Je n arrive plus a faire de restauration

Résolu
marquise de bourgogne 21 Messages postés 307 Statut Membre -  
bazfile Messages postés 60850 Statut Modérateur, Contributeur sécurité -
bonsoir
je n arrive plus a faire de restauration a une dates antérieur -
et je n arrive plus a faire mes ( téléchargement de jeux( comme par exemple == royal envoy 2=
est ce que quelqu un s il vous plait peut m aidez
merci = bonne soiree
A voir également:

6 réponses

bazfile Messages postés 60850 Statut Modérateur, Contributeur sécurité 19 827
 
Bonsoir,
Télécharge, installe et ouvre ZHPdiag lance l'analyse en cliquant sur Configurer puis sur la loupe sans + ni-, une fois l'analyse terminée tu auras un rapport ZHPDiag.txt sur le bureau tu le postes sur https://www.cjoint.com/ dont voici un tutoriel : https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers puis met le lien généré par Cjoint dans ta réponse.
0
marquise de bourgogne 21 Messages postés 307 Statut Membre 19
 
bonjour
merci bazfile= mais malheureusement je ne peut pas télécharge zhpdia-il m est ecrit qu il contient a virus dangereux !!!et il refuse de démarrer = merci de me donne une autre indication -bonne fin de journée
0
bazfile Messages postés 60850 Statut Modérateur, Contributeur sécurité 19 827
 
Bonjour,
ZHPdiag n'est pas dangereux il sert à détecter les infections, ton antivirus bloque son exécution désactive ton antivirus le temps de télécharger ZHPdiag et de faire l'analyse, ensuite tu pourras réactiver ton antivirus.
0
marquise de bourgogne21
 
voila j ai désactiver mon anti virus = j ai télécharger ( zhpdiag mais je n arrive pas a faire le ( diagnostic demander !je ne sais pas ou je doit allez et comment faire
merci de votre aide
0
marquisede bourgogne 21
 
il m est ecrit de - saisir un rapport avant de lancer une analyse
0
bazfile Messages postés 60850 Statut Modérateur, Contributeur sécurité 19 827
 
Tu as lancé Zeb Help Process, je ne t'ai jamais demandé de télécharger ce logiciel, c'est ZHPdiag dont tu as besoin, je te donne à nouveau son lien : ftp://91.121.188.131/ZHPDiag2.exe une fois installé l'icône de ZHPdiag sera sur le bureau elle est en forme de parchemin.

Je te rappelle aussi la procédure :
Télécharge, installe et ouvre ZHPdiag lance l'analyse en cliquant sur Configurer puis sur la loupe sans + ni-, une fois l'analyse terminée tu auras un rapport ZHPDiag.txt sur le bureau tu le postes sur https://www.cjoint.com/ dont voici un tutoriel : https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers puis met le lien généré par Cjoint dans ta réponse.
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
marquise de bourgogne21
 
bonsoir bazfile -merci j ai réussi ( du moins je l espère -et j ai envoyer le rapport
que doit je faire maintenant !!!!! bonne soirée
merci encore votre aide est précieux car je suis une novice en informatique -mais j aime çà !!
0
bazfile Messages postés 60850 Statut Modérateur, Contributeur sécurité 19 827
 
Tu n'as pas mis le lien généré par Cjoint dans ton message.
Quand tu mets le rapport sur Cjoint un lien est généré et apparaît à l'écran c'est ce lien que tu dois me donner, je t'ai mis un mode d'emploi pour Cjoint dans la procédure, je te le met à nouveau :
https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers
0
marquise de bourgogne21
 
~ Rapport de ZHPDiag v2014.5.22.71 - Nicolas Coolman (22/05/2014)
~ Lancé par ELIZE (22/05/2014 20:13:09)
~ Adresse du Site Web http://nicolascoolman.fr
~ Traduit par Nicolas Coolman
~ Etat de la version :
~ Liste blanche : Désactivée par l'utilisateur
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Deactivate by program


---\\ Navigateurs Internet
MSIE: Internet Explorer v11.0.9600.17107
GCIE: Google Chrome v35.0.1916.114 (Defaut)

---\\ Informations sur les produits Windows
~ Langage: Français
Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
Windows ID Activation : OK
~ Windows Partial Key : RXK78
Windows License : OK
~ Windows Remaining Initializations Number : 4
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ Logiciels de protection du système
avast! Free Antivirus v9.0.2018
Windows Defender W7

---\\ Logiciels d'optimisation du système
CCleaner v4.13

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels
Adobe Flash Player 13 Plugin
Adobe Reader XI

---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3982 MB (67% free)
System Restore: Activé (Enable)
System drive C: has 178 GB (72%) free of 244 GB

---\\ Mode de connexion au système
~ Computer Name: BUREAU
~ User Name: ELIZE
~ All Users Names: ELIZE, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\ELIZE\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\ELIZE\AppData\Roaming\
~ %Desktop% : C:\Users\ELIZE\Desktop\
~ %Favorites% : C:\Users\ELIZE\Favorites\
~ %LocalAppData% : C:\Users\ELIZE\AppData\Local\
~ %StartMenu% : C:\Users\ELIZE\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 178 Go of 244 Go)
D: Hard drive, Flash drive, Thumb drive (Free 15 Go of 195 Go)
E: CD-ROM drive (Not Inserted)
G: Floppy drive, Flash card reader, USB Key (Not Inserted)



---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Security Center: 41 Scanned in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.F220BA78AB542C70211D73AE4729B2CD] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.06/03/2014 - 07:22:40.) -- C:\Windows\System32\wininet.dll [2260480]
[MD5.88AB9B72B4BF3963A0DE0820B4B0B06C] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.04/03/2014 - 10:43:50.) -- C:\Windows\System32\Winlogon.exe [455168]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.79059559E89D06E8B80CE2944BE20228] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/09/2013 - 02:09:10.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24/01/2014 - 03:37:55.) -- C:\Windows\system32\Drivers\ntfs.sys [1684928]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes: Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/315
~ Mes musiques (My Musics) : 1/290
~ Mes Videos (My Videos) : 1/38
~ Mes Favoris (My Favorites) : 1/102
~ Mes Documents (My Documents) : 1/626
~ Mon Bureau (My Desktop) : 1/12
~ Menu demarrer (Programs) : 1/52
~ Hidden Files: Scanned in 00mn 00s



