PC qui rame à mort, infecté ?

Bonjour,
J'ai moi meme le meme pb et du coup j'ai fait un ZHP Diag est ce que quelqu"un peut me le traduire ou m'aider ? :
Rapport de ZHPDiag v2014.4.3.2 - Nicolas Coolman (03/04/2014)
~ Lancé par Nono (04/04/2014 18:33:46)
~ Adresse du Site Web http://nicolascoolman.webs.com
~ Forums gratuits d'Assistance à la désinfection : http://nicolascoolman.webs.com/apps/links/
~ Traduit par Nicolas Coolman
~ Etat de la version :
~ Liste blanche : Activée par le programme
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Activate by user


---\\ Navigateurs Internet
MSIE: Internet Explorer v9.0.8112.16421
MFIE: Mozilla Firefox 26.0
GCIE: Google Chrome v33.0.1750.154 (Defaut)

---\\ Informations sur les produits Windows
~ Langage: Français
Windows Vista (TM) Home Premium, 32-bit Service Pack 2 (Build 6002)
Windows Server License Manager Script : OK
Windows Automatic Updates : OK

---\\ Logiciels de protection du système
avast! Internet Security v9.0.2016

---\\ Logiciels d'optimisation du système
CCleaner v3.05 =>.Piriform Ltd

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels
Adobe Flash Player 12 ActiveX
Adobe Reader 8.1.3 - Français
Java 7 Update 51

---\\ Informations sur le système
~ Processor: x86 Family 6 Model 15 Stepping 13, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3061 MB (41% free)
System Restore: Activé (Enable)
System drive C: has 17 GB (23%) free of 74 GB

---\\ Mode de connexion au système
~ Computer Name: PC-NONO
~ User Name: Nono
~ All Users Names: Nono, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\Nono\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\Nono\AppData\Roaming\
~ %Desktop% : C:\Users\Nono\Desktop\
~ %Favorites% : C:\Users\Nono\Favorites\
~ %LocalAppData% : C:\Users\Nono\AppData\Local\
~ %StartMenu% : C:\Users\Nono\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 17 Go of 74 Go)
E: Hard drive, Flash drive, Thumb drive (Free 56 Go of 73 Go)
F: CD-ROM drive (Not Inserted)
G: CD-ROM drive (Not Inserted)



---\\ Etat du Centre de Sécurité Windows
~ Security Center: 42 Legitimates Filtered in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.11/04/2009 - 07:27:36.) -- C:\Windows\Explorer.exe [2926592]
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 - 03:23:42.) -- C:\Windows\System32\Wininit.exe [96768]
[MD5.1E5DF19A5F053345430D7AF87943C47A] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.23/02/2014 - 06:40:18.) -- C:\Windows\System32\wininet.dll [1129472]
[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.11/04/2009 - 07:28:13.) -- C:\Windows\System32\Winlogon.exe [314368]
[MD5.3911B972B55FEA0478476B2E777B29FA] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.21/04/2011 - 14:58:27.) -- C:\Windows\system32\Drivers\AFD.sys [273408]
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.11/04/2009 - 07:32:26.) -- C:\Windows\system32\Drivers\atapi.sys [19944]
[MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.21/01/2008 - 03:23:51.) -- C:\Windows\system32\Drivers\Cdfs.sys [70144]
[MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.11/04/2009 - 05:39:17.) -- C:\Windows\system32\Drivers\Cdrom.sys [67072]
[MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.14/04/2011 - 15:59:03.) -- C:\Windows\system32\Drivers\DfsC.sys [75264]
[MD5.062452B7FFD68C8C042A6261FE8DFF4A] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.11/04/2009 - 05:42:42.) -- C:\Windows\system32\Drivers\HDAudBus.sys [561152]
[MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) (.21/01/2008 - 03:23:20.) -- C:\Windows\system32\Drivers\i8042prt.sys [54784]
[MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.21/01/2008 - 03:24:25.) -- C:\Windows\system32\Drivers\IpNat.sys [100864]
[MD5.1E94971C4B446AB2290DEB71D01CF0C2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.29/04/2011 - 14:24:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [106496]
[MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) (.11/04/2009 - 05:45:37.) -- C:\Windows\system32\Drivers\netBT.sys [185856]
[MD5.2C1121F2B87E9A6B12485DF53CD848C7] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.03/03/2013 - 20:07:52.) -- C:\Windows\system32\Drivers\ntfs.sys [1082232]
[MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) (.02/11/2006 - 09:51:30.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
[MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/01/2008 - 03:24:55.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [76288]
[MD5.FBC0BACD9C3D7F6956853F64A66E252D] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/01/2008 - 03:23:01.) -- C:\Windows\system32\Drivers\rdpdr.sys [248832]
[MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) (.11/04/2009 - 05:45:22.) -- C:\Windows\system32\Drivers\smb.sys [66560]
[MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) (.11/04/2009 - 05:45:56.) -- C:\Windows\system32\Drivers\tdx.sys [72192]
[MD5.786DB5771F05EF300390399F626BF30A] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.21/08/2012 - 12:47:42.) -- C:\Windows\system32\Drivers\volsnap.sys [224640]
~ Generic Processes: Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/3259
~ Mes musiques (My Musics) : 1/69
~ Mes Videos (My Videos) : 1/18
~ Mes Favoris (My Favorites) : 1/86
~ Mes Documents (My Documents) : 1/1314
~ Mon Bureau (My Desktop) : 1/38
~ Menu demarrer (Programs) : 1/58
~ Hidden Files: Scanned in 00mn 02s



