Pc infecté

+1

comment je fais ?

Bonjour saignerafond, oui j'ai que celui ci,

bonjour nosmarties, voici le lien zhp du site pijoint

http://pjjoint.malekal.com/files.php?id=ZHPDiag_20120715_r6g6m10n12h7

Voici le lien zhp fix
http://pjjoint.malekal.com/files.php?id=20120715_e11q11n9s11e13

J'ai également désinstaller shareazza

apparemment le pc est plus réactif en effet, en ce qui concerne le "claquement, quand je démarre ou redemarre le pc, il claque , j pense que c'est lorsqu'il enclenche le disque dur, mais avant il etait plus discret, maintenant je le trouve un peu plus "fort", et j'ai egalement le ventilateur qui s'est enclencher jusqu'a se qu'e je lance firefox

Juste pour info , c'est quoi la marque du disque dur ?

Western Digital -- Seagate -- Maxtor ?

aucune idée, je ne sais pas si c'est une marque de disque dur, c'est écrit sdd sata 160go

Bonjour Fish66, j'ai effectué les "tâches " que vous m'avez demander, et je poste ici en "copier/coller" le rapport zhp fix


Rapport de ZHPFix 1.2.04 par Nicolas Coolman, Update du 23/04/2011
Fichier d'export Registre :
Run by Delmonio at 15/07/2012 14:03:09
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Web site : http://nicolascoolman.skyrock.com/

========== Clé(s) du Registre ==========
SUPPRIME Key: StartupReg: Spotify Web Helper
ABSENT Key: CLSID BHO: {bb1227ac-7a0d-4076-8c1a-51a1348f6fa8}

========== Valeur(s) du Registre ==========
SUPPRIME URLSearchHook: {bb1227ac-7a0d-4076-8c1a-51a1348f6fa8}
SUPPRIME URLSearchHook: {d7f26d0e-9801-45c3-a091-8a65e4ed73b5}

