Vista bloqué par SECURITY SPHERE 2012

salut pour avancer :

y'a rien à jour dans ce pc !!

internet explorer pas à jour => à faire
mozilla pas à jour => à faire
desinstalle adobe reader 8
desinstalle toutes tes versions de java
desinstalle NCH toolbar
open office pas à jour => à faire
desinstalle offferbox
desinstalle opencandy

====

t'as plus assez de place sur ton disque libère 20 Go

====

comme il t'avait été conseillé, desinstalle Spybot c'est un veau , ad-aware , meme chose

====

sélectionne les lignes ci-dessous et copie les dans le Presse-papier (Ctrl C)

M3 - MFPP: Plugins - [Barret] -- C:\Program Files\Mozilla FireFox\searchplugins\babylon.xml
M2 - MFEP: prefs.js [Barret - mdt5edyd.default\{37483b40-c254-4a72-bda4-22ee90182c1e}] [] NCH EN Community Toolbar v3.9.0.3 (.Conduit Ltd..)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com
R3 - URLSearchHook: NCH EN Toolbar - {37483b40-c254-4a72-bda4-22ee90182c1e} . (.Conduit Ltd. - Conduit Toolbar.) (6.4.0.0) -- C:\Program Files\NCH_EN\prxtbNCH_.dll
R3 - URLSearchHook: NCH EN Toolbar - {37483b40-c254-4a72-bda4-22ee90182c1e} . (.Conduit Ltd. - Conduit Toolbar.) (6.4.0.0) -- C:\Program Files\NCH_EN\prxtbNCH_.dll
O2 - BHO: Interest recogniser for Widestream6 (powered by Spointer) - {2BEFBCCE-46A6-4950-BCB5-7062EAC6C9C9} . (...) -- C:\Program Files\Widestream6\spointer\extensions\widestream6_air_ie.dll
O2 - BHO: NCH EN - {37483b40-c254-4a72-bda4-22ee90182c1e} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\NCH_EN\prxtbNCH_.dll
O3 - Toolbar: NCH EN Toolbar - {37483b40-c254-4a72-bda4-22ee90182c1e} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\NCH_EN\prxtbNCH_.dll
OPT:O4 - HKLM\..\Run: [NeroFilterCheck] . (.Nero AG - NeroCheck.) -- C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
OPT:O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - HKLM\..\Run: [NPSStartup] Clé orpheline
OPT:O4 - HKLM\..\Run: [Media Codec Update Service] . (.MediaCodec.Org - WECP Auto Update Service.) -- C:\Program Files\Essentials Codec Pack\WECPUpdate.exe
OPT:O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
OPT:O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: C:\Users\Barret\Desktop\Google Earth.lnk - Clé orpheline
O4 - Global Startup: C:\Users\Barret\Desktop\Internet.lnk - Clé orpheline
O4 - Global Startup: C:\Users\Barret\Desktop\KORG KONTROL49 Editor Librarian.lnk - Clé orpheline
O4 - Global Startup: C:\Users\Barret\Desktop\Panneau de configuration - Raccourci.lnk - Clé orpheline
O4 - Global Startup: C:\Users\Barret\Desktop\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
O4 - Global Startup: C:\Users\Barret\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Ad-Aware.lnk . (.Lavasoft Limited.) -- C:\Program Files\Lavasoft\Ad-Aware\Ad-Aware.exe
O4 - Global Startup: C:\Users\Barret\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
O23 - Service: Lavasoft Ad-Aware Service (Lavasoft Ad-Aware Service) . (.Lavasoft Limited - Ad-Aware Service Application.) - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
[MD5.43EB27F4D4346FEBAB4C8A5A444A4C39] [APT] [Ad-Aware Update (Weekly)] (.Lavasoft Limited.) -- C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
O42 - Logiciel: Java 6 Update 29 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216010FF}
O42 - Logiciel: Java 6 Update 3 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160030}
O42 - Logiciel: Java 6 Update 5 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160050}
O42 - Logiciel: Java 6 Update 7 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160070}
O42 - Logiciel: NCH EN Toolbar - (.NCH EN.) [HKLM] -- NCH_EN Toolbar
O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1
O42 - Logiciel: Spybot - Search & Destroy 1.5.2.20 - (.Safer Networking Ltd..) [HKLM] -- Spybot - Search & Destroy_is1
[HKCU\Software\AppDataLow\Software\ConduitSearchScopes]
[HKCU\Software\AppDataLow\Software\Conduit]
[HKCU\Software\AppDataLow\Software\NCH_EN]
[HKCU\Software\AppDataLow\Toolbar]
O43 - CFD: 24/12/2011 - 14:19:58 - [0,609] ----D- C:\Program Files\Conduit
O43 - CFD: 22/05/2009 - 06:17:56 - [59,690] ----D- C:\Program Files\Spybot - Search & Destroy
O43 - CFD: 30/10/2011 - 13:42:58 - [0,000] ----D- C:\ProgramData\hE04903JcFeC04903
