Problème ordinateur lent

Euh non la seul carte que j'ai changé c'est la carte reseau Tp link , installé par un informaticien et qui avait aussi installé Speed up my PC mais je l'ai enlevé car on me l'a déconseillé.

je ne sais pas si cela peut aider mais voici le rapport ZHPDiag :
~ Rapport de ZHPDiag v2014.5.5.55 - Nicolas Coolman (05/05/2014)
~ Lancé par Lise (06/05/2014 19:28:58)
~ Adresse du Site Web http://nicolascoolman.webs.com
~ Forums gratuits d'Assistance à la désinfection : http://nicolascoolman.webs.com/apps/links/
~ Traduit par Nicolas Coolman
~ Etat de la version :
~ Liste blanche : Activée par le programme
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Not Found


---\\ Navigateurs Internet
MSIE: Internet Explorer v8.0.6001.18702
MFIE: Mozilla Firefox 29.0
GCIE: Google Chrome (Defaut)

---\\ Informations sur les produits Windows
~ Langage: Français
Microsoft Windows XP, 32-bit Service Pack 3 (Build 2600)
Windows Automatic Updates : OK
Windows Genuine Advantage : OK

---\\ Logiciels de protection du système

---\\ Logiciels d'optimisation du système
CCleaner v4.12

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels
Adobe Flash Player 13 Plugin
Adobe Reader XI

---\\ Informations sur le système
~ Processor: x86 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2013 MB (70% free)
System Restore: Activé (Enable)
System drive C: has 106 GB (68%) free of 155 GB

---\\ Mode de connexion au système
~ Computer Name: PC
~ User Name: Lise
~ All Users Names: SUPPORT_388945a0, Lise, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Documents and Settings\Lise\Application Data\ZHP\
~ %AppData% : C:\Documents and Settings\Lise\Application Data\
~ %Desktop% : C:\Documents and Settings\Lise\Bureau\
~ %Favorites% : C:\Documents and Settings\Lise\Favoris\
~ %LocalAppData% : C:\Documents and Settings\Lise\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\Lise\Menu Démarrer\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS\system32\

---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 106 Go of 155 Go)
D: Hard drive, Flash drive, Thumb drive (Free 310 Go of 310 Go)
E: CD-ROM drive (Not Inserted)
G: Floppy drive, Flash card reader, USB Key (Not Inserted)
H: Floppy drive, Flash card reader, USB Key (Not Inserted)
I: Floppy drive, Flash card reader, USB Key (Not Inserted)
J: Floppy drive, Flash card reader, USB Key (Not Inserted)



---\\ Etat du Centre de Sécurité Windows
~ Security Center: 41 Legitimates Filtered in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\Explorer.exe [1037824]
[MD5.E1948B1F45A176FB4A0251446A5AE86D] - (.Microsoft Corporation - Internet Extensions for Win32.) (.06/03/2014 - 18:58:52.) -- C:\WINDOWS\system32\wininet.dll [920064]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Winlogon.exe [512000]
[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 14:49:54.) -- C:\WINDOWS\system32\Drivers\AFD.sys [138496]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 10:40:32.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96512]
[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744]
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976]
[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44672]
[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [54144]
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [42112]
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [152832]
[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264]
[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 14:29:31.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [456320]
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162816]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574976]
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\Parport.sys [80384]
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328]
[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 10:32:52.) -- C:\WINDOWS\system32\Drivers\rdpdr.sys [196224]
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.13/04/2008 - 19:57:36.) -- C:\WINDOWS\system32\Drivers\redbook.sys [58752]
[MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.14/04/2008 - 13:00:00.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [53376]
~ Generic Processes: Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 3/15
~ Mes musiques (My Musics) : 1/16
~ Mes Videos (My Videos) : 1/414
~ Mes Favoris (My Favorites) : 1/6
~ Mes Documents (My Documents) : 1/1969
~ Mon Bureau (My Desktop) : 1/2136
~ Menu demarrer (Programs) : 1/5
~ Hidden Files: Scanned in 00mn 04s