========== Dossier(s) ==========
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{00517F98-9A76-4968-B03E-AF1705475DBF}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{00EB7EBD-9CA7-4E08-9590-7D8F7F917661}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{014828D2-6A10-4A37-A72A-6A364B1FDFBF}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{0195EAB6-6DA8-477F-86FB-FC89AEEEDCD2}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{01C54FD7-DEF1-433D-8921-104A1A57F0AE}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{01F96245-A2B5-4543-B7B3-FF034BF7088E}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{0307E98C-9838-47D6-B00C-8677BE742159}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{04D25D78-1C50-4C4B-8689-6369ADC9F14D}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{0615088A-BCAB-4C45-AB18-4F1E17D00ABC}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{06293623-07E2-40B1-9BE8-711DA445369D}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{06B5B00F-DB01-4BED-9448-5E41B41EECFA}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{0787B63E-EE7E-4C3C-8220-55E9AE7F30D1}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{07E47070-55DF-485F-A90D-314BF0EE23F2}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{0800C4D1-D9A0-4D86-AE62-F8EF56942C52}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{0950C49F-792B-43A6-AE25-CAB0B827B559}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{0AC3216E-A940-40DF-9763-58885E9C03F6}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{0BA47E1C-5C97-4BEB-A395-FFA3C29597F3}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{0F4A0F48-64FB-4144-950E-42B1A0DFCEDA}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{0F92CB1A-6948-4767-B7AA-5F53EB43662C}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{1054605B-8015-4D74-A126-461D0270F229}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{1066E536-0A2F-4B6E-92C3-FC1331554100}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{109807F6-0DA9-4FCE-B18D-BE077135965C}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{10A71091-48CC-43EB-9133-C13C6B9E18C3}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{10C8CD9A-1590-4B38-AD2B-BF97DAD7C74B}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{112758DB-55CB-424B-806F-24BB8E1D78B9}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{12C597F3-ADE1-4C62-A86F-79D252F18561}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{135527D9-6CD4-42AE-B86B-32DF944E078C}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{14387B67-60CC-4D5A-A227-6B7B37B9BB46}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{1439D3FC-0373-4873-BA90-CD6E39467EAF}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{161703BE-6CFE-4023-82E9-64C5DE14A3F0}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{1737C7E5-046E-4BD7-A3CD-97F51939C7EC}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{17732EDF-17AA-4D06-9F32-664523FAFB11}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{17CF8771-EC67-4174-A8DD-B016B91A7F9E}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{18EBE373-ACA5-48A8-ABF3-BF0BC9E4FEFB}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{1B2F6676-CCC1-4255-AF24-F4C07900779E}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{1B3421F8-30E7-4160-8016-223F40369054}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{2061D6A3-8B32-4247-B0FA-A1D36EAE14EA}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{20D4D642-7CF3-4F0D-9437-FCB4E58A972D}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{20DBD246-D3BE-435F-8D82-E8F1D9C567EE}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{2147989E-0250-4162-BD13-E516E96DAEAE}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{2333A039-F74E-4288-A4DA-F7F60ECFD9C2}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{238B70BB-166A-4571-A0EA-A831851286BC}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{23D01DA0-941B-4329-8835-6E8F8BB051E5}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{2509CFFF-7D01-48B6-A461-690608D7B515}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{25B48FF9-EA78-4663-A016-27CB03284A6E}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{2708F5D7-62A7-4DBE-8B55-7BFDEB89987B}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{270AC93C-C205-4B4C-96A2-71F34AFCAD47}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{2736BA8A-2967-4C22-A588-A2F9DD4A5F85}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{2A6694CB-3038-4321-8D83-FE43D6A24B9A}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{2A9FFE0D-0696-420C-BAEC-0E7A97E11A71}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{2B96952F-BBAE-43AF-8BD2-5A93A68FD0E7}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{2C3DF325-5743-466B-86E4-048F2D245338}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{2C76C9DC-E997-4787-AD66-F548812114C3}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{2CB89AE2-53D2-4119-81B7-518CB77726A9}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{2F1AD052-1356-457C-8E89-43082F154FD1}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{2F8B0446-79FE-4815-B391-E93E9F1B44EE}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{2F9345DD-84FF-40EE-8209-D2C49D1DA05D}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{2FC1E6CE-A2C2-44A8-BC6E-A1BDCEA395EE}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{2FDB946D-AE44-418C-BBB1-E6AF99E2D5E8}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{306BC359-2293-4D21-ABD9-2768597D6DFD}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{30A3A839-9320-445C-8203-B2248A7AAA3C}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{34BB2E7E-52D5-4EA0-B054-4C56D1F98D38}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{34C6B52F-48F8-46C7-B02F-73AA5BBCF2CF}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{350FC31C-82F9-4857-889F-18428DCB70A5}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{3548FAE3-DB3B-47E3-BA3D-0DBDC1AB7328}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{367C6EB4-AD10-4E06-8557-6D68B7ADC1D2}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{36A9C185-1DE6-4000-A05B-D3A00DFE197A}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{36EDCCBD-8609-455B-85FD-A049928A62DF}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{36F17CFF-22A5-4074-8AA6-7C39AD9DC1F2}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{36F4F11D-F4FA-4D42-B73E-5F63C060CCDF}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{3747FDBF-A6E4-4507-AEA1-573DF6ED4173}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{38AD95EF-E850-4F21-9082-3E6D9E453580}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{38F77CE5-607E-43E7-9CBA-5BEAC9370177}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{38FD7ED4-3B70-4E4C-9CF2-E35E62EFE0D0}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{390E0B2C-8887-4FE4-8E7C-1835E2D11CE2}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{3A8324F8-4DEA-4D9C-97AE-BBB6CAA0B949}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{3B2F16CC-CE8C-490F-B78D-E9A7D08258C2}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{3C1D115A-704E-460D-A794-607BB0CEF9D4}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{3C667CBD-A0C3-47F7-B5A1-83D07403F1DE}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{3DA37A89-E68D-4C89-975F-0422C404EAE2}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{3E07749B-F40B-48B9-A235-2D042E13911E}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{3EA97E28-CD33-4BE6-BADF-6FD2B5488DAE}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{427C28D2-E208-414F-854D-620025DB50D0}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{43911228-C8B1-4A97-A013-65254D9F7441}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{4482AFEF-312C-4C7A-AB11-12C35C92A310}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{465F731F-736D-46A0-A667-FC53E6672CCE}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{480BE0CD-EBBF-4F7F-91F2-D5A30699F92B}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{4811DD5F-16D4-491B-8861-439A79544F83}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{48E0D688-82D9-4746-9EE2-6D981C8ACA29}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{4925C740-31B4-44C5-BEE4-6CFA0D9F311D}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{49D96A16-698E-4130-8BC2-518378B7A279}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{4AA23FF9-A418-47C8-A243-19A1F4E14C17}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{4C0B5C34-152E-4B6C-9935-71B084D70A17}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{4C37CE58-588F-49A8-94C0-4BEAD08BD674}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{4C7C4CCC-EEBF-49E0-B8E3-7640A2C6B243}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{4D95AC23-4D70-487E-88F2-EDDEF3B9F407}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{4DC952D3-3C0C-4EDE-B33C-5C8042ED49B5}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{500D0FBC-67A0-4774-89A2-273387E7F196}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{50A8F485-846A-41BB-8445-F6B52AC57226}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{50DC5C37-ED4A-4619-A769-0C2530C2F4D5}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{50F763D9-6587-435E-A2C6-52F4B83E8EC3}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{512E1798-9CD7-4D62-8CAB-2B0664C0BC69}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{5181C4CC-6A32-4741-A9E1-18F05AB6B7F0}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{51E48179-8D03-4C29-8145-F043059D1AE7}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{52851A10-D314-4C87-9205-ACEFB060EC1E}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{53E56893-0E3F-4083-8890-FDE1C4D31970}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{53E94ACB-5C4C-4F50-AFBD-2BA5BDDBDD6E}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{545438CE-FA7D-438C-A11F-C7B5B7FD82EC}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{55FE52A9-2C6B-4B2E-A43F-6F1D466FBE95}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{5617E7EF-F8E3-47A9-8BB6-3B03591A3E50}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{5655ED0C-4E1F-47B0-A1FD-D8F17F726BF2}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{5665B8EA-60BA-4ED7-8D52-736A63C01285}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{59BC612B-76E8-4A4D-9F95-A7A8B58E6484}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{5AAC63BE-FA6F-47FA-9802-0651F569771A}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{5AD84A04-6909-409C-B579-2DD731362F0F}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{5BE9A75D-7A50-4357-B75B-BD10F5A85A65}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{5C38C079-6316-4222-92C3-287798AADA0B}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{5C52B183-9C34-4FBC-A1EC-B3456C2E2862}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{5C5E1DF6-D701-451E-B0BB-E06E41C29E94}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{5C5EE614-2540-4609-9CA2-ABFFD82DCDD3}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{5D5F383B-6857-4800-8C12-DEDFEA8619DB}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{5E8ED7F9-315A-4CFA-8032-1E70D6C52C72}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{6026DBE5-E06C-45EC-9AA3-218E324BD568}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{60BFB4E8-BC4D-4FB6-98E5-7C0AD4A38D40}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{60FDECA6-612C-48A3-A7B0-EEA9811A00E1}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{64432911-7865-48A1-8037-D1B4645953C6}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{6469CBE5-4EAF-4A30-971F-1350FC004350}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{6496DFAB-0500-468D-B71C-0E82C2A3ADE3}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{64B80286-9041-40F9-B109-B0AF6CA12DE4}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{64F5E3CE-1056-436F-B906-4A31310EF433}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{66124DF1-2923-463B-B7EC-E40D5C2F73A2}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{675CACD8-DE37-416F-87BD-F593BAB4C1C3}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{6883409D-4BA4-4CC2-A4FD-7BEA2DAAA0A9}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{68BFDD9C-9BC6-4DF0-82F6-09DC43A71683}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{6A01CBA8-35B6-4FB9-95E8-1D4819766DF7}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{6AC8A8BE-4778-48A5-AFCD-F80E92F4908E}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{6CDA05E9-D897-4A29-9378-A85969166874}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{6DE0DC37-FC10-4993-81B4-AA1919BE06EE}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{6EB16FC4-6D1A-4272-BA6E-623D40C78E6A}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{6F036F5C-8BD8-4EC9-BA08-071AC951497C}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{6F1B0E2B-FA9F-4AA8-AF56-223221D5BD41}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{6F50DAC2-4DC0-48CD-85B6-E8D0244048E6}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{7018F777-BF7F-410A-AB2E-8E4550953DC7}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{702907CF-1CAF-424A-9198-C3D1F3E4034D}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{709276E1-2821-4A05-9727-9B5FD0143D6F}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{725A803A-501E-488D-AE7C-38D789657B75}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{731D581E-A737-423F-84FF-ABB2EA25C793}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{734AE58A-FBAA-49FD-8D42-615EF72C9B9E}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{74794DED-374E-4821-AF43-27A894F2D9AA}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{7515FDCD-F723-430D-A7B4-8B347692445E}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{76FE50DE-A16D-4A93-8980-4EF98E96D5A7}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{7775BECE-42F2-463D-95DF-2052D943269E}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{77E7E3BD-5E26-4019-BF40-78402471CD02}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{782D618C-4ABE-4296-B413-754C15935D45}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{782E0898-9D29-4BA9-AECF-6A9ADFA81587}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{7AABB831-A7B9-43AC-83DD-189ABB5109D8}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{7B63657B-33D8-4E88-B615-B0E253E8DCB9}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{7B99E9A9-C256-4045-B577-11D1F50D3D07}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{7BF8864D-C38C-4F18-BAA9-701A7F46483B}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{7C8283A3-BC85-4AF8-95DC-DBC7B16AB41B}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{7CC45A46-8104-4FE4-8282