Nettoyer mon Pc

Merci de ta réponse. Écoute ça fait 4 fois que je relance le diag et que ça beug a 43% dans les program files et ça me dit que zhpDiag ne répond pas.

Essaye de l'exécuter en tant qu'administrateur

Clique droit sur l'application et Exécuter en tant qu'administrateur

Suis désolée c'est super long ça fait déjà 29 min que ça tourne et c'est pas fini

C'est normal ;)

salut écoute malware a mis 5 heures pour terminer l analyse et supprimer les fichiers
Voici le rapport
2014/03/02 00:52:37 +0100 PC-DE-NÉNETTE nénette DETECTION c:\program files\findright\findrightbho.dll PUP.Optional.FindRight.A QUARANTINE
2014/03/02 00:52:38 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: SDKQuarantine failed with error code 2
2014/03/02 00:52:59 +0100 PC-DE-NÉNETTE nénette DETECTION c:\program files\findright\findrightbho.dll PUP.Optional.FindRight.A QUARANTINE
2014/03/02 00:53:00 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: SDKQuarantine failed with error code 2
2014/03/02 00:54:27 +0100 PC-DE-NÉNETTE nénette DETECTION C:\Program Files\FindRight\bin\utilFindRight.exe PUP.Optional.FindRight.A QUARANTINE
2014/03/02 00:54:28 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: DeleteFile failed with error code 5
2014/03/02 00:54:38 +0100 PC-DE-NÉNETTE nénette DETECTION c:\program files\findright\findrightbho.dll PUP.Optional.FindRight.A QUARANTINE
2014/03/02 00:54:38 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: SDKQuarantine failed with error code 2
2014/03/02 00:54:41 +0100 PC-DE-NÉNETTE nénette DETECTION C:\Program Files\FindRight\bin\utilFindRight.exe PUP.Optional.FindRight.A QUARANTINE
2014/03/02 00:54:41 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: DeleteFile failed with error code 5
2014/03/02 00:54:59 +0100 PC-DE-NÉNETTE nénette DETECTION c:\program files\findright\findrightbho.dll PUP.Optional.FindRight.A QUARANTINE
2014/03/02 00:54:59 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: SDKQuarantine failed with error code 2
2014/03/02 00:55:05 +0100 PC-DE-NÉNETTE nénette DETECTION C:\Program Files\FindRight\bin\utilFindRight.exe PUP.Optional.FindRight.A QUARANTINE
2014/03/02 00:55:05 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: DeleteFile failed with error code 5
2014/03/02 00:55:14 +0100 PC-DE-NÉNETTE nénette DETECTION c:\program files\findright\findrightbho.dll PUP.Optional.FindRight.A QUARANTINE
2014/03/02 00:55:14 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: SDKQuarantine failed with error code 2
2014/03/02 00:55:25 +0100 PC-DE-NÉNETTE nénette DETECTION C:\Program Files\FindRight\bin\utilFindRight.exe PUP.Optional.FindRight.A QUARANTINE
2014/03/02 00:55:25 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: DeleteFile failed with error code 5
2014/03/02 00:55:33 +0100 PC-DE-NÉNETTE nénette DETECTION C:\Program Files\FindRight\bin\utilFindRight.exe PUP.Optional.FindRight.A QUARANTINE
2014/03/02 00:55:33 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: DeleteFile failed with error code 5
2014/03/02 00:56:21 +0100 PC-DE-NÉNETTE nénette DETECTION C:\Program Files\FindRight\updateFindRight.exe PUP.Optional.FindRight.A QUARANTINE
2014/03/02 00:56:21 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: DeleteFile failed with error code 5
2014/03/02 00:56:26 +0100 PC-DE-NÉNETTE nénette DETECTION C:\Program Files\SearchProtect\UI\bin\cltmngui.exe PUP.Optional.Conduit.A QUARANTINE
2014/03/02 00:56:26 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: DeleteFile failed with error code 5
2014/03/02 01:02:03 +0100 PC-DE-NÉNETTE nénette DETECTION C:\Program Files\FindRight\bin\utilFindRight.exe PUP.Optional.FindRight.A QUARANTINE
2014/03/02 01:02:03 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: DeleteFile failed with error code 5
2014/03/02 01:02:31 +0100 PC-DE-NÉNETTE nénette DETECTION C:\Program Files\SearchProtect\UI\bin\cltmngui.exe PUP.Optional.Conduit.A QUARANTINE
2014/03/02 01:02:32 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: DeleteFile failed with error code 5
2014/03/02 01:02:44 +0100 PC-DE-NÉNETTE nénette DETECTION C:\Program Files\SearchProtect\UI\bin\cltmngui.exe PUP.Optional.Conduit.A QUARANTINE
2014/03/02 01:02:45 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: DeleteFile failed with error code 5
2014/03/02 01:03:04 +0100 PC-DE-NÉNETTE nénette DETECTION C:\Program Files\SearchProtect\UI\bin\cltmngui.exe PUP.Optional.Conduit.A QUARANTINE
2014/03/02 01:03:05 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: DeleteFile failed with error code 5
2014/03/02 01:03:05 +0100 PC-DE-NÉNETTE nénette DETECTION C:\Program Files\SearchProtect\Main\bin\CltMngSvc.exe PUP.Optional.Conduit.A QUARANTINE
2014/03/02 01:03:05 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: DeleteFile failed with error code 5
2014/03/02 01:03:07 +0100 PC-DE-NÉNETTE nénette DETECTION C:\Program Files\SearchProtect\UI\bin\cltmngui.exe PUP.Optional.Conduit.A QUARANTINE
2014/03/02 01:03:08 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: DeleteFile failed with error code 5
2014/03/02 01:03:34 +0100 PC-DE-NÉNETTE nénette DETECTION c:\program files\mysearchdial\1.8.21.0\bh\mysearchdial.dll PUP.Optional.MySearchDial.A QUARANTINE
2014/03/02 01:03:34 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: SDKQuarantine failed with error code 2
2014/03/02 01:04:07 +0100 PC-DE-NÉNETTE nénette DETECTION C:\Program Files\SearchProtect\UI\bin\cltmngui.exe PUP.Optional.Conduit.A QUARANTINE
2014/03/02 01:04:07 +0100 PC-DE-NÉNETTE nénette DETECTION C:\Program Files\SearchProtect\Main\bin\CltMngSvc.exe PUP.Optional.Conduit.A QUARANTINE
2014/03/02 01:04:07 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: DeleteFile failed with error code 5
2014/03/02 01:04:08 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: DeleteFile failed with error code 5
2014/03/02 01:28:51 +0100 PC-DE-NÉNETTE nénette DETECTION C:\Program Files\SearchProtect\Main\bin\CltMngSvc.exe PUP.Optional.Conduit.A QUARANTINE
2014/03/02 01:28:52 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: DeleteFile failed with error code 5
2014/03/02 01:28:54 +0100 PC-DE-NÉNETTE nénette DETECTION c:\program files\mysearchdial\1.8.21.0\bh\mysearchdial.dll PUP.Optional.MySearchDial.A QUARANTINE
2014/03/02 01:28:55 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: SDKQuarantine failed with error code 2
2014/03/02 01:52:44 +0100 PC-DE-NÉNETTE nénette DETECTION C:\Program Files\SearchProtect\Main\bin\CltMngSvc.exe PUP.Optional.Conduit.A QUARANTINE
2014/03/02 01:52:44 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: DeleteFile failed with error code 5
2014/03/02 01:52:48 +0100 PC-DE-NÉNETTE nénette DETECTION c:\program files\mysearchdial\1.8.21.0\bh\mysearchdial.dll PUP.Optional.MySearchDial.A QUARANTINE
2014/03/02 01:52:48 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: SDKQuarantine failed with error code 2
2014/03/02 02:07:26 +0100 PC-DE-NÉNETTE nénette DETECTION C:\Program Files\FindRight\bin\utilFindRight.exe PUP.Optional.FindRight.A QUARANTINE
2014/03/02 02:07:26 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: DeleteFile failed with error code 5
2014/03/02 02:07:26 +0100 PC-DE-NÉNETTE nénette DETECTION c:\program files\mysearchdial\1.8.21.0\bh\mysearchdial.dll PUP.Optional.MySearchDial.A QUARANTINE
2014/03/02 02:07:26 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: SDKQuarantine failed with error code 3
2014/03/02 02:13:28 +0100 PC-DE-NÉNETTE nénette DETECTION C:\Program Files\FindRight\bin\utilFindRight.exe PUP.Optional.FindRight.A QUARANTINE
2014/03/02 02:13:28 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: DeleteFile failed with error code 5
2014/03/02 02:16:01 +0100 PC-DE-NÉNETTE nénette DETECTION C:\Program Files\FindRight\bin\utilFindRight.exe PUP.Optional.FindRight.A QUARANTINE
2014/03/02 02:16:01 +0100 PC-DE-NÉNETTE nénette ERROR Quarantine failed: DeleteFile failed with error code 5
2014/03/02 11:39:53 +0100 PC-DE-NÉNETTE nénette MESSAGE Starting protection
2014/03/02 11:39:53 +0100 PC-DE-NÉNETTE nénette MESSAGE Protection started successfully
2014/03/02 11:39:53 +0100 PC-DE-NÉNETTE nénette MESSAGE Starting IP protection
2014/03/02 11:40:03 +0100 PC-DE-NÉNETTE nénette MESSAGE IP Protection started successfully
2014/03/02 11:47:17 +0100 PC-DE-NÉNETTE nénette MESSAGE Executing scheduled update: Daily
2014/03/02 11:47:37 +0100 PC-DE-NÉNETTE nénette MESSAGE Scheduled update executed successfully: database updated from version v2014.03.01.07 to version v2014.03.02.04
2014/03/02 11:47:37 +0100 PC-DE-NÉNETTE nénette MESSAGE Starting database refresh
2014/03/02 11:47:37 +0100 PC-DE-NÉNETTE nénette MESSAGE Stopping IP protection
2014/03/02 11:47:37 +0100 PC-DE-NÉNETTE nénette MESSAGE IP Protection stopped successfully
2014/03/02 11:47:41 +0100 PC-DE-NÉNETTE nénette MESSAGE Database refreshed successfully
2014/03/02 11:47:41 +0100 PC-DE-NÉNETTE nénette MESSAGE Starting IP protection
2014/03/02 11:47:47 +0100 PC-DE-NÉNETTE nénette MESSAGE IP Protection started successfully
2014/03/02 12:02:59 +0100 PC-DE-NÉNETTE nénette MESSAGE Starting protection
2014/03/02 12:02:59 +0100 PC-DE-NÉNETTE nénette MESSAGE Protection started successfully
2014/03/02 12:02:59 +0100 PC-DE-NÉNETTE nénette MESSAGE Starting IP protection
2014/03/02 12:03:04 +0100 PC-DE-NÉNETTE nénette MESSAGE IP Protection started successfully

