.lnk . (.Atomix Productions.) -- C:\Program Files\VirtualDJ\virtualdj_home.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk . (...) -- C:\Windows\Installer\{5E453519-60F6-4A4D-A0BF-16663F9B3536}\SafariIco.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\bwin Poker.lnk . (...) -- C:\bwinPoker\StartbwinPoker.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Samsung PC Studio 3.lnk . (...) -- C:\Program Files\Samsung\Samsung PC Studio 3\Launcher.exe
~ Scan Global Startup in 00mn 00s
---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe
~ Scan IE Menu Contextuel in 00mn 00s
---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} . (.Microsoft Corporation - Windows Live Messenger Companion core resources.) -- C:\Program Files\Windows Live\Companion\companion
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBro
O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: &Envoyer à OneNote - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO
~ Scan IE Extra Buttons in 00mn 00s
---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll
~ Scan Winsock in 00mn 00s
---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} (WRC Class) - http://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx
O16 - DPF: {D4003189-95B1-4A2F-9A87-F2B03665960D} (VodClient Control Class) - http://www.vexcast.com/download/vexcast.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
~ Scan Objets ActiveX in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{CB4A5545-23B8-467B-97E4-710D0D719845}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CCS\Services\Tcpip\..\{D03778D2-EEBE-46F6-A30E-98613A0AC1DF}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CCS\Services\Tcpip\..\{D98CCC19-CB2A-40E0-A567-281ED5F033AC}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{CB4A5545-23B8-467B-97E4-710D0D719845}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS1\Services\Tcpip\..\{D03778D2-EEBE-46F6-A30E-98613A0AC1DF}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS1\Services\Tcpip\..\{D98CCC19-CB2A-40E0-A567-281ED5F033AC}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{CB4A5545-23B8-467B-97E4-710D0D719845}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS3\Services\Tcpip\..\{D03778D2-EEBE-46F6-A30E-98613A0AC1DF}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS3\Services\Tcpip\..\{D98CCC19-CB2A-40E0-A567-281ED5F033AC}: DhcpNameServer = 192.168.1.1
~ Scan Domain in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Handler: symres - {AA1061FE-6C41-421f-9344-69640C9732AB} . (.Symantec Corporation - coIEPlugIn.) -- C:\Program Files\Norton Internet Security\Engine\16.8.0.41\coIEPlg.dll
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll
O18 - Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
~ Scan Protocole Additionnel in 00mn 00s
---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll
~ Scan SSODL in 00mn 00s
---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll
~ Scan STS/SSO in 00mn 00s
---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) . (...) - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: (Ati External Event Utility) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Empowering Technology Service (ETService) . (.Pas de propriétaire - Acer Empowering Technology Framework Servic.) - C:\Program Files\Packard Bell\Packard Bell Recovery Management\Service\ETService.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) . (.Intel Corporation - RAID Monitor.) - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: PLFlash DeviceIoControl Service (PLFlash DeviceIoControl Service) . (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) - C:\Windows\system32\IoctlSvc.exe
O23 - Service: {49DE1C67-83F8-4102-99E0-C16DCC7EEC796} ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) . (.Cyberlink Corp. - FCL Driver.) - C:\Program Files\CyberLink\PlayMovie\000.fcl
~ Scan Services in 00mn 00s
---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe
~ Scan Desktop Component in 00mn 00s
---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.47C1DE0A890613FFCFF1D67648EEDF90] [APT] [Programme de mise ... jour en ligne de Adobe] (.Adobe Systems Incorporated.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
[MD5.4E5585800B561FBEF64B27425365A36F] [APT] [{29E07E35-5810-4CAA-A852-1EB627EECBBF}] (.Mozilla Corporation.) -- c:\program files\mozilla firefox\firefox.exe
[MD5.70B6D0C45256B688B7DBC10E922FB402] [APT] [{50644107-7E7D-41E0-91B0-90C5224DC581}] (.Skype Technologies S.A..) -- C:\Program Files\Skype\Phone\Skype.exe
[MD5.00000000000000000000000000000000] [APT] [{8A81893A-02D3-40B6-953A-4C0224314153}] (...) -- C:\Program Files\Hide IP Platinum\unins000.exe (.not file.)
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
~ Scan Scheduled Task in 00mn 02s
---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\Windows\system32\DRIVERS\avipbb.sys
O41 - Driver: (BHDrvx86) . (.Symantec Corporation - BASH Driver.) - C:\Windows\system32\Drivers\NIS\1008000.029\BHDrvx86.sys
O41 - Driver: (ccHP) . (.Symantec Corporation - Common Client Hash Provider Driver.) - C:\Windows\system32\Drivers\NIS\1008000.029\ccHPx86.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\system32\Drivers\dfsc.sys
O41 - Driver: (eeCtrl) . (.Symantec Corporation - Symantec Eraser Control Driver.) - C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\system32\DRIVERS\i8042prt.sys
O41 - Driver: (IDSVix86) . (.Symantec Corporation - IDS Core Driver.) - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\ipsdefs\20100415.001\IDSvix86.sys
O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\system32\DRIVERS\kbdclass.sys
O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\system32\DRIVERS\kbdhid.sys
O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\system32\DRIVERS\mouclass.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\system32\DRIVERS\netbios.sys
O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\system32\DRIVERS\netbt.sys
O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\system32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\system32\DRIVERS\rasacd.sys
O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\DRIVERS\RDPCDD.sys
O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\system32\DRIVERS\smb.sys
O41 - Driver: (SRTSPX) . (.Symantec Corporation - Symantec AutoProtect.) - C:\Windows\system32\drivers\NIS\1008000.029\SRTSPX.sys
O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\system32\DRIVERS\ssmdrv.sys
O41 - Driver: (SymIM) . (.Symantec Corporation - NDIS 6.0 Filter Driver for Windows Vista.) - C:\Windows\system32\DRIVERS\SymIMv.sys
O41 - Driver: (SYMTDI) . (.Symantec Corporation - Network Dispatch Driver.) - C:\Windows\system32\Drivers\NIS\1008000.029\SYMTDI.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\system32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys
~ Scan Drivers in 00mn 00s
---\\ Logiciels installés (O42)
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Photoshop Elements 6.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Photoshop Elements 6
O42 - Logiciel: Adobe Premiere Elements 4.0 - (.Adobe Systems Incorporated.) [HKLM] -- PremElem40
O42 - Logiciel: Adobe Premiere Elements 4.0 - (.Adobe Systems Incorporated.) [HKLM] -- {3E2C691B-B7E6-4053-B5C3-94B8BC407E7A}
O42 - Logiciel: Adobe Premiere Elements 4.0 Templates - (.Adobe Systems Incorporated.) [HKLM] -- PremElem40Templates
O42 - Logiciel: Adobe Premiere Elements 4.0 Templates - (.Adobe Systems Incorporated.) [HKLM] -- {F85C7118-F3DC-4ED9-AB27-3E7931EA3D88}
O42 - Logiciel: Adobe Reader 9.4.6 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A94000000001}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {A83279FD-CA4B-4206-9535-90974DE76654}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {A00B9A50-3090-4CFF-9CDA-82DA0BEDAA21}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop
O42 - Logiciel: BetClic Poker.fr (Remove Only) - (.Pas de propriétaire.) [HKLM] -- BetClic Poker.fr
O42 - Logiciel: BitTorrent - (.BitTorrent, Inc.) [HKLM] -- BitTorrent
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B}
O42 - Logiciel: Canon MP550 series MP Drivers - (.Pas de propriétaire.) [HKLM] -- {1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP550_series
O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}
O42 - Logiciel: Contrôle ActiveX Windows Live Mesh pour connexions à distance - (.Microsoft Corporation.) [HKLM] -- {55D003F4-9599-44BF-BA9E-95D060730DD3}
O42 - Logiciel: CyberLink PowerCinema - (.CyberLink Corp..) [HKLM] -- InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}
O42 - Logiciel: CyberLink PowerCinema - (.CyberLink Corp..) [HKLM] -- {2637C347-9DAD-11D6-9EA2-00055D0CA761}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: EasyBits Magic Desktop - (.Pas de propriétaire.) [HKLM] -- EasyBits Magic Desktop
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {488F0347-C4A7-4374-91A7-30818BEDA710}
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
O42 - Logiciel: Google Desktop - (.Google.) [HKLM] -- Google Desktop
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {DBEA1034-5882-4A88-8033-81C4EF0CFA29}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Pas de propriétaire.) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: HDReg France - (.Acxiom.) [HKLM] -- {0ED40D2A-7131-4FE7-941E-5C329336F712}
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Intel(R) Matrix Storage Manager - (.Intel Corporation.) [HKLM] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.2.1300 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E}
O42 - Logiciel: MetaBoli - (.Pas de propriétaire.) [HKLM] -- {709817E4-5439-4206-8738-796B34B623BD}
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_HOMESTUDENTR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2)
Bleuet'
Messages postés
579
Date d'inscription
dimanche 16 octobre 2011
Statut
Membre
Dernière intervention
12 octobre 2018
32
1 nov. 2011 à 15:10
1 nov. 2011 à 15:10
OK pour AD-R.
Pour DIAG ton rapport est incomplet. Il est trop lourd et bug sur le forum.
Utilise https://www.cjoint.com/ pour l'héberger et me donner le lien.
Pour DIAG ton rapport est incomplet. Il est trop lourd et bug sur le forum.
Utilise https://www.cjoint.com/ pour l'héberger et me donner le lien.
zeroberto79
Messages postés
17
Date d'inscription
dimanche 30 octobre 2011
Statut
Membre
Dernière intervention
3 novembre 2011
1 nov. 2011 à 15:35
1 nov. 2011 à 15:35
Re bleuet, voilà :
https://www.cjoint.com/?AKbpIFwRB0N
https://www.cjoint.com/?AKbpIFwRB0N
Bleuet'
Messages postés
579
Date d'inscription
dimanche 16 octobre 2011
Statut
Membre
Dernière intervention
12 octobre 2018
32
1 nov. 2011 à 16:44
1 nov. 2011 à 16:44
Salut,
* Tu as Antivir et Norton security Internet. /!\ Il faut n'en garder qu'un. /!\
---------
* Les logiciels d'émulation de CD comme Daemon Tools peuvent gêner les outils de désinfection. Utilise Defogger pour les désactiver temporairement :
* Télécharge Defogger sur ton Bureau.
http://www.jpshortstuff.247fixes.com/Defogger.exe
* Lance le
* Une fenêtre apparait : clique sur "Disable"
* Fais redémarrer l'ordinateur si l'outil te le demande
* Quand nous aurons terminé la désinfection, tu pourras réactiver ces logiciels en relançant Defogger et en cliquant sur "Re-enable".
