Message d alerte rundll

Voici le rapport
# AdwCleaner v3.010 - Rapport créé le 22/10/2013 à 17:00:14
# Mis à jour le 20/10/2013 par Xplode
# Système d'exploitation : Windows 8 Pro (32 bits)
# Nom d'utilisateur : SECRETARIAT CVS - SECRETARIAT
# Exécuté depuis : C:\Users\SECRETARIAT CVS\Downloads\adwcleaner.exe
# Option : Nettoyer

***** [ Services ] *****

Service Supprimé : Application Updater
[#] Service Supprimé : update whilokii

***** [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\ProgramData\Babylon
Dossier Supprimé : C:\ProgramData\Conduit
Dossier Supprimé : C:\Program Files\Application Updater
Dossier Supprimé : C:\Program Files\Conduit
Dossier Supprimé : C:\Program Files\IObit Apps Toolbar
Dossier Supprimé : C:\Program Files\Whilokii
Dossier Supprimé : C:\Program Files\Common Files\spigot
Dossier Supprimé : C:\Users\SECRETARIAT CVS\AppData\Local\Conduit
Dossier Supprimé : C:\Users\SECRETARIAT CVS\AppData\Local\PackageAware
Dossier Supprimé : C:\Users\SECRETARIAT CVS\AppData\LocalLow\Conduit
Dossier Supprimé : C:\Users\SECRETARIAT CVS\AppData\LocalLow\Search Settings
Fichier Supprimé : C:\END
Fichier Supprimé : C:\Users\SECRETARIAT CVS\AppData\Roaming\Mozilla\Firefox\Profiles\04s652no.default\user.js

***** [ Raccourcis ] *****


***** [ Registre ] *****

Clé Supprimée : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Clé Supprimée : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Clé Supprimée : HKLM\SOFTWARE\Classes\speedupmypc
Clé Supprimée : HKLM\SOFTWARE\Classes\ToolBand.EasyHideBtn
Clé Supprimée : HKLM\SOFTWARE\Classes\ToolBand.EasyHideBtn.1
Clé Supprimée : HKLM\SOFTWARE\Classes\ToolBand.SkypeIEHelper
Clé Supprimée : HKLM\SOFTWARE\Classes\ToolBand.SkypeIEHelper.1
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SearchSettings]
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{204DF522-9A96-4A72-ABB0-60F7A216D6D2}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{AB4DA692-F26B-403C-AF8F-FD87D121F8F1}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{8B0295E2-967E-439E-9560-807D9F625B57}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{937936AF-28CA-4973-B8AE-F250406149A2}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{204DF522-9A96-4A72-ABB0-60F7A216D6D2}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
Clé Supprimée : HKCU\Software\InstallCore
Clé Supprimée : HKCU\Software\Search Settings
Clé Supprimée : HKCU\Software\SearchProtect
Clé Supprimée : HKCU\Software\Whilokii
Clé Supprimée : HKCU\Software\AppDataLow\Software\Conduit
Clé Supprimée : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Clé Supprimée : HKCU\Software\AppDataLow\Software\Search Settings
Clé Supprimée : HKCU\Software\AppDataLow\Software\smartbar
Clé Supprimée : HKLM\Software\Application Updater
Clé Supprimée : HKLM\Software\Conduit
Clé Supprimée : HKLM\Software\Search Settings
Clé Supprimée : HKLM\Software\SearchProtect
Clé Supprimée : HKLM\Software\Whilokii
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Whilokii

***** [ Navigateurs ] *****

-\\ Internet Explorer v10.0.9200.16384


-\\ Mozilla Firefox v24.0 (fr)

[ Fichier : C:\Users\SECRETARIAT CVS\AppData\Roaming\Mozilla\Firefox\Profiles\04s652no.default\prefs.js ]


-\\ Google Chrome v30.0.1599.101

[ Fichier : C:\Users\SECRETARIAT CVS\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [4906 octets] - [22/10/2013 16:58:56]
AdwCleaner[S0].txt - [4910 octets] - [22/10/2013 17:00:14]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4970 octets] ##########

Bonjour!
laisse moi d'abord te remercier pour l"échange;
je te transmets le rapport demain.
Bien à vous
Mixhell

Ok ça marche ;)

Bonjour!
le rapport est là et la boite de dialogue persiste.

Malwarebytes Anti-Malware (Essai) 1.75.0.1300
www.malwarebytes.org

Version de la base de données: v2013.10.22.07

Windows 8 x86 NTFS
Internet Explorer 10.0.9200.16384
SECRETARIAT CVS :: SECRETARIAT [administrateur]

Protection: Activé

22/10/2013 22:03:35
mbam-log-2013-10-22 (22-03-35).txt

Type d'examen: Examen rapide
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 205450
Temps écoulé: 6 minute(s), 5 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)

Fichier(s) détecté(s): 2
C:\Users\SECRETARIAT CVS\Downloads\ChromeSetup.exe (PUP.Optional.InstallCore) -> Mis en quarantaine et supprimé avec succès.
C:\Windows\Installer\4773a97.msi (PUP.Optional.Spigot.A) -> Mis en quarantaine et supprimé avec succès.

(fin)

Bonsoir!
Je tenais à présenter mes excuses pour le retard sur le dernier rapport "ZHPDiag " à vous présenter que je transmettrai demain avec votre autorisation.
En plus, merci pour le message de Conficuis et de votre disponibilité.
Bien à vous.

Mixhell

Hello,

Pas de soucis, à demain.

~ Rapport de ZHPDiag v2013.10.23.60 - Nicolas Coolman (23/10/2013)
~ Lancé par SECRETARIAT CVS (24/10/2013 14:21:46)
~ Adresse du Site Web http://nicolascoolman.webs.com
~ Forums gratuits d'Assistance à la désinfection : http://nicolascoolman.webs.com/apps/links/
~ Traduit par Nicolas Coolman
~ Etat de la version :
~ Liste blanche : Désactivée par l'utilisateur
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Activate by user


---\\ Navigateurs Internet
MSIE: Internet Explorer v10.0.9200.16384
MFIE: Mozilla Firefox 24.0
GCIE: Google Chrome v30.0.1599.101 (Defaut)

---\\ Informations sur les produits Windows
~ Langage: Français
Windows 8 Business Edition, 32-bit (Build 9200)
Windows Server License Manager Script : OK

---\\ Logiciels de protection du système
Malwarebytes Anti-Malware version 1.75.0.1300
Windows Defender W8

---\\ Logiciels d'optimisation du système
CCleaner v3.08 =>Piriform Ltd

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels
Adobe Reader X

---\\ Informations sur le système
~ Processor: x86 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 1952 MB (54% free)
System Restore: Activé (Enable)
System drive C: has 71 GB (70%) free of 101 GB

---\\ Mode de connexion au système
~ Computer Name: SECRETARIAT
~ User Name: SECRETARIAT CVS
~ All Users Names: SECRETARIAT CVS, HomeGroupUser$, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\SECRETARIAT CVS\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\SECRETARIAT CVS\AppData\Roaming\
~ %Desktop% : C:\Users\SECRETARIAT CVS\Desktop\
~ %Favorites% : C:\Users\SECRETARIAT CVS\Favorites\
~ %LocalAppData% : C:\Users\SECRETARIAT CVS\AppData\Local\
~ %StartMenu% : C:\Users\SECRETARIAT CVS\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 71 Go of 101 Go)
D: Hard drive, Flash drive, Thumb drive (Free 164 Go of 164 Go)
E: Hard drive, Flash drive, Thumb drive (Free 200 Go of 201 Go)
F: CD-ROM drive (Not Inserted)