O43 - CFD: 22/05/2009 - 06:19:22 - [7,984] ----D- C:\ProgramData\Spybot - Search & Destroy
O43 - CFD: 23/09/2010 - 17:36:48 - [0] ----D- C:\Users\Barret\AppData\Roaming\OfferBox
O43 - CFD: 20/01/2012 - 06:38:26 - [1,985] ----D- C:\Users\Barret\AppData\Roaming\OpenCandy
O43 - CFD: 04/08/2010 - 06:02:52 - [0] RSHADC C:\Users\Barret\AppData\Roaming\???????sAppData
O43 - CFD: 24/12/2011 - 14:19:52 - [0,063] ----D- C:\Users\Barret\AppData\Local\Conduit
O43 - CFD: 22/05/2011 - 17:14:44 - [0] ----D- C:\Users\Barret\AppData\Local\{1DD742F4-D684-4869-BF54-7255AE509370}
O43 - CFD: 22/05/2011 - 16:06:06 - [0] ----D- C:\Users\Barret\AppData\Local\{277211BA-3F80-4F26-BD40-6A89F9AB2F85}
O43 - CFD: 20/05/2011 - 20:52:48 - [0] ----D- C:\Users\Barret\AppData\Local\{44E52F05-E9FB-46BE-9776-473BFE1FC352}
O43 - CFD: 22/05/2011 - 16:04:14 - [0] ----D- C:\Users\Barret\AppData\Local\{4BBE73A0-CDBF-418D-A7E6-AA5F184A6950}
O43 - CFD: 04/04/2011 - 21:56:52 - [0] ----D- C:\Users\Barret\AppData\Local\{599D1915-6962-46BE-B6D5-126AE3A63F92}
O43 - CFD: 22/05/2011 - 16:02:06 - [0] ----D- C:\Users\Barret\AppData\Local\{93D02289-209B-4F7F-A9C1-AFFEB2A76E67}
O43 - CFD: 18/04/2011 - 13:53:36 - [0] ----D- C:\Users\Barret\AppData\Local\{AD64C17D-ED31-4B6F-8A5C-B3A95D484DC9}
O44 - LFC:[MD5.CB17A47D090938A02DACB066D6D5A124] - 25/01/2012 - 22:58:03 ---A- . (...) -- C:\Windows\system32\rp_rules.dat [44]
O44 - LFC:[MD5.8A3D5B46FF8C9CED46304F1EBB5F9AFE] - 25/01/2012 - 22:58:03 ---A- . (...) -- C:\Windows\system32\rp_stats.dat [64]
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\09579140.sys . (...) -- C:\Windows\system32\Drivers\09579140.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\24799888.sys . (...) -- C:\Windows\system32\Drivers\24799888.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\09579140.sys . (...) -- C:\Windows\system32\Drivers\09579140.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\24799888.sys . (...) -- C:\Windows\system32\Drivers\24799888.sys (.not file.)
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852..clientLogIsEnabled", false);
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852..clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852..uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.AboutPrivacyUrl", "http://www.conduit.com");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.CTID", "CT2849852");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.CurrentServerDate", "10-1-2011");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.DialogsAlignMode", "LTR");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.DownloadReferralCookieData", "");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.EMailNotifierPollDate", "Mon Jan 10 2011 09:00:28 GMT+0100");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.FeedLastCount129349795937781608", 317);
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.FeedPollDate129313974171006416", "Mon Jan 10 2011 09:05:55 GMT+0100");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.FeedPollDate129313975698350231", "Mon Jan 10 2011 09:05:55 GMT+0100");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.FeedPollDate129313976370850190", "Mon Jan 10 2011 09:05:55 GMT+0100");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.FeedPollDate129313976648818968", "Mon Jan 10 2011 09:05:55 GMT+0100");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.FeedPollDate129313977444757117", "Mon Jan 10 2011 09:05:55 GMT+0100");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.FeedPollDate129313980389131455", "Mon Jan 10 2011 09:05:55 GMT+0100");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.FeedPollDate129313980655381977", "Mon Jan 10 2011 09:05:55 GMT+0100");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.FeedPollDate129313980886163259", "Mon Jan 10 2011 09:05:55 GMT+0100");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.FeedPollDate129313981234756535", "Mon Jan 10 2011 09:05:55 GMT+0100");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.FeedPollDate129313983226631720", "Mon Jan 10 2011 09:05:55 GMT+0100");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.FeedPollDate129313983607725691", "Mon Jan 10 2011 09:05:56 GMT+0100");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.FeedTTL129313974171006416", 10);