Regarde si tu n'as pas un autre rapport dans la partie Rapports/Logs

Pourrais-tu refaire une analyse ZHPDiag ?

ok c en cours

~ Rapport de ZHPDiag v2014.2.23.20 - Nicolas Coolman (23/02/2014)
~ Lancé par nénette (02/03/2014 12:48:23)
~ Adresse du Site Web https://nicolascoolman.webs.com/
~ Forums gratuits d'Assistance à la désinfection : https://nicolascoolman.webs.com/
~ Traduit par Nicolas Coolman
~ Etat de la version :
~ Liste blanche : Activée par le programme
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Activate by user

---\\ Navigateurs Internet
MSIE: Internet Explorer v9.0.8112.16421
MFIE: Mozilla Firefox 12.0 (Defaut)
GCIE: Google Chrome v33.0.1750.117
OBIE: Safari v5.34.57.2
---\\ Informations sur les produits Windows
~ Langage: Français
Windows Vista (TM) Home Premium, 32-bit Service Pack 2 (Build 6002)
Windows Server License Manager Script : OK
~ Vista, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : WQD8Q
Windows License : OK
Windows Automatic Updates : OK
---\\ Logiciels de protection du système
avast! Free Antivirus v9.0.2013
Malwarebytes Anti-Malware version 1.75.0.1300
McAfee Security Scan Plus v3.8.141.11
---\\ Logiciels d'optimisation du système
---\\ Logiciels de partage PeerToPeer
eMule
---\\ Surveillance de Logiciels
Adobe Flash Player 12 Plugin
Adobe Reader 8.1.2 Security Update 1
Java 7 Update 45
---\\ Informations sur le système
~ Processor: x86 Family 6 Model 15 Stepping 13, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3069 MB (53% free)
System Restore: Activé (Enable)
System drive C: has 161 GB (56%) free of 287 GB
---\\ Mode de connexion au système
~ Computer Name: PC-DE-NÉNETTE
~ User Name: nénette
~ All Users Names: nénette, Administrateur,
~ Unselected Option: None
Logged in as Administrator
---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\nénette\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\nénette\AppData\Roaming\
~ %Desktop% : C:\Users\nénette\Desktop\
~ %Favorites% : C:\Users\nénette\Documents\Favorites\Favorites\
~ %LocalAppData% : C:\Users\nénette\AppData\Local\
~ %StartMenu% : C:\Users\nénette\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 161 Go of 287 Go)
D: Hard drive, Flash drive, Thumb drive (Free 2 Go of 11 Go)
E: CD-ROM drive (Not Inserted)

---\\ Etat du Centre de Sécurité Windows
~ Security Center: 42 Legitimates Filtered in 00mn 00s

