Virus detecter Win32:Adware-gen [Adw]

lion72 Messages postés 260 Statut Membre -  
lilidurhone Messages postés 800 Date d'inscription   Statut Contributeur sécurité Dernière intervention   -
Bonjour,
mon anti virus avast free me signale qu'une menace a été détecté.
depuis hier
le nom est du virus est Win32:Adware-gen [Adw]

j'ai regarder sur le net pour supprimer, installer antimalware et fait un nettoyage avec ccleaner, mais rien donner.

merci de me guider pour la marche a suivre

24 réponses

  • 1
  • 2
Résumé de la discussion

Un utilisateur signale qu' Avast Free détecte la menace Win32:Adware-gen [Adw], et décrit des tentatives de suppression sous Windows 7 avec Firefox 30 sans résultat, appelant à une marche à suivre. Plusieurs réponses recommandent d'utiliser AdwCleaner puis de supprimer manuellement les éléments suspects dans les registres et les navigateurs, en détaillant des clés et extensions supprimées lors d'un nettoyage approfondi. D'autres évoquent RogueKiller et l'extraction d'un rapport, tandis que certains commentaires remettent en question l'efficacité ou l'obsolescence de méthodes antérieures, sans consensus clair sur la marche à suivre. Le fil illustre une diversité de résultats de nettoyage, incluant la suppression de dossiers et clés de registre, la purgation d'extensions et de paramètres Firefox, et une alerte persistante lors du redémarrage.

Bobot (l'IA à votre service)
  1. lion72 Messages postés 260 Statut Membre 2
     
    déjà une réponse, merci de la rapidité

    je sait pour ccleaner, je le fait de temps en temps pour nettoyer.

    et voila, je suppose qu'il faut corriger les problemes, mais je vais attendre avant.

    voila la totaliter du scan.

    Babylon.Toolbar: [SBI $F75ED516] Barre d'outils IE (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{98889811-442D-49dd-99D7-DC866BE87DBC}

    Babylon.Toolbar: [SBI $3BE29F71] Réglages (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}

    Babylon.Toolbar: [SBI $DEB52F26] Dossier Programme (Répertoire, nothing done)
    C:\ProgramData\Babylon\

    Babylon.Toolbar: [SBI $5AB447BB] Dossier Programme (Répertoire, nothing done)
    C:\Users\Lionel\AppData\Roaming\Babylon\

    Delta.Toolbar: [SBI $85F92549] Réglages utilisateur (Clé du registre, nothing done)
    HKEY_USERS\S-1-5-21-3109688691-795145518-3024645089-1001\Software\BabSolution

    ExpressFiles: [SBI $15B77C36] Réglages utilisateur (Clé du registre, nothing done)
    HKEY_USERS\S-1-5-21-3109688691-795145518-3024645089-1001\Software\ExpressFiles

    ExpressFiles: [SBI $8D1D0CF1] Réglages (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\ExpressFiles

    Faglaro.ExpressFiles: [SBI $AF2A07A6] Dossier Programme (Répertoire, nothing done)
    C:\Users\Lionel\AppData\Roaming\ExpressFiles\

    Delta.Toolbar: [SBI $C87F6C5D] Donnée (Fichier, nothing done)
    C:\Users\Lionel\AppData\Roaming\Babylon\log_file.txt
    Properties.size=9569
    Properties.md5=5003468A55B56DB4095009564F5671C3
    Properties.filedate=1372634934
    Properties.filedatetext=2013-06-30 19:28:53

    WebCake.BHO: [SBI $3F53FBE0] Class ID (Clé du registre, nothing done)
    HKEY_CLASSES_ROOT\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}

    WebCake.BHO: [SBI $5B966508] Réglages (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application\WebCakeUpdaterService

    WebCake.BHO: [SBI $B5928459] Réglages (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application\WebCakeUpdaterService

    WebCake.BHO: [SBI $2698E3E6] Dossier Programme (Répertoire, nothing done)
    C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\

    WebCake.BHO: [SBI $885FF297] Bibliothèque (Fichier, nothing done)
    C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setup.dll
    Properties.size=531968
    Properties.md5=E1416C9C40FD81557795D4195FB48E8D
    Properties.filedate=1368563125
    Properties.filedatetext=2013-05-14 16:25:25

    WebCake.BHO: [SBI $0A5B161A] Bibliothèque (Fichier, nothing done)
    C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll
    Properties.size=273408
    Properties.md5=4C05D85B6C1E2E9AEF5784F0A43B5C3A
    Properties.filedate=1368563125
    Properties.filedatetext=2013-05-14 16:25:24

    WebCake.BHO: [SBI $1107F102] Donnée (Fichier, nothing done)
    C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.dat
    Properties.size=56161
    Properties.md5=553869FC38620C9D665B7C4A3EF4220E
    Properties.filedate=1372634922
    Properties.filedatetext=2013-06-30 19:28:42

    WebCake.BHO: [SBI $E98B8D0E] Exécutable (Fichier, nothing done)
    C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.exe
    Properties.size=227984
    Properties.md5=5A8222C703B4A34F2227A652A49A2827
    Properties.filedate=1299814153
    Properties.filedatetext=2011-03-10 23:29:12

    WebCake.BHO: [SBI $370B837B] Image (Fichier, nothing done)
    C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.ico
    Properties.size=4846
    Properties.md5=60E3EF9326E8C3F574A2C7B5A31FD895
    Properties.filedate=1258611124
    Properties.filedatetext=2009-11-19 02:12:03

    Searchdwebs: [SBI $B415107A] Dossier Programme (Répertoire, nothing done)
    C:\ProgramData\StarApp\

    Searchdwebs: [SBI $F5AC6597] Dossier Programme (Répertoire, nothing done)
    C:\ProgramData\StarApp\Setup\

    SweetIM: [SBI $51615461] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\

    SweetIM: [SBI $F8933C6C] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Communicator\

    SweetIM: [SBI $C6A2D07F] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Communicator\Microsoft.VC90.CRT\

    SweetIM: [SBI $2656FBAA] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Communicator\resources\

    SweetIM: [SBI $6240EF6B] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Communicator\resources\sqlite\

    SweetIM: [SBI $2C60DF4B] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Messenger\

    SweetIM: [SBI $A6046AD2] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Messenger\resources\

    SweetIM: [SBI $7AD2078F] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Messenger\resources\images\

    SweetIM: [SBI $C4779E51] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Messenger\resources\sqlite\

    SweetIM: [SBI $1EBFD254] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Toolbars\

    SweetIM: [SBI $5770A858] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Toolbars\Internet Explorer\

    SweetIM: [SBI $6C3EBC75] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Toolbars\Internet Explorer\conf\

    SweetIM: [SBI $CEB7CBCD] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\

    SweetIM: [SBI $6C8B4BDF] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\

    SweetIM: [SBI $27B38A9A] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\blue\

    SweetIM: [SBI $8AC8D9F1] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\green\

    SweetIM: [SBI $15F80965] Réglages (Valeur du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\orange\

    OtShot: [SBI $6680244F] Réglages (Clé du registre, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\ZalmanInstaller_otshot

    DoubleClick: Cookie traceur (Internet Explorer: Lionel) (Cookie, nothing done)

    BurstMedia: Cookie traceur (Internet Explorer: Lionel) (Cookie, nothing done)

    --- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---

    2009-01-26 blindman.exe (1.0.0.8)
    2009-01-26 SDFiles.exe (1.6.1.7)
    2009-01-26 SDMain.exe (1.0.0.6)
    2009-01-26 SDShred.exe (1.0.2.5)
    2009-01-26 SDUpdate.exe (1.6.0.12)
    2009-01-26 SDWinSec.exe (1.0.0.12)
    2009-01-26 SpybotSD.exe (1.6.2.46)
    2009-01-26 TeaTimer.exe (1.6.4.26)
    2014-07-27 unins000.exe (51.49.0.0)
    2009-01-26 Update.exe (1.6.0.7)
    2009-01-26 advcheck.dll (1.6.2.15)
    2007-04-02 aports.dll (2.1.0.0)
    2008-06-14 DelZip179.dll (1.79.11.1)
    2009-01-26 SDHelper.dll (1.6.2.14)
    2008-06-19 sqlite3.dll
    2009-01-26 Tools.dll (2.1.6.10)
    2009-01-16 UninsSrv.dll (1.0.0.0)
    2014-03-05 Includes\Adware-000.sbi (*)
    2014-01-08 Includes\Adware-001.sbi (*)
    2014-06-11 Includes\Adware-C.sbi (*)
    2014-01-13 Includes\Adware.sbi (*)
    2014-01-13 Includes\AdwareC.sbi (*)
    2010-08-13 Includes\Cookies.sbi (*)
    2014-01-08 Includes\Dialer-000.sbi (*)
    2014-01-08 Includes\Dialer-001.sbi (*)
    2014-01-08 Includes\Dialer-C.sbi (*)
    2014-01-08 Includes\Dialer.sbi (*)
    2014-01-13 Includes\DialerC.sbi (*)
    2014-01-09 Includes\Fraud-000.sbi (*)
    2014-01-09 Includes\Fraud-001.sbi (*)
    2014-03-31 Includes\Fraud-002.sbi (*)
    2014-01-09 Includes\Fraud-003.sbi (*)
    2013-04-11 Includes\HeavyDuty.sbi (*)
    2014-01-08 Includes\Hijackers-000.sbi (*)
    2014-01-08 Includes\Hijackers-001.sbi (*)
    2014-01-08 Includes\Hijackers-C.sbi (*)
    2014-01-08 Includes\Hijackers.sbi (*)
    2014-01-13 Includes\HijackersC.sbi (*)
    2014-01-08 Includes\iPhone-000.sbi (*)
    2014-01-08 Includes\iPhone.sbi (*)
    2014-01-08 Includes\Keyloggers-000.sbi (*)
    2014-03-19 Includes\Keyloggers-C.sbi (*)
    2014-01-08 Includes\Keyloggers.sbi (*)
    2014-01-13 Includes\KeyloggersC.sbi (*)
    2004-11-29 Includes\LSP.sbi (*)
    2014-03-03 Includes\Malware-000.sbi (*)
    2014-01-09 Includes\Malware-001.sbi (*)
    2014-03-03 Includes\Malware-002.sbi (*)
    2014-02-05 Includes\Malware-003.sbi (*)
    2014-01-28 Includes\Malware-004.sbi (*)
    2014-04-15 Includes\Malware-005.sbi (*)
    2014-02-26 Includes\Malware-006.sbi (*)
    2014-01-09 Includes\Malware-007.sbi (*)
    2014-06-11 Includes\Malware-C.sbi (*)
    2014-01-13 Includes\Malware.sbi (*)
    2014-01-13 Includes\MalwareC.sbi (*)
    2014-01-15 Includes\PUPS-000.sbi (*)
    2014-01-15 Includes\PUPS-001.sbi (*)
    2014-01-15 Includes\PUPS-002.sbi (*)
    2014-06-11 Includes\PUPS-C.sbi (*)
    2014-01-13 Includes\PUPS.sbi (*)
    2014-01-13 Includes\PUPSC.sbi (*)
    2010-01-25 Includes\Revision.sbi (*)
    2014-01-08 Includes\Security-000.sbi (*)
    2014-01-08 Includes\Security-C.sbi (*)
    2014-01-08 Includes\Security.sbi (*)
    2014-01-13 Includes\SecurityC.sbi (*)
    2008-06-03 Includes\Spybots.sbi (*)
    2008-06-03 Includes\SpybotsC.sbi (*)
    2014-01-28 Includes\Spyware-000.sbi (*)
    2014-01-08 Includes\Spyware-001.sbi (*)
    2014-01-08 Includes\Spyware-C.sbi (*)
    2014-01-13 Includes\Spyware.sbi (*)
    2014-01-08 Includes\SpywareC.sbi (*)
    2012-11-19 Includes\Tracks.uti
    2014-01-15 Includes\Trojans-000.sbi (*)
    2014-02-26 Includes\Trojans-001.sbi (*)
    2014-01-15 Includes\Trojans-002.sbi (*)
    2014-01-28 Includes\Trojans-003.sbi (*)
    2014-01-15 Includes\Trojans-004.sbi (*)
    2014-03-19 Includes\Trojans-005.sbi (*)
    2014-03-14 Includes\Trojans-006.sbi (*)
    2014-01-15 Includes\Trojans-007.sbi (*)
    2014-02-19 Includes\Trojans-008.sbi (*)
    2014-01-15 Includes\Trojans-009.sbi (*)
    2014-06-11 Includes\Trojans-C.sbi (*)
    2014-01-15 Includes\Trojans-OG-000.sbi (*)
    2014-01-15 Includes\Trojans-TD-000.sbi (*)
    2014-01-15 Includes\Trojans-VM-000.sbi (*)
    2014-01-15 Includes\Trojans-VM-001.sbi (*)
    2014-01-15 Includes\Trojans-VM-002.sbi (*)
    2014-01-15 Includes\Trojans-VM-003.sbi (*)
    2014-01-15 Includes\Trojans-VM-004.sbi (*)
    2014-01-15 Includes\Trojans-VM-005.sbi (*)
    2014-01-15 Includes\Trojans-VM-006.sbi (*)
    2014-01-15 Includes\Trojans-VM-007.sbi (*)
    2014-01-15 Includes\Trojans-VM-008.sbi (*)
    2014-01-15 Includes\Trojans-VM-009.sbi (*)
    2014-01-15 Includes\Trojans-VM-010.sbi (*)
    2014-01-15 Includes\Trojans-VM-011.sbi (*)
    2014-01-15 Includes\Trojans-VM-012.sbi (*)
    2014-01-15 Includes\Trojans-VM-013.sbi (*)
    2014-01-15 Includes\Trojans-VM-014.sbi (*)
    2014-01-15 Includes\Trojans-VM-015.sbi (*)
    2014-01-15 Includes\Trojans-VM-016.sbi (*)
    2014-01-15 Includes\Trojans-VM-017.sbi (*)
    2014-01-15 Includes\Trojans-VM-018.sbi (*)
    2014-01-15 Includes\Trojans-VM-019.sbi (*)
    2014-01-15 Includes\Trojans-VM-020.sbi (*)
    2014-01-15 Includes\Trojans-VM-021.sbi (*)
    2014-01-15 Includes\Trojans-VM-022.sbi (*)
    2014-01-15 Includes\Trojans-VM-023.sbi (*)
    2014-01-15 Includes\Trojans-VM-024.sbi (*)
    2014-01-15 Includes\Trojans-ZB-000.sbi (*)
    2014-03-14 Includes\Trojans-ZL-000.sbi (*)
    2014-01-09 Includes\Trojans.sbi (*)
    2014-01-09 Includes\TrojansC-02.sbi (*)
    2014-01-09 Includes\TrojansC-03.sbi (*)
    2014-01-16 Includes\TrojansC-04.sbi (*)
    2014-01-09 Includes\TrojansC-05.sbi (*)
    2014-01-09 Includes\TrojansC.sbi (*)
    2008-03-04 Plugins\Chai.dll
    2008-03-05 Plugins\Fennel.dll
    2008-02-26 Plugins\Mate.dll
    2007-12-24 Plugins\TCPIPAddress.dll
    0
    1. XDamienX007 Messages postés 4244 Date d'inscription   Statut Membre Dernière intervention   420
       
      Nettoie tout ! (fix)
      0
    2. lilidurhone Messages postés 800 Date d'inscription   Statut Contributeur sécurité Dernière intervention   3 818
       
      @Damien

      Non!

      Il doit faire nettoyer avec adwcleaner et désinstaller spybot....
      0
    3. XDamienX007 Messages postés 4244 Date d'inscription   Statut Membre Dernière intervention   420
       
      Mais il a fait le scan autant qu'il nettoie !!
      Et ça va pas la peine de désinstaller c'est pas Avast ou Norton non plus ..
      0
    4. lilidurhone Messages postés 800 Date d'inscription   Statut Contributeur sécurité Dernière intervention   3 818
       
      Si Damien

      Il est inefficace et lourd
      0
  2. lilidurhone Messages postés 800 Date d'inscription   Statut Contributeur sécurité Dernière intervention   3 818
     
    Désolé

    Mais je reprends le sujet...

    Vire spybot(obsolète et inefficace...)

    Utilise plutôt adwcleaner

    https://www.commentcamarche.net/telecharger/securite/2759-adwcleaner/
    0
    1. XDamienX007 Messages postés 4244 Date d'inscription   Statut Membre Dernière intervention   420
       
      Obsolète et inefficace ?!
      Il fonctionne très bien et détecte tout ce qu'il faut !
      Il est en plus très simple d'utilisation et rapide.
      0
    2. lilidurhone Messages postés 800 Date d'inscription   Statut Contributeur sécurité Dernière intervention   3 818
       
      Non

      Inefficace et obsolète

      Je sais ce que je dis....
      0
    3. XDamienX007 Messages postés 4244 Date d'inscription   Statut Membre Dernière intervention   420
       
      Moi aussi je suis dedans pour mes études, dans tout mes stages j'utilisais ce logiciel aucun retour...
      0
    4. lilidurhone Messages postés 800 Date d'inscription   Statut Contributeur sécurité Dernière intervention   3 818
       
      Plus maintenant

      Tu as vu ce que adwcleaner a détecté...
      0
    5. XDamienX007 Messages postés 4244 Date d'inscription   Statut Membre Dernière intervention   420
       
      Autant que Spybot ...
      Et puis m*rde continue avec lion72, je m'occupe des sujet où "je sais ce que je dis".
      0
  3. lion72 Messages postés 260 Statut Membre 2
     
    voila le rapport adwcleaner

    # AdwCleaner v3.300 - Rapport créé le 27/07/2014 à 15:16:49
    # Mis à jour le 27/07/2014 par Xplode
    # Système d'exploitation : Windows 7 Professional Service Pack 1 (32 bits)
    # Nom d'utilisateur : Lionel - LIONEL-PC
    # Exécuté depuis : C:\Users\Lionel\Downloads\adwcleaner_3.300.exe
    # Option : Scanner

    ***** [ Services ] *****

    ***** [ Fichiers / Dossiers ] *****

    Dossier Présent : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EZDownloader
    Dossier Présent : C:\ProgramData\Tarma Installer
    Dossier Présent : C:\ProgramData\WinterSoft
    Dossier Présent : C:\Users\Lionel\AppData\Local\DirectDownloader
    Fichier Présent : C:\Users\Lionel\AppData\Roaming\Mozilla\Firefox\Profiles\o50aw18z.default\user.js

    ***** [ Tâches planifiées ] *****

    Tâche Présente : Browser Manager
    Tâche Présente : Express FilesUpdate

    ***** [ Raccourcis ] *****

    ***** [ Registre ] *****

    Clé Présente : HKCU\Software\532d68de169e844
    Clé Présente : HKCU\Software\Myfree Codec
    Clé Présente : HKCU\Software\Softonic
    Clé Présente : HKLM\SOFTWARE\532d68de169e844
    Clé Présente : HKLM\SOFTWARE\Classes\1ClicktorrentFile
    Clé Présente : HKLM\SOFTWARE\Classes\1ClicktorrentFile1
    Clé Présente : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
    Clé Présente : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
    Clé Présente : HKLM\SOFTWARE\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}
    Clé Présente : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
    Clé Présente : HKLM\SOFTWARE\Classes\AppID\secman.DLL
    Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
    Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
    Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
    Clé Présente : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
    Clé Présente : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
    Clé Présente : HKLM\SOFTWARE\Classes\oneclick
    Clé Présente : HKLM\SOFTWARE\Classes\oneclickmg
    Clé Présente : HKLM\SOFTWARE\Classes\Prod.cap
    Clé Présente : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
    Clé Présente : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
    Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
    Clé Présente : HKLM\Software\Conduit
    Clé Présente : HKLM\Software\Driver-Soft
    Clé Présente : HKLM\SOFTWARE\Google\Chrome\Extensions\hphibigbodkkohoglgfkddblldpfohjl
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASAPI32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASMANCS
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\ClickPotatoLiteSA_RASAPI32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\ClickPotatoLiteSA_RASMANCS
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_amimo_RASAPI32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_amimo_RASMANCS
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_dvd-shrink_RASAPI32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_dvd-shrink_RASMANCS
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_ordi-scrabble_RASAPI32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_ordi-scrabble_RASMANCS
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_toneshop_RASAPI32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_toneshop_RASMANCS
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_windows-media-player_RASAPI32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_windows-media-player_RASMANCS
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
    Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
    Clé Présente : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
    Clé Présente : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078
    Clé Présente : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E
    Clé Présente : HKLM\Software\Myfree Codec
    Clé Présente : HKLM\Software\Tarma Installer