---\\ Processus lancés
[MD5.0D392EDE3B97E0B3131B2F63EF1DB94E] - (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe [1008184] [PID.3044]
[MD5.1FE2E92576ED4BC83FFA4FDB2831C3B2] - (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe [141848] [PID.3052]
[MD5.A13F4ABCD303F04A805155F6049D1CB2] - (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe [154136] [PID.3060]
[MD5.4F535C9ECC352167B2F5B26D38A247BD] - (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe [129560] [PID.3068]
[MD5.99C1D6B7C36C891EC099AA8D120185C4] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe [4911104] [PID.3148]
[MD5.6E240D6C2F0DB74BED13AD723D3AB0A1] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1348904] [PID.3304]
[MD5.DBC3E8226BE6FE67FAE94025C80FE907] - (.TOSHIBA CORPORATION - ConfigFree(TM) Task tray menu.) -- C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe [1056768] [PID.3380]
[MD5.5F5764E4046019031C7445541D728721] - (.Interactive Digital Media - Desktop SMS - German.) -- C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe [1507328] [PID.3504]
[MD5.137962BA4B4B60A0E5F12D6C9DFA4C2F] - (.Chicony - traybar.) -- C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe [413696] [PID.3572]
[MD5.B0674AE101707D21F9E30484D6465704] - (.TOSHIBA Corporation - TOSHIBA Power Saver.) -- C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe [431456] [PID.3612]
[MD5.B50D6E98F87616444B7E3F8D190A5F09] - (.TOSHIBA Corporation - SmoothView.) -- C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe [509816] [PID.3672]
[MD5.E9E5692F51D6032A1105C7BE27FC0BAE] - (.TOSHIBA Corporation - TOSHIBA Flash Cards.) -- C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [712704] [PID.3768]
[MD5.6E70704C2568ED01CDDF6291F5043763] - (.CANON INC. - Canon My Printer.) -- C:\Program Files\Canon\MyPrinter\BJMYPRT.exe [2569616] [PID.1412]
[MD5.6521891B67EAD77CAFD877D8A24ED769] - (.CANON INC. - Canon Solution Menu EX.) -- C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.exe [1213848] [PID.2756]
[MD5.D3570ACC178180AC0D7C24645461A9D3] - (.CANON INC. - Canon IJ Network Scanner Selector EX.) -- C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016] [PID.2556]
[MD5.81800928E0F713DF31F3393CC26F4013] - (.Pas de propriétaire - DivX Update.) -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1263952] [PID.3336]
[MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336] [PID.3800]
[MD5.B4E6C1B28AF8806008CB654C716ABAFA] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [152392] [PID.1004]
[MD5.DD84FD291B2C324B8E6D6EF6B8643A69] - (...) -- C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe [4624384] [PID.2852]
[MD5.4BFA1849DC7AA3CB99C160D9EB96C67B] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [3854640] [PID.3120]
[MD5.BF08674925F151BD4537B89A493E3E0C] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe [125952] [PID.3112]
[MD5.0D5FD7C99644ED1DBBCEC72BA0FE16DD] - (.BitTorrent Inc. - BitTorrent.) -- C:\Users\Nono\AppData\Roaming\BitTorrent\BitTorrent.exe [1516632] [PID.2804] =>P2P.BitTorrent
[MD5.CFE31B91A0A997F1A0F797B717D087A8] - (.Ralink Technology, Corp. - Ralink Wireless LAN Card Utility.) -- C:\Program Files\Ralink\Common\RaUI.exe [15621008] [PID.2076]
[MD5.DF14865FD7961D9D4FA5A2A3C2F33560] - (.Intel Corporation - igfxsrvc Module.) -- C:\Windows\system32\igfxsrvc.exe [252440] [PID.4324]
[MD5.0F4195B9B348DE5CF9B822F81704B20E] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\Windows\ehome\ehmsas.exe [37376] [PID.5704]
[MD5.F064D3DA9BCEC02D9782D39446603DCA] - (.TOSHIBA CORPORATION - ConfigFree Switch Manager.) -- C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe [405504] [PID.6092]
[MD5.4C1F26CFCA34E978CC1311F9F080F675] - (.Synaptics, Inc. - Synaptics Pointing Device Helper.) -- C:\Program Files\Synaptics\SynTP\SynTPHelper.exe [103720] [PID.4824]
[MD5.7E6EA9CB72B5DE84A5D700BED877E5F9] - (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe [397312] [PID.4352]
[MD5.3A924B200D86590D2C83214CEBFA9742] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [859976] [PID.4516]
[MD5.E75DA1FAAFC9B69CCD0940F95C9D1CF7] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8182272] [PID.4604]
[MD5.6080A176D09435FC8E6E800996656E18] - (.Microsoft Corporation - Console IME.) -- C:\Windows\system32\conime.exe [69120] [PID.5232]
[MD5.C7FBDD1ED42F82BFA35167A5C9803EA3] - (.Microsoft Corporation - PresentationFontCache.exe.) -- C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [43904] [PID.1040]
[MD5.862BB4CBC05D80C5B45BE430E5EF872F] - (.Microsoft Corporation - Service de gestion des licences Microsoft.) -- C:\Windows\system32\SLsvc.exe [3408896] [PID.1424]
[MD5.BEA8D0FA8805CC2E6BB49728166699C7] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344] [PID.1868]
[MD5.D58C10AFF2B5C09D615623A4DAC0E330] - (.AVAST Software - avast! firewall service.) -- C:\Program Files\AVAST Software\Avast\afwServ.exe [109048] [PID.1912]
[MD5.39E435C90C9C4F780FA0ED05CA3C3A1B] - (.Agere Systems - Agere Soft Modem Call Progress Service.) -- C:\Windows\system32\agrsmsvc.exe [9216] [PID.2168]
[MD5.F518545E5B7623AD49ABE7F8776EFA46] - (.Apple Inc. - YSLoader.exe.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [43336] [PID.2192]
[MD5.DB5BEA73EDAF19AC68B2C0FAD0F92B1A] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [390504] [PID.2212]
[MD5.596E452B5152EC9AFE8153D296459D2B] - (.TOSHIBA CORPORATION - Service of ConfigFree..) -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [40960] [PID.2244]
[MD5.130B35588533A13D02F37B296CB5CE88] - (.Systweak Software., (www.systweak.com) - Disk Speedup - Defrag Service.) -- C:\Program Files\Disk Speedup\DSUDefragSrv.exe [669480] [PID.2380] =>PUP.DiskSpeedup
[MD5.11F714F85530A2BD134074DC30E99FCA] - (.Microsoft Corporation - Machine Debug Manager.) -- C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.exe [322120] [PID.2424]
[MD5.9C1F776825207C203CB44CA3C63B5A6E] - (.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe [2735528] [PID.3296]
[MD5.E47F35A87FF0DA38DEF37A0EB0C2D2DF] - (.TOSHIBA Corporation - TOSHIBA Navi Support Service.) -- C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe [83312] [PID.3512]
[MD5.C5AC715B65B01788ABC22D10749DDDD8] - (.TOSHIBA Corporation - TDCSrv Application.) -- C:\Windows\system32\TODDSrv.exe [129632] [PID.3700]
[MD5.DA6903958CBDC091FFCBBCA70CCFF34C] - (.TOSHIBA Corporation - TOSHIBA Power Saver.) -- c:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe [431456] [PID.3824]
[MD5.22690DFFC7F2A18279A7A0489AA02BAC] - (.TOSHIBA Corporation - TosIPCSrv.exe.) -- c:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe [126976] [PID.3900]
[MD5.332D341D92B933600D41953B08360DFB] - (.Ulead Systems, Inc. - ULCDRSvr.) -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [49152] [PID.3980]
[MD5.F54250B7BAC653F78AFA8ECE33ED65D5] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [553288] [PID.5724]
~ Processes Running: Scanned in 00mn 02s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Nono\AppData\Local\Google\Chrome\User Data\Default\Preferences
G2 - GCE: Preference [User Data\Default] [booedmolknjekdopkepjjeckmjkdpfgl] Extutil v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [dffhljlmcohcioeilbnpmbchdcbhifdh] WiseConvert 1.5 v.10.13.20.29 (Désactivé) =>Toolbar.Conduit
G2 - GCE: Preference [User Data\Default] [flpcjncodpafbgdpnkljologafpionhb] Managera v.0.1 (Activé) =>PUP.Manager
G2 - GCE: Preference [User Data\Default] [lkgikdljlijdigcpknpecodlmihmdmij] DivX Browser Bar FR v.10.16.2.6, (Désactivé)
G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Wallet v.0.0.6.1 (Activé)
G2 - GCE: Preference [User Data\Default] [pljcgbedjplidkdjahbaalanadmjfgop] Ask Toolbar v.30.1, (Désactivé) =>Toolbar.Ask