---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Security Center: 38 Scanned in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.5B6ED1B57DBFF18D405A0260559B571E] - (.Microsoft Corporation - Explorateur Windows.) (.26/07/2012 - 04:50:01.) -- C:\Windows\Explorer.exe [2114936]
[MD5.7109FF769FFF962869C50D720F7AA7D7] - (.Microsoft Corporation - Application de démarrage de Windows.) (.26/07/2012 - 04:21:01.) -- C:\Windows\System32\Wininit.exe [101376]
[MD5.C024001390FBA48FD77605E90E42FBE7] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.26/07/2012 - 04:20:25.) -- C:\Windows\System32\wininet.dll [1775104]
[MD5.C06BA1F360CEF6AB51F41B3D0D5FE92D] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.26/07/2012 - 04:21:01.) -- C:\Windows\System32\Winlogon.exe [411648]
[MD5.FAB11E1AC62579A9BE21593319F8E464] - (.Microsoft Corporation - Bibliothèque de licences.) (.26/07/2012 - 04:20:01.) -- C:\Windows\System32\sppcomapi.dll [246784]
[MD5.6043C72306D5C7B8BC823A1CC49F53B8] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.26/07/2012 - 05:17:16.) -- C:\Windows\system32\Drivers\AFD.sys [438272]
[MD5.48D8C3F2006698691F5AE0BB595FDCC8] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.26/07/2012 - 04:42:31.) -- C:\Windows\system32\Drivers\atapi.sys [22768]
[MD5.00B4FA77732C7823D292ECD672660882] - (.Microsoft Corporation - CD-ROM File System Driver.) (.26/07/2012 - 03:38:28.) -- C:\Windows\system32\Drivers\Cdfs.sys [89088]
[MD5.4E707EC5071DD8F5C29A7410780BD4C3] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.26/07/2012 - 03:33:53.) -- C:\Windows\system32\Drivers\Cdrom.sys [135680]
[MD5.B21FDAC50FCD4CE53C203F097273532A] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.26/07/2012 - 03:34:25.) -- C:\Windows\system32\Drivers\DfsC.sys [92160]
[MD5.0E3FC2062E796F6A9B1ED995E1CBB25E] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.26/07/2012 - 03:34:53.) -- C:\Windows\system32\Drivers\HDAudBus.sys [62464]
[MD5.11EDC37780E8A2F8E311D73F7658A4D7] - (.Microsoft Corporation - Pilote de port i8042.) (.26/07/2012 - 03:36:23.) -- C:\Windows\system32\Drivers\i8042prt.sys [89600]
[MD5.57B0C0D982013C72911A3F5CBA795034] - (.Microsoft Corporation - IP Network Address Translator.) (.26/07/2012 - 03:29:57.) -- C:\Windows\system32\Drivers\IpNat.sys [126976]
[MD5.7E23F6BFB65A90F42359D803D1F335A3] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.26/07/2012 - 03:30:22.) -- C:\Windows\system32\Drivers\MRxSmb.sys [310272]
[MD5.303A053C25E468B9925C22288BEF8484] - (.Microsoft Corporation - MBT Transport driver.) (.26/07/2012 - 03:31:28.) -- C:\Windows\system32\Drivers\netBT.sys [254464]
[MD5.78541BBEC14065243D88D8958BB8AEC2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.26/07/2012 - 05:17:18.) -- C:\Windows\system32\Drivers\ntfs.sys [1614576]
[MD5.8BCE63AF5B52642E832630F862DE96EF] - (.Microsoft Corporation - Pilote de port parallèle.) (.26/07/2012 - 03:38:17.) -- C:\Windows\system32\Drivers\Parport.sys [90624]
[MD5.6E0649D7325D85C47C844EB3267E4625] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.26/07/2012 - 03:30:07.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [88064]
[MD5.2CAD2A13569741C67CD9C52F97E0F992] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) (.26/07/2012 - 03:32:22.) -- C:\Windows\system32\Drivers\rdpdr.sys [156160]
[MD5.0886D9F1B5A5334FBB143A260E4BFB5C] - (.Microsoft Corporation - TDI Translation Driver.) (.26/07/2012 - 05:17:16.) -- C:\Windows\system32\Drivers\tdx.sys [97792]
[MD5.8E15C3D58A8ADE841060661DBA6E7A9B] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.26/07/2012 - 04:39:34.) -- C:\Windows\system32\Drivers\volsnap.sys [282352]
~ Generic Processes: Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/9
~ Mes Favoris (My Favorites) : 1/4
~ Mes Documents (My Documents) : 1/2
~ Mon Bureau (My Desktop) : 1/17
~ Menu demarrer (Programs) : 1/29
~ Hidden Files: Scanned in 00mn 00s



