Mon pc rame

Question

Bonjour, 

Depuis un moment mon pc rame grave. Je pense être infecter comme pas possible quelqu'un pourrait m'aidez j'en peut plus :(. Merci

Configuration: Windows 7 / Chrome 26.0.1410.43

jacques.gache · Answer

bonjour, postes nous un diagnostique , merci

 Ouvre ce lien et télécharge ZHPDiag : 

https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/


Enregistres le sur ton Bureau. 

Une fois le téléchargement achevé

pour XP, double-clique sur ZHPDiag 

pour Vista,et seven tu  fais un clic droit sur l'icône et exécute en tant qu'administrateur. 

N'oublies pas de cocher la case qui permet de mettre un raccourci sur le Bureau. 

/|\ l'outil a créé 2 icônes ZHPDiag et ZHPFix. 

Double cliques sur le raccourci ZHPDiag sur ton Bureau pour XP sinon clique droit et en tant que administrateur !! 

Cliques sur la loupe pour lancer l'analyse. 

 si tu as un message te demandant la validation pour SIGCHECK acceptes avec OK cela est pour nous faire  un rapport plus complet et pouvoir en faire une lecture plus approfondis 

Laisses l'outil travailler, il peut être assez long 

A la fin de l'analyse,clique sur l'appareil photo et enregistre le rapport sur ton Bureau. 


Fermes ZHPDiag en fin d'analyse. 


Pour me le transmettre clique sur ce lien : 

https://www.cjoint.com/ 


Clique sur Parcourir et cherche le fichier C:\Documents and settings\le_nom_de_ta_session\bureau\.ZHPDiag.txt

ou directement en choisissant bureau et  ZHPDiag.txt clique dessus 

Clique sur Ouvrir. 

Clique sur "Cliquez ici pour déposer le fichier". 

Un lien de cette forme : 

http://cjoint.com/data/0KAoeRbq7Szgg.htm

est ajouté dans la page. 

Copie ce lien dans ta réponse. 


et si problème passe par celui ci :   http://pjjoint.malekal.com/

yaso13 · Answer

voilà c'est fait.


https://www.cjoint.com/?3DgnwRFFEjY

yaso13 · Answer

# AdwCleaner v2.115 - Rapport créé le 07/04/2013 à 13:16:50
# Mis à jour le 17/03/2013 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : HOME - HOME-PC
# Mode de démarrage : Normal
# Exécuté depuis : C:\Users\HOME\Desktop\AdwCleaner.exe
# Option [Suppression]


***** [Services] *****


***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Program Files (x86)\iMesh Applications\Mediabar
Dossier Supprimé : C:\Program Files (x86)\incredibar.com
Dossier Supprimé : C:\Program Files (x86)\Perion
Dossier Supprimé : C:\Program Files (x86)\search results toolbar
Dossier Supprimé : C:\Program Files\IB Updater
Dossier Supprimé : C:\ProgramData\Babylon
Dossier Supprimé : C:\ProgramData\boost_interprocess
Dossier Supprimé : C:\ProgramData\Browser Manager
Dossier Supprimé : C:\ProgramData\BrowserProtect
Dossier Supprimé : C:\ProgramData\InstallMate
Dossier Supprimé : C:\ProgramData\SoftSafe
Dossier Supprimé : C:\ProgramData\Tarma Installer
Dossier Supprimé : C:\Users\HOME\AppData\Local\Babylon
Dossier Supprimé : C:\Users\HOME\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
Dossier Supprimé : C:\Users\HOME\AppData\Local\PackageAware
Dossier Supprimé : C:\Users\HOME\AppData\Local\Temp\{f34c9277-6577-4dff-b2d7-7d58092f272f}
Dossier Supprimé : C:\Users\HOME\AppData\Roaming\Babylon
Dossier Supprimé : C:\Users\HOME\AppData\Roaming\dvdvideosoftiehelpers
Dossier Supprimé : C:\Users\HOME\AppData\Roaming\Mozilla\Firefox\Profiles\bzlro3ye.default\extensions\ffxtlbr@incredibar.com
Dossier Supprimé : C:\Users\HOME\AppData\Roaming\Mozilla\Firefox\Profiles\bzlro3ye.default\jetpack
Dossier Supprimé : C:\Users\HOME\AppData\Roaming\OpenCandy
Dossier Supprimé : C:\Windows\SysWOW64\WNLT
Fichier Supprimé : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
Fichier Supprimé : C:\Program Files (x86)\Mozilla FireFox\searchplugins\Search_Results.xml
Fichier Supprimé : C:\user.js
Fichier Supprimé : C:\Users\HOME\AppData\Roaming\Mozilla\Firefox\Profiles\bzlro3ye.default\searchplugins\delta.xml
Fichier Supprimé : C:\Users\HOME\AppData\Roaming\Mozilla\Firefox\Profiles\bzlro3ye.default\searchplugins\MyStart Search.xml
Fichier Supprimé : C:\Users\HOME\AppData\Roaming\Mozilla\Firefox\Profiles\bzlro3ye.default\searchplugins\Search_Results.xml

***** [Registre] *****

Clé Supprimée : HKCU\Software\AppDataLow\Software\Crossrider
Clé Supprimée : HKCU\Software\BabylonToolbar
Clé Supprimée : HKCU\Software\Cr_Installer
Clé Supprimée : HKCU\Software\DataMngr
Clé Supprimée : HKCU\Software\DataMngr_Toolbar
Clé Supprimée : HKCU\Software\Google\Chrome\Extensions\ojpijjmpahflnipadmlpgbjmagmjchkk
Clé Supprimée : HKCU\Software\IM
Clé Supprimée : HKCU\Software\ImInstaller
Clé Supprimée : HKCU\Software\InstallCore
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0C35-8A85-403A-B9D2-65C292C39087}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403A-B9D2-65C292C39087}
Clé Supprimée : HKCU\Software\WNLT
Clé Supprimée : HKCU\Software\5bed78ae76def14
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Clé Supprimée : HKLM\Software\Babylon
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\BrowserConnection.dll
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\DNSBHO.dll
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
Clé Supprimée : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Clé Supprimée : HKLM\SOFTWARE\Classes\BrowserConnection.Loader
Clé Supprimée : HKLM\SOFTWARE\Classes\DnsBHO.BHO
Clé Supprimée : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject
Clé Supprimée : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Clé Supprimée : HKLM\Software\DataMngr
Clé Supprimée : HKLM\Software\IB Updater
Clé Supprimée : HKLM\Software\iLividSRTB
Clé Supprimée : HKLM\Software\Iminent
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BabylonToolbarsrv_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BabylonToolbarsrv_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\iLivid_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\iLivid_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\iLividMediaBar_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\iLividMediaBar_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetup_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetup_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\5bed78ae76def14
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ojpijjmpahflnipadmlpgbjmagmjchkk
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{74C36554-31F0-49DD-8857-ED6A64DF45BE}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403A-B9D2-65C292C39087}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403A-B9D2-65C292C39087}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WNLT
Clé Supprimée : HKLM\SOFTWARE\Tarma Installer
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{BA14329E-9550-4989-B3F2-9732E92D17CC}]
Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{acaa314b-eeba-48e4-ad47-84e31c44796c}]
Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{F9639E4A-801B-4843-AEE3-03D9DA199E77}]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [10]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [10]

***** [Navigateurs] *****

-\ Internet Explorer v9.0.8112.16470

Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.babylon.com/?affID=119370&babsrc=HP_ss&mntrId=089CD02788001D4E --> hxxp://www.google.com

-\ Mozilla Firefox v14.0.1 (fr)

Fichier : C:\Users\HOME\AppData\Roaming\Mozilla\Firefox\Profiles\bzlro3ye.default\prefs.js

C:\Users\HOME\AppData\Roaming\Mozilla\Firefox\Profiles\bzlro3ye.default\user.js ... Supprimé !

