Blocage du système vista familial au bout de 10min.

Bonjour Guillaume,

Voici le lien que tu m'as demandés :
https://pjjoint.malekal.com/files.php?id=ZHPDiag_20130415_y15f8l11b15d7

Merci encore pour ton aide

Bonjour Guillaume;

Lorsque que j'ai télécharger Adw, j'ai cliqué sue le prog puis l'ordi à redémarrer et le logiciel c'est lancer tout seul; Ensuite tu m'as dis de faire suppression et rien été indiqué;
Voici le rapport :

# AdwCleaner v2.200 - Rapport créé le 16/04/2013 à 02:04:58
# Mis à jour le 02/04/2013 par Xplode
# Système d'exploitation : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Nom d'utilisateur : Yann - PC-DE-YANN
# Mode de démarrage : Mode sans échec avec prise en charge réseau
# Exécuté depuis : C:\Users\Yann\Downloads\adwcleaner.exe
# Option [Suppression]


***** [Services] *****


***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Program Files\DAEMON Tools Toolbar
Dossier Supprimé : C:\Program Files\TornTV.com
Dossier Supprimé : C:\Program Files\Viewpoint
Dossier Supprimé : C:\Program Files\yourfiledownloader
Dossier Supprimé : C:\ProgramData\Babylon
Dossier Supprimé : C:\ProgramData\Viewpoint
Dossier Supprimé : C:\Users\Yann\AppData\Roaming\Babylon
Dossier Supprimé : C:\Users\Yann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com
Dossier Supprimé : C:\Users\Yann\AppData\Roaming\OpenCandy
Dossier Supprimé : C:\Users\Yann\AppData\Roaming\yourfiledownloader
Fichier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk

***** [Registre] *****

Clé Supprimée : HKCU\Software\1ClickDownload
Clé Supprimée : HKCU\Software\59578b8db16fe544
Clé Supprimée : HKCU\Software\BabylonToolbar
Clé Supprimée : HKCU\Software\DataMngr
Clé Supprimée : HKCU\Software\DataMngr_Toolbar
Clé Supprimée : HKCU\Software\Default Tab
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ViewpointMediaPlayer
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\YourFileDownloader
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\YourFileDownloader
Clé Supprimée : HKCU\Software\Softonic
Clé Supprimée : HKCU\Software\YourFileDownloader
Clé Supprimée : HKLM\SOFTWARE\59578b8db16fe544
Clé Supprimée : HKLM\Software\Babylon
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl
Clé Supprimée : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl.1
Clé Supprimée : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary
Clé Supprimée : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary.1
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{76C45B18-A29E-43EA-AAF8-AF55C2E1AE17}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{96EF404C-24C7-43D0-9096-4CCC8BB7CCAC}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{97720195-206A-42AE-8E65-260B9BA5589F}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{97D69524-BB57-4185-9C7F-5F05593B771A}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{986F7A5A-9676-47E1-8642-F41F8C3FCF82}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{B18788A4-92BD-440E-A4D1-380C36531119}
Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
Clé Supprimée : HKLM\SOFTWARE\Classes\S
Clé Supprimée : HKLM\Software\DataMngr
Clé Supprimée : HKLM\Software\Default Tab
Clé Supprimée : HKLM\Software\DefaultTab
Clé Supprimée : HKLM\Software\MetaStream
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@viewpoint.com/VMP
Clé Supprimée : HKLM\Software\Viewpoint
Clé Supprimée : HKLM\Software\YourFileDownloader
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]

***** [Navigateurs] *****

-\\ Internet Explorer v9.0.8112.16470

[OK] Le registre ne contient aucune entrée illégitime.

-\\ Google Chrome v26.0.1410.43

Fichier : C:\Users\Yann\AppData\Local\Google\Chrome\User Data\Default\Preferences

Supprimée [l.1905] : homepage = "hxxp://www1.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=2AED00215D7BE2F6",
Supprimée [l.2209] : urls_to_restore_on_startup = [ "hxxp://www1.delta-search.com/?affID=119776&babsrc=HP_ss&mntrI[...]

*************************

AdwCleaner[S1].txt - [4891 octets] - [16/04/2013 02:04:58]

########## EOF - C:\AdwCleaner[S1].txt - [4951 octets] ##########

Malwarebytes Anti-Malware (Essai) 1.75.0.1300
www.malwarebytes.org

Version de la base de données: v2013.04.16.05

Windows Vista Service Pack 2 x86 NTFS (Mode sans échec/Réseau)
Internet Explorer 9.0.8112.16421
Yann :: PC-DE-YANN [administrateur]

Protection: Désactivé

16/04/2013 04:17:10
mbam-log-2013-04-16 (04-17-10).txt

Type d'examen: Examen complet (C:\|D:\|)
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 413957
Temps écoulé: 1 heure(s), 6 minute(s), 41 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)

Fichier(s) détecté(s): 0
(Aucun élément nuisible détecté)

(fin)

Rapport de ZHPDiag v2013.4.15.86 par Nicolas Coolman, Update du 15/04/2013
Run by Yann at 16/04/2013 13:34:17
State : Version à jour.
WhiteList : Enable
High Elevated Privileges : OK
UAC : Activate by user


---\\ Web Browser
MSIE: Internet Explorer v9.0.8112.16421
GCIE: Google Chrome v26.0.1410.43 (Defaut)

---\\ Windows Product Information
~ Langage: Français
Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)
Windows Server License Manager Script : OK
Windows Automatic Updates : OK

---\\ System Protection
Malwarebytes Anti-Malware version 1.75.0.1300
Sophos Anti-Virus v10.0.10
ESET Online Scanner v3

---\\ System Optimizer

---\\ Software Update
Adobe Flash Player 11 ActiveX
Adobe Reader 8.1.0 - Français

---\\ System Information
~ Processor: x86 Family 6 Model 23 Stepping 6, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Sans échec avec prise en charge du réseau (Fail-safe with network boot)
Total RAM: 3068 MB (39% free)
System Restore: Activé (Enable)
System drive C: has 98 GB (33%) free of 289 GB

