démarrage suspect Résolu/Fermé

Question

Bonjour, 



Configuration: Windows XP / Firefox 19.0

Lorsque je démarre j'ai ma souris qui réagit en retard ou presque en différé lorsque le bureau est affiché avec la barre des tâches et les éléments y afférents.
Je suspecte une infiltration à distance , de toute façon cela me paraît étrange je fais  quand même un hitjackthis au cas ou car même adw cleaner ne trouve rien de spécial et malware avait trouvé un adware mais le problème persiste.


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:48:14, on 02/03/2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\PROGRA~1\AVG\AVG2013\avgrsx.exe
C:\Program Files\AVG\AVG2013\avgcsrvx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Accelerer PC\PCSUService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG2013\avgidsagent.exe
C:\Program Files\CheckPoint\ZAForceField\ForceField.exe
C:\Program Files\AVG\AVG2013\avgwdsvc.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\AVG\AVG2013\avgnsx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVG\AVG2013\avgemcx.exe
C:\WINDOWS\System32\StkCSrv.exe
C:\Program Files\Fichiers communs\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe
C:\Program Files\Fichiers communs\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Samsung\Samsung EDS\EDSAgent.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe
C:\Program Files\Samsung\Samsung Battery Manager\BatteryManager.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\AVG\AVG2013\avgui.exe
C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe
C:\program files\real\realplayer\update\realsched.exe
C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\SAMSUNG\MagicKBD\MagicKBD.exe
C:\Program Files\SAMSUNG\MagicKBD\PerformanceManager.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\igfxext.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.iminent.com/?appId=9EEB36E0-7CAF-4235-8D63-A0A4C640445D
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [EDS] C:\Program Files\Samsung\Samsung EDS\EDSAgent.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [DMHotKey] C:\Program Files\Samsung\Easy Display Manager\DMLoader.exe
O4 - HKLM\..\Run: [SUPBackground] C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe
O4 - HKLM\..\Run: [BatteryManager] C:\Program Files\Samsung\Samsung Battery Manager\BatteryManager.exe
O4 - HKLM\..\Run: [MagicKeyboard] C:\Program Files\SAMSUNG\MagicKBD\PreMKBD.exe
O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [ISW] "C:\Program Files\CheckPoint\ZAForceField\ForceField.exe" /icon="hidden"
O4 - HKLM\..\Run: [ZoneAlarm] "C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\program files\real\realplayer\update\realsched.exe"  -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Envoyer à Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre7\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre7\bin\jp2iexp.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: c:\docume~1\alluse~1\applic~1\browse~1\261095~1.52\{c16c1~1\browse~1.dll
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: ZoneAlarm LTD Toolbar IswSvc (IswSvc) - Check Point Software Technologies - C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: PC Speed Up Service (PCSUService) - Unknown owner - C:\Program Files\Accelerer PC\PCSUService.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Syntek AVStream USB2.0 WebCam Service (StkSSrv) - Syntek America Inc. - C:\WINDOWS\System32\StkCSrv.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: vToolbarUpdater14.0.1 - Unknown owner - C:\Program Files\Fichiers communs\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe
O23 - Service: vToolbarUpdater14.2.0 - Unknown owner - C:\Program Files\Fichiers communs\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe

jacques.gache · Answer

bonjour, passes adwcleaner mode suppression et puis postes un zhpdiag pour voire si pas autre chose de reste !!

1) passes adwcleaner mode SUPPRESSION

 Télécharge AdwCleaner ( d'Xplode ) sur ton bureau.

si problème avec la sécurité de internet explorer regarde se lien : https://toolslib.net

Lance le, clique sur [Suppression] puis patiente le temps du scan.

Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse.

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt




2) postes un zhpdiag pour y voire plus 


 Ouvre ce lien et télécharge ZHPDiag : 

https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/


Enregistres le sur ton Bureau. 

Une fois le téléchargement achevé

pour XP, double-clique sur ZHPDiag 

pour Vista,et seven tu  fais un clic droit sur l'icône et exécute en tant qu'administrateur. 

N'oublies pas de cocher la case qui permet de mettre un raccourci sur le Bureau. 

/|\ l'outil a créé 2 icônes ZHPDiag et ZHPFix. 

Double cliques sur le raccourci ZHPDiag sur ton Bureau pour XP sinon clique droit et en tant que administrateur !! 

Cliques sur la loupe pour lancer l'analyse. 

 si tu as un message te demandant la validation pour SIGCHECK acceptes avec OK cela est pour nous faire  un rapport plus complet et pouvoir en faire une lecture plus approfondis 

Laisses l'outil travailler, il peut être assez long 

A la fin de l'analyse,clique sur l'appareil photo et enregistre le rapport sur ton Bureau. 


Fermes ZHPDiag en fin d'analyse. 


Pour me le transmettre clique sur ce lien : 

https://www.cjoint.com/ 


Clique sur Parcourir et cherche le fichier C:\Documents and settings\le_nom_de_ta_session\bureau\.ZHPDiag.txt

ou directement en choisissant bureau et  ZHPDiag.txt clique dessus 

Clique sur Ouvrir. 

Clique sur "Cliquez ici pour déposer le fichier". 

Un lien de cette forme : 

http://cjoint.com/data/0KAoeRbq7Szgg.htm

est ajouté dans la page. 

Copie ce lien dans ta réponse. 


et si problème passe par celui ci :   http://pjjoint.malekal.com/

abdouchefr · Answer

bonsoir et merci

ci joint le rapport adwcleaner:

# AdwCleaner v2.113 - Rapport créé le 02/03/2013 à 23:23:24
# Mis à jour le 23/02/2013 par Xplode
# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)
# Nom d'utilisateur : Abdesalem Derdar - YOUR-10A2E35C12
# Mode de démarrage : Normal
# Exécuté depuis : C:\Documents and Settings\Abdesalem Derdar\Mes documents\Téléchargements\adwcleaner(1).exe
# Option [Recherche]


***** [Services] *****


***** [Fichiers / Dossiers] *****

Dossier Présent : C:\Program Files\Fichiers communs\AVG Secure Search

***** [Registre] *****


***** [Navigateurs] *****

-\ Internet Explorer v8.0.6001.18702

[OK] Le registre ne contient aucune entrée illégitime.

-\ Mozilla Firefox v19.0 (fr)

Fichier : C:\Documents and Settings\Abdesalem Derdar\Application Data\Mozilla\Firefox\Profiles
zttb45z.default\prefs.js

[OK] Le fichier ne contient aucune entrée illégitime.

*************************

AdwCleaner[R1].txt - [38281 octets] - [03/02/2013 01:17:58]
AdwCleaner[R2].txt - [7370 octets] - [08/02/2013 01:04:33]
AdwCleaner[R3].txt - [1373 octets] - [09/02/2013 02:16:00]
AdwCleaner[R4].txt - [1488 octets] - [16/02/2013 02:19:04]
AdwCleaner[R5].txt - [40214 octets] - [27/02/2013 00:58:36]
AdwCleaner[R6].txt - [4462 octets] - [28/02/2013 00:45:43]
AdwCleaner[R7].txt - [1299 octets] - [02/03/2013 23:23:24]
AdwCleaner[S1].txt - [3557 octets] - [08/04/2012 22:26:54]
AdwCleaner[S2].txt - [38347 octets] - [03/02/2013 01:18:24]
AdwCleaner[S3].txt - [7662 octets] - [08/02/2013 01:05:08]
AdwCleaner[S4].txt - [1443 octets] - [09/02/2013 02:16:20]
AdwCleaner[S5].txt - [1558 octets] - [16/02/2013 02:19:39]
AdwCleaner[S6].txt - [40385 octets] - [27/02/2013 00:59:14]
AdwCleaner[S7].txt - [4565 octets] - [28/02/2013 00:46:17]

########## EOF - C:\AdwCleaner[R7].txt - [1781 octets] ##########


et ci-joint le rapport  ZHPdiag:

https://www.cjoint.com/c/CCcxJZQ9avj

et merci encore

abdouchefr · Answer

re 

ok pour le malwarbytes je le ferai dès demain mais dois-je refaire celui de adwcleaner sans supression et juste recher?

abdouchefr · Answer

bonjour

voici le rapport malwarbytes:




Malwarebytes Anti-Malware (Essai) 1.70.0.1100
www.malwarebytes.org

Version de la base de données: v2013.03.02.13

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Abdesalem Derdar :: YOUR-10A2E35C12 [administrateur]

Protection: Activé

03/03/2013 13:43:31
mbam-log-2013-03-03 (13-43-31).txt

Type d'examen: Examen complet (C:\|D:\|)
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 244253
Temps écoulé: 1 heure(s), 17 minute(s), 8 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)

Fichier(s) détecté(s): 0
(Aucun élément nuisible détecté)

(fin)

abdouchefr · Answer

slt

voici le diag ZHPDiag:
http://cjoint.com/?CCdvh3gx7Yv
et le rapport adwcleaner lancé en mode supression

# AdwCleaner v2.113 - Rapport créé le 03/03/2013 à 21:09:25
# Mis à jour le 23/02/2013 par Xplode
# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)
# Nom d'utilisateur : Abdesalem Derdar - YOUR-10A2E35C12
# Mode de démarrage : Normal
# Exécuté depuis : C:\Documents and Settings\Abdesalem Derdar\Mes documents\Téléchargements\adwcleaner(2).exe
# Option [Suppression]


***** [Services] *****


***** [Fichiers / Dossiers] *****

Supprimé au redémarrage : C:\Program Files\Fichiers communs\AVG Secure Search

***** [Registre] *****


***** [Navigateurs] *****

-\ Internet Explorer v8.0.6001.18702

[OK] Le registre ne contient aucune entrée illégitime.

-\ Mozilla Firefox v19.0 (fr)

Fichier : C:\Documents and Settings\Abdesalem Derdar\Application Data\Mozilla\Firefox\Profiles
zttb45z.default\prefs.js

[OK] Le fichier ne contient aucune entrée illégitime.

*************************

AdwCleaner[R1].txt - [38281 octets] - [03/02/2013 01:17:58]
AdwCleaner[R2].txt - [7370 octets] - [08/02/2013 01:04:33]
AdwCleaner[R3].txt - [1373 octets] - [09/02/2013 02:16:00]
AdwCleaner[R4].txt - [1488 octets] - [16/02/2013 02:19:04]
AdwCleaner[R5].txt - [40214 octets] - [27/02/2013 00:58:36]
AdwCleaner[R6].txt - [4462 octets] - [28/02/2013 00:45:43]
AdwCleaner[R7].txt - [1850 octets] - [02/03/2013 23:23:24]
AdwCleaner[S1].txt - [3557 octets] - [08/04/2012 22:26:54]
AdwCleaner[S2].txt - [38347 octets] - [03/02/2013 01:18:24]
AdwCleaner[S3].txt - [7662 octets] - [08/02/2013 01:05:08]
AdwCleaner[S4].txt - [1443 octets] - [09/02/2013 02:16:20]
AdwCleaner[S5].txt - [1558 octets] - [16/02/2013 02:19:39]
AdwCleaner[S6].txt - [40385 octets] - [27/02/2013 00:59:14]
AdwCleaner[S7].txt - [4565 octets] - [28/02/2013 00:46:17]
AdwCleaner[S8].txt - [427 octets] - [03/03/2013 21:00:19]
AdwCleaner[S9].txt - [1850 octets] - [03/03/2013 21:09:25]

########## EOF - C:\AdwCleaner[S9].txt - [1910 octets] ##########

abdouchefr · Answer

le pc démarre comme d'habitude: bureau qui s'affiche ensuite la barre des tâches qui met du temps et du coup un flash pour faire réapparaitre la barre des tâches sur fond noir (très rapidement) , je suspecte une infiltration lors d'une fermeture de windows un message suivant m'affichait: "un autre utilisateur etc.... "comme quoi quelqu'un d'autre naviguait dans mon système bref voici le "fixreport"

Rapport de ZHPFix 1.4.01 par Nicolas Coolman, Update du 02/03/2013
Fichier d'export Registre : 
Run by Abdesalem Derdar at 03/03/2013 22:35:33
High Elevated Privileges : OK
Windows XP Home Edition Service Pack 3 (Build 2600)

Corbeille vidée

========== Clé(s) du Registre ==========
ABSENT Key: Winlogon Notify: crypt32chain. (Microsoft Corporation
ABSENT Key: Winlogon Notify: cryptnet. (Microsoft Corporation
ABSENT Key: Winlogon Notify: sclgntfy. (Microsoft Corporation
SUPPRIME Key: SearchScopes :{A531D99C-5A22-449b-83DA-872725C6D0ED}
ABSENT Key: \Software\Classes\Installer\Products\9EC6D81181F59F2459A84176A626F9ED". (Iminent..) - C: \ WINDOWS \ Installer \ {118D6CE9-5F18-42F9-958A-14676A629FDE} \ imbooster.ico

========== Valeur(s) du Registre ==========
SUPPRIME FirewallRaz (SP) : %windir%\Network Diagnostic\xpnetdiag.exe
SUPPRIME FirewallRaz (SP) : %windir%\system32\sessmgr.exe
SUPPRIME FirewallRaz (DP) : %windir%\Network Diagnostic\xpnetdiag.exe
SUPPRIME FirewallRaz (DP) : %windir%\system32\sessmgr.exe
Aucune valeur présente dans la clé d'exception du registre (FirewallRaz)

========== Dossier(s) ==========
Aucun dossiers CLSID Local utilisateur vide
SUPPRIME Temporaires Windows
SUPPRIME Flash Cookies

========== Fichier(s) ==========
ABSENT File: c: \ windows \ system32 \ crypt32.dll
ABSENT File: c: \ windows \ system32 \ cryptnet.dll
ABSENT File: c: \ windows \ system32 \ sclgntfy.dll
SUPPRIME Temporaires Windows
SUPPRIME Flash Cookies

========== Restauration Système ==========
Point de restauration du système créé avec succès

========== Autre ==========
NON TRAITE R0 - HKCU \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Start Page
NON TRAITE [HKCU \ Software \ Microsoft \ Internet Explorer \ SearchScopes \ {A531D99C-5A22-449b-83DA-872725C6D0ED}]
NON TRAITE [HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Explorer \ MenuOrder \ Start Menu2 \ Programs \ PriceGong]


========== Récapitulatif ==========
5 : Clé(s) du Registre
5 : Valeur(s) du Registre
3 : Dossier(s)
5 : Fichier(s)
1 : Restauration Système
3 : Autre


End of clean in 00mn 14s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 03/03/2013 22:35:33 [2201]

abdouchefr · Answer

rapport delfix:
https://pjjoint.malekal.com/files.php?id=20130303_j11r6v6t8x15

abdouchefr · Answer

pour le registre ccleaner enregistré sur le bureau il ne s'ouvre pas .....???? c'est normal ?

abdouchefr · Answer

"voulez-vous vraiment ajouter les informations contenu dans C/Mes documents and setting etc... au registre" voici ce qu'l me répond lorsque j'essaie d'ouvrir l'icone registre sur le bureau une fois l'opération ccleaner terminée malgré que je l'ai téléchargé.

abdouchefr · Answer

non une fois le manipulation ccleaner  terminée j'ai le petit icone de registre concernant la sauvegarde c'est de celle-ci dont je te parle.......mais au final ça n'a pas changé le pc reste avec les mêmes symptômes , j'ai l'impression que j'ai été infiltré lors d'une visite d'un site trop dérangeant alors que je ne faisais que de consulter c'est depuis là que j'ai eu ces doutes qui se sont confirmés avec une fermeture du système alors que quelqu'un d'autre l'exploitait en parallèle et la souris qui par moment mais rarement bouge en différé ou 1 a 2 seconde après....

abdouchefr · Answer

voici un rapport hitjackthis:
( il concerne mon pc de bureau ) je n'arrive plus a configurer un réseau internet même avec le CD d'installation de fournisseur et encore moins avec liaison téléphone via un technicien du fournisseur. Le problème est lié à l'ordinateur car avec celui du portable j'arrive a me connecter par wifi. Windows lors d'une tentative de restauration n'arrive pas et me dit que Windows n'arrive pas à entrer dans un fichier ou une variante , pareil pour la mise a jour.

Enfin merci quand même si tu ne vois pas de solution mais le formatage pour moi je préfère cela en dernier recours mais vraiment dernier recours:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:50:54, on 02/02/2013
Platform: Unknown Windows (WinNT 6.01.3505 SP1)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Windows\PixArt\Pac207\Monitor.exe
C:\Users\Abdouche\AppData\Local\Lollipop\Lollipop.exe
C:\Users\Abdouche\AppData\Local\Smartbar\Application\SnapDo.exe
C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
C:\Program Files (x86)\AVG Secure Search\vprot.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Ask.com\Updater\Updater.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files (x86)\AVG\AVG2013\avgui.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Real\RealPlayer\Updateealsched.exe
C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.acer-group.com/selection.html?b=ACEW&l=040c&m=el1352&r=17360610z306pe455v105r45m1s24p
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://search.safefinder.com/?st=ds&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://search.safefinder.com/?st=ds&q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://search.safefinder.com/?st=hp&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.acer-group.com/selection.html?b=ACEW&l=040c&m=el1352&r=17360610z306pe455v105r45m1s24p
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/?crg=3.1010000&st=18&barid={6BB3B080-FFFA-11E0-A714-DC8BAB3629C1}
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = https://search.safefinder.com/?st=ds&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://search.safefinder.com/?st=ds&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.8.0.7\bh\BabylonToolbar.dll (file missing)
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IEpbrowserrecordplugin.dll
O2 - BHO: Snap.DoEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - mscoree.dll (file missing)
O2 - BHO: Web Assistant Helper - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\Web Assistant\Extension32.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll (file missing)
O2 - BHO: Incredibar.com Helper Object - {6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\14.0.2.14\AVG Secure Search_toolbar.dll
O2 - BHO: DealPly - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - C:\Program Files (x86)\DealPly\DealPlyIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: WebAdSystemBho - {EC8FCB46-9F27-476E-B26A-93989316D2FB} - C:\Program Files (x86)\WebAdSystem\BrowserExtensions\internetexplorer\WebAdSystemBho.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\14.0.2.14\AVG Secure Search_toolbar.dll
O3 - Toolbar: Incredibar Toolbar - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.8.0.7\BabylonToolbarTlbr.dll (file missing)
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Snap.Do - {ae07101b-46d4-4a98-af68-0333ea26e113} - mscoree.dll (file missing)
O3 - Toolbar: ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SweetIM] C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "c:\program files (x86)ealealplayer\Updateealsched.exe" -osboot
O4 - HKLM\..\Run: [ZoneAlarm] "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe"
O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Neuf Media Center] "C:\Program Files (x86)\SFR\Media Center\MediaCenter.exe"
O4 - HKCU\..\Run: [lollipop] "c:\users\abdouche\appdata\local\lollipop\lollipop.exe" lollipop
O4 - HKCU\..\Run: [Browser Infrastructure Helper] C:\Users\Abdouche\AppData\Local\Smartbar\Application\SnapDo.exe startup
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll/cmsidewiki.html
O8 - Extra context menu item: Rechercher sur le Web - C:\Program Files (x86)\SweetIM\Toolbars\Internet Exploreresources\menuext.html
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O13 - Gopher Prefix: 
O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} (WRC Class) - http://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (file missing)
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\14.0.1\ViProtocol.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files (x86)\AVG\AVG10\Toolbar\ToolbarBroker.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcAppFlt.exe
O23 - Service: GRegService (Greg_Service) - Acer Incorporated - C:\Program Files (x86)\eMachines\Registration\GregHSRW.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ZoneAlarm LTD Toolbar IswSvc (IswSvc) - Check Point Software Technologies - C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32
etlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcIp.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32
vvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Updater Service - Acer - C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater14.0.1 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Web Assistant Updater - Unknown owner - C:\Program Files\Web Assistant\ExtensionUpdaterService.exe
O23 - Service: WebOptimizer - Unknown owner - C:\Windows\system32\dmwu.exe (file missing)

abdouchefr · Answer

Bonjour


J'ai désinstaller l'antivirus et le firewall zone alarm pour essayer de faire une restauration du système mais rien a faire il m'affiche qu'il ne peut pas accéder à un fichier .....?
Donc j'ai fait par l'intermédiaire de mon netbook les opérations demandées étant donné que l'accès internet est limité et que la configuration n'est accessible sur mon pc de bureau et merci encore

voici le lien pour le rapport du ZHPDiag:

 https://pjjoint.malekal.com/files.php?id=ZHPDiag_20130315_w5j11i13v8c15

et le rapport adwcleaner: mode directement suppression

# AdwCleaner v2.113 - Rapport créé le 15/03/2013 à 17:46:49
# Mis à jour le 23/02/2013 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : Abdouche - ABDOUCHE-PC
# Mode de démarrage : Normal
# Exécuté depuis : C:\Users\Abdouche\Downloads\adwcleaner.exe
# Option [Suppression]


***** [Services] *****


***** [Fichiers / Dossiers] *****

Supprimé au redémarrage : C:\Program Files (x86)\Common Files\AVG Secure Search

***** [Registre] *****


***** [Navigateurs] *****

-\ Internet Explorer v8.0.7601.17514

[OK] Le registre ne contient aucune entrée illégitime.

-\ Mozilla Firefox v19.0.2 (fr)

Fichier : C:\Users\Abdouche\AppData\Roaming\Mozilla\Firefox\Profiles\avs9duzp.default\prefs.js

[OK] Le fichier ne contient aucune entrée illégitime.

abdouchefr · Answer

avant de poursuivre je te rappelle que je réponds de mon netbook et donc par conséquent les procédures à suivre sur le pc de bureau se feront en transférant a chaque fois les rapports du pc bureau au netbook pour pouvoir te les envoyer ça ne pose aucun soucis technique alors .........................? Merci

abdouchefr · Answer

le temps et la santé sont les 2 choses que l'homme néglige dans sa vie : faut souffrir pour guérir..........non ? 

@ plus et merci encore pour ton dévouement

abdouchefr · Answer

slt

alors pour le redémarrage ça a l'air d'aller plus vite et voici le rapport pour ZHPfix: ( et plus bas le lien pour le nouveau ZHPDiag)

Rapport de ZHPFix 2013.3.9.1 par Nicolas Coolman, Update du 9/03/2013
Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-17-03-2013-01-17-54.txt
Run by Abdouche at 17/03/2013 01:17:53
High Elevated Privileges : OK
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Corbeille vidée

========== Logiciel(s) ==========
SUPPRIME Snap.Do
SUPPRIME WebAdSystem
SUPPRIME WebPlayerV2
SUPPRIME Webplayer 3.0

========== Clé(s) du Registre ==========
SUPPRIME [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{60DF47B6-5016-4DA4-AD7B-3CEC24FE7E6E}]
SUPPRIME [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A7039FE8-5B0F-4A15-8A76-8DDF0287C74E}]
SUPPRIME [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{77236F9C-987C-40EC-832B-5BD6181E4846}]
SUPPRIME Key: HKCU\Software\SweetIM
SUPPRIME Key*: HKLM\Software\WNLT
SUPPRIME Key: HKLM\Software\Wow6432Node\SweetIM
SUPPRIME Key*: HKLM\Software\Classes\Interface\{01947140-417F-46B6-8751-A3A2B8345E1A}
SUPPRIME Key*: HKLM\Software\Classes\Interface\{819FFE21-35C7-4925-8CDA-4E0E2DB94302}
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
SUPPRIME Key: HKLM\Software\Classes\Installer\Features\F479A18A22A86E3429341589FF57D81A
SUPPRIME Key: HKLM\Software\Classes\Installer\Products\F479A18A22A86E3429341589FF57D81A
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F479A18A22A86E3429341589FF57D81A
ABSENT Key: HKLM\Software\Wow6432Node\Classes\Installer\Features\F479A18A22A86E3429341589FF57D81A
ABSENT Key: HKLM\Software\Wow6432Node\Classes\Installer\Products\F479A18A22A86E3429341589FF57D81A
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
SUPPRIME Key: HKLM\Software\Wow6432Node\Microsoft\Tracing\offerbox_RASAPI32
SUPPRIME Key: HKLM\Software\Wow6432Node\Microsoft\Tracing\offerbox_RASMANCS
SUPPRIME Key: HKLM\Software\Wow6432Node\Microsoft\Tracing\OfferBoxHTTPProxy_RASAPI32
SUPPRIME Key: HKLM\Software\Wow6432Node\Microsoft\Tracing\OfferBoxHTTPProxy_RASMANCS
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3192AA38321C641458DBDAF83979D193
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8724E58E6C7D00C48A0D4F3345EB2C26
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB676B0E1B9EFA049B9F7DDDA9645734
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B31BBB0B825EDEF45AB0FE7099C68C81
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B471D8D7319336B4CA89374ED0D7B806
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BC30043663AA2CA4DA1DAA9CA5FDCC75
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FDC83385E6C239F4C876A77A37DF581D
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
ABSENT Key: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{77236F9C-987C-40EC-832B-5BD6181E4846}
ABSENT Key: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9937E55B-6331-4804-93EF-77E992F204BD}
SUPPRIME Key: HKLM\Software\Classes\Installer\Features\FA20CB7A821113A4CB8FA1E38E303D3B
SUPPRIME Key: HKLM\Software\Classes\Installer\Products\FA20CB7A821113A4CB8FA1E38E303D3B
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\FA20CB7A821113A4CB8FA1E38E303D3B
ABSENT Key: HKLM\Software\Wow6432Node\Classes\Installer\Features\FA20CB7A821113A4CB8FA1E38E303D3B
ABSENT Key: HKLM\Software\Wow6432Node\Classes\Installer\Products\FA20CB7A821113A4CB8FA1E38E303D3B
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156
SUPPRIME Key: \Software\Classes\Installer\Products\8EF9307AF0B551A4A867D8FD20787CE4
SUPPRIME Key: \Software\Classes\Installer\Features\8EF9307AF0B551A4A867D8FD20787CE4
ABSENT Key: \Software\Classes\Installer\Products\F479A18A22A86E3429341589FF57D81A
ABSENT Key: \Software\Classes\Installer\Products\FA20CB7A821113A4CB8FA1E38E303D3B

