Help ! mon pc rame sans raison (compliqué)

mon antivirus le signal comme un virus ....

Salut Gen,

Et oui

Mais lukamikaze a préféré continuer à suivre un robot, plus que des conseils.

En relisant on voit bien qu'il n'est plus ou moins ici que parce qu'il ne peut faire autrement avec son problème.

Puis, une fois résolu, il ne dit rien, voire rouspète ça va comme ça ?

osef..

oué....

Je suis désole pour avoir mis autant de Temp a répondre , actuellement je n'est pas axé a mon pc mais lorsque je le pourrais j'essaye-ré de le supprimé puis je vous donne-ré des nouvelles . je suis désole si j'ais pu paraître un peux ingrat , c'est la premiers fois que je vais sur un forum alors je n'est pas trop l'habitude.

Salut,

Euh ? Pour nous non plus... A rien posté, semble-t-il !

hello ici :

https://forums.commentcamarche.net/forum/affich-24445900-help-mon-pc-rame-sans-raison-complique#5

Ha ok, un mélimélo ; )

Merci à vous.

Ok, lukamikaze désactive ton antivirus avant de le lancer (il est clean, pas d'inquiétude)

Rapport de ZHPDiag v1.28.32 par Nicolas Coolman, Update du 05/02/2012
Run by Lucas at 14/02/2012 15:23:34
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Web site : http://nicolascoolman.skyrock.com/
State : Version à jour.


---\\ Web Browser
MSIE: Internet Explorer v9.0.8112.16421

---\\ Windows Product Information
~ Langage: Français
Windows 7 Home Premium Edition, 32-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 9YQTR
Windows License : OK
~ Windows Remaining Initializations Number : 3
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ System Information
~ Processor: x86 Family 15 Model 6 Stepping 4, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2047 MB (41% free)
System Restore: Activé (Enable)
System drive C: has 87 GB (63%) free of 137 GB

---\\ Logged in mode
~ Computer Name: LUCAS-PC
~ User Name: Lucas
~ All Users Names: UpdatusUser, Lucas, HomeGroupUser$, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Lucas\AppData\Roaming\
~ %Desktop% : C:\Users\Lucas\Desktop\
~ %Favorites% : C:\Users\Lucas\Favorites\
~ %LocalAppData% : C:\Users\Lucas\AppData\Local\
~ %StartMenu% : C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\system32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 87 Go of 137 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 49 Go of 49 Go)
E:\ CD-ROM drive (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Free 3 Go of 8 Go)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyComputer: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Scan Security Center in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 06:30:54.) -- C:\Windows\Explorer.exe [2616320]
[MD5.51138BEEA3E2C21EC44D0932C71762A8] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) (.14/07/2009 - 02:14:31.) -- C:\Windows\system32\rundll32.exe [44544]
[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:14:45.) -- C:\Windows\system32\Wininit.exe [96256]
[MD5.02F98B5C0E397AD06124D84428CF8F1A] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.26/01/2012 - 17:14:46.) -- C:\Windows\system32\wininet.dll [1127424]
[MD5.6D13E1406F50C66E2A95D97F22C47560] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.20/11/2010 - 22:29:06.) -- C:\Windows\system32\Winlogon.exe [286720]
[MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 22:29:24.) -- C:\Windows\system32\sppcomapi.dll [193536]
[MD5.129F80D7868E30DF3E3DE33A1D3132B4] - (.Microsoft Corporation - DLL client de l'API uilisateur de Windows multi-utilisateurs.) (.21/11/2010 - 01:30:19.) -- C:\Windows\system32\fr-FR\user32.dll.mui [20480]
[MD5.9EBBBA55060F786F0FCAA3893BFA2806] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.25/04/2011 - 03:18:03.) -- C:\Windows\system32\drivers\AFD.sys [338944]
[MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:26:15.) -- C:\Windows\system32\drivers\atapi.sys [21584]
[MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:11:15.) -- C:\Windows\system32\drivers\Cdfs.sys [70656]
[MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 22:29:03.) -- C:\Windows\system32\drivers\Cdrom.sys [108544]
[MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 22:29:07.) -- C:\Windows\system32\drivers\DfsC.sys [78336]
[MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 22:29:03.) -- C:\Windows\system32\drivers\HDAudBus.sys [108544]
[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:11:24.) -- C:\Windows\system32\drivers\i8042prt.sys [80896]
[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 00:54:29.) -- C:\Windows\system32\drivers\IpNat.sys [101888]
[MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:17:22.) -- C:\Windows\system32\drivers\MRxSmb.sys [123904]
[MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 22:29:08.) -- C:\Windows\system32\drivers\netBT.sys [187904]
[MD5.81189C3D7763838E55C397759D49007A] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.11/03/2011 - 06:39:00.) -- C:\Windows\system32\drivers\ntfs.sys [1211264]
[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 00:45:35.) -- C:\Windows\system32\drivers\Parport.sys [79360]
[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.14/07/2009 - 00:54:34.) -- C:\Windows\system32\drivers\Rasl2tp.sys [78848]
[MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 00:53:41.) -- C:\Windows\system32\drivers\smb.sys [71168]
[MD5.B459575348C20E8121D6039DA063C704] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 22:29:07.) -- C:\Windows\system32\drivers\tdx.sys [74752]
[MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 22:29:03.) -- C:\Windows\system32\drivers\volsnap.sys [245632]
~ Scan Generic Processes in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes Videos (My Videos) : 1/2
~ Mes Favoris (My Favorites) : Non accessible (Not found)
~ Mes Documents (My Documents) : 1/4
~ Mon Bureau (My Desktop) : 0/11940
~ Menu demarrer (Programs) : 7/68
~ Scan Hidden Files in 00mn 11s