-0317226984F5}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{7E29D6EC-E885-4790-984A-7A1269A9AC27}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{7ECAE9B3-2DA4-4A5E-9751-EE27A15E4755}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{7F6F27B9-2934-4FF4-8B12-5DCB90CC1A07}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{7F79BC8A-44F9-4F75-9F53-F5DF443C3873}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{80081EE2-8B5B-493A-AB52-8D4A071A70E0}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{80A21BCF-CCF6-4FEE-AF04-2F223BCA8045}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{820D3DC1-4C8A-4608-A56C-2F1B867D7CEB}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{8217FE7B-EEC8-47D1-B6CC-F58326F55805}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{8255FAEC-33FB-46FD-82C7-99B252216A91}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{844E8C5C-CA4D-43F2-A283-AC7A8CA21FA7}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{8672408F-B118-43C7-B92D-166858D4EA16}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{876CB576-FFB9-41A3-A12F-4A43AACCB8C6}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{87D3568C-21B3-4320-9FEC-A0AB3DCB5B4E}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{87D74EF4-2E6A-43FE-BDB7-18119F5ECDFA}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{89170E34-75CE-453F-BD1D-EE6616110A58}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{8AED5667-8D1F-49CB-98B8-7D2D4BEA1B76}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{8BAD672F-670A-46BA-B3F2-21C72E191201}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{8C57CF88-DD65-4DE8-B694-03674DFCF28A}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{8CCDB9E1-619B-45B2-88DD-FE4C790B1E48}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{8DEEB15A-780E-47AF-9BD8-E77087F91324}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{8EA9C92A-F81B-4C5C-8A7B-5302D73E55DD}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{8F436688-2524-463F-ACD0-6ECFEC425CB5}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{904B44F9-8B06-43B6-A616-AEF7A695FD49}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{90E189AF-FA35-47D0-89A6-2E35EFEEDDC5}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{90E9D509-50D0-433C-A9D4-C62BC1C021E9}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{91B9FFD1-4539-4E3F-94E2-71D6C43BEF13}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{923330FA-68C9-4B6B-8633-757C8627A3E4}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{927E91F0-8855-4BC7-ABF2-F120EE2C2776}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{94B0338C-5066-41EE-B2EE-E813C7B51000}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{952BC77D-459D-407C-980A-9C6E251EBC6E}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{955CD45F-479E-4C19-9B9F-A092BFA64A4F}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{9728FE0C-CA69-4A15-B4E0-4A345B2D3CBB}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{98968EF0-676D-49D7-8166-516BD8F10B17}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{991AE7D5-FB57-4E9A-BFCB-E3A9E2650516}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{9A2A8DD1-1E63-43C0-958B-DD1966C51CDE}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{9B4BEC0A-C648-4733-8EFD-DFB4C0D6F809}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{9C57E9F3-5137-4E25-BBCE-3E2844302FDF}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{9CF02BEA-8C4A-485B-9B43-66E2F84BFECD}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{9D07DB7B-4334-4663-88A2-5F86D80ECF71}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{9D10F6B3-A73C-4A81-B3A1-58CDA03E17F6}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{9DAA747E-F335-45E0-97B4-91A63C6E29E6}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{9E1422E5-6933-41E5-A594-45AB0068804F}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{9FE99FD0-9D7A-434A-8FC2-031948657AA6}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{9FF436E6-E499-45B8-A308-2A9C3F784A57}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{A0662061-0F93-4722-AE56-C723DF3FC580}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{A14961CD-D84B-4B86-8496-F3230C6AB440}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{A27651F8-FDC6-4E82-A4B8-FC0F647F7160}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{A49DAF67-5A94-46B1-AEF0-AAACFB651EC5}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{A4BE892D-580A-4D6D-B0FF-ACA02905B984}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{A59D81C4-AC0B-4E11-A563-417232F03B66}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{ABEB64DD-E4DF-426C-948F-E999C60FE2E9}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{AC342C9C-AFC2-47F2-9941-5EE86A0F222B}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{AC738080-2980-447F-AEA5-0C14B26EBF6F}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{AEB78FE4-E564-4CC3-A85C-53021B81692C}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{AED8BC39-66FE-425A-9626-4F10E638DE40}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{AF4EE7EC-6EFA-46E7-B069-BBF708CDFAE5}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{B15433CC-403B-4535-B0D6-07BC2B0DBCFD}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{B1EAB6A1-B7B5-42FC-85F3-9A4E6E0B6E47}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{B1FB0854-E306-4AFB-B44D-2B298E7B513E}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{B48D8012-46CB-4340-A88E-5820759B75C0}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{B5467E95-8982-4356-BD34-68B6360D657A}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{B6468751-09E1-48CB-A137-F5DC27DCEF3B}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{B652FCF5-CE9A-430F-BB24-FB7DE9CFC333}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{B745A536-E22E-49D6-8D28-5BACB95C8EE8}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{B82B28FC-7DC8-48A2-8CAB-188BDD266050}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{B83EF6F4-D9A2-4AF0-8DED-00903FFDECCD}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{B8B713B5-4BD3-4B99-964C-FD5516077E67}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{B8E97900-7330-4EF7-BB10-E4FA1748A5F5}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{B914F1BD-8E38-4DEF-8EF1-CEC7DD56A1FB}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{BA1F35F1-0197-4F30-B4DA-7C833C1F0779}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{BB8E12E0-062D-489C-9BC2-B483E5D823A8}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{BBD26FE1-268F-45AE-932C-B0680385ADAC}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{BBE732DB-4FB2-4352-A96B-77ED35E267FF}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{BC20AEF6-E685-493D-9D36-A31D8D20BA26}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{BC504F16-2E5F-4165-855B-E42E43C10CDA}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{BDB560C8-78EC-4616-B132-6D1E3B0028A2}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{BE583A17-07F4-4DDF-8147-814FFC70E4CB}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{BFC7129E-64B2-4B28-9C45-ECE53C41C651}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{C017D6EC-C7BF-47AA-9329-8826F398D38B}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{C040BE3B-35FC-4CCD-ADC3-E3E966D26E8D}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{C2125D14-76F4-4B89-801B-7F65D0D440DA}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{C2654B9E-9702-4051-8140-342E6C5E30A7}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{C283F2A5-7A20-4E9D-AF34-AEB8345048C0}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{C31F228C-CE9A-4A3F-9FCC-A3A954E5CFA2}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{C409A6D3-AD12-4834-98AF-D01368416C47}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{C600F7EC-08BC-48B0-9A42-10EBBFD1A8C0}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{C6A3782E-EADE-48DA-8EE3-CF0B7552591E}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{C8A51F34-B455-417C-9D08-2F1E196F150A}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{C8A5F0FC-6F60-4390-804A-38F5D4590517}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{C9395D6E-9BF4-4208-BAAC-F5587CA6909F}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{CAA3499B-A4A1-458A-9F05-6D17CA4C09F0}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{CBE2035F-08AA-470B-9593-C7ED40A97268}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{CD912117-6083-4087-BD70-D2C3FAD0A6F7}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{CDC04507-3470-4293-B000-205EC37914FF}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{CE798572-AF79-46E5-A5F1-0F3A83CB723A}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{CEA62767-1331-46A4-BD9D-9BE4037B3C72}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{CF2DE3B1-0B56-472B-9BDB-5047B449D18B}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{D0F38B73-4D3B-4CE3-9062-6AE93BB36451}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{D3110E83-CD42-4A79-9294-8912ED9B46B4}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{D36D39C0-242C-4929-B6C5-21F801F431BD}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{D3CABEA6-0173-4A6C-A0C2-3754F285BACE}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{D410284D-9D5E-442A-B25A-A0AF6D2EE68D}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{D539F3A2-7C1B-4EEF-A02F-A1DD95FD7861}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{D553321E-304B-47DD-816C-3F2D1BB74637}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{D7EA17D5-2859-4167-AD23-E24BF267C40C}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{D7FF5E13-FB40-4272-B483-0F14F57296D7}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{D8871EFE-F06E-4F38-A09E-4C5B7EE41BD9}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{D8CD1556-9622-4F19-BE30-CE45E5523000}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{D8F3102A-5056-46FB-9C6E-2DF6E2EDCE9B}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{D95559F7-3A71-4EA9-BAD3-FF1595D8E0B5}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{DADCD77C-BDE0-48D9-8D4F-8DC50CCED0AC}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{DAEDAD77-70B5-49B2-909C-A34BB33C95C1}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{DB2E8860-1698-426D-AD76-CACD261F7CAF}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{DC006625-37B6-4BF8-9226-40F475DA955C}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{DF78B320-95A2-4A0A-AD7C-9841073AAF87}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{E0CF89FE-137D-43FE-AF69-443BA49CF691}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{E12F52E5-C4B6-4246-8922-7106D919E836}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{E17101F7-11F2-4A2F-801C-9CE7574A44C3}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{E2350C98-D077-4FBF-8A85-0A024401F3E6}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{E32BB617-3E09-4F6C-8658-C4ECB9802DFD}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{E3F6B3AA-AC5E-4212-90A9-A98FD2D00B1D}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{E3FCDA04-DD86-4D30-BC3B-0A7E3E274BEB}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{E40433A3-98A2-481A-808D-9A591CCAA711}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{E57905FE-08A1-4E4D-93B5-365CE3A80BBB}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{E6DFF2AE-1D51-4750-8EC1-AF7527A41B19}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{E83990DA-8ED0-427D-9673-E87510611097}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{E940CF0E-553B-4003-96DB-2BEFB2FBD413}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{E9CB1959-37D8-493F-A6AC-605CDA061F72}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{EA08CCC6-4E81-4AD2-89C9-DE5BCE693C97}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{EAA56AF8-7A4F-4064-9FFE-04C81EC991C4}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{EAE6EB08-BF42-4FDF-ACEB-74E1CBC8E9D7}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{EB2482C2-D0AD-4CB0-99D0-2725B6D2BF03}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{EBA2DC87-E786-4DEC-8A37-85AF08C0C23B}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{EC4EB5FB-248E-459B-BE49-33D7A75AE0CC}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{ED685A20-D358-4B3F-97AC-7CAE15D8F684}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{EDC756FB-E306-4181-BA5D-FDF87A6CD5CA}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{EDEF753B-0394-48BE-B11C-0FC5D03129A8}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{EE664566-686C-49C5-A6DC-72D088D5427E}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{EE752CBA-38F4-4D81-8D77-E7E6EB4E0A14}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{F0F49D9F-D388-4C10-AFD4-218F1D2AEB29}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{F1B2FDFD-913D-4BDD-8FA4-B859F865BAE4}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{F1DE8341-D35B-4667-8001-837BEC0F5FFD}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{F2BFEF47-0B1A-4AA4-BA74-073A72C66C74}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{F33B5E4C-057C-444F-B3C6-E761083ABAA0}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{F3AE98BC-6467-49FE-8263-2F5AE5E59C0D}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{F43B3DF6-A962-45B8-8B4C-216BFEE9E03B}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{F4E09379-D363-4D39-9636-C57D19D1FBC3}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{F4ED21BE-AC7C-4D2F-A02F-7971C0B2D560}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{F524D03A-FF11-4700-93B7-91820C0DF5F7}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{F5F41401-E83C-43F7-8C91-EDBA9FAD858D}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{F6E3530D-BD66-4643-B51F-C644E306928C}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{F70D5F20-4843-41E5-909D-AFF94535B5EB}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{F8695717-203F-499C-97B6-E402F8A29D41}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{F892D320-2B8C-4B2C-9E70-07627934FA3B}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{F8B11236-E229-44E4-ABC9-7017A2260002}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{F94D45CA-4203-448B-93FC-47DD5F4E9B82}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{F9F39BFC-820F-4E68-B16F-3B751C44C35E}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{FBF1AF45-67AD-4571-8C7B-8AF397141D52}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{FF0B5558-21D4-4381-8CE7-209709B1D495}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{FF81DC69-405B-4463-94C5-FC889F2EB671}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{FFAAC4C8-3B6D-467E-A1B5-D7180FB70319}