========== Valeur(s) du Registre ==========
ABSENT Valeur Standard Profile: FirewallRaz : 
ABSENT Valeur Domain Profile: FirewallRaz : 
SUPPRIME FirewallRaz (Domain) : NetPres-In-TCP-NoScope
SUPPRIME FirewallRaz (Domain) : NetPres-Out-TCP-NoScope
SUPPRIME FirewallRaz (None) : NetPres-WSD-In-UDP
SUPPRIME FirewallRaz (None) : NetPres-WSD-Out-UDP
SUPPRIME FirewallRaz (Public) : NetPres-In-TCP
SUPPRIME FirewallRaz (Public) : NetPres-Out-TCP
SUPPRIME FirewallRaz (None) : {5FBAE1F1-11C6-4EFB-8CC5-D990FC1A1201}
SUPPRIME FirewallRaz (Private) : {EC9EE1AB-112E-40EF-9697-E354746CBF68}
SUPPRIME FirewallRaz (Private) : {4347C53E-A43A-4BD5-ABAA-DDD698A405D1}
SUPPRIME FirewallRaz (Private) : TCP Query User{D87D6B0E-871A-465B-B146-2BE4E1CCDFCF}C:\program files (x86)\bitmania\bitmania.exe
SUPPRIME FirewallRaz (Private) : UDP Query User{53A5464B-3C7D-4B32-A26E-D68358ABDAB4}C:\program files (x86)\bitmania\bitmania.exe
SUPPRIME FirewallRaz (Private) : TCP Query User{38C9F4EF-20F9-4028-B3AC-8A8C562267D8}C:\program files (x86)\google\google earth pro\googleearth.exe
SUPPRIME FirewallRaz (Private) : UDP Query User{C79C2376-BC4A-4094-8B46-A8CB6C374F4E}C:\program files (x86)\google\google earth pro\googleearth.exe
SUPPRIME FirewallRaz (Private) : {C539C274-835B-49AC-82C4-B6968C25488A}
SUPPRIME FirewallRaz (Private) : {1BD7DD78-9AD2-4432-B7DD-D16C1F3A13F1}
SUPPRIME FirewallRaz (None) : {220A98AB-5076-45A4-A5E1-AF5479D5A662}
SUPPRIME FirewallRaz (Private) : {469E9506-7963-41C8-9E28-1AAB08ED8701}
SUPPRIME FirewallRaz (Private) : {94F3E034-9371-4300-A4AB-39FEDB6D2D97}
SUPPRIME FirewallRaz (Private) : {7BAB7886-5CD5-4288-B7EE-A114036270D3}
SUPPRIME FirewallRaz (Private) : {324C3A28-0D0D-4B5B-955A-02C1A5C4F8AC}
SUPPRIME FirewallRaz (Private) : {4B195BBC-1F37-459B-8412-EBA2D904ACF0}
SUPPRIME FirewallRaz (Private) : {47C68F25-20FB-4E03-BD01-0503B70845C5}

========== Dossier(s) ==========
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0001393C-0BB3-4EA8-92C8-6C03D644A0B8}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0002AC2A-A8F8-4D2C-A1FD-98E982E198B8}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{000C74F3-AB02-4DA9-BD78-7C817247EE92}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{00276BBF-A08A-4EFC-B00D-3C056322A8BF}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{00594BCA-1D55-4191-BEC5-FD4989D9DD34}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{00987F95-E523-45CD-BDD0-0E16C4C00B97}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{00DDD77C-2F78-4D4E-86A5-8AF98B0878DE}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{01333246-2C68-4696-81A5-0DFABB2E5A5E}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0185CFA5-5B95-4543-9088-8F65D1B3007F}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0225B67A-2B6F-4AC7-AD09-C5A653B8E5E7}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{027353F4-BAB0-43F3-95C1-56C56D35D45D}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{027E63FA-7483-4B4D-BFD5-7F91E3B63AD3}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{02A638BB-09D1-41F6-92FB-2377CC7C1897}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{03038788-3299-469F-AB89-EDF0B16BC629}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0324E5D3-2B1B-45D8-A7C0-F1943BCF051F}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{037AFB66-EF2E-4EC7-97D4-3FD0D59B38F3}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{03960C9C-6926-4C17-9135-D5F31CA0073C}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{03A09FAA-469D-4AF4-A794-2F7218378FE4}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{03D53C6B-5D10-4D20-8E1C-C48AAC0D32C6}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{03EB1B88-30A9-4EDC-A96A-9132F6475A21}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{03FA0FA7-1FD6-4DF7-84BA-EDF430EFD864}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{040CF27C-6D62-49D7-8BFF-C105EC7E7AAC}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{043E39A6-C15A-4984-82E7-ADD81BD5758E}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{044CFC2B-8653-4504-A341-D82B387C40C1}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{04760B57-9E2C-4409-9F5E-36598732418B}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0481548E-281B-4F3F-BA11-3A2F16189054}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{04DE23A6-B445-4FD7-9205-48C645E0C311}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{04E856B0-84AE-4280-A8D9-08F7C49AFD7D}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0518C260-5CD6-417B-8480-8C2814B835B1}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0591BE52-0239-432E-9615-377A154A370C}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{060E3527-64D6-443D-AE27-06133DFD2425}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0635BCB3-8600-4D5B-8C65-12A4291612FD}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{06446335-32BD-4DE6-AA9C-D78F73E8D3D8}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{06526C89-4C00-44D8-9C4E-983E4B1F6472}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{06D268C4-DD3D-4817-B045-A51CF4879856}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{071EFD7B-26C8-47E8-A39C-3741A8C032BD}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0734114D-6E5E-42F4-877C-80CB787F7854}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0737DFDB-4559-481F-8C3E-0DC36AB496E2}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{073A59D6-1CC2-4581-93C6-3362F8E931BB}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{074EAA4C-8E1C-4105-A128-DD0134AD41CE}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0750FEF2-345C-458E-8B21-0ADDB8571A7D}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{075F7885-C1D2-4D93-9EE7-1EB00A70A7DA}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{07632901-74CE-4A3A-BD62-59B9E5CE220B}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{07A6D3E0-3ABE-4C48-8B2B-8C55F172B335}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0864488D-158D-4C7A-9D9C-85B920FAC939}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{08F46979-3184-4909-953C-59B4F5EB4F4A}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0A54D6D0-11C7-413C-8CAC-C39958BC6591}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0AB9643F-8920-490E-A276-93A8F1FAC7F5}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0AD99856-47DE-4884-8C6B-6B62EA90D8A7}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0B023E65-33AF-42B6-8703-C3026EE4646B}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0B0FE68D-BCF6-47D3-BD30-7F455B69655F}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0BDA3F38-4DC0-475A-A157-CA13F79DBA5D}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0C2909DD-51A9-4E7E-A8A8-E36F01537AA2}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0C448E91-5027-4F98-BAB9-829A4C0783AB}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0C54CE9B-6D13-439F-80DA-A266577EB5E7}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0CDE368A-62D2-45E0-8C4F-A369D6A921C1}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0CF68AFC-728C-4EE1-A597-A78EBBBCE593}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0D049BC0-836D-4D74-983D-B5879FDB3817}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0D3149F7-2877-47E9-9C14-066D6D369944}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0D56056F-07FB-4ADD-BED7-E814BAA13B15}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0D61222F-0D6E-478B-9CAE-1E941283335E}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0DBF5DBC-0257-480A-95D6-A0F7CF62D62D}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0DF437A6-84FF-41A6-8B97-E12E053C367A}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0E26CA46-C11A-4853-B511-B7FE1CDAD3C0}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0E3B0AA7-2D5F-41E8-A460-7B625F1C3115}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0E893B7C-741D-447F-AD17-3F3A6D3ADCE6}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0F0CA9DF-4A59-4199-AB9A-802734EB2ED1}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0F1D4810-6020-4D12-ABBC-69D44258F711}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0F62DB80-EF81-42FC-87A2-49D25288C3A5}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0F8D10C3-5F31-4DD9-BED2-6155A701DF5A}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{0F982FBB-6C2C-4E99-BD80-C5E44F817B24}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{10204EF3-1BBE-43EE-B725-2D7F4EF7DC43}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{10A604A4-EFF4-4A75-AC17-39725665D43C}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{10AA6179-C398-4310-BB27-F0D64F781CEE}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{10CAC7C4-D1FA-4DF5-A0A0-44CA9F68F834}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{10CD991D-7715-4BF7-A36A-A098C9DC20BC}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{10EB1BEC-F5FD-41C6-887C-28DC3C13BB96}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{112A4EEF-BD21-4CA0-B535-04A0F3162B06}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{117288A6-6535-4AFB-917D-490513F5C009}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{119949DF-22CB-44BE-9579-087EB801FD67}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{11DE0A5C-7658-4DB5-BF42-62409F75C7DC}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{124F37C3-BE8A-450E-A224-D0FED6FBF906}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{125115EB-590B-4F04-AD4F-571EBADDC096}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{125B69A3-CA7C-4F68-8653-5C5E2C67BBF9}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{12630768-7807-4D83-94A2-7146F16C373D}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{132DB249-478B-47B0-9BF7-4AA323A13E11}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{13605809-0AB5-4482-A62D-20A672A1F1A5}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{13814680-72C4-436D-A7AD-0859CBCEA865}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{139F5463-1B49-49BB-8CB2-DA3676F68EA6}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{13B1A92B-B9C1-4CC8-9F06-746B9EF05AFA}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{13B806CC-14D4-4D43-B7D3-AAC7D7665FE7}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{141409CB-2726-4A94-9277-89A121603C94}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{144A11A7-82B3-434B-A8D9-544E9D8B1B55}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{148E429F-23CC-45A4-882D-50CC9F5E9351}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1493EFB8-019F-426B-8522-5B9A9189BC73}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{149E25F6-104E-400C-A83D-9DE71797B7F0}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{14BADC4B-2AD9-4237-A0A1-979C7A1E48D7}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{14F3017E-FDD7-48DA-80F4-BB11BBB3C252}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{15C7D257-6FE5-4D22-8739-C43F997E3B7D}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{15DFA281-BBBC-4915-BAE0-060CC704874D}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{15FC5762-8B7F-4CD5-9A34-7600CBD31981}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{164CC3E5-884C-47C4-9E00-E26A7CB4F2A6}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{16707B1C-8B72-45E9-9596-FDF90B9B4DA1}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1694CE3D-C38E-460B-8376-A7B6486A3F39}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{169A9FE1-B5CB-4007-9376-AC5FE2C7871D}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{16D59E99-115E-423A-B87F-F0BDBBDEC67C}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{16F34F99-CD87-4279-BF49-C282A3054560}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1704B0B8-CA29-48F7-B4B7-6ADA50E70A33}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{17067F01-CA8F-4BD6-BB07-1F37E8C29A2A}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{175E7356-80AF-4796-AA2E-7CE021FD82D4}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{176B5296-FD5C-4E80-BED9-0064B5C25810}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1789CB74-5AB6-4DCB-946D-BFA8DFD8FAA6}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{17BE8CEE-505B-4AF7-B0AF-793626175851}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{17F2B488-54F8-44B1-90C6-830DFE7F66D2}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1834A5FC-09B7-41B9-A935-DBBEB8D254CD}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{186CC1FB-42FF-4888-8352-48BF2E0D55FE}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{189DDD6A-F68D-4E11-965B-BCDE53D4B7AE}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{18B2D445-EFE0-435C-A06B-F9DB0FE9813A}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{18BB5B38-3385-4D41-8A27-7E560CDBE6C2}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{18BF291E-E7C3-48BC-87E7-72507E62E113}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{18C8C3E2-A1BB-4CA0-ADE9-D95F7C326A58}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1936CA25-42C6-451E-B31B-09D90D83890B}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{196EAAB6-D2A3-4B36-A2AC-E6F2F731F7F7}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1974EFD4-C4A4-497F-9F4C-40CA1D5232D2}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{198B2760-C63B-4408-899C-CA7A598C2A33}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{19B00436-E143-448A-A233-9E62E5D7931F}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1A297B21-7BB6-495F-83C4-BFDCC9D1C7B7}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1A3571DE-D1FB-4381-BBBB-E2290DB86493}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1A9ADA32-7906-43B1-901C-4C547E70688A}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1AAEA68B-CEFB-487E-A6BE-B8CB1FF938BA}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1ABA8BCC-5C82-402B-9167-8D48C8CF8126}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1AE90A30-BA80-4376-BDF8-6C324559EE8F}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1AE9103E-266C-4D04-B90E-72A4BC08E0D0}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1AEE0E26-4CF3-4129-9CC0-D4CAE35103B8}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1AEF6967-DE2F-4ECA-B6E2-9937E320EC38}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1B2BE03E-C949-4952-B090-DB6408BE568A}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1B64136E-3D07-493C-81EB-ADA3ED938E75}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1B8AFCA9-6827-49CB-B434-0CACC1258767}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1BA22E54-FF0E-406B-A561-26B759682AE4}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1C2B8A97-7D6A-43F0-BA57-7C25A458E57A}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1C8B6265-FA0E-4892-814D-C963B7C659BB}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1C8F7285-ECD7-4136-BE00-6CE44542BC01}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1CA9899E-D8F8-478B-B289-40E565060DAF}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1CBD9131-8DC8-4D0C-8F6E-0E32EE92614D}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1D1EFFC5-53A6-404D-A246-36619D88BC6D}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1D4F0265-D1B3-4735-B9A3-3DB0EFF3D501}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1D5B14D1-C878-4101-AD5E-2931565DC26B}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1D73B1E8-D351-4FFC-8F4E-776DC6095813}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1D8FCF81-FC27-4886-A927-F8A31E6E028B}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1D9A903D-91D2-493F-8B8E-66675E9B29B5}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1DDC454B-EF67-4125-943A-B866C10812C8}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1E682DE3-9567-4771-B20E-50CEBD9126BC}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1EAF37EF-9725-4857-9A6B-B09A6168FBF7}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1F26A7CC-BC7E-4CB3-A7BC-3CA8C92BA982}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1F29E668-14FB-4D63-994A-DD1B5B935080}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1F3D2F17-61B2-4417-BB35-2BA6055CE151}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{1FD615D8-A4F7-4600-B0CD-C94918A2211F}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{200798C5-D20D-4355-9ACD-48C899B4A172}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{20481526-509F-4EF2-A19C-5AECAAAAD1A2}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{204DFA8C-D920-43A5-92CD-72711B34D719}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{20934EE0-F152-4F91-9DBB-9DD3823873C1}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{20F98715-E2D9-4EF6-BEE1-073AD4361031}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{21035A33-74B4-4FF9-84AB-2F6AD29C5E05}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{21DDB549-309F-4FA3-8EE8-7CA1BC713F84}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{21E015A0-2B12-491A-9C4F-1D7F97BA206B}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{22584807-A74C-404C-B317-C2F9DCF4AAA3}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2291E038-5F01-4C3C-8FF3-B14813A98F8F}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{22F4A63A-3670-4AF2-9878-205937A23298}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{237B74FC-69B7-4B4B-8105-FE8F18FA1B5C}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{23A0B41D-3E11-407F-9BB2-3324E2AB35E3}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{23D4317E-51C0-4C90-8337-52B877E1044F}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{247EF9E3-2B1D-4E1C-8CA3-319DD03B2331}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{24D8981A-7843-42FB-8087-D715A98E3DF6}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{24DCB3FA-C422-4C4B-A732-60C33CDA5917}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{259EC9AE-A710-494B-B4AA-4A6A52B0BB83}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{25C6D58B-1566-406F-9EC1-2284045E8780}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2677E471-95A4-4751-805B-0BAA2389CCC7}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{26F7885C-8806-4CB2-86EF-BA7DA3B73011}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{27068500-EF74-4B66-BB96-7A2DCCBF1343}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{281F6FA4-2E9D-45E7-84A7-EC321296E0B8}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2876411C-E324-4610-BC92-025BF6A7C01B}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{28F4680D-FEA5-4532-B5AD-217A399C837A}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{28F70762-C49E-46AF-9625-0FB88D166B4B}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{290AA086-A4A1-4A57-BDBA-C4D4D568B92C}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{291ACB70-B613-45CD-8CA2-D827001FD2D1}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{29512EE9-1FA3-4849-8703-13FFB7A52205}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{296B6C93-2728-469F-9DF4-0D397B168C8D}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{298C3DD7-F02E-4E1C-AB15-365ED7DEA975}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2A5FB625-A53B-465E-AB70-37234C01A722}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2A740B84-D818-46BC-9BE8-10AE0619EC64}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2AAF8C04-9161-42F8-8E2C-A34BCC9FED14}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2AC18248-98AF-482E-A10B-7475575AC10B}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2B111436-367E-4248-B12B-CDC45B4677C1}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2B87EF6E-575D-4AC4-8CBD-A373B7EE2F48}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2BBEC0CE-9DF7-4F05-8CF1-FE1713F50817}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2BFA56E8-146E-4E17-8D91-3ABF1A983960}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2C163F71-1E1C-486F-8D62-919239352B97}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2C1E3540-0DC5-46BA-862B-90576FAE1971}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2C48ED41-2119-4283-BE2C-0D47C2A29670}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2C736E92-F33D-4B4D-9043-98DDFD86C0E1}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2D03EAA8-54EC-47C3-A2AB-3CC4A9708C78}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2D7F34E8-BC0E-491B-A1AE-D25D7036D24A}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2DB0006A-597A-43AA-997C-105EC0FB3804}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2DB6F8C7-5125-4006-B5B1-D88429A54D50}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2DBDA190-39D6-4A51-9355-428DCA77F907}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2E380375-3C39-4882-A36B-053F26E5F207}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2E9E9572-4E86-41BC-82BC-9C345A7DBA48}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2EA2378E-9233-4A31-BAB4-6079964BE59C}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2EACA002-5035-4BD1-988F-23AEE69B2D69}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2ECAF865-F962-4E22-AA4F-88FEDE647299}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2EE41E21-FB69-44FF-8174-2D8E943D24FF}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2F08FA49-6FF2-42FD-A524-5DAF320080CB}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{2F48245B-4012-4936-B83C-C79A527FEC35}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3028872B-A5A8-4F7E-9717-B3925048928B}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3038BAE8-D674-4340-8E23-F12D5412D961}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{305CE318-618C-4B95-B303-0C8E6B00F783}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{30DE335D-8E80-4220-A1E9-A0A460917F9E}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3121D693-28FE-4A81-98EC-D8F2926F26F4}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{31438447-8AE2-40A0-A4C3-B79CC7BDDAA2}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{319FE80F-FEB0-4B23-86B6-49C0315DDD84}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{31C4D33C-1F3E-4D0B-8C9D-E2E9EBBDFF21}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3208E6A7-9704-447A-A7EE-0B99336AF11F}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{32241EEF-1089-4A43-94AE-C3E02325EB3B}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{324226D0-56D4-43B6-8D7A-AC779DE385DE}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{32720425-C053-43BC-A245-E8F105772D05}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{32911728-20EE-4B67-B637-0DC5BCDCFD9B}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{32997290-AB31-4FC8-AF6B-7A7513C3C358}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{32F629F5-F2AB-4796-97FC-C5EC1C78621F}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3312B6AF-9876-4512-886D-3FA2F99FD89A}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{334D4CC3-E394-4BA9-BC5E-787D262A8709}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{33A743D8-00E1-4E74-B172-A94DC15C1A88}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{33ADAF19-4DB5-4571-A230-C4C990E63BD9}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{345B62C3-B878-4F48-ABCC-2A17C7963712}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3463B232-23A1-4ED3-AEB4-EBE30A56E27E}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{34842777-4E2E-41A9-9415-FEA04C5665DD}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3487DC3C-A798-49B8-AD56-D71915D389C0}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{34895EAF-40FA-4116-8F93-5EBFC1E38E91}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{348A6AF0-94D4-4DE6-9047-1BFDCEF33D5F}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{34D5C1F3-8DD3-4FD1-9BE3-DB7BAC64A2D9}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{34E11729-54ED-46C4-9381-A8FA6C6A0E07}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3525F893-30E2-4104-94F1-320302F7BBE1}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{35453951-4BE2-4714-A85A-5D30FAF5315B}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3552105E-3378-4D29-8C51-DB5DF474E94F}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{358FB214-2AC1-4EAF-B862-EDBF6EBB3F27}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{35AD4663-DF95-4A01-A2EE-48BF5AA67A88}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{35DE002D-B0E4-4B2F-B986-1774EFB7219C}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3651C1B4-5157-479A-B98A-ABBA2486CEF0}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3677F7E9-6EC3-42CA-A033-BA5C24265D8D}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{36AE1CEB-280B-4CCB-916D-44A1FC2F0CC1}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{36F31032-7B4B-443F-AA81-662D28BD9C88}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{37945D1C-E411-432D-9B71-ADA7E8E87229}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{385F4EC1-823F-4418-BE45-F2E8683AE7B5}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{386A1B22-BF77-4E21-8F42-AC608082FEEC}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{389A042F-295F-4BF4-8E0F-46431D7E8EC1}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{39064006-1815-4CEC-A6D8-394A0ECD4D13}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3922812F-464A-4EF4-80BD-6BBE1FB261E4}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{39A4632E-7046-4BEC-AD8F-4B5E05819983}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{39BF7785-6733-4398-9DE2-1CF2F2C64B44}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{39EB4119-B5E7-410E-A163-7D73A1CDBE27}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{39F4AAEF-F81B-47BD-A7CF-BAEFE358192A}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3A48FB81-9E45-4818-A061-964023A743EA}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3A6EBC38-893A-4CF2-A704-3EF91F1937E3}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3ADB9D9D-7114-4AE2-8A2B-1055A3A35E54}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3B040F4F-3089-4B04-AC14-22341E7914DB}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3B36E87C-66E5-4DD4-86C7-8BA329639D4B}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3B72D19D-2FBD-4EAE-8014-547225F4C079}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3B9071A8-4509-4113-9C87-8DA9CF7222A9}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3BEC3EC5-62CC-4D1F-BBAD-4EC444DAAD1B}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3C08DB2B-F0A9-41F7-80DA-C07B20747A01}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3C5CEB8B-6F9D-4889-9052-3B25F0597C6A}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3C5CF13B-5F4A-4A67-A337-3F15C977A357}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3C8D59ED-C00F-4C84-B3D7-0A9E9D49BDE6}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3CCD474B-619F-4918-A156-C41C0910A647}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3CE3D388-59B9-4CF2-A6BF-459EB0E05C28}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3D236A6B-3B0E-4A16-A79E-6A3FBEF1A1F9}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3D452E46-A40B-45AD-A6FD-1D77FAE92442}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3E0FB3C4-BBED-421D-805E-595A2D99DF04}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3E11D1C0-EDA9-47AA-A6BB-58F68BB7C59D}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3E15B6DC-4B0E-46B5-8088-6EB54B1C9B82}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3E2F1AD4-8332-4B74-94AD-74F75BBEC535}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3EAB1C50-E0CC-4AD6-98F0-A8E7C187AC18}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3F62FAAD-C028-4D74-8B64-9CFDD1C42557}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3FF0EF4D-729F-48B0-A187-F09D77C839E5}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3FF9B453-7335-41B7-8195-6C45331F12CC}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{3FFF48EA-0944-4DDE-9D3D-F892C64603A2}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4022D399-E5FD-423E-B6C5-3A766F9C3956}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{404C1626-26F7-4A31-962D-51981DB9671B}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{405DC59B-4EC1-4680-8C61-B812893DF25E}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{408AC2A8-1D53-40E9-B23F-8CEC02463C01}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{40973CD6-1E1D-4B14-A87C-1BE3FF7E52DE}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{409D8CCA-B440-4D84-8EF0-4D96CB8EB5D1}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{40EC0D29-DA94-47E2-A5F1-798AF36D7678}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{412D5F86-A0D7-49FB-B331-D53FC71847F6}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{41CD7134-D11C-4AA8-8CFB-623C04EB21B8}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{420FD40F-4590-4335-89D7-9B236DDEC5A1}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{42420AE4-6925-4FED-A8B5-85AF06ADF957}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{424A79C1-C1CC-472F-BE61-1A7ECDBCB399}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{42D89E05-C9F2-47F8-BEEC-782B9A4108C8}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{42E8CC7A-F794-4540-8E8A-9E13EF62ED24}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{43693AF7-E946-4546-A411-453DD893B965}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{439FA3A5-67FB-4721-A7B1-EA44F8EDD226}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{43CDA675-A9EE-48ED-9F5F-B2578B7DF94E}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{440BC55F-B16C-4F14-8F68-D8F13F1AA2D5}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{44236856-4D5B-443E-8917-E38FAF5247F3}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{44CF62C4-19B1-4C12-A440-8E7C5E3A4FA6}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{44D3B3BC-E364-4512-9636-B80B1E2C44B2}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{44EF8845-AEFC-457A-BF8B-8C008A36E9F9}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{451283C7-9184-466A-BED6-5AF20A131A41}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4540ADD4-197D-43C6-85FD-0C9E4BC9F560}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{454638A2-D7C1-4C79-9DF4-0E642EA6D210}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{454AA49B-B47C-4366-9953-2D94F0669187}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{46717C50-A5C6-4B0C-B177-4E9E6EEF221F}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{46D7F16F-EEFE-4F8D-A841-BD5019ACA66C}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{470E0B37-DEB3-49CA-BCF3-3CD994098BEF}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{47D3F3B1-AE85-41E7-839B-CA2121617BA4}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{47FEE4E5-F9AE-4B85-804E-02EC1F11476D}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4915D949-E0FE-4BEC-A4D4-1F05A35B3F07}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{493AA65D-3E6B-4EF4-A1D1-5127CEA94A5B}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4949FF09-9DEA-491F-93EC-24506D01D844}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4963EF14-9EDF-4BAF-9216-CD6063A97465}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{498D6DB6-97BD-4625-B645-CA26ED46053E}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{499F8F6E-D590-45FE-9CA0-213695470D66}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{49DBD66F-EEA9-4231-92B3-957822EB68C7}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4A00BC6A-FC26-4414-A819-C83A68D12943}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4A391E3E-0052-49BE-AB72-3A4EEC3C73DA}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4A61373E-AC3F-4252-AE48-865DAE77F6AE}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4A68D90C-D678-4821-B47F-718CCD52F15D}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4AC7DE87-4643-4A6E-8CEE-CEE2299BF6DA}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4B0789E4-BA67-4B12-9560-6F24F1931ADF}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4B509589-0D81-49EB-A694-B3E18BB49A84}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4B6862A7-49AB-4200-B1D5-C6CF1AB2668D}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4BAE08FE-7BF4-4C54-8237-0603FBBE461C}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4BBACD0A-3C52-466F-A927-5F08A5537C5C}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4BC04465-241E-4502-8A13-A5DF2FD73EC7}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4BF13DB7-8CAD-4B85-A32A-CB3CE5FEBFFF}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4C4ADAAC-FD85-4B14-A5D5-B37FACCF1BE3}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4C7FF069-549F-43F0-803C-1F414DC9A515}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4C9CC9F3-556E-42DF-BC84-14AD53F589DA}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4C9E777C-B0B8-4E27-84C1-D8FE3A10BD87}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4CC43702-3CD7-490C-BC17-31998861B826}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4D555249-A67B-4391-A068-48E24CDD743A}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4D65560E-FBF6-478E-81CE-F24506800F44}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4DC0BF48-2337-46AE-BD0E-CDDBA945A154}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4EEE4166-DAD1-4F68-A364-B7D494A2ADC5}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4F067F64-2DCF-4C55-80B2-0C3954227489}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4F21A362-379B-42A5-9F90-BA2A392E12C5}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4F4769D0-8CD0-4E21-A07C-230E3F59D1BB}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4F5EFF17-F287-40BB-9400-06A654681D77}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4F5F614B-278C-49AC-A897-30B83B7AFBC9}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{4F90CE2D-B3EE-43C2-A445-849A7D645878}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5036C968-2741-49EF-B00D-D3E808786067}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{503D62CF-1E83-4C6E-8755-2744890912EA}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{509A3B02-DC8D-4214-AF0E-683800A9CEA0}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{509EF62E-5586-4291-9BF8-55E01B22864E}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5102E8FA-C7EC-4636-ABC8-E5A593B1E369}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{51048BA4-EE4A-4FA1-BE52-08247209B2B8}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{516F367E-C6FD-4769-B464-4163722EE3B3}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{51DD8B93-5713-48C2-860D-8B0917FB606F}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{51E4AE18-A72D-4411-9B06-C3C2F247F811}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{51F1ECA8-177D-426A-8A0C-F07CBC219C15}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5203405E-DDB7-4CAB-A707-46F8C1D400CA}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{52608DA9-D6A2-480F-AA64-B35411CB0AC4}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5270B4F3-31BB-45B4-ABE4-1E02FE4B5C82}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{52784EB0-B1F2-4F48-8309-A6B4BD97337E}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{52E2A3F6-4E9F-4FA9-8EFB-097D7B59942D}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{532D575B-2DD3-4236-9D7C-EEAD6A958B00}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{537D5996-08F9-4939-8540-7E103EC91D0C}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{53CD87A9-AD6D-4F2C-9A3B-CD7F5E131EBB}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{543E77D9-A701-49CC-8C00-262A9C6E94F3}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5454769C-5408-4ABA-9AEC-398AD2617EF9}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{54A363C9-F07B-4EA6-8C15-DA479A82C025}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{54CC58CD-A513-48C6-9DFB-1E908F91EEE2}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{54D83082-1807-4AF5-8C20-890D359ECEF7}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{553D1829-FF50-4F04-91CD-EEC61F948661}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{555BE3B7-E870-49BF-8A92-F7A1F297D45A}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5561400D-CF7C-43E5-B5BA-948C4D2F0946}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{55791B51-5CF3-485B-B3FA-CE6353DE3EAD}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5608E545-2F23-4A12-B5CC-5F958C5C6EAF}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{564F6ACA-FF4A-4A2F-A4F6-2A002EDA24F2}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{56A771C9-DDA9-47FF-99A5-E6A164FE32A4}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{57055BE3-3212-49D4-8CBE-55B81B963877}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5780F766-44E3-4549-A849-88E5670C3FB0}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{57833BD8-A7CC-49C3-A458-D8746706E1CE}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5789EA64-DAE3-4774-88DB-8573B2B27A97}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{57A624CD-A002-49F4-B9E8-DB1BC15CF880}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{57CBF694-CC0C-4740-9147-510B48DA5938}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{57DCE32E-ACCB-4158-9F94-741A44FBB840}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5819DEC2-24A7-4652-8841-FF5575EA0730}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{582AB3D5-40EE-4E54-8495-00A66FB00D08}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{585C2324-B4B7-4336-91CE-7D838DEF3CAA}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{58637CCE-0284-4968-B1D6-F1896D05E9DB}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{58BD6469-23E6-43B7-93EC-B7F7E945E565}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{59507474-9299-4326-A371-3CB4038D3F57}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{59E9073A-909D-4FC2-8210-1DB04262352E}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{59EDA11E-A247-4215-A9D2-7664AF44C63A}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5A48A685-98E5-4C82-ABAA-B197C0C26E47}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5A814E01-0257-4593-B765-D220508A6895}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5AD22897-6381-40C3-868C-AD6723B557E0}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5AE284FC-EB7E-47B0-B0D6-02F03191AB8A}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5AFBF569-A741-44B9-8FE7-0CC8FF52B69B}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5B6803E7-6EEA-42CD-AAAF-3D0C361B0E4C}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5B6D7E57-DA58-48A9-BA2A-8CE5957EE9DA}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5B77DBFC-8CD4-42D7-A715-DA4E49C3FCD5}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5B8BDE05-7984-4337-AA9A-9B38A39E6282}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5BD60ED5-7C60-4971-BF18-3E91F614828C}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5BF50F50-4C70-4C6C-BCD2-CFDABE1C82CB}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5C9694E4-43F9-4D44-995C-92ABD503EFFA}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5D8A97F6-3545-4CE9-A67F-A4FEA83E8932}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5E223A0E-B630-4257-95CC-DD49186CEE09}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5E6DDC3B-B186-443B-B901-A6106C7BBC5C}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5E941DE8-F5DD-4566-ADE8-3F0FF98D2B79}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5EA642B7-7F1E-4445-8F71-109D433F27F5}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5EC8DC06-5E76-4DC6-834A-71898DADEF61}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5F23DC5C-C61E-414A-B3FD-EF69A23FB28C}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5F39A3B3-AE93-4969-A071-2BC1068458E6}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5F47ED3A-6B16-4977-9065-0CD77D81E4BA}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5F4ED201-23DF-4289-ABE9-1C97A88E3D9D}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5F6D8038-7B64-48A1-BCE2-F6C9C5C784DC}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5F6F145E-7920-4BB8-88DF-DE4E60E6348C}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5F9AE71B-ACE1-4939-8BAB-8306EE7305F2}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5FC11560-53AE-4B18-B5C0-A661D781ED73}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{5FC551C9-F194-46B6-96CA-6E3750AB8E0F}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6005F78D-3DF5-4EFD-86CA-57D7102E1E71}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{601282EF-42FB-45EB-8F8C-9217AE604188}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6021D9DB-2D28-44C6-BA8E-6A32E6441930}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{60350CD9-81D3-46EA-9319-10DB7BD975D2}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{605DDE16-C8DB-49B2-9DB1-44E5898E98E4}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{60811B15-9FCE-4880-B579-93067C5FB4B3}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{60BD8F4F-1998-4F88-BD89-72870E53FBC2}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{60C0AEA1-DEED-46A9-AC93-BC2AED71BC35}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{60CD47B7-E51B-4437-98C9-1C5DB6E6E853}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{60D018EF-AB0C-49A1-B29B-11BDDB238C1C}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6167B373-9F98-4993-9CCE-0DB9428020F9}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{61DF0ACF-9749-432D-A48F-167E775E9C23}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{61E4DFFE-D968-46D5-8F13-7B02DC304D82}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6217EA4D-4D65-49E6-A340-94F068D0CF22}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{62208718-BC35-48D0-A2F8-F4046928DFD1}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{622CA889-B471-469B-B211-8140A5BAF2C4}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{625915A6-BD02-4FB8-88D2-A115ADAD225A}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{62B4B1E2-7634-49F4-8496-890F67972F82}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{62E90D4A-7F3B-4B34-BFE3-51D7E47684EC}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{62EF570C-3169-445B-B2DA-5B73E5D87F45}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{62F45AE3-68A3-443A-81C7-AD2E224D8C5F}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{632002EF-9518-4311-8D84-2545C74FCDAD}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6451743B-9CBA-490D-9A96-78905DA02771}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6454287C-5B66-4D32-B530-6CFF2B43C56F}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6459EB5D-108A-4319-B757-932A94C44102}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{64CED2BB-E655-43FE-99DE-86DBEC99CCCA}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6511BB9D-80F8-4B83-A404-B022E48007B8}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{65B03DDA-B806-4FE2-BA3A-380EEDEB8448}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{65C5C7C5-2152-41E3-A33A-72602AF1B3E9}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{65E2AE93-AE76-4194-BD19-36D0BF0262D3}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6617F3BD-33D5-4BE6-95A0-4A418673220E}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{663928B6-0F4F-43E8-B051-FAB983193FC6}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{66666D6B-3F1B-49D4-8FBF-C4145CE90DFB}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{66C3DD6C-2010-4762-BFCD-8DE1336CBDBD}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{66D74703-187A-4D5E-8F0F-EF552B10CB1B}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{66FA0149-B8CD-4A6F-9596-1DFEC8656166}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6704BE19-9B86-42C6-9162-088689C0AE51}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6765C33E-70E8-43BA-88F5-2558FAABC348}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6799BB09-C8EA-44FB-8862-EB33FE850B8E}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{67A6AFF5-E4DD-41DE-A4D4-794386A9FF39}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{68012604-5D1D-4A3D-8668-555870C6EA90}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{68744ECE-93D1-4EB8-8A30-1EFC2AC29767}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{69136771-CF58-43E7-9317-7B908808FFAE}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{694CD073-B1DB-4F71-8D7B-D3436E457655}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{697D4C9A-D2E0-4E59-95B8-E57295BFBA9B}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{699E12A6-D2C7-4674-AE4D-35BAB71D7EBA}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{69CC319B-32E2-4B5D-9216-08C464CB3FAD}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{69DDCCC1-45AA-4D70-8563-16F56FDE76DF}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6A084DA0-4C5A-4536-86B0-24D32973EE60}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6A27ECE7-A1B1-4B05-A196-FB46FEAD122C}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6A52E575-1DA2-4726-8F40-EF6E4AFB1FE8}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6A6BE633-49AD-43F7-87A7-352C7A4F2EE3}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6AC807B2-5B15-4D51-B500-E0E937AF7EDE}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6AD3F241-DAA4-4376-8B30-A761999DF913}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6AFADA85-7CC1-4A58-9BE4-C8AED7EA3014}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6B25200F-00FE-4FAB-8682-10A806847EA5}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6B33B3B1-6060-4AA3-9C14-24FF088D09EF}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6B931E8E-B6CF-47BB-BF77-A7EF01D5EB64}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6B978B3A-FCCE-4AE1-B500-820FBA645449}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6BA48190-F7AA-4DED-BD68-D80AF17BF9AA}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6BAAFA13-B67A-4F20-97F0-CA34CC6074CE}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6BB7DD39-3516-4415-8C6F-F47DD7E78DBA}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6BD600D9-A8FA-44F9-97DE-E04BA0F9AD29}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6C0431FA-6221-45FC-BCC8-611D3BBDD512}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6C7728F4-9B61-416C-9C90-615BA8710CBE}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6CDD8917-E57C-4753-A0E1-CD98972F36A4}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6D060A64-42E0-475D-B4DD-2B6650BE9C43}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6D0DB282-EA0D-4D6D-B720-19FE39C05401}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6D273CBE-F7C0-462D-B345-6169FDB91E46}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6D2CF101-B233-4EEF-B405-4A7175CB60AD}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6D63B0B9-80F8-420F-B79E-1B7DB6329C68}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6D9F0596-7A18-43A0-873B-739E2E660B60}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6DABB81B-2855-4A2E-A2D3-4132EEC44053}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6E4EA2A7-39E7-4DB4-A9FF-A8A8013C2601}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6EACF23E-9B2C-471A-B3A1-759AD9A9C334}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6EC30535-F770-4A21-86CA-85452F841B2E}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6EE64018-8C29-4B90-A9DB-DC8916A2AE6A}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6F52CC6B-5D98-40AA-B870-89E5C520AFD2}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6F87746B-D43C-453F-8E45-051959A534B0}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6FAAD6D3-6B80-45A8-A2B2-296DA3251FDE}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{6FE1F984-69AC-4A03-B939-EF706DBDE68A}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{70264F46-7CEF-4515-B90F-77C2EE084D2B}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{7098B651-B962-437C-B978-2B340CC21518}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{70B803D5-00E2-4C5A-9C6F-3CFCCB004BA7}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{7155FCF8-CB38-459A-86D5-4D27398FA68E}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{71838AC2-E0E3-4035-9366-ABB4B5FB8136}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{71E5B8E6-A4A5-48F3-9E51-5C048D4DED3A}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{724D27BF-3F99-4346-B25A-0F549689E4EB}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{7269EE69-B565-4F48-A015-06B91AEBDC97}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{727DD8EE-EC62-418D-9079-9938A3855973}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{72F2819C-58A8-4F30-B89D-2F90C48729E5}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{736C3C33-63EB-44C5-9A17-0EE051AF56B0}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{739A67F1-7D70-40E7-A469-BF0D5DFA3D51}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{73E9B05D-E00D-490B-907E-DA4582460CC6}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{7402ABE0-2958-4787-B52F-0EB9D9AE75A4}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{7480BBDE-B057-4AA2-A029-838CEA35CE7B}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{74D5E116-A81A-4443-BAEF-98A45C2D32C9}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{752ACE18-9C56-4A77-8D56-0E310EE260C9}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{75306040-961B-4A6C-92CB-E89A4AAC4ADB}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{75512CC3-B038-4104-B381-63B202A11D67}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{756DF62D-D82A-41FB-BA36-2E5AF197DD64}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{75952F6D-837B-4CFC-9B8F-82915F6D65F1}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{76134019-ADB6-4D7A-8053-EBFF5339369F}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{76456299-0633-451D-871C-BEA7DFA62140}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{76C3C931-5557-4B40-B16C-C8E6F95DCCF4}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{7708275B-3658-450E-9E45-E059906B3C70}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{77360FD7-1046-40A2-9FE0-B4FBE23B5E1B}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{77716E03-580C-40FC-9311-525FAA21C192}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{779E4241-A242-4293-B85D-D2DDB02537E8}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{77B5C579-AA2B-4AD1-9295-1D50F9E06130}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{7814C0AA-666F-4D2D-B6F5-0F16725B3FA1}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{790784EB-9C35-4AA6-BBE3-0EB571C363F6}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{791905E3-3707-4A6B-A5CF-A8FEA15989C4}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{7937E3B2-9873-43B0-AA4B-1BB1BAABD2B5}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{79399DFB-05A0-4C5B-A7C9-17D61557D0A6}
SUPPRIME Folder: C:\Users\Abdouche\AppData\Local\{793BAE60-6DCF-417B-8F5C-2462D67E2A60}
SUPPRIME Folder: C:\Users