---\\ Processus lancés
[MD5.F7226AA410954185160067D5FA82F3F2] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [3744552] [PID.1916]
[MD5.E0D6538B62C79FCBF0B27F95FAF3208B] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [246504] [PID.1924]
[MD5.B2B2FE2671DD98A322B0AD7079C0B2B2] - (.Cyberlink Corp. - PowerDVD RC Service.) -- C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [71216] [PID.112]
[MD5.04DB1E60FBFB9A77AF16238A209C2CDD] - (.NVIDIA Corporation - NVIDIA Settings.) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe [373864] [PID.320]
[MD5.ADF7424AADFB17839FCA7B324F2D7FAC] - (.LogMeIn Inc. - Hamachi Client Application.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [1987976] [PID.1204]
[MD5.79197AB8FC20E781BA141E291866A909] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [17351304] [PID.1064]
[MD5.B80C270C6A88AA4206AE9ED9240D7FA2] - (...) -- C:\Program Files\Vidalia Bundle\Vidalia\vidalia.exe [5407850] [PID.1820]
[MD5.ABC2C67DFD48930F846934B907C3D606] - (.OpenOffice.org - OpenOffice.org 3.2.) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe [7424000] [PID.2004]
[MD5.15D982E21248E9BE337D9B40247AF30E] - (.OpenOffice.org - OpenOffice.org 3.2.) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin [7418368] [PID.2088]
[MD5.B3B999DF6FFA57CCA93EBC1CCC45A3C9] - (...) -- C:\Program Files\Vidalia Bundle\Tor\tor.exe [2771470] [PID.2284]
[MD5.96C2F6A9C036D7D3ACE1666FAE287E49] - (...) -- C:\Program Files\Vidalia Bundle\Polipo\polipo.exe [181248] [PID.2320]
[MD5.1A3C97695B193CD8748F1BCB50A88A6E] - (.Google Inc. - Google Chrome.) -- C:\Users\Lucas\AppData\Local\Google\Chrome\Application\chrome.exe [1048560] [PID.3000]
[MD5.75B06ACD9D8DC0FE3603294E1899F496] - (.Microsoft Corporation - Windows Update.) -- C:\Windows\system32\wuauclt.exe [47104] [PID.2520]
[MD5.4309B75F125067EF805F3125B01FCC30] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [2210816] [PID.3784]
~ Scan Processes Running in 00mn 00s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] None
G0 - GCSP: Preference [User Data\Default][HomePage] https://www.google.com/?gws_rd=ssl
~ Scan Google Browser in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
P2 - FPN: [HKLM] [@www.dlmanager.net/omaha/tools//Software Update;version=8] - (.Boxore OU. - Software Update.) -- C:\Program Files\Software\Update\1.2.195.0\npSoftwareOneClick8.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\Lucas\AppData\Local\Google\Update\1.3.21.99\npGoogleUpdate3.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\Lucas\AppData\Local\Google\Update\1.3.21.99\npGoogleUpdate3.dll
~ Scan Firefox Browser in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)) -- C:\Windows\System32\ieframe.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe
~ Scan Keys in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 10s
~ Nombre de lignes (Lines number): 15207



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
~ Scan BHO in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
~ Scan Toolbar in 00mn 00s



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 10.0\Reader\reader_sl.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Run: [RemoteControl] . (.Cyberlink Corp. - PowerDVD RC Service.) -- C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [LanguageShortcut] . (.Pas de propriétaire - Language Application.) -- C:\Program Files\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Run: [LGODDFU] . (.BL - Pas de description.) -- C:\Program Files\lg_fwupdate\fwupdate.exe
O4 - HKLM\..\Run: [Boxore Client] . (.Boxore OU - Boxore Client.) -- C:\Program Files\Boxore\BoxoreClient\boxore.exe
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] . (.LogMeIn Inc. - Hamachi Client Application.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Lucas\AppData\Local\Google\Update\GoogleUpdate.exe
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKCU\..\Run: [Vidalia] . (...) -- C:\Program Files\Vidalia Bundle\Vidalia\vidalia.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKUS\S-1-5-21-200815535-2826321355-3808673346-1001-200815535-2826321355-3808673346-1000\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Lucas\AppData\Local\Google\Update\GoogleUpdate.exe
O4 - HKUS\S-1-5-21-200815535-2826321355-3808673346-1001-200815535-2826321355-3808673346-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKUS\S-1-5-21-200815535-2826321355-3808673346-1001-200815535-2826321355-3808673346-1000\..\Run: [Vidalia] . (...) -- C:\Program Files\Vidalia Bundle\Vidalia\vidalia.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
~ Scan Application in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Lucas\Desktop\Ashampoo Burning Studio 6 FREE.lnk . (.ashampoo Technology GmbH & Co. KG.) -- C:\Program Files\Ashampoo\Ashampoo Burning Studio 6 FREE\burningstudio.exe
O4 - Global Startup: C:\Users\Lucas\Desktop\Google Chrome.lnk . (.Google Inc..) -- C:\Users\Lucas\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\Lucas\Desktop\PlayerPlus.exe.lnk . (...) -- C:\Program Files\PlayerPlus\playerplus.exe
O4 - Global Startup: C:\Users\Lucas\Desktop\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
O4 - Global Startup: C:\Users\Lucas\Desktop\Star Wars - The Old Republic.lnk . (.BioWare.) -- C:\Program Files\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe
O4 - Global Startup: C:\Users\Lucas\Desktop\STAR WARS(TM) The Old Republic(TM).lnk - Clé orpheline
O4 - Global Startup: C:\Users\Lucas\Desktop\Tor.lnk . (...) -- C:\Program Files\Tor\tor.exe (.not file.)
O4 - Global Startup: C:\Users\Lucas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Scan Global Startup in 00mn 00s



---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ Scan IE Control Panel in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico
~ Scan IE Extra Buttons in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\System32\nlaapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\System32\NapiNSP.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\System32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\System32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\System32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\System32\winrnr.dll
~ Scan Winsock in 00mn 00s