---\\ Processus lancés
[MD5.6F3F0FB3054681EAF9863B86350553C5] - (.Microsoft Corporation - Processus hôte pour Tâches Windows.) -- C:\WINDOWS\system32\taskhostex.exe [53760] [PID.1492]
[MD5.D1D5DAB39DCB4BE0359943738D87409B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [532040] [PID.1952]
[MD5.82F5E8957DC64AD9C3E16C200E0A77EB] - (.IObit - Pas de description.) -- C:\Program Files\IObit\Start Menu 8\StartMenu8.exe [1551680] [PID.2700]
[MD5.55D84E6423872539A3F91877A7D1F1C5] - (...) -- C:\Program Files\IObit\Start Menu 8\InstallServices32.exe [74560] [PID.4064]
[MD5.4811D9DC52AEE953F4FA08DC2951221F] - (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe [181360] [PID.4024]
[MD5.00E4F2C80565767C8C74A02F98DEEBF2] - (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe [190064] [PID.2852]
[MD5.9428A8346787367BF687360B55C540E0] - (.Zbshareware Lab - USB Disk Security.) -- C:\Program Files\USB Disk Security\USBGuard.exe [824224] [PID.1196]
[MD5.B52CC193B9822DCC080C5F60EEDD35F4] - (.L'Aventure Multimedia - Dictionnaire MediaDICO pour Windows.) -- C:\Program Files\Micro Application\9 DICOS Indispensables\MediaDICO9.exe [282112] [PID.3428]
[MD5.A6A1B6B10ADBB6494A3154C6FAEE17CA] - (.L'Aventure Multimedia - Reconnaissance Automatique de Caractères.) -- C:\Program Files\Micro Application\9 DICOS Indispensables\Rac9.exe [225342] [PID.3376]
[MD5.5FFBAA6397033B6ADF341F448F2B4727] - (.Smadsoft - Smadav USB Antivirus & Additional Protectio.) -- C:\Program Files\Smadav\SM?RTP.exe [1556480] [PID.660]
[MD5.C940EC88DBA61C004A4AC94276F8EB73] - (...) -- C:\Program Files\Bible Verse\verse.exe [535040] [PID.2724]
[MD5.3E399A1328181C2A352472369DE2A93A] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [844752] [PID.3540]
[MD5.05339393450FB96031CA2BF8F8FC18E0] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8121856] [PID.1512]
~ Processes Running: Scanned in 00mn 00s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\SECRETARIAT CVS\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] None
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Google Store v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Documents Google v.0.5 (Activé)
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Drive v.6.3 (Activé)
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] YouTube v.4.2.6 (Activé)
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Recherche Google v.0.0.0.20 (Activé)
G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [glmfgahfleepmdfffonfckpmkondpdkg] AccelerateTab v.1.3.1, (Activé) =>PUP.SpeedDial
G2 - GCE: Preference [User Data\Default] [gpfbmpaebheclpaopjodkelcihldloih] Dolce&Gabbana v.2 (Activé)
G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Chrome In-App Payments service v.0.0.4.11 (Activé)
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Gmail v.7 (Activé)
~ Google Browser: 14 Scanned in 00mn 04s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\SECRETARIAT CVS\AppData\Roaming\Mozilla\Firefox\Profiles\04s652no.default\prefs.js
C:\Users\SECRETARIAT CVS\AppData\Roaming\Mozilla\Firefox\Profiles\aynd2j7n.default\prefs.js (.not file.)
M3 - MFPP: Plugins - [SECRETARIAT CVS] -- C:\Users\SECRETARIAT CVS\AppData\Roaming\Mozilla\Firefox\Profiles\04s652no.default\searchplugins\safeguard-secure-search.xml
M3 - MFPP: Plugins - [SECRETARIAT CVS] -- C:\Users\SECRETARIAT CVS\AppData\Roaming\Mozilla\Firefox\Profiles\04s652no.default\searchplugins\yahoo_ff.xml
M0 - MFSP: prefs.js [SECRETARIAT CVS - 04s652no.default] www.google.fr
M2 - MFEP: prefs.js [SECRETARIAT CVS - 04s652no.default\***@***] [] AccelerateTab v1.4.1 (..) =>PUP.SpeedDial
P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\Program Files\Microsoft Office\Office14\NPAUTHZ.dll
P2 - FPN: [HKLM] [@microsoft.com/SharePoint,version=14.0] - (.Microsoft Corporation - The plug-in allows you to open and edit files using Microsoft Office a.) -- C:\Program Files\Microsoft Office\Office14\NPSPWRAP.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.0.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
~ Firefox Browser: 10 Scanned in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.0.) (No version) -- (.not file.)
~ IE Browser: 7 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Speed - {48A789BF-F6D6-4930-9C8B-77855A63EDE1} . (.Secure Speed Dial - Secure Speed Dial.) -- C:\Program Files\Secure Speed Dial\IE\SpeedDial.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll =>Toolbar.Google
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files\Microsoft Office\Office14\URLREDIR.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} . (.Google Inc. - Fast Search.) -- C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll =>Toolbar.Google
~ BHO: 16 Scanned in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline
~ Toolbar: Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop [Public]: Canon MF Toolbox 4.9.lnk . (.CANON INC. - MF Toolbox Application.) -- C:\Program Files\Canon\MF Toolbox Ver4.9\MFTBOX.exe
O4 - GS\Desktop [Public]: CCleaner.lnk . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>Piriform Ltd
O4 - GS\Desktop [Public]: Dicos Encarta.lnk . (.Microsoft Corporation - Microsoft Encarta Dictionaries.) -- C:\Program Files\Microsoft Encarta\Microsoft Encarta 2009 - Collection DVD\EDICT.exe
O4 - GS\Desktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O4 - GS\Desktop [Public]: Microsoft Encarta 2009 - Collection DVD.lnk . (.Microsoft Corporation - Microsoft Encarta.) -- C:\Program Files\Microsoft Encarta\Microsoft Encarta 2009 - Collection DVD\ENCARTA.exe
O4 - GS\Desktop [Public]: Microsoft Encarta Junior 2009.lnk . (.Microsoft Corporation - Microsoft Encarta.) -- C:\Program Files\Microsoft Encarta\Microsoft Encarta Junior 2009\ENCARTA.exe
O4 - GS\Desktop [Public]: Microsoft Encarta Maths.lnk . (.Microsoft Corporation - Microsoft Student Graphing Calculator Appli.) -- C:\Program Files\Microsoft Etudes\Microsoft Encarta Maths\ENCCALC.exe
O4 - GS\Desktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - GS\Desktop [Public]: Skype.lnk . (...) -- C:\Windows\Installer\{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}\SkypeIcon.exe
O4 - GS\Desktop [Public]: Smart Defrag 2.lnk . (.IObit - Smart Defrag v2.) -- C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe
O4 - GS\Desktop [Public]: VLC media player.lnk . (...) -- C:\Program Files\VideoLAN\VLC\vlc.exe =>.VideoLAN
O4 - GS\Program [Public]: Adobe Reader X.lnk . (...) -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AA1000000001}\SC_Reader.ico
O4 - GS\Program [Public]: Desktop.lnk - Clé orpheline
O4 - GS\Program [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - GS\Program [Public]: Windows Store.lnk . (...) -- C:\WINDOWS\WinStore\WinStore.htm
O4 - GS\Accessories [Public]: Calculator.lnk . (.Microsoft Corporation - Calculatrice de Windows.) -- C:\WINDOWS\system32\calc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - Accessoire du panneau de saisie mathématiqu.) -- C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) -- C:\WINDOWS\system32\mspaint.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.) -- C:\WINDOWS\system32\mstsc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture d'écran.) -- C:\WINDOWS\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sound Recorder.lnk . (.Microsoft Corporation - Magnétophone Windows.) -- C:\WINDOWS\system32\SoundRecorder.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Steps Recorder.lnk . (.Microsoft Corporation - Enregistreur d'actions.) -- C:\WINDOWS\system32\psr.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sticky Notes.lnk . (.Microsoft Corporation - Pense-bête.) -- C:\WINDOWS\system32\StikyNot.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) -- C:\WINDOWS\system32\WFS.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) -- C:\Program Files\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: XPS Viewer.lnk . (.Microsoft Corporation - Visionneuse XPS.) -- C:\WINDOWS\system32\xpsrchvw.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) -- C:\WINDOWS\system32\charmap.exe =>.Microsoft Corporation
O4 - GS\QuickLaunch [SECRETARIAT CVS]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O4 - GS\QuickLaunch [SECRETARIAT CVS]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\QuickLaunch [SECRETARIAT CVS]: USB Disk Security.lnk . (.Zbshareware Lab - USB Disk Security.) -- C:\Program Files\USB Disk Security\USBGuard.exe
O4 - GS\TaskBar [SECRETARIAT CVS]: File Explorer.lnk . (...) -- C:\Users\SECRETARIAT CVS\AppData\Roaming\Microsoft\Windows\Libraries
O4 - GS\TaskBar [SECRETARIAT CVS]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O4 - GS\TaskBar [SECRETARIAT CVS]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\TaskBar [SECRETARIAT CVS]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - GS\TaskBar [SECRETARIAT CVS]: On-Screen Keyboard.lnk . (.Microsoft Corporation - Accessibilité au Clavier visuel.) -- C:\WINDOWS\system32\osk.exe
O4 - GS\TaskBar [SECRETARIAT CVS]: Windows.Defender.lnk . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe
O4 - GS\Program [SECRETARIAT CVS]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\Accessories [SECRETARIAT CVS]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) -- C:\WINDOWS\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\SendTo [SECRETARIAT CVS]: Skype.lnk . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O4 - GS\Desktop [SECRETARIAT CVS]: 07-Aphorismes-et-reflexions-.lnk . (...) -- C:\Program Files\07-Aphorismes-et-reflexions-diverses.pps
O4 - GS\Desktop [SECRETARIAT CVS]: Ashampoo Burning Studio.lnk . (.ashampoo Technology GmbH & Co. KG - Burning Studio 8.) -- C:\Program Files\Ashampoo\Ashampoo Burning Studio 8\burningstudio.exe
O4 - GS\Desktop [SECRETARIAT CVS]: Bible Gratuite.lnk . (.Mission Chrétienne Evangélique - Pas de description.) -- C:\Program Files\BibleGratuite\freebible.exe
O4 - GS\Desktop [SECRETARIAT CVS]: Calculator special.lnk . (.J. Ollivier - Pas de description.) -- C:\Program Files\khi3\khi3.exe
O4 - GS\Desktop [SECRETARIAT CVS]: Code de la Route.lnk . (...) -- C:\Program Files\Code route.pdf
O4 - GS\Desktop [SECRETARIAT CVS]: Conjugaison.lnk . (...) -- C:\Users\SECRETARIAT CVS\AppData\Roaming\Microsoft\Installer\{F593B63F-2F70-401F-BB30-87BD5282AA98}\_566d645b.exe
O4 - GS\Desktop [SECRETARIAT CVS]: CONTRAT DE TRAVAIL - Raccourci.lnk . (...) -- C:\CONTRAT DE TRAVAIL.doc
O4 - GS\Desktop [SECRETARIAT CVS]: DECRET Minier.lnk . (...) -- C:\decret_038_2003.pdf
O4 - GS\Desktop [SECRETARIAT CVS]: Documents.lnk . (...) -- C:\Users\SECRETARIAT CVS\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms
O4 - GS\Desktop [SECRETARIAT CVS]: Microsoft Access 2010.lnk . (...) -- C:\Windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
O4 - GS\Desktop [SECRETARIAT CVS]: Microsoft Excel 2010.lnk . (...) -- C:\Windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
O4 - GS\Desktop [SECRETARIAT CVS]: Microsoft Word 2010.lnk . (...) -- C:\Windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
O4 - GS\Desktop [SECRETARIAT CVS]: Ordinateur.lnk - Clé orpheline
O4 - GS\Desktop [SECRETARIAT CVS]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files\ZHPDiag\ZHPhep.exe =>.Nicolas Coolman
O4 - GS\Desktop [SECRETARIAT CVS]: ZHPFix.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files\ZHPDiag\ZHPFix\ZHPhep.exe =>.Nicolas Coolman
O4 - GS\Desktop [SECRETARIAT CVS]: zuma.lnk . (...) -- C:\Program Files\Zuma Deluxe ok\zuma.exe
~ Global Startup: 58 Scanned in 00mn 02s



