Sujet Précédent Sujet Suivant

Ordi infecté, analyse de rapports svp

Résolu/Fermé
eleck - 23 mai 2012 à 18:47
 eleck - 25 mai 2012 à 00:53
Bonjour,


Je vous écrit à partir d'un portable car mon ordi ne peut plus se connecter à internet.J'essaie de suivre les instruction données sur ce site pour me débarrasser de mon virus mais je n'y arrive pas. Je suis allée à : Méthode préliminaire de désinfection

voilà la configuration de mon ordinateur personnel:

j'ai réussie à faire sortir ces rapport avant de ne plus avoir accès à internet. Pourriez vous svp svp svp m'aider en y jetant un oeil et en m'indiquant ce que je pourrais faire pour m'en débarrasser. je les ai envoyés en lien sur le site Cjoint comme demandé.

pour ZPHdiag
http://cjoint.com/?BExspiaqYMu

pour Malwarebytes
http://cjoint.com/?BExstE7AWQA

Je ne suis plus capable de faire une analyse avec un antivirus en ligne et il ne me reste quà attendre l'avis d'un expert.

je ne sais pas si ceux ci pourraient vous être utile mais ils sont apparue sur mon bureau, je vous les envoi...

http://cjoint.com/?BExsEjxM3PT
http://cjoint.com/?BExsFhzLlr0
http://cjoint.com/?BExsGdin4bY
http://cjoint.com/?BExsHuod248
http://cjoint.com/?BExsIhDak7A
http://cjoint.com/?BExsI2GKOsr
http://cjoint.com/?BExsJ5mv6fd

Svp, j'ai vraiment besoin de votre précieuse aide, je suis étudiante et mon ordinateur est essentiel à ma réussitte. Svp répondez moi svp
A voir également:

14 réponses

Réponse 1 / 14
Navid_92 Messages postés 711 Date d'inscription dimanche 7 décembre 2008 Statut Membre Dernière intervention 12 février 2015 87
Modifié par Navid_92 le 23/05/2012 à 21:23
===========================================

▶ Désinstalle Spybot Search & Destroy à partir de ton panneau de configuration
▶ Désinstalle en passant les logiciels dont tu ne connais pas ou que tu n'utilises plus

===========================================

▶ Copie tout le texte présent en gras ci-dessous
▶ Note: (tu le selectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C)

[MD5.794D4B48DFB6E999537C7C3947863463] - (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [1153368] [PID.]
O4 - HKCU\..\Run: [SpybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe => Safer Net Working%Spybot S&D
O4 - HKUS\S-1-5-21-3651656642-2806257590-2429663036-1000\..\Run: [SpybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe => Safer Net Working%Spybot S&D
O4 - Global Startup: C:\Users\Gino Tardif\Desktop\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe => Safer Net Working%Spybot S&D
O23 - Service: SBSD Security Center Service (SBSDWSCService) . (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe => Spybot%Search & Destroy
O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1 => Safer Networking Limited Spybot - S&D
O43 - CFD: 2012-05-23 - 10:08:47 - [63,449] ----D C:\Program Files\Spybot - Search & Destroy => Spybot - Search & Destroy
O43 - CFD: 2012-05-23 - 10:08:46 - [54,635] ----D C:\ProgramData\Spybot - Search & Destroy => Spybot - Search & Destroy
SR - | Auto 2009-01-26 1153368 | (SBSDWSCService) . (.Safer Networking Ltd..) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe => Spybot%Search & Destroy
O69 - SBI: SearchScopes [HKCU] {74DAE2EE-D1D0-46A0-BD1B-44187D9F36E5} [DefaultScope] - (Search) - http://start.funmoods.com


▶ Puis lance ZHPFix qui est déjà sur ton bureau normalement (icone "serringue").
▶ Une fois l'outil ZHPFix ouvert, clique sur le bouton (H) ("coller les lignes Helper").
▶ Dans l'encadré principal tu verras donc les lignes que tu as copié précédemment apparaitrent.
▶ Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.
▶ Clique sur le bouton GO
▶ Copie/Colle le rapport à l'écran dans ton prochain message.

===========================================

▶ Télécharge sur le bureau RogueKiller (merci Tigzy)

▶ /!\ Ferme toutes applications en cours avant de continuer /!\
▶ /!\ Désactive temporairement ton antivirus. /!\

▶ Lance RogueKiller.exe.

▶ (Note: 
Si RogueKiller.exe ne se lance pas, change son nom en Winlogon.exe)

▶ Attendre que le Prescan ait fini ...
▶ Cliques sur Scan.

▶ Laisse l'outil scanner ton disque dur sans l'interrompre et sans utiliser le PC
▶ A la fin du scan, clique sur Suppression, puis sur Rapport.
▶ Héberges le rapport et postes le lien généré.
▶ (Note: Sites d'hébergement: cjoint.com, pjjoint.malekal.com)

▶ Ferme RogueKiller et tous les programmes.

▶ Rerelance RogueKiller.
▶ Cliques sur Racc. RAZ, puis sur Rapport
▶ Héberges le rapport et postes le lien généré.
▶ (Note: Sites d'hébergement: cjoint.com, pjjoint.malekal.com)

===========================================

Amicalement Navid, alias <desten>
.::. Intégrateur web & Contributeur Sécurité Niveau Intermédiaire .::.
1
Réponse 2 / 14
Navid_92 Messages postés 711 Date d'inscription dimanche 7 décembre 2008 Statut Membre Dernière intervention 12 février 2015 87
Modifié par Navid_92 le 23/05/2012 à 23:25
Re :)

▶ Cela te dit quelque chose : ri.cgocable.ca?
▶ Fais attention aux torrents, car ce sont souvent des sources d'infections.

===========================================

▶ Copie tout le texte présent en gras ci-dessous
▶ Note: (tu le selectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C)