---\\ Processus lancés
[MD5.43D083268A0919F3527A2837390BAF63] - (.Macrovision Corporation - Macrovision Software Manager.) -- C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [218032] [PID.2164]
[MD5.3E364978E4C74D3BCEA29FB41743CB5A] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [3873704] [PID.3716]
[MD5.5A4BD60A6B97B276F7D90F3A36876F2C] - (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_FAMTACE.exe [110592] [PID.5056]
[MD5.D8BF03D80C91A0A09F7A71B50E523328] - (.SEIKO EPSON CORP. - Epson Preview EXE.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_FPREACE.exe [145408] [PID.4960]
[MD5.A131FF6AF7E2B2492566FB57683CE6CB] - (.Nicolas Coolman - ZHPFix.) -- C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPFix.exe [3054592] [PID.4324]
[MD5.9827006052EDEBA43D3BA0B34523AD62] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [7876608] [PID.4916]
[MD5.37D17AE2936867F88EB3C4CBCBC6B8A1] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344] [PID.1264]
[MD5.B362181ED3771DC03B4141927C80F801] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65432] [PID.2040]
[MD5.C9DCE1CB628AEED3C0C30ABBF4F1E718] - (...) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280] [PID.2180]
[MD5.3628933AF5305EAB8173949BFF912F04] - (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560] [PID.2204]
[MD5.27FE4B70C12A2C67A58D799B9A4E8D81] - (.Nero AG - Nero BackItUp.) -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [935208] [PID.2244]
[MD5.E87213F37A13E2B54391E40934F071D0] - (.Microsoft Corporation - .NET Runtime Optimization Service.) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [105144] [PID.3560]
[MD5.BF22ACF4CF3734D61357E67F0521BC03] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [277784] [PID.228]
[MD5.B097EBA0E3FEB020BB65FE43AF5ECCFF] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [363800] [PID.724]
~ Processes Running: Scanned in 00mn 00s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\ELIZE\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] http://speedial.com =>Adware.Adware.SearchYa
G0 - GCSP: Preference [User Data\Default][HomePage] http://speedial.com =>Adware.Adware.SearchYa

---\\ Liste des dossiers d'extension Google Chrome
~ Google Lines Browser: 2 Scanned in 01mn 39s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.30214.0.) -- c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll
~ Firefox Browser: 2 Scanned in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.fr
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://speedial.com =>Adware.Adware.SearchYa
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.msn.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = http://www.google.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.9600.17041 (winblue_gdr.140305-1710)) -- C:\Windows\SysWOW64\ieframe.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0
~ IE Browser: 17 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Outil d'Amélioration d'Internet Explorer [64Bits] - {7D5E43F1-ED9C-4F03-9B55-2AFB6EA21DB4} . (.Microsoft Corporation - Pas de description.) -- C:\Users\ELIZE\AppData\Roaming\Microsoft\Outil d'Amélioration d'Internet Explorer\iemp32.dll
O2 - BHO: avast! Online Security [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion au compte Microsoft [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google
O2 - BHO: webget [64Bits] - {dc264a72-fa75-4948-b881-ea8eff8e5dd2} Clé orpheline =>PUP.WebGet
O2 - BHO: Adblock Plus for IE Browser Helper Object [64Bits] - {FFCB3198-32F3-4E8B-9539-4324694ED664} . (.Adblock Plus - Adblock Plus Module.) -- C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll
~ BHO: 20 Scanned in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: (no name) - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline
O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll =>Toolbar.Google
O3 - Toolbar: (no name) - [HKLM]{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline
~ Toolbar: Scanned in 00mn 00s



---\\ Applications lancées au démarrage du système (O4)
O4 - HKLM\..\Run: [BeatsOSDApp] . (.Hewlett-Packard - HP Beats.) -- C:\Program Files\IDT\WDM\beats64.exe
O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIACE.exe =>.Epson Seiko Corporation
O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series 2] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIACE.exe =>.Epson Seiko Corporation
O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series (Copie 1)] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIACE.exe =>.Epson Seiko Corporation
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SysTrayApp] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray64.exe
O4 - HKCU\..\Run: [Driver Restore] . (.PC Drivers Headquarters - Driver Restore.) -- C:\Program Files (x86)\Driver Restore\Driver Restore\DriverRestore.exe
O4 - HKCU\..\Run: [ISUSPM] . (.Macrovision Corporation - Macrovision Software Manager.) -- C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] . (.Microsoft Corporation - SP Reviewer.) -- C:\Windows\System32\SPReview\SPReview.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] . (.Microsoft Corporation - SP Reviewer.) -- C:\Windows\System32\SPReview\SPReview.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-144505071-1348823524-3867202720-1001\..\Run: [Driver Restore] . (.PC Drivers Headquarters - Driver Restore.) -- C:\Program Files (x86)\Driver Restore\Driver Restore\DriverRestore.exe
O4 - HKUS\S-1-5-21-144505071-1348823524-3867202720-1001\..\Run: [ISUSPM] . (.Macrovision Corporation - Macrovision Software Manager.) -- C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe
~ Application: Scanned in 00mn 00s



---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =>.Microsoft Corporation
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation
~ Winsock: 8 Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{58107C63-90F0-4C54-8449-B603BAE8BF47}: DhcpNameServer = 192.168.0.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{58107C63-90F0-4C54-8449-B603BAE8BF47}: DhcpNameServer = 192.168.0.254
O17 - HKLM\System\CS2\Services\Tcpip\..\{58107C63-90F0-4C54-8449-B603BAE8BF47}: DhcpNameServer = 192.168.0.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.254
~ Domain: Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc
O23 - Service: Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service (Intel(R) ME Service) . (...) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Nero BackItUp Scheduler 4.0 (Nero BackItUp Scheduler 4.0) . (.Nero AG - Nero BackItUp.) - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: C:\Windows\System32\stlang64.dll (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
~ Services: 10 Scanned in 00mn 03s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s



