Supprimer eo rezo

Salut

Pas de soucis

Bon Surf !!!

re,

tout à l'air d'être ok.

Mais avant de mettre en "résolu", je voulais te remercier en direct de ta disponibilité et de ton efficacité.

Merci et bravo à vous tous pour ce que vous faites.

cdt

Yves

Re

1) Désactive puis Réactive la restauration système de Vista

>> Désactiver ou Réactiver la restauration système de Vista

2)* Tu crées ensuite un point de restauration / Vista

>> créer ensuite un point de restauration / Vista

>> Regarde >> paragraphe => Créer un point de restauration

3)* régle de sécurité :on réfléchit puis on clique et pas l'inverse
* Les fichiers/programmes c'est comme les bonbons, quand ça vient d'un inconnu, on n'accepte pas

4)* Fais régulièrement une sauvegarde de tes documents importants sur un support externe (disque dur externe, CD/DVD réinscriptible...)
* Dans ce sujet, nous avons pu désinfecter ton ordinateur, mais ce n'est pas toujours le cas.
* Certaines infections cryptent les documents et demandent une rançon pour les récupérer,
* d'autres les modifient pour diffuser des infections, obligeant donc à les effacer...
* Il faut donc toujours avoir une sauvegarde saine de tes documents, sinon tu risques de les perdre.

5)* un peu de lecture
Tu prendras le temps de lire
Synthèse du Projet Antimalwares
Projet Antimalwares

si plus de soucis

5)* Tu peux mettre ton problème résolu !!
>> Résolu

et voila le tout.

[ Rapport ToolsCleaner version 2.3.11 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\Program Files (x86)\Ad-remover: trouvé !
C:\Program Files (x86)\ZHPDiag: trouvé !
C:\Program Files (x86)\ZHPDiag\ZHPdiag.exe: trouvé !
C:\Program Files (x86)\ZHPDiag\catchme.exe: trouvé !
C:\Program Files (x86)\ZHPDiag\mbr.log: trouvé !
C:\Program Files (x86)\ZHPDiag\mbr.exe: trouvé !

---------------------------------
--> Suppression:

C:\Program Files (x86)\ZHPDiag\ZHPdiag.exe: supprimé !
C:\Program Files (x86)\ZHPDiag\catchme.exe: supprimé !
C:\Program Files (x86)\ZHPDiag\mbr.log: supprimé !
C:\Program Files (x86)\ZHPDiag\mbr.exe: supprimé !
C:\Program Files (x86)\Ad-remover: supprimé !
C:\Program Files (x86)\ZHPDiag: supprimé !

Corbeille vidée!

Salut

Exact j ai modifié mon message OTM tu laisses tomber

fais les mises à jour etc .. du deuxiéme message

salut,

je lis le message ci dessus (envoyé à 4h27, mais j'en trouve un autre (différent), envoyé par e mail celui là , envoyé à 4h27.
Comme c'est la 1 ère fois que les messages diffèrent entre l e site CCM et ceux reçus par mail, je préfère être sur:
- dois je tenir compte des 2, et dans quel ordre?

ci dessous copié collé de l'email:

Bonjour,

Vous avez demandé à recevoir les réponses au message de VIRUS-C-C intitulé « Forum virus/sécurité - supprimer eo rezo - reponse de VIRUS-C-C » datant du 2 septembre 2010 à 04:26 posté dans « Virus/Sécurité ».
Ce message vient de recevoir la réponse suivante de VIRUS-C-C
_______________________________________________________
Salut

service espion

* Télécharge OTM (OldTimer) sur ton Bureau

ICI >> OTM (OldTimer)
- Clique droit sur "OTMoveIt3.exe" et choisis "exécuter en tant qu'administrateur" afin de le lancer.
- Copie (Ctrl+C) le texte suivant en gras ci-dessous :

:files
C:\ProgramData\Partner\partner.exe
c:\ProgramData\Partner\partner.dll

:commands
[emptytemp]
[Reboot]

- Colle (Ctrl+V) le texte précédemment copié dans le cadre: Paste Instructions for Items to be Moved.
- Clique maintenant sur le bouton MoveIt!
Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.
- Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log

--

Membre Contributeur sécurité CCM
Windows Vista // Windows XP
_______________________________________________________
Dans le cadre de l'amélioration de la satisfaction des utilisateurs de CommentÇaMarche, merci de bien vouloir indiquer si les réponses apportées répondent ou non à votre attente :
Si votre question est résolue, merci de cliquer sur le lien suivant :
* https://forums.commentcamarche.net/forum/affich-19011396-supprimer-eo-rezo
Si votre question n'est toujours pas résolue, merci de cliquer ci-dessous :
* https://forums.commentcamarche.net/forum/affich-19011396-supprimer-eo-rezo

Le forum d'assistance de CommentÇaMarche fonctionne sur la base de l'entraide, ainsi nous vous remercions par avance de donner tous les détails permettant de résoudre au mieux votre problème et, si possible, de donner de temps en temps une synthèse des actions réalisées et des pistes vous ayant permis d'avancer dans votre démarche.

Quelques mots de remerciement à l'attention des personnes qui vous essayent de vous aider seront également fortement appréciés.
Pour répondre au message de VIRUS-C-C, merci de cliquer sur le lien ci-dessous:
* https://forums.commentcamarche.net/forum/affich-19011396-supprimer-eo-rezo

Pour arrêter les envois de mails concernant cette discussion, veuillez cliquer sur le lien suivant:
* https://forums.commentcamarche.net/forum/stopmail.php3?id=19011396&P=cf3daf00f3914808a6337157637fafe9

--
CommentÇaMarche.net, Communautés d'assistance et de conseils
https://www.commentcamarche.net/

Salut

Comment va ton PC ???

1) * Rends toi ici pour l'installation de Java
>> Version Java
(n'installe pas la barre d'outil proposée lors de l'installation)

pour essayer

2) installes ce navigateur

*>> Mozilla Firefox
>> Mozilla Firefox

* Sécurise le navigateur Firefox(Utilise le en Priorité) avec AdBlock Plus
>> Securiser Firefox

* tu rajouteras aussi WOT il permet d'identifier aisément les sites dangereux dans les résultats de recherche et dans Firefox,explorer et Google Chrome
>> WOT

3)* Installe ce Soft qui te tiendra au courant des mises à jour de tes Logiciels installés

* Télécharge Update Checker

* logiciel permet de trouver la liste des logiciels installés sur ton PC ainsi que leurs versions actuelles, et en comparant cette liste avec la base des données du serveur.
* il peut dire quel logiciel n'est pas à jour, et il te propose également de le télécharger

ICI >> Update Checker
* Installe le avec les paramètres par défaut en cliquant chaque fois sur Suivant.
* Une fois installé, patiente quelques secondes et tu verras apparaître une icône verte dans ta barre des tâches te signalant qu'il y a des mises à jour disponibles.
* Double-cliques sur l'icône pour être redirigé sur le site de téléchargement des mises à jour.
* Un conseil : n'installe pas les BETA qui sont listées en dessous.>> Beta Updates Detected
* Tu installes les mises à jour

4) * Télécharges ToolsCleaner de A.Rothstein
.pour enlever les programmes utilisés pendant la procédure.

ICI >> ToolsCleaner

. Enregistres ToolsCleaner2.exe sur le Bureau.
. Double-cliquer dessus, puis cliquer sur >> Recherche
==> Le programme va chercher les utilitaires installé
.Il se peut que la fenêtre devienne blanche pendant le scan, c'est normal !
. Lorsque la recherche est terminée ToolsCleaner affiche une liste des différents outils trouvés,
. cliques sur ==> Suppression afin de les supprimer.
. et ensuite cliques ==> vidage Corbeille
. Fermes le programme en cliquant sur "Quitter ".
. Postes le rapport qui se trouve ici >>> C:\TCleaner.txt
. tu termines en faisant un clic droit sur ToolsCleaner et tu le supprimes

@+



Membre Contributeur sécurité CCM
Windows Vista // Windows XP

re,
pas vraiment vide le truc!

