Analyse PC (gros temps de réponse)Fermé

Question

Bonjour, 

J'ai entre mes mains un ordi qui n'est utilisé qu'a vocation mail/net/word. Pourtant, même s'il est sous vista (troll), il tourne terriblement lentement. Je voudrais faire une scan complet de la machine.

Puisse un helper me donner du réconfort :)

Cordialement,
Plow

Configuration: Windows 7 / Firefox 8.0

Utilisateur anonyme · Answer

Bonjour 

On va faire une analyse de ton systéme.  


* Télécharge ZHPDiag  ( de Nicolas coolman ).  
ou 
ZHPDiag  
ou
https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

Ou le lien FTP en secours :
ftp://zebulon.fr/ZHPDiag2.exe 

                                                  *********************** 
/!\Utilisateurs de Vista et Windows 7 : Clique droit sur le logo de ZHPDiag.exe, " exécuter en tant qu'Administrateur /!\  
* Laisse toi guider lors de l'installation  
* Il se lancera automatiquement à la fin de l'installation  
* Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)  
* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette  
* Héberge le rapport ZHPDiag.txt sur le site pjjoint.malekal.com ou cijoint.fr ou toofiles  puis copie/colle le lien fournit dans ta prochaine réponse sur le forum

Plow · Answer

Rapport de ZHPDiag v1.28.302 par Nicolas Coolman, Update du 25/12/2011
Run by Riberry at 28/12/2011 14:21:13
Web site :  http://www.premiumorange.com/zeb-help-process/zhpdiag.html
State : Problème connexion internet


---\ Web Browser
MSIE: Internet Explorer v7.0.6001.18000
MFIE: Mozilla Firefox 5.0 v5.0 (Defaut)

---\ Windows Product Information
~ Langage: Français
Windows Vista Home Premium Edition, 32-bit Service Pack 1 (Build 6001)
Windows Server License Manager Script : OK
~ Vista, OEM_COA_NSLP channel
Windows ID Activation : OK
~ Windows Partial Key : 3WJKF
Windows License : OK
Windows Automatic Updates : OK

---\ System Information
~ Processor: x86 Family 15 Model 76 Stepping 2, AuthenticAMD
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 894 MB (14% free)
System Restore: Activé (Enable)
System drive C: has 68 GB (60%) free of 112 GB

---\ Logged in mode
~ Computer Name: PC-DE-RIBERRY
~ User Name: Riberry
~ All Users Names: Riberry, Administrateur, 
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Riberry\AppData\Roaming\
~ %Desktop% : C:\Users\Riberry\Desktop\
~ %Favorites% : C:\Users\Riberry\Favorites\
~ %LocalAppData% : C:\Users\Riberry\AppData\Local\
~ %StartMenu% : C:\Users\Riberry\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\system32\

---\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 68 Go of 112 Go)
D:\ CD-ROM drive (Not Inserted)



---\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyComputer: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc :  OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  OK
~ Scan Security Center in 00mn 00s



---\ Recherche particulière de fichiers génériques
[MD5.4F554999D7D5F05DAAEBBA7B5BA1089D] - (.Microsoft Corporation - Explorateur Windows.) (.30/11/2009 - 10:40:22.) -- C:\Windows\Explorer.exe [2927104]
[MD5.4B555106290BD117334E9A08761C035A] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) (.02/11/2006 - 10:45:37.) -- C:\Windows\system32undll32.exe [44544]
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.25/01/2010 - 08:33:37.) -- C:\Windows\system32\Wininit.exe [96768]
[MD5.DA5A72211661C7F162B332FEA4F09A69] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.21/06/2011 - 16:00:34.) -- C:\Windows\system32\wininet.dll [833024]
[MD5.C2610B6BDBEFC053BBDAB4F1B965CB24] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.25/01/2010 - 08:33:37.) -- C:\Windows\system32\Winlogon.exe [314880]
[MD5.95F5FF73B076576C41740F1A842B9B57] - (.Microsoft Corporation - DLL client de l'API uilisateur de Windows multi-utilisateurs.) (.25/01/2010 - 08:34:10.) -- C:\Windows\system32\fr-FR\user32.dll.mui [20480]
[MD5.48EB99503533C27AC6135648E5474457] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.21/06/2011 - 14:16:42.) -- C:\Windows\system32\drivers\AFD.sys [273408]
[MD5.2D9C903DC76A66813D350A562DE40ED9] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.25/01/2010 - 08:41:30.) -- C:\Windows\system32\drivers\atapi.sys [21560]
[MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.25/01/2010 - 06:28:02.) -- C:\Windows\system32\drivers\Cdfs.sys [70144]
[MD5.1EC25CEA0DE6AC4718BF89F9E1778B57] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.25/01/2010 - 06:49:51.) -- C:\Windows\system32\drivers\Cdrom.sys [67072]
[MD5.A3E9FA213F443AC77C7746119D13FEEC] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/06/2011 - 15:24:14.) -- C:\Windows\system32\drivers\DfsC.sys [75264]
[MD5.C87B1EE051C0464491C1A7B03FA0BC99] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.25/01/2010 - 05:30:49.) -- C:\Windows\system32\drivers\HDAudBus.sys [53760]
[MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) (.25/01/2010 - 06:49:18.) -- C:\Windows\system32\drivers\i8042prt.sys [54784]
[MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.25/01/2010 - 06:56:28.) -- C:\Windows\system32\drivers\IpNat.sys [100864]
[MD5.5734A0F2BE7E495F7D3ED6EFD4B9F5A1] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.21/06/2011 - 13:49:35.) -- C:\Windows\system32\drivers\MRxSmb.sys [105984]
[MD5.7C5FEE5B1C5728507CD96FB4A13E7A02] - (.Microsoft Corporation - MBT Transport driver.) (.25/01/2010 - 06:55:35.) -- C:\Windows\system32\drivers
etBT.sys [184320]
[MD5.B4EFFE29EB4F15538FD8A9681108492D] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.25/01/2010 - 08:43:40.) -- C:\Windows\system32\drivers
tfs.sys [1081912]
[MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) (.02/11/2006 - 09:51:30.) -- C:\Windows\system32\drivers\Parport.sys [79360]
[MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.25/01/2010 - 06:56:34.) -- C:\Windows\system32\drivers\Rasl2tp.sys [76288]
[MD5.E8BD98D46F2ED77132BA927FCCB47D8B] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.02/11/2006 - 10:03:00.) -- C:\Windows\system32\driversdpdr.sys [242688]
[MD5.031E6BCD53C9B2B9ACE111EAFEC347B6] - (.Microsoft Corporation - SMB Transport driver.) (.25/01/2010 - 06:55:27.) -- C:\Windows\system32\drivers\smb.sys [66560]
[MD5.D09276B1FAB033CE1D40DCBDF303D10F] - (.Microsoft Corporation - TDI Translation Driver.) (.25/01/2010 - 06:55:58.) -- C:\Windows\system32\drivers	dx.sys [71680]
[MD5.D8B4A53DD2769F226B3EB374374987C9] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.25/01/2010 - 08:42:48.) -- C:\Windows\system32\drivers\volsnap.sys [227896]
~ Scan Generic Processes in 00mn 01s