abdouchefr · Answer

juste un détail pour la connexion: diagnostic réseau de Windows m'affiche 2 messages suivant :
1) Windows ne peut pas se connecter à maison _sfr ( plus loin ) non corrigé

2) "Connexion réseau sans fil 8" n'a pas de configuration IP valide..................?

abdouchefr · Answer

désolé voici le lien de ZHPDiag:

https://www.cjoint.com/c/CCrb26buSvu

c'est pas évident de danser à cloche pied avec 2 pc pour transmettre les données et merci encore

abdouchefr · Answer

regarde dans le gestionnaire des périphériques au niveau de ta carte réseau si pas un ! ou ............quoi??  

Je me connecte avec une clé USB wifi

abdouchefr · Answer

oui mais j'ai du faire 2 fois une reconfiguration de réseau en l'espace de 6 mois par le biais d'un technicien du fournisseur.
 pourrais-tu être un peu plus précis sur ton précédent poste stp ? merci ( gestionnaire des périphériques.....?)

abdouchefr · Answer

re 

j'ai vérifier et je n'ai aucun de ces 2 signes d'affichés

abdouchefr · Answer

dans "état de connexion réseau sans fil 8 j'ai 2 lignes dans la rubrique général":
Connectivité IPv4:                         Pas d'accès réseau
Connectivité IPv6:                         Pas d'accès réseau
Etat du média :                              Activé

abdouchefr · Answer

je suis passé par une une restauration du système ........enfin et j'ignore si toute l'opération effectuée pour le nettoyer a quand même servi ou pas ? J'ai l'antivirus AVG qui s'est remis et je compte réinstaller zonealarme comme par feu ; j'ai pu me connecter sur le réseau sfr public avec mes identifiants mais je poursuit quand la manipe que tu me conseille pour la clé a plus.

abdouchefr · Answer

voici le rapport:

Rapport de ZHPDiag v1.34.76 par Nicolas Coolman, Update du 01/02/2013
Run by Abdouche at 17/03/2013 17:56:27
State : Le serveur Zebulon n'est pas disponible
UAC : Deactivate by program


---\ Web Browser
MSIE: Internet Explorer v8.0.7601.17514
MFIE: Mozilla Firefox 19.0 v19.0 (Defaut)

---\ Windows Product Information
~ Langage: Français
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 7QJB7
Windows License : OK
~ Windows Remaining Initializations Number : 3
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\ System Information
~ Processor: AMD64 Family 16 Model 6 Stepping 2, AuthenticAMD
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3839 MB (58% free)
System Restore: Activé (Enable)
System drive C: has 261 GB (57%) free of 453 GB

---\ Logged in mode
~ Computer Name: ABDOUCHE-PC
~ User Name: Abdouche
~ All Users Names: HomeGroupUser$, Administrateur, Abdouche, 
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Abdouche\AppData\Roaming\
~ %Desktop% : C:\Users\Abdouche\Desktop\
~ %Favorites% : C:\Users\Abdouche\Favorites\
~ %LocalAppData% : C:\Users\Abdouche\AppData\Local\
~ %StartMenu% : C:\Users\Abdouche\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 261 Go of 453 Go)
D:\ CD-ROM drive (Free 0 Go of 1 Go)
E:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
F:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)



---\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  OK
~ Scan Security Center in 00mn 00s



---\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.81101547092783DC117D800D3573EBD4] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.20/12/2012 - 14:59:36.) -- C:\Windows\System32\wininet.dll [1188864]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers
etBT.sys [261632]
[MD5.E453ACF4E7D44E5530B5D5F2B9CA8563] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.31/08/2012 - 19:19:35.) -- C:\Windows\system32\Drivers
tfs.sys [1659760]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers	dx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Scan Generic Processes in 00mn 00s



---\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/193
~ Mes musiques (My Musics) : 4/64
~ Mes Videos (My Videos) : 2/212
~ Mes Favoris (My Favorites) : 1/36
~ Mes Documents (My Documents) : 12/4384
~ Mon Bureau (My Desktop) : 1/29
~ Menu demarrer (Programs) : 1/28
~ Scan Hidden Files in 00mn 05s



---\ Processus lancés
[MD5.72334F906C2E2B002CDD2FF9022FD957] - (.PixArt Imaging Incorporation - Registry Monitor.) -- C:\Windows\PixArt\Pac207\Monitor.exe   [319488] [PID.1700]
[MD5.34086F1DBB4065047EA3671CB70505CC] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe   [421776] [PID.2428]
[MD5.9DADF1A809ECEC86F04BDE35190D59FE] - (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe   [3147384] [PID.2444]
[MD5.12916E0642E92561C98B18A2A2D01B14] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe   [252848] [PID.2460]
[MD5.A73731A0B0A165907799E9AFB461F856] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files (x86)\Real\RealPlayer\Updateealsched.exe   [296096] [PID.2468]
[MD5.7E5ED973D3B3EDB33507DCC37F1D975D] - (.Check Point Software Technologies LTD - ZoneAlarm.) -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe   [73832] [PID.2568]
[MD5.7853D2AB445C10F97610B2B05FA4CF0A] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe   [512360] [PID.2872]
[MD5.050D1C454A49D4DF8EB5222D352B6630] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe   [917400] [PID.4628]
[MD5.72CB29B523061FF64B3F66B8F3A5E034] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [5648896] [PID.1524]
[MD5.FB5FA9016DEC70B0F3D3BF80B953E32A] - (.Check Point Software Technologies LTD - TrueVector Service.) -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe   [2447888] [PID.1136]
[MD5.F401929EE0CC92BFE7F15161CA535383] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe   [55184] [PID.1568]
[MD5.6B72E1E329C4E98C6B6FDD2D265E3BA3] - (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) -- C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe   [196664] [PID.2616]
[MD5.816FD5A6F3C2F3D600900096632FC60E] - (.Acer Incorporated - Global Registration Service.) -- C:\Program Files (x86)\eMachines\Registration\GregHSRW.exe   [1150496] [PID.2724]
[MD5.1ACAA67676E9E7BDA5E0C41B6E0DECAF] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe   [398184] [PID.2772]
[MD5.70DDE3A86DBEB1D6C3C30AD687B1877A] - (.Acer - Acer Update Service.) -- C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe   [240160] [PID.1992]
[MD5.50D3941555FEFDF46424431702EC5FB6] - (.Pas de propriétaire - ToolbarU Application.) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe   [945328] [PID.2208]
[MD5.C44F12B72DF42A037E65713B0F50B9D8] - (.AVG Technologies CZ, s.r.o. - AVG Installer Application.) -- C:\Program Files (x86)\AVG\AVG2013\avgmfapx.exe   [7330384] [PID.2844]
~ Scan Processes Running in 00mn 00s



---\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Abdouche\AppData\Local\Google\Chrome\User Data\Default\Preferences
~ Scan Google Browser in 00mn 00s



---\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Users\Abdouche\AppData\Roaming\Mozilla\Firefox\Profiles\avs9duzp.default\prefs.js
M3 - MFPP: Plugins - [Abdouche] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [Abdouche] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [Abdouche] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [Abdouche] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [Abdouche] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [Abdouche] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [Abdouche] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\yahoo-france.xml
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins
p-mswmp.dll
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.5.4".) -- C:\Program Files (x86)\Mozilla Firefox\Plugins
ppdf32.dll
P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins
ppl3260.dll
P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins
prjplug.dll
P2 - FPN:Firefox Plugin Navigator . (.RealPlayer - RealPlayer Download Plugin.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins
prpplugin.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_180.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.10411.0.) -- c:\Program Files\Microsoft Silverlight\5.1.10411.0
pctrl.dll
~ Scan Firefox Browser in 00mn 00s



---\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.acer-group.com/selection.html
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.acer-group.com/selection.html
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = about:home
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.google.com/?gws_rd=ssl
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ Scan IE Browser in 00mn 00s



---\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Scan Keys in 00mn 00s



---\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub [64Bits] - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer [64Bits] - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IEpbrowserrecordplugi
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter [64Bits] - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} . (...) -- C:\Program Files (x86)\AVG\AVG2012\avgssie.dll (.not file.)
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: ZoneAlarm Security Engine Registrar [64Bits] - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} . (.Check Point Software Technologies - ZoneAlarm Browser Security.) -- C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.d
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\
O2 - BHO: SkypeIEPluginBHO [64Bits] - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
~ Scan BHO in 00mn 00s



---\ Internet Explorer Toolbars (O3)
O3 - Toolbar: ZoneAlarm Security Engine [64Bits] - [HKLM]{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} . (.Check Point Software Technologies - ZoneAlarm Browser Security.) -- C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.d
~ Scan Toolbar in 00mn 00s



---\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe 
O4 - HKLM\..\Run: [Monitor] . (.PixArt Imaging Incorporation - Registry Monitor.) -- C:\Windows\PixArt\PAC207\Monitor.exe 
O4 - HKLM\..\Run: [ISW] . (.Check Point Software Technologies - ZoneAlarm Browser Security.) -- C:\Program Files\CheckPoint\ZAForceField\ForceField.exe 
O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (.not file.) 
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe 
O4 - HKCU\..\Run: [Neuf Media Center] . (.SFR - Media Center.) -- C:\Program Files (x86)\SFR\Media Center\MediaCenter.exe 
O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe 
O4 - HKLM\..\Wow6432Node\Run: [NortonOnlineBackupReminder] . (.Symantec Corporation - Norton Online Backup Service.) -- C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe 
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe 
O4 - HKLM\..\Wow6432Node\Run: [vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe (.not file.) 
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe 
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe 
O4 - HKLM\..\Wow6432Node\Run: [AVG_UI] . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe 
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe 
O4 - HKLM\..\Wow6432Node\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- c:\program files (x86)ealealplayer\Updateealsched.exe 
O4 - HKLM\..\Wow6432Node\Run: [ZoneAlarm] . (.Check Point Software Technologies LTD - ZoneAlarm.) -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe 
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-21-2026369455-379429309-476914872-1000\..\Run: [msnmsgr] ~"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (.not file.) 
O4 - HKUS\S-1-5-21-2026369455-379429309-476914872-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe 
O4 - HKUS\S-1-5-21-2026369455-379429309-476914872-1000\..\Run: [Neuf Media Center] . (.SFR - Media Center.) -- C:\Program Files (x86)\SFR\Media Center\MediaCenter.exe 
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
~ Scan Application in 00mn 00s



---\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\Abdouche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Crédit Mutuel.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe
O4 - Global Startup: C:\Users\Abdouche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Abdouche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Abdouche\Desktop\Abdouche Derdar - Raccourci.lnk . (...)  -- C:\Users\Abdouche\Documents\Abdouche Derdar.doc
O4 - Global Startup: C:\Users\Abdouche\Desktop\Documents - Raccourci.lnk . (...)  -- C:\Users\Abdouche\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms
O4 - Global Startup: C:\Users\Abdouche\Desktop\FXnet Trader Platform.lnk . (.FXnet(TM).)  -- C:\Users\Abdouche\AppData\Roaming\IFOREX\FXnet Trader Platform\iForex.Clients.Trader.exe
O4 - Global Startup: C:\Users\Abdouche\Desktop\HijackThis.lnk . (.Trend Micro Inc..)  -- C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe
O4 - Global Startup: C:\Users\Abdouche\Desktop\Microsoft Office Excel 2007.lnk . (...)  -- C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe
O4 - Global Startup: C:\Users\Abdouche\Desktop\Microsoft Office Word 2007.lnk . (...)  -- C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe
O4 - Global Startup: C:\Users\Abdouche\Desktop\photos vacances 2010-2011 - Raccourci.lnk . (...)  -- C:\Users\Abdouche\photos vacances 2010-2011
O4 - Global Startup: C:\Users\Abdouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Abdouche\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.)  -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
~ Scan Global Startup in 00mn 00s



---\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ Scan IE Control Panel in 00mn 00s



---\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32
apinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000009\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll
~ Scan Winsock in 00mn 00s



---\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{28896894-C80E-4AA6-8ACE-B77051660AB3}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{69C7B371-EB75-4FEC-8259-F587F4918716}: DhcpNameServer = 109.0.66.10 109.0.66.20
O17 - HKLM\System\CCS\Services\Tcpip\..\{6BB37934-DA43-43FF-B37D-8FCC3EB67D72}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{865B1A97-E544-466B-AB4E-B4F38855EC83}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{ECC74A37-993D-4E10-8926-E9941F981AEE}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{28896894-C80E-4AA6-8ACE-B77051660AB3}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{69C7B371-EB75-4FEC-8259-F587F4918716}: DhcpNameServer = 109.0.66.10 109.0.66.20
O17 - HKLM\System\CS1\Services\Tcpip\..\{6BB37934-DA43-43FF-B37D-8FCC3EB67D72}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{865B1A97-E544-466B-AB4E-B4F38855EC83}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{ECC74A37-993D-4E10-8926-E9941F981AEE}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{28896894-C80E-4AA6-8ACE-B77051660AB3}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{69C7B371-EB75-4FEC-8259-F587F4918716}: DhcpNameServer = 109.0.66.10 109.0.66.20
O17 - HKLM\System\CS2\Services\Tcpip\..\{6BB37934-DA43-43FF-B37D-8FCC3EB67D72}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{865B1A97-E544-466B-AB4E-B4F38855EC83}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{ECC74A37-993D-4E10-8926-E9941F981AEE}: DhcpNameServer = 192.168.1.1
~ Scan Domain in 00mn 00s



---\ Protocole additionnel (O18)
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: linkscanner [64Bits] - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} . (...) -- C:\Program Files (x86)\AVG\AVG2012\avgppa.dll
O18 - Handler: livecall [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ms-help [64Bits] - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: ms-itss [64Bits] - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- c:\Program Files (x86)\Common Files\Microsoft Shared\Information Retrieval\msitss.dll
O18 - Handler: msnim [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: skype-ie-addon-data [64Bits] - {91774881-D725-4E58-B298-07617B9B86A8} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Handler: skype4com [64Bits] - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: deflate [64Bits] - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Filter: gzip [64Bits] - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll
~ Scan Protocole Additionnel in 00mn 00s