----------
* Spybot est obsolète, peut ralentir la navigation et gêner la désinfection.
Effectue ceci pour une désinstallation totale et propre de Spybot S&D :
1/. Désactiver Tea Timer si activé :
[*]Lancer Spybot
[*]Cliquer sur Mode, puis cocher Mode avancé
[*]Cliquer sur Outils puis sur Résident
[*]Décocher la case Résident "Tea Timer"
2/. Retirer la vaccination de Spybot :
[*] Ferme tes navigateurs.
[*]Lance Spybot S&D, et va à l'onglet "vaccination" : clique sur "Vaccination" dans la colonne sur la gauche :
[*]Clique sur le bouton annuler (la flèche bleue qui part vers la gauche) pour annuler la vaccination.
[*]Confirme si demandé.
[*]Ferme Spybot.
3/. Désinstaller Spybo S&D :
[*]Faire la désinstallation classique via "Ajout/suppression de programmes" (qui se trouve dans le panneau de configuration) ou via l'outil équivalent que l'on trouve dans CCleaner.
--------
*Supprimer " startsear.ch " dans chrome :
* Ouvre chrome:
- Avec la "clé plate" ouvre les "Options".
- Descend à "Recherche" > Sur cette ligne tu dois avoir un nom de moteur de recherche > (par exemple google)(tu peux voir les moteurs dispos en cliquant sur le petit triangle)
- A côté tu as " gérer les moteurs de recherche" > clic dessus > tu as les moteurs qui apparaissent.
- Là tu dois trouver "startsear.ch"
- Clic sur la ligne > tu vois une croix tout à droite de la ligne > clic dessus > la ligne est supprimée.
- Tu peux revenir à "Recherche" et mettre google.
- Tu peux fermer chrome.
-------
* Ouvrir ZHPFix.(Clic droit exécuter en tant qu'administrateur pour Vista/W 7) par le raccourci
installé en même temps que ZHPDiag et MBRCheck ou par l'icône ZHPFix du ZHPDiag.
[*] copier le contenu du lien ci-dessous >
https://www.cjoint.com/?AKbqNqsvqX8
[*]Par clic sur le H le rapport se met dans la fenêtre blanche qui devient jaune quand le script apparait dans la fenêtre .
[*] Clic en bas sur OK . (ligne(s) présentée(s) maintenant avec un petit carré à gauche
[*] Clic sur Tous. (ligne(s) présentée(s) maintenant avec le petit carré coché
[*] Clic sur Nettoyer. (ligne(s) cochée(s) supprimée(s). Le rapport de suppression s'ouvre dans la fenêtre.
Copier/coller le texte dans ta réponse.
Tu peux fermer ZHPFix. Les rapports se trouvent dans le dossier programme.
TUTO >
http://www.premiumorange.com/zeb-help-process/zhpfix.html
-------
* /!\ P2P installés = DANGERS INFECTIONS DIVERSES /!\
-------
* Copier/coller un autre rapport de ZHPDiag
-------
;)
* Tu as Antivir et Norton security Internet. /!\ Il faut n'en garder qu'un. /!\
---------
* Les logiciels d'émulation de CD comme Daemon Tools peuvent gêner les outils de désinfection. Utilise Defogger pour les désactiver temporairement :
* Télécharge Defogger sur ton Bureau.
http://www.jpshortstuff.247fixes.com/Defogger.exe
* Lance le
* Une fenêtre apparait : clique sur "Disable"
* Fais redémarrer l'ordinateur si l'outil te le demande
* Quand nous aurons terminé la désinfection, tu pourras réactiver ces logiciels en relançant Defogger et en cliquant sur "Re-enable".
----------
* Spybot est obsolète, peut ralentir la navigation et gêner la désinfection.
Effectue ceci pour une désinstallation totale et propre de Spybot S&D :
1/. Désactiver Tea Timer si activé :
[*]Lancer Spybot
[*]Cliquer sur Mode, puis cocher Mode avancé
[*]Cliquer sur Outils puis sur Résident
[*]Décocher la case Résident "Tea Timer"
2/. Retirer la vaccination de Spybot :
[*] Ferme tes navigateurs.
[*]Lance Spybot S&D, et va à l'onglet "vaccination" : clique sur "Vaccination" dans la colonne sur la gauche :
[*]Clique sur le bouton annuler (la flèche bleue qui part vers la gauche) pour annuler la vaccination.
[*]Confirme si demandé.
[*]Ferme Spybot.
3/. Désinstaller Spybo S&D :
[*]Faire la désinstallation classique via "Ajout/suppression de programmes" (qui se trouve dans le panneau de configuration) ou via l'outil équivalent que l'on trouve dans CCleaner.
--------
*Supprimer " startsear.ch " dans chrome :
* Ouvre chrome:
- Avec la "clé plate" ouvre les "Options".
- Descend à "Recherche" > Sur cette ligne tu dois avoir un nom de moteur de recherche > (par exemple google)(tu peux voir les moteurs dispos en cliquant sur le petit triangle)
- A côté tu as " gérer les moteurs de recherche" > clic dessus > tu as les moteurs qui apparaissent.
- Là tu dois trouver "startsear.ch"
- Clic sur la ligne > tu vois une croix tout à droite de la ligne > clic dessus > la ligne est supprimée.
- Tu peux revenir à "Recherche" et mettre google.
- Tu peux fermer chrome.
-------
* Ouvrir ZHPFix.(Clic droit exécuter en tant qu'administrateur pour Vista/W 7) par le raccourci
installé en même temps que ZHPDiag et MBRCheck ou par l'icône ZHPFix du ZHPDiag.
[*] copier le contenu du lien ci-dessous >
https://www.cjoint.com/?AKbqNqsvqX8
[*]Par clic sur le H le rapport se met dans la fenêtre blanche qui devient jaune quand le script apparait dans la fenêtre .
[*] Clic en bas sur OK . (ligne(s) présentée(s) maintenant avec un petit carré à gauche
[*] Clic sur Tous. (ligne(s) présentée(s) maintenant avec le petit carré coché
[*] Clic sur Nettoyer. (ligne(s) cochée(s) supprimée(s). Le rapport de suppression s'ouvre dans la fenêtre.
Copier/coller le texte dans ta réponse.
Tu peux fermer ZHPFix. Les rapports se trouvent dans le dossier programme.
TUTO >
http://www.premiumorange.com/zeb-help-process/zhpfix.html
-------
* /!\ P2P installés = DANGERS INFECTIONS DIVERSES /!\
-------
* Copier/coller un autre rapport de ZHPDiag
-------
;)
zeroberto79
Messages postés
17
Date d'inscription
dimanche 30 octobre 2011
Statut
Membre
Dernière intervention
3 novembre 2011
1 nov. 2011 à 17:15
1 nov. 2011 à 17:15
Je n'utilise plus norton mais je n'arrive pas à le supprimer, peux-tu m'aider stp ?
Bleuet'
Messages postés
579
Date d'inscription
dimanche 16 octobre 2011
Statut
Membre
Dernière intervention
12 octobre 2018
32
1 nov. 2011 à 19:25
1 nov. 2011 à 19:25
Avec ce lien d'outils norton de désinstallation >
https://www.commentcamarche.net/faq/2453-supprimer-desinstaller-norton-antivirus-norton-internet-security
https://www.commentcamarche.net/faq/2453-supprimer-desinstaller-norton-antivirus-norton-internet-security
zeroberto79
Messages postés
17
Date d'inscription
dimanche 30 octobre 2011
Statut
Membre
Dernière intervention
3 novembre 2011
2 nov. 2011 à 00:09
2 nov. 2011 à 00:09
re,
Rapport de ZHPFix 1.12.3366 par Nicolas Coolman, Update du 26/10/2011
Fichier d'export Registre :
Run by Sélim at 02/11/2011 00:05:31
Windows Vista Home Basic Edition, 32-bit Service Pack 2 (Build 6002)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
========== Logiciel(s) ==========
ABSENT Software Key: BetClic Poker.fr
========== Clé(s) du Registre ==========
ABSENT Key: HKCU\Software\StartSearch
ABSENT CLSID MPSK: {3ce55e81-124b-11df-83e0-0007cb0000ff}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4a99-B4B6-146BF802613B}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4a99-B4B6-146BF802613B}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{97F2FF5B-260C-4ccf-834A-2DDA4E29E39E}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4ccf-834A-2DDA4E29E39E}
ABSENT CLSID MPSK: {a02b429b-17bb-11df-be3e-0007cb0000ff}
ABSENT CLSID MPSK: {a02b42a3-17bb-11df-be3e-0007cb0000ff}
ABSENT Key: HKCU\Software\Casino
ABSENT Key: HKCU\Software\vShare.tv
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ef79f67a-6ad7-4715-a0f8-932fca442023}
========== Valeur(s) du Registre ==========
ABSENT TCP Query User{1515A406-14B5-4A5B-944E-70DCEA237B8C}C:/program files/freetvradio/freetvradio.exe
ABSENT UDP Query User{5484651F-43C2-459B-B95D-8B0C1C65FE35}C:/program files/freetvradio/freetvradio.exe
ABSENT TCP Query User{4C2B196F-9EDE-46C2-A54E-EC5DF030F828}C:/users/sélim/appdata/roaming/cacaoweb/cacaoweb.exe
ABSENT UDP Query User{192E3BA6-6C45-468B-AE79-6822ADA0C8A7}C:/users/sélim/appdata/roaming/cacaoweb/cacaoweb.exe
ABSENT TCP Query User{098024C8-C89E-4B42-8339-C40FBB1DF949}C:/users/sélim/appdata/roaming/cacaoweb/cacaoweb.exe
ABSENT UDP Query User{F5A103D3-BBD6-4A3C-A687-CA0C0EE02598}C:/users/sélim/appdata/roaming/cacaoweb/cacaoweb.exe
ABSENT AAKE KeyValue: C:\Users\Sélim\AppData\Roaming\cacaoweb\cacaoweb.exe
ABSENT URLSearchHook: {0fc85f5d-6207-4515-a490-45a549d285c0}
ABSENT URLSearchHook: {ef79f67a-6ad7-4715-a0f8-932fca442023}
========== Dossier(s) ==========
ABSENT C:\Program Files\BetClic Poker.fr
ABSENT C:\Program Files\ToolbarInstaller [HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}]
SUPPRIME Temporaires Windows: : 6
SUPPRIME Flash Cookies: 0
========== Fichier(s) ==========
ABSENT File: c:\users\sélim\appdata\roaming\mozilla\firefox\profiles\o0hf2ewt.default\searchplugins\startsear.xml
ABSENT Folder/File: c:\users\sélim\appdata\locallow\babylontoolbar
ABSENT File: c:\ad-report-scan[2].txt
ABSENT File: c:\ad-report-scan[1].txt
ABSENT File: c:\ad-report-clean[1].txt
ABSENT Folder/File: c:\users\sélim\appdata\roaming\mozilla\firefox\profiles\o0hf2ewt.default\user.js (.not file.)