---\\ Processus lancés
[MD5.4D282B9C5BB05DF92C9F3977DFB9F916] - (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400] [PID.1456]
[MD5.4BD74A8D83D8EE8D622ECC601EA7D92E] - (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe [150040] [PID.1832]
[MD5.F770104B0640417B2499E93BDD38D7E6] - (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe [178712] [PID.1840]
[MD5.66847E8BFDF5370F9B3300EF46A6AE88] - (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe [150040] [PID.1848]
[MD5.2D7C9A95F4B95BDE3C3D847BAF40CF6D] - (.VIA Technologies, Inc. - HDeck MFC Application.) -- C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe [33677312] [PID.1856]
[MD5.0D5720BAA4FD121A0183D408FCE307FB] - (.Intel Corporation - igfxsrvc Module.) -- C:\WINDOWS\system32\igfxsrvc.exe [256536] [PID.1908]
[MD5.3A2FF896551D5FE9B40790326DE4CE4D] - (.Sonix - CameraMonitor Application.) -- C:\WINDOWS\vsnp2uvc.exe [569344] [PID.1924]
[MD5.2E5212A0BFB98FE0167C92C76C87AFE3] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [249064] [PID.1932]
[MD5.12902A626CAE9F362AAE39EF1FC79E87] - (.France Telecom SA - Pas de description.) -- C:\Program Files\Orange\Systray\SystrayApp.exe [94208] [PID.1948]
[MD5.F6158734F1E24C6C510155CF0D363911] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\program files\real\realplayer\update\realsched.exe [295512] [PID.1960]
[MD5.241B07FF7F5943B9C1BF3235F49AC1E1] - (.Avira Operations GmbH & Co. KG - Antivirus System Tray Tool (Desktop).) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744] [PID.1968]
[MD5.2A3FB4C98F139038E23330D2439DB8A4] - (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Documents and Settings\Lise\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe [138096] [PID.2036]
[MD5.AAAC76A931480ADD2C9B251621EB524E] - (.France Telecom SA - Pas de description.) -- C:\Program Files\Orange\Launcher\Launcher.exe [598016] [PID.176]
[MD5.D72D08898E2BA14B8FD6E9533C714385] - (.FileHippo.com - FileHippo.com Update Checker.) -- C:\Program Files\FileHippo.com\UpdateChecker.exe [307712] [PID.184]
[MD5.E9257AE2500A3C8272B6C32A1329DAA3] - (.France Telecom SA - Pas de description.) -- C:\Program Files\Fichiers communs\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe [90112] [PID.168]
[MD5.54ABBCF1C68FAEFF10BCCD254740AE16] - (.France Telecom SA - Pas de description.) -- C:\Program Files\Orange\connectivity\connectivitymanager.exe [716800] [PID.584]
[MD5.032F85FBFE612ECC455ABA7474E5914F] - (.France Telecom SA - Pas de description.) -- C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe [360448] [PID.608]
[MD5.65AF41A7A2C5B6693E1B4164E7632C3E] - (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400] [PID.1212]
[MD5.DA1485749B785ADCEB421874F5F3405B] - (.France Telecom SA - Pas de description.) -- C:\Program Files\Fichiers communs\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [65536] [PID.1336]
[MD5.F02A533F517EB38333CB12A9E8963773] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe [136176] [PID.1616]
[MD5.96EFEC24346A8EB1157E80523079ADDC] - (...) -- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056] [PID.1620]
[MD5.CCCA2765FC2EA2E13B234AF5F859C00B] - (.Microsoft Corporation - Microsoft® Serial Keys Utility.) -- C:\WINDOWS\system32\skeys.exe [26112] [PID.436]
[MD5.6F1E9AB820B3DD8BD38C0190A206205D] - (.Avira Operations GmbH & Co. KG - AntiVir shadow copy service.) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe [431672] [PID.2468]
[MD5.3D15C6EDBF84D792ACEBD2289546DBAF] - (.Avira Operations GmbH & Co. KG - AntiVir WebGuard Service.) -- C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.exe [1017424] [PID.2612]
[MD5.987B72E406C172F9F5184F1B4F0CE1BB] - (.France Telecom SA - Pas de description.) -- C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe [28672] [PID.2932]
[MD5.167A81D7A06119ABF84042F88EE6F6DF] - (.France Telecom SA - Pas de description.) -- C:\Program Files\Fichiers communs\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe [65536] [PID.2940]
[MD5.9DA85B8C8DE1E0B4A83DE333A403F75E] - (.Smartbar - Smartbar.) -- C:\Documents and Settings\Lise\Local Settings\Application Data\Smartbar\Application\Smartbar.exe [28192] [PID.2580] =>Hijacker.SmartBar
[MD5.B46FC367B6812E10B49399180D9A4014] - (.Pas de propriétaire - srpts.) -- C:\Program Files\LPT\srpts.exe [37920] [PID.3084] =>Adware.Incredibar
[MD5.298B84801F397E5C24DADBF4856452F7] - (.Pas de propriétaire - srptm.) -- C:\Documents and Settings\Lise\Local Settings\Application Data\LPT\srptm.exe [23072] [PID.1120] =>Adware.Incredibar
[MD5.C77194C94AA796FD237FDDC3A0E420E5] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [7871488] [PID.1496]
~ Processes Running: Scanned in 00mn 01s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Documents and Settings\Lise\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