Supprimée : user_pref("browser.search.selectedEngine", "Search the web (Babylon)");
Supprimée : user_pref("browser.startup.homepage", "hxxp://search.babylon.com/?affID=119370&babsrc=HP_ss&mntrId=0[...]
Supprimée : user_pref("extensions.delta.admin", false);
Supprimée : user_pref("extensions.delta.aflt", "babsst");
Supprimée : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Supprimée : user_pref("extensions.delta.autoRvrt", "false");
Supprimée : user_pref("extensions.delta.dfltLng", "en");
Supprimée : user_pref("extensions.delta.excTlbr", false);
Supprimée : user_pref("extensions.delta.id", "089cca3e000000000000d02788001d4e");
Supprimée : user_pref("extensions.delta.instlDay", "15790");
Supprimée : user_pref("extensions.delta.instlRef", "sst");
Supprimée : user_pref("extensions.delta.newTab", false);
Supprimée : user_pref("extensions.delta.prdct", "delta");
Supprimée : user_pref("extensions.delta.prtnrId", "delta");
Supprimée : user_pref("extensions.delta.rvrt", "false");
Supprimée : user_pref("extensions.delta.smplGrp", "none");
Supprimée : user_pref("extensions.delta.tlbrId", "base");
Supprimée : user_pref("extensions.delta.tlbrSrchUrl", "");
Supprimée : user_pref("extensions.delta.vrsn", "1.8.10.0");
Supprimée : user_pref("extensions.delta.vrsnTs", "1.8.10.014:18:05");
Supprimée : user_pref("extensions.delta.vrsni", "1.8.10.0");
Supprimée : user_pref("extensions.enabledAddons", "{F53C93F1-07D5-430c-86D4-C9531B27DFAF}:12.0.0.2189,ffxtlbr@in[...]
Supprimée : user_pref("extensions.incredibar.admin", false);
Supprimée : user_pref("extensions.incredibar.aflt", "orgnl");
Supprimée : user_pref("extensions.incredibar.cntry", "FR");
Supprimée : user_pref("extensions.incredibar.dfltLng", "");
Supprimée : user_pref("extensions.incredibar.dfltSrch", false);
Supprimée : user_pref("extensions.incredibar.did", "10658");
Supprimée : user_pref("extensions.incredibar.envrmnt", "production");
Supprimée : user_pref("extensions.incredibar.excTlbr", false);
Supprimée : user_pref("extensions.incredibar.hdrMd5", "89C6E63E535EF90CC131A9CEB898798B");
Supprimée : user_pref("extensions.incredibar.hmpg", false);
Supprimée : user_pref("extensions.incredibar.id", "089cca3e000000000000d02788001d4e");
Supprimée : user_pref("extensions.incredibar.installerproductid", "26");
Supprimée : user_pref("extensions.incredibar.instlDay", "15672");
Supprimée : user_pref("extensions.incredibar.instlRef", "");
Supprimée : user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1420:00:40");
Supprimée : user_pref("extensions.incredibar.mntrvrsn", "1.2.0");
Supprimée : user_pref("extensions.incredibar.newTab", false);
Supprimée : user_pref("extensions.incredibar.noFFXTlbr", false);
Supprimée : user_pref("extensions.incredibar.ppd", "");
Supprimée : user_pref("extensions.incredibar.prdct", "incredibar");
Supprimée : user_pref("extensions.incredibar.productid", "26");
Supprimée : user_pref("extensions.incredibar.prtnrId", "Incredibar");
Supprimée : user_pref("extensions.incredibar.sg", "none");
Supprimée : user_pref("extensions.incredibar.smplGrp", "none");
Supprimée : user_pref("extensions.incredibar.tlbrId", "base");
Supprimée : user_pref("extensions.incredibar.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6OyVATgzNH&loc=IB_T[...]
Supprimée : user_pref("extensions.incredibar.upn2", "6OyVATgzNH");
Supprimée : user_pref("extensions.incredibar.upn2n", "92262530864296773");
Supprimée : user_pref("extensions.incredibar.vrsn", "1.5.11.14");
Supprimée : user_pref("extensions.incredibar.vrsnTs", "1.5.11.1420:00:40");
Supprimée : user_pref("extensions.incredibar.vrsni", "1.5.11.14");
Supprimée : user_pref("extensions.incredibar_i.aflt", "orgnl");
Supprimée : user_pref("extensions.incredibar_i.dfltLng", "");
Supprimée : user_pref("extensions.incredibar_i.did", "10658");
Supprimée : user_pref("extensions.incredibar_i.excTlbr", false);
Supprimée : user_pref("extensions.incredibar_i.id", "089cca3e000000000000d02788001d4e");
Supprimée : user_pref("extensions.incredibar_i.installerproductid", "26");
Supprimée : user_pref("extensions.incredibar_i.instlDay", "15672");
Supprimée : user_pref("extensions.incredibar_i.instlRef", "");
Supprimée : user_pref("extensions.incredibar_i.ms_url_id", "");
Supprimée : user_pref("extensions.incredibar_i.newTab", false);
Supprimée : user_pref("extensions.incredibar_i.ppd", "");
Supprimée : user_pref("extensions.incredibar_i.prdct", "incredibar");
Supprimée : user_pref("extensions.incredibar_i.productid", "26");
Supprimée : user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
Supprimée : user_pref("extensions.incredibar_i.smplGrp", "none");
Supprimée : user_pref("extensions.incredibar_i.tlbrId", "base");
Supprimée : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6OyVATgzNH&loc=IB[...]
Supprimée : user_pref("extensions.incredibar_i.upn2", "6OyVATgzNH");
Supprimée : user_pref("extensions.incredibar_i.upn2n", "92262530864296773");
Supprimée : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
Supprimée : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1420:00:40");
Supprimée : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
Supprimée : user_pref("extentions.y2layers.defaultEnableAppsList", "twittube,buzzdock,YontooNewOffers");
Supprimée : user_pref("extentions.y2layers.installId", "e15ddd9a-fd11-40d8-95fd-fdf067b23e33");
Supprimée : user_pref("extentions.y2layers.lastDnsTest", 371805);
Supprimée : user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_blackList", "form=CONTLB|babsrc=too[...]
Supprimée : user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_whiteList", "{\"search.babylon.com\[...]
Supprimée : user_pref("{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}.ScriptData_WSG_temp_referer", "hxxp://www.searchnu[...]
Supprimée : user_pref("browser.newtab.url", "hxxp://search.babylon.com/?affID=119370&babsrc=NT_ss&mntrId=089CD02[...]

-\ Google Chrome v26.0.1410.43

Fichier : C:\Users\HOME\AppData\Local\Google\Chrome\User Data\Default\Preferences

Supprimée [l.2393] : homepage = "hxxp://www.delta-search.com/?affID=119556&tt=190313_wo2&babsrc=HP_ss&mntrId=089CD027[...]
Supprimée [l.3508] : urls_to_restore_on_startup = [ "hxxp://www.delta-search.com/?affID=119556&tt=190313_wo2&babsr[...]

*************************

AdwCleaner[R10].txt - [23681 octets] - [26/03/2013 22:15:40]
AdwCleaner[R3].txt - [14047 octets] - [17/10/2012 08:11:40]
AdwCleaner[R4].txt - [14108 octets] - [17/10/2012 08:11:52]
AdwCleaner[R5].txt - [11937 octets] - [03/11/2012 16:34:06]
AdwCleaner[R6].txt - [11998 octets] - [03/11/2012 16:34:22]
AdwCleaner[R7].txt - [14335 octets] - [01/01/2013 17:23:19]
AdwCleaner[R8].txt - [14396 octets] - [01/01/2013 17:23:43]
AdwCleaner[R9].txt - [23618 octets] - [26/03/2013 22:15:06]
AdwCleaner[S2].txt - [1896 octets] - [17/10/2012 08:12:27]
AdwCleaner[S3].txt - [11853 octets] - [03/11/2012 16:34:40]
AdwCleaner[S4].txt - [391 octets] - [26/03/2013 22:16:11]
AdwCleaner[S5].txt - [18509 octets] - [07/04/2013 13:16:50]

########## EOF - C:\AdwCleaner[S5].txt - [18570 octets] ##########

yaso13 · Answer

Rapport de ZHPDiag v2013.4.5.28 par Nicolas Coolman, Update du 05/04/2013
Run by HOME at 14/04/2013 13:51:01
State : Nouvelle version disponible
High Elevated Privileges : OK
UAC : Activate by user


---\ Web Browser
MSIE: Internet Explorer v9.0.8112.16421
MFIE: Mozilla Firefox 14.0.1 v14.0.1

---\ Windows Product Information
~ Langage: Français
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 7QJB7
Windows License : OK
~ Windows Remaining Initializations Number : 3
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\ System Information
~ Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 4095 MB (70% free)
System Restore: Activé (Enable)
System drive C: has 115 GB (25%) free of 457 GB

---\ Logged in mode
~ Computer Name: HOME-PC
~ User Name: HOME
~ All Users Names: UpdatusUser, HomeGroupUser$, HOME, Administrateur, 
~ Unselected Option: None
Logged in as Administrator

---\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\HOME\AppData\Roaming\
~ %Desktop% : C:\Users\HOME\Desktop\
~ %Favorites% : C:\Users\HOME\Favorites\
~ %LocalAppData% : C:\Users\HOME\AppData\Local\
~ %StartMenu% : C:\Users\HOME\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 115 Go of 457 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 262 Go of 457 Go)
E:\ CD-ROM drive (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
J:\ CD-ROM drive (Not Inserted)
K:\ Floppy drive, Flash card reader, USB Key (Not Inserted)



---\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  OK
~ Security Center:  Scanned in 00mn 00s