ABSENT File: c:\users\sélim\desktop\run.lnk
SUPPRIME Temporaires Windows: : 6
SUPPRIME Flash Cookies: 0
========== Tache planifiée ==========
ABSENT Task: {8A81893A-02D3-40B6-953A-4C0224314153}
========== Récapitulatif ==========
14 : Clé(s) du Registre
9 : Valeur(s) du Registre
4 : Dossier(s)
9 : Fichier(s)
1 : Logiciel(s)
1 : Tache planifiée
End of clean in 00mn 01s
========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 01/11/2011 23:50:53 [4135]
C:\ZHP\ZHPFix[R2].txt - 01/11/2011 23:54:50 [3779]
C:\ZHP\ZHPFix[R3].txt - 02/11/2011 00:03:40 [3831]
C:\ZHP\ZHPFix[R4].txt - 02/11/2011 00:05:31 [3831]
Rapport de ZHPFix 1.12.3366 par Nicolas Coolman, Update du 26/10/2011
Fichier d'export Registre :
Run by Sélim at 02/11/2011 00:05:31
Windows Vista Home Basic Edition, 32-bit Service Pack 2 (Build 6002)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
========== Logiciel(s) ==========
ABSENT Software Key: BetClic Poker.fr
========== Clé(s) du Registre ==========
ABSENT Key: HKCU\Software\StartSearch
ABSENT CLSID MPSK: {3ce55e81-124b-11df-83e0-0007cb0000ff}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4a99-B4B6-146BF802613B}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4a99-B4B6-146BF802613B}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{97F2FF5B-260C-4ccf-834A-2DDA4E29E39E}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4ccf-834A-2DDA4E29E39E}
ABSENT CLSID MPSK: {a02b429b-17bb-11df-be3e-0007cb0000ff}
ABSENT CLSID MPSK: {a02b42a3-17bb-11df-be3e-0007cb0000ff}
ABSENT Key: HKCU\Software\Casino
ABSENT Key: HKCU\Software\vShare.tv
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ef79f67a-6ad7-4715-a0f8-932fca442023}
========== Valeur(s) du Registre ==========
ABSENT TCP Query User{1515A406-14B5-4A5B-944E-70DCEA237B8C}C:/program files/freetvradio/freetvradio.exe
ABSENT UDP Query User{5484651F-43C2-459B-B95D-8B0C1C65FE35}C:/program files/freetvradio/freetvradio.exe
ABSENT TCP Query User{4C2B196F-9EDE-46C2-A54E-EC5DF030F828}C:/users/sélim/appdata/roaming/cacaoweb/cacaoweb.exe
ABSENT UDP Query User{192E3BA6-6C45-468B-AE79-6822ADA0C8A7}C:/users/sélim/appdata/roaming/cacaoweb/cacaoweb.exe
ABSENT TCP Query User{098024C8-C89E-4B42-8339-C40FBB1DF949}C:/users/sélim/appdata/roaming/cacaoweb/cacaoweb.exe
ABSENT UDP Query User{F5A103D3-BBD6-4A3C-A687-CA0C0EE02598}C:/users/sélim/appdata/roaming/cacaoweb/cacaoweb.exe
ABSENT AAKE KeyValue: C:\Users\Sélim\AppData\Roaming\cacaoweb\cacaoweb.exe
ABSENT URLSearchHook: {0fc85f5d-6207-4515-a490-45a549d285c0}
ABSENT URLSearchHook: {ef79f67a-6ad7-4715-a0f8-932fca442023}
========== Dossier(s) ==========
ABSENT C:\Program Files\BetClic Poker.fr
ABSENT C:\Program Files\ToolbarInstaller [HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}]
SUPPRIME Temporaires Windows: : 6
SUPPRIME Flash Cookies: 0
========== Fichier(s) ==========
ABSENT File: c:\users\sélim\appdata\roaming\mozilla\firefox\profiles\o0hf2ewt.default\searchplugins\startsear.xml
ABSENT Folder/File: c:\users\sélim\appdata\locallow\babylontoolbar
ABSENT File: c:\ad-report-scan[2].txt
ABSENT File: c:\ad-report-scan[1].txt
ABSENT File: c:\ad-report-clean[1].txt
ABSENT Folder/File: c:\users\sélim\appdata\roaming\mozilla\firefox\profiles\o0hf2ewt.default\user.js (.not file.)
ABSENT File: c:\users\sélim\desktop\run.lnk
SUPPRIME Temporaires Windows: : 6
SUPPRIME Flash Cookies: 0
========== Tache planifiée ==========
ABSENT Task: {8A81893A-02D3-40B6-953A-4C0224314153}
========== Récapitulatif ==========
14 : Clé(s) du Registre
9 : Valeur(s) du Registre
4 : Dossier(s)
9 : Fichier(s)
1 : Logiciel(s)
1 : Tache planifiée
End of clean in 00mn 01s
========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 01/11/2011 23:50:53 [4135]
C:\ZHP\ZHPFix[R2].txt - 01/11/2011 23:54:50 [3779]
C:\ZHP\ZHPFix[R3].txt - 02/11/2011 00:03:40 [3831]
C:\ZHP\ZHPFix[R4].txt - 02/11/2011 00:05:31 [3831]
Bleuet'
Messages postés
579
Date d'inscription
dimanche 16 octobre 2011
Statut
Membre
Dernière intervention
12 octobre 2018
32
2 nov. 2011 à 09:10
2 nov. 2011 à 09:10
Salut,
* ok pour ce rapport.
* Vérifier ta mise à jour de Adobe reader >
Mise à jour soit:
par le logiciel par "aide" et "recherche de mise à jour"
soit par le site lui-même >
https://get2.adobe.com/fr/reader/otherversions/
* Vérifier java >
Pour effectuer la dernière mise à jour de JAVA:
[*]Télécharger JAVA sur cette page >
https://www.java.com/fr/download/
[*]/!\A l'installation bien décocher la case d'acceptation de la barre d'outils "Yahoo" (si proposée) et ensuite cliquer sur "suivant"./!\
[*]Puis par les "ajout/suppression de programmes" désinstaller toutes les versions de JAVA 6 inférieures à la version qui vient d'être installée.
* Autre souci ?
* Mettre un rapport ZHPDiag final avant de finaliser.
;)
* ok pour ce rapport.
* Vérifier ta mise à jour de Adobe reader >
Mise à jour soit:
par le logiciel par "aide" et "recherche de mise à jour"
soit par le site lui-même >
https://get2.adobe.com/fr/reader/otherversions/
* Vérifier java >
Pour effectuer la dernière mise à jour de JAVA:
[*]Télécharger JAVA sur cette page >
https://www.java.com/fr/download/
[*]/!\A l'installation bien décocher la case d'acceptation de la barre d'outils "Yahoo" (si proposée) et ensuite cliquer sur "suivant"./!\
[*]Puis par les "ajout/suppression de programmes" désinstaller toutes les versions de JAVA 6 inférieures à la version qui vient d'être installée.
* Autre souci ?
* Mettre un rapport ZHPDiag final avant de finaliser.
;)
zeroberto79
Messages postés
17
Date d'inscription
dimanche 30 octobre 2011
Statut
Membre
Dernière intervention
3 novembre 2011
2 nov. 2011 à 13:19
2 nov. 2011 à 13:19
Rapport de ZHPDiag v1.28.2155 par Nicolas Coolman, Update du 28/10/2011
Run by Sélim at 02/11/2011 13:14:23
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
State : Version à jour.
