Je dois avoir un virus

Résolu
Bonjour
JE suis sur mon OS Xp Pro, j'ai avast gratuit qui me protège , microsoft sécutity essential ne pouvant plus servir avec Xp et en lançant Google Chrome, Avast me signale qu'une menace est détectée. Il s'agit de BBU.glazetartrans.com.
Pensant être infecté, j'ai lancé un scan avec Avast qui n'a rien trouvé.. J'ai voulu à nouveau lancer Google et aussitôt avast m'a fait la même annonce. J'ai donc désinstallé Chrome , pensant que cela venait de lui, et péniblement j'ai remis une nouvelle édition de Google Chrome mais le résultat est le même. J'ai lancé un scan avec malware et là surpris j'ai découvert qu'il y avait 100 swpywares dénommés yontoo.J'ai mis le rapport en txt et j'ai également une alerte de Malware avec une adresse IP70.186.131.246 avec out bound. je m'adresse à vous pour essayer de me débarasser de ce fléau.
Je vous remercie d'avance pour l'aide que vous pourrez m'apporter

--
LE SIBERIEN

9 réponses

  1. Contributeur sécurité
    Salut,

    ▶ Télécharge ici : AdwCleaner (de Xplode)

    ▶ Lance-le.

    ▶ Lis et accepte le contrat d'utilisation.

    ▶ Clique sur Scanner puis Nettoyer, et patiente le temps du nettoyage.

    ▶ Poste le contenu du rapport que tu trouveras dans le répertoire AdwCleaner de ton disque dur ( C:\AdwCleaner\AdwCleaner[x].txt) ou son contenu s'il s'ouvre.

    ~~

    reparamètres tes navigateurs WEB :

    A+
    0
    1. Bonsoir juju66
      Je renre à l'instant, j'étais parti toute la journée ce qui explique mon retard à te répondre
      Voici le rapport que tu as demndé

      Par Nicolas Coolman de ~ ZHPDiag (du 02/10/2015)
      ~ DÃ © Marra © par Administrateur (Administrateur) (04/10/2015 18:36:42)
      ~ Site: https://nicolascoolman.eu
      ~ Facebook: https://www.facebook.com/nicolascoolman1
      ~ Etat de la Version: Version OK
      ~ Mode: Scanner
      ~ Rapport: C: \ Documents and Settings \ Administrateur \ Bureau \ ZHPDiag.txt
      ~ Rapport: C: \ Documents and Settings \ Administrateur \ Application Data \ ZHP \ ZHPDiag.txt
      ~ UAC: Désactiver
      Dà © marrage ~ du système: Normal (démarrage normal)
      Windows XP, 32 bits Service Pack 3 (Build 2600)

      --- \\ Navigateurs Internet (2) - 0s
      GCIE: Google Chrome v45.0.2454.101
      MSIE: Internet Explorer v8.0.6001.18702

      --- \\ Informations sur les Produits de Windows (3) - 0s
      Mises à jour automatiques de Windows: OK
      Windows Activation Technologies: KO
      Programme Windows Genuine Advantage: OK

      --- \\ Logiciels de protection (2) - 5s
      Avast Antivirus Gratuit v10.4.2233
      Version Malwarebytes Anti-Malware 2.1.8.1057

      --- \\ Logiciels d'optimisation (1) - 6s
      CCleaner v5.09

      --- \\ Surveillance de Logiciels (2) - 6s
      Adobe Flash Player 19 NPAPI
      Adobe Reader X

      --- \\ Informations Sur Le système (6) - 0s
      ~ Système d'exploitation: x86 Family 6 Model 23 Stepping 10, GenuineIntel
      ~ Système d'exploitation: 32 bits
      ~ Mode de démarrage: Normal (démarrage normal)
      RAM totale: 3106,26 MB (48% sans)
      ~ Restauration du système: Activa © (Enable)
      ~ Disque système C: dispose de 44 Go d'espace libre de 78 Go

      --- \\ Mode de connexion au système (3) - 0s
      ~ Nom de l'ordinateur: PAUL
      ~ Nom d'utilisateur: Administrateur
      ~ Connecté en tant qu'administrateur

      --- \\ Enûma © ration des UNITA © s Disques (5) - 1s
      ~ Le lecteur C: dispose d'une connexion de 78 Go (système) 44 Go
      ~ Le lecteur E: dispose d'une connexion de 476 Go 379 Go
      ~ Lecteur G: dispose d'une connexion de 476 Go 263 Go
      ~ Lecteur H: dispose d'une connexion de 953 Go 633 Go
      ~ Drive I: a 411 Go d'espace libre de 476 Go

      --- \\ Etat du Centre de Sà © curità © Windows (9) - 1s
      [HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Advanced \ Folder \ Invisible \ NOHIDDEN] CheckedValue: Modifié
      [HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Advanced \ Folder \ Invisible \ SHOWALL] CheckedValue: OK
      [HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Associations] Application: OK
      [HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Associations] Intl: OK
      [HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Associations] XMLLookup: OK
      [HKLM \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon] Shell: OK
      [HKCU \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Windows] Charge: OK
      [HKLM \ SYSTEM \ CurrentControlSet \ Services \ COMSysApp] Type: OK
      [HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ WindowsUpdate \ Auto Update \ Résultats \ Installer] LastSuccessTime: OK

      --- \\ Recherche particulière de Fichiers GA pyrénéens riques (23) - 1s
      [MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) () - C: \ WINDOWS \ Explorer.exe [1037824] ©
      [MD5.93AD0B78C7357A05F50E594EC7C22300] - (.Microsoft Corporation - EXA © DLL mignon UNE EN Tant qu'application.) () - C: \ WINDOWS \ System32 \ rundll32.exe [33792] ©
      [MD5.2988BFF8257A55EA8AFD038F49F81A34] - (.Microsoft Corporation - Extensions Internet pour Win32.) () - C: \ WINDOWS \ System32 \ wininet.dll [920064] ©
      [MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Demande d'ouverture de session Windows.) () - C: \ WINDOWS \ System32 \ Winlogon.exe [512000] ©
      [MD5.D76A076ADB74F8132924E498D63123A2] - (.Microsoft Corporation - DNS Client API DLL.) () - C: \ WINDOWS \ System32 \ dnsapi.dll [149504] ©
      [MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - pilote de fonction auxiliaire pour WinSock.) () - C: \ WINDOWS \ system32 \ drivers \ afd.sys [138496] ©
      [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE / ATAPI Port Driver.) () - C: \ WINDOWS \ system32 \ drivers \ atapi.sys [96512] ©
      [MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) () - C: \ WINDOWS \ system32 \ drivers \ Cdfs.sys [63744] ©
      [MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () - C: \ WINDOWS \ system32 \ drivers \ Cdrom.sys [62976] ©
      [MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) () - C: \ Windows \ System32 \ drivers \ Fips.sys [44672] ©
      [MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 fournisseur DDK - High Definition Audio Driver v1.0a Bus.) () - C: \ Windows \ System32 \ drivers \ HDAudBus.sys [144384]
      [MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) () - C: \ Windows \ System32 \ drivers \ i8042prt.sys [54144] ©
      [MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) () - C: \ WINDOWS \ system32 \ drivers \ imapi.sys [42112] ©
      [MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - Adresse IP Network Traducteur.) () - C: \ Windows \ System32 \ drivers \ Ipnat.sys [152832] ©
      [MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - pilote IPSec.) () - C: \ Windows \ System32 \ drivers \ IPSec.sys [75264] ©
      [MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () - C: \ WINDOWS \ system32 \ drivers \ Mrxsmb.sys [456320] ©
      [MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - pilote MBT Transport.) () - C: \ WINDOWS \ system32 \ drivers \ Netbt.sys [162816] ©
      [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) () - C: \ WINDOWS \ system32 \ drivers \ ntfs.sys [574976] ©
      [MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) () - C: \ WINDOWS \ system32 \ drivers \ Parport.sys [80384] ©
      [MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - mini-port RAS L2TP / call-gestionnaire pilote.) () - C: \ WINDOWS \ system32 \ drivers \ Rasl2tp.sys [51328] ©
      [MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP périphérique redirecteur.) () - C: \ WINDOWS \ system32 \ drivers \ Rdpdr.sys [196224] ©
      [MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre Livre audio rouge.) () - C: \ WINDOWS \ system32 \ drivers \ redbook.sys [58752] ©
      [MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché © instantanà © du volume.) () - C: \ Windows \ System32 \ drivers \ Volsnap.sys [53376] ©

      --- \\ (20) s Processus Lança © - 3s
      [MD5.11120878E5276B367E1A10FF8C9B595B] - (.AVAST Software - avast service!.) - C: \ Program Files \ AVAST Software \ Avast \ AvastSvc.exe [146600] [PID.1572] ©
      [MD5.73686FE0B2E0469F89FD2075BE724704] - (.apple Computer, Inc. - service Bonjour.) - C: \ Program Files \ Bonjour \ mDNSResponder.exe [229376] [PID.240] ©
      [MD5.301E3FDFCF33640BB8763BA444BC5093] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C: \ Program Files \ Malwarebytes Anti-Malware \ mbamscheduler.exe [1871160] [PID.752] ©
      [MD5.ABF8B1379FFE06E2C6A21FF7B1483136] - (.Copyright (c) 2008 - ChangeIcon application MFC.) - C: \ WINDOWS \ system32 \ UMonit.exe [28672] [PID.1924]
      [MD5.123CE08362EE48BBA7F9F1D7EB50F24F] - (.AVAST Software - Avast Antivirus!.) - C: \ Program Files \ AVAST Software \ Avast \ AvastUI.exe [6134544] [PID.1952] ©
      [MD5.383145864F6543C97A7E1B78505D2F1C] - (.apple Computer, Inc. - QuickTime tâches.) - C: \ Program Files \ QuickTime \ qttask.exe [282624] [PID.2032] ©
      [MD5.C1626A1DEB684E044BBC2A03623A0F18] - (.Gadwin Systems, Inc - LLXScreenCut.) - E: écran d'impression \ Gadwin \ PrintScreen \ PrintScreen.exe [493776] [PID.1612]
      [MD5.83C982A395D00BAFF6515FB38424EA76] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C: \ Program Files \ Malwarebytes Anti-Malware \ mbamservice.exe [1133880] [PID.1356] ©
      [MD5.ABFF2B3A80AA5348BE5E43EFD6B415D1] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C: \ Program Files \ Malwarebytes Anti-Malware \ mbam.exe [6554424] [PID.1376] ©
      [MD5.37241629C440EA0C9EBAF96EB53F7981] - (.Skype Technologies SA - Skype.) - C: \ Program Files \ Skype \ Phone \ Skype.exe [57864728] [PID.1396] ©
      [MD5.78073F606AE3B24F6C1F555759AA8511] - (.Nero AG - Nero BackItUp.) - C: \ Program Files \ Nero \ nero8 \ Nero BackItUp \ NBService.exe [877864] [PID.1484] ©
      [MD5.875E4E0661F3A5994DF9E5E3A0A4F96B] - (.Prolific Technology Inc. - PLFlash service DeviceIoControl.) - C: \ WINDOWS \ system32 \ IoctlSvc.exe [81920] [PID.1540] ©
      [MD5.2FCEAD838E64A79250046DD2A15B6A8A] - (.Copyright 2004 - Module RichVideo.) - C: \ Program Files \ CyberLink \ Shared Files \ RichVideo.exe [241734] [PID.1628]
      [MD5.71DCFA65CC4349CF08BFFF7A14D8BAE4] - (.Google Inc. - Google Chrome.) - C: \ Program Files \ Google \ Chrome \ Application \ chrome.exe [815944] [PID.2044] ©
      [MD5.71DCFA65CC4349CF08BFFF7A14D8BAE4] - (.Google Inc. - Google Chrome.) - C: \ Program Files \ Google \ Chrome \ Application \ chrome.exe [815944] [PID.3712] ©
      [MD5.71DCFA65CC4349CF08BFFF7A14D8BAE4] - (.Google Inc. - Google Chrome.) - C: \ Program Files \ Google \ Chrome \ Application \ chrome.exe [815944] [PID.1988] ©
      [MD5.71DCFA65CC4349CF08BFFF7A14D8BAE4] - (.Google Inc. - Google Chrome.) - C: \ Program Files \ Google \ Chrome \ Application \ chrome.exe [815944] [PID.3624] ©
      [MD5.71DCFA65CC4349CF08BFFF7A14D8BAE4] - (.Google Inc. - Google Chrome.) - C: \ Program Files \ Google \ Chrome \ Application \ chrome.exe [815944] [PID.1696] ©
      [MD5.71DCFA65CC4349CF08BFFF7A14D8BAE4] - (.Google Inc. - Google Chrome.) - C: \ Program Files \ Google \ Chrome \ Application \ chrome.exe [815944] [PID.3376] ©
      [MD5.DD7DAC8A6913EB893372091E96871F95] - (. .Nicolas Coolman - ZHPDiag) - C: \ Documents et Settings \ Administrateur \ Mes \ Téléchargements \ ZHPDiag3.exe [1940992] [PID.3464] ©