    ***** [ Navigateurs ] *****

    -\\ Internet Explorer v11.0.9600.17207

    Paramètre Présent : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.holasearch.com/?babsrc=HP_ss&mntrId=848D00219B089077&affID=122304&tt=300613_holp&tsp=4929

    -\\ Mozilla Firefox v30.0 (fr)

    [ Fichier : C:\Users\Lionel\AppData\Roaming\Mozilla\Firefox\Profiles\o50aw18z.default\prefs.js ]

    Ligne Trouvée : user_pref("extensions.ffxtlbr@holasearch.com.install-event-fired", true);
    Ligne Trouvée : user_pref("extensions.holasearch.admin", false);
    Ligne Trouvée : user_pref("extensions.holasearch.aflt", "babsst");
    Ligne Trouvée : user_pref("extensions.holasearch.appId", "{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}");
    Ligne Trouvée : user_pref("extensions.holasearch.autoRvrt", "false");
    Ligne Trouvée : user_pref("extensions.holasearch.dfltLng", "fr");
    Ligne Trouvée : user_pref("extensions.holasearch.excTlbr", false);
    Ligne Trouvée : user_pref("extensions.holasearch.ffxUnstlRst", false);
    Ligne Trouvée : user_pref("extensions.holasearch.id", "848dee4500000000000000219b089077");
    Ligne Trouvée : user_pref("extensions.holasearch.instlDay", "15886");
    Ligne Trouvée : user_pref("extensions.holasearch.instlRef", "sst");
    Ligne Trouvée : user_pref("extensions.holasearch.newTab", false);
    Ligne Trouvée : user_pref("extensions.holasearch.prdct", "holasearch");
    Ligne Trouvée : user_pref("extensions.holasearch.prtnrId", "holasearch");
    Ligne Trouvée : user_pref("extensions.holasearch.rvrt", "false");
    Ligne Trouvée : user_pref("extensions.holasearch.smplGrp", "none");
    Ligne Trouvée : user_pref("extensions.holasearch.tlbrId", "base");
    Ligne Trouvée : user_pref("extensions.holasearch.tlbrSrchUrl", "");
    Ligne Trouvée : user_pref("extensions.holasearch.vrsn", "1.8.16.16");
    Ligne Trouvée : user_pref("extensions.holasearch.vrsnTs", "1.8.16.1619:28:49");
    Ligne Trouvée : user_pref("extensions.holasearch.vrsni", "1.8.16.16");
    Ligne Trouvée : user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"I[...]
    Ligne Trouvée : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");

    -\\ Google Chrome v36.0.1985.125

    [ Fichier : C:\Users\Lionel\AppData\Local\Google\Chrome\User Data\Default\preferences ]

    Trouvée [Search Provider] : hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={F58C9B4B-8BCF-11E1-9348-00219B089077}
    Trouvée [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=113357&tt=2912_8&babsrc=SP_ss&mntrId=848dee4500000000000000219b089077
    Trouvée [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}

    *************************

    AdwCleaner[R0].txt - [8148 octets] - [27/07/2014 15:16:49]

    ########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [8208 octets] ##########
    0
  4. lilidurhone Messages postés 800 Date d'inscription   Statut Contributeur sécurité Dernière intervention   3 818
     
    Fais nettoyer avec adwcleaner

    Laisse tomber pour Spybot vire le.

    Si problème il y a il existe toujours une solution
    ~~~~~~ Cs ~~~~~~ Absente du 15 juillet au 27
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. lion72 Messages postés 260 Statut Membre 2
     
    rapport une fois nettoyer,
    PS: je vient de recevoir une autre alerte en redémarrant.

    # AdwCleaner v3.300 - Rapport créé le 27/07/2014 à 15:30:55
    # Mis à jour le 27/07/2014 par Xplode
    # Système d'exploitation : Windows 7 Professional Service Pack 1 (32 bits)
    # Nom d'utilisateur : Lionel - LIONEL-PC
    # Exécuté depuis : C:\Users\Lionel\Downloads\adwcleaner_3.300.exe
    # Option : Nettoyer

    ***** [ Services ] *****

    ***** [ Fichiers / Dossiers ] *****

    Dossier Supprimé : C:\ProgramData\Tarma Installer
    Dossier Supprimé : C:\ProgramData\WinterSoft
    Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EZDownloader
    Dossier Supprimé : C:\Users\Lionel\AppData\Local\DirectDownloader
    Fichier Supprimé : C:\Users\Lionel\AppData\Roaming\Mozilla\Firefox\Profiles\o50aw18z.default\user.js

    ***** [ Tâches planifiées ] *****

    Tâche supprimée : Browser Manager
    Tâche supprimée : Express FilesUpdate

    ***** [ Raccourcis ] *****

    ***** [ Registre ] *****

    Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\hphibigbodkkohoglgfkddblldpfohjl
    Clé Supprimée : HKLM\SOFTWARE\Classes\1ClicktorrentFile
    Clé Supprimée : HKLM\SOFTWARE\Classes\1ClicktorrentFile1
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\secman.DLL
    Clé Supprimée : HKLM\SOFTWARE\Classes\oneclick
    Clé Supprimée : HKLM\SOFTWARE\Classes\oneclickmg
    Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
    Clé Supprimée : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
    Clé Supprimée : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\ClickPotatoLiteSA_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\ClickPotatoLiteSA_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
    Clé Supprimée : HKCU\Software\532d68de169e844
    Clé Supprimée : HKLM\SOFTWARE\532d68de169e844
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_amimo_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_amimo_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_dvd-shrink_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_dvd-shrink_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_ordi-scrabble_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_ordi-scrabble_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_toneshop_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_toneshop_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_windows-media-player_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_windows-media-player_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
    Clé Supprimée : HKCU\Software\Myfree Codec
    Clé Supprimée : HKCU\Software\Softonic
    Clé Supprimée : HKLM\Software\Conduit
    Clé Supprimée : HKLM\Software\Driver-Soft
    Clé Supprimée : HKLM\Software\Myfree Codec
    Clé Supprimée : HKLM\Software\Tarma Installer
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E
    Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632

    ***** [ Navigateurs ] *****

    -\\ Internet Explorer v11.0.9600.17207

    Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

    -\\ Mozilla Firefox v30.0 (fr)

    [ Fichier : C:\Users\Lionel\AppData\Roaming\Mozilla\Firefox\Profiles\o50aw18z.default\prefs.js ]

    Ligne Supprimée : user_pref("extensions.ffxtlbr@holasearch.com.install-event-fired", true);
    Ligne Supprimée : user_pref("extensions.holasearch.admin", false);
    Ligne Supprimée : user_pref("extensions.holasearch.aflt", "babsst");
    Ligne Supprimée : user_pref("extensions.holasearch.appId", "{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}");
    Ligne Supprimée : user_pref("extensions.holasearch.autoRvrt", "false");
    Ligne Supprimée : user_pref("extensions.holasearch.dfltLng", "fr");
    Ligne Supprimée : user_pref("extensions.holasearch.excTlbr", false);
    Ligne Supprimée : user_pref("extensions.holasearch.ffxUnstlRst", false);
    Ligne Supprimée : user_pref("extensions.holasearch.id", "848dee4500000000000000219b089077");
    Ligne Supprimée : user_pref("extensions.holasearch.instlDay", "15886");
    Ligne Supprimée : user_pref("extensions.holasearch.instlRef", "sst");
    Ligne Supprimée : user_pref("extensions.holasearch.newTab", false);
    Ligne Supprimée : user_pref("extensions.holasearch.prdct", "holasearch");
    Ligne Supprimée : user_pref("extensions.holasearch.prtnrId", "holasearch");
    Ligne Supprimée : user_pref("extensions.holasearch.rvrt", "false");
    Ligne Supprimée : user_pref("extensions.holasearch.smplGrp", "none");
    Ligne Supprimée : user_pref("extensions.holasearch.tlbrId", "base");
    Ligne Supprimée : user_pref("extensions.holasearch.tlbrSrchUrl", "");
    Ligne Supprimée : user_pref("extensions.holasearch.vrsn", "1.8.16.16");
    Ligne Supprimée : user_pref("extensions.holasearch.vrsnTs", "1.8.16.1619:28:49");
    Ligne Supprimée : user_pref("extensions.holasearch.vrsni", "1.8.16.16");
    Ligne Supprimée : user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"I[...]
    Ligne Supprimée : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");

    -\\ Google Chrome v36.0.1985.125

    [ Fichier : C:\Users\Lionel\AppData\Local\Google\Chrome\User Data\Default\preferences ]

    Supprimée [Search Provider] : hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={F58C9B4B-8BCF-11E1-9348-00219B089077}
    Supprimée [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=113357&tt=2912_8&babsrc=SP_ss&mntrId=848dee4500000000000000219b089077
    Supprimée [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}

    *************************

    AdwCleaner[R0].txt - [8288 octets] - [27/07/2014 15:16:49]
    AdwCleaner[R1].txt - [8348 octets] - [27/07/2014 15:30:04]
    AdwCleaner[S0].txt - [8286 octets] - [27/07/2014 15:30:55]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8346 octets] ##########
    0
  8. lion72 Messages postés 260 Statut Membre 2
     
    j'ai crée une chicane.
    0
  9. lion72 Messages postés 260 Statut Membre 2
     
    rapport ZHPdiag

    ~ Rapport de ZHPDiag v2014.7.27.109 - Nicolas Coolman (2014-07-27)
    ~ Lancé par Lionel (2014-07-27 15:47:59)
    ~ Adresse du Site Web https://nicolascoolman.eu
    ~ Adresse du Forum https://nicolascoolman.eu
    ~ Traduit par Nicolas Coolman
    ~ Etat de la version : Version à jour.
    ~ Liste blanche : Activée par le programme
    ~ Elévation des Privilèges : OK
    ~ User Account Control (UAC): Deactivate by user

    ---\\ Navigateurs Internet
    MSIE: Internet Explorer v11.0.9600.17207
    MFIE: Mozilla Firefox 30.0 (Defaut)
    GCIE: Google Chrome v36.0.1985.125

    ---\\ Informations sur les produits Windows
    ~ Langage: Français
    Windows 7 Professional, 32-bit Service Pack 1 (Build 7601)
    Windows Server License Manager Script : OK
    ~ Windows Operating System - Windows(R) 7, RETAIL channel
    Windows ID Activation : OK
    ~ Windows Partial Key : 72CBH
    Windows License : OK
    ~ Windows Remaining Initializations Number : 4
    Software Protection Service (Protection logicielle) : OK
    Windows Automatic Updates : OK
    Windows Activation Technologies : OK

    ---\\ Logiciels de protection du système
    avast! Free Antivirus v9.0.2021
    Windows Defender W7 (Activate)

    ---\\ Logiciels d'optimisation du système
    CCleaner v3.05

    ---\\ Logiciels de partage PeerToPeer
    µTorrent v3.3.0.29625 =>P2P.µTorrent

    ---\\ Surveillance de Logiciels
    Adobe Flash Player 14 Plugin
    Adobe Reader X
    Java 7 Update 25

    ---\\ Informations sur le système
    ~ Processor: x86 Family 6 Model 23 Stepping 7, GenuineIntel
    ~ Operating System: 32 Bits
    Boot mode: Normal (Normal boot)
    Total RAM: 3326 MB (66% free)
    System Restore: Activé (Enable)
    System drive C: has 67 GB (11%) free of 596 GB

    ---\\ Mode de connexion au système
    ~ Computer Name: LIONEL-PC
    ~ User Name: Lionel
    ~ All Users Names: Mcx1-LIONEL-PC, Lionel, HomeGroupUser$, Administrateur,
    ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
    Logged in as Administrator

    ---\\ Variables d'environnement
    ~ System Unit : C:\
    ~ %AppZHP% : C:\Users\Lionel\AppData\Roaming\ZHP\
    ~ %AppData% : C:\Users\Lionel\AppData\Roaming\
    ~ %Desktop% : C:\Users\Lionel\Desktop\
    ~ %Favorites% : C:\Users\Lionel\Favorites\
    ~ %LocalAppData% : C:\Users\Lionel\AppData\Local\
    ~ %StartMenu% : C:\Users\Lionel\AppData\Roaming\Microsoft\Windows\Start Menu\
    ~ %Windir% : C:\Windows\
    ~ %System% : C:\Windows\System32\

    ---\\ Enumération des unités disques
    C: Hard drive, Flash drive, Thumb drive (Free 67 Go of 596 Go)
    D: CD-ROM drive (Not Inserted)
    E: CD-ROM drive (Not Inserted)

    ---\\ Etat du Centre de Sécurité Windows
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
    [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyGames: Modified
    ~ Security Center: 43 Legitimates Filtered in 00mn 00s

    ---\\ Recherche particulière de fichiers génériques
    [MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - (.Microsoft Corporation - Explorateur Windows.) (.2011-02-25 - 00:30:54.) -- C:\Windows\Explorer.exe [2616320]
    [MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.2009-07-13 - 20:14:45.) -- C:\Windows\System32\Wininit.exe [96256]
    [MD5.CCC198257901BEEA2FBF8EB1E7678356] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.2014-06-18 - 17:13:59.) -- C:\Windows\System32\wininet.dll [1791488]
    [MD5.998507B046BA314CE8245364C686FA67] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.2014-03-04 - 04:17:02.) -- C:\Windows\System32\Winlogon.exe [304128]
    [MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Bibliothèque de licences.) (.2010-11-20 - 07:21:24.) -- C:\Windows\System32\sppcomapi.dll [193536]
    [MD5.D0B388DA1D111A34366E04EB4A5DD156] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.2014-05-30 - 01:36:07.) -- C:\Windows\system32\Drivers\AFD.sys [338944]
    [MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.2009-07-13 - 20:26:15.) -- C:\Windows\system32\Drivers\atapi.sys [21584]
    [MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.2009-07-13 - 18:11:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [70656]
    [MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.2010-11-20 - 03:38:10.) -- C:\Windows\system32\Drivers\Cdrom.sys [108544]
    [MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.2010-11-20 - 03:42:32.) -- C:\Windows\system32\Drivers\DfsC.sys [78336]
    [MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.2010-11-20 - 04:59:29.) -- C:\Windows\system32\Drivers\HDAudBus.sys [108544]
    [MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) (.2009-07-13 - 18:11:24.) -- C:\Windows\system32\Drivers\i8042prt.sys [80896]
    [MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.2009-07-13 - 18:54:29.) -- C:\Windows\system32\Drivers\IpNat.sys [101888]
    [MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.2011-04-26 - 21:17:22.) -- C:\Windows\system32\Drivers\MRxSmb.sys [123904]
    [MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) (.2010-11-20 - 03:39:44.) -- C:\Windows\system32\Drivers\netBT.sys [187904]
    [MD5.C8DFF8D07755A66C7A4A738930F0FEAC] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.2014-01-23 - 21:18:22.) -- C:\Windows\system32\Drivers\ntfs.sys [1212352]
    [MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parallèle.) (.2009-07-13 - 18:45:35.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
    [MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.2009-07-13 - 18:54:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [78848]
    [MD5.B973FCFC50DC1434E1970A146F7E3885] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.2010-11-20 - 05:24:46.) -- C:\Windows\system32\Drivers\rdpdr.sys [133632]
    [MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.2009-07-13 - 18:53:41.) -- C:\Windows\system32\Drivers\smb.sys [71168]
    [MD5.B459575348C20E8121D6039DA063C704] - (.Microsoft Corporation - TDI Translation Driver.) (.2010-11-20 - 03:39:17.) -- C:\Windows\system32\Drivers\tdx.sys [74752]
    [MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.2010-11-20 - 07:30:16.) -- C:\Windows\system32\Drivers\volsnap.sys [245632]
    ~ Generic Processes: Scanned in 00mn 00s

    ---\\ Etat des fichiers cachés (Caché/Total)
    ~ Mes images (My Pictures) : 3/5621
    ~ Mes musiques (My Musics) : 1/15038
    ~ Mes Videos (My Videos) : 1/104
    ~ Mes Favoris (My Favorites) : 1/17
    ~ Mes Documents (My Documents) : 2/2269
    ~ Mon Bureau (My Desktop) : 3/254
    ~ Menu demarrer (Programs) : 1/32
    ~ Hidden Files: Scanned in 00mn 17s

    ---\\ Processus lancés
    [MD5.17186248C75E9A8227750726E1DFF4FD] - (.Microsoft Corporation - Microsoft LifeCam VX6000 Device Application.) -- C:\Windows\vVX6000.exe [764784] [PID.3752]
    [MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816] [PID.2720]
    [MD5.26AFC1F16494FFE66F2197153B342A27] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4086432] [PID.2924]
    [MD5.085BE68B52CE5A5FA4621507AD518CF3] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [152392] [PID.3564]
    [MD5.A0251ED3ABBA7ACC84416738C8282ACA] - (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311616] [PID.3664]
    [MD5.F5ED26AB8BDD951BFAC8BBD0D68BA3E9] - (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\Kies.exe [1564992] [PID.4012]
    [MD5.F43247CCDD1EA5EA4F60393CF157157B] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [21442176] [PID.2936]
    [MD5.3C8989CF2B59228785F16B3EB547F58C] - (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [248176] [PID.3136]
    [MD5.B1E01D636350983E94171E229C759468] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [275568] [PID.4424]
    [MD5.0DA8636ACBF55A4CA6350FEA7D789828] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8082432] [PID.5540]
    ~ Processes Running: Scanned in 00mn 00s

    ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
    C:\Users\Lionel\AppData\Local\Google\Chrome\User Data\Default\Preferences
    G1 - GCS: Preference [User Data\Default] http://search.babylon.com =>PUP.Babylon

    ---\\ Liste des dossiers d'extension Google Chrome
    ~ Google Lines Browser: 1 Legitimates Filtered in 00mn 03s

    ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
    C:\Users\Lionel\AppData\Roaming\Mozilla\Firefox\Profiles\o50aw18z.default\prefs.js
    ~ Firefox Browser: 25 Legitimates Filtered in 00mn 00s

    ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
    R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (...) (No version) -- (.not file.)
    ~ IE Browser: 11 Legitimates Filtered in 00mn 00s

    ---\\ Internet Explorer, Proxy Management (R5)
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
    ~ Proxy management: Scanned in 00mn 00s

    ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
    F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
    F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
    F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
    ~ Keys: Scanned in 00mn 00s

    ---\\ Hosts file redirection (O1)
    ~ Le fichier hosts est sain (The hosts file is clean).
    ~ Hosts File: Scanned in 00mn 00s
    ~ Nombre de lignes (Lines number): 21

    ---\\ Applications lancées au démarrage du système (O4)
    O4 - HKLM\..\Run: [VX6000] . (.Microsoft Corporation - Microsoft LifeCam VX6000 Device Application.) -- C:\Windows\vVX6000.exe
    O4 - HKLM\..\Run: [LifeCam] . (.Microsoft Corporation - LifeExp.exe.) -- C:\Program Files\Microsoft LifeCam\LifeExp.exe
    O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
    O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
    O4 - HKLM\..\Run: [Nikon Message Center 2] . (.Nikon Corporation - Nikon Message Center 2.) -- C:\Program Files\Nikon\Nikon Message Center 2\NkMC2.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation
    O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
    O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
    O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
    O4 - HKLM\..\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe =>.Samsung Electronics Co
    O4 - HKCU\..\Run: [Facebook Update] C:\Users\Lionel\AppData\Local\Facebook\Update\FacebookUpdate.exe (.not file.)
    O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
    O4 - HKCU\..\Run: [KiesPreload] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\Kies.exe
    O4 - HKCU\..\Run: [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe (.not file.)
    O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
    O4 - HKCU\..\Run: [TomTomHOME.exe] . (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
    O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
    O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
    O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [Facebook Update] C:\Users\Lionel\AppData\Local\Facebook\Update\FacebookUpdate.exe (.not file.)
    O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
    O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [KiesPreload] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\Kies.exe
    O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe (.not file.)
    O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
    O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [TomTomHOME.exe] . (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
    ~ Application: Scanned in 00mn 00s

    ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
    O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} . (.Microsoft Corporation - Windows Live Messenger Companion core resources.) -- C:\Program Files\Windows Live\Companion\companionres.dll
    O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~4\Office14\ONBttnIE.dll =>.Microsoft Corporation
    O9 - Extra button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~4\Office14\ONBTTN~1.dll =>.Microsoft Corporation
    ~ IE Extra Buttons: Scanned in 00mn 00s

    ---\\ Objets ActiveX (Downloaded Program Files)(O16)
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} ((no name)) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} ((no name)) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} ((no name)) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    ~ Objets ActiveX: Scanned in 00mn 00s

    ---\\ Modification Domaine/Adresses DNS (O17)
    O17 - HKLM\System\CCS\Services\Tcpip\..\{2B9F3634-CF9A-46BA-A218-3833E46C6B6C}: DhcpNameServer = 192.168.0.1
    O17 - HKLM\System\CCS\Services\Tcpip\..\{E6141240-563B-423E-A0AF-A82D8A15BA62}: DhcpNameServer = 192.168.42.129
    O17 - HKLM\System\CS1\Services\Tcpip\..\{2B9F3634-CF9A-46BA-A218-3833E46C6B6C}: DhcpNameServer = 192.168.0.1
    O17 - HKLM\System\CS1\Services\Tcpip\..\{E6141240-563B-423E-A0AF-A82D8A15BA62}: DhcpNameServer = 192.168.42.129
    O17 - HKLM\System\CS2\Services\Tcpip\..\{2B9F3634-CF9A-46BA-A218-3833E46C6B6C}: DhcpNameServer = 192.168.0.1
    O17 - HKLM\System\CS2\Services\Tcpip\..\{E6141240-563B-423E-A0AF-A82D8A15BA62}: DhcpNameServer = 192.168.42.129
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
    ~ Domain: Scanned in 00mn 00s

    ---\\ Protocole additionnel (O18)
    O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll =>.Microsoft Corporation
    O18 - Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll =>.Microsoft Corporation
    ~ Protocole Additionnel: Scanned in 00mn 00s

    ---\\ Tâches planifiées en automatique (O39)
    O39 - APT: - (..) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
    O39 - APT: - (..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001Core [1078]
    O39 - APT: - (..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001UA [1100]
    O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1052]
    O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1056]
    ~ Scheduled Task: 15 Legitimates Filtered in 00mn 02s

    ---\\ Logiciels installés (O42)
    O42 - Logiciel: BudgetExpress 3 - (...) [HKLM] -- {77E912CE-6396-45B8-90C0-DF402B3D7566}
    O42 - Logiciel: DVD Region+CSS Free 5.9.7.0 - (.Fengtao Software Inc..) [HKLM] -- DVD Region+CSS Free_is1
    O42 - Logiciel: MCEBrowser - (.ANPARK.) [HKLM] -- {79F41FC6-07F9-47C2-BBAC-37C7C70EE703}
    ~ Logic: 14 Legitimates Filtered in 00mn 00s

    ---\\ HKCU & HKLM Software Keys
    [HKCU\Software\DVD Region-Free]
    [HKCU\Software\Grapher]
    [HKCU\Software\IncrediMail]
    [HKCU\Software\SilicMobile]
    [HKCU\Software\WM Converter5]
    [HKLM\Software\Hybrid Basic]
    [HKLM\Software\Hybrid Synthesizers]
    [HKLM\Software\Nature]
    [HKLM\Software\SoftAssi]
    [HKLM\Software\Strawbuilt]
    ~ Key Software: 253 Legitimates Filtered in 00mn 00s

    ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
    O43 - CFD: 2012-09-30 - 16:49:32 - [] ----D C:\Program Files\ANPARK
    O43 - CFD: 2012-11-16 - 20:43:39 - [] ----D C:\Program Files\BudgetExpress 3
    O43 - CFD: 2011-04-22 - 13:09:17 - [] ----D C:\Program Files\DVD Region+CSS Free
    O43 - CFD: 2013-10-30 - 20:30:16 - [] ----D C:\ProgramData\InstallMate =>PUP.Tarma
    O43 - CFD: 2013-03-27 - 20:26:58 - [] ----D C:\ProgramData\Nature
    O43 - CFD: 2013-03-27 - 20:26:22 - [] ----D C:\ProgramData\Tables
    O43 - CFD: 2012-11-16 - 20:43:46 - [] ----D C:\Users\Lionel\AppData\Roaming\BudgetExpress 3
    ~ 463 Dossier CLSID vide (CLSID Empty Folder)
    ~ Program Folder: 671 Legitimates Filtered in 00mn 08s

    ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
    O44 - LFC:[MD5.BA790328B2EE2D9EF2194A897C9F6328] - 2014-07-27 - 14:14:14 ---A- . (...) -- C:\Windows\wininit.ini [1008]
    O44 - LFC:[MD5.0DC5AF80D059DEC792B665ED598C6567] - 2014-07-27 - 14:17:29 ---A- . (.SQLite Development Team - SQLite Dynamic Link Library (No TCL).) -- C:\Windows\System32\sqlite3.dll [536576]
    ~ Files: 8 Legitimates Filtered in 00mn 22s

    ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
    O46 - SEH:ShellExecuteHooks - DVDIdleShell Class - {93994DE8-8239-4655-B1D1-5F4E91300429} - C:\Program Files\DVD Region+CSS Free\DVDShell.dll
    ~ ShellExecuteHooks: Scanned in 00mn 00s

    ---\\ Clé de registre Shell MountPoints2 (MPKS) (O51)
    O51 - MPSK:{f113fc89-9129-11e0-a8c8-00219b089077}\AutoRun\command. (...) -- F:\Startme.exe (.not file.)
    ~ Keys: Scanned in 00mn 00s

    ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
    O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0
    O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
    O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0
    O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
    ~ MWPS: 16 Legitimates Filtered in 00mn 00s

    ---\\ Liste des pilotes du système (SDL) (O58)
    O58 - SDL:2014-07-04 - 10:39:50 ---A- . (...) -- C:\Windows\System32\Drivers\aswHwid.sys [24184] =>.ALWIL Software
    O58 - SDL:2014-07-04 - 10:39:50 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys [49944] =>.ALWIL Software
    O58 - SDL:2014-07-04 - 10:39:50 ---A- . (...) -- C:\Windows\System32\Drivers\aswVmm.sys [192352] =>.ALWIL Software
    O58 - SDL:2009-07-13 - 20:20:28 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [453712]
    O58 - SDL:2009-07-13 - 17:54:14 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [26624]
    O58 - SDL:2014-01-22 - 08:52:12 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudbus.sys [88576]
    O58 - SDL:2014-01-22 - 08:52:12 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudmdm.sys [184192]
    O58 - SDL:2009-07-13 - 20:19:04 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [21072]
    O58 - SDL:2012-12-13 - 13:50:38 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\Drivers\usbaapl.sys [45056]
    O58 - SDL:2009-07-13 - 16:40:41 ---A- . (...) -- C:\Windows\System32\ANSI.SYS [9029]
    O58 - SDL:2009-07-13 - 16:40:44 ---A- . (...) -- C:\Windows\System32\country.sys [27097]
    O58 - SDL:2009-07-13 - 16:40:40 ---A- . (...) -- C:\Windows\System32\HIMEM.SYS [4768]
    O58 - SDL:2009-07-13 - 16:40:43 ---A- . (...) -- C:\Windows\System32\KEY01.SYS [42809]
    O58 - SDL:2009-07-13 - 16:40:43 ---A- . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537]
    O58 - SDL:2009-07-13 - 16:40:23 ---A- . (...) -- C:\Windows\System32\NTDOS.SYS [27866]
    O58 - SDL:2009-07-13 - 16:40:31 ---A- . (...) -- C:\Windows\System32\NTDOS404.SYS [29146]
    O58 - SDL:2009-07-13 - 16:40:35 ---A- . (...) -- C:\Windows\System32\NTDOS411.SYS [29370]
    O58 - SDL:2009-07-13 - 16:40:39 ---A- . (...) -- C:\Windows\System32\NTDOS412.SYS [29274]
    O58 - SDL:2009-07-13 - 16:40:27 ---A- . (...) -- C:\Windows\System32\NTDOS804.SYS [29146]
    O58 - SDL:2009-07-13 - 16:40:11 ---A- . (...) -- C:\Windows\System32\NTIO.SYS [33952]
    O58 - SDL:2009-07-13 - 16:40:15 ---A- . (...) -- C:\Windows\System32\NTIO404.SYS [34672]
    O58 - SDL:2009-07-13 - 16:40:17 ---A- . (...) -- C:\Windows\System32\NTIO411.SYS [35776]
    O58 - SDL:2009-07-13 - 16:40:19 ---A- . (...) -- C:\Windows\System32\NTIO412.SYS [35536]
    O58 - SDL:2009-07-13 - 16:40:13 ---A- . (...) -- C:\Windows\System32\NTIO804.SYS [34672]
    ~ Drivers: 80 Legitimates Filtered in 00mn 01s

    ---\\ Liste des outils de désinfection (LATC) (O63)
    O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
    ~ ADS: Scanned in 00mn 00s

    ---\\ Liste les services legacy du registre (LALS) (O64)
    O64 - Services: CurCS - 2014-07-04 - C:\Windows\system32\drivers\aswHwid.sys (aswHwid) .(...) - LEGACY_ASWHWID
    ~ Legacy: 86 Legitimates Filtered in 00mn 00s

    ---\\ Menu de démarrage Internet (SMI) (O68)
    O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
    O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
    O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
    ~ Keys: Scanned in 00mn 00s

    ---\\ Liste des exceptions du parefeu (FirewallRules) (O87)
    O87 - FAEL: "{4DDC8055-18EB-4C75-B700-29B7F41118DA}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe =>P2P.BitTorrent
    O87 - FAEL: "{5CFCEB3E-26FC-4BB6-A0AD-EDE6E668FF0E}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe =>P2P.BitTorrent
    ~ Firewall: 2 Legitimates Filtered in 00mn 01s

    ---\\ Recherche de clés de registre Tracing (O100)
    HKLM\SOFTWARE\Microsoft\Tracing\1ClickDownloader_RASAPI32 =>PUP.1ClickDownloader
    HKLM\SOFTWARE\Microsoft\Tracing\1ClickDownloader_RASMANCS =>PUP.1ClickDownloader
    HKLM\SOFTWARE\Microsoft\Tracing\mediaget_RASAPI32 =>PUP.MediaGet
    HKLM\SOFTWARE\Microsoft\Tracing\mediaget_RASMANCS =>PUP.MediaGet
    HKLM\SOFTWARE\Microsoft\Tracing\questscan126_RASAPI32 =>Adware.QuestScan
    HKLM\SOFTWARE\Microsoft\Tracing\questscan126_RASMANCS =>Adware.QuestScan
    HKLM\SOFTWARE\Microsoft\Tracing\questscan127_RASAPI32 =>Adware.QuestScan
    HKLM\SOFTWARE\Microsoft\Tracing\questscan127_RASMANCS =>Adware.QuestScan
    HKLM\SOFTWARE\Microsoft\Tracing\utorrent_RASAPI32 =>P2P.µTorrent
    HKLM\SOFTWARE\Microsoft\Tracing\utorrent_RASMANCS =>P2P.µTorrent
    HKLM\SOFTWARE\Microsoft\Tracing\YontooSetup-S-0DF4_RASAPI32 =>Adware.Yontoo
    HKLM\SOFTWARE\Microsoft\Tracing\YontooSetup-S-0DF4_RASMANCS =>Adware.Yontoo
    HKLM\SOFTWARE\Microsoft\Tracing\YontooSetup-S-12CC_RASAPI32 =>Adware.Yontoo
    HKLM\SOFTWARE\Microsoft\Tracing\YontooSetup-S-12CC_RASMANCS =>Adware.Yontoo
    ~ BTK: 288 Legitimates Filtered in 00mn 00s

    ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
    SS - | Demand 2014-07-08 262320 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
    SS - | Auto 2013-12-25 116648 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
    SS - | Demand 2013-12-25 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
    SS - | Demand 2005-04-03 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    SS - | Demand 2014-06-17 119408 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
    SS - | Auto 2013-10-23 172192 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe
    SR - | Auto 2013-12-18 65432 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
    SR - | Auto 2009-08-18 176128 | (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
    SR - | Auto 2014-01-07 43336 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    SR - | Auto 2014-07-04 50344 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    SR - | Auto 2011-08-30 390504 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
    SR - | Demand 2014-01-20 553288 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
    SR - | Auto 2014-06-05 93040 | (TomTomHOMEService) . (.TomTom.) - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
    SR - | Auto 2009-07-13 20992 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
    SR - | Auto 2009-07-13 20992 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
    ~ Services: Scanned in 00mn 09s

    ---\\ Scan Additionnel (O88)
    Database Version : 13026 - (2014-07-27)
    Clés trouvées (Keys found) : 2
    Valeurs trouvées (Values found) : 0
    Dossiers trouvés (Folders found) : 1
    Fichiers trouvés (Files found) : 0

    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094] =>PUP.SweetIM^
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536] =>PUP.SweetIM^
    C:\ProgramData\InstallMate =>PUP.Tarma^
    ~ Additionnel Scan: 317120 Items scanned in 00mn 35s

    ---\\ Informations complémentaires sur les modules
    ~ https://nicolascoolman.eu =>.Internet Explorer, Proxy Management (R5)
    ~ https://nicolascoolman.eu =>.Applications lancées au démarrage du système (O4)
    ~ https://nicolascoolman.eu =>.Clé de registre Shell MountPoints2 (MPKS) (O51)
    ~ AMI: 3 Legitimates Filtered in 00mn 00s

    ---\\ Récapitulatif des détections trouvées sur votre station
    https://nicolascoolman.eu =>PUP.Babylon
    https://nicolascoolman.eu =>PUP.Tarma
    https://nicolascoolman.eu =>PUP.1ClickDownloader
    https://nicolascoolman.eu =>PUP.MediaGet
    https://nicolascoolman.eu =>Adware.QuestScan
    https://nicolascoolman.eu =>Adware.Yontoo
    https://nicolascoolman.eu =>PUP.SweetIM
    ~ MSI: 7 link(s) detected in 00mn 00s

    ~ 1253 Legitimates filtered by white list
    End of the scan (456 lines in 02mn 09s)(0)
    0
  10. lilidurhone Messages postés 800 Date d'inscription   Statut Contributeur sécurité Dernière intervention   3 818
     
    Recommence
    Clic sur complet et héberge le sur cjoint
    0
  11. lion72 Messages postés 260 Statut Membre 2
     
    le complet

    ~ Rapport de ZHPDiag v2014.7.27.109 - Nicolas Coolman (2014-07-27)
    ~ Lancé par Lionel (2014-07-27 15:57:34)
    ~ Adresse du Site Web https://nicolascoolman.eu
    ~ Adresse du Forum https://nicolascoolman.eu
    ~ Traduit par Nicolas Coolman
    ~ Etat de la version : Version à jour.
    ~ Liste blanche : Désactivée par l'utilisateur
    ~ Elévation des Privilèges : OK
    ~ User Account Control (UAC): Deactivate by user

    ---\\ Navigateurs Internet
    MSIE: Internet Explorer v11.0.9600.17207
    MFIE: Mozilla Firefox 30.0 (Defaut)
    GCIE: Google Chrome v36.0.1985.125

    ---\\ Informations sur les produits Windows
    ~ Langage: Français
    Windows 7 Professional, 32-bit Service Pack 1 (Build 7601)
    Windows Server License Manager Script : OK
    ~ Windows Operating System - Windows(R) 7, RETAIL channel
    Windows ID Activation : OK
    ~ Windows Partial Key : 72CBH
    Windows License : OK
    ~ Windows Remaining Initializations Number : 4
    Software Protection Service (Protection logicielle) : OK
    Windows Automatic Updates : OK
    Windows Activation Technologies : OK

    ---\\ Logiciels de protection du système
    avast! Free Antivirus v9.0.2021
    Windows Defender W7 (Activate)

    ---\\ Logiciels d'optimisation du système
    CCleaner v3.05

    ---\\ Logiciels de partage PeerToPeer
    µTorrent v3.3.0.29625 =>P2P.µTorrent

    ---\\ Surveillance de Logiciels
    Adobe Flash Player 14 Plugin
    Adobe Reader X
    Java 7 Update 25

    ---\\ Informations sur le système
    ~ Processor: x86 Family 6 Model 23 Stepping 7, GenuineIntel
    ~ Operating System: 32 Bits
    Boot mode: Normal (Normal boot)
    Total RAM: 3326 MB (66% free)
    System Restore: Activé (Enable)
    System drive C: has 67 GB (11%) free of 596 GB

    ---\\ Mode de connexion au système
    ~ Computer Name: LIONEL-PC
    ~ User Name: Lionel
    ~ All Users Names: Mcx1-LIONEL-PC, Lionel, HomeGroupUser$, Administrateur,
    ~ Unselected Option: None
    Logged in as Administrator

    ---\\ Variables d'environnement
    ~ System Unit : C:\
    ~ %AppZHP% : C:\Users\Lionel\AppData\Roaming\ZHP\
    ~ %AppData% : C:\Users\Lionel\AppData\Roaming\
    ~ %Desktop% : C:\Users\Lionel\Desktop\
    ~ %Favorites% : C:\Users\Lionel\Favorites\
    ~ %LocalAppData% : C:\Users\Lionel\AppData\Local\
    ~ %StartMenu% : C:\Users\Lionel\AppData\Roaming\Microsoft\Windows\Start Menu\
    ~ %Windir% : C:\Windows\
    ~ %System% : C:\Windows\System32\

    ---\\ Enumération des unités disques
    C: Hard drive, Flash drive, Thumb drive (Free 67 Go of 596 Go)
    D: CD-ROM drive (Not Inserted)
    E: CD-ROM drive (Not Inserted)

    ---\\ Etat du Centre de Sécurité Windows
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
    [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyGames: Modified
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
    [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
    [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
    [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
    ~ Security Center: 43 Scanned in 00mn 00s

    ---\\ Recherche particulière de fichiers génériques
    [MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - (.Microsoft Corporation - Explorateur Windows.) (.2011-02-25 - 00:30:54.) -- C:\Windows\Explorer.exe [2616320]
    [MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.2009-07-13 - 20:14:45.) -- C:\Windows\System32\Wininit.exe [96256]
    [MD5.CCC198257901BEEA2FBF8EB1E7678356] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.2014-06-18 - 17:13:59.) -- C:\Windows\System32\wininet.dll [1791488]
    [MD5.998507B046BA314CE8245364C686FA67] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.2014-03-04 - 04:17:02.) -- C:\Windows\System32\Winlogon.exe [304128]
    [MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Bibliothèque de licences.) (.2010-11-20 - 07:21:24.) -- C:\Windows\System32\sppcomapi.dll [193536]
    [MD5.D0B388DA1D111A34366E04EB4A5DD156] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.2014-05-30 - 01:36:07.) -- C:\Windows\system32\Drivers\AFD.sys [338944]
    [MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.2009-07-13 - 20:26:15.) -- C:\Windows\system32\Drivers\atapi.sys [21584]
    [MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.2009-07-13 - 18:11:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [70656]
    [MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.2010-11-20 - 03:38:10.) -- C:\Windows\system32\Drivers\Cdrom.sys [108544]
    [MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.2010-11-20 - 03:42:32.) -- C:\Windows\system32\Drivers\DfsC.sys [78336]
    [MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.2010-11-20 - 04:59:29.) -- C:\Windows\system32\Drivers\HDAudBus.sys [108544]
    [MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) (.2009-07-13 - 18:11:24.) -- C:\Windows\system32\Drivers\i8042prt.sys [80896]
    [MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.2009-07-13 - 18:54:29.) -- C:\Windows\system32\Drivers\IpNat.sys [101888]
    [MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.2011-04-26 - 21:17:22.) -- C:\Windows\system32\Drivers\MRxSmb.sys [123904]
    [MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) (.2010-11-20 - 03:39:44.) -- C:\Windows\system32\Drivers\netBT.sys [187904]
    [MD5.C8DFF8D07755A66C7A4A738930F0FEAC] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.2014-01-23 - 21:18:22.) -- C:\Windows\system32\Drivers\ntfs.sys [1212352]
    [MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parallèle.) (.2009-07-13 - 18:45:35.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
    [MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.2009-07-13 - 18:54:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [78848]
    [MD5.B973FCFC50DC1434E1970A146F7E3885] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.2010-11-20 - 05:24:46.) -- C:\Windows\system32\Drivers\rdpdr.sys [133632]
    [MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.2009-07-13 - 18:53:41.) -- C:\Windows\system32\Drivers\smb.sys [71168]
    [MD5.B459575348C20E8121D6039DA063C704] - (.Microsoft Corporation - TDI Translation Driver.) (.2010-11-20 - 03:39:17.) -- C:\Windows\system32\Drivers\tdx.sys [74752]
    [MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.2010-11-20 - 07:30:16.) -- C:\Windows\system32\Drivers\volsnap.sys [245632]
    ~ Generic Processes: Scanned in 00mn 00s