---\\ Web Browser
MSIE: Internet Explorer v9.0.8112.16421
MFIE: Mozilla Firefox 7.0.1 v7.0.1 (Defaut)
GCIE: Google Chrome v15.0.874.106
OBIE: Safari v5.34.51.22
---\\ Windows Product Information
Windows Vista Home Basic Edition, 32-bit Service Pack 2 (Build 6002)
Windows Server License Manager Script : OK
~ Vista, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : KRDMH
Windows License : OK
Windows Automatic Updates : OK
---\\ System Information
~ Processor: x86 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3065 MB (63% free)
System Restore: Activé (Enable)
System drive C: has 28 GB (9%) free of 285 GB
---\\ Logged in mode
~ Computer Name: PC-DE-SÉLIM
~ User Name: Sélim
~ All Users Names: Sélim, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O82,O89
Logged in as Administrator
---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Sélim\AppData\Roaming\
~ %Desktop% : C:\Users\Sélim\Desktop\
~ %Favorites% : C:\Users\Sélim\Favorites\
~ %LocalAppData% : C:\Users\Sélim\AppData\Local\
~ %StartMenu% : C:\Users\Sélim\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\system32\
---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 28 Go of 285 Go)
D:\ CD-ROM drive (Not Inserted)
---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoStartMenuSubFolder: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoResolveSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoDispScrSavPage: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK
~ Scan Security Center in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.25/01/2010 - 07:27:36.) -- C:\Windows\Explorer.exe [2926592]
[MD5.4B555106290BD117334E9A08761C035A] - (....) (.02/11/2006 - 10:45:37.) -- C:\Windows\system32\rundll32.exe [44544]
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 - 03:33:13.) -- C:\Windows\system32\Wininit.exe [96768]
[MD5.D3788D91530CFA005BD516189A4C676E] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.23/10/2011 - 03:28:15.) -- C:\Windows\system32\wininet.dll [1126912]
[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.25/01/2010 - 07:28:13.) -- C:\Windows\system32\Winlogon.exe [314368]
[MD5.95F5FF73B076576C41740F1A842B9B57] - (....) (.21/01/2008 - 08:20:47.) -- C:\Windows\system32\fr-FR\user32.dll.mui [20480]
[MD5.3911B972B55FEA0478476B2E777B29FA] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.16/06/2011 - 14:58:27.) -- C:\Windows\system32\drivers\AFD.sys [273408]
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.25/01/2010 - 07:32:26.) -- C:\Windows\system32\drivers\atapi.sys [19944]
[MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.21/01/2008 - 03:33:23.) -- C:\Windows\system32\drivers\Cdfs.sys [70144]
[MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.25/01/2010 - 05:39:17.) -- C:\Windows\system32\drivers\Cdrom.sys [67072]
[MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.15/06/2011 - 15:59:03.) -- C:\Windows\system32\drivers\DfsC.sys [75264]
[MD5.062452B7FFD68C8C042A6261FE8DFF4A] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.25/01/2010 - 05:42:42.) -- C:\Windows\system32\drivers\HDAudBus.sys [561152]
[MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) (.21/01/2008 - 03:32:45.) -- C:\Windows\system32\drivers\i8042prt.sys [54784]
[MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.21/01/2008 - 03:34:06.) -- C:\Windows\system32\drivers\IpNat.sys [100864]
[MD5.1E94971C4B446AB2290DEB71D01CF0C2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/06/2011 - 14:24:40.) -- C:\Windows\system32\drivers\MRxSmb.sys [106496]
[MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) (.25/01/2010 - 05:45:37.) -- C:\Windows\system32\drivers\netBT.sys [185856]
[MD5.6A4A98CEE84CF9E99564510DDA4BAA47] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.25/01/2010 - 07:32:49.) -- C:\Windows\system32\drivers\ntfs.sys [1083880]
[MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) (.02/11/2006 - 09:51:30.) -- C:\Windows\system32\drivers\Parport.sys [79360]
[MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/01/2008 - 03:34:44.) -- C:\Windows\system32\drivers\Rasl2tp.sys [76288]
[MD5.FBC0BACD9C3D7F6956853F64A66E252D] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/01/2008 - 03:32:22.) -- C:\Windows\system32\drivers\rdpdr.sys [248832]
[MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) (.25/01/2010 - 05:45:22.) -- C:\Windows\system32\drivers\smb.sys [66560]
[MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) (.25/01/2010 - 05:45:56.) -- C:\Windows\system32\drivers\tdx.sys [72192]
~ Scan Generic Processes in 00mn 00s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/89
~ Mes musiques (My Musics) : 9/680
~ Mes Videos (My Videos) : 1/2
~ Mes Favoris (My Favorites) : 8/52
~ Mes Documents (My Documents) : 20/109
~ Mon Bureau (My Desktop) : 29/6553
~ Menu demarrer (Programs) : 6/34
~ Scan Hidden Files in 00mn 07s
---\\ Processus lancés
[MD5.6E1AC019C8FD1997BF5A17DA93627510] - (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [178712] [PID.2184]
[MD5.CB2B9EB1447D8A264E46948DF46C1212] - (.Packard Bell BV - SmpSys.exe.) -- C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe [1038136] [PID.2252]
[MD5.50F5E1205E8DCA4EE482198B30DB4206] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe [6294048] [PID.2288]
[MD5.E681281D9BFC9D45D3B72532717E5880] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [49152] [PID.2316]
[MD5.8C6BC84B3513BE42EC204FEE5FB29446] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [894512] [PID.2392]
[MD5.893C0CE7AD243FC4C9EF66A3EF449278] - (.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files\CyberLink\PowerCinema\PCMAgent.exe [143360] [PID.2532]
[MD5.550EA4A351D7E15F75A99185269BC906] - (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\CyberLink\PowerCinema\Kernel\CLML\CLMLSvc.exe [196608] [PID.2540]
[MD5.9D5E8B45BD348DF0882C69EED0E83111] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [281768] [PID.2684]
[MD5.D743372A621ED03A274539A88EEB3450] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [421736] [PID.2732]
[MD5.026423673B8563E9975BDA97ED6273C7] - (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [449608] [PID.2748]
[MD5.6E3245DF783E58375B3465F03274743E] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [254696] [PID.2764]
[MD5.BC9C9BE7BB74D629362608ACE470E7DA] - (.Microsoft Corporation - Notification de cadeaux MSN.) -- C:\Users\Sélim\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe [135680] [PID.2796]
[MD5.25CA1677AAA3CDC99CD4FCF940886F3C] - (.ATI Technologies Inc. - Catalyst Control Centre: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [49152] [PID.3180]
[MD5.4E5585800B561FBEF64B27425365A36F] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [924632] [PID.3508]
[MD5.83F4BA8B8CDA4F063AA2002955A508A9] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [16856] [PID.2804]
[MD5.9F323EEAFAD860204EAA0630E0A3D7F9] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [696320] [PID.2104]
[MD5.6080A176D09435FC8E6E800996656E18] - (.Microsoft Corporation - Console IME.) -- C:\Windows\system32\conime.exe [69120] [PID.3068]
[MD5.4604DB6D5ECA6362873CC3A76D2204BA] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\Windows\system32\Ati2evxx.exe [692224] [PID.]
[MD5.862BB4CBC05D80C5B45BE430E5EF872F] - (.Microsoft Corporation - Service de gestion des licences Microsoft.) -- C:\Windows\system32\SLsvc.exe [3408896] [PID.]
[MD5.A5BCBAF0477C4869B67E0195AEA4A9CD] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [136360] [PID.]
[MD5.E8FE4FCE23D2809BD88BCC1D0F8408CE] - (...) -- C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe [124832] [PID.]
[MD5.11A52CF7B265631DEEB24C6149309EFF] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [64952] [PID.]
[MD5.3CCE4AFA4AACDB28E01A148394212186] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [269480] [PID.]
[MD5.CDE000884FD7BAF0C1FDFE029B0891DE] - (.Avira GmbH - AntiVir shadow copy service.) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe [76968] [PID.]
[MD5.D8E18021F91AD79CA8491CB5A5DA22D4] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55144] [PID.]
[MD5.DB5BEA73EDAF19AC68B2C0FAD0F92B1A] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [390504] [PID.]
[MD5.23112102BC2A8FE44B8AC44A05BDF4C3] - (.Pas de propriétaire - Acer Empowering Technology Framework Servic.) -- C:\Program Files\Packard Bell\Packard Bell Recovery Management\Service\ETService.exe [24576] [PID.]
[MD5.CB686F44BF955EA02520710A56874FA4] - (.Intel Corporation - RAID Monitor.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [354840] [PID.]
[MD5.875E4E0661F3A5994DF9E5E3A0A4F96B] - (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) -- C:\Windows\system32\IoctlSvc.exe [81920] [PID.]
[MD5.33642C17C232AA272C68E446A2619899] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [821608] [PID.]
[MD5.94E920BE59B9AB65D95E582DBAA136AC] - (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [366152] [PID.]
~ Scan Processes Running in 00mn 00s
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Sélim\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] None
G0 - GCSP: Preference [User Data\Default][HomePage] https://www.google.fr/?gws_rd=ssl
~ Scan Google Browser in 00mn 00s
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\prefs.js
C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\user.js (.not file.)
M3 - MFPP: Plugins - [Sélim] -- C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\searchplugins\bing.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\googledesktop.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
M0 - MFSP: prefs.js [Sélim - o0hf2ewt.default] http://startsear.ch
M2 - MFEP: prefs.js [Sélim - o0hf2ewt.default\vinceturk@gmail.com] [] KwiClick v2.7.2.884 (.KwiClick, LLC.)
M2 - MFEP: prefs.js [Sélim - o0hf2ewt.default\{20a82645-c095-46ed-80e3-08825760534b}] [MicrosoftCG] Microsoft .NET Framework Assistant v1.2.1 (.Microsoft.)
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files\Mozilla Firefox\Plugins\np-mswmp.dll
P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.1.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll
P2 - FPN:Firefox Plugin Navigator . (.vShare.tv - vShare.tv plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npvsharetvplg.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_29 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60831.0.) -- c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3502.0922] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3508.1109] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@veetle.com/veetleCorePlugin,version=0.9.18] - (.Veetle Inc - Version 0.9.18, Copyright 2006-2009 Veetle Inc<br><a href="http://www..) -- C:\Program Files\Veetle\plugins\npVeetle.dll
P2 - FPN: [HKLM] [@veetle.com/veetlePlayerPlugin,version=0.9.18] - (.Veetle Inc - Version 0.9.18, copyright 2006-2010 Veetle Inc<br><a href="http://www..) -- C:\Program Files\Veetle\Player\npvlc.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=1.1.7] - (.the VideoLAN Team - Version 1.1.7, copyright 1996-2011 The VideoLAN Team<br><a href="http:.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.1.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
~ Scan Firefox Browser in 00mn 00s
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)) -- C:\Windows\system32\ieframe.dll
~ Scan IE Browser in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;*.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:9666
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s
---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\ezShellStart.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Scan Keys in 00mn 00s
---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Barre d'outils pour IE.) -- c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\3.1.415.1646\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
~ Scan BHO in 00mn 00s
---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Barre d'outils pour IE.) -- c:\program files\google\googletoolbar1.dll
~ Scan Toolbar in 00mn 00s
---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [SmpcSys] . (.Packard Bell BV - SmpSys.exe.) -- C:\Program Files\Packard Bell\SetupMyPC\SmpSys.exe
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe
O4 - HKLM\..\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PCMAgent] . (.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files\CyberLink\PowerCinema\PCMAgent.exe
O4 - HKLM\..\Run: [CLMLServer] . (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\CyberLink\PowerCinema\Kernel\CLML\CLMLSvc.exe
O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] . (.Apple Inc. - AppleSyncNotifier.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe
O4 - HKCU\..\Run: [SmpcSys] . (.Packard Bell BV - SmpSys.exe.) -- C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [Hide IP Platinum] C:\Program Files\Hide IP Platinum\hideippla.exe (.not file.)
O4 - HKCU\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] oobefldr.dll
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] oobefldr.dll
O4 - HKUS\S-1-5-21-3741062476-2126192684-2213182580-1000\..\Run: [SmpcSys] . (.Packard Bell BV - SmpSys.exe.) -- C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe
O4 - HKUS\S-1-5-21-3741062476-2126192684-2213182580-1000\..\Run: [Hide IP Platinum] C:\Program Files\Hide IP Platinum\hideippla.exe (.not file.)