---\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.A4F6142CABA82FB7293ECE5FF864B440] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.22/02/2013 - 07:20:51.) -- C:\Windows\System32\wininet.dll [1392128]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers
etBT.sys [261632]
[MD5.B8965FB53551B5455630A4B804D0791F] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.02/03/2013 - 07:04:53.) -- C:\Windows\system32\Drivers
tfs.sys [1655656]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers	dx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes:  Scanned in 00mn 00s



---\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/2654
~ Mes musiques (My Musics) : 2/7569
~ Mes Videos (My Videos) : 2/4
~ Mes Favoris (My Favorites) : 1/37
~ Mes Documents (My Documents) : 1/6625
~ Mon Bureau (My Desktop) : 1/771
~ Menu demarrer (Programs) : 1/35
~ Hidden Files:  Scanned in 00mn 08s



---\ Processus lancés
[MD5.C72FB9CC856ECFF3B6459B27CB674638] - (.PixArt Imaging Incorporation - Registry Monitor.) -- C:\Windows\Philips\SPC230NC\Monitor.exe   [323584] [PID.3468]
[MD5.E0E15F209360E4A97ABCC21A486B4AEE] - (.Apple Inc. - ubd.exe.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe   [59240] [PID.3556]
[MD5.5DBDC85A9AB1C338E82DB4F118C04D6E] - (.Apple Inc. - distnoted.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe   [13712] [PID.3884]
[MD5.371BA71B566260932DCCCF843BF6C7E7] - (.AVG Technologies CZ, s.r.o. - AVG Tray Monitor.) -- C:\Program Files (x86)\AVG\AVG2012\avgtray.exe   [2598520] [PID.3916]
[MD5.BED38B0ADFF5F5CC6E988A6491017E83] - (.Research In Motion Limited - Launch Agent Service.) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe   [267792] [PID.3928]
[MD5.8E2A7F1F62467A7DCB8AB2C0642F47CA] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe   [152392] [PID.3944]
[MD5.6E5876A0BBCD9146A4DB62C68BB99EE6] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [6493184] [PID.4228]
[MD5.5A19667A580B1CE886EAF968B9743F45] - (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision
vSCPAPISvr.exe   [383264] [PID.780]
[MD5.4FE5C6D40664AE07BE5105874357D2ED] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe   [57008] [PID.1608]
[MD5.6C469E3CB15CF33AD3E757096E6C7026] - (.AVG Technologies CZ, s.r.o. - AVG Firewall Service.) -- C:\Program Files (x86)\AVG\AVG2012\avgfws.exe   [2321560] [PID.1656]
[MD5.EA1145DEBCD508FD25BD1E95C4346929] - (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) -- C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe   [193288] [PID.1732]
[MD5.816FD5A6F3C2F3D600900096632FC60E] - (.Acer Incorporated - Global Registration Service.) -- C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe   [1150496] [PID.1900]
[MD5.1713D9DE407313138118D501B0E3C05B] - (...) -- C:\Windows\SysWOW64\PnkBstrA.exe   [75136] [PID.1972]
[MD5.F9EC9ACD504D823D9B9CA98A4F8D3CA2] - (.Acer Group - Updater Service.) -- C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe   [243232] [PID.1816]
[MD5.231B6AD3DB2866BC3FDB9979E6B2B61E] - (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) -- C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe   [5174392] [PID.2172]
[MD5.686045905787B68D829CE647A6DFAD2B] - (.Research In Motion Limited - BlackBerry Device Manager.) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe   [577536] [PID.4040]
~ Processes Running:  Scanned in 00mn 00s



---\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\HOME\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] None
~ Google Browser:  Scanned in 00mn 00s



---\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Users\HOME\AppData\Roaming\Mozilla\Firefox\Profiles\bzlro3ye.default\prefs.js
M3 - MFPP: Plugins - [HOME] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [HOME] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [HOME] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [HOME] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [HOME] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [HOME] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [HOME] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\yahoo-france.xml
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins
pqtplugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins
pqtplugin2.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins
pqtplugin3.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins
pqtplugin4.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins
pqtplugin5.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins
pqtplugin6.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins
pqtplugin7.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_180.dll
P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- C:\Program Files\ma-config.com
phardwaredetection.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.20125.0.) -- C:\Program Files\Microsoft Silverlight\5.1.20125.0
pctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\Program Files\Microsoft Office\Office14\NPAUTHZ.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\HOME\AppData\Local\Google\Update\1.3.21.135
pGoogleUpdate3.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\HOME\AppData\Local\Google\Update\1.3.21.135
pGoogleUpdate3.dll
~ Firefox Browser:  Scanned in 00mn 00s



---\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.packardbell.com
R0 - HKCU\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww1.bigseekpro.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)) -- C:\Windows\SysWOW64\ieframe.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ IE Browser:  Scanned in 00mn 00s



---\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management:  Scanned in 00mn 00s



---\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys:  Scanned in 00mn 00s



---\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File:  Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AVG Do Not Track [64Bits] - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} . (.AVG Technologies CZ, s.r.o. - AVG Do Not Track for IE.) -- C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll
~ BHO: 7 Legitimates Scanned in 00mn 00s



---\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe 
O4 - HKLM\..\Run: [SPC230NC_Monitor] . (.PixArt Imaging Incorporation - Registry Monitor.) -- C:\Windows\Philips\SPC230NC\Monitor.exe 
O4 - HKLM\..\Run: [SPC_Monitor] . (.PixArt Imaging Incorporation - Registry Monitor.) -- C:\Windows\Philips\SPC230NC\Monitor.exe 
O4 - HKLM\..\Run: [Logitech Download Assistant] . (.Logitech, Inc. - Logitech Download Assistant.) -- C:\Windows\System32\LogiLDA.dll 
O4 - HKCU\..\Run: [PC Suite Tray] . (.Nokia - Nokia Launch Application.) -- C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe 
O4 - HKCU\..\Run: [MobileDocuments] . (.Apple Inc. - ubd.exe.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe 
O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe 
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_794A8B03028DB7152639742D9AD96F69] . (.Google Inc. - Google Chrome.) -- C:\Users\HOME\AppData\Local\Google\Chrome\Application\chrome.exe 
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\HOME\AppData\Local\Google\Update\GoogleUpdate.exe 
O4 - HKLM\..\Wow6432Node\Run: [Hotkey Utility] . (.Pas de propriétaire - Hotkey Utility.) -- C:\Program Files (x86)\Packard Bell\Hotkey Utility\HotkeyUtility.exe 
O4 - HKLM\..\Wow6432Node\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe 
O4 - HKLM\..\Wow6432Node\Run: [AppleSyncNotifier] . (.Apple Inc. - AppleSyncNotifier.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe 
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe 
O4 - HKLM\..\Wow6432Node\Run: [AVG_TRAY] . (.AVG Technologies CZ, s.r.o. - AVG Tray Monitor.) -- C:\Program Files (x86)\AVG\AVG2012\avgtray.exe 
O4 - HKLM\..\Wow6432Node\Run: [RIMBBLaunchAgent.exe] . (.Research In Motion Limited - Launch Agent Service.) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe 
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe 
O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe 
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-18\..\RunOnce: [{91140000-0011-0000-0000-0000000FF1CE}] . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe 
O4 - HKUS\S-1-5-18\..\RunOnce: [{90140000-0011-0000-0000-0000000FF1CE}] . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe 
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
O4 - HKUS\S-1-5-21-3119443784-3769465231-1657909603-1000\..\Run: [PC Suite Tray] . (.Nokia - Nokia Launch Application.) -- C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe 
O4 - HKUS\S-1-5-21-3119443784-3769465231-1657909603-1000\..\Run: [MobileDocuments] . (.Apple Inc. - ubd.exe.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe 
O4 - HKUS\S-1-5-21-3119443784-3769465231-1657909603-1000\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe 
O4 - HKUS\S-1-5-21-3119443784-3769465231-1657909603-1000\..\Run: [GoogleChromeAutoLaunch_794A8B03028DB7152639742D9AD96F69] . (.Google Inc. - Google Chrome.) -- C:\Users\HOME\AppData\Local\Google\Chrome\Application\chrome.exe 
O4 - HKUS\S-1-5-21-3119443784-3769465231-1657909603-1000\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\HOME\AppData\Local\Google\Update\GoogleUpdate.exe 
~ Application:  Scanned in 00mn 00s