---\\ Liste des dossiers d'extension Google Chrome
~ Google Lines Browser: 3 Legitimates Filtered in 00mn 04s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Documents and Settings\Lise\Application Data\Mozilla\Firefox\Profiles\9rcuyvu5.default\prefs.js
M3 - MFPP: Plugins - [Lise] -- C:\Documents and Settings\Lise\Application Data\Mozilla\Firefox\Profiles\9rcuyvu5.default\searchplugins\Web Search.xml =>Parasite.Pugi
M0 - MFSP: prefs.js [Lise - 9rcuyvu5.default] http://feed.snapdo.com =>Hijacker.SmartBar
~ Firefox Browser: 20 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://feed.snapdo.com =>Hijacker.SmartBar
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.snapdo.com =>Hijacker.SmartBar
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snapdo.com =>Hijacker.SmartBar
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snapdo.com =>Hijacker.SmartBar
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snapdo.com =>Hijacker.SmartBar
~ IE Browser: 15 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe,,SKEYS /I
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Keys: Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 20



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: EPSON Web-To-Page - [HKLM]{EE5D279F-081B-4404-994D-C6B60AAEBA6D} . (.SEIKO EPSON CORPORATION - EPSON Web-To-Page.) -- C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Easy Photo Print - [HKLM]{9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O3 - Toolbar: ZoneAlarm Security Toolbar - [HKLM]{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} . (.Check Point Software Technologies LTD - Pas de description.) -- C:\Program Files\Check Point Software Technologies LTD\zonealarm\1.8.21.15\zonealarmTlbr.dll =>Toolbar.ZoneAlarm
O3 - Toolbar: Shopping Helper Smartbar - [HKLM]{ae07101b-46d4-4a98-af68-0333ea26e113} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll =>Hijacker.SmartBar
~ Toolbar: Scanned in 00mn 00s



---\\ Applications lancées au démarrage du système (O4)
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [HDAudDeck] . (.VIA Technologies, Inc. - HDeck MFC Application.) -- C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
O4 - HKLM\..\Run: [ORAHSSSessionManager] . (.France Telecom SA - Pas de description.) -- C:\Program Files\Orange\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
O4 - HKLM\..\Run: [snp2uvc] . (.Sonix - CameraMonitor Application.) -- C:\WINDOWS\vsnp2uvc.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe =>.Oracle Corporation
O4 - HKLM\..\Run: [SystrayORAHSS] . (.France Telecom SA - Pas de description.) -- C:\Program Files\Orange\Systray\SystrayApp.exe
O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\program files\real\realplayer\update\realsched.exe =>.RealNetworks, Inc
O4 - HKLM\..\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Antivirus System Tray Tool (Desktop).) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\qttask.exe
O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Documents and Settings\Lise\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe
O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [FileHippo.com] . (.FileHippo.com - FileHippo.com Update Checker.) -- C:\Program Files\FileHippo.com\UpdateChecker.exe
O4 - HKCU\..\Run: [Browser Infrastructure Helper] . (.Smartbar - Smartbar.) -- C:\Documents and Settings\Lise\Local Settings\Application Data\Smartbar\Application\Smartbar.exe =>Hijacker.SmartBar
O4 - HKUS\S-1-5-21-1482476501-602162358-1417001333-1019\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Documents and Settings\Lise\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe
O4 - HKUS\S-1-5-21-1482476501-602162358-1417001333-1019\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-1482476501-602162358-1417001333-1019\..\Run: [FileHippo.com] . (.FileHippo.com - FileHippo.com Update Checker.) -- C:\Program Files\FileHippo.com\UpdateChecker.exe
O4 - HKUS\S-1-5-21-1482476501-602162358-1417001333-1019\..\Run: [Browser Infrastructure Helper] . (.Smartbar - Smartbar.) -- C:\Documents and Settings\Lise\Local Settings\Application Data\Smartbar\Application\Smartbar.exe =>Hijacker.SmartBar
~ Application: Scanned in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
~ IE Extra Buttons: Scanned in 00mn 00s