---\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 5/2379
~ Mes musiques (My Musics) : 7/21
~ Mes Videos (My Videos) : 1/2
~ Mes Favoris (My Favorites) : 2/24
~ Mes Documents (My Documents) : 1/103
~ Mon Bureau (My Desktop) : 7/2598
~ Menu demarrer (Programs) : 6/25
~ Scan Hidden Files in 00mn 05s



---\ Processus lancés
[MD5.0D392EDE3B97E0B3131B2F63EF1DB94E] - (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe   [1008184] [PID.2024]
[MD5.916B09138B35CBC306D71509E21330BA] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe   [815104] [PID.200]
[MD5.FA076AE9916A801CAD714DA2B983506D] - (.ASUSTeK Computer INC. - DMedia.) -- C:\Program Files\ASUS\ATK Media\DMedia.exe   [61440] [PID.208]
[MD5.A086B1BDCCA45A5D346187B14BE3D7BC] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe   [4317184] [PID.280]
[MD5.47C1DE0A890613FFCFF1D67648EEDF90] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe   [937920] [PID.556]
[MD5.E7CF222185411C6A3E68273C452B3283] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe   [3493720] [PID.632]
[MD5.BF08674925F151BD4537B89A493E3E0C] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe   [125952] [PID.612]
[MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe   [39408] [PID.]
[MD5.0F4195B9B348DE5CF9B822F81704B20E] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\Windows\ehome\ehmsas.exe   [37376] [PID.1564]
[MD5.DB355FFC5B3AC92591C7D7478C629A52] - (.Pas de propriétaire - ALU.) -- C:\Program Files\ASUS\ASUS Live Update\ALU.exe   [45424] [PID.2152]
[MD5.86651DBA0CDEAA47D91703ED62409682] - (.TuneUp Software - TuneUp Utilities.) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe   [486216] [PID.3632]
[MD5.6C9CD3ECBA6732661C8BBE37A877A2BD] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe   [924632] [PID.3776]
[MD5.7E6EA9CB72B5DE84A5D700BED877E5F9] - (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe   [397312] [PID.3568]
[MD5.62BB79160F86CD962F312C68C6239BFD] - (.Microsoft Corporation - Windows Update.) -- C:\Windows\system32\wuauclt.exe   [53472] [PID.5956]
[MD5.D24E93C39012E67CDA141BF8716E0FBF] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe   [712704] [PID.5248]
[MD5.F96EBC5A624349D81DCC7600A3C5DC43] - (.Microsoft Corporation - Console IME.) -- C:\Windows\system32\conime.exe   [69120] [PID.4104]
[MD5.0BA91E1358AD25236863039BB2609A2E] - (.Microsoft Corporation - Service de gestion des licences Microsoft.) -- C:\Windows\system32\SLsvc.exe   [2623488] [PID.]
[MD5.A31B68E0DF98D20B23338D6478D4DC9E] - (.Pas de propriétaire - ASLDR Service.) -- C:\Program Files\ATK Hotkey\ASLDRSrv.exe   [90112] [PID.]
[MD5.D16C826F375A44802BF317982E81A7E2] - (.AVAST Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe   [42184] [PID.]
[MD5.0C6326E8F52930296A67AFDE42F0D3F2] - (.ATK0100 - HControl.) -- C:\Program Files\ATK Hotkey\Hcontrol.exe   [225280] [PID.]
[MD5.01E173D7356633C1241C3906B51439A4] - (.Pas de propriétaire - ATKOSD2.) -- C:\Program Files\ATKOSD2\ATKOSD2.exe   [7708672] [PID.]
[MD5.59B24A9DAF3B716C7425520CA25EDCA0] - (.Pas de propriétaire - Wireless Console 2.) -- C:\Program Files\Wireless Console 2\wcourier.exe   [1036288] [PID.]
[MD5.A2AF212A05C97DA62C54156067D2F0C7] - (.ATK - Power4Gear eXtreme.) -- C:\Program Files\P4G\BatteryLife.exe   [135168] [PID.]
[MD5.C91C148EAAEF35EE679FA26FDE89F248] - (.ATK - ACMON.) -- C:\Program Files\ASUS\Splendid\ACMON.exe   [843776] [PID.]
[MD5.A391896CD406E6377F5CEF31FDC12019] - (.ASUSTeK - ACEngSvr Module.) -- C:\Windows\System32\ACEngSvr.exe   [155648] [PID.]
[MD5.16DEF7EBCB7BB73A55F7486C6D42E288] - (.Pas de propriétaire - ATKOSD.) -- C:\Program Files\ATK Hotkey\ATKOSD.exe   [2420736] [PID.]
[MD5.D1E30EEA74ED4C65A72AFDE5B6FA36EE] - (.Pas de propriétaire - spmgr Module.) -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe   [123248] [PID.]
[MD5.7F0ABDF07C58C57918DE14085DD36342] - (.Syntek America Inc. - Syntek Hardware Snapshot Launch Application.) -- C:\Windows\System32\StkCSrv.exe   [24576] [PID.]
[MD5.2A96C8FA665C02E6AD596C321B583112] - (.TeamViewer GmbH - TeamViewer Service.) -- C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe   [173352] [PID.]
[MD5.1E49634AEBD55ABCC2D29960F82B3524] - (.TuneUp Software - TuneUp Utilities Service.) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe   [1021256] [PID.]
[MD5.28DC5D626E036A75A572556F0A6EB1F6] - (.Conexant Systems, Inc. - Modem Audio Service.) -- C:\Windows\system32\DRIVERS\xaudio.exe   [386560] [PID.]
[MD5.A1545B731579895D8CC44FC0481C1192] - (.Microsoft Corporation - Service de la passerelle de la couche Appli.) -- C:\Windows\System32\alg.exe   [59392] [PID.]
~ Scan Processes Running in 00mn 03s



