Le bloc-note s'ouvre quand j'allume mon ordi portable Fermé

Question

Bonjour,
A chaque fois que j'éclaire mon ordi portable, le bloc-note desktop.ini s'ouvre avec le message suivant : "[.ShellClassInfo] LocalizedRessourceName=@%SystemRoot%\system32\shell32.dll,- 21787".
Quequ'un peut-il m'aider à faire disparaître ce message ?
Un grand merci.

fabul · Answer

Salut,

Fais un nettoyage avec AdwCleaner

Installe RegRun Reanimator

Clic sur "Fix problems".

Clic sur "Scan windows startup...".

Coche la case "Use deep level scanning once (For advanced users)".

Clic sur "Make scan now".

Clic sur "Fix problems".

Si il y a plus d'une quinzaine de détections, Prohibited/Suspicious , tu peux me le dire , on passera a autre chose.

Clic-droit dans le milieu de la fenêtre et choisit "Save to file" pour copier le résultat dans un fichier texte.

Nomme le 1 (tout court), le .txt sera généré automatiquement.

Clic sur la flèche verte pour passer a l'item suivant, fait comme pour le premier et nomme le 2, et ainsi de suite avec les autres.

A la fin, clic sur "Exit".

Poste les résultats contenus dans les fichiers texte dans ton prochain message.

Met un espace d'une ligne entre chaque item détecté pour que ça soit lisible.

