Supprimer protected search de mozilla firefox

Résolu
yop -  
 yopette -
Bonjour,


Je n'arrive pas à retirer protected search ( moteur de recherche automatique dans la barre d'adresse) de mozilla. J'ai Adblocker, j'utilise ccleaner régulièrement et mon antivirus est avast.Comment cela est-il arrivé jusque là, surtout:
comment puis-je l'enlever. Merci de votre aide.


A voir également:

34 réponses

Précédent
  • 1
  • 2
Réponse 21 / 34
yopette Messages postés 14 Statut Membre
 
Ci-dessous, le rapport OTM.

Une fois qu'on aura terminé, qu'est ce que je devrais faire de toutes ces appli que j'ai téléchargé (OTM, ZHP,etc;),

_____________________________________________

All processes killed
========== FILES ==========
File/Folder C:\users\pauline\appdata\roaming\cacaoweb\cacaoweb.exe not found.
========== REGISTRY ==========
Registry key HKEY_CURRENT_USER\Software\YahooPartnerToolbar\ deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: pauline
->Temp folder emptied: 314867 bytes
->Temporary Internet Files folder emptied: 2327019 bytes
->Java cache emptied: 79439 bytes
->FireFox cache emptied: 93848107 bytes
->Google Chrome cache emptied: 126310396 bytes
->Flash cache emptied: 3849 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 74319 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 279610 bytes
%systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 753 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 85347 bytes
RecycleBin emptied: 53760 bytes

Total Files Cleaned = 213,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 03052013_223147

Files moved on Reboot...
C:\Users\pauline\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...
0
Réponse 22 / 34
Fish66 Messages postés 18337 Statut Contributeur sécurité 1 318
 
Bonjour, 
Une fois qu'on aura terminé, qu'est ce que je devrais faire de toutes ces appli que j'ai téléchargé (OTM, ZHP,etc;),

Ne t'inquiète pas, on va les supprimer en lancant Delfix! :-)
--------------------------
Comment se comporte ton PC maintenant ?

@+
0
Réponse 23 / 34
yopette Messages postés 14 Statut Membre
 
Ayé rentré du taf!

ll va très bien !
J'ai pu le démarrer en mode sans échec, protected search n'est pas réapparu, et mon ordi n'hurle plus. Ca me semble pas mal.



Du coup, au cas où je t'ai fais un Diag ZHP en mode sans echec. Le Voici

____________________________________________________________
Rapport de ZHPDiag v1.3.6.10 par Nicolas Coolman, Update du 03/03/2013
Run by pauline at 06/03/2013 20:22:39
State : Problème connexion internet
High Elevated Privileges : OK
UAC :


---\\ Web Browser
MSIE: Internet Explorer v8.0.7601.17514
MFIE: Mozilla Firefox 19.0 v19.0 (Defaut)
GCIE: Google Chrome v25.0.1364.152

---\\ Windows Product Information
~ Langage: Français
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
Software Protection Service (Protection logicielle) : KO
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ System Information
~ Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Sans échec (Fail-safe boot)
Total RAM: 3002 MB (86% free)
System Restore: Activé (Enable)
System drive C: has 351 GB (77%) free of 453 GB

---\\ Logged in mode
~ Computer Name: PAULINE-PC
~ User Name: pauline
~ All Users Names: pauline, HomeGroupUser$, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\pauline\AppData\Roaming\
~ %Desktop% : C:\Users\pauline\Desktop\
~ %Favorites% : C:\Users\pauline\Favorites\
~ %LocalAppData% : C:\Users\pauline\AppData\Local\
~ %StartMenu% : C:\Users\pauline\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 351 Go of 453 Go)
D:\ CD-ROM drive (Not Inserted)
E:\ CD-ROM drive (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Scan Security Center in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.81101547092783DC117D800D3573EBD4] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.20/12/2012 - 14:59:36.) -- C:\Windows\System32\wininet.dll [1188864]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.E453ACF4E7D44E5530B5D5F2B9CA8563] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.31/08/2012 - 19:19:35.) -- C:\Windows\system32\Drivers\ntfs.sys [1659760]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Scan Generic Processes in 00mn 01s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/1943
~ Mes musiques (My Musics) : 3/337
~ Mes Videos (My Videos) : 1/111
~ Mes Favoris (My Favorites) : 1/30
~ Mes Documents (My Documents) : 3/239
~ Mon Bureau (My Desktop) : 2/822
~ Menu demarrer (Programs) : 1/29
~ Scan Hidden Files in 00mn 20s



---\\ Processus lancés
[MD5.66E4AD852E817A7073DE8421CF1C0FA9] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [5719552] [PID.1308]
~ Scan Processes Running in 00mn 00s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\pauline\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] None
~ Scan Google Browser in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\pauline\AppData\Roaming\Mozilla\Firefox\Profiles\nhrugz4b.default\prefs.js
M3 - MFPP: Plugins - [pauline] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [pauline] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [pauline] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [pauline] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [pauline] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [pauline] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [pauline] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\yahoo-france.xml
M2 - MFEP: prefs.js [pauline - nhrugz4b.default\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}] [adblockplus] Adblock Plus v2.2.3 (.Wladimir Palantr</em:contributor><em:contributor>Fabrice Desré</em:contributor><em:contributor>Hubird</em:contributor><em:contributor>Günther Beyer (opoloo.de)</em:contributor><em:contributor>Crits</em:contributor><em:contributor>Famlam</em:contributor><em:contributor>fanboy</em:contributor><em:contributor>Gythialy</em:contributor><em:contributor>heradhis</em:contributor><em:contributor>Khrin</em:contributor><em:contributor>Lain_13</em:contributor><em:contributor>Lian</em:contributor><em:contributor>MenetZ</em:contributor><em:contributor>MonztA</em:contributor><em:contributor>Nitrox</em:contributor><em:contributor>None</em:contributor><em:contributor>smed79</em:contributor><em:contributor>Zoso</em:contributor><em:contributor>Ð Ð»ÐµÐºÑ Ð°Ð½Ð'ÑSÑ€ СÑ'анев</em:contributor>.)
M2 - MFEP: prefs.js [pauline - nhrugz4b.default\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}] [] Adobe DLM (powered by getPlus(R)) v1.6.2.99 (.NOS Microsystems Ltd..)
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\NPOFF12.DLL
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.02.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_171.dll
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.10.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Windows\system32\npDeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.10.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.10.2 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.10411.0.) -- c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
~ Scan Firefox Browser in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.packardbell.com/rdr.aspx?b=ACPW&l=040c&m=easynote_th36&r=27361210l905l04e4z1m5f47n2e42o
R0 - HKCU\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.rpidity.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (8.00.7600.16385 (win7_rtm.090713-1255)) -- C:\Windows\SysWOW64\ieframe.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Scan Keys in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub [64Bits] - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\java\jre7\bin\jp2ssv.dll
~ Scan BHO in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline
~ Scan Toolbar in 00mn 00s



