rapport otl Fermé

Question

Bonjour, qui pourrait m'analyser rapport otl et me dire ou je dois poster les rapports svp?merci d'avance
ps,mon pc rame depuis 3a 4 jours

Fish66 · Answer

Bonjour,

Oui,Héberge le ici pour qu'on puisse l'analyser..

@+

tititthierry · Answer

voila le raport merci OTL logfile created on: 12/12/2013 7:24:12 - Run 3 OTL by OldTimer - Version 3.2.69.0 Folder = D:\Documents and Settings\Utilisateur PC\Mes documents\Downloads Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 0000080C | Country: Belgique | Language: FRB | Date Format: d/MM/yyyy 1,87 Gb Total Physical Memory | 1,02 Gb Available Physical Memory | 54,23% Memory free 3,72 Gb Paging File | 3,00 Gb Available in Paging File | 80,65% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 61,10 Gb Total Space | 22,24 Gb Free Space | 36,39% Space Free | Partition Type: NTFS Drive D: | 91,56 Gb Total Space | 74,54 Gb Free Space | 81,41% Space Free | Partition Type: NTFS Computer Name: UTILISAT-66BE35 | User Name: Utilisateur PC | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2013/12/12 07:21:56 | 000,602,112 | ---- | M] (OldTimer Tools) -- D:\Documents and Settings\Utilisateur PC\Mes documents\Downloads\OTL.exe PRC - [2013/12/04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe PRC - [2013/12/03 17:01:39 | 000,223,112 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Update\1.3.22.3\GoogleCrashHandler.exe PRC - [2012/08/11 16:43:06 | 000,055,184 | ---- | M] (Apple Inc.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe PRC - [2011/06/15 15:16:48 | 000,997,920 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe PRC - [2011/04/27 15:39:26 | 000,011,736 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe PRC - [2008/04/13 18:34:04 | 001,037,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2004/11/30 13:30:00 | 000,565,309 | ---- | M] (Broadcom Corporation) -- C:\Program Files\D-Link\Logiciel Bluetooth\BTTray.exe PRC - [2004/11/30 13:29:32 | 001,245,268 | ---- | M] (Broadcom Corporation) -- C:\Program Files\D-Link\Logiciel Bluetooth\BTStackServer.exe PRC - [2004/11/30 13:25:22 | 000,163,840 | ---- | M] (Broadcom Corporation) -- C:\Program Files\D-Link\Logiciel Bluetooth\bin\btwdins.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2013/12/04 03:48:04 | 000,399,312 | ---- | M] () -- C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\31.0.1650.63\ppgooglenaclpluginchrome.dll MOD - [2013/12/04 03:48:02 | 004,055,504 | ---- | M] () -- C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\31.0.1650.63\pdf.dll MOD - [2013/12/04 03:47:11 | 000,702,416 | ---- | M] () -- C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\31.0.1650.63\libglesv2.dll MOD - [2013/12/04 03:47:11 | 000,099,792 | ---- | M] () -- C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\31.0.1650.63\libegl.dll MOD - [2013/12/04 03:47:08 | 001,619,408 | ---- | M] () -- C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll MOD - [2012/11/28 14:13:52 | 000,087,952 | ---- | M] () -- C:\Program Files\Fichiers communs\Apple\Apple Application Support\zlib1.dll MOD - [2012/11/28 14:13:30 | 001,242,512 | ---- | M] () -- C:\Program Files\Fichiers communs\Apple\Apple Application Support\libxml2.dll MOD - [2008/04/13 18:33:32 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll MOD - [2004/11/30 13:30:56 | 000,053,248 | ---- | M] () -- C:\Program Files\D-Link\Logiciel Bluetooth\BTKeyInd.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - [2013/12/11 07:14:06 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2013/02/28 17:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012/09/23 15:28:00 | 001,258,856 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService) SRV - [2012/08/11 16:43:06 | 000,055,184 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device) SRV - [2011/04/27 15:39:26 | 000,011,736 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe -- (MsMpSvc) SRV - [2004/11/30 13:25:22 | 000,163,840 | ---- | M] (Broadcom Corporation) [Auto | Running] -- C:\Program Files\D-Link\Logiciel Bluetooth\bin\btwdins.exe -- (btwdins) SRV - [2003/07/28 20:28:22 | 000,089,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE -- (ose) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys -- (esgiguard) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2013/12/12 07:16:35 | 000,040,392 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{C1D1EC72-B388-42B7-A8A7-1F76325DE8AA}\MpKsl5c1d3e06.sys -- (MpKsl5c1d3e06) DRV - [2009/11/19 14:33:20 | 000,051,200 | ---- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ser2pl.sys -- (Ser2pl) DRV - [2006/07/11 14:38:30 | 000,020,480 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers vnetbus.sys -- (nvnetbus) DRV - [2006/07/11 14:38:28 | 000,057,856 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD) DRV - [2006/06/28 10:38:56 | 000,105,088 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers vata.sys -- (nvata) DRV - [2006/06/18 23:40:44 | 000,043,520 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8) DRV - [2006/06/06 05:09:26 | 004,284,928 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService) DRV - [2004/11/30 13:14:28 | 000,017,024 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio) DRV - [2004/11/30 13:13:28 | 000,023,271 | ---- | M] (Broadcom Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\btserial.sys -- (BTSERIAL) DRV - [2004/11/30 13:13:24 | 000,222,876 | ---- | M] (Broadcom Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\btslbcsp.sys -- (BTSLBCSP) DRV - [2004/11/30 13:13:16 | 000,148,040 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS) DRV - [2004/11/30 13:12:14 | 001,241,818 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL) DRV - [2004/11/30 13:10:14 | 000,030,299 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver) DRV - [2004/11/30 13:09:50 | 000,055,288 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\..\SearchScopes,DefaultScope = {24228783-EA17-4D3C-BE03-B5539F886131} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{99A17951-9D99-4A58-9293-C9CB59C4E449}: "URL" = https://www.google.com/webhp?gws_rd=ssl{searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-1993962763-162531612-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl IE - HKU\S-1-5-21-1993962763-162531612-1801674531-1003\..\SearchScopes,DefaultScope = {24228783-EA17-4D3C-BE03-B5539F886131} IE - HKU\S-1-5-21-1993962763-162531612-1801674531-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&FORM=IE8SRC IE - HKU\S-1-5-21-1993962763-162531612-1801674531-1003\..\SearchScopes\{24228783-EA17-4D3C-BE03-B5539F886131}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3311268&CUI=UN20857982642665832&UM=2 IE - HKU\S-1-5-21-1993962763-162531612-1801674531-1003\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = https://www.google.com/webhp?gws_rd=ssl{searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7NDKB_frBE557 IE - HKU\S-1-5-21-1993962763-162531612-1801674531-1003\..