---\\ Logged in mode
~ Computer Name: PC-DE-YANN
~ User Name: Yann
~ All Users Names: Yann, SophosSAUPC-de-Yann0, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Yann\AppData\Roaming\
~ %Desktop% : C:\Users\Yann\Desktop\
~ %Favorites% : C:\Users\Yann\Favorites\
~ %LocalAppData% : C:\Users\Yann\AppData\Local\
~ %StartMenu% : C:\Users\Yann\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 98 Go of 289 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 9 Go)
E:\ CD-ROM drive (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyComputer: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
~ Security Center: Scanned in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.11/04/2009 - 02:27:36.) -- C:\WINDOWS\Explorer.exe [2926592]
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.20/01/2008 - 22:23:42.) -- C:\WINDOWS\System32\Wininit.exe [96768]
[MD5.03728C624D05C2F157BBD46F6B7F6EA0] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.01/02/2013 - 23:30:21.) -- C:\WINDOWS\System32\wininet.dll [1129472]
[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.11/04/2009 - 02:28:13.) -- C:\WINDOWS\System32\Winlogon.exe [314368]
[MD5.3911B972B55FEA0478476B2E777B29FA] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.21/04/2011 - 09:58:27.) -- C:\WINDOWS\system32\Drivers\AFD.sys [273408]
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.11/04/2009 - 02:32:26.) -- C:\WINDOWS\system32\Drivers\atapi.sys [19944]
[MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.20/01/2008 - 22:23:51.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [70144]
[MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.11/04/2009 - 00:39:17.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [67072]
[MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.14/04/2011 - 10:59:03.) -- C:\WINDOWS\system32\Drivers\DfsC.sys [75264]
[MD5.062452B7FFD68C8C042A6261FE8DFF4A] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.11/04/2009 - 00:42:42.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [561152]
[MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) (.20/01/2008 - 22:23:20.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [54784]
[MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.20/01/2008 - 22:24:25.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [100864]
[MD5.1E94971C4B446AB2290DEB71D01CF0C2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.29/04/2011 - 09:24:40.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [106496]
[MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) (.11/04/2009 - 00:45:37.) -- C:\WINDOWS\system32\Drivers\netBT.sys [185856]
[MD5.6A4A98CEE84CF9E99564510DDA4BAA47] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.11/04/2009 - 02:32:49.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [1083880]
[MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) (.02/11/2006 - 04:51:30.) -- C:\WINDOWS\system32\Drivers\Parport.sys [79360]
[MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/01/2008 - 22:24:55.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [76288]
[MD5.FBC0BACD9C3D7F6956853F64A66E252D] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.20/01/2008 - 22:23:01.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [248832]
[MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) (.11/04/2009 - 00:45:22.) -- C:\WINDOWS\system32\Drivers\smb.sys [66560]
[MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) (.11/04/2009 - 00:45:56.) -- C:\WINDOWS\system32\Drivers\tdx.sys [72192]
[MD5.786DB5771F05EF300390399F626BF30A] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.21/08/2012 - 07:47:42.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [224640]
~ Generic Processes: Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/3499
~ Mes musiques (My Musics) : 1/11751
~ Mes Videos (My Videos) : 3/220
~ Mes Favoris (My Favorites) : 1/16
~ Mes Documents (My Documents) : 1/80
~ Mon Bureau (My Desktop) : 1/30
~ Menu demarrer (Programs) : 1/32
~ Hidden Files: Scanned in 00mn 11s



---\\ Processus lancés
[MD5.59FE95F7FEDE6D69C007E2CD05356F07] - (.BitTorrent, Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe [896400] [PID.2212]
[MD5.DDE5A0DFAF7C6370FB36402D7A746ED3] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [757296] [PID.7580]
[MD5.D437C6B6C1CA63C3D5BF5A280A4FE60A] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [17875120] [PID.8600]
[MD5.80660C611B596FFE8AF4074B31AA6FB7] - (.Adobe Systems Incorporated - Adobe Reader 8.1.) -- C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe [341616] [PID.4092]
[MD5.1CB6A775D760DBCD5DD09B01E4942450] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [6778368] [PID.1660]
[MD5.B8A272D4E91EFB366E16BEA0FA42D7EE] - (.Sophos Limited - Performs virus scanning and disinfection fu.) -- C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe [139840] [PID.1052]
~ Processes Running: Scanned in 00mn 00s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Yann\AppData\Local\Google\Chrome\User Data\Default\Preferences
~ Google Browser: Scanned in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\Yann\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\prefs.js (.not file.)
C:\Users\Yann\AppData\Roaming\Mozilla\Firefox\Profiles\[opt]rs0\prefs.js
P2 - FPN: [HKLM] [@nitropdf.com/NitroPDF] - (.Nitro PDF - Nitro PDF plugin for Firefox and Chrome.) -- C:\Program Files\Nitro\Reader 3\npnitromozilla.dll
~ Firefox Browser: 7 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Skype Limited - Facebook Video Calling Plugin.) (No version) -- (.not file.)
~ IE Browser: 9 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Keys: Scanned in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 20