---\\ Site dans la Zone de confiance d'Internet Explorer (O15)
O15 - Trusted Zone: [HKCU\...\Domains\www] http.orange.fr
~ IE Zone Confiance: Scanned in 00mn 00s



---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} ((no name)) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} ((no name)) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} ((no name)) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1274893943994
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} ((no name)) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} ((no name)) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
~ Objets ActiveX: Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{77A6780F-2D0E-4967-84C0-7B871A027255}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{77A6780F-2D0E-4967-84C0-7B871A027255}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{77A6780F-2D0E-4967-84C0-7B871A027255}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain: Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll =>.Microsoft Corporation
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\SHELL32.dll
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS\system32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- C:\WINDOWS\system32\dimsntfy.dll
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\WINDOWS\system32\igfxdev.dll
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS\system32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\WlNotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS\system32\wlnotify.dll
~ Winlogon: Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: LPT System Updater Service (LPTSystemUpdater) . (.Pas de propriétaire - srpts.) - C:\Program Files\LPT\srpts.exe =>Adware.Incredibar
O23 - Service: ZoneAlarm Privacy Service (ZAPrivacyService) . (...) - C:\Program Files\CheckPoint\ZoneAlarm\ZAPrivacyService.exe (.not file.)
~ Services: 7 Legitimates Filtered in 00mn 03s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Desktop General: BackupWallPaper - .(...) - C:\Documents and Settings\Lise\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop General: WallPaper - .(...) - C:\Documents and Settings\Lise\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
~ Desktop Component: 4 Legitimates Filtered in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
[MD5.00000000000000000000000000000000] [APT] [CIS_{81EFDD93-DBBE-415B-BE6E-49B9664E3E82}] (...) -- C:\Documents and Settings\Lise\Application Data\cis58.exe (.not file.) [0]
O39 - APT: CIS_{81EFDD93-DBBE-415B-BE6E-49B9664E3E82} - (...) -- C:\WINDOWS\Tasks\CIS_{81EFDD93-DBBE-415B-BE6E-49B9664E3E82}.job [488]
O39 - APT: - (..) -- C:\WINDOWS\Tasks\Notification de fin de service de Microsoft Windows XP -mensuellement.job [214]
O39 - APT: - (..) -- C:\WINDOWS\Tasks\ReclaimerInstall_Lise.job [394]
~ Scheduled Task: 60 Legitimates Filtered in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: LPT System Updater Service - (.LPT.) [HKLM] -- {BC0BF363-63AB-4FF7-8EF1-AE0D7F711B24} =>Adware.IncrediBar
O42 - Logiciel: Shopping Helper Smartbar - (.ReSoft Ltd..) [HKLM] -- {B2A302E7-8FA4-4585-AB7F-12C4DEBC0D32} =>Hijacker.SmartBar
O42 - Logiciel: Shopping Helper Smartbar Engine - (.ReSoft Ltd..) [HKCU] -- {841927cb-017a-4340-a8e4-9bff5de6133d} =>Hijacker.SmartBar
~ Logic: 0 Legitimates Filtered in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\SmartbarBackup] =>Hijacker.SmartBar
[HKCU\Software\SmartbarLog] =>Hijacker.SmartBar
[HKCU\Software\Smartbar] =>Hijacker.SmartBar
[HKLM\Software\Dupuis]
~ Key Software: 137 Legitimates Filtered in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 31/08/2010 - 11:30:16 - [] ----D C:\Program Files\Dupuis
O43 - CFD: 06/05/2014 - 18:50:03 - [] ----D C:\Program Files\LPT =>Adware.Incredibar
O43 - CFD: 24/11/2012 - 15:20:21 - [] ----D C:\Program Files\Rurple NG-fr
O43 - CFD: 02/05/2011 - 12:04:32 - [] ----D C:\Documents and Settings\All Users\Application Data\20EA
O43 - CFD: 29/10/2013 - 17:25:12 - [] ----D C:\Documents and Settings\All Users\Application Data\APN
O43 - CFD: 06/05/2014 - 18:49:17 - [] ----D C:\Documents and Settings\Lise\Local Settings\Application Data\LPT =>Adware.Incredibar
O43 - CFD: 06/05/2014 - 18:49:12 - [] ----D C:\Documents and Settings\Lise\Local Settings\Application Data\Smartbar =>Hijacker.SmartBar
~ Program Folder: 165 Legitimates Filtered in 00mn 01s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.727D3354845677C05C6A2F5DB24C3322] - 06/05/2014 - 17:03:37 ---A- . (...) -- C:\WINDOWS\wiadebug.log [157]
O44 - LFC:[MD5.10502EA12702C1F8744C900BDFD200ED] - 06/05/2014 - 17:03:37 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50]
~ Files: 11 Legitimates Filtered in 00mn 27s