O4 - HKUS\S-1-5-21-3741062476-2126192684-2213182580-1000\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe
~ Scan Application in 00mn 00s
---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Users\Sélim\Desktop\AD-R.lnk . (...) -- C:\Program Files\Ad-Remover\main.exe
O4 - Global Startup: C:\Users\Sélim\Desktop\Incoming - Raccourci.lnk . (...) -- C:\Users\Sélim\Downloads\eMule\Incoming
O4 - Global Startup: C:\Users\Sélim\Desktop\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Sélim\Desktop\OTL - Raccourci.lnk . (.OldTimer Tools.) -- C:\Users\Sélim\Downloads\OTL.exe
O4 - Global Startup: C:\Users\Sélim\Desktop\Play PKR.lnk . (.PKR Ltd.) -- C:\Program Files\PKR\pkr.exe
O4 - Global Startup: C:\Users\Sélim\Desktop\SopCast.lnk . (.www.sopcast.com.) -- C:\Program Files\SopCast\SopCast.exe
O4 - Global Startup: C:\Users\Sélim\Desktop\Téléchargement - Raccourci.lnk . (...) -- C:\Users\Sélim\Downloads
O4 - Global Startup: C:\Users\Sélim\Desktop\VirtualDJ Home FREE.lnk . (.Atomix Productions.) -- C:\Program Files\VirtualDJ\virtualdj_home.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk . (...) -- C:\Windows\Installer\{5E453519-60F6-4A4D-A0BF-16663F9B3536}\SafariIco.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\bwin Poker.lnk . (...) -- C:\bwinPoker\StartbwinPoker.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Samsung PC Studio 3.lnk . (...) -- C:\Program Files\Samsung\Samsung PC Studio 3\Launcher.exe
~ Scan Global Startup in 00mn 01s
---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe
~ Scan IE Menu Contextuel in 00mn 00s
---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} . (.Microsoft Corporation - Windows Live Messenger Companion core resources.) -- C:\Program Files\Windows Live\Companion\companion
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBro
O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: &Envoyer à OneNote - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO
~ Scan IE Extra Buttons in 00mn 00s
---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll
~ Scan Winsock in 00mn 00s
---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} (WRC Class) - http://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx
O16 - DPF: {D4003189-95B1-4A2F-9A87-F2B03665960D} (VodClient Control Class) - http://www.vexcast.com/download/vexcast.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
~ Scan Objets ActiveX in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{CB4A5545-23B8-467B-97E4-710D0D719845}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CCS\Services\Tcpip\..\{D03778D2-EEBE-46F6-A30E-98613A0AC1DF}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CCS\Services\Tcpip\..\{D98CCC19-CB2A-40E0-A567-281ED5F033AC}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{CB4A5545-23B8-467B-97E4-710D0D719845}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS1\Services\Tcpip\..\{D03778D2-EEBE-46F6-A30E-98613A0AC1DF}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS1\Services\Tcpip\..\{D98CCC19-CB2A-40E0-A567-281ED5F033AC}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{CB4A5545-23B8-467B-97E4-710D0D719845}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS3\Services\Tcpip\..\{D03778D2-EEBE-46F6-A30E-98613A0AC1DF}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS3\Services\Tcpip\..\{D98CCC19-CB2A-40E0-A567-281ED5F033AC}: DhcpNameServer = 192.168.1.1
~ Scan Domain in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll
O18 - Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
~ Scan Protocole Additionnel in 00mn 00s
---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll
~ Scan SSODL in 00mn 00s
---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll
~ Scan STS/SSO in 00mn 00s
---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) . (...) - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: (Ati External Event Utility) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Empowering Technology Service (ETService) . (.Pas de propriétaire - Acer Empowering Technology Framework Servic.) - C:\Program Files\Packard Bell\Packard Bell Recovery Management\Service\ETService.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) . (.Intel Corporation - RAID Monitor.) - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: PLFlash DeviceIoControl Service (PLFlash DeviceIoControl Service) . (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) - C:\Windows\system32\IoctlSvc.exe
O23 - Service: {49DE1C67-83F8-4102-99E0-C16DCC7EEC796} ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) . (.Cyberlink Corp. - FCL Driver.) - C:\Program Files\CyberLink\PlayMovie\000.fcl
~ Scan Services in 00mn 00s
---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe
~ Scan Desktop Component in 00mn 00s
---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.47C1DE0A890613FFCFF1D67648EEDF90] [APT] [Programme de mise ... jour en ligne de Adobe] (.Adobe Systems Incorporated.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
[MD5.4E5585800B561FBEF64B27425365A36F] [APT] [{29E07E35-5810-4CAA-A852-1EB627EECBBF}] (.Mozilla Corporation.) -- c:\program files\mozilla firefox\firefox.exe
[MD5.70B6D0C45256B688B7DBC10E922FB402] [APT] [{50644107-7E7D-41E0-91B0-90C5224DC581}] (.Skype Technologies S.A..) -- C:\Program Files\Skype\Phone\Skype.exe
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
~ Scan Scheduled Task in 00mn 03s
---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\Windows\system32\DRIVERS\avipbb.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\system32\Drivers\dfsc.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\system32\DRIVERS\i8042prt.sys
O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\system32\DRIVERS\kbdclass.sys
O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\system32\DRIVERS\kbdhid.sys
O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\system32\DRIVERS\mouclass.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\system32\DRIVERS\netbios.sys
O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\system32\DRIVERS\netbt.sys
O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\system32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\system32\DRIVERS\rasacd.sys
O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\DRIVERS\RDPCDD.sys
O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\system32\DRIVERS\smb.sys
O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\system32\DRIVERS\ssmdrv.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\system32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys
~ Scan Drivers in 00mn 00s
---\\ Logiciels installés (O42)
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Photoshop Elements 6.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Photoshop Elements 6
O42 - Logiciel: Adobe Premiere Elements 4.0 - (.Adobe Systems Incorporated.) [HKLM] -- PremElem40
O42 - Logiciel: Adobe Premiere Elements 4.0 - (.Adobe Systems Incorporated.) [HKLM] -- {3E2C691B-B7E6-4053-B5C3-94B8BC407E7A}
O42 - Logiciel: Adobe Premiere Elements 4.0 Templates - (.Adobe Systems Incorporated.) [HKLM] -- PremElem40Templates
O42 - Logiciel: Adobe Premiere Elements 4.0 Templates - (.Adobe Systems Incorporated.) [HKLM] -- {F85C7118-F3DC-4ED9-AB27-3E7931EA3D88}
O42 - Logiciel: Adobe Reader X (10.1.1) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {A83279FD-CA4B-4206-9535-90974DE76654}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {A00B9A50-3090-4CFF-9CDA-82DA0BEDAA21}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop
O42 - Logiciel: BitTorrent - (.BitTorrent, Inc.) [HKLM] -- BitTorrent
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B}
O42 - Logiciel: Canon MP550 series MP Drivers - (.Pas de propriétaire.) [HKLM] -- {1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP550_series
O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}
O42 - Logiciel: Contrôle ActiveX Windows Live Mesh pour connexions à distance - (.Microsoft Corporation.) [HKLM] -- {55D003F4-9599-44BF-BA9E-95D060730DD3}
O42 - Logiciel: CyberLink PowerCinema - (.CyberLink Corp..) [HKLM] -- InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}
O42 - Logiciel: CyberLink PowerCinema - (.CyberLink Corp..) [HKLM] -- {2637C347-9DAD-11D6-9EA2-00055D0CA761}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: EasyBits Magic Desktop - (.Pas de propriétaire.) [HKLM] -- EasyBits Magic Desktop
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {488F0347-C4A7-4374-91A7-30818BEDA710}
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
O42 - Logiciel: Google Desktop - (.Google.) [HKLM] -- Google Desktop
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {DBEA1034-5882-4A88-8033-81C4EF0CFA29}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Pas de propriétaire.) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: HDReg France - (.Acxiom.) [HKLM] -- {0ED40D2A-7131-4FE7-941E-5C329336F712}
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Intel(R) Matrix Storage Manager - (.Intel Corporation.) [HKLM] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}
O42 - Logiciel: Java(TM) 6 Update 29 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216029FF}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.2.1300 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E}
O42 - Logiciel: MetaBoli - (.Pas de propriétaire.) [HKLM] -- {709817E4-5439-4206-8738-796B34B623BD}
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_HOMESTUDENTR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office File Validation Add-In - (.Microsoft Corporation.) [HKLM] -- {90140000-2005-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Home and Student - (.Pas de propriétaire.) [HKLM] -- Office2007
O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- HOMESTUDENTR
O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Outlook Connector - (.Microsoft Corporation.) [HKLM] -- {95140000-007A-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_HOMESTUDENTR_{14809F99-C601-4D4A-9391-F1E8FAA964C5}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_HOMESTUDENTR_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}
O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 - (.Microsoft Corporation.) [HKLM] -- {86CE85E6-DBAC-3FFD-B977-E4B79F83C909}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F}
O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {0214A441-A4AB-43A8-8DEF-2F73C5364673}
O42 - Logiciel: Microsoft Works 9.0 SE - (.Pas de propriétaire.) [HKLM] -- Works9SE
O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}
O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra
O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack
O42 - Logiciel: Mozilla Firefox 7.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 7.0.1 (x86 fr)
O42 - Logiciel: Nero 8 Essentials - (.Nero AG.) [HKLM] -- {3559CDE0-11FC-4D7B-A65C-D646035B1036}
O42 - Logiciel: Notification de cadeaux MSN - (.Microsoft.) [HKCU] -- Notification de cadeaux MSN
O42 - Logiciel: O2Micro Flash Memory Card Reader Driver (x86) - (.O2Micro.) [HKLM] -- {940BF44D-005A-41ED-A625-9B767C71A586}
O42 - Logiciel: OGA Notifier 2.0.0048.0 - (.Microsoft Corporation.) [HKLM] -- {B2544A03-10D0-4E5E-BA69-0362FFC20D18}
O42 - Logiciel: PKR - (.PKR Ltd.) [HKLM] -- PKR
O42 - Logiciel: Packard Bell ImageWriter - (.Pas de propriétaire.) [HKLM] -- {F4EA67C9-6748-4C1E-9AFF-04149AC75D95}
O42 - Logiciel: Packard Bell Recovery Management - (.Acer Incorporated.) [HKLM] -- {7F811A54-5A09-4579-90E1-C93498E230D9}
O42 - Logiciel: Packard Bell Updator - (.Pas de propriétaire.) [HKLM] -- {CA786CFF-1D31-4804-B436-F3405B14357F}
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {C9E14402-3631-4182-B377-6B0DFB1C0339}
O42 - Logiciel: Realtek 8169 8168 8101E 8102E Ethernet Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: SAMSUNG Mobile Composite Device Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile Composite Device
O42 - Logiciel: SAMSUNG Mobile Modem Driver Set - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile Modem
O42 - Logiciel: S
Run by Sélim at 02/11/2011 13:14:23
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
State : Version à jour.