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [UCam_Menu] . (.CyberLink Corp. - StartMen Application.) -- C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Run: [QPService] . (.CyberLink Corp. - HP QuickPlay Resident Program.) -- C:\Program Files\HP\QuickPlay\QPService.exe
O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe
O4 - HKLM\..\Run: [QlbCtrl.exe] . (. Hewlett-Packard Development Company, L.P. - Quick Launch Buttons.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
O4 - HKLM\..\Run: [OnScreenDisplay] . (. Hewlett-Packard Development Company, L.P. - HP QuickTouch On Screen Display.) -- C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [HP Health Check Scheduler] . (.Hewlett-Packard - HP Health Check Scheduler.) -- c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] . (.Hewlett-Packard Development Company, L.P. - HPWAMain Module.) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [Sophos AutoUpdate Monitor] . (.Sophos Limited - Sophos Endpoint Security and Control.) -- C:\Program Files\Sophos\AutoUpdate\almon.exe
O4 - HKLM\..\Run: [DpAgent] . (.DigitalPersona, Inc. - DigitalPersona Local Agent.) -- C:\Program Files\DigitalPersona\Bin\dpagent.exe
O4 - HKLM\..\Run: [SysTrayApp] . (.IDT, Inc. - IDT Audio system tray application.) -- C:\Program Files\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\Windows\system32\NvCpl.dll
O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\Windows\system32\NvMcTray.dll
O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [WinampAgent] . (.Nullsoft, Inc. - Winamp Agent.) -- C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [ISUSPM] . (.Macrovision Corporation - Macrovision Software Manager.) -- C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe
O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\Yann\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] oobefldr.dll
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] oobefldr.dll
O4 - HKUS\S-1-5-21-1621428495-3982135739-3035718292-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKUS\S-1-5-21-1621428495-3982135739-3035718292-1000\..\Run: [ISUSPM] . (.Macrovision Corporation - Macrovision Software Manager.) -- C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe
O4 - HKUS\S-1-5-21-1621428495-3982135739-3035718292-1000\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-21-1621428495-3982135739-3035718292-1000\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-21-1621428495-3982135739-3035718292-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
O4 - HKUS\S-1-5-21-1621428495-3982135739-3035718292-1000\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\Yann\AppData\Local\Facebook\Update\FacebookUpdate.exe
~ Application: Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\Programs: Windows Mail.lnk . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe
O4 - GS\Programs: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - GS\QuickLaunch: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\QuickLaunch: SmartPCFixer.lnk . (...) -- C:\Program Files\SmartPCFixer\SmartPcFixer.exe
O4 - GS\QuickLaunch: Winamp.lnk . (.Nullsoft, Inc. - Winamp.) -- C:\Program Files\Winamp\winamp.exe
O4 - GS\QuickLaunch: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - GS\QuickLaunch: µTorrent.lnk . (.BitTorrent, Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe
O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\SendTo: Skype.lnk . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe
~ Global Startup: Scanned in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -- Clé orpheline
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico
~ IE Extra Buttons: Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{06E85A7D-C3CD-4ACB-AF65-612CDDC418DD}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{06E85A7D-C3CD-4ACB-AF65-612CDDC418DD}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{06E85A7D-C3CD-4ACB-AF65-612CDDC418DD}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain: Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\System32\mscoree.dll
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\WINDOWS\System32\browseui.dll
~ STS/SSO: Scanned in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\AllmyappsUpdateTask.job [392]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\YourFile DownloaderUpdate.job [324]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\{85A080EB-19B9-4EF8-BD0A-15F97D73A3F0}.job [374]
~ Scheduled Task: 8 Legitimates Filtered in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: FTDownloader - (.FTDownloader.com.) [HKLM] -- 1ClickDownload
O42 - Logiciel: µTorrent - (...) [HKLM] -- uTorrent
~ Logic: 108 Legitimates Filtered in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\59578b8db16fe544]
[HKCU\Software\BabylonToolbar] =>Toolbar.Babylon
[HKCU\Software\BitTorrent]
[HKCU\Software\DataMngr] =>PUP.Datamngr
[HKCU\Software\DataMngr_Toolbar] =>PUP.Datamngr
[HKLM\Software\59578b8db16fe544]
[HKLM\Software\Babylon] =>Toolbar.Babylon
[HKLM\Software\DataMngr] =>PUP.Datamngr
~ Key Software: 180 Legitimates Filtered in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 26/08/2012 - 17:19:37 - [0,855] ----D C:\Program Files\uTorrent
O43 - CFD: 16/04/2013 - 07:34:34 - [0] ----D C:\ProgramData\Babylon =>Toolbar.Babylon
O43 - CFD: 16/04/2013 - 07:34:49 - [2,491] ----D C:\ProgramData\BrowserProtect =>Toolbar.Babylon
O43 - CFD: 16/04/2013 - 07:34:34 - [0,006] ----D C:\Users\Yann\AppData\Roaming\Babylon =>Toolbar.Babylon
O43 - CFD: 16/04/2013 - 13:35:19 - [8,154] ----D C:\Users\Yann\AppData\Roaming\uTorrent
O43 - CFD: 16/04/2013 - 07:34:33 - [0,001] ----D C:\Users\Yann\AppData\Local\PutLockerDownloader =>Spyware.PutLocker
~ Program Folder: 160 Legitimates Filtered in 01mn 40s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.ED50DAB9ECC5423F6B0CA90773A66135] - 16/04/2013 - 12:34:10 ---A- . (...) -- C:\WINDOWS\ntbtlog.txt [5555740]
O44 - LFC:[MD5.4B5AAED2103BB94E1C9FEC71C061DA91] - 16/04/2013 - 03:40:11 --HA- . (...) -- C:\WINDOWS\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [3216]
O44 - LFC:[MD5.4B5AAED2103BB94E1C9FEC71C061DA91] - 16/04/2013 - 03:40:11 --HA- . (...) -- C:\WINDOWS\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [3216]
O44 - LFC:[MD5.F3164255913FBCE87652BB3DD8FC32D2] - 16/04/2013 - 02:44:13 ---A- . (...) -- C:\AdwCleaner[S3].txt [1055]
O44 - LFC:[MD5.05120B1E26F523C0492A45897DCE66F8] - 16/04/2013 - 02:29:10 ---A- . (...) -- C:\AdwCleaner[S2].txt [996]
O44 - LFC:[MD5.31EDC7C5EB4E4439DA5D474C5B5C9ACC] - 16/04/2013 - 02:05:11 ---A- . (...) -- C:\AdwCleaner[S1].txt [5020]
~ Files: 16 Legitimates Filtered in 00mn 14s



---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.C5B2DF2C166FDB5E025962C11438F15C] - 07/04/2013 - 06:49:41 ---A- - C:\WINDOWS\Prefetch\SWI_SERVICE.EXE-D48E3B97.pf
O45 - LFCP:[MD5.AD4A90AD3674C6B70CC4DDED277A5599] - 16/04/2013 - 02:47:19 ---A- - C:\WINDOWS\Prefetch\SAVPROXY.EXE-43FFD5D3.pf
O45 - LFCP:[MD5.5B8A2EE9D5DCE7DFC4558460301C6984] - 16/04/2013 - 03:41:12 ---A- - C:\WINDOWS\Prefetch\SWI_LSPDIAG.EXE-B92FB436.pf
O45 - LFCP:[MD5.D95B9132604317FF1F5B5567BFFAE3E5] - 24/03/2013 - 03:06:36 ---A- - C:\WINDOWS\Prefetch\HIDDATA.EXE-98129A0B.pf
~ Prefetcher: 99 Legitimates Filtered in 00mn 00s