---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
~ Scan Objets ActiveX in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{93AD4504-67B5-4FF0-9313-BBE154DF3762}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{93AD4504-67B5-4FF0-9313-BBE154DF3762}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{93AD4504-67B5-4FF0-9313-BBE154DF3762}: DhcpNameServer = 192.168.1.1
~ Scan Domain in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
~ Scan Protocole Additionnel in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ Scan SSODL in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) . (.LogMeIn Inc. - Hamachi Client Tunneling Engine.) - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 275.3.) - C:\Windows\System32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) . (.NVIDIA Corporation - NVIDIA Settings Update Manager.) - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Pas de propriétaire - RichVideo Module.) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) . (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Software Update Service (supdate) (supdate) . (.Boxore OU. - Programme d'installation de Software.) - C:\Program Files\Software\Update\SoftwareUpdate.exe
~ Scan Services in 00mn 00s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Scan Desktop Component in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-200815535-2826321355-3808673346-1000Core.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-200815535-2826321355-3808673346-1000UA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\SoftwareUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\SoftwareUpdateTaskMachineUA.job
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-200815535-2826321355-3808673346-1000Core] (.Google Inc..) -- C:\Users\Lucas\AppData\Local\Google\Update\GoogleUpdate.exe
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-200815535-2826321355-3808673346-1000UA] (.Google Inc..) -- C:\Users\Lucas\AppData\Local\Google\Update\GoogleUpdate.exe
[MD5.03F853FCB8535930BDCBFE2A160AB669] [APT] [SoftwareUpdateTaskMachineCore] (.Boxore OU..) -- C:\Program Files\Software\Update\SoftwareUpdate.exe
[MD5.03F853FCB8535930BDCBFE2A160AB669] [APT] [SoftwareUpdateTaskMachineUA] (.Boxore OU..) -- C:\Program Files\Software\Update\SoftwareUpdate.exe
~ Scan Scheduled Task in 00mn 03s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d'IEAK.) -- C:\Windows\System32\iedkcs32.dll
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Windows Media Player.) -- C:\Windows\system32\wmp.dll
O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Scan Active Setup in 00mn 00s



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (AsIO) . (...) - C:\Windows\system32\drivers\AsIO.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\system32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\system32\drivers\discache.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\DRIVERS\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\system32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\system32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\system32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\system32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\system32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\system32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\system32\drivers\rdprefmp.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\system32\DRIVERS\serial.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: C:\Windows\system32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\system32\DRIVERS\wfplwf.sys
~ Scan Drivers in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Reader X (10.0.1) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA0000000001}
O42 - Logiciel: Archiveur WinRAR - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver
O42 - Logiciel: Ashampoo Burning Studio 6 FREE v.6.80 - (.ashampoo GmbH & Co. KG.) [HKLM] -- Ashampoo Burning Studio 6 FREE_is1
O42 - Logiciel: Boxore Client - (.Boxore OU.) [HKLM] -- {58AB24F7-9A4A-4573-B9CE-58AF961E173B}
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome
O42 - Logiciel: Java(TM) 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216018FF}
O42 - Logiciel: LG ODD Auto Firmware Update - (.Pas de propriétaire.) [HKLM] -- {6179550A-3E7C-499E-BCC9-9E8113E0A285}
O42 - Logiciel: League of Legends - (.Riot Games.) [HKLM] -- {918A9082-6287-4D25-9002-5E5D5E4971CB}
O42 - Logiciel: LogMeIn Hamachi - (.LogMeIn, Inc..) [HKLM] -- LogMeIn Hamachi
O42 - Logiciel: LogMeIn Hamachi - (.LogMeIn, Inc..) [HKLM] -- {D179B513-AD43-4013-AC50-C16107A0A02D}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}
O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Mises à jour NVIDIA 1.3.5 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update
O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack
O42 - Logiciel: NVIDIA Pilote graphique 275.33 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver
O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM] -- {4EE2EF4B-25D3-4D44-8384-A2B96F811F55}
O42 - Logiciel: PlayerPlus - (.Pas de propriétaire.) [HKLM] -- PlayerPlus
O42 - Logiciel: Polipo 1.0.4.1 - (.Pas de propriétaire.) [HKLM] -- Polipo
O42 - Logiciel: PowerDVD - (.CyberLink Corporation.) [HKLM] -- {6811CAA0-BF12-11D4-9EA1-0050BAE317E1}
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2518870
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2539636
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2572078
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2656351
O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2518870
O42 - Logiciel: Skype Click to Call - (.Skype Technologies S.A..) [HKLM] -- {B6CF2967-C81E-40C0-9815-C05774FEF120}
O42 - Logiciel: Skype(TM) 5.5 - (.Skype Technologies S.A..) [HKLM] -- {AA59DDE4-B672-4621-A016-4C248204957A}
O42 - Logiciel: Software Update Helper - (.Boxore OU..) [HKLM] -- {006E6A46-8D55-4F10-BBA8-2C9653B4278B}
O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1
O42 - Logiciel: Star Wars: The Old Republic - (.Electronic Arts, Inc..) [HKLM] -- {3B11D799-48E0-48ED-BFD7-EA655676D8BB}
O42 - Logiciel: Tor 0.2.2.35 - (.Pas de propriétaire.) [HKLM] -- Tor
O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2468871) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2468871
O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2533523) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2533523
O42 - Logiciel: Vidalia 0.2.15 - (.Pas de propriétaire.) [HKLM] -- Vidalia
O42 - Logiciel: avast! Free Antivirus - (.AVAST Software.) [HKLM] -- avast

