Http://www.searchnu.com/406

Bonjour,
Télécharge AdwCleaner (merci à Xplode)
Lance AdwCleaner
Clique sur le bouton [ Suppression ]
Patiente...
Poste le rapport qui apparait en fin de recherche.
(Le rapport est sauvegardé aussi sous C:\ AdwCleaner[SX].Txt)

Déjà, mets ton navigateur à jour, ou encore mieux.

désinstalle le complétement et réinstalle le à jour !

Sinon

Dans la barre d'url firefox, tape :

about:config

Ensuite dans la recherche tu tapes "homepage" ou encore le lien qui te pose probleme (http://www.searchnu.com/406 et tu remplaces les lignes qui correspondent par https://www.google.fr/?gws_rd=ssl (ou un autre moteur de recherche)

/!\ Ces modifications ne supprimeront en rien les "merdes", mais disons que tu n'y feras plus attention :)

Merci pour la récativité,
voici le rapport :

# AdwCleaner v1.800 - Rapport créé le 08/08/2012 à 09:07:24
# Mis à jour le 01/08/2012 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : Rolene - ROLENE-HP
# Exécuté depuis : C:\Users\Romain\Downloads\adwcleaner.exe
# Option [Suppression]

***** [Services] *****

***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Users\Romain\AppData\Local\Ilivid Player
Dossier Supprimé : C:\Users\Hélène\AppData\Local\Temp\boost_interprocess
Dossier Supprimé : C:\Users\Rolene\AppData\LocalLow\Searchqutoolbar
Dossier Supprimé : C:\Users\Hélène\AppData\LocalLow\searchquband
Dossier Supprimé : C:\Users\Hélène\AppData\LocalLow\Searchqutoolbar
Dossier Supprimé : C:\Users\Romain\AppData\LocalLow\searchquband
Dossier Supprimé : C:\Users\Romain\AppData\LocalLow\Searchqutoolbar
Dossier Supprimé : C:\Users\Rolene\AppData\Roaming\pdfforge
Dossier Supprimé : C:\Users\Hélène\AppData\Roaming\Bandoo
Dossier Supprimé : C:\Users\Romain\AppData\Roaming\Bandoo
Dossier Supprimé : C:\Users\Rolene\AppData\Roaming\Mozilla\Firefox\Profiles\67z89m9l.default\Searchqutoolbar
Dossier Supprimé : C:\Users\Rolene\AppData\Roaming\Mozilla\Firefox\Profiles\67z89m9l.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}
Dossier Supprimé : C:\Users\Rolene\AppData\Roaming\Mozilla\Firefox\Profiles\67z89m9l.default\extensions\ffox@bandoo.com
Dossier Supprimé : C:\Users\Hélène\AppData\Roaming\Mozilla\Firefox\Profiles\v8lopth4.default\Searchqutoolbar
Dossier Supprimé : C:\Users\Hélène\AppData\Roaming\Mozilla\Firefox\Profiles\v8lopth4.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}
Dossier Supprimé : C:\Users\Romain\AppData\Roaming\Mozilla\Firefox\Profiles\6rcqp01m.default\CT3196716
Dossier Supprimé : C:\Users\Romain\AppData\Roaming\Mozilla\Firefox\Profiles\6rcqp01m.default\Searchqutoolbar
Dossier Supprimé : C:\Users\Romain\AppData\Roaming\Mozilla\Firefox\Profiles\6rcqp01m.default\Smartbar
Dossier Supprimé : C:\Users\Romain\AppData\Roaming\Mozilla\Firefox\Profiles\6rcqp01m.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}
Dossier Supprimé : C:\Users\Romain\AppData\Roaming\Mozilla\Firefox\Profiles\6rcqp01m.default\extensions\{ebd898f8-fcf6-4694-bc3b-eabc7271eeb1}
Dossier Supprimé : C:\ProgramData\boost_interprocess
Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ilivid
Dossier Supprimé : C:\Program Files (x86)\Ilivid
Supprimé au redémarrage : C:\Program Files (x86)\Windows iLivid Toolbar
Dossier Supprimé : C:\Program Files (x86)\Windows Searchqu Toolbar
Fichier Supprimé : C:\Users\Rolene\AppData\Local\Temp\Searchqu.ini
Fichier Supprimé : C:\Users\Rolene\AppData\Local\Temp\searchqutoolbar-manifest.xml
Fichier Supprimé : C:\Users\Rolene\AppData\Local\Temp\SetupDataMngr_Searchqu.exe
Fichier Supprimé : C:\Users\Rolene\AppData\Roaming\Mozilla\Firefox\Profiles\67z89m9l.default\searchplugins\SearchResults.xml
Fichier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk
Fichier Supprimé : C:\Program Files (x86)\Mozilla Firefox\searchplugins\SearchResults.xml

***** [Registre] *****

Clé Supprimée : HKCU\Software\DataMngr
Clé Supprimée : HKCU\Software\DataMngr_Toolbar
Clé Supprimée : HKCU\Software\ilivid
Clé Supprimée : HKLM\SOFTWARE\bandoo
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\BandooCore.EXE
Clé Supprimée : HKLM\SOFTWARE\Classes\BandooCore.BandooCore
Clé Supprimée : HKLM\SOFTWARE\Classes\BandooCore.BandooCore.1
Clé Supprimée : HKLM\SOFTWARE\Classes\BandooCore.ResourcesMngr
Clé Supprimée : HKLM\SOFTWARE\Classes\BandooCore.ResourcesMngr.1
Clé Supprimée : HKLM\SOFTWARE\Classes\BandooCore.SettingsMngr
Clé Supprimée : HKLM\SOFTWARE\Classes\BandooCore.SettingsMngr.1
Clé Supprimée : HKLM\SOFTWARE\Classes\BandooCore.StatisticMngr
Clé Supprimée : HKLM\SOFTWARE\Classes\BandooCore.StatisticMngr.1
Clé Supprimée : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard
Clé Supprimée : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1
Clé Supprimée : HKLM\SOFTWARE\DataMngr
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Searchqu 406 MediaBar
Clé Supprimée : HKLM\SOFTWARE\SearchquMediabarTb
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [DataMngr]

***** [Registre - GUID] *****

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{1301A8A5-3DFB-4731-A162-B357D00C9644}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{27F69C85-64E1-43CE-98B5-3C9F22FB408E}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{B543EF05-9758-464E-9F37-4C28525B4A4C}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{BB76A90B-2B4C-4378-8506-9A2B6E16943C}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C3AB94A4-BFD0-4BBA-A331-DE504F07D2DB}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{477F210A-2A86-4666-9C4B-1189634D2C84}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FF871E51-2655-4D06-AED5-745962A96B32}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{8F5F1CB6-EA9E-40AF-A5CA-C7FD63CC1971}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624F4-C5DD-4E1D-BDD0-1E9C9B7799CC}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F000001-DB8E-F89C-2FEC-49BF726F8C12}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C8A3CA5-889E-4554-BEEC-EC0876E4E96A}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F9189560-573A-4FDE-B055-AE7B0F4CF080}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2410}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2410}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{99079A25-328F-4BD4-BE04-00955ACAA0A7}]
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{477F210A-2A86-4666-9C4B-1189634D2C84}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FF871E51-2655-4D06-AED5-745962A96B32}
[x64] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624F4-C5DD-4E1D-BDD0-1E9C9B7799CC}
[x64] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F000001-DB8E-F89C-2FEC-49BF726F8C12}
[x64] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C8A3CA5-889E-4554-BEEC-EC0876E4E96A}
[x64] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F9189560-573A-4FDE-B055-AE7B0F4CF080}
[x64] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
[x64] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
[x64] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2410}
[x64] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}

***** [Navigateurs] *****

-\\ Internet Explorer v8.0.7601.17514

Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.searchqu.com/410 --> hxxp://www.google.com

-\\ Mozilla Firefox v6.0 (fr)

Nom du profil : default
Fichier : C:\Users\Rolene\AppData\Roaming\Mozilla\Firefox\Profiles\67z89m9l.default\prefs.js

Supprimée : user_pref("browser.search.defaultenginename", "Searchqu Web Search");
Supprimée : user_pref("browser.search.order.1", "Searchqu Web Search");
Supprimée : user_pref("browser.startup.homepage", "hxxp://www.searchqu.com/406");
Supprimée : user_pref("keyword.URL", "hxxp://dts.search-results.com/sr?src=ffb&appid=119&systemid=406&q=");

Nom du profil : default
Fichier : C:\Users\Hélène\AppData\Roaming\Mozilla\Firefox\Profiles\v8lopth4.default\prefs.js

Supprimée : user_pref("browser.startup.homepage", "hxxp://www.searchqu.com/406");
Supprimée : user_pref("keyword.URL", "hxxp://dts.search-results.com/sr?src=ffb&appid=119&systemid=406&q=");

Nom du profil : default
Fichier : C:\Users\Romain\AppData\Roaming\Mozilla\Firefox\Profiles\6rcqp01m.default\prefs.js