1. ========================= SEAF 1.0.0.7 - C_XX
2.
3. Commencé à: 21:12:11 le 01/09/2010
4.
5. Valeur(s) recherchée(s):
6.
7. partner
8.
9. (!) --- Recherche registre
10.
11. ====== Fichier(s) (TC: Date de création, TM: Date de modification, DA, Dernier accès) ======
12.
13. "c:\_OTL\MovedFiles\09012010_180527\C_ProgramData\Partner\partner.exe" [ ----A---- | 110576 ]
14. TC: 28/08/2009,17:59:01 | TM: 28/08/2009,17:59:01 | DA: 28/08/2009,17:59:01
15.
16. =========================
17.
18. "c:\Users\yves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\VZ54KYFA\728x90-PartnerfeedV5[1].swf" [ ----A---- | 93246 ]
19. TC: 01/09/2010,20:41:05 | TM: 01/09/2010,20:41:10 | DA: 01/09/2010,20:41:05
20.
21. =========================
22.
23. "c:\Users\yves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8EZ7WZKE\partnerfeed[1].xml" [ ----A---- | 1630 ]
24. TC: 01/09/2010,20:41:15 | TM: 01/09/2010,20:41:15 | DA: 01/09/2010,20:41:15
25.
26. =========================
27.
28. "c:\Users\yves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\309FPGC7\partners_offers[1].htm" [ ----A---- | 5464 ]
29. TC: 01/09/2010,20:40:51 | TM: 01/09/2010,20:40:51 | DA: 01/09/2010,20:40:51
30.
31. =========================
32.
33. "c:\Users\All Users\Spybot - Search & Destroy\Recovery\PartnerBHO.zip" [ ----A---- | 565 ]
34. TC: 30/08/2009,22:43:15 | TM: 30/08/2009,22:43:15 | DA: 30/08/2009,22:43:15
35.
36. =========================
37.
38. "c:\Users\All Users\Spybot - Search & Destroy\Recovery\PartnerBHO1.zip" [ ----A---- | 612 ]
39. TC: 30/08/2009,22:43:15 | TM: 30/08/2009,22:43:15 | DA: 30/08/2009,22:43:15
40.
41. =========================
42.
43. "c:\Users\All Users\Spybot - Search & Destroy\Recovery\PartnerBHO10.zip" [ ----A---- | 592 ]
44. TC: 30/08/2009,22:43:16 | TM: 30/08/2009,22:43:16 | DA: 30/08/2009,22:43:16
45.
46. =========================
47.
48. "c:\Users\All Users\Spybot - Search & Destroy\Recovery\PartnerBHO11.zip" [ ----A---- | 548 ]
49. TC: 30/08/2009,22:43:16 | TM: 30/08/2009,22:43:16 | DA: 30/08/2009,22:43:16
50.
51. =========================
52.
53. "c:\Users\All Users\Spybot - Search & Destroy\Recovery\PartnerBHO12.zip" [ ----A---- | 612 ]
54. TC: 30/08/2009,22:43:16 | TM: 30/08/2009,22:43:16 | DA: 30/08/2009,22:43:16
55.
56. =========================
57.
58. "c:\Users\All Users\Spybot - Search & Destroy\Recovery\PartnerBHO2.zip" [ ----A---- | 549 ]
59. TC: 30/08/2009,22:43:15 | TM: 30/08/2009,22:43:15 | DA: 30/08/2009,22:43:15
60.
61. =========================
62.
63. "c:\Users\All Users\Spybot - Search & Destroy\Recovery\PartnerBHO3.zip" [ ----A---- | 568 ]
64. TC: 30/08/2009,22:43:16 | TM: 30/08/2009,22:43:16 | DA: 30/08/2009,22:43:16
65.
66. =========================
67.
68. "c:\Users\All Users\Spybot - Search & Destroy\Recovery\PartnerBHO4.zip" [ ----A---- | 568 ]
69. TC: 30/08/2009,22:43:16 | TM: 30/08/2009,22:43:16 | DA: 30/08/2009,22:43:16
70.
71. =========================
72.
73. "c:\Users\All Users\Spybot - Search & Destroy\Recovery\PartnerBHO5.zip" [ ----A---- | 546 ]
74. TC: 30/08/2009,22:43:16 | TM: 30/08/2009,22:43:16 | DA: 30/08/2009,22:43:16
75.
76. =========================
77.
78. "c:\Users\All Users\Spybot - Search & Destroy\Recovery\PartnerBHO6.zip" [ ----A---- | 548 ]
79. TC: 30/08/2009,22:43:16 | TM: 30/08/2009,22:43:16 | DA: 30/08/2009,22:43:16
80.
81. =========================
82.
83. "c:\Users\All Users\Spybot - Search & Destroy\Recovery\PartnerBHO7.zip" [ ----A---- | 573 ]
84. TC: 30/08/2009,22:43:16 | TM: 30/08/2009,22:43:16 | DA: 30/08/2009,22:43:16
85.
86. =========================
87.
88. "c:\Users\All Users\Spybot - Search & Destroy\Recovery\PartnerBHO8.zip" [ ----A---- | 661 ]
89. TC: 30/08/2009,22:43:16 | TM: 30/08/2009,22:43:16 | DA: 30/08/2009,22:43:16
90.
91. =========================
92.
93. "c:\Users\All Users\Spybot - Search & Destroy\Recovery\PartnerBHO9.zip" [ ----A---- | 595 ]
94. TC: 30/08/2009,22:43:16 | TM: 30/08/2009,22:43:16 | DA: 30/08/2009,22:43:16
95.
96. =========================
97.
98. "c:\Users\All Users\Partner\partner.dll" [ ----A---- | 157168 ]
99. TC: 28/08/2009,17:59:01 | TM: 28/08/2009,17:59:01 | DA: 28/08/2009,17:59:01
100.
101. =========================
102.
103. "c:\ProgramData\Spybot - Search & Destroy\Recovery\PartnerBHO.zip" [ ----A---- | 565 ]
104. TC: 30/08/2009,22:43:15 | TM: 30/08/2009,22:43:15 | DA: 30/08/2009,22:43:15
105.
106. =========================
107.
108. "c:\ProgramData\Spybot - Search & Destroy\Recovery\PartnerBHO1.zip" [ ----A---- | 612 ]
109. TC: 30/08/2009,22:43:15 | TM: 30/08/2009,22:43:15 | DA: 30/08/2009,22:43:15
110.
111. =========================
112.
113. "c:\ProgramData\Spybot - Search & Destroy\Recovery\PartnerBHO10.zip" [ ----A---- | 592 ]
114. TC: 30/08/2009,22:43:16 | TM: 30/08/2009,22:43:16 | DA: 30/08/2009,22:43:16
115.
116. =========================
117.
118. "c:\ProgramData\Spybot - Search & Destroy\Recovery\PartnerBHO11.zip" [ ----A---- | 548 ]
119. TC: 30/08/2009,22:43:16 | TM: 30/08/2009,22:43:16 | DA: 30/08/2009,22:43:16
120.
121. =========================
122.
123. "c:\ProgramData\Spybot - Search & Destroy\Recovery\PartnerBHO12.zip" [ ----A---- | 612 ]
124. TC: 30/08/2009,22:43:16 | TM: 30/08/2009,22:43:16 | DA: 30/08/2009,22:43:16
125.
126. =========================
127.
128. "c:\ProgramData\Spybot - Search & Destroy\Recovery\PartnerBHO2.zip" [ ----A---- | 549 ]
129. TC: 30/08/2009,22:43:15 | TM: 30/08/2009,22:43:15 | DA: 30/08/2009,22:43:15
130.
131. =========================
132.
133. "c:\ProgramData\Spybot - Search & Destroy\Recovery\PartnerBHO3.zip" [ ----A---- | 568 ]