========== Fichier(s) ==========
SUPPRIME Reboot c:\windows\winstart.bat
SUPPRIME File: c:\users\delmonio\appdata\roaming\spotify\data\spotifywebhelper.exe
ABSENT Folder/File: c:\program files (x86)\spybot - search & destroy\sdupdate.exe
SUPPRIME Reboot c:\program files (x86)\winzipbar_fr\prxtbwinz.dll

========== Tache planifiée ==========
ABSENT Task: Ad-Aware Update (Weekly)
ABSENT Task: avast! Emergency Update
ABSENT Task: Spybot - Search & Destroy Updater - Scheduled Task
SUPPRIME Task: {C9A74500-DF58-422B-9EEC-5AD9F0830890}


========== Récapitulatif ==========
2 : Clé(s) du Registre
2 : Valeur(s) du Registre
322 : Dossier(s)
4 : Fichier(s)
4 : Tache planifiée


End of clean in 00mn 57s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R3].txt - 15/07/2012 14:03:09 [30225]

http://pjjoint.malekal.com/files.php?id=ZHPDiag_20120715_u15j15n9w11n8

Je comprends pas votre demande de "cocher au tournevis?

Merci fish66 pour vos précisions , j'ai effectué l'analyse "au tournevis" , et héberger le rapport. Voici le lien du rapport

http://pjjoint.malekal.com/files.php?id=ZHPDiag_20120716_v913p10t5r11

Bonsoir, j'ai effectuer la desinstallation de panda a l'aide du lien desinstallateur, j'ai effectué la desinstallation de Iobit, et également effectué le scan adxcleaner dont voici le rapport


# AdwCleaner v1.702 - Rapport créé le 16/07/2012 à 23:16:04
# Mis à jour le 13/07/2012 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : Delmonio - DELMONIO-HP
# Exécuté depuis : C:\Users\Delmonio\Downloads\adwcleaner(1).exe
# Option [Suppression]


***** [Services] *****

Arrêté & Supprimé : Application Updater

***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Users\Delmonio\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia
Dossier Supprimé : C:\Users\Delmonio\AppData\LocalLow\Search Settings
Dossier Supprimé : C:\Program Files (x86)\Application Updater
Dossier Supprimé : C:\Program Files (x86)\Common Files\spigot

***** [Registre] *****

Clé Supprimée : HKCU\Software\AppDataLow\Software\Search Settings
Clé Supprimée : HKCU\Software\Search Settings
Clé Supprimée : HKLM\SOFTWARE\Application Updater
Clé Supprimée : HKLM\SOFTWARE\Search Settings
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SearchSettings]

***** [Registre - GUID] *****


***** [Navigateurs] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Le registre ne contient aucune entrée illégitime.

-\\ Mozilla Firefox v13.0.1 (fr)

Nom du profil : default
Fichier : C:\Users\Delmonio\AppData\Roaming\Mozilla\Firefox\Profiles\y2t5jyfq.default\prefs.js

[OK] Le fichier ne contient aucune entrée illégitime.

-\\ Google Chrome v20.0.1132.57

Fichier : C:\Users\Delmonio\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Le fichier ne contient aucune entrée illégitime.

*************************

Bonsoir, j'ai effectué la tâche zhp fix, dont voici le rapport

Rapport de ZHPFix 1.2.04 par Nicolas Coolman, Update du 23/04/2011
Fichier d'export Registre :
Run by Delmonio at 17/07/2012 19:09:13
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Web site : http://nicolascoolman.skyrock.com/

========== Clé(s) du Registre ==========
ABSENT Key: Service: Application Updater
ABSENT Key: HKCU\Software\AppDataLow\Software\Search Settings
ABSENT Key: HKLM\Software\Application Updater
ABSENT Key: HKLM\Software\Search Settings
SUPPRIME Key: StartupReg: Spotify Web Helper

========== Valeur(s) du Registre ==========
ABSENT RunValue: SearchSettings

========== Dossier(s) ==========
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{3D74657E-B1A2-462B-A659-5258DEFBB588}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{54B1D86C-3DEB-4A6C-8C92-4B117655A6F3}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{79530EA4-DEE1-4DB0-96CC-F7F06EBB358B}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{A5EE0402-6D2C-44F9-B677-534BF2776B74}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{A9E265DF-E78F-46C9-837D-D329189D9C2E}
SUPPRIME Folder: C:\Program Files (x86)\Spybot - Search & Destroy
ABSENT C:\Program Files (x86)\Application Updater
ABSENT C:\Program Files (x86)\Common Files\Spigot

========== Fichier(s) ==========
ABSENT Folder/File: c:\program files (x86)\common files\spigot\search settings\searchsettings.exe
ABSENT File: c:\program files (x86)\common files\spigot\search settings\searchsettings.exe
SUPPRIME Reboot c:\windows\winstart.bat
ABSENT File: c:\users\delmonio\appdata\roaming\spotify\data\spotifywebhelper.exe

========== Tache planifiée ==========
SUPPRIME Task: Ad-Aware Update (Weekly)
SUPPRIME Task: avast! Emergency Update
SUPPRIME Task: {C9A74500-DF58-422B-9EEC-5AD9F0830890}


========== Récapitulatif ==========
5 : Clé(s) du Registre
1 : Valeur(s) du Registre
8 : Dossier(s)
4 : Fichier(s)
3 : Tache planifiée


End of clean in 00mn 09s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 15/07/2012 11:47:03 [882]
C:\ZHP\ZHPFix[R2].txt - 15/07/2012 11:54:44 [738]
C:\ZHP\ZHPFix[R3].txt - 15/07/2012 13:03:09 [30278]
C:\ZHP\ZHPFix[R4].txt - 15/07/2012 20:18:45 [842]
C:\ZHP\ZHPFix[R5].txt - 17/07/2012 19:09:13 [2298]


Concernant la tâche sfc/scannow, , l'outil me notifie du messge disant qu'il n'a trouvé aucune violation d'intégrité.

ensuite, lorsque je redemarre ou éteint/allume, le pc, le bruit du disque dur est présent mais il me semble qu'il se soit atténué

Le rapport zhp diag est prêt
Dois je l'heberger et vous et copier/coller le lien ici?

Il est trop long, héberge le ! :-)

http://pjjoint.malekal.com/files.php?id=ZHPDiag_20120717_d7l6w9q12p10

RogueKiller V7.6.4 [17/07/2012] par Tigzy
mail: tigzyRK<at>gmail<dot>com
Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html
Blog: http://tigzyrk.blogspot.com

Systeme d'exploitation: Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Demarrage : Mode normal
Utilisateur: Delmonio [Droits d'admin]
Mode: Recherche -- Date: 17/07/2012 23:25:59

¤¤¤ Processus malicieux: 0 ¤¤¤

¤¤¤ Entrees de registre: 0 ¤¤¤

¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

¤¤¤ Driver: [NON CHARGE] ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ Fichier HOSTS: ¤¤¤
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 www.100888290cs.com
127.0.0.1 100888290cs.com
127.0.0.1 100sexlinks.com
127.0.0.1 www.100sexlinks.com
[...]