---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
[MD5.09E7C37DF4A911C8A9AA8BF88ACD10AA] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [257712]
[MD5.9E76CDD50C3DDDB739150D778EEC0B93] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [804304]
[MD5.03E07421C99D99D2DB8F4E5CCB890B23] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [4524312]
[MD5.6429D2F9ABE84CE1A54E99ABAC439923] [APT] [Driver Restore-RTMRules] (.PC Drivers Headquarters.) -- C:\Program Files (x86)\Driver Restore\Driver Restore\DriverRestore.exe [3988856]
[MD5.6429D2F9ABE84CE1A54E99ABAC439923] [APT] [Driver Restore-RTMScan] (.PC Drivers Headquarters.) -- C:\Program Files (x86)\Driver Restore\Driver Restore\DriverRestore.exe [3988856]
[MD5.6429D2F9ABE84CE1A54E99ABAC439923] [APT] [Driver Restore-RTMScanRunOnce] (.PC Drivers Headquarters.) -- C:\Program Files (x86)\Driver Restore\Driver Restore\DriverRestore.exe [3988856]
[MD5.6429D2F9ABE84CE1A54E99ABAC439923] [APT] [Driver Restore-RTMUpdater] (.PC Drivers Headquarters.) -- C:\Program Files (x86)\Driver Restore\Driver Restore\DriverRestore.exe [3988856]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.00000000000000000000000000000000] [APT] [{111B8A8A-4A33-4F82-B280-0428549966E5}] (...) -- c:\users\ELIZE\appdata\local\lollipop\lollipop.bat (.not file.) [0] =>Adware.Lollipop
[MD5.00000000000000000000000000000000] [APT] [{28FF3EBA-23AC-4F27-ACEE-CD62AF21A30A}] (...) -- F:\Nero 9\setupx.exe (.not file.) [0]
[MD5.C155A13687144076286989EF078112C2] [APT] [{30DD89BD-45E3-4414-B21D-1AFA316B22E3}] (.Nicolas Coolman.) -- C:\Program Files (x86)\ZHPDiag\ZHPhep.exe [1917440]
[MD5.8A9FDCE51FFFD9CF9E8DA77081C5DC7E] [APT] [{3AEB7B89-9B00-4996-A87E-871D5299B167}] (...) -- C:\Users\ELIZE\Downloads\epson375871eu.exe [7122432]
[MD5.00000000000000000000000000000000] [APT] [{B127A105-3114-4EA3-A628-B53B85A7EBF1}] (...) -- E:\Setupx.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{DBAFE704-CE6A-42CB-BD37-2B3877114E99}] (...) -- E:\setup\Setup.exe (.not file.) [0]
[MD5.1620FE36666F4BBC2314B7F360FB1965] [APT] [{F85113DB-4E74-4E7F-A747-EC786E241FF2}] (.Google Inc..) -- c:\program files (x86)\google\chrome\application\chrome.exe [860488]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
O39 - APT: Driver Restore-RTMRules - (.PC Drivers Headquarters.) -- C:\Windows\Tasks\Driver Restore-RTMRules.job [480]
O39 - APT: Driver Restore-RTMRules - (.PC Drivers Headquarters.) -- C:\Windows\System32\Tasks\Driver Restore-RTMRules [480]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1062]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1062]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1066]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1066]
~ Scheduled Task: 44 Scanned in 00mn 01s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Internet Explorer [64Bits] - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe =>.Microsoft Corporation
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Active Setup: 10 Scanned in 00mn 00s