---\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Users\Riberry\AppData\Roaming\Mozilla\Firefox\Profiles\o99z65lt.default\prefs.js
C:\Users\Riberry\AppData\Roaming\Mozilla\Firefox\Profiles\o99z65lt.default\user.js
M3 - MFPP: Plugins - [Riberry] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [Riberry] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [Riberry] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [Riberry] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [Riberry] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [Riberry] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [Riberry] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
M0 - MFSP: prefs.js [Riberry - o99z65lt.default] http://www.google.fr
M2 - MFEP: prefs.js [Riberry - o99z65lt.default\{20a82645-c095-46ed-80e3-08825760534b}] [MicrosoftCG] Microsoft .NET Framework Assistant v1.1 (.Microsoft.)
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Mozilla Firefox\Plugins
ppdf32.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\System32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79
pGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79
pGoogleUpdate3.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Adobe\Reader 9.0\Reader\AIR
ppdf32.dll
~ Scan Firefox Browser in 00mn 00s



---\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (7.00.6000.16386 (vista_rtm.061101-2205)) -- C:\Windows\System32\ieframe.dll
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 1
~ Scan IE Browser in 00mn 00s



---\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Scan Keys in 00mn 00s



---\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s



---\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Aide à la navigation SFR - {0F6E720A-1A6B-40E1-A294-1D4D19F156C8} . (.SFR - Aide à la navigation SFR.) -- C:\Program Files\SFR\Kit\SFRNavErrorHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.7.7018.1622\swg.dll
~ Scan BHO in 00mn 00s



---\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
~ Scan Toolbar in 00mn 00s



---\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe 
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe 
O4 - HKLM\..\Run: [ATKMEDIA] . (.ASUSTeK Computer INC. - DMedia.) -- C:\Program Files\ASUS\ATK Media\DMedia.exe 
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe 
O4 - HKLM\..\Run: [NvSvc] . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 97.54.) -- C:\Windows\System32
vsvc.dll 
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\Windows\System32
vcpl.dll 
O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\Windows\System32
vmctray.dll 
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe 
O4 - HKLM\..\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe 
O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe 
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe 
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter]  oobefldr.dll 
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe 
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter]  oobefldr.dll 
O4 - HKUS\S-1-5-21-2634018850-1074822669-2983443787-1000\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe 
O4 - HKUS\S-1-5-21-2634018850-1074822669-2983443787-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 
~ Scan Application in 00mn 00s



---\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\Riberry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Riberry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Windows Mail\WinMail.exe
O4 - Global Startup: C:\Users\Riberry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Users\Riberry\Desktop\Courrier EMAIL.lnk - Clé orpheline
O4 - Global Startup: C:\Users\Riberry\Desktop\Documents.lnk . (...)  -- C:\Users\Riberry\Documents
O4 - Global Startup: C:\Users\Riberry\Desktop\infos codes DANY.lnk . (...)  -- C:\Users\Riberry\Documents\infos codes DANY.txt
O4 - Global Startup: C:\Users\Riberry\Desktop\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Riberry\Desktop\INTERNET Maxthon.lnk . (.Maxthon International ltd..)  -- C:\Program Files\Maxthon2\Maxthon.exe
O4 - Global Startup: C:\Users\Riberry\Desktop\Lecteur dvd.lnk . (.Microsoft Corporation.)  -- C:\Windows\ehome\ehshell.exe
O4 - Global Startup: C:\Users\Riberry\Desktop\Microsoft Office Excel 2003.lnk . (...)  -- C:\Windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe
O4 - Global Startup: C:\Users\Riberry\Desktop\Microsoft Office Word 2003.lnk . (...)  -- C:\Windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe
O4 - Global Startup: C:\Users\Riberry\Desktop\Musique.lnk . (...)  -- C:\Users\Riberry\Music
O4 - Global Startup: C:\Users\Riberry\Desktop\Windows Explorer.lnk . (.Microsoft Corporation.)  -- C:\Windows\explorer.exe
O4 - Global Startup: C:\Users\Riberry\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Riberry\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Maxthon2.lnk . (.Maxthon International ltd..)  -- C:\Program Files\Maxthon2\Maxthon.exe
O4 - Global Startup: C:\Users\Riberry\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox (2).lnk . (.Mozilla Corporation.)  -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Users\Riberry\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.)  -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Users\Riberry\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Windows Media Player\wmplayer.exe
~ Scan Global Startup in 00mn 00s