---\\ Web Browser
MSIE: Internet Explorer v9.0.8112.16421
MFIE: Mozilla Firefox 7.0.1 v7.0.1 (Defaut)
GCIE: Google Chrome v15.0.874.106
OBIE: Safari v5.34.51.22
---\\ Windows Product Information
Windows Vista Home Basic Edition, 32-bit Service Pack 2 (Build 6002)
Windows Server License Manager Script : OK
~ Vista, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : KRDMH
Windows License : OK
Windows Automatic Updates : OK
---\\ System Information
~ Processor: x86 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3065 MB (63% free)
System Restore: Activé (Enable)
System drive C: has 28 GB (9%) free of 285 GB
---\\ Logged in mode
~ Computer Name: PC-DE-SÉLIM
~ User Name: Sélim
~ All Users Names: Sélim, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O82,O89
Logged in as Administrator
---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Sélim\AppData\Roaming\
~ %Desktop% : C:\Users\Sélim\Desktop\
~ %Favorites% : C:\Users\Sélim\Favorites\
~ %LocalAppData% : C:\Users\Sélim\AppData\Local\
~ %StartMenu% : C:\Users\Sélim\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\system32\
---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 28 Go of 285 Go)
D:\ CD-ROM drive (Not Inserted)
---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoStartMenuSubFolder: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoResolveSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoDispScrSavPage: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK
~ Scan Security Center in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.25/01/2010 - 07:27:36.) -- C:\Windows\Explorer.exe [2926592]
[MD5.4B555106290BD117334E9A08761C035A] - (....) (.02/11/2006 - 10:45:37.) -- C:\Windows\system32\rundll32.exe [44544]
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 - 03:33:13.) -- C:\Windows\system32\Wininit.exe [96768]
[MD5.D3788D91530CFA005BD516189A4C676E] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.23/10/2011 - 03:28:15.) -- C:\Windows\system32\wininet.dll [1126912]
[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.25/01/2010 - 07:28:13.) -- C:\Windows\system32\Winlogon.exe [314368]
[MD5.95F5FF73B076576C41740F1A842B9B57] - (....) (.21/01/2008 - 08:20:47.) -- C:\Windows\system32\fr-FR\user32.dll.mui [20480]
[MD5.3911B972B55FEA0478476B2E777B29FA] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.16/06/2011 - 14:58:27.) -- C:\Windows\system32\drivers\AFD.sys [273408]
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.25/01/2010 - 07:32:26.) -- C:\Windows\system32\drivers\atapi.sys [19944]
[MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.21/01/2008 - 03:33:23.) -- C:\Windows\system32\drivers\Cdfs.sys [70144]
[MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.25/01/2010 - 05:39:17.) -- C:\Windows\system32\drivers\Cdrom.sys [67072]
[MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.15/06/2011 - 15:59:03.) -- C:\Windows\system32\drivers\DfsC.sys [75264]
[MD5.062452B7FFD68C8C042A6261FE8DFF4A] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.25/01/2010 - 05:42:42.) -- C:\Windows\system32\drivers\HDAudBus.sys [561152]
[MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) (.21/01/2008 - 03:32:45.) -- C:\Windows\system32\drivers\i8042prt.sys [54784]
[MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.21/01/2008 - 03:34:06.) -- C:\Windows\system32\drivers\IpNat.sys [100864]
[MD5.1E94971C4B446AB2290DEB71D01CF0C2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/06/2011 - 14:24:40.) -- C:\Windows\system32\drivers\MRxSmb.sys [106496]
[MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) (.25/01/2010 - 05:45:37.) -- C:\Windows\system32\drivers\netBT.sys [185856]
[MD5.6A4A98CEE84CF9E99564510DDA4BAA47] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.25/01/2010 - 07:32:49.) -- C:\Windows\system32\drivers\ntfs.sys [1083880]
[MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) (.02/11/2006 - 09:51:30.) -- C:\Windows\system32\drivers\Parport.sys [79360]
[MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/01/2008 - 03:34:44.) -- C:\Windows\system32\drivers\Rasl2tp.sys [76288]
[MD5.FBC0BACD9C3D7F6956853F64A66E252D] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/01/2008 - 03:32:22.) -- C:\Windows\system32\drivers\rdpdr.sys [248832]
[MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) (.25/01/2010 - 05:45:22.) -- C:\Windows\system32\drivers\smb.sys [66560]
[MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) (.25/01/2010 - 05:45:56.) -- C:\Windows\system32\drivers\tdx.sys [72192]
~ Scan Generic Processes in 00mn 00s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/89
~ Mes musiques (My Musics) : 9/680
~ Mes Videos (My Videos) : 1/2
~ Mes Favoris (My Favorites) : 8/52
~ Mes Documents (My Documents) : 20/109
~ Mon Bureau (My Desktop) : 29/6553
~ Menu demarrer (Programs) : 6/34
~ Scan Hidden Files in 00mn 07s
---\\ Processus lancés
[MD5.6E1AC019C8FD1997BF5A17DA93627510] - (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [178712] [PID.2184]
[MD5.CB2B9EB1447D8A264E46948DF46C1212] - (.Packard Bell BV - SmpSys.exe.) -- C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe [1038136] [PID.2252]
[MD5.50F5E1205E8DCA4EE482198B30DB4206] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe [6294048] [PID.2288]
[MD5.E681281D9BFC9D45D3B72532717E5880] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [49152] [PID.2316]
[MD5.8C6BC84B3513BE42EC204FEE5FB29446] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [894512] [PID.2392]
[MD5.893C0CE7AD243FC4C9EF66A3EF449278] - (.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files\CyberLink\PowerCinema\PCMAgent.exe [143360] [PID.2532]
[MD5.550EA4A351D7E15F75A99185269BC906] - (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\CyberLink\PowerCinema\Kernel\CLML\CLMLSvc.exe [196608] [PID.2540]
[MD5.9D5E8B45BD348DF0882C69EED0E83111] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [281768] [PID.2684]
[MD5.D743372A621ED03A274539A88EEB3450] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [421736] [PID.2732]
[MD5.026423673B8563E9975BDA97ED6273C7] - (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [449608] [PID.2748]
[MD5.6E3245DF783E58375B3465F03274743E] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [254696] [PID.2764]
[MD5.BC9C9BE7BB74D629362608ACE470E7DA] - (.Microsoft Corporation - Notification de cadeaux MSN.) -- C:\Users\Sélim\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe [135680] [PID.2796]
[MD5.25CA1677AAA3CDC99CD4FCF940886F3C] - (.ATI Technologies Inc. - Catalyst Control Centre: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [49152] [PID.3180]
[MD5.4E5585800B561FBEF64B27425365A36F] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [924632] [PID.3508]
[MD5.83F4BA8B8CDA4F063AA2002955A508A9] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [16856] [PID.2804]
[MD5.9F323EEAFAD860204EAA0630E0A3D7F9] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [696320] [PID.2104]
[MD5.6080A176D09435FC8E6E800996656E18] - (.Microsoft Corporation - Console IME.) -- C:\Windows\system32\conime.exe [69120] [PID.3068]
[MD5.4604DB6D5ECA6362873CC3A76D2204BA] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\Windows\system32\Ati2evxx.exe [692224] [PID.]
[MD5.862BB4CBC05D80C5B45BE430E5EF872F] - (.Microsoft Corporation - Service de gestion des licences Microsoft.) -- C:\Windows\system32\SLsvc.exe [3408896] [PID.]
[MD5.A5BCBAF0477C4869B67E0195AEA4A9CD] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [136360] [PID.]
[MD5.E8FE4FCE23D2809BD88BCC1D0F8408CE] - (...) -- C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe [124832] [PID.]
[MD5.11A52CF7B265631DEEB24C6149309EFF] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [64952] [PID.]
[MD5.3CCE4AFA4AACDB28E01A148394212186] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [269480] [PID.]
[MD5.CDE000884FD7BAF0C1FDFE029B0891DE] - (.Avira GmbH - AntiVir shadow copy service.) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe [76968] [PID.]
[MD5.D8E18021F91AD79CA8491CB5A5DA22D4] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55144] [PID.]
[MD5.DB5BEA73EDAF19AC68B2C0FAD0F92B1A] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [390504] [PID.]
[MD5.23112102BC2A8FE44B8AC44A05BDF4C3] - (.Pas de propriétaire - Acer Empowering Technology Framework Servic.) -- C:\Program Files\Packard Bell\Packard Bell Recovery Management\Service\ETService.exe [24576] [PID.]
[MD5.CB686F44BF955EA02520710A56874FA4] - (.Intel Corporation - RAID Monitor.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [354840] [PID.]
[MD5.875E4E0661F3A5994DF9E5E3A0A4F96B] - (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) -- C:\Windows\system32\IoctlSvc.exe [81920] [PID.]
[MD5.33642C17C232AA272C68E446A2619899] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [821608] [PID.]
[MD5.94E920BE59B9AB65D95E582DBAA136AC] - (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [366152] [PID.]
~ Scan Processes Running in 00mn 00s
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Sélim\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] None
G0 - GCSP: Preference [User Data\Default][HomePage] https://www.google.fr/?gws_rd=ssl
~ Scan Google Browser in 00mn 00s
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\prefs.js
C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\user.js (.not file.)
M3 - MFPP: Plugins - [Sélim] -- C:\Users\Sélim\AppData\Roaming\Mozilla\Firefox\Profiles\o0hf2ewt.default\searchplugins\bing.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\googledesktop.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [Sélim] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
M0 - MFSP: prefs.js [Sélim - o0hf2ewt.default] http://startsear.ch
M2 - MFEP: prefs.js [Sélim - o0hf2ewt.default\vinceturk@gmail.com] [] KwiClick v2.7.2.884 (.KwiClick, LLC.)
M2 - MFEP: prefs.js [Sélim - o0hf2ewt.default\{20a82645-c095-46ed-80e3-08825760534b}] [MicrosoftCG] Microsoft .NET Framework Assistant v1.2.1 (.Microsoft.)
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files\Mozilla Firefox\Plugins\np-mswmp.dll
P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.1.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll
P2 - FPN:Firefox Plugin Navigator . (.vShare.tv - vShare.tv plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npvsharetvplg.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_29 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60831.0.) -- c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3502.0922] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3508.1109] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@veetle.com/veetleCorePlugin,version=0.9.18] - (.Veetle Inc - Version 0.9.18, Copyright 2006-2009 Veetle Inc<br><a href="http://www..) -- C:\Program Files\Veetle\plugins\npVeetle.dll
P2 - FPN: [HKLM] [@veetle.com/veetlePlayerPlugin,version=0.9.18] - (.Veetle Inc - Version 0.9.18, copyright 2006-2010 Veetle Inc<br><a href="http://www..) -- C:\Program Files\Veetle\Player\npvlc.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=1.1.7] - (.the VideoLAN Team - Version 1.1.7, copyright 1996-2011 The VideoLAN Team<br><a href="http:.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.1.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
~ Scan Firefox Browser in 00mn 00s
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)) -- C:\Windows\system32\ieframe.dll
~ Scan IE Browser in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;*.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:9666
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s
---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\ezShellStart.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Scan Keys in 00mn 00s
---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Barre d'outils pour IE.) -- c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\3.1.415.1646\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
~ Scan BHO in 00mn 00s
---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Barre d'outils pour IE.) -- c:\program files\google\googletoolbar1.dll
~ Scan Toolbar in 00mn 00s
---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [SmpcSys] . (.Packard Bell BV - SmpSys.exe.) -- C:\Program Files\Packard Bell\SetupMyPC\SmpSys.exe
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe
O4 - HKLM\..\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PCMAgent] . (.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files\CyberLink\PowerCinema\PCMAgent.exe
O4 - HKLM\..\Run: [CLMLServer] . (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\CyberLink\PowerCinema\Kernel\CLML\CLMLSvc.exe
O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] . (.Apple Inc. - AppleSyncNotifier.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe
O4 - HKCU\..\Run: [SmpcSys] . (.Packard Bell BV - SmpSys.exe.) -- C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [Hide IP Platinum] C:\Program Files\Hide IP Platinum\hideippla.exe (.not file.)