    ---\\ Etat des fichiers cachés (Caché/Total)
    ~ Mes images (My Pictures) : 3/5621
    ~ Mes musiques (My Musics) : 1/15038
    ~ Mes Videos (My Videos) : 1/208
    ~ Mes Favoris (My Favorites) : 1/34
    ~ Mes Documents (My Documents) : 2/4538
    ~ Mon Bureau (My Desktop) : 3/508
    ~ Menu demarrer (Programs) : 1/64
    ~ Hidden Files: Scanned in 00mn 09s

    ---\\ Processus lancés
    [MD5.17186248C75E9A8227750726E1DFF4FD] - (.Microsoft Corporation - Microsoft LifeCam VX6000 Device Application.) -- C:\Windows\vVX6000.exe [764784] [PID.3752]
    [MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816] [PID.2720]
    [MD5.26AFC1F16494FFE66F2197153B342A27] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4086432] [PID.2924]
    [MD5.085BE68B52CE5A5FA4621507AD518CF3] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [152392] [PID.3564]
    [MD5.A0251ED3ABBA7ACC84416738C8282ACA] - (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311616] [PID.3664]
    [MD5.F5ED26AB8BDD951BFAC8BBD0D68BA3E9] - (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\Kies.exe [1564992] [PID.4012]
    [MD5.F43247CCDD1EA5EA4F60393CF157157B] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [21442176] [PID.2936]
    [MD5.3C8989CF2B59228785F16B3EB547F58C] - (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [248176] [PID.3136]
    [MD5.0DA8636ACBF55A4CA6350FEA7D789828] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8082432] [PID.5540]
    [MD5.B1E01D636350983E94171E229C759468] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [275568] [PID.1096]
    ~ Processes Running: Scanned in 00mn 00s

    ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
    C:\Users\Lionel\AppData\Local\Google\Chrome\User Data\Default\Preferences
    G1 - GCS: Preference [User Data\Default] http://search.babylon.com =>PUP.Babylon

    ---\\ Liste des dossiers d'extension Google Chrome
    ~ Google Lines Browser: 1 Scanned in 00mn 03s

    ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
    C:\Users\Lionel\AppData\Roaming\Mozilla\Firefox\Profiles\o50aw18z.default\prefs.js
    M0 - MFSP: prefs.js [Lionel - o50aw18z.default] https://www.google.ca/?gws_rd=ssl
    M2 - MFEP: prefs.js [Lionel - o50aw18z.default\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}] [dwhelper] DownloadHelper v4.9.22 (..)
    P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.10.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
    P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll
    P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll
    P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll
    P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll
    P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll
    P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll
    P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 12.0.) -- C:\Windows\system32\Adobe\Director\np32dsw_1200112.dll
    P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
    P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll =>.Google Inc
    P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.30514.0.) -- c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll
    P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\Program Files\Microsoft Office\Office14\NPAUTHZ.dll
    P2 - FPN: [HKLM] [@microsoft.com/SharePoint,version=14.0] - (.Microsoft Corporation - The plug-in allows you to open and edit files using Microsoft Office a.) -- C:\Program Files\Microsoft Office\Office14\NPSPWRAP.dll
    P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
    P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
    P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.10.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
    P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (...) -- C:\Users\Lionel\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (.not file.)
    ~ Firefox Browser: 25 Scanned in 00mn 00s

    ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
    R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
    R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
    R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
    R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
    R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
    R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
    R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
    R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
    R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
    R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (...) (No version) -- (.not file.)
    R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
    ~ IE Browser: 11 Scanned in 00mn 00s

    ---\\ Internet Explorer, Proxy Management (R5)
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
    ~ Proxy management: Scanned in 00mn 00s

    ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
    F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
    F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
    F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
    ~ Keys: Scanned in 00mn 00s

    ---\\ Hosts file redirection (O1)
    ~ Le fichier hosts est sain (The hosts file is clean).
    ~ Hosts File: Scanned in 00mn 00s
    ~ Nombre de lignes (Lines number): 21

    ---\\ Browser Helper Objects de navigateur (O2)
    O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
    O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files\Windows Live\Companion\companioncore.dll
    O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files\Microsoft Office\Office14\URLREDIR.dll
    ~ BHO: 16 Scanned in 00mn 00s

    ---\\ Applications lancées au démarrage du système (O4)
    O4 - HKLM\..\Run: [VX6000] . (.Microsoft Corporation - Microsoft LifeCam VX6000 Device Application.) -- C:\Windows\vVX6000.exe
    O4 - HKLM\..\Run: [LifeCam] . (.Microsoft Corporation - LifeExp.exe.) -- C:\Program Files\Microsoft LifeCam\LifeExp.exe
    O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
    O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
    O4 - HKLM\..\Run: [Nikon Message Center 2] . (.Nikon Corporation - Nikon Message Center 2.) -- C:\Program Files\Nikon\Nikon Message Center 2\NkMC2.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation
    O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
    O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
    O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
    O4 - HKLM\..\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe =>.Samsung Electronics Co
    O4 - HKCU\..\Run: [Facebook Update] C:\Users\Lionel\AppData\Local\Facebook\Update\FacebookUpdate.exe (.not file.)
    O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
    O4 - HKCU\..\Run: [KiesPreload] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\Kies.exe
    O4 - HKCU\..\Run: [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe (.not file.)
    O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
    O4 - HKCU\..\Run: [TomTomHOME.exe] . (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
    O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
    O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
    O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [Facebook Update] C:\Users\Lionel\AppData\Local\Facebook\Update\FacebookUpdate.exe (.not file.)
    O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
    O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [KiesPreload] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\Kies.exe
    O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe (.not file.)
    O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
    O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [TomTomHOME.exe] . (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
    ~ Application: Scanned in 00mn 00s

    ---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
    O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
    ~ IE Control Panel: 1 Scanned in 00mn 00s

    ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
    O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} . (.Microsoft Corporation - Windows Live Messenger Companion core resources.) -- C:\Program Files\Windows Live\Companion\companionres.dll
    O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~4\Office14\ONBttnIE.dll =>.Microsoft Corporation
    O9 - Extra button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~4\Office14\ONBTTN~1.dll =>.Microsoft Corporation
    ~ IE Extra Buttons: Scanned in 00mn 00s

    ---\\ Winsock hijacker (Layered Service Provider) (O10)
    O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
    O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
    O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
    O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
    O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =>.Microsoft Corporation
    O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
    O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation
    O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation
    O10 - WLSP:\000000000009\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll
    ~ Winsock: 9 Scanned in 00mn 00s

    ---\\ Objets ActiveX (Downloaded Program Files)(O16)
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} ((no name)) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} ((no name)) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} ((no name)) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    ~ Objets ActiveX: Scanned in 00mn 00s

    ---\\ Modification Domaine/Adresses DNS (O17)
    O17 - HKLM\System\CCS\Services\Tcpip\..\{2B9F3634-CF9A-46BA-A218-3833E46C6B6C}: DhcpNameServer = 192.168.0.1
    O17 - HKLM\System\CCS\Services\Tcpip\..\{E6141240-563B-423E-A0AF-A82D8A15BA62}: DhcpNameServer = 192.168.42.129
    O17 - HKLM\System\CS1\Services\Tcpip\..\{2B9F3634-CF9A-46BA-A218-3833E46C6B6C}: DhcpNameServer = 192.168.0.1
    O17 - HKLM\System\CS1\Services\Tcpip\..\{E6141240-563B-423E-A0AF-A82D8A15BA62}: DhcpNameServer = 192.168.42.129
    O17 - HKLM\System\CS2\Services\Tcpip\..\{2B9F3634-CF9A-46BA-A218-3833E46C6B6C}: DhcpNameServer = 192.168.0.1
    O17 - HKLM\System\CS2\Services\Tcpip\..\{E6141240-563B-423E-A0AF-A82D8A15BA62}: DhcpNameServer = 192.168.42.129
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
    ~ Domain: Scanned in 00mn 00s

    ---\\ Protocole additionnel (O18)
    O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll =>.Microsoft Corporation
    O18 - Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll =>.Microsoft Corporation
    ~ Protocole Additionnel: Scanned in 00mn 00s

    ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
    O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
    ~ SSODL: 1 Scanned in 00mn 00s

    ---\\ Liste des services NT non Microsoft et non désactivés (O23)
    O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
    O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe
    O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - YSLoader.exe.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc
    O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe
    O23 - Service: TomTomHOMEService (TomTomHOMEService) . (.TomTom - Windows Service for TomTom HOME.) - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
    ~ Services: 8 Scanned in 00mn 04s

    ---\\ Enumération Active Desktop & MHTML Editor (O24)
    O24 - Default MHTML Editor: Last - .(...) - (.not file.)
    ~ Desktop Component: 4 Scanned in 00mn 00s

    ---\\ Enumère les données de BootExecute (BEX) (O34)
    O34 - HKLM BootExecute: (autocheck autochk *) - File not found
    ~ BEX: 1 Scanned in 00mn 00s

    ---\\ Tâches planifiées en automatique (O39)
    [MD5.A6B6AB9502B63F43A9A56AE6AFB22078] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [262320]
    [MD5.1AD8512A5C40AD1A0558498D8E0AC2AA] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [808448]
    [MD5.00000000000000000000000000000000] [APT] [FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001Core] (...) -- C:\Users\Lionel\AppData\Local\Facebook\Update\FacebookUpdate.exe (.not file.) [0]
    [MD5.00000000000000000000000000000000] [APT] [FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001UA] (...) -- C:\Users\Lionel\AppData\Local\Facebook\Update\FacebookUpdate.exe (.not file.) [0]
    [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648]
    [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648]
    [MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [561984]
    O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
    O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
    O39 - APT: FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001Core - (...) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001Core.job [1078]
    O39 - APT: FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001Core - (...) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001Core [1078]
    O39 - APT: FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001UA - (...) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001UA.job [1100]
    O39 - APT: FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001UA - (...) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001UA [1100]
    O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1052]
    O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1052]
    O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1056]
    O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1056]
    ~ Scheduled Task: 30 Scanned in 00mn 02s

    ---\\ Composants installés (ActiveSetup Installed Components) (O40)
    O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
    O40 - ASIC: Microsoft Windows Media Player 12.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll =>.Microsoft Corporation
    O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
    O40 - ASIC: Internet Explorer - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe =>.Microsoft Corporation
    O40 - ASIC: Microsoft Windows - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe =>.Microsoft Corporation
    O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
    O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
    O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
    O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
    O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
    O40 - ASIC: Google Chrome - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google Inc. - Google Chrome Installer.) -- C:\Program Files\Google\Chrome\Application\36.0.1985.125\Installer\chrmstp.exe
    ~ Active Setup: 11 Scanned in 00mn 00s

    ---\\ Pilotes lancés au démarrage du système (O41)
    O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
    O41 - Driver: (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\drivers\aswRdr2.sys
    O41 - Driver: (aswSnx) . (.AVAST Software - avast! Virtualization Driver.) - C:\Windows\system32\drivers\aswSnx.sys
    O41 - Driver: (aswSP) . (.AVAST Software - avast! self protection module.) - C:\Windows\system32\drivers\aswSP.sys
    O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
    O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
    O41 - Driver: C:\Windows\System32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys
    O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
    O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
    O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
    O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
    O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
    O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
    O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
    O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
    O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
    O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
    O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
    O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
    O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
    O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
    O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
    O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
    ~ Drivers: 69 Scanned in 00mn 00s

    ---\\ Logiciels installés (O42)
    O42 - Logiciel: Adobe Flash Player 14 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
    O42 - Logiciel: Adobe Flash Player 14 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
    O42 - Logiciel: Adobe Reader X (10.1.10) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
    O42 - Logiciel: Adobe Shockwave Player 12.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
    O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {A922C4B7-50E0-4787-A94C-59DBF3C65DBE}
    O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {10E3A6DD-84D8-4D8A-BB11-5E5314BCA7FD}
    O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} =>.Apple Inc
    O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B}
    O42 - Logiciel: BudgetExpress 3 - (...) [HKLM] -- {77E912CE-6396-45B8-90C0-DF402B3D7566}
    O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
    O42 - Logiciel: CDex - Open Source Digital Audio CD Extractor - (.Georgy Berdyshev.) [HKLM] -- CDex
    O42 - Logiciel: Canon MOV Decoder - (.Canon Inc..) [HKLM] -- Canon MOV Decoder
    O42 - Logiciel: Canon MOV Encoder - (.Canon Inc..) [HKLM] -- Canon MOV Encoder
    O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}
    O42 - Logiciel: ConvertHelper 2.2 - (.DownloadHelper.) [HKLM] -- {27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1
    O42 - Logiciel: ConvertXtoDVD 4.1.16.360 - (...) [HKLM] -- {DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1
    O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
    O42 - Logiciel: DVD Region+CSS Free 5.9.7.0 - (.Fengtao Software Inc..) [HKLM] -- DVD Region+CSS Free_is1
    O42 - Logiciel: DVD Shrink 3.2 - (.DVD Shrink.) [HKLM] -- DVD Shrink_is1
    O42 - Logiciel: Facebook Video Calling 1.2.0.159 - (.Skype Limited.) [HKLM] -- {7CAC6A44-C3DE-4153-ACA6-7524602C789E}
    O42 - Logiciel: Garfield K Nombres - (...) [HKLM] -- {C744A1E6-86AF-4A16-B9BC-9921BE00CD8F}
    O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
    O42 - Logiciel: Google Earth Plug-in - (.Google.) [HKLM] -- {4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E} =>.Google Inc
    O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
    O42 - Logiciel: IZArc 4.1.6 - (.Ivan Zahariev.) [HKLM] -- {97C82B44-D408-4F14-9252-47FC1636D23E}_is1
    O42 - Logiciel: Java 7 Update 25 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217025FF}
    O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
    O42 - Logiciel: K-Lite Codec Pack 8.7.0 (Full) - (...) [HKLM] -- KLiteCodecPack_is1
    O42 - Logiciel: MCEBrowser - (.ANPARK.) [HKLM] -- {79F41FC6-07F9-47C2-BBAC-37C7C70EE703}
    O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
    O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
    O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
    O42 - Logiciel: Mega_pack_la_Quebecoise_by_toto740 0.0 - (.Toto740 / TomTomHeaven.) [HKLM] -- Mega_pack_la_Quebecoise_by_toto740_is1
    O42 - Logiciel: MiPony 2.0.2 - (...) [HKLM] -- MiPony
    O42 - Logiciel: Microsoft Corporation - (.Microsoft Corporation.) [HKLM] -- {B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800}
    O42 - Logiciel: Microsoft LifeCam - (.Microsoft Corporation.) [HKLM] -- {5FC7AB5C-61FC-42DF-A923-5139BCF10D42}
    O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
    O42 - Logiciel: Mozilla Firefox 30.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 30.0 (x86 fr)
    O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
    O42 - Logiciel: MyFreeCodec - (...) [HKCU] -- MyFreeCodec
    O42 - Logiciel: Nero 7 Ultra Edition - (.Nero AG.) [HKLM] -- {F9469799-696F-427D-B314-79E7AA681033}
    O42 - Logiciel: Nikon Message Center 2 - (.Nikon.) [HKLM] -- {B014EE44-9197-4513-9613-71E6EB1B514E}
    O42 - Logiciel: OpenOffice.org 3.4 - (.OpenOffice.org.) [HKLM] -- {2F90A789-DD1E-41CE-BFCA-BD78213BABC7}
    O42 - Logiciel: PhotoFiltre - (...) [HKCU] -- PhotoFiltre
    O42 - Logiciel: Picture Control Utility - (.Nikon.) [HKLM] -- {87441A59-5E64-4096-A170-14EFE67200C3}
    O42 - Logiciel: PlayStation(R)Network Downloader - (.Sony Computer Entertainment Inc..) [HKLM] -- {B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}
    O42 - Logiciel: PlayStation(R)Store - (.Sony Computer Entertainment Inc..) [HKLM] -- {0E532C84-4275-41B3-9D81-D4A1A20D8EE7}
    O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {B67BAFBA-4C9F-48FA-9496-933E3B255044}
    O42 - Logiciel: SAMSUNG USB Driver for Mobile Phones - (.SAMSUNG Electronics Co., Ltd..) [HKLM] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44}
    O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- InstallShield_{758C8301-2696-4855-AF45-534B1200980A}
    O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- {758C8301-2696-4855-AF45-534B1200980A}
    O42 - Logiciel: Skype(TM) 6.16 - (.Skype Technologies S.A..) [HKLM] -- {7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}
    O42 - Logiciel: Stellarium 0.10.4 - (...) [HKLM] -- Stellarium_is1
    O42 - Logiciel: TomTom HOME - (.Nom de votre société.) [HKLM] -- {7A2BB1C8-903D-4585-9F3B-CADD67D07D37}
    O42 - Logiciel: TomTom HOME Visual Studio Merge Modules - (.TomTom International B.V..) [HKLM] -- {8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}
    O42 - Logiciel: VLC media player 1.1.11 - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN
    O42 - Logiciel: ViewNX 2 - (.Nikon.) [HKLM] -- {E64C137C-D0B7-467A-B47F-460AAB30F0A3}
    O42 - Logiciel: VirtualDJ Home FREE - (.Atomix Productions.) [HKLM] -- {19192A84-6172-4312-A661-D8F9A34585AB}
    O42 - Logiciel: WM Recorder - (.AllAlex, Inc.) [HKLM] -- WM Recorder14.12
    O42 - Logiciel: avast! Free Antivirus v9.0.2021 - (.AVAST Software.) [HKLM] -- avast
    O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {616445AF-BBCF-41C1-A4D6-8CFF171C182D}
    O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726}
    O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU] -- uTorrent =>P2P.BitTorrent
    O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKLM] -- uTorrent =>P2P.BitTorrent
    ~ Logic: 46 Scanned in 00mn 00s