Supprimée : user_pref("CT3196716.1000082.isPlayDisplay", "true");
Supprimée : user_pref("CT3196716.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
Supprimée : user_pref("CT3196716.1000234.TWC_TMP_city", "MEUDON");
Supprimée : user_pref("CT3196716.1000234.TWC_TMP_country", "FR");
Supprimée : user_pref("CT3196716.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Supprimée : user_pref("CT3196716.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Supprimée : user_pref("CT3196716.FirstTime", "true");
Supprimée : user_pref("CT3196716.FirstTimeFF3", "true");
Supprimée : user_pref("CT3196716.UserID", "UN89690051348507523");
Supprimée : user_pref("CT3196716.addressBarTakeOverEnabledInHidden", "true");
Supprimée : user_pref("CT3196716.embeddedsData", "[{\"appId\":\"129755756826636815\",\"apiPermissions\":{\"cross[...]
Supprimée : user_pref("CT3196716.enableAlerts", "never");
Supprimée : user_pref("CT3196716.event_data", "%5B%5D");
Supprimée : user_pref("CT3196716.fired_events", "");
Supprimée : user_pref("CT3196716.firstTimeDialogOpened", "true");
Supprimée : user_pref("CT3196716.fixPageNotFoundErrorInHidden", "true");
Supprimée : user_pref("CT3196716.fixUrls", true);
Supprimée : user_pref("CT3196716.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Supprimée : user_pref("CT3196716.isNewTabEnabled", true);
Supprimée : user_pref("CT3196716.isPerformedSmartBarTransition", "true");
Supprimée : user_pref("CT3196716.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Supprimée : user_pref("CT3196716.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Supprimée : user_pref("CT3196716.key_date", "7");
Supprimée : user_pref("CT3196716.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"\",\"EB_MAIN_FRAME_TITLE\":\"[...]
Supprimée : user_pref("CT3196716.search.searchAppId", "129755756826636815");
Supprimée : user_pref("CT3196716.search.searchCount", "0");
Supprimée : user_pref("CT3196716.searchInNewTabEnabledInHidden", "true");
Supprimée : user_pref("CT3196716.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Supprimée : user_pref("CT3196716.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Supprimée : user_pref("CT3196716.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Supprimée : user_pref("CT3196716.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Supprimée : user_pref("CT3196716.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Supprimée : user_pref("CT3196716.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Supprimée : user_pref("CT3196716.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Supprimée : user_pref("CT3196716.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data[...]
Supprimée : user_pref("CT3196716.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1344329207636");
Supprimée : user_pref("CT3196716.serviceLayer_services_appTracking_lastUpdate", "1344329209732");
Supprimée : user_pref("CT3196716.serviceLayer_services_appsMetadata_lastUpdate", "1344329207407");
Supprimée : user_pref("CT3196716.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1344329208028");
Supprimée : user_pref("CT3196716.serviceLayer_services_login_10.10.20.14_lastUpdate", "1344329526953");
Supprimée : user_pref("CT3196716.serviceLayer_services_menu_769c590835a76d075fe33b9a87a87786_lastUpdate", "13443[...]
Supprimée : user_pref("CT3196716.serviceLayer_services_menu_d32f45618f5a02bd965c56155a643855_lastUpdate", "13443[...]
Supprimée : user_pref("CT3196716.serviceLayer_services_optimizer_lastUpdate", "1344329207947");
Supprimée : user_pref("CT3196716.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1344329208080");
Supprimée : user_pref("CT3196716.serviceLayer_services_searchAPI_lastUpdate", "1344329206858");
Supprimée : user_pref("CT3196716.serviceLayer_services_serviceMap_lastUpdate", "1344329206396");
Supprimée : user_pref("CT3196716.serviceLayer_services_toolbarContextMenu_lastUpdate", "1344329207758");
Supprimée : user_pref("CT3196716.serviceLayer_services_toolbarSettings_lastUpdate", "1344329526814");
Supprimée : user_pref("CT3196716.serviceLayer_services_translation_lastUpdate", "1344329207570");
Supprimée : user_pref("CT3196716.settingsINI", true);
Supprimée : user_pref("CT3196716.smartbar.CTID", "CT3196716");
Supprimée : user_pref("CT3196716.smartbar.Uninstall", "0");
Supprimée : user_pref("CT3196716.smartbar.isHidden", true);
Supprimée : user_pref("CT3196716.smartbar.toolbarName", "WiseConvert ");
Supprimée : user_pref("CT3196716.toolbarBornServerTime", "7-8-2012");
Supprimée : user_pref("CT3196716.toolbarCurrentServerTime", "7-8-2012");
Supprimée : user_pref("browser.startup.homepage", "hxxp://www.searchqu.com/406");
Supprimée : user_pref("keyword.URL", "hxxp://dts.search-results.com/sr?src=ffb&appid=119&systemid=406&q=");

-\\ Google Chrome v21.0.1180.60

Fichier : C:\Users\Rolene\AppData\Local\Google\Chrome\User Data\Default\Preferences

Supprimée : "name" : "Web Search",
Supprimée : "search_url" : "hxxp://www.searchqu.com/web?src=crb&appid=0&systemid=410&sr=0&q={searchTerms}"
Supprimée : "homepage" : "hxxp://www.searchqu.com/410",

*************************

AdwCleaner[S1].txt - [15815 octets] - [08/08/2012 09:07:24]

########## EOF - \AdwCleaner[S1].txt - [15944 octets] ##########

Re,
* Télécharge puis enregistre sur le bureau de ton PC ZHPDiag
(de Nicolas Coolman) à partir : ce lien
* Lance-le, (Clic droit "exécuter en tant qu'administrateur" si tu es sous Vista/7)
* Clique sur l'icône en forme de loupe pour lancer le diagnostique
* Héberge le rapport ZHPDiag.txt de ton bureau sur : malekal.com ou cjoint.com
* Fais copier/coller le lien fourni dans ta prochaine réponse
* Aide ZHPDiag : <<< ICI >>>

Voici le lien, j'avais déjà fait la manip.

https://www.cjoint.com/?BHimG5pBKsJ

Re,
1/
Copie tout le texte présent en gras ci-dessous ( tu le selectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C )


[MD5.C0909655D4BDF541DA23E828B7B05A7A].(.Bandoo Media, inc.Data Manager.) -- C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\datamngrUI.exe [1546640] [PID.4496]
M3 - MFPP: Plugins - [Romain] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\SearchResults.xml
M0 - MFSP: prefs.js [Romain - 6rcqp01m.default] http://www.searchnu.com/
M2 - MFEP: prefs.js [Romain - 6rcqp01m.default\{99079a25-328f-4bd4-be04-00955acaa0a7}] [] Searchqu Toolbar v4.4.1.00 (.Visicom Media Inc..)
M2 - MFEP: prefs.js [Romain - 6rcqp01m.default\{ebd898f8-fcf6-4694-bc3b-eabc7271eeb1}] [] WiseConvert v10.10.20.14 (.Conduit Ltd..)
O43 - CFD: 22/07/2011 - 20:50:45 - [39,560] ----D C:\Program Files (x86)\iLivid
O43 - CFD: 22/07/2011 - 20:50:21 - [13,543] ----D C:\Program Files (x86)\Windows iLivid Toolbar
O43 - CFD: 07/11/2011 - 11:53:59 - [2,979] ----D C:\Program Files (x86)\Windows Searchqu Toolbar
O43 - CFD: 22/07/2011 - 20:50:49 - [5,877] --H-D C:\ProgramData\{9CD61942-8DA1-4781-925C-4FE1471E0820}
O43 - CFD: 11/09/2011 - 22:00:45 - [0] ----D C:\Users\Romain\AppData\Roaming\Bandoo
O43 - CFD: 22/07/2011 - 20:51:12 - [0,014] ----D C:\Users\Romain\AppData\Local\Ilivid Player
O43 - CFD: 22/07/2011 - 20:50:45 - [39,560] ----D C:\Program Files (x86)\iLivid
O43 - CFD: 22/07/2011 - 20:50:21 - [13,543] ----D C:\Program Files (x86)\Windows iLivid Toolbar
O43 - CFD: 07/11/2011 - 11:53:59 - [2,979] ----D C:\Program Files (x86)\Windows Searchqu Toolbar

EmptyCLSID

Puis Lance ZHPFix depuis le raccourci du bureau .

* Une fois l'outil ZHPFix ouvert , clique sur le bouton [ H ] ( "coller les lignes Helper" ) .

* Dans l'encadré principal tu verras donc les lignes que tu as copié précédemment apparaitrent .

Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.

Clique sur le bouton GO

Copie/Colle le rapport à l'écran dans ton prochain message.