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.FeedTTL129313977444757117", 15);
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.FeedTTL129313980655381977", 5);
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.FeedTTL129313981234756535", 5);
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.FirstServerDate", "10-1-2011");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.FirstTime", true);
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.FirstTimeFF3", true);
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.FixPageNotFoundErrors", false);
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.GroupingServerCheckInterval", 1440);
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.GroupingServiceUrl", "http://grouping.services.conduit.com/");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.HasUserGlobalKeys", true);
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.Initialize", true);
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.InitializeCommonPrefs", true);
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.InstallationAndCookieDataSentCount", 2);
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.InstallationType", "UnknownIntegration");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.InstalledDate", "Sun Jan 09 2011 22:44:31 GMT+0100");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.IsGrouping", false);
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.IsMulticommunity", false);
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.IsOpenThankYouPage", true);
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.IsOpenUninstallPage", false);
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.LanguagePackLastCheckTime", "Sun Jan 09 2011 22:44:34 GMT+0100");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.LanguagePackReloadIntervalMM", 1440);
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.LanguagePackServiceUrl", "http://translation.users.conduit.com/Translation.ashx");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.LastLogin_3.2.5.2", "Mon Jan 10 2011 07:04:23 GMT+0100");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.LatestVersion", "3.2.5.2");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.Locale", "fr");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.MCDetectTooltipHeight", "83");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.MCDetectTooltipWidth", "295");
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.SearchBoxWidth", 100);
O69 - SBI: prefs.js [Barret - mdt5edyd.default] user_pref("CT2849852.SearchFromAddressBarIsInit", true);
O69 - SBI: SearchScopes [HKCU] {afdbddaa-5d3f-42ee-b79c-185a7020515b} - (NCH EN Customized Web Search) - http://search.conduit.com
[MD5.EA3BEA18FBFA739F2E147C682931434E] [SPRF][28/10/2011] (...) -- C:\Users\Barret\Desktop\ToolbarShooter.exe [220160]
O87 - FAEL: "TCP Query User{7728392A-262D-4BEB-9471-BCD3201441E0}C:\program files\emule\emule.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\emule\emule.exe (.not file.)
O87 - FAEL: "UDP Query User{EDE47239-60E1-4351-A55D-C8BD62CB2E2E}C:\program files\emule\emule.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\emule\emule.exe (.not file.)
O87 - FAEL: "{A41BF346-6EF7-400D-98A8-9EAC4D98CEAE}" |In - Public - P6 - TRUE | .(...) -- E:\fscommand\CKSocketServer.exe (.not file.)
O87 - FAEL: "{5B102780-0641-49EC-A8E7-B672A1E34880}" |In - Public - P17 - TRUE | .(...) -- E:\fscommand\CKSocketServer.exe (.not file.)
[HKLM\Software\Classes\Toolbar.CT2801948]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}]
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}]
[HKCU\Software\AppDataLow\Software\ConduitSearchScopes]
[HKCU\Software\AppDataLow\Toolbar]
[HKLM\Software\Classes\Toolbar.CT2849852]
C:\Program Files\Conduit
C:\Users\Barret\AppData\Roaming\OfferBox
C:\Users\Barret\AppData\Roaming\OpenCandy
C:\Users\Barret\AppData\Local\Conduit
C:\Users\Barret\AppData\LocalLow\Conduit
SS - | Auto 02/09/2011 2152152 | (Lavasoft Ad-Aware Service) . (.Lavasoft Limited.) - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe

Pour Xp : Double clique sur l'icône ZHPFix.exe sur ton Bureau.

Pour Vista : Clique droit sur l'icône ZHPFix.exe sur ton Bureau,
puis sélectionne 'Exécuter en tant qu'administrateur'.

- Clique sur l'icone représentant la lettre H (« coller les lignes Helper »)
- Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes
- Clique sur le bouton « GO » pour lancer le nettoyage,
- Copie/colle la totalité du rapport dans ta prochaine réponse

=================

▶ Télécharge Sur cette page : AdwCleaner (de Xplode)

▶ clique sur Télécharger et enregistre le fichier sur ton Bureau

▶ Double-clique sur l'icône AdwCleaner0.exe pour lancer l'installation

==================================

▶▶▶ Sous Vista et Windows 7 /!\ :

il faut lancer le fichier par clic-droit -> Exécuter en tant qu'administrateur

==================================

Sur le menu principal :

▶ clique sur Suppression et patiente le temps de l'analyse

▶ poste le contenu du rapport que tu trouveras dans ton disque dur c:\ADwcleaner[Sx].txt ou son contenu s'il s'ouvre.

Tout est ok alors ?, je peux fermer cette discussion ?

Voilà le lien d'hébergement du ZHPdiag du jour:

https://www.cjoint.com/?BACjAEXejan

Bonjour Gabriel,

Je n'avais pas eu de mail d'alerte concernant ce message, et comme tout se passe bien depuis ton intervention, je ne m'en étais pas inquiété....

Je te prie de m'excuser pour ce silence.

J'en déduis donc que nous n'en avions pas terminé (:s).

Ce qui m'a ramené sur ce forum fort utile est un souci "software". Si tu le veux bien, je vais te l'exposer:
Je veux installer un soft en .iso avec virtualclone drive
-windows me bloque l'installation (demande d'autorisation administrateur)
-je créé une session admin
-windows installer m'annonce "code erreur 3020"
-je change de lecteur pour Daemontoolls(Lite)
-impossible d'ouvrir l'image
-impossible d'installer de lecteurs virtuels

Grumff quoi.

Bref, si tu as des idées sur ce qui me bloque.

Te souhaitant une excellente journée.

(PS: je lance un ZHPdiag et l'héberge comme demandé 3months ago)

Héberge le commme ici le ZHPdiag : https://forums.commentcamarche.net/forum/affich-23480143-vista-bloque-par-security-sphere-2012?page=2#32

@+

Gabriel.

Id est ?

(on peut éventuellement passer auX petitS deux maintenant ?)

Héberge le :)

@+

Gabriel.

Ca a l'air plutot bueno tt ça non?:

Rapport de ZHPDiag v1.28.2153 par Nicolas Coolman, Update du 26/10/2011
Run by Barret at 30/10/2011 16:39:38
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
State : Nouvelle version disponible

---\\ Web Browser
MSIE: Internet Explorer v7.0.6002.18005
MFIE: Mozilla Firefox 7.0.1 v7.0.1 (Defaut)
OBIE: Safari v5.34.50.0

---\\ Windows Product Information
Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)
Windows Server License Manager Script : OK
~ Vista, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : RPFFV
Windows License : OK
Windows Automatic Updates : OK

---\\ System Information
~ Processor: x86 Family 6 Model 15 Stepping 13, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2038 MB (50% free)
System Restore: Activé (Enable)
System drive C: has 7 GB (6%) free of 116 GB

---\\ Logged in mode
~ Computer Name: PC-DE-BARRET
~ User Name: Barret
~ All Users Names: Barret, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O82,O89
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Barret\AppData\Roaming\
~ %Desktop% : C:\Users\Barret\Desktop\
~ %Favorites% : C:\Users\Barret\Favorites\
~ %LocalAppData% : C:\Users\Barret\AppData\Local\
~ %StartMenu% : C:\Users\Barret\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\system32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 7 Go of 116 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 76 Go of 109 Go)
E:\ CD-ROM drive (Not Inserted)
F:\ CD-ROM drive (Not Inserted)

---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoStartMenuSubFolder: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoResolveSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoDispScrSavPage: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK
~ Scan Security Center in 00mn 00s