---\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico
O9 - Extra button: Skype add-on for Internet Explorer - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\OFFICE11\REFBARH.ICO
~ Scan IE Extra Buttons in 00mn 00s



---\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\System32
laapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\System32\NapiNSP.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\System32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\System32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\System32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\System32\winrnr.dll
~ Scan Winsock in 00mn 00s



---\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
~ Scan Objets ActiveX in 00mn 00s



---\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{611023D6-061F-4540-9ED3-E0EA4B73880B}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{FC6F01D5-C739-4F94-96A2-9B37024F0DEF}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{611023D6-061F-4540-9ED3-E0EA4B73880B}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CS1\Services\Tcpip\..\{FC6F01D5-C739-4F94-96A2-9B37024F0DEF}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{611023D6-061F-4540-9ED3-E0EA4B73880B}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{FC6F01D5-C739-4F94-96A2-9B37024F0DEF}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{611023D6-061F-4540-9ED3-E0EA4B73880B}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{FC6F01D5-C739-4F94-96A2-9B37024F0DEF}: DhcpNameServer = 192.168.1.1
~ Scan Domain in 00mn 00s



---\ Protocole additionnel (O18)
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} . (.Microsoft Corporation - Microsoft Office XP Web Components.) -- C:\Program Files\Common Files\microsoft shared\Web Components\10\OWC10.dll
O18 - Handler: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} . (.Microsoft Corporation - Microsoft Office Web Components 2003.) -- C:\Program Files\Common Files\microsoft shared\Web Components\11\OWC11.dll
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\Program Files\Common Files\Skype\Skype4COM.dll
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE11\MSOXMLMF.dll
~ Scan Protocole Additionnel in 00mn 00s



---\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll
~ Scan SSODL in 00mn 00s



---\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll
~ Scan STS/SSO in 00mn 00s



---\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: ASLDR Service (ASLDRService) . (.Pas de propriétaire - ASLDR Service.) - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service:  (gpsvc) - Clé orpheline
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: spmgr (spmgr) . (.Pas de propriétaire - spmgr Module.) - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: Syntek AVStream USB2.0 WebCam Service (StkSSrv) . (.Syntek America Inc. - Syntek Hardware Snapshot Launch Application.) - C:\Windows\system32\StkCSrv.exe
O23 - Service: TeamViewer 5 (TeamViewer5) . (.TeamViewer GmbH - TeamViewer Service.) - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) . (.TuneUp Software - TuneUp Utilities Service.) - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
O23 - Service: XAudioService (XAudioService) . (.Conexant Systems, Inc. - Modem Audio Service.) - C:\Windows\system32\DRIVERS\xaudio.exe
~ Scan Services in 00mn 00s



---\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)
~ Scan Desktop Component in 00mn 00s



---\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s



---\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[MD5.DB355FFC5B3AC92591C7D7478C629A52] [APT] [ASUS Live Update] (...) -- C:\Program Files\ASUS\ASUS Live Update\ALU.exe
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.3E8626D8FB928F560B5DE8B9A31B6463] [APT] [Recherche de problSmes automatique] (.TuneUp Software.) -- C:\Program Files\TuneUp Utilities 2010\TuneUpSystemStatusCheck.exe
[MD5.61FF36573FD809FD3555D3F78872666D] [APT] [TuneUpUtilities_Task_BkGndMaintenance] (.TuneUp Software.) -- C:\Program Files\TuneUp Utilities 2010\OneClick.exe
[MD5.70B6D0C45256B688B7DBC10E922FB402] [APT] [{6FC9E935-F4F0-47EA-AA19-D2BEADDE0E98}] (.Skype Technologies S.A..) -- C:\Program Files\Skype\Phone\Skype.exe
~ Scan Scheduled Task in 00mn 04s



---\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media de Microsoft.) -- C:\Windows\system32\unregmp2.exe
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\system32\ie4uinit.exe
O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d'IEAK.) -- C:\Windows\system32\iedkcs32.dll
O40 - ASIC: Microsoft Windows Media Player 11.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Windows Media Player.) -- C:\Windows\system32\wmp.dll
O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\system32\ie4uinit.exe
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11CF-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.1 r53.) -- C:\Windows\System32\Macromed\Flash\Flash10h.ocx
~ Scan Active Setup in 00mn 00s



---\ Pilotes lancés au démarrage (O41)
O41 - Driver:  (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver:  (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\system32\Drivers\dfsc.sys
O41 - Driver:  (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\system32\DRIVERS\i8042prt.sys
O41 - Driver:  (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\system32\DRIVERS\kbdclass.sys
O41 - Driver:  (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\system32\DRIVERS\kbdhid.sys
O41 - Driver:  (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\system32\DRIVERS\mouclass.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\system32\DRIVERS
etbios.sys
O41 - Driver:  (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\system32\DRIVERS
etbt.sys
O41 - Driver:  (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\system32\drivers
siproxy.sys
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
O41 - Driver:  (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\system32\DRIVERSasacd.sys
O41 - Driver:  (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\system32\DRIVERSdbss.sys
O41 - Driver:  (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\DRIVERS\RDPCDD.sys
O41 - Driver:  (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\driversdpencdd.sys
O41 - Driver: C:\Windows\system32	cpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\system32\DRIVERS\smb.sys
O41 - Driver: C:\Windows\system32	cpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS	dx.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\system32\DRIVERS	ermdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver:  (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys
O41 - Driver:  (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\system32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\system32	cpipcfg.dll (Tcpip) . (.Microsoft Corporation - TCP/IP Driver.) - C:\Windows\system32\drivers	cpip.sys
~ Scan Drivers in 01mn 01s