---\ Autres liens utilisateurs (O4)
O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.)  -- C:\Windows\system32\eudcedit.exe 
O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft  Windows Fax and Scan.)  -- C:\Windows\system32\WFS.exe 
O4 - GS\Desktop: ABC Amber BlackBerry Converter.lnk . (.ProcessText Group - ABC Amber BlackBerry Converter.)  -- C:\Program Files (x86)\ABC Amber BlackBerry Converter\abcberry.exe 
O4 - GS\Desktop: Apocalypse Weekend.exe.lnk . (...)  -- C:\Program Files (x86)\Postal2STP\ApocalypseWeekend\System\ApocalypseWeekend.exe (.not file.)
O4 - GS\Desktop: AWP.exe.lnk . (...)  -- C:\Program Files (x86)\Postal2STP\AWP\System\AWP.exe (.not file.)
O4 - GS\Desktop: Eternal Damnation.exe.lnk . (...)  -- C:\Program Files (x86)\Postal2STP\Eternal Damnation\System\EternalDamnation.exe (.not file.)
O4 - GS\Desktop: Postal Plus.exe.lnk . (...)  -- C:\Program Files (x86)\Postal2STP\PostalClassic&Uncut\Postal Plus.exe (.not file.)
O4 - GS\Desktop: Postal2 Share The Pain.exe.lnk . (...)  -- C:\Program Files (x86)\Postal2STP\System\Postal2.exe (.not file.)
O4 - GS\TaskBar: Azureus (2).lnk . (.Vuze Inc. - Pas de description.)  -- C:\Program Files (x86)\Vuze\Azureus.exe 
O4 - GS\TaskBar: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Users\HOME\AppData\Local\Google\Chrome\Application\chrome.exe 
O4 - GS\TaskBar: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.)  -- C:\Windows\explorer.exe 
O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\Programs: Poker 770.NET.lnk . (...)  -- C:\Poker\Poker 770.NET\casino.exe
O4 - GS\QuickLaunch: iMesh.lnk . (.iMesh, Inc - iMesh.)  -- C:\Program Files (x86)\iMesh Applications\iMesh\iMesh.exe   =>PUP.iMesh
O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\QuickLaunch: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.)  -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
O4 - GS\QuickLaunch: Vuze.lnk . (.Vuze Inc. - Pas de description.)  -- C:\Program Files (x86)\Vuze\Azureus.exe 
O4 - GS\QuickLaunch: WildTangent Games App - packardbell.lnk . (.WildTangent, Inc. - Updater.)  -- C:\Program Files (x86)\WildTangent Games\App\GameConsole-wt.exe 
O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\SendTo: Skype.lnk . (.Skype Technologies S.A. - Skype.)  -- C:\Program Files (x86)\Skype\Phone\Skype.exe 
O4 - GS\Desktop: DVDVideoSoft Free Studio.lnk . (.DvdVideoSoft Ltd. - FreeStudioManager.)  -- C:\Program Files (x86)\Common Files\DVDVideoSoft\FreeStudioManager.exe 
O4 - GS\Desktop: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Users\HOME\AppData\Local\Google\Chrome\Application\chrome.exe 
O4 - GS\Desktop: Internet Explorer (64-bit).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\Desktop: Microsoft Word 2010.lnk . (...)  -- C:\Windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
O4 - GS\Desktop: Revo Uninstaller.lnk . (.VS Revo Group - Revo Uninstaller.)  -- C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe 
~ Global Startup:  Scanned in 00mn 01s



---\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
~ IE Control Panel: 1 Legitimates Scanned in 00mn 00s



---\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Envoyer à OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~2\Office14\ONBttnIE.dll
O9 - Extra button: AVG Do Not Track [64Bits] - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} . (.AVG Technologies CZ, s.r.o. - AVG Do Not Track for IE.) -- C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll
O9 - Extra button: Notes &liées OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~2\Office14\ONBttnIELinkedNotes.dll
~ IE Extra Buttons:  Scanned in 00mn 00s



---\ Winsock hijacker (Layered Service Provider) (O10)
~ Winsock: 9 Legitimates Scanned in 00mn 00s



---\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{456BA58D-7E10-4F08-9A9D-CA52A2718BA3}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{456BA58D-7E10-4F08-9A9D-CA52A2718BA3}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{456BA58D-7E10-4F08-9A9D-CA52A2718BA3}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain:  Scanned in 00mn 00s



---\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- 
O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll
~ Protocole Additionnel:  Scanned in 00mn 00s



---\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
~ SSODL: 1 Legitimates Scanned in 00mn 00s



---\ Liste des services NT non Microsoft et non désactivés (O23)
~ Services: 13 Legitimates Scanned in 00mn 04s



---\ Enumération Active Desktop & MHTML Editor (O24)
~ Desktop Component: 1 Legitimates Scanned in 00mn 00s



---\ BootExecute (O34)
~ BEX: 2 Legitimates Scanned in 00mn 00s



---\ Tâches planifiées en automatique (O39)
[MD5.00000000000000000000000000000000] [APT] [Go for FilesUpdate] (...) -- C:\Program Files (x86)\GoforFiles\GFFUpdater.exe (.not file.)   [0]
[MD5.00000000000000000000000000000000] [APT] [Programme de mise ... jour en ligne de Adobe] (...) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (.not file.)   [0]
[MD5.7F91A8D7192B1664D4C4B19996ED8281] [APT] [Test TimeTrigger] (...) -- C:\Users\HOME\AppData\Local\Temp\Runner.exe   [40587]
[MD5.00000000000000000000000000000000] [APT] [{3A9B5C28-0D82-423F-8C92-745BD82E8DF0}] (...) -- C:\Users\HOME\Desktop\RailSimulator_Demo.exe (.not file.)   [0]
[MD5.0057E5D097BAC9D40BDBBA55D369D004] [APT] [{8DDDFF07-FB49-41E3-AACC-B4AABD2C8E07}] (.Nokia.) -- C:\Program Files (x86)\Nokia\Nokia PC Suite 7\ApplicationInstaller.exe   [302592]
[MD5.110CB61C9ECA5F72D410CA178AC49493] [APT] [{BB46A8CC-34AF-4A22-8913-1CB9FC2A4113}] (...) -- C:\Program Files (x86)\ABC Amber BlackBerry Converter\UNWISE.exe   [148992]
[MD5.BA30773120175EE6A40C261F9DE7FCD3] [APT] [{D1375AA4-B33E-4CE7-B89E-76A480ECAF23}] (.Macrovision Corporation.) -- C:\Program Files (x86)\InstallShield Installation Information\{05F350C6-FA6A-40D0-A130-FB941B39152C}\setup.exe   [456416]
[MD5.00000000000000000000000000000000] [APT] [{F67875C6-4B8B-4EF0-8CB1-DBBF226CD345}] (...) -- C:\Users\HOME\Desktop\lide20lide30n670un676un1240uvst7031a_xpfr\SetupSG.exe (.not file.)   [0]
[MD5.00000000000000000000000000000000] [APT] [{FDE0933F-2C00-4838-9D53-2D144CCA00EB}] (...) -- C:\Users\HOME\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe (.not file.)   [0]
~ Scheduled Task: 26 Legitimates Scanned in 00mn 03s



---\ Composants installés (ActiveSetup Installed Components) (O40)
~ Active Setup: 8 Legitimates Scanned in 00mn 00s



---\ Pilotes lancés au démarrage (O41)
~ Drivers: 72 Legitimates Scanned in 00mn 00s



---\ Logiciels installés (O42)
O42 - Logiciel: AVG 2012 - (.AVG Technologies.) [HKLM][64Bits] -- AVG
O42 - Logiciel: AVG 2012 - (.AVG Technologies.) [HKLM][64Bits] -- {31CE1406-5C12-44C5-B6C5-0F55F2039DE3}
O42 - Logiciel: AVG 2012 - (.AVG Technologies.) [HKLM][64Bits] -- {8EBE1375-11F7-482D-936C-4C575F3D9BCB}
O42 - Logiciel: Vuze - (.Vuze Inc..) [HKLM][64Bits] -- 8461-7759-5462-8226
O42 - Logiciel: bwin Poker - (.Bwin.) [HKLM][64Bits] -- bwin Poker_is1
O42 - Logiciel: iMesh - (.iMesh Inc..) [HKLM][64Bits] -- {8FB495A1-4A3F-4C1D-BD27-3F3AB2E66763}  =>PUP.iMesh
~ Logic: 144 Legitimates Scanned in 00mn 00s



---\ HKCU & HKLM Software Keys
[HKCU\Software\Azureus]
[HKCU\Software\Full Tilt Poker.fr]
[HKCU\Software\Grand Virtual]
[HKCU\Software\IncrediMail]
[HKCU\Software\LetsTunes]
[HKCU\Software\NSeries]
[HKCU\Software\Poker 770.NET]
[HKCU\Software\iMesh]  =>PUP.iMesh
[HKLM\Software\IB Updater]
[HKLM\Software\WNLT]
[HKLM\Software\Wow6432Node\Azureus]
[HKLM\Software\Wow6432Node\Full Tilt Poker]
[HKLM\Software\Wow6432Node\IncrediMail]
[HKLM\Software\Wow6432Node\Rail Simulator]
[HKLM\Software\Wow6432Node\iMeshMediabarTb]  =>PUP.iMesh
[HKLM\Software\Wow6432Node\iMesh]  =>PUP.iMesh
[HKLM\Software\Wow6432Node
d]
~ Key Software: 275 Legitimates Scanned in 00mn 00s