      --- \\ Google Chrome, DÃ © marrage, Recherche, extensions (18) - 1s
      G0 - GCSP: Préférences sécurisés [User Data \ Default] [HomePage] https://fr.yahoo.com/
      G0 - GCSP: Préférences sécurisés [User Data \ Default] [HomePage] https://www.google.fr/?gws_rd=ssl
      G0 - GCSP: Préférences sécurisé [User Data \ Default] [HomePage] http://astromenda.com/ => PUP.Optional.Astromenda
      G0 - GCSP: Préférences sécurisé [User Data \ Default] [HomePage] http://isearch.omiga-plus.com/ => PUP.Optional.OmigaPlus
      G0 - GCSP: Préférences sécurisé [User Data \ Default] [HomePage] http://Vosteran.com/ => PUP.Optional.Vosteran
      G0 - GCSP: Préférences sécurisé [User Data \ Default] [HomePage] http://istart.webssearches.com/ => PUP.Optional.IsStart
      G2 - GCE:. Préférence [User Data \ Default] [aapocclcgogkmnckokdopfmhonfmgoek] Google Chrome manifeste => Google Inc.
      G2 - GCE:. Préférence [User Data \ Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifeste => Google Inc.
      G2 - GCE:. Préférence [User Data \ Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifeste => Google Inc.
      G2 - GCE: Préférence [User Data \ Default] [bhmmomiinigofkjcapegjjndpbikblnp] WOT: Web of Trust réputation des sites Web Notes
      G2 - GCE:. Préférence [User Data \ Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifeste => Google Inc.
      G2 - GCE:. Préférence [User Data \ Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifeste => Google Inc.
      G2 - GCE: Préférence [User Data \ Default] [eofcbnmajmjmplflapaojjnihcjkigck] Avast SafePrice
      G2 - GCE:. Préférence [User Data \ Default] [felcaaldnbdncclmgdcncolpebgiejap] Google Chrome manifeste => Google Inc.
      G2 - GCE: Préférence [User Data \ Default] [kngglkijfekbhidmchmlfmpkdffmedob] __MSG_name__
      G2 - GCE: Préférence [User Data \ Default] [lccekmodgklaepjeofjdjpbminllajkg] Chrome hotword module partagé
      G2 - GCE:. Préférence [User Data \ Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifeste => Google Inc.
      G2 - GCE:. Préférence [User Data \ Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifeste => Google Inc.

      --- \\ Firefox, plugins, DEMARRAGE, Recherche, Extensions (2) - 0s
      P2 - EXT fichier: (...) - C: \ Documents and Settings \ Administrateur \ Application Data \ Mozilla \ Firefox \ Profiles \ h7czt54w.default \ extensions \ {B64D9B05-48E1-4CEB-BF58-E0643994E900} .xpi
      P2 - FPN: [HKLM] [@ adobe.com / FlashPlayer] - (.adobe Systems Incorporated.) - C: \ WINDOWS \ system32 \ Macromed \ Flash \ NPSWF32_19_0_0_185.dll  ©

      --- \\ Internet Explorer, DÃ © marrage, Recherche, URLSearchHook (11) - 0s
      R0 - HKCU \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Start Page = https://www.microsoft.com/fr-fr/
      R0 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Start Page = https://www.microsoft.com/fr-fr/
      R1 - HKCU \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, la recherche Page = https://www.google.com/?gws_rd=ssl
      R1 - HKCU \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Search Bar = https://www.google.com/?gws_rd=ssl
      R1 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, la recherche Page = https://www.microsoft.com/fr-fr/
      R1 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = https://www.microsoft.com/fr-fr/
      R1 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Extensions Off Page = environ: noadd-ons
      R1 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, la sécurité risque Page = environ: SecurityRisk
      R1 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = https://www.microsoft.com/fr-fr/
      R1 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ AboutURLs, tabs = res: //ieframe.dll/tabswelcome.htm
      R3 - URLSearchHook: (pas de nom) - {} CFBFAE00-17A6-11D0-99CB-00C04FD64497 orphée => Microsoft Internet Explorer.

      --- \\ Internet Explorer, de sollicitation de procurations (6) - 0s
      R5 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, ProxyOverride = * .local
      R5 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, ProxyEnable = 0
      R5 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, MigrateProxy = 1
      R5 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, EnableHttp1_1 = 1
      R5 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, ProxyHttp1.1 = 0
      R5 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, AutoConfigProxy = wininet.dll

      --- \\ Internet Explorer, IniFiles, les programmes de chargement automatique (3) - 0s
      F2 - REG: system.ini: UserInit = C: \ WINDOWS \ system32 \ userinit.exe (.Microsoft Corporation.) ©
      F2 - REG: system.ini: Shell = C: \ WINDOWS \ explorer.exe (.Microsoft Corporation.) ©
      F2 - REG: system.ini: VMApplet = rundll32 shell32, Control_RunDLL "sysdm.cpl"

      --- \\ Etude du Fichier hôtes (1) - 0s
      ~ Le Fichier hÃ'te Est Sain (Le fichier hosts est propre) (20)

      --- \\ Browser Helper Object de navigateur (BHO) (3) - 1s
      O2 - BHO: avast! Sécurité en ligne - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06}. (.AVAST Software - IE WebRep plugin.) - C: \ Program Files \ AVAST Software \ Avast \ aswWebRepIE.dll  ©
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7}. (.Google Inc. - barre d'outils pour IE.) - C: \ program files \ Google \ googletoolbar1.dll  ©
      O2 - BHO: DVDVideoSoft.WebPageAdjuster - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} (orphée)

      --- \\ Applications Lança © es dà © marrage Au UA système (13) - 0 s
      O4 - HKLM \ .. \ Run: [UMonit]. (.Copyright (C) 2008 - Demande ChangeIcon MFC.) - C: \ WINDOWS \ system32 \ UMonit.exe
      O4 - HKLM \ .. \ Run: [AvastUI.exe]. (.AVAST Software - Avast Antivirus!.) - C: \ Program Files \ AVAST Software \ Avast \ AvastUI.exe  ©
      O4 - HKLM \ .. \ Run: [QuickTime Task]. (.apple Computer, Inc. - QuickTime tâches.) - C: \ Program Files \ QuickTime \ qttask.exe  ©
      O4 - HKCU \ .. \ Run: [LLXScreenCut]. (.Gadwin Systems, Inc - LLXScreenCut.) - E: écran d'impression \ Gadwin \ PrintScreen \ PrintScreen.exe
      O4 - HKCU \ .. \ Run: [Skype]. (.Skype Technologies SA - Skype.) - C: \ Program Files \ Skype \ Phone \ Skype.exe  ©
      O4 - HKCU \ .. \ Run: [ctfmon.exe]. (.Microsoft Corporation - FCT Loader.) - C: \ WINDOWS \ system32 \ ctfmon.exe  ©
      O4 - HKUS \ .DEFAULT \ .. \ Run: [CTFMON.EXE]. (.Microsoft Corporation - FCT Loader.) - C: \ WINDOWS \ system32 \ ctfmon.exe  ©
      O4 - HKUS \ S-1-5-18 \ .. \ Run: [CTFMON.EXE]. (.Microsoft Corporation - FCT Loader.) - C: \ WINDOWS \ system32 \ ctfmon.exe  ©
      O4 - HKUS \ S-1-5-19 \ .. \ Run: [CTFMON.EXE]. (.Microsoft Corporation - FCT Loader.) - C: \ WINDOWS \ system32 \ ctfmon.exe  ©
      O4 - HKUS \ S-1-5-20 \ .. \ Run: [CTFMON.EXE]. (.Microsoft Corporation - FCT Loader.) - C: \ WINDOWS \ system32 \ ctfmon.exe  ©
      O4 - HKUS \ S-1-5-21-1004336348-484061587-839522115-500 \ .. \ Run: [LLXScreenCut]. (.Gadwin Systems, Inc - LLXScreenCut.) - E: écran d'impression \ Gadwin \ PrintScreen \ PrintScreen.exe
      O4 - HKUS \ S-1-5-21-1004336348-484061587-839522115-500 \ .. \ Run: [Skype]. (.Skype Technologies SA - Skype.) - C: \ Program Files \ Skype \ Phone \ Skype.exe  ©
      O4 - HKUS \ S-1-5-21-1004336348-484061587-839522115-500 \ .. \ Run: [ctfmon.exe]. (.Microsoft Corporation - FCT Loader.) - C: \ WINDOWS \ system32 \ ctfmon.exe  ©

      --- \\ Modification Domaine / Adresses DNS (3) - 0s
      O17 - HKLM \ System \ CCS \ Services \ Tcpip \ Parameters: DhcpNameServer = 192.168.1.1
      O17 - HKLM \ System \ CS1 \ Services \ Tcpip \ Parameters: DhcpNameServer = 192.168.1.1
      O17 - HKLM \ System \ CS3 \ Services \ Tcpip \ Parameters: DhcpNameServer = 192.168.1.1