---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\drivers\aswRdr2.sys
O41 - Driver: (aswSnx) . (.AVAST Software - avast! Virtualization Driver.) - C:\Windows\system32\drivers\aswSnx.sys
O41 - Driver: (aswSP) . (.AVAST Software - avast! self protection module.) - C:\Windows\system32\drivers\aswSP.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Drivers: 66 Scanned in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: 15355 Webcam Live - (...) [HKLM][64Bits] -- {29559A9D-D97B-4C43-806D-6D61D6BFEB16}
O42 - Logiciel: 7-Zip 9.20 - (.Igor Pavlov.) [HKLM][64Bits] -- {23170F69-40C1-2701-0920-000001000000}
O42 - Logiciel: Adblock Plus for IE (32-bit and 64-bit) - (.Eyeo GmbH.) [HKLM][64Bits] -- {C23EE7CE-C1A3-4F94-A8F0-9E0AC9C6DE6E}
O42 - Logiciel: Adblock Plus for IE - (...) [HKLM][64Bits] -- {fd97d1e2-368a-4cd9-af63-8eeff938044a}
O42 - Logiciel: Adobe Flash Player 13 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 13 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader XI (11.0.06) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
O42 - Logiciel: Adventure Bingo 2 1.0 - (.Falco Software, Inc..) [HKLM][64Bits] -- Adventure Bingo 2_is1
O42 - Logiciel: Ask Toolbar - (.Ask.com.) [HKLM][64Bits] -- AskTBar Uninstall =>Toolbar.Ask
O42 - Logiciel: Atlantis Quest - (...) [HKLM][64Bits] -- BFG-Atlantis Quest
O42 - Logiciel: Big Fish: Game Manager - (...) [HKLM][64Bits] -- BFGC
O42 - Logiciel: BrowseSmart - (.BrowseSmart.) [HKLM][64Bits] -- BrowseSmart =>PUP.BrowseSmart
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner
O42 - Logiciel: Cartes - (...) [HKLM][64Bits] -- {525DE7A9-5A0E-4ED8-85F9-FC67F0B377CC}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: EPSON Logiciel imprimante - (...) [HKLM][64Bits] -- EPSON Printer and Utilities
O42 - Logiciel: EPSON Scan - (...) [HKLM][64Bits] -- EPSON Scanner
O42 - Logiciel: FlvPlayer - (...) [HKLM][64Bits] -- FlvPlayer
O42 - Logiciel: Galerie de photos - (.Microsoft Corporation.) [HKLM][64Bits] -- {439B34FF-F74E-4807-B5E2-4B758551DA6B}
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {18455581-E099-4BA8-BC6B-F34B2F06600C} =>Toolbar.Google
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} =>Toolbar.Google
O42 - Logiciel: Google Update Helper - (.BonanzaDeals.) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} =>Adware.BonanzaDeals
O42 - Logiciel: IDT Audio - (.IDT.) [HKLM][64Bits] -- {E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}
O42 - Logiciel: IncrediMail - (.IncrediMail.) [HKLM][64Bits] -- {2CF22C94-1369-4C04-9A5F-A4BC6D91B508}
O42 - Logiciel: IncrediMail 2.0 - (.IncrediMail Ltd..) [HKLM][64Bits] -- IncrediMail
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Intel(R) OpenCL CPU Runtime - (.Intel Corporation.) [HKLM][64Bits] -- {FCB3772C-B7D0-4933-B1A9-3707EBACC573}
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}
O42 - Logiciel: Intel® Trusted Connect Service Client - (.Intel Corporation.) [HKLM][64Bits] -- {6199B534-A1B6-46ED-873B-97B0ECF8F81E}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {0BE9E708-5DC0-4963-9CFD-0AA519090E79}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSVCRT110 - (.Microsoft.) [HKLM][64Bits] -- {8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}
O42 - Logiciel: MSVCRT110_amd64 - (.Microsoft.) [HKLM][64Bits] -- {E9FA781F-3E80-4399-825A-AD3E11C28C77}
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP3 Parser (KB2758694) - (.Microsoft Corporation.) [HKLM][64Bits] -- {1D95BA90-F4F8-47EC-A882-441C99D30C1E}
O42 - Logiciel: MSXML 4.0 SP3 Parser - (.Microsoft Corporation.) [HKLM][64Bits] -- {196467F1-C11F-4F76-858B-5812ADC83B94}
O42 - Logiciel: Microsoft OneDrive - (.Microsoft Corporation.) [HKCU][64Bits] -- OneDriveSetup.exe
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Nero 9 - (.Nero AG.) [HKLM][64Bits] -- {c084905f-19eb-4e8c-af96-687bd2038dc0}
O42 - Logiciel: OpenOffice 4.0.1 - (.Apache Software Foundation.) [HKLM][64Bits] -- {8D5D54B8-3D29-4AB4-8DA8-1868DAF941D8}
O42 - Logiciel: Photo Notifier and Animation Creator - (.IncrediMail Ltd..) [HKLM][64Bits] -- Photo Notifier and Animation Creator
O42 - Logiciel: Photo Notifier and Animation Creator - (.Nom de votre société.) [HKLM][64Bits] -- {6B7F28D4-160E-40C6-B7C8-5EC6B9734DA7}
O42 - Logiciel: Rami - (...) [HKLM][64Bits] -- {4E5A0181-149F-4118-B28D-15862A4FDBE3}
O42 - Logiciel: Royal Envoy - (...) [HKLM][64Bits] -- BFG-Royal Envoy
O42 - Logiciel: Speedial - (.Speedial.) [HKLM][64Bits] -- Speedial =>Adware.Adware.SearchYa
O42 - Logiciel: Strike Ball 3 - (...) [HKLM][64Bits] -- BFG-Strike Ball 3
O42 - Logiciel: TI USB 3.0 Host Controller Driver - (.Texas Instruments Inc..) [HKLM][64Bits] -- InstallShield_{AA8B3F71-1481-404D-9DEE-C8862A85C63A}
O42 - Logiciel: TI USB3 Host Driver - (.Texas Instruments Inc..) [HKLM][64Bits] -- {AA8B3F71-1481-404D-9DEE-C8862A85C63A}
O42 - Logiciel: VLC media player 2.1.1 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN
O42 - Logiciel: avast! Free Antivirus v9.0.2018 - (.Avast Software.) [HKLM][64Bits] -- Avast
O42 - Logiciel: neroxml - (.Nero AG.) [HKLM][64Bits] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}
~ Logic: 48 Scanned in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\7-Zip]
[HKCU\Software\AVAST Software]
[HKCU\Software\AdblockPlus]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow]
[HKCU\Software\Big Fish Games]
[HKCU\Software\BrowseSmart] =>PUP.BrowseSmart
[HKCU\Software\CDDB]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CyberLink]
[HKCU\Software\Dropbox]
[HKCU\Software\EPSON]
[HKCU\Software\Google]
[HKCU\Software\HTS-BELOTE]
[HKCU\Software\HookNetwork]
[HKCU\Software\IM Providers]
[HKCU\Software\IncrediMail]
[HKCU\Software\InstallShield]
[HKCU\Software\Intel]
[HKCU\Software\Licenses]
[HKCU\Software\Macromedia]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\OpenOffice]
[HKCU\Software\PiloteAuto]
[HKCU\Software\Piriform]
[HKCU\Software\Playrix Entertainment]
[HKCU\Software\Policies]
[HKCU\Software\Sonic]
[HKCU\Software\TeamViewer]
[HKCU\Software\TeleCharger]
[HKCU\Software\Trolltech]
[HKCU\Software\TuneUp]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\kde.org]
[HKCU\Software\speedial] =>Adware.Adware.SearchYa
[HKLM\Software\ATI Technologies]
[HKLM\Software\Adblock Plus for IE]
[HKLM\Software\Audible]
[HKLM\Software\BrowserChoice]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\EPSON]