---\\ HKCU & HKLM Software Keys
[HKCU\Software\AVAST Software]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Ashampoo]
[HKCU\Software\BugSplat]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Cyberlink]
[HKCU\Software\Google]
[HKCU\Software\JavaSoft]
[HKCU\Software\Lake]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\OpenOffice.org]
[HKCU\Software\Policies]
[HKCU\Software\Polipo]
[HKCU\Software\Safer Networking Limited]
[HKCU\Software\Skype]
[HKCU\Software\Trolltech]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\ej-technologies]
[HKLM\Software\ASUS]
[HKLM\Software\ATI Technologies]
[HKLM\Software\AVAST Software]
[HKLM\Software\Adobe]
[HKLM\Software\Ashampoo]
[HKLM\Software\BioWare]
[HKLM\Software\CBSTEST]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Common Toolkit Suite]
[HKLM\Software\CyberLink]
[HKLM\Software\Google]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\Khronos]
[HKLM\Software\LG Electronics]
[HKLM\Software\Lake]
[HKLM\Software\LogMeIn, Inc.]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware (Trial)]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\ODBC]
[HKLM\Software\OpenOffice.org]
[HKLM\Software\Policies]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Riot Games]
[HKLM\Software\Safer Networking Limited]
[HKLM\Software\Skype]
[HKLM\Software\Software]
[HKLM\Software\Sonic]
[HKLM\Software\Sun Microsystems]
[HKLM\Software\WOW6432Node]
[HKLM\Software\Windows]
[HKLM\Software\v7slicldr]
~ Scan Softwares in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 26/01/2012 - 16:57:40 - [108,866] ----D- C:\Program Files\Adobe
O43 - CFD: 26/01/2012 - 16:52:10 - [29,486] ----D- C:\Program Files\Ashampoo
O43 - CFD: 28/01/2012 - 11:22:54 - [0,117] ----D- C:\Program Files\ASUS
O43 - CFD: 26/01/2012 - 16:49:06 - [183,120] ----D- C:\Program Files\AVAST Software
O43 - CFD: 28/01/2012 - 20:53:22 - [0,489] ----D- C:\Program Files\Boxore
O43 - CFD: 08/02/2012 - 16:06:26 - [126,063] ----D- C:\Program Files\Common Files
O43 - CFD: 28/01/2012 - 17:34:18 - [81,033] ----D- C:\Program Files\CyberLink
O43 - CFD: 21/11/2010 - 01:39:42 - [79,371] ----D- C:\Program Files\DVD Maker
O43 - CFD: 28/01/2012 - 09:43:22 - [-312,336] ----D- C:\Program Files\Electronic Arts
O43 - CFD: 26/01/2012 - 16:42:22 - [0] -SH-D- C:\Program Files\Fichiers communs
O43 - CFD: 28/01/2012 - 19:27:26 - [17,085] --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 26/01/2012 - 17:16:08 - [4,935] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 26/01/2012 - 18:03:42 - [86,366] ----D- C:\Program Files\Java
O43 - CFD: 26/01/2012 - 16:54:50 - [15,502] ----D- C:\Program Files\JRE
O43 - CFD: 28/01/2012 - 16:37:32 - [1,198] ----D- C:\Program Files\lg_fwupdate
O43 - CFD: 09/02/2012 - 17:33:48 - [3,419] ----D- C:\Program Files\LogMeIn Hamachi
O43 - CFD: 08/02/2012 - 19:12:44 - [0] ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 21/11/2010 - 01:39:36 - [140,966] ----D- C:\Program Files\Microsoft Games
O43 - CFD: 26/01/2012 - 16:59:48 - [27,153] ----D- C:\Program Files\Microsoft Office
O43 - CFD: 26/01/2012 - 17:26:54 - [0,015] ----D- C:\Program Files\Microsoft.NET
O43 - CFD: 14/07/2009 - 05:52:32 - [0,025] ----D- C:\Program Files\MSBuild
O43 - CFD: 26/01/2012 - 16:59:26 - [26,600] ----D- C:\Program Files\MSECache
O43 - CFD: 26/01/2012 - 17:40:34 - [413,225] ----D- C:\Program Files\NVIDIA Corporation
O43 - CFD: 26/01/2012 - 16:54:48 - [354,248] ----D- C:\Program Files\OpenOffice.org 3
O43 - CFD: 28/01/2012 - 20:51:22 - [57,952] ----D- C:\Program Files\PlayerPlus
O43 - CFD: 14/07/2009 - 05:52:32 - [37,345] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 30/01/2012 - 20:21:30 - [32,900] R---D- C:\Program Files\Skype
O43 - CFD: 28/01/2012 - 20:51:26 - [2,898] ----D- C:\Program Files\Software
O43 - CFD: 26/01/2012 - 16:53:56 - [63,123] ----D- C:\Program Files\Spybot - Search & Destroy
O43 - CFD: 14/07/2009 - 05:53:24 - [0] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 08/02/2012 - 17:55:30 - [24,966] ----D- C:\Program Files\Vidalia Bundle
O43 - CFD: 21/11/2010 - 01:30:46 - [2,909] ----D- C:\Program Files\Windows Defender
O43 - CFD: 21/11/2010 - 01:39:42 - [6,689] ----D- C:\Program Files\Windows Journal
O43 - CFD: 21/11/2010 - 01:30:46 - [5,895] ----D- C:\Program Files\Windows Mail
O43 - CFD: 21/11/2010 - 01:30:46 - [6,298] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 26/01/2012 - 16:42:22 - [11,632] ----D- C:\Program Files\Windows NT
O43 - CFD: 21/11/2010 - 01:30:46 - [4,213] ----D- C:\Program Files\Windows Photo Viewer
O43 - CFD: 20/11/2010 - 22:33:50 - [0,181] ----D- C:\Program Files\Windows Portable Devices