2/
Est ce que tu n'as pas installé un antivirus ?

voici le rapport de ZHPfix :

Rapport de ZHPFix 1.2.04 par Nicolas Coolman, Update du 23/04/2011
Fichier d'export Registre :
Run by Romain at 08/08/2012 21:56:48
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Web site : http://nicolascoolman.skyrock.com/

========== Processus mémoire ==========
SUPPRIME Reboot Memory Process: C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\datamngrUI.exe

========== Préférences navigateur ==========
SUPPRIME Mozilla Pref: http://www.searchnu.com/

========== Dossier(s) ==========
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{04CFE1D5-B753-444E-BD70-70D8A235D3DD}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{052A2E9E-98DE-4EC2-B7AC-0633E266C2BB}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{0AC00886-5FD4-4A0E-AC36-B17E2E43E1B0}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{0FE603AD-A113-46B0-BD2B-3561F9DBB3D8}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{157DB832-E377-4A43-88F5-D9816CCF766B}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{18A4E08D-4A93-48D5-9D8A-FFFCE418704D}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{2C8F14D6-78DC-4C42-B382-176933645CF2}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{2DD4A6D6-2770-4F84-BCB8-8EF8FBF8F9BD}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{33C2596D-19DF-47D1-A852-08065E9282BD}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{3D9C3716-8E8B-47E9-9543-8D843B9A22C3}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{3EF52DFD-9F35-46FC-A37A-82B2B4E50CC1}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{432878DE-DFB0-4CA2-9455-761BEC55BB0A}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{450BCFCC-8CE5-4754-BA2F-DCE63B25080B}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{4CD9751F-DECD-45FA-89EF-5827B513B0E2}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{4FBCF392-DEE5-4EEA-AB2C-8F1F5BF9B935}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{506E3F4F-50C7-4EA0-B879-5E1DC4CA598E}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{54F426E3-F864-4A72-9D3F-24EF2CC368A7}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{5662882B-71A9-4719-BD42-4B795563A4F0}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{5A3F33D9-9AAB-4ED8-8F9A-B9BCE1FEB583}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{5DF26764-1CFC-4261-930D-05ED9171FF4F}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{5ED9414C-5E8C-46BF-B74E-21B54F30B556}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{5F67159F-32D9-4E96-A77E-12C3DC68EC56}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{7489B02D-6487-4A47-8F36-5C18CE1C36C1}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{79585ED5-680D-4DC3-A82B-268342CF2521}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{7CB76689-C2DA-40FC-8AD5-ACD49E391C6A}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{7E70DA66-A030-40CC-92AA-A384C99B67BF}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{82F27722-3CCE-4AB0-BC45-A544332E2C4D}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{84C31579-A526-4005-B617-105985A29899}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{869647D7-12B7-4ECA-A6E2-9B68AE181629}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{8864740E-EBD4-4E85-A720-CF9B489FCA91}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{8EDC36AA-3932-4152-B2FB-E8BE86A34034}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{933C8E01-48C4-4DD6-8214-DDD26ECE708A}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{9467AC04-233F-41D6-BF42-36EAE05E0D44}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{A167F996-C142-438A-90D7-FC46923D935A}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{A2332946-2E4A-4F27-96DE-0AA6336F7286}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{A5B08263-2A5F-4ED3-8572-B3F05AFEBB22}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{AAEB4687-7ED9-4E80-B0B5-C23E252DD9E7}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{AE1D8A8C-5597-4F2C-B9CC-BFB1582B9510}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{AFABDAB6-6F16-402A-9169-1A9E14F141AD}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{C2914E37-AE80-473C-BFB3-7FC6CB85097E}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{CE304C03-CE56-4400-AA76-EC0D03795952}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{D5697A28-B93F-45B0-A97F-79058AAD95DA}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{D6FA8B93-B4CE-4B52-A81D-718178D266B4}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{D89638F3-5847-43A8-B05C-3967AA6514ED}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{DBAF9B35-F9E2-47D3-99CC-9069D6646FD2}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{DE260ECD-AEBF-4485-870C-B3A76FC1E05E}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{E5A18F74-0CC6-4304-85CA-468EFB6A2D4D}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{E6B0BAF4-71BD-4503-BD9B-9E3AC4AB4326}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{F3DA59AB-9A1A-4B3F-B223-36C93EF78D89}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{F5445FC6-29C4-463B-A00E-BFA468B38F93}
SUPPRIME Folder: C:\Users\Romain\AppData\Local\{F7CEF215-0991-4B02-94C8-4CD3E4CE3BE5}

========== Fichier(s) ==========
ABSENT File: c:\program files (x86)\mozilla firefox\searchplugins\searchresults.xml

========== Récapitulatif ==========
1 : Processus mémoire
51 : Dossier(s)
1 : Fichier(s)
1 : Préférences navigateur

End of clean in 00mn 39s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 08/08/2012 21:56:48 [5363]

Et oui, j'ai un antivirus !

Re,
1/
/!\ ATTENTION : cette analyse peut durer quelques heures /!\

* Télécharge MBAM et installe le selon l'emplacement par défaut
https://www.malwarebytes.com/mwb-download/
* Installe-le puis configure-le comme indiqué : <<< ICI >>>
* si tu n'as rien modifié fais directement quitter sinon enregistrer
* Lance Malwarebytes' Anti-Malware

=================================
Si MBAM est déjà installé, aller directement à la mise à jour puis à l'analyse.

==> Ce logiciel gratuit est à garder.

=================================

* Fais la mise à jour
* Clique dans l'onglet "Recherche"
* Coche l'option "Exécuter un examen complet" puis sur le bouton "Rechercher"
* Choisis de scanner tous tes disques durs, puis clique sur 'Lancer l'examen"

A la fin de l'analyse, si MBAM n'a rien trouvé :

* Clique sur OK, le rapport s'ouvre spontanément

Si des menaces ont été détectées :

* Clique sur OK puis "Afficher les résultats"
*Vérifie que toutes les lignes sont cochées
* Choisis l'option "Supprimer la sélection"
* Si MBAM demande le redémarrage de Windows : Clique sur "Oui"
* Le rapport s'ouvre automatiquement après la suppression, il se trouve aussi dans l'onglet "Rapports/Logs"

* Copie/colle le rapport dans le prochain message

Remarque :
- S'il y'a un problème de mise à jour de mbam, tu peux la faire manuellement en téléchargeant ce fichier puis en l'exécutant.

2/
Quel est ton antivirus? je ne le vois pas dans le rapport ZHPDiag!

3/
Searchnu est il encore présent ?

salut
2/ j'ai bitdefender
3/ je n'ai plus searchnu --> dois-je quand même faire 1/ ?
Merci

Bonjour,
Oui, lance mbam puis poste le rapport stp

voila le rapport :

Malwarebytes Anti-Malware (Essai) 1.62.0.1300
www.malwarebytes.org

Version de la base de données: v2012.08.09.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 8.0.7601.17514
Romain :: ROLENE-HP [limité]

Protection: Activé

09/08/2012 11:32:40
mbam-log-2012-08-09 (11-32-40).txt

Type d'examen: Examen complet (C:\|D:\|E:\|G:\|)
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 540760
Temps écoulé: 1 heure(s), 53 minute(s), 5 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)

Fichier(s) détecté(s): 1
C:\Users\Romain\Downloads\vlc_1.1.10_win32.exe (Fake.VLC.Player) -> Mis en quarantaine et supprimé avec succès.

(fin)

Pour vérification :
Lance ZHPDiag depuis le bureau, lance ensuite l'analyse et héberge le rapport obtenu, colle le lien dans ta prochaine réponse

et voila !

Rapport de ZHPDiag v1.31.13 par Nicolas Coolman, Update du 31/07/2012
Run by Romain at 09/08/2012 15:10:03
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Web site : http://nicolascoolman.skyrock.com/
State :

---\\ Web Browser
MSIE: Internet Explorer v

---\\ Windows Product Information
~ Langage: Français
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 3Q6C9
Windows License : OK
~ Windows Remaining Initializations Number : 3
Software Protection Service (Protection logicielle) : KO
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ System Information
~ Processor: AMD64 Family 16 Model 6 Stepping 3, AuthenticAMD
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 4095 MB (72% free)
System Restore: Inconnu (Unknown)
System drive C: has 444 GB (64%) free of 685 GB

---\\ Logged in mode
~ Computer Name: ROLENE-HP
~ User Name: Romain
~ All Users Names: Romain, Rolene, Hélène, HomeGroupUser$, BitDefenderComm, Administrateur,
~ Unselected Option: ,,,,,,,
Logged in as User

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Romain\AppData\Roaming\
~ %Desktop% : C:\Users\Romain\Desktop\
~ %Favorites% : C:\Users\Romain\Favorites\
~ %LocalAppData% : C:\Users\Romain\AppData\Local\
~ %StartMenu% : C:\Users\Romain\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 444 Go of 685 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 14 Go)
E:\ CD-ROM drive (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

---\\ Security Center & Tools Informations
~ Scan Security Center in 00mn 00s

---\\
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.CE5BFBD9685EE37DB942211450AAEA8F] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.15/05/2012 - 05:01:31.) -- C:\Windows\System32\wininet.dll [1188864]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.A2F74975097F52A00745F9637451FDD8] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.11/03/2011 - 07:41:34.) -- C:\Windows\system32\Drivers\ntfs.sys [1659776]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Scan Generic Processes in 00mn 00s

---\\
~ Mes images (My Pictures) : 1/5
~ Mes musiques (My Musics) : 2/9883
~ Mes Videos (My Videos) : 1/54
~ Mes Favoris (My Favorites) : 1/21
~ Mes Documents (My Documents) : 1/1349
~ Mon Bureau (My Desktop) : 1/8
~ Menu demarrer (Programs) : 0/21
~ Scan Hidden Files in 00mn 22s