---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.0276A25446D86F751C1F68067F33E920] - 26/04/2014 - 11:39:19 ---A- - C:\WINDOWS\Prefetch\UTORRENT.EXE-0F90C82E.pf =>P2P.µTorrent
~ Prefetcher: 1 Legitimates Filtered in 00mn 00s



---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll
~ ShellExecuteHooks: Scanned in 00mn 00s



---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d
~ IFEO: Scanned in 00mn 00s



---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:23/07/2013 - 10:10:08 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswSnx.sys.sum [175]
O58 - SDL:23/07/2013 - 10:10:08 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswSP.sys.sum [175]
O58 - SDL:23/07/2013 - 10:10:08 ---A- . (...) -- C:\WINDOWS\system32\Drivers\aswVmm.sys.sum [175] =>.ALWIL Software
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\Drivers\cinemst2.sys [262528]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\system32\Drivers\hdaudbus.sys [144384]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\Drivers\ptilink.sys [17792]
O58 - SDL:10/08/2005 - 13:44:04 ---A- . (.Protection Technology - StarForce Protection Environment Driver.) -- C:\WINDOWS\system32\Drivers\sfdrv01.sys [50688]
O58 - SDL:16/05/2005 - 14:20:39 ---A- . (.Protection Technology - StarForce Protection Helper Driver.) -- C:\WINDOWS\system32\Drivers\sfhlp02.sys [6656]
O58 - SDL:10/08/2005 - 15:06:28 ---A- . (.Protection Technology - StarForce Protection Synchronization Driver.) -- C:\WINDOWS\system32\Drivers\sfsync02.sys [19968]
O58 - SDL:24/08/2005 - 14:55:48 ---A- . (.Protection Technology - StarForce Protection VFS Driver.) -- C:\WINDOWS\system32\Drivers\sfvfs02.sys [66560]
O58 - SDL:22/06/2007 - 17:19:10 ---A- . (.Pas de propriétaire - USBCAMD for Sonix UVC.) -- C:\WINDOWS\system32\Drivers\sncduvc.sys [28160]
O58 - SDL:22/06/2007 - 17:19:28 ---A- . (.Pas de propriétaire - UVC Camera Streaming Driver.) -- C:\WINDOWS\system32\Drivers\snp2uvc.sys [9602944]
O58 - SDL:30/10/2013 - 19:58:57 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\WINDOWS\system32\Drivers\ssmdrv.sys [28520]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\Drivers\vdmindvd.sys [58112]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9037]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\country.sys [27097]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\himem.sys [4912]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\key01.sys [42809]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\keyboard.sys [42537]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos.sys [27916]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos404.sys [29146]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos411.sys [29370]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos412.sys [29274]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntdos804.sys [29146]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio.sys [34000]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio404.sys [34560]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio411.sys [35648]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio412.sys [35424]
O58 - SDL:14/04/2008 - 13:00:00 ---A- . (...) -- C:\WINDOWS\system32\ntio804.sys [34560]
~ Drivers: 49 Legitimates Filtered in 00mn 00s



---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC: 06/05/2014 - 19:29:48 ---A- . (...) -- C:\Documents and Settings\Lise\Bureau\adwcleaner.exe [1316991]
~ 262 Fichiers temporaires (Temporary files)
~ 4 Fichiers cookies (Cookies files)
~ Files: 6 Legitimates Filtered in 00mn 07s



---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s



---\\ Liste les services legacy du registre (LALS) (O64)
O64 - Services: CurCS - 25/09/2007 - C:\Program Files\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe (FTRTSVC) .(.France Telecom SA - Pas de description.) - LEGACY_FTRTSVC
O64 - Services: CurCS - 23/04/2014 - C:\Program Files\LPT\srpts.exe (LPTSystemUpdater) .(.Pas de propriétaire - srpts.) - LEGACY_LPTSYSTEMUPDATER =>Adware.Incredibar
~ Legacy: 149 Legitimates Filtered in 00mn 00s