¤¤¤ MBR Verif: ¤¤¤

+++++ PhysicalDrive0: INTEL SSDSA2BW160G3H +++++
--- User ---
[MBR] f79f3cf86dc758dfe8deac965c5c6c86
[BSP] 2fff86bae7430d36efe162ff07aababf : Windows 7 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 199 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 409600 | Size: 134199 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 275249152 | Size: 18125 Mo
3 - [XXXXXX] FAT32-LBA (0x0c) [VISIBLE] Offset (sectors): 312369152 | Size: 102 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: WDC WD5000BPKT-60PK4T0 +++++
--- User ---
[MBR] c8ff582793dfb9a064de578f4394ad06
[BSP] d0f1f71992ac3aabbface78c1e97d1b0 : Windows 7 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 476938 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Termine : << RKreport[1].txt >>
RKreport[1].txt

rapport zhpfix

Rapport de ZHPFix 1.2.04 par Nicolas Coolman, Update du 23/04/2011
Fichier d'export Registre :
Run by Delmonio at 17/07/2012 23:23:02
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Web site : http://nicolascoolman.skyrock.com/

========== Clé(s) du Registre ==========
ABSENT Key: Service: EDHYJTM
ABSENT Key: CLSID BHO: {0BDA0769-FD72-49F4-9266-E1FB004F4D8F}
ABSENT Key: CLSID BHO: {bb1227ac-7a0d-4076-8c1a-51a1348f6fa8}

========== Valeur(s) du Registre ==========
ABSENT URLSearchHook: {0BDA0769-FD72-49F4-9266-E1FB004F4D8F}
ABSENT URLSearchHook: {bb1227ac-7a0d-4076-8c1a-51a1348f6fa8}

========== Dossier(s) ==========
ABSENT C:\Program Files (x86)\IObit Toolbar
ABSENT C:\ProgramData\Spybot - Search & Destroy
ABSENT C:\Users\Delmonio\AppData\Local\{5BA4752A-2141-4A11-A3AD-756CCAEF172A}
ABSENT C:\Users\Delmonio\AppData\Local\{A51635E2-12B7-48F2-9FE2-49B6DAFEEF59}

========== Fichier(s) ==========
ABSENT File: c:\users\delmonio\appdata\local\temp\edhyjtm.exe
ABSENT Folder/File: c:\users\delmonio\appdata\local\temp\~spunin~.exe
ABSENT File: c:\program files (x86)\iobit toolbar\ie\6.0\iobittoolbarie.dll


========== Récapitulatif ==========
3 : Clé(s) du Registre
2 : Valeur(s) du Registre
4 : Dossier(s)
3 : Fichier(s)


End of clean in 00mn 00s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 15/07/2012 11:47:03 [882]
C:\ZHP\ZHPFix[R2].txt - 15/07/2012 11:54:44 [738]
C:\ZHP\ZHPFix[R3].txt - 15/07/2012 13:03:09 [30278]
C:\ZHP\ZHPFix[R4].txt - 15/07/2012 20:18:45 [842]
C:\ZHP\ZHPFix[R5].txt - 17/07/2012 18:09:13 [2350]
C:\ZHP\ZHPFix[R6].txt - 17/07/2012 22:19:51 [1992]
C:\ZHP\ZHPFix[R7].txt - 17/07/2012 23:23:02 [1744]

rapport rogue , j'ai cliquer sur hosts raz


RogueKiller V7.6.4 [17/07/2012] par Tigzy
mail: tigzyRK<at>gmail<dot>com
Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html
Blog: http://tigzyrk.blogspot.com

Systeme d'exploitation: Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Demarrage : Mode normal
Utilisateur: Delmonio [Droits d'admin]
Mode: HOSTS RAZ -- Date: 17/07/2012 23:41:58

¤¤¤ Processus malicieux: 0 ¤¤¤

¤¤¤ Driver: [NON CHARGE] ¤¤¤

¤¤¤ Fichier HOSTS: ¤¤¤
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 www.100888290cs.com
127.0.0.1 100888290cs.com
127.0.0.1 100sexlinks.com
127.0.0.1 www.100sexlinks.com
[...]


¤¤¤ Nouveau fichier HOSTS: ¤¤¤
127.0.0.1 localhost

# Copyright (c) 1993-2009 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
# localhost name resolution is handled within DNS itself.
# 127.0.0.1 localhost
# ::1 localhost
# Start of entries inserted by Spybot - Search & Destroy
# This list is Copyright 2000-2008 Safer Networking Limited
# End of entries inserted by Spybot - Search & Destroy

127.0.0.1 localhost

RogueKiller V7.6.4 [17/07/2012] par Tigzy
mail: tigzyRK<at>gmail<dot>com
Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html
Blog: http://tigzyrk.blogspot.com

Systeme d'exploitation: Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Demarrage : Mode normal
Utilisateur: Delmonio [Droits d'admin]
Mode: Recherche -- Date: 17/07/2012 23:25:59

¤¤¤ Processus malicieux: 0 ¤¤¤

¤¤¤ Entrees de registre: 0 ¤¤¤

¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

¤¤¤ Driver: [NON CHARGE] ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ Fichier HOSTS: ¤¤¤
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 www.100888290cs.com
127.0.0.1 100888290cs.com
127.0.0.1 100sexlinks.com
127.0.0.1 www.100sexlinks.com
[...]


¤¤¤ MBR Verif: ¤¤¤

+++++ PhysicalDrive0: INTEL SSDSA2BW160G3H +++++
--- User ---
[MBR] f79f3cf86dc758dfe8deac965c5c6c86
[BSP] 2fff86bae7430d36efe162ff07aababf : Windows 7 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 199 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 409600 | Size: 134199 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 275249152 | Size: 18125 Mo
3 - [XXXXXX] FAT32-LBA (0x0c) [VISIBLE] Offset (sectors): 312369152 | Size: 102 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: WDC WD5000BPKT-60PK4T0 +++++
--- User ---
[MBR] c8ff582793dfb9a064de578f4394ad06
[BSP] d0f1f71992ac3aabbface78c1e97d1b0 : Windows 7 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 476938 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Termine : << RKreport[1].txt >>
RKreport[1].txt

mail: tigzyRK<at>gmail<dot>com
Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html
Blog: http://tigzyrk.blogspot.com

Systeme d'exploitation: Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Demarrage : Mode normal
Utilisateur: Delmonio [Droits d'admin]
Mode: HOSTS RAZ -- Date: 17/07/2012 23:41:58

¤¤¤ Processus malicieux: 0 ¤¤¤

¤¤¤ Driver: [NON CHARGE] ¤¤¤

¤¤¤ Fichier HOSTS: ¤¤¤
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 www.100888290cs.com
127.0.0.1 100888290cs.com
127.0.0.1 100sexlinks.com
127.0.0.1 www.100sexlinks.com
[...]


¤¤¤ Nouveau fichier HOSTS: ¤¤¤
127.0.0.1 localhost

Termine : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt

Bonsoir, voici le rapport delfix

# DelFix v8.8 - Rapport créé le 18/07/2012 à 20:03:01
# Mis à jour le 12/02/12 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : Delmonio - DELMONIO-HP (Administrateur)
# Exécuté depuis : C:\Users\Delmonio\Downloads\delfix.exe
# Option [Suppression]


~~~~~~ Dossiers(s) ~~~~~~

Supprimé : C:\ZHP
Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
Supprimé : C:\Users\Delmonio\Desktop\RK_Quarantine
Supprimé : C:\Program Files (x86)\ZHPDiag