---\\ Recherche particulière de fichiers génériques
[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.11/04/2009 - 07:27:36.) -- C:\Windows\Explorer.exe [2926592]
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 - 03:23:42.) -- C:\Windows\System32\Wininit.exe [96768]
[MD5.679EAED8E703235BA81AA2E58F4E2D16] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.05/02/2014 - 09:50:39.) -- C:\Windows\System32\wininet.dll [1129472]
[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.11/04/2009 - 07:28:13.) -- C:\Windows\System32\Winlogon.exe [314368]
[MD5.3911B972B55FEA0478476B2E777B29FA] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.21/04/2011 - 14:58:27.) -- C:\Windows\system32\Drivers\AFD.sys [273408]
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.11/04/2009 - 07:32:26.) -- C:\Windows\system32\Drivers\atapi.sys [19944]
[MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.21/01/2008 - 03:23:51.) -- C:\Windows\system32\Drivers\Cdfs.sys [70144]
[MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.11/04/2009 - 05:39:17.) -- C:\Windows\system32\Drivers\Cdrom.sys [67072]
[MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.14/04/2011 - 15:59:03.) -- C:\Windows\system32\Drivers\DfsC.sys [75264]
[MD5.062452B7FFD68C8C042A6261FE8DFF4A] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.11/04/2009 - 05:42:42.) -- C:\Windows\system32\Drivers\HDAudBus.sys [561152]
[MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) (.21/01/2008 - 03:23:20.) -- C:\Windows\system32\Drivers\i8042prt.sys [54784]
[MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.21/01/2008 - 03:24:25.) -- C:\Windows\system32\Drivers\IpNat.sys [100864]
[MD5.1E94971C4B446AB2290DEB71D01CF0C2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.29/04/2011 - 14:24:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [106496]
[MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) (.11/04/2009 - 05:45:37.) -- C:\Windows\system32\Drivers\netBT.sys [185856]
[MD5.2C1121F2B87E9A6B12485DF53CD848C7] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.03/03/2013 - 20:07:52.) -- C:\Windows\system32\Drivers\ntfs.sys [1082232]
[MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) (.02/11/2006 - 09:51:30.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
[MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/01/2008 - 03:24:55.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [76288]
[MD5.FBC0BACD9C3D7F6956853F64A66E252D] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/01/2008 - 03:23:01.) -- C:\Windows\system32\Drivers\rdpdr.sys [248832]
[MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) (.11/04/2009 - 05:45:22.) -- C:\Windows\system32\Drivers\smb.sys [66560]
[MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) (.11/04/2009 - 05:45:56.) -- C:\Windows\system32\Drivers\tdx.sys [72192]
[MD5.786DB5771F05EF300390399F626BF30A] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.21/08/2012 - 12:47:42.) -- C:\Windows\system32\Drivers\volsnap.sys [224640]
~ Generic Processes: Scanned in 00mn 00s

---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/5763
~ Mes musiques (My Musics) : 1/582
~ Mes Videos (My Videos) : 1/2
~ Mes Favoris (My Favorites) : 0/0
~ Mes Documents (My Documents) : 1/136
~ Mon Bureau (My Desktop) : 1/102
~ Menu demarrer (Programs) : 1/28
~ Hidden Files: Scanned in 00mn 03s

---\\ Processus lancés
[MD5.D1D5DAB39DCB4BE0359943738D87409B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [532040] [PID.2772]
[MD5.19D93154C82FE39A99B269CED1056A92] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1033512] [PID.3248]
[MD5.4BBE1550C346FCE2D4927BF6EACD3CF7] - (.Motorola Inc. - Application executable file.) -- C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [634880] [PID.2848]
[MD5.66CF7713FE5BD782943975AF9427A4A8] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe [4702208] [PID.3908]
[MD5.C2C80A16DF3C72B331333B8C01E7731C] - (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [178712] [PID.2528]
[MD5.F08A76C5E56BDB6F98F41BD22A4692E1] - (.CyberLink Corp. - HP QuickPlay Resident Program.) -- C:\Program Files\Hp\QuickPlay\QPService.exe [468264] [PID.3624]
[MD5.AEF50C71530B415AFA40E1D478BEFCCC] - (. Hewlett-Packard Development Company, L.P. - Quick Launch Buttons.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe [202032] [PID.1024]
[MD5.2CF59B201A59D0FF5534089F76297559] - (. Hewlett-Packard Development Company, L.P. - HP QuickTouch On Screen Display.) -- C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe [554320] [PID.3892]
[MD5.0D392EDE3B97E0B3131B2F63EF1DB94E] - (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe [1008184] [PID.2540]
[MD5.CB4EE42EE2D33A58EFD48C276B683663] - (.Hewlett-Packard Development Company, L.P. - HPWAMain Module.) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [480560] [PID.3872]
[MD5.B8AF02700299CD308046BB9339165813] - (.Hewlett-Packard Development Company, L.P. - Module to process WiFi messages..) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe [311296] [PID.3768]
[MD5.95D0EA1BECAD6D781C3D09AEC1295E8F] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\Hp\HP Software Update\hpwuschd2.exe [49208] [PID.3496]
[MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336] [PID.3128]
[MD5.B4E6C1B28AF8806008CB654C716ABAFA] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [152392] [PID.4084]
[MD5.A78AAB0D2D70EF7DD56B7328AC502059] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe [3767096] [PID.3660]
[MD5.3C62EAE05B76BA809FA1DE327922E846] - (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [455968] [PID.3988]
[MD5.A75685AEE9F5BE8163A2074068BD6B54] - (.Hewlett-Packard - HP Advisor.) -- C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [1783136] [PID.2604]
[MD5.BF08674925F151BD4537B89A493E3E0C] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe [125952] [PID.3860]
[MD5.16DCC8ACC504A6662BB04A0ED9454A4D] - (.SFR - Propriétés de la connexion SFR.) -- C:\Program Files\SFR\Kit\9props.exe [959808] [PID.3936]
[MD5.31EBC020D9B2D6239E2AF90BD48B6E60] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [20587680] [PID.2248]
[MD5.43E2CFC37953501EA40D852AE585E7C0] - (.McAfee, Inc. - McAfee Security Scanner Scheduler.) -- C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe [277920] [PID.3816]
[MD5.3B161E0C1D8F3253640D57B45FAC96DA] - (.Pas de propriétaire - HpqToaster Module.) -- C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe [677432] [PID.3696]
[MD5.0F4195B9B348DE5CF9B822F81704B20E] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\Windows\ehome\ehmsas.exe [37376] [PID.3316]
[MD5.48600DAC5AF3A53B6F430528209E4830] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [757488] [PID.5496]
[MD5.892699A6AEB910C58B726BD70BEA4F4B] - (.Synaptics, Inc. - Synaptics Pointing Device Helper.) -- C:\Program Files\Synaptics\SynTP\SynTPHelper.exe [95528] [PID.5212]
[MD5.492DC8B4FEC81DDBE40CE98D1B013CD3] - (.Adobe Systems Incorporated - Adobe® Flash® Player Installer/Uninstaller.) -- C:\Windows\system32\Macromed\Flash\FlashUtil32_12_0_0_70_ActiveX.exe [841096] [PID.5980]
[MD5.42FEDBCB3ED926F6F529E0FDDF750BE0] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8339968] [PID.5324]
[MD5.6080A176D09435FC8E6E800996656E18] - (.Microsoft Corporation - Console IME.) -- C:\Windows\system32\conime.exe [69120] [PID.3168]
[MD5.C4D17F11526F87BC762F31DA5BD2580B] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 187.6.) -- C:\Windows\system32\nvvsvc.exe [219752] [PID.996]
[MD5.862BB4CBC05D80C5B45BE430E5EF872F] - (.Microsoft Corporation - Service de gestion des licences Microsoft.) -- C:\Windows\system32\SLsvc.exe [3408896] [PID.1300]
[MD5.CC42F104172B4A62793083D380867317] - (.AVAST Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [50344] [PID.1592]
[MD5.F518545E5B7623AD49ABE7F8776EFA46] - (.Apple Inc. - YSLoader.exe.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [43336] [PID.1956]
[MD5.F2E8CEFC8CF4D6454F4121C5FF93136A] - (.Microsoft Corporation. - BingBar Service.) -- C:\Program Files\Microsoft\BingBar\7.3.124.0\BBSvc.exe [193696] [PID.2020]
[MD5.DB5BEA73EDAF19AC68B2C0FAD0F92B1A] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [390504] [PID.2044]
[MD5.681EF6E0CC7BBAA0C09ACABEB91F669E] - (.Intel Corporation - RAID Monitor.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [358936] [PID.308]
[MD5.53710476495886D9961BE46983A6A33F] - (.Hewlett-Packard Company - LightScribe Service.) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe [79136] [PID.656]
[MD5.65085456FD9A74D7F1A999520C299ECB] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376] [PID.696]
[MD5.E0D7732F2D2E24B2DB3F67B6750295B8] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512] [PID.1108]
[MD5.BA396D1C71934E22679D3F4DAC17E7AB] - (.Pas de propriétaire - CLCapSvc Module.) -- C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe [271760] [PID.1460]
[MD5.17E0BEF5CA5C9CE52CC8082AC6EBC449] - (.Pas de propriétaire - RichVideo Module.) -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024] [PID.2368]
[MD5.04C1DCBB226C6AE647B794833CE3CEB6] - (.Hewlett-Packard Development Company, L.P. - hpqwmiex Module.) -- C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe [135168] [PID.3188]
[MD5.4B455E8C41CAD3219CCF53024DCAD604] - (.Pas de propriétaire - CLSched Module.) -- C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe [112016] [PID.3288]
[MD5.F54250B7BAC653F78AFA8ECE33ED65D5] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [553288] [PID.4532]
[MD5.E87213F37A13E2B54391E40934F071D0] - (.Microsoft Corporation - .NET Runtime Optimization Service.) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [105144] [PID.5780]
[MD5.C7FBDD1ED42F82BFA35167A5C9803EA3] - (.Microsoft Corporation - PresentationFontCache.exe.) -- C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [43904] [PID.4896]
[MD5.89F9E1984C1CD9E5F4FE39642D886E11] - (.Hewlett-Packard - HP Health Check Service.) -- c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [94208] [PID.2408]
~ Processes Running: Scanned in 00mn 01s

