Cette connexion n'est pas certifiée

Bonjour,

Je cherche de l'aide pour régler un problème sur Mozilla !! Je viens d'ouvrir mon navigateur de recherche et j'essaie de me connecter sur facebook, ou faire une recherche google et ce texte apparait:

Cette connexion n'est pas certifiée [...]
(site name) utilise un certificat de sécurité invalide.
Le certificat n'est pas sûr car l'autorité délivrant le certificat est inconnue.
(Code d'erreur : sec_error_unknown_issuer)

La connexion marche sur la navigateur Internet explorer. J'ai consulté les autres forums à la recherche de possibles solutions et j'ai tout testé:
- l'heure de l'horloge correct
- réinitialiser firefox aussi
- supprimer le fichier cert8.db.
- changer la version de firefox
- rechercher le SSL et le désactiver (j'ai pas encore trouvé car le logiciel de sécurité est microsoft security essentials, et non les deux cité dans les message)
- essayer de contourner (j'ai que du texte)
- enlever le s de https ne fonctionne pas

Je tiens à préciser que seul des sites qui n'ont pas https fonctionne. Personnellement je pense que les problèmes viennent avec la barre websearches que je n'arrive pas à supprimer aussi (ccleaner me dit que l'installation est faites, dans désinstaller un programme à chaque fois, il me demande de taper un code. Après un temps d'attende où il a l'air d'avoir effacer le fichier, il me demande to repare). Mais pour le moment, avant de supprimer cette barre, il faudrait que je puisse accéder à ces sites protégé.

Comment je peux faire s'il vous plait ?

22 réponses

Résumé de la discussion

Problème de certificats SSL sous Firefox, où l'accès à Facebook ou Google affiche le message Cette connexion n'est pas certifiée et le code sec_error_unknown_issuer, selon lequel l'autorité délivrante est inconnue. Plusieurs solutions proposées incluent la vérification de l'heure, la réinitialisation de Firefox, la suppression du fichier cert8.db, la désactivation éventuelle du SSL et l'examen d'une éventuelle barre websearches. La discussion regroupe des tests entrepris par l'utilisateur et les réponses successives, allant de la désinstallation d'outils comme Java ou adwcleaner à des rapports système détaillés. Certaines propositions techniques recommandent aussi de mettre à jour Java, d'examiner les rapports d'outils de diagnostic et de vérifier les paramètres de sécurité, sans que la discussion ne tranche définitivement sur une solution unique.

Bobot (l’IA à votre service)
  1. salut

    pour ton problème, fait ceci et poste le rapport s'il te plaît

    télécharge adwcleaner sur ton bureau

    le lien https://www.commentcamarche.net/telecharger/securite/2759-adwcleaner/

    utlisateurs vista-w7-w8 exécuter en tant qu'administrateur (clic droit)

    clique sur Scanner puis patiente le temps du scan

    une fois le scan terminé clique sur le bouton Nettoyer

    clique sur rapport pour qu'il s'affiche sur ton bureau

    le rapport est aussi sauvegarder dans C:\AdwCleaner[S0].txt

    poste le rapport via 1 copier/coller

    merci

    @+

    0
    1. le voici :

      # AdwCleaner v3.302 - Rapport créé le 02/08/2014 à 16:34:09
      # Mis à jour le 30/07/2014 par Xplode
      # Système d'exploitation : Windows 7 Ultimate Service Pack 1 (32 bits)
      # Nom d'utilisateur : Florence - FLORENCE-PC
      # Exécuté depuis : C:\Users\Florence\Downloads\adwcleaner_3.302.exe
      # Option : Nettoyer

      ***** [ Services ] *****

      Service Supprimé : IePluginServices
      Service Supprimé : LPTSystemUpdater
      Service Supprimé : {6fcd6092-9615-4f7f-8898-8df53980e5d2}Gw

      ***** [ Fichiers / Dossiers ] *****

      Dossier Supprimé : C:\ProgramData\2308189059
      Dossier Supprimé : C:\ProgramData\DSearchLink
      Dossier Supprimé : C:\ProgramData\IePluginServices
      Dossier Supprimé : C:\ProgramData\Systweak
      Dossier Supprimé : C:\ProgramData\WindowsMangerProtect
      Dossier Supprimé : C:\ProgramData\cosstminn
      Dossier Supprimé : C:\Program Files\Bench
      Dossier Supprimé : C:\Program Files\Browsersafeguard
      Dossier Supprimé : C:\Program Files\globalUpdate
      Dossier Supprimé : C:\Program Files\Linkey
      Dossier Supprimé : C:\Program Files\LPT
      Dossier Supprimé : C:\Program Files\predm
      Dossier Supprimé : C:\Program Files\SupTab
      Dossier Supprimé : C:\Program Files\cosstminn
      Dossier Supprimé : C:\Windows\system32\SearchProtect
      Dossier Supprimé : C:\Users\Administrateur\AppData\Local\Chromatic Browser
      Dossier Supprimé : C:\Users\Administrateur\AppData\Local\torch
      Dossier Supprimé : C:\Users\Florence\AppData\Local\Chromatic Browser
      Dossier Supprimé : C:\Users\Florence\AppData\Local\Freesofttoday
      Dossier Supprimé : C:\Users\Florence\AppData\Local\globalUpdate
      Dossier Supprimé : C:\Users\Florence\AppData\Local\lollipop
      Dossier Supprimé : C:\Users\Florence\AppData\Local\SearchProtect
      Dossier Supprimé : C:\Users\Florence\AppData\Local\torch
      Dossier Supprimé : C:\Users\Florence\AppData\LocalLow\IminentToolbar
      Dossier Supprimé : C:\Users\Florence\AppData\Roaming\337Games
      Dossier Supprimé : C:\Users\Florence\AppData\Roaming\Nosibay
      Dossier Supprimé : C:\Users\Florence\AppData\Roaming\Systweak
      Dossier Supprimé : C:\Users\Florence\AppData\Roaming\webssearches
      Dossier Supprimé : C:\Users\Florence\AppData\Roaming\YourFileDownloader
      Dossier Supprimé : C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
      Dossier Supprimé : C:\Users\Florence\Documents\Optimizer Pro
      Dossier Supprimé : C:\Users\Invité\AppData\Local\Chromatic Browser
      Dossier Supprimé : C:\Users\Invité\AppData\Local\torch
      Dossier Supprimé : C:\Users\UpdatusUser\AppData\Local\Chromatic Browser
      Dossier Supprimé : C:\Users\UpdatusUser\AppData\Local\torch
      Dossier Supprimé : C:\Program Files\Software
      Fichier Supprimé : C:\END
      Fichier Supprimé : C:\Windows\system32\roboot.exe
      Fichier Supprimé : C:\Windows\system32\drivers\{6fcd6092-9615-4f7f-8898-8df53980e5d2}Gw.sys
      Fichier Supprimé : C:\Users\Florence\AppData\Local\AnyProtectScannerSetup.exe
      Fichier Supprimé : C:\Users\Florence\AppData\Roaming\aps.uninstall.scan.results
      Fichier Supprimé : C:\Users\Florence\AppData\Roaming\Bubble Dock.boostrap.log
      Fichier Supprimé : C:\Program Files\Mozilla Firefox\browser\searchplugins\default-search.xml
      Fichier Supprimé : C:\Program Files\Mozilla Firefox\browser\searchplugins\webssearches.xml
      Fichier Supprimé : C:\Users\Florence\AppData\Roaming\Mozilla\Firefox\Profiles\pgk0q3my.default\user.js

      ***** [ Tâches planifiées ] *****

      Tâche Supprimée : APSnotifierPP1
      Tâche Supprimée : APSnotifierPP2
      Tâche Supprimée : APSnotifierPP3
      Tâche Supprimée : ASP
      Tâche Supprimée : bench-sys
      Tâche Supprimée : bench-Updater removing
      Tâche Supprimée : BrowserSafeguard Update Task
      Tâche Supprimée : Optimizer Pro Schedule
      Tâche Supprimée : YourFile DownloaderUpdate

      ***** [ Raccourcis ] *****

      Raccourci Désinfecté : C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
      Raccourci Désinfecté : C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
      Raccourci Désinfecté : C:\Users\Florence\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
      Raccourci Désinfecté : C:\Users\Florence\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk
      Raccourci Désinfecté : C:\Users\Florence\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk

      ***** [ Registre ] *****

      Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [faststartff@gmail.com]
      Clé Supprimée : HKCU\Software\Classes\Applications\lollipop.exe
      Clé Supprimée : HKLM\SOFTWARE\Classes\d
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\NewPlayer_RASAPI32
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\NewPlayer_RASMANCS
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
      Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [BrowserSafeguard]
      Valeur Supprimée : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
      Valeur Supprimée : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x64]
      Clé Supprimée : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
      Clé Supprimée : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
      Clé Supprimée : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
      Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{03771AEF-400D-4A13-B712-25878EC4A3F5}
      Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
      Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
      Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
      Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
      Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
      Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
      Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
      Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{460C3D19-B3D4-4964-A550-77D263B0CCCB}
      Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9}
      Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
      Donnée Restaurée : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
      Clé Supprimée : HKCU\Software\AnyProtect
      Clé Supprimée : HKCU\Software\Boxore
      Clé Supprimée : HKCU\Software\BrowserSafeguardInstalled
      Clé Supprimée : HKCU\Software\FreeSoftToday
      Clé Supprimée : HKCU\Software\GlobalUpdate
      Clé Supprimée : HKCU\Software\InstallCore
      Clé Supprimée : HKCU\Software\lollipop
      Clé Supprimée : HKCU\Software\Nosibay
      Clé Supprimée : HKCU\Software\Optimizer Pro
      Clé Supprimée : HKCU\Software\SmartBar
      Clé Supprimée : HKCU\Software\Softonic
      Clé Supprimée : HKCU\Software\SupHpUISoft
      Clé Supprimée : HKCU\Software\systweak
      Clé Supprimée : HKCU\Software\TutoTag
      Clé Supprimée : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
      Clé Supprimée : HKCU\Software\AppDataLow\Software\blockAndSurf
      Clé Supprimée : HKCU\Software\AppDataLow\Software\Crossrider
      Clé Supprimée : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
      Clé Supprimée : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
      Clé Supprimée : HKLM\Software\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
      Clé Supprimée : HKLM\Software\Bench
      Clé Supprimée : HKLM\Software\Boxore
      Clé Supprimée : HKLM\Software\BrowserSafeGuard
      Clé Supprimée : HKLM\Software\Iminent
      Clé Supprimée : HKLM\Software\SupDp
      Clé Supprimée : HKLM\Software\SupTab
      Clé Supprimée : HKLM\Software\supWindowsMangerProtect
      Clé Supprimée : HKLM\Software\supWPM
      Clé Supprimée : HKLM\Software\SystemK
      Clé Supprimée : HKLM\Software\systweak
      Clé Supprimée : HKLM\Software\Tutorials
      Clé Supprimée : HKLM\Software\webssearchesSoftware
      Clé Supprimée : HKLM\Software\YourFileDownloader
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BC0BF363-63AB-4FF7-8EF1-AE0D7F711B24}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BrowserSafeGuard
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webssearches uninstall
      Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
      Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe

      ***** [ Navigateurs ] *****

      -\\ Internet Explorer v11.0.9600.17207

      Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
      Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
      Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
      Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

      -\\ Mozilla Firefox v31.0 (x86 fr)

      [ Fichier : C:\Users\Florence\AppData\Roaming\Mozilla\Firefox\Profiles\irhjbqtq.default-1406986549898\prefs.js ]

      [ Fichier : C:\Users\Florence\AppData\Roaming\Mozilla\Firefox\Profiles\pgk0q3my.default\prefs.js ]

      -\\ Google Chrome v36.0.1985.125

      [ Fichier : C:\Users\Florence\AppData\Local\Google\Chrome\User Data\Default\preferences ]

      *************************

      AdwCleaner[R0].txt - [26333 octets] - [03/11/2013 13:17:46]
      AdwCleaner[R1].txt - [15796 octets] - [02/08/2014 16:31:35]
      AdwCleaner[S0].txt - [24751 octets] - [03/11/2013 13:18:19]
      AdwCleaner[S1].txt - [14181 octets] - [02/08/2014 16:34:09]

      ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [14242 octets] ##########
      0
      1. mais maintenant les navigateur me disent : "échec de la connexion au serveur proxy"
        que dois-je faire maintenant ?
        0
      2. c'est bon pour le serveur proxy, j'ai pu régler le problème. et j'ai pu me connecter à facebook sur mozilla, tous les sites en https aussi. la barre websearches a aussi été supprimé sur mon navigateur
        merci beaucoup tu m'as été d'une aide précieuse et tu m'a évité un allé-retour à l'asile (a force je m'arracher presque les cheveux ^^^)
        0
    2. re

      ok, fait ceci et poste le rapport s'il te plaît

      http://sosvirus.net/viewtopic.php?f=281&t=594

      utilisateurs vista-w7-w8 exécuter en tant qu'administrateur (clic droit)

      a la fin de l'installation, décoche la case "activer l'essai gratuit de MBAM premium"

      regarde l'image >> clique ici

      regarde ceci pour le mettre a jour et en français >> clique ici

      dans l'onglet "examens" sélectionne "examen menaces" puis clique sur "examiner maintenant"

      a la fin du scan, clique sur "tout mettre en quarantaine " puis sur "appliquer les actions"

      si MBAM demande de redémarrer le pc, fait le

      le rapport s'affichera sur ton bureau, mais sera aussi disponible dans "historique" et "journaux de l'application"

      sélectionne le rapport et demande l'affichage (choisit bien le dernier en date)

      en bas a gauche, clique sur "exporter" et choisit "format texte"

      enregistre le sur ton bureau (pour le retrouver facilement)

      poste le rapport via 1 copier/coller dans ta prochaine réponse

      merci

      @+

      0
      1. tu as besoin que je fasse quand même ?
        0
      2. re

        oui, et que tu postes le rapport

        merci

        @+
        0
    3. voilà !

      Malwarebytes Anti-Malware
      www.malwarebytes.org

      Date de l'examen: 02/08/2014
      Heure de l'examen: 17:15:29
      Fichier journal: rapprt mb.txt
      Administrateur: Oui

      Version: 2.00.2.1012
      Base de données Malveillants: v2014.08.02.03
      Base de données Rootkits: v2014.08.01.01
      Licence: Gratuite
      Protection contre les malveillants: Désactivé(e)
      Protection contre les sites Web malveillants: Désactivé(e)
      Self-protection: Désactivé(e)

      Système d'exploitation: Windows 7 Service Pack 1
      Processeur: x86
      Système de fichiers: NTFS
      Utilisateur: Florence

      Type d'examen: Examen "Menaces"
      Résultat: Terminé
      Objets analysés: 315888
      Temps écoulé: 8 min, 39 sec

      Mémoire: Activé(e)
      Démarrage: Activé(e)
      Système de fichiers: Activé(e)
      Archives: Activé(e)
      Rootkits: Désactivé(e)
      Heuristics: Activé(e)
      PUP: Activé(e)
      PUM: Activé(e)

      Processus: 0
      (No malicious items detected)

      Modules: 0
      (No malicious items detected)

      Clés du Registre: 11
      PUP.Optional.Snapdo.T, HKU\S-1-5-21-2937913124-2789475648-3743908305-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}, Mis en quarantaine, [e7e4754c3c3f79bde0b59c01ac566e92],
      PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, Mis en quarantaine, [a02b368bf18a211582af9acb26dc9a66],
      PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{11111111-1111-1111-1111-110311711180}, Mis en quarantaine, [c40768599ae169cd7e154851679b6b95],
      PUP.Optional.MultiPlug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{CE681A67-9477-CBE6-EB9D-FE534875F98D}, Mis en quarantaine, [1ab15b664e2dfb3b4f2bc69aaa584bb5],
      PUP.Optional.BrowsersApp.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Browsers App, Mis en quarantaine, [bb107e436615e74f0cd5a22d679b817f],
      PUP.Optional.CinemaHQ.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HQ-V1.8, Mis en quarantaine, [28a36f5290ebfe383103dbf5bb47a65a],
      PUP.Optional.SmartSaver.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\SmartSaver+ 3, Mis en quarantaine, [ba11764b7902ce68ef778273f50d33cd],
      PUP.Optional.MediaPlayer.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\video MediaPlay-Air, Mis en quarantaine, [ddeefec30576fa3cbceeb27fb94b827e],
      PUP.Optional.NetCrawl.A, HKU\S-1-5-21-2937913124-2789475648-3743908305-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\NetCrawl, Mis en quarantaine, [804b04bd136855e182bcc51420e25fa1],
      PUP.Optional.CinemaHQ.A, HKU\S-1-5-21-2937913124-2789475648-3743908305-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HQ-V1.8, Mis en quarantaine, [cefdf9c85823b4821321cc0419e9cb35],
      PUP.Optional.MediaPlayer.A, HKU\S-1-5-21-2937913124-2789475648-3743908305-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\video MediaPlay-Air, Mis en quarantaine, [5c6f7d44106b57df1a90062b917359a7],