---\\ Associations Shell Spawning (O67)
O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)
~ FASS Keys: 10 Legitimates Filtered in 00mn 00s



---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: <chrome.exe> <>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: <Launcher.exe> <>[HKLM\..\Shell\open\Command] (...) -- C:\Program Files\Orange\Launcher\Launcher.exe" http://www.sweet-page.com =>PUP.SweetPage
~ Keys: Scanned in 00mn 00s



---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: prefs.js [Lise - 9rcuyvu5.default] user_pref("extensions.helperbar.DockingPositionDown", false); =>PUP.HelperBar
O69 - SBI: prefs.js [Lise - 9rcuyvu5.default] user_pref("extensions.helperbar.SmartbarDisabled", false); =>PUP.HelperBar
O69 - SBI: prefs.js [Lise - 9rcuyvu5.default] user_pref("extensions.helperbar.SmartbarStateMinimaized", false); =>PUP.HelperBar
O69 - SBI: prefs.js [Lise - 9rcuyvu5.default] user_pref("extensions.helperbar.Visibility", false); =>PUP.HelperBar
O69 - SBI: prefs.js [Lise - 9rcuyvu5.default] user_pref("extensions.helperbar.backPageCapacity", 3); =>PUP.HelperBar
O69 - SBI: prefs.js [Lise - 9rcuyvu5.default] user_pref("extensions.helperbar.backPageCounter", 0); =>PUP.HelperBar
O69 - SBI: prefs.js [Lise - 9rcuyvu5.default] user_pref("extensions.helperbar.backPageDay", 6); =>PUP.HelperBar
O69 - SBI: prefs.js [Lise - 9rcuyvu5.default] user_pref("extensions.helperbar.backPageLastEvent", "1399222855670"); =>PUP.HelperBar
O69 - SBI: prefs.js [Lise - 9rcuyvu5.default] user_pref("extensions.helperbar.backPageMinInterval", 15); =>PUP.HelperBar
O69 - SBI: prefs.js [Lise - 9rcuyvu5.default] user_pref("extensions.helperbar.barcodeid", "134622"); =>PUP.HelperBar
O69 - SBI: prefs.js [Lise - 9rcuyvu5.default] user_pref("extensions.helperbar.countryiso", "fr"); =>PUP.HelperBar
O69 - SBI: prefs.js [Lise - 9rcuyvu5.default] user_pref("extensions.helperbar.downloadprovider", "ry_7302_ch"); =>PUP.HelperBar
O69 - SBI: prefs.js [Lise - 9rcuyvu5.default] user_pref("extensions.helperbar.externalJsFiles", "{\"d\":\"[{\\\"ExcludeDomains\\\":[\\\"snap.do\\\",\\\"snapdo.com\\\",\\\"www.o[...] =>PUP.HelperBar
O69 - SBI: prefs.js [Lise - 9rcuyvu5.default] user_pref("extensions.helperbar.fromautoupdate", "false"); =>PUP.HelperBar
O69 - SBI: prefs.js [Lise - 9rcuyvu5.default] user_pref("extensions.helperbar.installationid", "f55b0934-6863-4ed0-9657-b264c2b1c44f"); =>PUP.HelperBar
O69 - SBI: prefs.js [Lise - 9rcuyvu5.default] user_pref("extensions.helperbar.installdate", "06/05/2014"); =>PUP.HelperBar
O69 - SBI: prefs.js [Lise - 9rcuyvu5.default] user_pref("extensions.helperbar.keepAliveLastevent", "1399395655"); =>PUP.HelperBar
O69 - SBI: prefs.js [Lise - 9rcuyvu5.default] user_pref("extensions.helperbar.lastExternalJsUpdate", "1399395684330"); =>PUP.HelperBar
O69 - SBI: prefs.js [Lise - 9rcuyvu5.default] user_pref("extensions.helperbar.publisher", "shoppinghelper"); =>PUP.HelperBar
O69 - SBI: SearchScopes [HKCU] {006ee092-9658-4fd6-bd8e-a21a348e59f5} [DefaultScope] - (Web Search) - http://feed.snapdo.com =>Hijacker.SmartBar
O69 - SBI: SearchScopes [HKUS\S-1-5-19] {006ee092-9658-4fd6-bd8e-a21a348e59f5} [DefaultScope] - (Web Search) - http://feed.snapdo.com =>Hijacker.SmartBar
O69 - SBI: SearchScopes [HKUS\S-1-5-20] {006ee092-9658-4fd6-bd8e-a21a348e59f5} [DefaultScope] - (Web Search) - http://feed.snapdo.com =>Hijacker.SmartBar
~ Keys: Scanned in 00mn 00s