---\\ Applications lancées au démarrage du sytème (O4)
O4 - GS\Startup [SECRETARIAT CVS]: Bible Verse.lnk . (...) -- C:\Program Files\Bible Verse\verse.exe
O4 - GS\Startup [SECRETARIAT CVS]: Sidebar.lnk . (...) -- C:\Program Files\Windows Sidebar\sidebar.exe (.not file.)
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [USB Antivirus] . (.Zbshareware Lab - USB Disk Security.) -- C:\Program Files\USB Disk Security\USBGuard.exe
O4 - HKCU\..\Run: [ISUSPM Startup] . (.InstallShield Software Corporation - InstallShield Update Service Update Manager.) -- C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
O4 - HKCU\..\Run: [MediaDico9] . (.L'Aventure Multimedia - Pas de description.) -- C:\Program Files\Micro Application\9 DICOS Indispensables\LanceMediaDICO9.exe
O4 - HKCU\..\Run: [SM?RT-Protection] . (.Smadsoft - Smadav USB Antivirus & Additional Protectio.) -- C:\Program Files\Smadav\SM?RTP.exe
O4 - HKUS\S-1-5-21-4224910205-1912749579-2219350963-1001\..\Run: [ISUSPM Startup] . (.InstallShield Software Corporation - InstallShield Update Service Update Manager.) -- C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
O4 - HKUS\S-1-5-21-4224910205-1912749579-2219350963-1001\..\Run: [MediaDico9] . (.L'Aventure Multimedia - Pas de description.) -- C:\Program Files\Micro Application\9 DICOS Indispensables\LanceMediaDICO9.exe
O4 - HKUS\S-1-5-21-4224910205-1912749579-2219350963-1001\..\Run: [SM?RT-Protection] . (.Smadsoft - Smadav USB Antivirus & Additional Protectio.) -- C:\Program Files\Smadav\SM?RTP.exe
~ Application: Scanned in 00mn 00s



---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll =>.Microsoft Corporation
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} . (...) -- C:\Program Files\Skype\Toolbars\Internet Explorer\favicon.ico
O9 - Extra button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\Microsoft Office\Office14\ONBTTN~1.dll =>.Microsoft Corporation
O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} -- Clé orpheline
~ IE Extra Buttons: Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\WINDOWS\system32\napinsp.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\WINDOWS\system32\pnrpnsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\WINDOWS\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\WINDOWS\system32\NLAapi.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll =>.Microsoft Corporation
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
~ Winsock: 6 Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{CDA8FD42-2425-4801-86DF-BE46C4316681}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{CDA8FD42-2425-4801-86DF-BE46C4316681}: DhcpDomain = Planet
O17 - HKLM\System\CS1\Services\Tcpip\..\{CDA8FD42-2425-4801-86DF-BE46C4316681}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{CDA8FD42-2425-4801-86DF-BE46C4316681}: DhcpDomain = Planet
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
~ Domain: Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s



---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {1984DD45-52CF-49cd-AB77-18F378FEA264} . (.Stardock - Stardock Fences Shell Extension.) -- C:\Program Files\Stardock\Fences\FencesMenu.dll
~ STS/SSO: Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc
O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: SecureUpdate (SecureUpdateSvc) . (...) - C:\Program Files\Secure Speed Dial\IE\SecureUpdate.exe
O23 - Service: StartMenu8 Service (StartMenuService) . (.IObit - StartMenu8 Services.) - C:\Program Files\IObit\Start Menu 8\StartMenuServices.exe
~ Services: 6 Scanned in 00mn 02s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s



---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1094]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1098]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648]
[MD5.D66F95A8300383FF52CCF8B4BAD88D3E] [APT] [SmartDefragUpdate] (.IObit.) -- C:\Program Files\IObit\Smart Defrag 2\AutoUpdate.exe [691584]
[MD5.60DF839220046BA61D9FB56097F30BCF] [APT] [SmartDefrag_Startup] (.IObit.) -- C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe [1888576]
[MD5.384963FF8E8924C315C339D84846F084] [APT] [StartMenuAutoupdate] (.IObit.) -- C:\Program Files\IObit\Start Menu 8\AutoUpdate.exe [813888]
~ Scheduled Task: 8 Scanned in 00mn 03s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 12.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe =>.Microsoft Corporation
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\System32\mscories.dll
~ Active Setup: 9 Scanned in 00mn 00s