---\\ Liste des dossiers d'extension Google Chrome
G2 - EXT: C:\Users\Nono\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [YouTube]
~ Google Lines Browser: 40 Legitimates Filtered in 00mn 07s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\Nono\AppData\Roaming\Mozilla\Firefox\Profiles\v7f499gm.default\prefs.js
C:\Users\Nono\AppData\Roaming\Mozilla\Firefox\Profiles\v7f499gm.default\user.js
M3 - MFPP: Plugins - [Nono] -- C:\Users\Nono\AppData\Roaming\Mozilla\Firefox\Profiles\v7f499gm.default\searchplugins\askcom.xml
M3 - MFPP: Plugins - [Nono] -- C:\Users\Nono\AppData\Roaming\Mozilla\Firefox\Profiles\v7f499gm.default\searchplugins\conduit-search.xml =>Toolbar.Conduit
M3 - MFPP: Plugins - [Nono] -- C:\Users\Nono\AppData\Roaming\Mozilla\Firefox\Profiles\v7f499gm.default\searchplugins\conduit.xml
M3 - MFPP: Plugins - [Nono] -- C:\Users\Nono\AppData\Roaming\Mozilla\Firefox\Profiles\v7f499gm.default\searchplugins\iminent.xml =>Adware.IMBooster
M3 - MFPP: Plugins - [Nono] -- C:\Users\Nono\AppData\Roaming\Mozilla\Firefox\Profiles\v7f499gm.default\searchplugins\Mysearchdial.xml =>Adware.MyWebSearch
M3 - MFPP: Plugins - [Nono] -- C:\Users\Nono\AppData\Roaming\Mozilla\Firefox\Profiles\v7f499gm.default\searchplugins\SweetIM Search.xml =>PUP.SweetIM
M0 - MFSP: prefs.js [Nono - v7f499gm.default] http://start.mysearchdial.com =>Adware.MyWebSearch
M2 - MFEP: prefs.js [Nono - v7f499gm.default\***@***] [] mysearchdial.com v1.6.0 (..) =>Adware.MyWebSearch
M2 - MFEP: prefs.js [Nono - v7f499gm.default\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}] [] MySearchDial NewTab v1.2.1 (..) =>Adware.MyWebSearch
~ Firefox Browser: 24 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com =>Adware.MyWebSearch
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com =>Adware.MyWebSearch
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = http://start.mysearchdial.com =>Adware.MyWebSearch
~ IE Browser: 18 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Keys: Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 20



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: mysearchdial Helper Object - {EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} . (.MySearchDial - Pas de description.) -- C:\Program Files\Mysearchdial\1.8.29.0\bh\mysearchdial.dll =>Adware.MyWebSearch
~ BHO: 32 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Canon Easy-WebPrint EX - [HKLM]{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} . (.CANON INC. - Easy-WebPrint EX.) -- C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll
O3 - Toolbar: (no name) - [HKLM]{834acc44-e0fc-4f17-8e6b-f1029b3bc0de} Clé orpheline
O3 - Toolbar: mysearchdial Toolbar - [HKLM]{3004627E-F8E9-4E8B-909D-316753CBA923} . (.MySearchDial - Pas de description.) -- C:\Program Files\Mysearchdial\1.8.29.0\mysearchdialTlbr.dll =>Adware.MyWebSearch
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{D4027C7F-154A-4066-A1AD-4243D8127440} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{D7E97865-918F-41E4-9CD0-25AB1C574CE8} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{834ACC44-E0FC-4F17-8E6B-F1029B3BC0DE} Clé orpheline
~ Toolbar: Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop [Public]: Canon MX420 series Manuel en ligne.lnk . (.CANON INC. - Easy Guide Viewer.) -- C:\Program Files\Canon\IJ Manual\Easy Guide Viewer\cmview.exe
O4 - GS\Desktop [Public]: CommView for WiFi.lnk . (.TamoSoft - CommView for WiFi Packet Analyzer.) -- C:\Program Files\CommViewWiFi\CV.exe
O4 - GS\Desktop [Public]: Disk Speedup.lnk . (.Systweak Software., (www.systweak.com) - Disk Speedup - UAC Launcher.) -- C:\Program Files\Disk Speedup\RequireAdministrator.exe =>PUP.DiskSpeedup
O4 - GS\Desktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O4 - GS\Desktop [Public]: Kobo.lnk . (...) -- C:\Program Files\Kobo\Kobo.exe
O4 - GS\Desktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - GS\Desktop [Public]: RegClean Pro.lnk . (.Systweak Inc - RegClean Pro.) -- C:\Program Files\RegClean Pro\RegCleanPro.exe =>Rogue.RegistryPowerCleaner
O4 - GS\Program [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - GS\QuickLaunch [Nono]: BitTorrent.lnk . (.BitTorrent Inc. - BitTorrent.) -- C:\Users\Nono\AppData\Roaming\BitTorrent\BitTorrent.exe =>P2P.BitTorrent
O4 - GS\QuickLaunch [Nono]: DeepBurner Pro.lnk . (.Astonsoft - CD/DVD recording software.) -- C:\Program Files\Astonsoft\DeepBurner Pro\DeepBurner.exe
O4 - GS\QuickLaunch [Nono]: Disk Speedup.lnk . (.Systweak Software., (www.systweak.com) - Disk Speedup - Disk SpeedUp.) -- C:\Program Files\Disk Speedup\DSU.exe =>PUP.DiskSpeedup
O4 - GS\QuickLaunch [Nono]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O4 - GS\QuickLaunch [Nono]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - GS\Program [Nono]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\SystemTools [Nono]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\Desktop [Nono]: BitTorrent.lnk . (.BitTorrent Inc. - BitTorrent.) -- C:\Users\Nono\AppData\Roaming\BitTorrent\BitTorrent.exe =>P2P.BitTorrent
O4 - GS\Desktop [Nono]: Corbeille - Raccourci.lnk - Clé orpheline
O4 - GS\Desktop [Nono]: Excel 2003.lnk . (...) -- C:\Windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe
O4 - GS\Desktop [Nono]: PowerPoint 2003.lnk . (...) -- C:\Windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pptico.exe
O4 - GS\Desktop [Nono]: ScreenHunter 5.1 Free.lnk . (.Wisdom Software Inc. - ScreenHunter 5.1 Free.) -- C:\Program Files\Wisdom-soft ScreenHunter 5 Free\ScreenHunter.exe
O4 - GS\Desktop [Nono]: WirelessMon.lnk . (.PassMark Software® - WirelessMon.) -- C:\Program Files\WirelessMon\WirelessMon.exe
O4 - GS\Desktop [Nono]: Word 2003.lnk . (...) -- C:\Windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe
O4 - GS\Desktop [Nono]: XnView.lnk . (.XnView, http://www.xnview.com - XnView for Windows.) -- C:\Users\Nono\Documents\XnView-win\XnView\xnview.exe
~ Global Startup: 76 Legitimates Filtered in 00mn 01s