---\\
[MD5.554A50B5310E702029D3A675459108FF].(.Hewlett-Packard.hpsysdrv.) -- C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe [62768] [PID.2052]
[MD5.E1473471169EC64C57B49F9C984DFB1A].(.Logitech Inc..Logitech Vid.) -- C:\Program Files (x86)\Logitech\Logitech Vid\Vid.exe [5458704] [PID.2096]
[MD5.BADA545E9AC1B031239410339ED6BEDF].(..Hercules WiFi Station Utility.) -- C:\Program Files (x86)\Hercules\WiFiStation\WiFiN.exe [130344] [PID.2304]
[MD5.0DB4212A8020067A08A7032DC662A7B5].(.BitDefender S.R.L...) -- C:\Program Files\BitDefender\BitDefender 2011\Antispam32\pchooklaunch32.exe [64048] [PID.3024]
[MD5.2589FFE360BED8F824CBC6171CB5B874].(...) -- C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe [2793304] [PID.2200]
[MD5.C637FC4638A96165256B28D38DE7B953].(.Hewlett-Packard.hpwuSchd Application.) -- C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe [49208] [PID.2196]
[MD5.D9D79F547AE2A70C650DFCFC27AEC0F7].(.Apple Inc..iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [421736] [PID.2476]
[MD5.84DB35F319E5B67838A4877C11748866].(.Malwarebytes Corporation.Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [462920] [PID.3092]
[MD5.98D472ECFBC0E8ED25A0483E765F42B6].(...) -- C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe [560472] [PID.3148]
[MD5.8AF1980AD5BD21364A960299015DBEDD].(.Mozilla Corporation.Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [924632] [PID.2644]
[MD5.1BF14948A57A0AF81C07F797EC0978D6].(.Mozilla Corporation.Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [16856] [PID.5168]
[MD5.FCB13D9E3D55075C8FACA9CA3C55B263].(...) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [3763200] [PID.3768]
[MD5.85A023F111C840F7F99F6026816C73F2].(...) -- [0] [PID.]
[MD5.DC115214F18A85A9EB28355112FE8076].(.Adobe Systems Inc..Adobe AIR Installer.) -- C:\Users\Romain\AppData\Local\Temp\AIR2AB9.tmp\Adobe AIR Installer.exe [102304] [PID.5068]
~ Scan Processes Running in 00mn 00s

---\\
C:\Users\Romain\AppData\Roaming\Mozilla\Firefox\Profiles\6rcqp01m.default\prefs.js
M3 - MFPP: Plugins - [Romain] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [Romain] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [Romain] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [Romain] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [Romain] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [Romain] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [Romain] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\yahoo-france.xml
M0 - MFSP: prefs.js [Romain - 6rcqp01m.default] https://www.google.fr/?gws_rd=ssl
M2 - MFEP: prefs.js [Romain - 6rcqp01m.default\DeviceDetection@logitech.com] [] ????????? ????????? Logitech v1.23.0.5 (.Logitech, Inc..)
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\np-mswmp.dll
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.3.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin2.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin3.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin4.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin5.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin6.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npqtplugin7.dll
P2 - FPN: [HKCU] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS - Unity Player 3.5.2f2.) -- C:\Users\Romain\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
~ Scan Firefox Browser in 00mn 00s

---\\
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R3 - URLSearchHook: (no name) [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Unity Technologies ApS - Unity Player 3.5.2f2.) (No version) -- (.not file.)
~ Scan IE Browser in 00mn 00s

---\\
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s

---\\
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 0

---\\
O4 - HKCU\..\Run: [Logitech Vid] . (.Logitech Inc. - Logitech Vid.) -- C:\Program Files (x86)\Logitech\Logitech Vid\vid.exe
~ Scan Application in 00mn 00s

---\\
O4 - Global Startup: C:\Users\Romain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Romain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Romain\Desktop\Excel.lnk . (...) -- C:\Windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe
O4 - Global Startup: C:\Users\Romain\Desktop\PCM 2012.lnk . (...) -- C:\Program Files (x86)\Cyanide\Pro Cycling Manager - Saison 2012\Autorun\Exe\Autorun.exe
O4 - Global Startup: C:\Users\Romain\Desktop\PowerPoint.lnk . (...) -- C:\Windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pptico.exe
O4 - Global Startup: C:\Users\Romain\Desktop\Sigma Data Center 2.1.lnk . (...) -- C:\Program Files (x86)\Sigma Data Center 2.1\Sigma Data Center 2.1.exe
O4 - Global Startup: C:\Users\Romain\Desktop\Word.lnk . (...) -- C:\Windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe
O4 - Global Startup: C:\Users\Romain\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Romain\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Play HP Games.lnk . (.WildTangent, Inc..) -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsole-wt.exe
O4 - Global Startup: C:\Users\Rolene\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Rolene\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Rolene\Desktop\Downloader.lnk . (.Metaboli.) -- C:\Program Files (x86)\Downloader\Downloader.exe
O4 - Global Startup: C:\Users\Rolene\Desktop\Easy Audio Cutter.lnk . (.Koyote Soft.) -- C:\Program Files (x86)\Free mp3 Wma Converter\Easy Audio Cutter\AudioCutter.exe
O4 - Global Startup: C:\Users\Rolene\Desktop\Free CD Ripper.lnk . (.Koyote Soft.) -- C:\Program Files (x86)\Free mp3 Wma Converter\Free CD Ripper\FreeCDRipper.exe
O4 - Global Startup: C:\Users\Rolene\Desktop\Free Mp3 Wma Converter.lnk . (.Koyote Soft.) -- C:\Program Files (x86)\Free mp3 Wma Converter\FreeConverter\FreeConverter.exe
O4 - Global Startup: C:\Users\Rolene\Desktop\Powerline AV Utility.lnk . (.D-Link Corporation.) -- C:\Program Files (x86)\D-Link\Powerline AV Utility\Viper32.exe
O4 - Global Startup: C:\Users\Rolene\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Easy Audio Cutter.lnk . (.Koyote Soft.) -- C:\Program Files (x86)\Free mp3 Wma Converter\Easy Audio Cutter\AudioCutter.exe
O4 - Global Startup: C:\Users\Rolene\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Free CD Ripper.lnk . (.Koyote Soft.) -- C:\Program Files (x86)\Free mp3 Wma Converter\Free CD Ripper\FreeCDRipper.exe
O4 - Global Startup: C:\Users\Rolene\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Free Mp3 Wma Converter.lnk . (.Koyote Soft.) -- C:\Program Files (x86)\Free mp3 Wma Converter\FreeConverter\FreeConverter.exe
O4 - Global Startup: C:\Users\Rolene\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\Rolene\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Rolene\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Thunderbird.lnk . (.Mozilla Messaging.) -- C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
O4 - Global Startup: C:\Users\Rolene\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Play HP Games.lnk . (.WildTangent, Inc..) -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsole-wt.exe
O4 - Global Startup: C:\Users\Hélène\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Hélène\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Hélène\Desktop\Excel.lnk . (...) -- C:\Windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe
O4 - Global Startup: C:\Users\Hélène\Desktop\PowerPoint.lnk . (...) -- C:\Windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pptico.exe
O4 - Global Startup: C:\Users\Hélène\Desktop\Word.lnk . (...) -- C:\Windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe
O4 - Global Startup: C:\Users\Hélène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
~ Scan Global Startup in 00mn 01s

---\\
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\Program Files (x86)\MICROS~1\Office12\EXCEL.exe
~ Scan IE Menu Contextuel in 00mn 00s

---\\
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Scan Desktop Component in 00mn 00s

---\\
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\HPCeeScheduleForROLENE-HP$.job
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
~ Scan Scheduled Task in 00mn 02s

---\\ (None)