---\ Logiciels installés (O42)
O42 - Logiciel: ASUS Live Update - (.ASUS.) [HKLM] -- {E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}
O42 - Logiciel: ASUS Splendid Video Enhancement Technology - (.ASUSTeK.) [HKLM] -- {C0FC1C14-4824-4A73-87A6-9E888C9C3102}
O42 - Logiciel: ATK Hotkey - (.ATK.) [HKLM] -- {3912D529-02BC-4CA8-B5ED-0D0C20EB6003}
O42 - Logiciel: ATK Media - (.Pas de propriétaire.) [HKLM] -- {139B0FFA-187E-4BA1-BCA6-6B56B2B6AB8C}
O42 - Logiciel: ATKOSD2 - (.ATK.) [HKLM] -- {5C1DB4ED-E9B4-402D-BB14-D75D97D6C1A6}
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader 9.4.5 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A94000000001}
O42 - Logiciel: Asus_Camera_ScreenSaver - (.ASUS.) [HKLM] -- Asus_Camera_ScreenSaver
O42 - Logiciel: Atheros Driver Installation Program - (.Atheros.) [HKLM] -- {28006915-2739-4EBE-B5E8-49B25D32EB33}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: HDAUDIO Soft Spkerphone Modem with SmartSP - (.Pas de propriétaire.) [HKLM] -- CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_10431126
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: LUMIX Simple Viewer - (.Panasonic.) [HKLM] -- {2CDCCE7E-55D5-40CC-AEA0-ABA54713501F}
O42 - Logiciel: LifeFrame2 - (.ASUS.) [HKLM] -- {1DBD1F12-ED93-49C0-A7CC-56CBDE488158}
O42 - Logiciel: Maxthon2 Browser (remove only) - (.Pas de propriétaire.) [HKLM] -- Maxthon2
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}
O42 - Logiciel: Microsoft Office Professional Edition 2003 - (.Microsoft Corporation.) [HKLM] -- {9011040C-6000-11D3-8CFE-0150048383C9}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra
O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack
O42 - Logiciel: Mozilla Firefox 5.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 5.0 (x86 fr)
O42 - Logiciel: NB Probe - (.Pas de propriétaire.) [HKLM] -- {6324A1EF-CEF4-43E3-8BCD-9EF3F67317FD}
O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) [HKLM] -- NVIDIA Drivers
O42 - Logiciel: PHOTOfunSTUDIO -viewer- - (.Panasonic.) [HKLM] -- {9A9DBEBC-C800-4776-A970-D76D6AA405B1}
O42 - Logiciel: Power4Gear eXtreme - (.ATK.) [HKLM] -- {8CFEBE9C-F29F-4C49-80E0-7106970F8734}
O42 - Logiciel: PowerForPhone - (.PowerForPhone.) [HKLM] -- {FC3D290D-79BE-44B7-ABF9-FDD110925930}
O42 - Logiciel: Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Remote Controller - (.ITE.) [HKLM] -- {2B802EBE-CDAD-477C-9AD4-069615D377EB}
O42 - Logiciel: SFR - Kit de connexion - (.SFR.) [HKLM] -- SFR_Kit
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2446708
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2478663
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2518870
O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2478663
O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2518870
O42 - Logiciel: Skype Toolbars - (.Skype Technologies S.A..) [HKLM] -- {981029E0-7FC9-4CF3-AB39-6F133621921A}
O42 - Logiciel: Skype(TM) 4.2 - (.Skype Technologies S.A..) [HKLM] -- {D103C4BA-F905-437A-8049-DB24763BBE36}
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics.) [HKLM] -- SynTPDeinstKey
O42 - Logiciel: TeamViewer 5 - (.TeamViewer GmbH.) [HKLM] -- TeamViewer 5
O42 - Logiciel: TuneUp Utilities - (.TuneUp Software.) [HKLM] -- TuneUp Utilities
O42 - Logiciel: USB2.0 1.3M WebCam - (.Pas de propriétaire.) [HKLM] -- USB2.0 1.3M WebCam
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
O42 - Logiciel: WinFlash - (.Pas de propriétaire.) [HKLM] -- {DE10AB76-4756-4913-BE25-55D1C1051F9A}
O42 - Logiciel: Wireless Console 2 - (.ATK.) [HKLM] -- {83F73CB1-7705-49D1-9852-84D839CA2A45}
O42 - Logiciel: avast! Free Antivirus - (.AVAST Software.) [HKLM] -- avast

---\ HKCU & HKLM Software Keys
[HKCU\Software\ALWIL Software]
[HKCU\Software\ASUS]
[HKCU\Software\ATK Media]
[HKCU\Software\ATK0100]
[HKCU\Software\AVAST Software]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Google]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Macromedia]
[HKCU\Software\Maxthon2]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Opendisc]
[HKCU\Software\Panasonic]
[HKCU\Software\Policies]
[HKCU\Software\Realtek]
[HKCU\Software\SimonTatham]
[HKCU\Software\Skype]
[HKCU\Software\Synaptics]
[HKCU\Software\TeamViewer]
[HKCU\Software\TuneUp]
[HKCU\Software\VB and VBA Program Settings]
[HKLM\Software\ALWIL Software]
[HKLM\Software\ASUSTeK]
[HKLM\Software\ASUS]
[HKLM\Software\ATK0100]
[HKLM\Software\ATK]
[HKLM\Software\AVAST Software]
[HKLM\Software\Adobe]
[HKLM\Software\AsLdr]
[HKLM\Software\Atheros]
[HKLM\Software\CXT]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Conexant Systems Inc  ]
[HKLM\Software\Conexant]
[HKLM\Software\EPSON]
[HKLM\Software\Google]
[HKLM\Software\ITE]
[HKLM\Software\ImInstaller]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\KasperskyLab]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\Neuf]
[HKLM\Software\ODBC]
[HKLM\Software\Panasonic]
[HKLM\Software\Policies]
[HKLM\Software\PowerForPhone]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SRS Labs]
[HKLM\Software\Skype]
[HKLM\Software\Sonic]
[HKLM\Software\Synaptics]
[HKLM\Software\TeamViewer]
[HKLM\Software\TuneUp]
[HKLM\Software\Volatile]
[HKLM\Software\mozilla.org]
~ Scan Softwares in 00mn 00s