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.)
O4 - HKLM\..\Run: [PLFSetI] . (.Pas de propriétaire - DefaultSettingEXE MFC Application.) -- C:\Windows\PLFSetI.exe
O4 - HKLM\..\Run: [Acer ePower Management] . (.Acer Incorporated - ePowerTray.) -- C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
O4 - HKLM\..\Run: [Windows Mobile Device Center] . (.Microsoft Corporation - Gestionnaire pour appareils Windows Mobile.) -- C:\Windows\WindowsMobile\wmdc.exe
O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] . (.Microsoft Corporation - Pense-bête.) -- C:\Windows\System32\StikyNot.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\pauline\AppData\Roaming\uTorrent\uTorrent.exe
O4 - HKCU\..\Run: [S60 PC Suite Tray] . (.Pas de propriétaire - Launch Application.) -- C:\Program Files (x86)\Samsung\Samsung PC Studio 7\PCSuite.exe
O4 - HKLM\..\Wow6432Node\Run: [IAStorIcon] . (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Wow6432Node\Run: [LManager] . (.Dritek System Inc. - Launch Manager Keyboard Application.) -- C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Wow6432Node\Run: [BackupManagerTray] . (.NewTech Infosystems, Inc. - Packard Bell MyBackup.) -- C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe
O4 - HKLM\..\Wow6432Node\Run: [VideoWebCamera] . (.Suyin - Video Web Camera.) -- C:\Program Files (x86)\VideoWebCamera\VideoWebCamera.exe
O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
O4 - HKUS\S-1-5-18\..\Run: [Samsung.PCSync] . (.Nokia - PC Sync.) -- C:\Program Files (x86)\Samsung\Samsung PC Studio 7\PcSync2.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-21-369085839-4153150272-3370532161-1000\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
O4 - HKUS\S-1-5-21-369085839-4153150272-3370532161-1000\..\Run: [RESTART_STICKY_NOTES] . (.Microsoft Corporation - Pense-bête.) -- C:\Windows\System32\StikyNot.exe
O4 - HKUS\S-1-5-21-369085839-4153150272-3370532161-1000\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
O4 - HKUS\S-1-5-21-369085839-4153150272-3370532161-1000\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\pauline\AppData\Roaming\uTorrent\uTorrent.exe
O4 - HKUS\S-1-5-21-369085839-4153150272-3370532161-1000\..\Run: [S60 PC Suite Tray] . (.Pas de propriétaire - Launch Application.) -- C:\Program Files (x86)\Samsung\Samsung PC Studio 7\PCSuite.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
~ Scan Application in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\TaskBar: Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O4 - GS\TaskBar: Windows Explorer.lnk . (.Microsoft Corporation.) -- C:\Windows\explorer.exe
O4 - GS\Programs: Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\QuickLaunch: µTorrent.lnk . (.BitTorrent Inc..) -- C:\Users\pauline\AppData\Roaming\uTorrent\uTorrent.exe
O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation.) -- C:\Windows\system32\eudcedit.exe
O4 - GS\Desktop: DVDVideoSoft Free Studio.lnk . (.DVD Video Soft Limited..) -- C:\Program Files (x86)\Common Files\DVDVideoSoft\FreeStudioManager.exe
O4 - GS\Desktop: Format Factory.lnk . (.Free Time.) -- C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe
O4 - GS\Desktop: GanttProject.lnk . (...) -- C:\Program Files (x86)\GanttProjectPraha\ganttproject.exe
O4 - GS\Desktop: MuseScore.lnk . (...) -- C:\Program Files (x86)\MuseScore\bin\mscore.exe
~ Scan Global Startup in 00mn 00s



---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ Scan IE Control Panel in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
~ Scan Winsock in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{4FD32838-D265-4828-AECA-96F013E24236}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CCS\Services\Tcpip\..\{8977A388-6DF9-4DFC-8432-133B2C09B3FD}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CCS\Services\Tcpip\..\{9B4C6690-9DE9-45E6-92A1-58A2D7C6925E}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CCS\Services\Tcpip\..\{B9F039B1-6C9D-42D7-A5BC-C799D1EDEECE}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS1\Services\Tcpip\..\{4FD32838-D265-4828-AECA-96F013E24236}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS1\Services\Tcpip\..\{8977A388-6DF9-4DFC-8432-133B2C09B3FD}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS1\Services\Tcpip\..\{9B4C6690-9DE9-45E6-92A1-58A2D7C6925E}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS1\Services\Tcpip\..\{B9F039B1-6C9D-42D7-A5BC-C799D1EDEECE}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS2\Services\Tcpip\..\{4FD32838-D265-4828-AECA-96F013E24236}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS2\Services\Tcpip\..\{8977A388-6DF9-4DFC-8432-133B2C09B3FD}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS2\Services\Tcpip\..\{9B4C6690-9DE9-45E6-92A1-58A2D7C6925E}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS2\Services\Tcpip\..\{B9F039B1-6C9D-42D7-A5BC-C799D1EDEECE}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240
~ Scan Domain in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll
~ Scan Protocole Additionnel in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Scan Winlogon in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ Scan SSODL in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Active File Monitor V8 (AdobeActiveFileMonitor8.0) . (.Adobe Systems Incorporated - Adobe Photoshop Elements 8.0 (component).) - c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Dritek WMI Service (DsiWMIService) . (.Dritek System Inc. - Dritek WMI Service.) - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: Acer ePower Service (ePowerSvc) . (.Acer Incorporated - ePowerSvc.) - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
O23 - Service: GREGService (GREGService) . (.Acer Incorporated - Global Registration Service.) - C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: NTI IScheduleSvc (NTI IScheduleSvc) . (.NewTech Infosystems, Inc. - Backup Manager Module.) - C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe
O23 - Service: Updater Service (Updater Service) . (.Acer Group - Updater Service.) - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
O23 - Service: (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
~ Scan Services in 00mn 03s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Scan Desktop Component in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
~ Scan Scheduled Task in 00mn 00s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Internet Explorer [64Bits] - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: Browser Customizations [64Bits] - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d'IEAK.) -- C:\Windows\System32\iedkcs32.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Scan Active Setup in 00mn 00s



