BabylonShearch ...

~ Rapport de ZHPDiag v2013.9.28.51 - Nicolas Coolman (28/09/2013)
~ Lancé par Pascal (29/09/2013 17:35:19)
~ Adresse du Site Web https://nicolascoolman.webs.com/
~ Traduit par Nicolas Coolman
~ Etat de la version :
~ Liste blanche : Activée par le programme
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Deactivate by program


---\\ Navigateurs Internet
MSIE: Internet Explorer v10.0.9200.16686
GCIE: Google Chrome v23.0.1271.97 (Defaut)

---\\ Informations sur les produits Windows
~ Langage: Français
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 7QJB7
Windows License : OK
~ Windows Remaining Initializations Number : 3
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ Logiciels de protection du système
Malwarebytes Anti-Malware version 1.75.0.1300
Microsoft Security Client v4.2.0223.1
Windows Defender W7

---\\ Logiciels d'optimisation du système

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels
Adobe Flash Player 11 Plugin
Adobe Reader XI

---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 4026 MB (38% free)
System Restore: Activé (Enable)
System drive C: has 204 GB (45%) free of 454 GB

---\\ Mode de connexion au système
~ Computer Name: PASCAL-PC
~ User Name: Pascal
~ All Users Names: Pascal, craftenz, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\Pascal\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\Pascal\AppData\Roaming\
~ %Desktop% : C:\Users\Pascal\Desktop\
~ %Favorites% : C:\Users\Pascal\Favorites\
~ %LocalAppData% : C:\Users\Pascal\AppData\Local\
~ %StartMenu% : C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 204 Go of 454 Go)
D: CD-ROM drive (Not Inserted)
E: Floppy drive, Flash card reader, USB Key (Not Inserted)
F: Floppy drive, Flash card reader, USB Key (Free 1 Go of 2 Go)



---\\ Etat du Centre de Sécurité Windows
~ Security Center: 37 Legitimates Filtered in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.AAFA952E774DDDB0956D3BDFAE5B5B99] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.10/08/2013 - 06:22:18.) -- C:\Windows\System32\wininet.dll [2241024]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 15:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes: Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 4/13056
~ Mes musiques (My Musics) : 21/107
~ Mes Videos (My Videos) : 1/140
~ Mes Favoris (My Favorites) : 1/31
~ Mes Documents (My Documents) : 6/4691
~ Mon Bureau (My Desktop) : 1/41
~ Menu demarrer (Programs) : 1/41
~ Hidden Files: Scanned in 00mn 02s



---\\ Processus lancés
[MD5.D1930CA970D4250D891F432419E3D6C9] - (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe [186904] [PID.2532]
[MD5.672593A4AAAB8DC8C0A5C4C1AD0A6048] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [18680424] [PID.2376]
[MD5.8E2A7F1F62467A7DCB8AB2C0642F47CA] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392] [PID.2300]
[MD5.587AAAAEF6F62BB2619754B3BC9EF415] - (.Microsoft Corporation - Microsoft Office Word.) -- C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.exe [409776] [PID.3944]
[MD5.2D08AC1443FFA7FBED9A5EA5FD49AEB3] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1242728] [PID.3084]
[MD5.53B399A4785651C6B638541FD282E9AF] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8024576] [PID.3708]
[MD5.B33CF4DE909A5B30F526D82053A63C8E] - (.ABBYY - ABBYY network license server.) -- C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048] [PID.1608]
[MD5.4FE5C6D40664AE07BE5105874357D2ED] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [57008] [PID.1664]
[MD5.816FD5A6F3C2F3D600900096632FC60E] - (.Acer Incorporated - Global Registration Service.) -- C:\Program Files (x86)\Acer\Registration\GregHSRW.exe [1150496] [PID.1892]
[MD5.3F6268A2EC33CD38CF75C880AF8DED42] - (.NewTech Infosystems, Inc. - NTI Backup Now 5 SchedulerSvc NT Service.) -- C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [144640] [PID.1940]
[MD5.205E1B699FD3F2F9B036EEA2EC30C620] - (...) -- C:\Windows\SysWOW64\PnkBstrA.exe [76888] [PID.2008]
[MD5.543A4EF0923BF70D126625B034EF25AF] - (.Protexis Inc. - PsiService PsiService.) -- c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [189728] [PID.2036]
[MD5.70DDE3A86DBEB1D6C3C30AD687B1877A] - (.Acer - Acer Update Service.) -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe [240160] [PID.1336]
[MD5.660BF3255A1EB18ED803FD2FBA6AE400] - (.Intel Corporation - RAID Monitor.) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [354840] [PID.1288]
[MD5.F02A533F517EB38333CB12A9E8963773] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [136176] [PID.2692]
[MD5.ADDA5E1951B90D3D23C56D3CF0622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65640] [PID.2568]
~ Processes Running: Scanned in 00mn 01s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Pascal\AppData\Local\Google\Chrome\User Data\Default\Preferences
~ Google Browser: 5 Legitimates Filtered in 00mn 09s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\ewjx7dz7.default\prefs.js
~ Firefox Browser: 4 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 19