O43 - CFD: 21/11/2010 - 01:30:46 - [6,515] ----D- C:\Program Files\Windows Sidebar
O43 - CFD: 26/01/2012 - 16:51:14 - [3,452] ----D- C:\Program Files\WinRAR
O43 - CFD: 14/02/2012 - 15:24:04 - [10,100] ----D- C:\Program Files\ZHPDiag
O43 - CFD: 26/01/2012 - 16:57:48 - [3,353] ----D- C:\Program Files\Common Files\Adobe
O43 - CFD: 28/01/2012 - 10:14:42 - [0,782] ----D- C:\Program Files\Common Files\BioWare
O43 - CFD: 28/01/2012 - 16:34:28 - [1,098] ----D- C:\Program Files\Common Files\InstallShield
O43 - CFD: 26/01/2012 - 16:53:30 - [1,172] ----D- C:\Program Files\Common Files\Java
O43 - CFD: 26/01/2012 - 16:59:56 - [70,685] ----D- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 14/07/2009 - 03:37:06 - [0,003] ----D- C:\Program Files\Common Files\Services
O43 - CFD: 14/07/2009 - 03:37:06 - [39,200] ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 26/01/2012 - 17:16:06 - [9,771] ----D- C:\Program Files\Common Files\System
O43 - CFD: 26/01/2012 - 16:57:44 - [130,552] ----D- C:\ProgramData\Adobe
O43 - CFD: 14/07/2009 - 05:53:56 - [0] -SH-D- C:\ProgramData\Application Data
O43 - CFD: 26/01/2012 - 16:52:22 - [0,314] ----D- C:\ProgramData\ashampoo
O43 - CFD: 26/01/2012 - 16:49:06 - [25,038] ----D- C:\ProgramData\AVAST Software
O43 - CFD: 26/01/2012 - 16:42:22 - [0] -SH-D- C:\ProgramData\Bureau
O43 - CFD: 08/02/2012 - 01:19:08 - [0,003] ----D- C:\ProgramData\clp
O43 - CFD: 08/02/2012 - 00:45:52 - [0,045] ----D- C:\ProgramData\Common Toolkit Suite
O43 - CFD: 28/01/2012 - 16:38:44 - [0,000] ----D- C:\ProgramData\CyberLink
O43 - CFD: 14/07/2009 - 05:53:56 - [0] -SH-D- C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 05:53:56 - [0] -SH-D- C:\ProgramData\Documents
O43 - CFD: 26/01/2012 - 16:42:22 - [0] -SH-D- C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - 05:53:56 - [0] -SH-D- C:\ProgramData\Favorites
O43 - CFD: 08/02/2012 - 16:06:54 - [0,084] ----D- C:\ProgramData\Fighters
O43 - CFD: 26/01/2012 - 16:51:24 - [0,003] ----D- C:\ProgramData\Malwarebytes
O43 - CFD: 26/01/2012 - 16:42:22 - [0] -SH-D- C:\ProgramData\Menu Démarrer
O43 - CFD: 28/01/2012 - 10:35:18 - [310,214] -S--D- C:\ProgramData\Microsoft
O43 - CFD: 26/01/2012 - 16:42:22 - [0] -SH-D- C:\ProgramData\Modèles
O43 - CFD: 26/01/2012 - 17:41:40 - [0,598] ----D- C:\ProgramData\NVIDIA
O43 - CFD: 26/01/2012 - 17:39:32 - [0,870] ----D- C:\ProgramData\NVIDIA Corporation
O43 - CFD: 30/01/2012 - 20:19:56 - [24,242] ----D- C:\ProgramData\Skype
O43 - CFD: 26/01/2012 - 16:56:10 - [0,037] ----D- C:\ProgramData\Spybot - Search & Destroy
O43 - CFD: 14/07/2009 - 05:53:56 - [0] -SH-D- C:\ProgramData\Start Menu
O43 - CFD: 26/01/2012 - 16:53:32 - [0,000] ----D- C:\ProgramData\Sun
O43 - CFD: 14/07/2009 - 05:53:56 - [0] -SH-D- C:\ProgramData\Templates
O43 - CFD: 31/01/2012 - 17:02:56 - [57,025] ----D- C:\Users\Lucas\AppData\Roaming\.minecraft
O43 - CFD: 28/01/2012 - 09:44:36 - [0] ----D- C:\Users\Lucas\AppData\Roaming\Adobe
O43 - CFD: 27/01/2012 - 21:01:40 - [0] ----D- C:\Users\Lucas\AppData\Roaming\Ashampoo
O43 - CFD: 28/01/2012 - 16:38:40 - [0,000] ----D- C:\Users\Lucas\AppData\Roaming\CyberLink
O43 - CFD: 08/02/2012 - 00:48:10 - [0,189] ----D- C:\Users\Lucas\AppData\Roaming\Fighters
O43 - CFD: 26/01/2012 - 16:42:52 - [0] ----D- C:\Users\Lucas\AppData\Roaming\Identities
O43 - CFD: 29/01/2012 - 00:08:08 - [0,000] ----D- C:\Users\Lucas\AppData\Roaming\LolClient
O43 - CFD: 28/01/2012 - 11:22:32 - [0,002] ----D- C:\Users\Lucas\AppData\Roaming\Macromedia
O43 - CFD: 26/01/2012 - 16:51:34 - [0,004] ----D- C:\Users\Lucas\AppData\Roaming\Malwarebytes
O43 - CFD: 21/11/2010 - 01:39:18 - [0] ----D- C:\Users\Lucas\AppData\Roaming\Media Center Programs
O43 - CFD: 08/02/2012 - 16:06:58 - [2,525] -S--D- C:\Users\Lucas\AppData\Roaming\Microsoft
O43 - CFD: 10/02/2012 - 22:44:06 - [0] ----D- C:\Users\Lucas\AppData\Roaming\Mozilla
O43 - CFD: 29/01/2012 - 15:40:44 - [2,064] ----D- C:\Users\Lucas\AppData\Roaming\OpenOffice.org
O43 - CFD: 14/02/2012 - 15:23:32 - [3,539] ----D- C:\Users\Lucas\AppData\Roaming\Skype
O43 - CFD: 14/02/2012 - 15:18:40 - [8,671] ----D- C:\Users\Lucas\AppData\Roaming\Tor
O43 - CFD: 14/02/2012 - 14:23:26 - [0,067] ----D- C:\Users\Lucas\AppData\Roaming\Vidalia
O43 - CFD: 28/01/2012 - 09:44:36 - [8,481] ----D- C:\Users\Lucas\AppData\Local\Adobe
O43 - CFD: 26/01/2012 - 16:42:32 - [0] -SH-D- C:\Users\Lucas\AppData\Local\Application Data
O43 - CFD: 28/01/2012 - 19:12:24 - [1,226] ----D- C:\Users\Lucas\AppData\Local\Apps
O43 - CFD: 26/01/2012 - 16:52:22 - [0,314] ----D- C:\Users\Lucas\AppData\Local\ashampoo
O43 - CFD: 28/01/2012 - 19:58:02 - [0] ----D- C:\Users\Lucas\AppData\Local\Deployment