      --- \\ Additionnel Protocole (30) - 1s
      O18 - Handler: environ - {3050F406-98B5-11CF-BB82-00AA00BDCE0B}. (.Microsoft Corporation - Microsoft (R) HTML Viewer.) - C: \ WINDOWS \ system32 \ mshtml.dll  ©
      O18 - Handler: CDL - {3dd53d40-7b8b-11D0-b013-00aa0059ce02}. (.Microsoft Corporation - Extensions OLE32 pour Win32.) - C: \ WINDOWS \ system32 \ urlmon.dll  ©
      O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC}. (.Microsoft Corporation - contrÃ'le ActiveX verser le flux vidà © o.) - C: \ WINDOWS \ system32 \ msvidctl.dll  ©
      O18 - Handler: fichier - {79eac9e7-baf9-11ce-8c82-00aa004ba90b}. (.Microsoft Corporation - Extensions OLE32 pour Win32.) - C: \ WINDOWS \ system32 \ urlmon.dll  ©
      O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b}. (.Microsoft Corporation - Extensions OLE32 pour Win32.) - C: \ WINDOWS \ system32 \ urlmon.dll  ©
      O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b}. (.Microsoft Corporation - Extensions OLE32 pour Win32.) - C: \ WINDOWS \ system32 \ urlmon.dll  ©
      O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b}. (.Microsoft Corporation - Extensions OLE32 pour Win32.) - C: \ WINDOWS \ system32 \ urlmon.dll  ©
      O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b}. (.Microsoft Corporation - Extensions OLE32 pour Win32.) - C: \ WINDOWS \ system32 \ urlmon.dll  ©
      O18 - Handler: son - {9D148291-B9C8-11D0-A4CC-0000F80149F6}. (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) - C: \ WINDOWS \ system32 \ itss.dll  ©
      O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B}. (.Microsoft Corporation - Microsoft (R) HTML Viewer.) - C: \ WINDOWS \ system32 \ mshtml.dll  ©
      O18 - Handler: locale - {79eac9e7-baf9-11ce-8c82-00aa004ba90b}. (.Microsoft Corporation - Extensions OLE32 pour Win32.) - C: \ WINDOWS \ system32 \ urlmon.dll  ©
      O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B}. (.Microsoft Corporation - Microsoft (R) HTML Viewer.) - C: \ WINDOWS \ system32 \ mshtml.dll  ©
      O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4}. (.Microsoft Corporation - API Microsoft Internet Messaging.) - C: \ WINDOWS \ system32 \ inetcomm.dll  ©
      O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b}. (.Microsoft Corporation - Extensions OLE32 pour Win32.) - C: \ WINDOWS \ system32 \ urlmon.dll  ©
      O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294}. (.Microsoft Corporation - Microsoft® Aide Data Services Module.) - C: \ Program Files \ Fichiers Communs \ Microsoft Shared \ Help \ hxds.dll  ©
      O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6}. (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) - C: \ WINDOWS \ system32 \ itss.dll  ©
      O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B}. (.Microsoft Corporation - Microsoft (R) HTML Viewer.) - C: \ WINDOWS \ system32 \ mshtml.dll  ©
      O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382}. (.Microsoft Corporation - Microsoft (R) HTML Viewer.) - C: \ WINDOWS \ system32 \ mshtml.dll  ©
      O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E}. (.Microsoft Corporation - contrÃ'le ActiveX verser le flux vidà © o.) - C: \ WINDOWS \ system32 \ msvidctl.dll  ©
      O18 - Handler: VBScript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B}. (.Microsoft Corporation - Microsoft (R) HTML Viewer.) - C: \ WINDOWS \ system32 \ mshtml.dll  ©
      O18 - Handler: WIA - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE}. (.Microsoft Corporation - Couche WIA Scripting.) - C: \ WINDOWS \ system32 \ wiascr.dll  ©
      O18 - Filtre: application / octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D}. (.Microsoft Corporation - Moteur Microsoft .NET Runtime d'exécution.) - C: \ WINDOWS \ system32 \ mscoree.dll  ©
      O18 - Filtre: application / x-Complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D}. (.Microsoft Corporation - Moteur Microsoft .NET Runtime d'exécution.) - C: \ WINDOWS \ system32 \ mscoree.dll  ©
      O18 - Filtre: application / x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D}. (.Microsoft Corporation - Moteur Microsoft .NET Runtime d'exécution.) - C: \ WINDOWS \ system32 \ mscoree.dll  ©
      O18 - Filtre: Classe gestionnaire d'installation - {32B533BB-EDAE-11D0-BD5A-00AA00B92AF1}. (.Microsoft Corporation - Extensions OLE32 pour Win32.) - C: \ WINDOWS \ system32 \ urlmon.dll  ©
      O18 - Filtre: dégonfler - {8f6b0360-B80D-11D0-a9b3-006097942311}. (.Microsoft Corporation - Extensions OLE32 pour Win32.) - C: \ WINDOWS \ system32 \ urlmon.dll  ©
      O18 - Filtre: gzip - {8f6b0360-B80D-11D0-a9b3-006097942311}. (.Microsoft Corporation - Extensions OLE32 pour Win32.) - C: \ WINDOWS \ system32 \ urlmon.dll  ©
      O18 - Filtre: lzdhtml - {8f6b0360-B80D-11D0-a9b3-006097942311}. (.Microsoft Corporation - Extensions OLE32 pour Win32.) - C: \ WINDOWS \ system32 \ urlmon.dll  ©
      O18 - Filtre: text / webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1}. (.Microsoft Corporation - DLL commune du shell de Windows.) - C: \ WINDOWS \ system32 \ shell32.dll  ©
      O18 - Filtre: text / xml - {807563E5-5146-11D5-A672-00B0D022E945}. (.Microsoft Corporation - Microsoft Office XML MIME filtre.) - C: \ Program Files \ Fichiers Communs \ Microsoft Shared \ OFFICE12 \ Msoxmlmf.dll  ©

      --- Liste des services \\ au TN non Microsoft et Non dà © sactivà © s (9) - 0s
      O23 - Service: Avast Antivirus (antivirus Avast!). (.AVAST Software - avast service!.) - C: \ Program Files \ AVAST Software \ Avast \ AvastSvc.exe  ©
      O23 - Service: ## Id_String1.6844F930_1628_4223_B5CC_5BB94B879762 ## (Service Bonjour). (.apple Computer, Inc. - service Bonjour.) - C: \ Program Files \ Bonjour \ mDNSResponder.exe  ©
      O23 - Service: Service de mise à jour Google (gupdate) (gupdate). (.Google Inc. - Programme d 'installation de Google.) - C: \ Program Files \ Google \ Update \ GoogleUpdate.exe  ©
      O23 - Service: (MBAMScheduler). (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C: \ Program Files \ Malwarebytes Anti-Malware \ mbamscheduler.exe  ©
      O23 - Service: (MBAMService). (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C: \ Program Files \ Malwarebytes Anti-Malware \ mbamservice.exe  ©
      O23 - Service: Nero BackItUp Scheduler 3 (Nero BackItUp Scheduler 3). (.Nero AG - Nero BackItUp.) - C: \ Program Files \ Nero \ nero8 \ Nero BackItUp \ NBService.exe  ©
      O23 - Service: Service de PLFlash DeviceIoControl (PLFlash service DeviceIoControl). (. .Prolific Technology Inc. - PLFlash service DeviceIoControl) - C: \ WINDOWS \ system32 \ IoctlSvc.exe  ©
      O23 - Service: Service de Cyberlink RichVideo (EVRC) (RichVideo). C (.Copyright 2004 - - Module RichVideo.): Fichiers \ Program Files \ CyberLink \ Shared \ RichVideo.exe
      O23 - Service: Skype Updater (SkypeUpdate). (.Skype Technologies - Skype service de mise à jour.) - C: \ Program Files \ Skype \ Updater \ Updater.exe  ©