---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop [Public]: Acer Boutique Accessoire.lnk . (...) -- C:\Program Files (x86)\Acer Accessory Store\StartUrl.exe (.not file.)
O4 - GS\Desktop [Public]: BrickForce.lnk . (...) -- C:\BrickForce\BfLauncher.exe
O4 - GS\Desktop [Public]: Chica Password Manager 2.0.lnk . (.ChicaLogic, Inc. - Chica Password Manager.) -- C:\Program Files (x86)\ChicaLogic\Chica Password Manager\stpass.exe
O4 - GS\Desktop [Public]: Epson Easy Photo Print.lnk . (.SEIKO EPSON CORPORATION - Pas de description.) -- C:\Program Files (x86)\Epson Software\Easy Photo Print\EPQuicker.exe
O4 - GS\Desktop [Public]: EPSON Scan.lnk . (.SEIKO EPSON CORP. - EPSON Scan.) -- C:\Windows\twain_32\escndv\escndv.exe
O4 - GS\Desktop [Public]: EPSON SX218 Series Manuel.lnk . (...) -- C:\Program Files (x86)\epson\TpManual\EPSON SX218 Series\fr\Useg\index.htm
O4 - GS\Desktop [Public]: Harry Potter et la Coupe de Feu(TM) Démo.lnk . (...) -- C:\Program Files (x86)\Electronic Arts\Harry Potter et la Coupe de Feu Démo\gof_demo.exe
O4 - GS\Desktop [Public]: Jouez à ToCA Race Driver 2.lnk . (.Codemasters - RaceDriver 2 Application.) -- C:\Program Files (x86)\Codemasters\Race Driver 2\RD2.exe
O4 - GS\Desktop [Public]: LEGO Digital Designer.lnk . (.LEGO Company - LEGO Digital Designer.) -- C:\Program Files (x86)\LEGO Company\LEGO Digital Designer\LDD.exe
O4 - GS\Desktop [Public]: Les Sims(TM) 3 Animaux & Cie.lnk . (.Electronic Arts, Inc. - Sims 3Launcher Starter Application.) -- C:\Program Files (x86)\Electronic Arts\Les Sims 3 Animaux & Cie\Game\Bin\Sims3Launcher.exe
O4 - GS\Desktop [Public]: Tom Clancy's Rainbow Six Vegas.lnk . (.Ubisoft - Rainbow Six: Vegas Updater.) -- C:\Program Files (x86)\Ubisoft\Tom Clancy's Rainbow Six Vegas\Binaries\R6Vegas_Launcher.exe
O4 - GS\QuickLaunch [Pascal]: GameSpy Arcade.lnk . (.GameSpy Industries, Inc. - GameSpy Arcade 1.4.) -- C:\Program Files (x86)\GameSpy Arcade\Aphex.exe
O4 - GS\QuickLaunch [Pascal]: LEGO Digital Designer.lnk . (.LEGO Company - LEGO Digital Designer.) -- C:\Program Files (x86)\LEGO Company\LEGO Digital Designer\LDD.exe
O4 - GS\QuickLaunch [Pascal]: PhotoScape.lnk . (...) -- C:\Program Files (x86)\PhotoScape\PhotoScape.exe
O4 - GS\TaskBar [Pascal]: CamStudio.lnk . (.CamStudio Group - CamStudio Recorder.) -- C:\Program Files (x86)\CamStudio 2.7\Recorder.exe
O4 - GS\TaskBar [Pascal]: Minecraft (4).lnk . (...) -- C:\Users\Pascal\Downloads\Minecraft (4).exe
O4 - GS\TaskBar [Pascal]: Pipix_v2.8.lnk . (...) -- C:\Users\Pascal\Downloads\Pipix_v2.8.1.exe
O4 - GS\Desktop [Pascal]: Dofus2.lnk . (...) -- C:\Program Files (x86)\Dofus2\app\UpLauncher.exe
O4 - GS\Desktop [Pascal]: FZ48 Mode d'emploi.lnk . (...) -- C:\Program Files (x86)\Panasonic\Lumix\FZ48\guideFRE.pdf
O4 - GS\Desktop [Pascal]: Images - Raccourci.lnk . (...) -- C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Libraries\Pictures.library-ms
O4 - GS\Desktop [Pascal]: PhotoScape.lnk . (...) -- C:\Program Files (x86)\PhotoScape\PhotoScape.exe
O4 - GS\TaskBar [craftenz]: BrickForce.lnk . (...) -- C:\BrickForce\BfLauncher.exe
O4 - GS\TaskBar [craftenz]: Minecraft (1).lnk . (...) -- C:\Users\Pascal\Downloads\Minecraft (1).exe
O4 - GS\TaskBar [craftenz]: Tom Clancy's Rainbow Six Vegas.lnk . (.Ubisoft - Rainbow Six: Vegas Updater.) -- C:\Program Files (x86)\Ubisoft\Tom Clancy's Rainbow Six Vegas\Binaries\R6Vegas_Launcher.exe
O4 - GS\Desktop [craftenz]: Continue Zip Opener Installation.lnk . (...) -- C:\Users\Pascal\AppData\Local\Temp\ICReinstall_ZipOpenerSetup.exe (.not file.)
O4 - GS\Desktop [craftenz]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
~ Global Startup: 118 Legitimates Filtered in 00mn 02s