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\Drivers\aswrdr2.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (dtsoftbus01) . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) - C:\Windows\System32\DRIVERS\dtsoftbus01.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Scan Drivers in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {287ECFA4-719A-2143-A09B-D6A12DE54E40}
O42 - Logiciel: Adobe Download Assistant - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- com.adobe.downloadassistant.AdobeDownloadAssistant
O42 - Logiciel: Adobe Download Assistant - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {C8773FDB-D0DB-BE52-D536-F48F9886B57B}
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Photoshop Elements 8.0 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Photoshop Elements 8.0
O42 - Logiciel: Adobe Reader XI (11.0.02) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
O42 - Logiciel: Adobe Shockwave Player 11.6 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Shockwave Player
O42 - Logiciel: Advertising Center - (.Nero AG.) [HKLM][64Bits] -- {B2EC4A38-B545-4A00-8214-13FE0E915E6D}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {A83279FD-CA4B-4206-9535-90974DE76654}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver - (.Atheros Communications Inc..) [HKLM][64Bits] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549}
O42 - Logiciel: Backup Manager Basic - (.NewTech Infosystems.) [HKLM][64Bits] -- {72B776E5-4530-4C4B-9453-751DF87D9D93}
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite
O42 - Logiciel: FormatFactory 3.0.1 - (.Free Time.) [HKLM][64Bits] -- FormatFactory
O42 - Logiciel: GIMP 2.8.2 - (.The GIMP Team.) [HKLM][64Bits] -- GIMP-2_is1
O42 - Logiciel: GanttProject - (.Pas de propriétaire.) [HKLM][64Bits] -- GanttProject
O42 - Logiciel: Gestionnaire pour appareils Windows Mobile - (.Microsoft Corporation.) [HKLM][64Bits] -- {626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Identity Card - (.Packard Bell.) [HKLM][64Bits] -- Identity Card
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM][64Bits] -- HDMI
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC}
O42 - Logiciel: Java 7 Update 10 (64-bit) - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F86417010FF}
O42 - Logiciel: Java 7 Update 13 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217013FF}
O42 - Logiciel: Java(TM) 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83216020F0}
O42 - Logiciel: Java(TM) 6 Update 26 - (.Sun Microsystems, Inc..) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF}
O42 - Logiciel: Java(TM) 6 Update 5 - (.Sun Microsystems, Inc..) [HKLM][64Bits] -- {3248F0A8-6813-11D6-A77B-00B0D0160050}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: Launch Manager - (.Packard Bell.) [HKLM][64Bits] -- LManager
O42 - Logiciel: Logiciel d'archivage WinRAR - (.Pas de propriétaire.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: MSVC80_x64 - (.Nokia.) [HKLM][64Bits] -- {68660049-8D48-427C-9FF7-139D8340CDC0}
O42 - Logiciel: MSVC80_x86 - (.Nokia.) [HKLM][64Bits] -- {212748BB-0DA5-46DE-82A1-403736DC9F27}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Malwarebytes Anti-Malware version 1.70.0.1100 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Mozilla Firefox 19.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 19.0 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: MuseScore 1.0 MuseScore score typesetter - (.Werner Schweer and Others.) [HKLM][64Bits] -- MuseScore
O42 - Logiciel: MyDefrag v4.3.1 - (.J.C. Kessels.) [HKLM][64Bits] -- MyDefrag v4.3.1_is1
O42 - Logiciel: Nero 9 Essentials - (.Nero AG.) [HKLM][64Bits] -- {3b4a19c2-e813-41b6-bdd1-e9792579b0e5}
O42 - Logiciel: Nero ControlCenter - (.Nero AG.) [HKLM][64Bits] -- {BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}
O42 - Logiciel: Nero ControlCenter - (.Nero AG.) [HKLM][64Bits] -- {F4041DCE-3FE1-4E18-8A9E-9DE65231EE36}
O42 - Logiciel: Nero DiscSpeed - (.Nero AG.) [HKLM][64Bits] -- {869200DB-287A-4DC0-B02B-2B6787FBCD4C}
O42 - Logiciel: Nero DiscSpeed Help - (.Nero AG.) [HKLM][64Bits] -- {CC019E3F-59D2-4486-8D4B-878105B62A71}
O42 - Logiciel: Nero DriveSpeed - (.Nero AG.) [HKLM][64Bits] -- {33CF58F5-48D8-4575-83D6-96F574E4D83A}
O42 - Logiciel: Nero DriveSpeed Help - (.Nero AG.) [HKLM][64Bits] -- {E5C7D048-F9B4-4219-B323-8BDB01A2563D}
O42 - Logiciel: Nero Express Help - (.Nero AG.) [HKLM][64Bits] -- {83202942-84B3-4C50-8622-B8C0AA2D2885}
O42 - Logiciel: Nero InfoTool - (.Nero AG.) [HKLM][64Bits] -- {FBCDFD61-7DCF-4E71-9226-873BA0053139}
O42 - Logiciel: Nero InfoTool Help - (.Nero AG.) [HKLM][64Bits] -- {20400DBD-E6DB-45B8-9B6B-1DD7033818EC}
O42 - Logiciel: Nero Installer - (.Nero AG.) [HKLM][64Bits] -- {E8A80433-302B-4FF1-815D-FCC8EAC482FF}
O42 - Logiciel: Nero Online Upgrade - (.Nero AG.) [HKLM][64Bits] -- {C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}
O42 - Logiciel: Nero StartSmart - (.Nero AG.) [HKLM][64Bits] -- {7748AC8C-18E3-43BB-959B-088FAEA16FB2}
O42 - Logiciel: Nero StartSmart Help - (.Nero AG.) [HKLM][64Bits] -- {2348B586-C9AE-46CE-936C-A68E9426E214}
O42 - Logiciel: Nero StartSmart OEM - (.Nero AG.) [HKLM][64Bits] -- {4D43D635-6FDA-4FA5-AA9B-23CF73D058EA}
O42 - Logiciel: NeroExpress - (.Nero AG.) [HKLM][64Bits] -- {595A3116-40BB-4E0F-A2E8-D7951DA56270}
O42 - Logiciel: PC Connectivity Solution - (.Nokia.) [HKLM][64Bits] -- {34610DE0-3C13-42CA-8E32-01FFA38AB6E8}
O42 - Logiciel: PDFCreator - (.Frank Heindörfer, Philip Chinery.) [HKLM][64Bits] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}
O42 - Logiciel: Package de pilotes Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0) - (.Nokia.) [HKLM][64Bits] -- FCEC33AD40CEA5E0FC4CEE6E42041A0DA189652D
O42 - Logiciel: Packard Bell InfoCentre - (.Packard Bell.) [HKLM][64Bits] -- Packard Bell InfoCentre
O42 - Logiciel: Packard Bell MyBackup - (.NewTech Infosystems.) [HKLM][64Bits] -- InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}
O42 - Logiciel: Packard Bell Power Management - (.Packard Bell.) [HKLM][64Bits] -- {3DB0448D-AD82-4923-B305-D001E521A964}
O42 - Logiciel: Packard Bell Recovery Management - (.Packard Bell.) [HKLM][64Bits] -- {7F811A54-5A09-4579-90E1-C93498E230D9}
O42 - Logiciel: Packard Bell Registration - (.Packard Bell.) [HKLM][64Bits] -- Packard Bell Registration
O42 - Logiciel: Packard Bell ScreenSaver - (.Packard Bell .) [HKLM][64Bits] -- Packard Bell Screensaver
O42 - Logiciel: Packard Bell Social Networks - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{64EF903E-D00A-414C-94A4-FBA368FFCDC9}
O42 - Logiciel: Packard Bell Social Networks - (.CyberLink Corp..) [HKLM][64Bits] -- {64EF903E-D00A-414C-94A4-FBA368FFCDC9}
O42 - Logiciel: Packard Bell Updater - (.Packard Bell.) [HKLM][64Bits] -- {EE171732-BEB4-4576-887D-CB62727F01CA}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {96AE7E41-E34E-47D0-AC07-1091A8127911}
O42 - Logiciel: Samsung PC Studio 7 - (.Samsung.) [HKLM][64Bits] -- Samsung PC Studio 7
O42 - Logiciel: Samsung PC Studio 7 - (.Samsung.) [HKLM][64Bits] -- {AB6F6C80-1C35-4672-BDEF-F26FF214C409}
O42 - Logiciel: SamsungConnectivityCableDriver - (.Samsung.) [HKLM][64Bits] -- {7E84FAC8-C518-40F9-9807-7455301D6D25}
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey
O42 - Logiciel: Uninstall 1.0.0.1 - (.Pas de propriétaire.) [HKLM][64Bits] -- Uninstall_is1
O42 - Logiciel: VLC media player 1.1.8 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player
O42 - Logiciel: Video Web Camera - (.SuYin.) [HKLM][64Bits] -- {6D9021DC-CF1B-4148-8C80-6D8E8A8A33EB}
O42 - Logiciel: Welcome Center - (.Packard Bell.) [HKLM][64Bits] -- Packard Bell Welcome Center
O42 - Logiciel: avast! Free Antivirus v7.0.1474.0 - (.AVAST Software.) [HKLM][64Bits] -- avast
O42 - Logiciel: neroxml - (.Nero AG.) [HKLM][64Bits] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}
O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726}
O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKLM][64Bits] -- uTorrent