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\nénette\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] https://www.amazon.fr/{
G2 - GCE: Preference [User Data\Default] [aaaaojmikegpiepcfdkkjaplodkpfmlo] Ask Toolbar v.32.16, (Activé) =>Toolbar.Ask
G2 - GCE: Preference [User Data\Default] [bopakagnckmlgajfccecajhnimjiiedh] McAfee Security Scan+ v.3.8.141.12 (Désactivé)
G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Wallet v.0.0.6.1 (Activé)
G2 - GCE: Preference [User Data\Default] [ombmmloebnfnpehgjnmkcgoegfachobp] Widget context v.3.0 (Activé)
~ Google Browser: 14 Legitimates Filtered in 00mn 03s

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\nénette\AppData\Roaming\Mozilla\Firefox\Profiles\wbrdamal.default\prefs.js
M3 - MFPP: Plugins - [nénette] -- C:\Program Files\Mozilla FireFox\searchplugins\MediaDICO-fr.xml
~ Firefox Browser: 36 Legitimates Filtered in 00mn 00s

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = https://www.msn.com/fr-fr/
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 1
~ IE Browser: 15 Legitimates Filtered in 00mn 00s

---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s

---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Keys: Scanned in 00mn 00s

---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 20

---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: avast! Online Security - [HKLM]{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O3 - Toolbar: Bing Bar - [HKLM]{8dcb7100-df86-4384-8842-8fa844297b3f} . (.Microsoft Corporation. - Extensions du client Bing.) -- C:\Program Files\Microsoft\BingBar\7.3.124.0\BingExt.dll =>Toolbar.Bing
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{21FA44EF-376D-4D53-9B0F-8A89D3229068} Clé orpheline
~ Toolbar: Scanned in 00mn 00s

---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop [Public]: Aide et Support d'HP.lnk . (.Hewlett-Packard - HPHS Launcher.) -- C:\Windows\Help\OEM\scripts\HPHS_Launcher.exe
O4 - GS\Desktop [Public]: Boutique Accessoires HP.lnk . (...) -- C:\Program Files\Services en ligne\onlinesvs\WizLink.exe
O4 - GS\Desktop [Public]: eMule.lnk . (.https://www.emule-project.net/home/perl/general.cgi?l=1 - eMule.) -- C:\Program Files\eMule\emule.exe
O4 - GS\Desktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O4 - GS\Desktop [Public]: HP Total Care Advisor.lnk . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
O4 - GS\Desktop [Public]: McAfee Security Scan Plus.lnk . (.McAfee, Inc. - McAfee.) -- C:\Program Files\McAfee Security Scan\3.8.141\McUICnt.exe
O4 - GS\Desktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - GS\Desktop [Public]: My HP Games.lnk . (...) -- C:\Program Files\HP Games\java-script\java-script.exe
O4 - GS\Desktop [Public]: Safari.lnk . (...) -- C:\Windows\Installer\{C779648B-410E-4BBA-B75B-5815BCEFE71D}\SafariIco.exe
O4 - GS\Desktop [Public]: Video Downloader.lnk . (...) -- C:\Program Files\Video Downloader\VideoDownloader.exe (.not file.)
O4 - GS\Program [Public]: HP Total Care Advisor.lnk . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
O4 - GS\Program [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - GS\Program [Public]: QuickPlay Manager.lnk . (.CyberLink Corp. - HP QuickPlay Manage Program.) -- C:\Program Files\Hp\QuickPlay\QPManager.exe
O4 - GS\Program [Public]: QuickPlay.lnk . (.CyberLink Corp. - HP QuickPlay.) -- C:\Program Files\Hp\QuickPlay\QP.exe
O4 - GS\Program [Public]: Safari.lnk . (...) -- C:\Windows\Installer\{C779648B-410E-4BBA-B75B-5815BCEFE71D}\SafariIco.exe
O4 - GS\QuickLaunch [nénette]: Apple Safari.lnk . (...) -- C:\Windows\Installer\{C779648B-410E-4BBA-B75B-5815BCEFE71D}\SafariIco.exe
O4 - GS\QuickLaunch [nénette]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O4 - GS\QuickLaunch [nénette]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\QuickLaunch [nénette]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\QuickLaunch [nénette]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - GS\Program [nénette]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\SystemTools [nénette]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\Desktop [nénette]: Continue VuuPC Installation.lnk . (...) -- C:\Users\nénette\AppData\Local\Temp\ICReinstall_nsb2DF.tmp \RR (.not file.) =>PUP.VuuPC
O4 - GS\Desktop [nénette]: My VuuPC.lnk - Clé orpheline =>PUP.VuuPC
O4 - GS\Desktop [nénette]: Sync Folder.lnk . (...) -- C:\Program Files\MyPC Backup\MyPC Backup.exe (.not file.) =>PUP.MyPCBackup
~ Global Startup: 80 Legitimates Filtered in 00mn 00s