      --- \\ (93) s 'installation © Logiciels - 7s
      O42 - Logiciel: Adobe Flash Player 19 ActiveX - (.adobe Systems Incorporated.) [HKLM] - Adobe Flash Player ActiveX Â ©
      O42 - Logiciel: Adobe Flash Player 19 NPAPI - (.adobe Systems Incorporated.) [HKLM] - Adobe Flash Player NPAPI Â ©
      O42 - Logiciel: Ajouter OÜ supprimer Adobe Creative Suite 3 Master Collection - (.adobe Systems Incorporated.) [HKLM] - Adobe_b5d5789539ea1f004a4defceea74312 Â ©
      O42 - Logiciel: Avast Free Antivirus - (.AVAST Logiciel.) [HKLM] - Avast  ©
      O42 - Logiciel: Bel Atout 5.23 - (. .Vincent Brà © vart) [HKLM] - BelAtoutFr_is1  ©
      O42 - Logiciel: Canon ScanGear Toolbox 3.1 - (...) [HKLM] - Canon ScanGear Toolbox 3.1
      O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] - CCleaner  ©
      O42 - Logiciel: Firebird SQL Server - MAGIX édition 2.0.0.1 (F) - (.MAGIX AG.) [HKLM] - Firebird SQL Server F Â ©
      O42 - Logiciel: FormatFactory 3.7.0.0 - (. .Format Usine) [HKLM] - FormatFactory  ©
      O42 - Logiciel: Free YouTube to MP3 Converter version 4.0.0.915 - (.DVDVideoSoft Ltd ..) [HKLM] - Free YouTube to MP3 Converter_is1 Â ©
      O42 - Logiciel: LLXScreenCut - (.Gadwin Systems, Inc ..) [HKLM] - LLXScreenCut  ©
      O42 - Logiciel: Google Chrome - (.Google Inc ..) [HKLM] - Google Chrome  ©
      O42 - Logiciel: Intel (R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM] - HDMI Â ©
      O42 - Logiciel: hp deskjet 940c series (Supprimer uniquement) - (...) [HKLM] - hp deskjet 940c series
      O42 - Logiciel: Windows Internet Explorer 8 - (. .Microsoft Corporation) [HKLM] - IE8 Â ©
      O42 - Logiciel: SmartSound Quicktracks Plugin - (.SmartSound Software Inc.) [HKLM] - {InstallShield_ 4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}
      O42 - Logiciel: QuickTime - (.apple Computer, Inc ..) [HKLM] - {InstallShield_ C21D5524-A970-42FA-AC8A-59B8C7CDCA31} Â ©
      O42 - Logiciel: CyberLink PowerDirector - (.CyberLink Corp ..) [HKLM] - {InstallShield_ CB099890-1D5F-11D5-9EA9-0050BAE317E1} Â ©
      O42 - Logiciel: CyberLink PhotoNow - (.CyberLink Corp ..) [HKLM] - InstallShield_ {} D36DD326-7280-11D8-97C8-000129760CBE Â ©
      O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] - KB888111WXPSP2 Â ©
      O42 - Logiciel: correctif pour Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] - KB954550-v5 Â ©
      O42 - Logiciel: MAGIX Audio Cleanic 2007 deluxe 8.0.1.0 (F) - (. .MAGIX AG) [HKLM] - MAGIX Audio Cleanic 2007 deluxe F Â ©
      O42 - Logiciel: Version Malwarebytes Anti-Malware 2.1.8.1057 - (. .Malwarebytes Corporation) [HKLM] - Malwarebytes Anti-Malware_is1 Â ©
      O42 - Logiciel: MSN - (...) [HKLM] - MSNINST
      O42 - Logiciel: OmniPage Pro 9.0 - (...) [HKLM] - OmniPagePro9.0DeinstKey
      O42 - Logiciel: proDAD Heroglyph 2.5 - (...) [HKLM] - proDAD Heroglyph-2.5
      O42 - Logiciel: proDAD Vitascene 1.0 - (...) [HKLM] - proDAD Vitascene 1.0
      O42 - Logiciel: SFR - Kit de connexion - (.SFR.) [HKLM] - SFR_Kit  ©
      O42 - Logiciel: VLC media player - (. .VideoLAN) [HKLM] - VLC media player  ©
      O42 - Logiciel: Microsoft Kernel-Mode Driver Framework 1.9 Feature Pack - (. .Microsoft Corporation) [HKLM] - Wdf01009 Â ©
      O42 - Logiciel: application Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] - WgaNotify  ©
      O42 - Logiciel: Windows Media Format Runtime - (...) [HKLM] - Windows Media Format Runtime
      O42 - Logiciel: Windows XP Service PACKA 3 - (. .Microsoft Corporation) [HKLM] - Windows XP Service  ©
      O42 - Logiciel: XML Paper Specification composants partagés Language Pack 1.0 - (. .Microsoft Corporation) [HKLM] - XPSEPSCLP Â ©
      O42 - Logiciel: Adobe XMP DVA Panneaux CS3 - (.adobe Systems Incorporated.) [HKLM] - {0224CACC-994D-45F8-B973-D65056EA9C2F} ©
      O42 - Logiciel: Adobe Réunion Démarrer Bridge - (. .adobe Systems Incorporated) [HKLM] - {08B32819-6EEF-4057-AEDA-5AB681A36A23} Â ©
      O42 - Logiciel: Studio 11 - (. .Pinnacle Systems) [HKLM] - {110B1ADF-2EAE-4E8F-B501-D2A1E6D8ED9D} Â ©
      O42 - Logiciel: Adobe Setup - (. .adobe Systems Incorporated) [HKLM] - {1628F6BD-5ED1-4FD1-B90F-C106AF4E00F0} Â ©
      O42 - Logiciel: Adobe WinSoft Linguistique Plugin - (. .adobe Systems Incorporated) [HKLM] - {184CE391-7E0E-4C63-9935-D7A10EDFD3C6} Â ©
      O42 - Logiciel: Adobe After Effects CS3 Presets - (. .adobe Systems Incorporated) [HKLM] - {193EAFD0-1BAF-4FB4-B18F-79D5D6A4B285} Â ©
      O42 - Logiciel: barre d'outils Google pour Internet Explorer - (...) [HKLM] - {} 2318C2B1-4965-11d4-9B18-009027A5CD4F
      O42 - Logiciel: Adobe Stock Photos CS3 - (. .adobe Systems Incorporated) [HKLM] - {29E5EA97-5F74-4A57-B8B2-D4F169117183} Â ©
      O42 - Logiciel: VCRedistSetup - (. .Nero AG) [HKLM] - {3921A67A-5AB1-4E48-9444-C71814CF3027} Â ©
      O42 - Logiciel: Studio 11 Bonus DVD - (Systèmes .Pinnacle.) [HKLM] - {45A1BF92-700A-4408-B95E-79F462E3D67D} Â ©
      O42 - Logiciel: Adobe CS3 Linguistique - (. .adobe Systems Incorporated) [HKLM] - {54793AA1-5001-42F4-ABB6-C364617C6078} Â ©
      O42 - Logiciel: neroxml - (. .Nero AG) [HKLM] - {56C049BE-79E9-4502-BEA7-9754A3E60F9B} Â ©
      O42 - Logiciel: Google Update Helper - (.Google Inc ..) [HKLM] - {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} Â ©
      O42 - Logiciel: Skypeâ "¢ 7.11 - (.Skype Technologies SA.) [HKLM] - {6A0549A9-1B96-498C-ACBC-3943001FEB19} Â ©
      O42 - Logiciel: Adobe toutes les polices - (. .adobe Systems Incorporated) [HKLM] - {6ABE0BEE-D572-4FE8-B434-9E72A289431B} Â ©
      O42 - Logiciel: Adobe MotionPicture Color Files - (. .adobe Systems Incorporated) [HKLM] - {6B708481-748A-4EB4-97C1-CD386244FF77} Â ©
      O42 - Logiciel: contenu AVS pour Acrobat et Flash - (.adobe Systems Incorporated.) [HKLM] - {6BBAA81D-6A7E-43AD-8889-2F002DCAAFDD} Â ©
      O42 - Logiciel: Adobe Asset services CS3 - (. .adobe Systems Incorporated) [HKLM] - {6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61} Â ©
      O42 - Logiciel: MSXML 4.0 SP2 Parser et SDK - (.Microsoft Corporation.) [HKLM] - {716E0306-8318-4364-8B8F-0CC4E9376BAC} Â ©
      O42 - Logiciel: paramètres recommandés de couleurs Adobe UE - (.adobe Systems Incorporated.) [HKLM] - {73B5D990-04EA-4751-B10F-5534770B91F2} ©
      O42 - Logiciel: Adobe Help Viewer CS3 - (. .adobe Systems Incorporated) [HKLM] - {7ACFB90E-8FD0-4397-AD3A-5195412623A3} Â ©
      O42 - Logiciel: Adobe profils vidéo - (.adobe Systems Incorporated.) [HKLM] - {} 845A8DB9-8802-4FD3-9FE3-938A6C46A2EC Â ©
      O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] - {86493ADD-824d-4B8E-BD72-8C5DCDC52A71} Â ©
      O42 - Logiciel: Adobe Device Central CS3 - (. .adobe Systems Incorporated) [HKLM] - {8D2BA474-F406-4710-9AE4-D4F22D21F0DD} Â ©
      O42 - Logiciel: Samsung_MonSetup - (.Samsung.) [HKLM] - {8EA79DBF-D637-448A-89D6-410A087A4493} Â ©
      O42 - Logiciel: Adobe Anchor service CS3 - (. .adobe Systems Incorporated) [HKLM] - {90176341-0A8B-4CCC-A78D-F862228A6B95} Â ©
      O42 - Logiciel: USB Mass Storage Device Genesys - (. .Genesys Logic) [HKLM] - {959B7F35-2819-40C5-A0CD-3C53B5FCC935}
      O42 - Logiciel: Adobe Bridge CS3 - (. .adobe Systems Incorporated) [HKLM] - {9C9824D9-9000-4373-A6A5-D0E5D4831394} Â ©
      O42 - Logiciel: Adobe CMaps - (.adobe Systems Incorporated.) [HKLM] - {A2B242BD-FF8D-4840-9DAA-9170EABEC59C} ©
      O42 - Logiciel: couleur Adobe - Photoshop spécifique - (. .adobe Systems Incorporated) [HKLM] - {A2D81E70-2A98-4A08-A628-94388B063C5E} Â ©
      O42 - Logiciel: Paramètres PDF - (.adobe Systems Incorporated.) [HKLM] - {AC5B0C19-D851-42F4-BDA0-410ECF7F70A5} ©
      O42 - Logiciel: Adobe Reader X (10.1.11) - Français - (. .adobe Systems Incorporated) [HKLM] - {AC76BA86-7AD7-1036-7B44-AA1000000001} Â ©
      O42 - Logiciel: Adobe Camera Raw 4.0 - (. .adobe Systems Incorporated) [HKLM] - {B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C} Â ©
      O42 - Logiciel: Adobe CS3 SING - (. .adobe Systems Incorporated) [HKLM] - {B671CBFD-4109-4D35-9252-3062D3CCB7B2} Â ©
      O42 - Logiciel: Adobe CS3 BridgeTalk Plugin - (. .adobe Systems Incorporated) [HKLM] - {B73CFB12-C814-4638-AFFD-7E3AAFAF0B4E} Â ©
      O42 - Logiciel: Adobe CS3 Langue par défaut - (. .adobe Systems Incorporated) [HKLM] - {B9B35331-B7E4-4E5C-BF4C-7BC87856124D} Â ©
      O42 - Logiciel: Adobe Extension Manager CS3 - (. .adobe Systems Incorporated) [HKLM] - {} BE5F3842-8309-4754-92D5-83E02E6077A3 Â ©
      O42 - Logiciel: Adobe ExtendScript Toolkit 2 - (. .adobe Systems Incorporated) [HKLM] - {C2D69781-F392-4118-A5A7-C7E9C38DBFC2} Â ©
      O42 - Logiciel: Adobe CS3 WAS - (.adobe Systems Incorporated.) [HKLM] - {C5BD220A-EFE8-48A5-B70E-9503D535FACE} Â ©
      O42 - Logiciel: REALTEK GbE et FE Ethernet PCI-E pilote NIC - (. .Realtek) [HKLM] - {C9BED750-1211-4480-B1A5-718A3BE15525} Â ©
      O42 - Logiciel: Nero 8 - (. .Nero AG) [HKLM] - {C9FFC925-E27E-436E-A2DF-652324D51036} Â ©
      O42 - Logiciel: CyberLink PowerDirector - (.CyberLink Corp ..) [HKLM] - {CB099890-1D5F-11D5-9EA9-0050BAE317E1} Â ©
      O42 - Logiciel: Studio 11 Ultimate - (Systèmes .Pinnacle.) [HKLM] - {CC874CBB-BD87-4126-9465-AE73BB62D6E0} Â ©
      O42 - Logiciel: Adobe Version Cue CS3 client - (.adobe Systems Incorporated.) [HKLM] - {D0DFF92A-492E-4C40-B862-A74A173C25C5} Â ©
      O42 - Logiciel: Adobe PDF Library Files - (.adobe Systems Incorporated.) [HKLM] - {D2559B88-CC9D-4B48-81BB-F492BAA9C48C} Â ©
      O42 - Logiciel: Adobe XMP Panneaux CS3 - (.adobe Systems Incorporated.) [HKLM] - {D5A31AB1-345D-47C7-A87B-036A669F6DF1} ©
      O42 - Logiciel: couleur Adobe Paramètres communs - (. Systems Incorporated .adobe) [HKLM] - {DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9} Â ©
      O42 - Logiciel: barre d'outils Google pour Internet Explorer - (.Google Inc ..) [HKLM] - {} DBEA1034-5882-4A88-8033-81C4EF0CFA29 Â ©
      O42 - Logiciel: JA couleur Adobe Paramètres supplémentaires - (.adobe Systems Incorporated.) [HKLM] - {} DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029 ©
      O42 - Logiciel: FoxTarot la version 5.1 - (. .Fabrice RENARD) [HKLM] - {DF3DD8E3-BD6C-4D57-B20d-3FED6D36716F} _is1 Â ©
      O42 - Logiciel: Scan Manager 5.2 - (.ScanSoft, Inc ..) [HKLM] - {E0A1559B-9886-11D4-8D06-0050DA284A39} Â ©
      O42 - Logiciel: Adobe Update Manager CS3 - (. .adobe Systems Incorporated) [HKLM] - {E69AE897-9E0B-485C-8552-7841F48D42D8} Â ©
      O42 - Logiciel: Adobe InDesign CS3 Icône Handler - (. .adobe Systems Incorporated) [HKLM] - {EA7B3CC4-366D-4CF6-8350-FD7A7034116E} Â ©
      O42 - Logiciel: Pinnacle Instant DVD Recorder - (...) [HKLM] - {EF781A5C-58F5-4BFD-87F9-E4F14D382F25}
      O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp ..) [HKLM] - {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} Â ©
      O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] - {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} Â ©
      O42 - Logiciel: Yahoo! bureau Connexion - (Systèmes .Pinnacle.) [HKLM] - {F9AEEC34-CF00-4CBD-9E36-DF9DC4002685} Â ©
      O42 - Logiciel: Olympus Wave Player - (...) [HKLM] - {FB91E774-867B-4567-ACE7-8144EF036068}
      O42 - Logiciel: Adobe Couleur NA Paramètres supplémentaires - (.adobe Systems Incorporated.) [HKLM] - {FF29A7E2-FF40-4D07-B7E4-2093DE59E10A} ©

      --- \\ HKCU et HKLM Software Clés (89) - 7s
      HKLM \ SOFTWARE \ Acorn
      HKLM \ SOFTWARE \ Adobe
      HKLM \ SOFTWARE \ Ahead
      HKLM \ SOFTWARE \ Apple Computer, Inc.
      HKLM \ SOFTWARE \ Audible
      HKLM \ Software SOFTWARE \ AVAST
      HKLM \ SOFTWARE \ AviSynth
      HKLM \ SOFTWARE \ C07ft5Y
      HKLM \ SOFTWARE \ Caere Corp
      HKLM \ SOFTWARE \ Canon
      HKLM \ SOFTWARE \ COMODO
      HKLM \ SOFTWARE \ Creative Tech
      HKLM \ SOFTWARE \ CyberLink
      HKLM \ SOFTWARE \ DivX
      HKLM \ SOFTWARE \ DVC150
      HKLM \ SOFTWARE \ DVDVideoSoft
      HKLM \ SOFTWARE \ Multimédia FAST
      HKLM \ SOFTWARE \ Gemplus
      HKLM \ SOFTWARE \ Genesys Logic
      HKLM \ SOFTWARE \ GNU
      HKLM \ SOFTWARE \ Google
      HKLM \ SOFTWARE \ HaaliMkx
      HKLM \ SOFTWARE \ Hewlett-Packard
      HKLM \ Software \ IM fournisseurs
      HKLM \ SOFTWARE \ InstallShield
      HKLM \ SOFTWARE \ Intel
      HKLM \ SOFTWARE \ Macromedia
      HKLM \ SOFTWARE \ Macrovision
      HKLM \ SOFTWARE \ Magix
      Anti-Malware de HKLM \ SOFTWARE \ Malwarebytes
      HKLM \ SOFTWARE \ MovieBox USB
      HKLM \ SOFTWARE \ Mozilla
      HKLM \ SOFTWARE \ mozilla.org
      HKLM \ Software \ MozillaPlugins
      HKLM \ SOFTWARE \ Nero
      HKLM \ SOFTWARE \ NeroDigital
      HKLM \ SOFTWARE \ Neuf
      HKLM \ SOFTWARE \ ODBC
      HKLM \ SOFTWARE \ Olympus
      Imagerie HKLM \ SOFTWARE \ Pegasus
      HKLM \ SOFTWARE \ PegasusImaging
      HKLM \ SOFTWARE \ Pinnacle Systems
      HKLM \ SOFTWARE \ Piriform
      HKLM \ SOFTWARE \ proDAD
      HKLM \ Software \ groupes de programmes
      HKLM \ SOFTWARE \ Realtek
      HKLM \ SOFTWARE \ Realtek Semiconductor Corp.
      HKLM \ Software \ RegisteredApplications
      HKLM \ SOFTWARE \ RTLSetup
      HKLM \ SOFTWARE \ Samsung
      HKLM \ SOFTWARE \ Schlumberger
      HKLM \ SOFTWARE \ sécurisé
      HKLM \ SOFTWARE \ Skype
      Logiciel HKLM \ SOFTWARE \ SmartSound
      HKLM \ SOFTWARE \ VideoLAN
      HKLM \ SOFTWARE \ Windows 3.1 État de la migration
      HKCU \ SOFTWARE \ Adobe
      HKCU \ SOFTWARE \ Ahead
      HKCU \ SOFTWARE \ Apple Computer, Inc.
      HKCU \ SOFTWARE \ AVAST Software
      HKCU \ SOFTWARE \ Caere Corp
      HKCU \ SOFTWARE \ Canon
      HKCU \ SOFTWARE \ CyberLink
      HKCU \ SOFTWARE \ DivXNetworks
      HKCU \ SOFTWARE \ DVDVideoSoft
      HKCU \ SOFTWARE \ FreeTime
      HKCU \ SOFTWARE \ Gabest
      HKCU \ SOFTWARE \ Systems Gadwin
      HKCU \ SOFTWARE \ GNU
      HKCU \ SOFTWARE \ Google
      HKCU \ SOFTWARE \ Haali
      HKCU \ SOFTWARE \ IM fournisseurs
      HKCU \ SOFTWARE \ Intel
      HKCU \ SOFTWARE \ Ligos
      HKCU \ SOFTWARE \ Macromedia
      HKCU \ SOFTWARE \ Magix
      HKCU \ SOFTWARE \ MozillaPlugins
      HKCU \ SOFTWARE \ Nero
      HKCU \ SOFTWARE \ Netscape
      HKCU \ SOFTWARE \ ODBC
      HKCU \ SOFTWARE \ Olympus
      HKCU \ SOFTWARE \ Pinnacle Systems
      HKCU \ SOFTWARE \ Piriform
      HKCU \ SOFTWARE \ QtProject
      HKCU \ SOFTWARE \ Realtek
      HKCU \ SOFTWARE \ Skype
      HKCU \ SOFTWARE \ VOB
      HKCU \ SOFTWARE \ Yahoo
      HKCU \ SOFTWARE \ ZebHelpProcess Helper