---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 03/03/2011 - 18:36:20 - [155,357] ----D- C:\Program Files\Adobe
O43 - CFD: 22/01/2010 - 15:24:56 - [170,362] ----D- C:\Program Files\Alwil Software
O43 - CFD: 06/04/2007 - 00:08:38 - [26,083] ----D- C:\Program Files\ASUS
O43 - CFD: 06/04/2007 - 00:00:32 - [0,001] ----D- C:\Program Files\Atheros
O43 - CFD: 05/04/2007 - 23:36:06 - [3,677] ----D- C:\Program Files\ATK Hotkey
O43 - CFD: 05/04/2007 - 23:36:48 - [7,352] ----D- C:\Program Files\ATKOSD2
O43 - CFD: 21/06/2011 - 22:19:04 - [350,753] ----D- C:\Program Files\Common Files
O43 - CFD: 05/04/2007 - 23:43:56 - [0,986] ----D- C:\Program Files\CONEXANT
O43 - CFD: 05/04/2007 - 23:29:32 - [0] -SH-D- C:\Program Files\Fichiers communs
O43 - CFD: 20/06/2010 - 08:41:26 - [15,776] ----D- C:\Program Files\Google
O43 - CFD: 07/12/2007 - 20:54:14 - [37,077] --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 21/06/2011 - 23:14:22 - [1,486] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 05/04/2007 - 23:57:34 - [0,637] ----D- C:\Program Files\ITECIR
O43 - CFD: 06/04/2007 - 00:37:10 - [0] ----D- C:\Program Files\Kaspersky Lab
O43 - CFD: 19/12/2007 - 09:15:56 - [7,906] ----D- C:\Program Files\Maxthon2
O43 - CFD: 02/11/2006 - 13:37:34 - [88,508] ----D- C:\Program Files\Microsoft Games
O43 - CFD: 06/04/2007 - 00:20:20 - [217,641] ----D- C:\Program Files\Microsoft Office
O43 - CFD: 10/03/2011 - 17:14:14 - [0,316] ----D- C:\Program Files\Microsoft.NET
O43 - CFD: 07/03/2011 - 03:55:32 - [94,574] ----D- C:\Program Files\Movie Maker
O43 - CFD: 21/12/2011 - 17:20:16 - [32,796] ----D- C:\Program Files\Mozilla Firefox
O43 - CFD: 02/11/2006 - 13:37:34 - [0,025] ----D- C:\Program Files\MSBuild
O43 - CFD: 06/04/2007 - 00:07:08 - [4,666] ----D- C:\Program Files\P4G
O43 - CFD: 07/12/2007 - 20:54:22 - [77,727] ----D- C:\Program Files\Panasonic
O43 - CFD: 06/04/2007 - 00:07:46 - [0,742] ----D- C:\Program Files\PowerForPhone
O43 - CFD: 05/04/2007 - 23:46:58 - [12,462] ----D- C:\Program Files\Realtek
O43 - CFD: 02/11/2006 - 13:37:34 - [36,894] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 30/12/2009 - 13:05:44 - [14,184] ----D- C:\Program Files\SFR
O43 - CFD: 17/06/2010 - 08:59:46 - [36,600] R---D- C:\Program Files\Skype
O43 - CFD: 05/04/2007 - 23:53:40 - [12,790] ----D- C:\Program Files\Synaptics
O43 - CFD: 21/06/2010 - 07:34:46 - [18,570] ----D- C:\Program Files\TeamViewer
O43 - CFD: 21/06/2011 - 22:26:54 - [56,820] ----D- C:\Program Files\TuneUp Utilities 2010
O43 - CFD: 02/11/2006 - 14:01:56 - [0] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 03/03/2011 - 17:57:18 - [0,970] ----D- C:\Program Files\Windows Calendar
O43 - CFD: 03/03/2011 - 17:57:14 - [2,633] ----D- C:\Program Files\Windows Collaboration
O43 - CFD: 03/03/2011 - 17:57:12 - [4,284] ----D- C:\Program Files\Windows Defender
O43 - CFD: 03/03/2011 - 17:57:14 - [6,756] ----D- C:\Program Files\Windows Journal
O43 - CFD: 21/06/2011 - 23:05:40 - [8,694] ----D- C:\Program Files\Windows Mail
O43 - CFD: 07/03/2011 - 03:55:34 - [4,291] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 05/04/2007 - 23:29:32 - [7,577] ----D- C:\Program Files\Windows NT
O43 - CFD: 03/03/2011 - 17:57:14 - [12,841] ----D- C:\Program Files\Windows Photo Gallery
O43 - CFD: 03/03/2011 - 17:57:16 - [6,602] ----D- C:\Program Files\Windows Sidebar
O43 - CFD: 05/04/2007 - 23:57:10 - [1,586] ----D- C:\Program Files\Wireless Console 2
O43 - CFD: 28/12/2011 - 14:22:08 - [7,774] ----D- C:\Program Files\ZHPDiag
O43 - CFD: 03/03/2011 - 18:36:40 - [5,958] ----D- C:\Program Files\Common Files\Adobe
O43 - CFD: 06/04/2007 - 00:20:18 - [0,082] ----D- C:\Program Files\Common Files\DESIGNER
O43 - CFD: 05/04/2007 - 23:59:30 - [6,435] ----D- C:\Program Files\Common Files\InstallShield
O43 - CFD: 22/01/2010 - 15:48:04 - [281,954] ----D- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 02/11/2006 - 12:18:34 - [0,003] ----D- C:\Program Files\Common Files\Services
O43 - CFD: 17/06/2010 - 08:57:58 - [2,036] ----D- C:\Program Files\Common Files\Skype
O43 - CFD: 02/11/2006 - 12:18:34 - [39,198] ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 03/03/2011 - 17:57:12 - [15,088] ----D- C:\Program Files\Common Files\System
O43 - CFD: 03/03/2011 - 18:36:38 - [10,307] ----D- C:\ProgramData\Adobe
O43 - CFD: 22/01/2010 - 15:24:56 - [4,188] ----D- C:\ProgramData\Alwil Software
O43 - CFD: 02/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Application Data
O43 - CFD: 06/04/2007 - 00:06:12 - [0,094] ----D- C:\ProgramData\ASUS
O43 - CFD: 05/04/2007 - 23:57:44 - [0,004] ----D- C:\ProgramData\Atheros
O43 - CFD: 05/04/2007 - 23:29:32 - [0] -SH-D- C:\ProgramData\Bureau
O43 - CFD: 02/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Desktop
O43 - CFD: 02/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Documents
O43 - CFD: 05/04/2007 - 23:29:32 - [0] -SH-D- C:\ProgramData\Favoris
O43 - CFD: 02/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Favorites
O43 - CFD: 30/12/2009 - 13:28:44 - [0,514] ----D- C:\ProgramData\Google
O43 - CFD: 05/04/2007 - 23:29:32 - [0] -SH-D- C:\ProgramData\Menu Démarrer
O43 - CFD: 30/12/2009 - 13:58:28 - [93,648] -S--D- C:\ProgramData\Microsoft
O43 - CFD: 05/04/2007 - 23:29:32 - [0] -SH-D- C:\ProgramData\Modèles
O43 - CFD: 06/04/2007 - 00:07:10 - [0,002] ----D- C:\ProgramData\P4G
O43 - CFD: 17/06/2010 - 08:57:38 - [26,355] ----D- C:\ProgramData\Skype
O43 - CFD: 02/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Start Menu
O43 - CFD: 02/11/2006 - 14:02:04 - [0] -SH-D- C:\ProgramData\Templates
O43 - CFD: 21/06/2011 - 22:25:28 - [4,038] ----D- C:\ProgramData\TuneUp Software
O43 - CFD: 03/03/2011 - 18:14:56 - [0] ----D- C:\ProgramData\WindowsSearch
O43 - CFD: 21/06/2011 - 21:35:46 - [17,670] -SH-D- C:\ProgramData\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
O43 - CFD: 20/12/2007 - 22:26:18 - [1,133] ----D- C:\Users\Riberry\AppData\Roaming\Adobe
O43 - CFD: 20/12/2007 - 22:27:12 - [0] ----D- C:\Users\Riberry\AppData\Roaming\AdobeUM
O43 - CFD: 26/05/2010 - 06:37:36 - [0,002] ----D- C:\Users\Riberry\AppData\Roaming\Google
O43 - CFD: 05/04/2007 - 23:31:36 - [0] ----D- C:\Users\Riberry\AppData\Roaming\Identities
O43 - CFD: 05/04/2007 - 23:33:58 - [0] ----D- C:\Users\Riberry\AppData\Roaming\InstallShield
O43 - CFD: 06/04/2007 - 00:07:54 - [1,880] ----D- C:\Users\Riberry\AppData\Roaming\Macromedia
O43 - CFD: 02/11/2006 - 13:37:36 - [0] ----D- C:\Users\Riberry\AppData\Roaming\Media Center Programs
O43 - CFD: 30/12/2009 - 13:58:28 - [0,828] -S--D- C:\Users\Riberry\AppData\Roaming\Microsoft
O43 - CFD: 23/12/2010 - 16:11:20 - [12,924] ----D- C:\Users\Riberry\AppData\Roaming\Mozilla
O43 - CFD: 07/12/2007 - 20:57:54 - [2,902] ----D- C:\Users\Riberry\AppData\Roaming\Panasonic
O43 - CFD: 12/07/2011 - 17:16:08 - [3,031] ----D- C:\Users\Riberry\AppData\Roaming\Skype
O43 - CFD: 27/07/2010 - 16:03:54 - [0,016] ----D- C:\Users\Riberry\AppData\Roaming\skypePM
O43 - CFD: 21/06/2010 - 07:35:18 - [0] ----D- C:\Users\Riberry\AppData\Roaming\TeamViewer
O43 - CFD: 18/12/2007 - 23:16:46 - [0,014] ----D- C:\Users\Riberry\AppData\Roaming\TuneUp Software
O43 - CFD: 03/03/2011 - 18:35:46 - [0,021] ----D- C:\Users\Riberry\AppData\Local\Adobe
O43 - CFD: 05/04/2007 - 23:31:28 - [0] -SH-D- C:\Users\Riberry\AppData\Local\Application Data
O43 - CFD: 21/12/2011 - 17:38:00 - [0,179] ----D- C:\Users\Riberry\AppData\Local\Google
O43 - CFD: 05/04/2007 - 23:31:28 - [0] -SH-D- C:\Users\Riberry\AppData\Local\Historique
O43 - CFD: 22/01/2010 - 20:03:08 - [-1925,897] ----D- C:\Users\Riberry\AppData\Local\Microsoft
O43 - CFD: 26/12/2007 - 19:34:18 - [1,892] ----D- C:\Users\Riberry\AppData\Local\Microsoft Games
O43 - CFD: 23/12/2010 - 16:11:04 - [260,256] ----D- C:\Users\Riberry\AppData\Local\Mozilla
O43 - CFD: 28/12/2011 - 13:59:14 - [20,598] ----D- C:\Users\Riberry\AppData\Local\Temp
O43 - CFD: 05/04/2007 - 23:31:28 - [0] -SH-D- C:\Users\Riberry\AppData\Local\Temporary Internet Files
O43 - CFD: 18/12/2007 - 23:17:08 - [1,141] ----D- C:\Users\Riberry\AppData\Local\VirtualStore
~ Scan Program Folder in 00mn 09s