\SearchScopes\{99A17951-9D99-4A58-9293-C9CB59C4E449}: "URL" = https://www.google.com/webhp?gws_rd=ssl{searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKU\S-1-5-21-1993962763-162531612-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin ew_plugin pjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20913.0 pctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.3 pGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.3 pGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.2: C:\Program Files\VideoLAN\VLC pvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR ppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Update\1.3.22.3 pGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Update\1.3.22.3 pGoogleUpdate3.dll (Google Inc.) [2013/04/22 13:39:50 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}, CHR - Extension: WhiteSmoke New V6 = C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ibcgjcbeckcdemelifnledhihpaighfk\10.20.3.520_0\ CHR - Extension: Google\u00A0Wallet = C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions mmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_1\ CHR - Extension: Google\u00A0Wallet = C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions mmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\ O1 HOSTS File: ([2013/10/23 18:31:54 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (Programme d'aide de l'Assistant de connexion Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.) O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found. O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Fichiers communs\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation) O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh) O4 - HKU\.DEFAULT..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found O4 - HKU\S-1-5-18..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found O4 - HKU\S-1-5-19..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found O4 - HKU\S-1-5-20..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\BTTray.lnk = C:\Program Files\D-Link\Logiciel Bluetooth\BTTray.exe (Broadcom Corporation) O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1993962763-162531612-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\D-Link\Logiciel Bluetooth\btsendto_ie_ctx.htm () O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1366649505078 (WUWebControl Class) O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1320172396375 (MUWebControl Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 109.88.203.3 62.197.111.140 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EAD68BB8-846B-4E53-AC37-1C7E4E5D3074}: DhcpNameServer = 109.88.203.3 62.197.111.140 O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Fichiers communs\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\widimg {EE7C2AFF-5742-44FF-BD0E-E521B0D3C3BA} - C:\WINDOWS\system32\BTXPPanel.dll (Broadcom Corporation) O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found O18 - Protocol\Filter ext/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation) O20 - AppInit_DLLs: (C:\DOCUME~1\ALLUSE~1\APPLIC~1\Wincert\WIN32C~1.DLL) - File not found O20 - HKLM Winlogon: Shell - (Explorer.exe) - File not found O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: UIHost - (logonui.exe) - File not found O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - File not found O20 - Winlogon\Notify\crypt32chain: DllName - (crypt32.dll) - File not found O20 - Winlogon\Notify\cryptnet: DllName - (cryptnet.dll) - File not found O20 - Winlogon\Notify\cscdll: DllName - (cscdll.dll) - File not found O20 - Winlogon\Notify\ScCertProp: DllName - (wlnotify.dll) - File not found O20 - Winlogon\Notify\Schedule: DllName - (wlnotify.dll) - File not found O20 - Winlogon\Notify\sclgntfy: DllName - (sclgntfy.dll) - File not found O20 - Winlogon\Notify\SensLogn: DllName - (WlNotify.dll) - File not found O20 - Winlogon\Notify ermsrv: DllName - (wlnotify.dll) - File not found O20 - Winlogon\Notify\WgaLogon: DllName - (WgaLogon.dll) - File not found O20 - Winlogon\Notify\wlballoon: DllName - (wlnotify.dll) - File not found O24 - Desktop Components:0 (Ma page d'accueil) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Microsoft\Wallpaper1.bmp O27 - HKLM IFEO\bitguard.exe: Debugger - tasklist.exe File not found O27 - HKLM IFEO\bprotect.exe: Debugger - tasklist.exe File not found O27 - HKLM IFEO\browserdefender.exe: Debugger - tasklist.exe File not found O27 - HKLM IFEO\browserprotect.exe: Debugger - tasklist.exe File not found O29 - HKLM SecurityProviders - (msapsspc.dll) - File not found O29 - HKLM SecurityProviders - (schannel.dll) - File not found O29 - HKLM SecurityProviders - (digest.dll) - File not found O29 - HKLM SecurityProviders - (msnsspc.dll) - File not found O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2011/11/01 12:59:23 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{33e13a92-707e-11e2-bce7-001966055ddd}\Shell - "" = AutoRun O33 - MountPoints2\{33e13a92-707e-11e2-bce7-001966055ddd}\Shell\AutoRun\command - "" = K:\LaunchU3.exe -a O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O36 - AppCertDlls: x64 - (c:\program files\movies toolbar\safetynut\x64\safetycrt.dll) - File not found O36 - AppCertDlls: x86 - (C:\Program Files\Movies Toolbar\SafetyNut\safetycrt.dll) - File not found O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) NetSvcs: 6to4 - File not found NetSvcs: Ias - File not found NetSvcs: Iprip - File not found NetSvcs: Irmon - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: WmdmPmSp - File not found MsConfig - StartUpReg: [b]Adobe ARM[/b] - hkey= - key= - C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated) MsConfig - StartUpReg: [b]Alcmtr[/b] - hkey= - key= - File not found MsConfig - StartUpReg: [b]CTFMON.EXE[/b] - hkey= - key= - File not found MsConfig - StartUpReg: [b]Google Update[/b] - hkey= - key= - C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Update\GoogleUpdate.exe (Google Inc.) MsConfig - StartUpReg: [b]NvCplDaemon[/b] - hkey= - key= - File not found MsConfig - StartUpReg: [b]NvMediaCenter[/b] - hkey= - key= - File not found MsConfig - StartUpReg: [b]nwiz[/b] - hkey= - key= - C:\Program Files\NVIDIA Corporation View wiz.exe () MsConfig - StartUpReg: [b]RTHDCPL[/b] - hkey= - key= - File not found MsConfig - StartUpReg: [b]SkyTel[/b] - hkey= - key= - File not found MsConfig - StartUpReg: [b]SunJavaUpdateSched[/b] - hkey= - key= - C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe (Sun Microsystems, Inc.) MsConfig - State: "system.ini" - 0 MsConfig - State: "win.ini" - 0 MsConfig - State: "bootini" - 2 MsConfig - State: "services" - 0 MsConfig - State: "startup" - 2 SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: MsMpSvc - C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation) SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: SCSI Class - Driver Group SafeBootMin: sermouse.sys - Driver SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vga.sys - Driver SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: MsMpSvc - C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation) SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: SCSI Class - Driver Group SafeBootNet: sermouse.sys - Driver SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vga.sys - Driver SafeBootNet: {1a3e09be-1e45-494b-9174-d7385b45bbf5} - Reg Error: Value error. SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Rendu VML (Vector Graphics Rendering) ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4 ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32 egsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32 hemeui.dll ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Liaison de données