Domibar · Answer

Voilà ce que ça donne. Merci de ton aide:
SpyHolesList Version:10.7 Build:7.71.0.171-64b
13.04.2015 10:10:23
WinDir=C:\Windows
Startup=C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Common Startup=C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Windows 7 Home Premium  (6.1.7601)
Internet Explorer 9.11.9600.17691
[Internet Explorer]
  [Default Home Page] :HKLM Default_Page_URL=http://www.google.com
  [Current Home Page] :HKCU Start Page=http://firefox
  [Current Home Page] :HKCU HOMEOldSP=""
  [Current Home Page] :HKCU Default_Page_URL=""
  [Current Home Page] :HKLM Start Page=http://www.google.com
  [Current Home Page] :HKLM HOMEOldSP=""
  [All Users Search] :HKLM Default_Search_URL=http://www.google.com
  [All Users Search] :HKLM Search Page=http://www.google.com
  [Current Users Search] :HKCU Default_Search_URL=""
  [Current Users Search] :HKCU Search Page=http://go.microsoft.com/fwlink/?LinkId=54896
  [Current Users Search] :HKCU Search Bar=Preserve
  [IE Local Blank Page] :HKCU Local Page=C:\Windows\system32\blank.htm
  [IE Local Blank Page] :HKLM Local Page=C:\Windows\SysWOW64\blank.htm
  [Browser Helper Objects] {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}=C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\21.7.0.11\COIEPLG.DLL
  ### coIEPlugIn Symantec Corporation Norton Identity Safe 2014.7.11.42 
  [Browser Helper Objects] {6D53EC84-6AAE-4787-AEEE-F4628F01010C}=C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\21.7.0.11\IPS\IPSBHO.DLL
  ### IPS Browser Helper DLL Symantec Corporation Symantec Intrusion Detection 12.0 
  [Browser Helper Objects] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=C:\PROGRAM FILES (X86)\JAVA\JRE1.8.0_31\BIN\SSV.DLL
  ### Java(TM) Platform SE binary Oracle Corporation Java(TM) Platform SE 8 U31 8.0.310.13 
  [Browser Helper Objects] {B4F3A835-0E21-4959-BA22-42B3008E02FF}=C:\PROGRA~2\MICROS~4\OFFICE14\URLREDIR.DLL
  ### Microsoft Office Document Cache Handler Microsoft Corporation Microsoft Office 2010 14.0.7011.1000 
  [Browser Helper Objects] {DBC80044-A445-435b-BC74-9C25C1C588A9}=C:\PROGRAM FILES (X86)\JAVA\JRE1.8.0_31\BIN\JP2SSV.DLL
  ### Java(TM) Platform SE binary Oracle Corporation Java(TM) Platform SE 8 U31 8.0.310.13 
  [Browser Helper Objects(x64)] {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}=C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE64\21.7.0.11\COIEPLG.DLL
  ### coIEPlugIn Symantec Corporation Norton Identity Safe 2014.7.11.42 
  [Browser Helper Objects(x64)] {B4F3A835-0E21-4959-BA22-42B3008E02FF}=C:\PROGRA~1\MICROS~2\OFFICE14\URLREDIR.DLL
  ### Microsoft Office Document Cache Handler Microsoft Corporation Microsoft Office 2010 14.0.7011.1000 
  [Auto Search URL] :HKCU provider=""
  [Auto Search URL] :HKCU "Default Value"=""
  [Search Assistant] :HKCU SearchAssistant=""
  [Search Assistant] :HKLM SearchAssistant=""
  [Search Assistant] :HKCU CustomizeSearch=""
  [Search Assistant] :HKLM CustomizeSearch=""
  [Search Provider] {0633EE93-D776-472f-A0FF-E1416B8B2E3A}=http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  ### Bing
  [Search Provider] {6A1806CD-94D4-4689-BA73-E35EA1EA9990}=http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  [Search Provider] DefaultScope={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  [Search Provider for All Users] {0633EE93-D776-472f-A0FF-E1416B8B2E3A}=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  ### Bing
  [Search Provider for All Users] {6A1806CD-94D4-4689-BA73-E35EA1EA9990}=http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  ### Google
  [Search Provider for All Users] DefaultScope={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  [Search Provider for All Users(x64)] {0633EE93-D776-472f-A0FF-E1416B8B2E3A}=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  ### Bing
  [Search Provider for All Users(x64)] {6A1806CD-94D4-4689-BA73-E35EA1EA9990}=http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  ### Google
  [Search Provider for All Users(x64)] DefaultScope={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  [Search Provider(x64)] {0633EE93-D776-472f-A0FF-E1416B8B2E3A}=http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  ### Bing
  [Search Provider(x64)] {6A1806CD-94D4-4689-BA73-E35EA1EA9990}=http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  [Search Provider(x64)] DefaultScope={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  [CustomizeSearch] :HKLM CustomizeSearch=""
  [URLSearchHook] :HKCU {CFBFAE00-17A6-11D0-99CB-00C04FD64497}=C:\WINDOWS\SYSWOW64\IEFRAME.DLL
  ### Navigateur Internet Microsoft Corporation Internet Explorer 11.00.9600.17631 
  [Search URL Template] :HKLM 1=""
  [Search URL Template] :HKLM 2=""
  [Search URL Template] :HKLM 3=""
  [Search URL Template] :HKLM 4=""
  [Default Prefix] :HKLM "Default Value"=http://
  [URL Default Prefixes] :HKLM mosaic=http://
  [URL Default Prefixes] :HKLM www=http://
  [URL Default Prefixes] :HKLM home=http://
  [URL Default Prefixes] :HKLM ftp=ftp://
  [AboutURLs] :HKLM blank=res://mshtml.dll/blank.htm
  [AboutURLs] :HKLM NoAdd-onsInfo=res://ieframe.dll/noaddoninfo.htm
  [AboutURLs] :HKLM InPrivate=res://ieframe.dll/inprivate_win7.htm
  [AboutURLs] :HKLM NavigationFailure=res://ieframe.dll/navcancl.htm
  [AboutURLs] :HKLM NoAdd-ons=res://ieframe.dll/noaddon.htm
  [AboutURLs] :HKLM Home=270
  [AboutURLs] :HKLM PostNotCached=res://ieframe.dll/repost.htm
  [AboutURLs] :HKLM DesktopItemNavigationFailure=res://ieframe.dll/navcancl.htm
  [AboutURLs] :HKLM NavigationCanceled=res://ieframe.dll/navcancl.htm
  [AboutURLs] :HKLM SecurityRisk=res://ieframe.dll/securityatrisk.htm
  [User Style Sheet] :HKCU User Stylesheet=""
  [User Style Sheet] :HKCU Use My Stylesheet=0
  [Execute unsigned ActiveX in My Computer Zone] :HKCU 1201=1
  [Execute unsigned ActiveX in My Computer Zone] :HKLM 1201=1
  [Execute unsigned ActiveX in Local Intranet Zone] :HKCU 1201=3
  [Execute unsigned ActiveX in Local Intranet Zone] :HKLM 1201=3
  [Execute unsigned ActiveX in Internet Zone] :HKCU 1201=3
  [Execute unsigned ActiveX in Internet Zone] :HKLM 1201=3
  [Links Toolbar] :HKCU LinksFolderName=""
  [Toolbars] :HKLM Locked=0
  [Toolbars] :HKLM {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}=C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\21.7.0.11\COIEPLG.DLL
  ### coIEPlugIn Symantec Corporation Norton Identity Safe 2014.7.11.42 
  [Toolbars(x64)] :HKLM Locked=0
  [Toolbars(x64)] :HKLM {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}=C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE64\21.7.0.11\COIEPLG.DLL
  ### coIEPlugIn Symantec Corporation Norton Identity Safe 2014.7.11.42 
  [IE Extensions - All Users] :HKLM {22CC3EBD-C286-43aa-B8E6-06B115F74162}=C:\PROGRAM FILES (X86)\HEWLETT-PACKARD\SMARTPRINT\SMARTPRINTSETUP.EXE
  ### HP Smart Print Setup Hewlett-Packard HP Smart Print 1.0.4.4 
  [IE Extensions - All Users] :HKLM {2670000A-7350-4f3c-8081-5663EE0C6C49}
  ###  File is deleted or hidden by a rootkit or could not be located.
  [IE Extensions - All Users] :HKLM {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}
  ###  File is deleted or hidden by a rootkit or could not be located.
  [IE Extensions - All Users] :HKLM {92780B25-18CC-41C8-B9BE-3C9C571A8263}=C:\PROGRA~2\MICROS~4\OFFICE12\REFIEBAR.DLL
  ### Allows you to use the Research Library and its collection of information services from Microsoft Internet Explorer Microsoft Corporation Research Library Explorer Bar 12.0.6606.1000 
  [AutoConfigURL] :HKCU AutoConfigURL=""
  [Protocols Filter] :HKLM application/octet-stream=C:\Windows\SysWOW64\MSCOREE.DLL
  ### Microsoft .NET Runtime Execution Engine Microsoft Corporation Microsoft® .NET Framework 4.0.40305.0  mscoree.dll
  [Protocols Filter] :HKLM application/x-complus=C:\Windows\SysWOW64\MSCOREE.DLL
  ### Microsoft .NET Runtime Execution Engine Microsoft Corporation Microsoft® .NET Framework 4.0.40305.0  mscoree.dll
  [Protocols Filter] :HKLM application/x-msdownload=C:\Windows\SysWOW64\MSCOREE.DLL
  ### Microsoft .NET Runtime Execution Engine Microsoft Corporation Microsoft® .NET Framework 4.0.40305.0  mscoree.dll
  [Protocols Filter] :HKLM text/xml=C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
  ### Microsoft Office XML MIME Filter Microsoft Corporation Microsoft Office InfoPath 12.0.6500.5000 
  [Protocols Handler] :HKLM about=C:\WINDOWS\SYSWOW64\MSHTML.DLL
  ### Visionneuse HTML Microsoft (R) Microsoft Corporation Internet Explorer 11.00.9600.17631 
  [Protocols Handler] :HKLM cdl=C:\WINDOWS\SYSWOW64\URLMON.DLL
  ### Extensions OLE32 pour Win32 Microsoft Corporation Internet Explorer 11.00.9600.17631 
  [Protocols Handler] :HKLM dvd=C:\WINDOWS\SYSWOW64\MSVIDCTL.DLL
  ### Contrôle ActiveX pour le flux vidéo Microsoft Corporation DirectShow 6.05.7600.16385 
  [Protocols Handler] :HKLM file=C:\WINDOWS\SYSWOW64\URLMON.DLL
  ### Extensions OLE32 pour Win32 Microsoft Corporation Internet Explorer 11.00.9600.17631 
  [Protocols Handler] :HKLM ftp=C:\WINDOWS\SYSWOW64\URLMON.DLL
  ### Extensions OLE32 pour Win32 Microsoft Corporation Internet Explorer 11.00.9600.17631 
  [Protocols Handler] :HKLM http=C:\WINDOWS\SYSWOW64\URLMON.DLL
  ### Extensions OLE32 pour Win32 Microsoft Corporation Internet Explorer 11.00.9600.17631 
  [Protocols Handler] :HKLM https=C:\WINDOWS\SYSWOW64\URLMON.DLL
  ### Extensions OLE32 pour Win32 Microsoft Corporation Internet Explorer 11.00.9600.17631 
  [Protocols Handler] :HKLM its=C:\WINDOWS\SYSTEM32\ITSS.DLL
  ### Microsoft® InfoTech Storage System Library Microsoft Corporation Microsoft® Windows® Operating System 6.1.7600.16385  %SystemRoot%\System32\itss.dll
  [Protocols Handler] :HKLM javascript=C:\WINDOWS\SYSWOW64\MSHTML.DLL
  ### Visionneuse HTML Microsoft (R) Microsoft Corporation Internet Explorer 11.00.9600.17631 
  [Protocols Handler] :HKLM local=C:\WINDOWS\SYSWOW64\URLMON.DLL
  ### Extensions OLE32 pour Win32 Microsoft Corporation Internet Explorer 11.00.9600.17631 
  [Protocols Handler] :HKLM mailto=C:\WINDOWS\SYSWOW64\MSHTML.DLL
  ### Visionneuse HTML Microsoft (R) Microsoft Corporation Internet Explorer 11.00.9600.17631 
  [Protocols Handler] :HKLM mhtml=C:\WINDOWS\SYSTEM32\INETCOMM.DLL
  ### Microsoft Internet Messaging API Resources Microsoft Corporation Microsoft® Windows® Operating System 6.1.7601.17609  %SystemRoot%\system32\inetcomm.dll
  [Protocols Handler] :HKLM mk=C:\WINDOWS\SYSWOW64\URLMON.DLL
  ### Extensions OLE32 pour Win32 Microsoft Corporation Internet Explorer 11.00.9600.17631 
  [Protocols Handler] :HKLM ms-help=C:\PROGRAM FILES (X86)\COMMON FILES\MICROSOFT SHARED\HELP\HXDS.DLL
  ### Microsoft® Help Data Services Module Microsoft Corporation Microsoft ® Help 2.7 5.70.51021.0 
  [Protocols Handler] :HKLM ms-its=C:\WINDOWS\SYSTEM32\ITSS.DLL
  ### Microsoft® InfoTech Storage System Library Microsoft Corporation Microsoft® Windows® Operating System 6.1.7600.16385  %SystemRoot%\System32\itss.dll
  [Protocols Handler] :HKLM res=C:\WINDOWS\SYSWOW64\MSHTML.DLL
  ### Visionneuse HTML Microsoft (R) Microsoft Corporation Internet Explorer 11.00.9600.17631 
  [Protocols Handler] :HKLM tv=C:\WINDOWS\SYSWOW64\MSVIDCTL.DLL
  ### Contrôle ActiveX pour le flux vidéo Microsoft Corporation DirectShow 6.05.7600.16385 
  [Protocols Handler] :HKLM vbscript=C:\WINDOWS\SYSWOW64\MSHTML.DLL
  ### Visionneuse HTML Microsoft (R) Microsoft Corporation Internet Explorer 11.00.9600.17631 
  [Proxy] :HKCU ProxyServer=""
  [Proxy] :HKCU ProxyEnable=0
[Network Settings]
  [Hosts File Path] :HKLM DataBasePath=%SystemRoot%\System32\drivers\etc
[Browsers]
  [Installed Browsers] FIREFOX.EXE=C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\FIREFOX.EXE
  ### Default Browser 
Firefox Mozilla Corporation Firefox 36.0.4 
  [Installed Browsers] IEXPLORE.EXE=C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
  ### Internet Explorer Microsoft Corporation Internet Explorer 11.00.9600.16428 
  [FireFox Components and Extensions] nsIQTScriptablePlugin.xpt=C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\Components
sIQTScriptablePlugin.xpt
  [FireFox Components and Extensions] firefox@ghostery.com=C:\Users\Dominique\AppData\Roaming\Mozilla\Firefox\Profiles\031tdlxi.default-1424425153422\extensions\firefox@ghostery.com.xpi