O4 - HKCU\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] oobefldr.dll
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] oobefldr.dll
O4 - HKUS\S-1-5-21-3741062476-2126192684-2213182580-1000\..\Run: [SmpcSys] . (.Packard Bell BV - SmpSys.exe.) -- C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe
O4 - HKUS\S-1-5-21-3741062476-2126192684-2213182580-1000\..\Run: [Hide IP Platinum] C:\Program Files\Hide IP Platinum\hideippla.exe (.not file.)
O4 - HKUS\S-1-5-21-3741062476-2126192684-2213182580-1000\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe
~ Scan Application in 00mn 00s
---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Users\Sélim\Desktop\AD-R.lnk . (...) -- C:\Program Files\Ad-Remover\main.exe
O4 - Global Startup: C:\Users\Sélim\Desktop\Incoming - Raccourci.lnk . (...) -- C:\Users\Sélim\Downloads\eMule\Incoming
O4 - Global Startup: C:\Users\Sélim\Desktop\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Sélim\Desktop\OTL - Raccourci.lnk . (.OldTimer Tools.) -- C:\Users\Sélim\Downloads\OTL.exe
O4 - Global Startup: C:\Users\Sélim\Desktop\Play PKR.lnk . (.PKR Ltd.) -- C:\Program Files\PKR\pkr.exe
O4 - Global Startup: C:\Users\Sélim\Desktop\SopCast.lnk . (.www.sopcast.com.) -- C:\Program Files\SopCast\SopCast.exe
O4 - Global Startup: C:\Users\Sélim\Desktop\Téléchargement - Raccourci.lnk . (...) -- C:\Users\Sélim\Downloads
O4 - Global Startup: C:\Users\Sélim\Desktop\VirtualDJ Home FREE.lnk . (.Atomix Productions.) -- C:\Program Files\VirtualDJ\virtualdj_home.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk . (...) -- C:\Windows\Installer\{5E453519-60F6-4A4D-A0BF-16663F9B3536}\SafariIco.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\bwin Poker.lnk . (...) -- C:\bwinPoker\StartbwinPoker.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Users\Sélim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Samsung PC Studio 3.lnk . (...) -- C:\Program Files\Samsung\Samsung PC Studio 3\Launcher.exe
~ Scan Global Startup in 00mn 01s
---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe
~ Scan IE Menu Contextuel in 00mn 00s
---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} . (.Microsoft Corporation - Windows Live Messenger Companion core resources.) -- C:\Program Files\Windows Live\Companion\companion
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBro
O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: &Envoyer à OneNote - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO
~ Scan IE Extra Buttons in 00mn 00s
---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll
~ Scan Winsock in 00mn 00s
---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} (WRC Class) - http://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx
O16 - DPF: {D4003189-95B1-4A2F-9A87-F2B03665960D} (VodClient Control Class) - http://www.vexcast.com/download/vexcast.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
~ Scan Objets ActiveX in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{CB4A5545-23B8-467B-97E4-710D0D719845}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CCS\Services\Tcpip\..\{D03778D2-EEBE-46F6-A30E-98613A0AC1DF}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CCS\Services\Tcpip\..\{D98CCC19-CB2A-40E0-A567-281ED5F033AC}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{CB4A5545-23B8-467B-97E4-710D0D719845}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS1\Services\Tcpip\..\{D03778D2-EEBE-46F6-A30E-98613A0AC1DF}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS1\Services\Tcpip\..\{D98CCC19-CB2A-40E0-A567-281ED5F033AC}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{CB4A5545-23B8-467B-97E4-710D0D719845}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS3\Services\Tcpip\..\{D03778D2-EEBE-46F6-A30E-98613A0AC1DF}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS3\Services\Tcpip\..\{D98CCC19-CB2A-40E0-A567-281ED5F033AC}: DhcpNameServer = 192.168.1.1
~ Scan Domain in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll
O18 - Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
~ Scan Protocole Additionnel in 00mn 00s
---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll
~ Scan SSODL in 00mn 00s
---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll
~ Scan STS/SSO in 00mn 00s
---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) . (...) - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: (Ati External Event Utility) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Empowering Technology Service (ETService) . (.Pas de propriétaire - Acer Empowering Technology Framework Servic.) - C:\Program Files\Packard Bell\Packard Bell Recovery Management\Service\ETService.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) . (.Intel Corporation - RAID Monitor.) - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: PLFlash DeviceIoControl Service (PLFlash DeviceIoControl Service) . (.Prolific Technology Inc. - PLFlash DeviceIoControl Service.) - C:\Windows\system32\IoctlSvc.exe
O23 - Service: {49DE1C67-83F8-4102-99E0-C16DCC7EEC796} ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) . (.Cyberlink Corp. - FCL Driver.) - C:\Program Files\CyberLink\PlayMovie\000.fcl
~ Scan Services in 00mn 00s
---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe
~ Scan Desktop Component in 00mn 00s
---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.47C1DE0A890613FFCFF1D67648EEDF90] [APT] [Programme de mise ... jour en ligne de Adobe] (.Adobe Systems Incorporated.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
[MD5.4E5585800B561FBEF64B27425365A36F] [APT] [{29E07E35-5810-4CAA-A852-1EB627EECBBF}] (.Mozilla Corporation.) -- c:\program files\mozilla firefox\firefox.exe
[MD5.70B6D0C45256B688B7DBC10E922FB402] [APT] [{50644107-7E7D-41E0-91B0-90C5224DC581}] (.Skype Technologies S.A..) -- C:\Program Files\Skype\Phone\Skype.exe
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
~ Scan Scheduled Task in 00mn 03s
---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\Windows\system32\DRIVERS\avipbb.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\system32\Drivers\dfsc.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\system32\DRIVERS\i8042prt.sys
O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\system32\DRIVERS\kbdclass.sys
O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\system32\DRIVERS\kbdhid.sys
O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\system32\DRIVERS\mouclass.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\system32\DRIVERS\netbios.sys
O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\system32\DRIVERS\netbt.sys
O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\system32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\system32\DRIVERS\rasacd.sys
O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\DRIVERS\RDPCDD.sys
O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\system32\DRIVERS\smb.sys
O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\system32\DRIVERS\ssmdrv.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\system32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys
~ Scan Drivers in 00mn 00s
---\\ Logiciels installés (O42)
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Photoshop Elements 6.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Photoshop Elements 6
O42 - Logiciel: Adobe Premiere Elements 4.0 - (.Adobe Systems Incorporated.) [HKLM] -- PremElem40
O42 - Logiciel: Adobe Premiere Elements 4.0 - (.Adobe Systems Incorporated.) [HKLM] -- {3E2C691B-B7E6-4053-B5C3-94B8BC407E7A}
O42 - Logiciel: Adobe Premiere Elements 4.0 Templates - (.Adobe Systems Incorporated.) [HKLM] -- PremElem40Templates
O42 - Logiciel: Adobe Premiere Elements 4.0 Templates - (.Adobe Systems Incorporated.) [HKLM] -- {F85C7118-F3DC-4ED9-AB27-3E7931EA3D88}
O42 - Logiciel: Adobe Reader X (10.1.1) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {A83279FD-CA4B-4206-9535-90974DE76654}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {A00B9A50-3090-4CFF-9CDA-82DA0BEDAA21}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop
O42 - Logiciel: BitTorrent - (.BitTorrent, Inc.) [HKLM] -- BitTorrent
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B}
O42 - Logiciel: Canon MP550 series MP Drivers - (.Pas de propriétaire.) [HKLM] -- {1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP550_series
O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}
O42 - Logiciel: Contrôle ActiveX Windows Live Mesh pour connexions à distance - (.Microsoft Corporation.) [HKLM] -- {55D003F4-9599-44BF-BA9E-95D060730DD3}
O42 - Logiciel: CyberLink PowerCinema - (.CyberLink Corp..) [HKLM] -- InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}
O42 - Logiciel: CyberLink PowerCinema - (.CyberLink Corp..) [HKLM] -- {2637C347-9DAD-11D6-9EA2-00055D0CA761}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: EasyBits Magic Desktop - (.Pas de propriétaire.) [HKLM] -- EasyBits Magic Desktop
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {488F0347-C4A7-4374-91A7-30818BEDA710}
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
O42 - Logiciel: Google Desktop - (.Google.) [HKLM] -- Google Desktop
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {DBEA1034-5882-4A88-8033-81C4EF0CFA29}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Pas de propriétaire.) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: HDReg France - (.Acxiom.) [HKLM] -- {0ED40D2A-7131-4FE7-941E-5C329336F712}
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Intel(R) Matrix Storage Manager - (.Intel Corporation.) [HKLM] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}
O42 - Logiciel: Java(TM) 6 Update 29 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216029FF}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.2.1300 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E}
O42 - Logiciel: MetaBoli - (.Pas de propriétaire.) [HKLM] -- {709817E4-5439-4206-8738-796B34B623BD}
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_HOMESTUDENTR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office File Validation Add-In - (.Microsoft Corporation.) [HKLM] -- {90140000-2005-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Home and Student - (.Pas de propriétaire.) [HKLM] -- Office2007
O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- HOMESTUDENTR
O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Outlook Connector - (.Microsoft Corporation.) [HKLM] -- {95140000-007A-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_HOMESTUDENTR_{14809F99-C601-4D4A-9391-F1E8FAA964C5}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_HOMESTUDENTR_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}
O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 - (.Microsoft Corporation.) [HKLM] -- {86CE85E6-DBAC-3FFD-B977-E4B79F83C909}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F}
O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {0214A441-A4AB-43A8-8DEF-2F73C5364673}
O42 - Logiciel: Microsoft Works 9.0 SE - (.Pas de propriétaire.) [HKLM] -- Works9SE
O42 - Logiciel: Module de compatibilité pour Microsoft Office System 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0020-040C-0000-0000000FF1CE}
O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra
O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack
O42 - Logiciel: Mozilla Firefox 7.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 7.0.1 (x86 fr)
O42 - Logiciel: Nero 8 Essentials - (.Nero AG.) [HKLM] -- {3559CDE0-11FC-4D7B-A65C-D646035B1036}
O42 - Logiciel: Notification de cadeaux MSN - (.Microsoft.) [HKCU] -- Notification de cadeaux MSN
O42 - Logiciel: O2Micro Flash Memory Card Reader Driver (x86) - (.O2Micro.) [HKLM] -- {940BF44D-005A-41ED-A625-9B767C71A586}
O42 - Logiciel: OGA Notifier 2.0.0048.0 - (.Microsoft Corporation.) [HKLM] -- {B2544A03-10D0-4E5E-BA69-0362FFC20D18}
O42 - Logiciel: PKR - (.PKR Ltd.) [HKLM] -- PKR
O42 - Logiciel: Packard Bell ImageWriter - (.Pas de propriétaire.) [HKLM] -- {F4EA67C9-6748-4C1E-9AFF-04149AC75D95}
O42 - Logiciel: Packard Bell Recovery Management - (.Acer Incorporated.) [HKLM] -- {7F811A54-5A09-4579-90E1-C93498E230D9}
O42 - Logiciel: Packard Bell Updator - (.Pas de propriétaire.) [HKLM] -- {CA786CFF-1D31-4804-B436-F3405B14357F}
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {C9E14402-3631-4182-B377-6B0DFB1C0339}
O42 - Logiciel: Realtek 8169 8168 8101E 8102E Ethernet Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: SAMSUNG Mobile Composite Device Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile Composite Device
O42 - Logiciel: SAMSUNG Mobile Modem Driver Set - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile Modem
O42 - Logiciel: S
Bleuet'
Messages postés
579
Date d'inscription
dimanche 16 octobre 2011
Statut
Membre
Dernière intervention
12 octobre 2018
32
2 nov. 2011 à 14:09
2 nov. 2011 à 14:09
Le rapport ZHPDiag est incomplet.