Dynamic HTML pour Java ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework ActiveX: {3F7924B9-D148-3141-87B1-68F36043A940} - .NET Framework ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Création avancée ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - Classes Java DirectAnimation ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.8 ActiveX: {5056b317-8d4c-43ee-8543-b9d1e234b8f4} - Mise à jour de sécurité pour Windows XP (KB923789) ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Dossiers Web ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {ACC563BC-4266-43f0-B6ED-9D38C4202C7E} - ActiveX: {B508B3F1-A24A-32C0-B310-85786919EF28} - .NET Framework ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework ActiveX: {C3C986D6-06B1-43BF-90DD-BE30756C00DE} - RevokedRootsUpdate ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Planificateur de tâches ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1 ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Shockwave Flash ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: {EF289A85-8E57-408d-BE47-73B55609861A} - RootsUpdate ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\WINDOWS\system32 undll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE Drivers32: aux - wdmaud.drv File not found Drivers32: aux1 - wdmaud.drv File not found Drivers32: aux2 - wdmaud.drv File not found Drivers32: aux3 - wdmaud.drv File not found Drivers32: aux4 - wdmaud.drv File not found Drivers32: aux5 - wdmaud.drv File not found Drivers32: midi - wdmaud.drv File not found Drivers32: midi1 - wdmaud.drv File not found Drivers32: midi2 - wdmaud.drv File not found Drivers32: midi3 - wdmaud.drv File not found Drivers32: midi4 - wdmaud.drv File not found Drivers32: midi5 - wdmaud.drv File not found Drivers32: midi6 - wdmaud.drv File not found Drivers32: midimapper - midimap.dll File not found Drivers32: mixer - wdmaud.drv File not found Drivers32: mixer1 - wdmaud.drv File not found Drivers32: mixer2 - wdmaud.drv File not found Drivers32: mixer3 - wdmaud.drv File not found Drivers32: mixer4 - wdmaud.drv File not found Drivers32: mixer5 - wdmaud.drv File not found Drivers32: mixer6 - wdmaud.drv File not found Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation) Drivers32: msacm.imaadpcm - imaadp32.acm File not found Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.msadpcm - msadp32.acm File not found Drivers32: msacm.msaudio1 - msaud32.acm File not found Drivers32: msacm.msg711 - msg711.acm File not found Drivers32: msacm.msg723 - msg723.acm File not found Drivers32: msacm.msgsm610 - msgsm32.acm File not found Drivers32: msacm.siren - sirenacm.dll File not found Drivers32: msacm.sl_anet - sl_anet.acm File not found Drivers32: msacm.trspch - tssoft32.acm File not found Drivers32: vidc.cvid - iccvid.dll File not found Drivers32: vidc.I420 - msh263.drv File not found Drivers32: vidc.iv31 - ir32_32.dll File not found Drivers32: vidc.iv32 - ir32_32.dll File not found Drivers32: vidc.iv41 - ir41_32.ax File not found Drivers32: vidc.iv50 - ir50_32.dll File not found Drivers32: vidc.iyuv - iyuv_32.dll File not found Drivers32: vidc.M261 - msh261.drv File not found Drivers32: vidc.M263 - msh263.drv File not found Drivers32: vidc.mrle - msrle32.dll File not found Drivers32: vidc.msvc - msvidc32.dll File not found Drivers32: vidc.uyvy - msyuv.dll File not found Drivers32: vidc.yuy2 - msyuv.dll File not found Drivers32: vidc.yvu9 - tsbyuv.dll File not found Drivers32: vidc.yvyu - msyuv.dll File not found Drivers32: wave - wdmaud.drv File not found Drivers32: wave1 - wdmaud.drv File not found Drivers32: wave2 - wdmaud.drv File not found Drivers32: wave3 - wdmaud.drv File not found Drivers32: wave4 - wdmaud.drv File not found Drivers32: wave5 - wdmaud.drv File not found Drivers32: wave6 - wdmaud.drv File not found Drivers32: wavemapper - msacm32.drv File not found PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin CREATERESTOREPOINT System Restore Service not available. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2013/12/12 07:49:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood [2013/12/11 06:58:47 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Utilisateur PC\Recent [2013/12/10 13:00:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Registry Helper [2013/12/10 12:59:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Utilisateur PC\Application Data\SwvUpdater [2013/12/10 12:58:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Utilisateur PC\Application Data\Tlapia [2013/12/10 12:55:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Utilisateur PC\Application Data\SIGMA SPORT BC 506 user guide [2013/11/26 03:44:46 | 000,389,120 | ---- | C] (SafeApp Software, LLC) -- C:\WINDOWS\System32\RegistryHelperLM.ocx [2013/11/22 19:42:41 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Utilisateur PC\Mes documents\bapteme lyse [2013/11/14 15:44:53 | 000,051,200 | ---- | C] (Prolific Technology Inc.) -- C:\WINDOWS\System32\drivers\ser2pl.sys [2013/11/14 15:44:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Spy EasyUpdate [2013/11/14 15:44:45 | 000,000,000 | ---D | C] -- C:\Program Files\SpyEasyUpdate [1 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2013/12/12 07:34:52 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin [2013/12/12 07:21:20 | 000,000,424 | -H-- | M] () -- C:\WINDOWS asks\MP Scheduled Scan.job [2013/12/12 07:16:37 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2013/12/12 07:16:33 | 000,000,432 | ---- | M] () -- C:\WINDOWS asks\AmiUpdXp.job [2013/12/12 07:16:22 | 000,001,068 | ---- | M] () -- C:\WINDOWS asks\GoogleUpdateTaskMachineCore.job [2013/12/12 07:16:15 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2013/12/12 07:13:10 | 000,001,002 | ---- | M] () -- C:\WINDOWS asks\Adobe Flash Player Updater.job [2013/12/12 07:10:30 | 000,001,184 | ---- | M] () -- C:\WINDOWS asks\GoogleUpdateTaskUserS-1-5-21-1993962763-162531612-1801674531-1003UA.job [2013/12/12 07:10:20 | 000,001,072 | ---- | M] () -- C:\WINDOWS asks\GoogleUpdateTaskMachineUA.job [2013/12/11 17:06:00 | 000,001,132 | ---- | M] () -- C:\WINDOWS asks\GoogleUpdateTaskUserS-1-5-21-1993962763-162531612-1801674531-1003Core.job [2013/12/11 07:14:02 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe [2013/12/11 07:14:00 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2013/12/11 07:05:21 | 000,213,672 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2013/12/10 22:34:21 | 000,000,502 | ---- | M] () -- C:\Documents and Settings\Utilisateur PC\Bureau\ganache.htm [2013/12/10 13:04:06 | 000,000,701 | ---- | M] () -- C:\WINDOWS\System32\InstallUtil.InstallLog [2013/12/10 13:03:01 | 000,649,964 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat [2013/12/10 13:03:01 | 000,566,706 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2013/12/10 13:03:01 | 000,138,510 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat [2013/12/10 13:03:01 | 000,114,140 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2013/12/10 12:55:01 | 005,925,508 | ---- | M] () -- D:\Documents and Settings\Utilisateur PC\Mes documents\SIGMA SPORT BC 506 user guide.pdf [2013/12/05 18:11:29 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2013/12/04 18:12:06 | 000,002,376 | ---- | M] () -- C:\Documents and Settings\Utilisateur PC\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [2013/12/04 