File Execution Options - APVXDWIN.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - AUTODOWN.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - avastsvc.exe - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - avastui.exe - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - AVCONSOL.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - AVE32.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - AVGCTRL.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - AVKSERV.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - AVNT.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - AVP32.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - AVPCC.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - AVPDOS32.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - AVPM.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - AVPTC32.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - AVPUPD.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - AVSCHED32.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - AVWIN95.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - AVWUPD32.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - BLACKD.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - BLACKICE.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - CFIADMIN.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - CFIAUDIT.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - CFINET.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - CFINET32.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - CLAW95.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - CLAW95CF.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - CLEANER.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - CLEANER3.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - DVP95.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - DVP95_0.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - ECENGINE.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - ESAFE.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - F-AGNT95.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - F-PROT.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - F-PROT95.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - F-STOPW.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - FINDVIRU.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - FP-WIN.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - FPROT.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - FRW.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - IAMAPP.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - IAMSERV.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - IBMASN.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - IBMAVSP.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - ICLOAD95.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - ICLOADNT.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - ICMON.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - ICSUPP95.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - ICSUPPNT.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - IEInstal.exe - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - IFACE.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - IOMON98.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - JEDI.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - LOCKDOWN2000.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - LOOKOUT.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - LUALL.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - MOOLIVE.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - MPFTRAY.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - msascui.exe - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - msseces.exe - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - N32SCANW.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - Navapsvc.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - Navapw32.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - NAVLU32.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - NAVNT.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - navw32.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - NAVWNT.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - NISUM.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - NORMIST.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - NUPGRADE.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - NVC95.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - PAVCL.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - PAVSCHED.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - PAVW.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - PCCWIN98.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - PCFWALLICON.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - PERSFW.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - RAV7.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - RAV7WIN.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - SAFEWEB.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - SCAN32.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - SCAN95.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - SCANPM.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - SCRSCAN.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - SERV95.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - SMC.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - SPHINX.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - SWEEP95.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - TBSCAN.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - TCA.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - TDS2-98.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - TDS2-NT.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - VET95.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - VETTRAY.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - VSCAN40.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - VSECOMR.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - VSHWIN32.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - VSSTAT.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - WEBSCANX.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - WFINDV32.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - ZONEALARM.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - _AVP32.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - _AVPCC.EXE - svchost.exe => Microsoft Service Host Process or Malware
O50 - IFEO:Image File Execution Options - _AVPM.EXE - svchost.exe => Microsoft Service Host Process or Malware
O45 - LFCP:[MD5.F45E587378E2709995C131D6097E38E8] - 2012-05-15 - 10:44:18 ---A- - C:\Windows\Prefetch\AgCx_SC1.db.trx
O45 - LFCP:[MD5.A3ECCB4E0A8F76AD822B64F5F53882FA] - 2012-05-15 - 10:45:18 ---A- - C:\Windows\Prefetch\AgCx_SC1.db
O45 - LFCP:[MD5.5FE545D851433E5B005CACBC288F2AC5] - 2012-05-22 - 11:11:53 ---A- - C:\Windows\Prefetch\WUAUCLT.EXE-70318591.pf
O45 - LFCP:[MD5.6217AE2DFCE2F5DCB08FC91B71E29C7C] - 2012-05-22 - 16:44:24 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-411A328D.pf
O45 - LFCP:[MD5.DEA01FF2031298B8A341259168CD0A15] - 2012-05-22 - 18:20:05 ---A- - C:\Windows\Prefetch\VLC.EXE-A11F73EE.pf
O45 - LFCP:[MD5.42F96E111562730FBFE12651377EB046] - 2012-05-22 - 19:58:28 ---A- - C:\Windows\Prefetch\UTORRENT.EXE-1070971C.pf
O45 - LFCP:[MD5.C28CB1680B6B408870920A142158B91B] - 2012-05-22 - 20:23:03 ---A- - C:\Windows\Prefetch\ERRORREPORTLAUNCHER.EXE-6EE7B68D.pf
O45 - LFCP:[MD5.7F92EDE66A8E89461C340ADB5724A3FB] - 2012-05-22 - 20:23:06 ---A- - C:\Windows\Prefetch\MEDIAGO.EXE-97C67C8B.pf
O45 - LFCP:[MD5.AFE4659C8A52BB9C1693ADB0F8B20048] - 2012-05-23 - 00:06:13 ---A- - C:\Windows\Prefetch\SETUP[1].EXE-034D2618.pf
O45 - LFCP:[MD5.A0A999D0D0BC121ED34CF93332025750] - 2012-05-23 - 00:06:22 ---A- - C:\Windows\Prefetch\SC.EXE-945D79AE.pf
O45 - LFCP:[MD5.E191709794D9FBB500D4A7E2DD247D4C] - 2012-05-23 - 00:06:23 ---A- - C:\Windows\Prefetch\MSHTA.EXE-A970B441.pf
O45 - LFCP:[MD5.9F66CFF2BAA1864201C18E7C7FB466B8] - 2012-05-23 - 00:06:23 ---A- - C:\Windows\Prefetch\PROTECTOR-GEBL.EXE-B0628761.pf
O45 - LFCP:[MD5.8A37462D704914869ECB449EC0186585] - 2012-05-23 - 00:10:59 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-BBFEBA64.pf
O45 - LFCP:[MD5.CC9AADBF3F9EDC201B2F05BE5A3C02B8] - 2012-05-23 - 00:11:11 ---A- - C:\Windows\Prefetch\CCLEANER.EXE-D4D76A60.pf
O45 - LFCP:[MD5.802B2FD773E8C68DE3FDA4572AD8CDB6] - 2012-05-23 - 00:29:54 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-A3E35360.pf
O45 - LFCP:[MD5.63A7FD069DACB2FDD0C3D309AEDFCE3C] - 2012-05-23 - 00:35:38 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-B4581880.pf
O45 - LFCP:[MD5.2B1955B2C5F3611DC48948ACA297A2AE] - 2012-05-23 - 00:37:34 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-9D876338.pf
O45 - LFCP:[MD5.802604D4AAC74A45EFCE3F49AECD82C8] - 2012-05-23 - 00:39:08 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-46C4447E.pf
O45 - LFCP:[MD5.C1B3848D548EE278F33E1DD3AB42B2F2] - 2012-05-23 - 00:41:02 ---A- - C:\Windows\Prefetch\INTEGRATOR.EXE-84638148.pf
O45 - LFCP:[MD5.B1297424BEC4DED01C1B90BD25EF4331] - 2012-05-23 - 00:41:59 ---A- - C:\Windows\Prefetch\JUNKCLEANER.EXE-54221B5F.pf
O45 - LFCP:[MD5.28457C7CAA7A40F5ED31F5B24086EF69] - 2012-05-23 - 00:45:04 ---A- - C:\Windows\Prefetch\REGREPAIR.EXE-772FD0CA.pf
O45 - LFCP:[MD5.294135449B78D1F353F0CFFD91D21ECF] - 2012-05-23 - 00:45:50 ---A- - C:\Windows\Prefetch\SHORTCUTSFIXER.EXE-6F83B17E.pf
O45 - LFCP:[MD5.E18BD8A2588132CB3F8EDB07B7853FA0] - 2012-05-23 - 00:46:15 ---A- - C:\Windows\Prefetch\UNINSTALLER.EXE-716BDCF2.pf
O45 - LFCP:[MD5.83EBBF73ACCDD749945F24458B305D39] - 2012-05-23 - 00:54:43 ---A- - C:\Windows\Prefetch\AVSREGISTRYCLEANER[1].EXE-2D53F004.pf
O45 - LFCP:[MD5.FA7431910591AB0C7CD904DD9CF34B78] - 2012-05-23 - 00:54:44 ---A- - C:\Windows\Prefetch\AVSREGISTRYCLEANER[1].TMP-56A4975B.pf
O45 - LFCP:[MD5.8A3DBDF81BC79555CBF2DA8CB24C6C05] - 2012-05-23 - 00:55:09 ---A- - C:\Windows\Prefetch\REGCLEANDATAGRABBER.EXE-C2165882.pf
O45 - LFCP:[MD5.9686F7E3A69070883BDDC318EBA6767D] - 2012-05-23 - 00:55:13 ---A- - C:\Windows\Prefetch\AVS4YOUSOFTWARENAVIGATOR.EXE-C45CA228.pf
O45 - LFCP:[MD5.BDDCC0C71AD3AA0E7775B1B9D822B37B] - 2012-05-23 - 00:55:13 ---A- - C:\Windows\Prefetch\AVS4YOUSOFTWARENAVIGATOR.TMP-B2C56F73.pf
O45 - LFCP:[MD5.77992171162335B9121ABCCB0C68D7FF] - 2012-05-23 - 00:55:14 ---A- - C:\Windows\Prefetch\AVSINSTLAUNCHER.EXE-7754C39C.pf
O45 - LFCP:[MD5.8F0C26C3F0E4C9EBC7374211BF0F440D] - 2012-05-23 - 00:55:14 ---A- - C:\Windows\Prefetch\AVSINSTLAUNCHER.EXE-D91CC56D.pf
O45 - LFCP:[MD5.92A8962C3D6157408C7E6AFF9B540DA5] - 2012-05-23 - 00:55:14 ---A- - C:\Windows\Prefetch\AVSUPDATEMANAGER.EXE-AD6800DB.pf
O45 - LFCP:[MD5.5C87DFA8CEEFA04405C60D774753C9AB] - 2012-05-23 - 00:55:14 ---A- - C:\Windows\Prefetch\AVSUPDATEMANAGER.TMP-B5B86D1D.pf
O45 - LFCP:[MD5.AC3069362F502B0696E6C2FC7BFA403F] - 2012-05-23 - 00:55:14 ---A- - C:\Windows\Prefetch\REGISTRATION.EXE-4BCCF351.pf
O45 - LFCP:[MD5.66587B771116D436A0E4F7BFD95CD649] - 2012-05-23 - 00:55:14 ---A- - C:\Windows\Prefetch\REGISTRATION.TMP-E702069B.pf
O45 - LFCP:[MD5.2805F8C55985A81A24E1AA90294A470F] - 2012-05-23 - 01:01:26 ---A- - C:\Windows\Prefetch\ZASETUPWEB_101_065_000[1].EXE-D520C91F.pf
O45 - LFCP:[MD5.3138D02CEF5D05AFD226510CC95A50D7] - 2012-05-23 - 01:03:17 ---A- - C:\Windows\Prefetch\CACLS.EXE-D332D70E.pf
O45 - LFCP:[MD5.960FCACD57CCB96EE30E05389A7AD81F] - 2012-05-23 - 01:03:17 ---A- - C:\Windows\Prefetch\ICACLS.EXE-E79D2D93.pf
O45 - LFCP:[MD5.5F5F2DA0589A8FEE159E56B5FBFC9152] - 2012-05-23 - 01:03:17 ---A- - C:\Windows\Prefetch\TAKEOWN.EXE-A80759AD.pf
O45 - LFCP:[MD5.47852C8EF3026AF22222DF58B7C27F81] - 2012-05-23 - 01:03:22 ---A- - C:\Windows\Prefetch\CLEAN_TOOL.EXE-D4C60925.pf
O45 - LFCP:[MD5.A9337137B32AE21660946C691BA5DA64] - 2012-05-23 - 01:03:23 ---A- - C:\Windows\Prefetch\SCHK.EXE-A6E1E4FB.pf
O45 - LFCP:[MD5.4262CA57DAC22A2340C194DB4B71592F] - 2012-05-23 - 01:03:26 ---A- - C:\Windows\Prefetch\ISWINST.EXE-5A7E1F8D.pf
O45 - LFCP:[MD5.4603775E41134246F8F88D934818C508] - 2012-05-23 - 01:03:28 ---A- - C:\Windows\Prefetch\LCHK.EXE-8CC256B4.pf
O45 - LFCP:[MD5.003EE72CB2D0A239E5FF870D6CE3A519] - 2012-05-23 - 01:03:28 ---A- - C:\Windows\Prefetch\ZAFFSETUP-LT-FR-1001.EXE-C4551F32.pf
O45 - LFCP:[MD5.1BAB8E5400079F8C38581AE4ED55E21B] - 2012-05-23 - 01:03:36 ---A- - C:\Windows\Prefetch\ISWSVC.EXE-1FA58B3B.pf
O45 - LFCP:[MD5.FFB87337EC758CD16403F4A98BC75100] - 2012-05-23 - 01:03:38 ---A- - C:\Windows\Prefetch\FORCEFIELD.EXE-3271118F.pf
O45 - LFCP:[MD5.D0C9AFA40C0478361FFE85A5CCB58585] - 2012-05-23 - 01:03:47 ---A- - C:\Windows\Prefetch\DRVINST.EXE-4CB4314A.pf
O45 - LFCP:[MD5.CEF4151C2C38F281521ABF9CCEA20979] - 2012-05-23 - 01:03:49 ---A- - C:\Windows\Prefetch\VSDRINST.EXE-DFB74E30.pf
O45 - LFCP:[MD5.F7EAD8C4F3A6C3270FE0D2E7CBA3FE31] - 2012-05-23 - 01:05:15 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-4642071F.pf
O45 - LFCP:[MD5.E6CC7CC8DAD6618BAC59084343178B61] - 2012-05-23 - 01:05:24 ---A- - C:\Windows\Prefetch\ZATRAY.EXE-33E4157E.pf
O45 - LFCP:[MD5.3C832B5E7B13B248CA83B6D57710A01C] - 2012-05-23 - 01:12:30 ---A- - C:\Windows\Prefetch\CLEANER8_WEB_SETUP[1].EXE-4D7E67FE.pf
O45 - LFCP:[MD5.3D681314257CAF193895C75740331484] - 2012-05-23 - 01:13:06 ---A- - C:\Windows\Prefetch\CLEANER8_SETUP.EXE-47B50DA6.pf
O45 - LFCP:[MD5.E5AA59F6B7F91571598949780D128A30] - 2012-05-23 - 01:13:06 ---A- - C:\Windows\Prefetch\CLEANER8_SETUP.TMP-C289E9E1.pf
O45 - LFCP:[MD5.D5E9F8B4A7ACBBF5C95779520A2BA3FE] - 2012-05-23 - 01:13:28 ---A- - C:\Windows\Prefetch\SE.EXE-4F933A55.pf
O45 - LFCP:[MD5.DDB8B5D851723393888AC4DA4A5C2A27] - 2012-05-23 - 01:14:09 ---A- - C:\Windows\Prefetch\CLEANER8.EXE-2B011F3F.pf
O45 - LFCP:[MD5.8A29B874A2B6FFAB812179D826374918] - 2012-05-23 - 01:28:06 ---A- - C:\Windows\Prefetch\AVSREGISTRYCLEANER.EXE-567B92EB.pf
O45 - LFCP:[MD5.4D8E9B8D022F48F0D0197101B2AFD958] - 2012-05-23 - 06:58:49 ---A- - C:\Windows\Prefetch\AGENTANTIDOTE.EXE-5EBF30EF.pf
O45 - LFCP:[MD5.ED034F4C12D97FEAE1816651DAFE766B] - 2012-05-23 - 06:58:49 ---A- - C:\Windows\Prefetch\APSDAEMON.EXE-6E0EB72B.pf
O45 - LFCP:[MD5.4AC42F799B5A5C31A4B9451367CE28FE] - 2012-05-23 - 06:58:49 ---A- - C:\Windows\Prefetch\JUSCHED.EXE-D10FBD13.pf
O45 - LFCP:[MD5.B5E29841024CC24AE4676A70905799C1] - 2012-05-23 - 06:58:49 ---A- - C:\Windows\Prefetch\LANGUAGE.EXE-F41A6404.pf
O45 - LFCP:[MD5.13F7120E13E9DFB31DBBA7FDD61FDFF9] - 2012-05-23 - 06:58:49 ---A- - C:\Windows\Prefetch\MUISTARTMENU.EXE-C5476593.pf
O45 - LFCP:[MD5.CA01BF097A98CF535B1EA22784C19DFB] - 2012-05-23 - 06:58:49 ---A- - C:\Windows\Prefetch\NVRAIDSERVICE.EXE-5FC08819.pf
O45 - LFCP:[MD5.9D377E603F174855C173D49B70829686] - 2012-05-23 - 06:58:49 ---A- - C:\Windows\Prefetch\PDVD8SERV.EXE-01460626.pf
O45 - LFCP:[MD5.B20329F4FA8BFD28039764730AFA3210] - 2012-05-23 - 07:21:27 ---A- - C:\Windows\Prefetch\GOOGLETOOLBARMANAGER_F91D44FA-9B8CCD63.pf
O45 - LFCP:[MD5.E6710987E2EFC586253113F31137CA79] - 2012-05-23 - 07:21:27 ---A- - C:\Windows\Prefetch\GOOGLEUPDATEONDEMAND.EXE-A1AA8C60.pf
O45 - LFCP:[MD5.08A7075ACF22CF377E4E5976D9C32782] - 2012-05-23 - 07:49:25 ---A- - C:\Windows\Prefetch\ZHPDIAG2[1].EXE-6AB45F53.pf
O45 - LFCP:[MD5.C2F765D96177B33508ED57DC241770F9] - 2012-05-23 - 07:49:25 ---A- - C:\Windows\Prefetch\ZHPDIAG2[1].TMP-A28AB97D.pf
O45 - LFCP:[MD5.56AF1ACF6C24E4D821D9A99D20CB36DA] - 2012-05-23 - 07:49:39 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-B4F69A53.pf
O45 - LFCP:[MD5.115E053F3F290FB1665F96AA70246432] - 2012-05-23 - 08:52:28 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-A8502821.pf
O45 - LFCP:[MD5.199365C6AE42AA84AF6E2BED52121EFE] - 2012-05-23 - 09:06:29 ---A- - C:\Windows\Prefetch\VDSLDR.EXE-6B089E8B.pf
O45 - LFCP:[MD5.1552E71A54EE5374ACFC7783FD6B0811] - 2012-05-23 - 09:06:31 ---A- - C:\Windows\Prefetch\RSTRUI.EXE-2D50C58D.pf
O45 - LFCP:[MD5.B3317386A74AFDF9580C6CA64C49B84A] - 2012-05-23 - 09:06:32 ---A- - C:\Windows\Prefetch\WBENGINE.EXE-28FD7E8B.pf
O45 - LFCP:[MD5.F8BB997710B52D648CBEC4F8800AFE28] - 2012-05-23 - 09:06:33 ---A- - C:\Windows\Prefetch\VDS.EXE-6E7946F9.pf
O45 - LFCP:[MD5.95A9CD19F52321BB7D6000AB235D6107] - 2012-05-23 - 09:14:02 ---A- - C:\Windows\Prefetch\CONTROL.EXE-817F8F1D.pf
O45 - LFCP:[MD5.26C0693764CCAC2027FA912E6ED88D12] - 2012-05-23 - 10:11:33 ---A- - C:\Windows\Prefetch\CLI.EXE-B3817BB7.pf
O45 - LFCP:[MD5.7004109487BD8D8BC12A2D3410532A84] - 2012-05-23 - 10:19:24 ---A- - C:\Windows\Prefetch\REGSVR32.EXE-8461DBEE.pf
O45 - LFCP:[MD5.70483F2D49B110A2B2AA8D42B3785E1A] - 2012-05-23 - 10:26:27 ---A- - C:\Windows\Prefetch\RUNDLL32.EXE-02CC9EFF.pf
O45 - LFCP:[MD5.FA6AC2687FFE0DAE000F946165228F5B] - 2012-05-23 - 10:28:32 ---A- - C:\Windows\Prefetch\ISWUPDE.EXE-FDB9B923.pf
O45 - LFCP:[MD5.B007331B3973E0B7B85750F4BDEE1432] - 2012-05-23 - 10:43:36 ---A- - C:\Windows\Prefetch\GOOGLETOOLBARNOTIFIER.EXE-EB3F2433.pf
O45 - LFCP:[MD5.E372EBEE9A7E0C4C4B61C294944535BF] - 2012-05-23 - 10:49:45 ---A- - C:\Windows\Prefetch\GOOGLETOOLBARUSER_32.EXE-4E14BB2A.pf
O45 - LFCP:[MD5.D34EAFC6A19BC06C8E08F711D91E40DC] - 2012-05-23 - 10:49:45 ---A- - C:\Windows\Prefetch\IEXPLORE.EXE-908C99F8.pf
O45 - LFCP:[MD5.03438434DF3F466B813FB7F1F917DD45] - 2012-05-23 - 10:49:46 ---A- - C:\Windows\Prefetch\VID-SAVER.EXE-6DE54D70.pf
O45 - LFCP:[MD5.12BCB6D1B9773160245D0FA41177A757] - 2012-05-23 - 10:49:52 ---A- - C:\Windows\Prefetch\STARDOLLTOOLBARHELPER.EXE-7C4A8147.pf
O45 - LFCP:[MD5.D1E4FA355A8C12A21DA10DFD21F5ABF8] - 2012-05-23 - 12:29:00 ---A- - C:\Windows\Prefetch\FLASHPLAYERUPDATESERVICE.EXE-ECAD9571.pf
O45 - LFCP:[MD5.049C45D32DF3C55B8C45EE2EC5ED963B] - 2012-05-23 - 12:33:06 ---A- - C:\Windows\Prefetch\AgGlUAD_S-1-5-21-3651656642-2806257590-2429663036-1000.db
O45 - LFCP:[MD5.42C5D155F92D57E7AB6A0588E097801F] - 2012-05-23 - 12:33:07 ---A- - C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-3651656642-2806257590-2429663036-1000.db
O45 - LFCP:[MD5.2A60DBB8A89A203526C33253D09C66BE] - 2012-05-23 - 12:34:32 ---A- - C:\Windows\Prefetch\AgGlFaultHistory.db
O45 - LFCP:[MD5.10A97E425622ECBC3C42BC5F8C6EBF2B] - 2012-05-23 - 12:34:32 ---A- - C:\Windows\Prefetch\AgGlFgAppHistory.db
O45 - LFCP:[MD5.B126CA3F003E685400713427370BE7D0] - 2012-05-23 - 12:34:32 ---A- - C:\Windows\Prefetch\AgGlGlobalHistory.db
O45 - LFCP:[MD5.67DA40648617E2CFB4B370CDE80EA2E8] - 2012-05-23 - 12:34:32 ---A- - C:\Windows\Prefetch\AgRobust.db
O45 - LFCP:[MD5.1302628DB433F7EA13C640CDB48CF5EE] - 2012-05-23 - 12:39:04 ---A- - C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf
O45 - LFCP:[MD5.16C7540546B83CE821B7AC3E33E03F7D] - 2012-05-23 - 12:39:33 ---A- - C:\Windows\Prefetch\PRESENTATIONFONTCACHE.EXE-74B3ADF6.pf
O45 - LFCP:[MD5.99A4788E83E06B34D6F260A283F42ACF] - 2012-05-23 - 12:40:33 ---A- - C:\Windows\Prefetch\MSCORSVW.EXE-C3C515BD.pf
O45 - LFCP:[MD5.6E3BF8B69FE2E48248A8533F7C4F77DD] - 2012-05-23 - 12:40:34 ---A- - C:\Windows\Prefetch\GOOGLEUPDATE.EXE-FE771DDA.pf
O45 - LFCP:[MD5.500BBD9F8511AEDFF5D50EA33F0A049F] - 2012-05-23 - 12:41:40 ---A- - C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-3CC531E5.pf
O45 - LFCP:[MD5.3A3AB645C9870B9DAE4B6C54E5A095FB] - 2012-05-23 - 12:42:23 ---A- - C:\Windows\Prefetch\WMIADAP.EXE-F8DFDFA2.pf
O45 - LFCP:[MD5.8E1E8B2392D60DF1C2200F084BFE85BA] - 2012-05-23 - 12:51:25 ---A- - C:\Windows\Prefetch\WERMGR.EXE-0F2AC88C.pf
O45 - LFCP:[MD5.0765A76609E4D89F977BCC2AED2A5CB3] - 2012-05-23 - 12:53:55 ---A- - C:\Windows\Prefetch\REG.EXE-E7E8BD26.pf
O45 - LFCP:[MD5.51FB1CFC94A9FA72B89B66EBE75E1A54] - 2012-05-23 - 12:54:06 ---A- - C:\Windows\Prefetch\VSSVC.EXE-B8AFC319.pf
O45 - LFCP:[MD5.3CD5D0617496BBBA2997FF3E1DE0CA1E] - 2012-05-23 - 12:55:24 ---A- - C:\Windows\Prefetch\NOTEPAD.EXE-D8414F97.pf
O45 - LFCP:[MD5.ECAB68AA3D3AEE9BB0B777A4A3581379] - 2012-05-23 - 12:56:33 ---A- - C:\Windows\Prefetch\SNDVOL.EXE-5D4CC7D6.pf
O45 - LFCP:[MD5.FA841DEF937E84FF52471535AAC33688] - 2012-05-23 - 12:57:54 ---A- - C:\Windows\Prefetch\PHOTOSCREENSAVER.SCR-BE555075.pf
O45 - LFCP:[MD5.558BAD875232C96F6B1E78D10146648D] - 2012-05-23 - 13:09:59 ---A- - C:\Windows\Prefetch\VSMON.EXE-78322D56.pf
O45 - LFCP:[MD5.6F3656BCA01CBB1750DA3E1490AC2B5C] - 2012-05-23 - 13:10:29 ---A- - C:\Windows\Prefetch\CONSENT.EXE-531BD9EA.pf
O45 - LFCP:[MD5.E31BE35A9A5CA8AAD484EEC5A4923D4D] - 2012-05-23 - 13:11:00 ---A- - C:\Windows\Prefetch\TASKHOST.EXE-7238F31D.pf
O45 - LFCP:[MD5.151491AD93BB14BE396112E069124AF7] - 2012-05-23 - 13:11:16 ---A- - C:\Windows\Prefetch\CMD.EXE-4A81B364.pf
O45 - LFCP:[MD5.D9A14AB09EC0D707AD60B52D2B5C6E24] - 2012-05-23 - 13:11:16 ---A- - C:\Windows\Prefetch\CSCRIPT.EXE-D1EF4768.pf
O45 - LFCP:[MD5.72C31802C7550887AF2D9365BAFF9537] - 2012-05-23 - 13:11:22 ---A- - C:\Windows\Prefetch\SPPSVC.EXE-B0F8131B.pf
O45 - LFCP:[MD5.C4530FFAA1DABD91AB542096236E77AB] - 2012-05-23 - 13:11:24 ---A- - C:\Windows\Prefetch\PV.EXE-7B89A1E7.pf
O45 - LFCP:[MD5.754D9C1ACDFD6C245470AFD3DBA9CB5D] - 2012-05-23 - 13:11:29 ---A- - C:\Windows\Prefetch\SCHTASKS.EXE-5CA45734.pf
O45 - LFCP:[MD5.D2EF5084CA0D5145EB7F751812D6ACDA] - 2012-05-23 - 23:11:06 ---A- - C:\Windows\Prefetch\FLASHUTIL32_11_2_202_235_ACTI-7CE49090.pf