O43 - CFD: 28/01/2012 - 10:45:34 - [24,997] ----D- C:\Users\Lucas\AppData\Local\Diagnostics
O43 - CFD: 28/01/2012 - 11:35:08 - [0,695] ----D- C:\Users\Lucas\AppData\Local\ElevatedDiagnostics
O43 - CFD: 28/01/2012 - 20:26:08 - [631,738] ----D- C:\Users\Lucas\AppData\Local\Google
O43 - CFD: 26/01/2012 - 16:42:32 - [0] -SH-D- C:\Users\Lucas\AppData\Local\Historique
O43 - CFD: 14/02/2012 - 14:23:36 - [0,275] ----D- C:\Users\Lucas\AppData\Local\LogMeIn Hamachi
O43 - CFD: 02/02/2012 - 19:26:28 - [108,561] ----D- C:\Users\Lucas\AppData\Local\Microsoft
O43 - CFD: 28/01/2012 - 22:15:24 - [0,958] ----D- C:\Users\Lucas\AppData\Local\MPlayer
O43 - CFD: 28/01/2012 - 20:51:26 - [0] ----D- C:\Users\Lucas\AppData\Local\Software
O43 - CFD: 28/01/2012 - 23:54:26 - [0,140] ----D- C:\Users\Lucas\AppData\Local\SWTOR
O43 - CFD: 14/02/2012 - 15:23:58 - [7,916] ----D- C:\Users\Lucas\AppData\Local\Temp
O43 - CFD: 26/01/2012 - 16:42:32 - [0] -SH-D- C:\Users\Lucas\AppData\Local\Temporary Internet Files
O43 - CFD: 11/02/2012 - 11:55:00 - [0,014] ----D- C:\Users\Lucas\AppData\Local\VirtualStore
~ Scan Program Folder in 00mn 02s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.F0591D823DA20DDCA9D3D1C1DCC226B6] - 14/02/2012 - 14:27:24 ---A- . (...) -- C:\Windows\WindowsUpdate.log [2087554]
O44 - LFC:[MD5.09445CA55EF8B605001A7D5367D35D48] - 14/02/2012 - 14:23:04 ---A- . (...) -- C:\Windows\setupact.log [32143]
O44 - LFC:[MD5.00C531F2F76DF14C313F0A5AAFD5E9B8] - 14/02/2012 - 14:23:03 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.C5B73826DBF0CE2832A05823C88125C6] - 13/02/2012 - 22:58:23 ---A- . (...) -- C:\Windows\system32\PerfStringBackup.INI [1549700]
O44 - LFC:[MD5.F36DE1B94A8666B462182A7EC46729B1] - 13/02/2012 - 22:58:23 ---A- . (...) -- C:\Windows\system32\perfc009.dat [106190]
O44 - LFC:[MD5.3990F23AAACF5C76EF0E03EEE43533D6] - 13/02/2012 - 22:58:23 ---A- . (...) -- C:\Windows\system32\perfc00C.dat [130548]
O44 - LFC:[MD5.FC1937E89BF82F3E754C2837A5B2BE38] - 13/02/2012 - 22:58:23 ---A- . (...) -- C:\Windows\system32\perfh009.dat [615810]
O44 - LFC:[MD5.412FEB2E4E1C89946228F4043C271BEB] - 13/02/2012 - 22:58:23 ---A- . (...) -- C:\Windows\system32\perfh00C.dat [704242]
O44 - LFC:[MD5.01C47C2ECED034EF6F8C1552A97CFF00] - 12/02/2012 - 23:57:59 ---A- . (...) -- C:\Windows\system32\config.nt [2577]
O44 - LFC:[MD5.833051C6C6C42117191935F734CFBD97] - 06/02/2012 - 10:03:40 --HA- . (.LogMeIn, Inc. - Hamachi Virtual Network Interface Driver.) -- C:\Windows\system32\hamachi.sys [26176]
O44 - LFC:[MD5.AFBBADA0E2AD416D116E77EA24DDC9D9] - 28/01/2012 - 16:37:30 ---A- . (...) -- C:\Windows\lgfwup.ini [266]
O44 - LFC:[MD5.BBE852F5679C9357911AE171C75367AE] - 28/01/2012 - 16:37:27 ---A- . (.CST - Pas de description.) -- C:\Windows\system32\lgfwunis.exe [16384]
O44 - LFC:[MD5.8F71A250C4A8257EE0CDA01F6791B3E9] - 28/01/2012 - 11:22:28 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\system32\FlashPlayerCPLApp.cpl [414368]
O44 - LFC:[MD5.212F87EE837B4E35E43A93BBFC44E7A7] - 28/01/2012 - 11:19:26 ---A- . (.Pas de propriétaire - AsIO DLL.) -- C:\Windows\system32\AsIO.dll [24576]
O44 - LFC:[MD5.718FECF22BF4BD4FC05B79AA4BEC75D0] - 28/01/2012 - 11:18:52 ---A- . (...) -- C:\Windows\Language_trs.ini [1769]
O44 - LFC:[MD5.0F24624106D8042E7F27882D9D6FF5C0] - 28/01/2012 - 11:18:46 ---A- . (.Pas de propriétaire - ATK0110 ACPI Utility.) -- C:\Windows\system32\drivers\ASACPI.sys [6504]
O44 - LFC:[MD5.F0879C1EB6E0C71F5AEE6F8BC28C82E7] - 28/01/2012 - 10:33:39 ---A- . (...) -- C:\Windows\PFRO.log [5898]
O44 - LFC:[MD5.B8F7C6CA5F8E97249853DBE1DADD1FBC] - 26/01/2012 - 18:03:57 ---A- . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Windows\system32\deployJava1.dll [411368]
O44 - LFC:[MD5.43F7CA0473BB0FC9DD44ECF328B8D1FA] - 26/01/2012 - 18:03:57 ---A- . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Windows\system32\java.exe [145184]
O44 - LFC:[MD5.4E8CC8BDEBED5AD93539612D4D316FDF] - 26/01/2012 - 18:03:57 ---A- . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Windows\system32\javaw.exe [145184]
O44 - LFC:[MD5.9D452D6B1ED99F88C327349A644EB3A2] - 26/01/2012 - 18:03:57 ---A- . (.Sun Microsystems, Inc. - Java(TM) Web Start Launcher.) -- C:\Windows\system32\javaws.exe [153376]
O44 - LFC:[MD5.40A4BDACC51C36A08209B26E4E8DCD9D] - 26/01/2012 - 18:03:41 ---A- . (...) -- C:\Windows\system32\jupdate-1.6.0_20-b02.log [3379]
O44 - LFC:[MD5.D320BF87125326F996D4904FE24300FC] - 26/01/2012 - 17:48:07 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\system32\drivers\amdsata.sys [80256]
O44 - LFC:[MD5.46387FB17B086D16DEA267D5BE23A2F2] - 26/01/2012 - 17:48:07 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\system32\drivers\amdxata.sys [22400]