---\\ Applications lancées au démarrage du système (O4)
O4 - GS\Startup [Public]: Ralink Wireless Utility.lnk . (.Ralink Technology, Corp. - Ralink Wireless LAN Card Utility.) -- C:\Program Files\Ralink\Common\RaUI.exe
O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe =>.Realtek Semiconductor Corp
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NDSTray.exe] Clé orpheline
O4 - HKLM\..\Run: [topi] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe =>.Toshiba Corporation
O4 - HKLM\..\Run: [Desktop SMS] . (.Interactive Digital Media - Desktop SMS - German.) -- C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe
O4 - HKLM\..\Run: [Camera Assistant Software] . (.Chicony - traybar.) -- C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
O4 - HKLM\..\Run: [TPwrMain] . (.TOSHIBA Corporation - TOSHIBA Power Saver.) -- C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
O4 - HKLM\..\Run: [HSON] . (.TOSHIBA Corporation - HotStartOn.) -- C:\Program Files\TOSHIBA\TBS\HSON.exe
O4 - HKLM\..\Run: [SmoothView] . (.TOSHIBA Corporation - SmoothView.) -- C:\Program Files\Toshiba\SmoothView\SmoothView.exe
O4 - HKLM\..\Run: [00TCrdMain] . (.TOSHIBA Corporation - TOSHIBA Flash Cards.) -- C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
O4 - HKLM\..\Run: [Toshiba Registration] . (.Toshiba - Vista Registration.) -- C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [Skytel] . (.Realtek Semiconductor Corp. - Realtek Voice Manager.) -- C:\Windows\Skytel.exe =>.Realtek Semiconductor Corp
O4 - HKLM\..\Run: [CanonMyPrinter] . (.CANON INC. - Canon My Printer.) -- C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
O4 - HKLM\..\Run: [CanonSolutionMenuEx] . (.CANON INC. - Canon Solution Menu EX.) -- C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.exe
O4 - HKLM\..\Run: [IJNetworkScannerSelectorEX] . (.CANON INC. - Canon IJ Network Scanner Selector EX.) -- C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
O4 - HKLM\..\Run: [DivXMediaServer] . (.DivX, LLC - DivX DLNA Media Server.) -- C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe
O4 - HKLM\..\Run: [DivXUpdate] . (.Pas de propriétaire - DivX Update.) -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe =>.Microsoft Corporation
O4 - HKCU\..\Run: [BitTorrent] . (.BitTorrent Inc. - BitTorrent.) -- C:\Users\Nono\AppData\Roaming\BitTorrent\BitTorrent.exe =>P2P.BitTorrent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] Clé orpheline
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] Clé orpheline
O4 - HKUS\.DEFAULT\..\RunOnce: [SpUninstallDeleteDir] Clé orpheline
O4 - HKUS\S-1-5-18\..\RunOnce: [SpUninstallDeleteDir] Clé orpheline
O4 - HKUS\S-1-5-21-2703184963-4146924957-3313618206-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-2703184963-4146924957-3313618206-1000\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-21-2703184963-4146924957-3313618206-1000\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-2703184963-4146924957-3313618206-1000\..\Run: [BitTorrent] . (.BitTorrent Inc. - BitTorrent.) -- C:\Users\Nono\AppData\Roaming\BitTorrent\BitTorrent.exe =>P2P.BitTorrent
~ Application: Scanned in 00mn 01s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -- Clé orpheline
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\OFFICE11\REFBARH.ICO
~ IE Extra Buttons: Scanned in 00mn 00s



---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} ((no name)) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} ((no name)) - http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
~ Objets ActiveX: Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{38778D07-1A44-4705-B146-936D69DE0A38}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{CF6453DC-837A-4DB9-BE68-7A63BE7D7D36}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\..\{EE717C2A-7C2E-4486-90FC-BB655E1AF4C2}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{38778D07-1A44-4705-B146-936D69DE0A38}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{CF6453DC-837A-4DB9-BE68-7A63BE7D7D36}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{EE717C2A-7C2E-4486-90FC-BB655E1AF4C2}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{CF6453DC-837A-4DB9-BE68-7A63BE7D7D36}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS3\Services\Tcpip\..\{CF6453DC-837A-4DB9-BE68-7A63BE7D7D36}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain: Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll =>.Microsoft Corporation
O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s



---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\System32\browseui.dll
~ STS/SSO: Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: DSUDiskOptimizer (DSUDiskOptimizer) . (.Systweak Software., (www.systweak.com) - Disk Speedup - Defrag Service.) - C:\Program Files\Disk Speedup\DSUDefragSrv.exe =>PUP.DiskSpeedup
~ Services: 15 Legitimates Filtered in 00mn 24s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe (.not file.)
~ Desktop Component: 4 Legitimates Filtered in 00mn 00s