---\\
O43 - CFD: 30/06/2011 - 18:48:07 - [118,664] ----D C:\Program Files (x86)\ABBYY FineReader 6.0 Sprint
O43 - CFD: 02/01/2012 - 19:19:49 - [1007,350] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 30/06/2011 - 20:43:41 - [2,201] ----D C:\Program Files (x86)\Apple Software Update
O43 - CFD: 24/12/2010 - 04:51:42 - [42,739] ----D C:\Program Files (x86)\ATI Stream
O43 - CFD: 24/12/2010 - 04:51:38 - [93,996] ----D C:\Program Files (x86)\ATI Technologies
O43 - CFD: 23/10/2011 - 13:22:45 - [0,602] ----D C:\Program Files (x86)\Bonjour
O43 - CFD: 29/09/2011 - 15:42:12 - [-650,908] ----D C:\Program Files (x86)\Britannica 11.0
O43 - CFD: 10/06/2012 - 21:21:42 - [878,686] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 24/06/2012 - 19:22:02 - [239,029] ----D C:\Program Files (x86)\Cyanide
O43 - CFD: 24/12/2010 - 05:00:04 - [1137,995] ----D C:\Program Files (x86)\CyberLink
O43 - CFD: 13/08/2011 - 11:01:40 - [1,886] ----D C:\Program Files (x86)\D-Link
O43 - CFD: 17/07/2011 - 13:58:31 - [5,655] ----D C:\Program Files (x86)\Downloader
O43 - CFD: 29/06/2011 - 22:32:29 - [102,001] ----D C:\Program Files (x86)\EasyBits For Kids
O43 - CFD: 30/06/2011 - 18:48:52 - [131,343] ----D C:\Program Files (x86)\epson
O43 - CFD: 07/11/2011 - 11:53:56 - [26,151] ----D C:\Program Files (x86)\Free mp3 Wma Converter
O43 - CFD: 30/06/2011 - 20:45:21 - [107,900] ----D C:\Program Files (x86)\GIMP-2.0
O43 - CFD: 16/11/2011 - 10:42:49 - [370,883] ----D C:\Program Files (x86)\Google
O43 - CFD: 29/06/2011 - 19:07:08 - [5,377] ----D C:\Program Files (x86)\Hercules
O43 - CFD: 24/12/2010 - 05:19:36 - [1491,030] ----D C:\Program Files (x86)\Hewlett-Packard
O43 - CFD: 02/01/2012 - 16:48:18 - [0] ----D C:\Program Files (x86)\HOYA CORPORATION
O43 - CFD: 18/01/2012 - 10:26:41 - [4,384] ----D C:\Program Files (x86)\Hp
O43 - CFD: 24/12/2010 - 05:14:24 - [658,380] ----D C:\Program Files (x86)\HP Games
O43 - CFD: 27/01/2012 - 23:14:13 - [337,671] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 15/06/2012 - 17:33:48 - [5,637] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 04/05/2012 - 18:28:06 - [120,831] ----D C:\Program Files (x86)\iTunes
O43 - CFD: 28/08/2011 - 15:32:18 - [39,410] ----D C:\Program Files (x86)\Logitech
O43 - CFD: 09/08/2012 - 11:29:16 - [11,720] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 01/07/2012 - 21:10:19 - [29,437] ----D C:\Program Files (x86)\Microsoft
O43 - CFD: 29/08/2011 - 22:05:51 - [0,764] ----D C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
O43 - CFD: 14/12/2011 - 10:16:11 - [566,401] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 04/07/2012 - 22:30:05 - [40,838] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 24/12/2010 - 05:18:25 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 29/06/2011 - 19:29:50 - [0,014] ----D C:\Program Files (x86)\Microsoft Visual Studio
O43 - CFD: 29/06/2011 - 19:27:07 - [1,323] ----D C:\Program Files (x86)\Microsoft Visual Studio 8
O43 - CFD: 03/07/2011 - 23:03:00 - [3,554] ----D C:\Program Files (x86)\Microsoft Works
O43 - CFD: 04/07/2011 - 19:13:00 - [7,797] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 05/09/2011 - 21:53:15 - [40,545] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 05/09/2011 - 21:24:03 - [35,207] ----D C:\Program Files (x86)\Mozilla Thunderbird
O43 - CFD: 29/06/2011 - 19:29:54 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 30/07/2011 - 14:09:00 - [0,011] ----D C:\Program Files (x86)\MSSOAP
O43 - CFD: 30/06/2011 - 22:31:05 - [0] ----D C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 24/12/2010 - 05:14:36 - [7,169] ----D C:\Program Files (x86)\NewspaperDirect
O43 - CFD: 24/12/2010 - 04:52:05 - [21,091] ----D C:\Program Files (x86)\NVIDIA Corporation
O43 - CFD: 29/06/2011 - 18:56:51 - [20,192] R---D C:\Program Files (x86)\Online Services
O43 - CFD: 24/12/2010 - 05:06:50 - [43,340] ----D C:\Program Files (x86)\PDF Complete
O43 - CFD: 02/11/2011 - 12:16:32 - [31,424] ----D C:\Program Files (x86)\PDFCreator
O43 - CFD: 24/12/2010 - 05:07:23 - [61,444] ----D C:\Program Files (x86)\PictureMover
O43 - CFD: 04/07/2012 - 22:21:37 - [72,431] ----D C:\Program Files (x86)\QuickTime
O43 - CFD: 24/12/2010 - 04:49:32 - [46,195] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 14/07/2009 - 07:32:38 - [37,349] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 10/06/2012 - 21:21:42 - [0,648] ----D C:\Program Files (x86)\Research In Motion Limited
O43 - CFD: 30/06/2011 - 19:01:40 - [52,046] ----D C:\Program Files (x86)\Roxio
O43 - CFD: 07/11/2011 - 11:53:54 - [0] ----D C:\Program Files (x86)\SearchCore for Browsers
O43 - CFD: 02/05/2012 - 19:08:21 - [29,027] ----D C:\Program Files (x86)\Sigma Data Center 2.1
O43 - CFD: 19/05/2012 - 10:35:11 - [34,109] R---D C:\Program Files (x86)\Skype
O43 - CFD: 27/01/2012 - 23:13:55 - [29,775] ----D C:\Program Files (x86)\SmartSound Software
O43 - CFD: 24/12/2010 - 05:07:11 - [6,152] ----D C:\Program Files (x86)\Symantec
O43 - CFD: 23/07/2012 - 18:08:18 - [0,000] ----D C:\Program Files (x86)\Techcity
O43 - CFD: 24/12/2010 - 04:49:45 - [0] --H-D C:\Program Files (x86)\Temp
O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 30/06/2011 - 20:41:54 - [91,824] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 09/08/2011 - 21:54:20 - [13,442] ----D C:\Program Files (x86)\VSprint Company
O43 - CFD: 05/07/2011 - 23:56:30 - [0,500] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 08/08/2012 - 09:07:38 - [13,486] ----D C:\Program Files (x86)\Windows iLivid Toolbar
O43 - CFD: 29/09/2011 - 09:03:13 - [150,773] ----D C:\Program Files (x86)\Windows Live
O43 - CFD: 14/12/2011 - 11:14:43 - [5,895] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 14/12/2011 - 11:14:41 - [4,791] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 14/12/2011 - 11:14:41 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 14/12/2011 - 11:14:42 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 14/12/2011 - 11:14:43 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 26/07/2012 - 19:24:04 - [0,227] ----D C:\Program Files (x86)\WinPcap
O43 - CFD: 30/06/2011 - 20:45:58 - [3,693] ----D C:\Program Files (x86)\WinRAR
O43 - CFD: 28/09/2011 - 09:51:11 - [0,002] --H-D C:\Program Files (x86)\Zero G Registry
O43 - CFD: 07/08/2012 - 10:48:57 - [12,788] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 08/08/2012 - 21:54:57 - [7,562] ----D C:\Program Files (x86)\ZHPFix
O43 - CFD: 27/01/2012 - 23:09:08 - [234,629] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 09/08/2012 - 15:11:23 - [39,326] ----D C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 04/05/2012 - 18:27:49 - [105,235] ----D C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 30/06/2011 - 18:15:44 - [0] ----D C:\Program Files (x86)\Common Files\BitDefender
O43 - CFD: 29/06/2011 - 19:29:50 - [0,089] ----D C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 29/09/2011 - 15:41:40 - [84,968] ----D C:\Program Files (x86)\Common Files\i4j_jres
O43 - CFD: 30/06/2011 - 18:50:53 - [13,419] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 24/12/2010 - 05:08:36 - [36,729] ---AD C:\Program Files (x86)\Common Files\LightScribe
O43 - CFD: 28/08/2011 - 15:29:55 - [10,097] ----D C:\Program Files (x86)\Common Files\LogiShrd
O43 - CFD: 24/12/2010 - 05:07:30 - [0,049] ---AD C:\Program Files (x86)\Common Files\LS Getting Started
O43 - CFD: 02/03/2012 - 22:42:23 - [229,983] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 30/07/2011 - 14:09:00 - [0,675] ----D C:\Program Files (x86)\Common Files\MSSoap
O43 - CFD: 27/01/2012 - 23:08:02 - [4,567] ----D C:\Program Files (x86)\Common Files\PX Storage Engine
O43 - CFD: 10/06/2012 - 21:21:42 - [0,699] ----D C:\Program Files (x86)\Common Files\Research In Motion
O43 - CFD: 30/06/2011 - 18:59:43 - [27,416] ----D C:\Program Files (x86)\Common Files\Roxio Shared
O43 - CFD: 14/07/2009 - 05:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 19/05/2012 - 10:35:11 - [2,056] ----D C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 30/06/2011 - 19:01:40 - [6,624] ----D C:\Program Files (x86)\Common Files\Sonic Shared
O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 30/06/2011 - 19:00:27 - [0,678] ----D C:\Program Files (x86)\Common Files\SureThing Shared
O43 - CFD: 30/07/2011 - 14:30:24 - [0] ----D C:\Program Files (x86)\Common Files\Symantec Shared
O43 - CFD: 10/07/2012 - 22:44:13 - [42,254] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 24/12/2010 - 05:16:36 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 27/01/2012 - 23:07:35 - [2026,846] ----D C:\ProgramData\Adobe
O43 - CFD: 23/10/2011 - 13:23:10 - [140,077] ----D C:\ProgramData\Apple
O43 - CFD: 04/05/2012 - 18:27:49 - [72,498] ----D C:\ProgramData\Apple Computer
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 24/12/2010 - 04:52:43 - [0,000] ----D C:\ProgramData\ATI
O43 - CFD: 30/07/2011 - 14:39:48 - [0,000] ----D C:\ProgramData\bdch
O43 - CFD: 30/07/2011 - 14:11:03 - [24,628] ----D C:\ProgramData\BitDefender
O43 - CFD: 22/04/2012 - 20:20:57 - [0,134] ----D C:\ProgramData\CyberLink
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 30/06/2011 - 18:44:56 - [6,497] ----D C:\ProgramData\EPSON
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Favorites
O43 - CFD: 30/06/2011 - 03:51:17 - [5,854] ----D C:\ProgramData\Hewlett-Packard
O43 - CFD: 30/06/2011 - 18:58:54 - [0,001] ----D C:\ProgramData\InstallShield
O43 - CFD: 28/08/2011 - 15:33:09 - [12,349] ----D C:\ProgramData\LogiShrd
O43 - CFD: 09/08/2012 - 11:29:15 - [7,535] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 07/08/2012 - 10:57:41 - [1806,414] -S--D C:\ProgramData\Microsoft
O43 - CFD: 10/07/2012 - 22:44:25 - [0,062] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 30/07/2011 - 14:35:53 - [0,016] ----D C:\ProgramData\Norton
O43 - CFD: 24/12/2010 - 05:19:49 - [8,661] ----D C:\ProgramData\NortonInstaller
O43 - CFD: 07/08/2012 - 09:35:43 - [0] ----D C:\ProgramData\PDFC
O43 - CFD: 29/09/2011 - 15:43:37 - [0] ----D C:\ProgramData\PersonalBrain
O43 - CFD: 24/12/2010 - 05:07:23 - [0,055] ----D C:\ProgramData\PictureMover
O43 - CFD: 02/05/2012 - 19:27:25 - [0,004] ----D C:\ProgramData\Recovery
O43 - CFD: 02/01/2012 - 19:33:53 - [0,002] ----D C:\ProgramData\regid.1986-12.com.adobe
O43 - CFD: 08/06/2012 - 18:22:12 - [0] ----D C:\ProgramData\Roxio
O43 - CFD: 19/05/2012 - 10:35:10 - [49,226] ----D C:\ProgramData\Skype
O43 - CFD: 27/01/2012 - 23:14:13 - [208,250] ----D C:\ProgramData\SmartSound Software Inc
O43 - CFD: 30/06/2011 - 18:59:49 - [0,001] ----D C:\ProgramData\Sonic
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Start Menu
O43 - CFD: 24/12/2010 - 05:07:11 - [0,064] ----D C:\ProgramData\Symantec
O43 - CFD: 24/12/2010 - 05:05:54 - [0,469] ----D C:\ProgramData\Temp
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Templates
O43 - CFD: 30/06/2011 - 18:49:42 - [0,003] ----D C:\ProgramData\UDL
O43 - CFD: 30/06/2011 - 19:02:04 - [0,158] ----D C:\ProgramData\Uninstall
O43 - CFD: 09/08/2011 - 21:54:20 - [0,733] ----D C:\ProgramData\VSprint company
O43 - CFD: 29/06/2011 - 19:28:14 - [1803,673] ----D C:\ProgramData\WildTangent
O43 - CFD: 30/06/2011 - 20:45:05 - [0] ----D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
O43 - CFD: 22/07/2011 - 20:50:49 - [5,877] --H-D C:\ProgramData\{9CD61942-8DA1-4781-925C-4FE1471E0820}
O43 - CFD: 24/12/2010 - 04:53:50 - [33,601] ----D C:\ProgramData\{D13C0989-F3EC-4F44-A33D-B3F83DF90FAF}
O43 - CFD: 25/04/2012 - 22:34:02 - [30,702] ----D C:\Users\Romain\AppData\Roaming\Adobe
O43 - CFD: 27/07/2011 - 11:15:41 - [0,201] ----D C:\Users\Romain\AppData\Roaming\Apple Computer
O43 - CFD: 01/07/2011 - 11:19:40 - [0] ----D C:\Users\Romain\AppData\Roaming\ATI
O43 - CFD: 30/07/2011 - 14:36:47 - [0,038] ----D C:\Users\Romain\AppData\Roaming\BitDefender
O43 - CFD: 22/04/2012 - 20:20:39 - [0] ----D C:\Users\Romain\AppData\Roaming\CyberLink
O43 - CFD: 13/11/2011 - 21:22:47 - [0,000] ----D C:\Users\Romain\AppData\Roaming\FreeAudioPack
O43 - CFD: 13/11/2011 - 21:24:12 - [0,000] ----D C:\Users\Romain\AppData\Roaming\FreeCDRipper
O43 - CFD: 10/07/2011 - 17:58:53 - [0,000] ----D C:\Users\Romain\AppData\Roaming\gtk-2.0
O43 - CFD: 21/06/2012 - 21:38:43 - [0,008] ----D C:\Users\Romain\AppData\Roaming\HpUpdate
O43 - CFD: 01/07/2011 - 11:18:18 - [0] ----D C:\Users\Romain\AppData\Roaming\Identities
O43 - CFD: 01/07/2011 - 11:35:54 - [0,059] ----D C:\Users\Romain\AppData\Roaming\Macromedia
O43 - CFD: 09/08/2012 - 11:31:34 - [2,668] ----D C:\Users\Romain\AppData\Roaming\Malwarebytes