      --- \\ Contenu des Dossiers Programmes (159) - 5s
      O43 - CFD: 19/09/2015 08:08:44 - [] D - C: \ Program Files \ Adobe
      O43 - CFD: 03/08/2015 17:50:03 - [] D - C: \ Program Files \ AdorageI-GfxDatas
      O43 - CFD: 03/08/2015 17:49:43 - [] D - C: \ Program Files \ AdorageI-SAL
      O43 - CFD: 14/08/2015 14:55:10 - [] D - C: Software \ Program Files \ AVAST
      O43 - CFD: 12/09/2015 16:00:37 - [] D - C: \ Program Files \ Bonjour
      O43 - CFD: 06/08/2015 15:05:56 - [] D - C: \ Program Files \ Caere
      O43 - CFD: 06/08/2015 15:09:40 - [] D - C: \ Program Files \ Canon
      O43 - CFD: 19/09/2015 07:38:19 - [] D - C: \ Program Files \ CCleaner
      O43 - CFD: 2015/08/01 09:49:50 - [0] D - C: \ Program Files \ COMPLUS Applications
      O43 - CFD: 09/08/2015 10:49:21 - [] D - C: \ Program Files \ CyberLink
      O43 - CFD: 03/10/2015 18:12:01 - [] D - C: \ Program Files \ DVDVideoSoft
      O43 - CFD: 03/10/2015 20:26:57 - [] D - C: \ Program Files \ Fichiers Communs
      O43 - CFD: 15/08/2015 12:58:40 - [] D - C: \ Program Files \ FormatFactory
      O43 - CFD: 14/08/2015 15:39:56 - [] D - C: \ Program Files \ FoxTarot5
      O43 - CFD: 18/09/2015 19:56:59 - [] D - C: \ Program Files \ PDF to Word Converter gratuit
      O43 - CFD: 25/09/2015 10:13:27 - [] D - C: \ Program Files \ FreeCodecPack
      O43 - CFD: 2015/09/18 11:37:30 - [] D - C: \ Program Files \ Systems Gadwin
      O43 - CFD: 03/10/2015 20:39:21 - [] D - C: \ Program Files \ Google
      O43 - CFD: 06/08/2015 15:46:54 - [] D - C: \ Program Files \ Hewlett-Packard
      O43 - CFD: 14/08/2015 20:42:40 - [] D - C: \ Program Files \ hp deskjet 940c série
      O43 - CFD: 28/09/2015 10:03:19 - [] HD - C: \ Program Files \ InstallShield Installation Information
      O43 - CFD: 01/08/2015 09:58:15 - [] D - C: \ Program Files \ Intel
      O43 - CFD: 19/09/2015 07:25:21 - [] D - C: \ Program Files \ Internet Explorer
      O43 - CFD: 14/08/2015 15:22:17 - [] D - C: \ Program Files \ Jeux de cartes
      O43 - CFD: 03/10/2015 19:38:26 - [] D - C: \ Program Files \ Malwarebytes Anti-Malware
      O43 - CFD: 14/08/2015 11:04:46 - [] D - C: \ Program Files \ Messenger
      O43 - CFD: 01/08/2015 09:53:01 - [] D - C: \ Program Files \ Microsoft FrontPage
      O43 - CFD: 03/08/2015 20:48:02 - [] D - C: \ Program Files \ Microsoft Office
      O43 - CFD: 2015/08/03 20:48:13 - [] D - C: \ Program Files \ Microsoft Works
      O43 - CFD: 03/08/2015 20:47:37 - [] D - C: \ Program Files \ Microsoft.NET
      O43 - CFD: 13/08/2015 16:19:20 - [] D - C: \ Program Files \ MonitorDriver
      O43 - CFD: 14/08/2015 10:56:45 - [] D - C: \ Program Files \ Movie Maker
      O43 - CFD: 25/09/2015 12:50:00 - [] D - C: \ Program Files \ MSBuild
      O43 - CFD: 03/08/2015 18:17:24 - [] D - C: \ Program Files \ MSN
      O43 - CFD: 01/08/2015 09:49:26 - [] D - C: \ Program Files \ MSN Gaming Zone
      O43 - CFD: 01/08/2015 09:57:50 - [0] D - C: \ Program Files \ MSXML 4.0
      O43 - CFD: 13/08/2015 14:29:03 - [] D - C: \ Program Files \ Nero
      O43 - CFD: 13/08/2015 16:51:40 - [] D - C: \ Program Files \ NetMeeting
      O43 - CFD: 28/09/2015 10:03:41 - [] D - C: \ Program Files \ Olympus
      O43 - CFD: 2015/08/01 09:49:34 - [] D - C: \ Program Files \ Services en ligne
      O43 - CFD: 14/08/2015 10:57:02 - [] D - C: \ Program Files \ Outlook Express
      O43 - CFD: 2015/08/15 13:11:40 - [] D - C: \ Program Files \ PicosmosTools
      O43 - CFD: 03/08/2015 17:09:03 - [] D - C: \ Program Files \ Pinnacle
      O43 - CFD: 03/08/2015 17:59:39 - [] D - C: \ Program Files \ proDAD
      O43 - CFD: 03/08/2015 18:14:14 - [] D - C: \ Program Files \ QuickTime
      O43 - CFD: 14/08/2015 13:47:46 - [] D - C: \ Program Files \ Rainlendar2
      O43 - CFD: 01/08/2015 10:00:34 - [] D - C: \ Program Files \ Realtek
      O43 - CFD: 2015/09/25 12:49:07 - [] D - C: \ Program Files \ Reference Assemblies
      O43 - CFD: 01/08/2015 09:51:25 - [] D - C: \ Program Files \ Services en ligne
      O43 - CFD: 03/08/2015 18:25:02 - [] D - C: \ Program Files \ SFR
      O43 - CFD: 25/09/2015 14:02:29 - [] RD - C: \ Program Files \ Skype
      O43 - CFD: 09/08/2015 10:47:44 - [] D - C: \ Program Files \ SmartSound Software
      O43 - CFD: 01/08/2015 09:55:58 - [0] HD - C: \ Program Files \ Uninstall information
      O43 - CFD: 03/08/2015 19:55:46 - [] D - C: \ Program Files \ VideoLAN
      O43 - CFD: 13/08/2015 16:52:59 - [] D - C: \ Program Files \ Windows Media Player
      O43 - CFD: 13/08/2015 16:51:37 - [] D - C: \ Program Files \ Windows NT
      O43 - CFD: 01/08/2015 09:51:29 - [0] HD - C: \ Program Files \ WindowsUpdate
      O43 - CFD: 01/08/2015 09:53:01 - [] D - C: \ Program Files \ Xerox
      O43 - CFD: 13/08/2015 16:53:08 - [] RD - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Accessoires
      O43 - CFD: 12/09/2015 16:06:50 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Adobe CS3 Master Collection
      O43 - CFD: 06/08/2015 15:06:10 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Applications Caere
      O43 - CFD: 14/08/2015 14:56:58 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ AVAST Software
      O43 - CFD: 06/08/2015 15:09:43 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Canon ScanGear Toolbox 3.1
      O43 - CFD: 03/10/2015 18:12:00 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ DVDVideoSoft
      O43 - CFD: 01/10/2015 09:04:43 - [] RD - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ DÃ © marrage
      O43 - CFD: 14/08/2015 15:39:56 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ FoxTarot
      O43 - CFD: 03/10/2015 20:41:15 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Google Chrome
      O43 - CFD: 06/08/2015 15:47:04 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ de Hewlett-Packard
      O43 - CFD: 03/08/2015 19:33:07 - [] RD - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Jeux
      O43 - CFD: 14/08/2015 15:22:18 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Jeux de cartes
      O43 - CFD: 19/09/2015 10:37:22 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ MAGIX
      O43 - CFD: 03/10/2015 19:38:28 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Malwarebytes Anti-Malware
      O43 - CFD: 03/08/2015 20:48:38 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Microsoft Office
      O43 - CFD: 13/08/2015 14:30:40 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Nero 8
      O43 - CFD: 28/09/2015 10:03:41 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Olympus Wave Player
      O43 - CFD: 03/08/2015 17:06:17 - [] RD - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Outils d'administration
      O43 - CFD: 03/08/2015 17:08:48 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Pinnacle Hollywood FX 6.0 pour Studio 11
      O43 - CFD: 03/08/2015 17:58:09 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ proDAD
      O43 - CFD: 03/08/2015 18:13:41 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ QuickTime
      O43 - CFD: 14/08/2015 13:47:53 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Rainlendar2
      O43 - CFD: 01/08/2015 10:05:31 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Realtek
      O43 - CFD: 03/08/2015 18:25:07 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ SFR
      O43 - CFD: 25/09/2015 14:02:29 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Skype
      O43 - CFD: 03/08/2015 17:09:03 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Studio 11
      O43 - CFD: 19/09/2015 09:53:36 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ Adobe
      O43 - CFD: 03/08/2015 18:13:05 - [] D - C: \ Documents and Settings \ All Users \ Application Data Computer \ Pomme
      O43 - CFD: 14/08/2015 14:54:39 ??- [] D - C: \ Documents and Settings \ All Users \ Application Data Software \ AVAST
      O43 - CFD: 14/08/2015 14:48:05 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ Comodo
      O43 - CFD: 14/08/2015 14:50:28 - [0] D - C: \ Documents and Settings \ All Users \ Application Data \ Comodo Downloader
      O43 - CFD: 03/08/2015 18:43:28 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ CyberLink
      O43 - CFD: 12/09/2015 14:41:48 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ FLEXnet
      O43 - CFD: 12/09/2015 10:48:01 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ Google
      O43 - CFD: 10/08/2015 08:53:06 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ MAGIX
      O43 - CFD: 03/10/2015 19:38:22 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ Malwarebytes
      O43 - CFD: 19/09/2015 09:39:56 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ McAfee
      O43 - CFD: 18/09/2015 19:55:46 - [] SD - C: \ Documents and Settings \ All Users \ Application Data \ Microsoft
      O43 - CFD: 19/09/2015 11:38:20 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ Microsoft Aide
      O43 - CFD: 13/08/2015 14:29:04 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ Nero
      O43 - CFD: 03/08/2015 17:10:00 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ Pinnacle
      O43 - CFD: 03/08/2015 17:03:08 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ Pinnacle Studio
      O43 - CFD: 25/09/2015 14:05:25 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ Skype
      O43 - CFD: 09/08/2015 10:47:44 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ SmartSound Software Inc
      O43 - CFD: 01/09/2015 15:16:55 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ Temp
      O43 - CFD: 14/08/2015 12:03:51 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ Windows Genuine Advantage
      O43 - CFD: 19/09/2015 08:08:44 - [] D - C: \ Program Files \ Fichiers Communs \ Adobe
      O43 - CFD: 06/08/2015 15:06:28 - [] D - C: \ Program Files \ Fichiers Communs \ Caere
      O43 - CFD: 03/08/2015 20:47:59 - [] D - C: \ Program Files \ Fichiers Communs \ DESIGNER
      O43 - CFD: 03/10/2015 18:11:32 - [] D - C: \ Program Files \ Fichiers Communs \ DVDVideoSoft
      O43 - CFD: 28/09/2015 10:01:28 - [] D - C: \ Program Files \ Fichiers Communs \ InstallShield
      O43 - CFD: 12/09/2015 15:55:25 - [] D - C: \ Program Files \ Fichiers Communs \ Macrovision Shared
      O43 - CFD: 10/08/2015 08:53:15 - [] D - C: \ Program Files \ Fichiers Communs \ MAGIX partagée
      O43 - CFD: 12/08/2015 13:41:44 - [] D - C: \ Program Files \ Fichiers Communs \ Microsoft Shared
      O43 - CFD: 01/08/2015 09:50:46 - [] D - C: \ Program Files \ Fichiers Communs \ MSSOAP
      O43 - CFD: 13/08/2015 14:29:41 - [] D - C: \ Program Files \ Fichiers Communs \ Nero
      O43 - CFD: 01/08/2015 11:39:59 - [] D - C: \ Program Files \ Fichiers Communs \ ODBC
      O43 - CFD: 01/08/2015 09:50:49 - [] D - C: \ Program Files \ Fichiers Communs \ Services
      O43 - CFD: 25/09/2015 14:02:29 - [] D - C: \ Program Files \ Fichiers Communs \ Skype
      O43 - CFD: 01/08/2015 11:39:56 - [] D - C: \ Program Files \ Fichiers Communs \ SpeechEngines
      O43 - CFD: 13/08/2015 16:51:33 - [] D - C: \ Program Files \ Fichiers Communs \ System
      O43 - CFD: 18/09/2015 10:04:18 - [] D - C: \ Documents and Settings \ Administrateur \ Application Data \ Adobe
      O43 - CFD: 14/08/2015 14:57:24 - [] D - C: \ Documents and Software Settings \ Administrateur \ Application Data \ AVAST
      O43 - CFD: 20/09/2015 06:26:11 - [] D - C: \ Documents and Settings \ Administrateur \ Application Data \ Canon
      O43 - CFD: 03/08/2015 18:43:15 - [] D - C: \ Documents and Settings \ Administrateur \ Application Data \ CyberLink
      O43 - CFD: 03/10/2015 18:12:26 - [] D - C: \ Documents and Settings \ Administrateur \ Application Data \ DVDVideoSoft
      O43 - CFD: 18/09/2015 19:55:32 - [] D - C: \ Documents et données Settings \ Administrateur \ Application \ Free-PDF-to-Word.com
      O43 - CFD: 18/09/2015 11:24:20 - [] D - C: \ Documents and Settings \ Administrateur \ Application Data \ Gadwin
      O43 - CFD: 03/08/2015 18:13:52 - [] D - C: \ Documents and Settings \ Administrateur \ Application Data \ Google
      O43 - CFD: 05/08/2015 15:18:18 - [0] D - C: \ Documents and Settings \ Administrateur \ Application Data \ Help
      O43 - CFD: 01/08/2015 09:55:59 - [] D - C: \ Documents and Settings \ Administrateur \ Application Data \ Identities
      O43 - CFD: 03/08/2015 16:59:46 - [] D - C: \ Documents et données Settings \ Administrateur \ Application \ InstallShield
      O43 - CFD: 09/08/2015 08:50:11 - [] D - C: \ Documents and Settings \ Administrateur \ Application Data \ Macromedia
      O43 - CFD: 29/08/2015 15:21:19 - [] D - C: \ Documents and Settings \ Administrateur \ Application Data \ MAGIX
      O43 - CFD: 19/09/2015 11:38:21 - [] SD - C: \ Documents and Settings \ Administrateur \ Application Data \ Microsoft
      O43 - CFD: 15/08/2015 07:20:40 - [] D - C: \ Documents and Settings Data \ Administrateur \ Application \ Mozilla
      O43 - CFD: 13/08/2015 14:30:15 - [] D - C: \ Documents and Settings \ Administrateur \ Application Data \ Nero
      O43 - CFD: 03/08/2015 17:59:39 - [] D - C: \ Documents and Settings \ Administrateur \ Application Data \ proDAD
      O43 - CFD: 25/09/2015 10:13:12 - [] D - C: \ Documents et données Settings \ Administrateur \ Application \ RPEng
      O43 - CFD: 04/10/2015 18:16:44 - [] D - C: \ Documents et données Settings \ Administrateur \ Application \ Skype
      O43 - CFD: 03/10/2015 18:02:05 - [] D - C: \ Documents et données Settings \ Administrateur \ Application \ vlc
      O43 - CFD: 04/10/2015 18:37:04 - [] D - C: \ Documents and Settings \ Administrateur \ Application Data \ ZHP
      O43 - CFD: 19/09/2015 09:51:29 - [] D - C: \ Documents and Settings \ Administrateur \ Local Settings \ Application Data \ Adobe
      O43 - CFD: 29/08/2015 14:22:17 - [] D - C: \ Documents and Settings \ Administrateur \ Local Settings \ Application Data \ Ahead
      O43 - CFD: 19/09/2015 07:33:16 - [] D - C: \ Documents and Computer Settings \ Administrateur \ Local Settings \ Application Data \ Pomme
      O43 - CFD: 18/08/2015 15:03:48 - [] D - C: \ Documents and Settings Data \ Administrateur \ Local Settings \ Application \ ApplicationHistory
      O43 - CFD: 03/10/2015 18:41:29 - [0] D - C: \ Documents and Settings \ Administrateur \ Local Settings \ Application Data \ Deployment
      O43 - CFD: 18/09/2015 11:24:20 - [] D - C: \ Documents and Settings \ Administrateur \ Local Settings \ Application Data \ Gadwin
      O43 - CFD: 03/10/2015 20:39:21 - [] D - C: \ Documents and Settings \ Administrateur \ Local Settings \ Application Data \ Google
      O43 - CFD: 05/08/2015 15:18:18 - [0] D - C: \ Documents and Settings \ Administrateur \ Local Settings \ Application Data \ Help
      O43 - CFD: 13/08/2015 17:34:05 - [] D - C: \ Documents and Settings \ Administrateur \ Local Settings \ Application Data \ Identities
      O43 - CFD: 18/09/2015 10:04:18 - [] D - C: \ Documents and Settings \ Administrateur \ Local Settings \ Application Data \ Microsoft
      O43 - CFD: 03/08/2015 20:45:25 - [0] D - C: \ Documents and Settings \ Administrateur \ Local Settings \ Application Data \ Microsoft Aide
      O43 - CFD: 15/08/2015 07:20:20 - [] D - C: \ Documents and Settings Data \ Administrateur \ Local Settings \ Application \ Mozilla
      O43 - CFD: 25/09/2015 14:02:47 - [] D - C: \ Documents and Settings Data \ Administrateur \ Local Settings \ Application \ Skype
      O43 - CFD: 18/09/2015 10:04:18 - [] D - C: \ Documents and Settings \ Administrateur \ Local Settings \ Application Data \ Temp
      O43 - CFD: 14/08/2015 11:59:54 - [] RD - C: \ Documents and Settings \ Administrateur \ Menu DÃ © marrer \ Programmes \ Accessoires
      O43 - CFD: 09/08/2015 10:47:36 - [] D - C: \ Documents and Settings \ Administrateur \ Menu DÃ © marrer \ Programmes \ CyberLink PowerDirector
      O43 - CFD: 01/08/2015 11:39:35 - [] RD - C: \ Documents and Settings \ Administrateur \ Menu DÃ © marrer \ Programmes \ DÃ © marrage
      O43 - CFD: 15/08/2015 12:58:40 - [] D - C: \ Documents and Settings \ Administrateur \ Menu DÃ © marrer \ Programmes \ FormatFactory
      O43 - CFD: 18/09/2015 11:39:15 - [] D - C: \ Documents and Settings \ Administrateur \ Menu DÃ © marrer \ Programmes \ Systems Gadwin