---\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.6CD782C8C75C07629FCE9DA7F908F0E9] - 28/12/2011 - 14:21:55 ---A- . (...) -- C:\Windows\WindowsUpdate.log   [1254258]
O44 - LFC:[MD5.A6C24C523DFE5811957ABBB69F7AB3CB] - 28/12/2011 - 13:56:30 ---A- . (...) -- C:\Windows\system32\PerfStringBackup.INI   [1495948]
O44 - LFC:[MD5.074FFE6E510C462656CE043624798DD9] - 28/12/2011 - 13:56:30 ---A- . (...) -- C:\Windows\system32\perfc009.dat   [104070]
O44 - LFC:[MD5.A043CAE3495AEC27477271132E4F9D50] - 28/12/2011 - 13:56:30 ---A- . (...) -- C:\Windows\system32\perfc00C.dat   [126626]
O44 - LFC:[MD5.B3CD4B1C490E1F27690B5FFE935B0947] - 28/12/2011 - 13:56:30 ---A- . (...) -- C:\Windows\system32\perfh009.dat   [595996]
O44 - LFC:[MD5.864DB2E07849C465232AA0BB97CAE71C] - 28/12/2011 - 13:56:30 ---A- . (...) -- C:\Windows\system32\perfh00C.dat   [679042]
O44 - LFC:[MD5.35C6DA26E3E4DF9303FC75D8EB94B2F2] - 28/12/2011 - 13:55:36 ---A- . (...) -- C:\Windows\setupact.log   [49907]
O44 - LFC:[MD5.6BCAF46E2B7FA9ACE92B4D39F3037C5C] - 28/12/2011 - 12:24:31 ---A- . (...) -- C:\Windows\system32\acovcnt.exe   [45056]
O44 - LFC:[MD5.FD8AE93B3D0638ED6A23119BB6799A7A] - 28/12/2011 - 12:24:16 -S-A- . (...) -- C:\Windows\bootstat.dat   [67584]
O44 - LFC:[MD5.FBAB280E1F78FC42703C102F12F7C7EC] - 21/12/2011 - 16:44:16 ---A- . (...) -- C:\Windows\PFRO.log   [16402]
~ Scan Files in 00mn 36s