---\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ Scan SSODL in 00mn 00s



---\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AVGIDSAgent (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) . (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ForceWare Intelligent Application Manage (ForceWare Intelligent Application Manager (IAM)) . (.Pas de propriétaire - app_filter Module.) - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcAppFlt.exe
O23 - Service: GRegService (Greg_Service) . (.Acer Incorporated - Global Registration Service.) - C:\Program Files (x86)\eMachines\Registration\GregHSRW.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: ZoneAlarm LTD Toolbar IswSvc (IswSvc) . (.Check Point Software Technologies - ZoneAlarm Browser Security.) - C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
O23 - Service:  (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service:  (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: ForceWare IP service (nSvcIp) . (.Pas de propriétaire - NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32
SvcIp.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 191.0.) - C:\Windows\system32
vvsvc.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Updater Service (Updater Service) . (.Acer - Acer Update Service.) - C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) . (.Check Point Software Technologies LTD - TrueVector Service.) - C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
O23 - Service:  (vToolbarUpdater14.0.1) . (.Pas de propriétaire - ToolbarU Application.) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe
O23 - Service:  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
~ Scan Services in 00mn 13s



---\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)
~ Scan Desktop Component in 00mn 00s



---\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s



---\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\Adobe Flash Player Updater.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\ROC_JAN2013_TB_rmv.job
[MD5.EA856F4A46320389D1899B2CAA7BF40F] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
[MD5.BE66B026CF488C87B4D0EA9E616FFA4A] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files (x86)\CCleaner\CCleaner.exe
[MD5.00000000000000000000000000000000] [APT] [DealPlyUpdate] (...) -- C:\Program Files (x86)\DealPly\DealPlyUpdate.exe (.not file.)
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
[MD5.E6019253451DBB67740F7027AD9E1CB5] [APT] [RealUpgradeLogonTaskS-1-5-21-2026369455-379429309-476914872-1000] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
[MD5.E6019253451DBB67740F7027AD9E1CB5] [APT] [RealUpgradeScheduledTaskS-1-5-21-2026369455-379429309-476914872-1000] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
[MD5.00000000000000000000000000000000] [APT] [ROC_JAN2013_TB_rmv] (...) -- C:\Program Files (x86)\AVG Secure Search\PostInstall\ROC.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files (x86)\Ask.com\UpdateTask.exe (.not file.)
[MD5.CBEC06E32D0AC9C3D0A9199EDC1FB959] [APT] [{3D0D68C9-FA35-439B-BA77-824A94FD30DC}] (.Skype Technologies S.A..) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
[MD5.00000000000000000000000000000000] [APT] [{6807BECC-5D71-4203-B768-4FCD2BFF186B}] (...) -- D:\setup.exe (.not file.)
[MD5.050D1C454A49D4DF8EB5222D352B6630] [APT] [{76307394-C4F2-44B8-B783-C441E635D6DF}] (.Mozilla Corporation.) -- c:\program files (x86)\mozilla firefox\firefox.exe
[MD5.B7CFA3F9DF5DF31E67B93C4AACBB9C97] [APT] [{F1021339-15C7-4FD0-B3F1-F5BA6B5EF1E0}] (.RealNetworks, Inc..) -- C:\program files (x86)ealealplayer\RealPlay.exe
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
~ Scan Scheduled Task in 00mn 12s



---\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Internet Explorer [64Bits] - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: Browser Customizations [64Bits] - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d'IEAK.) -- C:\Windows\System32\iedkcs32.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32	hemeui.dll
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Scan Active Setup in 00mn 00s



---\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver:  (AVGIDSDriver) . (.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Driver..) - C:\Windows\System32\DRIVERS\avgidsdrivera.sys
O41 - Driver:  (Avgldx64) . (.AVG Technologies CZ, s.r.o. - AVG AVI Loader Driver.) - C:\Windows\System32\DRIVERS\avgldx64.sys
O41 - Driver:  (Avgtdia) . (.AVG Technologies CZ, s.r.o. - AVG Network connection watcher.) - C:\Windows\System32\DRIVERS\avgtdia.sys
O41 - Driver:  (avgtp) . (.AVG Technologies - Pas de description.) - C:\Windows\system32\drivers\avgtpx64.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys
O41 - Driver:  (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver:  (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS
etbios.sys
O41 - Driver: C:\Windows\System32\drivers
etbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS
etbt.sys
O41 - Driver: C:\Windows\System32\drivers
siproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers
siproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERSdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\driversdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\driversdprefmp.sys
O41 - Driver: C:\Windows\System32	cpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS	dx.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers	ermdd.sys
O41 - Driver:  (truecrypt) . (.TrueCrypt Foundation - TrueCrypt Driver.) - C:\Windows\System32\drivers	ruecrypt.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver:  (Vsdatant) . (.Check Point Software Technologies LTD - ZoneAlarm Firewalling Driver.) - C:\Windows\System32\DRIVERS\vsdatant.sys
O41 - Driver:  (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32ascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver:  (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Scan Drivers in 00mn 00s



---\ Logiciels installés (O42)
O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- AVG
O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- {058EB68D-8F07-4E07-BD3B-B97D18E092F0}
O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- {9F0D08A0-5623-4EF6-A513-40048E20C4E0}
O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- {BFAB7835-55A2-41CD-AE66-F673BCA4E49F}
O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- {D9B7744C-1C39-49B8-86B3-F930631B4FE2}
O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {287ECFA4-719A-2143-A09B-D6A12DE54E40}
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {FE23D063-934D-4829-A0D8-00634CE79B4A}
O42 - Logiciel: Adobe Download Assistant - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- com.adobe.downloadassistant.AdobeDownloadAssistant
O42 - Logiciel: Adobe Download Assistant - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {E1845F1C-068C-F8F4-D31D-D3540D47C453}
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader 9.5.4 MUI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-FFFF-7B44-A91000000001}
O42 - Logiciel: Alice Greenfingers - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}
O42 - Logiciel: Amazonia - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11273477}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {122ADF8C-DDA1-480C-9936-C88F2825B265}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {6A76BEAF-6D1F-4273-A79B-DA8410A2E56B}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner
O42 - Logiciel: Chicken Invaders 2 - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110209593}
O42 - Logiciel: Crédit Mutuel - (.mobile.creditmutuel.fr.) [HKCU][64Bits] -- 1646143296.mobile.creditmutuel.fr
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: Dairy Dash - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115053100}
O42 - Logiciel: Dream Day First Home - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113832110}
O42 - Logiciel: FXnet Trader Platform - (.Nom de votre société.) [HKLM][64Bits] -- {B6D33E15-0B5A-4A8F-8034-A7DB28C80B15}
O42 - Logiciel: Farm Frenzy 2 - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11531173}
O42 - Logiciel: First Class Flurry - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115208410}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Google Earth - (.Google.) [HKLM][64Bits] -- {5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}
O42 - Logiciel: Granny In Paradise - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110551697}
O42 - Logiciel: Heroes of Hellas - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113786380}
O42 - Logiciel: Identity Card - (.Acer Incorporated.) [HKLM][64Bits] -- Identity Card
O42 - Logiciel: Java 7 Update 9 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217009FF}
O42 - Logiciel: Java(TM) 6 Update 31 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83216031FF}
O42 - Logiciel: JavaFX 2.1.1 - (.Oracle Corporation.) [HKLM][64Bits] -- {1111706F-666A-4037-7777-211328764D10}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Malwarebytes Anti-Malware version 1.70.0.1100 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Merriam Websters Spell Jam - (.Oberon Media.) [HKLM][64Bits] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112662477}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM][64Bits] -- {0214A441-A4AB-43A8-8DEF-2F73C5364673}
O42 - Logiciel: Mozilla Firefox 19.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 19.0 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM][64Bits] -- NVIDIA Drivers
O42 - Logiciel: NVIDIA ForceWare Network Access Manager - (.NVIDIA Corporation.) [HKLM][64Bits] -- InstallShield_{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}
O42 - Logiciel: NVIDIA ForceWare Network Access Manager - (.NVIDIA Corporation.) [HKLM][64Bits] -- {7CFA46E3-CC2F-4355-82AE-6012DC3633FD}
O42 - Logiciel: Norton Online Backup - (.Symantec.) [HKLM][64Bits] -- {C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}
O42 - Logiciel: Paint.NET v3.5.10 - (.dotPDN LLC.) [HKLM][64Bits] -- {529125EF-E3AC-4B74-97E6-F688A7C0F1C0}
O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM][64Bits] -- RealPlayer 15.0
O42 - Logiciel: RealUpgrade 1.1 - (.RealNetworks, Inc..) [HKLM][64Bits] -- {28C2DED6-325B-4CC7-983A-1777C8F7FBAB}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: SFR - Media Center - (.SFR.) [HKLM][64Bits] -- SFR_Media Center
O42 - Logiciel: Skype Toolbars - (.Skype Technologies S.A..) [HKLM][64Bits] -- {981029E0-7FC9-4CF3-AB39-6F133621921A}
O42 - Logiciel: Skype(TM) 5.10 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}
O42 - Logiciel: Snap.Do - (.ReSoft Ltd..) [HKLM][64Bits] -- {60DF47B6-5016-4DA4-AD7B-3CEC24FE7E6E}
O42 - Logiciel: Spider-Man(TM) - Allié ou Ennemi - (.Activision.) [HKLM][64Bits] -- InstallShield_{BDA6A019-2695-4AE1-88CE-EE7801BD41AA}
O42 - Logiciel: TrueCrypt - (.TrueCrypt Foundation.) [HKLM][64Bits] -- TrueCrypt
O42 - Logiciel: VLC media player 1.1.2 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player
O42 - Logiciel: Visual C++ 8.0 Runtime Setup Package (x64) - (.AVG Technologies CZ, s.r.o..) [HKLM][64Bits] -- {2FDBBCEA-62DB-45F4-B6E5-0E1FB2A1F29D}
O42 - Logiciel: Visual Studio 2008 x64 Redistributables - (.AVG Technologies.) [HKLM][64Bits] -- {FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}
O42 - Logiciel: Visual Studio 2010 x64 Redistributables - (.AVG Technologies.) [HKLM][64Bits] -- {21B133D6-5979-47F0-BE1C-F6A6B304693F}
O42 - Logiciel: WebAdSystem - (.KalityWeb.) [HKLM][64Bits] -- {A7039FE8-5B0F-4A15-8A76-8DDF0287C74E}
O42 - Logiciel: Welcome Center - (.Acer Incorporated.) [HKLM][64Bits] -- eMachines Welcome Center
O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM][64Bits] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
O42 - Logiciel: ZoneAlarm Firewall - (.Check Point Software Technologies Ltd..) [HKLM][64Bits] -- {BC3EBF1D-5F30-4E53-93A5-15FD9D1CF12B}
O42 - Logiciel: ZoneAlarm Free Firewall - (.Check Point.) [HKLM][64Bits] -- ZoneAlarm Free Firewall
O42 - Logiciel: ZoneAlarm Security - (.Check Point Software Technologies Ltd..) [HKLM][64Bits] -- {A338D97B-5164-4D07-9C5D-19236976B2A2}
O42 - Logiciel: eBay Worldwide - (.OEM.) [HKLM][64Bits] -- {E0B19DF7-B1C7-4937-82C4-0E4B1E346965}
O42 - Logiciel: eMachines GameZone Console - (.Oberon Media, Inc..) [HKLM][64Bits] -- {31D611A1-03B5-4018-BC6F-DDB5B5616478}_is1
O42 - Logiciel: eMachines Recovery Management - (.Acer Incorporated.) [HKLM][64Bits] -- {7F811A54-5A09-4579-90E1-C93498E230D9}
O42 - Logiciel: eMachines Registration - (.Acer Incorporated.) [HKLM][64Bits] -- eMachines Registration
O42 - Logiciel: eMachines ScreenSaver - (.eMachines Incorporated.) [HKLM][64Bits] -- eMachines Screensaver
O42 - Logiciel: eMachines Updater - (.Acer Incorporated.) [HKLM][64Bits] -- {EE171732-BEB4-4576-887D-CB62727F01CA}
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {840A3BAA-4C68-4581-9C7A-6F8D6CF531B9}
O42 - Logiciel: neroxml - (.Nero AG.) [HKLM][64Bits] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}

---\ HKCU & HKLM Software Keys
[HKCU\Software\AC3Filter]
[HKCU\Software\Acer]
[HKCU\Software\Activision]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Avg]
[HKCU\Software\AppDataLow\ISWVolatile]
[HKCU\Software\AppDataLow\RealNetworks]
[HKCU\Software\AppDataLow\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Avg]
[HKCU\Software\AppDataLow\Software\Google]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software\Monitored]
[HKCU\Software\AppDataLow\Software\settings]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Auslogics]
[HKCU\Software\Avg]
[HKCU\Software\CDDB]
[HKCU\Software\Canneverbe Limited]
[HKCU\Software\CheckPoint]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Cygnus Solutions]
[HKCU\Software\Google]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\IM Providers]
[HKCU\Software\IncrediMail]
[HKCU\Software\JEDI-VCL]
[HKCU\Software\JavaSoft]
[HKCU\Software\KeepVid]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\Neuf]
[HKCU\Software\Northcode Inc]
[HKCU\Software\Norton]
[HKCU\Software\ODBC]
[HKCU\Software\OEM]
[HKCU\Software\Oberon Media]
[HKCU\Software\Paint.NET]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\RealNetworks]
[HKCU\Software\Realtek]
[HKCU\Software\RegisteredApplications]
[HKCU\Software\Skype]
[HKCU\Software\SweetIM]
[HKCU\Software\TikGames]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\Wow6432Node]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\Yahoo]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\Zone Labs]
[HKLM\Software\<company>]
[HKLM\Software\AMD]
[HKLM\Software\ATI Technologies]
[HKLM\Software\AcerUtil]
[HKLM\Software\Acer]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Audible]
[HKLM\Software\Avg]
[HKLM\Software\Canneverbe Limited]
[HKLM\Software\CheckPoint]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\GEAR Software]
[HKLM\Software\Google]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\Intel]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\ODBC]
[HKLM\Software\OEM]
[HKLM\Software\OemSetup]
[HKLM\Software\Paint.NET]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SRS Labs]
[HKLM\Software\Sonic]
[HKLM\Software\Symantec]
[HKLM\Software\WNLT]
[HKLM\Software\Waves Audio]
[HKLM\Software\Wow6432Node\685D6D1C-D73A-4F37-B7E5E53660311DDB]
[HKLM\Software\Wow6432Node\Acer Incorporated]
[HKLM\Software\Wow6432Node\Activision]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\AdwCleaner]
[HKLM\Software\Wow6432Node\Apple Computer, Inc.]
[HKLM\Software\Wow6432Node\Apple Inc.]
[HKLM\Software\Wow6432Node\Audible]
[HKLM\Software\Wow6432Node\Avg]
[HKLM\Software\Wow6432Node\AviSynth]
[HKLM\Software\Wow6432Node\CDDB]
[HKLM\Software\Wow6432Node\CheckPoint]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\Cygnus Solutions]
[HKLM\Software\Wow6432Node\Digital River]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\IncrediMail]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\JavaSoft]
[HKLM\Software\Wow6432Node\JreMetrics]
[HKLM\Software\Wow6432Node\LogMeIn Rescue]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware (Trial)]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\NVIDIA Corporation]
[HKLM\Software\Wow6432Node\Nero]
[HKLM\Software\Wow6432Node\Neuf]
[HKLM\Software\Wow6432Node\Norton]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\OEM]
[HKLM\Software\Wow6432Node\Oberon Media]
[HKLM\Software\Wow6432Node\Oracle]
[HKLM\Software\Wow6432Node\PixArt]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\RealNetworks]
[HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.]
[HKLM\Software\Wow6432Node\Realtek]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\Skype]
[HKLM\Software\Wow6432Node\Sonic]
[HKLM\Software\Wow6432Node\SweetIM]
[HKLM\Software\Wow6432Node\TrendMicro]
[HKLM\Software\Wow6432Node\VideoLAN]
[HKLM\Software\Wow6432Node\Vittalia]
[HKLM\Software\Wow6432Node\Volatile]
[HKLM\Software\Wow6432Node\Windows]
[HKLM\Software\Wow6432Node\Xing Technology Corp.]
[HKLM\Software\Wow6432Node\Yahoo]
[HKLM\Software\Wow6432Node\Zone Labs]
[HKLM\Software\Wow6432Node\mozilla.org]
[HKLM\Software\Wow6432Node]
~ Scan Softwares in 00mn 00s



---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 13/09/2011 - 11:50:18 - [-539,061] ----D C:\Program Files (x86)\Activision
O43 - CFD: 16/03/2012 - 17:48:47 - [657,039] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 16/03/2012 - 17:48:49 - [2,842] ----D C:\Program Files (x86)\Adobe Download Assistant
O43 - CFD: 10/01/2012 - 15:04:02 - [2,316] ----D C:\Program Files (x86)\Apple Software Update
O43 - CFD: 19/10/2012 - 19:31:23 - [132,935] ----D C:\Program Files (x86)\AVG
O43 - CFD: 18/08/2010 - 22:00:58 - [0,140] ----D C:\Program Files (x86)\AviSynth 2.5
O43 - CFD: 10/01/2012 - 15:03:08 - [0,602] ----D C:\Program Files (x86)\Bonjour
O43 - CFD: 22/10/2012 - 00:51:54 - [9,926] ----D C:\Program Files (x86)\CCleaner
O43 - CFD: 17/03/2013 - 16:56:36 - [29,512] ----D C:\Program Files (x86)\CheckPoint
O43 - CFD: 02/02/2013 - 20:17:50 - [526,721] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 26/10/2011 - 19:10:54 - [39,233] ----D C:\Program Files (x86)\eMachines
O43 - CFD: 05/02/2010 - 01:41:36 - [799,682] ----D C:\Program Files (x86)\eMachines GameZone
O43 - CFD: 26/01/2013 - 16:44:27 - [98,800] ----D C:\Program Files (x86)\Google
O43 - CFD: 09/08/2010 - 22:22:39 - [27,436] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 17/03/2013 - 16:57:01 - [4,483] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 20/06/2012 - 16:09:09 - [136,246] ----D C:\Program Files (x86)\iTunes
O43 - CFD: 17/03/2013 - 16:55:00 - [206,482] ----D C:\Program Files (x86)\Java
O43 - CFD: 17/03/2013 - 16:57:55 - [12,207] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 10/07/2011 - 19:23:04 - [563,294] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 05/02/2010 - 01:46:49 - [7,431] ----D C:\Program Files (x86)\Microsoft Office Suite Activation Assistant
O43 - CFD: 12/05/2012 - 21:49:55 - [40,838] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 26/03/2010 - 12:48:05 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 26/03/2010 - 12:50:41 - [0,627] ----D C:\Program Files (x86)\Microsoft Visual Studio 8
O43 - CFD: 13/10/2012 - 12:43:48 - [139,669] ----D C:\Program Files (x86)\Microsoft Works
O43 - CFD: 27/06/2010 - 00:54:18 - [7,789] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 17/03/2013 - 17:53:25 - [92,963] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 17/03/2013 - 16:56:39 - [0,212] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 14/07/2009 - 06:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 03/06/2010 - 12:34:57 - [0] ----D C:\Program Files

abdouchefr · Answer

est-ce normal que AVG mette la mise à jour en autant de temps que ça?

abdouchefr · Answer

http://cjoint.com/?CCrsPwPNhCR

abdouchefr · Answer

https://www.cjoint.com/c/CCrvuTVAd5A

abdouchefr · Answer

le rapport de adwcleaner ne s'affiche pas après le redémarrage et ce après 2 essais de suppression.

abdouchefr · Answer

effectivement un bloc note s'ouvre mais avec une petite fenêtre m'indiquant que l'accès est refusé

abdouchefr · Answer

le bloc est vide après avoir cliqué sur ok de la petite fenêtre me refusant l'accès

abdouchefr · Answer

oui et contrairement aux autres rapport il est vide ( j'ai lancé adwcleaner et suppression directement selon tes consignes)

abdouchefr · Answer

je vais lancé une dernière action pour être sur de ne pas m'être trompé

abdouchefr · Answer

au fait quand je lance ZHPDiag il se met en route mais me met en même temps " le serveur zebulon n'est pas disponible

abdouchefr · Answer

bizarre il me met des messages de problème d'accès aux fichiers mais se lance quand même

abdouchefr · Answer

l'ordi se met à beuguer maintenant de temps à autre

abdouchefr · Answer

https://www.cjoint.com/c/CCrwdTuX3Qm

abdouchefr · Answer

je l'ai téléchargé d'après ton lien que tu m'a fourni

abdouchefr · Answer

enfin le rapport adwcleaner:

# AdwCleaner v2.115 - Rapport créé le 17/03/2013 à 23:21:39
# Mis à jour le 17/03/2013 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : Abdouche - ABDOUCHE-PC
# Mode de démarrage : Normal
# Exécuté depuis : C:\Users\Abdouche\Downloads\adwcleaner(2).exe
# Option [Suppression]


***** [Services] *****


***** [Fichiers / Dossiers] *****

Supprimé au redémarrage : C:\Program Files (x86)\Common Files\AVG Secure Search

***** [Registre] *****


***** [Navigateurs] *****

-\ Internet Explorer v8.0.7601.17514

[OK] Le registre ne contient aucune entrée illégitime.

-\ Mozilla Firefox v19.0.2 (fr)

Fichier : C:\Users\Abdouche\AppData\Roaming\Mozilla\Firefox\Profiles\avs9duzp.default\prefs.js

[OK] Le fichier ne contient aucune entrée illégitime.

-\ Google Chrome v [Impossible d'obtenir la version]

Fichier : C:\Users\Abdouche\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Le fichier ne contient aucune entrée illégitime.

*************************

AdwCleaner[R1].txt - [30369 octets] - [24/02/2013 20:10:55]
AdwCleaner[S1].txt - [87171 octets] - [02/02/2013 20:16:42]
AdwCleaner[S2].txt - [16573 octets] - [24/02/2013 20:11:08]
AdwCleaner[S6].txt - [1256 octets] - [17/03/2013 23:21:39]

########## EOF - C:\AdwCleaner[S6].txt - [1316 octets] ##########

cetace18 · Answer

Hello g3n-h@ckm@n , c'est quoi P_S s'il te plait ?
Il répare certaines fonctions comme  Pre_scan  ?

cetace18 · Answer

Merci, ben oui c'est logique, mais comme il était écrit: 
P_S est moins explicatif que Pre_scan je pense. 
Donc j'ai pensé que c'étaient des outils différents.

abdouchefr · Answer

https://pjjoint.malekal.com/files.php?id=20130319_p8z8d6u116

abdouchefr · Answer

désolé pour le ZHPDiag mais il ne se télécharge pas malgré plusieurs tentatives et à partir de ton lien et sur le site de zebulon pareil rien ne se passe .

abdouchefr · Answer

j'ai un soucis avec l'installation il n'y a que le ZHPFix qui a un îcone sur le bureau le Diag lui n'est pas sur le bureau et pourtant j'ai coché la case correspondante

abdouchefr · Answer

désolé il était placé ailleurs à toute pour le  lien

abdouchefr · Answer

et voici le lien :



https://www.cjoint.com/c/CCutqIs1kDd

abdouchefr · Answer

rapport ZHPFix

Rapport de ZHPFix 2013.3.9.1 par Nicolas Coolman, Update du 9/03/2013
Fichier d'export Registre : 
Run by Abdouche at 21/03/2013 20:56:48
High Elevated Privileges : OK
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Corbeille vidée

========== Logiciel(s) ==========
ABSENT Software Key: O42 - Logiciel: Snap.Do - (.. ReSoft Ltd) [HKLM] [64Bits] - {60DF47B6-5016-4DA4-AD7B-3CEC24FE7E6E}
ABSENT Software Key: O42 - Logiciel: WebAdSystem - (.. KalityWeb) [HKLM] [64Bits] - {A7039FE8-5B0F-4A15-8A76-8DDF0287C74E}

========== Clé(s) du Registre ==========
ABSENT Key: \Software\Classes\Installer\Products\F479A18A22A86E3429341589FF57D81A". (SweetIM pour Messenger 3.6.). - C: \ Windows \ Installer \ {A81A974F-8A22-43E6-9243-5198FF758DA1} \ ARPPRODUCTICON.exe
ABSENT Key: \Software\Classes\Installer\Products\FA20CB7A821113A4CB8FA1E38E303D3B". (SweetIM Toolbar pour Internet Explorer 4.2.). - C: \ Windows \ Installer \ {A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3} \ ARPPRODUCTICON.exe

========== Valeur(s) du Registre ==========
ABSENT Valeur Standard Profile: FirewallRaz : 
ABSENT Valeur Domain Profile: FirewallRaz : 

========== Dossier(s) ==========
Aucun dossiers CLSID Local utilisateur vide
SUPPRIME Temporaires Windows
SUPPRIME Flash Cookies

========== Fichier(s) ==========
SUPPRIME Temporaires Windows
SUPPRIME Flash Cookies

========== Restauration Système ==========
Point de restauration du système créé avec succès

========== Autre ==========
NON TRAITE [HKCU \ Software \ SweetIM]
NON TRAITE [HKLM \ Software \ Wow6432Node \ SweetIM]
NON TRAITE [HKLM \ Software \ Classes \ Interface \ {01947140-417F-46B6-8751-A3A2B8345E1A}]
NON TRAITE [HKLM \ Software \ Classes \ Interface \ {819FFE21-35C7-4925-8CDA-4E0E2DB94302}]
NON TRAITE [HKLM \ Software \ Classes \ Installer \ Features \ F479A18A22A86E3429341589FF57D81A]
NON TRAITE [HKLM \ Software \ Wow6432Node \ Microsoft \ Tracing \ offerbox_RASAPI32]
NON TRAITE [HKLM \ Software \ Wow6432Node \ Microsoft \ Tracing \ offerbox_RASMANCS]
NON TRAITE [HKLM \ Software \ Wow6432Node \ Microsoft \ Tracing \ OfferBoxHTTPProxy_RASAPI32]
NON TRAITE [HKLM \ Software \ Wow6432Node \ Microsoft \ Tracing \ OfferBoxHTTPProxy_RASMANCS]


========== Récapitulatif ==========
2 : Clé(s) du Registre
2 : Valeur(s) du Registre
3 : Dossier(s)
2 : Fichier(s)
2 : Logiciel(s)
1 : Restauration Système
9 : Autre