      Valeurs du Registre: 1
      PUP.Optional.FastStart.A, HKU\S-1-5-21-2937913124-2789475648-3743908305-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS|appid, faststartff@gmail.com, Mis en quarantaine, [a52605bc5229ea4c4788a5318a78817f]

      Données du Registre: 0
      (No malicious items detected)

      Dossiers: 0
      (No malicious items detected)

      Fichiers: 5
      PUP.Optional.Softonic.A, C:\Users\Florence\Downloads\SoftonicDownloader_pour_mozilla-firefox.exe, Mis en quarantaine, [2ba06e53423953e3e7b314159d646a96],
      Trojan.Downloader, C:\Users\Florence\AppData\Local\Microsoft\WinU\~adqcwhe.exe, Mis en quarantaine, [5972ccf56d0edf573c5794b7aa56ae52],
      PUP.Optional.SmartBar, C:\Windows\Installer\MSI3224.tmp-\Smartbar.Installer.CustomActions.dll, Mis en quarantaine, [c10a6061087365d1cb6d3bf3bc448a76],
      PUP.Optional.SmartBar, C:\Windows\Installer\MSI99D8.tmp-\Smartbar.Installer.CustomActions.dll, Mis en quarantaine, [fccfd9e85d1ee1558fa9c26c47b954ac],
      PUP.Optional.SmartBar, C:\Windows\Installer\MSIE2F9.tmp-\Smartbar.Installer.CustomActions.dll, Mis en quarantaine, [00cb8c353a4115218aae141ab0505fa1],

      Secteurs physiques: 0
      (No malicious items detected)

      (end)
      0
      1. re

        ok, reparamètre tes moteurs de recherche et tes extentions

        Reparamètres tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :
        * Internet Explorer et modules complémentaires / moteurs de recherche :https://forum.malekal.com/viewtopic.php?t=41399&start=
        * Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start=
        * Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start=

        ensuite, fait ceci et poste le rapport s'il te plaît

        télécharge zhpdiag sur ton bureau (outil de diagnostic)

        le lien https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

        le tuto http://www.forum-entraide-informatique.com/support/zhpdiag-tutoriel-t4831.html

        utilisateurs vista-w7-w8 exécuter en tant qu'administrateur (clic droit)

        clique sur "complet" >>aide en image >> clique ici

        le rapport s'affichera sur ton bureau et dans C:\zhpdiag.txt

        poste le rapport via ce lien https://www.cjoint.com/

        merci

        @+

        0
        1. ~ Rapport de ZHPDiag v2014.6.25.98 - Nicolas Coolman (25/06/2014)
          ~ Lancé par Florence (02/08/2014 17:47:44)
          ~ Adresse du Site Web https://nicolascoolman.eu
          ~ Traduit par Nicolas Coolman
          ~ Etat de la version : Nouvelle version disponible
          ~ Liste blanche : Désactivée par l'utilisateur
          ~ Elévation des Privilèges : OK
          ~ User Account Control (UAC): Activate by user

          ---\\ Navigateurs Internet
          MSIE: Internet Explorer v11.0.9600.17207
          MFIE: Mozilla Firefox 31.0 (Defaut)
          GCIE: Google Chrome v36.0.1985.125

          ---\\ Informations sur les produits Windows
          ~ Langage: Français
          Windows 7 Ultimate, 32-bit Service Pack 1 (Build 7601)
          Windows Server License Manager Script : OK
          ~ Windows Operating System - Windows(R) 7, OEM_SLP channel
          System Locked Preinstallation (OEM_SLP) : OK
          Windows ID Activation : OK
          ~ Windows Partial Key : HYRR2
          Windows License : OK
          ~ Windows Remaining Initializations Number : 3
          Software Protection Service (Protection logicielle) : OK
          Windows Automatic Updates : OK
          Windows Activation Technologies : OK

          ---\\ Logiciels de protection du système
          Malwarebytes Anti-Malware version 2.0.2.1012
          Microsoft Security Client v4.5.0216.0
          Windows Defender W7 (Deactivate)

          ---\\ Logiciels d'optimisation du système
          CCleaner v4.10

          ---\\ Logiciels de partage PeerToPeer

          ---\\ Surveillance de Logiciels
          Adobe Flash Player 14 Plugin
          Extended Asian Language font pack for Adobe Reader XI
          Java 7 Update 40

          ---\\ Informations sur le système
          ~ Processor: x86 Family 16 Model 2 Stepping 2, AuthenticAMD
          ~ Operating System: 32 Bits
          Boot mode: Normal (Normal boot)
          Total RAM: 3071 MB (45% free)
          System Restore: Activé (Enable)
          System drive C: has 838 GB (89%) free of 931 GB

          ---\\ Mode de connexion au système
          ~ Computer Name: FLORENCE-PC
          ~ User Name: Florence
          ~ All Users Names: UpdatusUser, Florence, Administrateur,
          ~ Unselected Option: None
          Logged in as Administrator

          ---\\ Variables d'environnement
          ~ System Unit : C:\
          ~ %AppZHP% : C:\Users\Florence\AppData\Roaming\ZHP\
          ~ %AppData% : C:\Users\Florence\AppData\Roaming\
          ~ %Desktop% : C:\Users\Florence\Desktop\
          ~ %Favorites% : C:\Users\Florence\Favorites\
          ~ %LocalAppData% : C:\Users\Florence\AppData\Local\
          ~ %StartMenu% : C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\
          ~ %Windir% : C:\Windows\
          ~ %System% : C:\Windows\System32\

          ---\\ Enumération des unités disques
          C: Hard drive, Flash drive, Thumb drive (Free 838 Go of 931 Go)
          D: Hard drive, Flash drive, Thumb drive (Free 64 Go of 932 Go)
          E: CD-ROM drive (Not Inserted)
          F: Floppy drive, Flash card reader, USB Key (Not Inserted)
          G: Floppy drive, Flash card reader, USB Key (Not Inserted)
          H: Floppy drive, Flash card reader, USB Key (Not Inserted)
          I: Floppy drive, Flash card reader, USB Key (Not Inserted)
          J: Floppy drive, Flash card reader, USB Key (Not Inserted)

          ---\\ Etat du Centre de Sécurité Windows
          [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
          [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
          [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
          [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
          [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
          [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
          [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
          [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
          [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
          [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
          [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
          ~ Security Center: 46 Scanned in 00mn 00s

          ---\\ Recherche particulière de fichiers génériques
          [MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - (.Microsoft Corporation - Explorateur Windows.) (.07/06/2013 - 09:37:06.) -- C:\Windows\Explorer.exe [2616320]
          [MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:14:45.) -- C:\Windows\System32\Wininit.exe [96256]
          [MD5.CCC198257901BEEA2FBF8EB1E7678356] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.18/06/2014 - 23:13:59.) -- C:\Windows\System32\wininet.dll [1791488]
          [MD5.998507B046BA314CE8245364C686FA67] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.04/03/2014 - 10:17:02.) -- C:\Windows\System32\Winlogon.exe [304128]
          [MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 22:29:24.) -- C:\Windows\System32\sppcomapi.dll [193536]
          [MD5.D0B388DA1D111A34366E04EB4A5DD156] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.30/05/2014 - 07:36:07.) -- C:\Windows\system32\Drivers\AFD.sys [338944]
          [MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:26:15.) -- C:\Windows\system32\Drivers\atapi.sys [21584]
          [MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:11:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [70656]
          [MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 22:29:03.) -- C:\Windows\system32\Drivers\Cdrom.sys [108544]
          [MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 22:29:07.) -- C:\Windows\system32\Drivers\DfsC.sys [78336]
          [MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 22:29:03.) -- C:\Windows\system32\Drivers\HDAudBus.sys [108544]
          [MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:11:24.) -- C:\Windows\system32\Drivers\i8042prt.sys [80896]
          [MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 00:54:29.) -- C:\Windows\system32\Drivers\IpNat.sys [101888]
          [MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.07/06/2013 - 09:39:50.) -- C:\Windows\system32\Drivers\MRxSmb.sys [123904]
          [MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 22:29:08.) -- C:\Windows\system32\Drivers\netBT.sys [187904]
          [MD5.C8DFF8D07755A66C7A4A738930F0FEAC] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24/01/2014 - 03:18:22.) -- C:\Windows\system32\Drivers\ntfs.sys [1212352]
          [MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 00:45:35.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
          [MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.14/07/2009 - 00:54:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [78848]
          [MD5.B973FCFC50DC1434E1970A146F7E3885] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.20/11/2010 - 22:29:49.) -- C:\Windows\system32\Drivers\rdpdr.sys [133632]
          [MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 00:53:41.) -- C:\Windows\system32\Drivers\smb.sys [71168]
          [MD5.B459575348C20E8121D6039DA063C704] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 22:29:07.) -- C:\Windows\system32\Drivers\tdx.sys [74752]
          [MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 22:29:03.) -- C:\Windows\system32\Drivers\volsnap.sys [245632]
          ~ Generic Processes: Scanned in 00mn 00s

          ---\\ Etat des fichiers cachés (Caché/Total)
          ~ Mes images (My Pictures) : 1/736
          ~ Mes musiques (My Musics) : 5/2979
          ~ Mes Videos (My Videos) : 1/490
          ~ Mes Favoris (My Favorites) : 1/15
          ~ Mes Documents (My Documents) : 1/2538
          ~ Mon Bureau (My Desktop) : 1/1536
          ~ Menu demarrer (Programs) : 1/42
          ~ Hidden Files: Scanned in 00mn 01s

          ---\\ Processus lancés
          [MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336] [PID.3144]
          [MD5.40B527681CA3CA2F6EC7851018509F29] - (.Pas de propriétaire - Printer Device Monitor.) -- C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe [668328] [PID.3192]
          [MD5.ED7AB9DCD33C64B941EEA350EA713AE0] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Real\RealPlayer\Update\realsched.exe [296520] [PID.3280]
          [MD5.77FBCE63719BE1DFDA9E5178CD7EE7CF] - (.RealNetworks, Inc. - RealPlayer Cloud Service UI.) -- C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe [822880] [PID.3344]
          [MD5.012E2D7CC422CCCC334ADA4BBF8338CB] - (.Pas de propriétaire - Printer Card Transfer Monitor.) -- C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe [25256] [PID.3588]
          [MD5.47C9EF1600EDD9EBD8155EB6B5206B6B] - (.NVIDIA Corporation - NVIDIA Settings.) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe [1821984] [PID.3848]
          [MD5.B43E68B8A022FB00FF54360D408E871B] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [860488] [PID.3116]
          [MD5.10F36FB8CD6218CD7F818268E0F3F9C6] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [275568] [PID.5928]
          [MD5.89B816740FF3A5DB0AAC76CC67EB37E6] - (.RealNetworks, Inc. - RealDownloader.) -- C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe [368728] [PID.4232]
          [MD5.1F62DCBF33A67CAA5E68ADECBB25C3C7] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8071680] [PID.3700]
          ~ Processes Running: Scanned in 00mn 00s

          ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
          C:\Users\Florence\AppData\Local\Google\Chrome\User Data\Default\Preferences
          G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Google Store v.0.2 (Activé)
          G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Docs v.0.7 (Activé)
          G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Drive v.6.3 (Activé)
          G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] YouTube v.4.2.6 (Activé)
          G2 - GCE: Preference [User Data\Default] [cfhdojbkjhnklbpkdaibdccddilifddb] Adblock Plus v.1.8.3, (Activé)
          G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Recherche Google v.0.0.0.20 (Activé)
          G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activé)
          G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.2 (Activé)
          G2 - GCE: Preference [User Data\Default] [gfdkimpbcpahaombhbimeihdjnejgicl] Feedback v.1.0 (Activé)
          G2 - GCE: Preference [User Data\Default] [idhngdhcfkoamngbedgpaokgjbnpdiji] RealPlayer Downloader v.17.0.11 (Désactivé)
          G2 - GCE: Preference [User Data\Default] [kmendfapggjehodndflmmgagdbamhnfd] CryptoTokenExtension v.0.0.1 (Activé)
          G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activé)
          G2 - GCE: Preference [User Data\Default] [mfffpogegjflfpflabcdkioaeobkgjik] GaiaAuthExtension v.0.0.1, (Activé)
          G2 - GCE: Preference [User Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activé)
          G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Activé)
          G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Google+ Hangouts v.1.0 (Activé)
          G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Wallet v.0.0.6.1 (Activé)
          G2 - GCE: Preference [User Data\Default] [pafkbggdmjlpgkdkcbjmhmfcdpncadgh] Google Now v.1.2.0.1 (Activé)
          G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Gmail v.7 (Activé)

          ---\\ Liste des dossiers d'extension Google Chrome
          G2 - EXT: C:\Users\Florence\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [Google Docs]
          G2 - EXT: C:\Users\Florence\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [Google Drive]
          G2 - EXT: C:\Users\Florence\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [YouTube]
          G2 - EXT: C:\Users\Florence\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [Adblock Plus]
          G2 - EXT: C:\Users\Florence\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [Recherche Google]
          G2 - EXT: C:\Users\Florence\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [RealPlayer Downloader]
          G2 - EXT: C:\Users\Florence\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [Google Wallet]
          G2 - EXT: C:\Users\Florence\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [Gmail]
          ~ Google Lines Browser: 27 Scanned in 00mn 06s

          ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
          M2 - MFEP: prefs.js [Florence - 874pluyt.default-1406993868726\{5384767E-00D9-40E9-B72F-9CC39D655D6F}] [] EPUBReader v1.4.2.4 (..)
          P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll
          P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.40.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Windows\system32\npDeployJava1.dll
          P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.40.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.40.2 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
          P2 - FPN: [HKLM] [@nvidia.com/3DVision] - (.NVIDIA Corporation - NVIDIA 3D Vision plugin for Mozilla browsers.) -- C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll
          P2 - FPN: [HKLM] [@nvidia.com/3DVisionStreaming] - (.NVIDIA Corporation - NVIDIA 3D Vision Streaming plugin for Mozilla browsers.) -- C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
          P2 - FPN: [HKLM] [@real.com/nppl3260;version=17.0.11.7] - (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- c:\program files\real\realplayer\Netscape6\nppl3260.dll
          P2 - FPN: [HKLM] [@real.com/nprndlchromebrowserrecordext;version=17.0.11] - (.RealNetworks, Inc. - This plug-in enables downloading with the Download This Video button.) -- C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll
          P2 - FPN: [HKLM] [@real.com/nprndlhtml5videoshim;version=17.0.11] - (.RealNetworks, Inc. - This plug-in enables downloading of HTML5 videos.) -- C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll
          P2 - FPN: [HKLM] [@real.com/nprndlpepperflashvideoshim;version=17.0.11] - (.RealNetworks, Inc. - This plug-in enables downloading of Flash videos.) -- C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll
          P2 - FPN: [HKLM] [@real.com/nprpplugin;version=17.0.11.7] - (.RealPlayer Cloud - RealPlayer Download Plugin.) -- c:\program files\real\realplayer\Netscape6\nprpplugin.dll
          P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
          P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
          P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.1.0] - (.VideoLAN - VLC media player Web Plugin 2.1.0.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll =>.VideoLAN
          P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.07.) -- C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
          ~ Firefox Browser: 15 Scanned in 00mn 00s

          ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
          R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
          R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
          R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://search.safefinder.com/?q= =>Hijacker.SmartBar
          R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = preserve
          R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
          R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.com/?gws_rd=ssl
          R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
          R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
          R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.com/?gws_rd=ssl
          R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = https://search.safefinder.com/?q= =>Hijacker.SmartBar
          R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = https://search.safefinder.com/?q= =>Hijacker.SmartBar
          R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
          R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.07.) (No version) -- (.not file.)
          R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
          ~ IE Browser: 15 Scanned in 00mn 00s