---\\ Recherche particulière de fichiers génériques
[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.08/08/2009 - 07:27:36.) -- C:\Windows\Explorer.exe [2926592]
[MD5.4B555106290BD117334E9A08761C035A] - (....) (.02/11/2006 - 10:45:37.) -- C:\Windows\system32\rundll32.exe [44544]
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.13/04/2008 - 22:33:38.) -- C:\Windows\system32\Wininit.exe [96768]
[MD5.C9551BC170B717B5C9BAEEE972BF3409] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.12/10/2011 - 17:15:15.) -- C:\Windows\system32\wininet.dll [834048]
[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.08/08/2009 - 07:28:13.) -- C:\Windows\system32\Winlogon.exe [314368]
[MD5.95F5FF73B076576C41740F1A842B9B57] - (....) (.13/04/2008 - 22:34:12.) -- C:\Windows\system32\fr-FR\user32.dll.mui [20480]
[MD5.3911B972B55FEA0478476B2E777B29FA] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.16/06/2011 - 14:58:27.) -- C:\Windows\system32\drivers\AFD.sys [273408]
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.08/08/2009 - 07:32:26.) -- C:\Windows\system32\drivers\atapi.sys [19944]
[MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/04/2008 - 20:28:04.) -- C:\Windows\system32\drivers\Cdfs.sys [70144]
[MD5.1EC25CEA0DE6AC4718BF89F9E1778B57] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.08/08/2009 - 21:09:07.) -- C:\Windows\system32\drivers\Cdrom.sys [67072]
[MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.16/06/2011 - 15:59:03.) -- C:\Windows\system32\drivers\DfsC.sys [75264]
[MD5.062452B7FFD68C8C042A6261FE8DFF4A] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.08/08/2009 - 05:42:42.) -- C:\Windows\system32\drivers\HDAudBus.sys [561152]
[MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) (.13/04/2008 - 20:49:20.) -- C:\Windows\system32\drivers\i8042prt.sys [54784]
[MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.13/04/2008 - 20:56:30.) -- C:\Windows\system32\drivers\IpNat.sys [100864]
[MD5.1E94971C4B446AB2290DEB71D01CF0C2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.16/06/2011 - 14:24:40.) -- C:\Windows\system32\drivers\MRxSmb.sys [106496]
[MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) (.08/08/2009 - 05:45:37.) -- C:\Windows\system32\drivers\netBT.sys [185856]
[MD5.6A4A98CEE84CF9E99564510DDA4BAA47] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.08/08/2009 - 07:32:49.) -- C:\Windows\system32\drivers\ntfs.sys [1083880]
[MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) (.02/11/2006 - 09:51:30.) -- C:\Windows\system32\drivers\Parport.sys [79360]
[MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/04/2008 - 20:56:36.) -- C:\Windows\system32\drivers\Rasl2tp.sys [76288]
[MD5.E8BD98D46F2ED77132BA927FCCB47D8B] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.02/11/2006 - 10:03:00.) -- C:\Windows\system32\drivers\rdpdr.sys [242688]
[MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) (.08/08/2009 - 05:45:22.) -- C:\Windows\system32\drivers\smb.sys [66560]
[MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) (.08/08/2009 - 05:45:56.) -- C:\Windows\system32\drivers\tdx.sys [72192]
~ Scan Generic Processes in 00mn 00s

---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 17/10538
~ Mes musiques (My Musics) : 27/830
~ Mes Videos (My Videos) : 1/549
~ Mes Favoris (My Favorites) : 2/110
~ Mes Documents (My Documents) : 33/5275
~ Mon Bureau (My Desktop) : 101/10623
~ Menu demarrer (Programs) : 6/31
~ Scan Hidden Files in 00mn 43s