---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (ROBoot \??\C:\Windows\system32\ASOROSet.bin) - File not found
~ BEX: 2 Legitimates Filtered in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Digital Sites.job [288]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\MySearchDial.job [288] =>Adware.MyWebSearch
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{0FAAF06D-902A-4009-B45A-0D70E7653CBD}.job [436]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{54A3E7B4-98E4-40E0-BDAA-8F5567BC0E1F}.job [418]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\{75D934D1-1DF0-411D-82FC-25C530EAA189}.job [626]
[MD5.00000000000000000000000000000000] [APT] [Digital Sites] (...) -- C:\Users\Nono\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.exe (.not file.) [0]
[MD5.9B950888F0AA9536A577AEDEB45AF263] [APT] [MySearchDial] (...) -- C:\Users\Nono\AppData\Roaming\MYSEAR~1\UPDATE~1\UPDATE~1.exe [97280] =>Adware.MyWebSearch
[MD5.D71449CACC813930CE6D7C2EBB0C22A7] [APT] [RegClean Pro] (.Systweak Inc.) -- C:\Program Files\RegClean Pro\RegCleanPro.exe [9125720] =>Rogue.RegistryPowerCleaner
~ Scheduled Task: 48 Legitimates Filtered in 00mn 07s



---\\ Logiciels installés (O42)
O42 - Logiciel: Navizon - (.Mexens Technology Inc..) [HKCU] -- Navizon
O42 - Logiciel: RegClean Pro - (.Systweak Inc.) [HKLM] -- RegClean Pro_is1 =>Rogue.RegistryPowerCleaner
~ Logic: 21 Legitimates Filtered in 00mn 01s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\Conduit] =>Toolbar.Conduit
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKCU\Software\Softonic] =>Toolbar.Conduit
[HKCU\Software\SpeedMaxPc] =>PUP.SpeedMaxPc
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\mysearchdial.com] =>Adware.MyWebSearch
[HKCU\Software\mysearchdial] =>Adware.MyWebSearch
[HKCU\Software\?? ?? ???? ????? ??? ?? ????]
[HKLM\Software\Conduit] =>Toolbar.Conduit
[HKLM\Software\Iminent] =>Adware.IMBooster
[HKLM\Software\InstallCore] =>Adware.InstallCore
[HKLM\Software\SpeedMaxPc] =>PUP.SpeedMaxPc
~ Key Software: 298 Legitimates Filtered in 00mn 01s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 14/05/2013 - 17:43:49 - [0,609] ----D C:\Program Files\Conduit
O43 - CFD: 15/11/2013 - 00:22:59 - [0] ----D C:\Program Files\IminentToolbar =>Adware.IMBooster
O43 - CFD: 08/03/2014 - 20:27:55 - [2,357] ----D C:\Program Files\Mysearchdial =>Adware.MyWebSearch
O43 - CFD: 20/12/2013 - 14:37:16 - [16,810] ----D C:\Program Files\RegClean Pro =>Rogue.RegistryPowerCleaner
O43 - CFD: 11/02/2014 - 14:21:42 - [0] ----D C:\ProgramData\APN
O43 - CFD: 12/01/2013 - 13:56:46 - [0] ----D C:\ProgramData\Ask
O43 - CFD: 14/05/2013 - 17:40:34 - [0,057] ----D C:\ProgramData\Conduit
O43 - CFD: 04/04/2014 - 18:26:53 - [0] ----D C:\ProgramData\SpeedMaxPc =>PUP.SpeedMaxPc
O43 - CFD: 08/03/2014 - 20:28:28 - [0,093] ----D C:\Users\Nono\AppData\Roaming\mysearchdial =>Adware.MyWebSearch
O43 - CFD: 04/04/2014 - 18:18:07 - [0] ----D C:\Users\Nono\AppData\Roaming\SpeedMaxPc =>PUP.SpeedMaxPc
O43 - CFD: 15/11/2013 - 00:26:03 - [0,107] ----D C:\Users\Nono\AppData\Roaming\stickies
O43 - CFD: 14/05/2013 - 17:43:45 - [2,533] ----D C:\Users\Nono\AppData\Local\Conduit
O43 - CFD: 31/01/2009 - 18:14:31 - [0,002] ----D C:\Users\Nono\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navizon
~ Program Folder: 214 Legitimates Filtered in 00mn 09s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.D409A4F2174908B916309FBC6FDB9638] - 04/04/2014 - 14:28:22 ---A- . (...) -- C:\Windows\System32\ASOROSet.bin [1656]
~ Files: 20 Legitimates Filtered in 00mn 05s