---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 03/11/2012 - 16:42:37 - [0] ----D C:\Program Files (x86)\Exor Studios
O43 - CFD: 07/04/2013 - 13:05:06 - [0,616] ----D C:\Program Files (x86)\Full Tilt Poker.Fr
O43 - CFD: 07/04/2013 - 13:16:57 - [43,042] ----D C:\Program Files (x86)\iMesh Applications  =>PUP.iMesh
O43 - CFD: 21/11/2012 - 17:03:52 - [105,809] ----D C:\Program Files (x86)\Vuze
O43 - CFD: 09/05/2012 - 10:35:54 - [0,004] ----D C:\ProgramData\365A
O43 - CFD: 14/09/2011 - 19:50:35 - [0,078] ----D C:\ProgramData\iMesh  =>PUP.iMesh
O43 - CFD: 24/12/2012 - 11:34:05 - [0] --H-D C:\ProgramData\{145B6A8D-C3A8-4F62-BF1A-E616EBBDF2B2}
O43 - CFD: 12/04/2013 - 07:08:52 - [142,204] ----D C:\Users\HOME\AppData\Roaming\Azureus
O43 - CFD: 31/01/2013 - 14:49:11 - [0] ----D C:\Users\HOME\AppData\Roaming\com.zoosk.Desktop.096E6A67431258A508A2446A847B240591D2C99B.1
O43 - CFD: 01/01/2013 - 13:20:36 - [0] ----D C:\Users\HOME\AppData\Roaming\GoforFiles
O43 - CFD: 05/02/2011 - 14:56:11 - [0,001] ----D C:\Users\HOME\AppData\Roaming\letstunes
O43 - CFD: 21/02/2011 - 12:18:41 - [0,047] ----D C:\Users\HOME\AppData\Roaming\NSeries
O43 - CFD: 28/07/2012 - 17:10:09 - [0] ----D C:\Users\HOME\AppData\Local\2012
O43 - CFD: 21/09/2011 - 11:25:26 - [0,001] ----D C:\Users\HOME\AppData\Local\28050
O43 - CFD: 27/04/2011 - 03:33:49 - [0] ----D C:\Users\HOME\AppData\Local\FullTiltPoker
O43 - CFD: 21/04/2011 - 01:36:19 - [0,647] ----D C:\Users\HOME\AppData\Local\FullTiltPoker.fr
O43 - CFD: 05/08/2012 - 17:29:20 - [80,719] ----D C:\Users\HOME\AppData\Local\iMesh  =>PUP.iMesh
O43 - CFD: 19/06/2012 - 17:43:56 - [29,214] ----D C:\Users\HOME\AppData\Localocherdigital
O43 - CFD: 27/03/2013 - 08:17:31 - [0] ----D C:\Users\HOME\AppData\Local\Tiger Savings
O43 - CFD: 02/04/2013 - 17:58:53 - [0] ----D C:\Users\HOME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ProcessText Group
~ 831 Dossiers CLSID vides (CLSID Empty Folders)
~ Program Folder: 1198 Legitimates Scanned in 00mn 09s



---\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.612B3CF6B7BA7D4541585E7E434C48F2] - 08/04/2013 - 13:39:29 ---A- . (...) -- C:\SPC230NC.DAT   [230432]
O44 - LFC:[MD5.4CA08C2A2C15E72001595A4FB7245A77] - 04/04/2013 - 06:20:58 ---A- . (...) -- C:\Windows\DPINST.LOG   [10460]
O44 - LFC:[MD5.344604E6913BD6E4EAEC34AF2E0943D7] - 02/04/2013 - 16:42:07 RSHAD . (.Research in Motion Ltd - RIM Virtual Serial Driver.) -- C:\Windows\System32\Drivers\RimSerial_AMD64.sys   [44544]
O44 - LFC:[MD5.C1350CCF29D463F9FA142BD08320D2AE] - 26/03/2013 - 21:16:11 ---A- . (...) -- C:\AdwCleaner[S4].txt   [391]
O44 - LFC:[MD5.3E500172BB0834AC608776A176E923F5] - 26/03/2013 - 21:15:47 ---A- . (...) -- C:\AdwCleaner[R10].txt   [23681]
O44 - LFC:[MD5.BCB8728EAA94093245B1C4ED8B0B510F] - 26/03/2013 - 21:15:17 ---A- . (...) -- C:\AdwCleaner[R9].txt   [23618]
~ Files: 68 Legitimates Scanned in 00mn 05s



---\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.6C2103DB2F141D1334411FDEBB652B8E] - 12/04/2013 - 15:58:48 ---A- - C:\Windows\Prefetch\WPDSHEXTAUTOPLAY.EXE-89FFE003.pf
O45 - LFCP:[MD5.DFCFC405A11FB07BC55CF2D703A3F0B3] - 14/04/2013 - 10:24:03 ---A- - C:\Windows\Prefetch\AVGSRMAA.EXE-CC28C321.pf
~ Prefetcher: 69 Legitimates Scanned in 00mn 00s



---\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook [64Bits] - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL
~ ShellExecuteHooks:  Scanned in 00mn 00s



---\ Déni du service (Local Security Authority) (O48)
~ LSA: 9 Legitimates Scanned in 00mn 00s



---\ Contrôle du Safe Boot (CSB) (O49)
~ CBS: 13 Legitimates Scanned in 00mn 00s



---\ MountPoints2 Shell Key (O51)
O51 - MPSK:{4d14d384-d8c0-11e1-87c8-d02788001d4e}\AutoRun\command. (...) -- K:\autorun.exe (.not file.)
O51 - MPSK:{61f33f97-504d-11e1-ae74-d02788001d4e}\AutoRun\command. (...) -- J:\LaunchU3.exe (.not file.)
~ Keys:  Scanned in 00mn 00s



---\ Trojan Driver Search Data (HKLM) (O52)
~ TDSD: 2 Legitimates Scanned in 00mn 00s



---\ Microsoft Control Security Providers (O54)
~ MSCP: 2 Legitimates Scanned in 00mn 00s



---\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 18 Legitimates Scanned in 00mn 00s



---\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
~ MWPE Keys: 7 Legitimates Scanned in 00mn 00s



---\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys   [491088]
~ Drivers:  Scanned in 00mn 00s