---\\ Applications lancées au démarrage du sytème (O4)
O4 - HKLM\..\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [IntelliPoint] . (.Microsoft Corporation - IPoint.exe.) -- c:\Program Files\Microsoft IntelliPoint\ipoint.exe
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe
O4 - HKCU\..\Run: [ChicaPasswordManager] . (.ChicaLogic, Inc. - Chica Password Manager.) -- C:\Program Files (x86)\ChicaLogic\Chica Password Manager\stpass.exe
O4 - HKCU\..\Run: [Rocket Download Manager] . (.Rocket Download Manager - Rocket Download Manager.) -- C:\Program Files (x86)\Rocket Download Manager\rdm.exe
O4 - HKCU\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper (buildbot_winslav.) -- C:\Program Files (x86)\Steam\Steam.exe
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-3722279051-51322176-1360513960-1000\..\Run: [ChicaPasswordManager] . (.ChicaLogic, Inc. - Chica Password Manager.) -- C:\Program Files (x86)\ChicaLogic\Chica Password Manager\stpass.exe
O4 - HKUS\S-1-5-21-3722279051-51322176-1360513960-1000\..\Run: [Rocket Download Manager] . (.Rocket Download Manager - Rocket Download Manager.) -- C:\Program Files (x86)\Rocket Download Manager\rdm.exe
O4 - HKUS\S-1-5-21-3722279051-51322176-1360513960-1000\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper (buildbot_winslav.) -- C:\Program Files (x86)\Steam\Steam.exe
O4 - HKUS\S-1-5-21-3722279051-51322176-1360513960-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.
~ Application: Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{633CE0AD-90D0-4CF0-8715-F7C1257F7095}: DhcpNameServer = 192.168.0.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{633CE0AD-90D0-4CF0-8715-F7C1257F7095}: DhcpNameServer = 192.168.0.254
O17 - HKLM\System\CS2\Services\Tcpip\..\{633CE0AD-90D0-4CF0-8715-F7C1257F7095}: DhcpNameServer = 192.168.0.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.254
~ Domain: Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: Bridge Construction Set Demo - (...) [HKLM][64Bits] -- Bridge Construction Set Demo
~ Logic: 147 Legitimates Filtered in 00mn 01s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\4e2bbda3]
[HKLM\Software\Wow6432Node\IncrediMail]
~ Key Software: 253 Legitimates Filtered in 00mn 01s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 06/03/2012 - 17:40:42 - [0] ----D C:\Program Files (x86)\Black Sheep Studio
O43 - CFD: 07/05/2012 - 20:08:11 - [15,469] ----D C:\Program Files (x86)\Bridge Construction Set Demo
O43 - CFD: 14/10/2012 - 16:35:20 - [239,141] ----D C:\Program Files (x86)\Giant
O43 - CFD: 02/01/2012 - 22:36:50 - [0] ----D C:\Program Files (x86)\LP
O43 - CFD: 08/02/2012 - 17:39:06 - [4,875] ----D C:\Program Files (x86)\WalkOn
O43 - CFD: 14/04/2013 - 19:36:21 - [54,403] ----D C:\Users\Pascal\AppData\Roaming\.esperia
O43 - CFD: 10/04/2013 - 12:25:12 - [2,426] ----D C:\Users\Pascal\AppData\Roaming\.minesoldiers
O43 - CFD: 15/06/2013 - 12:02:06 - [88,358] ----D C:\Users\Pascal\AppData\Roaming\.xoliocraft
O43 - CFD: 20/05/2012 - 20:06:39 - [0] ----D C:\Users\Pascal\AppData\Roaming\80E1A
O43 - CFD: 27/11/2012 - 12:12:35 - [0] ----D C:\Users\Pascal\AppData\Roaming\9E880
O43 - CFD: 13/07/2013 - 03:42:02 - [0] -SH-D C:\Users\Pascal\AppData\Local\4e2bbda3
O43 - CFD: 07/05/2012 - 20:08:09 - [0] ----D C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bridge Construction Set Demo
O43 - CFD: 08/02/2012 - 17:39:08 - [0] ----D C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WalkOn
~ Program Folder: 257 Legitimates Filtered in 00mn 27s