---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (BasicDisplay) . (.Microsoft Corporation - Microsoft Basic Display Driver.) - C:\Windows\system32\drivers\BasicDisplay.sys
O41 - Driver: (BasicRender) . (.Microsoft Corporation - Microsoft Basic Render Driver.) - C:\Windows\system32\drivers\BasicRender.sys
O41 - Driver: cdrom.inf (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\System32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys
O41 - Driver: C:\Windows\System32\drivers\dam.sys (dam) . (.Microsoft Corporation - DAM Kernel Driver.) - C:\Windows\System32\drivers\dam.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (Dfsc) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: mssmbios.inf (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: netnb.inf (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: npsvctrig.inf (npsvctrig) . (.Microsoft Corporation - Named pipe service triggers.) - C:\Windows\system32\drivers\npsvctrig.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys
~ Drivers: 34 Scanned in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: 8GadgetPack - (.Helmut Buhler.) [HKLM] -- {F7EF899D-0339-4279-8FB1-96801D829A3F}
O42 - Logiciel: AccelerateTab - (.AccelerateTab.) [HKLM] -- AccelerateTab_is1 =>PUP.SpeedDial
O42 - Logiciel: Adobe Reader X (10.1.0) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
O42 - Logiciel: Ashampoo burning studio 8 - (...) [HKLM] -- Ashampoo burning studio 8
O42 - Logiciel: Bible Verse 2.02 - (.Vladimir Rybant.) [HKLM] -- Bible Verse_is1
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner =>Piriform Ltd
O42 - Logiciel: Canon MF Toolbox 4.9.1.1.mf11 - (.Canon Inc..) [HKLM] -- {6767DFEE-8909-453A-B553-C7693912B2EB}
O42 - Logiciel: Canon MF4400 Series - (.Canon Inc..) [HKLM] -- {4129CA8E-7E75-4eee-BAE5-AA7707AA7708}
O42 - Logiciel: Conjugaison - (.Vinz.) [HKLM] -- {F593B63F-2F70-401F-BB30-87BD5282AA98}
O42 - Logiciel: Fences - (.Stardock Corporation.) [HKLM] -- Fences
O42 - Logiciel: Fences - (.Stardock Corporation.) [HKLM] -- {10CD364B-FFCC-48BE-B469-B9622A033075}
O42 - Logiciel: Free Bible 0.92 - (.BibleGratuite.org.) [HKLM] -- BibleGratuite_is1
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C} =>Toolbar.Google
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: IObit Apps Toolbar v8.0 - (.Spigot, Inc..) [HKLM] -- {6B7E18B8-59E8-40A2-939A-CCE3673AD8A4} =>PUP.Dealio
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}
O42 - Logiciel: Khi3 - (.Joël Ollivier.) [HKLM] -- {3354DF43-94E0-498E-B68E-1F1F998786AD}
O42 - Logiciel: Malwarebytes Anti-Malware version 1.75.0.1300 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Micro Application - 9 DICOS Indispensables - (...) [HKLM] -- MediaDICO9
O42 - Logiciel: Microsoft Encarta 2009 - Collection - (.Microsoft Corporation.) [HKLM] -- {09180081-2C94-4A67-8E55-8483C019C7D2}
O42 - Logiciel: Microsoft Encarta Maths - (.Microsoft Corporation.) [HKLM] -- {07183840-959A-4B0D-8825-2C533F0DDB19}
O42 - Logiciel: Mozilla Firefox 24.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 24.0 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
O42 - Logiciel: Skype(TM) 4.0 - (.Skype Technologies S.A..) [HKLM] -- {24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}
O42 - Logiciel: Smart Defrag 2 - (.IObit.) [HKLM] -- Smart Defrag 2_is1
O42 - Logiciel: Start Menu 8 - (.IObit.) [HKLM] -- IObit_StartMenu8_is1
O42 - Logiciel: USB Disk Security - (.Zbshareware Lab.) [HKLM] -- USB Disk Security_is1
O42 - Logiciel: VLC media player 1.1.3 - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN
O42 - Logiciel: WinRAR 4.20 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver
~ Logic: 62 Scanned in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\8GadgetPack]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Google]
[HKCU\Software\AppDataLow\Software\IObit Apps]
[HKCU\Software\AppDataLow]
[HKCU\Software\Canon]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Google]
[HKCU\Software\IObit Apps]
[HKCU\Software\InstallShield]
[HKCU\Software\Intel]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\RegisteredApplications]
[HKCU\Software\SMAD?V]
[HKCU\Software\Skype]
[HKCU\Software\Stardock]
[HKCU\Software\TeleCharger]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\ashampoo]
[HKLM\Software\8GadgetPack]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Adobe]
[HKLM\Software\AdwCleaner]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Ashampoo]
[HKLM\Software\Canon]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Google]
[HKLM\Software\IObit Apps]
[HKLM\Software\IObit]
[HKLM\Software\Intel]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware (Trial)]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\Micro Application]
[HKLM\Software\MimarSinan]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Secure]
[HKLM\Software\Skype]
[HKLM\Software\Stardock]
[HKLM\Software\Uniblue]
[HKLM\Software\VideoLAN]
[HKLM\Software\Volatile]
[HKLM\Software\WinRAR]
[HKLM\Software\Wow6432Node]
[HKLM\Software\mozilla.org]
~ Key Software: 95 Scanned in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 22/10/2013 - 13:42:04 - [111,143] ----D C:\Program Files\Adobe
O43 - CFD: 22/10/2013 - 13:42:07 - [86,164] ----D C:\Program Files\Ashampoo
O43 - CFD: 22/10/2013 - 13:51:01 - [0,695] ----D C:\Program Files\Bible Verse
O43 - CFD: 21/10/2013 - 19:13:09 - [6,636] ----D C:\Program Files\BibleGratuite
O43 - CFD: 22/10/2013 - 16:21:02 - [12,824] ----D C:\Program Files\Canon
O43 - CFD: 20/10/2013 - 12:34:07 - [3,721] ----D C:\Program Files\CCleaner =>Piriform Ltd
O43 - CFD: 22/10/2013 - 17:00:15 - [276,138] ----D C:\Program Files\Common Files
O43 - CFD: 22/10/2013 - 13:51:02 - [3,087] ----D C:\Program Files\Conjugaison