---\\ Applications lancées au démarrage du sytème (O4)
O4 - GS\Startup [Public]: McAfee Security Scan Plus.lnk . (.McAfee, Inc. - McAfee Security Scanner Scheduler.) -- C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SMSERIAL] . (.Motorola Inc. - Application executable file.) -- C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe =>.Realtek Semiconductor Corp
O4 - HKLM\..\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [QPService] . (.CyberLink Corp. - HP QuickPlay Resident Program.) -- C:\Program Files\HP\QuickPlay\QPService.exe
O4 - HKLM\..\Run: [QlbCtrl] . (. Hewlett-Packard Development Company, L.P. - Quick Launch Buttons.) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
O4 - HKLM\..\Run: [OnScreenDisplay] . (. Hewlett-Packard Development Company, L.P. - HP QuickTouch On Screen Display.) -- C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
O4 - HKLM\..\Run: [UCam_Menu] . (.CyberLink Corp. - StartMen Application.) -- C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe
O4 - HKLM\..\Run: [HP Health Check Scheduler] . (.Hewlett-Packard - HP Health Check Scheduler.) -- c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] . (.Hewlett-Packard Development Company, L.P. - HPWAMain Module.) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [WAWifiMessage] . (.Hewlett-Packard Development Company, L.P. - Module to process WiFi messages..) -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] . (.Apple Inc. - AppleSyncNotifier.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe =>.Hewlett-Packard Co
O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O4 - HKCU\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
O4 - HKCU\..\Run: [HPAdvisor] . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Connexion SFR 9props.exe] . (.SFR - Propriétés de la connexion SFR.) -- C:\Program Files\SFR\Kit\9props.exe
O4 - HKCU\..\Run: [MobileDocuments] C:\Program Files\Common Files\Apple\Internet Services\ubd.exe (.not file.)
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] Clé orpheline
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] Clé orpheline
O4 - HKUS\S-1-5-21-1006318801-3652765390-946959655-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-1006318801-3652765390-946959655-1000\..\Run: [LightScribe Control Panel] . (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
O4 - HKUS\S-1-5-21-1006318801-3652765390-946959655-1000\..\Run: [HPAdvisor] . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
O4 - HKUS\S-1-5-21-1006318801-3652765390-946959655-1000\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-21-1006318801-3652765390-946959655-1000\..\Run: [Connexion SFR 9props.exe] . (.SFR - Propriétés de la connexion SFR.) -- C:\Program Files\SFR\Kit\9props.exe
O4 - HKUS\S-1-5-21-1006318801-3652765390-946959655-1000\..\Run: [MobileDocuments] C:\Program Files\Common Files\Apple\Internet Services\ubd.exe (.not file.)
O4 - HKUS\S-1-5-21-1006318801-3652765390-946959655-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
~ Application: Scanned in 00mn 00s

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} . (.Microsoft Corporation - Windows Live Messenger Companion core resources.) -- C:\Program Files\Windows Live\Companion\companionres.dll
O9 - Extra button: Console Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -- Clé orpheline
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO
~ IE Extra Buttons: Scanned in 00mn 00s

---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} ((no name)) - http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
~ Objets ActiveX: Scanned in 00mn 00s

---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{371B75DF-44A9-4158-A12D-7B4D71DB136F}: DhcpNameServer = 172.20.10.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{A38E3C78-3119-4121-A8F3-4FEA7E8DB47F}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{371B75DF-44A9-4158-A12D-7B4D71DB136F}: DhcpNameServer = 172.20.10.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{A38E3C78-3119-4121-A8F3-4FEA7E8DB47F}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{371B75DF-44A9-4158-A12D-7B4D71DB136F}: DhcpNameServer = 172.20.2.39 172.20.2.10
O17 - HKLM\System\CS2\Services\Tcpip\..\{A38E3C78-3119-4121-A8F3-4FEA7E8DB47F}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{371B75DF-44A9-4158-A12D-7B4D71DB136F}: DhcpNameServer = 172.20.2.39 172.20.2.10
O17 - HKLM\System\CS3\Services\Tcpip\..\{A38E3C78-3119-4121-A8F3-4FEA7E8DB47F}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain: Scanned in 00mn 00s

---\\ Protocole additionnel (O18)
O18 - Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (...) - C:\Program Files\amazon\amazon~1\amazon~1.dll (.not file.)
~ AppInit DLL: Scanned in 00mn 00s

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\System32\browseui.dll
~ STS/SSO: Scanned in 00mn 00s

---\\ Logiciels installés (O42)
O42 - Logiciel: Ask Shopping Toolbar - (.APN, LLC.) [HKLM] -- {4F524A00-6A76-A76A-76A7-A758B70C0A03}
O42 - Logiciel: VO Package - (...) [HKLM] -- VOPackage
~ Logic: 50 Legitimates Filtered in 00mn 00s

---\\ HKCU & HKLM Software Keys
[HKLM\Software\ProductM]
~ Key Software: 271 Legitimates Filtered in 00mn 00s

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 26/12/2008 - 16:57:13 - [1,294] ----D C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
~ 198 Dossiers CLSID vides (CLSID Empty Folders)
~ Program Folder: 378 Legitimates Filtered in 01mn 12s