  ### firefox@ghostery.com 
  [FireFox Components and Extensions] {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}=C:\Users\Dominique\AppData\Roaming\Mozilla\Firefox\Profiles\031tdlxi.default-1424425153422\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}\
  ### {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} WOT Files wot.jar
  [FireFox Components and Extensions] {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}=C:\Users\Dominique\AppData\Roaming\Mozilla\Firefox\Profiles\031tdlxi.default-1424425153422\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
  ### {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} 
  [FireFox Components and Extensions] quickprint@hp.com=C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension\
  ### quickprint@hp.com SmartPrintButton Files FFQpBHO.xpt FFQpBHO3.5.dll FFQpBHO3.6.dll hpWebPrinting.xpt hpWebPrinting35.dll
  [FireFox Components and Extensions] {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}=C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn\
  ### {2D3F3651-74B9-4795-BDEC-6DA2F431CB62} Norton Toolbar Files coffpl35.dll coFFPl36.dll coFFPl37.dll coFFPlgn.dll coIJSCallback.xpt
  [FireFox Settings] :HKLM browser.startup.homepage=""
  [FireFox Settings] :HKLM browser.startup.homepage_override_url=""
  [FireFox Settings] :HKLM browser.search.selectedEngine=""
  [FireFox Settings] :HKLM browser.search.selectedEngine,S=""
  [FireFox Settings] :HKLM browser.search.defaultEnginename=""
  [FireFox Settings] :HKLM browser.search.defaultEnginename,S=""
  [FireFox Settings] :HKLM browser.search.order.1=""
  [FireFox Settings] :HKLM browser.search.order.1,S=""
  [FireFox Settings] :HKLM browser.search.defaulturl=""
  [FireFox Settings] :HKLM browser.newtab.url=""
  [FireFox Settings] :HKLM keyword.URL=""
  [FireFox Settings] :HKLM network.proxy.autoconfig_url=""
  [FireFox Settings] :HKLM network.proxy.type=""
  [FireFox Settings] :HKLM network.proxy.http=""
  [FireFox Settings] :HKLM network.proxy.http_port=""
  [Google Chrome Settings] :HKLM backup.homepage=""
  [Google Chrome Settings] :HKLM backup.session.urls_to_restore_on_startup=""
  [Google Chrome Settings] :HKLM session.startup_urls=""
  [Google Chrome Settings] :HKLM default_search_provider.icon_url=""
  [Google Chrome Settings] :HKLM default_search_provider.keyword=""
  [Google Chrome Settings] :HKLM default_search_provider.name=""
  [Google Chrome Settings] :HKLM default_search_provider.search_url=""
  [Google Chrome Settings] :HKLM default_search_provider.suggest_url=""
  [Google Chrome Settings] :HKLM default_search_provider_data.template_url_data.alternate_urls=""
  [Google Chrome Settings] :HKLM default_search_provider_data.template_url_data.favicon_url=""
  [Google Chrome Settings] :HKLM default_search_provider_data.template_url_data.keyword=""
  [Google Chrome Settings] :HKLM default_search_provider_data.template_url_data.short_name=""
  [Google Chrome Settings] :HKLM default_search_provider_data.template_url_data.url=""
  [Google Chrome Settings] :HKLM default_search_provider_data.template_url_data.suggest_url=""
  [Google Chrome Settings] :HKLM default_search_provider_data.template_url_data.new_tab_url=""
  [Google Chrome Settings] :HKLM default_search_provider_data.template_url_data.instant_url=""
  [Google Chrome Settings] :HKLM default_search_provider_data.template_url_data.image_url=""
  [Google Chrome Settings] :HKLM homepage=""
  [Google Chrome Settings] :HKLM session.urls_to_restore_on_startup=""
  [Google Chrome Addons] mkfokfffehpeedafpekjeddnmnjhmcmk=C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\21.7.0.11\EXTS\CHROME.CRX
[Network Settings]
  [Domain Name] :HKLM Domain=""
  [Name Server] {82324ADF-0BDC-4264-8BBE-0C9BC7ED2BF8}=172.20.10.1
  ### Network Card:Apple Mobile Device Ethernet DHCPNameServer:172.20.10.1 DhcpDefaultGateway:172.20.10.1
 DhcpServer:172.20.10.1 
  [Name Server] {9FB8B4CA-C007-42F0-8CE6-23E7B486FF72}=192.168.1.1
  ### Network Card:Qualcomm Atheros AR5B97 Wireless Network Adapter DHCPNameServer:192.168.1.1 DhcpDefaultGateway:192.168.1.1
 DhcpServer:192.168.1.1 
  [WinSock2 Components] NLAapi.dll=C:\WINDOWS\SYSWOW64\NLAAPI.DLL
  ### Network Location Awareness 2 Microsoft Corporation Microsoft® Windows® Operating System 6.1.7601.18685  %SystemRoot%\SYSWOW64\NLAapi.dll
  [WinSock2 Components] napinsp.dll=C:\WINDOWS\SYSWOW64\NAPINSP.DLL
  ### Fournisseur Shim d'affectation de noms de messagerie Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385  %SystemRoot%\SYSWOW64
apinsp.dll
  [WinSock2 Components] pnrpnsp.dll=C:\WINDOWS\SYSWOW64\PNRPNSP.DLL
  ### Fournisseur d'espace de noms PNRP Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385  %SystemRoot%\SYSWOW64\pnrpnsp.dll
  [WinSock2 Components] mswsock.dll=C:\WINDOWS\SYSWOW64\MSWSOCK.DLL
  ### Fournisseur de service Sockets 2.0 de Microsoft Windows Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385  %SystemRoot%\SYSWOW64\mswsock.dll
  [WinSock2 Components] winrnr.dll=C:\WINDOWS\SYSWOW64\WINRNR.DLL
  ### LDAP RnR Provider DLL Microsoft Corporation Microsoft® Windows® Operating System 6.1.7600.16385  %SystemRoot%\SYSWOW64\winrnr.dll
  [WinSock2 Components] mdnsNSP.dll=C:\PROGRAM FILES (X86)\BONJOUR\MDNSNSP.DLL
  ### Bonjour Namespace Provider Apple Inc. Bonjour 3,0,0,10 
  [WinSock2 Components (x64)] NLAapi.dll=C:\WINDOWS\SYSNATIVE\NLAAPI.DLL
  ### Network Location Awareness 2 Microsoft Corporation Microsoft® Windows® Operating System 6.1.7601.17964  %SystemRoot%\SYSNATIVE\NLAapi.dll
  [WinSock2 Components (x64)] napinsp.dll=C:\WINDOWS\SYSNATIVE\NAPINSP.DLL
  ### Fournisseur Shim d'affectation de noms de messagerie Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385  %SystemRoot%\SYSNATIVE
apinsp.dll
  [WinSock2 Components (x64)] pnrpnsp.dll=C:\WINDOWS\SYSNATIVE\PNRPNSP.DLL
  ### Fournisseur d'espace de noms PNRP Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385  %SystemRoot%\SYSNATIVE\pnrpnsp.dll
  [WinSock2 Components (x64)] mswsock.dll=C:\WINDOWS\SYSNATIVE\MSWSOCK.DLL
  ### Fournisseur de service Sockets 2.0 de Microsoft Windows Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385  %SystemRoot%\SYSNATIVE\mswsock.dll
  [WinSock2 Components (x64)] winrnr.dll=C:\WINDOWS\SYSNATIVE\WINRNR.DLL
  ### LDAP RnR Provider DLL Microsoft Corporation Microsoft® Windows® Operating System 6.1.7600.16385  %SystemRoot%\SYSNATIVE\winrnr.dll
  [WinSock2 Components (x64)] mdnsNSP.dll=C:\PROGRAM FILES\BONJOUR\MDNSNSP.DLL
  ### Bonjour Namespace Provider Apple Inc. Bonjour 3,0,0,10 
[Windows Shell]
  [Display Scrap's Extensions] :HKLM NeverShowExt=""
  [ScreenSaver] :HKCU SCRNSAVE.EXE=C:\WINDOWS\SYSTEM32\ACER.SCR
  ### Screen Saver  Screen Saver 1.0.0.1 
  [System.ini] shell=explorer.exe
  [User Shell] :HKCU shell=""
  [Main File Extensions] :HKLM .exe="%1" %*
  [Main File Extensions] :HKLM .com="%1" %*
  [Main File Extensions] :HKLM .pif="%1" %*
  [Main File Extensions] :HKLM .bat="%1" %*
  [Main File Extensions] :HKLM .cmd="%1" %*
  [Main File Extensions] :HKLM .scr="%1" /S
  [Main File Extensions] :HKLM .txt=%SystemRoot%\system32\NOTEPAD.EXE %1
  [Main File Extensions] :HKLM .reg=regedit.exe "%1"
  [Main File Extensions] :HKLM .inf=%SystemRoot%\system32\NOTEPAD.EXE %1
  [Main File Extensions] :HKLM .ini=%SystemRoot%\system32\NOTEPAD.EXE %1
  [Main File Extensions] :HKLM .js=%SystemRoot%\System32\WScript.exe "%1" %*
  [Main File Extensions] :HKLM .vbs=%SystemRoot%\System32\WScript.exe "%1" %*
  [Main File Extensions] :HKLM .vbe=%SystemRoot%\System32\WScript.exe "%1" %*
  [Main File Extensions] :HKLM .msc=%SystemRoot%\system32\mmc.exe "%1" %*
  [Main File Extensions] :HKLM .jpg=%SystemRoot%\System32undll32.exe "%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen %1
  [Main File Extensions] :HKLM .jpeg=%SystemRoot%\System32undll32.exe "%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen %1
  [UserInit Value] :HKLM UserInit=userinit.exe,
  [Winlogon Notification] :HKLM SDWinLogon=SDWinLogon.dll
  ### SDWinLogon  File is deleted or hidden by a rootkit or could not be located.
  [Shell Services DelayLoad] :HKLM WebCheck={E6FB5E20-DE35-11CF-9C87-00AA005127ED}
  [System Shell Policies ] :HKCU shell=""
  [System Shell Policies ] :HKLM shell=""
  [System Shell Policies ] :HKCU run=""
  [System Shell Policies ] :HKLM run=""
  [App Paths] :HKLM Acer Arcade Movie=C:\Program Files (x86)\Acer\clear.fi\Movie\PlayMovie.exe
  ### Acer Arcade Movie clear.fi Movie Main Program CyberLink Corp. clear.fi Movie 9.00.7709     
  [App Paths] :HKLM AcroRd32.exe=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
  ### AcroRd32.exe Adobe Reader  Adobe Systems Incorporated Adobe Reader 11.0.10.32 
  [App Paths] :HKLM AudioEditor.exe=C:\Program Files (x86)\NTI\NTI Media Maker 9\Audio Editor\AudioEditor.exe
  ### AudioEditor.exe NTI AudioEditor NTI Corporation. 8, 1, 1, 0 
  [App Paths] :HKLM BackupManager.exe.exe=C:\Program Files (x86)\NTI\Acer Backup Manager\
  ### BackupManager.exe.exe 
  [App Paths] :HKLM ccleaner.exe=C:\Program Files\CCleaner\CCleaner64.exe
  ### ccleaner.exe CCleaner Piriform Ltd CCleaner 5, 04, 00, 5151 
  [App Paths] :HKLM Cdmkr32u.exe=C:\Program Files (x86)\NTI\NTI Media Maker 9\Media Maker\Cdmkr32u.exe
  ### Cdmkr32u.exe NTI Media Maker NTI Corporation. NTI Media Maker 9 9, 0, 2, 8942 
  [App Paths] :HKLM clear.fi=C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe
  ### clear.fi clear.fi Acer Incorporated Acer clear.fi 1.0.1720.0 
  [App Paths] :HKLM clear.fi.exe=C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe
  ### clear.fi.exe clear.fi Acer Incorporated Acer clear.fi 1.0.1720.0 
  [App Paths] :HKLM cmmgr32.exe
  ### cmmgr32.exe 
  [App Paths] :HKLM defraggler.exe=C:\Program Files\Defraggler\Defraggler64.exe
  ### defraggler.exe Defraggler Piriform Ltd Defraggler 2.18.0.945 
  [App Paths] :HKLM DigitalJack.exe=C:\Program Files (x86)\NTI\NTI Media Maker 9\NTI Ripper Suite\DigitalJack.exe
  ### DigitalJack.exe Play your audio files to enjoy your music. NTI Corporation NTI DJ 2, 0, 3, 8 
  [App Paths] :HKLM dvdmaker.exe=%ProgramFiles%\DVD Maker\dvdmaker.exe
  ### dvdmaker.exe 
  [App Paths] :HKLM excel.exe=C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE
  ### excel.exe Microsoft Excel Microsoft Corporation Microsoft Office 2010 14.0.7145.5001 
  [App Paths] :HKLM firefox.exe=C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  ### firefox.exe Firefox Mozilla Corporation Firefox 36.0.4 
  [App Paths] :HKLM IEDIAG.EXE=C:\Program Files\Internet Explorer\IEDIAGCMD.EXE
  ### IEDIAG.EXE Diagnostics utility for Internet Explorer Microsoft Corporation Internet Explorer 11.00.9600.16428 
  [App Paths] :HKLM IEDIAGCMD.EXE=C:\Program Files\Internet Explorer\IEDIAGCMD.EXE
  ### IEDIAGCMD.EXE Diagnostics utility for Internet Explorer Microsoft Corporation Internet Explorer 11.00.9600.16428 
  [App Paths] :HKLM IEXPLORE.EXE=C:\Program Files\Internet Explorer\IEXPLORE.EXE
  ### IEXPLORE.EXE Internet Explorer Microsoft Corporation Internet Explorer 11.00.9600.16428 
  [App Paths] :HKLM ImBpp.exe=C:\Program Files (x86)\IncrediMail\Bin\ImBpp.exe
  ### ImBpp.exe Open window IncrediMail, Ltd. Open window 6, 3, 9, 5254 
  [App Paths] :HKLM ImLc.exe=C:\Program Files (x86)\IncrediMail\Bin\ImLc.exe
  ### ImLc.exe IncrediMail Letter Creator Application IncrediMail, Ltd. Letter Creator Application 6, 3, 9, 5254 
  [App Paths] :HKLM ImLcU.exe=C:\Program Files (x86)\IncrediMail\Bin\ImLc.exe
  ### ImLcU.exe IncrediMail Letter Creator Application IncrediMail, Ltd. Letter Creator Application 6, 3, 9, 5254 
  [App Paths] :HKLM ImLpp.exe=C:\Program Files (x86)\IncrediMail\Bin\ImLpp.exe
  ### ImLpp.exe 
  [App Paths] :HKLM ImPackr.exe=C:\Program Files (x86)\IncrediMail\Bin\impackr.exe
  ### ImPackr.exe ContentPacker MFC Application ContentPacker Application 6, 3, 9, 5254 
  [App Paths] :HKLM impackrU.exe=C:\Program Files (x86)\IncrediMail\Bin\impackr.exe
  ### impackrU.exe ContentPacker MFC Application ContentPacker Application 6, 3, 9, 5254 
  [App Paths] :HKLM ImpCnt.exe=C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe
  ### ImpCnt.exe IncrediMail Content Importer IncrediMail, Ltd. ImpCnt.exe Application 6, 3, 9, 5254 
  [App Paths] :HKLM ImpCntU.exe=C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe
  ### ImpCntU.exe IncrediMail Content Importer IncrediMail, Ltd. ImpCnt.exe Application 6, 3, 9, 5254 
  [App Paths] :HKLM ImpContent.exe=C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe
  ### ImpContent.exe IncrediMail Content Importer IncrediMail, Ltd. ImpCnt.exe Application 6, 3, 9, 5254 
  [App Paths] :HKLM ImSetup.exe=C:\Program Files (x86)\IncrediMail\Bin\ImSetup.exe
  ### ImSetup.exe IncrediMail Setup IncrediMail 6, 3, 9, 5254 
  [App Paths] :HKLM IncMail.exe=C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe
  ### IncMail.exe IncrediMail Application IncrediMail, Ltd. IncrediMail 6, 3, 9, 5254 
  [App Paths] :HKLM IncMailU.exe=C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe
  ### IncMailU.exe IncrediMail Application IncrediMail, Ltd. IncrediMail 6, 3, 9, 5254 
  [App Paths] :HKLM IncrediBackup.exe=C:\Program Files (x86)\IncrediBackup\Bin\IncrediBackup.exe
  ### IncrediBackup.exe IncrediBackup IncrediMail Ltd. IncrediBackup 1.0.0.1039 
  [App Paths] :HKLM IncrediMail.exe=C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe
  ### IncrediMail.exe IncrediMail Application IncrediMail, Ltd. IncrediMail 6, 3, 9, 5254 
  [App Paths] :HKLM install.exe
  ### install.exe 
  [App Paths] :HKLM Integrator5.exe=C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
  ### Integrator5.exe Glary Utilities 5 Glarysoft Ltd Glary Utilities 5, 0, 0, 0 
  [App Paths] :HKLM iTunes.exe=C:\Program Files\iTunes\iTunes.exe
  ### iTunes.exe iTunes Apple Inc. iTunes 12.1.2.27 
  [App Paths] :HKLM javaws.exe=C:\Program Files (x86)\Java\jre1.8.0_31\bin\javaws.exe
  ### javaws.exe Java(TM) Web Start Launcher Oracle Corporation Java(TM) Platform SE 8 U31 8.0.310.13 
  [App Paths] :HKLM JCMKR32.exe=C:\Program Files (x86)\NTI\NTI Media Maker 9\NTI JewelCase Maker\JCMKR32.exe
  ### JCMKR32.exe NTI JewelCase Maker NTI Corporation. NTI JewelCase Maker 5, 5, 0, 88 
  [App Paths] :HKLM Journal.exe=%ProgramFiles%\Windows Journal\Journal.exe
  ### Journal.exe 
  [App Paths] :HKLM Launcher.exe=C:\Program Files (x86)\NTI\NTI Media Maker 9\Launcher.exe
  ### Launcher.exe Launcher NTI Launcher 1.0.0.0 
  [App Paths] :HKLM liveupdate.exe=C:\Program Files (x86)\NTI\NTI Media Maker 9\LiveUpdate\liveupdate.exe
  ### liveupdate.exe Liveupdate NTI Corporation. Live Update 1.0.0.18 
  [App Paths] :HKLM LManager.exe=C:\Program Files (x86)\Launch Manager\LManager.exe
  ### LManager.exe Launch Manager Dritek System Inc. Launch Manager 5.1.7.2308 
  [App Paths] :HKLM LogiLDA.dll=C:\Windows\system32\
  ### LogiLDA.dll 
  [App Paths] :HKLM mbam.exe=C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
  ### mbam.exe Malwarebytes Anti-Malware Malwarebytes Corporation Malwarebytes Anti-Malware 1.0.1.922 
  [App Paths] :HKLM MCUI32.exe=C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\MCUI32.exe
  ### MCUI32.exe Symantec Security History Launcher Symantec Corporation Norton Internet Security 21.7 
  [App Paths] :HKLM MediaEspresso=C:\Program Files (x86)\Acer\clear.fi\MediaEspresso\MediaEspresso.exe
  ### MediaEspresso CyberLink MediaEspresso Main Program CyberLink Corp. MediaEspresso 6.6.1517 
  [App Paths] :HKLM mip.exe=%CommonProgramFiles%\Microsoft Shared\Ink\mip.exe
  ### mip.exe 
  [App Paths] :HKLM mplayer2.exe=%ProgramFiles(x86)%\Windows Media Player\wmplayer.exe
  ### mplayer2.exe 
  [App Paths] :HKLM MSACCESS.EXE=C:\PROGRA~2\MICROS~4\Office14\MSACCESS.EXE
  ### MSACCESS.EXE Microsoft Access Microsoft Corporation Microsoft Office 2010 14.0.7145.5001 
  [App Paths] :HKLM MsoHtmEd.exe
  ### MsoHtmEd.exe 
  [App Paths] :HKLM msoxmled.exe=C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSOXMLED.EXE
  ### msoxmled.exe XML Editor Microsoft Corporation Microsoft Office InfoPath 12.0.4518.1014 
  [App Paths] :HKLM MSPUB.EXE=C:\PROGRA~2\MICROS~4\Office12\MSPUB.EXE
  ### MSPUB.EXE Microsoft Office Publisher Microsoft Corporation 2007 Microsoft Office system 12.0.6676.5000 
  [App Paths] :HKLM NAVW32.EXE=C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\Navw32.exe
  ### NAVW32.EXE Norton Internet Security Scanner Module Symantec Corporation Norton Internet Security 21.7 
  [App Paths] :HKLM NAVWNT.EXE=C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\Navwnt.exe
  ### NAVWNT.EXE Norton Internet Security Scanner Stub Symantec Corporation Norton Internet Security 21.7 
  [App Paths] :HKLM NDVD9To5.exe=C:\Program Files (x86)\NTI\NTI Media Maker 9\Media Maker\NDVD9To5.exe
  ### NDVD9To5.exe NDVD9To5 MFC Application NDVD9To5 Application 1, 0, 2, 30 
  [App Paths] :HKLM Nero.exe=C:\Program Files (x86)\Nero\Core\Nero.exe
  ### Nero.exe Nero Burning ROM Nero AG Nero Burning ROM 7, 10, 1, 0 
  [App Paths] :HKLM ois.exe=C:\PROGRA~2\MICROS~4\Office12\OIS.EXE
  ### ois.exe Microsoft Office Picture Manager Microsoft Corporation Microsoft Office Picture Manager 12.0.6606.1000 
  [App Paths] :HKLM OneNote.exe=C:\PROGRA~2\MICROS~4\Office14\ONENOTE.EXE
  ### OneNote.exe Microsoft OneNote Microsoft Corporation Microsoft OneNote 14.0.7145.5000 
  [App Paths] :HKLM OUTLOOK.EXE=C:\PROGRA~2\MICROS~4\Office12\OUTLOOK.EXE
  ### OUTLOOK.EXE Microsoft Office Outlook Microsoft Corporation Microsoft Office Outlook 12.0.6691.5000 
  [App Paths] :HKLM pbrush.exe=%SystemRoot%\System32\mspaint.exe
  ### pbrush.exe 
  [App Paths] :HKLM PhotoMakerSkinU.exe=C:\Program Files (x86)\NTI\NTI Media Maker 9\Media Maker\PhotoMakerSkinU.exe
  ### PhotoMakerSkinU.exe NTI PhotoMaker for Windows NTI Corporation. NTI PhotoMaker 2.0.0.36 
  [App Paths] :HKLM pnac.exe=C:\Program Files (x86)\Photo Notifier and Animation Creator\Application\Bin\pnac.exe
  ### pnac.exe Photo Notifier and Animation Creator IncrediMail, Ltd. 
  [App Paths] :HKLM powerpnt.exe=C:\PROGRA~2\MICROS~4\Office14\POWERPNT.EXE
  ### powerpnt.exe Microsoft PowerPoint Microsoft Corporation Microsoft Office 2010 14.0.7138.5000 
  [App Paths] :HKLM PowerShell.exe=%SystemRoot%\system32\WindowsPowerShell\v1.0\PowerShell.exe
  ### PowerShell.exe 
  [App Paths] :HKLM QuickTimePlayer.exe=C:\Program Files (x86)\QuickTime\QuickTimePlayer.exe
  ### QuickTimePlayer.exe QuickTime Player Apple Inc. QuickTime QuickTime 7.7.6 (1680.95.31) 
  [App Paths] :HKLM recuva.exe=C:\Program Files\Recuvaecuva64.exe
  ### recuva.exe Recuva Piriform Ltd Recuva 1.51.0.1063 
  [App Paths] :HKLM Ripper.exe=C:\Program Files (x86)\NTI\NTI Media Maker 9\NTI Ripper Suite\Ripper.exe
  ### Ripper.exe Rip CD to MP3, WMA, OGG, WAV files or convert file among MP3, WMA, OGG, WAV file types NTI NTI Ripper 2, 0, 3, 13 
  [App Paths] :HKLM setup.exe
  ### setup.exe 
  [App Paths] :HKLM sidebar.exe="%ProgramFiles%\Windows Sidebar\sidebar.exe"
  ### sidebar.exe 
  [App Paths] :HKLM SnippingTool.exe=%SystemRoot%\system32\SnippingTool.exe
  ### SnippingTool.exe 
  [App Paths] :HKLM table30.exe
  ### table30.exe 
  [App Paths] :HKLM TabTip.exe=%CommonProgramFiles%\microsoft shared\ink\TabTip.exe
  ### TabTip.exe 
  [App Paths] :HKLM vstoee.dll
  ### vstoee.dll 
  [App Paths] :HKLM wab.exe=%ProgramFiles%\Windows Mail\wab.exe
  ### wab.exe 
  [App Paths] :HKLM wabmig.exe=%ProgramFiles%\Windows Mail\wabmig.exe
  ### wabmig.exe 
  [App Paths] :HKLM WinRAR.exe=C:\Program Files (x86)\WinRAR\WinRAR.exe
  ### WinRAR.exe 
  [App Paths] :HKLM Winword.exe=C:\PROGRA~2\MICROS~4\Office14\WINWORD.EXE
  ### Winword.exe Microsoft Word Microsoft Corporation Microsoft Office 2010 14.0.7145.5001 
  [App Paths] :HKLM wmplayer.exe=%ProgramFiles(x86)%\Windows Media Player\wmplayer.exe
  ### wmplayer.exe 
  [App Paths] :HKLM WORDPAD.EXE=C:\PROGRAM FILES (X86)\WINDOWS NT\ACCESSORIES\WORDPAD.EXE
  ### WORDPAD.EXE Application Windows Wordpad Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385  "%ProgramFiles%\Windows NT\Accessories\WORDPAD.EXE"
  [App Paths] :HKLM WRITE.EXE="%ProgramFiles%\Windows NT\Accessories\WORDPAD.EXE"
  ### WRITE.EXE 
  [App Paths] :HKLM YouCam=C:\Program Files (x86)\Acer\Acer Crystal Eye Webcam\webcam.exe
  ### YouCam WebCam CyberLink Corp. WebCam 1.0.0.1904 
  [Prevents Display in Control Panel from running.] :HKCU NoDispCpl=0
  [Disable Registry Tools] :HKCU DisableRegistryTools =0
  [Internet Shortcuts] :HKLM C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reanimator\Update Reanimator.lnk=HTTP://GREATIS.COM/REANIMATOR.INI /R
  ### C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\REANIM~1\UPDATE~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\Desktop\Documents - Raccourci.lnk=C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms
  ### C:\Users\DOMINI~1\Desktop\DOCUME~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\Desktop\Downloads (2).lnk=C:\Users\Dominique\Downloads
  ### C:\Users\DOMINI~1\Desktop\DOWNLO~2.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\Desktop\Fez - Raccourci.lnk=C:\Users\Dominique\Pictures\Fez
  ### C:\Users\DOMINI~1\Desktop\FEZ-RA~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\Desktop\HiJackThis.lnk=C:\Users\Dominique\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
  ### C:\Users\DOMINI~1\Desktop\HIJACK~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\Desktop\IMPAYES.14.docx.lnk=C:\Users\Dominique\Desktop\Psychothérapies\Impayés\IMPAYES.14.docx
  ### C:\Users\DOMINI~1\Desktop\IMPAYE~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\Desktop\Maintenance.lnk
  ### C:\Users\DOMINI~1\Desktop\MAINTE~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\Desktop\Program Files.lnk=C:\Program Files (x86)
  ### C:\Users\DOMINI~1\Desktop\PROGRA~2.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\Desktop\Programmes.lnk
  ### C:\Users\DOMINI~1\Desktop\PROGRA~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\Desktop\Reanimator.lnk=C:\Program Files (x86)\Greatis\Reanimatoreanimator.exe
  ### C:\Users\DOMINI~1\Desktop\REANIM~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\Desktop\System Ninja.lnk=C:\Program Files (x86)\System Ninja\System Ninja.exe
  ### C:\Users\DOMINI~1\Desktop\SYSTEM~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\Desktop\Windows Update.lnk
  ### C:\Users\DOMINI~1\Desktop\WINDOW~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\Desktop\µTorrent.lnk=C:\Users\Dominique\AppData\Roaming\uTorrent\uTorrent.exe
  ### C:\Users\DOMINI~1\Desktop\TORREN~1.LNK
  [User Shortcuts] :HKLM C:\Users\Public\Desktop\AVG Maintenance en 1 clic.lnk=C:\Program Files (x86)\AVG\AVG PC TuneUp\OneClick.exe
  ### C:\Users\Public\Desktop\AVGMAI~1.LNK
  [User Shortcuts] :HKLM C:\Users\Public\Desktop\clear.fi Tutorial.lnk=C:\Program Files (x86)\Windows Media Player\wmplayer.exe
  ### C:\Users\Public\Desktop\CLEARF~1.LNK
  [User Shortcuts] :HKLM C:\Users\Public\Desktop\clear.fi.lnk=C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe
  ### C:\Users\Public\Desktop\CLEARF~2.LNK
  [User Shortcuts] :HKLM C:\Users\Public\Desktop\Consommables.lnk=C:\Program Files (x86)\HP\HP Photosmart 5510 series\Bin\hpqDTSS.exe
  ### C:\Users\Public\Desktop\CONSOM~1.LNK
  [User Shortcuts] :HKLM C:\Users\Public\Desktop\Imprimante.lnk=C:\Program Files (x86)\HP\HP Photosmart 5510 series\Bin\HP Photosmart 5510 series.exe
  ### C:\Users\Public\Desktop\IMPRIM~1.LNK
  [User Shortcuts] :HKLM C:\Users\Public\Desktop\iTunes.lnk=C:\Program Files (x86)\iTunes\iTunes.exe
  ### C:\Users\Public\Desktop\iTunes.lnk
  [User Shortcuts] :HKLM C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk=C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
  ### C:\Users\Public\Desktop\MALWAR~1.LNK
  [User Shortcuts] :HKLM C:\Users\Public\Desktop\Norton Internet Security.lnk=C:\Program Files (x86)\Norton Internet Security\Engine64\21.7.0.11\uistub.exe
  ### C:\Users\Public\Desktop\NORTON~1.LNK
  [User Shortcuts] :HKLM C:\Users\Public\Desktop\Recuva.lnk=C:\Program Files\Recuva\Recuva64.exe
  ### C:\Users\Public\Desktop\Recuva.lnk
  [User Shortcuts] :HKLM C:\Users\Public\Desktop\VLC.lnk=C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