134. TC: 30/08/2009,22:43:16 | TM: 30/08/2009,22:43:16 | DA: 30/08/2009,22:43:16
135.
136. =========================
137.
138. "c:\ProgramData\Spybot - Search & Destroy\Recovery\PartnerBHO4.zip" [ ----A---- | 568 ]
139. TC: 30/08/2009,22:43:16 | TM: 30/08/2009,22:43:16 | DA: 30/08/2009,22:43:16
140.
141. =========================
142.
143. "c:\ProgramData\Spybot - Search & Destroy\Recovery\PartnerBHO5.zip" [ ----A---- | 546 ]
144. TC: 30/08/2009,22:43:16 | TM: 30/08/2009,22:43:16 | DA: 30/08/2009,22:43:16
145.
146. =========================
147.
148. "c:\ProgramData\Spybot - Search & Destroy\Recovery\PartnerBHO6.zip" [ ----A---- | 548 ]
149. TC: 30/08/2009,22:43:16 | TM: 30/08/2009,22:43:16 | DA: 30/08/2009,22:43:16
150.
151. =========================
152.
153. "c:\ProgramData\Spybot - Search & Destroy\Recovery\PartnerBHO7.zip" [ ----A---- | 573 ]
154. TC: 30/08/2009,22:43:16 | TM: 30/08/2009,22:43:16 | DA: 30/08/2009,22:43:16
155.
156. =========================
157.
158. "c:\ProgramData\Spybot - Search & Destroy\Recovery\PartnerBHO8.zip" [ ----A---- | 661 ]
159. TC: 30/08/2009,22:43:16 | TM: 30/08/2009,22:43:16 | DA: 30/08/2009,22:43:16
160.
161. =========================
162.
163. "c:\ProgramData\Spybot - Search & Destroy\Recovery\PartnerBHO9.zip" [ ----A---- | 595 ]
164. TC: 30/08/2009,22:43:16 | TM: 30/08/2009,22:43:16 | DA: 30/08/2009,22:43:16
165.
166. =========================
167.
168. "c:\ProgramData\Partner\partner.dll" [ ----A---- | 157168 ]
169. TC: 28/08/2009,17:59:01 | TM: 28/08/2009,17:59:01 | DA: 28/08/2009,17:59:01
170.
171. =========================
172.
173. "d:\Ma musique\olu dara\Olu Dara - The Dirty Dozen Brass Band - Junko Partner.mp3" [ ----A---- | 3735387 ]
174. TC: 29/08/2009,18:00:35 | TM: 31/12/2005,18:47:14 | DA: 29/08/2009,18:00:35
175.
176. =========================
177.
178. ====== Dossier(s) (TC: Date de création, TM: Date de modification, DA, Dernier accès) ======
179.
180. "c:\_OTL\MovedFiles\09012010_180527\C_ProgramData\Partner" [ ----D---- ]
181. TC: 01/09/2010,18:05:27 | TM: 01/09/2010,18:05:27 | DA: 01/09/2010,18:05:27
182.
183. =========================
184.
185. "c:\Users\All Users\Partner" [ ----D---- ]
186. TC: 28/08/2009,17:59:01 | TM: 01/09/2010,18:05:27 | DA: 01/09/2010,18:05:27
187.
188. =========================
189.
190. "c:\ProgramData\Partner" [ ----D---- ]
191. TC: 28/08/2009,17:59:01 | TM: 01/09/2010,18:05:27 | DA: 01/09/2010,18:05:27
192.
193. =========================
194.
195.
196. ====== Entrée(s) du registre ======
197.
198.
199.
200. [HKEY_CLASSES_ROOT\AppID\{CE5AC9B5-9150-493f-9EEA-9C8A7C3DC841}]
201. "LocalService"="Partner Service"
202.
203. [HKEY_CLASSES_ROOT\Interface\{4D399130-DA47-430C-9563-E07028EB628B}]
204. ""="IWMPContentPartnerCallbackInternal"
205.
206. [HKEY_CLASSES_ROOT\Interface\{55455073-41B5-4e75-87B8-F13BDB291D08}]
207. ""="IWMPContentPartner"
208.
209. [HKEY_CLASSES_ROOT\Interface\{8f402a89-f4da-44fa-95d3-b0dd2b62413e}]
210. ""="IWMPContentPartnerEventsInternal"
211.
212. [HKEY_CLASSES_ROOT\Interface\{9E8F7DA2-0695-403c-B697-DA10FAFAA676}]
213. ""="IWMPContentPartnerCallback"
214.
215. [HKEY_CLASSES_ROOT\TypeLib\{780885F5-EFC3-4092-BD0E-FD9B8A08D315}\3.0\0\win32]
216. ""="C:\ProgramData\Partner\partner.exe"
217.
218. [HKEY_CLASSES_ROOT\TypeLib\{780885F5-EFC3-4092-BD0E-FD9B8A08D315}\3.0\HELPDIR]
219. ""="C:\ProgramData\Partner\"
220.
221. [HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Services\MusicType1VirginMegaFr]
222. "ContentPartner"="true"
223.
224. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{CE5AC9B5-9150-493f-9EEA-9C8A7C3DC841}]
225. "LocalService"="Partner Service"
226.
227. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4D399130-DA47-430C-9563-E07028EB628B}]
228. ""="IWMPContentPartnerCallbackInternal"
229.
230. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55455073-41B5-4e75-87B8-F13BDB291D08}]
231. ""="IWMPContentPartner"
232.
233. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8f402a89-f4da-44fa-95d3-b0dd2b62413e}]
234. ""="IWMPContentPartnerEventsInternal"
235.
236. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9E8F7DA2-0695-403c-B697-DA10FAFAA676}]
237. ""="IWMPContentPartnerCallback"
238.
239. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{780885F5-EFC3-4092-BD0E-FD9B8A08D315}\3.0\0\win32]
240. ""="C:\ProgramData\Partner\partner.exe"
241.
242. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{780885F5-EFC3-4092-BD0E-FD9B8A08D315}\3.0\HELPDIR]
243. ""="C:\ProgramData\Partner\"
244.
245. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SL\ReferralData\APPID\55c92734-d682-4d71-983e-d6ec3f16059f]
246. "PartnerId"=""
247.
248. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Partner Service]
249. "DisplayName"="Partner Service"
250.
251. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Partner Service]
252. "ImagePath"=""C:\ProgramData\Partner\partner.exe""
253.
254. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Partner Service]
255. "DisplayName"="Partner Service"
256.
257. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Partner Service]
258. "ImagePath"=""C:\ProgramData\Partner\partner.exe""
259.
260. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Partner Service]
261. "DisplayName"="Partner Service"
262.
263. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Partner Service]
264. "ImagePath"=""C:\ProgramData\Partner\partner.exe""
265.
266. [HKEY_USERS\S-1-5-21-2044548565-1414550612-3071512704-1000\Software\Microsoft\MediaPlayer\Services\MusicType1VirginMegaFr]
267. "ContentPartner"="true"
268.
269. =========================
270.
271. Fin à: 21:13:59 le 01/09/2010 ( E.O.F )