18:12:06 | 000,002,358 | ---- | M] () -- C:\Documents and Settings\Utilisateur PC\Bureau\Google Chrome.lnk [2013/11/27 11:01:37 | 000,000,518 | ---- | M] () -- C:\Documents and Settings\Utilisateur PC\Bureau\url (1).htm [2013/11/26 03:44:46 | 000,389,120 | ---- | M] (SafeApp Software, LLC) -- C:\WINDOWS\System32\RegistryHelperLM.ocx [2013/11/19 11:21:30 | 000,230,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MpSigStub.exe [2013/11/14 15:48:25 | 000,002,333 | ---- | M] () -- D:\Documents and Settings\Utilisateur PC\Mes documents\Spy EasyUpdate.lnk [2013/11/14 15:46:33 | 000,101,412 | ---- | M] () -- D:\Documents and Settings\Utilisateur PC\Mes documents\download (1).mdb [1 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2013/12/11 07:05:21 | 000,213,672 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2013/12/10 22:34:19 | 000,000,502 | ---- | C] () -- C:\Documents and Settings\Utilisateur PC\Bureau\ganache.htm [2013/12/10 13:11:18 | 000,207,726 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat [2013/12/10 13:04:00 | 000,000,701 | ---- | C] () -- C:\WINDOWS\System32\InstallUtil.InstallLog [2013/12/10 12:59:32 | 000,000,432 | ---- | C] () -- C:\WINDOWS asks\AmiUpdXp.job [2013/12/10 12:56:43 | 005,925,508 | ---- | C] () -- D:\Documents and Settings\Utilisateur PC\Mes documents\SIGMA SPORT BC 506 user guide.pdf [2013/11/27 11:01:36 | 000,000,518 | ---- | C] () -- C:\Documents and Settings\Utilisateur PC\Bureau\url (1).htm [2013/11/14 19:04:12 | 000,002,333 | ---- | C] () -- D:\Documents and Settings\Utilisateur PC\Mes documents\Spy EasyUpdate.lnk [2013/11/14 15:49:19 | 000,101,412 | ---- | C] () -- D:\Documents and Settings\Utilisateur PC\Mes documents\download (1).mdb [2012/11/20 13:40:29 | 000,008,704 | ---- | C] () -- C:\WINDOWS\System32\CNMVS74.DLL [2012/10/14 17:35:05 | 000,000,012 | ---- | C] () -- C:\Documents and Settings\Utilisateur PC\intlname.ols [2012/10/13 13:45:09 | 000,178,688 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2012/10/13 13:25:34 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll [2012/10/12 18:22:23 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2012/01/14 12:45:04 | 000,000,385 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2012/01/14 10:53:23 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2011/11/05 08:48:41 | 000,000,127 | ---- | C] () -- C:\Documents and Settings\Utilisateur PC\default.pls [2011/11/01 22:20:28 | 000,113,152 | ---- | C] () -- C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [color=#E56717]========== ZeroAccess Check ==========[/color] [2012/10/13 13:56:38 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shdocvw.dll -- [2008/04/13 18:33:42 | 001,499,136 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009/02/09 11:53:55 | 000,473,600 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008/04/13 18:33:50 | 000,273,920 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2012/12/14 17:05:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1 [2012/11/20 13:40:34 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\CanonBJ [2013/10/12 11:21:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DriverGenius [2013/12/10 13:00:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Registry Helper [2013/10/23 18:31:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SpeedMaxPc [2013/10/10 21:04:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TuneUp Software [2013/10/17 15:03:00 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Application Data\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} [2013/12/10 12:55:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\SIGMA SPORT BC 506 user guide [2012/01/14 13:03:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Softplicity [2013/10/23 18:31:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\SpeedMaxPc [2013/12/10 12:59:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\SwvUpdater [2013/12/10 12:59:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Tlapia [2012/01/14 12:33:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\TP [2013/10/17 15:03:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\TuneUp Software [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color] [2008/04/13 18:34:04 | 001,037,824 | ---- | M] (Microsoft Corporation) MD5=F2317622D29F9FF0F88AEECD5F60F0DD -- C:\WINDOWS\explorer.exe [2008/04/13 18:34:04 | 001,037,824 | ---- | M] (Microsoft Corporation) MD5=F2317622D29F9FF0F88AEECD5F60F0DD -- C:\WINDOWS\system32\dllcache\explorer.exe [color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color] [2008/04/13 18:34:24 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=E4BDF223CD75478BF44567B4D5C2634D -- C:\WINDOWS\system32\dllcache\svchost.exe [2008/04/13 18:34:24 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=E4BDF223CD75478BF44567B4D5C2634D -- C:\WINDOWS\system32\svchost.exe [color=#A23BEC]< MD5 for: USERINIT.EXE >[/color] [2008/04/13 18:34:28 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=E74DDB12188C2FF57A78624DBF7332FC -- C:\WINDOWS\system32\dllcache\userinit.exe [2008/04/13 18:34:28 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=E74DDB12188C2FF57A78624DBF7332FC -- C:\WINDOWS\system32\userinit.exe [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color] [2008/04/13 18:34:30 | 000,512,000 | ---- | M] (Microsoft Corporation) MD5=DD73D6B9F6B4CB630CF35B438B540174 -- C:\WINDOWS\system32\dllcache\winlogon.exe [2008/04/13 18:34:30 | 000,512,000 | ---- | M] (Microsoft Corporation) MD5=DD73D6B9F6B4CB630CF35B438B540174 -- C:\WINDOWS\system32\winlogon.exe [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color] [color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*. >[/color] [2012/12/14 17:05:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1 [2013/02/20 20:29:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Adobe [2011/11/05 08:00:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ahead [2013/10/12 18:56:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Apple [2012/12/14 17:05:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Apple Computer [2012/11/20 13:40:34 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\CanonBJ [2013/10/12 11:21:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DriverGenius [2013/10/28 12:29:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Google [2013/10/14 08:56:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes [2013/02/05 19:37:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\McAfee [2013/09/14 17:49:42 | 000,000,000 | --SD | M] -- C:\Documents and Settings\All Users\Application Data\Microsoft [2011/11/01 20:00:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NVIDIA [2011/11/01 20:00:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NVIDIA Corporation [2013/12/10 13:00:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Registry Helper [2013/05/01 08:35:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Skype [2013/10/23 18:31:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SpeedMaxPc [2011/11/01 21:23:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Sun [2013/10/10 21:04:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TuneUp Software [2011/11/01 19:36:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage [2013/10/17 15:03:00 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Application