Ce sont des rapports très longs => les transmettre par lien hébergeur >
https://www.cjoint.com/
;)
Ce sont des rapports très longs => les transmettre par lien hébergeur >
https://www.cjoint.com/
;)
zeroberto79
Messages postés
17
Date d'inscription
dimanche 30 octobre 2011
Statut
Membre
Dernière intervention
3 novembre 2011
2 nov. 2011 à 14:59
2 nov. 2011 à 14:59
Bleuet'
Messages postés
579
Date d'inscription
dimanche 16 octobre 2011
Statut
Membre
Dernière intervention
12 octobre 2018
32
2 nov. 2011 à 19:16
2 nov. 2011 à 19:16
Salut,
* Ouvrir ZHPFix et faire ceci >
(Clic droit exécuter en tant qu'administrateur pour Vista/W 7)
[*] copier le contenu du lien ci-dessous >
https://www.cjoint.com/?AKctpJypgq5
[*]Par clic sur le H le rapport se met dans la fenêtre blanche qui devient jaune quand le script apparait dans la fenêtre .
[*] Clic en bas sur OK . (ligne(s) présentée(s) maintenant avec un petit carré à gauche
[*] Clic sur Tous. (ligne(s) présentée(s) maintenant avec le petit carré coché
[*] Clic sur Nettoyer. (ligne(s) cochée(s) supprimée(s). Le rapport de suppression s'ouvre dans la fenêtre.
Copier/coller le texte dans ta réponse.
Tu peux fermer ZHPFix. Les rapports se trouvent dans le dossier programme.
TUTO >
http://www.premiumorange.com/zeb-help-process/zhpfix.html
---------
* Tu pourras refaire un rapport ZHPDiag final et copier/coller aussi son rapport.
--------
* Ouvrir ZHPFix et faire ceci >
(Clic droit exécuter en tant qu'administrateur pour Vista/W 7)
[*] copier le contenu du lien ci-dessous >
https://www.cjoint.com/?AKctpJypgq5
[*]Par clic sur le H le rapport se met dans la fenêtre blanche qui devient jaune quand le script apparait dans la fenêtre .
[*] Clic en bas sur OK . (ligne(s) présentée(s) maintenant avec un petit carré à gauche
[*] Clic sur Tous. (ligne(s) présentée(s) maintenant avec le petit carré coché
[*] Clic sur Nettoyer. (ligne(s) cochée(s) supprimée(s). Le rapport de suppression s'ouvre dans la fenêtre.
Copier/coller le texte dans ta réponse.
Tu peux fermer ZHPFix. Les rapports se trouvent dans le dossier programme.
TUTO >
http://www.premiumorange.com/zeb-help-process/zhpfix.html
---------
* Tu pourras refaire un rapport ZHPDiag final et copier/coller aussi son rapport.
--------
zeroberto79
Messages postés
17
Date d'inscription
dimanche 30 octobre 2011
Statut
Membre
Dernière intervention
3 novembre 2011
2 nov. 2011 à 19:26
2 nov. 2011 à 19:26
Re Bleuet,
voila le rapport,
Rapport de ZHPFix 1.12.3366 par Nicolas Coolman, Update du 26/10/2011
Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-02-11-2011-19-22-12.txt
Run by Sélim at 02/11/2011 19:22:12
Windows Vista Home Basic Edition, 32-bit Service Pack 2 (Build 6002)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
========== Clé(s) du Registre ==========
SUPPRIME Key: SearchScopes :{9D5BD211-422C-4164-9298-BB4186A30F31}
SUPPRIME Key: HKCU\Software\vShare.tv
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
========== Valeur(s) du Registre ==========
SUPPRIME {E0F071AB-4895-4010-A210-4A166D12EB1B}
SUPPRIME {DFBAA70F-8905-44B0-B60D-00869F85DF2E}
========== Préférences navigateur ==========
ABSENT Mozilla Pref:
========== Dossier(s) ==========
SUPPRIME Folder: C:\Program Files\ToolbarInstaller
SUPPRIME Folder: C:\Program Files\Spybot - Search & Destroy
SUPPRIME Folder: C:\ProgramData\Spybot - Search & Destroy
SUPPRIME Folder: C:\Users\Sélim\AppData\Local\{44B1BC13-6DCC-4E05-BEF4-9C013F2BECB1}
SUPPRIME Folder: C:\Users\Sélim\AppData\Local\{628A964F-1DF1-41F7-8E3E-FF4A513000F7}
SUPPRIME Folder: C:\Users\Sélim\AppData\Local\{814BF90F-759D-449D-B81A-4CFFD0541A84}
SUPPRIME Temporaires Windows: : 83
SUPPRIME Flash Cookies: 0
========== Fichier(s) ==========
ABSENT Folder/File: c:\users\sélim\appdata\roaming\mozilla\firefox\profiles\o0hf2ewt.default\user.js (.not file.)
SUPPRIME Temporaires Windows: : 19
SUPPRIME Flash Cookies: 0
========== Récapitulatif ==========
3 : Clé(s) du Registre
2 : Valeur(s) du Registre
8 : Dossier(s)
3 : Fichier(s)
1 : Préférences navigateur
End of clean in 00mn 02s
========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 01/11/2011 23:50:53 [4135]
C:\ZHP\ZHPFix[R2].txt - 01/11/2011 23:54:50 [3779]
C:\ZHP\ZHPFix[R3].txt - 02/11/2011 00:03:40 [3831]
C:\ZHP\ZHPFix[R4].txt - 02/11/2011 00:05:31 [3883]
C:\ZHP\ZHPFix[R5].txt - 02/11/2011 19:22:12 [1946]
voila le rapport,
Rapport de ZHPFix 1.12.3366 par Nicolas Coolman, Update du 26/10/2011
Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-02-11-2011-19-22-12.txt
Run by Sélim at 02/11/2011 19:22:12
Windows Vista Home Basic Edition, 32-bit Service Pack 2 (Build 6002)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
========== Clé(s) du Registre ==========
SUPPRIME Key: SearchScopes :{9D5BD211-422C-4164-9298-BB4186A30F31}
SUPPRIME Key: HKCU\Software\vShare.tv
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
========== Valeur(s) du Registre ==========
SUPPRIME {E0F071AB-4895-4010-A210-4A166D12EB1B}
SUPPRIME {DFBAA70F-8905-44B0-B60D-00869F85DF2E}
========== Préférences navigateur ==========
ABSENT Mozilla Pref:
========== Dossier(s) ==========
SUPPRIME Folder: C:\Program Files\ToolbarInstaller
SUPPRIME Folder: C:\Program Files\Spybot - Search & Destroy
SUPPRIME Folder: C:\ProgramData\Spybot - Search & Destroy
SUPPRIME Folder: C:\Users\Sélim\AppData\Local\{44B1BC13-6DCC-4E05-BEF4-9C013F2BECB1}
SUPPRIME Folder: C:\Users\Sélim\AppData\Local\{628A964F-1DF1-41F7-8E3E-FF4A513000F7}
SUPPRIME Folder: C:\Users\Sélim\AppData\Local\{814BF90F-759D-449D-B81A-4CFFD0541A84}
SUPPRIME Temporaires Windows: : 83
SUPPRIME Flash Cookies: 0
========== Fichier(s) ==========
ABSENT Folder/File: c:\users\sélim\appdata\roaming\mozilla\firefox\profiles\o0hf2ewt.default\user.js (.not file.)
SUPPRIME Temporaires Windows: : 19
SUPPRIME Flash Cookies: 0
========== Récapitulatif ==========
3 : Clé(s) du Registre
2 : Valeur(s) du Registre
8 : Dossier(s)
3 : Fichier(s)
1 : Préférences navigateur
End of clean in 00mn 02s
========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 01/11/2011 23:50:53 [4135]
C:\ZHP\ZHPFix[R2].txt - 01/11/2011 23:54:50 [3779]
C:\ZHP\ZHPFix[R3].txt - 02/11/2011 00:03:40 [3831]
C:\ZHP\ZHPFix[R4].txt - 02/11/2011 00:05:31 [3883]
C:\ZHP\ZHPFix[R5].txt - 02/11/2011 19:22:12 [1946]
zeroberto79
Messages postés
17
Date d'inscription
dimanche 30 octobre 2011
Statut
Membre
Dernière intervention
3 novembre 2011
2 nov. 2011 à 19:32
2 nov. 2011 à 19:32
et voila le rapport ZHPDiag
https://www.cjoint.com/?AKctEdaYDwQ
https://www.cjoint.com/?AKctEdaYDwQ