---\\ HKCU & HKLM Software Keys
[HKCU\Software\ASIO]
[HKCU\Software\AVAST Software]
[HKCU\Software\Acer]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Google]
[HKCU\Software\AppDataLow\Software\JavaSoft]
[HKCU\Software\AppDataLow\Software\Macromedia]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Audacity]
[HKCU\Software\BitTorrent]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Cyberlink]
[HKCU\Software\DT Soft]
[HKCU\Software\DVDVideoSoft]
[HKCU\Software\Dritek]
[HKCU\Software\ERDAS]
[HKCU\Software\Earth Resource Mapping]
[HKCU\Software\FreeTime]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\Google]
[HKCU\Software\Haali]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\Licenses]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Macromedia]
[HKCU\Software\MainConcept (Adobe2)]
[HKCU\Software\MainConcept]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\MyDefrag]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\Norton]
[HKCU\Software\ODBC]
[HKCU\Software\OEM]
[HKCU\Software\PDFCreator]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\QuantumGIS]
[HKCU\Software\Realtek]
[HKCU\Software\Samsung]
[HKCU\Software\Skyline]
[HKCU\Software\Sonix]
[HKCU\Software\Suyin]
[HKCU\Software\Synaptics]
[HKCU\Software\Trolltech]
[HKCU\Software\Usbfix]
[HKCU\Software\Video Download Capture]
[HKCU\Software\WildTangent]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ej-technologies]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Acer]
[HKLM\Software\Audible]
[HKLM\Software\Canon]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Cyberlink]
[HKLM\Software\Google]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\OEM]
[HKLM\Software\OOBEOffer]
[HKLM\Software\OemSetup]
[HKLM\Software\PC Connectivity Solution]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SRS Labs]
[HKLM\Software\Samsung]
[HKLM\Software\Sonic]
[HKLM\Software\Synaptics]
[HKLM\Software\Waves Audio]
[HKLM\Software\Wow6432Node\AVAST Software]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\AdwCleaner]
[HKLM\Software\Wow6432Node\AppDataLow]
[HKLM\Software\Wow6432Node\Apple Inc.]
[HKLM\Software\Wow6432Node\Atheros Communications Inc.]
[HKLM\Software\Wow6432Node\Audible]
[HKLM\Software\Wow6432Node\AviSynth]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\CyberLink]
[HKLM\Software\Wow6432Node\DT Soft]
[HKLM\Software\Wow6432Node\DVDVideoSoft]
[HKLM\Software\Wow6432Node\Debug]
[HKLM\Software\Wow6432Node\Dritek]
[HKLM\Software\Wow6432Node\GNU]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\HaaliMkx]
[HKLM\Software\Wow6432Node\InstallShield]
[HKLM\Software\Wow6432Node\Insyde]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\JavaSoft]
[HKLM\Software\Wow6432Node\JreMetrics]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\Macrovision]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware (Trial)]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\Nero]
[HKLM\Software\Wow6432Node\NewTech Infosystems]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\OEM]
[HKLM\Software\Wow6432Node\OldTimer Tools]
[HKLM\Software\Wow6432Node\PC Connectivity Solution]
[HKLM\Software\Wow6432Node\PCSuite]
[HKLM\Software\Wow6432Node\PDFCreator]
[HKLM\Software\Wow6432Node\Packard Bell]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.]
[HKLM\Software\Wow6432Node\Realtek]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\SOFTWARE]
[HKLM\Software\Wow6432Node\Samsung]
[HKLM\Software\Wow6432Node\Skyline]
[HKLM\Software\Wow6432Node\Sonic]
[HKLM\Software\Wow6432Node\SuYin]
[HKLM\Software\Wow6432Node\Symantec]
[HKLM\Software\Wow6432Node\Systweak]
[HKLM\Software\Wow6432Node\VideoLAN]
[HKLM\Software\Wow6432Node\Volatile]
[HKLM\Software\Wow6432Node\Werner Schweer and Others]
[HKLM\Software\Wow6432Node\WildTangent]
[HKLM\Software\Wow6432Node\WinRAR]
[HKLM\Software\Wow6432Node\Windows]
[HKLM\Software\Wow6432Node\ej-technologies]
[HKLM\Software\Wow6432Node\mozilla.org]
[HKLM\Software\Wow6432Node]
~ Scan Softwares in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 07/02/2013 - 20:48:46 - [860,424] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 04/01/2013 - 18:17:50 - [2,984] ----D C:\Program Files (x86)\Adobe Download Assistant
O43 - CFD: 21/01/2012 - 14:47:12 - [2,316] ----D C:\Program Files (x86)\Apple Software Update
O43 - CFD: 07/02/2013 - 20:47:30 - [607,025] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 10/05/2010 - 07:35:23 - [0,064] ----D C:\Program Files (x86)\Cyberlink
O43 - CFD: 31/08/2012 - 12:37:00 - [25,775] ----D C:\Program Files (x86)\DAEMON Tools Lite
O43 - CFD: 29/08/2012 - 01:35:40 - [1,534] ----D C:\Program Files (x86)\Dll-Files.com Fixer
O43 - CFD: 22/07/2012 - 18:20:15 - [2,632] ----D C:\Program Files (x86)\DUB-E100_Win7_32_64bit
O43 - CFD: 26/11/2011 - 01:45:43 - [0,663] ----D C:\Program Files (x86)\DVDVideoSoft
O43 - CFD: 16/02/2013 - 22:47:24 - [135,748] ----D C:\Program Files (x86)\FreeTime
O43 - CFD: 24/11/2011 - 10:33:56 - [11,770] ----D C:\Program Files (x86)\GanttProjectPraha
O43 - CFD: 26/02/2012 - 01:30:09 - [354,892] ----D C:\Program Files (x86)\Google
O43 - CFD: 24/11/2011 - 10:30:57 - [58,271] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 10/05/2010 - 06:39:28 - [18,206] ----D C:\Program Files (x86)\Intel