---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.1C03D3B914EE0FFE768438DF627D188B] - 23/09/2013 - 17:47:02 ---A- - C:\Windows\Prefetch\PCSUNOTIFIER.EXE-38530BFA.pf
O45 - LFCP:[MD5.5B934DCC872C114641FE212AE0212534] - 23/09/2013 - 17:47:07 ---A- - C:\Windows\Prefetch\SPMSMARTSCAN.EXE-8D44282C.pf
O45 - LFCP:[MD5.3A38139C646F9A56B41096D67AA68ADA] - 23/09/2013 - 17:49:45 ---A- - C:\Windows\Prefetch\HOMEMEDIA.EXE-7D19377E.pf
O45 - LFCP:[MD5.AD6B4727FC4CE3EE33C46B315B7BFD75] - 28/09/2013 - 11:12:01 ---A- - C:\Windows\Prefetch\PCSUSD.EXE-C9AFF73D.pf
O45 - LFCP:[MD5.66CDD4D704196B5A5E5CDD48764303FB] - 29/09/2013 - 09:18:08 ---A- - C:\Windows\Prefetch\PCSUUCC.EXE-135A9EB1.pf
O45 - LFCP:[MD5.8ADB06ECFC0A96A829B7D4BF92754A12] - 29/09/2013 - 14:49:01 ---A- - C:\Windows\Prefetch\STPASS.EXE-4DDC8654.pf
O45 - LFCP:[MD5.4F55718AEB0BAFAC4CCEFB4476181485] - 29/09/2013 - 14:49:02 ---A- - C:\Windows\Prefetch\RDM.EXE-62112DDC.pf
~ Prefetcher: 144 Legitimates Filtered in 00mn 00s



---\\ Clé de registre Shell MountPoints2 (MPKS) (O51)
O51 - MPSK:{e9ec889e-3564-11e1-8159-806e6f6e6963}\AutoRun\command. (...) -- D:\Juntos2.exe (.not file.)
~ Keys: Scanned in 00mn 00s



---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 16 Legitimates Filtered in 00mn 00s



---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoInstrumentation"=
O56 - MWPE:[HKLM\...\policies\Explorer] - "HideSCAHealth"=1
~ MWPE Keys: 5 Legitimates Filtered in 00mn 00s



---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:[MD5.0E5DA5369A0FCAEA12456DD852545184] - 14/07/2009 - 02:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496]
~ Drivers: 16 Legitimates Filtered in 00mn 01s