  ### C:\Users\Public\Desktop\VLC.lnk
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Glary Utilities 5.lnk=C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\GLARYU~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk=C:\Program Files\Internet Explorer\iexplore.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\LAUNCH~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk=C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\MICROS~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\SHOWSD~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk=C:\Windows\System32\control.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\USERPI~1\IMPLIC~1\7E4DCA~1\pinned.lnk
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\1-Click-Optimizer (WO11).lnk=C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 11\WO11.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\USERPI~1\TaskBar\1-CLIC~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Ashampoo WinOptimizer 11.lnk=C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 11\WO11.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\USERPI~1\TaskBar\ASHAMP~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\AVG PC TuneUp - Interface de démarrage.lnk=C:\Program Files (x86)\AVG\AVG PC TuneUp\Integrator.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\USERPI~1\TaskBar\AVGPCT~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CCleaner.lnk=C:\Program Files\CCleaner\CCleaner64.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\USERPI~1\TaskBar\CCleaner.lnk
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Glary Utilities 5.lnk=C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\USERPI~1\TaskBar\GLARYU~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\HP Scan.lnk=C:\Program Files (x86)\HP\HP Photosmart 5510 series\bin\HPScan.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\USERPI~1\TaskBar\HPSCAN~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\IncrediBackup.lnk=C:\Program Files (x86)\IncrediBackup\Bin\IncrediBackup.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\USERPI~1\TaskBar\INCRED~2.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\IncrediMail Application.lnk=C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\USERPI~1\TaskBar\INCRED~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk=C:\Program Files\Internet Explorer\iexplore.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\USERPI~1\TaskBar\INTERN~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Microsoft Excel 2010.lnk=C:\Windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\xlicons.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\USERPI~1\TaskBar\MICROS~4.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Microsoft OneNote 2010.lnk=C:\Windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\joticon.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\USERPI~1\TaskBar\MICROS~3.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Microsoft PowerPoint 2010.lnk=C:\Windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\pptico.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\USERPI~1\TaskBar\MICROS~2.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Microsoft Word 2010.lnk=C:\Windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\wordicon.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\USERPI~1\TaskBar\MICROS~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk=C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\USERPI~1\TaskBar\MOZILL~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\MyWinLocker.lnk=C:\Program Files (x86)\EgisTec MyWinLocker\EgisMgtConsole.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\USERPI~1\TaskBar\MYWINL~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Nero Burning ROM.lnk=C:\Program Files (x86)\Nero\Core
ero.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\USERPI~1\TaskBar\NEROBU~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\OUTLOOK.EXE - Raccourci.lnk=C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\USERPI~1\TaskBar\OUTLOO~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Spybot-S&D Start Center.lnk=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\USERPI~1\TaskBar\SPYBOT~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Sticky Notes.lnk=C:\Windows\system32\StikyNot.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\USERPI~1\TaskBar\STICKY~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\System Ninja.lnk=C:\Program Files (x86)\System Ninja\System Ninja.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\USERPI~1\TaskBar\SYSTEM~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk=C:\Windows\explorer.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\USERPI~1\TaskBar\WINDOW~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk=C:\Program Files (x86)\Windows Media Player\wmplayer.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\USERPI~1\TaskBar\WINDOW~2.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\WINDOW~1.LNK
  [User Shortcuts] :HKLM C:\Users\Dominique\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk=C:\Users\Dominique\AppData\Roaming\uTorrent\uTorrent.exe
  ### C:\Users\DOMINI~1\AppData\Roaming\MICROS~1\INTERN~1\QUICKL~1\TORREN~1.LNK
  [Print Monitors] :HKLM HP a111 Status Monitor=C:\Windows\system32\HPINKSTSA111LM.DLL
  ### Print Status Language Monitor Hewlett-Packard Co. HP Digital Imaging 028.000.1175.000  hpinkstsa111LM.dll
  [Print Monitors] :HKLM HP Discovery Port Monitor (HP Photosmart 5510 series)=C:\Windows\system32\HPDISCOPMA111.DLL
  ### HP Discovery Port Monitor Hewlett-Packard Co. HP Digital Imaging 028.000.1315.000  HPDiscoPMa111.dll
  [Print Monitors] :HKLM HP Standard TCP/IP Port=C:\Windows\system32\HPTCPMON.DLL
  ### Standard TCP/IP Port Monitor DLL Hewlett Packard HP(R) Standard Port Monitor 7.02.05.051  HpTcpMon.dll
  [Print Monitors] :HKLM HP Universal Port Monitor=C:\Windows\system32\HPBPRTMON.DLL
  ### Port Monitor Server DLL Hewlett-Packard Hewlett-Packard Print Driver for Windows 4.5.52.12202  hpbprtmon.dll
  [Print Monitors] :HKLM Local Port=C:\Windows\system32\LOCALSPL.DLL
  ### DLL de spouleur local Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385  localspl.dll
  [Print Monitors] :HKLM Microsoft Shared Fax Monitor=C:\Windows\system32\FXSMON.DLL
  ### Microsoft  Fax Print Monitor Microsoft Corporation Microsoft® Windows® Operating System 6.1.7601.17514  FXSMON.DLL
  [Print Monitors] :HKLM Standard TCP/IP Port=C:\Windows\system32\TCPMON.DLL
  ### DLL moniteur de port standard TCP/IP Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385  tcpmon.dll
  [Print Monitors] :HKLM USB Monitor=C:\Windows\system32\USBMON.DLL
  ### DLL du moniteur de port d'impression dynamique standard Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385  usbmon.dll
  [Print Monitors] :HKLM WSD Port=C:\Windows\system32\WSDMON.DLL
  ### Moniteur de port d'imprimante WSD Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385  WSDMon.dll
  [Shell Icon Overlay Handlers] :HKLM  SkyDrive1={F241C880-6982-4CE5-8CF7-7085BA96DA5A}
  [Shell Icon Overlay Handlers] :HKLM  SkyDrive2={A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}
  [Shell Icon Overlay Handlers] :HKLM  SkyDrive3={BBACC218-34EA-4666-9D7A-C78F2274A524}
  [Shell Icon Overlay Handlers] :HKLM EnhancedStorageShell=C:\WINDOWS\SYSTEM32\EHSTORSHELL.DLL
  ### DLL d'extension d'environnement de stockage étendu Windows Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385  %SystemRoot%\system32\EhStorShell.dll
  [Shell Icon Overlay Handlers] :HKLM SharingPrivate=C:\WINDOWS\SYSTEM32\NTSHRUI.DLL
  ### Extensions de l'interpréteur de commandes pour le partage Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385  %SystemRoot%\system32
tshrui.dll
  [Context Menu Handlers] :HKLM BriefcaseMenu=C:\WINDOWS\SYSTEM32\SYNCUI.DLL
  ### Porte-documents Windows Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385  %SystemRoot%\system32\syncui.dll
  [Context Menu Handlers] :HKLM DefragglerShellExtension={4380C993-0C43-4E02-9A7A-0D40B6EA7590}
  [Context Menu Handlers] :HKLM Glary Utilities=C:\PROGRAM FILES (X86)\GLARY UTILITIES 5\CONTEXTHANDLER.DLL
  ### Context Menu Handler Glarysoft Ltd Glary Utilities 5.0.0.1 
  [Context Menu Handlers] :HKLM Glary Utilities 3=C:\PROGRAM FILES (X86)\GLARY UTILITIES 5\CONTEXTHANDLER.DLL
  ### Context Menu Handler Glarysoft Ltd Glary Utilities 5.0.0.1 
  [Context Menu Handlers] :HKLM Open With=C:\WINDOWS\SYSTEM32\SHELL32.DLL
  ### DLL commune du shell Windows Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7601.17514  %SystemRoot%\system32\shell32.dll
  [Context Menu Handlers] :HKLM Open With EncryptionMenu=C:\WINDOWS\SYSTEM32\SHELL32.DLL
  ### DLL commune du shell Windows Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7601.17514  %SystemRoot%\system32\shell32.dll
  [Context Menu Handlers] :HKLM PhotoStreamsExt=C:\PROGRAM FILES (X86)\COMMON FILES\APPLE\INTERNET SERVICES\SHELLSTREAMS.DLL
  ### Apple Photostreams UI Shell Extension Apple Inc. iCloud Control Panel 
  [Context Menu Handlers] :HKLM SDECon32=C:\PROGRAM FILES (X86)\SPYBOT - SEARCH & DESTROY 2\SDECON32.DLL
  ### Windows Explorer context menu integration Safer-Networking Ltd. Spybot - Search & Destroy 2.4.40.0 
  [Context Menu Handlers] :HKLM SDECon64=C:\PROGRAM FILES (X86)\SPYBOT - SEARCH & DESTROY 2\SDECON32.DLL
  ### Windows Explorer context menu integration Safer-Networking Ltd. Spybot - Search & Destroy 2.4.40.0 
  [Context Menu Handlers] :HKLM Sharing=C:\WINDOWS\SYSTEM32\NTSHRUI.DLL
  ### Extensions de l'interpréteur de commandes pour le partage Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385  %SystemRoot%\system32
tshrui.dll
  [Context Menu Handlers] :HKLM Symantec.Norton.Antivirus.IEContextMenu={FAD61B3D-699D-49B2-BE16-7F82CB4C59CA}
  [Context Menu Handlers] :HKLM WinRAR=C:\PROGRAM FILES (X86)\WINRAR\RAREXT.DLL
  [Context Menu Handlers] :HKLM {423E9D33-40FB-44A8-93CA-EA5C1610A6A6}={423E9D33-40FB-44A8-93CA-EA5C1610A6A6}
  [Context Menu Handlers] :HKLM {90AA3A4E-1CBA-4233-B8BB-535773D48449}=C:\WINDOWS\SYSTEM32\SHELL32.DLL
  ### DLL commune du shell Windows Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7601.17514  %SystemRoot%\system32\shell32.dll
  [Context Menu Handlers] :HKLM {a2a9545d-a0c2-42b4-9708-a0b2badd77c8}=C:\WINDOWS\SYSTEM32\SHELL32.DLL
  ### DLL commune du shell Windows Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7601.17514  %SystemRoot%\system32\shell32.dll
[Kernel Auto Boot]
  [ActiveSetup] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95}=C:\WINDOWS\SYSTEM32\UNREGMP2.EXE
  ### Utilitaire d'installation du Lecteur Windows Media de Microsoft Microsoft Corporation Système d'exploitation Microsoft® Windows® 12.0.7600.16385  %SystemRoot%\system32\unregmp2.exe /ShowWMP
  [Auto Services] AdobeARMservice
  ### Internal Name: AdobeARMservice. Status: service is running. Actual File: "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" * Adobe Acrobat Updater keeps your Adobe software up to date. Adobe Acrobat Update Service Adobe Systems Incorporated Adobe Acrobat Update Service 1.802.11.4130 
  [Auto Services] Apple Mobile Device Service
  ### Internal Name: Apple Mobile Device Service. Status: service is running. Actual File: "C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe" * Provides the interface to Apple mobile devices. MobileDeviceService Apple Inc. 3.3.0.0 
  [Auto Services] AudioEndpointBuilder
  ### Internal Name: AudioEndpointBuilder. Status: service is running. Actual File: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted * Gère les périphériques audio pour le service Audio Windows. Si ce service est arrêté, les périphériques et les effets audio ne fonctionneront pas correctement. S'il est désactivé, les services qui en dépendent explicitement ne démarreront pas Processus hôte pour les services Windows Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385 
  [Auto Services] AudioSrv
  ### Internal Name: AudioSrv. Status: service is running. Actual File: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted * Gère les périphériques audio pour les programmes compatibles Windows. Si ce service est arrêté, les périphériques et les effets audio ne fonctionneront pas correctement. S'il est désactivé, les services qui en dépendent explicitement ne démarreront pas Processus hôte pour les services Windows Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385 
  [Auto Services] BFE