---\\ Processus lancés
[MD5.0D392EDE3B97E0B3131B2F63EF1DB94E] - (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe [1008184] [PID.1268]
[MD5.3D575898E4C727C794A24C4196FC0BE4] - (.Motorola Inc. - Application executable file.) -- C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [630784] [PID.1320]
[MD5.675253563B449B0B37E97BD09150B1ED] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [857648] [PID.3516]
[MD5.D85098BFADBAC38BD2B3CBDD08285FDF] - (.Pas de propriétaire - PowerForPhone.) -- C:\Program Files\P4P\P4P.exe [778240] [PID.3684]
[MD5.12C5C40440637B87D61600AE3DBEFA70] - (...) -- C:\Windows\ASScrPro.exe [33136] [PID.3692]
[MD5.5F529FBB095CBC9F14BB1E97A7A6B547] - (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe [166424] [PID.3736]
[MD5.93DB1FF92B03D24738A71E6E4992DFD3] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [248552] [PID.3764]
[MD5.F40E80C04475731C6ED5D19C48E45E3C] - (.Elaborate Bytes AG - Virtual CloneDrive Daemon.) -- C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [85160] [PID.3772]
[MD5.879D74337173A6D630D3D06184D354C1] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [421736] [PID.3792]
[MD5.E616A6A6E91B0A86F2F6217CDE835FFE] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [68856] [PID.]
[MD5.390679F7A217A5E73D756276C40AE887] - (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2260480] [PID.3828]
[MD5.908E2E3098FD593DAD3946DA30691886] - (.Veoh Networks - Veoh Web Player Beta.) -- C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe [3572984] [PID.3836]
[MD5.BF08674925F151BD4537B89A493E3E0C] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe [125952] [PID.3848]
[MD5.D5122A4F50795BD5E84102B1EB35A6CC] - (.Samsung Electronics Co., Ltd. - NPSAgent.) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe [102400] [PID.3856]
[MD5.9A00D0292845C4138B88E32111E1487B] - (.OpenOffice.org - OpenOffice.org 2.3.) -- C:\Program Files\OpenOffice.org 2.3\program\soffice.exe [2359296] [PID.3988]
[MD5.0F4195B9B348DE5CF9B822F81704B20E] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\Windows\ehome\ehmsas.exe [37376] [PID.4000]
[MD5.7FBEAD79082A406CA657B0BA5EC92F34] - (.Lavasoft Limited - Ad-Aware Tray Application.) -- C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe [1191216] [PID.4048]
[MD5.734006A2DB2404138F2C1A2CB86D32EF] - (.Intel Corporation - igfxsrvc Module.) -- C:\Windows\system32\igfxsrvc.exe [256536] [PID.4076]
[MD5.F1C3220C70D01BFBE076280DC64EADAE] - (.OpenOffice.org - OpenOffice.org 2.3.) -- C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN [2510848] [PID.3004]
[MD5.DB1A23EE7DD2E5E04E7DE071A6BEF699] - (.Sun Microsystems, Inc. - Java(TM) Update Checker.) -- C:\Program Files\Common Files\Java\Java Update\jucheck.exe [501480] [PID.5808]
[MD5.62BB79160F86CD962F312C68C6239BFD] - (.Microsoft Corporation - Windows Update.) -- C:\Windows\system32\wuauclt.exe [53472] [PID.4772]
[MD5.4E5585800B561FBEF64B27425365A36F] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [924632] [PID.5480]
[MD5.83F4BA8B8CDA4F063AA2002955A508A9] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [16856] [PID.4896]
[MD5.D4FA2F490F163D4DDA78FE698F6A91F4] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [696320] [PID.4948]
[MD5.862BB4CBC05D80C5B45BE430E5EF872F] - (.Microsoft Corporation - Service de gestion des licences Microsoft.) -- C:\Windows\system32\SLsvc.exe [3408896] [PID.]
[MD5.609A6F49B6AF0F25837F8A0EDDDB0745] - (.Pas de propriétaire - ADSMSrv.) -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe [73728] [PID.]
[MD5.66597AD6098352D11239C0C42100B176] - (.Pas de propriétaire - ASLDR Service.) -- C:\Program Files\ATK Hotkey\ASLDRSrv.exe [94208] [PID.]
[MD5.7C157574A181B19B9DCF5F339E25337E] - (.Pas de propriétaire - GFNEXSrv.) -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208] [PID.]
[MD5.ED60FFD305AC0424920D146DB9F9ED78] - (.Lavasoft Limited - Ad-Aware Service Application.) -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2152152] [PID.]
[MD5.D41D8CD98F00B204E9800998ECF8427E] - (...) -- C:\Program Files\ATK Hotkey\Hcontrol.exe [225280] [PID.]
[MD5.C1F251686AEDBEF3D173A804B7CF7314] - (.Pas de propriétaire - ATKOSD2.) -- C:\Program Files\ATKOSD2\ATKOSD2.exe [7708672] [PID.]
[MD5.59B24A9DAF3B716C7425520CA25EDCA0] - (.Pas de propriétaire - Wireless Console 2.) -- C:\Program Files\Wireless Console 2\wcourier.exe [1036288] [PID.]
[MD5.0C33F737632D88D3462AF23FC70165ED] - (.ATK - ACMON.) -- C:\Program Files\ASUS\Splendid\ACMON.exe [851968] [PID.]
[MD5.0D83791037783E564541B6F3E3BBEA1F] - (.ATK - Power4Gear eXtreme.) -- C:\Program Files\P4G\BatteryLife.exe [180224] [PID.]
[MD5.1938C03F5EFC2A9D02E563F4FF210325] - (...) -- C:\Program Files\Acer\AcerSync\AcerSyncService.exe [172576] [PID.]
[MD5.D84A32216477B0C0FAFA0755CB9B8CD6] - (.Pas de propriétaire - ATKOSD.) -- C:\Program Files\ATK Hotkey\ATKOSD.exe [2420736] [PID.]
[MD5.A391896CD406E6377F5CEF31FDC12019] - (.ASUSTeK - ACEngSvr Module.) -- C:\Windows\System32\ACEngSvr.exe [155648] [PID.]
[MD5.20F6F19FE9E753F2780DC2FA083AD597] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [37664] [PID.]
[MD5.1C87705CCB2F60172B0FC86B5D82F00D] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [387944] [PID.]
[MD5.D3F9205CC4CB07553F2F9472C767EA87] - (.Teruten - FsUsbDevice.) -- C:\Windows\system32\FsUsbExService.Exe [233472] [PID.]
[MD5.98D884ADC0B8C0FEBCC9D7BEE6D86F90] - (.Hewlett-Packard Company - LightScribe Service.) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe [79136] [PID.]
[MD5.739DB668DBD812285ECC553E64A5E212] - (.Pas de propriétaire - spmgr Module.) -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [125496] [PID.]
[MD5.A30E7036045BCC35D90DED2FE7642758] - (.Pas de propriétaire - KBFiltr Application.) -- C:\Program Files\ATK Hotkey\KBFiltr.exe [77824] [PID.]
[MD5.C9BF7482456D780A5ECD54B95A225DC9] - (.Pas de propriétaire - WDC Application.) -- C:\Program Files\ATK Hotkey\WDC.exe [106496] [PID.]
[MD5.F62C69376A95795FE7CDB1C778EDACA4] - (.Apple Inc. - iPodService Module (32-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [821096] [PID.]
[MD5.5DAF7081A4BB112FA3F1915819330A3E] - (...) -- C:\Program Files\ZHPDiag\pv.exe [61440] [PID.]
~ Scan Processes Running in 00mn 02s