O43 - CFD: 14/07/2009 - 09:44:38 - [0] ----D C:\Users\Romain\AppData\Roaming\Media Center Programs
O43 - CFD: 02/05/2012 - 19:25:16 - [3,814] -S--D C:\Users\Romain\AppData\Roaming\Microsoft
O43 - CFD: 01/07/2011 - 11:35:09 - [47,045] ----D C:\Users\Romain\AppData\Roaming\Mozilla
O43 - CFD: 01/07/2011 - 11:19:41 - [13,794] ----D C:\Users\Romain\AppData\Roaming\PictureMover
O43 - CFD: 09/06/2012 - 17:03:14 - [1,510] ----D C:\Users\Romain\AppData\Roaming\Pro Cycling Manager 2011
O43 - CFD: 08/08/2012 - 13:59:28 - [1,504] ----D C:\Users\Romain\AppData\Roaming\Pro Cycling Manager 2012
O43 - CFD: 23/01/2012 - 19:33:35 - [0] ----D C:\Users\Romain\AppData\Roaming\QuickScan
O43 - CFD: 11/08/2011 - 16:09:35 - [0,008] ----D C:\Users\Romain\AppData\Roaming\Roxio
O43 - CFD: 25/04/2012 - 22:34:50 - [0,032] ----D C:\Users\Romain\AppData\Roaming\SigmaDataCenter21.6A52D17A1C86211F195F60E94C15876515EBE62C.1
O43 - CFD: 19/05/2012 - 10:41:43 - [2,939] ----D C:\Users\Romain\AppData\Roaming\Skype
O43 - CFD: 01/07/2011 - 12:18:50 - [704,817] ----D C:\Users\Romain\AppData\Roaming\Thunderbird
O43 - CFD: 16/07/2012 - 22:57:11 - [0,080] ----D C:\Users\Romain\AppData\Roaming\vlc
O43 - CFD: 09/08/2011 - 21:54:24 - [0] ----D C:\Users\Romain\AppData\Roaming\VSprint Company
O43 - CFD: 13/07/2011 - 19:01:21 - [0,001] ----D C:\Users\Romain\AppData\Roaming\WildTangent
O43 - CFD: 10/07/2011 - 17:13:10 - [0,000] ----D C:\Users\Romain\AppData\Roaming\WinRAR
O43 - CFD: 25/04/2012 - 22:33:58 - [15,538] ----D C:\Users\Romain\AppData\Local\Adobe
O43 - CFD: 09/07/2011 - 19:51:34 - [0] ----D C:\Users\Romain\AppData\Local\Apple
O43 - CFD: 27/07/2011 - 11:03:46 - [13,506] ----D C:\Users\Romain\AppData\Local\Apple Computer
O43 - CFD: 01/07/2011 - 11:18:11 - [0] ----D C:\Users\Romain\AppData\Local\Application Data
O43 - CFD: 01/07/2011 - 11:19:40 - [0,065] ----D C:\Users\Romain\AppData\Local\ATI
O43 - CFD: 07/11/2011 - 20:11:22 - [47,041] ----D C:\Users\Romain\AppData\Local\CrashDumps
O43 - CFD: 04/08/2012 - 11:01:20 - [1,591] ----D C:\Users\Romain\AppData\Local\Diagnostics
O43 - CFD: 24/06/2012 - 18:40:08 - [0,140] ----D C:\Users\Romain\AppData\Local\Downloader
O43 - CFD: 22/04/2012 - 20:22:26 - [0,008] ----D C:\Users\Romain\AppData\Local\Hewlett-Packard
O43 - CFD: 01/07/2011 - 11:18:11 - [0] ----D C:\Users\Romain\AppData\Local\Historique
O43 - CFD: 28/08/2011 - 15:32:23 - [4,086] ----D C:\Users\Romain\AppData\Local\LogiShrd
O43 - CFD: 24/06/2012 - 18:06:13 - [0] ----D C:\Users\Romain\AppData\Local\Macromedia
O43 - CFD: 01/07/2012 - 20:05:24 - [202,764] ----D C:\Users\Romain\AppData\Local\Microsoft
O43 - CFD: 03/08/2012 - 23:12:33 - [0,617] ----D C:\Users\Romain\AppData\Local\Microsoft Games
O43 - CFD: 04/12/2011 - 19:49:21 - [0,194] ----D C:\Users\Romain\AppData\Local\Microsoft Help
O43 - CFD: 13/11/2011 - 23:25:42 - [0,063] ----D C:\Users\Romain\AppData\Local\MicroVision Applications
O43 - CFD: 01/07/2011 - 11:35:09 - [116,328] ----D C:\Users\Romain\AppData\Local\Mozilla
O43 - CFD: 20/05/2012 - 20:57:01 - [0] ----D C:\Users\Romain\AppData\Local\PDFC
O43 - CFD: 09/08/2012 - 15:10:13 - [66,907] ----D C:\Users\Romain\AppData\Local\Temp
O43 - CFD: 01/07/2011 - 11:18:11 - [0] ----D C:\Users\Romain\AppData\Local\Temporary Internet Files
O43 - CFD: 21/08/2011 - 17:55:12 - [27,191] ----D C:\Users\Romain\AppData\Local\Thunderbird
O43 - CFD: 30/05/2012 - 18:19:27 - [0,200] ----D C:\Users\Romain\AppData\Local\Unity
O43 - CFD: 21/08/2011 - 10:10:12 - [0,094] ----D C:\Users\Romain\AppData\Local\VirtualStore
O43 - CFD: 19/05/2012 - 10:41:35 - [0,035] ----D C:\Users\Romain\AppData\Local\Windows Live
O43 - CFD: 14/07/2009 - 06:54:32 - [0,014] R---D C:\Users\Romain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 11/07/2012 - 17:55:51 - [0,000] R---D C:\Users\Romain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 14/07/2009 - 06:49:38 - [0,001] R---D C:\Users\Romain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 08/08/2012 - 22:10:37 - [0] R---D C:\Users\Romain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 30/06/2011 - 18:48:07 - [118,664] ----D C:\Program Files (x86)\ABBYY FineReader 6.0 Sprint
O43 - CFD: 02/01/2012 - 19:19:49 - [1007,350] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 30/06/2011 - 20:43:41 - [2,201] ----D C:\Program Files (x86)\Apple Software Update
O43 - CFD: 24/12/2010 - 04:51:42 - [42,739] ----D C:\Program Files (x86)\ATI Stream
O43 - CFD: 24/12/2010 - 04:51:38 - [93,996] ----D C:\Program Files (x86)\ATI Technologies
O43 - CFD: 23/10/2011 - 13:22:45 - [0,602] ----D C:\Program Files (x86)\Bonjour
O43 - CFD: 29/09/2011 - 15:42:12 - [-650,908] ----D C:\Program Files (x86)\Britannica 11.0
O43 - CFD: 10/06/2012 - 21:21:42 - [878,695] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 24/06/2012 - 19:22:02 - [239,029] ----D C:\Program Files (x86)\Cyanide
O43 - CFD: 24/12/2010 - 05:00:04 - [1137,995] ----D C:\Program Files (x86)\CyberLink
O43 - CFD: 13/08/2011 - 11:01:40 - [1,886] ----D C:\Program Files (x86)\D-Link
O43 - CFD: 17/07/2011 - 13:58:31 - [5,655] ----D C:\Program Files (x86)\Downloader
O43 - CFD: 29/06/2011 - 22:32:29 - [102,001] ----D C:\Program Files (x86)\EasyBits For Kids
O43 - CFD: 30/06/2011 - 18:48:52 - [131,343] ----D C:\Program Files (x86)\epson
O43 - CFD: 07/11/2011 - 11:53:56 - [26,151] ----D C:\Program Files (x86)\Free mp3 Wma Converter
O43 - CFD: 30/06/2011 - 20:45:21 - [107,900] ----D C:\Program Files (x86)\GIMP-2.0
O43 - CFD: 16/11/2011 - 10:42:49 - [370,883] ----D C:\Program Files (x86)\Google
O43 - CFD: 29/06/2011 - 19:07:08 - [5,377] ----D C:\Program Files (x86)\Hercules
O43 - CFD: 24/12/2010 - 05:19:36 - [1491,030] ----D C:\Program Files (x86)\Hewlett-Packard
O43 - CFD: 02/01/2012 - 16:48:18 - [0] ----D C:\Program Files (x86)\HOYA CORPORATION
O43 - CFD: 18/01/2012 - 10:26:41 - [4,384] ----D C:\Program Files (x86)\Hp
O43 - CFD: 24/12/2010 - 05:14:24 - [658,380] ----D C:\Program Files (x86)\HP Games
O43 - CFD: 27/01/2012 - 23:14:13 - [337,671] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 15/06/2012 - 17:33:48 - [5,637] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 04/05/2012 - 18:28:06 - [120,831] ----D C:\Program Files (x86)\iTunes
O43 - CFD: 28/08/2011 - 15:32:18 - [39,410] ----D C:\Program Files (x86)\Logitech
O43 - CFD: 09/08/2012 - 11:29:16 - [11,720] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 01/07/2012 - 21:10:19 - [29,437] ----D C:\Program Files (x86)\Microsoft
O43 - CFD: 29/08/2011 - 22:05:51 - [0,764] ----D C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
O43 - CFD: 14/12/2011 - 10:16:11 - [566,401] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 04/07/2012 - 22:30:05 - [40,838] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 24/12/2010 - 05:18:25 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 29/06/2011 - 19:29:50 - [0,014] ----D C:\Program Files (x86)\Microsoft Visual Studio
O43 - CFD: 29/06/2011 - 19:27:07 - [1,323] ----D C:\Program Files (x86)\Microsoft Visual Studio 8
O43 - CFD: 03/07/2011 - 23:03:00 - [3,554] ----D C:\Program Files (x86)\Microsoft Works
O43 - CFD: 04/07/2011 - 19:13:00 - [7,797] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 05/09/2011 - 21:53:15 - [40,545] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 05/09/2011 - 21:24:03 - [35,207] ----D C:\Program Files (x86)\Mozilla Thunderbird
O43 - CFD: 29/06/2011 - 19:29:54 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 30/07/2011 - 14:09:00 - [0,011] ----D C:\Program Files (x86)\MSSOAP
O43 - CFD: 30/06/2011 - 22:31:05 - [0] ----D C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 24/12/2010 - 05:14:36 - [7,169] ----D C:\Program Files (x86)\NewspaperDirect
O43 - CFD: 24/12/2010 - 04:52:05 - [21,091] ----D C:\Program Files (x86)\NVIDIA Corporation
O43 - CFD: 29/06/2011 - 18:56:51 - [20,192] R---D C:\Program Files (x86)\Online Services
O43 - CFD: 24/12/2010 - 05:06:50 - [43,340] ----D C:\Program Files (x86)\PDF Complete
O43 - CFD: 02/11/2011 - 12:16:32 - [31,424] ----D C:\Program Files (x86)\PDFCreator
O43 - CFD: 24/12/2010 - 05:07:23 - [61,444] ----D C:\Program Files (x86)\PictureMover
O43 - CFD: 04/07/2012 - 22:21:37 - [72,431] ----D C:\Program Files (x86)\QuickTime
O43 - CFD: 24/12/2010 - 04:49:32 - [46,195] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 14/07/2009 - 07:32:38 - [37,349] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 10/06/2012 - 21:21:42 - [0,648] ----D C:\Program Files (x86)\Research In Motion Limited
O43 - CFD: 30/06/2011 - 19:01:40 - [52,046] ----D C:\Program Files (x86)\Roxio
O43 - CFD: 07/11/2011 - 11:53:54 - [0] ----D C:\Program Files (x86)\SearchCore for Browsers
O43 - CFD: 02/05/2012 - 19:08:21 - [29,027] ----D C:\Program Files (x86)\Sigma Data Center 2.1
O43 - CFD: 19/05/2012 - 10:35:11 - [34,109] R---D C:\Program Files (x86)\Skype
O43 - CFD: 27/01/2012 - 23:13:55 - [29,775] ----D C:\Program Files (x86)\SmartSound Software
O43 - CFD: 24/12/2010 - 05:07:11 - [6,152] ----D C:\Program Files (x86)\Symantec
O43 - CFD: 23/07/2012 - 18:08:18 - [0,000] ----D C:\Program Files (x86)\Techcity
O43 - CFD: 24/12/2010 - 04:49:45 - [0] --H-D C:\Program Files (x86)\Temp
O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 30/06/2011 - 20:41:54 - [91,824] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 09/08/2011 - 21:54:20 - [13,442] ----D C:\Program Files (x86)\VSprint Company
O43 - CFD: 05/07/2011 - 23:56:30 - [0,500] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 08/08/2012 - 09:07:38 - [13,486] ----D C:\Program Files (x86)\Windows iLivid Toolbar
O43 - CFD: 29/09/2011 - 09:03:13 - [150,773] ----D C:\Program Files (x86)\Windows Live
O43 - CFD: 14/12/2011 - 11:14:43 - [5,895] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 14/12/2011 - 11:14:41 - [4,791] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 14/12/2011 - 11:14:41 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 14/12/2011 - 11:14:42 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 14/12/2011 - 11:14:43 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 26/07/2012 - 19:24:04 - [0,227] ----D C:\Program Files (x86)\WinPcap
O43 - CFD: 30/06/2011 - 20:45:58 - [3,693] ----D C:\Program Files (x86)\WinRAR
O43 - CFD: 28/09/2011 - 09:51:11 - [0,002] --H-D C:\Program Files (x86)\Zero G Registry
O43 - CFD: 07/08/2012 - 10:48:57 - [12,788] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 08/08/2012 - 21:54:57 - [7,562] ----D C:\Program Files (x86)\ZHPFix
O43 - CFD: 27/01/2012 - 23:09:08 - [234,629] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 09/08/2012 - 15:11:23 - [39,326] ----D C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 04/05/2012 - 18:27:49 - [105,235] ----D C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 30/06/2011 - 18:15:44 - [0] ----D C:\Program Files (x86)\Common Files\BitDefender
O43 - CFD: 29/06/2011 - 19:29:50 - [0,089] ----D C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 29/09/2011 - 15:41:40 - [84,968] ----D C:\Program Files (x86)\Common Files\i4j_jres
O43 - CFD: 30/06/2011 - 18:50:53 - [13,419] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 24/12/2010 - 05:08:36 - [36,729] ---AD C:\Program Files (x86)\Common Files\LightScribe
O43 - CFD: 28/08/2011 - 15:29:55 - [10,097] ----D C:\Program Files (x86)\Common Files\LogiShrd
O43 - CFD: 24/12/2010 - 05:07:30 - [0,049] ---AD C:\Program Files (x86)\Common Files\LS Getting Started
O43 - CFD: 02/03/2012 - 22:42:23 - [229,983] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 30/07/2011 - 14:09:00 - [0,675] ----D C:\Program Files (x86)\Common Files\MSSoap
O43 - CFD: 27/01/2012 - 23:08:02 - [4,567] ----D C:\Program Files (x86)\Common Files\PX Storage Engine
O43 - CFD: 10/06/2012 - 21:21:42 - [0,699] ----D C:\Program Files (x86)\Common Files\Research In Motion
O43 - CFD: 30/06/2011 - 18:59:43 - [27,416] ----D C:\Program Files (x86)\Common Files\Roxio Shared
O43 - CFD: 14/07/2009 - 05:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 19/05/2012 - 10:35:11 - [2,056] ----D C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 30/06/2011 - 19:01:40 - [6,624] ----D C:\Program Files (x86)\Common Files\Sonic Shared
O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 30/06/2011 - 19:00:27 - [0,678] ----D C:\Program Files (x86)\Common Files\SureThing Shared
O43 - CFD: 30/07/2011 - 14:30:24 - [0] ----D C:\Program Files (x86)\Common Files\Symantec Shared
O43 - CFD: 10/07/2012 - 22:44:13 - [42,254] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 24/12/2010 - 05:16:36 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live
~ Scan Program Folder in 01mn 25s