  ### Internal Name: BFE. Status: service is running. Actual File: C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork * Le moteur de filtrage de base est un service qui gère les stratégies de pare-feu et de sécurité IP (IPsec), et qui implémente le filtrage en mode utilisateur. L'arrêt ou la désactivation du service Moteur de filtrage de base diminue significativement la sécurité du système et aboutit également à un fonctionnement imprévisible des applications de gestion et de pare-feu IPsec. Processus hôte pour les services Windows Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385 
  [Auto Services] BITS
  ### Internal Name: BITS. Status: service stopped. Actual File: C:\Windows\System32\svchost.exe -k netsvcs * Transfère des fichiers en arrière-plan en utilisant la bande passante réseau inactive. Si le service est désactivé, toutes les applications dépendant du service de transfert intelligent d'arrière-plan, telles que Windows Update ou MSN Explorer, ne pourront plus télécharger des programmes ni d'autres informations. Processus hôte pour les services Windows Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385 
  [Auto Services] Bonjour Service
  ### Internal Name: Bonjour Service. Status: service is running. Actual File: "C:\Program Files\Bonjour\mDNSResponder.exe" * Permet aux périphériques matériels et aux services logiciels de se configurer automatiquement sur le réseau et de se rendre publics. Bonjour Service Apple Inc. Bonjour 3,0,0,10 
  [Auto Services] clr_optimization_v4.0.30319_32
  ### Internal Name: clr_optimization_v4.0.30319_32. Status: service stopped. Actual File: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe * Microsoft .NET Framework NGEN .NET Runtime Optimization Service Microsoft Corporation Microsoft® .NET Framework 4.0.30319.34209 
  [Auto Services] clr_optimization_v4.0.30319_64
  ### Internal Name: clr_optimization_v4.0.30319_64. Status: service stopped. Actual File: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe * Microsoft .NET Framework NGEN .NET Runtime Optimization Service Microsoft Corporation Microsoft® .NET Framework 4.0.30319.34209 
  [Auto Services] CryptSvc
  ### Internal Name: CryptSvc. Status: service is running. Actual File: C:\Windows\system32\svchost.exe -k NetworkService * Fournit quatre services de gestion : le service de base de données de catalogue, qui confirme les signatures des fichiers Windows et autorise l'installation de nouveaux programmes, le service de racine protégée, qui ajoute et supprime les certificats d'autorité de certification racines approuvés sur cet ordinateur, le service de mise à jour de certificats racines automatique, qui extrait les certificats racines à partir de Windows Update et autorise les scénarios tels que SSL, et le service des clés, qui aide à l'inscription de cet ordinateur pour les certificats. Si ce service est arrêté, les services de gestion ne fonctionneront pas correctement. Si ce service est désactivé, les services en dépendant explicitement ne démarreront pas. Processus hôte pour les services Windows Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385 
  [Auto Services] DcomLaunch
  ### Internal Name: DcomLaunch. Status: service is running. Actual File: C:\Windows\system32\svchost.exe -k DcomLaunch * Le service DCOMLAUNCH lance les serveurs COM et DCOM en réponse aux demandes d'activation d'objets. Si ce service est arrêté ou désactivé, les programmes qui utilisent COM ou DCOM ne fonctionnent pas correctement. Il est fortement recommandé d'exécuter le service DCOMLAUNCH. Processus hôte pour les services Windows Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385 
  [Auto Services] DfSdkS
  ### Internal Name: DfSdkS. Status: service is running. Actual File: "C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 11\DfsdkS64.exe" * Ashampoo Defrag Service - powered by mst software mst Defrag SDK Service mst software GmbH, Germany mst Defrag SDK 3,6,0,0 
  [Auto Services] Dhcp
  ### Internal Name: Dhcp. Status: service is running. Actual File: C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted * Inscrit et met à jour les adresses IP et les enregistrements DNS pour cet ordinateur. Si ce service est arrêté, cet ordinateur ne recevra pas d'adresses IP et de mises à jour DNS dynamiques. Si ce service est désactivé, tous les services qui en dépendent explicitement ne pourront pas démarrer. Processus hôte pour les services Windows Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385 
  [Auto Services] Dnscache
  ### Internal Name: Dnscache. Status: service is running. Actual File: C:\Windows\system32\svchost.exe -k NetworkService * Le service client DNS (dnscache) met en cache les noms DNS (Domain Name System) et inscrit le nom complet de cet ordinateur. Si le service est arrêté, les noms DNS continuent d'être résolus. Toutefois, les résultats des requêtes de noms DNS ne sont pas mis en cache et le nom de l'ordinateur n'est pas inscrit. Si le service est désactivé, les services qui en dépendent explicitement ne peuvent pas démarrer. Processus hôte pour les services Windows Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385 
  [Auto Services] DPS
  ### Internal Name: DPS. Status: service is running. Actual File: C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork * Le service de stratégie de diagnostic permet la détection, le dépannage et la résolution de problèmes pour les composants de Windows. Si ce service est arrêté, les diagnostics ne fonctionnent plus. Processus hôte pour les services Windows Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385 
  [Auto Services] DsiWMIService
  ### Internal Name: DsiWMIService. Status: service is running. Actual File: C:\Program Files (x86)\Launch Manager\dsiwmis.exe * Launch Manager WMI service program Dritek WMI Service Dritek System Inc. Dritek WMI Service 3.6.0.2308 
  [Auto Services] ePowerSvc
  ### Internal Name: ePowerSvc. Status: service is running. Actual File: C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe * ePower Service ePowerSvc Acer Incorporated Power Management 6, 0, 3008, 0 
  [Auto Services] eventlog
  ### Internal Name: eventlog. Status: service is running. Actual File: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted * Ce service gère les événements et les journaux d'événements. Il prend en charge l'enregistrement des événements, les requêtes sur les événements, l'abonnement aux événements, l'archivage des journaux d'événements et la gestion des métadonnées d'événements. Il peut afficher des événements en XML et en format de texte brut. L'arrêt de ce service peut compromettre la sécurité et la fiabilité du système. Processus hôte pour les services Windows Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385 
  [Auto Services] EventSystem
  ### Internal Name: EventSystem. Status: service is running. Actual File: C:\Windows\system32\svchost.exe -k LocalService * Prend en charge le service de notification d'événements système (SENS, System Event Notification Service), qui fournit une distribution automatique d'événements aux composants COM (Component Object Model) abonnés. Si le service est arrêté, SENS sera fermé et ne pourra fournir des informations d'ouverture et de fermeture de session. Si ce service est désactivé, le démarrage de tout service qui en dépend explicitement échouera. Processus hôte pour les services Windows Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385 
  [Auto Services] fdPHost
  ### Internal Name: fdPHost. Status: service is running. Actual File: C:\Windows\system32\svchost.exe -k LocalService * Le service FDPHOST héberge les fournisseurs de découverte de réseau de découverte de fonction (FD). Ces fournisseurs de découverte de fonction fournissent des services de découverte de réseau pour les protocoles SSDP (Simple Services Discovery Protocol) et WS-D (Web Services - Discovery). L'arrêt ou la désactivation du service FDPHOST désactivera la découverte de réseau pour ces protocoles lors de l'utilisation de la découverte de fonction. Lorsque ce service n'est pas disponible, les services réseau qui utilisent la découverte de fonction et qui dépendent de ces protocoles de découverte ne pourront pas trouver des périphériques ou des ressources réseau. Processus hôte pour les services Windows Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385 
  [Auto Services] FDResPub
  ### Internal Name: FDResPub. Status: service is running. Actual File: C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation * Publie cet ordinateur et les ressources qui y sont attachées, de façon à ce que leur découverte soit possible sur le réseau. Si ce service est arrêté, les ressources réseau ne sont plus publiées et ne seront donc pas découvertes par les autres ordinateurs du réseau. Processus hôte pour les services Windows Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385 
  [Auto Services] FontCache
  ### Internal Name: FontCache. Status: service is running. Actual File: C:\Windows\system32\svchost.exe -k LocalService * Optimise les performances des applications en mettant en cache les données des polices communément utilisées. Les applications démarrent ce service s'il n'est pas déjà en fonctionnement. Il peut être désactivé ; il en résulte cependant une dégradation des performances des applications. Processus hôte pour les services Windows Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385 
  [Auto Services] gpsvc
  ### Internal Name: gpsvc. Status: service is running. Actual File: C:\Windows\system32\svchost.exe -k GPSvcGroup * Le service est responsable de l'application des paramètres configurés par les administrateurs pour l'ordinateur et pour les utilisateurs via le composant de stratégie de groupe. Si le service est arrêté ou désactivé, les paramètres ne seront pas appliqués et les applications et les composants ne seront pas gérables par la stratégie de groupe. Tout composant ou application qui dépend du composant de stratégie de groupe pourra ne pas fonctionner si le service est arrêté ou désactivé. Processus hôte pour les services Windows Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385 
  [Auto Services] GREGService
  ### Internal Name: GREGService. Status: service is running. Actual File: C:\Program Files (x86)\Acer\Registration\GREGsvc.exe *  Global Registration Service Acer Incorporated Global Registration Service 1, 0, 0, 3 
  [Auto Services] HomeGroupProvider
  ### Internal Name: HomeGroupProvider. Status: service is running. Actual File: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted * Effectue des tâches réseau associées à la configuration et à la maintenance des groupes résidentiels. Si ce service est arrêté ou désactivé, votre ordinateur ne sera pas en mesure de détecter d'autres groupes résidentiels et votre groupe résidentiel ne fonctionnera peut-être pas correctement. Nous vous recommandons de veiller à ce que ce service soit constamment en cours d'exécution. Processus hôte pour les services Windows Microsoft Corporation Système d'exploitation Microsoft® Windows® 6.1.7600.16385 
  [Auto Services] HPSupportSolutionsFrameworkService
  ### Internal Name: HPSupportSolutionsFrameworkService. Status: service is running. Actual File: "C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe" * This service allows for the detection of HP products and enables identification of support solutions for detected products. SolutionsFrameworkService Hewlett-Packard Company SolutionsFrameworkService 1.0.11.0 
  [Auto Services] IAStorDataMgrSvc
  ### Internal Name: IAStorDataMgrSvc. Status: service stopped. Actual File: "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe" * Provides storage event notification and manages communication between the storage driver and user space applications. IAStorDataSvc Intel Corporation IAStorDataSvc 10.6.0.1002 
  [Auto Services] IKEEXT
  ### Internal Name: IKEEXT. Status: service is running. Actual File: C:\Windows\system32\svchost.exe -k netsvcs * Le service IKEEXT héberge les modules de génération de clés IKE (Internet Key Exchange) et AuthIP (Authenticated Internet Protocol). Ces modules de gén