          ---\\ Internet Explorer, Proxy Management (R5)
          R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback>;<local> =>Hijacker.Proxy
          R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:49227;https=127.0.0.1:49227 =>Hijacker.Proxy
          R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
          R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
          R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
          R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
          R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
          ~ Proxy management: Scanned in 00mn 00s

          ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
          F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
          F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
          F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
          ~ Keys: Scanned in 00mn 00s

          ---\\ Hosts file redirection (O1)
          ~ Le fichier hosts est sain (The hosts file is clean).
          ~ Hosts File: Scanned in 00mn 00s
          ~ Nombre de lignes (Lines number): 21

          ---\\ Browser Helper Objects de navigateur (O2)
          O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealDownloader - RealPlayer Video Downloader.) -- C:\Program Files\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
          O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\ssv.dll
          O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\jp2ssv.dll
          ~ BHO: 6 Scanned in 00mn 00s

          ---\\ Applications lancées au démarrage du système (O4)
          O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe
          O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation
          O4 - HKLM\..\Run: [lxdxmon.exe] . (.Pas de propriétaire - Printer Device Monitor.) -- C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe
          O4 - HKLM\..\Run: [lxdxamon] . (...) -- C:\Program Files\Lexmark 3600-4600 Series\lxdxamon.exe
          O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
          O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- c:\program files\real\realplayer\Update\realsched.exe =>.RealNetworks, Inc
          O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
          O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
          O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
          O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
          O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
          O4 - HKUS\S-1-5-21-2937913124-2789475648-3743908305-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
          ~ Application: Scanned in 00mn 00s

          ---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
          O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
          ~ IE Control Panel: 1 Scanned in 00mn 00s

          ---\\ Winsock hijacker (Layered Service Provider) (O10)
          O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
          O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
          O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
          O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
          O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =>.Microsoft Corporation
          O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
          ~ Winsock: 6 Scanned in 00mn 00s

          ---\\ Objets ActiveX (Downloaded Program Files)(O16)
          O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
          ~ Objets ActiveX: Scanned in 00mn 00s

          ---\\ Modification Domaine/Adresses DNS (O17)
          O17 - HKLM\System\CCS\Services\Tcpip\..\{8A69A090-45B4-4899-9CF8-746E2F2E4E57}: DhcpNameServer = 212.27.40.241 212.27.40.240
          O17 - HKLM\System\CS1\Services\Tcpip\..\{8A69A090-45B4-4899-9CF8-746E2F2E4E57}: DhcpNameServer = 212.27.40.241 212.27.40.240
          O17 - HKLM\System\CS2\Services\Tcpip\..\{8A69A090-45B4-4899-9CF8-746E2F2E4E57}: DhcpNameServer = 212.27.40.241 212.27.40.240
          O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240
          ~ Domain: Scanned in 00mn 00s

          ---\\ Protocole additionnel (O18)
          O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
          O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
          ~ Protocole Additionnel: Scanned in 00mn 00s

          ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
          O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
          ~ SSODL: 1 Scanned in 00mn 00s

          ---\\ Liste des services NT non Microsoft et non désactivés (O23)
          O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
          O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc
          O23 - Service: lxdxCATSCustConnectService (lxdxCATSCustConnectService) . (.Lexmark International, Inc. - Lexmark Connect Service Executable.) - C:\Windows\system32\spool\DRIVERS\W32X86\3\lxdxserv.exe
          O23 - Service: lxdx_device (lxdx_device) . (.Pas de propriétaire - Printer Communication System.) - C:\Windows\system32\lxdxcoms.exe
          O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 311.0.) - C:\Windows\system32\nvvsvc.exe
          O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) . (.NVIDIA Corporation - NVIDIA Settings Update Manager.) - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
          O23 - Service: RealNetworks Downloader Resolver Service (RealNetworks Downloader Resolver Service) . (...) - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
          O23 - Service: RealPlayer Cloud Service (RealPlayer Cloud Service) . (.RealNetworks, Inc. - RealPlayer Cloud Service.) - c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe
          O23 - Service: RealPlayer Update Service (RealPlayerUpdateSvc) . (...) - C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
          O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) . (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
          ~ Services: 10 Scanned in 00mn 04s

          ---\\ Enumération Active Desktop & MHTML Editor (O24)
          O24 - Default MHTML Editor: Last - .(...) - (.not file.)
          ~ Desktop Component: 4 Scanned in 00mn 00s

          ---\\ Enumère les données de BootExecute (BEX) (O34)
          O34 - HKLM BootExecute: (autocheck autochk *) - File not found
          ~ BEX: 1 Scanned in 00mn 00s

          ---\\ Tâches planifiées en automatique (O39)
          [MD5.A6B6AB9502B63F43A9A56AE6AFB22078] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [262320]
          [MD5.5B1AA494C27CF0BC3B03E8666ACB225E] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [4455704]
          [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648]
          [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648]
          [MD5.89B816740FF3A5DB0AAC76CC67EB37E6] [APT] [RealDownloaderDownloaderScheduledTaskS-1-5-21-2937913124-2789475648-3743908305-1000] (.RealNetworks, Inc..) -- C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe [368728]
          [MD5.511A3A308CB06529E8BD3E536DF32846] [APT] [RealDownloaderRealUpgradeLogonTaskS-1-5-21-2937913124-2789475648-3743908305-1000] (.RealNetworks, Inc..) -- C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe [147016]
          [MD5.511A3A308CB06529E8BD3E536DF32846] [APT] [RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2937913124-2789475648-3743908305-1000] (.RealNetworks, Inc..) -- C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe [147016]
          [MD5.E7ED679A43196F27FCDA277C3287384E] [APT] [RealPlayerRealUpgradeLogonTaskS-1-5-21-2937913124-2789475648-3743908305-1000] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [141312]
          [MD5.E7ED679A43196F27FCDA277C3287384E] [APT] [RealPlayerRealUpgradeScheduledTaskS-1-5-21-2937913124-2789475648-3743908305-1000] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [141312]
          [MD5.00000000000000000000000000000000] [APT] [{5C667260-CE47-40F6-ABA4-7EF6340036C6}] (...) -- C:\Program Files\SmartSaver+ 3\Uninstall.exe (.not file.) [0] =>PUP.CrossRider
          [MD5.00000000000000000000000000000000] [APT] [{E19CF0DF-FD57-42DE-A405-F0CA499EFF00}] (...) -- C:\Users\Florence\AppData\Roaming\webssearches\UninstallManager.exe (.not file.) [0] =>Hijacker.WebsSearches
          O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
          O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
          O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1056]
          O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1056]
          O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1060]
          O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1060]
          ~ Scheduled Task: 15 Scanned in 00mn 04s

          ---\\ Composants installés (ActiveSetup Installed Components) (O40)
          O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
          O40 - ASIC: Microsoft Windows Media Player 12.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll =>.Microsoft Corporation
          O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
          O40 - ASIC: Internet Explorer - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe =>.Microsoft Corporation
          O40 - ASIC: Microsoft Windows - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe =>.Microsoft Corporation
          O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
          O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
          O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
          O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
          O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
          O40 - ASIC: Google Chrome - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google Inc. - Google Chrome Installer.) -- C:\Program Files\Google\Chrome\Application\36.0.1985.125\Installer\chrmstp.exe
          ~ Active Setup: 11 Scanned in 00mn 00s

          ---\\ Pilotes lancés au démarrage du système (O41)
          O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
          O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
          O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
          O41 - Driver: (cmucnmhz) . (. - .) - C:\Windows\system32\drivers\cmucnmhz.sys (.not file.)
          O41 - Driver: C:\Windows\System32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys
          O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
          O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
          O41 - Driver: (ijkpplmj) . (. - .) - C:\Windows\system32\drivers\ijkpplmj.sys (.not file.)
          O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\System32\DRIVERS\mssmbios.sys
          O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
          O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
          O41 - Driver: (nlstexgs) . (. - .) - C:\Windows\system32\drivers\nlstexgs.sys (.not file.)
          O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
          O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
          O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
          O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
          O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
          O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
          O41 - Driver: (rvsorznd) . (. - .) - C:\Windows\system32\drivers\rvsorznd.sys (.not file.)
          O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys
          O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
          O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
          O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
          O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
          O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
          ~ Drivers: 75 Scanned in 00mn 00s

          ---\\ Logiciels installés (O42)
          O42 - Logiciel: Adobe Flash Player 14 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
          O42 - Logiciel: Adobe Flash Player 14 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
          O42 - Logiciel: Adobe Reader XI (11.0.07) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
          O42 - Logiciel: Atlantis Quest - (.Playrix Entertainment.) [HKLM] -- Atlantis Quest_is1
          O42 - Logiciel: Azada: In Libro - (...) [HKLM] -- BFG-Azada - In Libro
          O42 - Logiciel: Big Fish Games: Game Manager - (...) [HKLM] -- BFGC
          O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
          O42 - Logiciel: Echoes of the Past: La Vengeance de la Sorciere - (...) [HKLM] -- BFG-Echoes of the Past - La Vengeance de la Sorciere
          O42 - Logiciel: Echoes of the Past: Les Citadelles du Temps - (...) [HKLM] -- BFG-Echoes of the Past - Les Citadelles du Temps
          O42 - Logiciel: Enlightenus II: La Tour Eternelle - (...) [HKLM] -- BFG-Enlightenus II - La Tour Eternelle
          O42 - Logiciel: Extended Asian Language font pack for Adobe Reader XI - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-2530-0000-A00000000004}
          O42 - Logiciel: Free Mp3 Wma Converter V 2.2 - (.Koyote Soft.) [HKLM] -- Free Mp3 Wma Converter_is1
          O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
          O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
          O42 - Logiciel: Java 7 Update 40 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217040FF}
          O42 - Logiciel: Lexmark 3600-4600 Series - (.Lexmark International, Inc..) [HKLM] -- Lexmark 3600-4600 Series
          O42 - Logiciel: Logiciel d'archivage WinRAR - (...) [HKLM] -- WinRAR archiver
          O42 - Logiciel: Malwarebytes Anti-Malware version 2.0.2.1012 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes Anti-Malware_is1
          O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM] -- {36A345C9-0691-45A1-AEEF-29ECEC8B5014}
          O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM] -- Microsoft Security Client
          O42 - Logiciel: Mises à jour NVIDIA 1.11.3 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update
          O42 - Logiciel: Mozilla Firefox 31.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 31.0 (x86 fr)
          O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
          O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers
          O42 - Logiciel: NVIDIA Logiciel système PhysX 9.13.0725 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX
          O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {7B5AA67E-FEA0-40BB-BAB5-CA56645A589C}
          O42 - Logiciel: NVIDIA Pilote 3D Vision 311.06 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision
          O42 - Logiciel: NVIDIA Pilote du contrôleur 3D Vision 326.01 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB
          O42 - Logiciel: NVIDIA Pilote graphique 311.06 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver
          O42 - Logiciel: NVIDIA Stereoscopic 3D Driver - (.NVIDIA Corporation.) [HKLM] -- NVIDIAStereo
          O42 - Logiciel: OpenOffice 4.0.1 - (.Apache Software Foundation.) [HKLM] -- {8D5D54B8-3D29-4AB4-8DA8-1868DAF941D8}
          O42 - Logiciel: RealDownloader - (.RealNetworks, Inc..) [HKLM] -- {20C2051A-1ACA-48B4-9BA5-24625DCBD880}
          O42 - Logiciel: RealPlayer Cloud - (.RealNetworks.) [HKLM] -- RealPlayer 17.0
          O42 - Logiciel: RealUpgrade 1.1 - (.RealNetworks, Inc..) [HKLM] -- {28C2DED6-325B-4CC7-983A-1777C8F7FBAB}
          O42 - Logiciel: Reincarnations: Les Vies Passées - (...) [HKLM] -- BFG-Reincarnations - Les Vies Passees
          O42 - Logiciel: Réincarnations: L'Éveil - (...) [HKLM] -- BFG-Reincarnations - L'Eveil
          O42 - Logiciel: Shaolin Mystery: Le Sceptre du Dragon - (...) [HKLM] -- BFG-Shaolin Mystery - Le Sceptre du Dragon
          O42 - Logiciel: The Agency of Anomalies: LOrphelinat du Dr Weiss - (...) [HKLM] -- BFG-The Agency of Anomalies - LOrphelinat du Dr Weiss
          O42 - Logiciel: The Rise of Atlantis - (.Playrix Entertainment.) [HKLM] -- The Rise of Atlantis_is1
          O42 - Logiciel: UpdateService - (.RealNetworks, Inc..) [HKLM] -- {E3AE96D6-E196-45B4-AF62-2B41998B9E37}
          O42 - Logiciel: VLC media player 2.1.0 - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN
          ~ Logic: 41 Scanned in 00mn 00s

          ---\\ HKCU & HKLM Software Keys
          [HKCU\Software\ASRock]
          [HKCU\Software\Adobe]
          [HKCU\Software\AppDataLow\Software\Adobe]
          [HKCU\Software\AppDataLow\Software\JavaSoft]
          [HKCU\Software\AppDataLow\Software\RealNetworks]
          [HKCU\Software\AppDataLow]
          [HKCU\Software\Big Fish Games]
          [HKCU\Software\Classes]
          [HKCU\Software\Clients]
          [HKCU\Software\Free Easy CD DVD Burner]
          [HKCU\Software\Free mp3 Wma Converter]
          [HKCU\Software\Gogii]
          [HKCU\Software\Google]
          [HKCU\Software\Haali]
          [HKCU\Software\JavaSoft]
          [HKCU\Software\Licenses]
          [HKCU\Software\Macromedia]
          [HKCU\Software\Malavida]
          [HKCU\Software\MozillaPlugins]
          [HKCU\Software\Mozilla]
          [HKCU\Software\NVIDIA Corporation]
          [HKCU\Software\Netscape]
          [HKCU\Software\OB]
          [HKCU\Software\OpenOffice]
          [HKCU\Software\PTP]
          [HKCU\Software\Piriform]
          [HKCU\Software\Policies]
          [HKCU\Software\PopCap]
          [HKCU\Software\RealNetworks]
          [HKCU\Software\Software]
          [HKCU\Software\Store]
          [HKCU\Software\TVANTS]
          [HKCU\Software\TeleCharger]
          [HKCU\Software\Trolltech]
          [HKCU\Software\VB and VBA Program Settings]
          [HKCU\Software\WinRAR SFX]
          [HKCU\Software\WinRAR]
          [HKCU\Software\ZebHelpProcess Helper]
          [HKLM\Software\AGEIA Technologies]
          [HKLM\Software\ATI Technologies]
          [HKLM\Software\Adblock Plus for IE]
          [HKLM\Software\Adobe]
          [HKLM\Software\AdwCleaner]
          [HKLM\Software\Big Fish Games]
          [HKLM\Software\BrowserChoice]
          [HKLM\Software\CBSTEST]
          [HKLM\Software\CDDB]
          [HKLM\Software\Classes]
          [HKLM\Software\Clients]
          [HKLM\Software\EnigmaSoftwareGroup]
          [HKLM\Software\Google]
          [HKLM\Software\HaaliMkx]
          [HKLM\Software\Intel]
          [HKLM\Software\JavaSoft]
          [HKLM\Software\JreMetrics]
          [HKLM\Software\Khronos]
          [HKLM\Software\LexmarkInkjet]
          [HKLM\Software\Lexmark]
          [HKLM\Software\Licenses]
          [HKLM\Software\Macromedia]
          [HKLM\Software\Malwarebytes' Anti-Malware]
          [HKLM\Software\MaxPower]
          [HKLM\Software\MozillaPlugins]
          [HKLM\Software\Mozilla]
          [HKLM\Software\NVIDIA Corporation]
          [HKLM\Software\ODBC]
          [HKLM\Software\OpenOffice]
          [HKLM\Software\Piriform]
          [HKLM\Software\Policies]
          [HKLM\Software\RealNetworks]
          [HKLM\Software\RegisteredApplications]
          [HKLM\Software\Sonic]
          [HKLM\Software\Symantec]
          [HKLM\Software\VideoLAN]
          [HKLM\Software\Volatile]
          [HKLM\Software\WOW6432Node]
          [HKLM\Software\WinRAR]
          [HKLM\Software\WinU]
          [HKLM\Software\Wise Solutions]
          [HKLM\Software\Xing Technology Corp.]
          [HKLM\Software\dotNetInstaller]
          [HKLM\Software\mozilla.org]
          ~ Key Software: 166 Scanned in 00mn 00s

          ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
          O43 - CFD: 29/09/2013 - 13:29:54 - [] ----D C:\Program Files\Adobe
          O43 - CFD: 29/07/2014 - 17:08:04 - [] ----D C:\Program Files\Azada - In Libro
          O43 - CFD: 31/10/2013 - 19:06:56 - [] ----D C:\Program Files\bfgclient
          O43 - CFD: 21/02/2014 - 23:51:53 - [] ----D C:\Program Files\CCleaner
          O43 - CFD: 26/07/2014 - 18:01:40 - [] ----D C:\Program Files\Common Files
          O43 - CFD: 21/07/2014 - 01:29:27 - [0] ----D C:\Program Files\Deal Keeper
          O43 - CFD: 07/06/2013 - 10:30:56 - [] ----D C:\Program Files\DVD Maker
          O43 - CFD: 07/07/2014 - 22:02:17 - [] ----D C:\Program Files\Echoes of the Past - La Vengeance de la Sorciere
          O43 - CFD: 11/07/2014 - 15:29:51 - [] ----D C:\Program Files\Echoes of the Past - Les Citadelles du Temps
          O43 - CFD: 21/07/2014 - 02:10:57 - [] ----D C:\Program Files\Enigma Software Group
          O43 - CFD: 27/07/2014 - 20:34:56 - [] ----D C:\Program Files\Enlightenus II - La Tour Eternelle
          O43 - CFD: 28/09/2013 - 12:59:20 - [] -SH-D C:\Program Files\Fichiers communs
          O43 - CFD: 25/11/2013 - 16:11:27 - [] ----D C:\Program Files\Free mp3 Wma Converter
          O43 - CFD: 02/08/2014 - 15:47:32 - [] ----D C:\Program Files\Google
          O43 - CFD: 10/07/2014 - 03:19:52 - [] ----D C:\Program Files\Internet Explorer
          O43 - CFD: 21/10/2013 - 17:04:29 - [] ----D C:\Program Files\Java
          O43 - CFD: 29/09/2013 - 12:48:00 - [] ----D C:\Program Files\Lexmark 3600-4600 Series
          O43 - CFD: 02/08/2014 - 17:06:13 - [] ----D C:\Program Files\Malwarebytes Anti-Malware
          O43 - CFD: 12/04/2011 - 03:44:45 - [] ----D C:\Program Files\Microsoft Games
          O43 - CFD: 03/04/2014 - 03:01:00 - [] ----D C:\Program Files\Microsoft Security Client
          O43 - CFD: 28/09/2013 - 13:04:07 - [] ----D C:\Program Files\Microsoft.NET
          O43 - CFD: 02/08/2014 - 15:20:13 - [] ----D C:\Program Files\Mozilla Firefox
          O43 - CFD: 30/07/2014 - 19:12:42 - [] ----D C:\Program Files\Mozilla Maintenance Service
          O43 - CFD: 14/07/2009 - 06:52:30 - [] ----D C:\Program Files\MSBuild
          O43 - CFD: 29/09/2013 - 14:49:09 - [] ----D C:\Program Files\NVIDIA Corporation
          O43 - CFD: 29/09/2013 - 12:22:20 - [] ----D C:\Program Files\OpenOffice 4
          O43 - CFD: 18/11/2013 - 17:58:20 - [] ----D C:\Program Files\Playrix Entertainment
          O43 - CFD: 26/07/2014 - 18:01:43 - [] ----D C:\Program Files\Real
          O43 - CFD: 21/07/2014 - 02:00:39 - [] ----D C:\Program Files\RealNetworks
          O43 - CFD: 14/07/2009 - 06:52:30 - [] ----D C:\Program Files\Reference Assemblies
          O43 - CFD: 31/10/2013 - 19:11:33 - [] ----D C:\Program Files\Reincarnations - L'Eveil
          O43 - CFD: 31/10/2013 - 19:17:17 - [] ----D C:\Program Files\Reincarnations - Les Vies Passees
          O43 - CFD: 25/07/2014 - 23:07:15 - [0] ----D C:\Program Files\Setup Support for SearchProtect =>PUP.SearchProtect
          O43 - CFD: 04/07/2014 - 22:24:52 - [] ----D C:\Program Files\Shaolin Mystery - Le Sceptre du Dragon
          O43 - CFD: 10/07/2014 - 17:47:44 - [] ----D C:\Program Files\The Agency of Anomalies - LOrphelinat du Dr Weiss
          O43 - CFD: 14/07/2009 - 06:53:23 - [0] --H-D C:\Program Files\Uninstall Information
          O43 - CFD: 29/09/2013 - 18:50:15 - [] ----D C:\Program Files\VideoLAN
          O43 - CFD: 28/09/2013 - 14:04:08 - [] ----D C:\Program Files\Windows Defender
          O43 - CFD: 10/07/2014 - 03:19:53 - [] ----D C:\Program Files\Windows Journal
          O43 - CFD: 07/06/2013 - 10:30:56 - [] ----D C:\Program Files\Windows Mail =>.Microsoft Corporation
          O43 - CFD: 12/12/2013 - 03:18:52 - [] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation
          O43 - CFD: 28/09/2013 - 12:59:20 - [] ----D C:\Program Files\Windows NT
          O43 - CFD: 07/06/2013 - 10:30:56 - [] ----D C:\Program Files\Windows Photo Viewer
          O43 - CFD: 20/11/2010 - 23:33:48 - [] ----D C:\Program Files\Windows Portable Devices
          O43 - CFD: 07/06/2013 - 10:30:56 - [] ----D C:\Program Files\Windows Sidebar
          O43 - CFD: 29/09/2013 - 13:26:10 - [] ----D C:\Program Files\WinRAR
          O43 - CFD: 02/08/2014 - 17:47:02 - [] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman
          O43 - CFD: 29/09/2013 - 13:30:15 - [] ----D C:\Program Files\Common Files\Adobe
          O43 - CFD: 28/09/2013 - 16:01:10 - [] ----D C:\Program Files\Common Files\Java
          O43 - CFD: 29/09/2013 - 12:20:06 - [] ----D C:\Program Files\Common Files\microsoft shared
          O43 - CFD: 14/07/2009 - 04:37:05 - [] ----D C:\Program Files\Common Files\Services
          O43 - CFD: 14/07/2009 - 04:37:05 - [] ----D C:\Program Files\Common Files\SpeechEngines
          O43 - CFD: 07/06/2013 - 10:41:57 - [] ----D C:\Program Files\Common Files\System
          O43 - CFD: 21/07/2014 - 02:09:54 - [] ----D C:\Program Files\Common Files\Wise Installation Wizard
          O43 - CFD: 26/07/2014 - 18:01:40 - [] ----D C:\Program Files\Common Files\xing shared
          O43 - CFD: 03/10/2013 - 09:20:07 - [] ----D C:\ProgramData\Adobe
          O43 - CFD: 14/07/2009 - 06:53:55 - [] -SH-D C:\ProgramData\Application Data
          O43 - CFD: 28/09/2013 - 12:59:20 - [] -SH-D C:\ProgramData\Bureau
          O43 - CFD: 25/07/2014 - 23:15:54 - [] ----D C:\ProgramData\c2fc9ecbf5ec5e83
          O43 - CFD: 14/07/2009 - 06:53:55 - [] -SH-D C:\ProgramData\Desktop
          O43 - CFD: 14/07/2009 - 06:53:55 - [] -SH-D C:\ProgramData\Documents
          O43 - CFD: 28/09/2013 - 12:59:20 - [] -SH-D C:\ProgramData\Favoris
          O43 - CFD: 14/07/2009 - 06:53:55 - [] -SH-D C:\ProgramData\Favorites
          O43 - CFD: 24/07/2014 - 17:33:11 - [] ----D C:\ProgramData\Lx_cats
          O43 - CFD: 02/08/2014 - 17:06:05 - [] ----D C:\ProgramData\Malwarebytes
          O43 - CFD: 28/09/2013 - 12:59:20 - [] -SH-D C:\ProgramData\Menu Démarrer
          O43 - CFD: 27/02/2014 - 17:34:55 - [] -S--D C:\ProgramData\Microsoft
          O43 - CFD: 28/09/2013 - 12:59:20 - [] -SH-D C:\ProgramData\Modèles
          O43 - CFD: 28/09/2013 - 16:07:11 - [] ----D C:\ProgramData\Mozilla
          O43 - CFD: 02/08/2014 - 17:26:39 - [] ----D C:\ProgramData\NVIDIA
          O43 - CFD: 28/09/2013 - 13:43:23 - [] ----D C:\ProgramData\NVIDIA Corporation
          O43 - CFD: 20/10/2013 - 17:09:33 - [0] ----D C:\ProgramData\Oracle
          O43 - CFD: 14/12/2013 - 21:11:50 - [] ----D C:\ProgramData\PlayFirst
          O43 - CFD: 01/11/2013 - 20:50:38 - [] ----D C:\ProgramData\Playrix Entertainment
          O43 - CFD: 16/02/2014 - 16:55:02 - [] ----D C:\ProgramData\PopCap Games
          O43 - CFD: 26/07/2014 - 18:01:38 - [] ----D C:\ProgramData\Real
          O43 - CFD: 21/07/2014 - 02:00:37 - [] ----D C:\ProgramData\RealNetworks
          O43 - CFD: 14/07/2009 - 06:53:55 - [] -SH-D C:\ProgramData\Start Menu
          O43 - CFD: 28/09/2013 - 16:01:11 - [] ----D C:\ProgramData\Sun
          O43 - CFD: 29/07/2014 - 19:09:46 - [0] ---AD C:\ProgramData\TEMP
          O43 - CFD: 14/07/2009 - 06:53:55 - [] -SH-D C:\ProgramData\Templates
          O43 - CFD: 29/09/2013 - 16:11:11 - [] ----D C:\Users\Florence\AppData\Roaming\Adobe
          O43 - CFD: 26/06/2014 - 00:50:52 - [] ----D C:\Users\Florence\AppData\Roaming\AlawarEntertainment
          O43 - CFD: 02/07/2014 - 00:10:33 - [] ----D C:\Users\Florence\AppData\Roaming\Artifex Mundi
          O43 - CFD: 18/11/2013 - 17:59:17 - [] ----D C:\Users\Florence\AppData\Roaming\Big Fish Games
          O43 - CFD: 17/07/2014 - 18:11:59 - [] ----D C:\Users\Florence\AppData\Roaming\dvdcss
          O43 - CFD: 03/11/2013 - 19:07:56 - [] ----D C:\Users\Florence\AppData\Roaming\Enki Games
          O43 - CFD: 27/07/2014 - 20:35:38 - [] ----D C:\Users\Florence\AppData\Roaming\Enlightenus2SE_BFG
          O43 - CFD: 25/11/2013 - 16:12:19 - [] ----D C:\Users\Florence\AppData\Roaming\FreeAudioPack
          O43 - CFD: 22/02/2014 - 00:04:29 - [] ----D C:\Users\Florence\AppData\Roaming\FreeBurner
          O43 - CFD: 13/12/2013 - 13:46:31 - [] ----D C:\Users\Florence\AppData\Roaming\Gogii
          O43 - CFD: 28/09/2013 - 13:15:10 - [] ----D C:\Users\Florence\AppData\Roaming\Identities
          O43 - CFD: 29/09/2013 - 12:49:20 - [] ----D C:\Users\Florence\AppData\Roaming\Lexmark Productivity Studio
          O43 - CFD: 28/09/2013 - 15:19:03 - [] ----D C:\Users\Florence\AppData\Roaming\Macromedia
          O43 - CFD: 28/09/2013 - 12:49:28 - [] ----D C:\Users\Florence\AppData\Roaming\Marine Aquarium 3
          O43 - CFD: 12/04/2011 - 03:44:38 - [0] ----D C:\Users\Florence\AppData\Roaming\Media Center Programs
          O43 - CFD: 02/08/2014 - 17:42:39 - [] -S--D C:\Users\Florence\AppData\Roaming\Microsoft
          O43 - CFD: 28/09/2013 - 16:07:23 - [] ----D C:\Users\Florence\AppData\Roaming\Mozilla
          O43 - CFD: 29/07/2014 - 17:09:02 - [] ----D C:\Users\Florence\AppData\Roaming\nBrowser
          O43 - CFD: 29/09/2013 - 16:04:26 - [] ----D C:\Users\Florence\AppData\Roaming\OpenOffice
          O43 - CFD: 11/07/2014 - 15:30:34 - [] ----D C:\Users\Florence\AppData\Roaming\Orneon
          O43 - CFD: 14/12/2013 - 21:11:50 - [] ----D C:\Users\Florence\AppData\Roaming\PlayFirst
          O43 - CFD: 26/07/2014 - 18:02:18 - [] ----D C:\Users\Florence\AppData\Roaming\Real
          O43 - CFD: 21/07/2014 - 02:01:18 - [] ----D C:\Users\Florence\AppData\Roaming\RealNetworks
          O43 - CFD: 04/07/2014 - 22:40:19 - [] ----D C:\Users\Florence\AppData\Roaming\ShaoLin
          O43 - CFD: 25/07/2014 - 22:58:39 - [0] ----D C:\Users\Florence\AppData\Roaming\Store
          O43 - CFD: 30/07/2014 - 01:22:17 - [] ----D C:\Users\Florence\AppData\Roaming\vlc
          O43 - CFD: 29/09/2013 - 18:35:04 - [] ----D C:\Users\Florence\AppData\Roaming\WinRAR
          O43 - CFD: 02/08/2014 - 17:48:12 - [] ----D C:\Users\Florence\AppData\Roaming\ZHP =>.Nicolas Coolman
          O43 - CFD: 25/11/2013 - 14:43:28 - [] ----D C:\Users\Florence\AppData\Local\Adobe
          O43 - CFD: 28/09/2013 - 13:00:26 - [] -SH-D C:\Users\Florence\AppData\Local\Application Data
          O43 - CFD: 02/08/2014 - 15:45:59 - [] ----D C:\Users\Florence\AppData\Local\Apps
          O43 - CFD: 21/07/2014 - 01:11:52 - [] ----D C:\Users\Florence\AppData\Local\com
          O43 - CFD: 21/07/2014 - 01:08:59 - [] ----D C:\Users\Florence\AppData\Local\Comodo
          O43 - CFD: 02/08/2014 - 15:46:02 - [0] ----D C:\Users\Florence\AppData\Local\Deployment
          O43 - CFD: 02/08/2014 - 16:45:05 - [] ----D C:\Users\Florence\AppData\Local\Diagnostics
          O43 - CFD: 03/11/2013 - 14:48:32 - [0] ----D C:\Users\Florence\AppData\Local\ElevatedDiagnostics
          O43 - CFD: 30/04/2014 - 13:04:14 - [] -SH-D C:\Users\Florence\AppData\Local\EmieSiteList
          O43 - CFD: 30/04/2014 - 13:04:14 - [] -SH-D C:\Users\Florence\AppData\Local\EmieUserList
          O43 - CFD: 02/08/2014 - 15:47:47 - [] ----D C:\Users\Florence\AppData\Local\Google
          O43 - CFD: 28/09/2013 - 13:00:26 - [] -SH-D C:\Users\Florence\AppData\Local\Historique
          O43 - CFD: 29/09/2013 - 12:18:21 - [] ----D C:\Users\Florence\AppData\Local\Macromedia
          O43 - CFD: 25/07/2014 - 23:03:44 - [] ----D C:\Users\Florence\AppData\Local\Microsoft
          O43 - CFD: 01/03/2014 - 02:38:54 - [] ----D C:\Users\Florence\AppData\Local\Microsoft Games
          O43 - CFD: 06/11/2013 - 17:07:46 - [] ----D C:\Users\Florence\AppData\Local\Mozilla
          O43 - CFD: 28/09/2013 - 15:33:21 - [] ----D C:\Users\Florence\AppData\Local\OCCT_-_Ocbase_-_Adrien_Me
          O43 - CFD: 16/02/2014 - 16:53:03 - [] ----D C:\Users\Florence\AppData\Local\Programs
          O43 - CFD: 02/08/2014 - 17:47:09 - [] ----D C:\Users\Florence\AppData\Local\Temp
          O43 - CFD: 28/09/2013 - 13:00:26 - [] -SH-D C:\Users\Florence\AppData\Local\Temporary Internet Files
          O43 - CFD: 31/10/2013 - 19:24:47 - [] ----D C:\Users\Florence\AppData\Local\VirtualStore
          O43 - CFD: 14/07/2009 - 06:42:04 - [] R---D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
          O43 - CFD: 15/05/2014 - 22:00:24 - [] R---D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
          O43 - CFD: 29/07/2014 - 17:05:02 - [] ----D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Azada - In Libro
          O43 - CFD: 07/07/2014 - 21:52:16 - [] ----D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Echoes of the Past - La Vengeance de la Sorciere
          O43 - CFD: 11/07/2014 - 15:20:13 - [] ----D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Echoes of the Past - Les Citadelles du Temps
          O43 - CFD: 27/07/2014 - 20:30:17 - [] ----D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Enlightenus II - La Tour Eternelle
          O43 - CFD: 10/05/2014 - 01:04:16 - [0] ----D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KeyHoleTV
          O43 - CFD: 14/07/2009 - 06:37:42 - [] R---D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
          O43 - CFD: 31/10/2013 - 19:08:00 - [] ----D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Reincarnations - L'Eveil
          O43 - CFD: 31/10/2013 - 19:14:27 - [] ----D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Reincarnations - Les Vies Passees
          O43 - CFD: 04/07/2014 - 22:19:50 - [] ----D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Shaolin Mystery - Le Sceptre du Dragon
          O43 - CFD: 25/07/2014 - 23:06:37 - [] R---D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
          O43 - CFD: 10/07/2014 - 17:40:20 - [] ----D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Agency of Anomalies - LOrphelinat du Dr Weiss
          O43 - CFD: 29/09/2013 - 13:26:10 - [] ----D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
          ~ Program Folder: 144 Scanned in 00mn 00s

          ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
          O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 02/08/2014 - 14:14:38 ---A- . (...) -- C:\Windows\setuperr.log [0]
          O44 - LFC:[MD5.0DC5AF80D059DEC792B665ED598C6567] - 02/08/2014 - 15:32:10 ---A- . (.SQLite Development Team - SQLite Dynamic Link Library (No TCL).) -- C:\Windows\System32\sqlite3.dll [536576]
          O44 - LFC:[MD5.8683C1B450F4B3872839308D836E0F92] - 02/08/2014 - 16:06:05 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [23256]
          O44 - LFC:[MD5.1AA835E8A0B8EDF3D676B4ED4BF5EF07] - 02/08/2014 - 16:06:05 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\Drivers\mbamchameleon.sys [74456]
          O44 - LFC:[MD5.BD27D97297934FD4217A37FD28A7ABC7] - 02/08/2014 - 16:06:05 ---A- . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\Drivers\mwac.sys [51928]
          O44 - LFC:[MD5.A0AA48914913FABBC0E918AA09FA1C15] - 02/08/2014 - 16:26:34 ---A- . (...) -- C:\Windows\PFRO.log [1994]
          O44 - LFC:[MD5.2EED42605FECF2876FED8CFEA4CA62F0] - 02/08/2014 - 16:26:39 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
          O44 - LFC:[MD5.B0EC8C6756A84C17ADB89B58786DD8E4] - 02/08/2014 - 16:27:08 ---A- . (...) -- C:\Windows\setupact.log [280]
          O44 - LFC:[MD5.12E71DA845D76665B56753AD149E32B3] - 02/08/2014 - 16:28:30 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\MBAMSwissArmy.sys [110296]
          O44 - LFC:[MD5.69FD46FE1CCF4206CB9270715FD2AB2F] - 02/08/2014 - 16:31:24 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1667932]
          O44 - LFC:[MD5.EE001B28796068D8AC088083AE423DF8] - 02/08/2014 - 16:31:24 ---A- . (...) -- C:\Windows\System32\perfc009.dat [121724]
          O44 - LFC:[MD5.FBF6975EBEBDCBA3FBB7FF3F49253A1D] - 02/08/2014 - 16:31:24 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [149766]
          O44 - LFC:[MD5.A4E31C907C0852C05EAF58363563E930] - 02/08/2014 - 16:31:24 ---A- . (...) -- C:\Windows\System32\perfh009.dat [653852]
          O44 - LFC:[MD5.9FD67EBC47D2ECBA7DE1EF28A0358245] - 02/08/2014 - 16:31:24 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [747242]
          O44 - LFC:[MD5.CEA59F9110CF91F6A7182FA40C1951D1] - 02/08/2014 - 16:41:41 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1823061]
          O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 20/07/2014 - 23:21:18 --HA- . (...) -- C:\Windows\System32\Drivers\Msft_Kernel_webinstr_01009.Wdf [0]
          O44 - LFC:[MD5.F2512A1342B5346B2A40BC0E0341789D] - 25/07/2014 - 22:12:58 ---A- . (...) -- C:\Windows\System32\${LOGFILE} [1635]
          O44 - LFC:[MD5.8834DBB7C909F77378BDFE4D49F36CCB] - 26/07/2014 - 17:00:34 ---A- . (.Microsoft Corporation - Microsoft® C Runtime Library.) -- C:\Windows\System32\msvcr71.dll [353864]
          O44 - LFC:[MD5.C4883BCA491DF35CA3311E9244FB3E3A] - 26/07/2014 - 17:00:34 ---A- . (.Microsoft Corporation - Microsoft® C++ Runtime Library.) -- C:\Windows\System32\msvcp71.dll [505416]
          O44 - LFC:[MD5.A4A428BE3200FCF5492AE0329ED36031] - 26/07/2014 - 17:00:48 ---A- . (.Progressive Networks - Pas de description.) -- C:\Windows\System32\pncrt.dll [278600]
          O44 - LFC:[MD5.B46254B1DA166461621B89382230A3BB] - 26/07/2014 - 17:01:31 ---A- . (.RealNetworks, Inc. - Real Player(tm) ActiveX Control.) -- C:\Windows\System32\rmoc3260.dll [201800]
          ~ Files: 21 Scanned in 00mn 28s

          ---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
          O45 - LFCP:[MD5.565AF98E8F54A193409DF9CAF7E62271] - 02/08/2014 - 14:11:34 ---A- - C:\Windows\Prefetch\BABMAINT.EXE-4876B292.pf =>Hijacker.BabSolution
          O45 - LFCP:[MD5.6261ADB0C62F8C33CD0F5E37C8785FA1] - 02/08/2014 - 14:12:28 ---A- - C:\Windows\Prefetch\BUENOSEARCH.EXE-CB0C201A.pf =>PUP.BuenoSearch
          O45 - LFCP:[MD5.7AA3477E33077919AE4BFA3C34BA00D1] - 02/08/2014 - 14:12:37 ---A- - C:\Windows\Prefetch\BUENOSEARCH.EXE-E210C402.pf =>PUP.BuenoSearch
          O45 - LFCP:[MD5.1D06F1C827B029057CD36DC1C5C3959D] - 02/08/2014 - 14:11:15 ---A- - C:\Windows\Prefetch\BUENOSEARCHTB.EXE-B7A2DF30.pf =>PUP.BuenoSearch
          O45 - LFCP:[MD5.50F15655CAE1286BE56AA4083341A3E1] - 02/08/2014 - 14:12:10 ---A- - C:\Windows\Prefetch\DSEARCHLINK.EXE-1BB5AC19.pf =>Toolbar.DeltaSearch
          O45 - LFCP:[MD5.9F3561287DC49C1A49A9200258F35968] - 02/08/2014 - 14:11:22 ---A- - C:\Windows\Prefetch\DSEARCHLINK.EXE-864AE3F5.pf =>Toolbar.DeltaSearch
          O45 - LFCP:[MD5.E7375FEAAA007D80AD3690545818260A] - 02/08/2014 - 14:09:43 ---A- - C:\Windows\Prefetch\SOFTONICDOWNLOADER_POUR_MOZIL-AA47197A.pf =>Toolbar.Conduit
          O45 - LFCP:[MD5.28942F316CDF1A439B8819541BC38BB8] - 02/08/2014 - 14:11:14 ---A- - C:\Windows\Prefetch\VOPACKAGE.EXE-9596194D.pf =>Adware.Downware
          O45 - LFCP:[MD5.E7943B81C67621D52634C4A6DB5699A4] - 02/08/2014 - 14:10:40 ---A- - C:\Windows\Prefetch\VOPACKAGE.EXE-DC9CCDA2.pf =>Adware.Downware
          ~ Prefetcher: 9 Scanned in 00mn 00s

          ---\\ Déni du service (Local Se
          0
        2. je veux bien te poster le rapport, mais le site il ne veut pas le poster
          0
        3. re

          ça craint 1 peu pour poster les messages, essaye jusqu'au moment où le message va passer