~~~~~~ Fichier(s) ~~~~~~

Supprimé : C:\AdwCleaner[R1].txt
Supprimé : C:\AdwCleaner[R2].txt
Supprimé : C:\AdwCleaner[R3].txt
Supprimé : C:\AdwCleaner[R4].txt
Supprimé : C:\AdwCleaner[R5].txt
Supprimé : C:\AdwCleaner[S1].txt
Supprimé : C:\AdwCleaner[S2].txt
Supprimé : C:\AdwCleaner[S3].txt
Supprimé : C:\AdwCleaner[S4].txt
Supprimé : C:\AdwCleaner[S5].txt
Supprimé : C:\AdwCleaner[S6].txt
Supprimé : C:\AdwCleaner[S7].txt
Supprimé : C:\AdwCleaner[S8].txt
Supprimé : C:\Users\Delmonio\Desktop\RKreport[1].txt
Supprimé : C:\Users\Delmonio\Desktop\RKreport[2].txt
Supprimé : C:\Users\Delmonio\Desktop\ZHPDiag.lnk
Supprimé : C:\Users\Delmonio\Desktop\ZHPDiag.txt
Supprimé : C:\Users\Delmonio\Desktop\ZHPFix.lnk
Supprimé : C:\Users\Delmonio\Desktop\ZHPFixReport.txt
Supprimé : C:\Users\Delmonio\Desktop\ZHPScan.txt
Supprimé : C:\Users\Delmonio\Downloads\adwcleaner(1).exe
Supprimé : C:\Users\Delmonio\Downloads\adwcleaner.exe
Supprimé : C:\Users\Delmonio\Downloads\RogueKiller.exe
Supprimé : C:\Users\Delmonio\Downloads\ZHPDiag2.exe
Supprimé : C:\Users\Delmonio\Downloads\ZHPFix.exe

~~~~~~ Registre ~~~~~~

Clé Supprimée : HKLM\SOFTWARE\AdwCleaner
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1

~~~~~~ Autres ~~~~~~

-> Prefetch Vidé

*************************

DelFix[S1].txt - [1868 octets] - [18/07/2012 20:03:01]

########## EOF - C:\DelFix[S1].txt - [1992 octets] ##########

re, voici le rapport zhp diag

http://pjjoint.malekal.com/files.php?id=ZHPDiag_20120718_y13k11z10t1311

1/ Voici le rpport zhp fix

Rapport de ZHPFix 1.2.06 par Nicolas Coolman, Update du 17/05/2012
Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-18-07-2012-21-45-20.txt
Run by Delmonio at 18/07/2012 21:45:20
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Web site : http://nicolascoolman.skyrock.com/

========== Clé(s) du Registre ==========
SUPPRIME Key: StartupReg: Spotify Web Helper

========== Valeur(s) du Registre ==========
ABSENT URLSearchHook: {bb1227ac-7a0d-4076-8c1a-51a1348f6fa8}

========== Elément(s) de donnée du Registre ==========
REMPLACE Value NoActiveDesktopChanges : Good (0) - Bad (1)

========== Dossier(s) ==========
SUPPRIME Folder: C:\Users\Delmonio\AppData\Roaming\BeNaughtyChat
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{0117C8EC-B7B6-431A-99DE-32968FE91FA1}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{41BAB2E2-AFC0-42E4-96E4-3AB7BEAC8282}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{C3F5CFDF-804F-4F26-9A47-F0F9B3016228}
SUPPRIME Folder: C:\Users\Delmonio\AppData\Local\{CDE09DC7-59F3-4836-9721-C963DF1A0E41}

========== Fichier(s) ==========
ABSENT File: c:\users\delmonio\appdata\roaming\spotify\data\spotifywebhelper.exe
ABSENT File: c:\program files (x86)\winzipbar_fr\prxtbwinz.dll


========== Récapitulatif ==========
1 : Clé(s) du Registre
1 : Valeur(s) du Registre
1 : Elément(s) de donnée du Registre
5 : Dossier(s)
2 : Fichier(s)


End of clean in 00mn 01s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 18/07/2012 21:45:20 [1526]