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.ABFEAB7D839C72E22614B31C2AAF753C] - 15/02/2014 - 16:58:10 ---A- . (.Pas de propriétaire - Setup/Uninstall.) -- C:\Windows\unins000.exe [1227465]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 15/02/2014 - 16:58:28 ---A- . (...) -- C:\LIL1248.tmp [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 15/02/2014 - 16:58:28 ---A- . (...) -- C:\LIL12D4.tmp [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 15/02/2014 - 16:58:28 ---A- . (...) -- C:\LIL1332.tmp [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 15/02/2014 - 16:58:29 ---A- . (...) -- C:\LIL1370.tmp [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 15/02/2014 - 16:58:29 ---A- . (...) -- C:\LIL13CE.tmp [0]
O44 - LFC:[MD5.6C45A858D82195131E306F04E61A5800] - 15/02/2014 - 16:59:18 ---A- . (...) -- C:\Windows\unins000.dat [179551]
O44 - LFC:[MD5.0065E911F966A71A115D9A52FF3DFC99] - 15/02/2014 - 17:10:08 ---A- . (...) -- C:\Windows\System32\sasnative32.exe [17136]
~ Files: 48 Legitimates Filtered in 00mn 32s

---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.979D38E5A8A9822390B8D6FD14D1209A] - 01/03/2014 - 19:15:14 ---A- - C:\Windows\Prefetch\BINGAPP.EXE-3BAF4FC4.pf
O45 - LFCP:[MD5.66B4804CB542E1487AA9B298B9A1D33D] - 01/03/2014 - 19:15:15 ---A- - C:\Windows\Prefetch\BINGBAR.EXE-F1A5B170.pf
O45 - LFCP:[MD5.742789DE5E0761FED47866B621002CEC] - 01/03/2014 - 19:15:24 ---A- - C:\Windows\Prefetch\BINGSURROGATE.EXE-90E6C08B.pf
O45 - LFCP:[MD5.8110797E590026D7D09388037B3DFA1D] - 21/02/2014 - 22:54:42 ---A- - C:\Windows\Prefetch\VERSIONMANAGERCHECK.EXE-B6B8F990.pf
~ Prefetcher: 98 Legitimates Filtered in 00mn 01s

---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
~ MWPS: 16 Legitimates Filtered in 00mn 00s

---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:[MD5.F385467DF95D0A73775CB3B076B8B969] - 15/02/2014 - 17:22:36 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys [49944]
O58 - SDL:[MD5.1B0662514A68C3A42E60D240C5ABEF28] - 15/02/2014 - 17:22:36 ---A- . (...) -- C:\Windows\System32\Drivers\aswVmm.sys [180248]
O58 - SDL:[MD5.23B62471681A124889978F6295B3F4C6] - 21/01/2008 - 03:23:22 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [342584]
O58 - SDL:[MD5.BCED60D16156E428F8DF8CF27B0DF150] - 02/11/2006 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\System32\Drivers\iteatapi.sys [35944]
O58 - SDL:[MD5.06FA654504A498C30ADCA8BEC4E87E7E] - 02/11/2006 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\System32\Drivers\iteraid.sys [35944]
O58 - SDL:[MD5.355AAC141B214BEF1DBC1483AFD9BD50] - 24/02/2007 - 13:42:22 ---A- . (.REDC - RICOH SD Driver.) -- C:\Windows\System32\Drivers\rimmptsk.sys [39936]
O58 - SDL:[MD5.A4216C71DD4F60B26418CCFD99CD0815] - 23/01/2007 - 15:40:20 ---A- . (.REDC - RICOH MS Driver.) -- C:\Windows\System32\Drivers\rimsptsk.sys [42496]
O58 - SDL:[MD5.D231B577024AA324AF13A42F3A807D10] - 21/03/2007 - 21:02:04 ---A- . (.REDC - RICOH XD SM Driver.) -- C:\Windows\System32\Drivers\rixdptsk.sys [37376]
O58 - SDL:[MD5.9224BB254F591DE4CA8D572A5F0D635C] - 21/01/2008 - 03:23:20 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\System32\Drivers\uliahci.sys [238648]
O58 - SDL:[MD5.8514D0E5CD0534467C5FC61BE94A569F] - 02/11/2006 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\System32\Drivers\ulsata.sys [98408]
O58 - SDL:[MD5.38C3C6E62B157A6BC46594FADA45C62B] - 21/01/2008 - 03:23:23 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\System32\Drivers\ulsata2.sys [115816]
O58 - SDL:[MD5.6E421CCC57059B0186C6259CA3B6DFC9] - 13/12/2012 - 13:50:38 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\Drivers\usbaapl.sys [45056]
O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 02/11/2006 - 08:09:42 ---A- . (...) -- C:\Windows\System32\ANSI.SYS [9029]
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 02/11/2006 - 08:09:45 ---A- . (...) -- C:\Windows\System32\country.sys [27097]
O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 02/11/2006 - 08:09:41 ---A- . (...) -- C:\Windows\System32\HIMEM.SYS [4768]
O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\System32\KEY01.SYS [42809]
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537]
O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 02/11/2006 - 08:09:29 ---A- . (...) -- C:\Windows\System32\NTDOS.SYS [27866]
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 02/11/2006 - 08:09:35 ---A- . (...) -- C:\Windows\System32\NTDOS404.SYS [29146]
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 02/11/2006 - 08:09:38 ---A- . (...) -- C:\Windows\System32\NTDOS411.SYS [29370]
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 02/11/2006 - 08:09:40 ---A- . (...) -- C:\Windows\System32\NTDOS412.SYS [29274]
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 02/11/2006 - 08:09:31 ---A- . (...) -- C:\Windows\System32\NTDOS804.SYS [29146]
O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 02/11/2006 - 08:09:20 ---A- . (...) -- C:\Windows\System32\NTIO.SYS [33952]
O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 02/11/2006 - 08:09:23 ---A- . (...) -- C:\Windows\System32\NTIO404.SYS [34672]
O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 02/11/2006 - 08:09:24 ---A- . (...) -- C:\Windows\System32\NTIO411.SYS [35776]
O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 02/11/2006 - 08:09:26 ---A- . (...) -- C:\Windows\System32\NTIO412.SYS [35536]
O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 02/11/2006 - 08:09:22 ---A- . (...) -- C:\Windows\System32\NTIO804.SYS [34672]
~ Drivers: 16 Legitimates Filtered in 00mn 16s