Salut

* Télécharge SEAF.exe de C_XX.

ICI >> SEAF.exe

* Utilisateurs Windows XP => double clique >>sur SEAF.exe
* Utilisateurs Windows Vista / windows 7 => clic droit "executer en tant que en tant qu'administrateur "sur SEAF.exe pour le lancer.

* Clique droit sur SEAF.exe et choisis Exécuter en tant qu'administrateur.
* Dans la fenêtre qui s'ouvre sous Entrer ci-dessous le/les occurrence(s) à rechercher ,
* tapes ou Copie/colle


partner


Coche la case Chercher également dans le registre puis clique sur Lancer la recherche.

IMAGE SEAF

Patiente le temps du scan sans rien toucher. Ça peut prendre plusieurs minutes.
* A la fin du scan, un rapport va s'afficher à l'écran.
Copie-colle tout son contenu dans ta prochaine réponse.



Membre Contributeur sécurité CCM
Windows Vista // Windows XP

re,

lien pour ZHP DIAG:

http://www.cijoint.fr/cjlink.php?file=cj201009/cij5FCMbqN.txt

a+

Salut

1) * télécharges et installes Ccleaner

* CCleaner est un utilitaire de nettoyage gratuit de la base de registre de Windows .
* Il permet de la vérifier et de l'optimiser en nettoyant les librairies dynamiques (DLL) inexistantes, les contrôles ActiveX, les raccourcis sans cible, les programmes obsolètes, classes invalides et les extensions de fichier inexistantes .

>> Ccleaner

* Une fois sur le bureau, clic sur l'install de CCleaner.
* Ensuite, clique sur Options ==> Avancé et décoche la case
* Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 24 heures
* Clique sur l'onglet ==> Nettoyeur puis sur ==>Lancer le Nettoyage.
* Ensuite clique sur l'icône==> Registre , à droite, clique sur ==>Chercher des erreurs" puis sur "Réparer les erreurs sélectionnées.
* Accepte la sauvegarde, de la BDR (base de registre )qu'il propose
* Je te conseille de le repasser au moins deux fois,(ou + jusqu'à qu'il ne trouve plus d'erreurs.)

2) Poste un nouveau ZHPDiag



Membre Contributeur sécurité CCM
Windows Vista // Windows XP

salut,

pour info, eo rezo ne s'incruste plus au démarrage depuis dimanche soir.

ci dessous dernier rapport:

All processes killed
========== FILES ==========
C:\ProgramData\Partner\partner.exe moved successfully.
C:\ProgramData\LauncherAccess.dt moved successfully.
C:\ProgramData\ntuser.pol moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

User: yves
->Temp folder emptied: 2256957 bytes
->Temporary Internet Files folder emptied: 494675551 bytes
->Flash cache emptied: 60947 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 5136 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 34597 bytes
RecycleBin emptied: 347319 bytes

Total Files Cleaned = 474,00 mb

OTL by OldTimer - Version 3.2.11.0 log created on 09012010_180527

Files\Folders moved on Reboot...
File\Folder C:\Users\yves\AppData\Local\Temp\~DF5167.tmp not found!
File\Folder C:\Users\yves\AppData\Local\Temp\~DF5172.tmp not found!
File\Folder C:\Users\yves\AppData\Local\Temp\~DF51CD.tmp not found!
File\Folder C:\Users\yves\AppData\Local\Temp\~DF51D8.tmp not found!
File\Folder C:\Users\yves\AppData\Local\Temp\~DF5214.tmp not found!
File\Folder C:\Users\yves\AppData\Local\Temp\~DF521F.tmp not found!
C:\Users\yves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ZXSK8CXU\ads[5].htm moved successfully.
C:\Users\yves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ZXSK8CXU\connect[2].htm moved successfully.
C:\Users\yves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ZXSK8CXU\controller[8].htm moved successfully.
C:\Users\yves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ZXSK8CXU\lci_tf1_fr[2].htm moved successfully.
C:\Users\yves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\WSUTCA9S\eurosport_fr[1].htm moved successfully.
C:\Users\yves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\UPQNJFG6\ads[7].htm moved successfully.
C:\Users\yves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OJO9KQHB\ads[9].htm moved successfully.
C:\Users\yves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\K94A5AUS\5137255[1].mp4 moved successfully.
C:\Users\yves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\K94A5AUS\5137255[2].mp4 moved successfully.
C:\Users\yves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\K94A5AUS\default[2].htm moved successfully.
C:\Users\yves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\COQ26GOY\connect[1].htm moved successfully.
C:\Users\yves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\BDHDEJGJ\affich-19011396-supprimer-eo-rezo[2].htm moved successfully.
C:\Users\yves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully.
File\Folder C:\Users\yves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\fla3F6E.tmp not found!
File\Folder C:\Users\yves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\flaDECC.tmp not found!
File\Folder C:\Users\yves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\flaDFC6.tmp not found!
C:\Users\yves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\MSIMGSIZ.DAT moved successfully.
C:\Users\yves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\SuggestedSites.dat moved successfully.
File move failed. C:\Windows\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

Salut CREQUI

* relançe OTL

* Utilisateurs Windows XP => double clique >>sur OTL.exe
* Utilisateurs Windows Vista / windows 7 => clic droit "executer en tant que en tant qu'administrateur "sur OTL.exe pour le lancer.

*Copies et colles le contenue de cette citation(en commençant bien à :files , les : inclus) dans la partie inférieure d'OTL sous "Personalisation"



:OTL
SRV - (Partner Service) -- C:\ProgramData\Partner\partner.exe (Google Inc.)
O4 - HKU\S-1-5-21-2044548565-1414550612-3071512704-1000..\Run: [swg] C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)

:Files
C:\ProgramData\Partner\Partner.exe
C:\ProgramData\LauncherAccess.dt
C:\ProgramData\ntuser.pol

:commands
[emptytemp]
[reboot]



* cette fois ci clic CORRECTION:pour lancer la suppression.
» un rapport apparrait au redemarrage du pc , c/c son contenu dans ta prochaine reponse.

désolé du contre temps

tout refais, lien ci dessous

a+

http://www.cijoint.fr/cjlink.php?file=cj201008/cijbuyxdzq.txt

Re

manque la fin du rapport

refais

* Héberge le rapport sur ce site,
>> Cijoint.fr
* puis copie/colle le lien fourni dans ta prochaine réponse sur le forum.

* Pour t aider ,pour heberger le rapport
* rends toi sur Cijoint.fr
* clic sur Parcourir
* trouve >> le rapport que tu viens d'enregistrer qui doit par exemple être sur ton bureau
* et valide en cliquant sur >> Cliquez ici pour déposer le Fichier
* un lien de ce genre http://www.cijoint.fr/cjlink.php?file=cj201004/cijecaEGX.txt te sera généré,
* il te suffit de le poster ici pour que je puisse voir le rapport

Bonjour, et mes excuses pour cette interruption, j'ai du partir en déplacement ces 2 derniers jours.

ci dessous copie du rapport OTL TXT.

A+

OTL logfile created on: 31/08/2010 19:57:17 - Run 3
OTL by OldTimer - Version 3.2.11.0 Folder = C:\Users\yves\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18943)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

6,00 Gb Total Physical Memory | 4,00 Gb Available Physical Memory | 65,00% Memory free
12,00 Gb Paging File | 10,00 Gb Available in Paging File | 83,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 342,02 Gb Total Space | 198,05 Gb Free Space | 57,91% Space Free | Partition Type: NTFS
Drive D: | 341,97 Gb Total Space | 100,02 Gb Free Space | 29,25% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: PC-DE-YVES
Current User Name: yves
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - C:\Users\yves\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe (Google Inc.)
PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10h_ActiveX.exe (Adobe Systems, Inc.)
PRC - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe (Nokia)
PRC - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
PRC - C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe (Nokia)
PRC - C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
PRC - C:\Program Files\Alwil Software\Avast4\ashServ.exe (ALWIL Software)
PRC - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe (ALWIL Software)
PRC - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe (ALWIL Software)
PRC - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (ALWIL Software)
PRC - C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia)
PRC - C:\Program Files (x86)\PC Connectivity Solution\Transports\NclRSSrv.exe (Nokia)
PRC - C:\Program Files (x86)\Neuf\Kit\9props.exe (SFR)
PRC - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
PRC - C:\Program Files (x86)\Hercules\WiFiStationN\WiFiN.exe ()
PRC - C:\Windows\SysWOW64\HerculesWiFiService.exe (Guillemot Corporation)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
PRC - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe (NewTech Infosystems, Inc.)
PRC - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe (Egis Incorporated)
PRC - C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe (CyberLink)
PRC - C:\Windows\SysWOW64\IoctlSvc.exe (Prolific Technology Inc.)