---\\
O44 - LFC:[MD5.97EFB896452B9B0E90372C8F317CA297] - 09/08/2012 - 14:12:02 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1364023]
O44 - LFC:[MD5.5055E9F902C17200537A6DD6EA4F3626] - 09/08/2012 - 14:03:58 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.363AC33DAA8090A260EDD517ECBD0FA3] - 09/08/2012 - 12:32:46 . (...) -- C:\Windows\System32\perfc009.dat []]
O44 - LFC:[MD5.F37C04A419CEF64D546EB653DE548DCB] - 09/08/2012 - 12:32:46 . (...) -- C:\Windows\System32\perfc00C.dat []]]
O44 - LFC:[MD5.BBFA1718200CD67D9B10523B0B8267F6] - 09/08/2012 - 12:32:46 . (...) -- C:\Windows\System32\perfh009.dat []]]]
O44 - LFC:[MD5.B4595A5E3C83E19516F18E92E89AEBEE] - 09/08/2012 - 12:32:46 . (...) -- C:\Windows\System32\perfh00C.dat []]]]]
O44 - LFC:[MD5.59CAD687D3086DCDB2558C776AEDB545] - 09/08/2012 - 12:32:46 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI [1662566]
O44 - LFC:[MD5.363AC33DAA8090A260EDD517ECBD0FA3] - 09/08/2012 - 12:32:46 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat [121082]
O44 - LFC:[MD5.F37C04A419CEF64D546EB653DE548DCB] - 09/08/2012 - 12:32:46 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat [148786]
O44 - LFC:[MD5.BBFA1718200CD67D9B10523B0B8267F6] - 09/08/2012 - 12:32:46 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat [652150]
O44 - LFC:[MD5.B4595A5E3C83E19516F18E92E89AEBEE] - 09/08/2012 - 12:32:46 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat [745268]
O44 - LFC:[MD5.59CAD687D3086DCDB2558C776AEDB545] - 09/08/2012 - 12:32:46 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1662566]
O44 - LFC:[MD5.97244FF2736580FDA921CDDD39F88C81] - 09/08/2012 - 12:27:35 ---A- . (...) -- C:\Windows\setupact.log [68087]
O44 - LFC:[MD5.DDFB73D6C23029C7FD1D4E233A94E133] - 09/08/2012 - 12:27:28 ---A- . (...) -- C:\Windows\PFRO.log [424918]
O44 - LFC:[MD5.5FD9DB8535651C68B7263C87E159411E] - 09/08/2012 - 12:26:57 ---A- . (...) -- C:\bdlog.txt [392140]
O44 - LFC:[MD5.BF7908EFB515054330D2DA9914FDDE97] - 08/08/2012 - 08:07:49 ---A- . (...) -- C:\AdwCleaner[S1].txt [15918]
O44 - LFC:[MD5.AAE52083EE84BA43116FD4F445652B57] - 08/08/2012 - 08:07:49 ---A- . (...) -- C:\Windows\DeleteOnReboot.bat [113]
O44 - LFC:[MD5.F744D1D241C0095F811696894E534B20] - 11/07/2012 - 16:53:58 . (...) -- C:\Windows\System32\FNTCACHE.DAT []
O44 - LFC:[MD5.F744D1D241C0095F811696894E534B20] - 11/07/2012 - 16:53:58 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT [433624]
O44 - LFC:[MD5.DC8490812A3B72811AE534F423B4C206] - 03/07/2012 - 12:46:44 . (...) -- C:\Windows\System32\Drivers\mbam.sys []
~ Scan Files in 00mn 29s