O44 - LFC:[MD5.5CD5F9A5444E6CDCB0AC89BD62D8B76E] - 26/01/2012 - 17:48:07 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\system32\drivers\iaStorV.sys [332160]
O44 - LFC:[MD5.B3E25EE28883877076E0E1FF877D02E0] - 26/01/2012 - 17:48:07 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [117120]
O44 - LFC:[MD5.4380E59A170D88C4F1022EFF6719A8A4] - 26/01/2012 - 17:48:07 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [143744]
O44 - LFC:[MD5.1DBC2017726D63A910AC55BFA206E6FB] - 26/01/2012 - 17:40:22 ---A- . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\Windows\system32\nvcpl.dll [3693672]
O44 - LFC:[MD5.FE980B7B6C967BE02B9892496D2F1072] - 26/01/2012 - 17:40:22 ---A- . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 275.3.) -- C:\Windows\system32\nvsvc.dll [2557544]
O44 - LFC:[MD5.3543046F8F23D9109F403C8176C3A07D] - 26/01/2012 - 17:40:22 ---A- . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 275.3.) -- C:\Windows\system32\nvsvcr.dll [2560616]
O44 - LFC:[MD5.7C732AFF202DCD06C3D262966D71604C] - 26/01/2012 - 17:40:22 ---A- . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 275.3.) -- C:\Windows\system32\nvvsvc.exe [615528]
O44 - LFC:[MD5.AE09E40AA276CFB46ADDB96395598BB1] - 26/01/2012 - 17:40:22 ---A- . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\Windows\system32\nvmctray.dll [111208]
O44 - LFC:[MD5.29C2FFB63548CF56E3FA2DE159790D76] - 26/01/2012 - 17:40:22 ---A- . (.NVIDIA Corporation - Pas de description.) -- C:\Windows\system32\nvshext.dll [66664]
O44 - LFC:[MD5.6DAABB6FBA03CBD631875A400B330804] - 26/01/2012 - 17:40:21 ---A- . (.NVIDIA Corporation - Easy daemon API.) -- C:\Windows\system32\easyupdatusapiu.dll [543336]
O44 - LFC:[MD5.BDE28CA37DFD102F29315A3525828118] - 26/01/2012 - 17:17:50 ---A- . (...) -- C:\Windows\system32\FNTCACHE.DAT [289720]
O44 - LFC:[MD5.2F24A6C6C16791E52435A855661AC68D] - 26/01/2012 - 17:15:37 ---A- . (...) -- C:\Windows\IE9_main.log [4187]
O44 - LFC:[MD5.4B333D3CC96AE66BD754329FD2989EE2] - 26/01/2012 - 17:14:46 ---A- . (...) -- C:\Windows\system32\ieuinit.inf [72822]
O44 - LFC:[MD5.C5ACDBF61DF211BDCC2B5021B1405BB0] - 26/01/2012 - 17:05:38 ---A- . (.Adobe Systems - Windows NT OpenType/Type 1 API Library..) -- C:\Windows\system32\atmlib.dll [34304]
O44 - LFC:[MD5.ED4649A28AFE0B3DB93C3198BA48E34E] - 26/01/2012 - 17:05:38 ---A- . (.Adobe Systems Incorporated - Windows NT OpenType/Type 1 Font Driver.) -- C:\Windows\system32\atmfd.dll [294912]
O44 - LFC:[MD5.054DF24C92B55427E0757CFFF160E4F2] - 26/01/2012 - 16:49:44 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\Windows\system32\drivers\aswFsBlk.sys [20568]
O44 - LFC:[MD5.010012597333DA1F46C3243F33F8409E] - 26/01/2012 - 16:49:44 ---A- . (.AVAST Software - avast! self protection module.) -- C:\Windows\system32\drivers\aswSP.sys [314456]
O44 - LFC:[MD5.F9F84364416658E9786235904D448D37] - 26/01/2012 - 16:49:42 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\Windows\system32\drivers\aswTdi.sys [52952]
O44 - LFC:[MD5.352D5A48EBAB35A7693B048679304831] - 26/01/2012 - 16:49:42 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\Windows\system32\drivers\aswRdr.sys [34392]
O44 - LFC:[MD5.8D34D2B24297E27D93E847319ABFDEC4] - 26/01/2012 - 16:49:42 ---A- . (.AVAST Software - avast! Virtualization Driver.) -- C:\Windows\system32\drivers\aswSnx.sys [435032]
O44 - LFC:[MD5.258143605E77E4008F1758481D6A977D] - 26/01/2012 - 16:49:40 ---A- . (.AVAST Software - avast! File System Minifilter for Windows 2.) -- C:\Windows\system32\drivers\aswMonFlt.sys [55128]
O44 - LFC:[MD5.695B9ED5CC7F9CBEE89074C81C119FC4] - 26/01/2012 - 16:49:13 ---A- . (.AVAST Software - avast! Screen Saver stub.) -- C:\Windows\avastSS.scr [41184]
O44 - LFC:[MD5.3E6CCAFAD21D55A4DD6435448A24A9FC] - 26/01/2012 - 16:49:12 ---A- . (.AVAST Software - avast! start-up scanner.) -- C:\Windows\system32\aswBoot.exe [199816]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 26/01/2012 - 16:48:13 --HA- . (...) -- C:\Windows\system32\drivers\Msft_User_WpdFs_01_09_00.Wdf [0]
O44 - LFC:[MD5.04D98743206D094FFB2D43EA89A4E36B] - 26/01/2012 - 16:39:19 ---A- . (...) -- C:\Windows\system32\license.rtf [206462]
O44 - LFC:[MD5.6BA5B3403BADB208B6F8B0752E95C19A] - 26/01/2012 - 16:38:20 ---A- . (...) -- C:\Windows\TSSysprep.log [1355]
O44 - LFC:[MD5.D2250EE149B366E14992F9CE46BA4A16] - 26/01/2012 - 16:36:09 ---A- . (...) -- C:\Windows\DtcInstall.log [2790]
O44 - LFC:[MD5.2B4E66FAC6503494A2C6F32BB6AB3826] - 17/12/2007 - 17:14:06 ---A- . (...) -- C:\Windows\system32\drivers\AsIO.sys [12400]
~ Scan Files in 00mn 04s