---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC: 29/09/2013 - 09:37:43 ---A- . (...) -- C:\Users\Pascal\Documents\Thomas Woodrow Wilson.docx [37537]
O61 - LFC: 29/09/2013 - 09:37:43 --HA- . (...) -- C:\Users\Pascal\Documents\~$omas Woodrow Wilson.docx [162]
O61 - LFC: 29/09/2013 - 09:39:51 ---A- . (...) -- C:\Users\Pascal\AppData\Local\avgchrome\avgp [407134]
O61 - LFC: 29/09/2013 - 09:57:07 ---A- . (...) -- C:\Users\Pascal\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists [262627]
O61 - LFC: 29/09/2013 - 11:22:30 ---A- . (...) -- C:\Users\Pascal\Downloads\RogueKillerX64.exe [3812352]
O61 - LFC: 29/09/2013 - 11:29:55 ---A- . (...) -- C:\Users\Pascal\AppData\Roaming\ZHP\HOSTS.txt [741] =>.Nicolas Coolman
O61 - LFC: 29/09/2013 - 15:04:44 ---A- . (...) -- C:\Users\Pascal\AppData\Roaming\ZHP\ZHPADSReport.txt [351] =>.Nicolas Coolman
O61 - LFC: 29/09/2013 - 15:06:34 ---A- . (...) -- C:\Users\Pascal\AppData\Roaming\ZHP\ZHPDiag.txt [50005] =>.Nicolas Coolman
O61 - LFC: 29/09/2013 - 15:45:39 ---A- . (...) -- C:\Users\Pascal\AppData\Roaming\ZHP\ZHPFixQuarantine.txt [2786] =>.Nicolas Coolman
O61 - LFC: 29/09/2013 - 15:45:50 ---A- . (...) -- C:\Users\Pascal\AppData\Roaming\ZHP\ZHPFix[R1].txt [9676] =>.Nicolas Coolman
O61 - LFC: 29/09/2013 - 15:45:51 ---A- . (...) -- C:\Users\Pascal\AppData\Roaming\ZHP\ZHPExportRegistry-29-09-2013-16-45-51.txt [261378] =>.Nicolas Coolman
O61 - LFC: 29/09/2013 - 16:31:55 ---A- . (...) -- C:\Users\Pascal\AppData\Local\Google\Chrome\User Data\Local State [42288]
O61 - LFC: 29/09/2013 - 16:35:14 ---A- . (...) -- C:\Users\Pascal\AppData\Roaming\ZHP\TestsZHPDiag.txt [2881] =>.Nicolas Coolman
O61 - LFC: 29/09/2013 - 16:36:30 ---A- . (...) -- C:\Users\Pascal\AppData\Roaming\ZHP\Log.txt [77572] =>.Nicolas Coolman
~ Files: 485 Legitimates Filtered in 00mn 30s



---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s



---\\ Associations Shell Spawning (O67)
O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)
~ FASS Keys: 19 Legitimates Filtered in 00mn 00s



---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s



---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {67A2568C-7A0A-4EED-AECC-B5405DE63B64} - (Google) - https://www.google.com/?gws_rd=ssl
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - https://www.google.com/?gws_rd=ssl
~ Keys: Scanned in 00mn 00s



---\\ Recherche particulière à la racine du système (SPRF) (O84)
[MD5.627B8343FB01492DFF9037FDBB33A6C5] [SPRF][13/04/2013] (...) -- C:\Users\Pascal\AppData\Roaming\wklnhst.dat [202]
[MD5.1CA0A793DDBD1677F740AABD793FBF7C] [SPRF][14/10/2012] (...) -- C:\Users\Pascal\Desktop\lego_star_wars_pc_demo_final.exe [238304081]
[MD5.C2FF5D2D7E9D3A85EB49117D8C09F814] [SPRF][29/08/2012] (...) -- C:\Users\Pascal\Desktop\MultiPlayer.bat [1315]
~ Files: 10 Legitimates Filtered in 00mn 05s



---\\ Enumère les codes produits des logiciels (PUC) (O90)
O90 - PUC: "8E0A474D12440C34EBE84F459FE1E2A2" . (.Race Driver 2.) -- C:\Windows\Installer\{D474A0E8-4421-43C0-BE8E-F454F91E2E2A}\ARPPRODUCTICON.exe
~ Update Products: 116 Legitimates Filtered in 00mn 00s



---\\ Etat général des services not Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 14/05/2009 759048 | (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY.) - C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
SR - | Auto 05/09/2013 65640 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SR - | Auto 21/12/2012 57008 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Auto 30/09/2009 844320 | (ePowerSvc) . (.Acer Incorporated.) - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
SR - | Auto 28/08/2009 1150496 | (Greg_Service) . (.Acer Incorporated.) - C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
SS - | Auto 02/01/2012 136176 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 02/01/2012 136176 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 09/05/2011 136120 | (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
SR - | Auto 13/10/2009 354840 | (IAANTMON) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
SS - | Demand 22/10/2004 73728 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
SR - | Demand 20/02/2013 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SS - | Demand 18/06/2009 50432 | (NTIBackupSvc) . (.NewTech InfoSystems, Inc..) - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
SR - | Auto 18/06/2009 144640 | (NTISchedulerSvc) . (.NewTech Infosystems, Inc..) - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
SR - | Auto 10/07/1658 0 | (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe
SR - | Auto 10/03/2010 189728 | (PSI_SVC_2) . (.Protexis Inc..) - c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
SS - | Auto 01/03/2013 161384 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SS - | Demand 21/09/2013 565672 | (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
SR - | Auto 04/07/2009 240160 | (Updater Service) . (.Acer.) - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
SS - | Demand 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services: Scanned in 00mn 25s