Data\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} [color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*.exe /s >[/color] [2012/01/03 08:37:53 | 000,320,456 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\All Users\Application Data\Adobe\ARM\Reader_10.1.1\7993\AcrobatUpdater.exe [2012/01/03 08:37:53 | 000,843,712 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\All Users\Application Data\Adobe\ARM\Reader_10.1.1\7993\AdobeARM.exe [2012/01/03 08:37:53 | 000,320,456 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\All Users\Application Data\Adobe\ARM\Reader_10.1.1\7993\AdobeARMHelper.exe [2012/01/03 08:37:53 | 000,320,456 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\All Users\Application Data\Adobe\ARM\Reader_10.1.1\7993\ReaderUpdater.exe [2011/09/05 22:51:05 | 001,560,520 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\All Users\Application Data\Adobe\Setup\{AC76BA86-7AD7-1036-7B44-AA1000000001}\setup.exe [2011/05/21 06:01:00 | 000,194,152 | ---- | M] (NVIDIA Corporation) -- C:\Documents and Settings\All Users\Application Data\NVIDIA\Updatus\WLMerger.exe [color=#A23BEC]< %APPDATA%\*. >[/color] [2011/11/05 08:03:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Adobe [2011/11/05 08:05:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Ahead [2012/12/14 17:03:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Apple Computer [2013/06/07 12:33:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Google [2011/11/01 13:08:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Identities [2011/11/01 20:47:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Macromedia [2013/10/14 08:56:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Malwarebytes [2013/12/11 06:59:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Media Player Classic [2013/04/09 20:06:43 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Microsoft [2013/12/10 12:55:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\SIGMA SPORT BC 506 user guide [2013/05/01 09:35:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Skype [2012/01/14 13:03:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Softplicity [2013/10/23 18:31:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\SpeedMaxPc [2011/11/01 21:22:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Sun [2013/12/10 12:59:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\SwvUpdater [2013/12/10 12:59:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Tlapia [2012/01/14 12:33:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\TP [2013/10/17 15:03:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\TuneUp Software [2013/11/08 17:03:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\U3 [2012/12/25 19:53:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\vlc [2013/04/19 22:10:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\WinRAR [color=#A23BEC]< %APPDATA%\*.exe /s >[/color] [2013/04/29 16:59:13 | 000,069,632 | R--- | M] (Flexera Software LLC) -- C:\Documents and Settings\Utilisateur PC\Application Data\Microsoft\Installer\{84178AE8-C22D-48CB-A6BA-D116FD3FE469}\ARPPRODUCTICON.exe [2013/04/29 16:59:13 | 000,049,152 | R--- | M] (Flexera Software LLC) -- C:\Documents and Settings\Utilisateur PC\Application Data\Microsoft\Installer\{84178AE8-C22D-48CB-A6BA-D116FD3FE469}\UNINST_Uninstall_Q_336D8C9DB2424DE5BC518E574B25652F.exe [2013/12/10 12:59:21 | 000,292,392 | ---- | M] (Amonetizé Ltd) -- C:\Documents and Settings\Utilisateur PC\Application Data\SwvUpdater\Updater.exe [2006/04/05 19:38:10 | 000,110,592 | ---- | M] () -- C:\Documents and Settings\Utilisateur PC\Application Data\U3 emp\cleanup.exe [color=#A23BEC]< %systemroot%\*. /mp /s >[/color] [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color] [color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color] [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color] [color=#A23BEC]< hklm\software\clients\startmenuinternet|command /rs >[/color] HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\chrome.exe\shell\open\command\: "C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" [2013/12/04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\ShowIconsCommand: "C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --show-icons [2013/12/04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\HideIconsCommand: "C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --hide-icons [2013/12/04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\ReinstallCommand: "C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --make-default-browser [2013/12/04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\: "C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" [2013/12/04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\ReinstallCommand: "C:\WINDOWS\system32\ie4uinit.exe" -reinstall [2013/10/13 12:28:02 | 000,174,592 | ---- | M] (Microsoft Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\HideIconsCommand: "C:\WINDOWS\system32\ie4uinit.exe" -hide [2013/10/13 12:28:02 | 000,174,592 | ---- | M] (Microsoft Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\ShowIconsCommand: "C:\WINDOWS\system32\ie4uinit.exe" -show [2013/10/13 12:28:02 | 000,174,592 | ---- | M] (Microsoft Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell aom\command\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2009/03/08 14:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\: C:\Program Files\Internet Explorer\iexplore.exe [2009/03/08 14:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation) [color=#A23BEC]< hklm\software\clients\startmenuinternet|command /64 /rs >[/color] HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\chrome.exe\shell\open\command\: "C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" [2013/12/04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\ShowIconsCommand: "C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --show-icons [2013/12/04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\HideIconsCommand: "C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --hide-icons [2013/12/04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\ReinstallCommand: "C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --make-default-browser [2013/12/04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\: "C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" [2013/12/04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\ReinstallCommand: "C:\WINDOWS\system32\ie4uinit.exe" -reinstall [2013/10/13 12:28:02 | 000,174,592 | ---- | M] (Microsoft Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\HideIconsCommand: "C:\WINDOWS\system32\ie4uinit.exe" -hide [2013/10/13 12:28:02 | 000,174,592 | ---- | M] (Microsoft Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\ShowIconsCommand: "C:\WINDOWS\system32\ie4uinit.exe" -show [2013/10/13 12:28:02 | 000,174,592 | ---- | M] (Microsoft Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell aom\command\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2009/03/08 14:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation) HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\: C:\Program Files\Internet Explorer\iexplore.exe [2009/03/08 14:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation) [color=#A23BEC]< nslookup https://www.google.fr/?gws_rd=ssl /c >[/color] < End of report >