---\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC: 11/04/2013 - 06:17:22 ---A- C:\Users\HOME\AppData\Local\Google\Chrome\Application\26.0.1410.64\Installer\setup.exe   [1642448]
O61 - LFC: 11/04/2013 - 06:17:28 ---A- C:\Users\HOME\AppData\Local\Google\Chrome\Application\VisualElementsManifest.xml   [396]
O61 - LFC: 11/04/2013 - 06:17:28 R--A- C:\Users\HOME\AppData\Local\Google\Chrome\Application\26.0.1410.64\Installer\chrome.7z   [122865342]
O61 - LFC: 11/04/2013 - 20:56:18 ---A- C:\Users\HOME\AppData\Roaming\Azureus\ipfilter.cache   [0]
O61 - LFC: 11/04/2013 - 20:56:23 ---A- C:\Users\HOME\AppData\Roaming\Azureus
et\pm_21502.dat   [28566]
O61 - LFC: 11/04/2013 - 20:56:31 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\0E18C312CE815963DF73F45B512F76EF796651EC.dat   [31365]
O61 - LFC: 11/04/2013 - 20:56:31 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\296DFAAE992DB531D8A75DDB94EFC70671913864.dat.bak   [31169]
O61 - LFC: 11/04/2013 - 20:56:31 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\50EF91B5A050CBBD9121B087E8565F9EF5E2BAA7.dat.bak   [31273]
O61 - LFC: 11/04/2013 - 20:56:31 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\7A5B98F799CFF256340279F05285FAE99C7C1D62.dat.bak   [31076]
O61 - LFC: 11/04/2013 - 20:56:31 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\91A8238C0EE28D085F350F64026D8180C6FB390D.dat   [31259]
O61 - LFC: 11/04/2013 - 20:56:31 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\AF9A0D77BCDDD34AD54116E96BA24657F2CA6528.dat.bak   [30977]
O61 - LFC: 11/04/2013 - 20:56:31 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\BEF20573D02028BDC2FFE4703DAA8E0D341BC0A7.dat   [31307]
O61 - LFC: 11/04/2013 - 20:56:31 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\DE06009FEFDD6F17047630FE43B27F4B9DB82433.dat   [30770]
O61 - LFC: 11/04/2013 - 20:56:32 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\07AB55276EF75406C6FE09EFA16E86425BCD7F35.dat   [23825]
O61 - LFC: 11/04/2013 - 20:56:32 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\2876D6EBD28C099328B23A93CB8BF2EA0ACE6B2A.dat   [30922]
O61 - LFC: 11/04/2013 - 20:56:32 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\5B05FBB3ECBC2DFB19692CD8AFFB3008D8F150F4.dat.bak   [24056]
O61 - LFC: 11/04/2013 - 20:56:32 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\719A064E1B52E160CBC70CF60BE763C4AB2AE53E.dat   [60276]
O61 - LFC: 11/04/2013 - 20:56:32 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\907E2310516076674AFC438E4740D9BE5183E677.dat   [31226]
O61 - LFC: 11/04/2013 - 20:56:32 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\ED919C90B89E4239DCE411ABAE19A74DC863826C.dat   [31187]
O61 - LFC: 11/04/2013 - 20:56:32 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\F167797C1063C1BCA25AF5D9238712788C24BC8E.dat   [31121]
O61 - LFC: 11/04/2013 - 20:56:33 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\2572A27D689E85071770D093718A7DB1025275C8.dat   [40351]
O61 - LFC: 11/04/2013 - 20:56:33 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\2F24D43149260570F73296501B3A0672C8BA6F10.dat   [31100]
O61 - LFC: 11/04/2013 - 20:56:33 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\45E791CD5FCD58FFA7EB4CBA7D686FD548ADD8CB.dat   [31575]
O61 - LFC: 11/04/2013 - 20:56:33 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\5B1220AC515D1B09291EEADF000880E141094852.dat.bak   [34361]
O61 - LFC: 11/04/2013 - 20:56:33 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\9257F80A44926CCFC236AB8F96DBE8C60352BCD1.dat   [31288]
O61 - LFC: 11/04/2013 - 20:56:33 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\AABC360275BEF04186CD5AAFFCC7413727E4A875.dat   [30818]
O61 - LFC: 11/04/2013 - 20:56:33 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\AE4534A5FE4DF7FB2AFAB39C3581547C94C33406.dat   [31107]
O61 - LFC: 11/04/2013 - 20:56:33 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\BE948804B0AF9B34AE9FF36C7CACE4ED6D4D4473.dat.bak   [25515]
O61 - LFC: 11/04/2013 - 20:56:33 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\EAF4612A77971D5FF234848E723047562B141288.dat   [31745]
O61 - LFC: 11/04/2013 - 20:56:34 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\0A161BE30009AD5C08498EAD5D3A8825ADFEA7C1.dat   [31043]
O61 - LFC: 11/04/2013 - 20:56:34 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\305E275BE70C3B50CE1ADF30256F2A1712D5B674.dat   [31154]
O61 - LFC: 11/04/2013 - 20:56:34 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\6A07F88FE1B8AA132F1FE20E359D0AA56BF42B03.dat   [31126]
O61 - LFC: 11/04/2013 - 20:56:34 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\6D02E2CF0D81EE2BF30E091CA470D19591859392.dat   [30965]
O61 - LFC: 11/04/2013 - 20:56:34 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\6ECBEB0E842703686F3218431FA1E1645FF3DEDF.dat   [31649]
O61 - LFC: 11/04/2013 - 20:56:34 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\702EA7EFD9E7395974CE4A8FC864FECB1E7ADE52.dat   [33415]
O61 - LFC: 11/04/2013 - 20:56:34 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\7DD138C990A88C41C013EEB46E1F07C4CBC8B6C3.dat   [23186]
O61 - LFC: 11/04/2013 - 20:56:34 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\8AD2C1421A951DFC60A2214F8B72E8D3FFF451CD.dat   [31625]
O61 - LFC: 11/04/2013 - 20:56:34 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\B1A197C59DEC10B1152097083A97743EA286667B.dat   [24809]
O61 - LFC: 11/04/2013 - 20:56:34 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\E340DF7DB59D034382C4D4BA7AC42BEFA110749B.dat   [31104]
O61 - LFC: 11/04/2013 - 20:56:34 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\EB62CFB9A0AC75CC78B1E8ED4669D8E62F9BB5ED.dat   [31150]
O61 - LFC: 11/04/2013 - 20:56:34 ---A- C:\Users\HOME\AppData\Roaming\Azureus	mp\AZU813233266718011986.tmp\Vuze_4.9.0.0a_win32.exe   [7605792]
O61 - LFC: 11/04/2013 - 20:56:35 ---A- C:\Users\HOME\AppData\Roaming\Azureus\dht\addresses.dat   [65]
O61 - LFC: 11/04/2013 - 20:56:36 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\0812D9BCA2B95C006C3C1AE7E1465C318A995E36.dat.bak   [31106]
O61 - LFC: 11/04/2013 - 20:56:36 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\0A25073255B56A22222F1A510216F8FEE34163BC.dat.bak   [30040]
O61 - LFC: 11/04/2013 - 20:56:36 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\1081C107F530DB63BB3DC74DB9DB93B846FDF96A.dat   [23705]
O61 - LFC: 11/04/2013 - 20:56:36 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\14FB8110CEC9D9B487445ACFDBA657E71156C409.dat   [31216]
O61 - LFC: 11/04/2013 - 20:56:36 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\25B5F3B6A6E0FBA8CE0E3B2F823E775A78EEC442.dat   [31260]
O61 - LFC: 11/04/2013 - 20:56:36 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\48C3496DD71CAF3EEFC006DEC4F4661CB2996190.dat   [30493]
O61 - LFC: 11/04/2013 - 20:56:36 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\71BB9E7F9F41CC3D343434CA8A31D48DEDAE6D28.dat   [31099]
O61 - LFC: 11/04/2013 - 20:56:36 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\83FA5E5EEFE0D894CAE469BAF93C5AC78E4DE67B.dat   [31130]
O61 - LFC: 11/04/2013 - 20:56:36 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\863CE7DE96A9F7AAA6ED99D0F08876ACA499D91C.dat.bak   [31392]
O61 - LFC: 11/04/2013 - 20:56:36 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\9C41A45FBCED17E24FDC16DD9BA1BDAD5C93CAFF.dat   [30941]
O61 - LFC: 11/04/2013 - 20:56:36 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\A1796BCD54469A5CA8115AF5EC3210DDF766AE6B.dat   [39276]
O61 - LFC: 11/04/2013 - 20:56:36 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\A71BE8180D4FE4F1CED2967BBDB2C5F32C349441.dat   [31475]
O61 - LFC: 11/04/2013 - 20:56:36 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\C0046A965D9C07556196F81980BC8A141A0AD368.dat.bak   [31289]
O61 - LFC: 11/04/2013 - 20:56:36 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\C0A2B2AE48D6CBD5696D23F33F92D1E97899ACBC.dat   [31048]
O61 - LFC: 11/04/2013 - 20:56:36 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\E130AF9C18350194D5EDE00ECCAB01D5FBAB2BF9.dat   [30931]
O61 - LFC: 11/04/2013 - 20:56:36 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\EA62AB2194E2F6CE890817BBD3B1CE3010841DEA.dat   [37691]
O61 - LFC: 11/04/2013 - 20:56:36 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\F3247E891E148D7ADB32C67FC63B4844FE5D084C.dat   [23893]
O61 - LFC: 11/04/2013 - 20:56:36 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\F75B8ACBF85552CC749E90BF3D5D098242669054.dat   [31146]
O61 - LFC: 11/04/2013 - 20:56:36 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\FCCEFD9A32C697F145E3C36DF8FF2DF2FAF12380.dat.bak   [30717]
O61 - LFC: 11/04/2013 - 20:56:37 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\5B25EDAA5CD961C19FCD6639543B1EE2CAB144C5.dat   [31066]