fabul · Answer

Télécharge ZHPDiag https://nicolascoolman.eu

Installe le.

Clic sur "Complet"

Il te donnera un log.

Poste le sur Cjoint et donne nous le lien Cjoint

Domibar · Answer

Merci de ton aide. Voilà le lien https://www.cjoint.com/?EDocZxrb7Qr
A bientôt !

fabul · Answer

Ça, en premier, ça peut paraitre suspect, ça serait peut être a ajouter au script qui suit, a toi de voir. 

O61 - LFC: 14/04/2015 - 18:13:58 R--A- . (...) -- C:\Users\Dominique\AppData\Roaming\Microsoft\Installer\{4FC9DA9D-F608-454E-8191-D7EFFDCC5726}\IconD7F16134.exe   [110080]
O61 - LFC: 14/04/2015 - 18:13:58 R--A- . (...) -- C:\Users\Dominique\AppData\Roaming\Microsoft\Installer\{4FC9DA9D-F608-454E-8191-D7EFFDCC5726}\IconF7A21AF7.exe   [110080]
[MD5.7C1592ED083B8062A477B396E1528B37] [SPRF][18/03/2015] (...) -- C:\ProgramData\SMRResults430.dat   [2610]

Il y a des éléments a considérer comme malware et d'autres superflus.

Lance ZHPFix et importe le script qui suit, puis clic sur GO.