    ---\\ HKCU & HKLM Software Keys
    [HKCU\Software\ASProtect]
    [HKCU\Software\AVAST Software]
    [HKCU\Software\Adobe]
    [HKCU\Software\Ahead]
    [HKCU\Software\AnvSoft]
    [HKCU\Software\AppDataLow\Software\Adobe]
    [HKCU\Software\AppDataLow\Software\JavaSoft]
    [HKCU\Software\AppDataLow]
    [HKCU\Software\Apple Computer, Inc.]
    [HKCU\Software\Apple Inc.]
    [HKCU\Software\ArcSoft]
    [HKCU\Software\Audacity]
    [HKCU\Software\BVRP Software]
    [HKCU\Software\BitTorrent] =>P2P.BitTorrent
    [HKCU\Software\CDDB]
    [HKCU\Software\CISRA]
    [HKCU\Software\Canon]
    [HKCU\Software\Canon_Inc_IC]
    [HKCU\Software\Classes]
    [HKCU\Software\Clients]
    [HKCU\Software\DVD Region-Free]
    [HKCU\Software\DVD Shrink]
    [HKCU\Software\GNU]
    [HKCU\Software\Gabest]
    [HKCU\Software\Google]
    [HKCU\Software\Grapher]
    [HKCU\Software\Guitars]
    [HKCU\Software\Haali]
    [HKCU\Software\Help]
    [HKCU\Software\IM Providers]
    [HKCU\Software\IZSoftware]
    [HKCU\Software\Icaros]
    [HKCU\Software\IncrediMail]
    [HKCU\Software\JEDI-VCL]
    [HKCU\Software\JavaSoft]
    [HKCU\Software\LAV]
    [HKCU\Software\LDM]
    [HKCU\Software\Logs]
    [HKCU\Software\Macromedia]
    [HKCU\Software\MainConcept (Nikon)]
    [HKCU\Software\Malwarebytes' Anti-Malware]
    [HKCU\Software\MarineCat]
    [HKCU\Software\MediaInfo]
    [HKCU\Software\Mediachance]
    [HKCU\Software\MouseIndustries]
    [HKCU\Software\MozillaPlugins]
    [HKCU\Software\Mozilla]
    [HKCU\Software\Netscape]
    [HKCU\Software\Nikon]
    [HKCU\Software\ODBC]
    [HKCU\Software\OpenOffice.org]
    [HKCU\Software\Piriform]
    [HKCU\Software\Policies]
    [HKCU\Software\Safer Networking Limited]
    [HKCU\Software\Samsung]
    [HKCU\Software\SilicMobile]
    [HKCU\Software\SkypeRS]
    [HKCU\Software\Skype]
    [HKCU\Software\SoftVTU]
    [HKCU\Software\Sony Ericsson]
    [HKCU\Software\TeamViewer]
    [HKCU\Software\Techlogg.com ToneShop]
    [HKCU\Software\TeleCharger]
    [HKCU\Software\TomTom]
    [HKCU\Software\Trolltech]
    [HKCU\Software\VB and VBA Program Settings]
    [HKCU\Software\VSO]
    [HKCU\Software\VirtualDJ]
    [HKCU\Software\WM Converter5]
    [HKCU\Software\WebApp]
    [HKCU\Software\Winamp]
    [HKCU\Software\kde.org]
    [HKCU\Software\madFlac]
    [HKCU\Software\madshi]
    [HKCU\Software\yahoo]
    [HKLM\Software\AMD]
    [HKLM\Software\ATI Technologies]
    [HKLM\Software\AVAST Software]
    [HKLM\Software\Adobe]
    [HKLM\Software\AdwCleaner]
    [HKLM\Software\AppDataLow]
    [HKLM\Software\Apple Computer, Inc.]
    [HKLM\Software\Apple Inc.]
    [HKLM\Software\ArcSoft]
    [HKLM\Software\Canon]
    [HKLM\Software\Canon_Inc_IC]
    [HKLM\Software\Classes]
    [HKLM\Software\Clients]
    [HKLM\Software\DelFix]
    [HKLM\Software\DownloadHelper]
    [HKLM\Software\Fengtao Software]
    [HKLM\Software\GEAR Software]
    [HKLM\Software\GNU]
    [HKLM\Software\Google]
    [HKLM\Software\HaaliMkx]
    [HKLM\Software\Hewlett-Packard]
    [HKLM\Software\Hybrid Basic]
    [HKLM\Software\Hybrid Synthesizers]
    [HKLM\Software\IM Providers]
    [HKLM\Software\Image Manipulation]
    [HKLM\Software\InstallShield]
    [HKLM\Software\Intel]
    [HKLM\Software\JavaSoft]
    [HKLM\Software\JreMetrics]
    [HKLM\Software\KLCodecPack]
    [HKLM\Software\LAV]
    [HKLM\Software\LDM]
    [HKLM\Software\Macromedia]
    [HKLM\Software\Maestro Learning]
    [HKLM\Software\Malwarebytes' Anti-Malware]
    [HKLM\Software\MozillaPlugins]
    [HKLM\Software\Mozilla]
    [HKLM\Software\Nature]
    [HKLM\Software\Nero]
    [HKLM\Software\Nikon]
    [HKLM\Software\ODBC]
    [HKLM\Software\OpenOffice.org]
    [HKLM\Software\Piriform]
    [HKLM\Software\Policies]
    [HKLM\Software\RegisteredApplications]
    [HKLM\Software\SAMSUNG]
    [HKLM\Software\Safer Networking Limited]
    [HKLM\Software\Skype]
    [HKLM\Software\SoftAssi]
    [HKLM\Software\Sonic]
    [HKLM\Software\Sony Corporation]
    [HKLM\Software\Sony]
    [HKLM\Software\Strawbuilt]
    [HKLM\Software\TeamViewer]
    [HKLM\Software\TomTom]
    [HKLM\Software\VSO]
    [HKLM\Software\VideoLAN]
    [HKLM\Software\VirtualDJ]
    [HKLM\Software\Windows]
    [HKLM\Software\Wow6432Node]
    [HKLM\Software\Yahoo]
    [HKLM\Software\ahead]
    [HKLM\Software\intellidownload]
    [HKLM\Software\lameme]
    [HKLM\Software\mozilla.org]
    ~ Key Software: 253 Scanned in 00mn 00s

    ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
    O43 - CFD: 2012-10-09 - 12:14:45 - [0] ----D C:\Program Files\7-Zip
    O43 - CFD: 2011-06-17 - 08:54:11 - [] ----D C:\Program Files\Adobe
    O43 - CFD: 2012-09-30 - 16:49:32 - [] ----D C:\Program Files\ANPARK
    O43 - CFD: 2013-02-16 - 18:05:02 - [] ----D C:\Program Files\Apple Software Update =>.Apple Inc
    O43 - CFD: 2011-04-19 - 09:42:21 - [] ----D C:\Program Files\AVAST Software
    O43 - CFD: 2013-02-16 - 18:11:02 - [] ----D C:\Program Files\Bonjour
    O43 - CFD: 2012-11-16 - 20:43:39 - [] ----D C:\Program Files\BudgetExpress 3
    O43 - CFD: 2011-08-07 - 13:30:29 - [] ----D C:\Program Files\Canon
    O43 - CFD: 2011-04-22 - 07:41:20 - [] ----D C:\Program Files\CCleaner
    O43 - CFD: 2013-08-06 - 20:01:05 - [] ----D C:\Program Files\CDex
    O43 - CFD: 2014-05-27 - 17:09:19 - [] ----D C:\Program Files\Common Files
    O43 - CFD: 2014-07-11 - 18:13:08 - [] ----D C:\Program Files\ConvertHelper
    O43 - CFD: 2011-06-07 - 13:11:53 - [] ----D C:\Program Files\DVD Maker
    O43 - CFD: 2011-04-22 - 13:09:17 - [] ----D C:\Program Files\DVD Region+CSS Free
    O43 - CFD: 2011-04-22 - 07:52:15 - [] ----D C:\Program Files\DVD Shrink
    O43 - CFD: 2011-04-19 - 07:33:29 - [] -SH-D C:\Program Files\Fichiers communs
    O43 - CFD: 2014-07-05 - 10:15:31 - [] ----D C:\Program Files\Google
    O43 - CFD: 2014-02-24 - 21:35:58 - [] --H-D C:\Program Files\InstallShield Installation Information
    O43 - CFD: 2014-07-10 - 17:45:46 - [] ----D C:\Program Files\Internet Explorer
    O43 - CFD: 2014-01-30 - 21:02:19 - [] ----D C:\Program Files\iPod
    O43 - CFD: 2014-01-30 - 21:03:01 - [] ----D C:\Program Files\iTunes
    O43 - CFD: 2011-05-16 - 08:47:27 - [] ----D C:\Program Files\IZArc
    O43 - CFD: 2014-07-26 - 10:49:50 - [] ----D C:\Program Files\Java
    O43 - CFD: 2012-05-05 - 08:47:55 - [] ----D C:\Program Files\K-Lite Codec Pack
    O43 - CFD: 2012-11-04 - 17:41:11 - [] ----D C:\Program Files\Maestro Learning
    O43 - CFD: 2011-05-29 - 13:05:01 - [] ----D C:\Program Files\Microsoft Analysis Services
    O43 - CFD: 2011-04-19 - 08:37:28 - [] ----D C:\Program Files\Microsoft LifeCam
    O43 - CFD: 2011-05-29 - 13:07:15 - [] ----D C:\Program Files\Microsoft Office
    O43 - CFD: 2014-07-27 - 14:13:11 - [] ----D C:\Program Files\Microsoft Silverlight
    O43 - CFD: 2011-05-29 - 13:07:14 - [] ----D C:\Program Files\Microsoft.NET
    O43 - CFD: 2012-12-08 - 09:23:08 - [] ----D C:\Program Files\MiPony
    O43 - CFD: 2014-06-17 - 21:14:10 - [] ----D C:\Program Files\Mozilla Firefox
    O43 - CFD: 2014-06-21 - 18:45:30 - [] ----D C:\Program Files\Mozilla Maintenance Service
    O43 - CFD: 2009-07-14 - 00:52:30 - [] ----D C:\Program Files\MSBuild
    O43 - CFD: 2013-03-29 - 03:00:58 - [0] ----D C:\Program Files\MSXML 4.0
    O43 - CFD: 2014-02-24 - 21:39:37 - [] ----D C:\Program Files\MyFree Codec
    O43 - CFD: 2011-04-22 - 13:37:48 - [] ----D C:\Program Files\Nero
    O43 - CFD: 2013-03-27 - 20:28:41 - [] ----D C:\Program Files\Nikon
    O43 - CFD: 2012-07-16 - 18:20:00 - [] ----D C:\Program Files\OpenOffice.org 3
    O43 - CFD: 2013-01-17 - 22:11:38 - [] ----D C:\Program Files\Ordi Scrabble
    O43 - CFD: 2012-08-11 - 20:14:23 - [] ----D C:\Program Files\PhotoFiltre
    O43 - CFD: 2014-01-30 - 20:57:46 - [] ----D C:\Program Files\QuickTime
    O43 - CFD: 2009-07-14 - 00:52:30 - [] ----D C:\Program Files\Reference Assemblies
    O43 - CFD: 2014-02-24 - 21:47:09 - [] ----D C:\Program Files\Samsung
    O43 - CFD: 2014-05-27 - 17:09:19 - [] R---D C:\Program Files\Skype
    O43 - CFD: 2013-04-07 - 16:31:50 - [] ----D C:\Program Files\Sony
    O43 - CFD: 2013-04-07 - 16:32:26 - [0] ----D C:\Program Files\Sony Ericsson
    O43 - CFD: 2011-06-02 - 09:52:08 - [] ----D C:\Program Files\Sony Media Go Install
    O43 - CFD: 2014-07-27 - 15:21:10 - [] ----D C:\Program Files\Spybot - Search & Destroy
    O43 - CFD: 2013-12-27 - 20:51:09 - [] ----D C:\Program Files\Stellarium
    O43 - CFD: 2011-09-27 - 08:51:53 - [] ----D C:\Program Files\Techlogg.com ToneShop
    O43 - CFD: 2014-06-30 - 08:42:12 - [] ----D C:\Program Files\TomTom HOME 2
    O43 - CFD: 2011-09-24 - 15:15:58 - [] ----D C:\Program Files\TomTom International B.V
    O43 - CFD: 2009-07-14 - 00:53:23 - [0] --H-D C:\Program Files\Uninstall Information
    O43 - CFD: 2013-05-16 - 06:27:10 - [] ----D C:\Program Files\uTorrent =>P2P.µTorrent
    O43 - CFD: 2011-05-12 - 13:29:23 - [] ----D C:\Program Files\VideoLAN
    O43 - CFD: 2011-08-07 - 18:20:42 - [] ----D C:\Program Files\VirtualDJ
    O43 - CFD: 2011-04-22 - 07:38:31 - [] ----D C:\Program Files\VSO
    O43 - CFD: 2013-07-11 - 03:27:52 - [] ----D C:\Program Files\Windows Defender
    O43 - CFD: 2014-07-10 - 17:45:47 - [] ----D C:\Program Files\Windows Journal
    O43 - CFD: 2013-03-08 - 08:41:12 - [] ----D C:\Program Files\Windows Live
    O43 - CFD: 2011-06-07 - 13:11:53 - [] ----D C:\Program Files\Windows Mail =>.Microsoft Corporation
    O43 - CFD: 2013-12-11 - 04:22:10 - [] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation
    O43 - CFD: 2011-04-19 - 07:33:29 - [] ----D C:\Program Files\Windows NT
    O43 - CFD: 2011-06-07 - 13:11:53 - [] ----D C:\Program Files\Windows Photo Viewer
    O43 - CFD: 2011-06-07 - 13:11:53 - [] ----D C:\Program Files\Windows Portable Devices
    O43 - CFD: 2011-06-07 - 13:11:53 - [] ----D C:\Program Files\Windows Sidebar
    O43 - CFD: 2014-07-27 - 15:47:29 - [] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman
    O43 - CFD: 2011-06-17 - 08:54:14 - [] ----D C:\Program Files\Common Files\Adobe
    O43 - CFD: 2011-04-22 - 13:37:50 - [] ----D C:\Program Files\Common Files\Ahead
    O43 - CFD: 2014-01-30 - 21:02:19 - [] ----D C:\Program Files\Common Files\Apple
    O43 - CFD: 2011-06-09 - 10:09:07 - [] ----D C:\Program Files\Common Files\Canon
    O43 - CFD: 2014-05-15 - 03:08:11 - [] ----D C:\Program Files\Common Files\DESIGNER
    O43 - CFD: 2012-11-04 - 17:40:15 - [] ----D C:\Program Files\Common Files\InstallShield
    O43 - CFD: 2013-04-20 - 08:37:10 - [] ----D C:\Program Files\Common Files\Java
    O43 - CFD: 2011-08-03 - 08:04:00 - [] ----D C:\Program Files\Common Files\microsoft shared
    O43 - CFD: 2013-03-27 - 20:28:14 - [] ----D C:\Program Files\Common Files\Nikon
    O43 - CFD: 2009-07-13 - 22:37:05 - [] ----D C:\Program Files\Common Files\Services
    O43 - CFD: 2014-05-27 - 17:09:19 - [] ----D C:\Program Files\Common Files\Skype
    O43 - CFD: 2011-06-03 - 11:02:05 - [] ----D C:\Program Files\Common Files\Sony Shared
    O43 - CFD: 2009-07-13 - 22:37:05 - [] ----D C:\Program Files\Common Files\SpeechEngines
    O43 - CFD: 2012-11-17 - 04:01:43 - [] ----D C:\Program Files\Common Files\System
    O43 - CFD: 2011-04-19 - 08:40:18 - [] ----D C:\Program Files\Common Files\Windows Live
    O43 - CFD: 2014-01-30 - 21:03:02 - [] ----D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
    O43 - CFD: 2011-06-17 - 08:54:12 - [] ----D C:\ProgramData\Adobe
    O43 - CFD: 2014-01-30 - 20:59:47 - [] ----D C:\ProgramData\Apple
    O43 - CFD: 2011-05-10 - 21:32:17 - [] ----D C:\ProgramData\Apple Computer
    O43 - CFD: 2009-07-14 - 00:53:55 - [] -SH-D C:\ProgramData\Application Data
    O43 - CFD: 2013-10-21 - 06:13:37 - [] ----D C:\ProgramData\AVAST Software
    O43 - CFD: 2011-04-19 - 07:33:29 - [] -SH-D C:\ProgramData\Bureau
    O43 - CFD: 2011-04-19 - 07:55:59 - [] --H-D C:\ProgramData\CanonBJ
    O43 - CFD: 2009-07-14 - 00:53:55 - [] -SH-D C:\ProgramData\Desktop
    O43 - CFD: 2009-07-14 - 00:53:55 - [] -SH-D C:\ProgramData\Documents
    O43 - CFD: 2013-10-09 - 20:29:35 - [] ----D C:\ProgramData\DriverGenius
    O43 - CFD: 2013-04-01 - 17:55:03 - [] ----D C:\ProgramData\DVD Shrink
    O43 - CFD: 2013-03-27 - 20:27:38 - [] ----D C:\ProgramData\EnterNHelp
    O43 - CFD: 2011-04-19 - 07:33:29 - [] -SH-D C:\ProgramData\Favoris
    O43 - CFD: 2009-07-14 - 00:53:55 - [] -SH-D C:\ProgramData\Favorites
    O43 - CFD: 2013-10-30 - 20:30:16 - [] ----D C:\ProgramData\InstallMate =>PUP.Tarma
    O43 - CFD: 2013-02-17 - 15:08:17 - [] ----D C:\ProgramData\iRinger
    O43 - CFD: 2014-07-27 - 13:52:07 - [] ----D C:\ProgramData\Malwarebytes
    O43 - CFD: 2011-12-08 - 12:24:55 - [] ----D C:\ProgramData\McAfee
    O43 - CFD: 2011-04-19 - 07:33:29 - [] -SH-D C:\ProgramData\Menu Démarrer
    O43 - CFD: 2014-01-18 - 11:32:49 - [] -S--D C:\ProgramData\Microsoft
    O43 - CFD: 2014-07-09 - 21:32:19 - [] ----D C:\ProgramData\Microsoft Help
    O43 - CFD: 2011-04-19 - 07:33:29 - [] -SH-D C:\ProgramData\Modèles
    O43 - CFD: 2012-05-04 - 18:28:56 - [] ----D C:\ProgramData\Mozilla
    O43 - CFD: 2013-03-27 - 20:26:58 - [] ----D C:\ProgramData\Nature
    O43 - CFD: 2013-04-01 - 16:22:11 - [] ----D C:\ProgramData\Nikon
    O43 - CFD: 2013-03-27 - 20:27:38 - [] ----D C:\ProgramData\PDEs
    O43 - CFD: 2013-03-27 - 20:26:58 - [] ----D C:\ProgramData\Perl
    O43 - CFD: 2014-02-24 - 21:46:36 - [] ----D C:\ProgramData\Samsung
    O43 - CFD: 2014-05-27 - 17:09:21 - [] ----D C:\ProgramData\Skype
    O43 - CFD: 2011-06-02 - 20:58:08 - [] ----D C:\ProgramData\Sony Corporation
    O43 - CFD: 2013-04-07 - 16:32:28 - [0] ----D C:\ProgramData\Sony Ericsson
    O43 - CFD: 2014-07-27 - 15:20:18 - [] ----D C:\ProgramData\Spybot - Search & Destroy
    O43 - CFD: 2009-07-14 - 00:53:55 - [] -SH-D C:\ProgramData\Start Menu
    O43 - CFD: 2013-09-07 - 12:24:53 - [] ----D C:\ProgramData\SummerSoft
    O43 - CFD: 2011-06-21 - 23:42:00 - [] ----D C:\ProgramData\Sun
    O43 - CFD: 2013-03-27 - 20:26:22 - [] ----D C:\ProgramData\Tables
    O43 - CFD: 2009-07-14 - 00:53:55 - [] -SH-D C:\ProgramData\Templates
    O43 - CFD: 2011-09-24 - 15:16:19 - [] ----D C:\ProgramData\TomTom
    O43 - CFD: 2013-03-27 - 20:27:38 - [] ----D C:\ProgramData\Ultima_T15
    O43 - CFD: 2011-04-19 - 12:26:44 - [] ----D C:\ProgramData\VirtualizedApplications
    O43 - CFD: 2011-04-27 - 21:03:28 - [] ----D C:\ProgramData\vsosdk
    O43 - CFD: 2011-05-10 - 21:32:36 - [] ----D C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
    O43 - CFD: 2013-06-25 - 12:06:42 - [0] ----D C:\Users\Lionel\AppData\Roaming\.minecraft
    O43 - CFD: 2011-05-05 - 10:20:18 - [] ----D C:\Users\Lionel\AppData\Roaming\Adobe
    O43 - CFD: 2012-04-09 - 10:49:08 - [] ----D C:\Users\Lionel\AppData\Roaming\AnvSoft
    O43 - CFD: 2013-02-17 - 16:54:59 - [] ----D C:\Users\Lionel\AppData\Roaming\Apple Computer
    O43 - CFD: 2013-03-27 - 20:37:29 - [] ----D C:\Users\Lionel\AppData\Roaming\ArcSoft
    O43 - CFD: 2011-06-09 - 11:50:06 - [] ----D C:\Users\Lionel\AppData\Roaming\Audacity
    O43 - CFD: 2013-10-22 - 08:01:33 - [] ----D C:\Users\Lionel\AppData\Roaming\AVAST Software
    O43 - CFD: 2012-11-16 - 20:43:46 - [] ----D C:\Users\Lionel\AppData\Roaming\BudgetExpress 3
    O43 - CFD: 2011-05-31 - 14:07:49 - [] ----D C:\Users\Lionel\AppData\Roaming\dvdcss
    O43 - CFD: 2012-05-05 - 08:45:43 - [] ----D C:\Users\Lionel\AppData\Roaming\GetRightToGo
    O43 - CFD: 2011-04-19 - 07:33:46 - [] ----D C:\Users\Lionel\AppData\Roaming\Identities
    O43 - CFD: 2011-04-19 - 07:54:55 - [] ----D C:\Users\Lionel\AppData\Roaming\Macromedia
    O43 - CFD: 2014-07-27 - 13:52:07 - [0] ----D C:\Users\Lionel\AppData\Roaming\Malwarebytes
    O43 - CFD: 2009-07-14 - 05:00:41 - [0] ----D C:\Users\Lionel\AppData\Roaming\Media Center Programs
    O43 - CFD: 2013-08-06 - 09:58:17 - [] -S--D C:\Users\Lionel\AppData\Roaming\Microsoft
    O43 - CFD: 2012-12-23 - 11:17:48 - [] ----D C:\Users\Lionel\AppData\Roaming\Mipony
    O43 - CFD: 2011-04-19 - 09:20:50 - [] ----D C:\Users\Lionel\AppData\Roaming\Mozilla
    O43 - CFD: 2012-06-21 - 16:58:18 - [] ----D C:\Users\Lionel\AppData\Roaming\OpenOffice.org
    O43 - CFD: 2012-08-11 - 20:48:29 - [] ----D C:\Users\Lionel\AppData\Roaming\PhotoFiltre
    O43 - CFD: 2014-02-24 - 22:23:20 - [] ----D C:\Users\Lionel\AppData\Roaming\Samsung
    O43 - CFD: 2014-07-27 - 15:26:57 - [] ----D C:\Users\Lionel\AppData\Roaming\Skype
    O43 - CFD: 2011-05-29 - 13:13:23 - [] ----D C:\Users\Lionel\AppData\Roaming\SoftGrid Client
    O43 - CFD: 2011-06-02 - 09:58:08 - [] ----D C:\Users\Lionel\AppData\Roaming\Sony
    O43 - CFD: 2013-12-27 - 21:16:37 - [] ----D C:\Users\Lionel\AppData\Roaming\Stellarium
    O43 - CFD: 2013-01-17 - 21:37:28 - [] ----D C:\Users\Lionel\AppData\Roaming\System
    O43 - CFD: 2012-04-24 - 13:30:33 - [] ----D C:\Users\Lionel\AppData\Roaming\TeamViewer
    O43 - CFD: 2011-09-24 - 15:16:10 - [] ----D C:\Users\Lionel\AppData\Roaming\TomTom
    O43 - CFD: 2011-04-19 - 10:14:40 - [0] ----D C:\Users\Lionel\AppData\Roaming\TP
    O43 - CFD: 2014-07-27 - 12:43:10 - [] ----D C:\Users\Lionel\AppData\Roaming\uTorrent =>P2P.µTorrent
    O43 - CFD: 2014-07-10 - 21:36:15 - [] ----D C:\Users\Lionel\AppData\Roaming\vlc
    O43 - CFD: 2014-07-06 - 09:29:31 - [] ----D C:\Users\Lionel\AppData\Roaming\Vso
    O43 - CFD: 2011-04-24 - 21:45:22 - [] ----D C:\Users\Lionel\AppData\Roaming\Windows Live Writer
    O43 - CFD: 2014-07-27 - 15:58:02 - [] ----D C:\Users\Lionel\AppData\Roaming\ZHP =>.Nicolas Coolman
    O43 - CFD: 2011-06-09 - 10:13:36 - [0] ----D C:\Users\Lionel\AppData\Roaming\ZoomBrowser EX
    O43 - CFD: 2014-01-26 - 09:37:09 - [] ----D C:\Users\Lionel\AppData\Local\Adobe
    O43 - CFD: 2011-05-10 - 21:31:25 - [] ----D C:\Users\Lionel\AppData\Local\Apple
    O43 - CFD: 2013-06-07 - 21:18:19 - [] ----D C:\Users\Lionel\AppData\Local\Apple Computer
    O43 - CFD: 2011-04-19 - 07:33:41 - [] -SH-D C:\Users\Lionel\AppData\Local\Application Data
    O43 - CFD: 2014-06-30 - 08:35:13 - [] ----D C:\Users\Lionel\AppData\Local\Downloaded Installations
    O43 - CFD: 2013-12-01 - 18:01:36 - [0] ----D C:\Users\Lionel\AppData\Local\ElevatedDiagnostics
    O43 - CFD: 2014-06-15 - 19:25:25 - [] -SH-D C:\Users\Lionel\AppData\Local\EmieSiteList
    O43 - CFD: 2014-06-15 - 19:25:25 - [] -SH-D C:\Users\Lionel\AppData\Local\EmieUserList
    O43 - CFD: 2011-04-19 - 07:54:53 - [] ----D C:\Users\Lionel\AppData\Local\Google
    O43 - CFD: 2011-04-19 - 07:33:41 - [] -SH-D C:\Users\Lionel\AppData\Local\Historique
    O43 - CFD: 2012-01-15 - 09:47:29 - [0] ----D C:\Users\Lionel\AppData\Local\LogMeIn Rescue Applet
    O43 - CFD: 2012-06-22 - 21:39:37 - [] ----D C:\Users\Lionel\AppData\Local\Macromedia
    O43 - CFD: 2013-11-26 - 08:10:20 - [] ----D C:\Users\Lionel\AppData\Local\Microsoft
    O43 - CFD: 2011-04-20 - 09:08:16 - [0] ----D C
    0
  12. lilidurhone Messages postés 800 Date d'inscription   Statut Contributeur sécurité Dernière intervention   3 818
     