O43 - CFD: 20/10/2013 - 11:57:18 - [0] -SH-D C:\Program Files\Fichiers communs
O43 - CFD: 22/10/2013 - 13:42:17 - [340,077] ----D C:\Program Files\Google
O43 - CFD: 20/10/2013 - 13:48:14 - [16,678] ----D C:\Program Files\Intel
O43 - CFD: 26/07/2012 - 10:23:29 - [5,035] ----D C:\Program Files\Internet Explorer
O43 - CFD: 22/10/2013 - 13:42:25 - [88,334] ----D C:\Program Files\IObit
O43 - CFD: 22/10/2013 - 13:51:10 - [21,052] ----D C:\Program Files\khi3
O43 - CFD: 22/10/2013 - 21:42:44 - [13,322] ----D C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 21/10/2013 - 19:11:48 - [136,543] ----D C:\Program Files\Micro Application
O43 - CFD: 21/10/2013 - 19:18:42 - [38,002] ----D C:\Program Files\Microsoft Analysis Services
O43 - CFD: 21/10/2013 - 19:14:58 - [-1555,935] ----D C:\Program Files\Microsoft Encarta
O43 - CFD: 21/10/2013 - 19:17:25 - [24,469] ----D C:\Program Files\Microsoft Etudes
O43 - CFD: 21/10/2013 - 19:19:49 - [942,205] ----D C:\Program Files\Microsoft Office
O43 - CFD: 21/10/2013 - 19:19:48 - [1,722] ----D C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 21/10/2013 - 19:19:48 - [0,757] ----D C:\Program Files\Microsoft Sync Framework
O43 - CFD: 21/10/2013 - 19:20:05 - [0,312] ----D C:\Program Files\Microsoft Synchronization Services
O43 - CFD: 21/10/2013 - 19:19:18 - [1,314] ----D C:\Program Files\Microsoft Visual Studio 8
O43 - CFD: 22/10/2013 - 14:57:09 - [7,797] ----D C:\Program Files\Microsoft.NET
O43 - CFD: 22/10/2013 - 13:51:11 - [48,683] ----D C:\Program Files\Mozilla Firefox
O43 - CFD: 22/10/2013 - 13:51:11 - [0,216] ----D C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 22/10/2013 - 14:57:09 - [0,025] ----D C:\Program Files\MSBuild
O43 - CFD: 22/10/2013 - 14:49:33 - [37,181] ----D C:\Program Files\Reference Assemblies
O43 - CFD: 21/10/2013 - 19:39:21 - [14,184] ----D C:\Program Files\Secure Speed Dial
O43 - CFD: 20/10/2013 - 12:46:04 - [29,270] R---D C:\Program Files\Skype
O43 - CFD: 21/10/2013 - 19:32:34 - [1,843] ----D C:\Program Files\Smadav
O43 - CFD: 22/10/2013 - 13:42:32 - [9,051] ----D C:\Program Files\Stardock
O43 - CFD: 26/07/2012 - 08:04:59 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 21/10/2013 - 19:27:49 - [2,636] ----D C:\Program Files\USB Disk Security
O43 - CFD: 21/10/2013 - 19:29:54 - [75,012] ----D C:\Program Files\VideoLAN
O43 - CFD: 26/07/2012 - 10:23:29 - [4,710] ----D C:\Program Files\Windows Defender
O43 - CFD: 26/07/2012 - 10:27:22 - [7,185] ----D C:\Program Files\Windows Journal
O43 - CFD: 26/07/2012 - 10:23:29 - [5,466] ----D C:\Program Files\Windows Mail =>.Microsoft Corporation
O43 - CFD: 26/07/2012 - 10:23:29 - [4,768] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 26/07/2012 - 08:53:56 - [0,209] ----D C:\Program Files\Windows Multimedia Platform
O43 - CFD: 22/10/2013 - 15:02:33 - [7,243] ----D C:\Program Files\Windows NT
O43 - CFD: 26/07/2012 - 10:23:29 - [5,226] ----D C:\Program Files\Windows Photo Viewer
O43 - CFD: 26/07/2012 - 08:53:56 - [0,209] ----D C:\Program Files\Windows Portable Devices
O43 - CFD: 22/10/2013 - 14:57:10 - [13,303] -SH-D C:\Program Files\Windows Sidebar
O43 - CFD: 23/10/2013 - 15:23:22 - [851,326] --H-D C:\Program Files\WindowsApps
O43 - CFD: 21/10/2013 - 19:29:30 - [4,131] ----D C:\Program Files\WinRAR
O43 - CFD: 24/10/2013 - 14:19:36 - [17,019] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 21/10/2013 - 19:05:32 - [16,234] ----D C:\Program Files\Zuma Deluxe ok
O43 - CFD: 22/10/2013 - 13:42:08 - [3,439] ----D C:\Program Files\Common Files\Adobe
O43 - CFD: 21/10/2013 - 19:20:04 - [0,095] ----D C:\Program Files\Common Files\DESIGNER
O43 - CFD: 22/10/2013 - 13:42:09 - [1,706] ----D C:\Program Files\Common Files\InstallShield
O43 - CFD: 22/10/2013 - 14:57:07 - [259,050] ----D C:\Program Files\Common Files\microsoft shared
O43 - CFD: 26/07/2012 - 08:53:56 - [0,003] ----D C:\Program Files\Common Files\Services
O43 - CFD: 20/10/2013 - 12:46:04 - [1,853] ----D C:\Program Files\Common Files\Skype
O43 - CFD: 22/10/2013 - 14:57:07 - [9,994] ----D C:\Program Files\Common Files\System
O43 - CFD: 22/10/2013 - 13:44:04 - [122,694] ----D C:\ProgramData\Adobe
O43 - CFD: 26/07/2012 - 08:04:44 - [0] -SH-D C:\ProgramData\Application Data
O43 - CFD: 20/10/2013 - 11:57:18 - [0] -SH-D C:\ProgramData\Bureau
O43 - CFD: 22/10/2013 - 09:33:12 - [0] --H-D C:\ProgramData\Common Files
O43 - CFD: 26/07/2012 - 08:04:44 - [0] -SH-D C:\ProgramData\Desktop
O43 - CFD: 26/07/2012 - 08:04:44 - [0] -SH-D C:\ProgramData\Documents
O43 - CFD: 21/10/2013 - 18:46:37 - [0,012] ----D C:\ProgramData\Google
O43 - CFD: 22/10/2013 - 13:44:04 - [0] ----D C:\ProgramData\InstallShield
O43 - CFD: 22/10/2013 - 13:56:16 - [98,445] ----D C:\ProgramData\IObit
O43 - CFD: 22/10/2013 - 21:42:41 - [16,242] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 20/10/2013 - 11:57:18 - [0] -SH-D C:\ProgramData\Menu Démarrer
O43 - CFD: 23/10/2013 - 11:12:14 - [568,327] -S--D C:\ProgramData\Microsoft
O43 - CFD: 21/10/2013 - 19:22:12 - [0,061] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 20/10/2013 - 11:57:18 - [0] -SH-D C:\ProgramData\Modèles
O43 - CFD: 21/10/2013 - 20:28:13 - [0] ----D C:\ProgramData\Mozilla
O43 - CFD: 20/10/2013 - 12:02:51 - [0,023] ----D C:\ProgramData\PRICache
O43 - CFD: 26/07/2012 - 10:27:21 - [0,001] ----D C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 20/10/2013 - 12:46:04 - [19,087] ----D C:\ProgramData\Skype
O43 - CFD: 26/07/2012 - 08:04:44 - [0] -SH-D C:\ProgramData\Start Menu
O43 - CFD: 26/07/2012 - 08:04:44 - [0] -SH-D C:\ProgramData\Templates
O43 - CFD: 21/10/2013 - 19:33:34 - [0] ----D C:\ProgramData\Zbshareware Lab
O43 - CFD: 22/10/2013 - 13:56:18 - [0] ----D C:\ProgramData\{5A85B23A-4B58-47D1-9B9C-DFBD7866099F}
O43 - CFD: 22/10/2013 - 13:56:19 - [6,261] --H-D C:\ProgramData\{A3A26C56-02C3-4F76-A033-12EE2FB52AE6}