[color=#E56717]========== Modules (SafeList) ==========[/color]

MOD - C:\Users\yves\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\SysWOW64\msscript.ocx (Microsoft Corporation)

[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - (UxTuneUp) -- C:\Windows\SysNative\uxtuneup.dll (TuneUp Software)
SRV:[b]64bit:[/b] - (avast! Antivirus) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe (ALWIL Software)
SRV:[b]64bit:[/b] - (avast! Mail Scanner) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe (ALWIL Software)
SRV:[b]64bit:[/b] - (avast! Web Scanner) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe (ALWIL Software)
SRV:[b]64bit:[/b] - (aswUpdSv) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (ALWIL Software)
SRV:[b]64bit:[/b] - (wlidsvc) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation)
SRV:[b]64bit:[/b] - (Ati External Event Utility) -- C:\Windows\SysNative\Ati2evxx.exe (ATI Technologies Inc.)
SRV:[b]64bit:[/b] - (ETService) -- C:\Program Files\Acer\Empowering Technology\Service\ETService.exe ()
SRV:[b]64bit:[/b] - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (TuneUp.Defrag) -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe (TuneUp Software)
SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe (TuneUp Software)
SRV - (UxTuneUp) -- C:\Windows\SysWOW64\uxtuneup.dll (TuneUp Software)
SRV - (ServiceLayer) -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe (Nokia)
SRV - (WPFFontCache_v0400) -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_64) -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (ACDaemon) -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
SRV - (FLEXnet Licensing Service) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.)
SRV - (Partner Service) -- C:\ProgramData\Partner\partner.exe (Google Inc.)
SRV - (HerculesWiFi) -- C:\Windows\SysWOW64\HerculesWiFiService.exe (Guillemot Corporation)
SRV - (SBSDWSCService) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
SRV - (NTISchedulerSvc) -- C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe (NewTech Infosystems, Inc.)
SRV - (NTIBackupSvc) -- C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe (NewTech InfoSystems, Inc.)
SRV - (eDataSecurity Service) -- C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe (Egis Incorporated)
SRV - (Acer HomeMedia Connect Service) -- C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe (CyberLink)
SRV - (PLFlash DeviceIoControl Service) -- C:\Windows\SysWOW64\IoctlSvc.exe (Prolific Technology Inc.)

[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - (upperdev) -- C:\Windows\SysNative\DRIVERS\usbser_lowerfltx64.sys File not found
DRV:[b]64bit:[/b] - (NwlnkFwd) -- C:\Windows\SysNative\DRIVERS\nwlnkfwd.sys File not found
DRV:[b]64bit:[/b] - (NwlnkFlt) -- C:\Windows\SysNative\DRIVERS\nwlnkflt.sys File not found
DRV:[b]64bit:[/b] - (IpInIp) -- C:\Windows\SysNative\DRIVERS\ipinip.sys File not found
DRV:[b]64bit:[/b] - (HTCAND64) -- C:\Windows\SysNative\Drivers\ANDROIDUSB.sys File not found
DRV:[b]64bit:[/b] - (aswFsBlk) -- C:\Windows\SysNative\DRIVERS\aswFsBlk.sys (ALWIL Software)
DRV:[b]64bit:[/b] - (aswMonFlt) -- C:\Windows\SysNative\DRIVERS\aswMonFlt.sys (ALWIL Software)
DRV:[b]64bit:[/b] - (WpdUsb) -- C:\Windows\SysNative\DRIVERS\wpdusb.sys (Microsoft Corporation)
DRV:[b]64bit:[/b] - (RTL8192su) -- C:\Windows\SysNative\DRIVERS\RTL8192su.sys (Realtek Semiconductor Corporation )
DRV:[b]64bit:[/b] - (RTSTOR) -- C:\Windows\SysNative\drivers\RTSTOR64.SYS (Realtek Semiconductor Corp.)
DRV:[b]64bit:[/b] - (atikmdag) -- C:\Windows\SysNative\DRIVERS\atikmdag.sys (ATI Technologies Inc.)
DRV:[b]64bit:[/b] - (pccsmcfd) -- C:\Windows\SysNative\DRIVERS\pccsmcfdx64.sys (Nokia)
DRV:[b]64bit:[/b] - (psdvdisk) -- C:\Windows\SysNative\DRIVERS\PSDVdisk.sys (Egis Incorporated)
DRV:[b]64bit:[/b] - (PSDNServ) -- C:\Windows\SysNative\DRIVERS\PSDNServ.sys (Egis Incorporated)
DRV:[b]64bit:[/b] - (PSDFilter) -- C:\Windows\SysNative\DRIVERS\psdfilter.sys (Egis Incorporated)
DRV:[b]64bit:[/b] - (PxHlpa64) -- C:\Windows\SysNative\Drivers\PxHlpa64.sys (Sonic Solutions)
DRV:[b]64bit:[/b] - (e1yexpress) Intel(R) -- C:\Windows\SysNative\DRIVERS\e1y60x64.sys (Intel Corporation)
DRV:[b]64bit:[/b] - (NAL) -- C:\Windows\SysNative\Drivers\iqvw64e.sys (Intel Corporation )
DRV:[b]64bit:[/b] - (gwfilt64) -- C:\Windows\SysNative\drivers\gwfilt64.sys (Creative Technology Ltd.)
DRV:[b]64bit:[/b] - (netr28x) -- C:\Windows\SysNative\DRIVERS\netr28x.sys (Ralink Technology, Corp.)
DRV:[b]64bit:[/b] - (NTIDrvr) -- C:\Windows\SysNative\Drivers\NTIDrvr.sys (NewTech Infosystems, Inc.)
DRV:[b]64bit:[/b] - (usbio) -- C:\Windows\SysNative\Drivers\dsiarhwprog_x64.sys (Thesycon GmbH, Germany)
DRV:[b]64bit:[/b] - (ActionReplayDS) -- C:\Windows\SysNative\Drivers\ActionReplayDS_x64.sys (Thesycon GmbH, Germany)
DRV:[b]64bit:[/b] - (Ntfs) -- C:\Windows\SysNative\Wbem\ntfs.mof ()
DRV:[b]64bit:[/b] - (iaStor) -- C:\Windows\SysNative\DRIVERS\iaStor.sys (Intel Corporation)
DRV - (TuneUpUtilitiesDrv) -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys (TuneUp Software)
DRV - (StarOpen) -- C:\Windows\SysWow64\drivers\StarOpen.sys ()
DRV - (int15) -- C:\Windows\SysWOW64\drivers\int15_64.sys (Acer, Inc.)