Fish66 · Answer

D'accord!
1/
Commence à désinstaller en utilisant le logiciel ci-dessous : 
-  WhiteSmoke
- Spyhunter
------------------
Télécharge Revo-uninstaller
 
Exécute ce fichier pour installation
 
*******Aide Revo-uninstaller*******

2/
Supprime les extensions inutiles de ton navigateur .
Aide :
* Google chrome
* Firefox
* Internet explorer

3/
Pour bien vérifier que le  fichier ci-dessous est  infecté rend toi sur ce site
Virus Total
 
* 	Clique sur " choose  file "
* 	Vas sur ton disque chercher ce fichier à cet emplacement :
  	
C:\WINDOWS\System32\d3d9caps.dat

 
* 	Clique ensuite sur le bouton «  Scan it » 
* 	Patiente le temps de l'analyse qui dépend de la taille du fichier
* 	Une fois celle-ci terminée, apparaît le rang de détection (Detection Ratio)
* 	Communique-le dans ta prochaine réponse sur le forum et communique en même temps le lien de la page VirusTotal en le copiant dans la barre d'adresse et en le collant dans ta prochaine réponse

@+

 
 ¤¤¤ Le meilleur remède pour tous les problèmes, c'est la patience.... ¤¤¤

tititthierry · Answer

voila www.virustotal.com/fr/file/89a3d391151864c12b209947a15e4f61214c0d137c333165456b76ddfc5e170a/analysis/1386851443/

et ratio 0/49 ET SPYHUNTER etant payant je ne l'ai pas acheté!

tititthierry · Answer

donc rien n'est infecté? ou de dois refaire un scan otl? merci

Fish66 · Answer

On continue alors :
1/
 Lance Malwarebytes, fais la mise à jour, choisis une analyse complète, supprime tous ce qu'il trouve puis poste le rapport stp

2/
On va lancer un autre outil :
* Télécharge ZHPDiag de Nicolas Coolman à partir ce lien : 

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html 
ou 
http://www.premiumorange.com/zeb-help-process/zhpdiag.html 
* Une fois le téléchargement achevé, 
* Double-clique sur l'icône pour lancer le programme. Sous Vista , Seven ou Windows 8 clic droit « exécuter en tant qu'administrateur » 
* Dans la fenêtre ZHPDiag qui vient de s'ouvrir , clique sur "Configurer" 
* Clique sur la loupe en bas à gauche sans signe pour lancer l'analyse. 
* Clique sur OUI à la question "Voulez-vous un rapport full options" 
* Laisse l'outil travailler, il peut être assez long. 
* Un rapport s'ouvre. Ce rapport se trouve également sur ton bureau 
* Héberge le rapport ZHPDiag.txt de ton bureau sur : FEC Upload ou : malekal.com 
* Fais copier/coller le lien fourni dans ta prochaine réponse 

Aide ZHPDiag :http://nicolascoolman.webs.com/tutorials.htm

@+

tititthierry · Answer

voila le  
rapportMalwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Version de la base de données: v2013.12.12.05

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Utilisateur PC :: UTILISAT-66BE35 [administrateur]

12/12/2013 17:02:13
mbam-log-2013-12-12 (17-02-13).txt

Type d'examen: Examen complet (C:\|D:\|)
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 268121
Temps écoulé: 53 minute(s), 53 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 13
HKCR\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9} (PUP.Software.Updater) -> Mis en quarantaine et supprimé avec succès.
HKCR\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476} (PUP.Software.Updater) -> Mis en quarantaine et supprimé avec succès.
HKCR\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67} (PUP.Software.Updater) -> Mis en quarantaine et supprimé avec succès.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96} (PUP.Software.Updater) -> Mis en quarantaine et supprimé avec succès.
HKCR\Updater.AmiUpd.1 (PUP.Software.Updater) -> Mis en quarantaine et supprimé avec succès.
HKCR\Updater.AmiUpd (PUP.Software.Updater) -> Mis en quarantaine et supprimé avec succès.
HKCR\CLSID\{A6FEED89-3BCD-4D19-9DC2-3E613A80A2A4} (PUP.Optional.Amonetize.A) -> Mis en quarantaine et supprimé avec succès.
HKCR\TypeLib\{1C1356DA-1E98-4810-A9F6-18D89BD1C0C0} (PUP.Optional.Amonetize.A) -> Mis en quarantaine et supprimé avec succès.
HKCR\Interface\{D54C859C-6066-4F31-8FE0-2AAEDCAE67D7} (PUP.Optional.Amonetize.A) -> Mis en quarantaine et supprimé avec succès.
HKCR\AmiBs.Installer.1 (PUP.Optional.Amonetize.A) -> Mis en quarantaine et supprimé avec succès.
HKCR\AmiBs.Installer (PUP.Optional.Amonetize.A) -> Mis en quarantaine et supprimé avec succès.
HKCR\Typelib\{F126C9FC-9299-40F2-BD42-C59023AD1E7F} (PUP.Optional.GetNow.A) -> Mis en quarantaine et supprimé avec succès.
HKCR\Interface\{237FDFDB-3722-470E-8BA8-90196DABE967} (PUP.Optional.GetNow.A) -> Mis en quarantaine et supprimé avec succès.

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 1
C:\Documents and Settings\Utilisateur PC\Application Data\SwvUpdater (PUP.Software.Updater) -> Mis en quarantaine et supprimé avec succès.

Fichier(s) détecté(s): 10
C:\Documents and Settings\Utilisateur PC\Application Data\SwvUpdater\Updater.exe (PUP.Software.Updater) -> Mis en quarantaine et supprimé avec succès.
D:\Documents and Settings\Utilisateur PC\Mes documents\Downloads\Setup__2165_il756.exe (PUP.Optional.Amonetize.A) -> Mis en quarantaine et supprimé avec succès.
D:\Documents and Settings\Utilisateur PC\Mes documents\Downloads\SIGMA SPORT BC 506 user guide provided through diplotop.fr (2).exe (PUP.Optional.GetNow.A) -> Mis en quarantaine et supprimé avec succès.
C:\System Volume Information\_restore{153024DA-DA1E-4AF0-AC7D-4E1A62656238}\RP621\A0066075.exe (Trojan.Agent.ED) -> Mis en quarantaine et supprimé avec succès.
C:\System Volume Information\_restore{153024DA-DA1E-4AF0-AC7D-4E1A62656238}\RP557\A0058732.exe (PUP.Optional.PricePeep.A) -> Mis en quarantaine et supprimé avec succès.
D:\Documents and Settings\Utilisateur PC\Mes documents\Downloads\SIGMA SPORT BC 506 user guide provided through diplotop.fr (1).exe (PUP.Optional.LiveSoftAction.A) -> Mis en quarantaine et supprimé avec succès.
D:\Documents and Settings\Utilisateur PC\Mes documents\Downloads\SIGMA SPORT BC 506 user guide provided through diplotop.fr.exe (PUP.Optional.LiveSoftAction.A) -> Mis en quarantaine et supprimé avec succès.
C:\Documents and Settings\Utilisateur PC\Application Data\SwvUpdater\Updater.xml (PUP.Software.Updater) -> Mis en quarantaine et supprimé avec succès.
C:\Documents and Settings\Utilisateur PC\Application Data\SwvUpdater\status.cfg (PUP.Software.Updater) -> Mis en quarantaine et supprimé avec succès.
C:\WINDOWS\Tasks\AmiUpdXp.job (PUP.Software.Updater) -> Mis en quarantaine et supprimé avec succès.