O43 - CFD: 13/02/2013 - 03:29:08 - [4,590] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 13/02/2013 - 00:23:59 - [387,681] ----D C:\Program Files (x86)\java
O43 - CFD: 10/05/2010 - 07:27:21 - [7,286] ----D C:\Program Files (x86)\Launch Manager
O43 - CFD: 13/12/2010 - 11:17:27 - [0,085] ----D C:\Program Files (x86)\licenses
O43 - CFD: 07/01/2013 - 12:07:55 - [12,206] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 15/12/2011 - 07:44:15 - [0,001] ----D C:\Program Files (x86)\MediaCoder
O43 - CFD: 10/12/2012 - 10:47:06 - [0] ----D C:\Program Files (x86)\metronimo
O43 - CFD: 04/07/2011 - 11:31:05 - [561,105] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 14/05/2012 - 05:47:09 - [40,838] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 28/07/2010 - 08:45:36 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 20/12/2010 - 20:55:53 - [0,014] ----D C:\Program Files (x86)\Microsoft Visual Studio
O43 - CFD: 20/12/2010 - 20:51:42 - [1,323] ----D C:\Program Files (x86)\Microsoft Visual Studio 8
O43 - CFD: 22/12/2010 - 03:02:50 - [3,554] ----D C:\Program Files (x86)\Microsoft Works
O43 - CFD: 20/12/2010 - 20:55:14 - [7,789] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 27/02/2013 - 08:22:25 - [45,279] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 03/03/2013 - 12:35:55 - [0,212] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 20/12/2010 - 20:56:09 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 09/12/2010 - 09:11:06 - [0] ----D C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 10/02/2011 - 18:59:55 - [97,178] ----D C:\Program Files (x86)\MuseScore
O43 - CFD: 10/05/2010 - 07:44:08 - [360,150] ----D C:\Program Files (x86)\Nero
O43 - CFD: 10/05/2010 - 07:36:24 - [27,391] ----D C:\Program Files (x86)\NewTech Infosystems
O43 - CFD: 10/05/2010 - 07:48:16 - [0] ----D C:\Program Files (x86)\NortonInstaller
O43 - CFD: 20/12/2010 - 17:04:18 - [12,679] ----D C:\Program Files (x86)\OpenOffice.org 3
O43 - CFD: 28/07/2010 - 08:30:07 - [61,362] ----D C:\Program Files (x86)\Packard Bell
O43 - CFD: 15/12/2010 - 11:44:42 - [0,204] ----D C:\Program Files (x86)\Packard Bell Games
O43 - CFD: 15/01/2011 - 12:04:40 - [17,605] ----D C:\Program Files (x86)\PC Connectivity Solution
O43 - CFD: 07/10/2011 - 10:26:50 - [31,313] ----D C:\Program Files (x86)\PDFCreator
O43 - CFD: 13/12/2010 - 11:17:27 - [0,030] ----D C:\Program Files (x86)\readmes
O43 - CFD: 10/05/2010 - 07:23:52 - [11,251] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 13/12/2010 - 11:17:27 - [4,022] ----D C:\Program Files (x86)\redist
O43 - CFD: 14/07/2009 - 06:32:38 - [37,357] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 15/01/2011 - 12:04:51 - [57,677] ----D C:\Program Files (x86)\Samsung
O43 - CFD: 13/02/2011 - 19:44:28 - [0,705] ----D C:\Program Files (x86)\Shapefiles
O43 - CFD: 10/05/2010 - 07:35:23 - [24,636] ----D C:\Program Files (x86)\Social Networks
O43 - CFD: 10/05/2010 - 07:24:10 - [0] --H-D C:\Program Files (x86)\Temp
O43 - CFD: 14/07/2009 - 05:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 06/12/2010 - 17:41:19 - [79,554] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 28/07/2010 - 08:35:37 - [25,362] ----D C:\Program Files (x86)\VideoWebCamera
O43 - CFD: 28/07/2010 - 18:21:52 - [0,500] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 16/09/2011 - 12:06:32 - [141,128] ----D C:\Program Files (x86)\Windows Live
O43 - CFD: 04/07/2011 - 11:35:00 - [5,895] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 04/07/2011 - 11:35:00 - [4,791] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14/07/2009 - 06:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 04/07/2011 - 11:34:59 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 04/07/2011 - 11:35:00 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 04/07/2011 - 11:35:01 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 07/01/2011 - 19:30:52 - [3,707] ----D C:\Program Files (x86)\WinRAR
O43 - CFD: 06/03/2013 - 20:23:03 - [15,186] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 07/02/2013 - 20:48:41 - [65,100] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 21/01/2012 - 14:47:25 - [60,457] ----D C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 20/12/2010 - 20:55:53 - [0,089] ----D C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 15/12/2011 - 07:44:02 - [7,061] ----D C:\Program Files (x86)\Common Files\DVDVideoSoft
O43 - CFD: 24/11/2011 - 09:36:16 - [3,630] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 29/08/2012 - 01:59:24 - [34,606] ----D C:\Program Files (x86)\Common Files\Java
O43 - CFD: 28/07/2010 - 08:42:35 - [0,827] ----D C:\Program Files (x86)\Common Files\Macrovision Shared
O43 - CFD: 22/02/2012 - 18:42:32 - [227,308] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 10/05/2010 - 07:45:29 - [117,852] ----D C:\Program Files (x86)\Common Files\Nero
O43 - CFD: 15/01/2011 - 12:04:52 - [4,285] ----D C:\Program Files (x86)\Common Files\PCSuite
O43 - CFD: 28/07/2010 - 08:40:32 - [4,031] ----D C:\Program Files (x86)\Common Files\PX Storage Engine
O43 - CFD: 14/07/2009 - 04:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 28/07/2010 - 08:40:32 - [0,324] ----D C:\Program Files (x86)\Common Files\Sonic Shared