▶ Puis lance ZHPFix qui est déjà sur ton bureau normalement (icone "serringue").
▶ Une fois l'outil ZHPFix ouvert, clique sur le bouton (H) ("coller les lignes Helper").
▶ Dans l'encadré principal tu verras donc les lignes que tu as copié précédemment apparaitrent.
▶ Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.
▶ Clique sur le bouton GO
▶ Copie/Colle le rapport à l'écran dans ton prochain message.

===========================================

▶ Fais la mise à jour MalwareBytes Anti-Malware et un scan complet.
▶ Héberges le rapport et postes le lien généré.
▶ (Note: Sites d'hébergement: cjoint.com, pjjoint.malekal.com)

===========================================

▶ On va passer à du lourd, donc lis attentivement les instructions!
▶ La procédure est bien détaillé ici : Utilisation de ComboFix
▶ Héberges le rapport et postes le lien généré.
▶ (Note: Sites d'hébergement: cjoint.com, pjjoint.malekal.com)

===========================================

Donc j'attends le rapport ZHPFix, MBAM, et COMBOFIX.
Après avoir tout fait, dit moi comment se porte le pc.

Amicalement Navid, alias <desten>
.::. Intégrateur web & Contributeur Sécurité Niveau Intermédiaire .::.
1
eleck
23 mai 2012 à 23:34
Pour ta question, ri.cgocable.ca c'est supposé être mon cablodistributeur
0
Navid_92 Messages postés 711 Date d'inscription dimanche 7 décembre 2008 Statut Membre Dernière intervention 12 février 2015 87
23 mai 2012 à 23:42
Supposé ? Je dis ça car le site ne marche pas.
0
Réponse 3 / 14
eleck
24 mai 2012 à 05:58
Et maintenant, le rapport de COMBOFIX:

http://cjoint.com/?BEyfsvWPVHE

En ce qui concerne l'état de mon PC, il ne va pas vraiment mieux. Je n'ai toujours pas accès à internet et je ne suis pas capable d'activer mes antivirus, pare feu, etc. Je crois bien que le virus est toujours présent :(

Cette fois c'est moi qui va aller dormir un peu, en croisant les doigts pour que tu aie encore une ou deux solutions à me proposer demain ;)

Merci beaucoup
1
Navid_92 Messages postés 711 Date d'inscription dimanche 7 décembre 2008 Statut Membre Dernière intervention 12 février 2015 87
24 mai 2012 à 22:10
je ne suis pas capable d'activer mes antivirus, pare feu
Pouvez-vous détailler un peu ?
0
eleck
24 mai 2012 à 22:48
J'ai réessayé de me connecter à internet mais je n'y arrive pas, j'ai aussi essayé d'activer mon antivirus car il est désactivé. Je ne peux plus l'activer car l'action ne se fais pas. Une fenêtre de contrôle de compte d'utilisateur s'ouvre constamment et se multiplie en s'accumulant dans le bas de mon écran. La fenêtre me demande " Voulez-vous autoriser le programme suivant ( Pare feu Windows) à apporter des modifications à cet ordinateur?" que je réponde oui ou non, la fenêtre se referme et aucune action ne se produit. Une nouvelle fenêtre identique s'ouvre une minute après.
0
Navid_92 Messages postés 711 Date d'inscription dimanche 7 décembre 2008 Statut Membre Dernière intervention 12 février 2015 87
24 mai 2012 à 22:59
Si tu as ZoneAlarm, désinstalle le, et réinstalle le.
Mais juste avant de le réinstaller, désactive celui de windows, car ils rentrent en conflit:
Démarrer > Panneau de configuration > Centre de sécurité > Pare feu Windows > Cocher "désactivé"
0
Réponse 4 / 14
antipolis a Messages postés 15609 Date d'inscription mercredi 5 novembre 2008 Statut Membre Dernière intervention 12 novembre 2014 2 859
23 mai 2012 à 18:56
Bonjour.

Virus, Ô Gentil Virus, . . .

Et je vais me repépéter pour au moins la 10² ième fois.
Utilisez deux partitions.
Une pour le système et les programmes,
l'autre pour les données.
Et, surtout si votre PC est aussi votre outil de travail,
===============================
FAITES DES IMAGES DE VOTRE SYSTEME,
FAITES DES SAUVEGARDES DE VOS DONNEES.
C'EST CERTAIN,
UN JOUR OU L'AUTRE, VOUS EN AUREZ BESOIN
===============================
, mais vous n'êtes pas obligé de me croire.

Parce que là, vous allez galérer.
0
Navid_92 Messages postés 711 Date d'inscription dimanche 7 décembre 2008 Statut Membre Dernière intervention 12 février 2015 87
23 mai 2012 à 19:09
C'est vrai qu'il faut toujours fait un backup sur un dd externe surtout quand c'est notre outil de travail.
0
eleck
23 mai 2012 à 19:13
bonjour,
Est-ce que tu pourrais me montrer comment ont fais? Avant, j'avais plus d'une partition mais celui qui m'a réparé mon ordinateur la dernière fois m'a tout mis ensemble sous prétexte que c'était mieux... Pouvez-vous m'aider aussi sur ce point ?
0
Navid_92 Messages postés 711 Date d'inscription dimanche 7 décembre 2008 Statut Membre Dernière intervention 12 février 2015 87
23 mai 2012 à 19:25
Fais la désinfection, après on te fera deux partitions tkt.
0
eleck
23 mai 2012 à 19:31
merci
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 14
Navid_92 Messages postés 711 Date d'inscription dimanche 7 décembre 2008 Statut Membre Dernière intervention 12 février 2015 87
Modifié par Navid_92 le 23/05/2012 à 19:12
Bonsoir, je vais essayé de t'aider.

Si vous utilisez win7 ou vista ou win8, il faudra:

▶ A chaque exécution de programme, faire clic droit sur l'icone.
▶ Sélectionner "Exécuter en tant qu'administrateur".</gras>
▶ (Puis Continuer si la boîte de dialogue UAC s'affiche.)