---\\ MountPoints2 Shell Key (O51)
O51 - MPSK:{640afd7d-edd5-11e1-ac10-00238b1086b1}\AutoRun\command. (...) -- G:\.\Setup.exe (.not file.)
~ Keys: Scanned in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
~ MWPS: 16 Legitimates Filtered in 00mn 00s



---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.3B10711AD8656C097E0D16A41B29C54C] - 27/03/2008 - 06:11:34 ---A- . (.Hewlett-Packard Corporation - HP Accelerometer.) -- C:\WINDOWS\System32\Drivers\Accelerometer.sys [34664]
O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 02/11/2006 - 03:09:42 ---A- . (...) -- C:\WINDOWS\System32\ANSI.SYS [9029]
~ Drivers: Scanned in 00mn 00s



---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC: 14/04/2013 - 08:15:19 ----- C:\Users\Yann\AppData\Roaming\uTorrent\College Fuck Fest - A Rough Treatment - Tori Black.torrent [12920]
O61 - LFC: 14/04/2013 - 08:27:58 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Jenna.Jameson.Is.The.Masseuse.[DVDrip][www.torrentgo.com].torrent [28554]
O61 - LFC: 14/04/2013 - 08:29:34 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Jenna Jameson Is The Masseuse 2004 Dvdrip H264 480p-SmR.torrent [20663]
O61 - LFC: 14/04/2013 - 08:34:32 ----- C:\Users\Yann\AppData\Roaming\uTorrent\AssParade - Lichelle Marie and Ricki White.torrent [16968]
O61 - LFC: 14/04/2013 - 08:36:02 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Brooke Belle, Lichelle Marie (Rise To The Occasion).1.torrent [14421]
O61 - LFC: 14/04/2013 - 08:36:02 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Brooke Belle, Lichelle Marie (Rise To The Occasion).torrent [14421]
O61 - LFC: 14/04/2013 - 09:11:51 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Suze.net - 3686 Breanne Benson & Lexi Belle Girl Girl.torrent [16487]
O61 - LFC: 14/04/2013 - 09:23:15 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Real Ex Girl Friends - Breanne Benson.torrent [37271]
O61 - LFC: 14/04/2013 - 09:27:35 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Porn Stars Like It Big - Lichelle Marie And Audrey Bitoni.torrent [29089]
O61 - LFC: 14/04/2013 - 09:30:40 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Jenna Jameson - Baby Doll.torrent [20217]
O61 - LFC: 14/04/2013 - 09:58:20 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Sex With Young Girls 10 Ashlynn Brooke.mp4.torrent [13083]
O61 - LFC: 14/04/2013 - 10:01:15 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Who's Your Daddy Bree Olson.avi.torrent [12859]
O61 - LFC: 14/04/2013 - 10:02:51 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Jailhouse Heat Kenzie Marie, Jenna Haze.avi.torrent [11655]
O61 - LFC: 14/04/2013 - 10:17:53 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Grudgefuck 2 - Scene 2 - Katie Morgan.mp4.torrent [12950]
O61 - LFC: 14/04/2013 - 10:23:07 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Jenna Haze and Tori Black from Intimate Passions.torrent [12637]
O61 - LFC: 14/04/2013 - 10:26:23 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Pornstar Superheroes - Tori Black.avi.torrent [23033]
O61 - LFC: 14/04/2013 - 10:29:53 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Big Tits At Work - Lichelle Marie.torrent [25243]
O61 - LFC: 14/04/2013 - 11:55:12 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Angelika_Black_-_Fuck_My_Big_Boobs.avi.torrent [13020]
O61 - LFC: 14/04/2013 - 12:01:59 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Tarra.White.Has.An.Anal.Wish.For.Santa.Private.2012_iyutero.com.mp4.torrent [1281]
O61 - LFC: 14/04/2013 - 12:08:45 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Family Matters - Angel Dark.avi.torrent [21705]
O61 - LFC: 14/04/2013 - 12:10:41 ----- C:\Users\Yann\AppData\Roaming\uTorrent\CumIntoMyOffice - Nasrin Carmel Moore - I Need A Part Filling.torrent [18911]
O61 - LFC: 14/04/2013 - 13:48:07 ----- C:\Users\Yann\AppData\Roaming\uTorrent\My.First.Sex.Teacher.-.Lichelle.Marie.torrent [9271]
O61 - LFC: 14/04/2013 - 13:49:01 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Big Tits At Work - Lichelle Marie.1.torrent [25243]
O61 - LFC: 14/04/2013 - 16:03:20 ---A- C:\Users\Yann\AppData\Roaming\uTorrent\dht.dat.old [3910]
O61 - LFC: 14/04/2013 - 16:03:20 ---A- C:\Users\Yann\AppData\Roaming\uTorrent\rss.dat.old [99]
O61 - LFC: 15/04/2013 - 00:57:32 ---A- C:\Users\Yann\Downloads\ZHPDiag2 (1).exe [5566152]
O61 - LFC: 15/04/2013 - 02:25:31 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Jenna Jameson [JAM-HOT.com].avi.torrent [17784]
O61 - LFC: 15/04/2013 - 02:30:00 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Jenna Jameson & Jill Kelly - Fuck the rich bitch.avi.torrent [16311]
O61 - LFC: 15/04/2013 - 02:33:53 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Jack's POV 18-Kayden Kross.avi.torrent [22635]
O61 - LFC: 15/04/2013 - 02:40:05 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Amy Reid - Mr Big Dicks Hot Chicks #3.avi.torrent [21587]
O61 - LFC: 15/04/2013 - 02:44:31 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Multiple Orgasms - Brooke Banner, Phoenix Marie.avi.torrent [10285]
O61 - LFC: 15/04/2013 - 02:48:48 ----- C:\Users\Yann\AppData\Roaming\uTorrent\My Naughty Stepsister(Briana Banks as Mirage in Univeristy Coeds 18).avi.torrent [16367]
O61 - LFC: 15/04/2013 - 03:24:40 ---A- C:\Users\Yann\AppData\Roaming\uTorrent\dht.dat [3910]
O61 - LFC: 15/04/2013 - 03:24:40 ---A- C:\Users\Yann\AppData\Roaming\uTorrent\rss.dat [99]
O61 - LFC: 16/04/2013 - 02:04:14 ---A- C:\Users\Yann\Downloads\adwcleaner.exe [613083]
O61 - LFC: 16/04/2013 - 03:14:38 ---A- C:\Users\Yann\Downloads\mbam-setup-1.75.0.1300.exe [10285040]
O61 - LFC: 16/04/2013 - 06:21:13 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Dirty Blondes Kagney Linn Karter.avi.torrent [11341]
O61 - LFC: 16/04/2013 - 06:22:46 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Nurses 2 - Jesse Jane, Kayden Kross, Riley Steele, Selena Rose.avi.torrent [16837]
O61 - LFC: 16/04/2013 - 06:28:22 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Nurses 2 - Jesse Jane.avi.torrent [11194]
O61 - LFC: 16/04/2013 - 06:30:03 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Best of Jenna Jameson[DVDrip][XXX][www.NEWPCT.com].avi.torrent [14390]
O61 - LFC: 16/04/2013 - 06:34:37 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Catalina Cruz & Gina Lynn - License To Blow.avi.torrent [21157]
O61 - LFC: 16/04/2013 - 06:41:13 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Maria Ozawa - Japanese biggest whore Roughed.torrent [14748]