[HKLM\Software\Google]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\IDT]
[HKLM\Software\Intel]
[HKLM\Software\Khronos]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SONIX]
[HKLM\Software\SonicFocus]
[HKLM\Software\Sonic]
[HKLM\Software\TuneUp]
[HKLM\Software\Wow6432Node\15355 Webcam Live]
[HKLM\Software\Wow6432Node\7-Zip]
[HKLM\Software\Wow6432Node\AGEIA Technologies]
[HKLM\Software\Wow6432Node\AVAST Software]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\AdwCleaner]
[HKLM\Software\Wow6432Node\Ahead]
[HKLM\Software\Wow6432Node\Audible]
[HKLM\Software\Wow6432Node\Big Fish Games]
[HKLM\Software\Wow6432Node\BrowseSmart] =>PUP.BrowseSmart
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\EPSON]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\Hewlett-Packard]
[HKLM\Software\Wow6432Node\IDT]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\Khronos]
[HKLM\Software\Wow6432Node\Licenses]
[HKLM\Software\Wow6432Node\LogMeIn Rescue]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\Micro Application]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\Nero]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\OpenOffice]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\Skype]
[HKLM\Software\Wow6432Node\SweetIM] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\TQ566808]
[HKLM\Software\Wow6432Node\TuneUp]
[HKLM\Software\Wow6432Node\VideoLAN]
[HKLM\Software\Wow6432Node\webget] =>PUP.WebGet
[HKLM\Software\Wow6432Node]
[HKLM\Software\jumpshot.com]
~ Key Software: 207 Scanned in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 25/11/2013 - 19:28:22 - [] ----D C:\Program Files (x86)\15355 Webcam Live
O43 - CFD: 02/04/2014 - 11:08:46 - [] ----D C:\Program Files (x86)\7-Zip
O43 - CFD: 25/11/2013 - 20:03:48 - [] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 22/02/2014 - 11:03:56 - [] ----D C:\Program Files (x86)\Adventure Bingo 2
O43 - CFD: 14/11/2013 - 10:40:52 - [0] ----D C:\Program Files (x86)\Amazon
O43 - CFD: 02/04/2014 - 11:09:34 - [] ----D C:\Program Files (x86)\Atlantis Quest
O43 - CFD: 22/05/2014 - 19:19:43 - [] ----D C:\Program Files (x86)\bfgclient
O43 - CFD: 07/02/2014 - 17:06:14 - [] ----D C:\Program Files (x86)\Big City Adventure - Tokyo
O43 - CFD: 20/05/2014 - 18:08:40 - [] ----D C:\Program Files (x86)\BoontyGames
O43 - CFD: 22/05/2014 - 19:00:47 - [] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 23/11/2013 - 16:58:37 - [] ----D C:\Program Files (x86)\Driver Restore
O43 - CFD: 30/10/2013 - 19:43:15 - [] ----D C:\Program Files (x86)\epson
O43 - CFD: 07/11/2013 - 15:34:52 - [] ----D C:\Program Files (x86)\FLV Media Player
O43 - CFD: 26/11/2013 - 10:00:39 - [] ----D C:\Program Files (x86)\FlvPlayer
O43 - CFD: 02/04/2014 - 11:01:22 - [] ----D C:\Program Files (x86)\Google
O43 - CFD: 22/05/2014 - 19:19:43 - [] ----D C:\Program Files (x86)\GUM5CA0.tmp
O43 - CFD: 31/10/2013 - 12:07:03 - [] ----D C:\Program Files (x86)\GUM704F.tmp
O43 - CFD: 20/02/2014 - 12:09:29 - [] ----D C:\Program Files (x86)\IncrediMail
O43 - CFD: 02/04/2014 - 11:08:48 - [] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 18/11/2013 - 15:19:12 - [] ----D C:\Program Files (x86)\Intel
O43 - CFD: 22/05/2014 - 19:19:42 - [] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 31/03/2014 - 19:33:07 - [] ----D C:\Program Files (x86)\Legends of Solitaire - Les Cartes Perdues
O43 - CFD: 07/02/2014 - 17:04:37 - [] ----D C:\Program Files (x86)\Micro Application
O43 - CFD: 22/05/2014 - 19:19:42 - [] ----D C:\Program Files (x86)\Microsoft OneDrive
O43 - CFD: 02/04/2014 - 11:07:02 - [] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 22/05/2014 - 19:01:09 - [] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 02/11/2013 - 10:17:31 - [] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 14/07/2009 - 07:32:38 - [] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 14/01/2014 - 14:54:18 - [] ----D C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 04/11/2013 - 09:43:52 - [] ----D C:\Program Files (x86)\Music Remote
O43 - CFD: 16/01/2014 - 20:33:21 - [] ----D C:\Program Files (x86)\Nero
O43 - CFD: 12/01/2014 - 14:06:11 - [] ----D C:\Program Files (x86)\Net_Rummy
O43 - CFD: 07/01/2014 - 12:46:51 - [] ----D C:\Program Files (x86)\Norton AntiVirus
O43 - CFD: 21/05/2014 - 07:59:24 - [] ----D C:\Program Files (x86)\Norton Security Scan
O43 - CFD: 21/05/2014 - 08:00:44 - [] ----D C:\Program Files (x86)\NortonInstaller
O43 - CFD: 20/05/2014 - 17:07:45 - [] ----D C:\Program Files (x86)\Oberon Media SIDR
O43 - CFD: 22/05/2014 - 19:19:42 - [] ----D C:\Program Files (x86)\Okiitan
O43 - CFD: 18/11/2013 - 15:19:37 - [] ----D C:\Program Files (x86)\OpenOffice 4
O43 - CFD: 12/12/2013 - 17:37:38 - [] ----D C:\Program Files (x86)\PC Drivers HeadQuarters
O43 - CFD: 18/11/2013 - 15:25:20 - [] ----D C:\Program Files (x86)\Photo Notifier and Animation Creator
O43 - CFD: 21/05/2014 - 07:57:54 - [] ----D C:\Program Files (x86)\Playrix Entertainment
O43 - CFD: 14/07/2009 - 07:32:38 - [] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 02/04/2014 - 11:32:58 - [] ----D C:\Program Files (x86)\Royal Envoy
O43 - CFD: 15/01/2014 - 12:42:46 - [] ----D C:\Program Files (x86)\Strike Ball 3
O43 - CFD: 02/04/2014 - 11:08:59 - [] ----D C:\Program Files (x86)\Texas Instruments Inc
O43 - CFD: 31/03/2014 - 19:33:07 - [] ----D C:\Program Files (x86)\The Agency of Anomalies - Invasion de l Esprit Edition Collector
O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 08/12/2013 - 16:28:29 - [] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 03/11/2013 - 16:15:25 - [] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 22/05/2014 - 19:19:42 - [] ----D C:\Program Files (x86)\Windows Live
O43 - CFD: 02/11/2013 - 18:33:01 - [] ----D C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
O43 - CFD: 14/01/2014 - 12:19:29 - [] ----D C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - 07:32:38 - [] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 02/11/2013 - 18:33:01 - [] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 02/11/2013 - 18:33:01 - [] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 02/11/2013 - 18:33:01 - [] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 12/01/2014 - 14:59:59 - [] ----D C:\Program Files (x86)\Wiz Solitaire
O43 - CFD: 22/05/2014 - 19:06:11 - [] ----D C:\Program Files (x86)\ZebHelpProcess