End of clean in 00mn 21s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 21/03/2013 20:56:48 [2506]

abdouchefr · Answer

https://www.cjoint.com/c/CCvwAC6j2m0

abdouchefr · Answer

j'ai AVG qui a réagit pour la prmeière fois : "Windows essaie de se connecter a un réseau public ; il est conseillé ........ etc etc etc bref de ne pas se connecter sur un réseau public.                   ce qui est le cas car le réseau " maison_sfr" ne prend pas

abdouchefr · Answer

le réseau a été réinitialisé par un tech de chez SFR au téléphone et il lui a donné ce nom mais au début elle avait justement  le nom suivant neuf_4D30 ; et pareil j'avais le même soucis quelques temps après par contre avec mon netbook j'arrive a me connecter sur maison_sfr donc conclusion le soucis vient du PC de bureau et non de la box j'ai un CD d'installation SFR je vais le relancer plus tard pour voir si un changement est intervenu entre temps avec toutes ces manipes et merci encore

abdouchefr · Answer

slt

désolé de revenir mais c'est pour mon netbook le système d'exploitation uen fois ouvert beugue ( il me marque mozillafirefox ne réponds pas ) et ça me le fait à chaque ouverture de page au bout de quelques minutes :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:43:42, on 04/04/2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\PROGRA~1\AVG\AVG2013\avgrsx.exe
C:\Program Files\AVG\AVG2013\avgcsrvx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe
C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG2013\avgidsagent.exe
C:\Program Files\AVG\AVG2013\avgwdsvc.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\StkCSrv.exe
C:\Program Files\AVG\AVG2013\avgnsx.exe
C:\Program Files\AVG\AVG2013\avgemcx.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\CheckPoint\ZAForceField\ForceField.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Samsung\Samsung EDS\EDSAgent.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Samsung\Samsung Battery Manager\BatteryManager.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\AVG\AVG2013\avgui.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe
C:\Program Files\SAMSUNG\MagicKBD\MagicKBD.exe
C:\Program Files\SAMSUNG\MagicKBD\PerformanceManager.exe
C:\Program Files\Real\RealPlayer\update\realsched.exe
C:\WINDOWS\system32\igfxext.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Abdesalem Derdar\Local Settings\Application Data\Updater21810\Updater21810.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-search.com/?affID=119649&tt=190313_wo3&babsrc=HP_ss&mntrId=F0460C60765E5980
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: CrossriderApp0021810 - {11111111-1111-1111-1111-110211181110} - C:\Program Files\Giant Savings Extension\Giant Savings Extension.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files\Delta\delta\1.8.10.0\bh\delta.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: DealPly - {EF7BD87A-8024-11E2-F316-F3E56188709B} - C:\Program Files\DealPly\DealPlyIE.dll (file missing)
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O3 - Toolbar: Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files\Delta\delta\1.8.10.0\deltaTlbr.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [EDS] C:\Program Files\Samsung\Samsung EDS\EDSAgent.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [DMHotKey] C:\Program Files\Samsung\Easy Display Manager\DMLoader.exe
O4 - HKLM\..\Run: [SUPBackground] C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe
O4 - HKLM\..\Run: [BatteryManager] C:\Program Files\Samsung\Samsung Battery Manager\BatteryManager.exe
O4 - HKLM\..\Run: [MagicKeyboard] C:\Program Files\SAMSUNG\MagicKBD\PreMKBD.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [ISW] "C:\Program Files\CheckPoint\ZAForceField\ForceField.exe" /icon="hidden"
O4 - HKLM\..\Run: [ZoneAlarm] "C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe"
O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real\RealPlayer\update\realsched.exe"  -osboot
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Updater21810.exe] C:\Documents and Settings\Abdesalem Derdar\Local Settings\Application Data\Updater21810\Updater21810.exe /extensionid=21810 /extensionname='Giant Savings Extension' /chromeid=halffneccaebicfdfajnbfgpglahfgoe /stayidle /delay=300
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Envoyer à Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre7\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre7\bin\jp2iexp.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: c:\docume~1\alluse~1\applic~1\browse~1\261095~1.52\{c16c1~1\browse~1.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: ZoneAlarm LTD Toolbar IswSvc (IswSvc) - Check Point Software Technologies - C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Syntek AVStream USB2.0 WebCam Service (StkSSrv) - Syntek America Inc. - C:\WINDOWS\System32\StkCSrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe
O23 - Service: vToolbarUpdater14.0.1 - Unknown owner - C:\Program Files\Fichiers communs\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe (file missing)
O23 - Service: vToolbarUpdater14.2.0 - Unknown owner - C:\Program Files\Fichiers communs\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe (file missing)

abdouchefr · Answer

c'est le système de navigation et non d'exploitation excuse moi et merci

abdouchefr · Answer

https://www.cjoint.com/?CDfmpCTlxA2 




# AdwCleaner v2.200 - Rapport créé le 05/04/2013 à 11:34:53
# Mis à jour le 02/04/2013 par Xplode
# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)
# Nom d'utilisateur : Abdesalem Derdar - YOUR-10A2E35C12
# Mode de démarrage : Normal
# Exécuté depuis : C:\Documents and Settings\Abdesalem Derdar\Mes documents\Téléchargements\adwcleaner(4).exe
# Option [Suppression]


***** [Services] *****


***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Documents and Settings\Abdesalem Derdar\Application Data\BabSolution
Dossier Supprimé : C:\Documents and Settings\Abdesalem Derdar\Application Data\Babylon
Dossier Supprimé : C:\Documents and Settings\Abdesalem Derdar\Application Data\file scout
Dossier Supprimé : C:\Documents and Settings\Abdesalem Derdar\Application Data\Mozilla\Firefox\Profiles\nzttb45z.default\extensions\ffxtlbr@delta.com
Dossier Supprimé : C:\Documents and Settings\Abdesalem Derdar\Application Data\PerformerSoft
Dossier Supprimé : C:\Documents and Settings\Abdesalem Derdar\Application Data\SpeedanAlysis
Dossier Supprimé : C:\Documents and Settings\Abdesalem Derdar\Local Settings\Application Data\Giant Savings Extension
Dossier Supprimé : C:\Documents and Settings\Abdesalem Derdar\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\halffneccaebicfdfajnbfgpglahfgoe
Dossier Supprimé : C:\Documents and Settings\All Users\Application Data\Babylon
Dossier Supprimé : C:\Documents and Settings\All Users\Application Data\Tarma Installer
Dossier Supprimé : C:\Program Files\Delta
Dossier Supprimé : C:\Program Files\Giant Savings Extension
Fichier Supprimé : C:\Documents and Settings\Abdesalem Derdar\Application Data\Mozilla\Firefox\Profiles\nzttb45z.default\searchplugins\BrowserProtect.xml
Fichier Supprimé : C:\Documents and Settings\Abdesalem Derdar\Application Data\Mozilla\Firefox\Profiles\nzttb45z.default\searchplugins\delta.xml
Fichier Supprimé : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml

***** [Registre] *****

Clé Supprimée : HKCU\Software\Cr_Installer
Clé Supprimée : HKCU\Software\Crossrider
Clé Supprimée : HKCU\Software\d6dadfe73fb812
Clé Supprimée : HKCU\Software\DataMngr
Clé Supprimée : HKCU\Software\DataMngr_Toolbar
Clé Supprimée : HKCU\Software\Delta
Clé Supprimée : HKCU\Software\Giant Savings Extension
Clé Supprimée : HKCU\Software\InstallCore
Clé Supprimée : HKCU\Software\InstalledBrowserExtensions
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\BrowserProtect
Clé Supprimée : HKLM\Software\Babylon
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110211181110}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EF7BD87A-8024-11E2-F316-F3E56188709B}
Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0021810.BHO
Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0021810.BHO.1
Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0021810.Sandbox
Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0021810.Sandbox.1
Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltaappCore
Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltaappCore.1
Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltadskBnd
Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1
Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltaHlpr
Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltaHlpr.1
Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escortIEPane
Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.deltaESrvc
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Clé Supprimée : HKLM\SOFTWARE\d6dadfe73fb812
Clé Supprimée : HKLM\Software\DataMngr
Clé Supprimée : HKLM\Software\Delta
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110211181110}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110211181110}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{118D6CE9-5F18-42F9-958A-14676A629FDE}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Giant Savings Extension
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110211181110}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EF7BD87A-8024-11E2-F316-F3E56188709B}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Giant Savings Extension
Clé Supprimée : HKLM\SOFTWARE\Software
Clé Supprimée : HKLM\Software\Tarma Installer
Valeur Supprimée : HKCU\Software\Mozilla\Firefox\Extensions [speedanalysis@SpeedAnalysis.com]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{82E1477C-B154-48D3-9891-33D83C26BCD3}]
Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [speedanalysis@SpeedAnalysis.com]
Valeur Supprimée : HKLM\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist [1]

***** [Navigateurs] *****

-\ Internet Explorer v8.0.6001.18702

Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.delta-search.com/?affID=119649&tt=190313_wo3&babsrc=HP_ss&mntrId=F0460C60765E5980 --> hxxp://www.google.com
Remplacé : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://www.delta-search.com/?affID=119649&tt=190313_wo3&babsrc=NT_ss&mntrId=F0460C60765E5980 --> hxxp://www.google.com

-\ Mozilla Firefox v19.0.2 (fr)

Fichier : C:\Documents and Settings\Abdesalem Derdar\Application Data\Mozilla\Firefox\Profiles\nzttb45z.default\prefs.js

C:\Documents and Settings\Abdesalem Derdar\Application Data\Mozilla\Firefox\Profiles\nzttb45z.default\user.js ... Supprimé !

Supprimée : user_pref("avg.install.userHPSettings", "hxxp://www.delta-search.com/?affID=119649&tt=190313_wo3&bab[...]
Supprimée : user_pref("avg.install.userSPSettings", "Delta Search");
Supprimée : user_pref("browser.newtab.url", "hxxp://www.delta-search.com/?affID=119649&tt=190313_wo3&babsrc=NT_s[...]
Supprimée : user_pref("browser.search.order.1", "Delta Search");
Supprimée : user_pref("browser.search.selectedEngine", "Delta Search");
Supprimée : user_pref("extensions.crossriderapp21810.21810.InstallationThankYouPage", true);
Supprimée : user_pref("extensions.crossriderapp21810.21810.InstallationTime", 1364939326);
Supprimée : user_pref("extensions.crossriderapp21810.21810.InstallationUserSettings.searchUserConifrmation", fal[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.InstallationUserSettings.setHomepage", false);
Supprimée : user_pref("extensions.crossriderapp21810.21810.InstallationUserSettings.setNewTab", false);
Supprimée : user_pref("extensions.crossriderapp21810.21810.InstallationUserSettings.setSearch", false);
Supprimée : user_pref("extensions.crossriderapp21810.21810.active", true);
Supprimée : user_pref("extensions.crossriderapp21810.21810.addressbar", "");
Supprimée : user_pref("extensions.crossriderapp21810.21810.addressbarenhanced", "");
Supprimée : user_pref("extensions.crossriderapp21810.21810.backgroundjs", "\n\n//\n");
Supprimée : user_pref("extensions.crossriderapp21810.21810.backgroundver", 34);
Supprimée : user_pref("extensions.crossriderapp21810.21810.can_run_bg_code", true);
Supprimée : user_pref("extensions.crossriderapp21810.21810.certdomaininstaller", "");
Supprimée : user_pref("extensions.crossriderapp21810.21810.changeprevious", false);
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie.InstallationTime.expiration", "Fri Feb 01 2030[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie.InstallationTime.value", "1364939326");
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie.InstallerParams.expiration", "Fri Feb 01 2030 [...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:0[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_aoi.value", "1364939326");
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_arbitrary_code.expiration", "Fri Apr 05 2[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_arbitrary_code.value", "%22/**/%22");
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_blocklist.expiration", "Fri Apr 05 2013 1[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_blocklist.value", "%22nonexistantdomain.c[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_country_code.expiration", "Tue Apr 09 201[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_country_code.value", "%22FR%22");
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:0[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_crr.value", "1365154044");
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_currenttime.expiration", "Fri Feb 01 2030[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_currenttime.value", "%221364833081%22");
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 0[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_hotfix20111102645.value", "%221%22");
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_installer_params.expiration", "Fri Feb 01[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_installer_params.value", "%7B%22source_id[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_installtime.expiration", "Fri Feb 01 2030[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_installtime.value", "%221364833271%22");
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 20[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_parent_zoneid.value", "%2258429%22");
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_pc_20120828.value", "1364939643853");
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 [...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_product_id.value", "%221242%22");
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:0[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie._GPL_zoneid.value", "%22166492%22");
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 [...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.cookie.dbtest.value", "1364939621590");
Supprimée : user_pref("extensions.crossriderapp21810.21810.description", "Save big with Giant Savings! Coupons d[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.domain", "");
Supprimée : user_pref("extensions.crossriderapp21810.21810.enablesearch", false);
Supprimée : user_pref("extensions.crossriderapp21810.21810.fbremoteurl", "");
Supprimée : user_pref("extensions.crossriderapp21810.21810.group", 0);
Supprimée : user_pref("extensions.crossriderapp21810.21810.homepage", "");
Supprimée : user_pref("extensions.crossriderapp21810.21810.iframe", false);
Supprimée : user_pref("extensions.crossriderapp21810.21810.internaldb.InstallerIdentifiers.expiration", "Fri Feb[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.internaldb.InstallerIdentifiers.value", "%7B%22instal[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_appVer.expiration", "Fri Feb 01 [...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_appVer.value", "51");
Supprimée : user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_lastVersion.expiration", "Fri Fe[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_lastVersion.value", "1");
Supprimée : user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_meta.expiration", "Fri Feb 01 20[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_meta.value", "%7B%7D");
Supprimée : user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_nextCheck.expiration", "Fri Apr [...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_nextCheck.value", "true");
Supprimée : user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_queue.expiration", "Fri Feb 01 2[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_queue.value", "%7B%7D");
Supprimée : user_pref("extensions.crossriderapp21810.21810.internaldb.SoftwareDetected.expiration", "Fri Feb 01 [...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.internaldb.SoftwareDetected.value", "%7B%22AnySoftwar[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.js", "\n\nif(\"undefined\"!=typeof _GPL_PLUGIN){var _[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.manifesturl", "");
Supprimée : user_pref("extensions.crossriderapp21810.21810.name", "Giant Savings Extension");
Supprimée : user_pref("extensions.crossriderapp21810.21810.newtab", "");
Supprimée : user_pref("extensions.crossriderapp21810.21810.opensearch", "");
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_1.code", "appAPI._cr_config={appID:fun[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_1.name", "base");
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_1.ver", 4);
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_1000014.code", "Array.prototype.indexO[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_1000014.name", "GPL Plugin (Loader)");
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_1000014.ver", 15);
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_1000015.code", "var a=appAPI.db.getLis[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_1000015.name", "GPL Background (BG)");
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_1000015.ver", 35);
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_13.code", "(function(a){a.selectedText[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_13.name", "CrossriderAppUtils");
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_13.ver", 2);
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_14.code", "if(typeof(appAPI)===\"undef[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_14.name", "CrossriderUtils");
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_14.ver", 2);
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_16.code", "if((typeof isBackground===\[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_16.name", "FFAppAPIWrapper");
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_16.ver", 5);
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_17.code", "if(typeof window!==\"undefi[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_17.name", "jQuery");
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_17.ver", 3);
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_21.code", "var CrossriderDebugManager=[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_21.name", "debug");
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_21.ver", 3);
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_22.code", "(function(a){appAPI.queueMa[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_22.name", "resources");
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_22.ver", 3);
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_28.code", "var CrossriderInitializerPl[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_28.name", "initializer");
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_28.ver", 2);
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_4.code", "var jQuery = $jquery_171 = $[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_4.name", "jquery_1_7_1");
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_4.ver", 3);
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_47.code", "(function(){appAPI.ready=fu[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_47.name", "resources_background");
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_47.ver", 2);
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_64.code", "(function(){var h=\"__CR_EM[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_64.name", "appApiMessage");
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_64.ver", 1);
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_72.code", "if(appAPI.__should_activate[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_72.name", "appApiValidation");
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_72.ver", 2);
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_78.code", "if(typeof jQuery!==\"undefi[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_78.name", "CrossriderInfo");
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_78.ver", 2);
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_98.code", "(function(){var b=\"cr_\"+a[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_98.name", "omniCommands");
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins.plugin_98.ver", 1);
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins_lists.plugins_0", "4,14,78,16,64,47,72,98,100[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins_lists.plugins_1", "17,14,78,13,16,64,4,1,21,2[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.plugins_lists.plugins_5", "4,14,78,13,16,64,47,72");
Supprimée : user_pref("extensions.crossriderapp21810.21810.pluginsurl", "hxxp://app-static.crossrider.com/plugin[...]
Supprimée : user_pref("extensions.crossriderapp21810.21810.pluginsversion", 45);
Supprimée : user_pref("extensions.crossriderapp21810.21810.publisher", "215 Apps");
Supprimée : user_pref("extensions.crossriderapp21810.21810.searchstatus", 0);
Supprimée : user_pref("extensions.crossriderapp21810.21810.setnewtab", false);
Supprimée : user_pref("extensions.crossriderapp21810.21810.settingsurl", "");
Supprimée : user_pref("extensions.crossriderapp21810.21810.thankyou", "");
Supprimée : user_pref("extensions.crossriderapp21810.21810.updateinterval", 360);
Supprimée : user_pref("extensions.crossriderapp21810.21810.ver", 51);
Supprimée : user_pref("extensions.crossriderapp21810.adsOldValue", -1);
Supprimée : user_pref("extensions.crossriderapp21810.apps", "21810");
Supprimée : user_pref("extensions.crossriderapp21810.bic", "13dccbd753e35036ff94952a924646a5");
Supprimée : user_pref("extensions.crossriderapp21810.cid", 21810);
Supprimée : user_pref("extensions.crossriderapp21810.firstrun", false);
Supprimée : user_pref("extensions.crossriderapp21810.hadappinstalled", true);
Supprimée : user_pref("extensions.crossriderapp21810.installationdate", 1364939601);
Supprimée : user_pref("extensions.crossriderapp21810.lastcheck", 22752568);
Supprimée : user_pref("extensions.crossriderapp21810.lastcheckitem", 22752568);
Supprimée : user_pref("extensions.crossriderapp21810.modetype", "production");
Supprimée : user_pref("extensions.crossriderapp21810.reportInstall", true);
Supprimée : user_pref("extensions.delta.admin", false);
Supprimée : user_pref("extensions.delta.aflt", "babsst");
Supprimée : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Supprimée : user_pref("extensions.delta.autoRvrt", "false");
Supprimée : user_pref("extensions.delta.dfltLng", "en");
Supprimée : user_pref("extensions.delta.excTlbr", false);
Supprimée : user_pref("extensions.delta.id", "f046c3dc0000000000000c60765e5980");
Supprimée : user_pref("extensions.delta.instlDay", "15797");
Supprimée : user_pref("extensions.delta.instlRef", "sst");
Supprimée : user_pref("extensions.delta.newTab", false);
Supprimée : user_pref("extensions.delta.prdct", "delta");
Supprimée : user_pref("extensions.delta.prtnrId", "delta");
Supprimée : user_pref("extensions.delta.rvrt", "false");
Supprimée : user_pref("extensions.delta.smplGrp", "none");
Supprimée : user_pref("extensions.delta.tlbrId", "base");
Supprimée : user_pref("extensions.delta.tlbrSrchUrl", "");
Supprimée : user_pref("extensions.delta.vrsn", "1.8.10.0");
Supprimée : user_pref("extensions.delta.vrsnTs", "1.8.10.021:29:02");
Supprimée : user_pref("extensions.delta.vrsni", "1.8.10.0");

*************************

AdwCleaner[R1].txt - [1186 octets] - [20/03/2013 16:21:07]
AdwCleaner[R2].txt - [1235 octets] - [22/03/2013 23:35:40]
AdwCleaner[R3].txt - [7667 octets] - [27/03/2013 02:36:38]
AdwCleaner[S1].txt - [1353 octets] - [18/03/2013 10:49:07]
AdwCleaner[S2].txt - [427 octets] - [20/03/2013 16:20:41]
AdwCleaner[S3].txt - [1257 octets] - [20/03/2013 16:21:38]
AdwCleaner[S4].txt - [1298 octets] - [22/03/2013 23:36:16]
AdwCleaner[S5].txt - [7821 octets] - [27/03/2013 02:37:21]
AdwCleaner[S6].txt - [24916 octets] - [05/04/2013 11:34:53]

########## EOF - C:\AdwCleaner[S6].txt - [24977 octets] ##########

abdouchefr · Answer

désolé mais c'est court ça coupe a chaque ouverture de navigation

abdouchefr · Answer

Rapport de ZHPFix 2013.3.9.1 par Nicolas Coolman, Update du 9/03/2013
Fichier d'export Registre : 
Run by Abdesalem Derdar at 06/04/2013 05:41:34
High Elevated Privileges : OK
Windows XP Home Edition Service Pack 3 (Build 2600)

Corbeille vidée

========== Logiciel(s) ==========
SUPPRIME NetAssistant
ABSENT Software Key: NetAssistant 3.6.5

========== Processus mémoire ==========
SUPPRIME Memory Process: C:\Documents and Settings\Abdesalem Derdar\Local Settings\Application Data\Updater21810\Updater21810.exe

========== Clé(s) du Registre ==========
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\PriceGong
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E5C8B5FB7CB5DD447A0BAAAF637FBD77
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF96568971BEAC14B8815883832BD484
SUPPRIME Key: HKLM\Software\Classes\Installer\Features\9EC6D81181F59F2459A84176A626F9ED
SUPPRIME Key: HKLM\Software\Classes\Installer\Products\9EC6D81181F59F2459A84176A626F9ED
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9EC6D81181F59F2459A84176A626F9ED
SUPPRIME Key: HKLM\Software\Classes\Interface\{FD8F79A0-D2E2-4FA2-AEAF-393EAC8064F7}
ABSENT Key: \Software\Classes\Installer\Products\9EC6D81181F59F2459A84176A626F9ED

========== Valeur(s) du Registre ==========
SUPPRIME RunValue: Updater21810.exe
ABSENT RunValue: Updater21810.exe
ABSENT [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]:Updater21810.exe
SUPPRIME FirewallRaz (SP) : C:\Program Files\Windows Live\Messenger\wlcsdk.exe
SUPPRIME FirewallRaz (SP) : C:\Program Files\Windows Live\Messenger\msnmsgr.exe
SUPPRIME FirewallRaz (DP) : C:\Program Files\Windows Live\Messenger\wlcsdk.exe
SUPPRIME FirewallRaz (DP) : C:\Program Files\Windows Live\Messenger\msnmsgr.exe
Aucune valeur présente dans la clé d'exception du registre (FirewallRaz)

========== Préférences navigateur ==========
SUPPRIME Mozilla Pref: user_pref("extensions.crossrider.bic", "13dccbd753e35036ff94952a924646a5");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.InstallationTime", 1365154782);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.active", true);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.addressbar", "");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.addressbarenhanced", "");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.backgroundjs", "\n\n//\n");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.backgroundver", 34);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.can_run_bg_code", true);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.certdomaininstaller", "");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.changeprevious", false);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie.InstallationTime.value", "1365154782");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_aoi.value", "1365154782");
ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_arbitrary_code.expiration", "Fri Apr 05 2013 11:49:39 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_arbitrary_code.value", "%22/**/%22");
ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_blocklist.expiration", "Fri Apr 05 2013 11:49:39 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_blocklist.value", "%22nonexistantdomain.com%22");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_country_code.expiration", "Fri Apr 12 2013 11:40:07 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_country_code.value", "%22FR%22");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_crr.value", "1365155080");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_currenttime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_currenttime.value", "%221364833081%22");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_hotfix20111102645.value", "%221%22");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_installer_params.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_installer_params.value", "%7B%22source_id%22%3A%2258429%22%2C%22sub_id%[...]
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_installtime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_installtime.value", "%221364833081%22");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_parent_zoneid.value", "%2258429%22");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_pc_20120828.value", "1365155087843");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_product_id.value", "%221242%22");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_zoneid.value", "%22167904%22");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie.dbtest.value", "1365154806965");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.description", "Save big with Giant Savings! Coupons display instantly while you're [...]
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.domain", "");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.enablesearch", false);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.fbremoteurl", "");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.group", 0);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.homepage", "");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.iframe", false);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_appVer.value", "51");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_lastVersion.value", "1");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_meta.value", "%7B%7D");
ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_nextCheck.expiration", "Fri Apr 05 2013 17:39:44 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_nextCheck.value", "true");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.internaldb.Resources_queue.value", "%7B%7D");
ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.js", "\n\nif(\"undefined\"!=typeof _GPL_PLUGIN){var _GPL_=function(){_GPL_PLUGIN.st[...]
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.manifesturl", "");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.name", "Giant Savings Extension");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.newtab", "");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.opensearch", "");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;i[...]
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_1.ver", 4);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_1000014.code", "Array.prototype.indexOf||(Array.prototype.indexOf=fu[...]
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_1000014.name", "GPL Plugin (Loader)");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_1000014.ver", 15);
ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_1000015.code", "var a=appAPI.db.getList(),cf_ran=!1,_GPL_BG={vars:{}[...]
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_1000015.ver", 35);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_13.code", "(function(a){a.selectedText=function(e,c){function d(){if[...]
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_13.ver", 2);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_14.code", "if(typeof(appAPI)===\"undefined\"){appAPI={};}var CR__bIs[...]
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_14.ver", 2);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"||isBackground!==t[...]
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_16.name", "FFAppAPIWrapper");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_16.ver", 5);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_17.code", "if(typeof window!==\"undefined\"){\n/*!\n * jQuery JavaSc[...]
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_17.ver", 3);
ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_21.code", "var CrossriderDebugManager=(function(h){var f={appId:appA[...]
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_21.name", "debug");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_21.ver", 3);
ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],register:funct[...]
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_22.ver", 3);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){var c={appId[...]
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_28.name", "initializer");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_28.ver", 2);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_4.code", "var jQuery
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_4.name", "jquery_1_7_1");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_4.ver", 3);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isR[...]
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_47.ver", 2);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_64.code", "(function(){var h=\"__CR_EMPTY_CHANNEL__\";var d=function[...]
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_64.name", "appApiMessage");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_64.ver", 1);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_72.code", "if(appAPI.__should_activate_validation__===true){(functio[...]
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_72.ver", 2);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_78.code", "if(typeof jQuery!==\"undefined\"&&(jQuery)&&typeof naviga[...]
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_78.name", "CrossriderInfo");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_78.ver", 2);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_98.code", "(function(){var b=\"cr_\"+appAPI.appID+\"internalMessage\[...]
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_98.name", "omniCommands");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins.plugin_98.ver", 1);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins_lists.plugins_0", "4,14,78,16,64,47,72,98,1000015");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins_lists.plugins_1", "17,14,78,13,16,64,4,1,21,22,72,98,1000014,28");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.plugins_lists.plugins_5", "4,14,78,13,16,64,47,72");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.pluginsurl", "http://app-static.crossrider.com/plugin/apps/21810/plugins/087/ff/plu[...]
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.pluginsversion", 45);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.publisher", "215 Apps");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.searchstatus", 0);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.setnewtab", false);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.settingsurl", "");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.thankyou", "");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.updateinterval", 360);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.ver", 51);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.apps", "21810");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.bic", "13dccbd753e35036ff94952a924646a5");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.cid", 21810);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.firstrun", false);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.hadappinstalled", true);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.installationdate", 1365154780);
ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.lastcheck", 22752580);
ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.lastcheckitem", 22752585);
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.modetype", "production");
SUPPRIME Mozilla Pref: user_pref("extensions.crossriderapp21810.reportInstall", true);

========== Dossier(s) ==========
Aucun dossiers CLSID Local utilisateur vide
SUPPRIME Temporaires Windows
SUPPRIME Flash Cookies

