Rapport otl

Bonjour,

Oui,Héberge le ici pour qu'on puisse l'analyser..

@+

voila le raport merci
OTL logfile created on: 12/12/2013 7:24:12 - Run 3
OTL by OldTimer - Version 3.2.69.0 Folder = D:\Documents and Settings\Utilisateur PC\Mes documents\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000080C | Country: Belgique | Language: FRB | Date Format: d/MM/yyyy

1,87 Gb Total Physical Memory | 1,02 Gb Available Physical Memory | 54,23% Memory free
3,72 Gb Paging File | 3,00 Gb Available in Paging File | 80,65% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 61,10 Gb Total Space | 22,24 Gb Free Space | 36,39% Space Free | Partition Type: NTFS
Drive D: | 91,56 Gb Total Space | 74,54 Gb Free Space | 81,41% Space Free | Partition Type: NTFS

Computer Name: UTILISAT-66BE35 | User Name: Utilisateur PC | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2013/12/12 07:21:56 | 000,602,112 | ---- | M] (OldTimer Tools) -- D:\Documents and Settings\Utilisateur PC\Mes documents\Downloads\OTL.exe
PRC - [2013/12/04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
PRC - [2013/12/03 17:01:39 | 000,223,112 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Update\1.3.22.3\GoogleCrashHandler.exe
PRC - [2012/08/11 16:43:06 | 000,055,184 | ---- | M] (Apple Inc.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2011/06/15 15:16:48 | 000,997,920 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2011/04/27 15:39:26 | 000,011,736 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
PRC - [2008/04/13 18:34:04 | 001,037,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2004/11/30 13:30:00 | 000,565,309 | ---- | M] (Broadcom Corporation) -- C:\Program Files\D-Link\Logiciel Bluetooth\BTTray.exe
PRC - [2004/11/30 13:29:32 | 001,245,268 | ---- | M] (Broadcom Corporation) -- C:\Program Files\D-Link\Logiciel Bluetooth\BTStackServer.exe
PRC - [2004/11/30 13:25:22 | 000,163,840 | ---- | M] (Broadcom Corporation) -- C:\Program Files\D-Link\Logiciel Bluetooth\bin\btwdins.exe

[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2013/12/04 03:48:04 | 000,399,312 | ---- | M] () -- C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\31.0.1650.63\ppgooglenaclpluginchrome.dll
MOD - [2013/12/04 03:48:02 | 004,055,504 | ---- | M] () -- C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\31.0.1650.63\pdf.dll
MOD - [2013/12/04 03:47:11 | 000,702,416 | ---- | M] () -- C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
MOD - [2013/12/04 03:47:11 | 000,099,792 | ---- | M] () -- C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\31.0.1650.63\libegl.dll
MOD - [2013/12/04 03:47:08 | 001,619,408 | ---- | M] () -- C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
MOD - [2012/11/28 14:13:52 | 000,087,952 | ---- | M] () -- C:\Program Files\Fichiers communs\Apple\Apple Application Support\zlib1.dll
MOD - [2012/11/28 14:13:30 | 001,242,512 | ---- | M] () -- C:\Program Files\Fichiers communs\Apple\Apple Application Support\libxml2.dll
MOD - [2008/04/13 18:33:32 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
MOD - [2004/11/30 13:30:56 | 000,053,248 | ---- | M] () -- C:\Program Files\D-Link\Logiciel Bluetooth\BTKeyInd.dll

[color=#E56717]========== Services (SafeList) ==========[/color]

SRV - [2013/12/11 07:14:06 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/02/28 17:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/09/23 15:28:00 | 001,258,856 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012/08/11 16:43:06 | 000,055,184 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2011/04/27 15:39:26 | 000,011,736 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe -- (MsMpSvc)
SRV - [2004/11/30 13:25:22 | 000,163,840 | ---- | M] (Broadcom Corporation) [Auto | Running] -- C:\Program Files\D-Link\Logiciel Bluetooth\bin\btwdins.exe -- (btwdins)
SRV - [2003/07/28 20:28:22 | 000,089,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE -- (ose)

[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys -- (esgiguard)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - [2013/12/12 07:16:35 | 000,040,392 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{C1D1EC72-B388-42B7-A8A7-1F76325DE8AA}\MpKsl5c1d3e06.sys -- (MpKsl5c1d3e06)
DRV - [2009/11/19 14:33:20 | 000,051,200 | ---- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ser2pl.sys -- (Ser2pl)
DRV - [2006/07/11 14:38:30 | 000,020,480 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2006/07/11 14:38:28 | 000,057,856 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2006/06/28 10:38:56 | 000,105,088 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\nvata.sys -- (nvata)
DRV - [2006/06/18 23:40:44 | 000,043,520 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2006/06/06 05:09:26 | 004,284,928 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService)
DRV - [2004/11/30 13:14:28 | 000,017,024 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio)
DRV - [2004/11/30 13:13:28 | 000,023,271 | ---- | M] (Broadcom Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\btserial.sys -- (BTSERIAL)
DRV - [2004/11/30 13:13:24 | 000,222,876 | ---- | M] (Broadcom Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\btslbcsp.sys -- (BTSLBCSP)
DRV - [2004/11/30 13:13:16 | 000,148,040 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS)
DRV - [2004/11/30 13:12:14 | 001,241,818 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)
DRV - [2004/11/30 13:10:14 | 000,030,299 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2004/11/30 13:09:50 | 000,055,288 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)

[color=#E56717]========== Standard Registry (SafeList) ==========[/color]

[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\..\SearchScopes,DefaultScope = {24228783-EA17-4D3C-BE03-B5539F886131}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{99A17951-9D99-4A58-9293-C9CB59C4E449}: "URL" = https://www.google.com/webhp?gws_rd=ssl{searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7

IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-1993962763-162531612-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
IE - HKU\S-1-5-21-1993962763-162531612-1801674531-1003\..\SearchScopes,DefaultScope = {24228783-EA17-4D3C-BE03-B5539F886131}
IE - HKU\S-1-5-21-1993962763-162531612-1801674531-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-1993962763-162531612-1801674531-1003\..\SearchScopes\{24228783-EA17-4D3C-BE03-B5539F886131}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3311268&CUI=UN20857982642665832&UM=2
IE - HKU\S-1-5-21-1993962763-162531612-1801674531-1003\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = https://www.google.com/webhp?gws_rd=ssl{searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7NDKB_frBE557
IE - HKU\S-1-5-21-1993962763-162531612-1801674531-1003\..\SearchScopes\{99A17951-9D99-4A58-9293-C9CB59C4E449}: "URL" = https://www.google.com/webhp?gws_rd=ssl{searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKU\S-1-5-21-1993962763-162531612-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.2: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

[2013/04/22 13:39:50 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions

[color=#E56717]========== Chrome ==========[/color]

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - Extension: WhiteSmoke New V6 = C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ibcgjcbeckcdemelifnledhihpaighfk\10.20.3.520_0\
CHR - Extension: Google\u00A0Wallet = C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_1\
CHR - Extension: Google\u00A0Wallet = C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\

O1 HOSTS File: ([2013/10/23 18:31:54 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Programme d'aide de l'Assistant de connexion Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Fichiers communs\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKU\.DEFAULT..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found
O4 - HKU\S-1-5-18..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found
O4 - HKU\S-1-5-19..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found
O4 - HKU\S-1-5-20..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\BTTray.lnk = C:\Program Files\D-Link\Logiciel Bluetooth\BTTray.exe (Broadcom Corporation)
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1993962763-162531612-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\D-Link\Logiciel Bluetooth\btsendto_ie_ctx.htm ()
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1366649505078 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1320172396375 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 109.88.203.3 62.197.111.140
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EAD68BB8-846B-4E53-AC37-1C7E4E5D3074}: DhcpNameServer = 109.88.203.3 62.197.111.140
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Fichiers communs\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\widimg {EE7C2AFF-5742-44FF-BD0E-E521B0D3C3BA} - C:\WINDOWS\system32\BTXPPanel.dll (Broadcom Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\DOCUME~1\ALLUSE~1\APPLIC~1\Wincert\WIN32C~1.DLL) - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - File not found
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UIHost - (logonui.exe) - File not found
O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - File not found
O20 - Winlogon\Notify\crypt32chain: DllName - (crypt32.dll) - File not found
O20 - Winlogon\Notify\cryptnet: DllName - (cryptnet.dll) - File not found
O20 - Winlogon\Notify\cscdll: DllName - (cscdll.dll) - File not found
O20 - Winlogon\Notify\ScCertProp: DllName - (wlnotify.dll) - File not found
O20 - Winlogon\Notify\Schedule: DllName - (wlnotify.dll) - File not found
O20 - Winlogon\Notify\sclgntfy: DllName - (sclgntfy.dll) - File not found
O20 - Winlogon\Notify\SensLogn: DllName - (WlNotify.dll) - File not found
O20 - Winlogon\Notify\termsrv: DllName - (wlnotify.dll) - File not found
O20 - Winlogon\Notify\WgaLogon: DllName - (WgaLogon.dll) - File not found
O20 - Winlogon\Notify\wlballoon: DllName - (wlnotify.dll) - File not found
O24 - Desktop Components:0 (Ma page d'accueil) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O27 - HKLM IFEO\bitguard.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\bprotect.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\browserdefender.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\browserprotect.exe: Debugger - tasklist.exe File not found
O29 - HKLM SecurityProviders - (msapsspc.dll) - File not found
O29 - HKLM SecurityProviders - (schannel.dll) - File not found
O29 - HKLM SecurityProviders - (digest.dll) - File not found
O29 - HKLM SecurityProviders - (msnsspc.dll) - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/11/01 12:59:23 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{33e13a92-707e-11e2-bce7-001966055ddd}\Shell - "" = AutoRun
O33 - MountPoints2\{33e13a92-707e-11e2-bce7-001966055ddd}\Shell\AutoRun\command - "" = K:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O36 - AppCertDlls: x64 - (c:\program files\movies toolbar\safetynut\x64\safetycrt.dll) - File not found
O36 - AppCertDlls: x86 - (C:\Program Files\Movies Toolbar\SafetyNut\safetycrt.dll) - File not found
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

MsConfig - StartUpReg: [b]Adobe ARM[/b] - hkey= - key= - C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
MsConfig - StartUpReg: [b]Alcmtr[/b] - hkey= - key= - File not found
MsConfig - StartUpReg: [b]CTFMON.EXE[/b] - hkey= - key= - File not found
MsConfig - StartUpReg: [b]Google Update[/b] - hkey= - key= - C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Update\GoogleUpdate.exe (Google Inc.)
MsConfig - StartUpReg: [b]NvCplDaemon[/b] - hkey= - key= - File not found
MsConfig - StartUpReg: [b]NvMediaCenter[/b] - hkey= - key= - File not found
MsConfig - StartUpReg: [b]nwiz[/b] - hkey= - key= - C:\Program Files\NVIDIA Corporation\nView\nwiz.exe ()
MsConfig - StartUpReg: [b]RTHDCPL[/b] - hkey= - key= - File not found
MsConfig - StartUpReg: [b]SkyTel[/b] - hkey= - key= - File not found
MsConfig - StartUpReg: [b]SunJavaUpdateSched[/b] - hkey= - key= - C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
MsConfig - State: "system.ini" - 0
MsConfig - State: "win.ini" - 0
MsConfig - State: "bootini" - 2
MsConfig - State: "services" - 0
MsConfig - State: "startup" - 2

SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: MsMpSvc - C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation)
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: sermouse.sys - Driver
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vga.sys - Driver
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: MsMpSvc - C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation)
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: sermouse.sys - Driver
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vga.sys - Driver
SafeBootNet: {1a3e09be-1e45-494b-9174-d7385b45bbf5} - Reg Error: Value error.
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Rendu VML (Vector Graphics Rendering)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4
ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Liaison de données Dynamic HTML pour Java
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {3F7924B9-D148-3141-87B1-68F36043A940} - .NET Framework
ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Création avancée
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - Classes Java DirectAnimation
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.8
ActiveX: {5056b317-8d4c-43ee-8543-b9d1e234b8f4} - Mise à jour de sécurité pour Windows XP (KB923789)
ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Dossiers Web
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {ACC563BC-4266-43f0-B6ED-9D38C4202C7E} -
ActiveX: {B508B3F1-A24A-32C0-B310-85786919EF28} - .NET Framework
ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework
ActiveX: {C3C986D6-06B1-43BF-90DD-BE30756C00DE} - RevokedRootsUpdate
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Planificateur de tâches
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Shockwave Flash
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {EF289A85-8E57-408d-BE47-73B55609861A} - RootsUpdate
ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE

Drivers32: aux - wdmaud.drv File not found
Drivers32: aux1 - wdmaud.drv File not found
Drivers32: aux2 - wdmaud.drv File not found
Drivers32: aux3 - wdmaud.drv File not found
Drivers32: aux4 - wdmaud.drv File not found
Drivers32: aux5 - wdmaud.drv File not found
Drivers32: midi - wdmaud.drv File not found
Drivers32: midi1 - wdmaud.drv File not found
Drivers32: midi2 - wdmaud.drv File not found
Drivers32: midi3 - wdmaud.drv File not found
Drivers32: midi4 - wdmaud.drv File not found
Drivers32: midi5 - wdmaud.drv File not found
Drivers32: midi6 - wdmaud.drv File not found
Drivers32: midimapper - midimap.dll File not found
Drivers32: mixer - wdmaud.drv File not found
Drivers32: mixer1 - wdmaud.drv File not found
Drivers32: mixer2 - wdmaud.drv File not found
Drivers32: mixer3 - wdmaud.drv File not found
Drivers32: mixer4 - wdmaud.drv File not found
Drivers32: mixer5 - wdmaud.drv File not found
Drivers32: mixer6 - wdmaud.drv File not found
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.imaadpcm - imaadp32.acm File not found
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.msadpcm - msadp32.acm File not found
Drivers32: msacm.msaudio1 - msaud32.acm File not found
Drivers32: msacm.msg711 - msg711.acm File not found
Drivers32: msacm.msg723 - msg723.acm File not found
Drivers32: msacm.msgsm610 - msgsm32.acm File not found
Drivers32: msacm.siren - sirenacm.dll File not found
Drivers32: msacm.sl_anet - sl_anet.acm File not found
Drivers32: msacm.trspch - tssoft32.acm File not found
Drivers32: vidc.cvid - iccvid.dll File not found
Drivers32: vidc.I420 - msh263.drv File not found
Drivers32: vidc.iv31 - ir32_32.dll File not found
Drivers32: vidc.iv32 - ir32_32.dll File not found
Drivers32: vidc.iv41 - ir41_32.ax File not found
Drivers32: vidc.iv50 - ir50_32.dll File not found
Drivers32: vidc.iyuv - iyuv_32.dll File not found
Drivers32: vidc.M261 - msh261.drv File not found
Drivers32: vidc.M263 - msh263.drv File not found
Drivers32: vidc.mrle - msrle32.dll File not found
Drivers32: vidc.msvc - msvidc32.dll File not found
Drivers32: vidc.uyvy - msyuv.dll File not found
Drivers32: vidc.yuy2 - msyuv.dll File not found
Drivers32: vidc.yvu9 - tsbyuv.dll File not found
Drivers32: vidc.yvyu - msyuv.dll File not found
Drivers32: wave - wdmaud.drv File not found
Drivers32: wave1 - wdmaud.drv File not found
Drivers32: wave2 - wdmaud.drv File not found
Drivers32: wave3 - wdmaud.drv File not found
Drivers32: wave4 - wdmaud.drv File not found
Drivers32: wave5 - wdmaud.drv File not found
Drivers32: wave6 - wdmaud.drv File not found
Drivers32: wavemapper - msacm32.drv File not found
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

CREATERESTOREPOINT
System Restore Service not available.

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2013/12/12 07:49:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2013/12/11 06:58:47 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Utilisateur PC\Recent
[2013/12/10 13:00:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Registry Helper
[2013/12/10 12:59:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Utilisateur PC\Application Data\SwvUpdater
[2013/12/10 12:58:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Utilisateur PC\Application Data\Tlapia
[2013/12/10 12:55:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Utilisateur PC\Application Data\SIGMA SPORT BC 506 user guide
[2013/11/26 03:44:46 | 000,389,120 | ---- | C] (SafeApp Software, LLC) -- C:\WINDOWS\System32\RegistryHelperLM.ocx
[2013/11/22 19:42:41 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Utilisateur PC\Mes documents\bapteme lyse
[2013/11/14 15:44:53 | 000,051,200 | ---- | C] (Prolific Technology Inc.) -- C:\WINDOWS\System32\drivers\ser2pl.sys
[2013/11/14 15:44:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Spy EasyUpdate
[2013/11/14 15:44:45 | 000,000,000 | ---D | C] -- C:\Program Files\SpyEasyUpdate
[1 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2013/12/12 07:34:52 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2013/12/12 07:21:20 | 000,000,424 | -H-- | M] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job
[2013/12/12 07:16:37 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013/12/12 07:16:33 | 000,000,432 | ---- | M] () -- C:\WINDOWS\tasks\AmiUpdXp.job
[2013/12/12 07:16:22 | 000,001,068 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013/12/12 07:16:15 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013/12/12 07:13:10 | 000,001,002 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013/12/12 07:10:30 | 000,001,184 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1993962763-162531612-1801674531-1003UA.job
[2013/12/12 07:10:20 | 000,001,072 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013/12/11 17:06:00 | 000,001,132 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1993962763-162531612-1801674531-1003Core.job
[2013/12/11 07:14:02 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2013/12/11 07:14:00 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013/12/11 07:05:21 | 000,213,672 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013/12/10 22:34:21 | 000,000,502 | ---- | M] () -- C:\Documents and Settings\Utilisateur PC\Bureau\ganache.htm
[2013/12/10 13:04:06 | 000,000,701 | ---- | M] () -- C:\WINDOWS\System32\InstallUtil.InstallLog
[2013/12/10 13:03:01 | 000,649,964 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat
[2013/12/10 13:03:01 | 000,566,706 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2013/12/10 13:03:01 | 000,138,510 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat
[2013/12/10 13:03:01 | 000,114,140 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2013/12/10 12:55:01 | 005,925,508 | ---- | M] () -- D:\Documents and Settings\Utilisateur PC\Mes documents\SIGMA SPORT BC 506 user guide.pdf
[2013/12/05 18:11:29 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2013/12/04 18:12:06 | 000,002,376 | ---- | M] () -- C:\Documents and Settings\Utilisateur PC\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2013/12/04 18:12:06 | 000,002,358 | ---- | M] () -- C:\Documents and Settings\Utilisateur PC\Bureau\Google Chrome.lnk
[2013/11/27 11:01:37 | 000,000,518 | ---- | M] () -- C:\Documents and Settings\Utilisateur PC\Bureau\url (1).htm
[2013/11/26 03:44:46 | 000,389,120 | ---- | M] (SafeApp Software, LLC) -- C:\WINDOWS\System32\RegistryHelperLM.ocx
[2013/11/19 11:21:30 | 000,230,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MpSigStub.exe
[2013/11/14 15:48:25 | 000,002,333 | ---- | M] () -- D:\Documents and Settings\Utilisateur PC\Mes documents\Spy EasyUpdate.lnk
[2013/11/14 15:46:33 | 000,101,412 | ---- | M] () -- D:\Documents and Settings\Utilisateur PC\Mes documents\download (1).mdb
[1 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2013/12/11 07:05:21 | 000,213,672 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013/12/10 22:34:19 | 000,000,502 | ---- | C] () -- C:\Documents and Settings\Utilisateur PC\Bureau\ganache.htm
[2013/12/10 13:11:18 | 000,207,726 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat
[2013/12/10 13:04:00 | 000,000,701 | ---- | C] () -- C:\WINDOWS\System32\InstallUtil.InstallLog
[2013/12/10 12:59:32 | 000,000,432 | ---- | C] () -- C:\WINDOWS\tasks\AmiUpdXp.job
[2013/12/10 12:56:43 | 005,925,508 | ---- | C] () -- D:\Documents and Settings\Utilisateur PC\Mes documents\SIGMA SPORT BC 506 user guide.pdf
[2013/11/27 11:01:36 | 000,000,518 | ---- | C] () -- C:\Documents and Settings\Utilisateur PC\Bureau\url (1).htm
[2013/11/14 19:04:12 | 000,002,333 | ---- | C] () -- D:\Documents and Settings\Utilisateur PC\Mes documents\Spy EasyUpdate.lnk
[2013/11/14 15:49:19 | 000,101,412 | ---- | C] () -- D:\Documents and Settings\Utilisateur PC\Mes documents\download (1).mdb
[2012/11/20 13:40:29 | 000,008,704 | ---- | C] () -- C:\WINDOWS\System32\CNMVS74.DLL
[2012/10/14 17:35:05 | 000,000,012 | ---- | C] () -- C:\Documents and Settings\Utilisateur PC\intlname.ols
[2012/10/13 13:45:09 | 000,178,688 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2012/10/13 13:25:34 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012/10/12 18:22:23 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012/01/14 12:45:04 | 000,000,385 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2012/01/14 10:53:23 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2011/11/05 08:48:41 | 000,000,127 | ---- | C] () -- C:\Documents and Settings\Utilisateur PC\default.pls
[2011/11/01 22:20:28 | 000,113,152 | ---- | C] () -- C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[color=#E56717]========== ZeroAccess Check ==========[/color]

[2012/10/13 13:56:38 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008/04/13 18:33:42 | 001,499,136 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009/02/09 11:53:55 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008/04/13 18:33:50 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[color=#E56717]========== LOP Check ==========[/color]

[2012/12/14 17:05:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2012/11/20 13:40:34 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\CanonBJ
[2013/10/12 11:21:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DriverGenius
[2013/12/10 13:00:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Registry Helper
[2013/10/23 18:31:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SpeedMaxPc
[2013/10/10 21:04:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TuneUp Software
[2013/10/17 15:03:00 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Application Data\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
[2013/12/10 12:55:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\SIGMA SPORT BC 506 user guide
[2012/01/14 13:03:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Softplicity
[2013/10/23 18:31:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\SpeedMaxPc
[2013/12/10 12:59:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\SwvUpdater
[2013/12/10 12:59:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Tlapia
[2012/01/14 12:33:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\TP
[2013/10/17 15:03:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\TuneUp Software

[color=#E56717]========== Purity Check ==========[/color]

[color=#E56717]========== Custom Scans ==========[/color]

[color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
[2008/04/13 18:34:04 | 001,037,824 | ---- | M] (Microsoft Corporation) MD5=F2317622D29F9FF0F88AEECD5F60F0DD -- C:\WINDOWS\explorer.exe
[2008/04/13 18:34:04 | 001,037,824 | ---- | M] (Microsoft Corporation) MD5=F2317622D29F9FF0F88AEECD5F60F0DD -- C:\WINDOWS\system32\dllcache\explorer.exe

[color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color]
[2008/04/13 18:34:24 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=E4BDF223CD75478BF44567B4D5C2634D -- C:\WINDOWS\system32\dllcache\svchost.exe
[2008/04/13 18:34:24 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=E4BDF223CD75478BF44567B4D5C2634D -- C:\WINDOWS\system32\svchost.exe

[color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
[2008/04/13 18:34:28 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=E74DDB12188C2FF57A78624DBF7332FC -- C:\WINDOWS\system32\dllcache\userinit.exe
[2008/04/13 18:34:28 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=E74DDB12188C2FF57A78624DBF7332FC -- C:\WINDOWS\system32\userinit.exe

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2008/04/13 18:34:30 | 000,512,000 | ---- | M] (Microsoft Corporation) MD5=DD73D6B9F6B4CB630CF35B438B540174 -- C:\WINDOWS\system32\dllcache\winlogon.exe
[2008/04/13 18:34:30 | 000,512,000 | ---- | M] (Microsoft Corporation) MD5=DD73D6B9F6B4CB630CF35B438B540174 -- C:\WINDOWS\system32\winlogon.exe

[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]

[color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*. >[/color]
[2012/12/14 17:05:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2013/02/20 20:29:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Adobe
[2011/11/05 08:00:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ahead
[2013/10/12 18:56:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Apple
[2012/12/14 17:05:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Apple Computer
[2012/11/20 13:40:34 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\CanonBJ
[2013/10/12 11:21:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DriverGenius
[2013/10/28 12:29:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Google
[2013/10/14 08:56:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2013/02/05 19:37:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\McAfee
[2013/09/14 17:49:42 | 000,000,000 | --SD | M] -- C:\Documents and Settings\All Users\Application Data\Microsoft
[2011/11/01 20:00:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NVIDIA
[2011/11/01 20:00:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NVIDIA Corporation
[2013/12/10 13:00:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Registry Helper
[2013/05/01 08:35:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Skype
[2013/10/23 18:31:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SpeedMaxPc
[2011/11/01 21:23:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Sun
[2013/10/10 21:04:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TuneUp Software
[2011/11/01 19:36:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2013/10/17 15:03:00 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Application Data\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}

[color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*.exe /s >[/color]
[2012/01/03 08:37:53 | 000,320,456 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\All Users\Application Data\Adobe\ARM\Reader_10.1.1\7993\AcrobatUpdater.exe
[2012/01/03 08:37:53 | 000,843,712 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\All Users\Application Data\Adobe\ARM\Reader_10.1.1\7993\AdobeARM.exe
[2012/01/03 08:37:53 | 000,320,456 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\All Users\Application Data\Adobe\ARM\Reader_10.1.1\7993\AdobeARMHelper.exe
[2012/01/03 08:37:53 | 000,320,456 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\All Users\Application Data\Adobe\ARM\Reader_10.1.1\7993\ReaderUpdater.exe
[2011/09/05 22:51:05 | 001,560,520 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\All Users\Application Data\Adobe\Setup\{AC76BA86-7AD7-1036-7B44-AA1000000001}\setup.exe
[2011/05/21 06:01:00 | 000,194,152 | ---- | M] (NVIDIA Corporation) -- C:\Documents and Settings\All Users\Application Data\NVIDIA\Updatus\WLMerger.exe

[color=#A23BEC]< %APPDATA%\*. >[/color]
[2011/11/05 08:03:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Adobe
[2011/11/05 08:05:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Ahead
[2012/12/14 17:03:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Apple Computer
[2013/06/07 12:33:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Google
[2011/11/01 13:08:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Identities
[2011/11/01 20:47:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Macromedia
[2013/10/14 08:56:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Malwarebytes
[2013/12/11 06:59:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Media Player Classic
[2013/04/09 20:06:43 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Microsoft
[2013/12/10 12:55:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\SIGMA SPORT BC 506 user guide
[2013/05/01 09:35:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Skype
[2012/01/14 13:03:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Softplicity
[2013/10/23 18:31:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\SpeedMaxPc
[2011/11/01 21:22:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Sun
[2013/12/10 12:59:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\SwvUpdater
[2013/12/10 12:59:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\Tlapia
[2012/01/14 12:33:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\TP
[2013/10/17 15:03:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\TuneUp Software
[2013/11/08 17:03:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\U3
[2012/12/25 19:53:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\vlc
[2013/04/19 22:10:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Utilisateur PC\Application Data\WinRAR

[color=#A23BEC]< %APPDATA%\*.exe /s >[/color]
[2013/04/29 16:59:13 | 000,069,632 | R--- | M] (Flexera Software LLC) -- C:\Documents and Settings\Utilisateur PC\Application Data\Microsoft\Installer\{84178AE8-C22D-48CB-A6BA-D116FD3FE469}\ARPPRODUCTICON.exe
[2013/04/29 16:59:13 | 000,049,152 | R--- | M] (Flexera Software LLC) -- C:\Documents and Settings\Utilisateur PC\Application Data\Microsoft\Installer\{84178AE8-C22D-48CB-A6BA-D116FD3FE469}\UNINST_Uninstall_Q_336D8C9DB2424DE5BC518E574B25652F.exe
[2013/12/10 12:59:21 | 000,292,392 | ---- | M] (Amonetizé Ltd) -- C:\Documents and Settings\Utilisateur PC\Application Data\SwvUpdater\Updater.exe
[2006/04/05 19:38:10 | 000,110,592 | ---- | M] () -- C:\Documents and Settings\Utilisateur PC\Application Data\U3\temp\cleanup.exe

[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]

[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color]

[color=#A23BEC]< hklm\software\clients\startmenuinternet|command /rs >[/color]
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\chrome.exe\shell\open\command\\: "C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" [2013/12/04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ShowIconsCommand: "C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --show-icons [2013/12/04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\HideIconsCommand: "C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --hide-icons [2013/12/04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ReinstallCommand: "C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --make-default-browser [2013/12/04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\\: "C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" [2013/12/04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\WINDOWS\system32\ie4uinit.exe" -reinstall [2013/10/13 12:28:02 | 000,174,592 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\WINDOWS\system32\ie4uinit.exe" -hide [2013/10/13 12:28:02 | 000,174,592 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\WINDOWS\system32\ie4uinit.exe" -show [2013/10/13 12:28:02 | 000,174,592 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2009/03/08 14:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: C:\Program Files\Internet Explorer\iexplore.exe [2009/03/08 14:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation)

[color=#A23BEC]< hklm\software\clients\startmenuinternet|command /64 /rs >[/color]
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\chrome.exe\shell\open\command\\: "C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" [2013/12/04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ShowIconsCommand: "C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --show-icons [2013/12/04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\HideIconsCommand: "C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --hide-icons [2013/12/04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ReinstallCommand: "C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --make-default-browser [2013/12/04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\\: "C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" [2013/12/04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\WINDOWS\system32\ie4uinit.exe" -reinstall [2013/10/13 12:28:02 | 000,174,592 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\WINDOWS\system32\ie4uinit.exe" -hide [2013/10/13 12:28:02 | 000,174,592 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\WINDOWS\system32\ie4uinit.exe" -show [2013/10/13 12:28:02 | 000,174,592 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2009/03/08 14:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: C:\Program Files\Internet Explorer\iexplore.exe [2009/03/08 14:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation)

[color=#A23BEC]< nslookup https://www.google.fr/?gws_rd=ssl /c >[/color]

< End of report >

D'accord!
1/
Commence à désinstaller en utilisant le logiciel ci-dessous :
- WhiteSmoke
- Spyhunter
------------------
Télécharge Revo-uninstaller

Exécute ce fichier pour installation

*******Aide Revo-uninstaller*******

2/
Supprime les extensions inutiles de ton navigateur .
Aide :
* Google chrome
* Firefox
* Internet explorer

3/
Pour bien vérifier que le fichier ci-dessous est infecté rend toi sur ce site
Virus Total

* Clique sur " choose file "
* Vas sur ton disque chercher ce fichier à cet emplacement :

C:\WINDOWS\System32\d3d9caps.dat


* Clique ensuite sur le bouton « Scan it »
* Patiente le temps de l'analyse qui dépend de la taille du fichier
* Une fois celle-ci terminée, apparaît le rang de détection (Detection Ratio)
* Communique-le dans ta prochaine réponse sur le forum et communique en même temps le lien de la page VirusTotal en le copiant dans la barre d'adresse et en le collant dans ta prochaine réponse

@+

¤¤¤ Le meilleur remède pour tous les problèmes, c'est la patience.... ¤¤¤

voila www.virustotal.com/fr/file/89a3d391151864c12b209947a15e4f61214c0d137c333165456b76ddfc5e170a/analysis/1386851443/

et ratio 0/49 ET SPYHUNTER etant payant je ne l'ai pas acheté!

donc rien n'est infecté? ou de dois refaire un scan otl? merci

On continue alors :
1/
Lance Malwarebytes, fais la mise à jour, choisis une analyse complète, supprime tous ce qu'il trouve puis poste le rapport stp

2/
On va lancer un autre outil :
* Télécharge ZHPDiag de Nicolas Coolman à partir ce lien :

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html
ou
http://www.premiumorange.com/zeb-help-process/zhpdiag.html
* Une fois le téléchargement achevé,
* Double-clique sur l'icône pour lancer le programme. Sous Vista , Seven ou Windows 8 clic droit « exécuter en tant qu'administrateur »
* Dans la fenêtre ZHPDiag qui vient de s'ouvrir , clique sur "Configurer"
* Clique sur la loupe en bas à gauche sans signe pour lancer l'analyse.
* Clique sur OUI à la question "Voulez-vous un rapport full options"
* Laisse l'outil travailler, il peut être assez long.
* Un rapport s'ouvre. Ce rapport se trouve également sur ton bureau
* Héberge le rapport ZHPDiag.txt de ton bureau sur : FEC Upload ou : malekal.com
* Fais copier/coller le lien fourni dans ta prochaine réponse

Aide ZHPDiag :http://nicolascoolman.webs.com/tutorials.htm

@+

voila le
rapportMalwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Version de la base de données: v2013.12.12.05

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Utilisateur PC :: UTILISAT-66BE35 [administrateur]

12/12/2013 17:02:13
mbam-log-2013-12-12 (17-02-13).txt

Type d'examen: Examen complet (C:\|D:\|)
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 268121
Temps écoulé: 53 minute(s), 53 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 13
HKCR\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9} (PUP.Software.Updater) -> Mis en quarantaine et supprimé avec succès.
HKCR\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476} (PUP.Software.Updater) -> Mis en quarantaine et supprimé avec succès.
HKCR\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67} (PUP.Software.Updater) -> Mis en quarantaine et supprimé avec succès.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96} (PUP.Software.Updater) -> Mis en quarantaine et supprimé avec succès.
HKCR\Updater.AmiUpd.1 (PUP.Software.Updater) -> Mis en quarantaine et supprimé avec succès.
HKCR\Updater.AmiUpd (PUP.Software.Updater) -> Mis en quarantaine et supprimé avec succès.
HKCR\CLSID\{A6FEED89-3BCD-4D19-9DC2-3E613A80A2A4} (PUP.Optional.Amonetize.A) -> Mis en quarantaine et supprimé avec succès.
HKCR\TypeLib\{1C1356DA-1E98-4810-A9F6-18D89BD1C0C0} (PUP.Optional.Amonetize.A) -> Mis en quarantaine et supprimé avec succès.
HKCR\Interface\{D54C859C-6066-4F31-8FE0-2AAEDCAE67D7} (PUP.Optional.Amonetize.A) -> Mis en quarantaine et supprimé avec succès.
HKCR\AmiBs.Installer.1 (PUP.Optional.Amonetize.A) -> Mis en quarantaine et supprimé avec succès.
HKCR\AmiBs.Installer (PUP.Optional.Amonetize.A) -> Mis en quarantaine et supprimé avec succès.
HKCR\Typelib\{F126C9FC-9299-40F2-BD42-C59023AD1E7F} (PUP.Optional.GetNow.A) -> Mis en quarantaine et supprimé avec succès.
HKCR\Interface\{237FDFDB-3722-470E-8BA8-90196DABE967} (PUP.Optional.GetNow.A) -> Mis en quarantaine et supprimé avec succès.

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 1
C:\Documents and Settings\Utilisateur PC\Application Data\SwvUpdater (PUP.Software.Updater) -> Mis en quarantaine et supprimé avec succès.

Fichier(s) détecté(s): 10
C:\Documents and Settings\Utilisateur PC\Application Data\SwvUpdater\Updater.exe (PUP.Software.Updater) -> Mis en quarantaine et supprimé avec succès.
D:\Documents and Settings\Utilisateur PC\Mes documents\Downloads\Setup__2165_il756.exe (PUP.Optional.Amonetize.A) -> Mis en quarantaine et supprimé avec succès.
D:\Documents and Settings\Utilisateur PC\Mes documents\Downloads\SIGMA SPORT BC 506 user guide provided through diplotop.fr (2).exe (PUP.Optional.GetNow.A) -> Mis en quarantaine et supprimé avec succès.
C:\System Volume Information\_restore{153024DA-DA1E-4AF0-AC7D-4E1A62656238}\RP621\A0066075.exe (Trojan.Agent.ED) -> Mis en quarantaine et supprimé avec succès.
C:\System Volume Information\_restore{153024DA-DA1E-4AF0-AC7D-4E1A62656238}\RP557\A0058732.exe (PUP.Optional.PricePeep.A) -> Mis en quarantaine et supprimé avec succès.
D:\Documents and Settings\Utilisateur PC\Mes documents\Downloads\SIGMA SPORT BC 506 user guide provided through diplotop.fr (1).exe (PUP.Optional.LiveSoftAction.A) -> Mis en quarantaine et supprimé avec succès.
D:\Documents and Settings\Utilisateur PC\Mes documents\Downloads\SIGMA SPORT BC 506 user guide provided through diplotop.fr.exe (PUP.Optional.LiveSoftAction.A) -> Mis en quarantaine et supprimé avec succès.
C:\Documents and Settings\Utilisateur PC\Application Data\SwvUpdater\Updater.xml (PUP.Software.Updater) -> Mis en quarantaine et supprimé avec succès.
C:\Documents and Settings\Utilisateur PC\Application Data\SwvUpdater\status.cfg (PUP.Software.Updater) -> Mis en quarantaine et supprimé avec succès.
C:\WINDOWS\Tasks\AmiUpdXp.job (PUP.Software.Updater) -> Mis en quarantaine et supprimé avec succès.

(fin)

Bonsoir,
Avant de lancer ZHPDiag :
Suis ce tutorial https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start=
Vas sur le lien, télécharge AdwCleaner .
Lance AdwCleaner, clique sur [Scanner].
Le scan peux durer plusieurs minutes, patienter.
Une fois le scan terminé, clique sur [Nettoyer]

Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.

@+
¤¤¤ Le meilleur remède pour tous les problèmes, c'est la patience.... ¤¤¤

voila je te poste le rapport merci beaucoup
# AdwCleaner v3.007 - Rapport créé le 12/10/2013 à 16:51:09
# Mis à jour le 09/10/2013 par Xplode
# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)
# Nom d'utilisateur : Utilisateur PC - UTILISAT-66BE35
# Exécuté depuis : D:\Documents and Settings\Utilisateur PC\Mes documents\Downloads\adwcleaner.exe
# Option : Nettoyer

***** [ Services ] *****

***** [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\Documents and Settings\All Users\Application Data\BrowserDefender
Dossier Supprimé : C:\Documents and Settings\All Users\Application Data\Tarma Installer
Dossier Supprimé : C:\Program Files\SoftwareUpdater
Dossier Supprimé : C:\Documents and Settings\Utilisateur PC\Application Data\Babylon
Dossier Supprimé : D:\Documents and Settings\Utilisateur PC\Mes documents\optimizer pro
Fichier Supprimé : C:\END
Fichier Supprimé : C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\User Data\Default\bProtector Web Data
Fichier Supprimé : C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\User Data\Default\bprotectorpreferences
Fichier Supprimé : C:\WINDOWS\Tasks\BrowserDefendert.job

***** [ Raccourcis ] *****

***** [ Registre ] *****

Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs [bProtectTabs]
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Clé Supprimée : HKCU\Software\dsiteproducts
Clé Supprimée : HKCU\Software\HappyLyrics
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

***** [ Navigateurs ] *****

-\\ Internet Explorer v8.0.6001.18702

-\\ Google Chrome v

[ Fichier : C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\User Data\Default\preferences ]

Supprimée : homepage
Supprimée : urls_to_restore_on_startup

*************************

AdwCleaner[R0].txt - [2192 octets] - [12/10/2013 16:44:26]
AdwCleaner[S0].txt - [2025 octets] - [12/10/2013 16:51:09]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2085 octets] ##########
# AdwCleaner v3.015 - Rapport créé le 12/12/2013 à 20:39:35
# Mis à jour le 10/12/2013 par Xplode
# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)
# Nom d'utilisateur : Utilisateur PC - UTILISAT-66BE35
# Exécuté depuis : D:\Documents and Settings\Utilisateur PC\Mes documents\Downloads\adwcleaner.exe
# Option : Nettoyer

***** [ Services ] *****

***** [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\Documents and Settings\All Users\Application Data\Registry Helper
Dossier Supprimé : C:\Documents and Settings\All Users\Application Data\SpeedMaxPc
Dossier Supprimé : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\jZip
Dossier Supprimé : C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\jZip
Dossier Supprimé : C:\Documents and Settings\Utilisateur PC\Application Data\SpeedMaxPc
Dossier Supprimé : C:\Documents and Settings\Utilisateur PC\Application Data\Tlapia
[!] Dossier Supprimé : C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ibcgjcbeckcdemelifnledhihpaighfk
Fichier Supprimé : C:\END

***** [ Raccourcis ] *****

***** [ Registre ] *****

Clé Supprimée : HKCU\Software\Google\Chrome\Extensions\ibcgjcbeckcdemelifnledhihpaighfk
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\ibcgjcbeckcdemelifnledhihpaighfk
Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
Clé Supprimée : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Clé Supprimée : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Valeur Supprimée : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Valeur Supprimée : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Valeur Supprimée : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x64]
Valeur Supprimée : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x86]
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{4277F7CF-0000-46CF-BA49-D624465C4BAB}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3614D305-2DBB-4991-9297-750DD60FFC73}
Valeur Supprimée : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files\Movies Toolbar\SafetyNut\SRTOOL~1\IE\dtUser.exe]
Clé Supprimée : HKCU\Software\InstalledThirdPartyPrograms
Clé Supprimée : HKCU\Software\jZip
Clé Supprimée : HKCU\Software\lollipop
Clé Supprimée : HKCU\Software\Optimizer Pro
Clé Supprimée : HKCU\Software\SpeedMaxPC
Clé Supprimée : HKCU\Software\torch
Clé Supprimée : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clé Supprimée : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Clé Supprimée : HKLM\Software\InstalledThirdPartyPrograms
Clé Supprimée : HKLM\Software\SpeedMaxPC
Clé Supprimée : HKLM\Software\systweak
Clé Supprimée : HKLM\Software\torch
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\DSite
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\bi_uninstaller
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyPC Backup
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375

***** [ Navigateurs ] *****

-\\ Internet Explorer v8.0.6001.18702

-\\ Google Chrome v

[ Fichier : C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [6722 octets] - [12/10/2013 15:44:26]
AdwCleaner[S0].txt - [6431 octets] - [12/10/2013 15:51:09]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6491 octets] ##########

Bonjour,
Tu peux maintenant effectuer la procédure de ZHPDiag indiqué : <<< IC en 2/ >>>>

@+

voila c'est fait et tout semble etre rentré dans l'ordre,un grand merci a toi
a+

voila

https://pjjoint.malekal.com/files.php?id=ZHPDiag_20131213_n11k5r6r15o10

Bonjour,
1/
Désinstalle : Logiciel: Google Toolbar for Internet Explorer

2/
--> Copie tout le texte présent en gras ci-dessous (Sélectionne-le, clique droit dessus et choisis "Copier").


Script ZHPFix
G2 - GCE: Preference [User Data\Default] [ibcgjcbeckcdemelifnledhihpaighfk] WhiteSmoke New V6 v.10.20.3.520, (Désactivé) =>PUP.WhiteSmoke
O61 - LFC: 12/12/2013 - 20:25:17 ---A- . (...) -- C:\Documents and Settings\Utilisateur PC\Local Settings\Temp\SHSetup.exe [45665360] =>Crapware.SpyHunter
O69 - SBI: SearchScopes [HKCU] {24228783-EA17-4D3C-BE03-B5539F886131} - (WhiteSmoke New V6 Customized Web Search) - http://search.conduit.com =>PUP.WhiteSmoke
[HKLM\Software\Google\Chrome\Extensions\ibcgjcbeckcdemelifnledhihpaighfk] =>PUP.WhiteSmoke^
[HKLM\Software\Classes\Iminent.Companion.Buddy] =>Adware.IMBooster
C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ibcgjcbeckcdemelifnledhihpaighfk =>PUP.WhiteSmoke^
[HKCU\Software\ForumerIT] =>Toolbar.Forumer^

EmptyCLSID
EmptyFlash
EmptyTemp


=> Puis lance ZHPFix depuis le raccourci situé sur ton Bureau.
(Sous Vista/Win7/Win8, il faut cliquer droit sur le raccourci de ZHPFix et choisir Exécuter en tant qu'administrateur)
=> Une fois ZHPFix ouvert, clique sur "importer" puis sur "ok" et ensuite colle le texte dans la fenêtre, clique sur GO en bas de page et confirme par oui pour lancer le nettoyage des données

=> laisse travailler l'outil et ne touche à rien ...
=> S'il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le !

Une fois terminé, un nouveau rapport s'affiche : poste le contenu de ce dernier dans ta prochaine réponse ...
Ce rapport est copié sur le bureau

( ce rapport est en outre sauvegardé dans ce dossier C:/ZHP/ZHPDIAG)

===================================
Aide :http://helper-formation.fr/entraide/viewtopic.php?f=31&t=2333

3/
* Télécharge sur le bureau RogueKiller (par tigzy)
https://www.luanagames.com/index.fr.html
* ( Sous Vista/Seven,clique droit, lancer en tant qu'administrateur )
* Quitte tous tes programmes en cours
* Lance RogueKiller.exe

Si l'infection bloque le programme, il faut le relancer plusieurs fois ou le renommer en winlogon.exe

* Laisse le prescan se terminer, clique sur Scan

* Clique sur Rapport pour l'ouvrir puis copie/colle le sur le dans ton prochain message

4/
Est ce que tu as le cd d'installation de ton windows?

@+

je ne sais pas ouvrir ZHPFix car il me met"cette application n'a pu démarrer car framedyn.dll est introuvable.La reinstallation de cette application peut coriger ce probleme.

Bonjour,
Démarre en Mode sans échec avec prise en charge réseau :
Pour cela, tu tapotes la touche F8 dès le début de l'allumage du pc sans t'arrêter
Une fenêtre va s'ouvrir tu te déplaces avec les flèches du clavier sur >> démarrer en Mode sans échec avec prise en charge réseau
puis tape entrée.
Une fois sur le bureau s'il n'y a pas toutes les couleurs et autres c'est normal !
(Si F8 ne marche pas utilise la touche F5)
----------------------------
Aide : https://www.commentcamarche.net/informatique/windows/113-demarrer-windows-10-en-mode-sans-echec/

Dans ce mode tu refais la procédure de ZHPFix puis poste le rapport stp

ca ne fonctionne pas non plus en mode sans echec;il me met le meme message d erreur

D'accord!
Relance OTL
- Sous XP double-clic sur l'icône pour lancer l'outil.
- Sous Vista/Seven clic-droit sur l'icône et choisir "Exécuter en tant qu'administrateur" dans le menu contextuel.
* Dans la partie "Personnalisation", copie/colle les instructions suivantes :

:OTL
IE - HKU\S-1-5-21-1993962763-162531612-1801674531-1003\..\SearchScopes\{24228783-EA17-4D3C-BE03-B5539F886131}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3311268&CUI=UN20857982642665832&UM=2
CHR - Extension: WhiteSmoke New V6 = C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ibcgjcbeckcdemelifnledhihpaighfk\10.20.3.520_0\

:Reg
[-HKLM\Software\Google\Chrome\Extensions\ibcgjcbeckcdemelifnledhihpaighfk]
[-HKCU\Software\ForumerIT]
[-HKLM\Software\Classes\Iminent.Companion.Buddy]

:Commands
[emptytemp]

* Clique sur le bouton Correction.
* Patiente pendant le travail de l'outil, il doit ensuite redémarrer le PC.
* Accepte en cliquant sur OK.
* Le rapport indiquant les actions réalisées par OTL doit s'ouvrir spontanément.

Tu peux le retrouver le fichier à la racine du disque : C:\_OTL\MovedFiles

¤¤¤ Le meilleur remède pour tous les problèmes, c'est la patience.... ¤¤¤

All processes killed
========== OTL ==========
Registry key HKEY_USERS\S-1-5-21-1993962763-162531612-1801674531-1003\Software\Microsoft\Internet Explorer\SearchScopes\{24228783-EA17-4D3C-BE03-B5539F886131}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{24228783-EA17-4D3C-BE03-B5539F886131}\ not found.
File C:\Documents and Settings\Utilisateur PC\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ibcgjcbeckcdemelifnledhihpaighfk\10.20.3.520_0 not found.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\ibcgjcbeckcdemelifnledhihpaighfk\ not found.
Registry key HKEY_CURRENT_USER\Software\ForumerIT\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Iminent.Companion.Buddy\ deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 265994 bytes
->Temporary Internet Files folder emptied: 33209 bytes

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Utilisateur PC
->Temp folder emptied: 114680129 bytes
->Temporary Internet Files folder emptied: 492964 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 264386346 bytes
->Flash cache emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1500970 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 83307 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 12209 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 364,00 mb

OTL by OldTimer - Version 3.2.69.0 log created on 12152013_151902

Files\Folders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Tu peux passer à l'étape qui suive (RogueKiller) ! :-)

¤¤¤ Le meilleur remède pour tous les problèmes, c'est la patience.... ¤¤¤