===========================================

▶ ▶ ▶ [Étape N°1] [AdwCleaner (de Xplode)]

▶ Télécharge sur le bureau et lance AdwCleaner0 (merci Xplode)
▶ Clique sur [Suppression], puis patiente le temps du scan.
▶ Un redémarrage sera demandé, acceptes.
▶ Après un rapport va s'afficher, héberges-le et postes le lien généré.
▶ (Le rapport se trouve là: C:\AdwCleaner[S1].txt)
▶ (Note: Sites d'hébergement: cjoint.com, pjjoint.malekal.com)

===========================================

▶ ▶ ▶ [Étape N°2] [ZHPFix (de Nicolas Coolman)]

▶ Copie tout le texte présent en gras ci-dessous
▶ Note: (tu le selectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C)

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: Modified => INTERNET EXPLORER : Supprime message de connexion sécurisée
[MD5.89C8A5C0C1EC2FC3FBAB0B62855199B7] - (...) -- C:\Users\Gino Tardif\AppData\Roaming\Protector-gebl.exe [1948160] [PID.3092]
O4 - HKCU\..\Run: [Inspector] . (...) -- C:\Users\Gino Tardif\AppData\Roaming\Protector-gebl.exe
O4 - HKUS\S-1-5-21-3651656642-2806257590-2429663036-1000\..\Run: [Inspector] . (...) -- C:\Users\Gino Tardif\AppData\Roaming\Protector-gebl.exe
[HKCU\Software\AppDataLow\Software\PriceGong] => Infection BT (Adware.PriceGong)
[HKLM\Software\Freeze.com] => Infection BT (Adware.BHO)
O43 - CFD: 2012-03-15 - 17:40:12 - [0,178] ----D C:\ProgramData\TheBflix => Infection BT (Adware.Agent)
O43 - CFD: 2011-10-03 - 21:13:01 - [0,005] ----D C:\Users\Gino Tardif\AppData\Roaming\CrazyLoader => Infection BT (Adware.SPointer)
O50 - IFEO:Image File Execution Options - regedit.exe - C:\Users\Gino Tardif\AppData\Roaming\Protector-gebl.exe reg
O50 - IFEO:Image File Execution Options - taskmgr.exe - C:\Users\Gino Tardif\AppData\Roaming\Protector-gebl.exe task
[MD5.89C8A5C0C1EC2FC3FBAB0B62855199B7] [SPRF][2012-05-23] (...) -- C:\Users\Gino Tardif\AppData\Roaming\Protector-gebl.exe [1948160]
O87 - FAEL: "{7DF018F7-5455-4CE8-ABCE-64F49C345D26}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files\CrazyLoader\crazyloader.exe (.not file.) => Infection BT (Adware.SPointer)
O87 - FAEL: "{1B5CDF23-6ECD-475D-BD81-D3A2E851C2FB}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files\CrazyLoader\crazyloader.exe (.not file.) => Infection BT (Adware.SPointer)
[HKCU\Software\JavaSoft\Prefs\crazyloader]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110011221158}] => Infection BT (PUP.RewardsArcade)
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110011221158}] => Infection BT (PUP.RewardsArcade)
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011221158}] => Infection BT (PUP.RewardsArcade)
[HKLM\Software\freeze.com] => Infection BT (Adware.BHO)
[HKCU\Software\AppDataLow\Software\PriceGong] => Infection BT (Adware.PriceGong)
C:\ProgramData\TheBflix => Infection BT (Adware.Agent)
C:\Users\Gino Tardif\AppData\Roaming\Crazyloader => Infection BT (Adware.SPointer)
C:\Users\Gino Tardif\AppData\LocalLow\PriceGong => Infection BT (Adware.PriceGong)
C:\Users\Gino Tardif\AppData\LocalLow\TheBflix => Infection BT (Adware.Agent)
P2 - FPN: [HKLM] [@microsoft.com/VirtualEarth3D,version=4.0] - (...) -- (.not file.)
[MD5.00000000000000000000000000000000] [APT] [RunAsStdUser Task] (...) -- C:\Program Files\VooMuu\bin\1.0.36.0\VooMuuSA.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{2DF69B02-7941-49B6-B5D0-37B63EA3838A}] (...) -- C:\Users\Gino Tardif\Downloads\Jigsaw Puzzle 2 Platinum\jp2naturesetup.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{448116B6-91FB-45EF-B2DC-51E2CCFB7C10}] (...) -- C:\Users\Gino Tardif\Downloads\Jigsaw Puzzle 2 Platinum\jp2forkidssetup.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{88100B78-115D-4CF8-99D6-311FE880C5F9}] (...) -- C:\Users\Gino Tardif\Downloads\Jigsaw Puzzle 2 Platinum\jp2artsetup.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{AA0BB4CC-0532-40C0-9B03-A54657383CB1}] (...) -- C:\Users\Gino Tardif\Downloads\Jigsaw Puzzle 2 Platinum\jp2animalssetup.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{ACDBDE5E-52F2-453A-80EB-ECC345900519}] (...) -- D:\MP3set4_13\Setup.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{BAE24EF3-135D-4131-A949-A6C6C8E09B4D}] (...) -- C:\Users\Gino Tardif\Downloads\Jigsaw Puzzle 2 Platinum\jp2mixiisetup.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{D8E5CBC2-9ACB-475B-AD9D-97FFA5FB610F}] (...) -- C:\Users\Gino Tardif\Downloads\Jigsaw Puzzle 2 Platinum\jp2mixsetup.exe (.not file.)
O43 - CFD: 2011-09-05 - 11:01:52 - [0] ----D C:\Users\Gino Tardif\AppData\Local\{A83D4A65-3ECC-40AF-B74C-D7346641A9E5}
O51 - MPSK:{4d21b074-49f8-11e1-a33c-002185082e79}\AutoRun\command. (...) -- F:\PcOptions.exe (.not file.)
O87 - FAEL: "TCP Query User{98AF9330-43FF-432D-AA1D-0438B54F9421}C:\users\gino tardif\appdata\local\temp\jdic_0_9_5\ieembed.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\gino tardif\appdata\local\temp\jdic_0_9_5\ieembed.exe (.not file.)
O87 - FAEL: "UDP Query User{295812C4-34AD-4526-BBC3-CC1E2507CFA6}C:\users\gino tardif\appdata\local\temp\jdic_0_9_5\ieembed.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\gino tardif\appdata\local\temp\jdic_0_9_5\ieembed.exe (.not file.)
R3 - URLSearchHook: Stardoll Toolbar - {192a6019-26d2-4611-aead-07cd7733b146} . (.Conduit Ltd. - Conduit Toolbar.) (6.4.0.0) -- C:\Program Files\Stardoll\prxtbStar.dll
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Conduit Ltd. - Conduit Toolbar.) (No version) -- (.not file.) => Toolbar.Conduit
R3 - URLSearchHook: Stardoll Toolbar - {192a6019-26d2-4611-aead-07cd7733b146} . (.Conduit Ltd. - Conduit Toolbar.) (6.4.0.0) -- C:\Program Files\Stardoll\prxtbStar.dll
R3 - URLSearchHook: (no name) - {b2ed7faf-72a0-46d1-9d9d-602226f5cb9f} . (.Conduit Ltd. - Conduit Toolbar.) (No version) -- (.not file.) => Toolbar.Conduit
O2 - BHO: Stardoll - {192a6019-26d2-4611-aead-07cd7733b146} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Stardoll\prxtbStar.dll
O3 - Toolbar: Stardoll Toolbar - [HKLM]{192a6019-26d2-4611-aead-07cd7733b146} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Stardoll\prxtbStar.dll
[HKCU\Software\AppDataLow\Software\ConduitSearchScopes] => Toolbar.Conduit
[HKCU\Software\AppDataLow\Software\Conduit] => Toolbar.Conduit
[HKCU\Software\AppDataLow\Toolbar] => Toolbar.Conduit
O43 - CFD: 2011-12-02 - 13:55:55 - [1,218] ----D C:\Program Files\Conduit => Toolbar.Conduit
O43 - CFD: 2012-03-15 - 17:39:48 - [1,730] ----D C:\Users\Gino Tardif\AppData\Local\Conduit => Toolbar.Conduit
O69 - SBI: SearchScopes [HKCU] {afdbddaa-5d3f-42ee-b79c-185a7020515b} - (Vgrabber Customized Web Search) - http://search.conduit.com => Toolbar.Conduit
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}] => Toolbar.Conduit
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}] => Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{b2ed7faf-72a0-46d1-9d9d-602226f5cb9f}] => Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}] => Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}] => Toolbar.Agent
[HKCU\Software\AppDataLow\Software\ConduitSearchScopes] => Toolbar.Conduit
[HKCU\Software\AppDataLow\Toolbar] => Toolbar.Conduit
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine]
C:\Program Files\Conduit => Toolbar.Conduit
C:\Users\Gino Tardif\AppData\Local\Conduit => Toolbar.Conduit
C:\Users\Gino Tardif\AppData\LocalLow\Conduit => Toolbar.Conduit
EmptyTemp
EmptyFlash
EmptyCLSID
Sysrestore
FirewallRaz
HOSTFix
PROXYFix


▶ Puis lance ZHPFix qui est déjà sur ton bureau normalement (icone "serringue").
▶ Une fois l'outil ZHPFix ouvert, clique sur le bouton (H) ("coller les lignes Helper").
▶ Dans l'encadré principal tu verras donc les lignes que tu as copié précédemment apparaitrent.
▶ Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.
▶ Clique sur le bouton GO
▶ Copie/Colle le rapport à l'écran dans ton prochain message.

===========================================

▶ ▶ ▶ [Étape N°3] [ZHPDiag (de Nicolas Coolman)]

▶ Télécharge sur le bureau ZHPDiag (merci Nicolas Coolman)
▶ Installe le logiciel en suivant les étapes indiquées.
▶ A la fin de l'installation,
[X] Cocher la case: Ajouter une icône sur le bureau
[_] Décocher la case: Exécuter ZHPDiag
▶ Clic droit sur le logo de ZHPdiag (parchemin)
▶ Puis « Exécuter en tant qu'Administrateur »
▶ Clique sur l'icône en forme de tournevis
▶ Clique sur le bouton Tous.
▶ Clique sur l'icône en forme de loupe pour lancer le diagnostique.
▶ Enregistre le rapport sur ton Bureau à l'aide de l'icône de disquette.
▶ Héberges le rapport et postes le lien généré.
▶ (Note: Sites d'hébergement: cjoint.com, pjjoint.malekal.com)

===========================================

Amicalement Navid, alias <desten>
.::. Intégrateur web & Contributeur Sécurité Niveau Intermédiaire .::.
0
Réponse 6 / 14
eleck
23 mai 2012 à 19:45
voilà le rapport de AdwCleaner

http://cjoint.com/?BExtR2hXbD4
0
Réponse 7 / 14
eleck
23 mai 2012 à 20:00
et voilà pour la 2e étape, le rapport de ZHPFix:

Rapport de ZHPFix 1.2.06 par Nicolas Coolman, Update du 17/05/2012
Fichier d'export Registre :
Run by Gino Tardif at 2012-05-23 13:54:21
Windows 7 Home Premium Edition, 32-bit Service Pack 1 (Build 7601)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Web site : http://nicolascoolman.skyrock.com/

========== Clé(s) du Registre ==========
ABSENT Key: HKCU\Software\AppDataLow\Software\PriceGong
ABSENT Key: HKLM\Software\Freeze.com
ABSENT Key: O50 - IFEO:Image File Execution Options - regedit.exe - C:\Users\Gino Tardif\AppData\Roaming\Protector-gebl.exe reg
ABSENT Key: O50 - IFEO:Image File Execution Options - taskmgr.exe - C:\Users\Gino Tardif\AppData\Roaming\Protector-gebl.exe task
ABSENT Key: HKCU\Software\JavaSoft\Prefs\crazyloader
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110011221158}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110011221158}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011221158}
SUPPRIME Key*: Mozilla Plugin: @microsoft.com/VirtualEarth3D,version=4.0
SUPPRIME CLSID MPSK: {4d21b074-49f8-11e1-a33c-002185082e79}
SUPPRIME Key*: CLSID BHO: {192a6019-26d2-4611-aead-07cd7733b146}
ABSENT Key: HKCU\Software\AppDataLow\Software\ConduitSearchScopes
ABSENT Key: HKCU\Software\AppDataLow\Software\Conduit
ABSENT Key: HKCU\Software\AppDataLow\Toolbar
ABSENT SearchScopes :{afdbddaa-5d3f-42ee-b79c-185a7020515b}
ABSENT Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
ABSENT Key: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
SUPPRIME Key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{b2ed7faf-72a0-46d1-9d9d-602226f5cb9f}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine

========== Valeur(s) du Registre ==========
ABSENT RunValue: Inspector
SUPPRIME {7DF018F7-5455-4CE8-ABCE-64F49C345D26}
SUPPRIME {1B5CDF23-6ECD-475D-BD81-D3A2E851C2FB}
ABSENT TCP Query User{98AF9330-43FF-432D-AA1D-0438B54F9421}C:/users/gino tardif/appdata/local/temp/jdic_0_9_5/ieembed.exe
ABSENT UDP Query User{295812C4-34AD-4526-BBC3-CC1E2507CFA6}C:/users/gino tardif/appdata/local/temp/jdic_0_9_5/ieembed.exe
SUPPRIME URLSearchHook: {192a6019-26d2-4611-aead-07cd7733b146}
SUPPRIME URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497}
SUPPRIME URLSearchHook: {b2ed7faf-72a0-46d1-9d9d-602226f5cb9f}
SUPPRIME Toolbar: {192a6019-26d2-4611-aead-07cd7733b146}
ABSENT Valeur Standard Profile: FirewallRaz :
ABSENT Valeur Domain Profile: FirewallRaz :
SUPPRIME FirewallRaz (Domain) : NetPres-In-TCP-NoScope
SUPPRIME FirewallRaz (Domain) : NetPres-Out-TCP-NoScope
SUPPRIME FirewallRaz (None) : NetPres-WSD-In-UDP
SUPPRIME FirewallRaz (None) : NetPres-WSD-Out-UDP
SUPPRIME FirewallRaz (Public) : NetPres-In-TCP
SUPPRIME FirewallRaz (Public) : NetPres-Out-TCP
SUPPRIME FirewallRaz (Private) : TCP Query User{98AF9330-43FF-432D-AA1D-0438B54F9421}C:\users\gino tardif\appdata\local\temp\jdic_0_9_5\ieembed.exe
SUPPRIME FirewallRaz (Private) : UDP Query User{295812C4-34AD-4526-BBC3-CC1E2507CFA6}C:\users\gino tardif\appdata\local\temp\jdic_0_9_5\ieembed.exe
SUPPRIME FirewallRaz (Private) : {E32BF591-CC0E-448E-87FA-F7E7271290F6}
SUPPRIME FirewallRaz (Private) : {0FE445BB-17C4-46C9-B410-FCA1E9B7FD74}
ProxyFix : Configuration proxy supprimée avec succès
SUPPRIME ProxyServer Value
SUPPRIME ProxyEnable Value
SUPPRIME EnableHttp1_1 Value
SUPPRIME ProxyHttp1.1 Value
SUPPRIME ProxyOverride Value

========== Elément(s) de donnée du Registre ==========
REMPLACE Value WarnOnHTTPSToHTTPRedirect : Good (1) - Bad (0)

========== Dossier(s) ==========

========== Fichier(s) ==========
ABSENT Folder/File: c:\users\gino tardif\appdata\roaming\protector-gebl.exe
ABSENT File: c:\users\gino tardif\appdata\roaming\protector-gebl.exe
ABSENT Folder/File: c:\programdata\thebflix
ABSENT Folder/File: c:\users\gino tardif\appdata\roaming\crazyloader
ABSENT Folder/File: c:\users\gino tardif\appdata\locallow\pricegong
SUPPRIME File: c:\program files\stardoll\prxtbstar.dll
ABSENT File: c:\program files\stardoll\prxtbstar.dll
ABSENT Folder/File: c:\program files\conduit
ABSENT Folder/File: c:\users\gino tardif\appdata\local\conduit
ABSENT Folder/File: c:\users\gino tardif\appdata\locallow\conduit
SUPPRIME Temporaires Windows:
SUPPRIME Flash Cookies:

========== Tache planifiée ==========
SUPPRIME Task: RunAsStdUser Task
SUPPRIME Task: {2DF69B02-7941-49B6-B5D0-37B63EA3838A}
SUPPRIME Task: {448116B6-91FB-45EF-B2DC-51E2CCFB7C10}
SUPPRIME Task: {88100B78-115D-4CF8-99D6-311FE880C5F9}
SUPPRIME Task: {AA0BB4CC-0532-40C0-9B03-A54657383CB1}
SUPPRIME Task: {ACDBDE5E-52F2-453A-80EB-ECC345900519}
SUPPRIME Task: {BAE24EF3-135D-4131-A949-A6C6C8E09B4D}
SUPPRIME Task: {D8E5CBC2-9ACB-475B-AD9D-97FFA5FB610F}

========== Restauration Système ==========
Point de restauration du système créé avec succès


========== Récapitulatif ==========
21 : Clé(s) du Registre
27 : Valeur(s) du Registre
1 : Elément(s) de donnée du Registre
12 : Fichier(s)
8 : Tache planifiée
1 : Restauration Système


End of clean in 00mn 33s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 2012-05-23 13:54:21 [5595]
0
Réponse 8 / 14
eleck
23 mai 2012 à 20:17
et pour la 3e étape le rapport de ZHPdiag:

http://cjoint.com/?BExupLHrLPx
0
Réponse 9 / 14
eleck
23 mai 2012 à 22:44
bonjour,
voilà le rapport de ZHPFix:


Rapport de ZHPDiag v1.31.092 par Nicolas Coolman, Update du 17/05/2012
Run by Gino Tardif at 2012-05-23 14:11:12
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Web site : http://nicolascoolman.skyrock.com/
State : Problème connexion internet


---\\ Web Browser
MSIE: Internet Explorer v8.0.7601.17514 (Defaut)

---\\ Windows Product Information
~ Langage: Français
Windows 7 Home Premium Edition, 32-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_COA_SLP channel
Windows ID Activation : OK
~ Windows Partial Key : 9QD34
Windows License : OK
~ Windows Remaining Initializations Number : 4
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ System Information
~ Processor: x86 Family 6 Model 23 Stepping 6, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3071 MB (71% free)
System Restore: Activé (Enable)
System drive C: has 212 GB (45%) free of 466 GB

---\\ Logged in mode
~ Computer Name: GINOTARDIF-PC
~ User Name: Gino Tardif
~ All Users Names: HomeGroupUser$, Gino Tardif, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Gino Tardif\AppData\Roaming\
~ %Desktop% : C:\Users\Gino Tardif\Desktop\
~ %Favorites% : C:\Users\Gino Tardif\Favorites\
~ %LocalAppData% : C:\Users\Gino Tardif\AppData\Local\
~ %StartMenu% : C:\Users\Gino Tardif\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 212 Go of 466 Go)
D:\ CD-ROM drive (Not Inserted)
E:\ Floppy drive, Flash card reader, USB Key (Free 4 Go of 4 Go)
G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
J:\ Floppy drive, Flash card reader, USB Key (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Scan Security Center in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - (.Microsoft Corporation - Explorateur Windows.) (.2011-02-25 - 00:30:54.) -- C:\Windows\Explorer.exe [2616320]
[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.2009-07-13 - 20:14:45.) -- C:\Windows\System32\Wininit.exe [96256]
[MD5.7CCA8574A3B9BB41A4150739E21F1B23] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.2012-02-28 - 00:38:52.) -- C:\Windows\System32\wininet.dll [981504]
[MD5.6D13E1406F50C66E2A95D97F22C47560] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.2010-11-20 - 07:17:54.) -- C:\Windows\System32\Winlogon.exe [286720]
[MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Bibliothèque de licences.) (.2010-11-20 - 07:21:24.) -- C:\Windows\System32\sppcomapi.dll [193536]
[MD5.9EBBBA55060F786F0FCAA3893BFA2806] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.2011-04-24 - 21:18:03.) -- C:\Windows\system32\Drivers\AFD.sys [338944]
[MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.2009-07-13 - 20:26:15.) -- C:\Windows\system32\Drivers\atapi.sys [21584]
[MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.2009-07-13 - 18:11:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [70656]
[MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.2010-11-20 - 03:38:10.) -- C:\Windows\system32\Drivers\Cdrom.sys [108544]
[MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.2010-11-20 - 03:42:32.) -- C:\Windows\system32\Drivers\DfsC.sys [78336]
[MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.2010-11-20 - 04:59:29.) -- C:\Windows\system32\Drivers\HDAudBus.sys [108544]
[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) (.2009-07-13 - 18:11:24.) -- C:\Windows\system32\Drivers\i8042prt.sys [80896]
[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.2009-07-13 - 18:54:29.) -- C:\Windows\system32\Drivers\IpNat.sys [101888]
[MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.2011-04-26 - 21:17:22.) -- C:\Windows\system32\Drivers\MRxSmb.sys [123904]
[MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) (.2010-11-20 - 03:39:44.) -- C:\Windows\system32\Drivers\netBT.sys [187904]
[MD5.81189C3D7763838E55C397759D49007A] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.2011-03-11 - 00:39:00.) -- C:\Windows\system32\Drivers\ntfs.sys [1211264]
[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parallèle.) (.2009-07-13 - 18:45:35.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.2009-07-13 - 18:54:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [78848]
[MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.2009-07-13 - 18:53:41.) -- C:\Windows\system32\Drivers\smb.sys [71168]
[MD5.B459575348C20E8121D6039DA063C704] - (.Microsoft Corporation - TDI Translation Driver.) (.2010-11-20 - 03:39:17.) -- C:\Windows\system32\Drivers\tdx.sys [74752]
[MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.2010-11-20 - 07:30:16.) -- C:\Windows\system32\Drivers\volsnap.sys [245632]
~ Scan Generic Processes in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/3045
~ Mes musiques (My Musics) : 1/2120
~ Mes Favoris (My Favorites) : 1/300
~ Mes Documents (My Documents) : 1/2818
~ Mon Bureau (My Desktop) : 1/1102
~ Menu demarrer (Programs) : 0/40
~ Scan Hidden Files in 00mn 04s



---\\ Processus lancés
[MD5.5B590ED157BAAAD76F71A148741E8E9C] - (.Check Point Software Technologies - ZoneAlarm Browser Security.) -- C:\Program Files\CheckPoint\ZAForceField\ForceField.exe [738944] [PID.2328]
[MD5.0E34B7BB1FCF22BCC1E394D16F9E992B] - (.Microsoft Corporation - GrooveMonitor Utility.) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040] [PID.2496]
[MD5.54FA8528EDA1B6B34615F4EA3FCB35E6] - (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [103720] [PID.2504]
[MD5.28FD28A29C637C9AFEFE0A26E27C6DFE] - (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe [91432] [PID.2568]
[MD5.98A078F838A70F84E1BD490D7C7675F4] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [254696] [PID.2624]
[MD5.3E13D0E8967C094E705D8C9345D82659] - (.NVIDIA Corporation - NVIDIA RAID Service French language.) -- C:\Windows\System32\nvraidservice.exe [163872] [PID.2636]
[MD5.229922C9FE865E952A5C101B29F33D8A] - (.Druide informatique inc. - AgentAntidote.) -- C:\Program Files\Druide\Antidote 7\Programmes32\agentantidote.exe [942656] [PID.2724]
[MD5.4B9949208944C50B1A16FD1F05ED0A04] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [299008] [PID.2976]
[MD5.A9CF5B35BC5C59CD538B54788E9110AF] - (.Check Point Software Technologies LTD - ZoneAlarm.) -- C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe [73360] [PID.3516]
[MD5.A9950F1C63BA70151803C6F24CEE23F3] - (.ATI Technologies Inc. - Catalyst Control Center: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [299008] [PID.3748]
[MD5.32C26797AB646074A2BB562F9D10ADB5] - (.Microsoft Corporation - Microsoft Office OneNote Quick Launcher.) -- C:\Program Files\Microsoft Office\Office12\ONENOTEM.exe [97680] [PID.3828]
[MD5.7D7337936C6B975F826D86CD212F9C3B] - (...) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [4537344] [PID.644]
[MD5.50EBBB86E493BD9AB7DDF914A90EEF8E] - (.AMD - AMD External Events Service Module.) -- C:\Windows\system32\atiesrxx.exe [217600] [PID.]
[MD5.F3F9EC157D66487678885AE651A5AA3B] - (.AMD - AMD External Events Client Module.) -- C:\Windows\system32\atieclxx.exe [451072] [PID.]
[MD5.5B2CCEF06F96DFB22893AB8F0B3F891D] - (.Check Point Software Technologies - ZoneAlarm Browser Security.) -- C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [497280] [PID.]
[MD5.62B7936F9036DD6ED36E6A7EFA805DC0] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [63928] [PID.]
[MD5.C96C52D0D80666AF585516FFA97B7C00] - (.Pas de propriétaire - app_filter Module.) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [387616] [PID.]
[MD5.7CF1B716372B89568AE4C0FE769F5869] - (.Microsoft Corporation - Machine Debug Manager.) -- C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872] [PID.]
[MD5.8CFCA7E2FD4B57C2BEF929C1C1A4C56E] - (.Pas de propriétaire - RichVideo Module.) -- C:\Program Files\CyberLink\Shared files\RichVideo.exe [271760] [PID.]
[MD5.B6C48D01147EC020DE7F1856734127F8] - (.Pas de propriétaire - NVIDIA Corporation.) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [178720] [PID.]
[MD5.794D4B48DFB6E999537C7C3947863463] - (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [1153368] [PID.]
[MD5.E56F39F6B7FDA0AC77A79B0FD3DE1A2F] - (.Microsoft Corporation - PresentationFontCache.exe.) -- C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [42856] [PID.]
[MD5.804D1B3F83682288619DF795543BF382] - (.Microsoft Corporation - Interface utilisateur de consentement pour.) -- C:\Windows\system32\consent.exe [101760] [PID.]
[MD5.CF87A1DE791347E75B98885214CED2B8] - (.Microsoft Corporation - Service de la plateforme de protection logi.) -- C:\Windows\system32\sppsvc.exe [3179520] [PID.]
~ Scan Processes Running in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.6.4.634.) -- C:\Windows\system32\Adobe\Director\np32dsw.dll
P2 - FPN: [HKLM] [@checkpoint.com/FFApi] - (.Pas de propriétaire - npFFApi.) -- C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll
P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_31 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll
P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com # win # 5.2.2.0.) -- C:\Program Files\ma-config.com\nphardwaredetection.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.10411.0.) -- c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
P2 - FPN: [HKLM] [@playstation.com/PsndlCheck,version=1.00] - (.Sony Computer Entertainment Inc. - PlayStation(R)Network Downloader Check Plug-in.) -- C:\Program Files\Sony\PLAYSTATION Network Downloader\nppsndl.dll
P2 - FPN: [HKLM] [@SonyCreativeSoftware.com/Media Go,version=1.0] - (.Sony Network Entertainment International LL - 2.1.) -- C:\Program Files\Sony\Media Go\npmediago.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.3.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
P2 - FPN: [HKCU] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS - Unity Player 3.4.1f5.) -- C:\Users\Gino Tardif\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
~ Scan Firefox Browser in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: (no name) - {192a6019-26d2-4611-aead-07cd7733b146} . (.Unity Technologies ApS - Unity Player 3.4.1f5.) (No version) -- (.not file.)
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Scan Keys in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 25