          si ça ne fonctionne vraiment pas, dit le moi

          merci

          @+
          0
      2. la suite

        ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
        O43 - CFD: 29/09/2013 - 13:29:54 - [] ----D C:\Program Files\Adobe
        O43 - CFD: 29/07/2014 - 17:08:04 - [] ----D C:\Program Files\Azada - In Libro
        O43 - CFD: 31/10/2013 - 19:06:56 - [] ----D C:\Program Files\bfgclient
        O43 - CFD: 21/02/2014 - 23:51:53 - [] ----D C:\Program Files\CCleaner
        O43 - CFD: 26/07/2014 - 18:01:40 - [] ----D C:\Program Files\Common Files
        O43 - CFD: 21/07/2014 - 01:29:27 - [0] ----D C:\Program Files\Deal Keeper
        O43 - CFD: 07/06/2013 - 10:30:56 - [] ----D C:\Program Files\DVD Maker
        O43 - CFD: 07/07/2014 - 22:02:17 - [] ----D C:\Program Files\Echoes of the Past - La Vengeance de la Sorciere
        O43 - CFD: 11/07/2014 - 15:29:51 - [] ----D C:\Program Files\Echoes of the Past - Les Citadelles du Temps
        O43 - CFD: 21/07/2014 - 02:10:57 - [] ----D C:\Program Files\Enigma Software Group
        O43 - CFD: 27/07/2014 - 20:34:56 - [] ----D C:\Program Files\Enlightenus II - La Tour Eternelle
        O43 - CFD: 28/09/2013 - 12:59:20 - [] -SH-D C:\Program Files\Fichiers communs
        O43 - CFD: 25/11/2013 - 16:11:27 - [] ----D C:\Program Files\Free mp3 Wma Converter
        O43 - CFD: 02/08/2014 - 15:47:32 - [] ----D C:\Program Files\Google
        O43 - CFD: 10/07/2014 - 03:19:52 - [] ----D C:\Program Files\Internet Explorer
        O43 - CFD: 21/10/2013 - 17:04:29 - [] ----D C:\Program Files\Java
        O43 - CFD: 29/09/2013 - 12:48:00 - [] ----D C:\Program Files\Lexmark 3600-4600 Series
        O43 - CFD: 02/08/2014 - 17:06:13 - [] ----D C:\Program Files\Malwarebytes Anti-Malware
        O43 - CFD: 12/04/2011 - 03:44:45 - [] ----D C:\Program Files\Microsoft Games
        O43 - CFD: 03/04/2014 - 03:01:00 - [] ----D C:\Program Files\Microsoft Security Client
        O43 - CFD: 28/09/2013 - 13:04:07 - [] ----D C:\Program Files\Microsoft.NET
        O43 - CFD: 02/08/2014 - 15:20:13 - [] ----D C:\Program Files\Mozilla Firefox
        O43 - CFD: 30/07/2014 - 19:12:42 - [] ----D C:\Program Files\Mozilla Maintenance Service
        O43 - CFD: 14/07/2009 - 06:52:30 - [] ----D C:\Program Files\MSBuild
        O43 - CFD: 29/09/2013 - 14:49:09 - [] ----D C:\Program Files\NVIDIA Corporation
        O43 - CFD: 29/09/2013 - 12:22:20 - [] ----D C:\Program Files\OpenOffice 4
        O43 - CFD: 18/11/2013 - 17:58:20 - [] ----D C:\Program Files\Playrix Entertainment
        O43 - CFD: 26/07/2014 - 18:01:43 - [] ----D C:\Program Files\Real
        O43 - CFD: 21/07/2014 - 02:00:39 - [] ----D C:\Program Files\RealNetworks
        O43 - CFD: 14/07/2009 - 06:52:30 - [] ----D C:\Program Files\Reference Assemblies
        O43 - CFD: 31/10/2013 - 19:11:33 - [] ----D C:\Program Files\Reincarnations - L'Eveil
        O43 - CFD: 31/10/2013 - 19:17:17 - [] ----D C:\Program Files\Reincarnations - Les Vies Passees
        O43 - CFD: 25/07/2014 - 23:07:15 - [0] ----D C:\Program Files\Setup Support for SearchProtect =>PUP.SearchProtect
        O43 - CFD: 04/07/2014 - 22:24:52 - [] ----D C:\Program Files\Shaolin Mystery - Le Sceptre du Dragon
        O43 - CFD: 10/07/2014 - 17:47:44 - [] ----D C:\Program Files\The Agency of Anomalies - LOrphelinat du Dr Weiss
        O43 - CFD: 14/07/2009 - 06:53:23 - [0] --H-D C:\Program Files\Uninstall Information
        O43 - CFD: 29/09/2013 - 18:50:15 - [] ----D C:\Program Files\VideoLAN
        O43 - CFD: 28/09/2013 - 14:04:08 - [] ----D C:\Program Files\Windows Defender
        O43 - CFD: 10/07/2014 - 03:19:53 - [] ----D C:\Program Files\Windows Journal
        O43 - CFD: 07/06/2013 - 10:30:56 - [] ----D C:\Program Files\Windows Mail =>.Microsoft Corporation
        O43 - CFD: 12/12/2013 - 03:18:52 - [] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation
        O43 - CFD: 28/09/2013 - 12:59:20 - [] ----D C:\Program Files\Windows NT
        O43 - CFD: 07/06/2013 - 10:30:56 - [] ----D C:\Program Files\Windows Photo Viewer
        O43 - CFD: 20/11/2010 - 23:33:48 - [] ----D C:\Program Files\Windows Portable Devices
        O43 - CFD: 07/06/2013 - 10:30:56 - [] ----D C:\Program Files\Windows Sidebar
        O43 - CFD: 29/09/2013 - 13:26:10 - [] ----D C:\Program Files\WinRAR
        O43 - CFD: 02/08/2014 - 17:47:02 - [] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman
        O43 - CFD: 29/09/2013 - 13:30:15 - [] ----D C:\Program Files\Common Files\Adobe
        O43 - CFD: 28/09/2013 - 16:01:10 - [] ----D C:\Program Files\Common Files\Java
        O43 - CFD: 29/09/2013 - 12:20:06 - [] ----D C:\Program Files\Common Files\microsoft shared
        O43 - CFD: 14/07/2009 - 04:37:05 - [] ----D C:\Program Files\Common Files\Services
        O43 - CFD: 14/07/2009 - 04:37:05 - [] ----D C:\Program Files\Common Files\SpeechEngines
        O43 - CFD: 07/06/2013 - 10:41:57 - [] ----D C:\Program Files\Common Files\System
        O43 - CFD: 21/07/2014 - 02:09:54 - [] ----D C:\Program Files\Common Files\Wise Installation Wizard
        O43 - CFD: 26/07/2014 - 18:01:40 - [] ----D C:\Program Files\Common Files\xing shared
        O43 - CFD: 03/10/2013 - 09:20:07 - [] ----D C:\ProgramData\Adobe
        O43 - CFD: 14/07/2009 - 06:53:55 - [] -SH-D C:\ProgramData\Application Data
        O43 - CFD: 28/09/2013 - 12:59:20 - [] -SH-D C:\ProgramData\Bureau
        O43 - CFD: 25/07/2014 - 23:15:54 - [] ----D C:\ProgramData\c2fc9ecbf5ec5e83
        O43 - CFD: 14/07/2009 - 06:53:55 - [] -SH-D C:\ProgramData\Desktop
        O43 - CFD: 14/07/2009 - 06:53:55 - [] -SH-D C:\ProgramData\Documents
        O43 - CFD: 28/09/2013 - 12:59:20 - [] -SH-D C:\ProgramData\Favoris
        O43 - CFD: 14/07/2009 - 06:53:55 - [] -SH-D C:\ProgramData\Favorites
        O43 - CFD: 24/07/2014 - 17:33:11 - [] ----D C:\ProgramData\Lx_cats
        O43 - CFD: 02/08/2014 - 17:06:05 - [] ----D C:\ProgramData\Malwarebytes
        O43 - CFD: 28/09/2013 - 12:59:20 - [] -SH-D C:\ProgramData\Menu Démarrer
        O43 - CFD: 27/02/2014 - 17:34:55 - [] -S--D C:\ProgramData\Microsoft
        O43 - CFD: 28/09/2013 - 12:59:20 - [] -SH-D C:\ProgramData\Modèles
        O43 - CFD: 28/09/2013 - 16:07:11 - [] ----D C:\ProgramData\Mozilla
        O43 - CFD: 02/08/2014 - 17:26:39 - [] ----D C:\ProgramData\NVIDIA
        O43 - CFD: 28/09/2013 - 13:43:23 - [] ----D C:\ProgramData\NVIDIA Corporation
        O43 - CFD: 20/10/2013 - 17:09:33 - [0] ----D C:\ProgramData\Oracle
        O43 - CFD: 14/12/2013 - 21:11:50 - [] ----D C:\ProgramData\PlayFirst
        O43 - CFD: 01/11/2013 - 20:50:38 - [] ----D C:\ProgramData\Playrix Entertainment
        O43 - CFD: 16/02/2014 - 16:55:02 - [] ----D C:\ProgramData\PopCap Games
        O43 - CFD: 26/07/2014 - 18:01:38 - [] ----D C:\ProgramData\Real
        O43 - CFD: 21/07/2014 - 02:00:37 - [] ----D C:\ProgramData\RealNetworks
        O43 - CFD: 14/07/2009 - 06:53:55 - [] -SH-D C:\ProgramData\Start Menu
        O43 - CFD: 28/09/2013 - 16:01:11 - [] ----D C:\ProgramData\Sun
        O43 - CFD: 29/07/2014 - 19:09:46 - [0] ---AD C:\ProgramData\TEMP
        O43 - CFD: 14/07/2009 - 06:53:55 - [] -SH-D C:\ProgramData\Templates
        O43 - CFD: 29/09/2013 - 16:11:11 - [] ----D C:\Users\Florence\AppData\Roaming\Adobe
        O43 - CFD: 26/06/2014 - 00:50:52 - [] ----D C:\Users\Florence\AppData\Roaming\AlawarEntertainment
        O43 - CFD: 02/07/2014 - 00:10:33 - [] ----D C:\Users\Florence\AppData\Roaming\Artifex Mundi
        O43 - CFD: 18/11/2013 - 17:59:17 - [] ----D C:\Users\Florence\AppData\Roaming\Big Fish Games
        O43 - CFD: 17/07/2014 - 18:11:59 - [] ----D C:\Users\Florence\AppData\Roaming\dvdcss
        O43 - CFD: 03/11/2013 - 19:07:56 - [] ----D C:\Users\Florence\AppData\Roaming\Enki Games
        O43 - CFD: 27/07/2014 - 20:35:38 - [] ----D C:\Users\Florence\AppData\Roaming\Enlightenus2SE_BFG
        O43 - CFD: 25/11/2013 - 16:12:19 - [] ----D C:\Users\Florence\AppData\Roaming\FreeAudioPack
        O43 - CFD: 22/02/2014 - 00:04:29 - [] ----D C:\Users\Florence\AppData\Roaming\FreeBurner
        O43 - CFD: 13/12/2013 - 13:46:31 - [] ----D C:\Users\Florence\AppData\Roaming\Gogii
        O43 - CFD: 28/09/2013 - 13:15:10 - [] ----D C:\Users\Florence\AppData\Roaming\Identities
        O43 - CFD: 29/09/2013 - 12:49:20 - [] ----D C:\Users\Florence\AppData\Roaming\Lexmark Productivity Studio
        O43 - CFD: 28/09/2013 - 15:19:03 - [] ----D C:\Users\Florence\AppData\Roaming\Macromedia
        O43 - CFD: 28/09/2013 - 12:49:28 - [] ----D C:\Users\Florence\AppData\Roaming\Marine Aquarium 3
        O43 - CFD: 12/04/2011 - 03:44:38 - [0] ----D C:\Users\Florence\AppData\Roaming\Media Center Programs
        O43 - CFD: 02/08/2014 - 17:42:39 - [] -S--D C:\Users\Florence\AppData\Roaming\Microsoft
        O43 - CFD: 28/09/2013 - 16:07:23 - [] ----D C:\Users\Florence\AppData\Roaming\Mozilla
        O43 - CFD: 29/07/2014 - 17:09:02 - [] ----D C:\Users\Florence\AppData\Roaming\nBrowser
        O43 - CFD: 29/09/2013 - 16:04:26 - [] ----D C:\Users\Florence\AppData\Roaming\OpenOffice
        O43 - CFD: 11/07/2014 - 15:30:34 - [] ----D C:\Users\Florence\AppData\Roaming\Orneon
        O43 - CFD: 14/12/2013 - 21:11:50 - [] ----D C:\Users\Florence\AppData\Roaming\PlayFirst
        O43 - CFD: 26/07/2014 - 18:02:18 - [] ----D C:\Users\Florence\AppData\Roaming\Real
        O43 - CFD: 21/07/2014 - 02:01:18 - [] ----D C:\Users\Florence\AppData\Roaming\RealNetworks
        O43 - CFD: 04/07/2014 - 22:40:19 - [] ----D C:\Users\Florence\AppData\Roaming\ShaoLin
        O43 - CFD: 25/07/2014 - 22:58:39 - [0] ----D C:\Users\Florence\AppData\Roaming\Store
        O43 - CFD: 30/07/2014 - 01:22:17 - [] ----D C:\Users\Florence\AppData\Roaming\vlc
        O43 - CFD: 29/09/2013 - 18:35:04 - [] ----D C:\Users\Florence\AppData\Roaming\WinRAR
        O43 - CFD: 02/08/2014 - 17:48:12 - [] ----D C:\Users\Florence\AppData\Roaming\ZHP =>.Nicolas Coolman
        O43 - CFD: 25/11/2013 - 14:43:28 - [] ----D C:\Users\Florence\AppData\Local\Adobe
        O43 - CFD: 28/09/2013 - 13:00:26 - [] -SH-D C:\Users\Florence\AppData\Local\Application Data
        O43 - CFD: 02/08/2014 - 15:45:59 - [] ----D C:\Users\Florence\AppData\Local\Apps
        O43 - CFD: 21/07/2014 - 01:11:52 - [] ----D C:\Users\Florence\AppData\Local\com
        O43 - CFD: 21/07/2014 - 01:08:59 - [] ----D C:\Users\Florence\AppData\Local\Comodo
        O43 - CFD: 02/08/2014 - 15:46:02 - [0] ----D C:\Users\Florence\AppData\Local\Deployment
        O43 - CFD: 02/08/2014 - 16:45:05 - [] ----D C:\Users\Florence\AppData\Local\Diagnostics
        O43 - CFD: 03/11/2013 - 14:48:32 - [0] ----D C:\Users\Florence\AppData\Local\ElevatedDiagnostics
        O43 - CFD: 30/04/2014 - 13:04:14 - [] -SH-D C:\Users\Florence\AppData\Local\EmieSiteList
        O43 - CFD: 30/04/2014 - 13:04:14 - [] -SH-D C:\Users\Florence\AppData\Local\EmieUserList
        O43 - CFD: 02/08/2014 - 15:47:47 - [] ----D C:\Users\Florence\AppData\Local\Google
        O43 - CFD: 28/09/2013 - 13:00:26 - [] -SH-D C:\Users\Florence\AppData\Local\Historique
        O43 - CFD: 29/09/2013 - 12:18:21 - [] ----D C:\Users\Florence\AppData\Local\Macromedia
        O43 - CFD: 25/07/2014 - 23:03:44 - [] ----D C:\Users\Florence\AppData\Local\Microsoft
        O43 - CFD: 01/03/2014 - 02:38:54 - [] ----D C:\Users\Florence\AppData\Local\Microsoft Games
        O43 - CFD: 06/11/2013 - 17:07:46 - [] ----D C:\Users\Florence\AppData\Local\Mozilla
        O43 - CFD: 28/09/2013 - 15:33:21 - [] ----D C:\Users\Florence\AppData\Local\OCCT_-_Ocbase_-_Adrien_Me
        O43 - CFD: 16/02/2014 - 16:53:03 - [] ----D C:\Users\Florence\AppData\Local\Programs
        O43 - CFD: 02/08/2014 - 17:47:09 - [] ----D C:\Users\Florence\AppData\Local\Temp
        O43 - CFD: 28/09/2013 - 13:00:26 - [] -SH-D C:\Users\Florence\AppData\Local\Temporary Internet Files
        O43 - CFD: 31/10/2013 - 19:24:47 - [] ----D C:\Users\Florence\AppData\Local\VirtualStore
        O43 - CFD: 14/07/2009 - 06:42:04 - [] R---D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
        O43 - CFD: 15/05/2014 - 22:00:24 - [] R---D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
        O43 - CFD: 29/07/2014 - 17:05:02 - [] ----D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Azada - In Libro
        O43 - CFD: 07/07/2014 - 21:52:16 - [] ----D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Echoes of the Past - La Vengeance de la Sorciere
        O43 - CFD: 11/07/2014 - 15:20:13 - [] ----D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Echoes of the Past - Les Citadelles du Temps
        O43 - CFD: 27/07/2014 - 20:30:17 - [] ----D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Enlightenus II - La Tour Eternelle
        O43 - CFD: 10/05/2014 - 01:04:16 - [0] ----D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KeyHoleTV
        O43 - CFD: 14/07/2009 - 06:37:42 - [] R---D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
        O43 - CFD: 31/10/2013 - 19:08:00 - [] ----D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Reincarnations - L'Eveil
        O43 - CFD: 31/10/2013 - 19:14:27 - [] ----D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Reincarnations - Les Vies Passees
        O43 - CFD: 04/07/2014 - 22:19:50 - [] ----D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Shaolin Mystery - Le Sceptre du Dragon
        O43 - CFD: 25/07/2014 - 23:06:37 - [] R---D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
        O43 - CFD: 10/07/2014 - 17:40:20 - [] ----D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Agency of Anomalies - LOrphelinat du Dr Weiss
        O43 - CFD: 29/09/2013 - 13:26:10 - [] ----D C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
        ~ Program Folder: 144 Scanned in 00mn 00s

        ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
        O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 02/08/2014 - 14:14:38 ---A- . (...) -- C:\Windows\setuperr.log [0]
        O44 - LFC:[MD5.0DC5AF80D059DEC792B665ED598C6567] - 02/08/2014 - 15:32:10 ---A- . (.SQLite Development Team - SQLite Dynamic Link Library (No TCL).) -- C:\Windows\System32\sqlite3.dll [536576]
        O44 - LFC:[MD5.8683C1B450F4B3872839308D836E0F92] - 02/08/2014 - 16:06:05 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [23256]
        O44 - LFC:[MD5.1AA835E8A0B8EDF3D676B4ED4BF5EF07] - 02/08/2014 - 16:06:05 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\Drivers\mbamchameleon.sys [74456]
        O44 - LFC:[MD5.BD27D97297934FD4217A37FD28A7ABC7] - 02/08/2014 - 16:06:05 ---A- . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\Drivers\mwac.sys [51928]
        O44 - LFC:[MD5.A0AA48914913FABBC0E918AA09FA1C15] - 02/08/2014 - 16:26:34 ---A- . (...) -- C:\Windows\PFRO.log [1994]
        O44 - LFC:[MD5.2EED42605FECF2876FED8CFEA4CA62F0] - 02/08/2014 - 16:26:39 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
        O44 - LFC:[MD5.B0EC8C6756A84C17ADB89B58786DD8E4] - 02/08/2014 - 16:27:08 ---A- . (...) -- C:\Windows\setupact.log [280]
        O44 - LFC:[MD5.12E71DA845D76665B56753AD149E32B3] - 02/08/2014 - 16:28:30 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\MBAMSwissArmy.sys [110296]
        O44 - LFC:[MD5.69FD46FE1CCF4206CB9270715FD2AB2F] - 02/08/2014 - 16:31:24 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1667932]
        O44 - LFC:[MD5.EE001B28796068D8AC088083AE423DF8] - 02/08/2014 - 16:31:24 ---A- . (...) -- C:\Windows\System32\perfc009.dat [121724]
        O44 - LFC:[MD5.FBF6975EBEBDCBA3FBB7FF3F49253A1D] - 02/08/2014 - 16:31:24 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [149766]
        O44 - LFC:[MD5.A4E31C907C0852C05EAF58363563E930] - 02/08/2014 - 16:31:24 ---A- . (...) -- C:\Windows\System32\perfh009.dat [653852]
        O44 - LFC:[MD5.9FD67EBC47D2ECBA7DE1EF28A0358245] - 02/08/2014 - 16:31:24 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [747242]
        O44 - LFC:[MD5.CEA59F9110CF91F6A7182FA40C1951D1] - 02/08/2014 - 16:41:41 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1823061]
        O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 20/07/2014 - 23:21:18 --HA- . (...) -- C:\Windows\System32\Drivers\Msft_Kernel_webinstr_01009.Wdf [0]
        O44 - LFC:[MD5.F2512A1342B5346B2A40BC0E0341789D] - 25/07/2014 - 22:12:58 ---A- . (...) -- C:\Windows\System32\${LOGFILE} [1635]
        O44 - LFC:[MD5.8834DBB7C909F77378BDFE4D49F36CCB] - 26/07/2014 - 17:00:34 ---A- . (.Microsoft Corporation - Microsoft® C Runtime Library.) -- C:\Windows\System32\msvcr71.dll [353864]
        O44 - LFC:[MD5.C4883BCA491DF35CA3311E9244FB3E3A] - 26/07/2014 - 17:00:34 ---A- . (.Microsoft Corporation - Microsoft® C++ Runtime Library.) -- C:\Windows\System32\msvcp71.dll [505416]
        O44 - LFC:[MD5.A4A428BE3200FCF5492AE0329ED36031] - 26/07/2014 - 17:00:48 ---A- . (.Progressive Networks - Pas de description.) -- C:\Windows\System32\pncrt.dll [278600]
        O44 - LFC:[MD5.B46254B1DA166461621B89382230A3BB] - 26/07/2014 - 17:01:31 ---A- . (.RealNetworks, Inc. - Real Player(tm) ActiveX Control.) -- C:\Windows\System32\rmoc3260.dll [201800]
        ~ Files: 21 Scanned in 00mn 28s

        ---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
        O45 - LFCP:[MD5.565AF98E8F54A193409DF9CAF7E62271] - 02/08/2014 - 14:11:34 ---A- - C:\Windows\Prefetch\BABMAINT.EXE-4876B292.pf =>Hijacker.BabSolution
        O45 - LFCP:[MD5.6261ADB0C62F8C33CD0F5E37C8785FA1] - 02/08/2014 - 14:12:28 ---A- - C:\Windows\Prefetch\BUENOSEARCH.EXE-CB0C201A.pf =>PUP.BuenoSearch
        O45 - LFCP:[MD5.7AA3477E33077919AE4BFA3C34BA00D1] - 02/08/2014 - 14:12:37 ---A- - C:\Windows\Prefetch\BUENOSEARCH.EXE-E210C402.pf =>PUP.BuenoSearch
        O45 - LFCP:[MD5.1D06F1C827B029057CD36DC1C5C3959D] - 02/08/2014 - 14:11:15 ---A- - C:\Windows\Prefetch\BUENOSEARCHTB.EXE-B7A2DF30.pf =>PUP.BuenoSearch
        O45 - LFCP:[MD5.50F15655CAE1286BE56AA4083341A3E1] - 02/08/2014 - 14:12:10 ---A- - C:\Windows\Prefetch\DSEARCHLINK.EXE-1BB5AC19.pf =>Toolbar.DeltaSearch
        O45 - LFCP:[MD5.9F3561287DC49C1A49A9200258F35968] - 02/08/2014 - 14:11:22 ---A- - C:\Windows\Prefetch\DSEARCHLINK.EXE-864AE3F5.pf =>Toolbar.DeltaSearch
        O45 - LFCP:[MD5.E7375FEAAA007D80AD3690545818260A] - 02/08/2014 - 14:09:43 ---A- - C:\Windows\Prefetch\SOFTONICDOWNLOADER_POUR_MOZIL-AA47197A.pf =>Toolbar.Conduit
        O45 - LFCP:[MD5.28942F316CDF1A439B8819541BC38BB8] - 02/08/2014 - 14:11:14 ---A- - C:\Windows\Prefetch\VOPACKAGE.EXE-9596194D.pf =>Adware.Downware
        O45 - LFCP:[MD5.E7943B81C67621D52634C4A6DB5699A4] - 02/08/2014 - 14:10:40 ---A- - C:\Windows\Prefetch\VOPACKAGE.EXE-DC9CCDA2.pf =>Adware.Downware
        ~ Prefetcher: 9 Scanned in 00mn 00s