O61 - LFC: 16/04/2013 - 06:42:20 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Tera Patrick Tera Goes Gonzo.avi.torrent [11195]
O61 - LFC: 16/04/2013 - 06:49:09 ----- C:\Users\Yann\AppData\Roaming\uTorrent\My Sister's Hot Friend - Isis Taylor[720p].avi.torrent [12382]
O61 - LFC: 16/04/2013 - 07:06:43 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Gang Bangs - Riley Evans HD 720p.torrent [51016]
O61 - LFC: 16/04/2013 - 07:10:26 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Cody Milo Vs Amy Ried.avi.torrent [24809]
O61 - LFC: 16/04/2013 - 07:21:02 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Catalina.Cruz.-.Juice.My.Pussy.torrent [11299]
O61 - LFC: 16/04/2013 - 07:22:10 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Strap.On.Dolls.(Catalina.Cruz.&.Puma.Swede).torrent [13218]
O61 - LFC: 16/04/2013 - 07:25:59 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Catalina Cruz & Gina Lynn - License To Blow.avi.1.torrent [21157]
O61 - LFC: 16/04/2013 - 07:28:10 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Cody_Milo_-_Nothing_But_Teen_Pussy.avi.torrent [19989]
O61 - LFC: 16/04/2013 - 07:34:34 ---A- C:\Users\Yann\AppData\Local\PutLockerDownloader\FTDownloader.exe_Url_53xixdcpvgygtyi5p1m3thfzejaycxtv\1.1.1.1\user.config [971] =>Spyware.PutLocker
O61 - LFC: 16/04/2013 - 07:34:52 ---A- C:\Users\Yann\AppData\Roaming\Babylon\log_file.txt [6475] =>Toolbar.Babylon
O61 - LFC: 16/04/2013 - 07:46:04 ---A- C:\Users\Yann\AppData\Local\Google\Chrome\User Data\Local State [25222]
O61 - LFC: 16/04/2013 - 07:46:05 ---A- C:\Users\Yann\AppData\Local\Google\Chrome\User Data\chrome_shutdown_ms.txt [4]
O61 - LFC: 16/04/2013 - 08:39:23 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Classic Jenna Jameson - Dangerous Tides Scene 2.torrent [13099]
O61 - LFC: 16/04/2013 - 08:40:31 ----- C:\Users\Yann\AppData\Roaming\uTorrent\Conquest - Jenna Jameson.avi.torrent [16190]
O61 - LFC: 16/04/2013 - 08:44:48 ----- C:\Users\Yann\AppData\Roaming\uTorrent\06.04.05.brea_bennett_cody_milo_DigitalDesire.wmv.torrent [7896]
O61 - LFC: 16/04/2013 - 09:40:33 ---A- C:\Users\Yann\AppData\Local\d3d9caps.dat [1356]
O61 - LFC: 16/04/2013 - 10:39:18 ---A- C:\Users\Yann\Downloads\CV BARMAN ST BARTHS 1.doc [35840]
O61 - LFC: 16/04/2013 - 11:05:03 ----- C:\Users\Yann\AppData\Roaming\uTorrent\[www.Cpasbien.me] Broken.City.2013.FRENCH.DVDRip.XviD-TMB.torrent [57234]
O61 - LFC: 16/04/2013 - 11:05:03 ---A- C:\Users\Yann\Downloads\broken-city-french-dvdrip-2013.torrent [57234]
O61 - LFC: 16/04/2013 - 11:05:59 ----- C:\Users\Yann\AppData\Roaming\uTorrent\[www.Cpasbien.me] De L Autre Cote Du Periph 2012 FRENCH BRRIP XviD-FUZION.torrent [57646]
O61 - LFC: 16/04/2013 - 11:05:59 ---A- C:\Users\Yann\Downloads\de-l-autre-cote-du-periph-french-dvdrip-2012.torrent [57646]
O61 - LFC: 16/04/2013 - 11:06:56 ---A- C:\Users\Yann\Downloads\[www.Cpasbien.me] Broken.City.2013.FRENCH.DVDRip.XviD-TMB\Films DVDRIP sur www.Cpasbien.me.html [462]
O61 - LFC: 16/04/2013 - 11:06:56 ---A- C:\Users\Yann\Downloads\[www.Cpasbien.me] Broken.City.2013.FRENCH.DVDRip.XviD-TMB\Films et series sur www.CPASBIEN.me.txt [57]
O61 - LFC: 16/04/2013 - 11:06:56 ---A- C:\Users\Yann\Downloads\[www.Cpasbien.me] Broken.City.2013.FRENCH.DVDRip.XviD-TMB\Les derniers Film et serie sur Cpasbien.me - cliquez ici !.html [462]
O61 - LFC: 16/04/2013 - 11:07:31 ----- C:\Users\Yann\AppData\Roaming\uTorrent\[www.Cpasbien.me] Silver.Linings.Playbook.2012.FRENCH.BRRIP.XviD-FUZION.torrent [113264]
O61 - LFC: 16/04/2013 - 11:07:31 ---A- C:\Users\Yann\Downloads\happiness-therapy-silver-linings-playbook-french-dvdrip-2013.torrent [113264]
O61 - LFC: 16/04/2013 - 11:08:28 ---A- C:\Users\Yann\Downloads\[www.Cpasbien.me] Silver.Linings.Playbook.2012.FRENCH.BRRIP.XviD-FUZION\Films DVDRIP sur www.Cpasbien.me.html [462]
O61 - LFC: 16/04/2013 - 11:08:28 ---A- C:\Users\Yann\Downloads\[www.Cpasbien.me] Silver.Linings.Playbook.2012.FRENCH.BRRIP.XviD-FUZION\Films et series sur www.CPASBIEN.me.txt [57]
O61 - LFC: 16/04/2013 - 11:08:28 ---A- C:\Users\Yann\Downloads\[www.Cpasbien.me] Silver.Linings.Playbook.2012.FRENCH.BRRIP.XviD-FUZION\Les derniers Film et serie sur Cpasbien.me - cliquez ici !.html [462]
O61 - LFC: 16/04/2013 - 11:08:28 ---A- C:\Users\Yann\Downloads\[www.Cpasbien.me] Silver.Linings.Playbook.2012.FRENCH.BRRIP.XviD-FUZION\[www.Cpasbien.me] Silver.Linings.Playbook.2012.FRENCH.BRRIP.XviD-FUZION.avi [1466804224]
O61 - LFC: 16/04/2013 - 11:09:02 ---A- C:\Users\Yann\Videos\[www.Cpasbien.me] De L Autre Cote Du Periph 2012 FRENCH BRRIP XviD-FUZION\Films DVDRIP sur www.Cpasbien.me.html [462]
O61 - LFC: 16/04/2013 - 11:09:02 ---A- C:\Users\Yann\Videos\[www.Cpasbien.me] De L Autre Cote Du Periph 2012 FRENCH BRRIP XviD-FUZION\Films et series sur www.CPASBIEN.me.txt [57]
O61 - LFC: 16/04/2013 - 11:09:02 ---A- C:\Users\Yann\Videos\[www.Cpasbien.me] De L Autre Cote Du Periph 2012 FRENCH BRRIP XviD-FUZION\Les derniers Film et serie sur Cpasbien.me - cliquez ici !.html [462]
O61 - LFC: 16/04/2013 - 12:17:00 ---A- C:\Users\Yann\Videos\[www.Cpasbien.me] De L Autre Cote Du Periph 2012 FRENCH BRRIP XviD-FUZION\[www.Cpasbien.me] De L Autre Cote Du Periph 2012 FRENCH BRRIP XviD-FUZION.avi [737746944]
O61 - LFC: 16/04/2013 - 12:34:38 ---A- C:\Users\Yann\Downloads\[www.Cpasbien.me] Broken.City.2013.FRENCH.DVDRip.XviD-TMB\[www.Cpasbien.me] Broken.City.2013.FRENCH.DVDRip.XviD-TMB.avi [732877758]
O61 - LFC: 16/04/2013 - 12:52:53 ---A- C:\Users\Yann\AppData\Roaming\uTorrent\settings.dat.old [15856]
O61 - LFC: 16/04/2013 - 13:22:52 ---A- C:\Users\Yann\AppData\Roaming\uTorrent\settings.dat [15881]
O61 - LFC: 16/04/2013 - 13:30:13 ---A- C:\Users\Yann\AppData\Roaming\uTorrent\dht_feed.dat.old [2]
O61 - LFC: 16/04/2013 - 13:34:22 ---A- C:\Users\Yann\AppData\Roaming\uTorrent\resume.dat.old [219533]
O61 - LFC: 16/04/2013 - 13:35:19 ---A- C:\Users\Yann\AppData\Roaming\uTorrent\dht_feed.dat [2]
O61 - LFC: 16/04/2013 - 13:36:23 ---A- C:\Users\Yann\AppData\Roaming\uTorrent\resume.dat [221457]
~ 23 Fichiers temporaires (Temporary files)
~ Files: 191 Legitimates Filtered in 00mn 20s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ ADS: Scanned in 00mn 00s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.)
~ FASS Keys: 21 Legitimates Filtered in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (@ieframe.dll,-12512) - https://www.bing.com/?toHttps=1&redig=69DA0EF8272048D9864AF4DB37211DE8
~ Keys: Scanned in 00mn 00s