O43 - CFD: 14/07/2009 - 04:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 01/08/2012 - 12:11:09 - [42,254] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 28/07/2010 - 08:43:29 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 10/05/2010 - 07:34:30 - [0,000] ----D C:\ProgramData\Acer
O43 - CFD: 07/02/2013 - 20:48:41 - [854,009] ----D C:\ProgramData\Adobe
O43 - CFD: 07/02/2013 - 20:15:11 - [0,006] ----D C:\ProgramData\Adobe Systems
O43 - CFD: 21/01/2012 - 14:47:11 - [21,586] ----D C:\ProgramData\Apple
O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 29/12/2011 - 23:45:53 - [36,200] ----D C:\ProgramData\AVAST Software
O43 - CFD: 10/05/2010 - 07:36:35 - [0,087] ----D C:\ProgramData\BackupManager
O43 - CFD: 04/03/2013 - 21:48:16 - [0] ----D C:\ProgramData\boost_interprocess
O43 - CFD: 06/12/2010 - 14:32:11 - [0] --H-D C:\ProgramData\Bureau
O43 - CFD: 02/05/2011 - 09:58:48 - [0,166] --H-D C:\ProgramData\CanonBJ
O43 - CFD: 07/12/2010 - 20:15:49 - [0,004] ----D C:\ProgramData\CyberLink
O43 - CFD: 31/08/2012 - 12:50:43 - [0,002] ----D C:\ProgramData\DAEMON Tools Lite
O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 06/12/2010 - 14:32:11 - [0] --H-D C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Favorites
O43 - CFD: 23/04/2011 - 14:41:04 - [0,042] ----D C:\ProgramData\FLEXnet
O43 - CFD: 07/12/2010 - 02:52:02 - [0,486] ----D C:\ProgramData\Google
O43 - CFD: 15/01/2011 - 12:03:44 - [215,755] ----D C:\ProgramData\Installations
O43 - CFD: 01/02/2011 - 18:06:01 - [15,393] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 19/03/2011 - 15:58:58 - [0,002] ----D C:\ProgramData\McAfee
O43 - CFD: 06/12/2010 - 14:32:11 - [0] --H-D C:\ProgramData\Menu Démarrer
O43 - CFD: 25/03/2011 - 00:03:43 - [141,117] -S--D C:\ProgramData\Microsoft
O43 - CFD: 13/02/2013 - 03:12:13 - [0,406] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 06/12/2010 - 14:32:11 - [0] --H-D C:\ProgramData\Modèles
O43 - CFD: 30/04/2012 - 16:11:13 - [0,034] ----D C:\ProgramData\Mozilla
O43 - CFD: 10/05/2010 - 07:43:19 - [10,570] ----D C:\ProgramData\Nero
O43 - CFD: 06/12/2010 - 17:28:16 - [0,000] ----D C:\ProgramData\Norton
O43 - CFD: 10/05/2010 - 07:48:16 - [10,985] ----D C:\ProgramData\NortonInstaller
O43 - CFD: 06/12/2010 - 14:34:22 - [0,001] ----D C:\ProgramData\OEM
O43 - CFD: 10/05/2010 - 07:39:58 - [1,832] ----D C:\ProgramData\Packard Bell
O43 - CFD: 15/01/2011 - 12:12:41 - [0] ----D C:\ProgramData\PC Suite
O43 - CFD: 10/12/2012 - 10:49:00 - [0] ----D C:\ProgramData\Skyline
O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Start Menu
O43 - CFD: 13/12/2010 - 11:26:47 - [0,000] ----D C:\ProgramData\Sun
O43 - CFD: 10/05/2010 - 07:34:43 - [0,035] ----D C:\ProgramData\Temp
O43 - CFD: 14/07/2009 - 06:08:56 - [0] --H-D C:\ProgramData\Templates
O43 - CFD: 14/12/2010 - 11:55:09 - [0] ----D C:\ProgramData\VirtualizedApplications
O43 - CFD: 08/12/2010 - 20:51:34 - [7,845] ----D C:\ProgramData\Wild Tangent
O43 - CFD: 15/12/2010 - 11:47:43 - [1,710] ----D C:\ProgramData\WildTangent
O43 - CFD: 07/02/2013 - 20:48:47 - [13,150] ----D C:\Users\pauline\AppData\Roaming\Adobe
O43 - CFD: 08/08/2012 - 08:31:38 - [0] ----D C:\Users\pauline\AppData\Roaming\Apowersoft
O43 - CFD: 22/01/2012 - 05:39:03 - [0,020] ----D C:\Users\pauline\AppData\Roaming\Apple Computer
O43 - CFD: 11/08/2012 - 20:42:58 - [0,003] ----D C:\Users\pauline\AppData\Roaming\Audacity
O43 - CFD: 04/01/2013 - 18:17:55 - [0,010] ----D C:\Users\pauline\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
O43 - CFD: 31/08/2012 - 12:48:47 - [0,885] ----D C:\Users\pauline\AppData\Roaming\DAEMON Tools Lite
O43 - CFD: 10/12/2010 - 12:53:36 - [0,002] ----D C:\Users\pauline\AppData\Roaming\Faerie Solitaire
O43 - CFD: 12/12/2010 - 15:30:04 - [0,002] ----D C:\Users\pauline\AppData\Roaming\Gaijin Ent
O43 - CFD: 06/12/2010 - 14:36:41 - [0] ----D C:\Users\pauline\AppData\Roaming\Google
O43 - CFD: 06/12/2010 - 14:33:52 - [0] ----D C:\Users\pauline\AppData\Roaming\Identities
O43 - CFD: 06/12/2010 - 14:34:36 - [0] ----D C:\Users\pauline\AppData\Roaming\Intel Corporation
O43 - CFD: 06/12/2010 - 14:34:28 - [0,001] ----D C:\Users\pauline\AppData\Roaming\Macromedia
O43 - CFD: 01/02/2011 - 18:06:07 - [1,652] ----D C:\Users\pauline\AppData\Roaming\Malwarebytes
O43 - CFD: 14/07/2009 - 08:44:38 - [0] ----D C:\Users\pauline\AppData\Roaming\Media Center Programs
O43 - CFD: 06/09/2012 - 12:57:08 - [15,974] -S--D C:\Users\pauline\AppData\Roaming\Microsoft
O43 - CFD: 06/12/2010 - 17:40:28 - [71,673] ----D C:\Users\pauline\AppData\Roaming\Mozilla
O43 - CFD: 21/01/2012 - 18:01:47 - [0,000] ----D C:\Users\pauline\AppData\Roaming\MPEG Streamclip
O43 - CFD: 10/02/2011 - 19:00:53 - [0,001] ----D C:\Users\pauline\AppData\Roaming\MusE
O43 - CFD: 30/08/2012 - 19:32:22 - [0,041] ----D C:\Users\pauline\AppData\Roaming\Nero
O43 - CFD: 13/12/2010 - 11:21:51 - [2,253] ----D C:\Users\pauline\AppData\Roaming\OpenOffice.org
O43 - CFD: 15/01/2011 - 12:12:40 - [0,000] ----D C:\Users\pauline\AppData\Roaming\PC Suite
O43 - CFD: 15/01/2011 - 12:12:50 - [0,001] ----D C:\Users\pauline\AppData\Roaming\Samsung
O43 - CFD: 26/02/2011 - 23:24:35 - [0,012] ----D C:\Users\pauline\AppData\Roaming\Skyline
O43 - CFD: 07/12/2010 - 20:15:44 - [0,000] ----D C:\Users\pauline\AppData\Roaming\SNS
O43
0
Réponse 24 / 34
Fish66 Messages postés 18337 Statut Contributeur sécurité 1 318
 