[color=#E56717]========== Standard Registry (SafeList) ==========[/color]

[color=#E56717]========== Internet Explorer ==========[/color]

IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=1&o=vp64&d=0609&m=aspire_m7720
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=1&o=vp64&d=0609&m=aspire_m7720
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr

IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=1&o=vp64&d=0609&m=aspire_m7720
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=1&o=vp64&d=0609&m=aspire_m7720
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=1&o=vp64&d=0609&m=aspire_m7720
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=1&o=vp64&d=0609&m=aspire_m7720
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-2044548565-1414550612-3071512704-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = https://www.acer.com/worldwide/selection.html [binary data]
IE - HKU\S-1-5-21-2044548565-1414550612-3071512704-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\S-1-5-21-2044548565-1414550612-3071512704-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = https://www.lci.fr/#http://www.eurosport.fr/ [binary data]
IE - HKU\S-1-5-21-2044548565-1414550612-3071512704-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.sfr.fr/
IE - HKU\S-1-5-21-2044548565-1414550612-3071512704-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = https://www.msn.com/fr-fr?ocid=iehp
IE - HKU\S-1-5-21-2044548565-1414550612-3071512704-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr
IE - HKU\S-1-5-21-2044548565-1414550612-3071512704-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = D0 1A 40 64 A0 4A CA 01 [binary data]
IE - HKU\S-1-5-21-2044548565-1414550612-3071512704-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-2044548565-1414550612-3071512704-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2044548565-1414550612-3071512704-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

FF - HKLM\software\mozilla\Firefox\Extensions\\{B728AB94-9BC7-49b7-B76A-422BB31B2FD0}: C:\Program Files (x86)\ArcSoft\Media Converter for Philips\Internet Video Downloader\Plugin_FireFox [2009/11/28 23:05:14 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\SpiderMessengerHelper@spidermessenger.com:

O1 HOSTS File: ([2010/08/25 18:09:32 | 000,416,917 | R--- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 14391 more lines...
O2:[b]64bit:[/b] - BHO: (ShowBarObj Class) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\ActiveToolBand.dll (Egis)
O2:[b]64bit:[/b] - BHO: (Programme d'aide de l'Assistant de connexion Windows Live ID) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2:[b]64bit:[/b] - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:[b]64bit:[/b] - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg64.dll (Google Inc.)
O2 - BHO: (Objet d'aide à la navigation SFR) - {0F6E720A-1A6B-40E1-A294-1D4D19F156C8} - C:\Program Files (x86)\Neuf\Kit\SFRNavErrorHelper.dll (SFR)
O2 - BHO: (IEPlugin Class) - {11222041-111B-46E3-BD29-EFB2449479B1} - C:\Program Files (x86)\ArcSoft\Media Converter for Philips\Internet Video Downloader\ArcURLRecord.dll (ArcSoft, Inc.)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll (Google Inc.)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDStoolbar.dll (Egis Incorporated.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
O3:[b]64bit:[/b] - HKU\S-1-5-21-2044548565-1414550612-3071512704-1000\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDStoolbar.dll (Egis Incorporated.)
O3 - HKU\S-1-5-21-2044548565-1414550612-3071512704-1000\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
O3:[b]64bit:[/b] - HKU\S-1-5-21-2044548565-1414550612-3071512704-1000\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKU\S-1-5-21-2044548565-1414550612-3071512704-1000\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Windows\RAVCpl64.exe (Realtek Semiconductor)
O4:[b]64bit:[/b] - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [NokiaMServer] C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe (Nokia)
O4 - HKLM..\Run: [NokiaMusic FastStart] C:\Program Files (x86)\Nokia\Ovi Player\NokiaOviPlayer.exe (Nokia)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-2044548565-1414550612-3071512704-1000..\Run: [CAHeadless] C:\Program Files (x86)\Adobe\Elements Organizer 8.0\CAHeadless\ElementsAutoAnalyzer.exe (Adobe Systems Incorporated)
O4 - HKU\S-1-5-21-2044548565-1414550612-3071512704-1000..\Run: [Connexion SFR 9props.exe] C:\Program Files (x86)\Neuf\Kit\9props.exe (SFR)
O4 - HKU\S-1-5-21-2044548565-1414550612-3071512704-1000..\Run: [PC Suite Tray] C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia)
O4 - HKU\S-1-5-21-2044548565-1414550612-3071512704-1000..\Run: [swg] C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8:[b]64bit:[/b] - Extra context menu item: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll (Google Inc.)
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll (Google Inc.)
O9 - Extra Button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.0.cab (DLM Control)
O16 - DPF: {72376E32-8AF2-473F-BE32-E5D0F39C865D} http://fr.cyberlink.com/prog/win7/js/UpdateAdvisor.cab (CUpdateAdvisorCtrl Object)
O16 - DPF: {8FD07749-EFFA-48C6-947C-45A8D7BF422F} http://fr.cyberlink.com/prog/vista/prog/CLVistaGenie.cab (CLVistaGenie Control)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E1342154-4889-42B5-BEF6-19237577048F} http://acerdtfr.oberon-media.com/online/online2/zuma/oberongamesloader.cab (OberongamesLoader Object)
O16 - DPF: {E1E73B44-2D20-47A9-9CA2-B534CEBBF856} https://www.sfr.fr/cas/login?service=https%3A%2F%2Fsecurite.sfr.fr%2Fadmin%2F (F-Secure Health Check 1.0)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18:[b]64bit:[/b] - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\yves\AppData\Roaming\Microsoft\Windows Photo Gallery\Papier peint de la Galerie de photos Windows.jpg
O24 - Desktop BackupWallPaper: C:\Users\yves\AppData\Roaming\Microsoft\Windows Photo Gallery\Papier peint de la Galerie de photos Windows.jpg
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{8261b551-b580-11de-a871-002268685118}\Shell\AutoRun\command - "" = C:\Windows\SysWow64\setupSNK.exe -- [2008/01/21 04:47:35 | 000,013,312 | ---- | M] (Microsoft Corporation)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs:[b]64bit:[/b] UxTuneUp - C:\Windows\SysNative\uxtuneup.dll (TuneUp Software)

SafeBootMin:[b]64bit:[/b] AppMgmt - Service
SafeBootMin:[b]64bit:[/b] Base - Driver Group
SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
SafeBootMin:[b]64bit:[/b] File system - Driver Group
SafeBootMin:[b]64bit:[/b] Filter - Driver Group
SafeBootMin:[b]64bit:[/b] HelpSvc - Service
SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
SafeBootMin:[b]64bit:[/b] sacsvr - Service
SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet:[b]64bit:[/b] AppMgmt - Service
SafeBootNet:[b]64bit:[/b] Base - Driver Group
SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
SafeBootNet:[b]64bit:[/b] File system - Driver Group
SafeBootNet:[b]64bit:[/b] Filter - Driver Group
SafeBootNet:[b]64bit:[/b] HelpSvc - Service
SafeBootNet:[b]64bit:[/b] Messenger - Service
SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
SafeBootNet:[b]64bit:[/b] Network - Driver Group
SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
SafeBootNet:[b]64bit:[/b] sacsvr - Service
SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] TDI - Driver Group
SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WudfPf - Driver
SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: WudfPf - Driver
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX:[b]64bit:[/b] {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} -
ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0
ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:[b]64bit:[/b] {44BBA848-CC51-11CF-AAFA-00AA00B6015C} -
ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:[b]64bit:[/b] {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:[b]64bit:[/b] {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX:[b]64bit:[/b] >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX:[b]64bit:[/b] >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {320EC808-46E8-B015-C3F8-B654F648A1E2} - Offline Browsing Pack
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {441144B3-C50B-5DEB-73AF-6FC150F1759A} - Themes Setup
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {AE5C8F7F-5C2B-DB3B-991D-F21CA4F1437D} - Microsoft Windows Media Player
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP

Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2010/08/29 21:13:51 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Users\yves\Desktop\OTL.exe
[2010/08/29 19:08:20 | 000,000,000 | ---D | C] -- C:\Users\yves\AppData\Roaming\Malwarebytes
[2010/08/29 19:08:14 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010/08/29 19:08:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010/08/29 19:08:12 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2010/08/29 19:08:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2010/08/29 17:43:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ZHPDiag
[2010/08/29 14:25:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ad-Remover
[2010/08/11 04:21:43 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rtutils.dll
[2010/08/11 04:21:43 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rtutils.dll
[2010/08/11 04:20:57 | 000,081,920 | ---- | C] (Radius Inc.) -- C:\Windows\SysWow64\iccvid.dll
[2010/08/11 04:20:56 | 004,697,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2010/08/11 04:20:31 | 002,335,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iertutil.dll
[2010/08/11 04:20:29 | 001,538,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2010/08/11 04:20:29 | 001,469,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2010/08/11 04:20:29 | 000,706,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2010/08/11 04:20:29 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll
[2010/08/11 04:20:29 | 000,252,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2010/08/11 04:20:29 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
[2010/08/11 04:20:29 | 000,219,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2010/08/11 04:20:29 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2010/08/11 04:20:29 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2010/08/11 04:20:29 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ie4uinit.exe
[2010/08/11 04:20:29 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2010/08/11 04:20:29 | 000,162,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2010/08/11 04:20:29 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2010/08/11 04:20:29 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2010/08/11 04:20:29 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2010/08/11 04:20:29 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2010/08/11 04:20:29 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2010/08/11 04:20:29 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2010/08/11 04:20:29 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2010/08/11 04:20:29 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2010/08/11 04:20:29 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2010/08/11 04:20:29 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2010/08/09 12:41:45 | 000,000,000 | ---D | C] -- C:\Users\yves\AppData\Local\freecompressor Air
[2010/08/09 12:41:40 | 000,000,000 | ---D | C] -- C:\Users\yves\AppData\Roaming\freeCompressor
[2010/08/09 12:41:37 | 000,000,000 | ---D | C] -- C:\Users\yves\AppData\Roaming\FissaSearch
[2010/08/09 12:41:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FreeCompressor
[2010/08/09 12:41:22 | 000,000,000 | ---D | C] -- C:\Users\yves\AppData\Roaming\OfferBox
[2010/08/07 15:58:15 | 000,053,544 | ---- | C] (Guillemot Corporation) -- C:\Windows\SysWow64\HerculesWiFiService.exe
[2010/08/07 15:57:19 | 000,589,824 | ---- | C] (Realtek Semiconductor Corporation ) -- C:\Windows\SysNative\drivers\RTL8192su.sys
[2010/08/07 15:57:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Hercules
[2010/02/19 21:45:52 | 013,711,432 | ---- | C] (Macrovision Corporation) -- C:\Users\yves\AppData\Roaming\sa1ops08k_02_pal_eng.exe
[2009/01/11 11:51:31 | 000,049,152 | R--- | C] ( ) -- C:\Windows\Interop.IWshRuntimeLibrary.dll

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2010/08/31 19:58:33 | 009,175,040 | -HS- | M] () -- C:\Users\yves\ntuser.dat
[2010/08/31 19:42:21 | 001,527,712 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010/08/31 19:42:21 | 000,689,886 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat
[2010/08/31 19:42:21 | 000,607,028 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010/08/31 19:42:21 | 000,130,688 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat
[2010/08/31 19:42:21 | 000,108,106 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010/08/31 19:37:47 | 000,000,069 | ---- | M] () -- C:\Windows\NeroDigital.ini
[2010/08/31 19:37:39 | 000,000,442 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{99589185-CF8F-4C6B-9C06-F4EDC6DDFA2F}.job
[2010/08/31 19:36:36 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\LogConfigTemp.xml
[2010/08/31 19:36:32 | 000,001,062 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/08/31 19:36:25 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010/08/31 19:36:24 | 000,003,216 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/08/31 19:36:24 | 000,003,216 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/08/31 19:36:20 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010/08/29 22:15:36 | 000,524,288 | -HS- | M] () -- C:\Users\yves\ntuser.dat{d9276d23-6fed-11df-bff7-002268685118}.TMContainer00000000000000000001.regtrans-ms
[2010/08/29 22:15:36 | 000,065,536 | -HS- | M] () -- C:\Users\yves\ntuser.dat{d9276d23-6fed-11df-bff7-002268685118}.TM.blf
[2010/08/29 22:15:34 | 002,453,304 | -H-- | M] () -- C:\Users\yves\AppData\Local\IconCache.db
[2010/08/29 21:23:09 | 000,001,066 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/08/29 21:13:52 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\yves\Desktop\OTL.exe
[2010/08/29 19:08:16 | 000,000,852 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/08/29 17:54:37 | 000,017,836 | ---- | M] () -- C:\Users\yves\Desktop\HYP.xlsx
[2010/08/29 17:43:51 | 000,000,829 | ---- | M] () -- C:\Users\Public\Desktop\ZHPFix.lnk
[2010/08/29 17:43:50 | 000,000,834 | ---- | M] () -- C:\Users\Public\Desktop\ZHPDiag.lnk
[2010/08/29 14:25:44 | 000,001,734 | ---- | M] () -- C:\Users\yves\Desktop\AD-R.lnk
[2010/08/28 22:18:14 | 616,540,260 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2010/08/28 17:56:33 | 000,061,440 | ---- | M] () -- C:\Users\yves\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/08/25 22:01:30 | 000,001,921 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010/08/25 18:09:32 | 000,416,917 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2010/08/25 18:04:00 | 003,199,558 | ---- | M] () -- C:\Users\yves\Desktop\passe.zip
[2010/08/24 18:13:55 | 000,001,196 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
[2010/08/24 18:13:54 | 000,001,081 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Photoshop Elements 2.0.lnk
[2010/08/18 18:49:03 | 000,416,853 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.20100825-180932.backup
[2010/08/12 03:09:07 | 002,329,072 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010/08/11 20:26:45 | 000,416,646 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.20100818-184903.backup
[2010/08/08 20:52:40 | 000,001,927 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp Maintenance en 1 clic.lnk
[2010/08/08 20:52:40 | 000,001,907 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp Utilities.lnk
[2010/08/08 19:21:00 | 099,136,973 | ---- | M] () -- C:\Users\yves\Desktop\100% Musique - Karim Amari - Shruti.zip
[2010/08/07 15:58:15 | 000,001,908 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WiFi Station N.lnk
[2010/08/07 15:58:15 | 000,001,884 | ---- | M] () -- C:\Users\Public\Desktop\WiFi Station N.lnk
[2010/08/06 21:28:00 | 000,415,906 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.20100811-202645.backup