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: CrossriderApp0003491 - {11111111-1111-1111-1111-110011341191} . (.215 Apps - Vid-Saver BHO.) -- C:\Program Files\Vid-Saver\Vid-Saver.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - GrooveShellExtensions Module.) -- C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} . (.Check Point Software Technologies - ZoneAlarm Browser Security.) -- C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
~ Scan BHO in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: ZoneAlarm Security Engine - [HKLM]{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} . (.Check Point Software Technologies - ZoneAlarm Browser Security.) -- C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
~ Scan Toolbar in 00mn 00s



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Run: [GrooveMonitor] . (.Microsoft Corporation - GrooveMonitor Utility.) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
O4 - HKLM\..\Run: [CLMLServer] . (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
O4 - HKLM\..\Run: [UpdateP2GoShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Run: [RemoteControl8] . (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe
O4 - HKLM\..\Run: [PDVD8LanguageShortcut] . (.CyberLink Corp. - PowerDVD Language Application.) -- C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe
O4 - HKLM\..\Run: [UpdatePSTShortCut] . (.CyberLink Corp. - StartMen Application.) -- C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe
O4 - HKLM\..\Run: [NVRaidService] . (.NVIDIA Corporation - NVIDIA RAID Service French language.) -- C:\Windows\system32\nvraidservice.exe
O4 - HKLM\..\Run: [agentantidote.exe] . (.Druide informatique inc. - AgentAntidote.) -- C:\Program Files\Druide\Antidote 7\Programmes32\agentantidote.exe
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe
O4 - HKLM\..\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [AMD AVT] . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\System32\Cmd.exe
O4 - HKLM\..\Run: [ISW] . (.Check Point Software Technologies - ZoneAlarm Browser Security.) -- C:\Program Files\CheckPoint\ZAForceField\ForceField.exe
O4 - HKLM\..\Run: [ZoneAlarm] . (.Check Point Software Technologies LTD - ZoneAlarm.) -- C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [tcactive] . (.MooSoft Development LLC - TCActive! GUI.) -- C:\Program Files\The Cleaner\tcap.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-21-3651656642-2806257590-2429663036-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-21-3651656642-2806257590-2429663036-1000\..\Run: [tcactive] . (.MooSoft Development LLC - TCActive! GUI.) -- C:\Program Files\The Cleaner\tcap.exe
O4 - HKUS\S-1-5-21-3651656642-2806257590-2429663036-1000\..\Run: [SpybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
~ Scan Application in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\Gino Tardif\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Gino Tardif\Desktop\Glary Utilities.lnk . (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities\Integrator.exe
O4 - Global Startup: C:\Users\Gino Tardif\Desktop\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Gino Tardif\Desktop\Microsoft Office Word 2007.lnk . (...) -- C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
O4 - Global Startup: C:\Users\Gino Tardif\Desktop\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
O4 - Global Startup: C:\Users\Gino Tardif\Desktop\vGrabber YouTube Download.lnk . (...) -- C:\Program Files\v-Grabber\youtubeDL.exe
O4 - Global Startup: C:\Users\Gino Tardif\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Free File Opener.lnk . (.Free File Opener, LLC.) -- C:\Program Files\Free File Opener\FreeFileOpener.exe
O4 - Global Startup: C:\Users\Gino Tardif\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Gino Tardif\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk . (.BitTorrent, Inc..) -- C:\Program Files\uTorrent\uTorrent.exe
~ Scan Global Startup in 00mn 00s



---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\Program Files\MICROS~3\Office12\EXCEL.exe
~ Scan IE Menu Contextuel in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: &Envoyer à OneNote - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO
O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO
~ Scan IE Extra Buttons in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
~ Scan Winsock in 00mn 00s



---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} ("Ma-Config.com control) - http://www.ma-config.com/plugins/MaConfig_5_2_2_0.cab
~ Scan Objets ActiveX in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{9B922C0F-CC67-43C8-8891-24CF5F054B31}: DhcpNameServer = 205.151.67.2 205.151.67.6
O17 - HKLM\System\CCS\Services\Tcpip\..\{9B922C0F-CC67-43C8-8891-24CF5F054B31}: DhcpDomain = ri.cgocable.ca
O17 - HKLM\System\CS1\Services\Tcpip\..\{9B922C0F-CC67-43C8-8891-24CF5F054B31}: DhcpNameServer = 205.151.67.2 205.151.67.6
O17 - HKLM\System\CS1\Services\Tcpip\..\{9B922C0F-CC67-43C8-8891-24CF5F054B31}: DhcpDomain = ri.cgocable.ca
O17 - HKLM\System\CS2\Services\Tcpip\..\{9B922C0F-CC67-43C8-8891-24CF5F054B31}: DhcpNameServer = 205.151.67.2 205.151.67.6
O17 - HKLM\System\CS2\Services\Tcpip\..\{9B922C0F-CC67-43C8-8891-24CF5F054B31}: DhcpDomain = ri.cgocable.ca
~ Scan Domain in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (...) --
O18 - Handler: dvd - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (...) --
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (...) --
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (...) --
O18 - Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} . (.Microsoft Corporation - GrooveSystemServices Module.) -- C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (...) --
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (...) --
O18 - Handler: its - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (...) --
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (...) --
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (...) --
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (...) --
O18 - Handler: mhtml - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (...) --
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (...) --
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (...) --
O18 - Handler: tv - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (...) --
O18 - Handler: vbscript - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (...) --
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (...) --
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (...) --
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (...) --
O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (...) --
O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (...) --
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.dll
~ Scan Protocole Additionnel in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ Scan SSODL in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe
O23 - Service: ForceWare Intelligent Application Manage (ForceWare Intelligent Application Manager (IAM)) . (.Pas de propriétaire - app_filter Module.) - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: ZoneAlarm Toolbar IswSvc (IswSvc) . (.Check Point Software Technologies - ZoneAlarm Browser Security.) - C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
O23 - Service: ForceWare IP service (nSvcIp) . (.Pas de propriétaire - NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Pas de propriétaire - RichVideo Module.) - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) . (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
~ Scan Services in 00mn 00s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Scan Desktop Component in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GlaryInitialize.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[MD5.76D5A3D2A50402A0B9B6ED13C4371E79] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
[MD5.5FDE5BCB531195834F026FBF856CC5CF] [APT] [GlaryInitialize] (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities\initialize.exe
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.00000000000000000000000000000000] [APT] [{8FE8B9AE-0AD2-4E73-988C-5C28049286DD}] (...) -- C:\Program Files\QuickTime\QuickTimePlayer.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{FEB2EE38-9E49-449E-80AA-834D2E52CD1A}] (...) -- C:\Program Files\QuickTime\QuickTimePlayer.exe (.not file.)
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
~ Scan Scheduled Task in 00mn 02s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d'IEAK.) -- C:\Windows\System32\iedkcs32.dll
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Scan Active Setup in 00mn 00s