---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
Run by Pascal at 29/09/2013 17:38:13
~ OS 64 not supported by MBR tool
~ MBR: 0 Legitimates Filtered in 00mn 00s



---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by Pascal at 29/09/2013 17:38:15

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR: Scanned in 00mn 02s



---\\ Scan Additionnel (O88)
Database Version : 12930 - (28/09/2013)
Clés trouvées (Keys found) : 0
Valeurs trouvées (Values found) : 0
Dossiers trouvés (Folders found) : 0
Fichiers trouvés (Files found) : 0

~ Additionnel Scan: 347217 Items scanned in 00mn 25s



~ 1819 Legitimates filtered by white list
End of the scan (439 lines in 03mn 22s)(0)

Je n'arrive pas à mettre à jour, ça me dit qu'il y a une erreur...

J'arrive pas à envoyer ce qui est ecrit!

############################## | UsbFix V 7.139 | [Suppression]

Utilisateur: Pascal (Administrateur) # PASCAL-PC
Mis à jour le 29/09/2013 par El Desaparecido - Team SosVirus
Lancé à 18:49:30 | 29/09/2013

Site Web: https://www.usbfix.net/
Forum : https://www.sosvirus.net/
Upload Malware: http://www.sosvirus.net/upload_malware.php
Contact: https://www.usb-antivirus.com/fr/contact/

PC: Acer (Aspire 7715Z )
CPU: Pentium(R) Dual-Core CPU T4400 @ 2.20GHz
RAM -> [Total : 4026 | Free : 2058]
Bios: Acer
Boot: Normal boot

OS: Microsoft Windows 7 Édition Familiale Premium (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 10.0.9200.16686

SC: Security Center Service [(!) Disabled]
WU: Windows Update Service [Enabled]
AV: McAfee VirusScan [Enabled | Updated]
FW: Windows FireWall Service [(!) Disabled]

C:\ (%systemdrive%) -> Disque fixe # 454 Go (204 Go libre(s) - 45%) [Acer] # NTFS
D:\ -> CD-ROM

################## | Regedit Run |

HKLM\SOFTWARE | Run : [iTunesHelper] - "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
HKLM\SOFTWARE | Run : [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKLM\SOFTWARE\wow6432Node | Run : [iTunesHelper] - "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
HKLM\SOFTWARE\wow6432Node | Run : [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKU\S-1-5-19\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-21-3722279051-51322176-1360513960-1000\SOFTWARE | Run : [ChicaPasswordManager] - "C:\Program Files (x86)\ChicaLogic\Chica Password Manager\stpass.exe" /autorunned
HKU\S-1-5-21-3722279051-51322176-1360513960-1000\SOFTWARE | Run : [Rocket Download Manager] - "C:\Program Files (x86)\Rocket Download Manager\rdm.exe" -autorun
HKU\S-1-5-21-3722279051-51322176-1360513960-1000\SOFTWARE | Run : [Steam] - "C:\Program Files (x86)\Steam\Steam.exe" -silent
HKU\S-1-5-21-3722279051-51322176-1360513960-1000\SOFTWARE | Run : [Skype] - "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
HKU\S-1-5-19\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe
HKU\S-1-5-20\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe

################## | Processus Stoppés |

Stoppé! c:\Program Files\Microsoft Security Client\MsMpEng.exe (ID 880 |ParentID 564)
Stoppé! C:\Windows\System32\spoolsv.exe (ID 1348 |ParentID 564)
Stoppé! C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe (ID 1560 |ParentID 564)
Stoppé! C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (ID 1696 |ParentID 564)
Stoppé! C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ID 1716 |ParentID 564)
Stoppé! C:\Program Files\Bonjour\mDNSResponder.exe (ID 1744 |ParentID 564)
Stoppé! C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (ID 1816 |ParentID 564)
Stoppé! C:\Program Files (x86)\Acer\Registration\GregHSRW.exe (ID 1860 |ParentID 564)
Stoppé! C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe (ID 1908 |ParentID 564)
Stoppé! C:\Windows\SysWOW64\PnkBstrA.exe (ID 1988 |ParentID 564)
Stoppé! c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (ID 2032 |ParentID 564)
Stoppé! C:\Program Files\Acer\Acer Updater\UpdaterService.exe (ID 1520 |ParentID 564)
Stoppé! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (ID 1568 |ParentID 564)
Stoppé! C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe (ID 1776 |ParentID 564)
Stoppé! C:\Windows\system32\taskhost.exe (ID 2264 |ParentID 564)
Stoppé! C:\Windows\system32\taskeng.exe (ID 2280 |ParentID 348)
Stoppé! C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (ID 2444 |ParentID 2280)
Stoppé! C:\Windows\System32\igfxtray.exe (ID 2752 |ParentID 2408)
Stoppé! C:\Windows\System32\hkcmd.exe (ID 2764 |ParentID 2408)
Stoppé! C:\Windows\System32\igfxpers.exe (ID 2772 |ParentID 2408)
Stoppé! C:\Program Files\Microsoft IntelliPoint\ipoint.exe (ID 2804 |ParentID 2408)
Stoppé! C:\Program Files\Microsoft Security Client\msseces.exe (ID 2844 |ParentID 2408)
Stoppé! C:\Windows\system32\SearchIndexer.exe (ID 2360 |ParentID 564)
Stoppé! C:\Program Files (x86)\Steam\Steam.exe (ID 2488 |ParentID 2408)
Stoppé! C:\Program Files (x86)\Skype\Phone\Skype.exe (ID 2492 |ParentID 2408)
Stoppé! C:\Program Files (x86)\iTunes\iTunesHelper.exe (ID 2680 |ParentID 2640)
Stoppé! C:\Program Files\iPod\bin\iPodService.exe (ID 920 |ParentID 564)
Stoppé! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID 3480 |ParentID 2408)
Stoppé! C:\Windows\system32\SearchProtocolHost.exe (ID 3780 |ParentID 2360)
Stoppé! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID 3992 |ParentID 3480)
Stoppé! C:\Windows\system32\sppsvc.exe (ID 2632 |ParentID 564)
Stoppé! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID 1148 |ParentID 3480)
Stoppé! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID 3640 |ParentID 3480)
Stoppé! C:\Windows\servicing\TrustedInstaller.exe (ID 388 |ParentID 564)
Stoppé! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID 704 |ParentID 3480)
Stoppé! C:\Windows\system32\wuauclt.exe (ID 3832 |ParentID 348)
Stoppé! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID 3068 |ParentID 3480)
Stoppé! C:\Users\Pascal\Downloads\Open-config.exe (ID 1084 |ParentID 2408)
Stoppé! C:\Windows\SysWOW64\mshta.exe (ID 4012 |ParentID 1084)

################## | Éléments infectieux |

Supprimé! C:\Program Files (x86)\LP

(!) Fichiers temporaires supprimés.

################## | Registre |

Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{e9ec889e-3564-11e1-8159-806e6f6e6963}

################## | Listing |

[29/05/2013 - 11:28:40 | SHD ] C:\$Recycle.Bin
[29/09/2013 - 11:20:12 | D ] C:\AdwCleaner
[02/01/2012 - 19:23:33 | D ] C:\book
[29/10/2009 - 13:01:17 | RASH | 8192] C:\BOOTSECT.BAK
[25/09/2013 - 15:17:59 | D ] C:\BrickForce
[29/09/2013 - 18:44:42 | SHD ] C:\Config.Msi
[14/07/2009 - 07:08:56 | SHD ] C:\Documents and Settings
[22/04/2013 - 11:39:05 | D ] C:\Fraps
[29/09/2013 - 18:44:44 | ASH | 3166154752] C:\hiberfil.sys
[29/10/2009 - 12:09:33 | D ] C:\Intel
[29/10/2009 - 12:31:31 | RHD ] C:\MSOCache
[02/01/2012 - 19:52:37 | D ] C:\OEM
[29/09/2013 - 18:44:47 | ASH | 4221542400] C:\pagefile.sys
[14/07/2009 - 05:20:08 | D ] C:\PerfLogs
[29/09/2013 - 17:38:13 | N | 512] C:\PhysicalDisk0_MBR.bin
[06/06/2012 - 16:22:51 | N | 59] C:\prefs.js
[29/09/2013 - 16:27:07 | D ] C:\Program Files
[29/09/2013 - 18:54:24 | D ] C:\Program Files (x86)
[29/09/2013 - 18:43:13 | HD ] C:\ProgramData
[02/01/2012 - 19:19:56 | SHD ] C:\Recovery
[29/09/2013 - 16:45:40 | SHD ] C:\System Volume Information
[06/05/2012 - 20:48:55 | D ] C:\temp
[26/11/2012 - 21:49:14 | N | 0] C:\testDefBrow.html
[29/09/2013 - 18:54:33 | D ] C:\UsbFix
[29/09/2013 - 18:54:54 | A | 7143] C:\UsbFix [Clean 1] PASCAL-PC.txt
[20/08/2012 - 17:37:59 | N | 2982] C:\user.js
[29/05/2013 - 11:28:36 | RD ] C:\Users
[29/09/2013 - 11:21:52 | D ] C:\Windows