---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\TSpkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
~ Scan Keys in 00mn 00s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\system32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\system32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d'extension du gestionnaire de volumes.) -- C:\Windows\system32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\system32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\system32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\system32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\system32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\system32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\system32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\system32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d'extension du gestionnaire de volumes.) -- C:\Windows\system32\Drivers\volmgrx.sys
~ Scan CSB in 00mn 00s



---\\ MountPoints2 Shell Key (O51) (None)

---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
~ Scan Keys in 00mn 00s



---\\ ShareTools MSconfig StartupReg (O53) (None)

---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft

# Mis à jour le 12/02/2012 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (32 bits)
# Nom d'utilisateur : Lucas - LUCAS-PC (Administrateur)
# Exécuté depuis : C:\Users\Lucas\Desktop\adwcleaner.exe
# Option [Suppression]


***** [Services] *****

Arrêté & Supprimé : : supdate

***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Users\Lucas\AppData\Local\Software
Dossier Supprimé : C:\Program Files\Boxore
Dossier Supprimé : C:\Program Files\Software

***** [Registre] *****

Clé Supprimée : HKLM\SOFTWARE\Software
Clé Supprimée : HKLM\SOFTWARE\Classes\Software.OneClickCtrl.8
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.CoreClass
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.CoreClass.1
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\SoftwareUpdate.exe
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{32451DFC-C23B-4E12-866C-FC7982238504}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{092A2C6B-43EE-4F9F-8F8E-14ED5E11C14B}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{257A6158-1416-4B31-9BF8-29FF49F3814F}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{32451DFC-C23B-4E12-866C-FC7982238504}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{AC5C4189-A8A0-4C9D-8910-C9CEF8360077}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C9FC4C5A-2C9B-4E41-8DA2-2F379D74CF45}
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Features\64A6E60055D801F4BB8AC269354B72B8
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Features\7F42BA85A4A937549BEC85FA69E171B3
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Products\64A6E60055D801F4BB8AC269354B72B8
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Products\7F42BA85A4A937549BEC85FA69E171B3
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\1C875DDE39636004CA8CDAEC335B4160
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\BA086F2D38A8E1A47912955A68B3AD24
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\1C875DDE39636004CA8CDAEC335B4160
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\BA086F2D38A8E1A47912955A68B3AD24
Clé Supprimée : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4
Clé Supprimée : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{736EF78E-5A04-46F9-893E-EDEC6EA5DF45}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7A1BCE27-099C-4628-B63A-AEC00C6376B3}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{AF3AFF7C-B9E9-48DD-9002-212B6DEAAC02}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DBE82879-914A-422F-BAE9-2ECC80BE536F}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E12D7149-73EF-45E4-A1E9-99FD7DAE62D3}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F2B184F1-547C-4EE9-BFC4-AC489C7077D9}
Clé Supprimée : HKLM\SOFTWARE\Classes\MIME\Database\Content Type\application/x-vnd.software.oneclickctrl.8
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C9FC4C5A-2C9B-4E41-8DA2-2F379D74CF45}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C9FC4C5A-2C9B-4E41-8DA2-2F379D74CF45}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{006E6A46-8D55-4F10-BBA8-2C9653B4278B}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{58AB24F7-9A4A-4573-B9CE-58AF961E173B}
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@www.dlmanager.net/omaha/tools//Software Update;version=8
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Boxore Client]

***** [Navigateurs] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Le registre ne contient aucune entrée illégitime.

-\\ Google Chrome v17.0.963.46

Fichier : C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Le fichier ne contient aucune entrée illégitime.

*************************

AdwCleaner[R1].txt - [4303 octets] - [14/02/2012 19:07:41]
AdwCleaner[R2].txt - [4361 octets] - [16/02/2012 11:24:31]
AdwCleaner[S1].txt - [317 octets] - [16/02/2012 17:17:15]
AdwCleaner[S2].txt - [4405 octets] - [16/02/2012 19:03:37]

*************************

Dossier Temporaire : 23 dossier(s) et 27 fichier(s) supprimés

########## EOF - C:\AdwCleaner[S2].txt - [4627 octets] ##########



voila le rapport quand j'ais fait suprimé

Ok et pour la suite ?

Poste un nouveau rapport ZHPDiag via http://pjjoint.malekal.com (un nouveau !)
...

https://pjjoint.malekal.com/files.php?read=ZHPDiag_20120216_n6w9f6x10t5
ça va comme ça ?

[MD5.3B97D60483711F491E12799CECD424FC] - (.Blabbers Communications LTD - Browser Companion Helper.) -- C:\Program Files\BrowserCompanion\BCHelper.exe [187696] [PID.3440]

c'est considéré comme un chevale de trois je fait comment pour le supprimé ?