        ---\\ Déni du service (Local Security Authority) (O48)
        O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
        O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
        O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll
        O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
        O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
        O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
        O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
        O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
        ~ LSA: 8 Scanned in 00mn 00s

        ---\\ Contrôle du Safe Boot (CSB) (O49)
        O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
        O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
        O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
        O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
        O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d'extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
        O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
        O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
        O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
        O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
        O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
        O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
        O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
        O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d'extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
        ~ CSB: 13 Scanned in 00mn 00s

        ---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52)
        O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
        O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll
        O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
        ~ TDSD: 3 Scanned in 00mn 00s

        ---\\ Enumération des clés de registre SecurityProviders (MCSP) (O54)
        O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
        O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
        ~ MSCP: 2 Scanned in 00mn 00s

        ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
        O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
        O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
        O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
        O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
        O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
        O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
        O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
        O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
        O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
        O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
        O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
        O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
        O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
        O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
        O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
        O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
        ~ MWPS: 16 Scanned in 00mn 00s

        ---\\ Liste des pilotes du système (SDL) (O58)
        O58 - SDL:14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [422976]
        O58 - SDL:14/07/2009 - 02:26:17 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\Drivers\adpahci.sys [297552]
        O58 - SDL:14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\Drivers\adpu320.sys [146512]
        O58 - SDL:14/07/2009 - 02:26:15 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\Drivers\aliide.sys [14400]
        O58 - SDL:07/06/2013 - 09:36:22 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\Drivers\amdsata.sys [80256]
        O58 - SDL:14/07/2009 - 02:26:15 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows fa.) -- C:\Windows\System32\Drivers\amdsbs.sys [159312]
        O58 - SDL:07/06/2013 - 09:36:22 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\Drivers\amdxata.sys [22400]
        O58 - SDL:14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\Drivers\arc.sys [76368]
        O58 - SDL:14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\Drivers\arcsas.sys [86608]
        O58 - SDL:13/07/2009 - 23:02:49 ---A- . (.Broadcom Corporation - Pilote unifié NDIS6.x Broadcom NetXtreme Gigabit Ethernet..) -- C:\Windows\System32\Drivers\b57nd60x.sys [229888]
        O58 - SDL:13/07/2009 - 23:53:28 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltLo.sys [13568]
        O58 - SDL:13/07/2009 - 23:53:28 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltUp.sys [5248]
        O58 - SDL:14/07/2009 - 01:57:25 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\Drivers\BrSerId.sys [272128]
        O58 - SDL:13/07/2009 - 23:53:32 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\Drivers\BrSerWdm.sys [62336]
        O58 - SDL:13/07/2009 - 23:53:33 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\Drivers\BrUsbMdm.sys [12160]
        O58 - SDL:13/07/2009 - 23:53:33 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\Drivers\BrUsbSer.sys [11904]
        O58 - SDL:13/07/2009 - 23:02:48 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\Drivers\bxvbdx.sys [430080]
        O58 - SDL:14/07/2009 - 02:26:21 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\cmdide.sys [15952]
        O58 - SDL:14/07/2009 - 02:20:28 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\Drivers\djsvs.sys [70720]
        O58 - SDL:14/07/2009 - 02:20:28 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [453712]
        O58 - SDL:13/07/2009 - 23:02:48 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\Drivers\evbdx.sys [3100160]
        O58 - SDL:13/07/2009 - 23:54:14 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [26624]
        O58 - SDL:14/07/2009 - 02:20:28 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\System32\Drivers\HpSAMD.sys [67152]
        O58 - SDL:07/06/2013 - 09:36:22 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\Drivers\iaStorV.sys [332160]
        O58 - SDL:14/07/2009 - 02:20:36 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\Drivers\iirsp.sys [41040]
        O58 - SDL:14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_fc.sys [95824]
        O58 - SDL:14/07/2009 - 02:20:37 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas.sys [89168]
        O58 - SDL:14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas2.sys [54864]
        O58 - SDL:14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_scsi.sys [96848]
        O58 - SDL:12/05/2014 - 06:25:54 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [23256]
        O58 - SDL:12/05/2014 - 06:25:58 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\Drivers\mbamchameleon.sys [74456]
        O58 - SDL:02/08/2014 - 16:28:30 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\MBAMSwissArmy.sys [110296]
        O58 - SDL:14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows 7 for x86.) -- C:\Windows\System32\Drivers\megasas.sys [30800]
        O58 - SDL:14/07/2009 - 02:20:36 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\Drivers\MegaSR.sys [235584]
        O58 - SDL:12/05/2014 - 06:26:08 ---A- . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\Drivers\mwac.sys [51928]
        O58 - SDL:14/07/2009 - 02:20:44 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\Drivers\nfrd960.sys [44624]
        O58 - SDL:25/02/2013 - 23:22:06 ---A- . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version 311.06.) -- C:\Windows\System32\Drivers\nvlddmkm.sys [8939296]
        O58 - SDL:13/07/2009 - 23:02:52 ---A- . (.NVIDIA Corporation - NVIDIA MCP Networking Function Driver..) -- C:\Windows\System32\Drivers\nvm62x32.sys [347264]
        O58 - SDL:30/07/2009 - 16:12:54 ---A- . (.NVIDIA Corporation - NVIDIA MCP Networking Function Driver..) -- C:\Windows\System32\Drivers\nvmf6232.sys [287392]
        O58 - SDL:07/06/2013 - 09:36:22 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\Drivers\nvraid.sys [117120]
        O58 - SDL:07/06/2013 - 09:36:22 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\Drivers\nvstor.sys [143744]
        O58 - SDL:04/08/2009 - 16:43:40 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\Drivers\nvstor32.sys [213024]
        O58 - SDL:14/07/2009 - 02:19:04 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\Drivers\ql2300.sys [1383488]
        O58 - SDL:14/07/2009 - 02:19:04 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\Drivers\ql40xx.sys [106064]
        O58 - SDL:13/07/2009 - 21:50:20 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\System32\Drivers\secdrv.sys [20480]
        O58 - SDL:14/07/2009 - 02:19:04 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid2.sys [40016]
        O58 - SDL:14/07/2009 - 02:19:04 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid4.sys [77888]
        O58 - SDL:14/07/2009 - 02:19:04 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [21072]
        O58 - SDL:14/07/2009 - 02:19:10 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\viaide.sys [16976]
        O58 - SDL:14/07/2009 - 02:19:11 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\Drivers\vsmraid.sys [141904]
        O58 - SDL:13/07/2009 - 22:40:41 ---A- . (...) -- C:\Windows\System32\ANSI.SYS [9029]
        O58 - SDL:13/07/2009 - 22:40:44 ---A- . (...) -- C:\Windows\System32\country.sys [27097]
        O58 - SDL:13/07/2009 - 22:40:40 ---A- . (...) -- C:\Windows\System32\HIMEM.SYS [4768]
        O58 - SDL:13/07/2009 - 22:40:43 ---A- . (...) -- C:\Windows\System32\KEY01.SYS [42809]
        O58 - SDL:13/07/2009 - 22:40:43 ---A- . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537]
        O58 - SDL:13/07/2009 - 22:40:23 ---A- . (...) -- C:\Windows\System32\NTDOS.SYS [27866]
        O58 - SDL:13/07/2009 - 22:40:31 ---A- . (...) -- C:\Windows\System32\NTDOS404.SYS [29146]
        O58 - SDL:13/07/2009 - 22:40:35 ---A- . (...) -- C:\Windows\System32\NTDOS411.SYS [29370]
        O58 - SDL:13/07/2009 - 22:40:39 ---A- . (...) -- C:\Windows\System32\NTDOS412.SYS [29274]
        O58 - SDL:13/07/2009 - 22:40:27 ---A- . (...) -- C:\Windows\System32\NTDOS804.SYS [29146]
        O58 - SDL:13/07/2009 - 22:40:11 ---A- . (...) -- C:\Windows\System32\NTIO.SYS [33952]
        O58 - SDL:13/07/2009 - 22:40:15 ---A- . (...) -- C:\Windows\System32\NTIO404.SYS [34672]
        O58 - SDL:13/07/2009 - 22:40:17 ---A- . (...) -- C:\Windows\System32\NTIO411.SYS [35776]
        O58 - SDL:13/07/2009 - 22:40:19 ---A- . (...) -- C:\Windows\System32\NTIO412.SYS [35536]
        O58 - SDL:13/07/2009 - 22:40:13 ---A- . (...) -- C:\Windows\System32\NTIO804.SYS [34672]
        ~ Drivers: 65 Scanned in 00mn 03s

        ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
        O61 - LFC: 01/08/2014 - 17:49:01 ---A- . (.Robert Simpson, et al..) -- C:\Users\Florence\AppData\Local\Temp\System.Data.SQLite46222.dll [1053184]
        O61 - LFC: 01/08/2014 - 17:49:01 ---A- . (.Robert Simpson, et al..) -- C:\Users\Florence\AppData\Local\Temp\System.Data.SQLite99039.dll [1053184]
        O61 - LFC: 02/08/2014 - 17:48:54 ---A- . (...) -- C:\Users\Florence\AppData\Local\Temp\nsi83BB.tmp\inetc.dll [20992]
        O61 - LFC: 02/08/2014 - 17:48:54 ---A- . (.AppInstall Ltd..) -- C:\Users\Florence\AppData\Local\Temp\BuenoSearchTB.exe [429128] =>PUP.BuenoSearch
        O61 - LFC: 02/08/2014 - 17:48:55 ---A- . (...) -- C:\Users\Florence\AppData\Local\Temp\nsi83BB.tmp\IpConfig.dll [117248]
        O61 - LFC: 02/08/2014 - 17:48:55 ---A- . (...) -- C:\Users\Florence\AppData\Local\Temp\nsi83BB.tmp\System.dll [11264]
        O61 - LFC: 02/08/2014 - 17:48:55 ---A- . (...) -- C:\Users\Florence\AppData\Local\Temp\nsi83BB.tmp\WmiInspector.dll [106496]
        O61 - LFC: 02/08/2014 - 17:49:01 ---A- . (...) -- C:\Users\Florence\AppData\Local\Temp\rtinstaller.exe [4472320]
        O61 - LFC: 02/08/2014 - 17:49:01 ---A- . (.Robert Simpson, et al..) -- C:\Users\Florence\AppData\Local\Temp\System.Data.SQLite18387.dll [1053184]
        O61 - LFC: 02/08/2014 - 17:49:01 ---A- . (.Robert Simpson, et al..) -- C:\Users\Florence\AppData\Local\Temp\System.Data.SQLite43302.dll [1053184]
        O61 - LFC: 02/08/2014 - 17:49:03 ---A- . (...) -- C:\Users\Florence\Downloads\Firefox Setup Stub 31.0.exe [244344]
        O61 - LFC: 02/08/2014 - 17:49:03 ---A- . (...) -- C:\Users\Florence\Downloads\adwcleaner_3.302.exe [1361309]
        O61 - LFC: 02/08/2014 - 17:49:03 ---A- . (.Malwarebytes Corporation.) -- C:\Users\Florence\Downloads\mbam-setup-2.0.2.1012.exe [17292760]
        O61 - LFC: 02/08/2014 - 17:49:03 ---A- . (.Nicolas Coolman.) -- C:\Users\Florence\Downloads\ZHPDiag2.exe [6857095] =>.Nicolas Coolman
        O61 - LFC: 26/07/2014 - 17:48:52 ---A- . (...) -- C:\Users\Florence\AppData\Local\Microsoft\Windows\1036\StructuredQuerySchema.bin [331781]
        O61 - LFC: 26/07/2014 - 17:49:03 ---A- . (...) -- C:\Users\Florence\Downloads\adblockplusie-1.1.exe [4741136]
        O61 - LFC: 26/07/2014 - 17:49:03 ---A- . (.RealNetworks, Inc..) -- C:\Users\Florence\Downloads\RealPlayerCloud_fr(1).exe [1024720]
        O61 - LFC: 30/07/2014 - 17:48:57 ---A- . (...) -- C:\Users\Florence\AppData\Local\Temp\Quarantine.exe [384485]
        ~ 40 Fichiers temporaires (Temporary files)
        ~ 80 Fichiers cookies (Cookies files)
        ~ Files: 18 Scanned in 00mn 11s

        ---\\ Fichiers Alternate Data Stream (ADS) (O62)
        O62 - ADS:Alternate Data Stream File - C:\Windows\System32\nvdisp.nvu:Zone.Identifier
        O62 - ADS:Alternate Data Stream File - C:\Windows\System32\nvudisp.exe:Zone.Identifier
        ~ ADS: Scanned in 00mn 01s

        ---\\ Liste des outils de désinfection (LATC) (O63)
        O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
        ~ ADS: Scanned in 00mn 00s

        ---\\ Liste les services legacy du registre (LALS) (O64)
        O64 - Services: CurCS - 07/06/2013 - C:\Windows\System32\drivers\nvstor.sys (nvstor) .(.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) - LEGACY_NVSTOR
        O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
        ~ Legacy: 68 Scanned in 00mn 00s

        ---\\ Associations Shell Spawning (O67)
        O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
        O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation
        O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
        O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
        O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d'événements.) -- C:\Windows\System32\eventvwr.exe
        O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
        O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
        O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
        O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
        O67 - Shell Spawning: <.scr> <scrfile>[HKLM\..\open\Command] (...) -- "%1" /S
        O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
        ~ FASS Keys: 11 Scanned in 00mn 00s

        ---\\ Menu de démarrage Internet (SMI) (O68)
        O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
        O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
        O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
        ~ Keys: Scanned in 00mn 00s

        ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
        O69 - SBI: SearchScopes [HKCU] {3DD780D2-8289-4353-8167-35DCC22746EC} - ((www.google.com) Google) - https://www.google.com/?gws_rd=ssl
        ~ Keys: Scanned in 00mn 00s

        ---\\ Enumère les service demarrés par Svchost (SSS) (O83)
        O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d'application.) -- C:\Windows\System32\aelupsvc.dll [62464]
        O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [67584]
        O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [67584]
        O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [168960]
        O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [593408]
        O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [679424]
        O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [473600]
        O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d'accès distant.) -- C:\Windows\System32\rasauto.dll [90624]
        O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d'accès distant.) -- C:\Windows\System32\rasmans.dll [286208]
        O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d'interface dynamique.) -- C:\Windows\System32\mprdim.dll [75264]
        O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d'événements système (SENS).) -- C:\Windows\System32\sens.dll [49664]
        O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [300544]
        O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll [242176]
        O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll [521216]
        O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [1933848]
        O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll [585728]
        O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [328192]
        O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [499712]
        O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [21504]
        O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d'application.) -- C:\Windows\System32\appinfo.dll [47104]
        O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [114688]
        O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll [49664]
        O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [61440]
        O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [98304]
        O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [164352]
        O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [750592]
        O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll [71168]
        O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll [113664]
        O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [168960]
        O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d'ordinateurs.) -- C:\Windows\System32\browser.dll [102912]
        O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [37376]
        O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [76800]
        O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [149504]
        ~ Services: 33 Scanned in 00mn 00s

        ---\\ Enumère les données de la clé NameSpace (MNS) (O92)
        O92 - MNS: RealPlayer Cloud - {5E8FC967-829A-475C-93EA-51FCE6D9FFCE}
        ~ MNS: 1 Scanned in 00mn 00s

        ---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS)
        [MD5.4BEEA0336A11B3393267FA9FA90F3CDF] [WIS][25/06/2014] (.LPT - LPT System Updater Service.) -- C:\Windows\Installer\36f9c47.msi [2125824] =>Adware.IncrediBar
        ~ WIS: 1 Scanned in 00mn 00s