---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.7B208328DE8B4C1F28B42E2549181A47] - 03/04/2014 - 08:13:31 ---A- - C:\Windows\Prefetch\BITTORRENT.EXE-538334A1.pf =>P2P.BitTorrent
O45 - LFCP:[MD5.735A81E2CCEB43E378B4789635C87F19] - 03/04/2014 - 09:40:32 ---A- - C:\Windows\Prefetch\INSTUP.EXE-4F33E695.pf
O45 - LFCP:[MD5.287E89E17D2FF054BDCFD562CD4CA357] - 03/04/2014 - 09:42:37 ---A- - C:\Windows\Prefetch\6678D88D-1D99-454A-B452-9A0AC-8B3AC9A6.pf
O45 - LFCP:[MD5.DD60C417E832AA7C885B8EC84E0CDFE4] - 03/04/2014 - 09:42:57 ---A- - C:\Windows\Prefetch\SETUPINF32.EXE-1FB01AEE.pf
O45 - LFCP:[MD5.7A0D9A6622869FD858ABE131102F9F33] - 03/04/2014 - 09:47:45 ---A- - C:\Windows\Prefetch\ASWWRCIELOADER32.EXE-BB2E4DE4.pf
O45 - LFCP:[MD5.2498BC85E47EFF8D59F19546A9493398] - 03/04/2014 - 09:52:46 ---A- - C:\Windows\Prefetch\NSD78C.TMP-0268ABF6.pf
O45 - LFCP:[MD5.86CE8355545769555CA7FC0192334FA0] - 03/04/2014 - 09:57:22 ---A- - C:\Windows\Prefetch\NS194C.TMP-49B6E68F.pf
O45 - LFCP:[MD5.A08252255D5197EF3A0EBCD2FB336B20] - 03/04/2014 - 10:13:08 ---A- - C:\Windows\Prefetch\ULCDRSVR.EXE-3ED60520.pf
O45 - LFCP:[MD5.06C03922545DD5BFB702ED312180F96E] - 04/04/2014 - 10:28:10 ---A- - C:\Windows\Prefetch\UPDATE~1.EXE-821C5247.pf
O45 - LFCP:[MD5.A3527D9CFE9E6F1E98F9FA2F41066294] - 04/04/2014 - 10:38:36 ---A- - C:\Windows\Prefetch\RAUI.EXE-86406B81.pf
O45 - LFCP:[MD5.32FFB115AA0A45B14BB0FB4A7CEC7ABC] - 04/04/2014 - 14:20:17 ---A- - C:\Windows\Prefetch\TRAYBAR.EXE-F735E112.pf
O45 - LFCP:[MD5.5C63CCD61E71963AC953D30CC61FF16B] - 04/04/2014 - 17:17:35 ---A- - C:\Windows\Prefetch\SPEEDMAXPC_INSTALLER_FR.EXE-001922F4.pf =>PUP.SpeedMaxPc
O45 - LFCP:[MD5.B928D8036876A174FEEFE22F42457E19] - 04/04/2014 - 17:20:00 ---A- - C:\Windows\Prefetch\INSTUP.EXE-7E543EAF.pf
O45 - LFCP:[MD5.A3AB485580157F95D07A1E26C059F515] - 04/04/2014 - 17:26:43 ---A- - C:\Windows\Prefetch\SPEEDMAXPC.EXE-45BD6890.pf =>PUP.SpeedMaxPc
O45 - LFCP:[MD5.7B3FC69258FC2CB4E71DEC3949772081] - 04/04/2014 - 17:26:57 ---A- - C:\Windows\Prefetch\UPDATE3.EXE-A16355FA.pf
O45 - LFCP:[MD5.349FACF083ECC42E568CAB69C4406E57] - 30/03/2014 - 14:38:10 ---A- - C:\Windows\Prefetch\CEC_MAIN.EXE-B4BEC43C.pf
~ Prefetcher: 16 Legitimates Filtered in 00mn 00s



---\\ Clé de registre Shell MountPoints2 (MPKS) (O51)
O51 - MPSK:{c3ec5eb9-3738-11df-ac90-001f3c96f24d}\AutoRun\command. (...) -- D:\setupSNK.exe (.not file.)
O51 - MPSK:{def184e1-66af-11df-9a10-001f3c96f24d}\AutoRun\command - Clé orpheline
~ Keys: Scanned in 00mn 00s



---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
~ MWPS: 16 Legitimates Filtered in 00mn 00s



---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:[MD5.7B948E3657BEA62E437BC46CA6EF6012] - 08/03/2014 - 18:41:47 ---A- . (.ALWIL Software - avast! Filtering NDIS driver.) -- C:\Windows\System32\Drivers\aswNdis.sys [12112]
O58 - SDL:[MD5.84B4C00AE8CDFC52CF68F322D821F34C] - 03/04/2014 - 09:42:18 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys [49944]
O58 - SDL:[MD5.680448905E27BBC6587ADB28597640D6] - 03/04/2014 - 09:42:18 ---A- . (...) -- C:\Windows\System32\Drivers\aswVmm.sys [180760]
O58 - SDL:[MD5.23B62471681A124889978F6295B3F4C6] - 21/01/2008 - 03:23:22 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [342584]
O58 - SDL:[MD5.BCED60D16156E428F8DF8CF27B0DF150] - 02/11/2006 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\System32\Drivers\iteatapi.sys [35944]
O58 - SDL:[MD5.06FA654504A498C30ADCA8BEC4E87E7E] - 02/11/2006 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\System32\Drivers\iteraid.sys [35944]
O58 - SDL:[MD5.306521935042FC0A6988D528643619B3] - 24/07/2006 - 16:05:00 ---A- . (...) -- C:\Windows\System32\Drivers\StarOpen.sys [5632]
O58 - SDL:[MD5.9224BB254F591DE4CA8D572A5F0D635C] - 21/01/2008 - 03:23:20 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\System32\Drivers\uliahci.sys [238648]
O58 - SDL:[MD5.8514D0E5CD0534467C5FC61BE94A569F] - 02/11/2006 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\System32\Drivers\ulsata.sys [98408]
O58 - SDL:[MD5.38C3C6E62B157A6BC46594FADA45C62B] - 21/01/2008 - 03:23:23 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\System32\Drivers\ulsata2.sys [115816]
O58 - SDL:[MD5.6E421CCC57059B0186C6259CA3B6DFC9] - 13/12/2012 - 12:50:38 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\Drivers\usbaapl.sys [45056]
O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 02/11/2006 - 08:09:42 ---A- . (...) -- C:\Windows\System32\ANSI.SYS [9029]
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 02/11/2006 - 08:09:45 ---A- . (...) -- C:\Windows\System32\country.sys [27097]
O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 02/11/2006 - 08:09:41 ---A- . (...) -- C:\Windows\System32\HIMEM.SYS [4768]
O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\System32\KEY01.SYS [42809]
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537]
O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 02/11/2006 - 08:09:29 ---A- . (...) -- C:\Windows\System32\NTDOS.SYS [27866]
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 02/11/2006 - 08:09:35 ---A- . (...) -- C:\Windows\System32\NTDOS404.SYS [29146]
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 02/11/2006 - 08:09:38 ---A- . (...) -- C:\Windows\System32\NTDOS411.SYS [29370]
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 02/11/2006 - 08:09:40 ---A- . (...) -- C:\Windows\System32\NTDOS412.SYS [29274]
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 02/11/2006 - 08:09:31 ---A- . (...) -- C:\Windows\System32\NTDOS804.SYS [29146]
O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 02/11/2006 - 08:09:20 ---A- . (...) -- C:\Windows\System32\NTIO.SYS [33952]
O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 02/11/2006 - 08:09:23 ---A- . (...) -- C:\Windows\System32\NTIO404.SYS [34672]
O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 02/11/2006 - 08:09:24 ---A- . (...) -- C:\Windows\System32\NTIO411.SYS [35776]
O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 02/11/2006 - 08:09:26 ---A- . (...) -- C:\Windows\System32\NTIO412.SYS [35536]
O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 02/11/2006 - 08:09:22 ---A- . (...) -- C:\Windows\System32\NTIO804.SYS [34672]
O58 - SDL:[MD5.4F6FA49D517EA9D19DF1C73526C9298D] - 03/02/2005 - 00:50:28 ---A- . (...) -- C:\Windows\System32\StarOpen.sys [4224]
~ Drivers: 16 Legitimates Filtered in 00mn 03s