    Héberge le sur cjoint
    0
  13. lion72 Messages postés 260 Statut Membre 2
     
    j'ai recommencer,

    voila le nouveau

    ~ Rapport de ZHPDiag v2014.7.27.109 - Nicolas Coolman (2014-07-27)
    ~ Lancé par Lionel (2014-07-28 16:36:13)
    ~ Adresse du Site Web https://nicolascoolman.eu
    ~ Adresse du Forum https://nicolascoolman.eu
    ~ Traduit par Nicolas Coolman
    ~ Etat de la version : Version à jour.
    ~ Liste blanche : Désactivée par l'utilisateur
    ~ Elévation des Privilèges : OK
    ~ User Account Control (UAC): Deactivate by user

    ---\\ Navigateurs Internet
    MSIE: Internet Explorer v11.0.9600.17207
    MFIE: Mozilla Firefox 30.0 (Defaut)
    GCIE: Google Chrome v36.0.1985.125

    ---\\ Informations sur les produits Windows
    ~ Langage: Français
    Windows 7 Professional, 32-bit Service Pack 1 (Build 7601)
    Windows Server License Manager Script : OK
    ~ Windows Operating System - Windows(R) 7, RETAIL channel
    Windows ID Activation : OK
    ~ Windows Partial Key : 72CBH
    Windows License : OK
    ~ Windows Remaining Initializations Number : 4
    Software Protection Service (Protection logicielle) : OK
    Windows Automatic Updates : OK
    Windows Activation Technologies : OK

    ---\\ Logiciels de protection du système
    avast! Free Antivirus v9.0.2021
    Windows Defender W7 (Activate)

    ---\\ Logiciels d'optimisation du système
    CCleaner v3.05

    ---\\ Logiciels de partage PeerToPeer
    µTorrent v3.3.0.29625 =>P2P.µTorrent

    ---\\ Surveillance de Logiciels
    Adobe Flash Player 14 Plugin
    Adobe Reader X
    Java 7 Update 25

    ---\\ Informations sur le système
    ~ Processor: x86 Family 6 Model 23 Stepping 7, GenuineIntel
    ~ Operating System: 32 Bits
    Boot mode: Normal (Normal boot)
    Total RAM: 3326 MB (45% free)
    System Restore: Activé (Enable)
    System drive C: has 69 GB (11%) free of 596 GB

    ---\\ Mode de connexion au système
    ~ Computer Name: LIONEL-PC
    ~ User Name: Lionel
    ~ All Users Names: Mcx1-LIONEL-PC, Lionel, HomeGroupUser$, Administrateur,
    ~ Unselected Option: None
    Logged in as Administrator

    ---\\ Variables d'environnement
    ~ System Unit : C:\
    ~ %AppZHP% : C:\Users\Lionel\AppData\Roaming\ZHP\
    ~ %AppData% : C:\Users\Lionel\AppData\Roaming\
    ~ %Desktop% : C:\Users\Lionel\Desktop\
    ~ %Favorites% : C:\Users\Lionel\Favorites\
    ~ %LocalAppData% : C:\Users\Lionel\AppData\Local\
    ~ %StartMenu% : C:\Users\Lionel\AppData\Roaming\Microsoft\Windows\Start Menu\
    ~ %Windir% : C:\Windows\
    ~ %System% : C:\Windows\System32\

    ---\\ Enumération des unités disques
    C: Hard drive, Flash drive, Thumb drive (Free 69 Go of 596 Go)
    D: CD-ROM drive (Not Inserted)
    E: CD-ROM drive (Not Inserted)

    ---\\ Etat du Centre de Sécurité Windows
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
    [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
    [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyGames: Modified
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
    [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
    [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
    [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
    ~ Security Center: 43 Scanned in 00mn 00s

    ---\\ Recherche particulière de fichiers génériques
    [MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - (.Microsoft Corporation - Explorateur Windows.) (.2011-02-25 - 00:30:54.) -- C:\Windows\Explorer.exe [2616320]
    [MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.2009-07-13 - 20:14:45.) -- C:\Windows\System32\Wininit.exe [96256]
    [MD5.CCC198257901BEEA2FBF8EB1E7678356] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.2014-06-18 - 17:13:59.) -- C:\Windows\System32\wininet.dll [1791488]
    [MD5.998507B046BA314CE8245364C686FA67] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.2014-03-04 - 04:17:02.) -- C:\Windows\System32\Winlogon.exe [304128]
    [MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Bibliothèque de licences.) (.2010-11-20 - 07:21:24.) -- C:\Windows\System32\sppcomapi.dll [193536]
    [MD5.D0B388DA1D111A34366E04EB4A5DD156] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.2014-05-30 - 01:36:07.) -- C:\Windows\system32\Drivers\AFD.sys [338944]
    [MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.2009-07-13 - 20:26:15.) -- C:\Windows\system32\Drivers\atapi.sys [21584]
    [MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.2009-07-13 - 18:11:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [70656]
    [MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.2010-11-20 - 03:38:10.) -- C:\Windows\system32\Drivers\Cdrom.sys [108544]
    [MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.2010-11-20 - 03:42:32.) -- C:\Windows\system32\Drivers\DfsC.sys [78336]
    [MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.2010-11-20 - 04:59:29.) -- C:\Windows\system32\Drivers\HDAudBus.sys [108544]
    [MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) (.2009-07-13 - 18:11:24.) -- C:\Windows\system32\Drivers\i8042prt.sys [80896]
    [MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.2009-07-13 - 18:54:29.) -- C:\Windows\system32\Drivers\IpNat.sys [101888]
    [MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.2011-04-26 - 21:17:22.) -- C:\Windows\system32\Drivers\MRxSmb.sys [123904]
    [MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) (.2010-11-20 - 03:39:44.) -- C:\Windows\system32\Drivers\netBT.sys [187904]
    [MD5.C8DFF8D07755A66C7A4A738930F0FEAC] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.2014-01-23 - 21:18:22.) -- C:\Windows\system32\Drivers\ntfs.sys [1212352]
    [MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parallèle.) (.2009-07-13 - 18:45:35.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
    [MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.2009-07-13 - 18:54:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [78848]
    [MD5.B973FCFC50DC1434E1970A146F7E3885] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.2010-11-20 - 05:24:46.) -- C:\Windows\system32\Drivers\rdpdr.sys [133632]
    [MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.2009-07-13 - 18:53:41.) -- C:\Windows\system32\Drivers\smb.sys [71168]
    [MD5.B459575348C20E8121D6039DA063C704] - (.Microsoft Corporation - TDI Translation Driver.) (.2010-11-20 - 03:39:17.) -- C:\Windows\system32\Drivers\tdx.sys [74752]
    [MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.2010-11-20 - 07:30:16.) -- C:\Windows\system32\Drivers\volsnap.sys [245632]
    ~ Generic Processes: Scanned in 00mn 01s

    ---\\ Etat des fichiers cachés (Caché/Total)
    ~ Mes images (My Pictures) : 3/5621
    ~ Mes musiques (My Musics) : 1/15038
    ~ Mes Videos (My Videos) : 1/104
    ~ Mes Favoris (My Favorites) : 1/17
    ~ Mes Documents (My Documents) : 2/2261
    ~ Mon Bureau (My Desktop) : 3/254
    ~ Menu demarrer (Programs) : 1/32
    ~ Hidden Files: Scanned in 00mn 36s

    ---\\ Processus lancés
    [MD5.17186248C75E9A8227750726E1DFF4FD] - (.Microsoft Corporation - Microsoft LifeCam VX6000 Device Application.) -- C:\Windows\vVX6000.exe [764784] [PID.4020]
    [MD5.1AA5F0A2E3E65A9F6B35C19A7C9D7762] - (.Nikon Corporation - Nikon Message Center 2.) -- C:\Program Files\Nikon\Nikon Message Center 2\NkMC2.exe [571392] [PID.2568]
    [MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816] [PID.2856]
    [MD5.26AFC1F16494FFE66F2197153B342A27] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4086432] [PID.2832]
    [MD5.085BE68B52CE5A5FA4621507AD518CF3] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [152392] [PID.2896]
    [MD5.A0251ED3ABBA7ACC84416738C8282ACA] - (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311616] [PID.2920]
    [MD5.F5ED26AB8BDD951BFAC8BBD0D68BA3E9] - (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\Kies.exe [1564992] [PID.3216]
    [MD5.F43247CCDD1EA5EA4F60393CF157157B] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [21442176] [PID.3992]
    [MD5.3C8989CF2B59228785F16B3EB547F58C] - (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [248176] [PID.972]
    [MD5.06C2BB8F9089C3C091584F8AD5C1A01E] - (.Microsoft Corporation - Microsoft Outlook.) -- C:\Program Files\Microsoft Office\Office14\OUTLOOK.exe [16001192] [PID.4512]
    [MD5.B1E01D636350983E94171E229C759468] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [275568] [PID.4616]
    [MD5.0DA8636ACBF55A4CA6350FEA7D789828] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8082432] [PID.4876]
    ~ Processes Running: Scanned in 00mn 01s

    ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
    C:\Users\Lionel\AppData\Local\Google\Chrome\User Data\Default\Preferences
    G1 - GCS: Preference [User Data\Default] http://search.babylon.com =>PUP.Babylon

    ---\\ Liste des dossiers d'extension Google Chrome
    ~ Google Lines Browser: 1 Scanned in 00mn 04s

    ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
    C:\Users\Lionel\AppData\Roaming\Mozilla\Firefox\Profiles\o50aw18z.default\prefs.js
    M0 - MFSP: prefs.js [Lionel - o50aw18z.default] https://www.google.ca/?gws_rd=ssl
    M2 - MFEP: prefs.js [Lionel - o50aw18z.default\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}] [dwhelper] DownloadHelper v4.9.22 (..)
    P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.10.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
    P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll
    P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll
    P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll
    P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll
    P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll
    P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll
    P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 12.0.) -- C:\Windows\system32\Adobe\Director\np32dsw_1200112.dll
    P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
    P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll =>.Google Inc
    P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.30514.0.) -- c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll
    P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\Program Files\Microsoft Office\Office14\NPAUTHZ.dll
    P2 - FPN: [HKLM] [@microsoft.com/SharePoint,version=14.0] - (.Microsoft Corporation - The plug-in allows you to open and edit files using Microsoft Office a.) -- C:\Program Files\Microsoft Office\Office14\NPSPWRAP.dll
    P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
    P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
    P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.10.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
    P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (...) -- C:\Users\Lionel\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (.not file.)
    ~ Firefox Browser: 25 Scanned in 00mn 00s

    ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
    R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
    R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
    R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
    R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
    R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
    R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
    R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
    R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
    R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
    R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (...) (No version) -- (.not file.)
    R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
    ~ IE Browser: 11 Scanned in 00mn 00s

    ---\\ Internet Explorer, Proxy Management (R5)
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
    ~ Proxy management: Scanned in 00mn 00s

    ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
    F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
    F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
    F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
    ~ Keys: Scanned in 00mn 00s

    ---\\ Hosts file redirection (O1)
    ~ Le fichier hosts est sain (The hosts file is clean).
    ~ Hosts File: Scanned in 00mn 00s
    ~ Nombre de lignes (Lines number): 21

    ---\\ Browser Helper Objects de navigateur (O2)
    O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
    O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files\Windows Live\Companion\companioncore.dll
    O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files\Microsoft Office\Office14\URLREDIR.dll
    ~ BHO: 8 Scanned in 00mn 00s

    ---\\ Applications lancées au démarrage du système (O4)
    O4 - HKLM\..\Run: [VX6000] . (.Microsoft Corporation - Microsoft LifeCam VX6000 Device Application.) -- C:\Windows\vVX6000.exe
    O4 - HKLM\..\Run: [LifeCam] . (.Microsoft Corporation - LifeExp.exe.) -- C:\Program Files\Microsoft LifeCam\LifeExp.exe
    O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
    O4 - HKLM\..\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
    O4 - HKLM\..\Run: [Nikon Message Center 2] . (.Nikon Corporation - Nikon Message Center 2.) -- C:\Program Files\Nikon\Nikon Message Center 2\NkMC2.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation
    O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
    O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
    O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
    O4 - HKLM\..\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe =>.Samsung Electronics Co
    O4 - HKCU\..\Run: [Facebook Update] C:\Users\Lionel\AppData\Local\Facebook\Update\FacebookUpdate.exe (.not file.)
    O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
    O4 - HKCU\..\Run: [KiesPreload] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\Kies.exe
    O4 - HKCU\..\Run: [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe (.not file.)
    O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
    O4 - HKCU\..\Run: [TomTomHOME.exe] . (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
    O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
    O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
    O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [Facebook Update] C:\Users\Lionel\AppData\Local\Facebook\Update\FacebookUpdate.exe (.not file.)
    O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
    O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [KiesPreload] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\Kies.exe
    O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe (.not file.)
    O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
    O4 - HKUS\S-1-5-21-3109688691-795145518-3024645089-1001\..\Run: [TomTomHOME.exe] . (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
    ~ Application: Scanned in 00mn 00s

    ---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
    O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
    ~ IE Control Panel: 1 Scanned in 00mn 00s

    ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
    O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} . (.Microsoft Corporation - Windows Live Messenger Companion core resources.) -- C:\Program Files\Windows Live\Companion\companionres.dll
    O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~4\Office14\ONBttnIE.dll =>.Microsoft Corporation
    O9 - Extra button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~4\Office14\ONBTTN~1.dll =>.Microsoft Corporation
    ~ IE Extra Buttons: Scanned in 00mn 00s

    ---\\ Winsock hijacker (Layered Service Provider) (O10)
    O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
    O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
    O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
    O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
    O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =>.Microsoft Corporation
    O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
    O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation
    O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation
    O10 - WLSP:\000000000009\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll
    ~ Winsock: 9 Scanned in 00mn 00s

    ---\\ Objets ActiveX (Downloaded Program Files)(O16)
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} ((no name)) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} ((no name)) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} ((no name)) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    ~ Objets ActiveX: Scanned in 00mn 00s

    ---\\ Modification Domaine/Adresses DNS (O17)
    O17 - HKLM\System\CCS\Services\Tcpip\..\{2B9F3634-CF9A-46BA-A218-3833E46C6B6C}: DhcpNameServer = 192.168.0.1
    O17 - HKLM\System\CCS\Services\Tcpip\..\{E6141240-563B-423E-A0AF-A82D8A15BA62}: DhcpNameServer = 192.168.42.129
    O17 - HKLM\System\CS1\Services\Tcpip\..\{2B9F3634-CF9A-46BA-A218-3833E46C6B6C}: DhcpNameServer = 192.168.0.1
    O17 - HKLM\System\CS1\Services\Tcpip\..\{E6141240-563B-423E-A0AF-A82D8A15BA62}: DhcpNameServer = 192.168.42.129
    O17 - HKLM\System\CS2\Services\Tcpip\..\{2B9F3634-CF9A-46BA-A218-3833E46C6B6C}: DhcpNameServer = 192.168.0.1
    O17 - HKLM\System\CS2\Services\Tcpip\..\{E6141240-563B-423E-A0AF-A82D8A15BA62}: DhcpNameServer = 192.168.42.129
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
    ~ Domain: Scanned in 00mn 00s