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC: 01/03/2014 - 12:51:13 ---A- . (...) -- C:\Users\nénette\AppData\Local\Google\Chrome\User Data\chrome_shutdown_ms.txt [4]
O61 - LFC: 01/03/2014 - 12:51:16 ---A- . (...) -- C:\Users\nénette\AppData\Local\Google\Chrome\User Data\Local State [70799]
O61 - LFC: 01/03/2014 - 12:56:02 ---A- . (...) -- C:\Users\nénette\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{140A2D0E-85CC-4ed3-9BA5-8FA35DA7FABA}.xpi [2004]
O61 - LFC: 01/03/2014 - 12:56:03 ---A- . (...) -- C:\Users\nénette\AppData\Roaming\ZHP\ZHPDiag.txt [83002] =>.Nicolas Coolman
O61 - LFC: 02/03/2014 - 12:51:19 ---A- . (...) -- C:\Users\nénette\AppData\Local\QuickPlay\RadioChannelList.lst [28]
O61 - LFC: 02/03/2014 - 12:51:20 ---A- . (...) -- C:\Users\nénette\AppData\Local\QuickPlay\RadioStation.lst [7]
O61 - LFC: 02/03/2014 - 12:51:20 ---A- . (...) -- C:\Users\nénette\AppData\Local\QuickPlay\TVChannel.lst [105]
O61 - LFC: 02/03/2014 - 12:56:03 ---A- . (...) -- C:\Users\nénette\AppData\Roaming\ZHP\Log.txt [136959] =>.Nicolas Coolman
O61 - LFC: 02/03/2014 - 12:56:03 ---A- . (...) -- C:\Users\nénette\AppData\Roaming\ZHP\TestsZHPDiag.txt [2917] =>.Nicolas Coolman
O61 - LFC: 28/02/2014 - 12:51:13 ---A- . (...) -- C:\Users\nénette\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists [270670]
O61 - LFC: 28/02/2014 - 12:51:17 ---A- . (...) -- C:\Users\nénette\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.1.377\_platform_specific\win_x86\CdmAdapterVersion [13]
~ 24 Fichiers temporaires (Temporary files)
~ Files: 153 Legitimates Filtered in 05mn 21s

---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s

---\\ Associations Shell Spawning (O67)
O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.)
~ FASS Keys: 13 Legitimates Filtered in 00mn 00s

---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: <Safari.exe> <Safari>[HKLM\..\Shell\open\Command] (.Apple Inc. - Safari.) -- C:\Program Files\Safari\Safari.exe
~ Keys: Scanned in 00mn 00s

---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {36E2ECBD-2EBF-4805-AC59-49F098C29A48} [DefaultScope] - (Ask Search) - http://www.search.ask.com/?o=10148&l=dis =>Toolbar.Ask
O69 - SBI: SearchScopes [HKCU] {460C3D19-B3D4-4964-A550-77D263B0CCCB} - (Bing) - https://www.bing.com/?toHttps=1&redig=F6E03C3CC058415AA40F1BC2D47E2332
O69 - SBI: SearchScopes [HKCU] {4EAF0BA5-9C12-47B5-B8EC-E508A0192429} - (AOL Recherche) - http://slirsredirect.search.aol.com/
O69 - SBI: SearchScopes [HKCU] {58258FEF-2F84-4F4A-B490-4F71113DB960} - (Kelkoo) - http://fr.kelkoopartners.net/
~ Keys: Scanned in 00mn 00s

---\\ Recherche particulière à la racine du système (SPRF) (O84)
[MD5.8E9633A168F0613FE5C289995C788653] [SPRF][02/03/2014] (...) -- C:\ProgramData\nvModes.dat [56597]
[MD5.8A52E361CC0B9BEC3325332D363E704B] [SPRF][18/09/2013] (...) -- C:\Users\nénette\AppData\Roaming\wklnhst.dat [254]
[MD5.7FED9CC66EC9A2BB312BB9E6EEF3C55C] [SPRF][09/02/2011] (.Pas de propriétaire - AVAST Software Setup Engine.) -- C:\Users\nénette\Desktop\setup_av_free_fre_5.1.889_01Net.exe [49985000]
[MD5.6F678556A6FCE04FC94F3435F6313705] [SPRF][09/03/2008] (...) -- C:\Windows\Downloaded Program Files\unagiuninst.exe [38428]
~ Files: 6 Legitimates Filtered in 00mn 01s

---\\ Liste des exceptions du parefeu (FirewallRules) (O87)
O87 - FAEL: "{8A6EDC60-820A-406A-AB07-CB127FFBB735}" |In - Domain - P6 - TRUE | .(...) -- C:\Program Files\VuuPC\RemoteEngine.exe (.not file.) =>PUP.VuuPC
O87 - FAEL: "{A70447E0-3235-4B0C-BABE-C566699E71A7}" |In - Domain - P6 - TRUE | .(...) -- C:\Program Files\VuuPC\Connectivity.exe (.not file.) =>PUP.VuuPC
~ Firewall: 194 Legitimates Filtered in 00mn 01s

---\\ Enumère les codes produits des logiciels (PUC) (O90)
O90 - PUC: "00A425F467A6A67A677A7A857BC0A030" . (.Ask Shopping Toolbar.) -- C:\Windows\Installer\{4F524A00-6A76-A76A-76A7-A758B70C0A03}\ToolbarIcon.exe
O90 - PUC: "2F0F48BCB729D854D95C7838E2D36C35" . (.GearDrvs.) -- C:\Windows\Installer\{CB84F0F2-927B-458D-9DC5-87832E3DC653}\ARPPRODUCTICON.exe
O90 - PUC: "409D4822831C85B439CEC563A25B31A0" . (.Les Sims(TM) Histoires de vie.) -- C:\Windows\Installer\{2284D904-C138-4B58-93EC-5C362AB5130A}\ARPPRODUCTICON.exe
O90 - PUC: "617DD6FF01B79624F991FF0BA74CDC59" . (.Bing Bar.) -- C:\Windows\Installer\{FF6DD716-7B10-4269-9F19-FFB07AC4CD95}\icon_installer_ico =>Toolbar.Bing
~ Update Products: 114 Legitimates Filtered in 00mn 00s

---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
[MD5.183447E360C8C377D8B7535A99A781F9] [WIS][15/02/2014] (.APN, LLC - Ask Shopping Toolbar.) -- C:\Windows\Installer\108c5d.msi [595456]
[MD5.223DE43FC0AA2591B243152A12573EB9] [WIS][26/12/2008] (.GEAR Software - Blank Project Template.) -- C:\Windows\Installer\1ccf93.msi [441856]
~ WIS: 116 Legitimates Filtered in 00mn 16s

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 22/02/2014 257928 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Demand 05/03/2007 110592 | (Com4Qlb) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
SS - | Demand 24/07/2007 181800 | (GameConsoleService) . (.WildTangent, Inc..) - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
SS - | Auto 22/09/2011 136176 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 22/09/2011 136176 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 03/04/2005 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
SS - | Demand 16/01/2014 235696 | (McComponentHostService) . (.McAfee, Inc..) - C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe
SS - | Demand 30/10/2013 129976 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Auto 05/09/2013 171680 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe
SR - | Auto 07/01/2014 43336 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 15/02/2014 50344 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
SR - | Auto 16/12/2013 193696 | (BBSvc) . (.Microsoft Corporation..) - C:\Program Files\Microsoft\BingBar\7.3.124.0\BBSvc.exe
SR - | Demand 16/12/2013 247968 | (BBUpdate) . (.Microsoft Corporation..) - C:\Program Files\Microsoft\BingBar\7.3.124.0\SeaPort.exe
SR - | Auto 30/08/2011 390504 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Auto 16/06/2008 94208 | (HP Health Check Service) . (.Hewlett-Packard.) - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
SR - | Auto 02/05/2006 135168 | (hpqwmiex) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
SR - | Auto 24/10/2007 358936 | (IAANTMON) . (.Intel Corporation.) - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
SR - | Demand 06/02/2014 553288 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 23/08/2007 79136 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
SR - | Auto 04/04/2013 418376 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
SR - | Auto 04/04/2013 701512 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
SR - | Auto 03/10/2009 219752 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\System32\nvvsvc.exe
SR - | Auto 19/12/2007 271760 | (QPCapSvc) . (...) - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
SR - | Auto 19/12/2007 112016 | (QPSched) . (...) - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
SR - | Auto 09/01/2007 272024 | (RichVideo) . (...) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
SR - | Auto 21/01/2008 21504 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 21/01/2008 21504 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services: Scanned in 00mn 18s