O43 - CFD: 22/05/2014 - 20:07:56 - [] ----D C:\Program Files (x86)\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 25/11/2013 - 20:03:55 - [] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 22/05/2014 - 16:38:34 - [] ----D C:\Program Files (x86)\Common Files\Borland Shared
O43 - CFD: 07/02/2014 - 17:04:20 - [] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 02/04/2014 - 11:06:48 - [] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 16/01/2014 - 20:37:15 - [] ----D C:\Program Files (x86)\Common Files\Nero
O43 - CFD: 21/05/2014 - 11:07:52 - [] ----D C:\Program Files (x86)\Common Files\Oberon Media
O43 - CFD: 28/10/2013 - 21:46:23 - [] ----D C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 14/07/2009 - 05:20:08 - [] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 14/07/2009 - 05:20:08 - [] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 04/01/2014 - 10:53:21 - [] ----D C:\Program Files (x86)\Common Files\Symantec Shared
O43 - CFD: 02/11/2013 - 18:33:00 - [] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 02/04/2014 - 11:08:46 - [] ----D C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 18/01/2014 - 18:49:45 - [] ----D C:\ProgramData\Adobe
O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Application Data
O43 - CFD: 30/10/2013 - 20:29:29 - [] ----D C:\ProgramData\AVAST Software
O43 - CFD: 22/05/2014 - 19:01:51 - [] ----D C:\ProgramData\Big Fish
O43 - CFD: 28/10/2013 - 21:11:12 - [] -SH-D C:\ProgramData\Bureau
O43 - CFD: 14/01/2014 - 15:25:35 - [] --H-D C:\ProgramData\Common Files
O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Documents
O43 - CFD: 23/11/2013 - 16:59:07 - [] ----D C:\ProgramData\Driver Restore
O43 - CFD: 30/10/2013 - 19:42:46 - [] ----D C:\ProgramData\EPSON
O43 - CFD: 28/10/2013 - 21:11:12 - [] -SH-D C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Favorites
O43 - CFD: 07/02/2014 - 09:04:08 - [] ----D C:\ProgramData\Google
O43 - CFD: 01/11/2013 - 09:48:05 - [] ----D C:\ProgramData\IM
O43 - CFD: 07/02/2014 - 17:05:03 - [] ----D C:\ProgramData\IncrediMail
O43 - CFD: 14/01/2014 - 12:19:10 - [] ----D C:\ProgramData\InstallShield
O43 - CFD: 28/10/2013 - 21:46:48 - [] ----D C:\ProgramData\Intel
O43 - CFD: 07/02/2014 - 17:05:04 - [] ----D C:\ProgramData\JollyBear
O43 - CFD: 21/11/2013 - 09:56:44 - [] ----D C:\ProgramData\McAfee
O43 - CFD: 21/05/2014 - 12:18:37 - [] ----D C:\ProgramData\McAfee Security Scan
O43 - CFD: 28/10/2013 - 21:11:12 - [] -SH-D C:\ProgramData\Menu Démarrer
O43 - CFD: 22/05/2014 - 19:01:58 - [] -S--D C:\ProgramData\Microsoft
O43 - CFD: 11/05/2014 - 13:44:48 - [] ----D C:\ProgramData\Microsoft OneDrive
O43 - CFD: 28/10/2013 - 21:11:12 - [] -SH-D C:\ProgramData\Modèles
O43 - CFD: 12/11/2013 - 19:33:15 - [] ----D C:\ProgramData\Mozilla
O43 - CFD: 16/01/2014 - 20:30:55 - [] ----D C:\ProgramData\Nero
O43 - CFD: 21/05/2014 - 07:59:24 - [] ----D C:\ProgramData\Norton
O43 - CFD: 21/05/2014 - 08:00:06 - [] ----D C:\ProgramData\NortonInstaller
O43 - CFD: 21/05/2014 - 08:47:10 - [] ----D C:\ProgramData\Oberon Media
O43 - CFD: 02/04/2014 - 11:09:03 - [] ----D C:\ProgramData\Package Cache
O43 - CFD: 12/12/2013 - 17:38:04 - [] ----D C:\ProgramData\PC Drivers HeadQuarters
O43 - CFD: 20/05/2014 - 09:25:20 - [] ----D C:\ProgramData\Playrix Entertainment
O43 - CFD: 31/10/2013 - 11:16:53 - [] ----D C:\ProgramData\Recovery
O43 - CFD: 08/12/2013 - 16:19:16 - [0] ----D C:\ProgramData\Roxio
O43 - CFD: 08/12/2013 - 16:00:27 - [] ----D C:\ProgramData\Sonic
O43 - CFD: 19/05/2014 - 14:06:56 - [] ----D C:\ProgramData\SonicFocus
O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Start Menu
O43 - CFD: 22/05/2014 - 16:32:31 - [0] ---AD C:\ProgramData\TEMP
O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Templates
O43 - CFD: 31/03/2014 - 16:17:57 - [] ----D C:\ProgramData\The Revills Games
O43 - CFD: 14/01/2014 - 15:26:02 - [] ----D C:\ProgramData\TuneUp Software
O43 - CFD: 23/11/2013 - 16:59:36 - [] ----D C:\ProgramData\UAB
O43 - CFD: 08/12/2013 - 16:01:46 - [] ----D C:\ProgramData\Uninstall
O43 - CFD: 14/01/2014 - 15:25:35 - [] -SH-D C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
O43 - CFD: 25/11/2013 - 20:06:46 - [] ----D C:\Users\ELIZE\AppData\Roaming\Adobe
O43 - CFD: 15/01/2014 - 12:42:57 - [] ----D C:\Users\ELIZE\AppData\Roaming\Alawar
O43 - CFD: 01/04/2014 - 19:05:46 - [] ----D C:\Users\ELIZE\AppData\Roaming\Artogon
O43 - CFD: 30/10/2013 - 20:31:02 - [] ----D C:\Users\ELIZE\AppData\Roaming\AVAST Software
O43 - CFD: 01/11/2013 - 10:14:22 - [] ----D C:\Users\ELIZE\AppData\Roaming\Dropbox
O43 - CFD: 24/03/2014 - 11:38:41 - [] ----D C:\Users\ELIZE\AppData\Roaming\Google
O43 - CFD: 28/10/2013 - 21:58:20 - [] ----D C:\Users\ELIZE\AppData\Roaming\Identities
O43 - CFD: 12/12/2013 - 17:18:58 - [] ----D C:\Users\ELIZE\AppData\Roaming\IDT
O43 - CFD: 07/02/2014 - 17:05:10 - [] ----D C:\Users\ELIZE\AppData\Roaming\InstallShield
O43 - CFD: 30/10/2013 - 19:06:38 - [] ----D C:\Users\ELIZE\AppData\Roaming\Macromedia
O43 - CFD: 14/07/2009 - 17:35:05 - [0] ----D C:\Users\ELIZE\AppData\Roaming\Media Center Programs
O43 - CFD: 22/05/2014 - 19:19:39 - [] -S--D C:\Users\ELIZE\AppData\Roaming\Microsoft
O43 - CFD: 18/11/2013 - 15:21:29 - [] ----D C:\Users\ELIZE\AppData\Roaming\Mozilla
O43 - CFD: 16/01/2014 - 20:45:29 - [] ----D C:\Users\ELIZE\AppData\Roaming\Nero
O43 - CFD: 21/05/2014 - 08:47:12 - [] ----D C:\Users\ELIZE\AppData\Roaming\Oberon Media
O43 - CFD: 18/11/2013 - 15:21:30 - [] ----D C:\Users\ELIZE\AppData\Roaming\OpenOffice
O43 - CFD: 29/03/2014 - 12:31:36 - [] ----D C:\Users\ELIZE\AppData\Roaming\Orneon
O43 - CFD: 08/12/2013 - 16:17:24 - [] ----D C:\Users\ELIZE\AppData\Roaming\Roxio
O43 - CFD: 11/03/2014 - 17:50:26 - [] ----D C:\Users\ELIZE\AppData\Roaming\Skunk Studios
O43 - CFD: 13/11/2013 - 21:17:05 - [] ----D C:\Users\ELIZE\AppData\Roaming\TeamViewer
O43 - CFD: 14/01/2014 - 15:25:46 - [] ----D C:\Users\ELIZE\AppData\Roaming\TuneUp Software
O43 - CFD: 22/05/2014 - 19:19:39 - [] ----D C:\Users\ELIZE\AppData\Roaming\vlc
O43 - CFD: 28/10/2013 - 23:24:55 - [] ----D C:\Users\ELIZE\AppData\Roaming\WinBatch
O43 - CFD: 22/05/2014 - 20:14:58 - [] ----D C:\Users\ELIZE\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 19/01/2014 - 09:25:30 - [] ----D C:\Users\ELIZE\AppData\Roaming\ZOG
O43 - CFD: 26/12/2013 - 19:41:42 - [] ----D C:\Users\ELIZE\AppData\Local\7Wonders2
O43 - CFD: 13/04/2014 - 15:32:23 - [] ----D C:\Users\ELIZE\AppData\Local\Adobe