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2010/08/29 19:08:16 | 000,000,852 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/08/29 17:43:51 | 000,000,829 | ---- | C] () -- C:\Users\Public\Desktop\ZHPFix.lnk
[2010/08/29 17:43:50 | 000,000,834 | ---- | C] () -- C:\Users\Public\Desktop\ZHPDiag.lnk
[2010/08/29 14:25:44 | 000,001,734 | ---- | C] () -- C:\Users\yves\Desktop\AD-R.lnk
[2010/08/25 18:04:00 | 003,199,558 | ---- | C] () -- C:\Users\yves\Desktop\passe.zip
[2010/08/24 18:13:55 | 000,001,196 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
[2010/08/24 18:13:54 | 000,001,081 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Photoshop Elements 2.0.lnk
[2010/08/08 19:20:59 | 099,136,973 | ---- | C] () -- C:\Users\yves\Desktop\100% Musique - Karim Amari - Shruti.zip
[2010/08/07 15:58:15 | 000,001,908 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WiFi Station N.lnk
[2010/08/07 15:58:15 | 000,001,884 | ---- | C] () -- C:\Users\Public\Desktop\WiFi Station N.lnk
[2009/10/31 22:33:48 | 000,434,146 | ---- | C] () -- C:\Users\yves\AppData\Local\dd_vcredistMSI572C.txt
[2009/10/31 22:33:48 | 000,145,114 | ---- | C] () -- C:\Users\yves\AppData\Local\dd_vcredistUI572C.txt
[2009/10/31 19:54:19 | 000,038,438 | ---- | C] () -- C:\Users\yves\AppData\Roaming\Valeurs séparées par une virgule (Windows).ADR
[2009/10/28 19:48:10 | 000,000,000 | ---- | C] () -- C:\Windows\DbgOut.INI
[2009/10/25 16:27:18 | 001,507,960 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2009/10/21 19:00:55 | 000,000,085 | ---- | C] () -- C:\Users\yves\AppData\Roaming\default.pls
[2009/10/18 13:20:23 | 000,000,680 | ---- | C] () -- C:\Users\yves\AppData\Local\d3d9caps.dat
[2009/10/11 14:58:07 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2009/10/10 11:05:59 | 000,007,867 | ---- | C] () -- C:\Windows\Irremote.ini
[2009/09/11 21:23:43 | 000,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll
[2009/09/11 21:23:03 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009/09/06 18:18:33 | 000,023,888 | ---- | C] () -- C:\Users\yves\AppData\Roaming\UserTile.png
[2009/09/04 22:44:42 | 000,000,290 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2009/08/29 11:38:49 | 000,000,424 | ---- | C] () -- C:\Windows\MAXLINK.INI
[2009/08/29 09:45:50 | 000,000,000 | ---- | C] () -- C:\ProgramData\LauncherAccess.dt
[2009/08/29 09:34:54 | 000,005,632 | ---- | C] () -- C:\Windows\SysWow64\drivers\StarOpen.sys
[2009/08/28 18:13:39 | 000,061,440 | ---- | C] () -- C:\Users\yves\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/06/29 22:37:22 | 000,000,044 | ---- | C] () -- C:\Windows\Acer(Normal).ini
[2009/06/29 22:37:22 | 000,000,042 | ---- | C] () -- C:\Windows\Acer(Wide).ini
[2008/01/21 04:50:05 | 000,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini

[color=#E56717]========== LOP Check ==========[/color]

[2009/11/14 19:50:25 | 000,000,000 | -HSD | M] -- C:\Users\yves\AppData\Roaming\.#
[2009/08/30 16:50:31 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Acer Arcade Live
[2009/06/29 22:28:19 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Acer GameZone Console
[2009/08/30 16:57:40 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Acer HomeMedia Connect
[2009/08/29 11:47:07 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Blitware
[2010/06/12 10:09:22 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Canon
[2010/01/01 23:16:20 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\CD-LabelPrint
[2009/08/28 18:01:52 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\eSobi
[2010/08/09 12:41:37 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\FissaSearch
[2010/08/09 12:41:41 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\freeCompressor
[2009/09/01 22:21:05 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Go Go Gourmet
[2010/01/10 13:05:56 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Icones
[2009/09/08 22:52:22 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Meridian93
[2009/12/11 23:30:44 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\No Company Name
[2010/02/06 12:26:54 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Nokia
[2010/08/21 09:55:01 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\OfferBox
[2010/02/04 19:59:57 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\PC Suite
[2009/11/28 23:09:13 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Philips
[2009/08/30 16:50:29 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\PowerCinema
[2009/11/17 23:16:26 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Samsung
[2009/08/29 11:38:46 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\ScanSoft
[2010/03/28 16:05:59 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Teleca
[2010/01/29 21:56:20 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\TuneUp Software
[2009/08/29 21:24:49 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Windows Live Writer
[2010/03/25 23:03:11 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Zylom
[2010/08/29 22:15:37 | 000,032,616 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2010/08/31 19:37:39 | 000,000,442 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{99589185-CF8F-4C6B-9C06-F4EDC6DDFA2F}.job

[color=#E56717]========== Purity Check ==========[/color]

[color=#E56717]========== Custom Scans ==========[/color]

[color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*. >[/color]

[color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*.exe /s >[/color]

[color=#A23BEC]< %APPDATA%\*. >[/color]
[2009/11/14 19:50:25 | 000,000,000 | -HSD | M] -- C:\Users\yves\AppData\Roaming\.#
[2009/08/30 16:50:31 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Acer Arcade Live
[2009/06/29 22:28:19 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Acer GameZone Console
[2009/08/30 16:57:40 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Acer HomeMedia Connect
[2010/08/24 18:15:09 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Adobe
[2010/05/18 18:12:39 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Apple Computer
[2009/12/11 23:54:09 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\ArcSoft
[2009/08/28 17:59:51 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\ATI
[2009/08/30 21:58:58 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\AVS4YOU
[2009/08/29 11:47:07 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Blitware
[2010/08/07 17:18:32 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\CameraWindowDC
[2010/06/12 10:09:22 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Canon
[2010/05/03 22:11:57 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\CANON INC
[2010/01/01 23:16:20 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\CD-LabelPrint
[2009/11/07 17:48:54 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\CyberLink
[2009/12/20 10:42:41 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Download Manager
[2009/12/22 19:48:04 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\dvdcss
[2009/08/28 18:01:52 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\eSobi
[2010/08/09 12:41:37 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\FissaSearch
[2010/08/09 12:41:41 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\freeCompressor
[2009/09/01 22:21:05 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Go Go Gourmet
[2009/08/28 20:06:01 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Google
[2010/01/10 13:05:56 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Icones
[2010/03/25 23:03:11 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Identities
[2009/11/28 23:01:38 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\InstallShield
[2009/08/28 17:59:48 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Macromedia
[2010/08/29 19:08:20 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Malwarebytes
[2006/11/02 17:07:25 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Media Center Programs
[2009/09/08 22:52:22 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Meridian93
[2010/05/15 10:04:14 | 000,000,000 | --SD | M] -- C:\Users\yves\AppData\Roaming\Microsoft
[2009/10/10 11:06:07 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Nero
[2009/12/11 23:30:44 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\No Company Name
[2010/02/06 12:26:54 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\Nokia
[2010/08/21 09:55:01 | 000,000,000 | ---D | M] -- C:\Users\yves\AppData\Roaming\OfferBox
[2010/02/04 19:59:57 | 000,000,000 | ---D | M] -- C:\Users\

Salut

* relançe OTL

* Utilisateurs Windows XP => double clique >>sur OTL.exe
* Utilisateurs Windows Vista / windows 7 => clic droit "executer en tant que en tant qu'administrateur "sur OTL.exe pour le lancer.

coches les cases lop & purity check ainsi que en haut all users et minimal output

Copies et colles le contenue de cette citation dans la partie inférieure d'OTL sous "Personalisation":


netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
CREATERESTOREPOINT


* Cliques sur l'icône "Analyse" (en haut à gauche) .
* Laisse le scan aller à son terme sans te servir du PC
* A la fin du scan un ou deux rapports vont s'ouvrir "OTL.Txt" et ( ou ) "Extras.Txt"( dans certains cas).
* Copie et colle le contenu de OTL.Txt dans ta prochaine réponse

ET LIEN POUR FICHIER OTL ...

http://www.cijoint.fr/cjlink.php?file=cj201008/cijL8l0S4X.txt

re,

lien por fichier EXTRAS

http://www.cijoint.fr/cjlink.php?file=cj201008/cijL8l0S4X.txt

re,

rapport analyse rapide:

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Version de la base de données: 4503

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18943

29/08/2010 21:02:36
mbam-log-2010-08-29 (21-02-36).txt

Type d'examen: Examen rapide
Elément(s) analysé(s): 141927
Temps écoulé: 3 minute(s), 6 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)