(fin)

Fish66 · Answer

Bonsoir,
Avant de lancer ZHPDiag :
Suis ce tutorial https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= 
Vas sur le lien, télécharge AdwCleaner .
Lance AdwCleaner, clique sur [Scanner].
Le scan peux durer plusieurs minutes, patienter.
Une fois le scan terminé, clique sur [Nettoyer]

Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.  
 
@+
 ¤¤¤ Le meilleur remède pour tous les problèmes, c'est la patience.... ¤¤¤

tititthierry · Answer

voila je te poste le rapport merci beaucoup
 # AdwCleaner v3.007 - Rapport créé le 12/10/2013 à 16:51:09
# Mis à jour le 09/10/2013 par Xplode
# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)
# Nom d'utilisateur : Utilisateur PC - UTILISAT-66BE35
# Exécuté depuis : D:\Documents and Settings\Utilisateur PC\Mes documents\Downloads\adwcleaner.exe
# Option : Nettoyer

***** [ Services ] *****


***** [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\Documents and Settings\All Users\Application Data\BrowserDefender
Dossier Supprimé : C:\Documents and Settings\All Users\Application Data\Tarma Installer
Dossier Supprimé : C:\Program Files\SoftwareUpdater
Dossier Supprimé : C:\Documents and Settings\Utilisateur PC\Application Data\Babylon
Dossier Supprimé : D:\Documents and Settings\Utilisateur PC\Mes documents\optimizer pro
Fichier Supprimé : C:\END
Fichier Supprimé : C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\User Data\Default\bProtector Web Data
Fichier Supprimé : C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\User Data\Default\bprotectorpreferences
Fichier Supprimé : C:\WINDOWS\Tasks\BrowserDefendert.job

***** [ Raccourcis ] *****


***** [ Registre ] *****

Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs [bProtectTabs]
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Clé Supprimée : HKCU\Software\dsiteproducts
Clé Supprimée : HKCU\Software\HappyLyrics
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

***** [ Navigateurs ] *****

-\ Internet Explorer v8.0.6001.18702


-\ Google Chrome v

[ Fichier : C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\User Data\Default\preferences ]

Supprimée : homepage
Supprimée : urls_to_restore_on_startup

*************************

AdwCleaner[R0].txt - [2192 octets] - [12/10/2013 16:44:26]
AdwCleaner[S0].txt - [2025 octets] - [12/10/2013 16:51:09]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2085 octets] ##########
# AdwCleaner v3.015 - Rapport créé le 12/12/2013 à 20:39:35
# Mis à jour le 10/12/2013 par Xplode
# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)
# Nom d'utilisateur : Utilisateur PC - UTILISAT-66BE35
# Exécuté depuis : D:\Documents and Settings\Utilisateur PC\Mes documents\Downloads\adwcleaner.exe
# Option : Nettoyer

***** [ Services ] *****


***** [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\Documents and Settings\All Users\Application Data\Registry Helper
Dossier Supprimé : C:\Documents and Settings\All Users\Application Data\SpeedMaxPc
Dossier Supprimé : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\jZip
Dossier Supprimé : C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\jZip
Dossier Supprimé : C:\Documents and Settings\Utilisateur PC\Application Data\SpeedMaxPc
Dossier Supprimé : C:\Documents and Settings\Utilisateur PC\Application Data\Tlapia
[!] Dossier Supprimé : C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ibcgjcbeckcdemelifnledhihpaighfk
Fichier Supprimé : C:\END

***** [ Raccourcis ] *****


***** [ Registre ] *****

Clé Supprimée : HKCU\Software\Google\Chrome\Extensions\ibcgjcbeckcdemelifnledhihpaighfk
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\ibcgjcbeckcdemelifnledhihpaighfk
Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
Clé Supprimée : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Clé Supprimée : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Valeur Supprimée : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Valeur Supprimée : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Valeur Supprimée : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x64]
Valeur Supprimée : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x86]
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{4277F7CF-0000-46CF-BA49-D624465C4BAB}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3614D305-2DBB-4991-9297-750DD60FFC73}
Valeur Supprimée : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files\Movies Toolbar\SafetyNut\SRTOOL~1\IE\dtUser.exe]
Clé Supprimée : HKCU\Software\InstalledThirdPartyPrograms
Clé Supprimée : HKCU\Software\jZip
Clé Supprimée : HKCU\Software\lollipop
Clé Supprimée : HKCU\Software\Optimizer Pro
Clé Supprimée : HKCU\Software\SpeedMaxPC
Clé Supprimée : HKCU\Software	orch
Clé Supprimée : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clé Supprimée : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Clé Supprimée : HKLM\Software\InstalledThirdPartyPrograms
Clé Supprimée : HKLM\Software\SpeedMaxPC
Clé Supprimée : HKLM\Software\systweak
Clé Supprimée : HKLM\Software	orch
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\DSite
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\bi_uninstaller
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyPC Backup
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375

***** [ Navigateurs ] *****

-\ Internet Explorer v8.0.6001.18702


-\ Google Chrome v

[ Fichier : C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [6722 octets] - [12/10/2013 15:44:26]
AdwCleaner[S0].txt - [6431 octets] - [12/10/2013 15:51:09]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6491 octets] ##########

Fish66 · Answer

Bonjour, Tu peux maintenant effectuer la procédure de ZHPDiag indiqué : <<< IC en 2/ >>>> @+

tititthierry · Answer

voila c'est fait et tout semble etre rentré dans l'ordre,un grand merci a toi
a+

tititthierry · Answer

voila

 https://pjjoint.malekal.com/files.php?id=ZHPDiag_20131213_n11k5r6r15o10

Fish66 · Answer

Bonjour,
1/
Désinstalle : Logiciel: Google Toolbar for Internet Explorer 

2/
--> Copie tout le texte présent en gras ci-dessous (Sélectionne-le, clique droit dessus et choisis "Copier").



Script ZHPFix
G2 - GCE: Preference [User Data\Default] [ibcgjcbeckcdemelifnledhihpaighfk] WhiteSmoke New V6 v.10.20.3.520, (Désactivé) =>PUP.WhiteSmoke
O61 - LFC: 12/12/2013 - 20:25:17 ---A- . (...) -- C:\Documents and Settings\Utilisateur PC\Local Settings\Temp\SHSetup.exe   [45665360] =>Crapware.SpyHunter
O69 - SBI: SearchScopes [HKCU] {24228783-EA17-4D3C-BE03-B5539F886131} - (WhiteSmoke New V6 Customized Web Search) - http://search.conduit.com =>PUP.WhiteSmoke
[HKLM\Software\Google\Chrome\Extensions\ibcgjcbeckcdemelifnledhihpaighfk]   =>PUP.WhiteSmoke^
[HKLM\Software\Classes\Iminent.Companion.Buddy]   =>Adware.IMBooster
C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ibcgjcbeckcdemelifnledhihpaighfk   =>PUP.WhiteSmoke^
[HKCU\Software\ForumerIT]   =>Toolbar.Forumer^

EmptyCLSID
EmptyFlash
EmptyTemp


=> Puis lance ZHPFix depuis le raccourci situé sur ton Bureau.
(Sous Vista/Win7/Win8, il faut cliquer droit sur le raccourci de ZHPFix et choisir Exécuter en tant qu'administrateur)
=> Une fois ZHPFix ouvert, clique sur "importer" puis sur "ok" et ensuite colle le texte dans la fenêtre, clique sur GO en bas de page et confirme par oui pour lancer le nettoyage des données 

=> laisse travailler l'outil et ne touche à rien ...
=> S'il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le !


Une fois terminé, un nouveau rapport s'affiche : poste le contenu de ce dernier dans ta prochaine réponse ...
Ce rapport est copié sur le bureau

( ce rapport est en outre sauvegardé dans ce dossier C:/ZHP/ZHPDIAG)

===================================
Aide :http://helper-formation.fr/entraide/viewtopic.php?f=31&t=2333
 
3/
* Télécharge sur le bureau RogueKiller (par tigzy)    
https://www.luanagames.com/index.fr.html  

* ( Sous Vista/Seven,clique droit, lancer en tant qu'administrateur )    
* Quitte tous tes programmes en cours    
* Lance RogueKiller.exe   

Si l'infection bloque le programme, il faut le relancer plusieurs fois ou le renommer en winlogon.exe   

* Laisse le prescan se terminer, clique sur Scan   

* Clique sur Rapport pour l'ouvrir puis copie/colle le sur le dans ton prochain message 

4/
Est ce que tu as le cd d'installation de ton windows?

@+

tititthierry · Answer

je ne sais pas ouvrir ZHPFix car il me met"cette application n'a pu démarrer car framedyn.dll est introuvable.La reinstallation de cette application peut coriger ce probleme.

Fish66 · Answer

Bonjour,
Démarre  en Mode sans échec avec prise en charge réseau :
Pour cela, tu tapotes la touche F8 dès le début de l'allumage du pc sans t'arrêter
Une fenêtre va s'ouvrir tu te déplaces avec les flèches du clavier sur >> démarrer en Mode sans échec avec prise en charge réseau
puis tape entrée.
Une fois sur le bureau s'il n'y a pas toutes les couleurs et autres c'est normal !
(Si F8 ne marche pas utilise la touche F5)
----------------------------
Aide : https://www.commentcamarche.net/informatique/windows/113-demarrer-windows-10-en-mode-sans-echec/

Dans ce mode tu refais la procédure de ZHPFix puis poste le rapport stp

tititthierry · Answer

ca ne fonctionne pas non plus en mode sans echec;il me met le meme message d erreur

Fish66 · Answer

D'accord!
Relance OTL
- Sous XP double-clic sur l'icône pour lancer l'outil.
- Sous Vista/Seven clic-droit sur l'icône et choisir "Exécuter en tant qu'administrateur" dans le menu contextuel.
* Dans la partie "Personnalisation", copie/colle les instructions suivantes :

:OTL
IE - HKU\S-1-5-21-1993962763-162531612-1801674531-1003\..\SearchScopes\{24228783-EA17-4D3C-BE03-B5539F886131}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3311268&CUI=UN20857982642665832&UM=2
CHR - Extension: WhiteSmoke New V6 = C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ibcgjcbeckcdemelifnledhihpaighfk\10.20.3.520_0\

:Reg
[-HKLM\Software\Google\Chrome\Extensions\ibcgjcbeckcdemelifnledhihpaighfk] 
[-HKCU\Software\ForumerIT] 
[-HKLM\Software\Classes\Iminent.Companion.Buddy] 

:Commands
[emptytemp]



* Clique sur le bouton Correction. 
* Patiente pendant le travail de l'outil, il doit ensuite redémarrer le PC.
* Accepte en cliquant sur OK.
* Le rapport indiquant les actions réalisées par OTL doit s'ouvrir spontanément.

Tu peux le retrouver le fichier à la racine du disque : C:\_OTL\MovedFiles
 
 
 ¤¤¤ Le meilleur remède pour tous les problèmes, c'est la patience.... ¤¤¤

tititthierry · Answer

All processes killed
========== OTL ==========
Registry key HKEY_USERS\S-1-5-21-1993962763-162531612-1801674531-1003\Software\Microsoft\Internet Explorer\SearchScopes\{24228783-EA17-4D3C-BE03-B5539F886131}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{24228783-EA17-4D3C-BE03-B5539F886131}\ not found.
File C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ibcgjcbeckcdemelifnledhihpaighfk\10.20.3.520_0 not found.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\ibcgjcbeckcdemelifnledhihpaighfk\ not found.
Registry key HKEY_CURRENT_USER\Software\ForumerIT\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Iminent.Companion.Buddy\ deleted successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: NetworkService
->Temp folder emptied: 265994 bytes
->Temporary Internet Files folder emptied: 33209 bytes
 
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Utilisateur PC
->Temp folder emptied: 114680129 bytes
->Temporary Internet Files folder emptied: 492964 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 264386346 bytes
->Flash cache emptied: 0 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1500970 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 83307 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 12209 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 364,00 mb
 
 
OTL by OldTimer - Version 3.2.69.0 log created on 12152013_151902

Files\Folders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Fish66 · Answer

Tu peux passer à l'étape qui suive (RogueKiller) !  :-)
 
 ¤¤¤ Le meilleur remède pour tous les problèmes, c'est la patience.... ¤¤¤

Rapport otl

19 réponses

Discussions similaires