O61 - LFC: 11/04/2013 - 20:57:12 ---A- C:\Users\HOME\AppData\Roaming\Azureus\devices\6ab04ef2-e64a-e34d-299f-685b3247e3b6.dat   [48612]
O61 - LFC: 11/04/2013 - 21:00:35 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\BE948804B0AF9B34AE9FF36C7CACE4ED6D4D4473.dat   [25506]
O61 - LFC: 11/04/2013 - 21:02:37 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\FCCEFD9A32C697F145E3C36DF8FF2DF2FAF12380.dat   [30708]
O61 - LFC: 11/04/2013 - 21:06:22 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\50EF91B5A050CBBD9121B087E8565F9EF5E2BAA7.dat   [31264]
O61 - LFC: 11/04/2013 - 21:06:22 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\7A5B98F799CFF256340279F05285FAE99C7C1D62.dat   [31067]
O61 - LFC: 11/04/2013 - 21:06:37 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\52AC2B2873FA81581795359314FED96B058D30D6.dat.bak   [16727]
O61 - LFC: 11/04/2013 - 21:06:37 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\599AC85FA5E8CB72D43F4E4254818F64A1824005.dat.bak   [3591]
O61 - LFC: 11/04/2013 - 21:06:42 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\863CE7DE96A9F7AAA6ED99D0F08876ACA499D91C.dat   [31383]
O61 - LFC: 11/04/2013 - 21:07:15 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\25C4285E32D7CAC96B3706DD6D8FC882C81C269C.dat.bak   [2771]
O61 - LFC: 11/04/2013 - 21:07:17 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\F1E6994302268E5E17F30ED3C475E5D70AF28B2E.dat.bak   [122322]
O61 - LFC: 11/04/2013 - 21:07:19 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\5A8BBABCDD5944358E1789F7BF09D7755D14B00E.dat.bak   [61314]
O61 - LFC: 11/04/2013 - 21:07:25 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\919021CAD1A2624D3F1C5908019164B08976ABDA.dat.bak   [31189]
O61 - LFC: 11/04/2013 - 21:07:35 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\02F8057C235AA2A2E0538ED4196E2E8B9616328D.dat.bak   [16449]
O61 - LFC: 11/04/2013 - 21:08:09 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\9559D5D5447CC623A7AEC22AD5439A66A1BE9537.dat.bak   [60907]
O61 - LFC: 11/04/2013 - 21:08:37 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\215DC085587A64355E14852E35ED85CC5D9DCA39.dat.bak   [17040]
O61 - LFC: 11/04/2013 - 21:09:56 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\845C8153474D39568511AD9974B0CEADD556F2CC.dat.bak   [62018]
O61 - LFC: 11/04/2013 - 21:10:44 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\0C93A00026EBECCA2716770DE9EFD9E0A7B96650.dat.bak   [46154]
O61 - LFC: 11/04/2013 - 21:11:27 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\0C93A00026EBECCA2716770DE9EFD9E0A7B96650.dat   [46154]
O61 - LFC: 11/04/2013 - 21:12:25 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\2B9551723964854671CDAB29B43294963F39DA5A.dat.bak   [47931]
O61 - LFC: 11/04/2013 - 21:12:25 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\71FEFA70E4E815F376D24108F19C8BFBA8AEC737.dat.bak   [45767]
O61 - LFC: 11/04/2013 - 21:12:25 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\F6EE8BED52607A6C629302E1CEA4D063B5761168.dat.bak   [40993]
O61 - LFC: 11/04/2013 - 21:13:18 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\F6EE8BED52607A6C629302E1CEA4D063B5761168.dat   [40993]
O61 - LFC: 11/04/2013 - 21:13:19 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\2B9551723964854671CDAB29B43294963F39DA5A.dat   [47931]
O61 - LFC: 11/04/2013 - 21:13:19 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\71FEFA70E4E815F376D24108F19C8BFBA8AEC737.dat   [45767]
O61 - LFC: 11/04/2013 - 21:16:31 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\73C4DDF7E4A9E25FDAD1EB425636A0E5B04F709D.dat.bak   [89961]
O61 - LFC: 11/04/2013 - 21:16:32 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\5B05FBB3ECBC2DFB19692CD8AFFB3008D8F150F4.dat   [24047]
O61 - LFC: 11/04/2013 - 21:20:02 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\F52413F01D91F3A90EC7330A30DF20ADA52D5843.dat.bak   [3581]
O61 - LFC: 11/04/2013 - 21:20:03 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\ED29E993CAB69C03D0D1383EBC292B8FE86D7B6B.dat   [89480]
O61 - LFC: 11/04/2013 - 21:20:04 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\296DFAAE992DB531D8A75DDB94EFC70671913864.dat   [31160]
O61 - LFC: 11/04/2013 - 21:24:27 ---A- C:\Users\HOME\AppData\Roaming\Azureus\subscriptions.config   [1892]
O61 - LFC: 11/04/2013 - 21:24:27 ---A- C:\Users\HOME\AppData\Roaming\Azureus\subscriptions.config.bak   [2253]
O61 - LFC: 11/04/2013 - 21:26:35 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\7E37D06A70CDDC8F8BECB9A5EB72519141348298.dat.bak   [3534]
O61 - LFC: 11/04/2013 - 21:26:36 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\4721952B8DF62C255CC68B6604671B50BEE11731.dat.bak   [90980]
O61 - LFC: 11/04/2013 - 21:26:36 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\5B1220AC515D1B09291EEADF000880E141094852.dat   [34352]
O61 - LFC: 11/04/2013 - 21:26:36 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\AF9A0D77BCDDD34AD54116E96BA24657F2CA6528.dat   [30968]
O61 - LFC: 11/04/2013 - 21:26:36 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\E9B3D11763FA3952DE9BE39AA2C32CE5A94076D3.dat.bak   [15026]
O61 - LFC: 11/04/2013 - 21:26:37 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\C0046A965D9C07556196F81980BC8A141A0AD368.dat   [31280]
O61 - LFC: 11/04/2013 - 21:28:47 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\5EBD42E18788BC97DBB89FFA695B2FA107CDE80D.dat.bak   [3604]
O61 - LFC: 11/04/2013 - 21:28:48 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\0A25073255B56A22222F1A510216F8FEE34163BC.dat   [30031]
O61 - LFC: 11/04/2013 - 21:31:41 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\0812D9BCA2B95C006C3C1AE7E1465C318A995E36.dat   [31097]
O61 - LFC: 11/04/2013 - 21:33:55 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\CF39914106CCBD1B3A317EBA13BAAD9FC205E6DE.dat.bak   [46048]
O61 - LFC: 11/04/2013 - 21:34:01 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\25C4285E32D7CAC96B3706DD6D8FC882C81C269C.dat   [2771]
O61 - LFC: 11/04/2013 - 21:34:01 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\50BFAD61C5960576370BEC4EA3EC3F9C1BB42C15.dat.bak   [61030]
O61 - LFC: 11/04/2013 - 21:34:01 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\599AC85FA5E8CB72D43F4E4254818F64A1824005.dat   [3590]
O61 - LFC: 11/04/2013 - 21:34:01 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\5EBD42E18788BC97DBB89FFA695B2FA107CDE80D.dat   [3603]
O61 - LFC: 11/04/2013 - 21:34:01 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\7E37D06A70CDDC8F8BECB9A5EB72519141348298.dat   [3534]
O61 - LFC: 11/04/2013 - 21:34:01 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\F52413F01D91F3A90EC7330A30DF20ADA52D5843.dat   [3581]
O61 - LFC: 11/04/2013 - 21:34:02 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\215DC085587A64355E14852E35ED85CC5D9DCA39.dat   [17031]
O61 - LFC: 11/04/2013 - 21:34:02 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\2C5351AB4BE68582C9B01F6C1E6303DAD1307C14.dat.bak   [16847]
O61 - LFC: 11/04/2013 - 21:34:02 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\3FF47E88760DF6BD51DE4FFD27231EECD3049E7E.dat.bak   [16749]
O61 - LFC: 11/04/2013 - 21:34:02 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\47E6164FF8B0E07B7DB3AE3245040EEC8886BD0A.dat.bak   [17473]
O61 - LFC: 11/04/2013 - 21:34:02 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\789B629D7189C9D2E8AE32DB0FE0C1868626C151.dat.bak   [16820]
O61 - LFC: 11/04/2013 - 21:34:02 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\79BC1EACA424B6C47EFCEFE429822A5ABEE885B2.dat.bak   [20305]
O61 - LFC: 11/04/2013 - 21:34:02 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\7F534489A834A43D7C24C009B3F84056059791D4.dat.bak   [16750]
O61 - LFC: 11/04/2013 - 21:34:02 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\A4FA2C7996643784F542BCED992B7A8E88C45413.dat.bak   [16746]
O61 - LFC: 11/04/2013 - 21:34:02 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\A8D0CAA1009858A039C0EBECE924D6B42FE5B6C8.dat.bak   [4053]
O61 - LFC: 11/04/2013 - 21:34:02 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\F75264C332BB7FC894C40DF08D2D6DA7F673C2D8.dat.bak   [17193]
O61 - LFC: 11/04/2013 - 21:34:03 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\02F8057C235AA2A2E0538ED4196E2E8B9616328D.dat   [16449]
O61 - LFC: 11/04/2013 - 21:34:03 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\52AC2B2873FA81581795359314FED96B058D30D6.dat   [16726]
O61 - LFC: 11/04/2013 - 21:34:03 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\5A8BBABCDD5944358E1789F7BF09D7755D14B00E.dat   [61314]
O61 - LFC: 11/04/2013 - 21:34:03 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\EFD1552F7BC9C8EA3526E66F931A9C7D2C3111E8.dat.bak   [119668]