      --- \\ Derniers Fichiers de Windows Dans Prefetcher crà © à de © (1) - 3s
      O45 - LFCP: [MD5.38021C925EFA4D1B8014AABE9E02ACED] 2015/10/01 09:35:41 A - C: \ WINDOWS \ Prefetch \ BROWSERHELPERSINSTALLER.EXE-289AD998.pf => PUP.Optional.SearchDonkey

      --- \\ ShellIconOverlayIdentifiers (SIOI) (2) - 0s
      O106 - SIOI: avast [00avast] - {472083B0-C522-11CF-8763-00608CC02F24}. (.AVAST Software - avast Shell Extension!.) - C: \ Program Files \ AVAST Software \ Avast \ ashShell.dll  ©
      O106 - SIOI: Fichiers hors connexion Menu [Fichiers hors connexion] - {750fdf0e-2a26-11d1-a3ea-080036587f03}. (.Microsoft Corporation - UI de cache Côté © client.) - C: \ WINDOWS \ system32 \ Cscui.dll  ©

      --- \\ Enûma StartupReg de © ration des clà © (17) - 3s
      O53 - SMSR: HKLM \ ... \ startupreg \ Adobe ARM [Key]. (.adobe Systems Incorporated - Adobe Reader et Acrobat Manager.) - C: \ Program Files \ Fichiers Communs \ Adobe \ ARM \ 1.0 \ AdobeARM.exe  ©
      O53 - SMSR: HKLM \ ... \ startupreg \ CCleaner surveillance [Key]. (.Piriform Ltd - CCleaner.) - C: \ Program Files \ CCleaner \ CCleaner.exe  ©
      O53 - SMSR: HKLM \ ... \ startupreg \ CTFMON.EXE [Key]. (.Microsoft Corporation - FCT Loader.) - C: \ WINDOWS \ system32 \ ctfmon.exe  ©
      O53 - SMSR: HKLM \ ... \ startupreg \ LLXScreenCut (32-bit) [Key]. (Systèmes .Gadwin - LLXScreenCut.) - E: \ Program Files (x86) \ Gadwin \ LLXScreenCut \ PrintScreen32.exe
      O53 - SMSR: HKLM \ ... \ startupreg \ HotKeysCmds [Key]. (.Intel Corporation - Module hkcmd.) - C: \ WINDOWS \ system32 \ hkcmd.exe  ©
      O53 - SMSR: HKLM \ ... \ startupreg \ HPDJ Taskbar Utility [Key]. (.HP -.) - C: \ WINDOWS \ system32 \ spool \ drivers \ w32x86 \ 3 \ hpztsb04.exe  ©
      O53 - SMSR: HKLM \ ... \ startupreg \ IgfxTray [Key]. (.Intel Corporation - Module igfxTray.) - C: \ WINDOWS \ system32 \ igfxtray.exe  ©
      O53 - SMSR: HKLM \ ... \ startupreg \ {IndxStoreSvr_ 79662E04-7C6C-4d9f-84C7-88D8A56B10AA} [Key]. (.Nero AG - Nero Home.) - C: \ Program Files \ Fichiers Communs \ Nero \ Lib \ NMIndexStoreSvr.exe  ©
      O53 - SMSR: HKLM \ ... \ startupreg \ msmsgs [Key]. (.Microsoft Corporation - Windows Messenger.) - C: \ Program Files \ Messenger \ msmsgs.exe  ©
      O53 - SMSR: HKLM \ ... \ startupreg \ NBKeyScan [Key]. (.Nero AG - Nero BackItUp.) - C: \ Program Files \ Nero \ nero8 \ Nero BackItUp \ NBKeyScan.exe  ©
      O53 - SMSR: HKLM \ ... \ startupreg \ NeroFilterCheck [Key]. (.Nero AG - NeroCheck.) - C: \ Program Files \ Fichiers Communs \ Nero \ Lib \ NeroCheck.exe  ©
      O53 - SMSR: HKLM \ ... \ startupreg \ OmniPage [Key]. (.Caere Corporation - OCR Aware (32-bit).) - C: \ Program Files \ Caere \ OmniPagePro90 \ OPware32.exe
      O53 - SMSR: HKLM \ ... \ startupreg \ Persistance [Key]. (.Intel Corporation - Module de persistance.) - C: \ WINDOWS \ system32 \ igfxpers.exe  ©
      O53 - SMSR: HKLM \ ... \ startupreg \ QuickTime Groupe [Key]. (.apple Computer, Inc. - QuickTime tâches.) - C: \ Program Files \ QuickTime \ qttask.exe  ©
      O53 - SMSR: HKLM \ ... \ startupreg \ Rainlendar2 [Key]. (.Copyright (C) de 2006 à 2014 Kimmo 'Rainy' Pekkola - Rainlendar2.) - C: \ Program Files \ Rainlendar2 \ Rainlendar2.exe
      O53 - SMSR: HKLM \ ... \ startupreg \ RTHDCPL [Key]. (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) - Rthdcpl.exe (. Fichier .pas) ©
      O53 - SMSR: HKLM \ ... \ startupreg \ swg [Key]. (.Google Inc. - GoogleToolbarNotifier.) - C: \ Program Files \ Google \ GoogleToolbarNotifier \ 1.2.911.3380 \ GoogleToolbarNotifier.exe  ©