---\\ Recherche particuliere à la racine de certains dossiers (O84)
[MD5.A9E30C432FAAF52FF1B3AE45F3A79780] [SPRF][16/04/2013] (...) -- C:\ProgramData\nvModes.dat [118712]
[MD5.71992F913186AD560DE7639444E7F3C2] [SPRF][16/04/2013] (...) -- C:\Users\Yann\AppData\Local\d3d9caps.dat [1356]
[MD5.08E9C82161FA3E592E0FC5EF814AD45B] [SPRF][20/11/2012] (...) -- C:\Users\Yann\AppData\Local\Temp\ama_uninstall_Hp3216.bat [348]
[MD5.81019731EC6A3B72840FFF974C55EFB3] [SPRF][07/04/2013] (...) -- C:\Users\Yann\AppData\Local\Temp\busunint.exe [12880]
[MD5.F39FD431BE6629896D4FA4B575CAEF2C] [SPRF][19/11/2012] (.Search Results - DefaultTabSetup.exe.) -- C:\Users\Yann\AppData\Local\Temp\DefaultTabSetup2.exe [3182736]
[MD5.DB9C318FE8B0CAC6480D15308FDF58F9] [SPRF][16/08/2012] (...) -- C:\Users\Yann\AppData\Local\Temp\DefInstAction.dat [124]
[MD5.289A813F130ED771B3BE7F248AF43334] [SPRF][16/08/2012] (...) -- C:\Users\Yann\AppData\Local\Temp\FW_Register_Plugin_Action.dat [172]
[MD5.CE5163BBB95664F60FF557DABFB09835] [SPRF][15/04/2008] (.Hewlett-Packard Company - HPQ System Information.) -- C:\Users\Yann\AppData\Local\Temp\HPQSi.exe [69632]
[MD5.F6278B5A16F830885B184D5F72E1B935] [SPRF][08/04/2013] (.Terra Informatica Software, Inc., British C - HTMLayout - embeddable HTML rendering and layout component.) -- C:\Users\Yann\AppData\Local\Temp\htmlayout.dll [947200]
[MD5.D1EB3F0B60A92C494919B0A6574B1F43] [SPRF][16/08/2012] (...) -- C:\Users\Yann\AppData\Local\Temp\isDel.bat [167]
[MD5.259B005858A776D11F27721A7291AE43] [SPRF][03/02/2013] (...) -- C:\Users\Yann\AppData\Local\Temp\NitroSysFonts01.dat [489859]
[MD5.36F22F295F904AFC3B5ED122B2E066BB] [SPRF][22/02/2011] (...) -- C:\Users\Yann\AppData\Local\Temp\OSU.exe [277448]
[MD5.5CC7C99F1C38A974305D3E0E82A5FF0E] [SPRF][16/08/2012] (...) -- C:\Users\Yann\AppData\Local\Temp\QBackupInst.dat [124]
[MD5.C6A605D7A0421233F98D212C1709C00E] [SPRF][16/04/2013] (.Skype Technologies S.A. - Skype.) -- C:\Users\Yann\AppData\Local\Temp\SkypeSetup.exe [30620776]
[MD5.634C553B19DA90CE66E4B8580D538370] [SPRF][02/07/2008] (...) -- C:\Users\Yann\AppData\Local\Temp\srtspse.dat [284]
[MD5.83581F4F77EAE54B135ED4BD4A6C901F] [SPRF][02/07/2008] (...) -- C:\Users\Yann\AppData\Local\Temp\srtspso.dat [2692]
[MD5.531CB2BF112D1A1EBCF35AE36E6D7850] [SPRF][02/07/2008] (...) -- C:\Users\Yann\AppData\Local\Temp\srtspsp.dat [524]
[MD5.3D7CDC3E67A97110321BF7453C649B1F] [SPRF][08/04/2013] (...) -- C:\Users\Yann\AppData\Local\Temp\toolbar73681128.exe [775664]
[MD5.F3A10836603E03A28CAF404B29328F92] [SPRF][07/04/2013] (.Babylon Ltd. - Uninstaller Application.) -- C:\Users\Yann\AppData\Local\Temp\uninst1.exe [394320] =>Toolbar.Babylon
[MD5.369B7242EBEBFC0EFE132F73E4D6E24F] [SPRF][05/10/2012] (.Pas de propriétaire - Uninstaller.) -- C:\Users\Yann\AppData\Local\Temp\Uninstaller.exe [314312]
[MD5.C90FDF8D34A949393123B403ECA65C73] [SPRF][22/02/2011] (.Pas de propriétaire - WebToGo Driver InstallX.) -- C:\Users\Yann\AppData\Local\Temp\WtgDriverInstallX.dll [24576]
[MD5.07D8161E49573552D4CA8574AE1A2B41] [SPRF][22/02/2011] (...) -- C:\Users\Yann\AppData\Local\Temp\WTGXMLUtil.dll [598016]
[MD5.6F678556A6FCE04FC94F3435F6313705] [SPRF][16/08/2012] (...) -- C:\WINDOWS\Downloaded Program Files\unagiuninst.exe [38428]
~ Files: Scanned in 00mn 00s