O43 - CFD: 22/10/2013 - 10:15:50 - [0] ----D C:\ProgramData\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
O43 - CFD: 22/10/2013 - 13:56:19 - [0] ----D C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
O43 - CFD: 20/10/2013 - 12:02:46 - [0] ----D C:\Users\SECRETARIAT CVS\AppData\Roaming\Adobe
O43 - CFD: 22/10/2013 - 10:14:08 - [0,001] ----D C:\Users\SECRETARIAT CVS\AppData\Roaming\Apple Computer
O43 - CFD: 21/10/2013 - 20:40:10 - [0] ----D C:\Users\SECRETARIAT CVS\AppData\Roaming\Ashampoo
O43 - CFD: 22/10/2013 - 16:31:08 - [0] ----D C:\Users\SECRETARIAT CVS\AppData\Roaming\Canon
O43 - CFD: 22/10/2013 - 22:22:15 - [0] ----D C:\Users\SECRETARIAT CVS\AppData\Roaming\Fences
O43 - CFD: 20/10/2013 - 12:51:25 - [0] ----D C:\Users\SECRETARIAT CVS\AppData\Roaming\GetRightToGo
O43 - CFD: 21/10/2013 - 19:12:14 - [0] ----D C:\Users\SECRETARIAT CVS\AppData\Roaming\Google
O43 - CFD: 22/10/2013 - 15:20:43 - [0] ----D C:\Users\SECRETARIAT CVS\AppData\Roaming\Identities
O43 - CFD: 22/10/2013 - 16:26:08 - [1,999] ----D C:\Users\SECRETARIAT CVS\AppData\Roaming\IObit
O43 - CFD: 22/10/2013 - 21:47:29 - [0] ----D C:\Users\SECRETARIAT CVS\AppData\Roaming\Macromedia
O43 - CFD: 22/10/2013 - 21:43:48 - [4,124] ----D C:\Users\SECRETARIAT CVS\AppData\Roaming\Malwarebytes
O43 - CFD: 22/10/2013 - 16:24:31 - [6,178] -S--D C:\Users\SECRETARIAT CVS\AppData\Roaming\Microsoft
O43 - CFD: 22/10/2013 - 13:44:49 - [26,243] ----D C:\Users\SECRETARIAT CVS\AppData\Roaming\Mozilla
O43 - CFD: 22/10/2013 - 09:00:41 - [0,048] ----D C:\Users\SECRETARIAT CVS\AppData\Roaming\Skype
O43 - CFD: 21/10/2013 - 19:32:06 - [2,531] ----D C:\Users\SECRETARIAT CVS\AppData\Roaming\Smadav
O43 - CFD: 22/10/2013 - 21:46:50 - [4,307] ----D C:\Users\SECRETARIAT CVS\AppData\Roaming\Stardock
O43 - CFD: 21/10/2013 - 19:30:11 - [0,074] ----D C:\Users\SECRETARIAT CVS\AppData\Roaming\vlc
O43 - CFD: 21/10/2013 - 20:25:27 - [0] ----D C:\Users\SECRETARIAT CVS\AppData\Roaming\WinRAR
O43 - CFD: 21/10/2013 - 19:27:52 - [0] ----D C:\Users\SECRETARIAT CVS\AppData\Roaming\Zbshareware Lab
O43 - CFD: 24/10/2013 - 14:22:00 - [0,018] ----D C:\Users\SECRETARIAT CVS\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 22/10/2013 - 14:54:59 - [0] -SH-D C:\Users\SECRETARIAT CVS\AppData\Local\Application Data
O43 - CFD: 22/10/2013 - 12:53:07 - [0] ----D C:\Users\SECRETARIAT CVS\AppData\Local\Clipboarder
O43 - CFD: 22/10/2013 - 13:44:11 - [67,718] ----D C:\Users\SECRETARIAT CVS\AppData\Local\Google
O43 - CFD: 22/10/2013 - 14:54:59 - [0] -SH-D C:\Users\SECRETARIAT CVS\AppData\Local\Historique
O43 - CFD: 23/10/2013 - 15:02:41 - [143,047] ----D C:\Users\SECRETARIAT CVS\AppData\Local\Microsoft
O43 - CFD: 21/10/2013 - 19:18:33 - [0] ----D C:\Users\SECRETARIAT CVS\AppData\Local\Microsoft Help
O43 - CFD: 22/10/2013 - 13:44:41 - [14,011] ----D C:\Users\SECRETARIAT CVS\AppData\Local\Mozilla
O43 - CFD: 22/10/2013 - 14:55:18 - [103,689] ----D C:\Users\SECRETARIAT CVS\AppData\Local\Packages
O43 - CFD: 22/10/2013 - 21:42:22 - [0] ----D C:\Users\SECRETARIAT CVS\AppData\Local\Programs
O43 - CFD: 22/10/2013 - 14:10:06 - [0] ----D C:\Users\SECRETARIAT CVS\AppData\Local\Sidebar7
O43 - CFD: 24/10/2013 - 14:21:15 - [1,498] ----D C:\Users\SECRETARIAT CVS\AppData\Local\Temp
O43 - CFD: 22/10/2013 - 14:54:59 - [0] -SH-D C:\Users\SECRETARIAT CVS\AppData\Local\Temporary Internet Files
O43 - CFD: 21/10/2013 - 19:27:52 - [60,566] ----D C:\Users\SECRETARIAT CVS\AppData\Local\VirtualStore
O43 - CFD: 26/07/2012 - 08:53:44 - [0,004] R---D C:\Users\SECRETARIAT CVS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 26/07/2012 - 08:53:43 - [0,001] R---D C:\Users\SECRETARIAT CVS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 22/10/2013 - 15:20:45 - [0] R---D C:\Users\SECRETARIAT CVS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 26/07/2012 - 08:53:44 - [0] ----D C:\Users\SECRETARIAT CVS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 22/10/2013 - 21:51:03 - [0,002] R---D C:\Users\SECRETARIAT CVS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 26/07/2012 - 08:53:43 - [0,005] R---D C:\Users\SECRETARIAT CVS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 22/10/2013 - 14:55:20 - [0,003] ----D C:\Users\SECRETARIAT CVS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
~ Program Folder: 121 Scanned in 00mn 09s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.F7154C29BA9207BEF97A75B273B1EF3A] - 20/10/2013 - 10:56:07 ---A- . (...) -- C:\Windows\System32\netcfg-64968.txt [149]
O44 - LFC:[MD5.48DDFE7F3C91842749B7E663B0B79891] - 20/10/2013 - 10:56:07 ---A- . (...) -- C:\Windows\System32\netcfg-65265.txt [152]
O44 - LFC:[MD5.DC5AB81C800FFDAE2C16273C22BEAB6B] - 20/10/2013 - 10:56:07 ---A- . (...) -- C:\Windows\System32\netcfg-65468.txt [156]
O44 - LFC:[MD5.400D75DD81FA4467833C1643DF3AEE1D] - 20/10/2013 - 10:56:12 ---A- . (...) -- C:\Windows\System32\netcfg-70078.txt [142]
O44 - LFC:[MD5.DF6A09FAFBB6DAEBC9E3E9ED358E45F4] - 20/10/2013 - 10:56:12 ---A- . (...) -- C:\Windows\System32\netcfg-70359.txt [151]
O44 - LFC:[MD5.5D7632B6CD3792AFB78E585F65139D1D] - 20/10/2013 - 10:56:12 ---A- . (...) -- C:\Windows\System32\netcfg-70656.txt [152]
O44 - LFC:[MD5.410E9022CF410786DEFB6F72F6D2A124] - 20/10/2013 - 10:56:13 ---A- . (...) -- C:\Windows\System32\netcfg-70828.txt [152]
O44 - LFC:[MD5.DBA311666EE68046E631193B61538326] - 20/10/2013 - 10:56:13 ---A- . (...) -- C:\Windows\System32\netcfg-71031.txt [149]
O44 - LFC:[MD5.3BAF9333F21DBAD20890833D11F62660] - 20/10/2013 - 10:56:13 ---A- . (...) -- C:\Windows\System32\netcfg-71265.txt [153]
O44 - LFC:[MD5.9D05CF6DA2945BD7FF952910BAE86193] - 20/10/2013 - 10:56:13 ---A- . (...) -- C:\Windows\System32\netcfg-71609.txt [177]