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (Vsdatant) . (.Check Point Software Technologies LTD - ZoneAlarm Firewalling Driver.) - C:\Windows\System32\DRIVERS\vsdatant.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Scan Drivers in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM] -- {A25FF1C0-80B6-4B8B-A551-DC525697A408}
O42 - Logiciel: AMD Accelerated Video Transcoding - (.Advanced Micro Devices, Inc..) [HKLM] -- {071E3D6A-79AB-0085-8CCF-EF52AEC6666F}
O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM] -- {CE3DF04B-D674-369C-8469-75285614A8C4}
O42 - Logiciel: AMD Drag and Drop Transcoding - (.Advanced Micro Devices, Inc..) [HKLM] -- {1808A2AC-DB66-6B80-9340-F6476390CB18}
O42 - Logiciel: AMD Media Foundation Decoders - (.Advanced Micro Devices, Inc..) [HKLM] -- {F335228B-0FFC-F617-08C7-A4E072441FBE}
O42 - Logiciel: AVS Registry Cleaner version 2.2 - (.Online Media Technologies Ltd..) [HKLM] -- AVSRegistryCleaner_is1
O42 - Logiciel: AVS Update Manager 1.0 - (.Online Media Technologies Ltd..) [HKLM] -- AVS Update Manager_is1
O42 - Logiciel: AVS4YOU Software Navigator 1.4 - (.Online Media Technologies Ltd..) [HKLM] -- AVS4YOU Software Navigator_is1
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {FE23D063-934D-4829-A0D8-00634CE79B4A}
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Reader X (10.1.3) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
O42 - Logiciel: Adobe Shockwave Player 11.6 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
O42 - Logiciel: Antidote HD - (.Druide informatique inc..) [HKLM] -- {56CDB4FE-895F-4E0D-8BB4-9A8D4310898D}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {A83279FD-CA4B-4206-9535-90974DE76654}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: Auslogics Disk Defrag - (.Auslogics Software Pty Ltd.) [HKLM] -- {DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1
O42 - Logiciel: Bing Maps 3D - (.Microsoft Corporation.) [HKLM] -- {2D87E961-577B-492B-AD54-1368680FB9A7}
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: Catalyst Control Center - Branding - (.Advanced Micro Devices, Inc..) [HKLM] -- {03D4C700-2BFE-43E0-A0B4-9512B43C5B9F}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: Free File Opener v2011.7.0.1 - (.Free File Opener, LLC.) [HKLM] -- Free File Opener_is1
O42 - Logiciel: Glary Utilities 2.43.0.1419 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {4286E640-B5FB-11DF-AC4B-005056C00008}
O42 - Logiciel: Java(TM) 6 Update 31 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216031FF}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: LG CyberLink Power2Go - (.CyberLink Corp..) [HKLM] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: LG CyberLink Power2Go - (.CyberLink Corp..) [HKLM] -- {40BF1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: LG CyberLink PowerDVD - (.CyberLink Corp..) [HKLM] -- InstallShield_{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}
O42 - Logiciel: LG CyberLink PowerDVD - (.CyberLink Corp..) [HKLM] -- {2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}
O42 - Logiciel: LG Power Tools - (.CyberLink Corp..) [HKLM] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: LG Power Tools - (.CyberLink Corp..) [HKLM] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: MP3 Player Utilities 4.13 - (. .) [HKLM] -- {8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {1B19A54C-3692-4D12-BFD9-1362DD34CE78}
O42 - Logiciel: Malwarebytes Anti-Malware version 1.61.0.1400 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Media Go - (.Sony.) [HKLM] -- {DBF1AE39-DA30-4B89-A7EB-3BDA675C5D9E}
O42 - Logiciel: Media Go Video Playback Engine 1.88.110.12050 - (.Sony.) [HKLM] -- {7FA1DAFD-AF55-E915-FD92-F269443A2ADF}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}
O42 - Logiciel: Microsoft Antimalware Service FR-FR Language Pack - (.Microsoft Corporation.) [HKLM] -- {32E9C1A5-0FDA-4483-987D-DBABF9CC1DD8}
O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}
O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}
O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}
O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}
O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}
O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}
O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}
O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}
O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_ENTERPRISE_{8283FD64-6A3B-4104-9E12-7CA25EF29A1A}
O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}
O42 - Logiciel: Microsoft Office 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-00BA-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}
O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Enterprise 2007 - (.Microsoft Corporation.) [HKLM] -- ENTERPRISE
O42 - Logiciel: Microsoft Office Enterprise 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0030-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office File Validation Add-In - (.Microsoft Corporation.) [HKLM] -- {90140000-2005-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Groove MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00BA-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_ENTERPRISE_{3E8EA473-ECCE-405F-A9CA-59446AEADD3A}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_ENTERPRISE_{2C95E7EE-FEA7-4B3A-A6E5-DF90A88B816A}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}
O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM] -- {0F842B77-56EA-4AAF-8295-81A022350B5E}
O42 - Logiciel: Microsoft Security Client FR-FR Language Pack - (.Microsoft Corporation.) [HKLM] -- {50779A29-834E-4E36-BBEB-B7CABC67A825}
O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM] -- Microsoft Security Client
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - KB2467175 - (.Microsoft Corporation.) [HKLM] -- {a0fe116e-9a8a-466f-aee0-625cb7c207e3}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F}
O42 - Logiciel: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 - (.Microsoft Corporation.) [HKLM] -- {196BB40D-1578-3D01-B289-BEFC77A11A1E}
O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack
O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers
O42 - Logiciel: NVIDIA ForceWare Network Access Manager - (.NVIDIA Corporation.) [HKLM] -- InstallShield_{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}
O42 - Logiciel: NVIDIA ForceWare Network Access Manager - (.NVIDIA Corporation.) [HKLM] -- {7CFA46E3-CC2F-4355-82AE-6012DC3633FD}
O42 - Logiciel: NWZ-E460 WALKMAN Guide - (.Sony Corporation.) [HKLM] -- {A4D58206-7E8F-41F2-BD94-85009F3AEA28}
O42 - Logiciel: PlayStation(R)Network Downloader - (.Sony Computer Entertainment Inc..) [HKLM] -- {B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}
O42 - Logiciel: PlayStation(R)Store - (.Sony Computer Entertainment Inc..) [HKLM] -- {0E532C84-4275-41B3-9D81-D4A1A20D8EE7}
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2478663
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2518870
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2539636
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2572078
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2604121
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2633870
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2656351
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2656368
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2656405
O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{5DD3FF90-B302-45B2-A188-C5EA7ACD5D46}
O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A0D5F849-D9D5-48ED-99D0-C74D7BFA6A09}
O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E34960DB-2A93-45DB-A208-02650F7AB09C}
O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{293FB6BE-D3EB-4162-B522-F9108040B9FE}
O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2596880) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{31C0F635-15AD-4AA3-A3C6-B542B403D0EE}
O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2597162) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3069CE04-082C-4669-9BA1-E6AA66330C1F}
O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{2B3C041A-A7F2-4A24-968D-4BEB6A123D15}
O42 - Logiciel: Security Update for Microsoft Office 2007 suites (KB2598041) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{ABB5F56F-FC55-4C7E-9622-B8A1E670BAFC}
O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2597161) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{B4C12F08-B0EF-4CC4-AD5F-381DD62BF640}
O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edi - (.Microsoft.) [HKLM] -- {90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{AEA16A27-0B97-4670-818F-A98D06EC0A6F}
O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edi - (.Microsoft.) [HKLM] -- {90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0EF0D4FB-BB23-4515-AAEA-1240AC2DA525}
O42 - Logiciel: Security Update for Microsoft Office Publisher 2007 (KB2596705) 32-Bit Edit - (.Microsoft.) [HKLM] -- {90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{5A8732F0-C20F-4A9B-A2A9-66FE7A586C35}
O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2596917) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{075C2272-0881-46D3-B3A5-1D83D6940270}
O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client P - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2478663
O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client P - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2518870
O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1
O42 - Logiciel: Stardoll Toolbar - (.Stardoll.) [HKLM] -- Stardoll Toolbar
O42 - Logiciel: The Cleaner 2012 - (.MooSoft Development LLC.) [HKLM] -- The Cleaner_is1
O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU] -- UnityWebPlayer
O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}
O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2468871) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2468871
O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2533523) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2533523
O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2600217) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2600217
O42 - Logiciel: Update for Microsoft Office 2007 (KB2508958) - (.Microsoft.) [HKLM] -- {90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}
O42 - Logiciel: Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2598290) 32-B - (.Microsoft.) [HKLM] -- {90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{FF2E1543-EDB3-4B96-989C-A97DA428D88E}
O42 - Logiciel: VC 9.0 Runtime - (.Check Point Software Technologies Ltd.) [HKLM] -- {02E89EFC-7B07-4D5A-AA03-9EC0902914EE}
O42 - Logiciel: VLC media player 1.1.11 - (.VideoLAN.) [HKLM] -- VLC media player
O42 - Logiciel: Vid-Saver - (.215 Apps.) [HKLM] -- Vid-Saver
O42 - Logiciel: WinRAR 4.11 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver
O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite
O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- {34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {D45240D3-B6B3-4FF9-B243-54ECE3E10066}
O42 - Logiciel: Windows Live ID Sign-in Assistant - (.Microsoft Corporation.) [HKLM] -- {C6150D8A-86ED-41D3-87BB-F3BB51B0B77F}
O42 - Logiciel: Windows Live Installer - (.Microsoft Corporation.) [HKLM] -- {0B0F231F-CE6A-483D-AA23-77B364F75917}
O42 - Logiciel: Windows Live MIME IFilter - (.Microsoft Corporation.) [HKLM] -- {AF844339-2F8A-4593-81B3-9F4C54038C4E}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9D56775A-93F3-44A3-8092-840E3826DE30}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9FAE6E8D-E686-49F5-A574-0A58DFD9580C}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {AB61A2E9-37D3-485D-9085-19FBDF8CEF4A}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {E5B21F11-6933-4E0B-A25C-7963E3C07D11}
O42 - Logiciel: Windows Live PIMT Platform - (.Microsoft Corporation.) [HKLM] -- {83C292B7-38A5-440B-A731-07070E81A64F}
O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {A9BDCA6B-3653-467B-AC83-94367DA3BFE3}
O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {C893D8C0-1BA0-4517-B11C-E89B65E72F70}
O42 - Logiciel: Windows Live SOXE - (.Microsoft Corporation.) [HKLM] -- {682B3E4F-696A-42DE-A41C-4C07EA1678B4}
O42 - Logiciel: Windows Live SOXE Definitions - (.Microsoft Corporation.) [HKLM] -- {200FEC62-3C34-4D60-9CE8-EC372E01C08F}
O42 - Logiciel: Windows Live UX Platform - (.Microsoft Corporation.) [HKLM] -- {CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}
O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM] -- {05E379CC-F626-4E7D-8354-463865B303BF}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {AAAFC670-569B-4A2F-82B4-42945E0DE3EF}
O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM] -- {62687B11-58B5-4A18-9BC3-9DF4CE03F194}
O42 - Logiciel: ZoneAlarm Firewall - (.Check Point Software Technologies Ltd..) [HKLM] -- {5D6C26B9-D9E7-4E77-A4DE-0C2B242E85FA}
O42 - Logiciel: ZoneAlarm Free - (.Check Point.) [HKLM] -- ZoneAlarm Free
O42 - Logiciel: ZoneAlarm Security - (.Check Point Software Technologies Ltd..) [HKLM] -- {C4BC01F3-B7E6-49FA-8FBE-6B62FDF9CED0}
O42 - Logiciel: ZoneAlarm Toolbar - (.Check Point Software Technologies.) [HKLM] -- ZoneAlarm Toolbar
O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726}
O42 - Logiciel: µTorrent - (.Pas de propriétaire.) [HKLM] -- uTorrent

---\\ HKCU & HKLM Software Keys
[HKCU\Software\AMD]
[HKCU\Software\ATI]
[HKCU\Software\AVS4YOU]
[HKCU\Software\Adobe]
[HKCU\Software\Alawar]
[HKCU\Software\AppDataLow\Google]
[HKCU\Software\AppDataLow\ISWVolatile]
[HKCU\Software\AppDataLow\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Crossrider]
[HKCU\Software\AppDataLow\Software\Macromedia]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software\Stardoll]
[HKCU\Software\AppDataLow\Software\Unity]
[HKCU\Software\AppDataLow\Software\Vgrabber]
[HKCU\Software\AppDataLow\Software\
0
Navid_92 Messages postés 711 Date d'inscription dimanche 7 décembre 2008 Statut Membre Dernière intervention 12 février 2015 87
23 mai 2012 à 23:07
C'est ZHPDiag.txt ça, moi je t'ai demandé ZHPFix :p
0
eleck
23 mai 2012 à 23:19
oups désolé, je retente le coup avec ZHPFix
0
Réponse 10 / 14
eleck
23 mai 2012 à 23:17
et voilà pour les liens de mes rapports de RogueKiller:

http://cjoint.com/?BExxkWpo99E
http://cjoint.com/?BExxmqqw5Lo
http://cjoint.com/?BExxnfyH3VK

http://cjoint.com/?BExxoSmu4gu
http://cjoint.com/?BExxpJW09KW

J'attend tes nouvelles instructions, merci pour tout
0
Réponse 11 / 14
eleck
23 mai 2012 à 23:30
et voilà le bon rapport de ZHPFix, du moins, je crois :)


Rapport de ZHPFix 1.2.06 par Nicolas Coolman, Update du 17/05/2012
Fichier d'export Registre :
Run by Gino Tardif at 2012-05-23 17:26:04
Windows 7 Home Premium Edition, 32-bit Service Pack 1 (Build 7601)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Web site : http://nicolascoolman.skyrock.com/

========== Logiciel(s) ==========
ABSENT Software Key: {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1

========== Clé(s) du Registre ==========
ABSENT Key: Service: SBSDWSCService
SUPPRIME Key*: SearchScopes :{74DAE2EE-D1D0-46A0-BD1B-44187D9F36E5}

========== Valeur(s) du Registre ==========
ABSENT RunValue: SpybotSD TeaTimer

========== Dossier(s) ==========
ABSENT C:\Program Files\Spybot - Search & Destroy
ABSENT C:\ProgramData\Spybot - Search & Destroy

========== Fichier(s) ==========
ABSENT Folder/File: c:\program files\spybot - search & destroy\sdwinsec.exe
ABSENT File: c:\program files\spybot - search & destroy\teatimer.exe
ABSENT File: c:\users\gino tardif\desktop\spybot - search & destroy.lnk
ABSENT File: c:\program files\spybot - search & destroy\spybotsd.exe
ABSENT File: c:\program files\spybot - search & destroy\sdwinsec.exe


========== Récapitulatif ==========
2 : Clé(s) du Registre
1 : Valeur(s) du Registre
2 : Dossier(s)
5 : Fichier(s)
1 : Logiciel(s)


End of clean in 00mn 00s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 2012-05-23 12:54:21 [5647]
C:\ZHP\ZHPFix[R2].txt - 2012-05-23 15:36:55 [1613]
C:\ZHP\ZHPFix[R3].txt - 2012-05-23 17:26:04 [1519]
0
Navid_92 Messages postés 711 Date d'inscription dimanche 7 décembre 2008 Statut Membre Dernière intervention 12 février 2015 87
23 mai 2012 à 23:35
un peu inutile maintenant mais c'est pas grave, continues le reste de la procédure :)

https://forums.commentcamarche.net/forum/affich-25237828-ordi-infecte-analyse-de-rapports-svp#15
0
Réponse 12 / 14
eleck
23 mai 2012 à 23:47
et revoilà le nouveau rapport de ZHPFix :)



Rapport de ZHPFix 1.2.06 par Nicolas Coolman, Update du 17/05/2012
Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-2012-05-23-17-42-24.txt
Run by Gino Tardif at 2012-05-23 17:42:24
Windows 7 Home Premium Edition, 32-bit Service Pack 1 (Build 7601)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Web site : http://nicolascoolman.skyrock.com/

========== Clé(s) du Registre ==========
ABSENT Key: O50 - IFEO:Image File Execution Options - AUTODOWN.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - avastsvc.exe - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - avastui.exe - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - AVCONSOL.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - AVE32.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - AVGCTRL.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - AVKSERV.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - AVNT.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - AVP32.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - AVPCC.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - AVPDOS32.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - AVPM.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - AVPTC32.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - AVPUPD.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - AVSCHED32.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - AVWIN95.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - AVWUPD32.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - BLACKD.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - BLACKICE.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - CFIADMIN.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - CFIAUDIT.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - CFINET.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - CFINET32.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - CLAW95.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - CLAW95CF.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - CLEANER.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - CLEANER3.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - DVP95.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - DVP95_0.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - ECENGINE.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - ESAFE.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - F-AGNT95.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - F-PROT.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - F-PROT95.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - F-STOPW.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - FINDVIRU.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - FP-WIN.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - FPROT.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - FRW.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - IAMAPP.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - IAMSERV.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - IBMASN.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - IBMAVSP.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - ICLOAD95.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - ICLOADNT.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - ICMON.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - ICSUPP95.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - ICSUPPNT.EXE - svchost.exe
SUPPRIME Key: O50 - IFEO:Image File Execution Options - IEInstal.exe - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - IFACE.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - IOMON98.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - JEDI.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - LOCKDOWN2000.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - LOOKOUT.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - LUALL.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - MOOLIVE.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - MPFTRAY.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - msascui.exe - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - msseces.exe - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - N32SCANW.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - Navapsvc.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - Navapw32.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - NAVLU32.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - NAVNT.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - navw32.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - NAVWNT.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - NISUM.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - NORMIST.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - NUPGRADE.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - NVC95.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - PAVCL.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - PAVSCHED.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - PAVW.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - PCCWIN98.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - PCFWALLICON.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - PERSFW.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - RAV7.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - RAV7WIN.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - SAFEWEB.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - SCAN32.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - SCAN95.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - SCANPM.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - SCRSCAN.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - SERV95.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - SMC.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - SPHINX.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - SWEEP95.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - TBSCAN.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - TCA.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - TDS2-98.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - TDS2-NT.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - VET95.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - VETTRAY.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - VSCAN40.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - VSECOMR.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - VSHWIN32.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - VSSTAT.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - WEBSCANX.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - WFINDV32.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - ZONEALARM.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - _AVP32.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - _AVPCC.EXE - svchost.exe
ABSENT Key: O50 - IFEO:Image File Execution Options - _AVPM.EXE - svchost.exe