---\\ (None)

---\\ (None)

---\\ (None)

---\\
O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088]
~ Scan Drivers in 00mn 00s

---\\
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
~ Scan Keys in 00mn 00s

---\\ (None)

---\\ (None)

---\\
[MD5.E94A1C066632BFB524E98C55EE60D38F] [SPRF][30/07/2011] (...) -- C:\ProgramData\bdinstall.bin [76672]
[MD5.7DAFDC3AA155B1562AF33B1399EBF341] [SPRF][07/08/2012] (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Romain\Desktop\ZHPDiag2.exe [4600348]
[MD5.3FEA9D2EDF23B0283C7A66C8DEA380BD] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player Module.) -- C:\Windows\Downloaded Program Files\dwusplay.dll [24576]
[MD5.CDBE35EA59BC9223E4F800BD1DB82D27] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player.) -- C:\Windows\Downloaded Program Files\dwusplay.exe [196608]
[MD5.0C135B4FEFF52ED92CF08BB3F0A75A90] [SPRF][11/09/2006] (.Macrovision Corporation - Macrovision Software Manager Web Agent.) -- C:\Windows\Downloaded Program Files\isusweb.dll [484272]
~ Scan Files in 00mn 00s

End of the scan (588 lines in 02mn 32s)(0)

Re,
* Télécharge OTM (OldTimer) sur ton Bureau

ICI >> OTM (OldTimer)
* Double clic "OTMoveIt3.exe"
* Utilisateurs Windows Vista / 7 Clic droit sur "OTMoveIt3.exe" choisis "exécuter en tant qu'administrateur" afin de le lancer.

- Copie (Ctrl+C) le texte suivant en gras ci-dessous :

:files
C:\Program Files (x86)\Windows iLivid Toolbar
C:\ProgramData\{9CD61942-8DA1-4781-925C-4FE1471E0820}

:commands
[emptytemp]

- Colle (Ctrl+V) le texte précédemment copié dans le cadre: Paste Instructions for Items to be Moved.
- Clique maintenant sur le bouton MoveIt!
Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.
- Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log

tout a pu être supprimé, par contre je n'ai pas de fichier avec date et heure, juste un dossier avec date et heure, qui contient plein de sous-dossiers.

Bonjour,
Redémarre ton PC
Il me faut un dernier rapport ZHPDiag (à héberger)...