O43 - CFD: 28/10/2013 - 21:58:13 - [] -SH-D C:\Users\ELIZE\AppData\Local\Application Data
O43 - CFD: 01/11/2013 - 18:40:21 - [] ----D C:\Users\ELIZE\AppData\Local\Big Fish
O43 - CFD: 26/11/2013 - 10:18:44 - [0] ----D C:\Users\ELIZE\AppData\Local\cache
O43 - CFD: 05/01/2014 - 15:27:04 - [0] ----D C:\Users\ELIZE\AppData\Local\CrashDumps
O43 - CFD: 21/05/2014 - 11:42:01 - [] ----D C:\Users\ELIZE\AppData\Local\Diagnostics
O43 - CFD: 24/04/2014 - 09:36:52 - [] ----D C:\Users\ELIZE\AppData\Local\ElevatedDiagnostics
O43 - CFD: 22/04/2014 - 15:36:08 - [] -SH-D C:\Users\ELIZE\AppData\Local\EmieSiteList
O43 - CFD: 22/04/2014 - 15:36:08 - [] -SH-D C:\Users\ELIZE\AppData\Local\EmieUserList
O43 - CFD: 02/04/2014 - 13:51:29 - [] ----D C:\Users\ELIZE\AppData\Local\Google
O43 - CFD: 28/10/2013 - 21:58:13 - [] -SH-D C:\Users\ELIZE\AppData\Local\Historique
O43 - CFD: 18/11/2013 - 15:40:36 - [0] ----D C:\Users\ELIZE\AppData\Local\IM
O43 - CFD: 27/01/2014 - 17:33:51 - [] ----D C:\Users\ELIZE\AppData\Local\JollyBear
O43 - CFD: 12/11/2013 - 19:37:15 - [] ----D C:\Users\ELIZE\AppData\Local\Macromedia
O43 - CFD: 22/05/2014 - 19:02:09 - [] ----D C:\Users\ELIZE\AppData\Local\Microsoft
O43 - CFD: 14/01/2014 - 12:17:20 - [] ----D C:\Users\ELIZE\AppData\Local\Microsoft Games
O43 - CFD: 22/03/2014 - 13:45:39 - [] ----D C:\Users\ELIZE\AppData\Local\Mozilla
O43 - CFD: 14/01/2014 - 15:46:44 - [] ----D C:\Users\ELIZE\AppData\Local\Nero
O43 - CFD: 14/01/2014 - 15:27:52 - [] ----D C:\Users\ELIZE\AppData\Local\Nero_AG
O43 - CFD: 22/05/2014 - 19:19:39 - [] ----D C:\Users\ELIZE\AppData\Local\PC_Drivers_Headquarters
O43 - CFD: 01/11/2013 - 10:58:30 - [] ----D C:\Users\ELIZE\AppData\Local\Programs
O43 - CFD: 22/05/2014 - 20:07:47 - [] ----D C:\Users\ELIZE\AppData\Local\Temp
O43 - CFD: 28/10/2013 - 21:58:13 - [] -SH-D C:\Users\ELIZE\AppData\Local\Temporary Internet Files
O43 - CFD: 22/05/2014 - 19:02:12 - [] ----D C:\Users\ELIZE\AppData\Local\VirtualStore
O43 - CFD: 09/11/2013 - 18:56:40 - [] ----D C:\Users\ELIZE\AppData\Local\Windows Live
O43 - CFD: 14/07/2009 - 06:54:32 - [] R---D C:\Users\ELIZE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 22/05/2014 - 19:19:39 - [] R---D C:\Users\ELIZE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 21/11/2013 - 16:25:07 - [] ----D C:\Users\ELIZE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 18/11/2013 - 09:31:00 - [0] ----D C:\Users\ELIZE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 14/07/2009 - 06:49:38 - [] R---D C:\Users\ELIZE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 22/05/2014 - 19:19:39 - [] ----D C:\Users\ELIZE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Royal Envoy
O43 - CFD: 22/05/2014 - 19:19:39 - [] R---D C:\Users\ELIZE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
~ 1 Dossier CLSID vide (CLSID Empty Folder)
~ Program Folder: 174 Scanned in 00mn 00s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.485FB1F3792FF7B5D5EBB99AB870E588] - 09/05/2014 - 07:11:23 ---A- . (.Microsoft Corporation - Application Experience Program Inventory Co.) -- C:\Windows\System32\aeinv.dll [424448]
O44 - LFC:[MD5.4A795989DF0043973711B666D36D2678] - 09/05/2014 - 07:14:03 ---A- . (.Microsoft Corporation - Mise à jour des données de compatibilité de.) -- C:\Windows\System32\aepdu.dll [477184]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 09/05/2014 - 12:42:35 ---A- . (...) -- C:\Windows\setuperr.log [0]
O44 - LFC:[MD5.D25A4543B5AF3896C3B31EE44FC4EEE5] - 10/05/2014 - 10:04:23 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1668256]
O44 - LFC:[MD5.5D2573DC4B8384350F00FC1B67882BC2] - 10/05/2014 - 10:04:23 ---A- . (...) -- C:\Windows\System32\perfc009.dat [121802]
O44 - LFC:[MD5.A3607A6ABC7B8C08405D21C211F51477] - 10/05/2014 - 10:04:23 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [149844]
O44 - LFC:[MD5.3A84874F3EBFA7603B4055375B471F7C] - 10/05/2014 - 10:04:23 ---A- . (...) -- C:\Windows\System32\perfh009.dat [653930]
O44 - LFC:[MD5.7B726C5DCB9A1399483DE738B6734980] - 10/05/2014 - 10:04:23 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [747320]
O44 - LFC:[MD5.A4DDFE5DC4E73D1FED9B1B3A3D885612] - 11/05/2014 - 12:45:21 ---A- . (.Microsoft Corporation - Pas de description.) -- C:\Windows\System32\d3dx9_32.dll [4398360]
O44 - LFC:[MD5.2D7119052DB352E291A8FA9A4331DA44] - 11/05/2014 - 12:45:24 ---A- . (...) -- C:\Windows\DirectX.log [196]
O44 - LFC:[MD5.B739C423276AE62D7AC91773226EC13B] - 11/05/2014 - 12:45:40 ---A- . (.Microsoft Corporation - Direct3D 10.1 Extensions.) -- C:\Windows\System32\d3dx10_42.dll [523088]
O44 - LFC:[MD5.9D6429F410597750B2DC2579B2347303] - 11/05/2014 - 12:45:56 ---A- . (.Microsoft Corporation - Direct3D 10.1 Extensions.) -- C:\Windows\System32\d3dx11_43.dll [276832]
O44 - LFC:[MD5.ADA0C39D4EACDC81FD84163A95D62079] - 11/05/2014 - 12:45:58 ---A- . (.Microsoft Corporation - Direct3D HLSL Compiler.) -- C:\Windows\System32\D3DCompiler_43.dll [2526056]
O44 - LFC:[MD5.E9739AE8B2FA28DCD6F2EF5525DA8827] - 11/05/2014 - 12:46:01 ---A- . (.Microsoft Corporation - Audio Effect Library.) -- C:\Windows\System32\XAPOFX1_5.dll [77656]
O44 - LFC:[MD5.4F7513FF4DE6303088DB28DCBCEF372C] - 11/05/2014 - 12:46:01 ---A- . (.Microsoft Corporation - XAudio2 Game Audio API.) -- C:\Windows\System32\XAudio2_7.dll [518488]
O44 - LFC:[MD5.8DE1B4F579F8F8897409856F3BB7A7D2] - 11/05/2014 - 12:49:30 ---A- . (.Microsoft Corporation - Family Safety Filter Driver (WFP Callout).) -- C:\Windows\System32\Drivers\fssfltr.sys [58056]
O44 - LFC:[MD5.55B4CBB011B9A4787DF86A33F5C761AE] - 13/05/2014 - 14:32:09 ---A- . (...) -- C:\Windows\win.ini [505]
O44 - LFC:[MD5.340B0467E98A8C92697D73034DB4BCB7] - 13/05/2014 - 17:09:13 ---A- . (...) -- C:\Windows\System32\Drivers\aswHwid.sys [29208]
O44 - LFC:[MD5.BF5B9E9E97CED45208E498D9FA73688F] - 13/05/2014 - 17:09:13 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys [65776]
O44 - LFC:[MD5.ED5B09937D559FFA53FC988D20031E98] - 13/05/2014 - 17:09:13 ---A- . (.AVAST Software - avast! File System Minifilter for Windows 2.) -- C:\Windows\System32\Drivers\aswMonFlt.sys [79184]
O44 - LFC:[MD5.0B5A0005C0BDF4A05174576AF80DEA04] - 13/05/2014 - 17:09:13 ---A- . (.AVAST Software - avast! Screen Saver stub.) -- C:\Windows\avastSS.scr [43152]
O44 - LFC:[MD5.33C77DCB0AEC76E26BD6352A1A5281BB] - 13/05/2014 - 17:09:13 ---A- . (.AVAST Software - avast! WFP Redirect Driver.) -- C:\Windows\Syst
0
marquise de bourgogne 21 Messages postés 307 Statut Membre 19
 