---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net/
Run by nénette at 02/03/2014 12:58:33
device: opened successfully
user: MBR read successfully
Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll iaStor.sys
C:\Windows\system32\DRIVERS\iaStor.sys Intel Corporation Intel Matrix Storage Manager driver
1 ntkrnlpa!IofCallDriver[0x83079916] >> \Device\Harddisk0\DR0[0x876A96E8]
kernel: MBR read successfully
user & kernel MBR OK
~ MBR: 14 Legitimates Filtered in 00mn 02s

---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog/
Run by nénette at 02/03/2014 12:58:35
********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR: Scanned in 00mn 04s

---\\ Scan Additionnel (O88)
Database Version : 13031 - (23/02/2014)
Clés trouvées (Keys found) : 1
Valeurs trouvées (Values found) : 1
Dossiers trouvés (Folders found) : 1
Fichiers trouvés (Files found) : 0
[HKLM\Software\Google\Chrome\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo] =>Toolbar.Ask^
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{8dcb7100-df86-4384-8842-8fa844297b3f} =>Toolbar.Bing^
C:\Users\nénette\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo =>Toolbar.Ask^
~ Additionnel Scan: 411427 Items scanned in 00mn 46s

---\\ Récapitulatif des détections trouvées sur votre station
~ http://nicolascoolman.webs.com/apps/blog/show/28927746-toolbar-ask =>Toolbar.Ask
~ http://nicolascoolman.webs.com/apps/blog/show/33388048-pup-vuupc =>PUP.VuuPC
~ http://nicolascoolman.webs.com/apps/blog/show/32174815-pup-mypcbackup =>PUP.MyPCBackup
~ MSI: 3 link(s) detected in 00mn 46s

~ 1617 Legitimates filtered by white list
End of the scan (604 lines in 10mn 59s)(0)

Il faudrait mettre Adobe Reader à jour et désinstaller l'ancienne version...

Ensuite suis ces étapes :

- Vide complètement ta corbeille
- En suite lance cette fois-ci ZhpFix ( Pour Vista/7/8 : clique droit et "Exécuter en tant qu'Administrateur")
- Clique sur "Importer'
- Et colle ça :




Script ZHPFix
[MD5.F2E8CEFC8CF4D6454F4121C5FF93136A] - (.Microsoft Corporation. - BingBar Service.) -- C:\Program Files\Microsoft\BingBar\7.3.124.0\BBSvc.exe [193696] [PID.2020]
G2 - GCE: Preference [User Data\Default] [aaaaojmikegpiepcfdkkjaplodkpfmlo] Ask Toolbar v.32.16, (Activé) =>Toolbar.Ask
O3 - Toolbar: Bing Bar - [HKLM]{8dcb7100-df86-4384-8842-8fa844297b3f} . (.Microsoft Corporation. - Extensions du client Bing.) -- C:\Program Files\Microsoft\BingBar\7.3.124.0\BingExt.dll =>Toolbar.Bing
O45 - LFCP:[MD5.979D38E5A8A9822390B8D6FD14D1209A] - 01/03/2014 - 19:15:14 ---A- - C:\Windows\Prefetch\BINGAPP.EXE-3BAF4FC4.pf
O45 - LFCP:[MD5.66B4804CB542E1487AA9B298B9A1D33D] - 01/03/2014 - 19:15:15 ---A- - C:\Windows\Prefetch\BINGBAR.EXE-F1A5B170.pf
O45 - LFCP:[MD5.742789DE5E0761FED47866B621002CEC] - 01/03/2014 - 19:15:24 ---A- - C:\Windows\Prefetch\BINGSURROGATE.EXE-90E6C08B.pf
O69 - SBI: SearchScopes [HKCU] {36E2ECBD-2EBF-4805-AC59-49F098C29A48} [DefaultScope] - (Ask Search) - http://www.search.ask.com/?o=10148&l=dis =>Toolbar.Ask
O90 - PUC: "617DD6FF01B79624F991FF0BA74CDC59" . (.Bing Bar.) -- C:\Windows\Installer\{FF6DD716-7B10-4269-9F19-FFB07AC4CD95}\icon_installer_ico =>Toolbar.Bing
SR - | Auto 16/12/2013 193696 | (BBSvc) . (.Microsoft Corporation..) - C:\Program Files\Microsoft\BingBar\7.3.124.0\BBSvc.exe
SR - | Demand 16/12/2013 247968 | (BBUpdate) . (.Microsoft Corporation..) - C:\Program Files\Microsoft\BingBar\7.3.124.0\SeaPort.exe
[HKLM\Software\Google\Chrome\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo] =>Toolbar.Ask^
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{8dcb7100-df86-4384-8842-8fa844297b3f} =>Toolbar.Bing^
C:\Users\nénette\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo =>Toolbar.Ask^
O4 - GS\Desktop [nénette]: Continue VuuPC Installation.lnk . (...) -- C:\Users\nénette\AppData\Local\Temp\ICReinstall_nsb2DF.tmp \RR (.not file.) =>PUP.VuuPC
O4 - GS\Desktop [nénette]: My VuuPC.lnk - Clé orpheline =>PUP.VuuPC
O4 - GS\Desktop [nénette]: Sync Folder.lnk . (...) -- C:\Program Files\MyPC Backup\MyPC Backup.exe (.not file.) =>PUP.MyPCBackup
O87 - FAEL: "{8A6EDC60-820A-406A-AB07-CB127FFBB735}" |In - Domain - P6 - TRUE | .(...) -- C:\Program Files\VuuPC\RemoteEngine.exe (.not file.) =>PUP.VuuPC
O87 - FAEL: "{A70447E0-3235-4B0C-BABE-C566699E71A7}" |In - Domain - P6 - TRUE | .(...) -- C:\Program Files\VuuPC\Connectivity.exe (.not file.) =>PUP.VuuPC
EmptyTemp
EmptyCLSID
SysRestore



- Clique sur Go en bas à gauche
- Confirme le nettoyage
- Et accepte le "vidage de corbeille"
- Colle le rapport de nettoyage obtenu

ATTENTION : ce script ne doit pas être utilisé par un autre ordinateur

ca me dit quil faut pour mettre adobe a jour faut que je ferme des applications je ferme toutes les applications et pourtant ça s arrete a 96%