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\Barret\AppData\Roaming\Mozilla\Firefox\Profiles\mdt5edyd.default\prefs.js
C:\Users\Barret\AppData\Roaming\Mozilla\Firefox\Profiles\mdt5edyd.default\user.js
M3 - MFPP: Plugins - [Barret] -- C:\Users\Barret\AppData\Roaming\Mozilla\Firefox\Profiles\mdt5edyd.default\searchplugins\daemon-search.xml
M3 - MFPP: Plugins - [Barret] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [Barret] -- C:\Program Files\Mozilla FireFox\searchplugins\babylon.xml
M3 - MFPP: Plugins - [Barret] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [Barret] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [Barret] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [Barret] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [Barret] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [Barret] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
M2 - MFEP: prefs.js [Barret - mdt5edyd.default\{20a82645-c095-46ed-80e3-08825760534b}] [MicrosoftCG] Microsoft .NET Framework Assistant v1.2.1 (.Microsoft.)
M2 - MFEP: prefs.js [Barret - mdt5edyd.default\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}] [] Adobe DLM (powered by getPlus(R)) v1.6.2.63 (.NOS Microsystems Ltd..)
P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll
P2 - FPN:Firefox Plugin Navigator . (.NOS Microsystems Ltd. - getplusplusadobe16263.) -- C:\Program Files\Mozilla Firefox\Plugins\np_gp.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@divx.com/DivX Browser Plugin,version=1.0.0] - (.DivX,Inc. - DivX Web Player version 2.0.0.254.) -- C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
P2 - FPN: [HKLM] [@divx.com/DivX Player Plugin,version=1.0.0] - (.DivX, Inc - npdivxplayerplugin.) -- C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll
P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_23 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60831.0.) -- C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3502.0922] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3508.1109] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@pack.google.com/Google Updater;version=14] - (.Google - Google Updater plugin<br><a href="http://pack.google.com/">http://pack.) -- C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll
P2 - FPN: [HKLM] [@t-immersion.com/DFusionHomeWebPlugIn] - (.Total Immersion - D'Fusion @Home Web Plug-In (2.30.11563.0).) -- C:\Program Files\Total Immersion\DFusionHomeWebPlugIn\NPDFusionWebFirefox.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@veoh.com/VeohTVPlugin] - (.Veoh Networks - NPVeohTVPlugin.) -- C:\Program Files\Veoh Networks\VeohWebPlayer\NPVeohTVPlugin.dll
P2 - FPN: [HKLM] [@veoh.com/VeohWebPlayer] - (.Veoh - Veoh Web Video Player Browser Plugin.) -- C:\Program Files\Veoh Networks\VeohWebPlayer\npWebPlayerVideoPluginATL.dll
~ Scan Firefox Browser in 00mn 00s

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=17DBE7D168544FA98200E890A8051984
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (7.00.6000.16386 (vista_rtm.061101-2205)) -- C:\Windows\system32\ieframe.dll
~ Scan IE Browser in 00mn 00s

---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Scan Keys in 00mn 00s

---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s

---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} Clé orpheline
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (...) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll
O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} . (.Megaupload Limited - Mega Manager IE Click Catcher.) -- C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} . (.Google Inc. - Fast Search.) -- C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
~ Scan BHO in 00mn 00s

---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (...) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} . (.Veoh Networks Inc - Veoh Video Finder.) -- C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll
~ Scan Toolbar in 00mn 00s