---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC: 02/04/2014 - 18:35:24 ---A- . (...) -- C:\Users\Nono\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\Partial Backups\00000026.rmx [122] =>Rogue.RegistryPowerCleaner
O61 - LFC: 02/04/2014 - 18:35:24 ---A- . (...) -- C:\Users\Nono\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\Partial Backups\00000026.rxb [215] =>Rogue.RegistryPowerCleaner
O61 - LFC: 02/04/2014 - 18:35:28 ---A- . (...) -- C:\Users\Nono\Downloads\Attestation de détention de titres.pdf [213736]
O61 - LFC: 02/04/2014 - 18:35:29 ---A- . (...) -- C:\Users\Nono\Downloads\Demande de credit QUONIAM (2).pdf [113751]
O61 - LFC: 02/04/2014 - 18:35:29 ---A- . (...) -- C:\Users\Nono\Downloads\Devis Assurance Habitation (2).pdf [61177]
O61 - LFC: 02/04/2014 - 18:35:29 ---A- . (...) -- C:\Users\Nono\Downloads\Proposition BP Hypothèque (1).pdf [457821]
O61 - LFC: 02/04/2014 - 18:35:29 ---A- . (...) -- C:\Users\Nono\Downloads\taxes hab-fonc. 2012.pdf [208541]
O61 - LFC: 03/04/2014 - 18:35:24 ---A- . (...) -- C:\Users\Nono\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\Partial Backups\00000027.rmx [122] =>Rogue.RegistryPowerCleaner
O61 - LFC: 03/04/2014 - 18:35:24 ---A- . (...) -- C:\Users\Nono\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\Partial Backups\00000027.rxb [375] =>Rogue.RegistryPowerCleaner
O61 - LFC: 03/04/2014 - 18:35:28 ---A- . (...) -- C:\Users\Nono\Downloads\Attestation de détention de titres (1).pdf [213736]
O61 - LFC: 04/04/2014 - 18:35:05 ---A- . (...) -- C:\Users\Nono\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists [270423]
O61 - LFC: 04/04/2014 - 18:35:07 ---A- . (...) -- C:\Users\Nono\AppData\Local\Google\Chrome\User Data\Local State [75067]
O61 - LFC: 04/04/2014 - 18:35:24 ---A- . (...) -- C:\Users\Nono\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\ExcludeList.rcp [2202] =>Rogue.RegistryPowerCleaner
O61 - LFC: 04/04/2014 - 18:35:24 ---A- . (...) -- C:\Users\Nono\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\French_rcp.dat [59862] =>Rogue.RegistryPowerCleaner
O61 - LFC: 04/04/2014 - 18:35:24 ---A- . (...) -- C:\Users\Nono\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\Partial Backups\00000028.rmx [122] =>Rogue.RegistryPowerCleaner
O61 - LFC: 04/04/2014 - 18:35:24 ---A- . (...) -- C:\Users\Nono\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\Partial Backups\00000028.rxb [1734] =>Rogue.RegistryPowerCleaner
O61 - LFC: 04/04/2014 - 18:35:24 ---A- . (...) -- C:\Users\Nono\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\TempHLList.rcp [1472] =>Rogue.RegistryPowerCleaner
O61 - LFC: 04/04/2014 - 18:35:24 ---A- . (...) -- C:\Users\Nono\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\results.rcp [60] =>Rogue.RegistryPowerCleaner
O61 - LFC: 04/04/2014 - 18:35:24 ---A- . (...) -- C:\Users\Nono\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\summary2.bin [2988] =>Rogue.RegistryPowerCleaner
O61 - LFC: 04/04/2014 - 18:35:24 ---A- . (...) -- C:\Users\Nono\AppData\Roaming\ZHP\Log.txt [45033] =>.Nicolas Coolman
O61 - LFC: 04/04/2014 - 18:35:24 ---A- . (...) -- C:\Users\Nono\AppData\Roaming\ZHP\TestsZHPDiag.txt [2791] =>.Nicolas Coolman
O61 - LFC: 04/04/2014 - 18:35:24 ---A- . (...) -- C:\Users\Nono\AppData\Roaming\ZHP\ZHPADSReport.txt [351] =>.Nicolas Coolman
O61 - LFC: 04/04/2014 - 18:35:24 ---A- . (...) -- C:\Users\Nono\AppData\Roaming\ZHP\ZHPDiag.txt [275452] =>.Nicolas Coolman
O61 - LFC: 04/04/2014 - 18:35:29 ---A- . (...) -- C:\Users\Nono\Downloads\FWEB_Publication 04.04.2014.pdf [1377354]
O61 - LFC: 04/04/2014 - 18:35:29 ---A- . (.SpeedMaxPc.) -- C:\Users\Nono\Downloads\SpeedMaxpc_installer_fr.exe [5045816] =>PUP.SpeedMaxPc
~ 36 Fichiers temporaires (Temporary files)
~ Files: 164 Legitimates Filtered in 00mn 27s



---\\ Fichiers Alternate Data Stream (ADS) (O62)
O62 - ADS:Alternate Data Stream File - C:\Windows\System32\:{4B9A1497-0817-47C4-9612-D6A1C53ACF57}
~ ADS: Scanned in 00mn 01s



---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s



---\\ Associations Shell Spawning (O67)
O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)
~ FASS Keys: 11 Legitimates Filtered in 00mn 00s



---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: <chrome.exe> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s