      --- \\ Liste des pilotes du système (101) - 18
      O58 - SDL: 11/08/2015 16:03:56 A. (.Creative - Creative pilote WDM Audio 3D.) - C: \ WINDOWS \ system32 \ drivers \ Ambfilt.sys [1691480] ©
      O58 - SDL: 13/04/2008 11:36:40 N. (.Advanced Micro Devices, Inc. - AMD Win2000 AGP Filter.) - C: \ WINDOWS \ system32 \ drivers \ amdagp.sys [43008] ©
      O58 - SDL: 25/09/2015 09:15:44 A. (.AVAST Software - avast HWID!.) - C: \ WINDOWS \ system32 \ drivers \ aswHwid.sys [24016] ©
      O58 - SDL: 25/09/2015 09:15:44 A. (! .AVAST Software - avast File System MiniFilter pour Windows 2.) - C: \ Windows \ System32 \ drivers \ aswMonFlt.sys [76000] ©
      O58 - SDL: 25/09/2015 09:15:44 A. (! .AVAST Software - avast TDI Rediriger pilote.) - C: \ WINDOWS \ system32 \ drivers \ aswRdr.sys [55200] ©
      O58 - SDL: 25/09/2015 09:15:44 A. (! .AVAST Software - avast Revert.) - C: \ WINDOWS \ system32 \ drivers \ aswRvrt.sys [49776] ©
      O58 - SDL: 25/09/2015 09:15:29 A. (! .AVAST Software - avast virtualisation pilote.) - C: \ WINDOWS \ system32 \ drivers \ aswSnx.sys [789296] ©
      O58 - SDL: 25/09/2015 09:15:44 A. (! .AVAST Software - avast auto module de protection.) - C: \ WINDOWS \ system32 \ drivers \ aswSP.sys [434184] ©
      O58 - SDL: 25/09/2015 09:15:44 A. (! .AVAST Software - avast flux filtre.) - C: \ WINDOWS \ system32 \ drivers \ aswStmXP.sys [157888] ©
      O58 - SDL: 25/09/2015 09:15:44 A. (! .AVAST Software - avast TDI pilote de filtre.) - C: \ WINDOWS \ system32 \ drivers \ aswTdi.sys [57888] ©
      O58 - SDL: 25/09/2015 09:15:44 A. (.AVAST Software - avast VM moniteur!.) - C: \ WINDOWS \ system32 \ drivers \ aswVmm.sys [208664] ©
      O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI WDM BT829 MiniDriver (A).) - C: \ Windows \ System32 \ drivers \ ati1btxx.sys [56623] ©
      O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI spécialisés MVD VBI Codec.) - C: \ Windows \ System32 \ drivers \ ati1mdxx.sys [11615] ©
      O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI spécialisés PCD VBI Codec.) - C: \ Windows \ System32 \ drivers \ ati1pdxx.sys [12047] ©
      O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI Rage Theater Audio WDM Minidriver.) - C: \ Windows \ System32 \ drivers \ ati1raxx.sys [30671] ©
      O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI Rage Theater WDM MiniDriver.) - C: \ WINDOWS \ system32 \ drivers \ ati1rvxx.sys [63663] ©
      O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI WDM TV Son MiniDriver.) - C: \ Windows \ System32 \ drivers \ ati1snxx.sys [26367] ©
      O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI WDM télétexte.) - C: \ Windows \ System32 \ drivers \ ati1ttxx.sys [21343] ©
      O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI WDM tvtuner MiniDriver.) - C: \ Windows \ System32 \ drivers \ ati1tuxx.sys [36463] ©
      O58 - SDL: 13/04/2008 09:34:20 N. (.ATI Technologies Inc. - ATI WDM CrossBar MiniDriver.) - C: \ Windows \ System32 \ drivers \ ati1xbxx.sys [29455] ©
      O58 - SDL: 13/04/2008 09:34:20 N. (.ATI Technologies Inc. - ATI WDM TVAUDIO_CrossBar MiniDriver.) - C: \ Windows \ System32 \ drivers \ ati1xsxx.sys [34735] ©
      O58 - SDL: 13/04/2008 18:55:32 N. (.ATI Technologies Inc. - Pilote de miniport ATI RAGE 128.) - C: \ Windows \ System32 \ drivers \ ati2mtaa.sys [327168] ©
      O58 - SDL: 13/04/2008 18:55:34 N. (.ATI Technologies Inc. - Pilote de miniport ATI RAGE 128.) - C: \ Windows \ System32 \ drivers \ ati2mtag.sys [701440] ©
      O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI WDM BT829 MiniDriver (A).) - C: \ Windows \ System32 \ drivers \ atinbtxx.sys [57856] ©
      O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI spécialisés MVD VBI Codec RT2.) - C: \ WINDOWS \ system32 \ drivers \ atinmdxx.sys [13824] ©
      O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI spécialisés PCD VBI Codec RT2.) - C: \ WINDOWS \ system32 \ drivers \ atinpdxx.sys [14336] ©
      O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI Rage Theater Audio WDM Minidriver.) - C: \ Windows \ System32 \ drivers \ atinraxx.sys [52224] ©
      O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI Rage Theater WDM MiniDriver RT2.) - C: \ WINDOWS \ system32 \ drivers \ atinrvxx.sys [104960] ©
      O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI WDM TV Son MiniDriver.) - C: \ Windows \ System32 \ drivers \ atinsnxx.sys [28672] ©
      O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI WDM télétexte.) - C: \ Windows \ System32 \ drivers \ atinttxx.sys [13824] ©
      O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI WDM tvtuner MiniDriver.) - C: \ Windows \ System32 \ drivers \ atintuxx.sys [73216] ©
      O58 - SDL: 13/04/2008 09:34:20 N. (.ATI Technologies Inc. - ATI WDM CrossBar MiniDriver.) - C: \ Windows \ System32 \ drivers \ atinxbxx.sys [31744] ©
      O58 - SDL: 13/04/2008 09:34:20 N. (.ATI Technologies Inc. - ATI WDM TVAUDIO_CrossBar MiniDriver RT2.) - C: \ Windows \ System32 \ drivers \ atinxsxx.sys [63488] ©
      O58 - SDL: 02/03/2006 14:00:00 A. (.RAVISENT Technologies Inc. - Pilote principale CineMaster C 1.2 WDM.) - C: \ Windows \ System32 \ drivers \ cinemst2.sys [262528] ©
      O58 - SDL: 02/03/2006 14:00:00 A. (.Compaq Computer Corporation - Compaq PA-1 pilote Player.) - C: \ Windows \ System32 \ drivers \ cpqdap01.sys [11776] ©
      O58 - SDL: 24/06/2002 06:31:30 RA. (.D-Link Corporation - D-Link DFE-538TX Adaptateur 10/100.) - C: \ Windows \ System32 \ drivers \ DLKRTS.SYS [45568] ©
      O58 - SDL: 13/04/2008 19:05:08 A. (.Microsoft Corp., Veritas Software - Pilote de dà © marrage du Gestionnaire de disq.) - C: \ Windows \ System32 \ drivers \ dmboot.sys [800256] ©
      O58 - SDL: 13/04/2008 19:05:14 A. (.Microsoft Corp., logiciel Veritas - Pilote E / S du Gestionnaire de disques NT.) - C: \ Windows \ System32 \ drivers \ Dmio.sys [154496] ©
      O58 - SDL: 02/03/2006 14:00:00 A. (.Microsoft Corp., Veritas Software - NT Disk Manager démarrage pilote..) - C: \ Windows \ System32 \ drivers \ dmload.sys [5888] ©
      O58 - SDL: 09/04/2001 19:17:58 A. (.OLYMPUS OPTICAL CO, LTD - DW90USB Pilote pour Windows 2000...) - C: \ Windows \ System32 \ drivers \ DW90USB.SYS [39096]
      O58 - SDL: 2012/07/06 13:50:10 Une. (.GenesysLogic - GeneStor.) - C: \ Windows \ System32 \ drivers \ GeneStor.sys [56832] ©
      O58 - SDL: 13/04/2008 09:36:06 N. (.Windows (R) Server 2003 fournisseur DDK - High Definition Audio Driver v1.0a Bus.) - C: \ WINDOWS \ system32 \ drivers \ hdaudbus.sys [144384]
      O58 - SDL: 07/01/2005 17:07:16 N. (.Windows (R) Server 2003 fournisseur DDK - High Definition Audio Fonction Pilote v1.0a.) - C: \ WINDOWS \ system32 \ drivers \ Hdaudio.sys [145920]
      O58 - SDL: 13/04/2008 11:23:50 N. (.Conexant Systems, Inc. - pilote WDM HSF_HWB2.) - C: \ Windows \ System32 \ drivers \ hsfbs2s2.sys [220032] ©
      O58 - SDL: 13/04/2008 11:23:52 N. (.Conexant Systems, Inc. - HSF_CNXT pilote.) - C: \ WINDOWS \ system32 \ drivers \ hsfcxts2.sys [685056] ©
      O58 - SDL: 13/04/2008 11:23:54 N. (.Conexant Systems, Inc. - HSF_DP pilote.) - C: \ WINDOWS \ system32 \ drivers \ hsfdpsp2.sys [1041536] ©
      O58 - SDL: 2009/01/21 05:42:56 RA. (.Intel Corporation - Intel Graphics pilote miniport.) - C: \ WINDOWS \ system32 \ drivers \ igxpmp32.sys [6278560] ©
      O58 - SDL: 08/06/2008 08:37:46 A. (.Ahead Software AG - miniport Nero ImageDrive SCSI.) - C: \ Windows \ System32 \ drivers \ imagedrv.sys [11304] ©
      O58 - SDL: 08/06/2008 08:37:56 A. (.Ahead Software AG - Nero Image Server.) - C: \ Windows \ S
      0
      1. Contributeur sécurité
        Salut,
        Pas de soucis pour le retard, par contre je n'ai nullement demandé de ZHPDiag ?! Je n'utilise pas cet outil d'ailleurs.

        Relis les instructions. Et fourni le rapport demandé.