Salut,
Parfait!
Le rapport est incomplet, héberge un nouveau rapport ZHPDiag mais en mode normal stp

@+
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 25 / 34
yopette
 
Ok. Mais pas aujourd'hui.

A demain
0
Réponse 26 / 34
yopette
 
Salut!

Vl'a le rapport.

Merci,
a tout
__________________________________________________________

http://pjjoint.malekal.com/files.php?id=ZHPDiag_20130308_d9o12p5r12x8
0
Réponse 27 / 34
Fish66 Messages postés 18337 Statut Contributeur sécurité 1 318
 
Bonsoir,
1/
Toujours dans le mode sans échec, fais ceci stp :
=> Copie tout le texte présent en gras ci-dessous (Sélectionne-le, clique droit dessus et choisis "Copier").



O51 - MPSK:{fb6c9e1c-f170-11e1-983b-28107b9f4777}\AutoRun\command. (...) -- E:\autoplay.exe (.not file.)
O87 - FAEL: "TCP Query User{57D89757-BF64-4090-AB9E-E27C7C68B397}C:\users\pauline\appdata\roaming\cacaoweb\cacaoweb.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\pauline\appdata\roaming\cacaoweb\cacaoweb.exe (.not file.) => Infection PUP (PUP.CacaoWeb)
O87 - FAEL: "UDP Query User{BC55277A-35DC-4D62-90C2-2A4EA9CAA03B}C:\users\pauline\appdata\roaming\cacaoweb\cacaoweb.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\pauline\appdata\roaming\cacaoweb\cacaoweb.exe (.not file.) => Infection PUP (PUP.CacaoWeb)




=> Puis lance ZHPFix depuis le raccourci situé sur ton Bureau.
(Sous Vista/Win7, il faut cliquer droit sur le raccourci de ZHPFix et choisir Exécuter en tant qu'administrateur)

=> Une fois ZHPFix ouvert, clique sur le bouton "Coller le presse-papier".

=> Dans l'encadré principal, tu verras donc les lignes que tu as copié précédemment apparaître. Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.

=> Clique sur "GO" pour lancer le nettoyage. Laisse l'outil travailler et ne touche à rien.

=> Une fois terminé, copie-colle le rapport dans ton prochain message.

2/ Ensuite
Redémarre ton PC en mode normal puis tu effectues les étapes ci-dessous ; 
Updatechecker :

Téléchage updatechecker pour t'indiquer les logiciels qui ne sont pas à jour et te permet aussi d'effectuer ces mises à jour
Tu peux l'utiliser une fois par semaine
===========================================
**Nettoyage 

Suppression des outils de désinfections:
Télecharge Delfix sur ton bureau :

<<< ICI >>> ou <<< ICI >>>

* Coche la case suivante :

=> Supprimer les outils de désinfection (coché par défaut)

* Clique ensuite sur Exécuter puis patiente pendant le processus de suppression.
* Lorsque les procédures seront terminées, l'outil va se fermer et disparaître du bureau
* Un rapport est sauvegardé dans le presse-papier : il te suffit de faire un clic droit et "coller" dans ta prochaine réponse pour me poster le rapport

===========================================        
<code>Défragmentation : :

Défragmente tes disques dur par defraggler
Tu peux lutiliser une fois par trimestre
=========================================== 
 Vacciner les supports amovibles :  :

*Télécharge : MKV (créé par El Desaparecido) sur ton Bureau.
*Si ton antivirus affiche une alerte, ignore-la et désactive l'antivirus temporairement.
*Branche toutes tes sources de données externes à ton PC (clé USB, disque dur externe, etc...) sans les ouvrir.
*Double clique sur MKV.exe.
*Clique sur Vacciner.