---\\ Recherche particulière à la racine du système (SPRF) (O84)
[MD5.87948212C71A773AEF4C68029BFAE924] [SPRF][05/04/2014] (.Pas de propriétaire - wp_update scheduler.) -- C:\Documents and Settings\Lise\Application Data\~hxucbso.exe [493272] =>PUP.WpManager
[MD5.87948212C71A773AEF4C68029BFAE924] [SPRF][05/04/2014] (.Pas de propriétaire - wp_update scheduler.) -- C:\Documents and Settings\Lise\Application Data\~uousgnq.exe [493272] =>PUP.WpManager
[MD5.A53555B250CBEDCA6544D13648F83FFE] [SPRF][06/05/2014] (...) -- C:\Documents and Settings\Lise\Bureau\adwcleaner.exe [1316991]
[MD5.5763C1BBDB37D27FBE0CB13CAC39635F] [SPRF][30/07/2013] (...) -- C:\Documents and Settings\Lise\Bureau\RogueKiller-8.6.4.exe [916992]
~ Files: 6 Legitimates Filtered in 00mn 00s



---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
[MD5.F2B7CA8626C8E5F0348D86AAB9D682EF] [WIS][06/05/2014] (.ReSoft Ltd. - Shopping Helper Smartbar.) -- C:\Windows\Installer\2a22f2.msi [2023936] =>Hijacker.SmartBar
[MD5.42D7E5611094F0D1F72F41EA59A2224D] [WIS][06/05/2014] (.LPT - LPT System Updater Service.) -- C:\Windows\Installer\2a22f8.msi [444416] =>Adware.IncrediBar
~ WIS: 2 Legitimates Filtered in 00mn 06s



---\\ Recherche de clés de registre CLSID (O101)
[HKCR\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] (Shopping Helper SmartbarEngine) =>Hijacker.SmartBar
[HKCR\CLSID\{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59}] (ZoneAlarm Security Toolbar) =>Toolbar.ZoneAlarm
[HKCR\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}] (Shopping Helper Smartbar) =>Hijacker.SmartBar
~ BCK: 3919 Legitimates Filtered in 00mn 03s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 06/05/2014 257712 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Demand 14/04/2008 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - C:\WINDOWS\system32\dmadmin.exe
SS - | Auto 26/01/2011 136176 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 26/01/2011 136176 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 03/04/2005 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
SS - | Demand 22/04/2014 119408 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Auto 14/01/2009 226656 | (SeaPort) . (.Microsoft Corp..) - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
SS - | Auto 10/07/1658 0 | (ZAPrivacyService) . (...) - C:\Program Files\CheckPoint\ZoneAlarm\ZAPrivacyService.exe
SR - | Auto 13/03/2014 440400 | (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
SR - | Auto 13/03/2014 440400 | (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
SR - | Auto 13/03/2014 1017424 | (AntiVirWebService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.exe
SR - | Auto 25/09/2007 65536 | C:\Program Files\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe (FTRTSVC) . (.France Telecom SA.) - C:\Program Files\Fichiers communs\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
SR - | Auto 23/04/2014 37920 | (LPTSystemUpdater) . (...) - C:\Program Files\LPT\srpts.exe =>Adware.Incredibar
SR - | Auto 14/08/2013 39056 | (RealNetworks Downloader Resolver Service) . (...) - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
~ Services: Scanned in 00mn 04s



---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Run by Lise at 06/05/2014 19:31:03
device: opened successfully
user: MBR read successfully
Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll sfsync02.sys atapi.sys pciide.sys PCIIDEX.SYS
C:\WINDOWS\system32\drivers\sfsync02.sys Protection Technology StarForce Protection System
1 ntkrnlpa!IofCallDriver[0x804EF200] >> \Device\Harddisk0\DR0[0x89E22AB8]
kernel: MBR read successfully
user & kernel MBR OK
~ MBR: 14 Legitimates Filtered in 00mn 02s



---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by Lise at 06/05/2014 19:31:05
********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR: Scanned in 00mn 04s



---\\ Scan Additionnel (O88)
Database Version : 13045 - (05/05/2014)
Clés trouvées (Keys found) : 20
Valeurs trouvées (Values found) : 2
Dossiers trouvés (Folders found) : 3
Fichiers trouvés (Files found) : 11