2/ J'ai des fenêtres publicitaires qui s'ouvre sur certaines pages

bonsoir, voici le rapport combofix

ComboFix 12-07-19.02 - Delmonio 19/07/2012 18:56:48.1.8 - x64
Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.33.1036.18.6092.4287 [GMT 2:00]
Lancé depuis: c:\users\Delmonio\Desktop\delmonio.exe
AV: Microsoft Security Essentials *Disabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6}
SP: Microsoft Security Essentials *Disabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Roaming
D:\install.exe
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2012-06-19 au 2012-07-19 ))))))))))))))))))))))))))))))))))))
.
.
2012-07-19 17:02 . 2012-07-19 17:02 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-07-19 15:02 . 2012-07-19 15:02 69000 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D9628C81-99EA-4BB2-B24F-15460609E0F6}\offreg.dll
2012-07-18 18:09 . 2012-07-18 19:45 -------- d-----w- C:\ZHP
2012-07-18 18:09 . 2012-07-18 19:44 -------- d-----w- c:\program files (x86)\ZHPDiag
2012-07-18 16:04 . 2012-06-29 10:04 9133488 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{D9628C81-99EA-4BB2-B24F-15460609E0F6}\mpengine.dll
2012-07-17 05:04 . 2012-06-29 10:04 9133488 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-07-16 21:08 . 2012-07-16 21:09 -------- d-----w- C:\SMCLpav
2012-07-16 17:39 . 2012-07-16 17:39 -------- d-----w- c:\windows\SysWow64\Liste Spéciale
2012-07-16 17:09 . 2012-07-16 17:09 -------- d-----w- c:\users\Delmonio\AppData\Roaming\IObit
2012-07-16 17:09 . 2012-07-16 17:09 -------- d-----w- c:\program files (x86)\IObit
2012-07-15 15:40 . 2012-07-15 15:40 -------- d-----w- c:\program files (x86)\e-Carte Bleue Caisse d'Epargne
2012-07-15 10:45 . 2012-07-17 17:07 -------- d-----w- c:\program files (x86)\ZHPFix
2012-07-15 08:48 . 2012-07-15 08:48 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-07-15 08:48 . 2012-07-03 11:46 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-07-15 07:08 . 2012-07-15 07:12 -------- d-----w- c:\program files (x86)\Common Files\Nero
2012-07-15 07:08 . 2012-07-15 07:17 -------- d-----w- c:\programdata\Nero
2012-07-15 07:01 . 2011-12-01 09:42 15920 ----a-w- c:\windows\system32\drivers\NBVolUp.sys
2012-07-15 07:00 . 2011-12-01 09:42 72240 ----a-w- c:\windows\system32\drivers\NBVol.sys
2012-07-15 07:00 . 2012-07-15 07:17 -------- d-----w- c:\program files (x86)\Nero
2012-07-15 06:55 . 2010-05-26 09:41 248672 ----a-w- c:\windows\SysWow64\d3dx11_43.dll
2012-07-15 06:55 . 2009-09-04 15:29 1974616 ----a-w- c:\windows\SysWow64\D3DCompiler_42.dll
2012-07-15 06:55 . 2010-05-26 09:41 470880 ----a-w- c:\windows\SysWow64\d3dx10_43.dll
2012-07-15 06:55 . 2009-09-04 15:29 1892184 ----a-w- c:\windows\SysWow64\D3DX9_42.dll
2012-07-15 06:54 . 2010-05-26 09:41 1998168 ----a-w- c:\windows\SysWow64\D3DX9_43.dll
2012-07-15 06:54 . 2008-10-15 04:22 4379984 ----a-w- c:\windows\SysWow64\D3DX9_40.dll
2012-07-15 06:54 . 2010-05-26 09:41 1868128 ----a-w- c:\windows\SysWow64\d3dcsx_43.dll
2012-07-15 06:53 . 2007-07-19 16:14 3727720 ----a-w- c:\windows\SysWow64\d3dx9_35.dll
2012-07-15 06:53 . 2010-05-26 09:41 2106216 ----a-w- c:\windows\SysWow64\D3DCompiler_43.dll
2012-07-15 06:53 . 2007-05-16 14:45 3497832 ----a-w- c:\windows\SysWow64\d3dx9_34.dll
2012-07-14 16:41 . 2012-07-14 16:41 39184 ----a-w- c:\windows\system32\Partizan.exe
2012-07-14 16:38 . 2012-07-19 17:02 -------- d-----w- c:\programdata\RegRun
2012-07-14 16:38 . 2012-07-14 16:38 39184 ----a-w- c:\windows\SysWow64\Partizan.exe
2012-07-14 16:38 . 2012-07-14 16:38 35816 ----a-w- c:\windows\SysWow64\drivers\Partizan.sys
2012-07-14 16:38 . 2012-06-27 14:01 12800 ----a-w- c:\windows\SysWow64\drivers\UnHackMeDrv.sys
2012-07-14 16:37 . 2012-07-17 15:02 -------- d-----w- c:\program files (x86)\UnHackMe
2012-07-11 05:42 . 2012-06-12 03:08 3148800 ----a-w- c:\windows\system32\win32k.sys
2012-07-11 05:03 . 2012-06-06 06:06 2004480 ----a-w- c:\windows\system32\msxml6.dll
2012-07-10 16:58 . 2012-07-11 17:09 -------- d-----w- c:\users\Delmonio\AppData\Roaming\QuickScan
2012-07-05 22:17 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2012-07-05 17:56 . 2012-07-05 17:56 -------- d-----w- c:\program files\Defraggler
2012-07-04 05:14 . 2012-07-02 17:11 927800 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2012-07-04 05:14 . 2012-07-02 17:11 927800 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{A1FF5880-52FE-4075-91F7-03A6AC6C8FF9}\gapaengine.dll
2012-07-02 17:07 . 2012-07-02 17:07 -------- d-----w- c:\program files (x86)\Microsoft Security Client
2012-07-02 17:07 . 2012-07-02 17:07 -------- d-----w- c:\program files\Microsoft Security Client
2012-07-02 16:00 . 2012-07-02 16:00 -------- d-----w- c:\programdata\Grisoft
2012-07-02 15:52 . 2012-07-15 06:33 -------- d-----w- c:\program files (x86)\Quttera
2012-07-01 06:58 . 2012-07-02 16:41 -------- d-----w- c:\programdata\Avira
2012-06-29 14:48 . 2012-05-31 04:04 9013136 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{00449E2C-42BF-46DA-9FF8-BF47F2D46B7C}\mpengine.dll
2012-06-22 16:16 . 2012-06-22 16:16 770384 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcr100.dll
2012-06-22 16:16 . 2012-06-22 16:16 421200 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcp100.dll
2012-06-21 16:14 . 2012-06-21 16:14 -------- d-----w- c:\programdata\Badoo
2012-06-21 16:02 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-21 16:02 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-21 16:02 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll
2012-06-21 16:02 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll
2012-06-21 16:02 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll
2012-06-21 16:02 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll
2012-06-21 16:02 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll
2012-06-21 16:02 . 2012-06-02 13:19 186752 ----a-w- c:\windows\system32\wuwebv.dll
2012-06-21 16:02 . 2012-06-02 13:15 36864 ----a-w- c:\windows\system32\wuapp.exe
2012-06-19 23:32 . 2012-06-19 23:32 125 ----a-w- C:\user.js
2012-06-19 18:22 . 2012-06-20 04:44 -------- d-----w- c:\users\Delmonio\AppData\Roaming\CheckPoint
2012-06-19 18:22 . 2012-06-19 18:22 -------- d-----w- c:\programdata\CheckPoint
2012-06-19 18:13 . 2012-07-07 16:22 -------- d-----w- c:\users\Delmonio\AppData\Roaming\DVDVideoSoftIEHelpers
2012-06-19 18:13 . 2012-06-22 14:32 405144 ----a-w- c:\windows\SysWow64\Newtonsoft.Json.Net20.dll
2012-06-19 18:13 . 2012-07-07 16:22 -------- d-----w- c:\program files (x86)\Common Files\DVDVideoSoft
2012-06-19 18:13 . 2012-07-07 16:22 -------- d-----w- c:\program files (x86)\DVDVideoSoft
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-11 19:18 . 2012-05-05 17:53 426184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-07-11 19:18 . 2012-02-16 18:46 70344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-07-11 05:40 . 2012-02-21 20:32 59701280 ----a-w- c:\windows\system32\MRT.exe
2012-06-28 12:51 . 2012-03-14 04:57 285328 ----a-w- c:\windows\system32\aswBoot.exe
2012-05-19 12:09 . 2012-05-19 12:09 24448 ----a-w- c:\windows\SysWow64\drivers\rkhdrv40.sys
2012-05-11 09:14 . 2012-03-10 14:05 251528 ----a-w- c:\windows\system32\drivers\PCTSD64.sys
2012-05-04 17:29 . 2012-06-17 17:46 772504 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2012-05-04 17:29 . 2011-09-03 03:18 687504 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-05-04 11:06 . 2012-06-13 15:27 5559664 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-05-04 11:00 . 2012-06-19 16:11 366592 ----a-w- c:\windows\system32\qdvd.dll
2012-05-04 10:03 . 2012-06-13 15:27 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-05-04 10:03 . 2012-06-13 15:27 3913072 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-05-04 09:59 . 2012-06-19 16:11 514560 ----a-w- c:\windows\SysWow64\qdvd.dll
2012-05-01 05:40 . 2012-06-13 15:27 209920 ----a-w- c:\windows\system32\profsvc.dll
2012-04-28 03:55 . 2012-06-13 15:27 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-04-26 05:41 . 2012-06-13 15:27 77312 ----a-w- c:\windows\system32\rdpwsx.dll
2012-04-26 05:41 . 2012-06-13 15:27 149504 ----a-w- c:\windows\system32\rdpcorekmts.dll
2012-04-26 05:34 . 2012-06-13 15:27 9216 ----a-w- c:\windows\system32\rdrmemptylst.exe
2012-04-24 05:37 . 2012-06-13 15:27 184320 ----a-w- c:\windows\system32\cryptsvc.dll
2012-04-24 05:37 . 2012-06-13 15:27 140288 ----a-w- c:\windows\system32\cryptnet.dll
2012-04-24 05:37 . 2012-06-13 15:27 1462272 ----a-w- c:\windows\system32\crypt32.dll
2012-04-24 04:36 . 2012-06-13 15:27 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2012-04-24 04:36 . 2012-06-13 15:27 1158656 ----a-w- c:\windows\SysWow64\crypt32.dll
2012-04-24 04:36 . 2012-06-13 15:27 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-01-13 283160]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-17 252296]
"NBAgent"="c:\program files (x86)\Nero\Nero 11\Nero BackItUp\NBAgent.exe" [2012-01-13 1493288]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-07-03 462920]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
e-Carte Bleue Caisse d'Epargne.lnk - c:\program files (x86)\e-Carte Bleue Caisse d'Epargne\ecbl-cnce.exe [2012-7-15 278528]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"EnableShellExecuteHooks"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0Partizan\0
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
.
R2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [2011-01-24 901184]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [2011-01-24 991296]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Service Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-03-12 136176]
R2 HPAuto;HP Auto;c:\program files\Hewlett-Packard\HP Auto\HPAuto.exe [2011-02-16 682040]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-11 250056]
R3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [2011-01-24 1298496]
R3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys [2011-01-24 58128]
R3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys [2011-11-15 327168]
R3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
R3 gupdatem;Service Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-03-12 136176]
R3 hpCMSrv;HP Connection Manager 4 Service;c:\program files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [2011-06-14 1098296]
R3 iBtFltCoex;iBtFltCoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys [2011-12-09 60416]
R3 intaud_WaveExtensible;Intel WiDi Audio Device;c:\windows\system32\drivers\intelaud.sys [2011-05-17 34200]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-07-18 113120]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2011-02-04 340240]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-20 98688]
R3 NisSrv;Inspection du réseau Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe [2012-03-26 291696]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 rkhdrv40;Rootkit Unhooker Driver; [x]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2012-02-20 1255736]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 NBVol;Nero Backup Volume Filter Driver;c:\windows\system32\DRIVERS\NBVol.sys [2011-12-01 72240]
S0 NBVolUp;Nero Backup Volume Upper Filter Driver;c:\windows\system32\DRIVERS\NBVolUp.sys [2011-12-01 15920]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-05-07 203776]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]
S2 ezSharedSvc;Easybits Services for Windows;c:\windows\System32\ezSharedSvcHost.exe [x]
S2 FPLService;TrueSuiteService;c:\program files (x86)\HP SimplePass 2011\TrueSuiteService.exe [2011-02-17 265544]
S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2011-09-09 86072]
S2 HPWMISVC;HPWMISVC;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2012-02-15 34872]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-01-13 13336]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-07-03 655944]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2011-11-25 687400]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-22 2656280]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2011-05-07 9259520]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2011-05-07 301568]
S3 IntcDAud;Son Intel(R) pour écrans;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys [2011-04-15 12228128]
S3 iwdbus;IWD Bus Enumerator;c:\windows\system32\DRIVERS\iwdbus.sys [2011-05-17 25496]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-07-03 24904]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
S3 NETwNs64;___ Pilote de carte de la série Intel(R) Wireless WiFi Link 5000 pour Windows 7 64 bits ;c:\windows\system32\DRIVERS\NETwNs64.sys [2011-02-24 8591872]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2010-12-10 80384]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2010-12-10 181248]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [2011-01-13 333928]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-02-17 428136]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
.
.
Contenu du dossier 'Tâches planifiées'
.
2012-07-19 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-05 19:18]
.
2012-07-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-03-12 17:02]
.
2012-07-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-03-12 17:02]
.
2012-07-13 c:\windows\Tasks\HPCeeScheduleForDELMONIO-HP$.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13 20:15]
.
2012-07-14 c:\windows\Tasks\HPCeeScheduleForDelmonio.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13 20:15]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-04-15 168216]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-04-15 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-04-15 416024]
"IntelWireless"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-02-04 1933584]
"BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2011-01-24 10355200]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2011-03-11 1128448]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-03-26 1271168]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.msn.fr/
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: &Envoyer à OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: E&xporter vers Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Free YouTube Download - c:\users\Delmonio\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm
IE: Free YouTube to MP3 Converter - c:\users\Delmonio\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{816D303B-ACB0-418C-BCF1-AA858B6ED2C4}\356425027596649602055726C69636: NameServer = 178.33.41.181,46.4.70.20
FF - ProfilePath - c:\users\Delmonio\AppData\Roaming\Mozilla\Firefox\Profiles\y2t5jyfq.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: browser.startup.homepage - www.msn.fr
FF - prefs.js: keyword.URL - hxxp://fr.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=380920&p=
.
- - - - ORPHELINS SUPPRIMES - - - -
.
WebBrowser-{BB1227AC-7A0D-4076-8C1A-51A1348F6FA8} - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-{6F44AF95-3CDE-4513-AD3F-6D45F17BF324} - c:\program files (x86)\InstallShield Installation Information\{6F44AF95-3CDE-4513-AD3F-6D45F17BF324}\setup.exe
.
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3g2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.3G2"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.3GP"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.3G2"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gpp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.3GP"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aac\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.ADTS"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.adt\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.ADTS"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.adts\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.ADTS"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.AIFF"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aifc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.AIFF"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aiff\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.AIFF"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.ASF"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.ASX"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.au\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.AU"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avi\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.AVI"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cda\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.CDA"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m1v\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.MPEG"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2t\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.M2TS"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2ts\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.M2TS"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2v\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.MPEG"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m3u\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.m3u"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4a\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.M4A"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4v\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.MP4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mid\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.MIDI"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.midi\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.MIDI"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mod\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.MPEG"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mov\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.MOV"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.MP3"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2v\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.MPEG"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp3\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.MP3"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp4\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.MP4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp4v\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.MP4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpa\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.MPEG"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpe\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.MPEG"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpeg\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.MPEG"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpg\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.MPEG"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpv2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.MPEG"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mts\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.M2TS"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmi\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.MIDI"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.snd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.AU"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ts\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.TTS"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tts\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.TTS"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wav\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.WAV"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wax\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.WAX"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.ASF"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wma\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.WMA"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.WMD"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wms\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.WMS"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmv\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.WMV"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.ASX"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmz\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.WMZ"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wpl\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.WPL"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wvx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WMP11.AssocFile.WVX"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_265_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_265_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Nico Mak Computing\WinZip]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Heure de fin: 2012-07-19 19:05:17
ComboFix-quarantined-files.txt 2012-07-19 17:05
.
Avant-CF: 83 429 056 512 octets libres
Après-CF: 84 980 187 136 octets libres
.
- - End Of File - - 37F16E5E1B1B5C77C46BF37DE4D10446