Script ZHPFix
SysRestore
[HKLM\Software\Wow6432Node\Reg]
O4 - GS\Desktop [Dominique]: SpyHunter.lnk . (.Enigma Software Group USA, LLC. - SpyHunter4 application.)  -- C:\Program Files (x86)\Enigma Software Group\SpyHunter\SpyHunter4.exe   =>PUP.EnigmaSoftware
[MD5.00000000000000000000000000000000] [APT] [{3D22EFB5-39D2-4E66-8EAF-7CEF1C5E3984}] (...) -- C:\Users\Dominique\Desktop\Advanced-System Protector.exe (.not file.)   [0]  =>PUP.AdvancedSystemProtector
[MD5.00000000000000000000000000000000] [APT] [{9CF1B221-39C7-4345-A25E-88E29BC2E52F}] (...) -- C:\Users\Dominique\AppData\Roaming\mystartsearch\UninstallManager.exe (.not file.)   [0]  =>PUP.StartSearch
O42 - Logiciel: SpyHunter - (.Enigma Software Group USA, LLC.) [HKLM][64Bits] -- {4FC9DA9D-F608-454E-8191-D7EFFDCC5726}  =>PUP.EnigmaSoftware
[HKLM\Software\EnigmaSoftwareGroup]  =>PUP.EnigmaSoftware
[HKLM\Software\Wow6432Node\EnigmaSoftwareGroup]  =>PUP.EnigmaSoftware
O43 - CFD: 15/02/2015 - 02:21:10 - [] ----D C:\Program Files (x86)\Advanced Driver Updater 2.1.1086.16076  =>PUP.AdvancedDriverUpdater
O43 - CFD: 14/04/2015 - 17:34:24 - [] ----D C:\Program Files (x86)\Enigma Software Group  =>PUP.EnigmaSoftware
O43 - CFD: 15/02/2015 - 02:21:13 - [] ----D C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Advanced Driver Updater 2.1.1086.16076  =>PUP.AdvancedDriverUpdater
O43 - CFD: 14/04/2015 - 17:38:49 - [] ----D C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter  =>Crapware.SpyHunter
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4FC9DA9D-F608-454E-8191-D7EFFDCC5726}]   =>PUP.EnigmaSoftware^
[HKLM\Software\Classes\Interface\{38493F7F-2922-4C6C-9A9A-8DA2C940D0EE}]   =>Trojan.BHO
C:\Program Files (x86)\Advanced Driver Updater 2.1.1086.16076   =>PUP.AdvancedDriverUpdater^
C:\Program Files (x86)\Enigma Software Group   =>PUP.EnigmaSoftware^
C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Advanced Driver Updater 2.1.1086.16076   =>PUP.AdvancedDriverUpdater^
C:\Users\Dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter   =>Crapware.SpyHunter^
[HKLM\Software\EnigmaSoftwareGroup]   =>PUP.EnigmaSoftware^
[HKLM\Software\Wow6432Node\EnigmaSoftwareGroup]   =>PUP.EnigmaSoftware^
C:\Users\Dominique\Desktop\SpyHunter.lnk   =>Crapware.SpyHunter
ESET Online Scanner v3
Spybot - Search & Destroy v2.4.40
[MD5.771A5E7CF4C19F3DE5D36B19284F1FC6] - (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe   [367168] [PID.3984]
[MD5.7EE68A122ED08E4AAD8DA551E34D2515] - (.Safer-Networking Ltd. - Spybot - Search & Destroy tray access.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe   [4101576] [PID.3924]
[MD5.5C543230B376A57A8690C7119423F146] - (.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe   [264768] [PID.3272]
[MD5.D777F1417D9BB9F66CD9D9C3B61F730F] - (.Safer-Networking Ltd. - Spybot-S&D 2 Scanner Service.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe   [1738168] [PID.2168]
[MD5.68D6C7F99BC73B88954D844FCCBEB2A0] - (.Safer-Networking Ltd. - Spybot-S&D 2 Background update service.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe   [2088408] [PID.2312]
[MD5.9B9B368A8FF5CAF91D7A333CF62CD2CC] - (.Safer-Networking Ltd. - Windows Security Center integration..) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe   [171928] [PID.2580]
O4 - HKCU\..\Run: [IncrediMail] . (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\bin\IncMail.exe
O4 - HKCU\..\Run: [Spybot-S&D Cleaning] . (.Safer-Networking Ltd. - Search results cleaner.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe
O4 - HKLM\..\Wow6432Node\Run: [SDTray] . (.Safer-Networking Ltd. - Spybot - Search & Destroy tray access.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
O4 - HKUS\S-1-5-21-2068021785-2704816973-1713893086-1000\..\Run: [IncrediMail] . (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\bin\IncMail.exe
O4 - HKUS\S-1-5-21-2068021785-2704816973-1713893086-1000\..\Run: [Spybot-S&D Cleaning] . (.Safer-Networking Ltd. - Search results cleaner.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe
O4 - HKUS\S-1-5-21-2068021785-2704816973-1713893086-1000\..\RunOnce: [RunPalmPIL] C:\Program Files (x86)\palmOne\pil.exe (.not file.)
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) . (.Safer-Networking Ltd. - Spybot-S&D 2 Scanner Service.) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) . (.Safer-Networking Ltd. - Spybot-S&D 2 Background update service.) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) . (.Safer-Networking Ltd. - Windows Security Center integration..) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
[MD5.00000000000000000000000000000000] [APT] [{0AFEEE96-5A8C-4B05-8E9B-BF01CFAFB743}] (...) -- C:\Users\Dominique\Downloads\Adobe_Air_v13.0.0.111.exe (.not file.)   [0]
[MD5.00000000000000000000000000000000] [APT] [{5F0FFB5B-F39F-46D2-9D52-E27A6149BAAB}] (...) -- E:\Incredimail +\IncrediMail 2 premium 6.0.7Build 4544 -TrT\IncrediMailSetup-EN.exe (.not file.)   [0]
[MD5.00000000000000000000000000000000] [APT] [{AA279C46-9857-4DAE-9AD5-A31B8ADADA76}] (...) -- C:\Program Files\palmOne\Instapp.exe (.not file.)   [0]
[MD5.00000000000000000000000000000000] [APT] [{AD7EC0FF-AB75-4EB9-9E58-4DBF88EFAD57}] (...) -- C:\Users\Dominique\Downloads\IncrediBackup_install (1).exe (.not file.)   [0]
[MD5.00000000000000000000000000000000] [APT] [{C686F57E-8746-4DB7-9D4D-392B22B7AEBD}] (...) -- E:\Incredimail +\IncrediMail 2 premium 6.0.7Build 4544 -TrT\incredimail_install-Multilingual.exe (.not file.)   [0]
[MD5.00000000000000000000000000000000] [APT] [{E74D910B-BB8A-44D6-824A-092DD41930B8}] (...) -- C:\Users\Dominique\Downloads\IncrediBackup_install.exe (.not file.)   [0]
[MD5.00000000000000000000000000000000] [APT] [{F307C3BD-E6CF-42A7-9E21-14B5957A39FC}] (...) -- C:\Program Files\palmOne\QuickInstall.exe (.not file.)   [0]
[MD5.9CCE733E5262FB92C2331E8578512B49] [APT] [Check for updates] (.Safer-Networking Ltd..) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe   [4747720]
[MD5.48FAE038F51676A795CEFAD780448D94] [APT] [Refresh immunization] (.Safer-Networking Ltd..) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe   [4460472]
[MD5.280C014187E24860A7C860329513208F] [APT] [Scan the system] (.Safer-Networking Ltd..) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe   [4818848]
O42 - Logiciel: ESET Online Scanner v3 - (...) [HKLM][64Bits] -- ESET Online Scanner
O42 - Logiciel: IncrediBackup - (.IncrediMail.) [HKLM][64Bits] -- {D44222FB-31A2-4D2B-B222-D0C5599F28D0}
O42 - Logiciel: IncrediMail - (.IncrediMail.) [HKLM][64Bits] -- {2CF22C94-1369-4C04-9A5F-A4BC6D91B508}
O42 - Logiciel: IncrediMail 2.0 - (.IncrediMail Ltd..) [HKLM][64Bits] -- IncrediMail
O42 - Logiciel: JunkFilterPlus - (.IncrediMail.) [HKLM][64Bits] -- {DC754D8F-1D06-4016-BF57-8D21F97E1F0A}
O42 - Logiciel: Protection Center - (.IncrediMail.) [HKLM][64Bits] -- {1DDF0BBC-440C-446E-BB6A-594D2FD44DC6}
O42 - Logiciel: Spybot - Search & Destroy - (.Safer-Networking Ltd..) [HKLM][64Bits] -- {B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1
[HKCU\Software\IncrediMail]
[HKCU\Software\Safer Networking Limited]
[HKLM\Software\Safer Networking Limited]
[HKLM\Software\Wow6432Node\IncrediBackup]
[HKLM\Software\Wow6432Node\Safer Networking Limited]
O43 - CFD: 28/12/2012 - 17:06:35 - [] ----D C:\Program Files (x86)\IncrediBackup
O43 - CFD: 25/01/2012 - 19:17:41 - [] ----D C:\Program Files (x86)\IncrediMail
O43 - CFD: 04/11/2013 - 17:40:40 - [] ----D C:\Program Files (x86)\Spybot - Search & Destroy
O43 - CFD: 27/11/2014 - 09:43:58 - [] ----D C:\Program Files (x86)\Spybot - Search & Destroy 2
O43 - CFD: 02/01/2012 - 16:26:20 - [] ----D C:\ProgramData\IM
O43 - CFD: 02/01/2012 - 16:25:31 - [] ----D C:\ProgramData\IncrediMail
O43 - CFD: 15/02/2015 - 02:21:12 - [] ----D C:\ProgramData\Spybot - Search & Destroy
O43 - CFD: 28/12/2012 - 17:06:36 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediBackup
O43 - CFD: 28/01/2013 - 15:11:13 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail
O43 - CFD: 21/08/2014 - 12:19:17 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
O43 - CFD: 15/02/2015 - 13:13:38 - [] ----D C:\Users\Dominique\AppData\Local\IM
O47 - AAKE:Key Export SP - "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [Enabled] .(.Safer-Networking Ltd..) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
O47 - AAKE:Key Export SP - "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" [Enabled] .(.Safer-Networking Ltd..) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O47 - AAKE:Key Export SP - "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe" [Enabled] .(.Safer-Networking Ltd..) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
O47 - AAKE:Key Export SP - "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" [Enabled] .(.Safer-Networking Ltd..) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O61 - LFC: 08/04/2015 - 18:13:52 ---A- . (...) -- C:\Users\Dominique\AppData\Local\Temp\Quarantine.exe   [606208]
SR - | Auto 24/06/2014 1738168 |  (SDScannerService) . (.Safer-Networking Ltd..) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
SR - | Auto 27/06/2014 2088408 |  (SDUpdateService) . (.Safer-Networking Ltd..) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
SR - | Auto 25/04/2014 171928 |  (SDWSCService) . (.Safer-Networking Ltd..) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
[MD5.00000000000000000000000000000000] [APT] [{7488122B-6C24-4C7F-9FA7-48991A47FA62}] (...) -- D:\autorun.exe (.not file.)   [0]
ProxyFix
ShortcutFix
EmptyPrefetch
EmptyCLSID
EmptyFlash
EmptyTemp

Domibar · Answer

Cher Fabul, d'abord un grand merci de ta persévérance. J'ai fait la manoeuvre que tu m'as conseillé. Mais àa ne marche toujours pas. Le bloc notes s'ouvre avec le message: [.ShellClassInfo]
LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21787
Que puis-je faire ? N'y a-t-il pas moyen de bloquer desktop.ini ?
Merci de ton aide bienveillante.

fabul · Answer

Tu peux refaire une analyse avec RegRun Reanimator, mais cliquer sur "Reboot" plutôt que "Make scan now" pour voir si il détecte quelque chose au démarrage qu'il ne détecte pas autrement.

Domibar · Answer

En faisant la manoeuvre, j'ai perdu toutes mes données de messagerie (incredimail) que j'ai essayé de ré installer en le téléchargeant de nouveau, sans résultat. J'ai ensuite tenté une récupération à une date antérieure qui a été inefficace. Comment puis-je faire pour retrouver mes méls ? Merci!

Le bloc-note s'ouvre quand j'allume mon ordi portable

8 réponses

Discussions similaires