O61 - LFC: 11/04/2013 - 21:34:05 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\4CE1104E3703FC9837B04A8E4F68B11B7EBD6615.dat.bak   [43981]
O61 - LFC: 11/04/2013 - 21:34:05 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\845C8153474D39568511AD9974B0CEADD556F2CC.dat   [62017]
O61 - LFC: 11/04/2013 - 21:34:05 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\919021CAD1A2624D3F1C5908019164B08976ABDA.dat   [31188]
O61 - LFC: 11/04/2013 - 21:34:05 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\9559D5D5447CC623A7AEC22AD5439A66A1BE9537.dat   [60907]
O61 - LFC: 11/04/2013 - 21:36:49 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\CF39914106CCBD1B3A317EBA13BAAD9FC205E6DE.dat   [46047]
O61 - LFC: 11/04/2013 - 21:41:50 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\2C5351AB4BE68582C9B01F6C1E6303DAD1307C14.dat   [16847]
O61 - LFC: 11/04/2013 - 21:41:51 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\C7FB093FDFD59B72DB3FF13CA72676AF3177A47D.dat.bak   [76948]
O61 - LFC: 11/04/2013 - 21:46:53 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\A4FA2C7996643784F542BCED992B7A8E88C45413.dat   [16746]
O61 - LFC: 11/04/2013 - 21:51:55 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\3FF47E88760DF6BD51DE4FFD27231EECD3049E7E.dat   [16749]
O61 - LFC: 11/04/2013 - 21:54:46 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\79BC1EACA424B6C47EFCEFE429822A5ABEE885B2.dat   [20305]
O61 - LFC: 11/04/2013 - 21:56:58 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\4CE1104E3703FC9837B04A8E4F68B11B7EBD6615.dat   [43981]
O61 - LFC: 11/04/2013 - 21:59:19 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\189A7AE90A3E186D557E851786489DD22F748F1F.dat.bak   [17543]
O61 - LFC: 11/04/2013 - 21:59:19 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\789B629D7189C9D2E8AE32DB0FE0C1868626C151.dat   [16820]
O61 - LFC: 11/04/2013 - 21:59:19 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\CBE7BFA9BC03572850D6149A125B80884190C9B7.dat.bak   [31400]
O61 - LFC: 11/04/2013 - 21:59:20 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\34F1A47EB064937FA4A3B41F1D62CFF8F9CEE390.dat.bak   [3078]
O61 - LFC: 11/04/2013 - 21:59:21 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\7A56C5A4C7A90D05488034BFD1F755D05F20C273.dat.bak   [64779]
O61 - LFC: 11/04/2013 - 21:59:21 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\E9B3D11763FA3952DE9BE39AA2C32CE5A94076D3.dat   [15017]
O61 - LFC: 11/04/2013 - 22:02:04 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\AC7DF209CCFEA75EE703DB95320C25EA394BE8BA.dat.bak   [46960]
O61 - LFC: 11/04/2013 - 22:02:04 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\BBE30A97843A062841EB5102785A24B736B187C0.dat   [64388]
O61 - LFC: 11/04/2013 - 22:03:44 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\7F534489A834A43D7C24C009B3F84056059791D4.dat   [16750]
O61 - LFC: 11/04/2013 - 22:04:21 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\A8E632A6AB26349D7D31755F158105977C5E1EBA.dat.bak   [60627]
O61 - LFC: 11/04/2013 - 22:04:28 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\A8E632A6AB26349D7D31755F158105977C5E1EBA.dat   [60627]
O61 - LFC: 11/04/2013 - 22:09:42 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\00B4F96CC40389F65BDBED08CFF777546E59ECD9.dat.bak   [48265]
O61 - LFC: 11/04/2013 - 22:14:27 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\B7DCEDE74D2E4E019AAD89149D2A40BCE25B73FA.dat.bak   [38893]
O61 - LFC: 11/04/2013 - 22:14:34 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\189A7AE90A3E186D557E851786489DD22F748F1F.dat   [17543]
O61 - LFC: 11/04/2013 - 22:14:34 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\B7DCEDE74D2E4E019AAD89149D2A40BCE25B73FA.dat   [38893]
O61 - LFC: 11/04/2013 - 22:21:57 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\47E6164FF8B0E07B7DB3AE3245040EEC8886BD0A.dat   [17473]
O61 - LFC: 11/04/2013 - 22:21:58 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\6694A787E43002226FA5BD6D8464000053B97B13.dat.bak   [75600]
O61 - LFC: 11/04/2013 - 22:22:00 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\17DF2484CE164EAEC1919C61FE42D2CB89C50AAA.dat   [60695]
O61 - LFC: 11/04/2013 - 22:22:01 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\73C4DDF7E4A9E25FDAD1EB425636A0E5B04F709D.dat   [89961]
O61 - LFC: 11/04/2013 - 22:22:01 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\C7FB093FDFD59B72DB3FF13CA72676AF3177A47D.dat   [76948]
O61 - LFC: 11/04/2013 - 22:22:02 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\74DC04A109E08E46121A3039B91F903A00576570.dat.bak   [35389]
O61 - LFC: 11/04/2013 - 22:22:02 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\F1E6994302268E5E17F30ED3C475E5D70AF28B2E.dat   [122321]
O61 - LFC: 11/04/2013 - 22:22:24 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\7A56C5A4C7A90D05488034BFD1F755D05F20C273.dat   [64779]
O61 - LFC: 11/04/2013 - 22:22:25 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\432CB67D1D24BFCA801210661BF1E29EF7232EC1.dat.bak   [22183]
O61 - LFC: 11/04/2013 - 22:25:05 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\50BFAD61C5960576370BEC4EA3EC3F9C1BB42C15.dat   [61030]
O61 - LFC: 11/04/2013 - 22:25:05 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\A8D0CAA1009858A039C0EBECE924D6B42FE5B6C8.dat   [4053]
O61 - LFC: 11/04/2013 - 22:32:29 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\FF4FFD7C1BB98E3BB123B4F1DECFEFE3DC9E09ED.dat   [17762]
O61 - LFC: 11/04/2013 - 22:32:31 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\4721952B8DF62C255CC68B6604671B50BEE11731.dat   [90984]
O61 - LFC: 11/04/2013 - 22:34:12 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\CBE7BFA9BC03572850D6149A125B80884190C9B7.dat   [31400]
O61 - LFC: 11/04/2013 - 22:34:15 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\604F2338B6553DB93CF9C7F64386D1F0F0292A44.dat.bak   [42442]
O61 - LFC: 11/04/2013 - 22:34:16 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\3BD1C46DC30638012AB6CBEA24C4BBFE8CB00D13.dat.bak   [60950]
O61 - LFC: 11/04/2013 - 22:34:16 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\603076F40C793C5D93BD0DB1282E8F863F83DC2B.dat.bak   [45938]
O61 - LFC: 11/04/2013 - 22:34:16 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\AB15B3D0627C5E25C5CEA0ECB2C6E8C84D1833B4.dat.bak   [46011]
O61 - LFC: 11/04/2013 - 22:34:17 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\A70F1E199DB8A6BDD77826C5E734DEBB61928B94.dat.bak   [33210]
O61 - LFC: 11/04/2013 - 22:35:38 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\C4D37753F11B6160A976B9F3D356CB95AEF57F0B.dat.bak   [46169]
O61 - LFC: 11/04/2013 - 22:35:38 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\C98593E8A0277092389F529F57742D6027419558.dat.bak   [61314]
O61 - LFC: 11/04/2013 - 22:35:38 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\EED0478C34E0F25A495014EA37DCF3407F0B238B.dat.bak   [89568]
O61 - LFC: 11/04/2013 - 22:35:39 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\3117FCAE307A99DE750C03E3A8937A6A68232E32.dat.bak   [225478]
O61 - LFC: 11/04/2013 - 22:42:41 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\432CB67D1D24BFCA801210661BF1E29EF7232EC1.dat   [22183]
O61 - LFC: 11/04/2013 - 22:42:41 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\636679CB5E48A2B08C2B514D971B3B32EFC9006A.dat.bak   [87760]
O61 - LFC: 11/04/2013 - 22:46:31 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\262AF5DDA742B4C0C413E8596EBADF1E96F5789E.dat.bak   [45674]
O61 - LFC: 11/04/2013 - 22:46:32 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\F75264C332BB7FC894C40DF08D2D6DA7F673C2D8.dat   [17193]
O61 - LFC: 11/04/2013 - 22:46:33 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\E6040B48F95A991C2E0C95C00EA6E7FC33E47104.dat.bak   [71500]
O61 - LFC: 11/04/2013 - 22:52:45 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\13BCD8E06C5A7621E7479E7EFE1AA8D55977FE29.dat.bak   [46307]
O61 - LFC: 11/04/2013 - 22:52:45 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\3BB01C89065870F1E1D74C476F384829BB22313D.dat.bak   [53796]
O61 - LFC: 11/04/2013 - 22:52:45 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\55ABDFEDC3BCD6DEFD2A130C1F33B775144E645F.dat.bak   [10343]
O61 - LFC: 11/04/2013 - 22:52:45 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\B3EBBF8C4A34776D6BC3B1A76E0211B19815B7CB.dat.bak   [146323]
O61 - LFC: 11/04/2013 - 22:57:47 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\34F1A47EB064937FA4A3B41F1D62CFF8F9CEE390.dat   [3078]
O61 - LFC: 11/04/2013 - 22:57:47 ---A- C:\Users\HOME\AppData\Roaming\Azureus\active\68316A57E0B5A9DBC89B3AB10F

Mon pc rame

4 réponses

Newsletters