Re, voici le rapport de tdskiller


22:10:37.0054 7268 WebClient (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll
22:10:37.0064 7268 WebClient - ok
22:10:37.0087 7268 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
22:10:37.0097 7268 Wecsvc - ok
22:10:37.0113 7268 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
22:10:37.0120 7268 wercplsupport - ok
22:10:37.0135 7268 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
22:10:37.0141 7268 WerSvc - ok
22:10:37.0157 7268 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
22:10:37.0159 7268 WfpLwf - ok
22:10:37.0169 7268 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
22:10:37.0172 7268 WIMMount - ok
22:10:37.0181 7268 WinDefend - ok
22:10:37.0192 7268 WinHttpAutoProxySvc - ok
22:10:37.0222 7268 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
22:10:37.0229 7268 Winmgmt - ok
22:10:37.0320 7268 WinRM (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll
22:10:37.0363 7268 WinRM - ok
22:10:37.0417 7268 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUSB.sys
22:10:37.0420 7268 WinUsb - ok
22:10:37.0476 7268 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
22:10:37.0498 7268 Wlansvc - ok
22:10:37.0511 7268 wlcrasvc (06c8fa1cf39de6a735b54d906ba791c6) C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
22:10:37.0514 7268 wlcrasvc - ok
22:10:37.0613 7268 wlidsvc (2bacd71123f42cea603f4e205e1ae337) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
22:10:37.0647 7268 wlidsvc - ok
22:10:37.0702 7268 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
22:10:37.0703 7268 WmiAcpi - ok
22:10:37.0734 7268 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
22:10:37.0741 7268 wmiApSrv - ok
22:10:37.0750 7268 WMPNetworkSvc - ok
22:10:37.0761 7268 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
22:10:37.0766 7268 WPCSvc - ok
22:10:37.0782 7268 WPDBusEnum (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll
22:10:37.0789 7268 WPDBusEnum - ok
22:10:37.0799 7268 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
22:10:37.0802 7268 ws2ifsl - ok
22:10:37.0816 7268 wscsvc (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\system32\wscsvc.dll
22:10:37.0823 7268 wscsvc - ok
22:10:37.0830 7268 WSearch - ok
22:10:37.0945 7268 wuauserv (d9ef901dca379cfe914e9fa13b73b4c4) C:\Windows\system32\wuaueng.dll
22:10:37.0994 7268 wuauserv - ok
22:10:38.0041 7268 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
22:10:38.0045 7268 WudfPf - ok
22:10:38.0062 7268 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
22:10:38.0067 7268 WUDFRd - ok
22:10:38.0081 7268 wudfsvc (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll
22:10:38.0088 7268 wudfsvc - ok
22:10:38.0114 7268 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
22:10:38.0123 7268 WwanSvc - ok
22:10:38.0151 7268 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
22:10:38.0295 7268 \Device\Harddisk0\DR0 - ok
22:10:41.0096 7268 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk1\DR1
22:10:41.0101 7268 \Device\Harddisk1\DR1 - ok
22:10:41.0107 7268 Boot (0x1200) (ca68dccdfb1f3ef4c22a25ada65bba80) \Device\Harddisk0\DR0\Partition0
22:10:41.0111 7268 \Device\Harddisk0\DR0\Partition0 - ok
22:10:41.0116 7268 Boot (0x1200) (98fc9e9ae6622e663e3f14bf61aff045) \Device\Harddisk0\DR0\Partition1
22:10:41.0119 7268 \Device\Harddisk0\DR0\Partition1 - ok
22:10:41.0124 7268 Boot (0x1200) (1067ec7a2be932f395a73c6d360fbbdc) \Device\Harddisk0\DR0\Partition2
22:10:41.0127 7268 \Device\Harddisk0\DR0\Partition2 - ok
22:10:41.0132 7268 Boot (0x1200) (4d39ee4602b1424361931b656c1ab167) \Device\Harddisk0\DR0\Partition3
22:10:41.0134 7268 \Device\Harddisk0\DR0\Partition3 - ok
22:10:41.0140 7268 Boot (0x1200) (8b75c4375feb8eb9615b83926c37fce8) \Device\Harddisk1\DR1\Partition0
22:10:41.0143 7268 \Device\Harddisk1\DR1\Partition0 - ok
22:10:41.0144 7268 ============================================================
22:10:41.0144 7268 Scan finished
22:10:41.0144 7268 ============================================================
22:10:41.0163 6572 Detected object count: 0
22:10:41.0163 6572 Actual detected object count: 0
22:11:23.0225 7248 Deinitialize success

J'ai reg run reanimator qui me notifie d'un rootkit situé ici

c\windows\syswow64\wbem\wbemess\dll

lorsque je clique sur "get it out", il ouvre une fenêtre me demandant d'inserer le "cd warrior"