========== Fichier(s) ==========
SUPPRIME File***: c:\documents and settings\abdesalem derdar\local settings\application data\updater21810\updater21810.exe
ABSENT File: c:\documents and settings\abdesalem derdar\local settings\application data\updater21810\updater21810.exe
ABSENT File: c:\documents and settings\abdesalem derdar\local settings\application data\updater21810\updater21810.e
SUPPRIME File: c:\documents and settings\abdesalem derdar\local settings\application data\google\chrome\user data\default\databases\chrome-extension_halffneccaebicfdfajnbfgpglahfgoe_0\3 
ABSENT Folder/File: c:\program files\software
ABSENT Folder/File: c:\documents and settings\abdesalem derdar\local settings\application data\software
ABSENT Folder/File: c:\documents and settings\abdesalem derdar\local settings\application data\updater21810
ABSENT Folder/File: c:\documents and settings\abdesalem derdar\local settings\application data\updater21810
ABSENT Folder/File: c:\documents and settings\abdesalem derdar\application data\mozilla\firefox\profiles\nzttb45z.default\extensions\extension21810@extension21810.com
SUPPRIME Temporaires Windows
SUPPRIME Flash Cookies

========== Restauration Système ==========
Point de restauration du système créé avec succès


========== Récapitulatif ==========
1 : Processus mémoire
8 : Clé(s) du Registre
8 : Valeur(s) du Registre
3 : Dossier(s)
11 : Fichier(s)
2 : Logiciel(s)
124 : Préférences navigateur
1 : Restauration Système


End of clean in 02mn 02s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 06/04/2013 05:41:34 [18466]

abdouchefr · Answer

slt et merci 

voici le lien concernant le diag ZHP

	https://www.cjoint.com/?CDgxkq6pb6F  
  	
pour information je n'ai plus ces blocages récurrents je pense que j'ai du (sans le voir) télécharger des pluggings via un lecteur vidéo player pour voir des matchs en live.

abdouchefr · Answer

rapport ZHPFix:

Rapport de ZHPFix 2013.3.9.1 par Nicolas Coolman, Update du 9/03/2013
Fichier d'export Registre : 
Run by Abdesalem Derdar at 06/04/2013 23:47:19
High Elevated Privileges : OK
Windows XP Home Edition Service Pack 3 (Build 2600)

Corbeille vidée

========== Valeur(s) du Registre ==========
ABSENT Valeur Domain Profile: FirewallRaz : 
Aucune valeur présente dans la clé d'exception du registre (FirewallRaz)

========== Préférences navigateur ==========
ABSENT Mozilla Pref: user_pref("extensions.crossriderapp21810.21810.cookie._GPL_arbitrary_code.expiration", "Sat Apr 06 2013 05:42:21 GMT+0200");

========== Dossier(s) ==========
Aucun dossiers CLSID Local utilisateur vide
SUPPRIME Temporaires Windows
SUPPRIME Flash Cookies

========== Fichier(s) ==========
ABSENT File: c:\documents and settings\abdesalem derdar\application data\mozilla\firefox\profiles
zttb45z.default\searchpluginsecherche-alot.xml
SUPPRIME Temporaires Windows
SUPPRIME Flash Cookies

========== Restauration Système ==========
Point de restauration du système créé avec succès


========== Récapitulatif ==========
2 : Valeur(s) du Registre
3 : Dossier(s)
3 : Fichier(s)
1 : Préférences navigateur
1 : Restauration Système


End of clean in 00mn 15s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 06/04/2013 04:41:34 [18519]
C:\ZHP\ZHPFix[R2].txt - 06/04/2013 23:47:19 [1373]


et rapport WinChk

Rapport WinChk v2.0 - 06/04/2013 à 23:49
Mis à jour le 08/07/11 à 16h par Xplode
Système d'exploitation : Microsoft Windows XP (32 bits) [version 5.1.2600] Service Pack 3
Nom d'utilisateur : Abdesalem Derdar - YOUR-10A2E35C12 (Administrateur)
Exécuté depuis : C:\Documents and Settings\Abdesalem Derdar\Mes documents\Téléchargements\winchk0.exe


¤¤¤¤¤ Recherche | Registre ¤¤¤¤¤

... OK !

¤¤¤¤¤ Recherche | AntiWPA ¤¤¤¤¤

... OK !

¤¤¤¤¤ Recherche | KMS ¤¤¤¤¤

... OK !

¤¤¤¤¤ Recherche | Fichiers suspect ¤¤¤¤¤

... OK !

¤¤¤¤¤ Vérification | Fichiers système ¤¤¤¤¤

... OK !

¤¤¤¤¤ Vérification | Fichier Hosts ¤¤¤¤¤

... OK !

¤¤¤¤¤ Vérification | Windows Update ¤¤¤¤¤

¤ Paramètres : Les mises à jour automatiques sont activées et sont installées automatiquement.

¤ Dernière mise à jour détectée le 2013-04-06 à 10:41:30
¤ Dernière mise à jour téléchargée le 2013-03-21 à 04:55:08
¤ Dernière mise à jour installée le 2013-03-22 à 02:02:32

########## EOF - "C:\WinChk.txt" - [1097 octets] ##########

abdouchefr · Answer

https://pjjoint.malekal.com/files.php?id=20130407_h5j8m5o8f15

abdouchefr · Answer

ok c'est bon et surtout merci pour l'aide cependant pour le problème de la connection sur le PC de bureau c'est la configuration requise  de windows qui ne correspond pas à la configuration du réseau.
Aurais-tu un lien permettant de mieux analyser le problème et éventuellement la solution si solution y a ?
Merci

abdouchefr · Answer

il ne se télécharge pas : délai d'attente dépassé après quelques secondes .....?c'est le netbook que tu as résolu et celui-ci c'est du bureau pour la connexion

merci

abdouchefr · Answer

bonsoir voici le rapport ZHPDiag du PC bureau ( pour rappel problème de configuration neufbox avec le PC ) .......avec du retard et exécuté selon ta consigne : Rapport de ZHPDiag v2013.4.13.73 par Nicolas Coolman, Update du 13/04/2013 Run by Abdouche at 14/04/2013 00:55:49 State : Problème connexion internet High Elevated Privileges : OK UAC : Deactivate by user ---\ Web Browser MSIE: Internet Explorer v8.0.7601.17514 MFIE: Mozilla Firefox 19.0.2 v19.0.2 (Defaut) ---\ Windows Product Information ~ Langage: Français Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601) Windows Server License Manager Script : OK ~ Windows(R) 7, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : 7QJB7 Windows License : OK ~ Windows Remaining Initializations Number : 3 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\ System Protection AVG 2013 v13.0.3162 Malwarebytes Anti-Malware version 1.70.0.1100 ZoneAlarm Firewall v11.0.000.054 ZoneAlarm Security v11.0.000.054 Windows Defender W7 ---\ System Optimizer CCleaner v4.00 ---\ Software Update Adobe Flash Player 11 Plugin Adobe Reader 9.5.4 MUI Java 7 Update 17 ---\ System Information ~ Processor: AMD64 Family 16 Model 6 Stepping 2, AuthenticAMD ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 3839 MB (61% free) System Restore: Activé (Enable) System drive C: has 257 GB (56%) free of 453 GB ---\ Logged in mode ~ Computer Name: ABDOUCHE-PC ~ User Name: Abdouche ~ All Users Names: HomeGroupUser$, Administrateur, Abdouche, ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89 Logged in as Administrator ---\ Environnement Variables ~ System Unit : C:\ ~ %AppData% : C:\Users\Abdouche\AppData\Roaming\ ~ %Desktop% : C:\Users\Abdouche\Desktop\ ~ %Favorites% : C:\Users\Abdouche\Favorites\ ~ %LocalAppData% : C:\Users\Abdouche\AppData\Local\ ~ %StartMenu% : C:\Users\Abdouche\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 257 Go of 453 Go) D:\ CD-ROM drive (Free 0 Go of 1 Go) E:\ Floppy drive, Flash card reader, USB Key (Not Inserted) F:\ Floppy drive, Flash card reader, USB Key (Not Inserted) G:\ Floppy drive, Flash card reader, USB Key (Not Inserted) H:\ Floppy drive, Flash card reader, USB Key (Free 2 Go of 4 Go) ---\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ~ Security Center: Scanned in 00mn 00s ---\ Recherche particulière de fichiers génériques [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024] [MD5.9E7687984107C81B859200C9BD570AFF] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.02/03/2013 - 06:56:00.) -- C:\Windows\System32\wininet.dll [1188864] [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656] [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448] [MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160] [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456] [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400] [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224] [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208] [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers etBT.sys [261632] [MD5.B8965FB53551B5455630A4B804D0791F] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.02/03/2013 - 07:04:53.) -- C:\Windows\system32\Drivers tfs.sys [1655656] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280] [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184] [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers dx.sys [119296] [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808] ~ Generic Processes: Scanned in 00mn 02s ---\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 2/193 ~ Mes musiques (My Musics) : 4/64 ~ Mes Videos (My Videos) : 2/213 ~ Mes Favoris (My Favorites) : 1/36 ~ Mes Documents (My Documents) : 2/4393 ~ Mon Bureau (My Desktop) : 1/31 ~ Menu demarrer (Programs) : 1/28 ~ Hidden Files: Scanned in 00mn 03s ---\ Processus lancés [MD5.7853D2AB445C10F97610B2B05FA4CF0A] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [512360] [PID.3096] [MD5.72334F906C2E2B002CDD2FF9022FD957] - (.PixArt Imaging Incorporation - Registry Monitor.) -- C:\Windows\PixArt\Pac207\Monitor.exe [319488] [PID.3232] [MD5.34086F1DBB4065047EA3671CB70505CC] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776] [PID.3440] [MD5.BA92C496F08D78F7DB263A20C36AA546] - (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe [4394032] [PID.3452] [MD5.A73731A0B0A165907799E9AFB461F856] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files (x86)\Real\RealPlayer\Update ealsched.exe [296096] [PID.3472] [MD5.7E5ED973D3B3EDB33507DCC37F1D975D] - (.Check Point Software Technologies LTD - ZoneAlarm.) -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [73832] [PID.3484] [MD5.12916E0642E92561C98B18A2A2D01B14] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848] [PID.3496] [MD5.BF2F2717C13A4BD4FD73F2788534E86B] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [917400] [PID.240] [MD5.AA6844A5127ED4B20DF6D313467B929D] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [17304] [PID.4720] [MD5.680AD8F376970696B45269F074A8A28E] - (.Adobe Systems, Inc. - Adobe Flash Player 11.6 r602.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe [1822424] [PID.4420] [MD5.00E193148E1DC8145CE4219900593705] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [6742016] [PID.5276] [MD5.FB5FA9016DEC70B0F3D3BF80B953E32A] - (.Check Point Software Technologies LTD - TrueVector Service.) -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [2447888] [PID.1344] [MD5.F401929EE0CC92BFE7F15161CA535383] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55184] [PID.1872] [MD5.0D8244A9DB70BC6C36E2FB56F6039AB6] - (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) -- C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [4937264] [PID.1920] [MD5.DC98337F0D2A9F6C0B6FB682297ECE3B] - (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) -- C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [282624] [PID.1952] [MD5.816FD5A6F3C2F3D600900096632FC60E] - (.Acer Incorporated - Global Registration Service.) -- C:\Program Files (x86)\eMachines\Registration\GregHSRW.exe [1150496] [PID.1292] [MD5.1ACAA67676E9E7BDA5E0C41B6E0DECAF] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [398184] [PID.1672] [MD5.916B8954AC3E06DC9E898AFFB41F3FB6] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [682344] [PID.1840] [MD5.70DDE3A86DBEB1D6C3C30AD687B1877A] - (.Acer - Acer Update Service.) -- C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe [240160] [PID.2160] [MD5.50D3941555FEFDF46424431702EC5FB6] - (.Pas de propriétaire - ToolbarU Application.) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe [945328] [PID.2212] =>Toolbar.AVGSearch [MD5.F02A533F517EB38333CB12A9E8963773] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [136176] [PID.4976] [MD5.41ABB7150EC085EEA0D2BC5D3D691988] - (.AVG Technologies CZ, s.r.o. - AVG Installer Application.) -- C:\Program Files (x86)\AVG\AVG2013\avgmfapx.exe [7548744] [PID.5436] ~ Processes Running: Scanned in 00mn 02s ---\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users\Abdouche\AppData\Local\Google\Chrome\User Data\Default\Preferences ~ Google Browser: Scanned in 00mn 00s ---\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) C:\Users\Abdouche\AppData\Roaming\Mozilla\Firefox\Profiles\avs9duzp.default\prefs.js ~ Firefox Browser: 19 Legitimates Scanned in 00mn 00s ---\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.acer-group.com/selection.html R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.acer-group.com/selection.html R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 ~ IE Browser: 15 Legitimates Scanned in 00mn 00s ---\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\ Redirection du fichier Hosts (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Hosts File: Scanned in 00mn 00s ~ Nombre de lignes (Lines number): 21 ---\ Browser Helper Objects de navigateur (O2) ~ BHO: 8 Legitimates Scanned in 00mn 00s ---\ Internet Explorer Toolbars (O3) O3 - Toolbar: ZoneAlarm Security Engine [64Bits] - [HKLM]{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} . (.Check Point Software Technologies - ZoneAlarm Browser Security.) -- C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll ~ Toolbar: Scanned in 00mn 00s ---\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe O4 - HKLM\..\Run: [Monitor] . (.PixArt Imaging Incorporation - Registry Monitor.) -- C:\Windows\PixArt\PAC207\Monitor.exe O4 - HKLM\..\Run: [ISW] . (.Check Point Software Technologies - ZoneAlarm Browser Security.) -- C:\Program Files\CheckPoint\ZAForceField\ForceField.exe O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (.not file.) O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe O4 - HKCU\..\Run: [Neuf Media Center] . (.SFR - Media Center.) -- C:\Program Files (x86)\SFR\Media Center\MediaCenter.exe O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe O4 - HKLM\..\Wow6432Node\Run: [NortonOnlineBackupReminder] . (.Symantec Corporation - Norton Online Backup Service.) -- C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe O4 - HKLM\..\Wow6432Node\Run: [vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe (.not file.) =>Toolbar.AVGSearch O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe O4 - HKLM\..\Wow6432Node\Run: [AVG_UI] . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe O4 - HKLM\..\Wow6432Node\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files (x86)\Real\RealPlayer\update ealsched.exe O4 - HKLM\..\Wow6432Node\Run: [ZoneAlarm] . (.Check Point Software Technologies LTD - ZoneAlarm.) -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-21-2026369455-379429309-476914872-1000\..\Run: [msnmsgr] ~"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (.not file.) O4 - HKUS\S-1-5-21-2026369455-379429309-476914872-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe O4 - HKUS\S-1-5-21-2026369455-379429309-476914872-1000\..\Run: [Neuf Media Center] . (.SFR - Media Center.) -- C:\Program Files (x86)\SFR\Media Center\MediaCenter.exe ~ Application: Scanned in 00mn 00s ---\ Autres liens utilisateurs (O4) O4 - GS\Desktop: Adobe Download Assistant.lnk . (...) -- C:\Program Files (x86)\Adobe Download Assistant\Adobe Download Assistant.exe O4 - GS\Desktop: Adobe Reader 9.lnk . (.Adobe Systems Incorporated - Adobe Reader 9.5.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe O4 - GS\Desktop: AVG 2013.lnk . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe O4 - GS\Desktop: CCleaner.lnk . (.Piriform Ltd - CCleaner.) -- C:\Program Files (x86)\CCleaner\CCleaner64.exe O4 - GS\Desktop: eMachines Boutique Accessoire.lnk . (...) -- C:\Program Files (x86)\eMachines Accessory Store\StartUrl.exe (.not file.) O4 - GS\Desktop: eMachines GameZone Console.lnk . (.Oberon Media - eMachines GameZone Console.) -- C:\Program Files (x86)\eMachines GameZone\GameConsole\eMachines Game Console.exe O4 - GS\Desktop: Google Earth.lnk . (.Google - Google Earth.) -- C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe O4 - GS\Desktop: Malwarebytes Anti-Malware.lnk . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe O4 - GS\Desktop: MBRCheck.lnk . (...) -- C:\Program Files (x86)\ZHPDiag\mbrcheck.exe O4 - GS\Desktop: Microsoft Works.lnk . (.Microsoft® Corporation - Microsoft® Works.) -- C:\Program Files (x86)\Microsoft Works\MSWorks.exe O4 - GS\Desktop: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O4 - GS\Desktop: Offres gratuites.lnk . (...) -- C:\Program Files (x86)\Real\RealPlayer\freeoffers.rnx (.not file.) O4 - GS\Desktop: RealPlayer.lnk . (.RealNetworks, Inc. - RealPlayer.) -- C:\program files (x86) eal ealplayer\RealPlay.exe O4 - GS\Desktop: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files (x86)\ZHPDiag\ZHPhep.exe O4 - GS\Desktop: ZHPFix.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe O4 - GS\Desktop: ZoneAlarm Security.lnk . (.Check Point Software Technologies LTD - ZoneAlarm.) -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe O4 - GS\TaskBar: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\TaskBar: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O4 - GS\TaskBar: RealPlayer.lnk . (.RealNetworks, Inc. - RealPlayer.) -- C:\program files (x86) eal ealplayer\RealPlay.exe O4 - GS\TaskBar: Welcome Center.lnk . (.Acer Incorporated - Welcome Center.) -- C:\Program Files (x86)\eMachines\Welcome Center\OEMWelcomeCenter.exe O4 - GS\TaskBar: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe O4 - GS\TaskBar: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe O4 - GS\Programs: Crédit Mutuel.lnk . (.Microsoft Corporation - Microsoft Silverlight Out-of-Browser Launch.) -- C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe O4 - GS\Programs: Internet Explorer (64-bit).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\QuickLaunch: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.) -- C:\Windows\system32\eudcedit.exe O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) -- C:\Windows\system32\WFS.exe O4 - GS\SendTo: Skype.lnk . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe O4 - GS\Desktop: Abdouche Derdar - Raccourci.lnk . (...) -- C:\Users\Abdouche\Documents\Abdouche Derdar.doc O4 - GS\Desktop: Documents - Raccourci.lnk . (...) -- C:\Users\Abdouche\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms O4 - GS\Desktop: FXnet Trader Platform.lnk . (.FXnet(TM) - FXnet Trader.) -- C:\Users\Abdouche\AppData\Roaming\IFOREX\FXnet Trader Platform\iForex.Clients.Trader.exe O4 - GS\Desktop: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\Desktop: Microsoft Office Excel 2007.lnk . (...) -- C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe O4 - GS\Desktop: Microsoft Office Word 2007.lnk . (...) -- C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe O4 - GS\Desktop: photos vacances 2010-2011 - Raccourci.lnk . (...) -- C:\Users\Abdouche\photos vacances 2010-2011 O4 - GS\Desktop: ZHPDiag2(1) - Raccourci.lnk . (.Nicolas Coolman - ZHPDiag.) -- H:\ZHPDiag2(1).exe ~ Global Startup: Scanned in 00mn 03s ---\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5) ~ IE Control Panel: 1 Legitimates Scanned in 00mn 00s ---\ Winsock hijacker (Layered Service Provider) (O10) ~ Winsock: 9 Legitimates Scanned in 00mn 00s ---\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{28896894-C80E-4AA6-8ACE-B77051660AB3}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{69C7B371-EB75-4FEC-8259-F587F4918716}: DhcpNameServer = 109.0.66.10 109.0.66.20 O17 - HKLM\System\CCS\Services\Tcpip\..\{6BB37934-DA43-43FF-B37D-8FCC3EB67D72}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{865B1A97-E544-466B-AB4E-B4F38855EC83}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{ECC74A37-993D-4E10-8926-E9941F981AEE}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{28896894-C80E-4AA6-8ACE-B77051660AB3}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{69C7B371-EB75-4FEC-8259-F587F4918716}: DhcpNameServer = 109.0.66.10 109.0.66.20 O17 - HKLM\System\CS1\Services\Tcpip\..\{6BB37934-DA43-43FF-B37D-8FCC3EB67D72}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{865B1A97-E544-466B-AB4E-B4F38855EC83}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{ECC74A37-993D-4E10-8926-E9941F981AEE}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{28896894-C80E-4AA6-8ACE-B77051660AB3}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{69C7B371-EB75-4FEC-8259-F587F4918716}: DhcpNameServer = 109.0.66.10 109.0.66.20 O17 - HKLM\System\CS2\Services\Tcpip\..\{6BB37934-DA43-43FF-B37D-8FCC3EB67D72}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{865B1A97-E544-466B-AB4E-B4F38855EC83}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{ECC74A37-993D-4E10-8926-E9941F981AEE}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 109.0.66.10 109.0.66.20 ~ Domain: Scanned in 00mn 00s ---\ Protocole additionnel (O18) O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll ~ Protocole Additionnel: Scanned in 00mn 00s ---\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) ~ SSODL: 1 Legitimates Scanned in 00mn 00s ---\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: (vToolbarUpdater14.0.1) . (.Pas de propriétaire - ToolbarU Application.) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe =>Toolbar.AVGSearch ~ Services: 16 Legitimates Scanned in 00mn 15s ---\ Enumération Active Desktop & MHTML Editor (O24) ~ Desktop Component: 1 Legitimates Scanned in 00mn 00s ---\ BootExecute (O34) ~ BEX: 1 Legitimates Scanned in 00mn 00s ---\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\ROC_JAN2013_TB_rmv.job [356] [MD5.00000000000000000000000000000000] [APT] [ROC_JAN2013_TB_rmv] (...) -- C:\Program Files (x86)\AVG Secure Search\PostInstall\ROC.exe (.not file.) [0] =>Toolbar.AVGSearch [MD5.00000000000000000000000000000000] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files (x86)\Ask.com\UpdateTask.exe (.not file.) [0] =>Toolbar.Ask [MD5.00000000000000000000000000000000] [APT] [{6807BECC-5D71-4203-B768-4FCD2BFF186B}] (...) -- D:\setup.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{C25228CE-EA24-414F-80B7-74DBB5F8E5B0}] (...) -- C:\Users\Abdouche\Downloads\ZHPDiag2(1).exe (.not file.) [0] ~ Scheduled Task: 20 Legitimates Scanned in 00mn 41s ---\ Composants installés (ActiveSetup Installed Components) (O40) ~ Active Setup: 11 Legitimates Scanned in 00mn 01s ---\ Pilotes lancés au démarrage (O41) ~ Drivers: 78 Legitimates Scanned in 00mn 01s ---\ Logiciels installés (O42) O42 - Logiciel: FXnet Trader Platform - (.Nom de votre société.) [HKLM][64Bits] -- {B6D33E15-0B5A-4A8F-8034-A7DB28C80B15} O42 - Logiciel: Snap.Do - (.ReSoft Ltd..) [HKLM][64Bits] -- {60DF47B6-5016-4DA4-AD7B-3CEC24FE7E6E} =>Hijacker.SmartBar O42 - Logiciel: WebAdSystem - (.KalityWeb.) [HKLM][64Bits] -- {A7039FE8-5B0F-4A15-8A76-8DDF0287C74E} O42 - Logiciel: ZoneAlarm Firewall - (.Check Point Software Technologies Ltd..) [HKLM][64Bits] -- {BC3EBF1D-5F30-4E53-93A5-15FD9D1CF12B} O42 - Logiciel: ZoneAlarm Free Firewall - (.Check Point.) [HKLM][64Bits] -- ZoneAlarm Free Firewall O42 - Logiciel: ZoneAlarm Security - (.Check Point Software Technologies Ltd..) [HKLM][64Bits] -- {A338D97B-5164-4D07-9C5D-19236976B2A2} ~ Logic: 107 Legitimates Scanned in 00mn 00s ---\ HKCU & HKLM Software Keys [HKCU\Software\IncrediMail] [HKCU\Software\KeepVid] [HKCU\Software\SweetIM] =>PUP.SweetIM [HKLM\Software\WNLT] [HKLM\Software\Wow6432Node\IncrediMail] [HKLM\Software\Wow6432Node\SweetIM] =>PUP.SweetIM ~ Key Software: 206 Legitimates Scanned in 00mn 00s ---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 28/09/2010 - 15:20:04 - [0,000] ----D C:\ProgramData\hsswpr O43 - CFD: 30/03/2012 - 11:41:09 - [12,856] ----D C:\Users\Abdouche\AppData\Roaming\IFOREX O43 - CFD: 30/03/2012 - 11:43:36 - [0,007] ----D C:\Users\Abdouche\AppData\Local\FXnet(TM) O43 - CFD: 30/03/2012 - 12:04:32 - [0,005] ----D C:\Users\Abdouche\AppData\Local\iFOREX O43 - CFD: 02/01/2013 - 01:24:05 - [0,002] ----D C:\Users\Abdouche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IFOREX ~ Program Folder: 176 Legitimates Scanned in 00mn 02s ---\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.7D38AF578D0F46E7515C8D3ABF1B2161] - 21/03/2013 - 22:19:30 R--A- . (...) -- C:\Pre_Scan_21_03_2013_21_06_29.txt [34668] O44 - LFC:[MD5.2EAA9BD5D9D749BA411AD9C5FE2E26D8] - 19/03/2013 - 18:26:08 ---A- . (...) -- C:\DelFix.txt [1514] O44 - LFC:[MD5.0B9EE63DFC1F49804E19BE6389624756] - 17/03/2013 - 17:46:31 RSHAD . (...) -- C:\Windows\System32\Drivers\vsconfig.xml [417564] ~ Files: 54 Legitimates Scanned in 01mn 01s ---\ Déni du service (Local Security Authority) (O48) ~ LSA: 9 Legitimates Scanned in 00mn 00s ---\ Contrôle du Safe Boot (CSB) (O49) ~ CBS: 13 Legitimates Scanned in 00mn 00s ---\ Trojan Driver Search Data (HKLM) (O52) ~ TDSD: 2 Legitimates Scanned in 00mn 00s ---\ Microsoft Control Security Providers (O54) ~ MSCP: 2 Legitimates Scanned in 00mn 00s ---\ Microsoft Windows Policies System (O55) O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 ~ MWPS: 16 Legitimates Scanned in 00mn 00s ---\ Microsoft Windows Policies Explorer (O56) ~ MWPE Keys: 3 Legitimates Scanned in 00mn 00s ---\ Liste des Drivers Système (O58) O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088] ~ Drivers: Scanned in 00mn 00s ---\ Liste des outils de nettoyage (O63) O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 ~ ADS: Scanned in 00mn 00s ---\ Liste des services Legacy (O64) ~ Legacy: 88 Legitimates Scanned in 00mn 01s ---\ File Associations Shell Spawning (O67) ~ FASS Keys: 18 Legitimates Scanned in 00mn 00s ---\ Start Menu Internet (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\ Search Browser Infection (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - https://www.bing.com/?toHttps=1&redig=69DA0EF8272048D9864AF4DB37211DE8 O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - https://www.google.com/?gws_rd=ssl ~ Keys: Scanned in 00mn 00s ---\ Recherche des services démarrés par Svchost (O83) ~ Services: 32 Legitimates Scanned in 00mn 00s ---\ Recherche particuliere à la racine de certains dossiers (O84) [MD5.FC6AA20F66BD7958D3D7339B28A68B21] [SPRF][09/08/2012] (...) -- C:\Users\Abdouche\AppData\LocalLow\dt.dat [27520] [MD5.D41D8CD98F00B204E9800998ECF8427E] [SPRF][03/04/2013] (...) -- C:\Users\Abdouche\AppData\LocalLow\prvlcl.dat [0] [MD5.D1D494729855A825B475CF683186D195] [SPRF][20/06/2012] (.AVG Technologies - AVG Setup Self-Extractor based on 7-Zip.) -- C:\Users\Abdouche\Desktop\avg_free_stb_all_2012_2126.exe [3867720] [MD5.AA653B7CA23C9C504C2D6050828B34B8] [SPRF][02/06/2010] (.Mozilla - Firefox.) -- C:\Users\Abdouche\Desktop\Firefox_Setup_3.6.3.exe [8412160] ~ Files: Scanned in 00mn 01s ---\ Firewall Active Exception List (FirewallRules) (O87) O87 - FAEL: "{1AD15E92-FAC0-4EA0-A353-52BEE8B9B241}" | In - Private - P6 - TRUE | .(...) -- C:\Windows\System32\dmwu.exe O87 - FAEL: "{0A9A4C6D-51D3-42AA-A14B-E161F9FA84EB}" | In - Private - P17 - TRUE | .(...) -- C:\Windows\System32\dmwu.exe O87 - FAEL: "{4ADD6EBD-357E-4921-8618-233F72393862}" | In - Public - P6 - TRUE | .(...) -- C:\Windows\System32\dmwu.exe O87 - FAEL: "{0501FD7E-F0DF-4A16-883F-8AC9827095BE}" | In - Public - P17 - TRUE | .(...) -- C:\Windows\System32\dmwu.exe ~ Firewall: 229 Legitimates Scanned in 00mn 01s ---\ Scan Additionnel (O88) Database Version : v2.11523 - (13/04/2013) Clés trouvées (Keys found) : 114 Valeurs trouvées (Values found) : 0 Dossiers trouvés (Folders found) : 1 Fichiers trouvés (Files found) : 0 [HKLM\Software\Classes\Interface\{01947140-417F-46B6-8751-A3A2B8345E1A}] =>Adware.MyWebSearch [HKLM\Software\Classes\Interface\{819FFE21-35C7-4925-8CDA-4E0E2DB94302}] =>Adware.MyWebSearch [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] =>Toolbar.Skype [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] =>Toolbar.Skype [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635] =>PUP.SweetIM [HKLM\Software\Classes\Installer\Features\0E9201899CF73FC4BA93F631631229A1] =>Toolbar.Agent [HKLM\Software\Classes\Installer\Products\0E9201899CF73FC4BA93F631631229A1] =>Toolbar.Agent [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0E9201899CF73FC4BA93F631631229A1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Installer\Features\0E9201899CF73FC4BA93F631631229A1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Installer\Products\0E9201899CF73FC4BA93F631631229A1] =>Toolbar.Agent [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888] =>Toolbar.Ask [HKLM\Software\Classes\Installer\Features\F479A18A22A86E3429341589FF57D81A] =>PUP.SweetIM [HKLM\Software\Classes\Installer\Products\F479A18A22A86E3429341589FF57D81A] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F479A18A22A86E3429341589FF57D81A] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Installer\Features\F479A18A22A86E3429341589FF57D81A] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Installer\Products\F479A18A22A86E3429341589FF57D81A] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9] =>Adware.MyWebSearch [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\HssSrv] =>Toolbar.Agent [HKCU\Software\SweetIM] =>PUP.SweetIM [HKLM\Software\Wow6432Node\SweetIM] =>PUP.SweetIM [HKLM\Software\WNLT] =>Adware.IncrediBar [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{981029E0-7FC9-4CF3-AB39-6F133621921A}] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Microsoft\Tracing\offerbox_RASAPI32] =>PUP.OfferBox [HKLM\Software\Wow6432Node\Microsoft\Tracing\offerbox_RASMANCS] =>PUP.OfferBox [HKLM\Software\Wow6432Node\Microsoft\Tracing\OfferBoxHTTPProxy_RASAPI32] =>PUP.OfferBox [HKLM\Software\Wow6432Node\Microsoft\Tracing\OfferBoxHTTPProxy_RASMANCS] =>PUP.OfferBox [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}] =>Toolbar.Agent [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}] =>Toolbar.Agent [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3192AA38321C641458DBDAF83979D193] =>Toolbar.Babylon [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8724E58E6C7D00C48A0D4F3345EB2C26] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB676B0E1B9EFA049B9F7DDDA9645734] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B31BBB0B825EDEF45AB0FE7099C68C81] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B471D8D7319336B4CA89374ED0D7B806] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BC30043663AA2CA4DA1DAA9CA5FDCC75] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FDC83385E6C239F4C876A77A37DF581D] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420] =>PUP.SweetIM [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}] =>Toolbar.Bing [HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}] =>Toolbar.Bing [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}] =>Toolbar.Bing [HKLM\Software\Classes\Installer\Features\FA20CB7A821113A4CB8FA1E38E303D3B] =>PUP.SweetIM [HKLM\Software\Classes\Installer\Products\FA20CB7A821113A4CB8FA1E38E303D3B] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\FA20CB7A821113A4CB8FA1E38E303D3B] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Installer\Features\FA20CB7A821113A4CB8FA1E38E303D3B] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Installer\Products\FA20CB7A821113A4CB8FA1E38E303D3B] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Microsoft\Tracing\Setup_RASAPI32] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Microsoft\Tracing\Setup_RASMANCS] =>Toolbar.Conduit [HKLM\Software\Classes\Interface\{FD8F79A0-D2E2-4FA2-AEAF-393EAC8064F7}] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Classes\Interface\{FD8F79A0-D2E2-4FA2-AEAF-393EAC8064F7}] =>Toolbar.Conduit [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156] =>PUP.SweetIM^ C:\Program Files (x86)\Common Files\AVG Secure Search =>Toolbar.AVGSearch ~ Additionnel: Scanned in 00mn 21s ---\ Product Upgrade Codes (O90) O90 - PUC: "8EF9307AF0B551A4A867D8FD20787CE4" . (.WebAdSystem.) -- C:\Windows\Installer\{A7039FE8-5B0F-4A15-8A76-8DDF0287C74E}\icon.ico O90 - PUC: "FA20CB7A821113A4CB8FA1E38E303D3B" . (.SweetIM Toolbar for Internet Explorer 4.2.) -- C:\Windows\Installer\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}\ARPPRODUCTICON.exe =>PUP.SweetIM ~ Update Products: 119 Legitimates Scanned in 00mn 00s ---\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Demand 17/03/2013 253656 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe SR - | Auto 24/05/2012 55184 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SS - | Demand 167264 | (AVG Security Toolbar Service) . (...) - C:\Program Files (x86)\AVG\AVG10\Toolbar\ToolbarBroker.exe SR - | Auto 27/02/2013 4937264 | (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe SR - | Auto 19/02/2013 282624 | (avgwd) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SR - | Auto 626208 | (ForceWare Intelligent Application Manager (IAM)) . (...) - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32 SvcAppFlt.exe SR - | Auto 28/08/2009 1150496 | (Greg_Service) . (.Acer Incorporated.) - C:\Program Files (x86)\eMachines\Registration\GregHSRW.exe SS - | Auto 03/06/2010 136176 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 03/06/2010 136176 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SR - | Demand 07/06/2012 936848 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 22/11/2012 828072 | (IswSvc) . (.Check Point Software Technologies.) - C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe SR - | Auto 14/12/2012 398184 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe SR - | Auto 14/12/2012 682344 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe SS - | Demand 17/03/2013 115608 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe SR - | Auto 206880 | (nSvcIp) . (...) - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32 SvcIp.exe SR - | Auto 19/09/2009 383592 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32 vvsvc.exe SS - | Auto 13/07/2012 160944 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe SR - | Auto 04/07/2009 240160 | (Updater Service) . (.Acer.) - C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe SR - | Auto 23/01/2013 2447888 | (vsmon) . (.Check Point Software Technologies LTD.) - C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe SR - | Auto 945328 | (vToolbarUpdater14.0.1) . (...) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe =>Toolbar.AVGSearch SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe ~ Services: Scanned in 00mn 02s ~ 1132 Legitimates filtered by white list End of the scan (660 lines in 03mn 11s)(0)