        ---\\ Recherche de clés de registre Tracing (O100)
        HKLM\SOFTWARE\Microsoft\Tracing\BrowserSafeguard_RASAPI32 =>PUP.BrowserSafeguard
        HKLM\SOFTWARE\Microsoft\Tracing\BrowserSafeguard_RASMANCS =>PUP.BrowserSafeguard
        HKLM\SOFTWARE\Microsoft\Tracing\melondrea_RASAPI32 =>PUP.Melondrea
        HKLM\SOFTWARE\Microsoft\Tracing\melondrea_RASMANCS =>PUP.Melondrea
        HKLM\SOFTWARE\Microsoft\Tracing\SafeFinder_RASAPI32 =>Hijacker.SmartBar
        HKLM\SOFTWARE\Microsoft\Tracing\SafeFinder_RASMANCS =>Hijacker.SmartBar
        HKLM\SOFTWARE\Microsoft\Tracing\updatemelondrea_RASAPI32 =>PUP.Melondrea
        HKLM\SOFTWARE\Microsoft\Tracing\updatemelondrea_RASMANCS =>PUP.Melondrea
        HKLM\SOFTWARE\Microsoft\Tracing\utilmelondrea_RASAPI32 =>PUP.Melondrea
        HKLM\SOFTWARE\Microsoft\Tracing\utilmelondrea_RASMANCS =>PUP.Melondrea
        ~ BTK: 56 Scanned in 00mn 00s

        ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
        SS - | Demand 09/07/2014 262320 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
        SS - | Auto 02/08/2014 116648 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
        SS - | Demand 02/08/2014 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
        SS - | Auto 28/02/2008 98984 | (lxdxCATSCustConnectService) . (.Lexmark International, Inc..) - C:\Windows\system32\spool\DRIVERS\W32X86\3\lxdxserv.exe
        SS - | Demand 30/07/2014 119408 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
        SS - | Demand 14/07/2009 20992 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
        SR - | Auto 21/12/2013 65432 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
        SR - | Auto 28/02/2008 594600 | (lxdx_device) . (...) - C:\Windows\system32\lxdxcoms.exe
        SR - | Auto 11/03/2014 22216 | (MsMpSvc) . (.Microsoft Corporation.) - c:\Program Files\Microsoft Security Client\MsMpEng.exe
        SR - | Auto 18/01/2013 639776 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe
        SR - | Auto 25/02/2013 1260320 | (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
        SR - | Auto 10/06/2014 39568 | (RealNetworks Downloader Resolver Service) . (...) - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
        SR - | Auto 26/07/2014 1141848 | (RealPlayer Cloud Service) . (.RealNetworks, Inc..) - c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe
        SR - | Auto 25/06/2014 23552 | (RealPlayerUpdateSvc) . (...) - C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
        SR - | Auto 18/01/2013 383264 | (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
        SR - | Auto 14/07/2009 20992 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
        ~ Services: Scanned in 00mn 13s

        ---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
        Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
        Run by Florence at 02/08/2014 17:49:41
        device: opened successfully
        user: MBR read successfully
        Disk trace:
        called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll storport.sys nvstor32.sys
        C:\Windows\system32\DRIVERS\nvstor32.sys NVIDIA Corporation NVIDIA nForce(TM) SATA Driver
        1 ntkrnlpa!IofCallDriver[0x82C8CBBA] >> \Device\Harddisk0\DR0[0x86395030]
        3 CLASSPNP[0x8320459E] >> ntkrnlpa!IofCallDriver[0x82C8CBBA] >> [0x85339B40]
        5 ACPI[0x8AE483D4] >> ntkrnlpa!IofCallDriver[0x82C8CBBA] >> \Device\00000057[0x8609D8F8]
        kernel: MBR read successfully
        user & kernel MBR OK
        ~ MBR: 14 Scanned in 00mn 02s

        ---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80)
        Written by ad13, http://ad13.geekstog
        Run by Florence at 02/08/2014 17:49:43
        ********* Dump file Name *********
        C:\PhysicalDisk0_MBR.bin
        ~ MBR: Scanned in 00mn 04s

        ---\\ Scan Additionnel (O88)
        Database Version : 13026 - (25/06/2014)
        Clés trouvées (Keys found) : 3
        Valeurs trouvées (Values found) : 0
        Dossiers trouvés (Folders found) : 1
        Fichiers trouvés (Files found) : 1

        [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ae07101b-46d4-4a98-af68-0333ea26e113}] =>Adware.Agent
        [HKCU\Software\Classes\keepmysearch] =>Adware.MyWebSearch
        [HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2516}] =>Adware.Bandoo^
        C:\Program Files\Setup Support for SearchProtect =>PUP.SearchProtect^
        C:\Windows\Installer\36f9c47.msi =>Adware.IncrediBar^
        ~ Additionnel Scan: 192590 Items scanned in 00mn 25s

        ---\\ Informations complémentaires sur les modules
        ~ https://nicolascoolman.eu =>.Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
        ~ https://nicolascoolman.eu =>.Internet Explorer, Proxy Management (R5)
        ~ https://nicolascoolman.eu =>.Browser Helper Objects de navigateur (O2)
        ~ https://nicolascoolman.eu =>.Applications lancées au démarrage du système (O4)
        ~ AMI: 4 Scanned in 00mn 00s

        ---\\ Récapitulatif des détections trouvées sur votre station
        https://nicolascoolman.eu =>Hijacker.SmartBar
        https://nicolascoolman.eu =>Hijacker.Proxy
        https://nicolascoolman.eu =>PUP.CrossRider
        https://nicolascoolman.eu =>Hijacker.WebsSearches
        https://nicolascoolman.eu =>PUP.SearchProtect
        https://nicolascoolman.eu =>Hijacker.BabSolution
        https://nicolascoolman.eu =>PUP.BuenoSearch
        https://nicolascoolman.eu =>Toolbar.DeltaSearch
        https://nicolascoolman.eu =>Toolbar.Conduit
        https://nicolascoolman.eu =>Adware.Downware
        https://nicolascoolman.eu =>Adware.IncrediBar
        https://nicolascoolman.eu =>PUP.BrowserSafeguard
        https://nicolascoolman.eu =>PUP.Melondrea
        https://nicolascoolman.eu =>Adware.MyWebSearch
        https://nicolascoolman.eu =>Adware.Bandoo
        ~ MSI: 15 link(s) detected in 00mn 00s

        End of the scan (1109 lines in 02mn 27s)(0)
        0
        1. il est en deux fois, j'espère que tu l'as reçu !
          0
      3. re

        il est en deux fois, j'espère que tu l'as reçu !

        il manque la 1er partie (avant ceci >> ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) )

        poste la comme la précédente

        merci

        @+
        0
        1. re

          voilà la première !!

          apparemment le message n'est pas passé

          @+
          0
          1. ~ Rapport de ZHPDiag v2014.6.25.98 - Nicolas Coolman (25/06/2014)
            ~ Lancé par Florence (02/08/2014 17:47:44)
            ~ Adresse du Site Web https://nicolascoolman.eu
            ~ Traduit par Nicolas Coolman
            ~ Etat de la version : Nouvelle version disponible
            ~ Liste blanche : Désactivée par l'utilisateur
            ~ Elévation des Privilèges : OK
            ~ User Account Control (UAC): Activate by user

            ---\\ Navigateurs Internet
            MSIE: Internet Explorer v11.0.9600.17207
            MFIE: Mozilla Firefox 31.0 (Defaut)
            GCIE: Google Chrome v36.0.1985.125

            ---\\ Informations sur les produits Windows
            ~ Langage: Français
            Windows 7 Ultimate, 32-bit Service Pack 1 (Build 7601)
            Windows Server License Manager Script : OK
            ~ Windows Operating System - Windows(R) 7, OEM_SLP channel
            System Locked Preinstallation (OEM_SLP) : OK
            Windows ID Activation : OK
            ~ Windows Partial Key : HYRR2
            Windows License : OK
            ~ Windows Remaining Initializations Number : 3
            Software Protection Service (Protection logicielle) : OK
            Windows Automatic Updates : OK
            Windows Activation Technologies : OK

            ---\\ Logiciels de protection du système
            Malwarebytes Anti-Malware version 2.0.2.1012
            Microsoft Security Client v4.5.0216.0
            Windows Defender W7 (Deactivate)

            ---\\ Logiciels d'optimisation du système
            CCleaner v4.10

            ---\\ Logiciels de partage PeerToPeer

            ---\\ Surveillance de Logiciels
            Adobe Flash Player 14 Plugin
            Extended Asian Language font pack for Adobe Reader XI
            Java 7 Update 40

            ---\\ Informations sur le système
            ~ Processor: x86 Family 16 Model 2 Stepping 2, AuthenticAMD
            ~ Operating System: 32 Bits
            Boot mode: Normal (Normal boot)
            Total RAM: 3071 MB (45% free)
            System Restore: Activé (Enable)
            System drive C: has 838 GB (89%) free of 931 GB

            ---\\ Mode de connexion au système
            ~ Computer Name: FLORENCE-PC
            ~ User Name: Florence
            ~ All Users Names: UpdatusUser, Florence, Administrateur,
            ~ Unselected Option: None
            Logged in as Administrator

            ---\\ Variables d'environnement
            ~ System Unit : C:\
            ~ %AppZHP% : C:\Users\Florence\AppData\Roaming\ZHP\
            ~ %AppData% : C:\Users\Florence\AppData\Roaming\
            ~ %Desktop% : C:\Users\Florence\Desktop\
            ~ %Favorites% : C:\Users\Florence\Favorites\
            ~ %LocalAppData% : C:\Users\Florence\AppData\Local\
            ~ %StartMenu% : C:\Users\Florence\AppData\Roaming\Microsoft\Windows\Start Menu\
            ~ %Windir% : C:\Windows\
            ~ %System% : C:\Windows\System32\

            ---\\ Enumération des unités disques
            C: Hard drive, Flash drive, Thumb drive (Free 838 Go of 931 Go)
            D: Hard drive, Flash drive, Thumb drive (Free 64 Go of 932 Go)
            E: CD-ROM drive (Not Inserted)
            F: Floppy drive, Flash card reader, USB Key (Not Inserted)
            G: Floppy drive, Flash card reader, USB Key (Not Inserted)
            H: Floppy drive, Flash card reader, USB Key (Not Inserted)
            I: Floppy drive, Flash card reader, USB Key (Not Inserted)
            J: Floppy drive, Flash card reader, USB Key (Not Inserted)

            ---\\ Etat du Centre de Sécurité Windows
            [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
            [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
            [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
            [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
            [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
            [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
            [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
            [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
            [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
            [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
            [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
            ~ Security Center: 46 Scanned in 00mn 00s

            ---\\ Recherche particulière de fichiers génériques
            [MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - (.Microsoft Corporation - Explorateur Windows.) (.07/06/2013 - 09:37:06.) -- C:\Windows\Explorer.exe [2616320]
            [MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:14:45.) -- C:\Windows\System32\Wininit.exe [96256]
            [MD5.CCC198257901BEEA2FBF8EB1E7678356] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.18/06/2014 - 23:13:59.) -- C:\Windows\System32\wininet.dll [1791488]
            [MD5.998507B046BA314CE8245364C686FA67] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.04/03/2014 - 10:17:02.) -- C:\Windows\System32\Winlogon.exe [304128]
            [MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 22:29:24.) -- C:\Windows\System32\sppcomapi.dll [193536]
            [MD5.D0B388DA1D111A34366E04EB4A5DD156] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.30/05/2014 - 07:36:07.) -- C:\Windows\system32\Drivers\AFD.sys [338944]
            [MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:26:15.) -- C:\Windows\system32\Drivers\atapi.sys [21584]
            [MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:11:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [70656]
            [MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 22:29:03.) -- C:\Windows\system32\Drivers\Cdrom.sys [108544]
            [MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 22:29:07.) -- C:\Windows\system32\Drivers\DfsC.sys [78336]
            [MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 22:29:03.) -- C:\Windows\system32\Drivers\HDAudBus.sys [108544]
            [MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:11:24.) -- C:\Windows\system32\Drivers\i8042prt.sys [80896]
            [MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 00:54:29.) -- C:\Windows\system32\Drivers\IpNat.sys [101888]
            [MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.07/06/2013 - 09:39:50.) -- C:\Windows\system32\Drivers\MRxSmb.sys [123904]
            [MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 22:29:08.) -- C:\Windows\system32\Drivers\netBT.sys [187904]
            [MD5.C8DFF8D07755A66C7A4A738930F0FEAC] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24/01/2014 - 03:18:22.) -- C:\Windows\system32\Drivers\ntfs.sys [1212352]
            [MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 00:45:35.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
            [MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.14/07/2009 - 00:54:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [78848]
            [MD5.B973FCFC50DC1434E1970A146F7E3885] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.20/11/2010 - 22:29:49.) -- C:\Windows\system32\Drivers\rdpdr.sys [133632]
            [MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 00:53:41.) -- C:\Windows\system32\Drivers\smb.sys [71168]
            [MD5.B459575348C20E8121D6039DA063C704] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 22:29:07.) -- C:\Windows\system32\Drivers\tdx.sys [74752]
            [MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 22:29:03.) -- C:\Windows\system32\Drivers\volsnap.sys [245632]
            ~ Generic Processes: Scanned in 00mn 00s

            ---\\ Etat des fichiers cachés (Caché/Total)
            ~ Mes images (My Pictures) : 1/736
            ~ Mes musiques (My Musics) : 5/2979
            ~ Mes Videos (My Videos) : 1/490
            ~ Mes Favoris (My Favorites) : 1/15
            ~ Mes Documents (My Documents) : 1/2538
            ~ Mon Bureau (My Desktop) : 1/1536
            ~ Menu demarrer (Programs) : 1/42
            ~ Hidden Files: Scanned in 00mn 01s

            ---\\ Processus lancés
            [MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336] [PID.3144]
            [MD5.40B527681CA3CA2F6EC7851018509F29] - (.Pas de propriétaire - Printer Device Monitor.) -- C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe [668328] [PID.3192]
            [MD5.ED7AB9DCD33C64B941EEA350EA713AE0] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Real\RealPlayer\Update\realsched.exe [296520] [PID.3280]
            [MD5.77FBCE63719BE1DFDA9E5178CD7EE7CF] - (.RealNetworks, Inc. - RealPlayer Cloud Service UI.) -- C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe [822880] [PID.3344]
            [MD5.012E2D7CC422CCCC334ADA4BBF8338CB] - (.Pas de propriétaire - Printer Card Transfer Monitor.) -- C:\Program Files\Lexmark 3600-4600 Series\lxdxMsdMon.exe [25256] [PID.3588]
            [MD5.47C9EF1600EDD9EBD8155EB6B5206B6B] - (.NVIDIA Corporation - NVIDIA Settings.) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe [1821984] [PID.3848]
            [MD5.B43E68B8A022FB00FF54360D408E871B] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [860488] [PID.3116]
            [MD5.10F36FB8CD6218CD7F818268E0F3F9C6] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [275568] [PID.5928]
            [MD5.89B816740FF3A5DB0AAC76CC67EB37E6] - (.RealNetworks, Inc. - RealDownloader.) -- C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe [368728] [PID.4232]
            [MD5.1F62DCBF33A67CAA5E68ADECBB25C3C7] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8071680] [PID.3700]
            ~ Processes Running: Scanned in 00mn 00s
            0
            1. je crois que j'ai tout envoyé !
              0
              1. non il veut pas me coller le rapport !!!
                0
                1. re

                  au départ, tu as essayé de poster le rapport avec le lien obtenu par cjoint?

                  @+
                  0
                  1. ben j'ai ouvert mon rapport et j'ai fait un copier-coller. Il avait déjà des difficultés à se poster
                    0
                    1. http://cjoint.com/data3/3HcsNarArcq.htm
                      0
                      1. re

                        c'est bon, je regarde le rapport et je reviens

                        @+
                        0
                        1. re

                          désinstalle Java 7 Update 40 via programmes et fonctionnalités du panneau de configuration

                          ensuite, télécharge et installe la dernière version de puis ce lien https://www.java.com/fr/

                          ps: décoche les programmes additionnels pendant l'installation
                          ====================================================

                          ensuite, fait ceci et poste le rapport s'il te plaît

                          copie tout le texte depuis ce lien https://www.cjoint.com/c/DHctleokk8K

                          lance zhpfix en tant qu'administrateur (clic droit)

                          clique sur importer et le texte s'affichera dans la fenêtre qui s'ouvre

                          clic sur GO en bas de page et confirme par OUI pour

                          lancer le nettoyage des données

                          le rapport s'affichera sur ton bureau et dans C:\zhpfix.txt

                          poste le rapport via ce lien https://www.cjoint.com/

                          merci

                          @+

                          le taux de radiation est plus élevé au pôle emploi qu'à Tchernobyl
                          0
                          • 1
                          • 2