houlala il y en a beaucoup !!!
j espere que c est bien çà ?? merci de me dire se que je doit faire maintenant
bonne journée =merci
0
bazfile Messages postés 60850 Statut Modérateur, Contributeur sécurité 19 827
 
Tu n'as toujours pas compris je te damandais de mettre uniquement le lien généré par Cjoint , il ne faut surtout pas mettre le rapport dans ton message il ne loge pas, et est donc incomplet.
Pour ce que je peux voir sur le début du rapport côté infections tu n'as rien de bien méchant sur ton ordinateur juste quelques Adwares, que tu peux si tu le souhaites désinstaller ce sont les logiciels :
BrowseSmart
Google Update Helper
Speedial


Tu dis ne pas arriver à faire la restauration système pourquoi ? :
La restauration système ne se lance pas ?
ou
Il n'y a pas de points de restauration ?
0
marquise de bourgogne 21 Messages postés 307 Statut Membre 19
 
oui en effet j ai rien compris -que ce qu il fallait mettre au juste ???j ai rien d autre !!
pour la restauration je n arrive plus a mettre une date il m est répondu ( introuvable
et pourtant j ai scanner et est installe cleaner -que doit je faire maintenant
merci
0
vieu bison boiteu Messages postés 45506 Statut Contributeur Ambassadeur 3 556
 
en complément , tu peux installer MBAM

télécharges Malwarebytes' Anti-Malware ( à garder et passer une fois par semaine )
https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/

faire une mise à jour et lancer un scanne approfondi , toutes sources externes sous USB branchées

tout sélectionner et supprimer la sélection
et vider la Quarantaine

tuto : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

(NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : https://www.malekal.com/tutorial-aboutbuster/ ; à copier dans C:\WINDOWS\system32 )
0