abdouchefr · Answer

# AdwCleaner v2.200 - Rapport créé le 14/04/2013 à 16:15:06
# Mis à jour le 02/04/2013 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : Abdouche - ABDOUCHE-PC
# Mode de démarrage : Normal
# Exécuté depuis : C:\Users\Abdouche\Downloads\adwcleaner.exe
# Option [Suppression]


***** [Services] *****


***** [Fichiers / Dossiers] *****

Supprimé au redémarrage : C:\Program Files (x86)\Common Files\AVG Secure Search

***** [Registre] *****

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\offerbox_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\offerbox_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{01947140-417F-46B6-8751-A3A2B8345E1A}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{819FFE21-35C7-4925-8CDA-4E0E2DB94302}

***** [Navigateurs] *****

-\ Internet Explorer v8.0.7601.17514

Remplacé : [HKCU\Software\Microsoft\Internet Explorer\SearchUrl - Default] = hxxp://feed.snap.do/?publisher=Llyx&dpid=Llyx&co=FR&userid=8de24554-a985-4ee3-816a-44992e18cfa3&searchtype=ds&q={searchTerms} --> hxxp://www.google.com
Remplacé : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl - Default] = hxxp://feed.snap.do/?publisher=Llyx&dpid=Llyx&co=FR&userid=8de24554-a985-4ee3-816a-44992e18cfa3&searchtype=ds&q={searchTerms} --> hxxp://www.google.com

-\ Mozilla Firefox v20.0.1 (fr)

Fichier : C:\Users\Abdouche\AppData\Roaming\Mozilla\Firefox\Profiles\avs9duzp.default\prefs.js

[OK] Le fichier ne contient aucune entrée illégitime.

-\ Google Chrome v [Impossible d'obtenir la version]

Fichier : C:\Users\Abdouche\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Le fichier ne contient aucune entrée illégitime.

*************************

AdwCleaner[S1].txt - [1788 octets] - [14/04/2013 16:15:06]

########## EOF - C:\AdwCleaner[S1].txt - [1848 octets] ##########

abdouchefr · Answer

https://www.cjoint.com/?CDotPh5VKq1

abdouchefr · Answer

Rapport de ZHPFix 2013.3.9.1 par Nicolas Coolman, Update du 9/03/2013
Fichier d'export Registre : 
Run by Abdouche at 14/04/2013 23:15:07
High Elevated Privileges : OK
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Corbeille vidée

========== Logiciel(s) ==========
SUPPRIME Snap.Do
SUPPRIME WebAdSystem

========== Clé(s) du Registre ==========
SUPPRIME [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{60DF47B6-5016-4DA4-AD7B-3CEC24FE7E6E}]
SUPPRIME Key: HKCU\Software\SweetIM
SUPPRIME Key*: HKLM\Software\WNLT
SUPPRIME Key: HKLM\Software\Wow6432Node\SweetIM
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
SUPPRIME Key: HKLM\Software\Classes\Installer\Features\F479A18A22A86E3429341589FF57D81A
SUPPRIME Key: HKLM\Software\Classes\Installer\Products\F479A18A22A86E3429341589FF57D81A
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F479A18A22A86E3429341589FF57D81A
ABSENT Key: HKLM\Software\Wow6432Node\Classes\Installer\Features\F479A18A22A86E3429341589FF57D81A
ABSENT Key: HKLM\Software\Wow6432Node\Classes\Installer\Products\F479A18A22A86E3429341589FF57D81A
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
SUPPRIME Key: HKLM\Software\Wow6432Node\Microsoft\Tracing\OfferBoxHTTPProxy_RASAPI32
SUPPRIME Key: HKLM\Software\Wow6432Node\Microsoft\Tracing\OfferBoxHTTPProxy_RASMANCS
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3192AA38321C641458DBDAF83979D193
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8724E58E6C7D00C48A0D4F3345EB2C26
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB676B0E1B9EFA049B9F7DDDA9645734
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B31BBB0B825EDEF45AB0FE7099C68C81
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B471D8D7319336B4CA89374ED0D7B806
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BC30043663AA2CA4DA1DAA9CA5FDCC75
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FDC83385E6C239F4C876A77A37DF581D
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
SUPPRIME Key: HKLM\Software\Classes\Installer\Features\FA20CB7A821113A4CB8FA1E38E303D3B
SUPPRIME Key: HKLM\Software\Classes\Installer\Products\FA20CB7A821113A4CB8FA1E38E303D3B
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\FA20CB7A821113A4CB8FA1E38E303D3B
ABSENT Key: HKLM\Software\Wow6432Node\Classes\Installer\Features\FA20CB7A821113A4CB8FA1E38E303D3B
ABSENT Key: HKLM\Software\Wow6432Node\Classes\Installer\Products\FA20CB7A821113A4CB8FA1E38E303D3B
SUPPRIME Key*: HKLM\Software\Classes\Interface\{FD8F79A0-D2E2-4FA2-AEAF-393EAC8064F7}
ABSENT Key: HKLM\Software\Wow6432Node\Classes\Interface\{FD8F79A0-D2E2-4FA2-AEAF-393EAC8064F7}
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399
SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156
ABSENT Key: \Software\Classes\Installer\Products\8EF9307AF0B551A4A867D8FD20787CE4
ABSENT Key: \Software\Classes\Installer\Products\FA20CB7A821113A4CB8FA1E38E303D3B

========== Valeur(s) du Registre ==========
ABSENT Valeur Standard Profile: FirewallRaz : 
ABSENT Valeur Domain Profile: FirewallRaz : 

========== Dossier(s) ==========
Aucun dossiers CLSID Local utilisateur vide
SUPPRIME Temporaires Windows
SUPPRIME Flash Cookies

========== Fichier(s) ==========
SUPPRIME Temporaires Windows
SUPPRIME Flash Cookies

========== Restauration Système ==========
Point de restauration du système créé avec succès


========== Récapitulatif ==========
83 : Clé(s) du Registre
2 : Valeur(s) du Registre
3 : Dossier(s)
2 : Fichier(s)
2 : Logiciel(s)
1 : Restauration Système


End of clean in 01mn 33s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 21/03/2013 20:56:48 [2558]
C:\ZHP\ZHPFix[R2].txt - 14/04/2013 23:15:08 [11381]

abdouchefr · Answer

Rapport de ZHPDiag v2013.4.13.73 par Nicolas Coolman, Update du 13/04/2013 Run by Abdouche at 14/04/2013 23:29:02 State : Problème connexion internet High Elevated Privileges : OK UAC : Deactivate by user ---\ Web Browser MSIE: Internet Explorer v8.0.7601.17514 MFIE: Mozilla Firefox 20.0.1 v20.0.1 (Defaut) ---\ Windows Product Information ~ Langage: Français Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601) Windows Server License Manager Script : OK ~ Windows(R) 7, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : 7QJB7 Windows License : OK ~ Windows Remaining Initializations Number : 3 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\ System Protection AVG 2013 v13.0.3162 Malwarebytes Anti-Malware version 1.70.0.1100 ZoneAlarm Firewall v11.0.000.054 ZoneAlarm Security v11.0.000.054 Windows Defender W7 ---\ System Optimizer CCleaner v4.00 ---\ Software Update Adobe Flash Player 11 Plugin Adobe Reader 9.5.4 MUI Java 7 Update 17 ---\ System Information ~ Processor: AMD64 Family 16 Model 6 Stepping 2, AuthenticAMD ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 3839 MB (68% free) System Restore: Activé (Enable) System drive C: has 256 GB (56%) free of 453 GB ---\ Logged in mode ~ Computer Name: ABDOUCHE-PC ~ User Name: Abdouche ~ All Users Names: HomeGroupUser$, Administrateur, Abdouche, ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89 Logged in as Administrator ---\ Environnement Variables ~ System Unit : C:\ ~ %AppData% : C:\Users\Abdouche\AppData\Roaming\ ~ %Desktop% : C:\Users\Abdouche\Desktop\ ~ %Favorites% : C:\Users\Abdouche\Favorites\ ~ %LocalAppData% : C:\Users\Abdouche\AppData\Local\ ~ %StartMenu% : C:\Users\Abdouche\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 256 Go of 453 Go) D:\ CD-ROM drive (Free 0 Go of 1 Go) E:\ Floppy drive, Flash card reader, USB Key (Not Inserted) F:\ Floppy drive, Flash card reader, USB Key (Not Inserted) G:\ Floppy drive, Flash card reader, USB Key (Not Inserted) H:\ Floppy drive, Flash card reader, USB Key (Free 2 Go of 4 Go) ---\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ~ Security Center: Scanned in 00mn 00s ---\ Recherche particulière de fichiers génériques [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024] [MD5.9E7687984107C81B859200C9BD570AFF] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.02/03/2013 - 06:56:00.) -- C:\Windows\System32\wininet.dll [1188864] [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656] [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448] [MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160] [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456] [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400] [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224] [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208] [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers etBT.sys [261632] [MD5.B8965FB53551B5455630A4B804D0791F] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.02/03/2013 - 07:04:53.) -- C:\Windows\system32\Drivers tfs.sys [1655656] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280] [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184] [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers dx.sys [119296] [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808] ~ Generic Processes: Scanned in 00mn 00s ---\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 2/193 ~ Mes musiques (My Musics) : 4/64 ~ Mes Videos (My Videos) : 2/213 ~ Mes Favoris (My Favorites) : 1/36 ~ Mes Documents (My Documents) : 2/4393 ~ Mon Bureau (My Desktop) : 1/32 ~ Menu demarrer (Programs) : 1/28 ~ Hidden Files: Scanned in 00mn 18s ---\ Processus lancés [MD5.72334F906C2E2B002CDD2FF9022FD957] - (.PixArt Imaging Incorporation - Registry Monitor.) -- C:\Windows\PixArt\Pac207\Monitor.exe [319488] [PID.1964] [MD5.E66532FD491AD5604C36916715FBA092] - (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader eader_sl.exe [41208] [PID.1652] [MD5.34086F1DBB4065047EA3671CB70505CC] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776] [PID.944] [MD5.BA92C496F08D78F7DB263A20C36AA546] - (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe [4394032] [PID.1764] [MD5.A73731A0B0A165907799E9AFB461F856] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files (x86)\Real\RealPlayer\Update ealsched.exe [296096] [PID.872] [MD5.7E5ED973D3B3EDB33507DCC37F1D975D] - (.Check Point Software Technologies LTD - ZoneAlarm.) -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [73832] [PID.1888] [MD5.12916E0642E92561C98B18A2A2D01B14] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252848] [PID.2052] [MD5.6F5386A655598F71BAAB2D6B63A69D6A] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [920472] [PID.3004] [MD5.00E193148E1DC8145CE4219900593705] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [6742016] [PID.2884] [MD5.FB5FA9016DEC70B0F3D3BF80B953E32A] - (.Check Point Software Technologies LTD - TrueVector Service.) -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [2447888] [PID.1404] [MD5.F401929EE0CC92BFE7F15161CA535383] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55184] [PID.2312] [MD5.0D8244A9DB70BC6C36E2FB56F6039AB6] - (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) -- C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [4937264] [PID.2388] [MD5.DC98337F0D2A9F6C0B6FB682297ECE3B] - (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) -- C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [282624] [PID.2484] [MD5.816FD5A6F3C2F3D600900096632FC60E] - (.Acer Incorporated - Global Registration Service.) -- C:\Program Files (x86)\eMachines\Registration\GregHSRW.exe [1150496] [PID.1464] [MD5.70DDE3A86DBEB1D6C3C30AD687B1877A] - (.Acer - Acer Update Service.) -- C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe [240160] [PID.3368] ~ Processes Running: Scanned in 00mn 00s ---\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users\Abdouche\AppData\Local\Google\Chrome\User Data\Default\Preferences ~ Google Browser: Scanned in 00mn 00s ---\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) C:\Users\Abdouche\AppData\Roaming\Mozilla\Firefox\Profiles\avs9duzp.default\prefs.js ~ Firefox Browser: 19 Legitimates Scanned in 00mn 00s ---\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.acer-group.com/selection.html R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.acer-group.com/selection.html R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 ~ IE Browser: 15 Legitimates Scanned in 00mn 00s ---\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\ Redirection du fichier Hosts (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Hosts File: Scanned in 00mn 00s ~ Nombre de lignes (Lines number): 21 ---\ Browser Helper Objects de navigateur (O2) ~ BHO: 8 Legitimates Scanned in 00mn 00s ---\ Internet Explorer Toolbars (O3) O3 - Toolbar: ZoneAlarm Security Engine [64Bits] - [HKLM]{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} . (.Check Point Software Technologies - ZoneAlarm Browser Security.) -- C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll ~ Toolbar: Scanned in 00mn 00s ---\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe O4 - HKLM\..\Run: [Monitor] . (.PixArt Imaging Incorporation - Registry Monitor.) -- C:\Windows\PixArt\PAC207\Monitor.exe O4 - HKLM\..\Run: [ISW] . (.Check Point Software Technologies - ZoneAlarm Browser Security.) -- C:\Program Files\CheckPoint\ZAForceField\ForceField.exe O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (.not file.) O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe O4 - HKCU\..\Run: [Neuf Media Center] . (.SFR - Media Center.) -- C:\Program Files (x86)\SFR\Media Center\MediaCenter.exe O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe O4 - HKLM\..\Wow6432Node\Run: [NortonOnlineBackupReminder] . (.Symantec Corporation - Norton Online Backup Service.) -- C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe O4 - HKLM\..\Wow6432Node\Run: [vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe (.not file.) =>Toolbar.AVGSearch O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe O4 - HKLM\..\Wow6432Node\Run: [AVG_UI] . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe O4 - HKLM\..\Wow6432Node\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files (x86)\Real\RealPlayer\update ealsched.exe O4 - HKLM\..\Wow6432Node\Run: [ZoneAlarm] . (.Check Point Software Technologies LTD - ZoneAlarm.) -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-21-2026369455-379429309-476914872-1000\..\Run: [msnmsgr] ~"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (.not file.) O4 - HKUS\S-1-5-21-2026369455-379429309-476914872-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe O4 - HKUS\S-1-5-21-2026369455-379429309-476914872-1000\..\Run: [Neuf Media Center] . (.SFR - Media Center.) -- C:\Program Files (x86)\SFR\Media Center\MediaCenter.exe ~ Application: Scanned in 00mn 00s ---\ Autres liens utilisateurs (O4) O4 - GS\Desktop: Adobe Download Assistant.lnk . (...) -- C:\Program Files (x86)\Adobe Download Assistant\Adobe Download Assistant.exe O4 - GS\Desktop: Adobe Reader 9.lnk . (.Adobe Systems Incorporated - Adobe Reader 9.5.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe O4 - GS\Desktop: AVG 2013.lnk . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe O4 - GS\Desktop: CCleaner.lnk . (.Piriform Ltd - CCleaner.) -- C:\Program Files (x86)\CCleaner\CCleaner64.exe O4 - GS\Desktop: eMachines Boutique Accessoire.lnk . (...) -- C:\Program Files (x86)\eMachines Accessory Store\StartUrl.exe (.not file.) O4 - GS\Desktop: eMachines GameZone Console.lnk . (.Oberon Media - eMachines GameZone Console.) -- C:\Program Files (x86)\eMachines GameZone\GameConsole\eMachines Game Console.exe O4 - GS\Desktop: Google Earth.lnk . (.Google - Google Earth.) -- C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe O4 - GS\Desktop: Malwarebytes Anti-Malware.lnk . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe O4 - GS\Desktop: MBRCheck.lnk . (...) -- C:\Program Files (x86)\ZHPDiag\mbrcheck.exe O4 - GS\Desktop: Microsoft Works.lnk . (.Microsoft® Corporation - Microsoft® Works.) -- C:\Program Files (x86)\Microsoft Works\MSWorks.exe O4 - GS\Desktop: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O4 - GS\Desktop: Offres gratuites.lnk . (...) -- C:\Program Files (x86)\Real\RealPlayer\freeoffers.rnx (.not file.) O4 - GS\Desktop: RealPlayer.lnk . (.RealNetworks, Inc. - RealPlayer.) -- C:\program files (x86) eal ealplayer\RealPlay.exe O4 - GS\Desktop: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files (x86)\ZHPDiag\ZHPhep.exe O4 - GS\Desktop: ZHPFix.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe O4 - GS\Desktop: ZoneAlarm Security.lnk . (.Check Point Software Technologies LTD - ZoneAlarm.) -- C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe O4 - GS\TaskBar: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\TaskBar: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O4 - GS\TaskBar: RealPlayer.lnk . (.RealNetworks, Inc. - RealPlayer.) -- C:\program files (x86) eal ealplayer\RealPlay.exe O4 - GS\TaskBar: Welcome Center.lnk . (.Acer Incorporated - Welcome Center.) -- C:\Program Files (x86)\eMachines\Welcome Center\OEMWelcomeCenter.exe O4 - GS\TaskBar: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe O4 - GS\TaskBar: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe O4 - GS\Programs: Crédit Mutuel.lnk . (.Microsoft Corporation - Microsoft Silverlight Out-of-Browser Launch.) -- C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe O4 - GS\Programs: Internet Explorer (64-bit).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\QuickLaunch: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.) -- C:\Windows\system32\eudcedit.exe O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) -- C:\Windows\system32\WFS.exe O4 - GS\SendTo: Skype.lnk . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe O4 - GS\Desktop: Abdouche Derdar - Raccourci.lnk . (...) -- C:\Users\Abdouche\Documents\Abdouche Derdar.doc O4 - GS\Desktop: Documents - Raccourci.lnk . (...) -- C:\Users\Abdouche\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms O4 - GS\Desktop: FXnet Trader Platform.lnk . (.FXnet(TM) - FXnet Trader.) -- C:\Users\Abdouche\AppData\Roaming\IFOREX\FXnet Trader Platform\iForex.Clients.Trader.exe O4 - GS\Desktop: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\Desktop: Microsoft Office Excel 2007.lnk . (...) -- C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe O4 - GS\Desktop: Microsoft Office Word 2007.lnk . (...) -- C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe O4 - GS\Desktop: photos vacances 2010-2011 - Raccourci.lnk . (...) -- C:\Users\Abdouche\photos vacances 2010-2011 O4 - GS\Desktop: ZHPDiag2(1) - Raccourci.lnk . (.Nicolas Coolman - ZHPDiag.) -- H:\ZHPDiag2(1).exe ~ Global Startup: Scanned in 00mn 00s ---\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5) ~ IE Control Panel: 1 Legitimates Scanned in 00mn 00s ---\ Winsock hijacker (Layered Service Provider) (O10) ~ Winsock: 9 Legitimates Scanned in 00mn 00s ---\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{28896894-C80E-4AA6-8ACE-B77051660AB3}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{69C7B371-EB75-4FEC-8259-F587F4918716}: DhcpNameServer = 109.0.66.10 109.0.66.20 O17 - HKLM\System\CCS\Services\Tcpip\..\{6BB37934-DA43-43FF-B37D-8FCC3EB67D72}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{865B1A97-E544-466B-AB4E-B4F38855EC83}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{ECC74A37-993D-4E10-8926-E9941F981AEE}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{28896894-C80E-4AA6-8ACE-B77051660AB3}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{69C7B371-EB75-4FEC-8259-F587F4918716}: DhcpNameServer = 109.0.66.10 109.0.66.20 O17 - HKLM\System\CS1\Services\Tcpip\..\{6BB37934-DA43-43FF-B37D-8FCC3EB67D72}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{865B1A97-E544-466B-AB4E-B4F38855EC83}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{ECC74A37-993D-4E10-8926-E9941F981AEE}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{28896894-C80E-4AA6-8ACE-B77051660AB3}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{69C7B371-EB75-4FEC-8259-F587F4918716}: DhcpNameServer = 109.0.66.10 109.0.66.20 O17 - HKLM\System\CS2\Services\Tcpip\..\{6BB37934-DA43-43FF-B37D-8FCC3EB67D72}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{865B1A97-E544-466B-AB4E-B4F38855EC83}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{ECC74A37-993D-4E10-8926-E9941F981AEE}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 109.0.66.10 109.0.66.20 ~ Domain: Scanned in 00mn 00s ---\ Protocole additionnel (O18) O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll ~ Protocole Additionnel: Scanned in 00mn 00s ---\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) ~ SSODL: 1 Legitimates Scanned in 00mn 00s ---\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: (vToolbarUpdater14.0.1) . (...) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe (.not file.) =>Toolbar.AVGSearch ~ Services: 15 Legitimates Scanned in 00mn 10s ---\ Enumération Active Desktop & MHTML Editor (O24) ~ Desktop Component: 1 Legitimates Scanned in 00mn 00s ---\ BootExecute (O34) ~ BEX: 1 Legitimates Scanned in 00mn 00s ---\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\ROC_JAN2013_TB_rmv.job [356] [MD5.00000000000000000000000000000000] [APT] [ROC_JAN2013_TB_rmv] (...) -- C:\Program Files (x86)\AVG Secure Search\PostInstall\ROC.exe (.not file.) [0] =>Toolbar.AVGSearch [MD5.00000000000000000000000000000000] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files (x86)\Ask.com\UpdateTask.exe (.not file.) [0] =>Toolbar.Ask [MD5.00000000000000000000000000000000] [APT] [{6807BECC-5D71-4203-B768-4FCD2BFF186B}] (...) -- D:\setup.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{C25228CE-EA24-414F-80B7-74DBB5F8E5B0}] (...) -- C:\Users\Abdouche\Downloads\ZHPDiag2(1).exe (.not file.) [0] ~ Scheduled Task: 20 Legitimates Scanned in 00mn 04s ---\ Composants installés (ActiveSetup Installed Components) (O40) ~ Active Setup: 11 Legitimates Scanned in 00mn 00s ---\ Pilotes lancés au démarrage (O41) ~ Drivers: 78 Legitimates Scanned in 00mn 00s ---\ Logiciels installés (O42) O42 - Logiciel: FXnet Trader Platform - (.Nom de votre société.) [HKLM][64Bits] -- {B6D33E15-0B5A-4A8F-8034-A7DB28C80B15} O42 - Logiciel: ZoneAlarm Firewall - (.Check Point Software Technologies Ltd..) [HKLM][64Bits] -- {BC3EBF1D-5F30-4E53-93A5-15FD9D1CF12B} O42 - Logiciel: ZoneAlarm Free Firewall - (.Check Point.) [HKLM][64Bits] -- ZoneAlarm Free Firewall O42 - Logiciel: ZoneAlarm Security - (.Check Point Software Technologies Ltd..) [HKLM][64Bits] -- {A338D97B-5164-4D07-9C5D-19236976B2A2} ~ Logic: 105 Legitimates Scanned in 00mn 00s ---\ HKCU & HKLM Software Keys [HKCU\Software\IncrediMail] [HKCU\Software\KeepVid] [HKLM\Software\Wow6432Node\IncrediMail] ~ Key Software: 204 Legitimates Scanned in 00mn 00s ---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 28/09/2010 - 15:20:04 - [0,000] ----D C:\ProgramData\hsswpr O43 - CFD: 30/03/2012 - 11:41:09 - [12,856] ----D C:\Users\Abdouche\AppData\Roaming\IFOREX O43 - CFD: 30/03/2012 - 11:43:36 - [0,007] ----D C:\Users\Abdouche\AppData\Local\FXnet(TM) O43 - CFD: 30/03/2012 - 12:04:32 - [0,005] ----D C:\Users\Abdouche\AppData\Local\iFOREX O43 - CFD: 02/01/2013 - 01:24:05 - [0,002] ----D C:\Users\Abdouche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IFOREX ~ Program Folder: 175 Legitimates Scanned in 00mn 29s ---\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.7B8D2488152F301C940D7F62F467B0E6] - 14/04/2013 - 15:15:40 ---A- . (...) -- C:\AdwCleaner[S1].txt [1913] O44 - LFC:[MD5.7D38AF578D0F46E7515C8D3ABF1B2161] - 21/03/2013 - 22:19:30 R--A- . (...) -- C:\Pre_Scan_21_03_2013_21_06_29.txt [34668] O44 - LFC:[MD5.2EAA9BD5D9D749BA411AD9C5FE2E26D8] - 19/03/2013 - 18:26:08 ---A- . (...) -- C:\DelFix.txt [1514] O44 - LFC:[MD5.0B9EE63DFC1F49804E19BE6389624756] - 17/03/2013 - 17:46:31 RSHAD . (...) -- C:\Windows\System32\Drivers\vsconfig.xml [417564] ~ Files: 61 Legitimates Scanned in 00mn 08s ---\ Déni du service (Local Security Authority) (O48) ~ LSA: 9 Legitimates Scanned in 00mn 00s ---\ Contrôle du Safe Boot (CSB) (O49) ~ CBS: 13 Legitimates Scanned in 00mn 00s ---\ Trojan Driver Search Data (HKLM) (O52) ~ TDSD: 2 Legitimates Scanned in 00mn 00s ---\ Microsoft Control Security Providers (O54) ~ MSCP: 2 Legitimates Scanned in 00mn 00s ---\ Microsoft Windows Policies System (O55) O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 ~ MWPS: 16 Legitimates Scanned in 00mn 00s ---\ Microsoft Windows Policies Explorer (O56) ~ MWPE Keys: 3 Legitimates Scanned in 00mn 00s ---\ Liste des Drivers Système (O58) O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088] ~ Drivers: Scanned in 00mn 00s ---\ Liste des outils de nettoyage (O63) O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 ~ ADS: Scanned in 00mn 00s ---\ Liste des services Legacy (O64) ~ Legacy: 88 Legitimates Scanned in 00mn 26s ---\ File Associations Shell Spawning (O67) ~ FASS Keys: 18 Legitimates Scanned in 00mn 00s ---\ Start Menu Internet (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\ Search Browser Infection (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - https://www.bing.com/?toHttps=1&redig=69DA0EF8272048D9864AF4DB37211DE8 O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - https://www.google.com/?gws_rd=ssl ~ Keys: Scanned in 00mn 00s ---\ Recherche des services démarrés par Svchost (O83) ~ Services: 32 Legitimates Scanned in 00mn 00s ---\ Recherche particuliere à la racine de certains dossiers (O84) [MD5.FC6AA20F66BD7958D3D7339B28A68B21] [SPRF][09/08/2012] (...) -- C:\Users\Abdouche\AppData\LocalLow\dt.dat [27520] [MD5.D41D8CD98F00B204E9800998ECF8427E] [SPRF][03/04/2013] (...) -- C:\Users\Abdouche\AppData\LocalLow\prvlcl.dat [0] [MD5.D1D494729855A825B475CF683186D195] [SPRF][20/06/2012] (.AVG Technologies - AVG Setup Self-Extractor based on 7-Zip.) -- C:\Users\Abdouche\Desktop\avg_free_stb_all_2012_2126.exe [3867720] [MD5.AA653B7CA23C9C504C2D6050828B34B8] [SPRF][02/06/2010] (.Mozilla - Firefox.) -- C:\Users\Abdouche\Desktop\Firefox_Setup_3.6.3.exe [8412160] ~ Files: Scanned in 00mn 00s ---\ Firewall Active Exception List (FirewallRules) (O87) O87 - FAEL: "{1AD15E92-FAC0-4EA0-A353-52BEE8B9B241}" | In - Private - P6 - TRUE | .(...) -- C:\Windows\System32\dmwu.exe O87 - FAEL: "{0A9A4C6D-51D3-42AA-A14B-E161F9FA84EB}" | In - Private - P17 - TRUE | .(...) -- C:\Windows\System32\dmwu.exe O87 - FAEL: "{4ADD6EBD-357E-4921-8618-233F72393862}" | In - Public - P6 - TRUE | .(...) -- C:\Windows\System32\dmwu.exe O87 - FAEL: "{0501FD7E-F0DF-4A16-883F-8AC9827095BE}" | In - Public - P17 - TRUE | .(...) -- C:\Windows\System32\dmwu.exe ~ Firewall: 229 Legitimates Scanned in 00mn 01s ---\ Scan Additionnel (O88) Database Version : v2.11523 - (13/04/2013) Clés trouvées (Keys found) : 30 Valeurs trouvées (Values found) : 0 Dossiers trouvés (Folders found) : 0 Fichiers trouvés (Files found) : 0 [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] =>Toolbar.Skype [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] =>Toolbar.Skype [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype [HKLM\Software\Classes\Installer\Features\0E9201899CF73FC4BA93F631631229A1] =>Toolbar.Agent [HKLM\Software\Classes\Installer\Products\0E9201899CF73FC4BA93F631631229A1] =>Toolbar.Agent [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0E9201899CF73FC4BA93F631631229A1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Installer\Features\0E9201899CF73FC4BA93F631631229A1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Installer\Products\0E9201899CF73FC4BA93F631631229A1] =>Toolbar.Agent [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888] =>Toolbar.Ask [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\HssSrv] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{981029E0-7FC9-4CF3-AB39-6F133621921A}] =>Toolbar.Agent [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}] =>Toolbar.Agent [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}] =>Toolbar.Agent [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2] =>Toolbar.Ask [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}] =>Toolbar.Bing [HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}] =>Toolbar.Bing [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}] =>Toolbar.Bing [HKLM\Software\Wow6432Node\Microsoft\Tracing\Setup_RASAPI32] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Microsoft\Tracing\Setup_RASMANCS] =>Toolbar.Conduit [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536] =>PUP.SweetIM^ ~ Additionnel: Scanned in 00mn 21s ---\ Product Upgrade Codes (O90) ~ Update Products: 116 Legitimates Scanned in 00mn 00s ---\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Demand 17/03/2013 253656 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe SR - | Auto 24/05/2012 55184 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SS - | Demand 167264 | (AVG Security Toolbar Service) . (...) - C:\Program Files (x86)\AVG\AVG10\Toolbar\ToolbarBroker.exe SR - | Auto 27/02/2013 4937264 | (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe SR - | Auto 19/02/2013 282624 | (avgwd) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SR - | Auto 626208 | (ForceWare Intelligent Application Manager (IAM)) . (...) - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32 SvcAppFlt.exe SR - | Auto 28/08/2009 1150496 | (Greg_Service) . (.Acer Incorporated.) - C:\Program Files (x86)\eMachines\Registration\GregHSRW.exe SS - | Auto 03/06/2010 136176 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 03/06/2010 136176 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SR - | Demand 07/06/2012 936848 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 22/11/2012 828072 | (IswSvc) . (.Check Point Software Technologies.) - C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe SS - | Auto 14/12/2012 398184 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe SS - | Auto 14/12/2012 682344 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe SS - | Demand 14/04/2013 115608 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe SR - | Auto 206880 | (nSvcIp) . (...) - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32 SvcIp.exe SR - | Auto 19/09/2009 383592 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32 vvsvc.exe SS - | Auto 13/07/2012 160944 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe SR - | Auto 04/07/2009 240160 | (Updater Service) . (.Acer.) - C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe SR - | Auto 23/01/2013 2447888 | (vsmon) . (.Check Point Software Technologies LTD.) - C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe SS - | Auto 0 | (vToolbarUpdater14.0.1) . (...) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe =>Toolbar.AVGSearch SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe ~ Services: Scanned in 00mn 02s ~ 1132 Legitimates filtered by white list End of the scan (562 lines in 02mn 21s)(0)