################## | Vaccin |

C:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)

################## | E.O.F | https://www.usbfix.net/ - https://www.sosvirus.net/ |

D'accord et ensuite ?
J'ai désinstallée chrome et je l'ai réinstallée

Je ne trouve pas McAfee

(c'est finit ??!)

Il vas bien, moi par contre j'ai les yeux explosés !

Plus sérieusement, il n'y a plus de pubs, plus de Babylon, vraiment merci pour ta disponibilité et tes compétences! :)

# DelFix v10.4 - Rapport créé le 29/09/2013 à 19:25:53
# Mis à jour le 19/07/2013 par Xplode
# Nom d'utilisateur : Pascal - PASCAL-PC
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)

~ Activation de l'UAC ... OK

~ Suppression des outils de désinfection ...

Supprimé : C:\USBFix
Supprimé : C:\ProgramData\Open-Config
Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
Supprimé : C:\Users\Pascal\Desktop\RK_Quarantine
Supprimé : C:\Program Files (x86)\ZHPDiag
Supprimé : C:\PhysicalDisk0_MBR.bin
Supprimé : C:\UsbFix [Clean 1] PASCAL-PC.txt
Supprimé : C:\Users\Pascal\Desktop\JRT.txt
Supprimé : C:\Users\Pascal\Desktop\RKreport[0]_D_09292013_122721.txt
Supprimé : C:\Users\Pascal\Desktop\RKreport[0]_H_09292013_122955.txt
Supprimé : C:\Users\Pascal\Desktop\RKreport[0]_PR_09292013_122958.txt
Supprimé : C:\Users\Pascal\Desktop\RKreport[0]_S_09292013_122627.txt
Supprimé : C:\Users\Pascal\Desktop\RKreport[0]_S_09292013_125306.txt
Supprimé : C:\Users\Pascal\Desktop\UsbFix Faire un Don.lnk
Supprimé : C:\Users\Pascal\Desktop\ZHPDiag.lnk
Supprimé : C:\Users\Pascal\Desktop\ZHPDiag.txt
Supprimé : C:\Users\Pascal\Desktop\ZHPFix.lnk
Supprimé : C:\Users\Pascal\Desktop\ZHPFixReport.txt
Supprimé : C:\Users\Pascal\Downloads\JRT.exe
Supprimé : C:\Users\Pascal\Downloads\Open-config.exe
Supprimé : C:\Users\Pascal\Downloads\RogueKillerX64.exe
Supprimé : C:\Users\Pascal\Downloads\UsbFix.exe
Supprimé : C:\Users\Pascal\Downloads\ZHPDiag2.exe
Supprimée : HKCU\Software\USBFix
Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\USBFix
Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1

~ Sauvegarde de la base de registre ... OK

~ Purge de la restauration système ...

Supprimé : RP #363 [Windows Update | 09/12/2013 16:43:35]
Supprimé : RP #365 [Windows Update | 09/14/2013 07:06:47]
Supprimé : RP #367 [Windows Update | 09/15/2013 09:20:37]
Supprimé : RP #369 [Windows Update | 09/18/2013 14:31:22]
Supprimé : RP #371 [Windows Update | 09/22/2013 09:04:11]
Supprimé : RP #373 [Windows Update | 09/25/2013 11:53:38]
Supprimé : RP #375 [Windows Update | 09/29/2013 09:10:37]
Supprimé : RP #377 [Removed Adobe Reader 9.5.3 MUI. | 09/29/2013 14:27:37]
Supprimé : RP #379 [Installed Adobe Reader XI - Français. | 09/29/2013 14:42:35]
Supprimé : RP #380 [P | 09/29/2013 14:45:39]

Nouveau point de restauration créé !

~ Réinitialisation des paramètres système ... OK

########## - EOF - ##########

Merci beaucoup !

re

de rien^^

@+