---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "TCP Query User{5921DE95-8B62-49DF-979F-FFC7FE43F8F0}C:\program files\utorrent\utorrent.exe" | In - Private - P6 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\program files\utorrent\utorrent.exe
O87 - FAEL: "UDP Query User{6981C597-D3D4-4130-A1D0-EB0B968D29F8}C:\program files\utorrent\utorrent.exe" | In - Private - P17 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\program files\utorrent\utorrent.exe
O87 - FAEL: "TCP Query User{71D950A0-FBDA-4C1E-A7FF-228F55C467F3}C:\program files\utorrent\utorrent.exe" | In - Public - P6 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\program files\utorrent\utorrent.exe
O87 - FAEL: "UDP Query User{2DFF4B90-1B45-444A-9E7A-BD0DB9D6CCD6}C:\program files\utorrent\utorrent.exe" | In - Public - P17 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\program files\utorrent\utorrent.exe
O87 - FAEL: "{CDBB1C4B-B9DB-4D6B-AD81-6C5E0D651E44}" | In - None - P6 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe
O87 - FAEL: "{1C2D5EEA-2446-443F-9D7A-CE6835035C27}" | In - None - P17 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe
O87 - FAEL: "{90D91DEB-FD7C-4221-BC27-9FFE7E8FA69B}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\YourFileDownloader\Downloader.exe (.not file.)
O87 - FAEL: "{801F0C76-5C68-4B43-A8C5-2F8D1236E91E}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\YourFileDownloader\Downloader.exe (.not file.)
O87 - FAEL: "{82CE6EE3-E65F-4B53-AB75-EF902EE2727A}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\YourFileDownloader\YourFile.exe (.not file.)
O87 - FAEL: "{30AC5BCB-9CE0-42F7-84F3-A7B4293749D5}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\YourFileDownloader\YourFile.exe (.not file.)
~ Firewall: 215 Legitimates Filtered in 00mn 01s



---\\ Scan Additionnel (O88)
Database Version : v2.11554 - (15/04/2013)
Clés trouvées (Keys found) : 15
Valeurs trouvées (Values found) : 0
Dossiers trouvés (Folders found) : 4
Fichiers trouvés (Files found) : 4