---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: C:\Users\Nono\AppData\Roaming\Mozilla\Firefox\Profiles\v7f499gm.default\searchplugins\askcom.xml
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("CT3297124.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"http://search.conduit.com/?ctid=CT3297124&octid=CT[...]
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("CT3297124.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"http%3A%2F%2Fsearch.conduit.com%2F%3Fctid%3DCT3297124%26CUI[...]
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("CT3297124.originalHomepage", "http://home.sweetim.com/?barid={76E8AD12-2AED-4587-A397-DB662067BF43}"); =>PUP.SweetIM
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("browser.search.defaultenginename", "Mysearchdial"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("browser.search.defaultthis.engineName", "DivX Browser Bar FR Customized Web Search");
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("browser.search.defaulturl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT3297124&CUI=UN27388609491697620&UM=2&Sear[...]
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("browser.search.order.1", "Mysearchdial"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("browser.search.selectedEngine", "Mysearchdial"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("browser.startup.homepage", "http://start.mysearchdial.com/?f=1&a=dsites&cd=2XzuyEtN2Y1L1QzutDtDtC0EtAtAyD0A0D0B0DyB0CyD[...] =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.AL", 2); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.aflt", "dsites"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1QzutDtDtC0EtAtAyD0A0D0B0DyB0CyDtAzytN0D0Tzu0SyBzyzztN1L2XzutBtFtCyBtFtDtFtCt[...] =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.cntry", "FR"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.cr", "1542780349"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.dfltLng", ""); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.dfltSrch", true); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.dnsErr", true); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.dpkLst", "3654782829,1334533236,1121012847,231756876,1895130307,603719297,4288797614,3754950497[...] =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.excTlbr", false); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.hdrMd5", "95A8C89BE38F4FDB038D3BB82A5CF331"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.hmpg", true); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&a=dsites&cd=2XzuyEtN2Y1L1QzutDtDtC0EtAtAyD0A0D0B0[...] =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.id", "001E335ADBD7C539"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.instlDay", "16137"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.instlRef", "0211_b"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.lastB", "http://start.mysearchdial.com/?f=1&a=dsites&cd=2XzuyEtN2Y1L1QzutDtDtC0EtAtAyD0A0D0B0Dy[...] =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.lastVrsnTs", "1.8.29.019:27:40"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.newTabUrl", "http://start.mysearchdial.com/?f=2&a=dsites&cd=2XzuyEtN2Y1L1QzutDtDtC0EtAtAyD0A0D0[...] =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.pnu_base", "{\"newVrsn\":\"92\",\"lastVrsn\":\"92\",\"vrsnLoad\":\"\",\"showMsg\":\"false\",\"s[...] =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.prdct", "mysearchdial"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.prtnrId", "mysearchdial"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.sg", "none"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.tlbrId", "base"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.tlbrSrchUrl", "http://start.mysearchdial.com/?f=3&a=dsites&cd=2XzuyEtN2Y1L1QzutDtDtC0EtAtAyD0A0[...] =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.vrsn", "1.8.29.0"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial.vrsni", "1.8.29.0"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial_i.hmpg", true); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial_i.newTab", false); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial_i.smplGrp", "none"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.29.019:27:40"); =>Adware.MyWebSearch
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("plugin.state.npconduitfirefoxplugin", 2);
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("smartbar.conduitHomepageList", "http://search.conduit.com/?ctid=CT3297124&CUI=UN27388609491697620&UM=2&SearchSource=13"[...] =>Hijacker.SmartBar
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("smartbar.conduitSearchAddressUrlList", "http://search.conduit.com/ResultsExt.aspx?ctid=CT3297124&SearchSource=2&CUI=UN2[...] =>Hijacker.SmartBar
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("sweetim.toolbar.previous.browser.search.defaulturl", ""); =>PUP.SweetIM
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "Yahoo"); =>PUP.SweetIM
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("sweetim.toolbar.previous.browser.startup.homepage", ""); =>PUP.SweetIM
O69 - SBI: prefs.js [Nono - v7f499gm.default] user_pref("sweetim.toolbar.urls.homepage", "http://home.sweetim.com/?barid={76E8AD12-2AED-4587-A397-DB662067BF43}"); =>PUP.SweetIM
O69 - SBI: SearchScopes [HKCU] {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} [DefaultScope] - (Mysearchdial) - http://start.mysearchdial.com =>Adware.MyWebSearch
O69 - SBI: SearchScopes [HKCU] {3C862B6C-8624-4DCC-AA1E-DFAD3F655341} - (Google) - http://www.google.com
O69 - SBI: SearchScopes [HKCU] {77AA745B-F4F8-45DA-9B14-61D2D95054C8} - (Conduit Search) - http://www.trovigo.com =>Hijacker.Trovigo
~ Keys: Scanned in 00mn 00s



---\\ Recherche particulière à la racine du système (SPRF) (O84)
[MD5.2DE951B6A419F28C0FFDCC2EE4FF5CED] [SPRF][09/12/2008] (...) -- C:\ProgramData\ezsidmv.dat [56]
~ Files: 2 Legitimates Filtered in 00mn 00s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 13/03/2014 257928 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Auto 30/03/2009 133104 | (gupdate1c9b140ab9e152c) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 30/03/2009 133104 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 21/02/2014 119408 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Auto 06/07/2012 1863680 | (RaMediaServer) . (.Ralink.) - C:\Program Files\Ralink\Common\RaMediaServer.exe
SS - | Demand 25/06/2010 117264 | (rpcapd) . (.CACE Technologies, Inc..) - C:\Program Files\WinPcap\rpcapd.exe

SR - | Auto 05/10/2006 9216 | (AgereModemAudio) . (.Agere Systems.) - C:\Windows\system32\agrsmsvc.exe
SR - | Auto 07/01/2014 43336 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 03/04/2014 50344 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SR - | Auto 03/04/2014 109048 | (avast! Firewall) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\afwServ.exe
SR - | Auto 30/08/2011 390504 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Auto 25/12/2007 40960 | (ConfigFree Service) . (.TOSHIBA CORPORATION.) - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
SR - | Auto 18/12/2013 669480 | (DSUDiskOptimizer) . (.Systweak Software., (www.systweak.com).) - C:\Program Files\Disk Speedup\DSUDefragSrv.exe =>PUP.DiskSpeedup
SR - | Demand 06/02/2014 553288 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 24/08/2012 2735528 | (TeamViewer7) . (.TeamViewer GmbH.) - C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
SR - | Auto 21/01/2008 83312 | (TNaviSrv) . (.TOSHIBA Corporation.) - C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe
SR - | Auto 21/11/2007 129632 | (TODDSrv) . (.TOSHIBA Corporation.) - C:\Windows\system32\TODDSrv.exe
SR - | Auto 17/01/2008 431456 | (TosCoSrv) . (.TOSHIBA Corporation.) - c:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
SR - | Auto 03/12/2007 126976 | (TOSHIBA SMART Log Service) . (.TOSHIBA Corporation.) - c:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
SR - | Auto 23/08/2006 49152 | (UleadBurningHelper) . (.Ulead Systems, Inc..) - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
SR - | Auto 21/01/2008 21504 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 21/01/2008 21504 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe

~ Services: Scanned in 00mn 03s



---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by Nono at 04/04/2014 18:36:10

device: opened successfully
user: MBR read successfully

Disk trace: