Possibilité d'infection de mon pc

j'ai souvent une page blanche qui s'ouvre avec marqué en entête akamaid ou quelque chose comme ça et à partir de ce moment tout ce met à ramer

# AdwCleaner v1.606 - Rapport créé le 13/01/2014 à 22:22:06
# Mis à jour le 10/05/2012 par Xplode
# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)
# Nom d'utilisateur : Christian - Packard-Bell
# Exécuté depuis : C:\Documents and Settings\Christian\Bureau\adwcleaner-1.606-en.exe
# Option [Suppression]


***** [Services] *****


***** [Fichiers / Dossiers] *****


***** [Registre] *****

Clé Supprimée : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43

***** [Registre - GUID] *****


***** [Navigateurs] *****

-\\ Internet Explorer v8.0.6001.18702

[OK] Le registre ne contient aucune entrée illégitime.

-\\ Mozilla Firefox v26.0 (fr)

Nom du profil : default
Fichier : C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\prefs.js

[OK] Le fichier ne contient aucune entrée illégitime.

-\\ Google Chrome v32.0.1700.72

Fichier : C:\Documents and Settings\Christian\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

[OK] Le fichier ne contient aucune entrée illégitime.

*************************

AdwCleaner[R1].txt - [2215 octets] - [09/01/2014 10:34:47]
AdwCleaner[R2].txt - [2275 octets] - [09/01/2014 10:40:23]
AdwCleaner[S1].txt - [2347 octets] - [09/01/2014 10:40:37]
AdwCleaner[R3].txt - [1382 octets] - [10/01/2014 21:29:20]
AdwCleaner[S2].txt - [1444 octets] - [10/01/2014 21:29:58]
AdwCleaner[R4].txt - [2411 octets] - [12/01/2014 15:59:00]
AdwCleaner[R5].txt - [2471 octets] - [12/01/2014 15:59:17]
AdwCleaner[S3].txt - [2552 octets] - [12/01/2014 15:59:28]
AdwCleaner[R6].txt - [1804 octets] - [13/01/2014 22:21:40]
AdwCleaner[S4].txt - [1738 octets] - [13/01/2014 22:22:06]

########## EOF - C:\AdwCleaner[S4].txt - [1866 octets] ##########

Ok..pas top tout ça. Je vois que tu l'as passé déjà hier en plus. Reste JRT.

j'ai suivi le lien pour JRT je me retrouve avec un nouveau moteur de recherche my searsh je sais pas quoi et des application inutile style free games, mobogenie, je suis dans le paté je vais au lit on verra demain, je me lève à 4 heure du mat bonsoir

Bonsoir faeris on reprend les activités de nettoyage, j'ai scané mon ordi avec JRT On dirai que ça vas beaucoup mieux merci de ton aide

c'est parti, j'ai posté le rapport ZHPDiag

Pourquoi tu ne te reconnectes pas avec ton compte "cachluna64" ?
Euh, où ça ?

quoi ou ça je comprend pas

~ Rapport de ZHPDiag v2014.1.12.13 - Nicolas Coolman (12/01/2014)
~ Lancé par Christian (14/01/2014 22:20:48)
~ Adresse du Site Web http://nicolascoolman.webs.com
~ Forums gratuits d'Assistance à la désinfection : http://nicolascoolman.webs.com/apps/links/
~ Traduit par Nicolas Coolman
~ Etat de la version :
~ Liste blanche : Activée par le programme
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Not Found


---\\ Navigateurs Internet
MSIE: Internet Explorer v8.0.6001.18702
MFIE: Mozilla Firefox 26.0
GCIE: Google Chrome v32.0.1700.72 (Defaut)

---\\ Informations sur les produits Windows
~ Langage: Français
Microsoft Windows XP, 32-bit Service Pack 3 (Build 2600)
Windows Automatic Updates : OK
Windows Genuine Advantage : OK

---\\ Logiciels de protection du système
Malwarebytes Anti-Malware version 1.75.0.1300
Microsoft Security Client FR-FR Language Pack v2.1.1116.0
McAfee Security Scan Plus v3.8.130.10
Spybot - Search & Destroy v1.6.2

---\\ Logiciels d'optimisation du système
CCleaner v3.17 =>Piriform Ltd

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels
Adobe Flash Player 11 Plugin
Adobe Reader X
Java 7 Update 45

---\\ Informations sur le système
~ Processor: x86 Family 6 Model 15 Stepping 6, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 1022 MB (63% free)
System Restore: Activé (Enable)
System drive C: has 185 GB (40%) free of 458 GB

---\\ Mode de connexion au système
~ Computer Name: Packard-Bell
~ User Name: Christian
~ All Users Names: SUPPORT_388945a0, HelpAssistant, Christian, ASPNET, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Documents and Settings\Christian\Application Data\ZHP\
~ %AppData% : C:\Documents and Settings\Christian\Application Data\
~ %Desktop% : C:\Documents and Settings\Christian\Bureau\
~ %Favorites% : C:\Documents and Settings\Christian\Favoris\
~ %LocalAppData% : C:\Documents and Settings\Christian\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\Christian\Menu Démarrer\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\system32\

---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 185 Go of 458 Go)
D: Hard drive, Flash drive, Thumb drive (Free 13 Go of 149 Go)
E: Floppy drive, Flash card reader, USB Key (Not Inserted)
H: CD-ROM drive (Free 0 Go of 0 Go)
I: Floppy drive, Flash card reader, USB Key (Not Inserted)
K: Floppy drive, Flash card reader, USB Key (Not Inserted)
L: Floppy drive, Flash card reader, USB Key (Not Inserted)



---\\ Etat du Centre de Sécurité Windows
~ Security Center: 41 Legitimates Filtered in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 - 03:34:03.) -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.897CA9DA6F568E24549719D5676385A1] - (.Microsoft Corporation - Internet Extensions for Win32.) (.29/10/2013 - 08:57:02.) -- C:\WINDOWS\system32\wininet.dll [920064]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 - 03:34:28.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 14:49:54.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138496]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 19:40:30.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512]
[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/04/2008 - 20:14:21.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744]
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/04/2008 - 19:40:46.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976]
[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.14/04/2008 - 02:57:38.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44672]
[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.13/04/2008 - 17:36:05.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.14/04/2008 - 03:00:52.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [54144]
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.13/04/2008 - 19:40:58.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [42112]
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.13/04/2008 - 19:57:15.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [152832]
[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.13/04/2008 - 20:19:42.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264]
[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 14:29:31.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [456320]
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.13/04/2008 - 20:21:00.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 - 20:15:53.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574976]
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/04/2008 - 03:09:40.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80384]
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/04/2008 - 20:19:43.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328]
[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 19:32:51.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.14/04/2008 - 02:57:34.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58752]
[MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.14/04/2008 - 02:56:04.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [53376]
~ Generic Processes: Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 20/2548
~ Mes musiques (My Musics) : 1/224
~ Mes Videos (My Videos) : 2/316
~ Mes Favoris (My Favorites) : 1/235
~ Mes Documents (My Documents) : 2/8343
~ Mon Bureau (My Desktop) : 2/1739
~ Menu demarrer (Programs) : 1/47
~ Hidden Files: Scanned in 00mn 16s



---\\ Processus lancés
[MD5.B0F49DA36F30922F5DDC3B623B778FCE] - (.Microsoft Corporation - Antimalware Service Executable.) -- c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208] [PID.1096]
[MD5.ABDD5AD016AFFD34AD40E944CE94BF59] - (.SEIKO EPSON CORPORATION - eEBAPI Core Process module.) -- C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe [94208] [PID.1880]
[MD5.B33CF4DE909A5B30F526D82053A63C8E] - (.ABBYY - ABBYY network license server.) -- C:\Program Files\Fichiers communs\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048] [PID.2032]
[MD5.026DA2AB097171C02EAC7AB3EE22D269] - (.Microsoft Corporation - Media Center Receiver Service.) -- C:\WINDOWS\eHome\ehRecvr.exe [237568] [PID.212]
[MD5.980EEEA91776357518892C5544768E2B] - (.Microsoft Corporation - Service de planification Media Center.) -- C:\WINDOWS\eHome\ehSched.exe [103424] [PID.272]
[MD5.80A79264302910C7C24BA7E44267EFEF] - (.Oracle Corporation - Java Quick Starter Service.) -- C:\Program Files\Java\jre7\bin\jqs.exe [182696] [PID.536]
[MD5.65085456FD9A74D7F1A999520C299ECB] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376] [PID.564]
[MD5.E0D7732F2D2E24B2DB3F67B6750295B8] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512] [PID.660]
[MD5.10FEDFC6578C202B658CDB8B039842B6] - (.McAfee, Inc. - SiteAdvisor.) -- C:\Program Files\McAfee\SiteAdvisor\McSACore.exe [104880] [PID.1616]
[MD5.D1D5DAB39DCB4BE0359943738D87409B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [532040] [PID.1740]
[MD5.773940B8D50439391FFA619B3EEF01A3] - (.SEIKO EPSON CORPORATION - SAgent4.) -- C:\WINDOWS\system32\SAgent4.exe [131072] [PID.2332]
[MD5.332D341D92B933600D41953B08360DFB] - (.Ulead Systems, Inc. - ULCDRSvr.) -- C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe [49152] [PID.2492]
[MD5.B9FE1F943508953C0683AB7F1602E643] - (.Pas de propriétaire - USBDeviceService Module.) -- C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe [90112] [PID.3176]
[MD5.EC8BC082FFC027F7C2C3C8DCFD8BC15D] - (...) -- C:\Program Files\Jump Flip\bin\utilJumpFlip.exe [97056] [PID.3208]
[MD5.5A0C788C5BC5F2C993CB60940ADCF95E] - (.X10 - X10 Module.) -- C:\Program Files\Common Files\X10\Common\X10nets.exe [20480] [PID.3268]
[MD5.0DAD93BB0FECF5016AE3C06CBB0A873B] - (.Microsoft Corporation - COM Surrogate.) -- C:\WINDOWS\system32\dllhost.exe [5120] [PID.3688]
[MD5.FEE1D045E9B728A23C6046C1AFFF3CD0] - (.H.D.S. Hungary - Hard Disk Sentinel Engine.) -- C:\Program Files\Hard Disk Sentinel\HDSentinel.exe [4137112] [PID.400]
[MD5.76A3A30B58405C2C6D833895253A51A9] - (.Apple Computer, Inc. - Pas de description.) -- C:\Program Files\QuickTime\qttask.exe [98304] [PID.616]
[MD5.F7D68D8E70EA376713A39395664793CA] - (.Pinnacle Systems GmbH - Pinnacle USB Tip - for Multi Media eXtensio.) -- C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe [199752] [PID.2224]
[MD5.EA9D3466AC7A7F62D386937DF9CB8C41] - (.RealNetworks, Inc. - RealPlayer.) -- C:\Program Files\Real\RealPlayer\RealPlay.exe [26112] [PID.3408]
[MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [254336] [PID.1236]
[MD5.6B8F8210242F34680B998E4A30D7B96E] - (.Packard Bell BV - SmpSys.exe.) -- C:\APPS\SMP\SmpSys.exe [975360] [PID.2116]
[MD5.896A1DB9A972AD2339C2E8569EC926D1] - (.Safer Networking Limited - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2144088] [PID.276]
[MD5.0E9C7F16E998E794BC2DCB21FC7DA113] - (.Orbiscom Ltd. All rights reserved. - ECBL Client.) -- C:\Program Files\e-Carte Bleue Caisse d'Epargne\ecbl-cnce.exe [278528] [PID.2664]
[MD5.D3D4BD94434A9CB4B35E82283EAE8EFB] - (.McAfee, Inc. - McAfee Security Scanner Scheduler.) -- C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe [273296] [PID.2788]
[MD5.32C26797AB646074A2BB562F9D10ADB5] - (.Microsoft Corporation - Microsoft Office OneNote Quick Launcher.) -- C:\Program Files\Microsoft Office\Office12\ONENOTEM.exe [97680] [PID.2844]
[MD5.CD9197FC0896B7CA8624F72F312B4CF1] - (...) -- C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe [1992328] [PID.3332]
[MD5.EC8BC082FFC027F7C2C3C8DCFD8BC15D] - (...) -- C:\Program Files\Jump Flip\updateJumpFlip.exe [97056] [PID.824]
[MD5.4C9D9C380E70FF2103E5C33EDF7599AD] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8334336] [PID.4476]
~ Processes Running: Scanned in 00mn 06s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Documents and Settings\Christian\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] http://fr.search.yahoo.com
G0 - GCSP: Preference [User Data\Default][HomePage] http://start.mysearchdial.com =>Adware.MyWebSearch
G2 - GCE: Preference [User Data\Default] [hphehadppenpmajgnkjdcopcfijjegaf] Jump Flip v.1.0.0 (Activé)
G2 - GCE: Preference [User Data\Default] [licjnkifamhpbaefhdpacpmihicfbomb] PricePeep v.2.2.0.8 (Activé) =>Adware.PricePeep
G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [pbpohikckhbcljgombipcdoinkaedlfa] Smart Display v.1.6 (Activé) =>Spyware.SmartDisplay
~ Google Browser: 14 Legitimates Filtered in 00mn 04s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\prefs.js
M2 - MFEP: prefs.js [Christian - wo234ela.default\***@***] [] mysearchdial.com v1.6.0 (..) =>Adware.MyWebSearch
M2 - MFEP: prefs.js [Christian - wo234ela.default\***@***] [] VideoFileDownload - Download YouTube Videos v1.5 (..)
P2 - FPN: [HKLM] [@ngm.nexoneu.com/NxGame] - (...) -- C:\Documents and Settings\All Users\Application Data\NexonEU\NGM\npNxGameeu.dll (.not file.)
P2 - FPN: [HKLM] [@tools.Software.com/Software Update;version=3] - (...) -- C:\Program Files\Software\Update\1.3.25.0\npSoftwareUpdate3.dll (.not file.) =>Adware.Boxore
P2 - FPN: [HKLM] [@tools.Software.com/Software Update;version=9] - (...) -- C:\Program Files\Software\Update\1.3.25.0\npSoftwareUpdate3.dll (.not file.) =>Adware.Boxore
~ Firefox Browser: 24 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Keys: Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 06s
~ Nombre de lignes (Lines number): 15513



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Easy Photo Print - [HKLM]{9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - [HKLM]{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} . (.McAfee, Inc. - SiteAdvisor.) -- C:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{01E04581-4EEE-11D0-BFE9-00AA005B4383} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{0E5CBF21-D15F-11D0-8301-00AA005B4383} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline
~ Toolbar: Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\Program [AllUsers]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - GS\Program [AllUsers]: MSN.lnk . (.Microsoft Corporation - Win32 Cabinet Self-Extractor.) -- C:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe =>.Microsoft Corporation
O4 - GS\Program [AllUsers]: Windows Messenger.lnk . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
O4 - GS\Program [Christian]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\Program [Christian]: Lecteur Windows Media.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
O4 - GS\Program [Administrateur]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe
O4 - GS\Program [Administrateur]: Lecteur Windows Media.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
~ Global Startup: 21 Legitimates Filtered in 00mn 00s



---\\ Applications lancées au démarrage du sytème (O4)
O4 - GS\Program [AllUsers]: e-Carte Bleue Caisse d'Epargne.lnk . (.Orbiscom Ltd. All rights reserved. - ECBL Client.) -- C:\Program Files\e-Carte Bleue Caisse d'Epargne\ecbl-cnce.exe
O4 - GS\Program [AllUsers]: McAfee Security Scan Plus.lnk . (.McAfee, Inc. - McAfee Security Scanner Scheduler.) -- C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
O4 - GS\Program [Christian]: IMVU.lnk . (...) -- C:\Documents and Settings\Christian\Application Data\IMVUClient\IMVUQualityAgent.exe (.not file.)
O4 - GS\Program [Christian]: OneNote 2007 - Capture d'écran et lancement.lnk . (.Microsoft Corporation - Microsoft Office OneNote Quick Launcher.) -- C:\Program Files\Microsoft Office\Office12\ONENOTEM.exe
O4 - HKLM\..\Run: [Hard Disk Sentinel] . (.H.D.S. Hungary - Hard Disk Sentinel Engine.) -- C:\Program Files\Hard Disk Sentinel\HDSentinel.exe
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Computer, Inc. - Pas de description.) -- C:\Program Files\QuickTime\qttask.exe
O4 - HKLM\..\Run: [USBToolTip] . (.Pinnacle Systems GmbH - Pinnacle USB Tip - for Multi Media eXtensio.) -- C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe
O4 - HKLM\..\Run: [KernelFaultCheck] Clé orpheline
O4 - HKLM\..\Run: [RealTray] . (.RealNetworks, Inc. - RealPlayer.) -- C:\Program Files\Real\RealPlayer\RealPlay.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe =>.Oracle Corporation
O4 - HKLM\..\RunOnce: [Del958015] . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\WINDOWS\system32\cmd.exe =>.Microsoft Corporation
O4 - HKCU\..\Run: [SmpcSys] . (.Packard Bell BV - SmpSys.exe.) -- C:\APPS\SMP\SmpSys.exe
O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [EPSON SX525WD Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIGAE.exe =>.Epson Seiko Corporation
O4 - HKCU\..\Run: [Epson Stylus SX525WD(Réseau)] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIGAE.exe =>.Epson Seiko Corporation
O4 - HKCU\..\Run: [KPeerNexonEU] . (.NEXON Inc. - Pas de description.) -- C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] . (.Safer Networking Limited - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\RunOnce: [Del958015] . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\WINDOWS\system32\cmd.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] . (.Microsoft Corporation - Watson Subscriber for SENS Network Notifica.) -- C:\Program Files\Fichiers communs\Microsoft Shared\DW\DWTRIG20.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe
O4 - HKUS\S-1-5-21-3007245855-1371804334-879236170-1005\..\Run: [SmpcSys] . (.Packard Bell BV - SmpSys.exe.) -- C:\APPS\SMP\SmpSys.exe
O4 - HKUS\S-1-5-21-3007245855-1371804334-879236170-1005\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-3007245855-1371804334-879236170-1005\..\Run: [EPSON SX525WD Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIGAE.exe =>.Epson Seiko Corporation
O4 - HKUS\S-1-5-21-3007245855-1371804334-879236170-1005\..\Run: [Epson Stylus SX525WD(Réseau)] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIGAE.exe =>.Epson Seiko Corporation
O4 - HKUS\S-1-5-21-3007245855-1371804334-879236170-1005\..\Run: [KPeerNexonEU] . (.NEXON Inc. - Pas de description.) -- C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe
O4 - HKUS\S-1-5-21-3007245855-1371804334-879236170-1005\..\Run: [SpybotSD TeaTimer] . (.Safer Networking Limited - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-21-3007245855-1371804334-879236170-1005\..\RunOnce: [Del958015] . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\WINDOWS\system32\cmd.exe =>.Microsoft Corporation
~ Application: Scanned in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -- Clé orpheline
O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} . (...) -- C:\Program Files\Real\RealPlayer\eb_act.ico
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} -- C:\Documents and Settings\Christian\Application Data\IMVUClient\imvu.ico (.not file.)
O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} -- Clé orpheline
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} -- Clé orpheline
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
~ IE Extra Buttons: Scanned in 00mn 00s



---\\ Piratage de l'Option 'Rétablir les paramètres Web' (O14)
O14 - IERESET.INF: START_PAGE_URL=START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
~ IE Paramètres WEB: Scanned in 00mn 00s



---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} ((no name)) - http://windowsupdate.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1335205332271
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} ((no name)) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1358541896504
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
~ Objets ActiveX: Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{A243A61B-A9D5-4D07-B1A8-ED37DB8BBF04}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{E3AC3A9E-DA7D-4520-981C-E2E2A2E91E6E}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{A243A61B-A9D5-4D07-B1A8-ED37DB8BBF04}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{E3AC3A9E-DA7D-4520-981C-E2E2A2E91E6E}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CS2\Services\Tcpip\..\{A243A61B-A9D5-4D07-B1A8-ED37DB8BBF04}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{E3AC3A9E-DA7D-4520-981C-E2E2A2E91E6E}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 89.2.0.1 89.2.0.2
~ Domain: Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll =>.Microsoft Corporation
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
~ Winlogon: Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Service Software Update (Software_update) (Software_update) . (...) - C:\Program Files\Software\Update\SoftwareUpdate.exe (.not file.) =>Adware.Boxore
O23 - Service: Update Jump Flip (Update Jump Flip) . (...) - C:\Program Files\Jump Flip\updateJumpFlip.exe
O23 - Service: Util Jump Flip (Util Jump Flip) . (...) - C:\Program Files\Jump Flip\bin\utilJumpFlip.exe
O23 - Service: X10 Device Network Service (x10nets) . (.X10 - X10 Module.) - C:\Program Files\Common Files\X10\Common\X10nets.exe
~ Services: 15 Legitimates Filtered in 00mn 05s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At1.job [416]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\At2.job [416]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\BoxSoftwareUpdate.job [430]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\SoftwareUpdateTaskMachineCore.job [908]
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\SoftwareUpdateTaskMachineUA.job [912]
[MD5.EF0DEE2C132CEBD6B21C3FA701B0790F] [APT] [At1] (...) -- C:\DOCUME~1\Christian\APPLIC~1\DIGITA~1\UPDATE~1\UPDATE~1.exe [100352]
[MD5.00000000000000000000000000000000] [APT] [At2] (...) -- C:\DOCUME~1\Christian\APPLIC~1\MYSEAR~1\UPDATE~1\UPDATE~1.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [BoxSoftwareUpdate] (...) -- C:\Documents and Settings\Christian\Application Data\BoxUpdChk\updchk.exe (.not file.) [0] =>Adware.Boxore
[MD5.00000000000000000000000000000000] [APT] [SoftwareUpdateTaskMachineCore] (...) -- C:\Program Files\Software\Update\SoftwareUpdate.exe (.not file.) [0] =>Adware.Boxore
[MD5.00000000000000000000000000000000] [APT] [SoftwareUpdateTaskMachineUA] (...) -- C:\Program Files\Software\Update\SoftwareUpdate.exe (.not file.) [0] =>Adware.Boxore
~ Scheduled Task: 24 Legitimates Filtered in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: Codec Pack Packages - (...) [HKCU] -- Codec Pack Packages
O42 - Logiciel: Jump Flip - (.Jump Flip.) [HKLM] -- Jump Flip
O42 - Logiciel: Multimedia Mouse Driver - (.Author.) [HKLM] -- InstallShield_{DB28FC86-D05E-4992-A8B4-A00AF3D777B8}
~ Logic: 42 Legitimates Filtered in 00mn 01s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\Boxore] =>Adware.Boxore
[HKCU\Software\Jump Flip]
[HKCU\Software\mysearchdial.com] =>Adware.MyWebSearch
[HKLM\Software\Rescoure War]
~ Key Software: 407 Legitimates Filtered in 00mn 01s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 14/01/2014 - 19:09:25 - [1,689] ----D C:\Program Files\Jump Flip
O43 - CFD: 09/07/2012 - 10:46:30 - [1,502] ----D C:\Program Files\Multimedia Mouse Driver
O43 - CFD: 20/05/2012 - 18:14:58 - [0] ----D C:\Program Files\Pando Networks
O43 - CFD: 12/01/2014 - 11:48:19 - [0,169] ----D C:\Documents and Settings\All Users\Application Data\BoxUpdChk =>Adware.Boxore
O43 - CFD: 13/01/2014 - 22:43:13 - [1,063] ----D C:\Documents and Settings\Christian\Application Data\0D0S1L2Z1P1B0T1P1B2Z
O43 - CFD: 24/05/2012 - 22:29:44 - [0,007] ----D C:\Documents and Settings\Christian\Application Data\Babylon(2) =>PUP.Babylon
O43 - CFD: 13/01/2014 - 22:43:56 - [1,228] ----D C:\Documents and Settings\Christian\Application Data\newnext.me =>PUP.NextLive
O43 - CFD: 13/01/2014 - 22:43:29 - [1,224] ----D C:\Documents and Settings\Christian\Local Settings\Application Data\genienext
O43 - CFD: 02/02/2013 - 01:03:27 - [0] ----D C:\Documents and Settings\Christian\Local Settings\Application Data\pornmsg
O43 - CFD: 09/07/2012 - 10:46:31 - [0,002] ----D C:\Documents and Settings\Christian\Menu Démarrer\Programmes\Multimedia Mouse
O43 - CFD: 09/01/2014 - 10:25:50 - [0,002] ----D C:\Documents and Settings\Christian\Menu Démarrer\Programmes\Start Lollipop =>Adware.Lollipop
~ Program Folder: 237 Legitimates Filtered in 00mn 57s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.DBA91CD5A3A68302967C03213E52BDE8] - 04/01/2014 - 12:54:24 --HA- . (...) -- C:\WINDOWS\QTFont.qfn [54156]
O44 - LFC:[MD5.8C82DCA851AC6CCEF8F5320C20B47486] - 06/01/2014 - 17:21:40 ---A- . (...) -- C:\WINDOWS\system32\d3d9caps.dat [664]
O44 - LFC:[MD5.E06813BE3A26BE14BC0BE166D4149E72] - 12/01/2014 - 13:49:35 ---A- . (...) -- C:\WINDOWS\WININIT.INI [223]
O44 - LFC:[MD5.DDC0B6672AB7862A3C2D7AA2ADB6B645] - 13/01/2014 - 22:40:26 ---A- . (.Pas de propriétaire - Setup/Uninstall.) -- C:\WINDOWS\unins000.exe [715038]
O44 - LFC:[MD5.9750560246DD3FAFCD5D384CD0CE903B] - 13/01/2014 - 22:40:37 ---A- . (...) -- C:\WINDOWS\unins000.dat [1752]
O44 - LFC:[MD5.5E8CD1804C1A035311F5DA9C1048F024] - 13/01/2014 - 22:41:28 ---A- . (...) -- C:\WINDOWS\system32\xvid.ax [153088]
O44 - LFC:[MD5.14141365E74A079F59D78131B4C7A5AB] - 14/01/2014 - 14:38:00 ----- . (...) -- C:\WINDOWS\wiaservc.log [50]
O44 - LFC:[MD5.DB161AD6AA65EF040B79F5FC99AC493C] - 14/01/2014 - 14:38:01 ----- . (...) -- C:\WINDOWS\wiadebug.log [159]
~ Files: 26 Legitimates Filtered in 00mn 20s



---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.8295933B72E7BC7A2CE16014A212118D] - 13/01/2014 - 22:59:41 ---A- - C:\WINDOWS\Prefetch\MGUSB.EXE-326A5576.pf
O45 - LFCP:[MD5.82BAF1B17AE6C85128F3BDA4AD5C13AC] - 14/01/2014 - 11:07:25 ---A- - C:\WINDOWS\Prefetch\RVKROOTS.EXE-32C17F32.pf
O45 - LFCP:[MD5.A40FD199BA99910BEAD56C6CF8FFCF33] - 14/01/2014 - 11:07:25 ---A- - C:\WINDOWS\Prefetch\UPDROOTS.EXE-25042DFC.pf
O45 - LFCP:[MD5.DFA3785B2D1467540040C7BD6D5E23C8] - 14/01/2014 - 14:40:02 ---A- - C:\WINDOWS\Prefetch\USBTIP.EXE-1F1B4BA7.pf
O45 - LFCP:[MD5.8B70E71600C4BD0B0C90A69BB7211811] - 14/01/2014 - 14:40:34 ---A- - C:\WINDOWS\Prefetch\NEXON_EU_DOWNLOADER_ENGINE.EX-181C409B.pf
O45 - LFCP:[MD5.A8064B2BF012D4A549ED54969D9A4677] - 14/01/2014 - 15:06:42 ---A- - C:\WINDOWS\Prefetch\WGET.DAT-000A59B4.pf
O45 - LFCP:[MD5.912F2EE0357125C3ED06DD83EE25A1B9] - 14/01/2014 - 15:06:44 ---A- - C:\WINDOWS\Prefetch\JRT.EXE-0B679CDB.pf
O45 - LFCP:[MD5.B16863AB168DAE7FC7DA792A80044D30] - 14/01/2014 - 15:07:57 ---A- - C:\WINDOWS\Prefetch\UPDATEJUMPFLIP.EXE-31177445.pf
O45 - LFCP:[MD5.B1EBBCF52B51BB497B05BD946DEC42DA] - 14/01/2014 - 15:12:16 ---A- - C:\WINDOWS\Prefetch\FIND.EXE-0EEAD1A7.pf
O45 - LFCP:[MD5.2F8E9C0E4D3B40577BD275A91214F33F] - 14/01/2014 - 15:13:03 ---A- - C:\WINDOWS\Prefetch\CUT.DAT-084E242B.pf
O45 - LFCP:[MD5.BBB1CEF91F41980E5930FA3505932F5C] - 14/01/2014 - 15:13:03 ---A- - C:\WINDOWS\Prefetch\FC.EXE-077B7FB3.pf
O45 - LFCP:[MD5.88944C684F47CD3F480CD2752F64128C] - 14/01/2014 - 15:13:17 ---A- - C:\WINDOWS\Prefetch\SHORTCUT.DAT-0B0B778F.pf
O45 - LFCP:[MD5.D725B47C4A0A151228E67A9E98174590] - 14/01/2014 - 15:13:18 ---A- - C:\WINDOWS\Prefetch\SED.DAT-020EEBD0.pf
O45 - LFCP:[MD5.5A231FA50DD43562EEBDF18A3B798299] - 14/01/2014 - 15:13:19 ---A- - C:\WINDOWS\Prefetch\NIRCMD.DAT-2FD7FEF3.pf
O45 - LFCP:[MD5.8487C7F4911601DE72ABB3EAD84B28B9] - 14/01/2014 - 15:58:23 ---A- - C:\WINDOWS\Prefetch\ECBL-CNCE.EXE-3637BA73.pf
O45 - LFCP:[MD5.AA9A52E226DF4DC97887E139F38303A7] - 14/01/2014 - 17:13:42 ---A- - C:\WINDOWS\Prefetch\WPGLDFSH.SCR-1D645552.pf
~ Prefetcher: 86 Legitimates Filtered in 00mn 01s



---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
~ ShellExecuteHooks: Scanned in 00mn 00s



---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d
~ IFEO: Scanned in 00mn 00s



---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "InstallVisualStyle"=1
O55 - MWPS:[HKLM\...\Policies\System] - "InstallTheme"=1
~ MWPS: 9 Legitimates Filtered in 00mn 00s



---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:[MD5.62D318E9A0C8FC9B780008E724283707] - 17/08/2001 - 20:52:00 ---A- . (.Advanced System Products, Inc. - AdvanSys SCSI Controller Driver.) -- C:\WINDOWS\system32\Drivers\asc.sys [26496]
O58 - SDL:[MD5.5D8DE112AA0254B907861E9E9C31D597] - 17/08/2001 - 20:51:58 ---A- . (.Advanced System Products, Inc. - AdvanSys Ultra-Wide PCI SCSI Driver.) -- C:\WINDOWS\system32\Drivers\asc3550.sys [14848]
O58 - SDL:[MD5.D880831279ED91F9A4190A2DB9539EA9] - 16/10/2006 - 09:53:31 ---A- . (.Windows (R) 2000 DDK provider - TR Manager.) -- C:\WINDOWS\system32\Drivers\asctrm.sys [8552]
O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 10/08/2004 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\Drivers\cinemst2.sys [262528]
O58 - SDL:[MD5.573C7D0A32852B48F3058CFD8026F511] - 13/04/2008 - 17:36:05 ---A- . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\system32\Drivers\hdaudbus.sys [144384]
O58 - SDL:[MD5.2A013E7530BEAB6E569FAA83F517E836] - 07/01/2005 - 16:07:16 ---A- . (.Windows (R) Server 2003 DDK provider - High Definition Audio Function Driver v1.0a.) -- C:\WINDOWS\system32\Drivers\Hdaudio.sys [145920]
O58 - SDL:[MD5.3F4BB95E5A44F3BE34824E8E7CAF0737] - 17/08/2001 - 20:52:12 ---A- . (.American Megatrends Inc. - MegaRAID RAID Controller Driver for Windows Whistler 32.) -- C:\WINDOWS\system32\Drivers\mraid35x.sys [17280]
O58 - SDL:[MD5.C53775780148884AC87C455489A0C070] - 03/08/2004 - 21:41:40 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\mtlmnt5.sys [126686]
O58 - SDL:[MD5.54886A652BF5685192141DF304E923FD] - 03/08/2004 - 21:41:38 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\mtlstrm.sys [1309184]
O58 - SDL:[MD5.6DDA78A0BE692B61B668FAB860F276CF] - 03/08/2004 - 21:29:38 ----- . (.Matrox Graphics Inc. - Matrox Parhelia Miniport Driver.) -- C:\WINDOWS\system32\Drivers\mtxparhm.sys [452736]
O58 - SDL:[MD5.576B34CEAE5B7E5D9FD2775E93B3DB53] - 03/08/2004 - 21:41:40 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\ntmtlfax.sys [180360]
O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 10/08/2004 - 13:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\Drivers\ptilink.sys [17792]
O58 - SDL:[MD5.E9AAA0092D74A9D371659C4C38882E12] - 03/08/2004 - 21:41:40 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\recagent.sys [13776]
O58 - SDL:[MD5.D9673011648A71ED1E1F77B831BC85E6] - 03/08/2004 - 21:41:42 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\slnt7554.sys [129535]
O58 - SDL:[MD5.2C1779C0FEB1F4A6033600305EBA623A] - 03/08/2004 - 21:41:44 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\slntamr.sys [404990]
O58 - SDL:[MD5.F9B8E30E82EE95CF3E1D3E495599B99C] - 03/08/2004 - 21:41:46 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\slnthal.sys [95424]
O58 - SDL:[MD5.DB56BB2C55723815CF549D7FC50CFCEB] - 03/08/2004 - 21:41:46 ----- . (.Smart Link - Pas de description.) -- C:\WINDOWS\system32\Drivers\slwdmsup.sys [13240]
O58 - SDL:[MD5.1FF3217614018630D0A6758630FC698C] - 17/08/2001 - 21:07:34 ---A- . (.Symbios Logic Inc. - Symbios Logic Inc. SCSI Miniport Driver.) -- C:\WINDOWS\system32\Drivers\symc810.sys [16256]
O58 - SDL:[MD5.1B698A51CD528D8DA4FFAED66DFC51B9] - 17/08/2001 - 20:52:22 ---A- . (.Promise Technology, Inc. - Gestionnaire de miniport ULTRA66 de Promise.) -- C:\WINDOWS\system32\Drivers\ultra.sys [36736]
O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 10/08/2004 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\Drivers\vdmindvd.sys [58112]
O58 - SDL:[MD5.81E8DA36CE70858898D5EB81E28A47D2] - 28/11/2005 - 09:45:16 ---A- . (.X10 Wireless Technology, Inc. - X10 HID Control Interface.) -- C:\WINDOWS\system32\Drivers\x10hid.sys [7040]
O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037]
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097]
O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4912]
O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809]
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537]
O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27916]
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146]
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370]
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274]
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146]
O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [34000]
O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560]
O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648]
O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424]
O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 10/08/2004 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560]
~ Drivers: 9 Legitimates Filtered in 00mn 03s



---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC: 11/01/2014 - 22:23:32 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Crash Reports\pending\0f697f48-ab82-4d0a-8cbc-9d5c08d6edc0-browser.dmp [102939]
O61 - LFC: 11/01/2014 - 22:23:32 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Crash Reports\pending\0f697f48-ab82-4d0a-8cbc-9d5c08d6edc0.dmp [28400]
O61 - LFC: 11/01/2014 - 22:23:32 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Crash Reports\pending\0f697f48-ab82-4d0a-8cbc-9d5c08d6edc0.extra [3337]
O61 - LFC: 11/01/2014 - 22:23:48 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Crash Reports\pending\948c0e7a-e1da-4e3d-8c71-48ce52967717-browser.dmp [103103]
O61 - LFC: 11/01/2014 - 22:23:48 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Crash Reports\pending\948c0e7a-e1da-4e3d-8c71-48ce52967717.dmp [22209]
O61 - LFC: 11/01/2014 - 22:23:48 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Crash Reports\pending\948c0e7a-e1da-4e3d-8c71-48ce52967717.extra [3328]
O61 - LFC: 11/01/2014 - 22:24:03 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\bookmarkbackups\bookmarks-2014-01-11_320.json [100529]
O61 - LFC: 12/01/2014 - 22:23:28 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [1832]
O61 - LFC: 12/01/2014 - 22:24:03 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\bookmarkbackups\bookmarks-2014-01-12_320.json [100529]
O61 - LFC: 12/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\extensions.sqlite [524288]
O61 - LFC: 12/01/2014 - 22:24:15 R--A- . (...) -- C:\Documents and Settings\Christian\Application Data\ZHP\HOSTS.txt [450626] =>.Nicolas Coolman
O61 - LFC: 12/01/2014 - 22:25:37 ---A- . (...) -- C:\Documents and Settings\Christian\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.sports.fr_0.localstorage-journal [3608]
O61 - LFC: 12/01/2014 - 22:25:37 ---A- . (...) -- C:\Documents and Settings\Christian\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.youtube.com_0.localstorage-journal [3608]
O61 - LFC: 12/01/2014 - 22:27:52 ---A- . (...) -- C:\Documents and Settings\Christian\Menu Démarrer\Programmes\Start Lollipop\Lollipop.lnk [2078] =>Adware.Lollipop
O61 - LFC: 12/01/2014 - 22:29:12 ---A- . (...) -- C:\Documents and Settings\Christian\Mes documents\Downloads\2. Le test de Hayling.docx [126780]
O61 - LFC: 12/01/2014 - 22:29:12 ---A- . (...) -- C:\Documents and Settings\Christian\Mes documents\Downloads\2e session - 2012.2013 (1).pdf [3854102]
O61 - LFC: 12/01/2014 - 22:29:12 ---A- . (...) -- C:\Documents and Settings\Christian\Mes documents\Downloads\2e session - 2012.2013.pdf [3854102]
O61 - LFC: 12/01/2014 - 22:31:41 ---A- . (...) -- C:\Documents and Settings\Christian\Mes documents\Downloads\Psychométrie Gana (2).docx [120764]
O61 - LFC: 12/01/2014 - 22:31:45 ---A- . (...) -- C:\Documents and Settings\Christian\Mes documents\Downloads\SEMESTRE 1 - 2012.2013.pdf [4622717]
O61 - LFC: 12/01/2014 - 22:31:55 ---A- . (...) -- C:\Documents and Settings\Christian\Mes documents\Downloads\Statistiques 2012 2013.docx [20555]
O61 - LFC: 12/01/2014 - 22:31:55 ---A- . (...) -- C:\Documents and Settings\Christian\Mes documents\Downloads\Statistiques.docx [21815]
O61 - LFC: 12/01/2014 - 22:31:55 ---A- . (...) -- C:\Documents and Settings\Christian\Mes documents\Downloads\statistiques ANOVA.docx [33608]
O61 - LFC: 12/01/2014 - 22:32:06 --HA- . (...) -- C:\Documents and Settings\Christian\Mes documents\Downloads\~$atistiques 2012 2013.docx [162]
O61 - LFC: 13/01/2014 - 22:23:17 ---A- . (...) -- C:\Documents and Settings\Christian\.android\adbkey [1704]
O61 - LFC: 13/01/2014 - 22:23:17 ---A- . (...) -- C:\Documents and Settings\Christian\.android\adbkey.pub [716]
O61 - LFC: 13/01/2014 - 22:24:03 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\bookmarkbackups\bookmarks-2014-01-13_320.json [100529]
O61 - LFC: 13/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\healthreport\state.json [123]
O61 - LFC: 13/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\saved-telemetry-pings\0cbe8801-c1cf-4a5c-b616-b35892c96931 [75788]
O61 - LFC: 13/01/2014 - 22:24:05 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\saved-telemetry-pings\656040c2-58f7-4f48-b27d-1deb008b66cd [75804]
O61 - LFC: 13/01/2014 - 22:24:05 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\saved-telemetry-pings\7a38cc5b-38ba-46ff-a1d7-5d2b46240ac8 [67578]
O61 - LFC: 13/01/2014 - 22:24:05 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\saved-telemetry-pings\9c402157-bdd0-46b4-a5a5-c8e7c6542022 [64664]
O61 - LFC: 13/01/2014 - 22:24:05 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\saved-telemetry-pings\b1ff9d36-775e-4206-8e7c-01a7b33ebc92 [68752]
O61 - LFC: 13/01/2014 - 22:24:05 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\signons.sqlite [327680]
O61 - LFC: 13/01/2014 - 22:24:05 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\newnext.me\nengine.cookie [3072] =>PUP.NextLive
O61 - LFC: 13/01/2014 - 22:24:15 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\WB.CFG [104]
O61 - LFC: 13/01/2014 - 22:24:15 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\WBPU-TTL.DAT [5]
O61 - LFC: 13/01/2014 - 22:24:19 ---A- . (...) -- C:\Documents and Settings\Christian\Bureau\FREE Games.url [411]
O61 - LFC: 13/01/2014 - 22:24:26 ---A- . (...) -- C:\Documents and Settings\Christian\Bureau\MySearchDial.url [416] =>Adware.MyWebSearch
O61 - LFC: 13/01/2014 - 22:24:27 ---A- . (...) -- C:\Documents and Settings\Christian\daemonprocess.txt [0]
O61 - LFC: 13/01/2014 - 22:25:28 ---A- . (...) -- C:\Documents and Settings\Christian\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hphehadppenpmajgnkjdcopcfijjegaf\1.0.0_0\background.js [270]
O61 - LFC: 13/01/2014 - 22:25:28 ---A- . (...) -- C:\Documents and Settings\Christian\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hphehadppenpmajgnkjdcopcfijjegaf\1.0.0_0\content.js [306]
O61 - LFC: 13/01/2014 - 22:25:28 ---A- . (...) -- C:\Documents and Settings\Christian\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hphehadppenpmajgnkjdcopcfijjegaf\1.0.0_0\manifest.json [998]
O61 - LFC: 13/01/2014 - 22:25:29 ---A- . (...) -- C:\Documents and Settings\Christian\Local Settings\Application Data\Google\Chrome\User Data\Default\File System\Origins\000201.ldb [196]
O61 - LFC: 13/01/2014 - 22:25:29 ---A- . (...) -- C:\Documents and Settings\Christian\Local Settings\Application Data\Google\Chrome\User Data\Default\GPUCache\data_0 [45056]
O61 - LFC: 13/01/2014 - 22:25:29 ---A- . (...) -- C:\Documents and Settings\Christian\Local Settings\Application Data\Google\Chrome\User Data\Default\GPUCache\data_1 [270336]
O61 - LFC: 13/01/2014 - 22:25:30 ---A- . (...) -- C:\Documents and Settings\Christian\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\hphehadppenpmajgnkjdcopcfijjegaf\LOCK [0]
O61 - LFC: 13/01/2014 - 22:25:30 ---A- . (...) -- C:\Documents and Settings\Christian\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\pflphaooapbgpeakohlggbpidpppgdff\000005.ldb [7456]
O61 - LFC: 13/01/2014 - 22:25:30 ---A- . (...) -- C:\Documents and Settings\Christian\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\pflphaooapbgpeakohlggbpidpppgdff\LOCK [0]
O61 - LFC: 13/01/2014 - 22:25:30 ---A- . (...) -- C:\Documents and Settings\Christian\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_c.mscimg.com_0.localstorage-journal [3608]
O61 - LFC: 13/01/2014 - 22:25:35 ---A- . (...) -- C:\Documents and Settings\Christian\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.coolzipextractorapp.com_0.localstorage-journal [3608]
O61 - LFC: 13/01/2014 - 22:25:35 ---A- . (...) -- C:\Documents and Settings\Christian\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.flashresultats.fr_0.localstorage-journal [7736]
O61 - LFC: 13/01/2014 - 22:25:37 ---A- . (...) -- C:\Documents and Settings\Christian\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal [3608]
O61 - LFC: 13/01/2014 - 22:26:01 ---A- . (...) -- C:\Documents and Settings\Christian\Local Settings\Application Data\Microsoft\Internet Explorer\frameiconcache.dat [29312]
O61 - LFC: 13/01/2014 - 22:27:27 ---A- . (...) -- C:\Documents and Settings\Christian\Local Settings\Application Data\mysearchdial-speeddial.crx [366611] =>Adware.MyWebSearch
O61 - LFC: 13/01/2014 - 22:27:51 ---A- . (...) -- C:\Documents and Settings\Christian\Menu Démarrer\Programmes\Haali Media Splitter\GDSMux.lnk [1840]
O61 - LFC: 13/01/2014 - 22:27:51 ---A- . (...) -- C:\Documents and Settings\Christian\Menu Démarrer\Programmes\Haali Media Splitter\Media Splitter Settings.lnk [1665]
O61 - LFC: 13/01/2014 - 22:27:51 ---A- . (...) -- C:\Documents and Settings\Christian\Menu Démarrer\Programmes\Haali Media Splitter\Uninstall.lnk [1863]
O61 - LFC: 13/01/2014 - 22:32:02 ---A- . (...) -- C:\Documents and Settings\Christian\Mes documents\Downloads\UltimateCodec (1).exe [670448]
O61 - LFC: 13/01/2014 - 22:32:03 ---A- . (...) -- C:\Documents and Settings\Christian\Mes documents\Downloads\UltimateCodec.exe [670448]
O61 - LFC: 13/01/2014 - 22:32:06 ---A- . (...) -- C:\Documents and Settings\Christian\Mes documents\Downloads\ZipExtractorSetup.exe [669512]
O61 - LFC: 14/01/2014 - 22:23:32 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Crash Reports\pending\0f4747f0-79ff-4fb7-873a-02a7fc0a061e.dmp [20717]
O61 - LFC: 14/01/2014 - 22:23:32 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Crash Reports\pending\0f4747f0-79ff-4fb7-873a-02a7fc0a061e.extra [3295]
O61 - LFC: 14/01/2014 - 22:23:34 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Crash Reports\pending\2209498e-daf2-47b3-af33-e5f96d8b0ef8.dmp [20721]
O61 - LFC: 14/01/2014 - 22:23:34 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Crash Reports\pending\2209498e-daf2-47b3-af33-e5f96d8b0ef8.extra [3295]
O61 - LFC: 14/01/2014 - 22:23:43 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Crash Reports\pending\7818dd81-77bc-414a-9e75-cc4dc0602f5f.dmp [20721]
O61 - LFC: 14/01/2014 - 22:23:43 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Crash Reports\pending\7818dd81-77bc-414a-9e75-cc4dc0602f5f.extra [3295]
O61 - LFC: 14/01/2014 - 22:23:48 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Crash Reports\pending\9bf2eb9d-4769-4ca2-a08f-1bd82c91ceec.dmp [20717]
O61 - LFC: 14/01/2014 - 22:23:48 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Crash Reports\pending\9bf2eb9d-4769-4ca2-a08f-1bd82c91ceec.extra [3295]
O61 - LFC: 14/01/2014 - 22:23:54 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Crash Reports\pending\c8c6c7dd-c724-4885-b7b1-b99ad52687d2-browser.dmp [87816]
O61 - LFC: 14/01/2014 - 22:23:54 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Crash Reports\pending\c8c6c7dd-c724-4885-b7b1-b99ad52687d2.dmp [36367]
O61 - LFC: 14/01/2014 - 22:23:54 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Crash Reports\pending\c8c6c7dd-c724-4885-b7b1-b99ad52687d2.extra [3318]
O61 - LFC: 14/01/2014 - 22:24:01 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Crash Reports\pending\f5addb7c-d853-42a3-b6a3-98b7865f8469.dmp [20721]
O61 - LFC: 14/01/2014 - 22:24:01 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Crash Reports\pending\f5addb7c-d853-42a3-b6a3-98b7865f8469.extra [3295]
O61 - LFC: 14/01/2014 - 22:24:02 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\addons.json [14926]
O61 - LFC: 14/01/2014 - 22:24:02 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\blocklist.xml [99529]
O61 - LFC: 14/01/2014 - 22:24:03 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\bookmarkbackups\bookmarks-2014-01-14_321.json [100801]
O61 - LFC: 14/01/2014 - 22:24:03 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\cert8.db [344064]
O61 - LFC: 14/01/2014 - 22:24:03 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\content-prefs.sqlite [229376]
O61 - LFC: 14/01/2014 - 22:24:03 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\cookies.sqlite [1048576]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\extensions.json [39465]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\formhistory.sqlite [294912]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\healthreport.sqlite [1376256]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\key3.db [16384]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\localstore.rdf [13288]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\mimeTypes.rdf [10431]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\nspdl\fav-groups [79]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\nspdl\fav_thumbs\0496873fa8807cd73e8dbbccbb45e56f [6960]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\nspdl\fav_thumbs\14fb54345e1fc11d30b2f7ee2b7f43b9 [9988]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\nspdl\fav_thumbs\4e3fa12cd11b8d4264a88970c8fa63b1 [11883]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\nspdl\fav_thumbs\590ba4ecdd6c0785c808396a2a017de6 [17066]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\nspdl\fav_thumbs\6d45e0d9e7e87a7fc0d55d6513a2a9db [8771]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\nspdl\fav_thumbs\75aebab782f212d4e0f60b4a4973287a [5809]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\nspdl\fav_thumbs\99afa75fe02e9ca1ea26310d71d18235 [14966]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\nspdl\fav_thumbs\9bc9e3e497e8052bc420b5a13697e581 [7161]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\nspdl\fav_thumbs\a36a85fb08a0af184620c914e30ad20a [3148]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\nspdl\fav_thumbs\a5028bc8ae664799f5def7d15a55c535 [9321]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\nspdl\fav_thumbs\bcc7404ed09c7f12d225d5a7f8bb80da [10299]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\nspdl\fav_thumbs\e021f0212813cb97bb762e3c8acdf9fa [20248]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\nspdl\fav_thumbs\e2d42c19124e8c1da2983f43c72c4ecc [47850]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\nspdl\favs##4387e5197d16a1205cfa224260cf8bd9 [1488]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\parent.lock [0]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\permissions.sqlite [1867776]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\places.sqlite [10485760]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\pluginreg.dat [10906]
O61 - LFC: 14/01/2014 - 22:24:04 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\prefs.js [13450]
O61 - LFC: 14/01/2014 - 22:24:05 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\Telemetry.FailedProfileLocks.txt [1]
O61 - LFC: 14/01/2014 - 22:24:05 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\Telemetry.ShutdownTime.txt [6]
O61 - LFC: 14/01/2014 - 22:24:05 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\saved-telemetry-pings\0d5a327d-3ef2-4b70-a1b3-50cea847b3b2 [86829]
O61 - LFC: 14/01/2014 - 22:24:05 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\saved-telemetry-pings\5d90e9fb-9495-4d4e-921b-31086c2083f6 [84490]
O61 - LFC: 14/01/2014 - 22:24:05 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\saved-telemetry-pings\6ff1d928-ba3e-4ffa-9186-80c64ff38ded [67549]
O61 - LFC: 14/01/2014 - 22:24:05 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\saved-telemetry-pings\77fc63aa-1e2c-458f-8a99-93ca474a7ad1 [65315]
O61 - LFC: 14/01/2014 - 22:24:05 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\saved-telemetry-pings\897fd2c1-ff33-467b-a7d5-76af913ce7b5 [67924]
O61 - LFC: 14/01/2014 - 22:24:05 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\saved-telemetry-pings\951944de-256b-4bed-bb41-67a3e3e31378 [60203]
O61 - LFC: 14/01/2014 - 22:24:05 ---A- . (...) -- C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\wo234ela.default\saved-telemetry-pings\9579b9e8-165e-4e6c-99d7-9870bcff6314 [84642]
O61 - LFC: 14/01/2014 - 22:24:05 ---A- . (...) -- C:\Documents and Settings\Christian\App

excuse je pensais que posté sur le cite malekal.com était sufisant

Oui ne t'en fais pas. Je n'avais pas vu que tu avais posté le rapport plus haut. Cependant je t'avais bien dis de l'héberger sur le site, puis de poster le lien ici. Le rapport est incomplet car la taille maximale du message a été atteinte.

http://pjjoint.malekal.com/files.php?id=ZHPDiag_20140115_p5z13p7x14v5 voilà le lien excuse moi mais c'est la première fois que j'ai recours à ce genre de procédure, je te remercie pour ton aide

http://pjjoint.malekal.com/files.php?id=20140116_d6u12v12k5s14 voila le lien du rapport de mbam apparement j'ai moins de pub mais ça beug encore c'est pas fluide

http://pjjoint.malekal.com/files.php?id=ZHPDiag_20140116_o12k9s12d8j5 voilà, alors c'est grave en tout les cas ça va mieux, c'est pas une porche mais ça va mieux

http://pjjoint.malekal.com/files.php?id=20140116_m6d10s12d9l5

je confirme tout est beaucoup plus fluide à présent, un grand merci pour le temps que tu passe à aider des gens comme moi, ce doit être une grande satisfaction pour toi si tu le fais sans retour respect

dernière question après je te laisse tranquille, les diags que j'ai posté sont ils visibles par n'importe qui et peu t'ont les effacer

Oui par tout ceux qui passeront par le forum. Je crois que sur le site pijoint tu peux donner un temps d'accès (7 jours, 1 mois..)
Tu peux également éditer les messages que tu as écris pour supprimer les liens.

je peu me faire pirater alors ? J'AI PEUR n'importe qui peu rentrer dans mon ordi et voir tout, mes photos de famille, me piquer mes mots de pass ect... ?

Non biensur que non ! Avec le rapport on peut juste connaitre tous les programmes qui se lancent, les entrées, les zones à risques ...on connait plein de chose sur l'ordinateur, mais à part l'antivirus utilisé, on ne sait rien qui puisse réellement aider à infiltrer ton ordinateur.
De plus, il faut pour cela utilisé un malware pour pouvoir infiltrer ton ordinateur. Ce rapport ne te met absolument pas en danger.

Qu'est-ce qu'il ne faut pas lire. Le miens a 4 ans, une seule installation de windows et il est toujours aussi explosif.. Toutes ces choses qui ralentissent l'ordinateur se désinstallent, se nettoie. :)

mon ordi n'et pas tous neuf mais il fonctionnait pas trop mal jusqu'à récemment

Et sinon..ce que j'ai dis est fait ?? https://forums.commentcamarche.net/forum/affich-29499513-possibilite-d-infection-de-mon-pc#1

Bonjour, je ne veux pas ouvrir un guerre contre windows ^^ je dis jusque que pour certain utilisateurs peu familiarisés avec l'ordinateur, ce dernier peux se fatiguer plus vite, et une réinstallation reste le meilleur moyen de remettre l'ordi à neuf (quasiment)
Bonne soirée