---\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\TSpkg.dll
~ Scan Keys in 00mn 00s



---\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\system32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\system32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\system32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\system32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network
siproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\system32\Drivers
siproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Networkdpencdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\Windows\system32\Driversdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\system32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\system32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\system32\Drivers\volmgrx.sys
~ Scan CSB in 00mn 00s



---\ MountPoints2 Shell Key (O51)
O51 - MPSK:{7c71923c-8afe-11dc-802f-001a92bc2351}\AutoRun\command. (...) -- E:\.
ew.exe (.not file.)
~ Scan Keys in 00mn 00s



---\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll
O52 - TDSD: \drivers.

Utilisateur anonyme · Answer

Tu dois heberger ton rapport afin qu'il soit exploitable.

*	Pour héberger ton rapport : pjjoint.malekal.com   
*	 Cliques sur le bouton Parcourir 
*	 Sélectionne le fichier que tu veux héberger et cliques sur Ouvrir 
*	 Clique sur le bouton Envoyer  le fichier
*	 Un message de confirmation s'affiche (L'upload a réussi ! - Le lien à transmettre à vos correspondant pour visualiser le fichier est  )
*	 Fais un copié/collé du lien sur le forum.

Plow · Answer

http://pjjoint.malekal.com/files.php?id=ZHPDiag_20111228_e11t15x7s9u8

Utilisateur anonyme · Answer

aucune infection mais ton systeme n'est pas a jour.
Tu vas devoir investir dans une barrette mémoire car la tienne arrive au seuil de ses capacités. Total RAM: 894 MB (14% free)    => Seuil critique dépassé  


Le service pack 2 de Windows vista est une mise à jour majeure  apportant un regroupement de tous les correctifs publiés jusqu'ici afin de combler les failles de sécurité ainsi que quelques fonctionnalités supplémentaires. Enfin, les administrateurs disposent de nouveaux outils pour une meilleure gestion des utilisateurs et l'effacement efficace des partitions utilisateurs.

Télécharges et installes. https://www.commentcamarche.net/telecharger/utilitaires/24009-windows-vista-sp2/

Profites en pour mettre a jour   firefox

Adobe Reader n'est pas à jour , c'est une faille de sécurité.
1. Désinstalles le en allant dans menu démarrer
2. Clic sur panneau de configuration
3. Rends-toi à ajout/suppression de programmes.
4. Télécharges et installes la nouvelle version. https://acrobat.adobe.com/fr/fr/acrobat/pdf-reader.html

Décoches :McAfee® Security Scan Plus gratuit (en option)


Pour diminuer les risques, il est conseillé de désactiver l'interprétation du Javascript dans Adobe Reader sur votre ordinateur .Pour cela :

* Lancez Adobe Reader
* Cliquez sur Edition --> Préférences --> JavaScript
* Décochez "Activer Acrobat JavaScript"
* Validez

Plow · Answer

Je n'ai pas encore fait ce que tu m'a recommandé, mais j'ai une question qui me turlupine : j'ai énormément de problèmes pour me connecter au net via le wifi. La connexion s'annonce "bonne" dans le contrôleur de vista, mais quand j'essaye d'aller sur le net, ça m'est tout simplement impossible...
D'ou viendrait le problème ? Si ce n'est pas un virus, ne faudrait-il pas que j'aille sur le forum Windows ?

Utilisateur anonyme · Answer

Au sujet de la connexion en wiffi il est préférables de poster un sujet dans la catégorie réseaux.

Plow · Answer

Ok !
Je finis les MàJ, et je met en résolu.

Merci :)

Analyse PC (gros temps de réponse)

8 réponses

Newsletters