    ---\\ Protocole additionnel (O18)
    O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll =>.Microsoft Corporation
    O18 - Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll =>.Microsoft Corporation
    ~ Protocole Additionnel: Scanned in 00mn 00s

    ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
    O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
    ~ SSODL: 1 Scanned in 00mn 00s

    ---\\ Liste des services NT non Microsoft et non désactivés (O23)
    O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
    O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe
    O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - YSLoader.exe.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc
    O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe
    O23 - Service: TomTomHOMEService (TomTomHOMEService) . (.TomTom - Windows Service for TomTom HOME.) - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
    ~ Services: 8 Scanned in 00mn 04s

    ---\\ Enumération Active Desktop & MHTML Editor (O24)
    O24 - Default MHTML Editor: Last - .(...) - (.not file.)
    ~ Desktop Component: 4 Scanned in 00mn 00s

    ---\\ Enumère les données de BootExecute (BEX) (O34)
    O34 - HKLM BootExecute: (autocheck autochk *) - File not found
    ~ BEX: 1 Scanned in 00mn 00s

    ---\\ Tâches planifiées en automatique (O39)
    [MD5.A6B6AB9502B63F43A9A56AE6AFB22078] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [262320]
    [MD5.1AD8512A5C40AD1A0558498D8E0AC2AA] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [808448]
    [MD5.00000000000000000000000000000000] [APT] [FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001Core] (...) -- C:\Users\Lionel\AppData\Local\Facebook\Update\FacebookUpdate.exe (.not file.) [0]
    [MD5.00000000000000000000000000000000] [APT] [FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001UA] (...) -- C:\Users\Lionel\AppData\Local\Facebook\Update\FacebookUpdate.exe (.not file.) [0]
    [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648]
    [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648]
    [MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [561984]
    O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
    O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
    O39 - APT: FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001Core - (...) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001Core.job [1078]
    O39 - APT: FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001Core - (...) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001Core [1078]
    O39 - APT: FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001UA - (...) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001UA.job [1100]
    O39 - APT: FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001UA - (...) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3109688691-795145518-3024645089-1001UA [1100]
    O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1052]
    O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1052]
    O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1056]
    O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1056]
    ~ Scheduled Task: 15 Scanned in 00mn 05s

    ---\\ Composants installés (ActiveSetup Installed Components) (O40)
    O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
    O40 - ASIC: Microsoft Windows Media Player 12.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll =>.Microsoft Corporation
    O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
    O40 - ASIC: Internet Explorer - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe =>.Microsoft Corporation
    O40 - ASIC: Microsoft Windows - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe =>.Microsoft Corporation
    O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
    O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
    O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
    O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
    O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
    O40 - ASIC: Google Chrome - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google Inc. - Google Chrome Installer.) -- C:\Program Files\Google\Chrome\Application\36.0.1985.125\Installer\chrmstp.exe
    ~ Active Setup: 11 Scanned in 00mn 00s

    ---\\ Pilotes lancés au démarrage du système (O41)
    O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
    O41 - Driver: (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\drivers\aswRdr2.sys
    O41 - Driver: (aswSnx) . (.AVAST Software - avast! Virtualization Driver.) - C:\Windows\system32\drivers\aswSnx.sys
    O41 - Driver: (aswSP) . (.AVAST Software - avast! self protection module.) - C:\Windows\system32\drivers\aswSP.sys
    O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
    O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
    O41 - Driver: C:\Windows\System32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys
    O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
    O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
    O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
    O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
    O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
    O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
    O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
    O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
    O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
    O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
    O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
    O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
    O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
    O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
    O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
    O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
    ~ Drivers: 69 Scanned in 00mn 00s

    ---\\ Logiciels installés (O42)
    O42 - Logiciel: Adobe Flash Player 14 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
    O42 - Logiciel: Adobe Flash Player 14 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
    O42 - Logiciel: Adobe Reader X (10.1.10) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
    O42 - Logiciel: Adobe Shockwave Player 12.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
    O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {A922C4B7-50E0-4787-A94C-59DBF3C65DBE}
    O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {10E3A6DD-84D8-4D8A-BB11-5E5314BCA7FD}
    O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} =>.Apple Inc
    O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B}
    O42 - Logiciel: BudgetExpress 3 - (...) [HKLM] -- {77E912CE-6396-45B8-90C0-DF402B3D7566}
    O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
    O42 - Logiciel: CDex - Open Source Digital Audio CD Extractor - (.Georgy Berdyshev.) [HKLM] -- CDex
    O42 - Logiciel: Canon MOV Decoder - (.Canon Inc..) [HKLM] -- Canon MOV Decoder
    O42 - Logiciel: Canon MOV Encoder - (.Canon Inc..) [HKLM] -- Canon MOV Encoder
    O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}
    O42 - Logiciel: ConvertHelper 2.2 - (.DownloadHelper.) [HKLM] -- {27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1
    O42 - Logiciel: ConvertXtoDVD 4.1.16.360 - (...) [HKLM] -- {DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1
    O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
    O42 - Logiciel: DVD Region+CSS Free 5.9.7.0 - (.Fengtao Software Inc..) [HKLM] -- DVD Region+CSS Free_is1
    O42 - Logiciel: DVD Shrink 3.2 - (.DVD Shrink.) [HKLM] -- DVD Shrink_is1
    O42 - Logiciel: Facebook Video Calling 1.2.0.159 - (.Skype Limited.) [HKLM] -- {7CAC6A44-C3DE-4153-ACA6-7524602C789E}
    O42 - Logiciel: Garfield K Nombres - (...) [HKLM] -- {C744A1E6-86AF-4A16-B9BC-9921BE00CD8F}
    O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
    O42 - Logiciel: Google Earth Plug-in - (.Google.) [HKLM] -- {4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E} =>.Google Inc
    O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
    O42 - Logiciel: IZArc 4.1.6 - (.Ivan Zahariev.) [HKLM] -- {97C82B44-D408-4F14-9252-47FC1636D23E}_is1
    O42 - Logiciel: Java 7 Update 25 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217025FF}
    O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
    O42 - Logiciel: K-Lite Codec Pack 8.7.0 (Full) - (...) [HKLM] -- KLiteCodecPack_is1
    O42 - Logiciel: MCEBrowser - (.ANPARK.) [HKLM] -- {79F41FC6-07F9-47C2-BBAC-37C7C70EE703}
    O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
    O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
    O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
    O42 - Logiciel: Mega_pack_la_Quebecoise_by_toto740 0.0 - (.Toto740 / TomTomHeaven.) [HKLM] -- Mega_pack_la_Quebecoise_by_toto740_is1
    O42 - Logiciel: MiPony 2.0.2 - (...) [HKLM] -- MiPony
    O42 - Logiciel: Microsoft Corporation - (.Microsoft Corporation.) [HKLM] -- {B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800}
    O42 - Logiciel: Microsoft LifeCam - (.Microsoft Corporation.) [HKLM] -- {5FC7AB5C-61FC-42DF-A923-5139BCF10D42}
    O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
    O42 - Logiciel: Mozilla Firefox 30.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 30.0 (x86 fr)
    O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
    O42 - Logiciel: MyFreeCodec - (...) [HKCU] -- MyFreeCodec
    O42 - Logiciel: Nero 7 Ultra Edition - (.Nero AG.) [HKLM] -- {F9469799-696F-427D-B314-79E7AA681033}
    O42 - Logiciel: Nikon Message Center 2 - (.Nikon.) [HKLM] -- {B014EE44-9197-4513-9613-71E6EB1B514E}
    O42 - Logiciel: OpenOffice.org 3.4 - (.OpenOffice.org.) [HKLM] -- {2F90A789-DD1E-41CE-BFCA-BD78213BABC7}
    O42 - Logiciel: PhotoFiltre - (...) [HKCU] -- PhotoFiltre
    O42 - Logiciel: Picture Control Utility - (.Nikon.) [HKLM] -- {87441A59-5E64-4096-A170-14EFE67200C3}
    O42 - Logiciel: PlayStation(R)Network Downloader - (.Sony Computer Entertainment Inc..) [HKLM] -- {B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}
    O42 - Logiciel: PlayStation(R)Store - (.Sony Computer Entertainment Inc..) [HKLM] -- {0E532C84-4275-41B3-9D81-D4A1A20D8EE7}
    O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {B67BAFBA-4C9F-48FA-9496-933E3B255044}
    O42 - Logiciel: SAMSUNG USB Driver for Mobile Phones - (.SAMSUNG Electronics Co., Ltd..) [HKLM] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44}
    O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- InstallShield_{758C8301-2696-4855-AF45-534B1200980A}
    O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- {758C8301-2696-4855-AF45-534B1200980A}
    O42 - Logiciel: Skype(TM) 6.16 - (.Skype Technologies S.A..) [HKLM] -- {7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}
    O42 - Logiciel: Stellarium 0.10.4 - (...) [HKLM] -- Stellarium_is1
    O42 - Logiciel: TomTom HOME - (.Nom de votre société.) [HKLM] -- {7A2BB1C8-903D-4585-9F3B-CADD67D07D37}
    O42 - Logiciel: TomTom HOME Visual Studio Merge Modules - (.TomTom International B.V..) [HKLM] -- {8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}
    O42 - Logiciel: VLC media player 1.1.11 - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN
    O42 - Logiciel: ViewNX 2 - (.Nikon.) [HKLM] -- {E64C137C-D0B7-467A-B47F-460AAB30F0A3}
    O42 - Logiciel: VirtualDJ Home FREE - (.Atomix Productions.) [HKLM] -- {19192A84-6172-4312-A661-D8F9A34585AB}
    O42 - Logiciel: WM Recorder - (.AllAlex, Inc.) [HKLM] -- WM Recorder14.12
    O42 - Logiciel: avast! Free Antivirus v9.0.2021 - (.AVAST Software.) [HKLM] -- avast
    O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {616445AF-BBCF-41C1-A4D6-8CFF171C182D}
    O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726}
    O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU] -- uTorrent =>P2P.BitTorrent
    O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKLM] -- uTorrent =>P2P.BitTorrent
    ~ Logic: 46 Scanned in 00mn 00s

    ---\\ HKCU & HKLM Software Keys
    [HKCU\Software\ASProtect]
    [HKCU\Software\AVAST Software]
    [HKCU\Software\Adobe]
    [HKCU\Software\Ahead]
    [HKCU\Software\AnvSoft]
    [HKCU\Software\AppDataLow\Software\Adobe]
    [HKCU\Software\AppDataLow\Software\JavaSoft]
    [HKCU\Software\AppDataLow]
    [HKCU\Software\Apple Computer, Inc.]
    [HKCU\Software\Apple Inc.]
    [HKCU\Software\ArcSoft]
    [HKCU\Software\Audacity]
    [HKCU\Software\BVRP Software]
    [HKCU\Software\BitTorrent] =>P2P.BitTorrent
    [HKCU\Software\CDDB]
    [HKCU\Software\CISRA]
    [HKCU\Software\Canon]
    [HKCU\Software\Canon_Inc_IC]
    [HKCU\Software\Classes]
    [HKCU\Software\Clients]
    [HKCU\Software\DVD Region-Free]
    [HKCU\Software\DVD Shrink]
    [HKCU\Software\GNU]
    [HKCU\Software\Gabest]
    [HKCU\Software\Google]
    [HKCU\Software\Grapher]
    [HKCU\Software\Guitars]
    [HKCU\Software\Haali]
    [HKCU\Software\Help]
    [HKCU\Software\IM Providers]
    [HKCU\Software\IZSoftware]
    [HKCU\Software\Icaros]
    [HKCU\Software\IncrediMail]
    [HKCU\Software\JEDI-VCL]
    [HKCU\Software\JavaSoft]
    [HKCU\Software\LAV]
    [HKCU\Software\LDM]
    [HKCU\Software\Logs]
    [HKCU\Software\Macromedia]
    [HKCU\Software\MainConcept (Nikon)]
    [HKCU\Software\Malwarebytes' Anti-Malware]
    [HKCU\Software\MarineCat]
    [HKCU\Software\MediaInfo]
    [HKCU\Software\Mediachance]
    [HKCU\Software\MouseIndustries]
    [HKCU\Software\MozillaPlugins]
    [HKCU\Software\Mozilla]
    [HKCU\Software\Netscape]
    [HKCU\Software\Nikon]
    [HKCU\Software\ODBC]
    [HKCU\Software\OpenOffice.org]
    [HKCU\Software\Piriform]
    [HKCU\Software\Policies]
    [HKCU\Software\Safer Networking Limited]
    [HKCU\Software\Samsung]
    [HKCU\Software\SilicMobile]
    [HKCU\Software\SkypeRS]
    [HKCU\Software\Skype]
    [HKCU\Software\SoftVTU]
    [HKCU\Software\Sony Ericsson]
    [HKCU\Software\TeamViewer]
    [HKCU\Software\Techlogg.com ToneShop]
    [HKCU\Software\TeleCharger]
    [HKCU\Software\TomTom]
    [HKCU\Software\Trolltech]
    [HKCU\Software\VB and VBA Program Settings]
    [HKCU\Software\VSO]
    [HKCU\Software\VirtualDJ]
    [HKCU\Software\WM Converter5]
    [HKCU\Software\WebApp]
    [HKCU\Software\Winamp]
    [HKCU\Software\kde.org]
    [HKCU\Software\madFlac]
    [HKCU\Software\madshi]
    [HKCU\Software\yahoo]
    [HKLM\Software\AMD]
    [HKLM\Software\ATI Technologies]
    [HKLM\Software\AVAST Software]
    [HKLM\Software\Adobe]
    [HKLM\Software\AdwCleaner]
    [HKLM\Software\AppDataLow]
    [HKLM\Software\Apple Computer, Inc.]
    [HKLM\Software\Apple Inc.]
    [HKLM\Software\ArcSoft]
    [HKLM\Software\Canon]
    [HKLM\Software\Canon_Inc_IC]
    [HKLM\Software\Classes]
    [HKLM\Software\Clients]
    [HKLM\Software\DelFix]
    [HKLM\Software\DownloadHelper]
    [HKLM\Software\Fengtao Software]
    [HKLM\Software\GEAR Software]
    [HKLM\Software\GNU]
    [HKLM\Software\Google]
    [HKLM\Software\HaaliMkx]
    [HKLM\Software\Hewlett-Packard]
    [HKLM\Software\Hybrid Basic]
    [HKLM\Software\Hybrid Synthesizers]
    [HKLM\Software\IM Providers]
    [HKLM\Software\Image Manipulation]
    [HKLM\Software\InstallShield]
    [HKLM\Software\Intel]
    [HKLM\Software\JavaSoft]
    [HKLM\Software\JreMetrics]
    [HKLM\Software\KLCodecPack]
    [HKLM\Software\LAV]
    [HKLM\Software\LDM]
    [HKLM\Software\Macromedia]
    [HKLM\Software\Maestro Learning]
    [HKLM\Software\Malwarebytes' Anti-Malware]
    [HKLM\Software\MozillaPlugins]
    [HKLM\Software\Mozilla]
    [HKLM\Software\Nature]
    [HKLM\Software\Nero]
    [HKLM\Software\Nikon]
    [HKLM\Software\ODBC]
    [HKLM\Software\OpenOffice.org]
    [HKLM\Software\Piriform]
    [HKLM\Software\Policies]
    [HKLM\Software\RegisteredApplications]
    [HKLM\Software\SAMSUNG]
    [HKLM\Software\Safer Networking Limited]
    [HKLM\Software\Skype]
    [HKLM\Software\SoftAssi]
    [HKLM\Software\Sonic]
    [HKLM\Software\Sony Corporation]
    [HKLM\Software\Sony]
    [HKLM\Software\Strawbuilt]
    [HKLM\Software\TeamViewer]
    [HKLM\Software\TomTom]
    [HKLM\Software\VSO]
    [HKLM\Software\VideoLAN]
    [HKLM\Software\VirtualDJ]
    [HKLM\Software\Windows]
    [HKLM\Software\Wow6432Node]
    [HKLM\Software\Yahoo]
    [HKLM\Software\ahead]
    [HKLM\Software\intellidownload]
    [HKLM\Software\lameme]
    [HKLM\Software\mozilla.org]
    ~ Key Software: 253 Scanned in 00mn 00s

    ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
    O43 - CFD: 2012-10-09 - 12:14:45 - [0] ----D C:\Program Files\7-Zip
    O43 - CFD: 2011-06-17 - 08:54:11 - [] ----D C:\Program Files\Adobe
    O43 - CFD: 2012-09-30 - 16:49:32 - [] ----D C:\Program Files\ANPARK
    O43 - CFD: 2013-02-16 - 18:05:02 - [] ----D C:\Program Files\Apple Software Update =>.Apple Inc
    O43 - CFD: 2011-04-19 - 09:42:21 - [] ----D C:\Program Files\AVAST Software
    O43 - CFD: 2013-02-16 - 18:11:02 - [] ----D C:\Program Files\Bonjour
    O43 - CFD: 2012-11-16 - 20:43:39 - [] ----D C:\Program Files\BudgetExpress 3
    O43 - CFD: 2011-08-07 - 13:30:29 - [] ----D C:\Program Files\Canon
    O43 - CFD: 2011-04-22 - 07:41:20 - [] ----D C:\Program Files\CCleaner
    O43 - CFD: 2013-08-06 - 20:01:05 - [] ----D C:\Program Files\CDex
    O43 - CFD: 2014-05-27 - 17:09:19 - [] ----D C:\Program Files\Common Files
    O43 - CFD: 2014-07-11 - 18:13:08 - [] ----D C:\Program Files\ConvertHelper
    O43 - CFD: 2011-06-07 - 13:11:53 - [] ----D C:\Program Files\DVD Maker
    O43 - CFD: 2011-04-22 - 13:09:17 - [] ----D C:\Program Files\DVD Region+CSS Free
    O43 - CFD: 2011-04-22 - 07:52:15 - [] ----D C:\Program Files\DVD Shrink
    O43 - CFD: 2011-04-19 - 07:33:29 - [] -SH-D C:\Program Files\Fichiers communs
    O43 - CFD: 2014-07-05 - 10:15:31 - [] ----D C:\Program Files\Google
    O43 - CFD: 2014-02-24 - 21:35:58 - [] --H-D C:\Program Files\InstallShield Installation Information
    O43 - CFD: 2014-07-10 - 17:45:46 - [] ----D C:\Program Files\Internet Explorer
    O43 - CFD: 2014-01-30 - 21:02:19 - [] ----D C:\Program Files\iPod
    O43 - CFD: 2014-01-30 - 21:03:01 - [] ----D C:\Program Files\iTunes
    O43 - CFD: 2011-05-16 - 08:47:27 - [] ----D C:\Program Files\IZArc
    O43 - CFD: 2014-07-26 - 10:49:50 - [] ----D C:\Program Files\Java
    O43 - CFD: 2012-05-05 - 08:47:55 - [] ----D C:\Program Files\K-Lite Codec Pack
    O43 - CFD: 2012-11-04 - 17:41:11 - [] ----D C:\Program Files\Maestro Learning
    O43 - CFD: 2011-05-29 - 13:05:01 - [] ----D C:\Program Files\Microsoft Analysis Services
    O43 - CFD: 2011-04-19 - 08:37:28 - [] ----D C:\Program Files\Microsoft LifeCam
    O43 - CFD: 2011-05-29 - 13:07:15 - [] ----D C:\Program Files\Microsoft Office
    O43 - CFD: 2014-07-27 - 14:13:11 - [] ----D C:\Program Files\Microsoft Silverlight
    O43 - CFD: 2011-05-29 - 13:07:14 - [] ----D C:\Program Files\Microsoft.NET
    O43 - CFD: 2012-12-08 - 09:23:08 - [] ----D C:\Program Files\MiPony
    O43 - CFD: 2014-06-17 - 21:14:10 - [] ----D C:\Program Files\Mozilla Firefox
    O43 - CFD: 2014-06-21 - 18:45:30 - [] ----D C:\Program Files\Mozilla Maintenance Service
    O43 - CFD: 2009-07-14 - 00:52:30 - [] ----D C:\Program Files\MSBuild
    O43 - CFD: 2013-03-29 - 03:00:58 - [0] ----D C:\Program Files\MSXML 4.0
    O43 - CFD: 2014-02-24 - 21:39:37 - [] ----D C:\Program Files\MyFree Codec
    O43 - CFD: 2011-04-22 - 13:37:48 - [] ----D C:\Program Files\Nero
    O43 - CFD: 2013-03-27 - 20:28:41 - [] ----D C:\Program Files\Nikon
    O43 - CFD: 2012-07-16 - 18:20:00 - [] ----D C:\Program Files\OpenOffice.org 3
    O43 - CFD: 2013-01-17 - 22:11:38 - [] ----D C:\Program Files\Ordi Scrabble
    O43 - CFD: 2012-08-11 - 20:14:23 - [] ----D C:\Program Files\PhotoFiltre
    O43 - CFD: 2014-01-30 - 20:57:46 - [] ----D C:\Program Files\QuickTime
    O43 - CFD: 2009-07-14 - 00:52:30 - [] ----D C:\Program Files\Reference Assemblies
    O43 - CFD: 2014-02-24 - 21:47:09 - [] ----D C:\Program Files\Samsung
    O43 - CFD: 2014-05-27 - 17:09:19 - [] R---D C:\Program Files\Skype
    O43 - CFD: 2013-04-07 - 16:31:50 - [] ----D C:\Program Files\Sony
    O43 - CFD: 2013-04-07 - 16:32:26 - [0] ----D C:\Program Files\Sony Ericsson
    O43 - CFD: 2011-06-02 - 09:52:08 - [] ----D C:\Program Files\Sony Media Go Install
    O43 - CFD: 2014-07-27 - 15:21:10 - [] ----D C:\Program Files\Spybot - Search & Destroy
    O43 - CFD: 2013-12-27 - 20:51:09 - [] ----D C:\Program Files\Stellarium
    O43 - CFD: 2011-09-27 - 08:51:53 - [] ----D C:\Program Files\Techlogg.com ToneShop
    O43 - CFD: 2014-06-30 - 08:42:12 - [] ----D C:\Program Files\TomTom HOME 2
    O43 - CFD: 2011-09-24 - 15:15:58 - [] ----D C:\Program Files\TomTom International B.V
    O43 - CFD: 2009-07-14 - 00:53:23 - [0] --H-D C:\Program Files\Uninstall Information
    O43 - CFD: 2013-05-16 - 06:27:10 - [] ----D C:\Program Files\uTorrent =>P2P.µTorrent
    O43 - CFD: 2011-05-12 - 13:29:23 - [] ----D C:\Program Files\VideoLAN
    O43 - CFD: 2011-08-07 - 18:20:42 - [] ----D C:\Program Files\VirtualDJ
    O43 - CFD: 2011-04-22 - 07:38:31 - [] ----D C:\Program Files\VSO
    O43 - CFD: 2013-07-11 - 03:27:52 - [] ----D C:\Program Files\Windows Defender
    O43 - CFD: 2014-07-10 - 17:45:47 - [] ----D C:\Program Files\Windows Journal
    O43 - CFD: 2013-03-08 - 08:41:12 - [] ----D C:\Program Files\Windows Live
    O43 - CFD: 2011-06-07 - 13:11:53 - [] ----D C:\Program Files\Windows Mail =>.Microsoft Corporation
    O43 - CFD: 2013-12-11 - 04:22:10 - [] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation
    O43 - CFD: 2011-04-19 - 07:33:29 - [] ----D C:\Program Files\Windows NT
    O43 - CFD: 2011-06-07 - 13:11:53 - [] ----D C:\Program Files\Windows Photo Viewer
    O43 - CFD: 2011-06-07 - 13:11:53 - [] ----D C:\Program Files\Windows Portable Devices
    O43 - CFD: 2011-06-07 - 13:11:53 - [] ----D C:\Program Files\Windows Sidebar
    O43 - CFD: 2014-07-27 - 15:58:55 - [] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman
    O43 - CFD: 2011-06-17 - 08:54:14 - [] ----D C:\Program Files\Common Files\Adobe
    O43 - CFD: 2011-04-22 - 13:37:50 - [] ----D C:\Program Files\Common Files\Ahead
    O43 - CFD: 2014-01-30 - 21:02:19 - [] ----D C:\Program Files\Common Files\Apple
    O43 - CFD: 2011-06-09 - 10:09:07 - [] ----D C:\Program Files\Common Files\Canon
    O43 - CFD: 2014-05-15 - 03:08:11 - [] ----D C:\Program Files\Common Files\DESIGNER
    O43 - CFD: 2012-11-04 - 17:40:15 - [] ----D C:\Program Files\Common Files\InstallShield
    O43 - CFD: 2013-04-20 - 08:37:10 - [] ----D C:\Program Files\Common Files\Java
    O43 - CFD: 2011-08-03 - 08:04:00 - [] ----D C:\Program Files\Common Files\microsoft shared
    O43 - CFD: 2013-03-27 - 20:28:14 - [] ----D C:\Program Files\Common Files\Nikon
    O43 - CFD: 2009-07-13 - 22:37:05 - [] ----D C:\Program Files\Common Files\Services
    O43 - CFD: 2014-05-27 - 17:09:19 - [] ----D C:\Program Files\Common Files\Skype
    O43 - CFD: 2011-06-03 - 11:02:05 - [] ----D C:\Program Files\Common Files\Sony Shared
    O43 - CFD: 2009-07-13 - 22:37:05 - [] ----D C:\Program Files\Common Files\SpeechEngines
    O43 - CFD: 2012-11-17 - 04:01:43 - [] ----D C:\Program Files\Common Files\System
    O43 - CFD: 2011-04-19 - 08:40:18 - [] ----D C:\Program Files\Common Files\Windows Live
    O43 - CFD: 2014-01-30 - 21:03:02 - [] ----D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
    O43 - CFD: 2011-06-17 - 08:54:12 - [] ----D C:\ProgramData\Adobe
    O43 - CFD: 2014-01-30 - 20:59:47 - [] ----D C:\ProgramData\Apple
    O43 - CFD: 2011-05-10 - 21:32:17 - [] ----D C:\ProgramData\Apple Computer
    O43 - CFD: 2009-07-14 - 00:53:55 - [] -SH-D C:\ProgramData\Application Data
    O43 - CFD: 2013-10-21 - 06:13:37 - [] ----D C:\ProgramData\AVAST Software
    O43 - CFD: 2011-04-19 - 07:33:29 - [] -SH-D C:\ProgramData\Bureau
    O43 - CFD: 2011-04-19 - 07:55:59 - [] --H-D C:\ProgramData\CanonBJ
    O43 - CFD: 2009-07-14 - 00:53:55 - [] -SH-D C:\ProgramData\Desktop
    O43 - CFD: 2009-07-14 - 00:53:55 - [] -SH-D C:\ProgramData\Documents
    O43 - CFD: 2013-10-09 - 20:29:35 - [] ----D C:\ProgramData\DriverGenius
    O43 - CFD: 2013-04-01 - 17:55:03 - [] ----D C:\ProgramData\DVD Shrink
    O43 - CFD: 2013-03-27 - 20:27:38 - [] ----D C:\ProgramData\EnterNHelp
    O43 - CFD: 2011-04-19 - 07:33:29 - [] -SH-D C:\ProgramData\Favoris
    O43 - CFD: 2009-07-14 - 00:53:55 - [] -SH-D C:\ProgramData\Favorites
    O43 - CFD: 2013-10-30 - 20:30:16 - [] ----D C:\ProgramData\InstallMate =>PUP.Tarma
    O43 - CFD: 2013-02-17 - 15:08:17 - [] ----D C:\ProgramData\iRinger
    O43 - CFD: 2014-07-27 - 13:52:07 - [] ----D C:\ProgramData\Malwarebytes
    O43 - CFD: 2011-12-08 - 12:24:55 - [] ----D C:\ProgramData\McAfee
    O43 - CFD: 2011-04-19 - 07:33:29 - [] -SH-D C:\ProgramData\Menu Démarrer
    O43 - CFD: 2014-01-18 - 11:32:49 - [] -S--D C:\ProgramData\Microsoft
    O43 - CFD: 2014-07-09 - 21:32:19 - [] ----D C:\ProgramData\Microsoft Help
    O43 - CFD: 2011-04-19 - 07:33:29 - [] -SH-D C:\ProgramData\Modèles
    O43 - CFD: 2012-05-04 - 18:28:56 - [] ----D C:\ProgramData\Mozilla
    O43 - CFD: 2013-03-27 - 20:26:58 - [] ----D C:\ProgramData\Nature
    O43 - CFD: 2013-04-01 - 16:22:11 - [] ----D C:\ProgramData\Nikon
    O43 - CFD: 2013-03-27 - 20:27:38 - [] ----D C:\ProgramData\PDEs
    O43 - CFD: 2013-03-27 - 20:26:58 - [] ----D C:\ProgramData\Perl
    O43 - CFD: 2014-02-24 - 21:46:36 - [] ----D C:\ProgramData\Samsung
    O43 - CFD: 2014-05-27 - 17:09:21 - [] ----D C:\ProgramData\Skype
    O43 - CFD: 2011-06-02 - 20:58:08 - [] ----D C:\ProgramData\Sony Corporation
    O43 - CFD: 2013-04-07 - 16:32:28 - [0] ----D C:\ProgramData\Sony Ericsson
    O43 - CFD: 2014-07-27 - 15:20:18 - [] ----D C:\ProgramData\Spybot - Search & Destroy
    O43 - CFD: 2009-07-14 - 00:53:55 - [] -SH-D C:\ProgramData\Start Menu
    O43 - CFD: 2013-09-07 - 12:24:53 - [] ----D C:\ProgramData\SummerSoft
    O43 - CFD: 2011-06-21 - 23:42:00 - [] ----D C:\ProgramData\Sun
    O43 - CFD: 2013-03-27 - 20:26:22 - [] ----D C:\ProgramData\Tables
    O43 - CFD: 2009-07-14 - 00:53:55 - [] -SH-D C:\ProgramData\Templates
    O43 - CFD: 2011-09-24 - 15:16:19 - [] ----D C:\ProgramData\TomTom
    O43 - CFD: 2013-03-27 - 20:27:38 - [] ----D C:\ProgramData\Ultima_T15
    O43 - CFD: 2011-04-19 - 12:26:44 - [] ----D C:\ProgramData\VirtualizedApplications
    O43 - CFD: 2011-04-27 - 21:03:28 - [] ----D C:\ProgramData\vsosdk
    O43 - CFD: 2011-05-10 - 21:32:36 - [] ----D C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
    O43 - CFD: 2013-06-25 - 12:06:42 - [0] ----D C:\Users\Lionel\AppData\Roaming\.minecraft
    O43 - CFD: 2011-05-05 - 10:20:18 - [] ----D C:\Users\Lionel\AppData\Roaming\Adobe
    O43 - CFD: 2012-04-09 - 10:49:08 - [] ----D C:\Users\Lionel\AppData\Roaming\AnvSoft
    O43 - CFD: 2013-02-17 - 16:54:59 - [] ----D C:\Users\Lionel\AppData\Roaming\Apple Computer
    O43 - CFD: 2013-03-27 - 20:37:29 - [] ----D C:\Users\Lionel\AppData\Roaming\ArcSoft
    O43 - CFD: 2011-06-09 - 11:50:06 - [] ----D C:\Users\Lionel\AppData\Roaming\Audacity
    O43 - CFD: 2013-10-22 - 08:01:33 - [] ----D C:\Users\Lionel\AppData\Roaming\AVAST Software
    O43 - CFD: 2012-11-16 - 20:43:46 - [] ----D C:\Users\Lionel\AppData\Roaming\BudgetExpress 3
    O43 - CFD: 2011-05-31 - 14:07:49 - [] ----D C:\Users\Lionel\AppData\Roaming\dvdcss
    O43 - CFD: 2012-05-05 - 08:45:43 - [] ----D C:\Users\Lionel\AppData\Roaming\GetRightToGo
    O43 - CFD: 2011-04-19 - 07:33:46 - [] ----D C:\Users\Lionel\AppData\Roaming\Identities
    O43 - CFD: 2011-04-19 - 07:54:55 - [] ----D C:\Users\Lionel\AppData\Roaming\Macromedia
    O43 - CFD: 2014-07-27 - 13:52:07 - [0] ----D C:\Users\Lionel\AppData\Roaming\Malwarebytes
    O43 - CFD: 2009-07-14 - 05:00:41 - [0] ----D C:\Users\Lionel\AppData\Roaming\Media Center Programs
    O43 - CFD: 2013-08-06 - 09:58:17 - [] -S--D C:\Users\Lionel\AppData\Roaming\Microsoft
    O43 - CFD: 2012-12-23 - 11:17:48 - [] ----D C:\Users\Lionel\AppData\Roaming\Mipony
    O43 - CFD: 2011-04-19 - 09:20:50 - [] ----D C:\Users\Lionel\AppData\Roaming\Mozilla
    O43 - CFD: 2012-06-21 - 16:58:18 - [] ----D C:\Users\Lionel\AppData\Roaming\OpenOffice.org
    O43 - CFD: 2012-08-11 - 20:48:29 - [] ----D C:\Users\Lionel\AppData\Roaming\PhotoFiltre
    O43 - CFD: 2014-02-24 - 22:23:20 - [] ----D C:\Users\Lionel\AppData\Roaming\Samsung
    O43 - CFD: 2014-07-28 - 16:34:11 - [] ----D C:\Users\Lionel\AppData\Roaming\Skype
    O43 - CFD: 2011-05-29 - 13:13:23 - [] ----D C:\Users\Lionel\AppData\Roaming\SoftGrid Client
    O43 - CFD: 2011-06-02 - 09:58:08 - [] ----D C:\Users\Lionel\AppData\Roaming\Sony
    O43 - CFD: 2013-12-27 - 21:16:37 - [] ----D C:\Users\Lionel\AppData\Roaming\Stellarium
    O43 - CFD: 2013-01-17 - 21:37:28 - [] ----D C:\Users\Lionel\AppData\Roaming\System
    O43 - CFD: 2012-04-24 - 13:30:33 - [] ----D C:\Users\Lionel\AppData\Roaming\TeamViewer
    O43 - CFD: 2011-09-24 - 15:16:10 - [] ----D C:\Users\Lionel\AppData\Roaming\TomTom
    O43 - CFD: 2011-04-19 - 10:14:40 - [0] ----D C:\Users\Lionel\AppData\Roaming\TP
    O43 - CFD: 2014-07-27 - 12:43:10 - [] ----D C:\Users\Lionel\AppData\Roaming\uTorrent =>P2P.µTorrent
    O43 - CFD: 2014-07-10 - 21:36:15 - [] ----D C:\Users\Lionel\AppData\Roaming\vlc
    O43 - CFD: 2014-07-06 - 09:29:31 - [] ----D C:\Users\Lionel\AppData\Roaming\Vso
    O43 - CFD: 2011-04-24 - 21:45:22 - [] ----D C:\Users\Lionel\AppData\Roaming\Windows Live Writer
    O43 - CFD: 2014-07-28 - 16:37:15 - [] ----D C:\Users\Lionel\AppData\Roaming\ZHP =>.Nicolas Coolman
    O43 - CFD: 2011-06-09 - 10:13:36 - [0] ----D C:\Users\Lionel\AppData\Roaming\ZoomBrowser EX
    O43 - CFD: 2014-01-26 - 09:37:09 - [] ----D C:\Users\Lionel\AppData\Local\Adobe
    O43 - CFD: 2011-05-10 - 21:31:25 - [] ----D C:\Users\Lionel\AppData\Local\Apple
    O43 - CFD: 2013-06-07 - 21:18:19 - [] ----D C:\Users\Lionel\AppData\Local\Apple Computer
    O43 - CFD: 2011-04-19 - 07:33:41 - [] -SH-D C:\Users\Lionel\AppData\Local\Application Data
    O43 - CFD: 2014-06-30 - 08:35:13 - [] ----D C:\Users\Lionel\AppData\Local\Downloaded Installations
    O43 - CFD: 2013-12-01 - 18:01:36 - [0] ----D C:\Users\Lionel\AppData\Local\ElevatedDiagnostics
    O43 - CFD: 2014-06-15 - 19:25:25 - [] -SH-D C:\Users\Lionel\AppData\Local\EmieSiteList
    O43 - CFD: 2014-06-15 - 19:25:25 - [] -SH-D C:\Users\Lionel\AppData\Local\EmieUserList
    O43 - CFD: 2011-04-19 - 07:54:53 - [] ----D C:\Users\Lionel\AppData\Local\Google
    O43 - CFD: 2011-04-19 - 07:33:41 - [] -SH-D
    0
  14. lilidurhone Messages postés 800 Date d'inscription   Statut Contributeur sécurité Dernière intervention   3 818
     
    * Pour héberger le rapport, rends toi sur cjoint.com
    * Clique sur choisissez un fichier va chercher le rapport dans ton PC.

    * Le rapport est hébergé:
    - Pour XP : C:\Documents and Settings\username\Local Settings\Application Data\ZHP
    - Depuis Vista : C:\Users\username\AppData\Roaming\ZHP

    * Une fois le rapport trouvé, sélectionne le, et clique sur Ouvrir

    * Choisis le type de diffusion (illimitée ou 21 jours)
    * Puis cliques sur créer le lien cjoint

    * Une fois que tu auras obtenu le lien copies colle dans ta prochaine réponse

    * Pour t'aider https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers
    0
  16. lilidurhone Messages postés 800 Date d'inscription   Statut Contributeur sécurité Dernière intervention   3 818
     
    * Télécharge sur le bureau RogueKiller

    * Quitte tous tes programmes en cours.

    * Sous Vista/Seven et windows 8 , clique droit -> lancer en tant qu'administrateur

    * Sinon lance simplement RogueKiller.exe

    * Patiente pendant le pre-scan, puis clique sur le bouton Scan

    * Un rapport RKreport.txt a du se créer sur le bureau, poste-le en l'hébergeant sur cjoint

    * Pour t'aider https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers

    Note : Si le programme a été bloqué, ne pas hésiter à essayer plusieurs fois.
    0
  18. lilidurhone Messages postés 800 Date d'inscription   Statut Contributeur sécurité Dernière intervention   3 818
     
    Décoches avant suppression

    [Suspicious.Path] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mbr -> TROUVÉ
    [Suspicious.Path] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\mbr -> TROUVÉ

    [PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> TROUVÉ
    [PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> TROUVÉ
    0
  20. lilidurhone Messages postés 800 Date d'inscription   Statut Contributeur sécurité Dernière intervention   3 818
     
    * Télécharge Junkware Removal Tool à cette adresse (ne clique pas sur télécharger, le téléchargement va débuter automatiquement) : https://www.bleepingcomputer.com/download/junkware-removal-tool/dl/131/

    * Enregistre-le sur ton bureau.

    * Ferme toutes les applications en cours.

    * Ouvre JRT.exe et appuie sur Entrée : si tu es sous Windows Vista, 7 ou 8, ouvre-le en faisant : clic droit => Exécuter en tant qu'administrateur.

    * Patiente le temps que l'outil travaille : le bureau va disparaître quelques instants, c'est tout à fait normal.

    * À la fin de l'analyse, un rapport nommé JRT.txt va s'ouvrir. Héberge-le comme ceci et poste le lien obtenu dans ta prochaine réponse.

    Tutoriel : http://www.forum-entraide-informatique.com/support/junkware-removal-tool-tutoriel-t8260.html
    0
  • 1
  • 2

Discussions similaires

Chrome://newtab
Nova -
snoopy35_ -

14 réponses
Adwcleaner Mac
Weel -
Michel -

21 réponses
Softonic,est-ce un virus ?
techmel1 -
techmel1 -

6 réponses
Désinstaller Softonic
Diguimette -
lilidurhone -

5 réponses
ADW Cleaner, un substitut gratuit pour Mac ?
Fanny0604 -
bazfile -

1 réponse