abdouchefr · Answer

https://www.cjoint.com/?CDpulNo0dKb

abdouchefr · Answer

https://pjjoint.malekal.com/files.php?id=20130417_h6t5o15n6x8

abdouchefr · Answer

après un redémarrage il m'est enfin possible de me reconnecter sur mon réseau maison_sfr et un très très très  grand merci à toi et toute l'équipe .

Abdouche

abdouchefr · Answer

encore un plantage du même type: après avoir débranché la clé USB je n'arrive plus à me connecter à mon réseau maison_sfr uniquement sur réseau public

abdouchefr · Answer

slt et merci 

	https://www.cjoint.com/?CDBupA9BlBR  

pour information j'ai pris une clé usb pour télécharger malware et adwcleaner afin de nettoyer un autre pc sur lequel je n'arrivais pas à me connecter  et je l'ai peut-être utiliser par inadvertance sur le mien en le reprenant tout en enlevant la clé usb wifi  pour la reconfigurer mais rien n'y fait à savoir que dans le pc a réparer il y avait 2 fichier infectés et supprimés par la suite. et là bizarrement j'ai du refaire la même méthode pour télécharger ZHPDiag avec la même clé usb et du coup la fenêtre de ZHPDiag ne se ferme plus comme si un blocage s'était opéré

abdouchefr · Answer

ce sont les fichiers infectés que malware avait trouvé sur le pc a réparé et que j'ai peut-être transféré sur le mien car j'avais fait des va et vient avec la clé USB pour télécharger

abdouchefr · Answer

et la clé wifi je l'avais déconnecté et rebranché pour reconfigurer sur mon pc mais rien n'y fait je me retrouve à la case départ ( je n'ai qu'une connection limités)

abdouchefr · Answer

oui je la vois mais je pense qu'il y a le même soucis : "l'adresse IP de windows n'est pas compatible avec le réseau ...." où une variante le même message quand je clique pour détecter le problème lorsque j'indique la clé réseau.

abdouchefr · Answer

Plus précisément c'est: la configuration requise de windows qui ne correspond pas à la configuration du réseau.

abdouchefr · Answer

salut rien n'y fait je ne peux que me connecter vers un réseau public suite a un diagnostic réseau windows il m'indique ceci:
Windows ne peut pas se connecter au réseau masqué " maison_sfr"

abdouchefr · Answer

bizarrement je remarque qu'un programme s'est installé sans le demander: NVIDIA et il apparait qu'ila également un réseau local a porté " câble réseau non connecté NVIDIA nForce 10/100/1000 Mbps ..........................?

abdouchefr · Answer

au fait pour le réseau maison_sfr il y a une croix rouge juste à côté contrairement aux autres réseaux qui me sont proposés

abdouchefr · Answer

sur la ligne dans le gestionnaire des périphériques il n'y a rien de spécial j'ai du supprimer un NVIDIA  qui s'installe automatiquement sans le vouloir c'est un système ethernet .

abdouchefr · Answer

il m'indique que le réseau  n'est pas a porté pourtant il affirme qu'il fonctionne correctement un problème de carte réseau.

abdouchefr · Answer

autre problème trouvé lorsque je suis connecté sur SFR Wifi public il m'indique que l'ordinateur est correctement configuré mais le périphérique ou la ressource ( serveur DNS) ne réponds pas

abdouchefr · Answer

ok et merci pour la suggestion mais j'ai été cherché une autre neufbox ( sur consigne d'un technicien SFR après moultes manipulations) avec une autre clé réseau après reconfiguration du réseau l'accès au net est OK.

Merci milles fois pour ton assistance........j'aimerai bien savoir analyser les rapports comme tu le fait car c'est motivant et à force d'apprendre par coeur tu as envie d'aller savoir encore plus  un GRAND MERCI

abdouchefr · Answer

ok merci je viens de faire un saut sur le site et me suis inscrit à bientôt peut-être ...

abdouchefr · Answer

helper-formation

abdouchefr · Answer

écoute j'ai un pc d'un ami chez moi et j'essai de l'allumer mais rien n'y fait j'ai téléchargé oltpe pour démarrer et du coup je suis en mode sans échec avec pour seule fenêtre cmd.exe c'est pour désinfecter il y a un virus hadopi je pense que tu dois connaïtre car ensuite il faudrait télécharger Rogue kILLER

abdouchefr · Answer

j'ai un soucis avec le clavier quand je veux taper le: % il me met un 7 et quand je veux taper la lettre m il me met une virgule : y a t-il un remède a ce type de clavier qui confond les lettres?

abdouchefr · Answer

portable clavier azerty ou qwerty je l'ignore c'est quoi la différence? et j'ai branché a clé USB avec le OTLPE dedans prêt à fonctionner j'ai la pettie fenêtre cmd.exe. c'est bien dans celle-ci que je dois inscrire ce que tu m'a suggéré plus haut ?

abdouchefr · Answer

ok merci pour les infos je ferais ça demain là je suis claqué de chez claqué juste une petite question la clé USB quand il dit qu'il faut la mettre sur un support avec mini 512Mo  ça veut dire quoi exactement ? je télécharge et ensuite je la connecte sur le pc avec le logiciel téléchargé?

abdouchefr · Answer

et si invite sur commande ne marche pas ? car en mode sans échec il démarre jusqu'à bienvenu et il se referme automatiquement sans plus attendre .Pour la clé USB je vais suivre la procédure et te tiens au courant et merci encore

abdouchefr · Answer

quand je rentre dans la fenêtre pour restaurer il me marque la protection du système est désactivée pour la réactiver .....blabla mais rien ne se passe j'ai essayé de démarrer avec la clé usb en mode normal j'ai une page blanche il ne la détecte pas  ...............

abdouchefr · Answer

arrivé dans la fenêtre centre de maintenance je veux activer le service centre de sécurité Windows il met : impossible de démarrer le service centre de sécurité

abdouchefr · Answer

et puis mettre la clé usb en premier boot en allant dans le boot menu .........? je démarre comme d'habitude je n'ai pas de touche particulière pour atterir sur la clé USB?

abdouchefr · Answer

le PC est un portable et pas de clavier fil .....pour entrer dans le BIOS il est indi
qué selon la consigne plus haut qu'il faudrait un clavier fil

abdouchefr · Answer

là j'ai démarrer normalement le bureau est affiché mais sans les icône juste la page de fond d'écran c'est tout  comment poursuivre "....pour mettre la clé USB en premier boot en allant dans le boot menu...."?

abdouchefr · Answer

les touches indiquées et appuyées en même temps ne donnent rien

abdouchefr · Answer

45 pourquoi ?
 et il n'y a pas la présentation telle que tu la définie c'est un choix sur fond d'écran noir :

mode sans échec 
invité de commande  mode sans échec 

etc...

une fois cliqué sur invité de commande mode sans échec j'ai un écran tel que le bureau et je fais Crtl+Alt+Supp ça me donne une petite fenêtre me proposant soit de quitter soit d'afficher le gestionnaire es taches mais il ne s'affiche pas

abdouchefr · Answer

si tu avais un tuto a me filer pour ouvrir ce gestionnaire des tâches autre que la procédure  montré plus haut car le pc portable lui il ne me propose absolument rien de ce que tu me dis si ce n'est que ce que j'ai pu t'expliquer mais  en vain

abdouchefr · Answer

asus

abdouchefr · Answer

nan pas fâché mais oqp toute la journée je travaille de nuit et je découvre ton message donc tu convient que même ton tuto ne résolvait pas le blm ? je vais voir car j'ai un peu survolé des forum sur ce sujet et je vous tiens au courant

abdouchefr · Answer

ok j'accède au bios là et effectivement avec la touche F2

abdouchefr · Answer

c'est fait mais je ne sais pas si ça a planté une fois le pre scan terminé je ne vois pas le rapport et la petite fenêtre s'est ré ouverte rechercher un dossier ( la même procédure qui recommence )

abdouchefr · Answer

ça y est je l'ai trouvé dans le chemin indiqué EVIDEMMENT quel GAMIN!!!

au fait comment le poster du pc malade sur celui du bureau ?

abdouchefr · Answer

si j'avais su ça encore cet aprèm j'en aurais acheté une en rentrant je vais voir en attendant je le laisse allumé par contre je peux toujours pas me connecter en wifi ?

abdouchefr · Answer

il ne réponds par pour redémarrer

abdouchefr · Answer

nan le bureau est là affiché et lorsque je veux redémarrer je clique mais rien ne se passe

abdouchefr · Answer

https://www.cjoint.com/c/CEfbkbYQ0Fk

un cheval de troie a ete detecte et efface par AVG free

abdouchefr · Answer

voici le rapport de adwcleaner pour commencer

# AdwCleaner v2.300 - Rapport créé le 05/05/2013 à 13:11:28
# Mis à jour le 28/04/2013 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : ASUS (SIMOU) - SIMMOUASUS-PC
# Mode de démarrage : Normal
# Exécuté depuis : C:\Users\ASUS (SIMOU)\Downloads\adwcleaner.exe
# Option [Suppression]


***** [Services] *****

Arrêté & Supprimé : vToolbarUpdater14.2.0

***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Program Files (x86)\AVG Secure Search
Dossier Supprimé : C:\Program Files (x86)\Common Files\AVG Secure Search
Dossier Supprimé : C:\Program Files (x86)\Webplayer setup
Dossier Supprimé : C:\ProgramData\AVG Secure Search
Dossier Supprimé : C:\ProgramData\AVG Security Toolbar
Dossier Supprimé : C:\Users\ASUS (SIMOU)\AppData\Local\AVG Secure Search
Dossier Supprimé : C:\Users\ASUS (SIMOU)\AppData\LocalLow\AVG Secure Search
Dossier Supprimé : C:\Users\ASUS (SIMOU)\AppData\LocalLow\boost_interprocess
Fichier Supprimé : C:\Program Files (x86)\Common Files\plugin.crx
Fichier Supprimé : C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg-secure-search.xml
Fichier Supprimé : C:\Users\ASUS (SIMOU)\AppData\Roaming\Mozilla\Firefox\Profiles\vi5uhszk.default\searchplugins\zonealarm.xml

***** [Registre] *****

Clé Supprimée : HKCU\Software\AVG Secure Search
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Clé Supprimée : HKLM\Software\AVG Secure Search
Clé Supprimée : HKLM\Software\AVG Security Toolbar
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Clé Supprimée : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Clé Supprimée : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Clé Supprimée : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Clé Supprimée : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
Clé Supprimée : HKLM\SOFTWARE\Classes\S
Clé Supprimée : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Clé Supprimée : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Clé Supprimée : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Clé Supprimée : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BabylonToolbarsrv_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BabylonToolbarsrv_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}
Clé Supprimée : HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{4B8C28A7-A9BC-45F8-990D-21499EED643C}
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

***** [Navigateurs] *****

-\ Internet Explorer v10.0.9200.16537

Remplacé : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl - Default] = hxxp://feed.snap.do/?publisher=Llyx&dpid=Llyx&co=FR&userid=b319dbec-b3b1-4125-9ffa-70eeda450670&searchtype=ds&q={searchTerms} --> hxxp://www.google.com

-\ Mozilla Firefox v20.0.1 (fr)

Fichier : C:\Users\ASUS (SIMOU)\AppData\Roaming\Mozilla\Firefox\Profiles\vi5uhszk.default\prefs.js

C:\Users\ASUS (SIMOU)\AppData\Roaming\Mozilla\Firefox\Profiles\vi5uhszk.default\user.js ... Supprimé !

[OK] Le fichier ne contient aucune entrée illégitime.

*************************

AdwCleaner[S2].txt - [7537 octets] - [05/05/2013 13:11:28]

########## EOF - C:\AdwCleaner[S2].txt - [7597 octets] ##########

abdouchefr · Answer

rapport malwarebyte que voici.

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Version de la base de données: v2013.05.05.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16540
ASUS (SIMOU) :: SIMMOUASUS-PC [administrateur]

05/05/2013 13:28:49
mbam-log-2013-05-05 (13-28-49).txt

Type d'examen: Examen complet (C:\|D:\|)
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 376776
Temps écoulé: 57 minute(s), 9 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Valeur(s) du Registre détectée(s): 1
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|shell (Trojan.Agent.RNS) -> Données: explorer.exe,C:\Users\ASUS (SIMOU)\AppData\Roaming\skype.dat -> Mis en quarantaine et supprimé avec succès.

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)

Fichier(s) détecté(s): 2
C:\Program Files (x86)\Yontoo Layers\YontooIEClient.dll (Adware.Yontoo) -> Mis en quarantaine et supprimé avec succès.
C:\Windows\Pre_Scan\Quarantine\skype.dat.P_S (Trojan.Zbot.ED) -> Mis en quarantaine et supprimé avec succès.

(fin)

abdouchefr · Answer

et voici ZHPDiag.

	https://www.cjoint.com/c/CEfo5mYNv64

abdouchefr · Answer

sur un autre pc portable ACER jai le meme blm seulement arrive sur la fenetre pour selctionner C  windows il me marque target is current installation windows et le scan ne se fait pas

abdouchefr · Answer

DELFIX 

# DelFix v10.2 - Rapport créé le 05/05/2013 à 17:12:23
# Mis à jour le 02/04/2013 par Xplode
# Nom d'utilisateur : ASUS (SIMOU) - SIMMOUASUS-PC

~ Activation de l'UAC ... OK

~ Suppression des outils de désinfection ...

Supprimé : C:\pre_scan
Supprimé : C:\ZHP
Supprimé : C:\Program Files (x86)\ZHPDiag
Supprimé : C:\AdwCleaner[S2].txt
Supprimé : C:\PhysicalDisk0_MBR.bin
Supprimé : C:\Users\ASUS (SIMOU)\Desktop\ZHPDiag.txt
Supprimé : C:\Users\ASUS (SIMOU)\Desktop\ZHPFixReport.txt
Supprimé : C:\Users\Public\Desktop\MBRCheck.lnk
Supprimé : C:\Users\Public\Desktop\ZHPDiag.lnk
Supprimé : C:\Users\Public\Desktop\ZHPFix.lnk
Supprimé : C:\Users\ASUS (SIMOU)\Downloads\adwcleaner.exe
Supprimé : C:\Users\ASUS (SIMOU)\Downloads\ZHPDiag2.exe
Supprimée : HKLM\SOFTWARE\AdwCleaner
Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1

~ Purge de la restauration système ...


Nouveau point de restauration créé !

########## - EOF - ##########

abdouchefr · Answer

slt  

j'ai un soucis avec l'ouverture de firefox qui met du temps ....et en plus sur le pc avec lequel j'écris là il ne me télécharge pas ZHPDiag

abdouchefr · Answer

ok voici le lien du nouveau sujet

https://forums.commentcamarche.net/forum/virus-securite-7/new#p27991308

Démarrage suspect

110 réponses

Discussions similaires

Newsletters