[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] =>Toolbar.Skype
[HKLM\Software\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] =>Toolbar.Skype
[HKLM\Software\Microsoft\Internet Explorer\extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}] =>Toolbar.Skype
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype
[HKLM\Software\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype
[HKCU\Software\1ClickDownload] =>PUP.1ClickDownloader
[HKCU\Software\BabylonToolbar] =>Toolbar.Babylon
[HKCU\Software\DataMngr] =>Adware.Bandoo
[HKLM\Software\DataMngr] =>Adware.Bandoo
[HKLM\Software\Classes\Prod.cap] =>Toolbar.Babylon
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload] =>PUP.1ClickDownloader
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\1ClickDownload] =>PUP.1ClickDownloader
[HKLM\Software\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}] =>Toolbar.DeltaSearch
C:\ProgramData\Babylon =>Toolbar.Babylon
C:\Users\Yann\AppData\Roaming\Babylon =>Toolbar.Babylon
C:\Users\Yann\AppData\Local\PutLockerDownloader =>Spyware.PutLocker
C:\Users\Yann\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde =>Toolbar.DeltaSearch
C:\Users\Yann\AppData\Local\Temp\uninst1.exe =>Toolbar.Babylon
C:\Users\Yann\AppData\Local\Temp\GoogleToolbarInstaller1.log =>Toolbar.Babylon
C:\Users\Yann\AppData\Local\Temp\GoogleToolbarInstaller2.log =>Toolbar.Babylon
~ Additionnel: Scanned in 00mn 22s



---\\ Random Export Key (O91)
[HKCU\Software\59578b8db16fe544\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1125.80]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}"
[HKCU\Software\59578b8db16fe544\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1125.80]:version="2.6.1125.80"
[HKCU\Software\59578b8db16fe544] =>Toolbar.Babylon^
[HKLM\Software\59578b8db16fe544] => Clé orpheline
~ Export Key Software: Scanned in 00mn 00s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 13/03/2013 253656 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Auto 12/02/2008 73728 | (AESTFilters) . (.Andrea Electronics Corporation.) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_030ac640\aestsrv.exe
SS - | Auto 11/08/2012 55184 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SS - | Demand 07/02/2008 193840 | (Com4QLBEx) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
SS - | Auto 01/12/2009 322624 | (DpHost) . (.DigitalPersona, Inc..) - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
SS - | Auto 20/01/2008 21504 | C:\Windows\System32\ezsvc7.dll (ezSharedSvc) . (.EasyBits Sofware AS.) - C:\WINDOWS\System32\svchost.exe
SS - | Demand 23/07/2007 181800 | (GameConsoleService) . (.WildTangent, Inc..) - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
SS - | Auto 10/10/2012 136176 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 10/10/2012 136176 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Auto 15/04/2008 94208 | (HP Health Check Service) . (.Hewlett-Packard.) - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
SS - | Demand 25/01/2008 148832 | (hpqwmiex) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
SS - | Auto 18/03/2008 19456 | (hpsrv) . (.Hewlett-Packard Corporation.) - C:\WINDOWS\System32\Hpservice.exe
SS - | Auto 15/04/2008 354840 | (IAANTMON) . (.Intel Corporation.) - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
SS - | Demand 21/10/2004 73728 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
SS - | Auto 04/04/2013 418376 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
SS - | Auto 04/04/2013 701512 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
SS - | Auto 30/10/2012 196624 | (NitroReaderDriverReadSpool3) . (.Nitro PDF Software.) - C:\Program Files\Nitro\Reader 3\NitroPDFReaderDriverService3.exe
SS - | Auto 22/05/2008 196608 | (nvsvc) . (.NVIDIA Corporation.) - C:\WINDOWS\System32\nvvsvc.exe
SS - | Auto 292232 | (QPCapSvc) . (...) - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
SS - | Auto 112008 | (QPSched) . (...) - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
SS - | Auto 341328 | (Recovery Service for Windows) . (...) - C:\Windows\SMINST\BLService.exe
SS - | Auto 272024 | (RichVideo) . (...) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
SR - | Auto 29/11/2012 216640 | (SAVAdminService) . (.Sophos Limited.) - C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe
SR - | Auto 12/10/2012 139840 | (SAVService) . (.Sophos Limited.) - C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe
SS - | Auto 02/10/2012 3064000 | (Skype C2C Service) . (.Skype Technologies S.A..) - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
SS - | Auto 19/10/2012 160944 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe
SS - | Auto 06/07/2012 232512 | (Sophos AutoUpdate Service) . (.Sophos Limited.) - C:\Program Files\Sophos\AutoUpdate\ALsvc.exe
SS - | Auto 15/04/2008 221239 | (STacSV) . (.IDT, Inc..) - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_030ac640\STacSV.exe
SS - | Auto 29/11/2012 2869824 | (swi_service) . (.Sophos Limited.) - C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe
SS - | Auto 29/11/2012 1459264 | (swi_update) . (.Sophos Limited.) - C:\ProgramData\Sophos\Web Intelligence\swi_update.exe
SS - | Auto 26/03/2008 595248 | (vfsFPService) . (.Validity Sensors, Inc..) - C:\Windows\system32\vfsFPService.exe
SR - | Auto 20/01/2008 21504 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\WINDOWS\System32\svchost.exe
SS - | Auto 20/01/2008 21504 | C:\WINDOWS\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\WINDOWS\System32\svchost.exe
SS - | Auto 23/04/2008 39408 | ({22D78859-9CE9-4B77-BF18-AC83E81A9263}) . (.Cyberlink Corp..) - C:\Program Files\HP\QuickPlay\000.fcl
~ Services: Scanned in 00mn 02s



---\\ Recherche Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by Yann at 16/04/2013 13:38:55

device: opened successfully
user: MBR read successfully

Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys hpdskflt.sys hal.dll iaStor.sys
C:\Windows\system32\DRIVERS\hpdskflt.sys Hewlett-Packard Corporation Hewlett-Packard Corporation Mobile Data Protection System
C:\Windows\system32\DRIVERS\iaStor.sys Intel Corporation Intel Matrix Storage Manager driver
1 ntkrnlpa!IofCallDriver[0x82077936] >> \Device\Harddisk0\DR0[0x8705E630]
5 hpdskflt[0x8B7A7F05] >> ntkrnlpa!IofCallDriver[0x82077936] >> \Device\Ide\IAAStorageDevice-1[0x8657B028]
kernel: MBR read successfully
user & kernel MBR OK
~ MBR: 15 Legitimates Filtered in 00mn 02s



---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by Yann at 16/04/2013 13:38:57

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR: Scanned in 00mn 04s



~ 1258 Legitimates filtered by white list
End of the scan (608 lines in 04mn 40s)(0)