[HKLM\SYSTEM\CurrentControlSet\Services\LPTSystemUpdater] =>Adware.Incredibar^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{BC0BF363-63AB-4FF7-8EF1-AE0D7F711B24}] =>Adware.IncrediBar^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{B2A302E7-8FA4-4585-AB7F-12C4DEBC0D32}] =>Hijacker.SmartBar^
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{841927cb-017a-4340-a8e4-9bff5de6133d}] =>Hijacker.SmartBar^
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}] =>Hijacker.SmartBar
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}] =>Hijacker.SmartBar
[HKLM\Software\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] =>Toolbar.Agent
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] =>Toolbar.Agent
[HKLM\Software\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}] =>Hijacker.SmartBar
[HKLM\Software\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}] =>Hijacker.SmartBar
[HKLM\Software\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}] =>Hijacker.SmartBar
[HKLM\Software\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}] =>Hijacker.SmartBar
[HKLM\Software\Classes\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113}] =>Adware.Agent
[HKLM\Software\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}] =>Hijacker.SmartBar
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59}] =>Toolbar.ZoneAlarm
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59}] =>Toolbar.ZoneAlarm
[HKLM\Software\Classes\CLSID\{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59}] =>Toolbar.ZoneAlarm
[HKCU\Software\SmartbarBackup] =>Hijacker.SmartBar
[HKCU\Software\SmartbarLog] =>Hijacker.SmartBar
[HKLM\Software\Google\Chrome\Extensions\caloheeledhajihipjihanmihhegodlc] =>PUP.AppBario
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} =>Toolbar.ZoneAlarm^
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:Browser Infrastructure Helper =>Hijacker.SmartBar^
C:\Program Files\LPT =>Adware.Incredibar^
C:\Documents and Settings\Lise\Local Settings\Application Data\LPT =>Adware.Incredibar^
C:\Documents and Settings\Lise\Local Settings\Application Data\Smartbar =>Hijacker.SmartBar^
C:\Documents and Settings\Lise\Local Settings\Application Data\Smartbar\Application\Smartbar.exe =>Hijacker.SmartBar^
C:\Program Files\LPT\srpts.exe =>Adware.Incredibar^
C:\Documents and Settings\Lise\Local Settings\Application Data\LPT\srptm.exe =>Adware.Incredibar^
[HKCU\Software\Smartbar] =>Hijacker.SmartBar^
C:\Documents and Settings\Lise\Application Data\~hxucbso.exe =>PUP.WpManager^
C:\Documents and Settings\Lise\Application Data\~uousgnq.exe =>PUP.WpManager^
C:\Windows\Installer\2a22f2.msi =>Hijacker.SmartBar^
C:\Windows\Installer\2a22f8.msi =>Adware.IncrediBar^
[HKCR\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] (Shopping Helper SmartbarEngine) =>Hijacker.SmartBar^
[HKCR\CLSID\{438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59}] (ZoneAlarm Security Toolbar) =>Toolbar.ZoneAlarm^
[HKCR\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}] (Shopping Helper Smartbar) =>Hijacker.SmartBar^
~ Additionnel Scan: 204372 Items scanned in 00mn 11s



---\\ Récapitulatif des détections trouvées sur votre station
http://nicolascoolman.byethost7.com/wordpress/hijacker-smartbar/ =>Hijacker.SmartBar
http://nicolascoolman.byethost7.com/wordpress/adware-incredibar/ =>Adware.Incredibar
http://nicolascoolman.webs.com/apps/blog/show/26632288-parasite-pugi =>Parasite.Pugi
http://nicolascoolman.webs.com/apps/blog/show/40584589-pup-sweetpage =>PUP.SweetPage
http://nicolascoolman.byethost7.com/wordpress/pup-wpmanager/ =>PUP.WpManager
http://nicolascoolman.webs.com/apps/blog/show/31042964-pup-appbario =>PUP.AppBario
~ MSI: 6 link(s) detected in 00mn 00s



~ 831 Legitimates filtered by white list
End of the scan (588 lines in 02mn 19s)(0)

Alors comment je peux faire svp?

Ton ordianteur fonctionne toujours pas
moi je te conseil de le restaurer car je pense que sois c ta carte sois un virus

Merci pour vote réponse. Comment faut-il faire pour restaurer l'ordinateur svp ?