O44 - LFC:[MD5.25312D3974DD03AFAC603A3CA4F2E24D] - 20/10/2013 - 10:56:18 ---A- . (...) -- C:\Windows\System32\netcfg-72687.txt [1129]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 20/10/2013 - 11:35:04 ---A- . (...) -- C:\Windows\System32\netcfg-2293359.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 20/10/2013 - 11:35:07 ---A- . (...) -- C:\Windows\System32\netcfg-2294250.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 20/10/2013 - 11:35:07 ---A- . (...) -- C:\Windows\System32\netcfg-2297359.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 20/10/2013 - 11:35:07 ---A- . (...) -- C:\Windows\System32\netcfg-2297375.txt [117]
O44 - LFC:[MD5.5FC2E943231ABD2AE60E9F80581F765C] - 20/10/2013 - 12:23:53 ----- . (.Microsoft Corporation - Microsoft Malware Protection Signature Upda.) -- C:\Windows\System32\MpSigStub.exe [238872]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 20/10/2013 - 13:40:49 ---A- . (...) -- C:\Windows\System32\netcfg-9839140.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 20/10/2013 - 13:40:52 ---A- . (...) -- C:\Windows\System32\netcfg-9839171.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 20/10/2013 - 13:40:52 ---A- . (...) -- C:\Windows\System32\netcfg-9842328.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 20/10/2013 - 13:40:52 ---A- . (...) -- C:\Windows\System32\netcfg-9842359.txt [117]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 20/10/2013 - 13:41:15 --HA- . (...) -- C:\Windows\System32\Drivers\Msft_User_WpdFs_01_11_00.Wdf [0]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 20/10/2013 - 19:45:04 ---A- . (...) -- C:\Windows\System32\netcfg-907968.txt [117]
O44 - LFC:[MD5.55B2007097454FF25698DC30BDB08ABC] - 20/10/2013 - 20:07:29 ---A- . (...) -- C:\Windows\PersonalizeEnabler.exe [79872]
O44 - LFC:[MD5.5D9429B9E5FF43D3818E16A160248857] - 20/10/2013 - 20:07:29 ---A- . (...) -- C:\Windows\SLCHook.dll [76288]
O44 - LFC:[MD5.E2411CB89F0EC5E4D18AED0397AB07DD] - 20/10/2013 - 20:07:29 ---A- . (.Microsoft Corporation - Microsoft Software Licensing Service.) -- C:\Windows\slsvc.exe [10240]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 20/10/2013 - 20:58:26 ---A- . (...) -- C:\Windows\System32\netcfg-1931578.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 20/10/2013 - 20:58:26 ---A- . (...) -- C:\Windows\System32\netcfg-1931671.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 20/10/2013 - 20:58:27 ---A- . (...) -- C:\Windows\System32\netcfg-1931703.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 20/10/2013 - 20:58:27 ---A- . (...) -- C:\Windows\System32\netcfg-1932078.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 20/10/2013 - 20:58:30 ---A- . (...) -- C:\Windows\System32\netcfg-1932109.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 20/10/2013 - 21:19:49 ---A- . (...) -- C:\Windows\System32\netcfg-3213953.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 20/10/2013 - 21:25:17 ---A- . (...) -- C:\Windows\System32\netcfg-3542125.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 21/10/2013 - 09:24:10 ---A- . (...) -- C:\Windows\System32\netcfg-41600984.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 21/10/2013 - 09:24:13 ---A- . (...) -- C:\Windows\System32\netcfg-41603625.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 21/10/2013 - 09:24:13 ---A- . (...) -- C:\Windows\System32\netcfg-41606437.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 21/10/2013 - 09:24:13 ---A- . (...) -- C:\Windows\System32\netcfg-41606468.txt [117]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 21/10/2013 - 10:10:01 --HA- . (...) -- C:\Windows\System32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf [0]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 21/10/2013 - 10:21:14 ---A- . (...) -- C:\Windows\System32\netcfg-45026718.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 21/10/2013 - 10:22:09 ---A- . (...) -- C:\Windows\System32\netcfg-45081718.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 21/10/2013 - 11:04:35 ---A- . (...) -- C:\Windows\System32\netcfg-47628359.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 21/10/2013 - 11:20:50 ---A- . (...) -- C:\Windows\System32\netcfg-48603109.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 21/10/2013 - 11:48:42 ---A- . (...) -- C:\Windows\System32\netcfg-50274921.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 21/10/2013 - 17:36:52 ---A- . (...) -- C:\Windows\System32\netcfg-71164046.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 21/10/2013 - 17:36:52 ---A- . (...) -- C:\Windows\System32\netcfg-71164984.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 21/10/2013 - 17:36:52 ---A- . (...) -- C:\Windows\System32\netcfg-71165062.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 21/10/2013 - 17:36:52 ---A- . (...) -- C:\Windows\System32\netcfg-71165109.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 21/10/2013 - 17:36:55 ---A- . (...) -- C:\Windows\System32\netcfg-71165171.txt [117]
O44 - LFC:[MD5.82A13232C05598BFABA48278F810D7C0] - 21/10/2013 - 17:53:08 ---A- . (...) -- C:\Windows\System32\netcfg-72141109.txt [117]
O44 - LFC:[MD5.E4B7AA678FC490CE395EA089DB9CD4E2] - 21/10/2013 - 18:11:36 ---A- . (...) -- C:\logFileUI.txt [1941]
O44 - LFC:[MD5.36932522D014499D7F7B1BB921D05842] - 21/10/2013 - 18:11:42 ---A- . (.InstallShield Software Corporation - InstallShield® unInstalle

Bonjour!
Je tiens à vous remercier sincèrement à vous et tout autre personnage ayant participé pour la résolution de mon problème susévoqué.
Bien à vous.
Mixxon

Bonjour jeamp62!
Puis-je vous transmettre un autre rapport de ZhpDiag d'un pc qui plante (plantage) c-à-d tout reste figé en un moment qu'on travail sur la machine. Vous bouger la souris, rien; le clavier non plus. pourtant le système apparemment semble être en marche mais à l'arrêt.
Merci d'avance.
Mx