        Bien à toi
        0
        1. Désolé juju666, je ne sais pas pourquoi j'ai fait un rapport HPZDiag, trop préssé de te répondre.
          Je suis passé sur mon os seven car je n'arrive plus à ecrire depuis que j'ai téléchargé le rapport sur xp c'a va s'arranger après je pense.
          Voici le lien de Adwcleaner
          AdwCleaner v5.010 - Rapport créé le 04/10/2015 à 19:18:17
          # Mis à jour le 04/10/2015 par Xplode
          # Base de données : 2015-10-04.3 [Serveur]
          # Système d'exploitation : Microsoft Windows XP Service Pack 3 (x86)
          # Nom d'utilisateur : Administrateur - PAUL
          # Exécuté depuis : C:\Documents and Settings\Administrateur\Mes documents\Downloads\adwcleaner_5.010.exe
          # Option : Scanner
          # Support : http://toolslib.net/forum
                  • [ Services ] *****
                  • [ Dossiers ] *****


          Dossier Trouvé : C:\Documents and Settings\Administrateur\Application Data\RPEng
                  • [ Fichiers ] *****


          Fichier Trouvé : C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\h7czt54w.default\Extensions\{b64d9b05-48e1-4ceb-bf58-e0643994e900}.xpi
          Fichier Trouvé : C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\hxxp_pstatic.kingtopdeals.com_0.localstorage
          Fichier Trouvé : C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\hxxp_pstatic.kingtopdeals.com_0.localstorage-journal
          Fichier Trouvé : C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\hxxps_www.tradeadexchange.com_0.localstorage
          Fichier Trouvé : C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\hxxps_www.tradeadexchange.com_0.localstorage-journal
                  • [ DLLs ] *****
                  • [ Raccourcis ] *****
                  • [ Tâches planifiées ] *****
                  • [ Registre ] *****


          Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{363F46BE-27B4-4C8D-99E7-B1E049B84376}
          Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{3CCC052E-BDEE-408A-BEA7-90914EF2964B}
          Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{525F116F-04AD-40A2-AE2F-A0C4E1AFEF98}
          Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{61F47056-E400-43D3-AF1E-AB7DFFD4C4AD}
          Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{90A9B7D2-3794-45EA-9E23-140E3938D2D9}
          Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{9852A670-F845-491B-9BE6-EBD841B8A613}
          Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{A753A1EC-973E-4718-AF8E-A3F554D45C44}
          Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{ACE4747B-35BD-4E97-9DD7-1D4245B0695C}
          Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{CE77C59C-CFD2-429F-868C-8B04D23F94CA}
          Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{E2B98EEA-EE55-4E9B-A8C1-6E5288DF785A}
          Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{F544E0F5-CA3C-47EA-A64D-35FCF1602396}
          Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{02AFA80F-4BEE-41FD-8572-214B58A9EF90}
          Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
          Clé Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
          Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A2D81E70-2A98-4A08-A628-94388B063C5E}
          Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{cfd32d46-7d3f-483f-bace-7172aec5592d}
                  • [ Navigateurs ] *****


          [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Trouvée : hxxp://www.google.fr/?ctid=CT3318001&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP0D91D54D-7812-4A4C-9CB1-6F54348C12E8&SSPV=
          [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Trouvée : hxxp://astromenda.com/?f=7&a=ast_tgraduit_14_40_ie&cd=2XzuyEtN2Y1L1QzutDtDtByBtD0EtAyC0AyEtAtDyD0DtD0AtN0D0Tzu0StCtDtDyEtN1L2XzutAtFtBtFtCtFyCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCtBtCtC0CyB0BzztGtAyCtAzztG0B0D0EyEtG0EyBtByCtGyEtAyDyCtCyC0FyCyEzzyB0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DtCzz0C0EyD0AtGyCtA0E0CtGyEyB0FyBtGzztAtC0FtGtD0F0B0AyByCyEyD0AtDyEyE2Q&cr=45520239&ir=
          [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Trouvée : hxxp://astromenda.com/?f=7&a=ast_ggbc_14_40_ie&cd=2XzuyEtN2Y1L1QzutDtDtC0ByByBtByEyB0FtCyBtByE0AyEtN0D0Tzu0StCtDtDyCtN1L2XzutAtFtBtFtCtFyCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDtA0FtC0DtB0E0CtG0A0F0C0EtG0C0AzyyEtGyB0BtC0EtGtD0C0AtDzy0AtBtA0FyByBtC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtA0BtBzzyC0DyDtG0EyEyD0DtGyEyByEzytG0AtCyB0BtGzy0D0E0A0FtCzz0Fzz0BtD0F2Q&cr=360718047&ir=
          [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Trouvée : hxxp://astromenda.com/?f=7&a=ast_ggfc_14_40_ie&cd=2XzuyEtN2Y1L1QzutDtDtByBtD0EtAyC0AyEtAtDyD0DtD0AtN0D0Tzu0StCtDtDzztN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyCtBtCtC0CyB0BzztGtAyCtAzztG0B0D0EyEtG0EyBtByCtGyEtAyDyCtCyC0FyCyEzzyB0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DtCzz0C0EyD0AtGyCtA0E0CtGyEyB0FyBtGzztAtC0FtGtD0F0B0AyByCyEyD0AtDyEyE2Q&cr=813386991&ir=
          [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Trouvée : hxxp://astromenda.com/?f=7&a=ast_ggfc_14_40_ie&cd=2XzuyEtN2Y1L1QzutDtDtByBtD0EtAyC0AyEtAtDyD0DtD0AtN0D0Tzu0StCtDtDzztN1L2XzutAtFtBtFtCtFyCtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyCtBtCtC0CyB0BzztGtAyCtAzztG0B0D0EyEtG0EyBtByCtGyEtAyDyCtCyC0FyCyEzzyB0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DtCzz0C0EyD0AtGyCtA0E0CtGyEyB0FyBtGzztAtC0FtGtD0F0B0AyByCyEyD0AtDyEyE2Q&cr=847391344&ir=
          [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Trouvée : hxxp://isearch.omiga-plus.com/?type=hp&ts=1414246715&from=tugs&uid=ST380021A_3HV0SCQK
          [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Trouvée : hxxp://Vosteran.com/?f=7&a=vst_ggfc_14_50_ch&cd=2XzuyEtN2Y1L1QzutDtDtByBtD0EtAyC0AyEtAtDtA0EtDzztN0D0Tzu0StCtDyBtAtN1L2XzutAtFyCtFtCtDtFtCtDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCtDtA0EtCyC0FtBtGyCzyyEyBtG0C0FtCtBtGtB0A0B0AtGtAtCtC0C0AtAzytD0B0C0D0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0B0Czy0CzyyBtAtG0EzztD0BtGyE0DyE0EtGzy0C0EtDtGzztB0EtD0B0A0FyD0E0AyB0A2Q&cr=397589653&ir=
          [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Trouvée : hxxp://istart.webssearches.com/?type=hp&ts=1418302820&from=slb2&uid=ST380021A_3HV0SCQK
          [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Trouvée : eagomcfjiefffhpaejnlpjccikpipdoe
          [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Trouvée : hxxp://www.trovi.com/?gd=&ctid=CT3329707&octid=EB_ORIGINAL_CTID&ISID=MC78AAE5E-0508-4967-B180-BBD6CD114602&SearchSource=55&CUI=&UM=6&UP=SP3300B6EB-3CCE-4DCA-BE69-B94A0A9B311B&SSPV=

          ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [7045 octets] ##########
          0
          1. Contributeur sécurité
            Ok, vu.

            Mais j'avais dit :

            Clique sur Scanner puis Nettoyer,

            Je répète :

            Clique sur Scanner puis Nettoyer,

            :-)
            0
            1. Bonjour juju666
              J'avais bien fait ce que tu m'avais dit mais le nettoyage était bloqué à la fin et je pensais que c'était terminé.
              Je viens de le refaire et il s'est à nouveau bloqué, il a fallu que je laisse tourner presque 5 minutes avant que ce soit fini.
              Je joins le nouveau rapport qui est apparu, j'espere que ce sera le bon
              # AdwCleaner v5.010 - Rapport créé le 05/10/2015 à 06:48:48
              # Mis à jour le 04/10/2015 par Xplode
              # Base de données : 2015-10-04.3 [Serveur]
              # Système d'exploitation : Microsoft Windows XP Service Pack 3 (x86)
              # Nom d'utilisateur : Administrateur - PAUL
              # Exécuté depuis : C:\Documents and Settings\Administrateur\Mes documents\Downloads\adwcleaner_5.010 (2).exe
              # Option : Nettoyer
              # Support : http://toolslib.net/forum
                      • [ Services ] *****
                      • [ Dossiers ] *****
                      • [ Fichiers ] *****
                      • [ DLLs ] *****
                      • [ Raccourcis ] *****
                      • [ Tâches planifiées ] *****
                      • [ Registre ] *****
                      • [ Navigateurs ] *****


              [-] [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Supprimé : hxxp://www.google.fr/?ctid=CT3318001&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP0D91D54D-7812-4A4C-9CB1-6F54348C12E8&SSPV=
              [-] [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Supprimé : hxxp://astromenda.com/?f=7&a=ast_tgraduit_14_40_ie&cd=2XzuyEtN2Y1L1QzutDtDtByBtD0EtAyC0AyEtAtDyD0DtD0AtN0D0Tzu0StCtDtDyEtN1L2XzutAtFtBtFtCtFyCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCtBtCtC0CyB0BzztGtAyCtAzztG0B0D0EyEtG0EyBtByCtGyEtAyDyCtCyC0FyCyEzzyB0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DtCzz0C0EyD0AtGyCtA0E0CtGyEyB0FyBtGzztAtC0FtGtD0F0B0AyByCyEyD0AtDyEyE2Q&cr=45520239&ir=
              [-] [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Supprimé : hxxp://astromenda.com/?f=7&a=ast_ggbc_14_40_ie&cd=2XzuyEtN2Y1L1QzutDtDtC0ByByBtByEyB0FtCyBtByE0AyEtN0D0Tzu0StCtDtDyCtN1L2XzutAtFtBtFtCtFyCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDtA0FtC0DtB0E0CtG0A0F0C0EtG0C0AzyyEtGyB0BtC0EtGtD0C0AtDzy0AtBtA0FyByBtC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtA0BtBzzyC0DyDtG0EyEyD0DtGyEyByEzytG0AtCyB0BtGzy0D0E0A0FtCzz0Fzz0BtD0F2Q&cr=360718047&ir=
              [-] [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Supprimé : hxxp://astromenda.com/?f=7&a=ast_ggfc_14_40_ie&cd=2XzuyEtN2Y1L1QzutDtDtByBtD0EtAyC0AyEtAtDyD0DtD0AtN0D0Tzu0StCtDtDzztN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyCtBtCtC0CyB0BzztGtAyCtAzztG0B0D0EyEtG0EyBtByCtGyEtAyDyCtCyC0FyCyEzzyB0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DtCzz0C0EyD0AtGyCtA0E0CtGyEyB0FyBtGzztAtC0FtGtD0F0B0AyByCyEyD0AtDyEyE2Q&cr=813386991&ir=
              [-] [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Supprimé : hxxp://astromenda.com/?f=7&a=ast_ggfc_14_40_ie&cd=2XzuyEtN2Y1L1QzutDtDtByBtD0EtAyC0AyEtAtDyD0DtD0AtN0D0Tzu0StCtDtDzztN1L2XzutAtFtBtFtCtFyCtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyCtBtCtC0CyB0BzztGtAyCtAzztG0B0D0EyEtG0EyBtByCtGyEtAyDyCtCyC0FyCyEzzyB0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DtCzz0C0EyD0AtGyCtA0E0CtGyEyB0FyBtGzztAtC0FtGtD0F0B0AyByCyEyD0AtDyEyE2Q&cr=847391344&ir=
              [-] [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Supprimé : hxxp://isearch.omiga-plus.com/?type=hp&ts=1414246715&from=tugs&uid=ST380021A_3HV0SCQK
              [-] [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Supprimé : hxxp://Vosteran.com/?f=7&a=vst_ggfc_14_50_ch&cd=2XzuyEtN2Y1L1QzutDtDtByBtD0EtAyC0AyEtAtDtA0EtDzztN0D0Tzu0StCtDyBtAtN1L2XzutAtFyCtFtCtDtFtCtDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCtDtA0EtCyC0FtBtGyCzyyEyBtG0C0FtCtBtGtB0A0B0AtGtAtCtC0C0AtAzytD0B0C0D0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0B0Czy0CzyyBtAtG0EzztD0BtGyE0DyE0EtGzy0C0EtDtGzztB0EtD0B0A0FyD0E0AyB0A2Q&cr=397589653&ir=
              [-] [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Supprimé : hxxp://istart.webssearches.com/?type=hp&ts=1418302820&from=slb2&uid=ST380021A_3HV0SCQK
              [-] [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Supprimé : eagomcfjiefffhpaejnlpjccikpipdoe
              [-] [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Supprimé : hxxp://www.trovi.com/?gd=&ctid=CT3329707&octid=EB_ORIGINAL_CTID&ISID=MC78AAE5E-0508-4967-B180-BBD6CD114602&SearchSource=55&CUI=&UM=6&UP=SP3300B6EB-3CCE-4DCA-BE69-B94A0A9B311B&SSPV=

              :: Paramètres Winsock réinitialisés

              ########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [4706 octets] ##########
              0
              1. Contributeur sécurité
                Salut,
                Bah oui, tant qu'il n'a pas indiqué clairement qu'il a terminé, c'est parce qu'il n'a pas terminé. :)

                Bien lu, j'aimerais savoir si tu as réinitialisé tes navigateurs ?
                Est-ce que les pus continuent ?

                A+
                0
                1. Bonsoir juju666
                  J'ai réinitialiser Internet et Google et j'ai supprimé les modules complémentaires, je ne suis plus averti par avast oiu malware d'une présence suspecte et mon pc va nettement mieux, je peux écrire mes réponses et mes fichiers s'ouvrent facilement sans bloquer pour le moment
                  0