=========================================== 

Nettoyage des fichiers et des clés de registre :

* Télécharge et installe CCleaner version Slim
* Lance-le.(clic droit "en tant qu'administrateur" pour Vista et Seven) Va dans Options puis
* Avancé et décoche la case Effacer uniquement les fichiers etc....
* Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.
* Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs tant de fois qu il en trouve a l analyse .
** Aide ici : https://www.malekal.com/tutoriel-ccleaner/
Tu peux utiliser Ccleaner une fois par semaine

=========================================== 
Purger les points de restauration système:


* Désactive et réactive la restauration de système en suivant les procédures indiquées dans ces liens :

Windows XP

Windows Vista

Windows 7

* Après avoir vidé la restauration du système, il est nécessaire de créer un nouveau point de restauration ...

===========================================
Conseils :
1/ Je te conseille d'utiliser le navigateur Firefox et d'installer les modules
complémentaires WOT pour t'indiquer les sites douteux et Adblock plus pour bloquer les publicités...

2/ Aussi tu peux garder Malwarebytes et l'utiliser aussi une fois par semaine.

3/ Un peu de lecture :
* Les dangers du Peer-To-Peer, Emule etc..
* Comment Sécuriser son ordinateur...
*Pourquoi et comment je me fais infecter
*pourquoi maintenir son navigateur à jour
0
Réponse 28 / 34
yopette
 
l'apéro du vendredi m'a touché...
Je verrais ça demain.
Là je risque de faire des petites erreurs de manip!
0
Réponse 29 / 34
yopette
 
Rapport de ZHPFix 1.4.01 par Nicolas Coolman, Update du 02/03/2013
Fichier d'export Registre :
Run by pauline at 09/03/2013 09:58:02
High Elevated Privileges : OK
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Corbeille vidée

========== Clé(s) du Registre ==========
ABSENT CLSID MPSK: {fb6c9e1c-f170-11e1-983b-28107b9f4777}

========== Valeur(s) du Registre ==========
ABSENT TCP Query User{57D89757-BF64-4090-AB9E-E27C7C68B397}C:/users/pauline/appdata/roaming/cacaoweb/cacaoweb.exe
ABSENT UDP Query User{BC55277A-35DC-4D62-90C2-2A4EA9CAA03B}C:/users/pauline/appdata/roaming/cacaoweb/cacaoweb.exe


========== Récapitulatif ==========
1 : Clé(s) du Registre
2 : Valeur(s) du Registre


End of clean in 00mn 00s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 03/03/2013 20:17:02 [81580]
C:\ZHP\ZHPFix[R2].txt - 03/03/2013 22:12:24 [1916]
C:\ZHP\ZHPFix[R3].txt - 09/03/2013 09:56:34 [966]
C:\ZHP\ZHPFix[R4].txt - 09/03/2013 09:57:38 [1015]
C:\ZHP\ZHPFix[R5].txt - 09/03/2013 09:58:02 [1016]
0
Réponse 30 / 34
yopette
 
J'ai fait delfix avant l'update.
'ose espérer que c'est pas grave.

Delfix a t'il enlevé uniquement les logiciels qu'ont à installés ensemble ou aussi ceux que 'avais installé avant la manip?

________________________________________________________
# DelFix v10.1 - Rapport créé le 09/03/2013 à 10:02:20
# Mis à jour le 23/02/2013 par Xplode
# Nom d'utilisateur : pauline - PAULINE-PC

~ Suppression des outils de désinfection ...

Supprimé : C:\USBFix
Supprimé : C:\_OTM
Supprimé : C:\ZHP
Supprimé : C:\Program Files (x86)\ZHPDiag
Supprimé : C:\AdwCleaner[R1].txt
Supprimé : C:\AdwCleaner[R2].txt
Supprimé : C:\AdwCleaner[S1].txt
Supprimé : C:\UsbFix [Clean 1] PAULINE-PC.txt
Supprimé : C:\Users\pauline\Desktop\ZHPDiag.txt
Supprimé : C:\Users\pauline\Desktop\ZHPFixReport.txt
Supprimé : C:\Users\Public\Desktop\MBRCheck.lnk
Supprimé : C:\Users\Public\Desktop\ZHPDiag.lnk
Supprimé : C:\Users\Public\Desktop\ZHPFix.lnk
Supprimé : C:\Users\pauline\Downloads\adwcleaner.exe
Supprimé : C:\Users\pauline\Downloads\OTM.exe
Supprimé : C:\Users\pauline\Downloads\UsbFix.exe
Supprimé : C:\Users\pauline\Downloads\ZHPDiag2.exe
Supprimée : HKCU\Software\USBFix
Supprimée : HKLM\SOFTWARE\OldTimer Tools
Supprimée : HKLM\SOFTWARE\AdwCleaner
Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\USBFix
Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1

########## - EOF - ##########
0
Réponse 31 / 34
yopette
 
pOur défragmenter j'ai "My Defrag", est ce que c'est bon?

Est y'a t-il une différence entre ccleanner et ccleaner slim?
Ou ma version suffit-elle?
0
Réponse 32 / 34
yopette
 
Il ne se passe rien quand je lance update checker, je l'ai déjà réinstallé une fois.
Apparemment un problème de compatibilité, windows me propose de résoudre les problèmes de compatibilité, mais ça donne rien jusque là.
0
Réponse 33 / 34
Fish66 Messages postés 18337 Statut Contributeur sécurité 1 318
 
Bonsoir,
* Delfix pour supprimer les outils de désinfection
* Concernant Ccleaner, ta version suffit. (Ccleaner version Slim ne propose pas d'installer des toolbars c'est la seule différence)
* Il suffit de défragmenter ton PC, si tu n'as pas de problème avec : "My Defrag", garde le!
* Pour mettre à jour tes logiciels tu peux essayer avec : [ https://software.informer.com/ software.informer]
-----------------------------
Sois prudent et bon surf ... :-)
Si tu n'as pas de souci pense à mettre ton sujet comme résolu

@+
0
Réponse 34 / 34
yopette
 
Ok j''ai bien tout noté et conservez les infos.

Tout fonctionne nickel.

Merci pour l'accompagnement.

tcho!
0

Discussions similaires

Méssage Firefox ''Couldn't load XPCOM''
pistouri -
pistouri -

0 réponse