========== Fichier(s) ==========
ABSENT File: c:\windows\prefetch\agcx_sc1.db.trx
ABSENT File: c:\windows\prefetch\agcx_sc1.db
ABSENT File: c:\windows\prefetch\wuauclt.exe-70318591.pf
ABSENT File: c:\windows\prefetch\rundll32.exe-411a328d.pf
ABSENT File: c:\windows\prefetch\vlc.exe-a11f73ee.pf
ABSENT File: c:\windows\prefetch\utorrent.exe-1070971c.pf
ABSENT File: c:\windows\prefetch\errorreportlauncher.exe-6ee7b68d.pf
ABSENT File: c:\windows\prefetch\mediago.exe-97c67c8b.pf
ABSENT File: c:\windows\prefetch\setup[1].exe-034d2618.pf
ABSENT File: c:\windows\prefetch\sc.exe-945d79ae.pf
ABSENT File: c:\windows\prefetch\mshta.exe-a970b441.pf
ABSENT File: c:\windows\prefetch\protector-gebl.exe-b0628761.pf
ABSENT File: c:\windows\prefetch\rundll32.exe-bbfeba64.pf
ABSENT File: c:\windows\prefetch\ccleaner.exe-d4d76a60.pf
ABSENT File: c:\windows\prefetch\rundll32.exe-a3e35360.pf
ABSENT File: c:\windows\prefetch\rundll32.exe-b4581880.pf
ABSENT File: c:\windows\prefetch\rundll32.exe-9d876338.pf
ABSENT File: c:\windows\prefetch\rundll32.exe-46c4447e.pf
ABSENT File: c:\windows\prefetch\integrator.exe-84638148.pf
ABSENT File: c:\windows\prefetch\junkcleaner.exe-54221b5f.pf
ABSENT File: c:\windows\prefetch\regrepair.exe-772fd0ca.pf
ABSENT File: c:\windows\prefetch\shortcutsfixer.exe-6f83b17e.pf
ABSENT File: c:\windows\prefetch\uninstaller.exe-716bdcf2.pf
ABSENT File: c:\windows\prefetch\avsregistrycleaner[1].exe-2d53f004.pf
ABSENT File: c:\windows\prefetch\avsregistrycleaner[1].tmp-56a4975b.pf
ABSENT File: c:\windows\prefetch\regcleandatagrabber.exe-c2165882.pf
ABSENT File: c:\windows\prefetch\avs4yousoftwarenavigator.exe-c45ca228.pf
ABSENT File: c:\windows\prefetch\avs4yousoftwarenavigator.tmp-b2c56f73.pf
ABSENT File: c:\windows\prefetch\avsinstlauncher.exe-7754c39c.pf
ABSENT File: c:\windows\prefetch\avsinstlauncher.exe-d91cc56d.pf
ABSENT File: c:\windows\prefetch\avsupdatemanager.exe-ad6800db.pf
ABSENT File: c:\windows\prefetch\avsupdatemanager.tmp-b5b86d1d.pf
ABSENT File: c:\windows\prefetch\registration.exe-4bccf351.pf
ABSENT File: c:\windows\prefetch\registration.tmp-e702069b.pf
ABSENT File: c:\windows\prefetch\zasetupweb_101_065_000[1].exe-d520c91f.pf
ABSENT File: c:\windows\prefetch\cacls.exe-d332d70e.pf
ABSENT File: c:\windows\prefetch\icacls.exe-e79d2d93.pf
ABSENT File: c:\windows\prefetch\takeown.exe-a80759ad.pf
ABSENT File: c:\windows\prefetch\clean_tool.exe-d4c60925.pf
ABSENT File: c:\windows\prefetch\schk.exe-a6e1e4fb.pf
ABSENT File: c:\windows\prefetch\iswinst.exe-5a7e1f8d.pf
ABSENT File: c:\windows\prefetch\lchk.exe-8cc256b4.pf
ABSENT File: c:\windows\prefetch\zaffsetup-lt-fr-1001.exe-c4551f32.pf
ABSENT File: c:\windows\prefetch\iswsvc.exe-1fa58b3b.pf
ABSENT File: c:\windows\prefetch\forcefield.exe-3271118f.pf
ABSENT File: c:\windows\prefetch\drvinst.exe-4cb4314a.pf
ABSENT File: c:\windows\prefetch\vsdrinst.exe-dfb74e30.pf
ABSENT File: c:\windows\prefetch\rundll32.exe-4642071f.pf
ABSENT File: c:\windows\prefetch\zatray.exe-33e4157e.pf
ABSENT File: c:\windows\prefetch\cleaner8_web_setup[1].exe-4d7e67fe.pf
ABSENT File: c:\windows\prefetch\cleaner8_setup.exe-47b50da6.pf
ABSENT File: c:\windows\prefetch\cleaner8_setup.tmp-c289e9e1.pf
ABSENT File: c:\windows\prefetch\se.exe-4f933a55.pf
ABSENT File: c:\windows\prefetch\cleaner8.exe-2b011f3f.pf
ABSENT File: c:\windows\prefetch\avsregistrycleaner.exe-567b92eb.pf
ABSENT File: c:\windows\prefetch\agentantidote.exe-5ebf30ef.pf
ABSENT File: c:\windows\prefetch\apsdaemon.exe-6e0eb72b.pf
ABSENT File: c:\windows\prefetch\jusched.exe-d10fbd13.pf
ABSENT File: c:\windows\prefetch\language.exe-f41a6404.pf
ABSENT File: c:\windows\prefetch\muistartmenu.exe-c5476593.pf
ABSENT File: c:\windows\prefetch\nvraidservice.exe-5fc08819.pf
ABSENT File: c:\windows\prefetch\pdvd8serv.exe-01460626.pf
ABSENT File: c:\windows\prefetch\googletoolbarmanager_f91d44fa-9b8ccd63.pf
ABSENT File: c:\windows\prefetch\googleupdateondemand.exe-a1aa8c60.pf
ABSENT File: c:\windows\prefetch\zhpdiag2[1].exe-6ab45f53.pf
ABSENT File: c:\windows\prefetch\zhpdiag2[1].tmp-a28ab97d.pf
ABSENT File: c:\windows\prefetch\rundll32.exe-b4f69a53.pf
ABSENT File: c:\windows\prefetch\rundll32.exe-a8502821.pf
ABSENT File: c:\windows\prefetch\vdsldr.exe-6b089e8b.pf
ABSENT File: c:\windows\prefetch\rstrui.exe-2d50c58d.pf
ABSENT File: c:\windows\prefetch\wbengine.exe-28fd7e8b.pf
ABSENT File: c:\windows\prefetch\vds.exe-6e7946f9.pf
ABSENT File: c:\windows\prefetch\control.exe-817f8f1d.pf
ABSENT File: c:\windows\prefetch\cli.exe-b3817bb7.pf
ABSENT File: c:\windows\prefetch\regsvr32.exe-8461dbee.pf
ABSENT File: c:\windows\prefetch\rundll32.exe-02cc9eff.pf
ABSENT File: c:\windows\prefetch\iswupde.exe-fdb9b923.pf
ABSENT File: c:\windows\prefetch\googletoolbarnotifier.exe-eb3f2433.pf
ABSENT File: c:\windows\prefetch\googletoolbaruser_32.exe-4e14bb2a.pf
ABSENT File: c:\windows\prefetch\iexplore.exe-908c99f8.pf
ABSENT File: c:\windows\prefetch\vid-saver.exe-6de54d70.pf
ABSENT File: c:\windows\prefetch\stardolltoolbarhelper.exe-7c4a8147.pf
ABSENT File: c:\windows\prefetch\flashplayerupdateservice.exe-ecad9571.pf
ABSENT File: c:\windows\prefetch\aggluad_s-1-5-21-3651656642-2806257590-2429663036-1000.db
ABSENT File: c:\windows\prefetch\aggluad_p_s-1-5-21-3651656642-2806257590-2429663036-1000.db
ABSENT File: c:\windows\prefetch\agglfaulthistory.db
ABSENT File: c:\windows\prefetch\agglfgapphistory.db
ABSENT File: c:\windows\prefetch\agglglobalhistory.db
ABSENT File: c:\windows\prefetch\agrobust.db
ABSENT File: c:\windows\prefetch\ntosboot-b00dfaad.pf
ABSENT File: c:\windows\prefetch\presentationfontcache.exe-74b3adf6.pf
ABSENT File: c:\windows\prefetch\mscorsvw.exe-c3c515bd.pf
ABSENT File: c:\windows\prefetch\googleupdate.exe-fe771dda.pf
ABSENT File: c:\windows\prefetch\trustedinstaller.exe-3cc531e5.pf
ABSENT File: c:\windows\prefetch\wmiadap.exe-f8dfdfa2.pf
ABSENT File: c:\windows\prefetch\wermgr.exe-0f2ac88c.pf
SUPPRIME File: c:\windows\prefetch\reg.exe-e7e8bd26.pf
ABSENT File: c:\windows\prefetch\vssvc.exe-b8afc319.pf
ABSENT File: c:\windows\prefetch\notepad.exe-d8414f97.pf
ABSENT File: c:\windows\prefetch\sndvol.exe-5d4cc7d6.pf
ABSENT File: c:\windows\prefetch\photoscreensaver.scr-be555075.pf
SUPPRIME File: c:\windows\prefetch\vsmon.exe-78322d56.pf
SUPPRIME File: c:\windows\prefetch\consent.exe-531bd9ea.pf
ABSENT File: c:\windows\prefetch\taskhost.exe-7238f31d.pf
SUPPRIME File: c:\windows\prefetch\cmd.exe-4a81b364.pf
ABSENT File: c:\windows\prefetch\cscript.exe-d1ef4768.pf
ABSENT File: c:\windows\prefetch\sppsvc.exe-b0f8131b.pf
ABSENT File: c:\windows\prefetch\pv.exe-7b89a1e7.pf
ABSENT File: c:\windows\prefetch\schtasks.exe-5ca45734.pf
ABSENT File: c:\windows\prefetch\flashutil32_11_2_202_235_acti-7ce49090.pf

========== Autre ==========
NON TRAITE File Execution Options - APVXDWIN.EXE - svchost.exe


========== Récapitulatif ==========
103 : Clé(s) du Registre
110 : Fichier(s)
1 : Autre


End of clean in 00mn 00s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 2012-05-23 12:54:21 [5647]
C:\ZHP\ZHPFix[R2].txt - 2012-05-23 15:36:55 [1613]
C:\ZHP\ZHPFix[R3].txt - 2012-05-23 16:26:04 [1571]
C:\ZHP\ZHPFix[R4].txt - 2012-05-23 16:41:33 [16044]
C:\ZHP\ZHPFix[R5].txt - 2012-05-23 17:42:24 [15982]
0
Navid_92 Messages postés 711 Date d'inscription dimanche 7 décembre 2008 Statut Membre Dernière intervention 12 février 2015 87
23 mai 2012 à 23:51
ABSENT File & ABSENT Key m'assurent que RogueKiller a bien fait son travail :)

Continues, par contre je vais dormir, vu que le rapport MBAM va durer plusieurs heures.

@+
0
Réponse 13 / 14
eleck
24 mai 2012 à 04:23
Allo, voilà le rapport de Malware Anti-Malware :


http://cjoint.com/?BEyedTUkwKD


Oui je sais la mise à jour de MBAM n'est pas faite mais je n'arrive pas à la faire car le virus me bloque mon accès internet.
Une fenêtre de "Pare feu Windows" s'ouvre sans cesse et à chaque fos une nouvelle fenêtre s'ouvre.

Donc, je m'occupe maintnant, lentement mais surement de COMBOFIX.

A plus :) Merci encore pour tout
0
Réponse 14 / 14
eleck
24 mai 2012 à 23:32
Merci beaucoup pour tout.
Tout semble maintenant sous contrôle.
C'est merveilleux !!!

Maintenant, une dernière petite demande :) Est-ce que se serait possible de changer le nom de mon ordinateur pour qu'il ne s'appelle plus PC de Gino tardif?
0
Navid_92 Messages postés 711 Date d'inscription dimanche 7 décembre 2008 Statut Membre Dernière intervention 12 février 2015 87
24 mai 2012 à 23:48
Cool ça :) !

Cliquez avec le bouton droit sur le Poste de travail puis choisissez la commande Propriétés. Dans la boite de dialogue qui apparaît, ouvrez l'onglet Nom de l'ordinateur puis cliquez sur le bouton Modifier.
0
eleck
24 mai 2012 à 23:56
encore merci pour ton aide Navid_92 :) :) :) :) tu est mon héro !! hihi
0
Navid_92 Messages postés 711 Date d'inscription dimanche 7 décembre 2008 Statut Membre Dernière intervention 12 février 2015 87
25 mai 2012 à 00:23
C'est rien tkt :p
Par contre passe cet outil pour supprimer les programmes qu'on a du utiliser:
0
eleck
25 mai 2012 à 00:53
marci k)
0

Discussions similaires

Google Chrome "  Échec de l'analyse antivirus "
jmpower -
Coco71 -

15 réponses
Analyse et réparation du lecteur C
Fusco -
Malekal_morte- -

9 réponses