---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe
O4 - HKLM\..\Run: [SMSERIAL] . (.Motorola Inc. - Application executable file.) -- C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PowerForPhone] . (.Pas de propriétaire - PowerForPhone.) -- C:\Program Files\P4P\P4P.exe
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] . (...) -- C:\Windows\ASScrPro.exe
O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] . (...) -- C:\Windows\ASScrProlog.exe
O4 - HKLM\..\Run: [NeroFilterCheck] . (.Nero AG - NeroCheck.) -- C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] . (.Apple Inc. - AppleSyncNotifier.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe
O4 - HKLM\..\Run: [NPSStartup] Clé orpheline
O4 - HKLM\..\Run: [VirtualCloneDrive] . (.Elaborate Bytes AG - Virtual CloneDrive Daemon.) -- C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [VeohPlugin] . (.Veoh Networks - Veoh Web Player Beta.) -- C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [AutoStartNPSAgent] . (.Samsung Electronics Co., Ltd. - NPSAgent.) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - HKCU\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-21-827973718-2073037627-253379681-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-21-827973718-2073037627-253379681-1000\..\Run: [SpybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-21-827973718-2073037627-253379681-1000\..\Run: [VeohPlugin] . (.Veoh Networks - Veoh Web Player Beta.) -- C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
O4 - HKUS\S-1-5-21-827973718-2073037627-253379681-1000\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-21-827973718-2073037627-253379681-1000\..\Run: [AutoStartNPSAgent] . (.Samsung Electronics Co., Ltd. - NPSAgent.) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - HKUS\S-1-5-21-827973718-2073037627-253379681-1000\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe
~ Scan Application in 00mn 00s

---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\Barret\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Barret\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe
O4 - Global Startup: C:\Users\Barret\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Users\Barret\Desktop\Corbeille.lnk - Clé orpheline
O4 - Global Startup: C:\Users\Barret\Desktop\DVD Shrink 3.2.lnk . (.DVD Shrink.) -- C:\Program Files\DVD Shrink\DVD Shrink 3.2.exe
O4 - Global Startup: C:\Users\Barret\Desktop\Easy-PhotoPrint EX.lnk . (.CANON INC..) -- C:\Program Files\Canon\Easy-PhotoPrint EX\CNEZMAIN.EXE
O4 - Global Startup: C:\Users\Barret\Desktop\Google Earth.lnk - Clé orpheline
O4 - Global Startup: C:\Users\Barret\Desktop\Guitar Pro 5.lnk . (.Arobas Music.) -- C:\Program Files\Guitar Pro 5\GP5.exe
O4 - Global Startup: C:\Users\Barret\Desktop\Internet.lnk - Clé orpheline
O4 - Global Startup: C:\Users\Barret\Desktop\KORG KONTROL49 Editor Librarian.lnk - Clé orpheline
O4 - Global Startup: C:\Users\Barret\Desktop\LifeFrame.lnk . (.ASUS.) -- C:\Program Files\ASUS\LifeFrame3\LifeFrame.exe
O4 - Global Startup: C:\Users\Barret\Desktop\MP Navigator 1.1.lnk . (.CANON INC..) -- C:\Program Files\Canon\MP Navigator 1.1\mpn11.exe
O4 - Global Startup: C:\Users\Barret\Desktop\Nero StartSmart Essentials.lnk . (.Nero AG.) -- C:\Program Files\Nero\Nero 7\Nero StartSmart\NeroStartSmart.exe
O4 - Global Startup: C:\Users\Barret\Desktop\Ordinateur - Raccourci.lnk - Clé orpheline
O4 - Global Startup: C:\Users\Barret\Desktop\Panneau de configuration - Raccourci.lnk - Clé orpheline
O4 - Global Startup: C:\Users\Barret\Desktop\Reason.lnk . (.Propellerhead Software AB.) -- C:\Program Files\Propellerhead\Reason\Reason.exe
O4 - Global Startup: C:\Users\Barret\Desktop\SmartLogon Manager.lnk . (.ASUS.) -- C:\Program Files\ASUS\SmartLogon\logonmgr.exe
O4 - Global Startup: C:\Users\Barret\Desktop\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
O4 - Global Startup: C:\Users\Barret\Desktop\Windows Live Messenger .lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - Global Startup: C:\Users\Barret\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Ad-Aware.lnk . (.Lavasoft Limited.) -- C:\Program Files\Lavasoft\Ad-Aware\Ad-Aware.exe
O4 - Global Startup: C:\Users\Barret\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk . (...) -- C:\Windows\Installer\{735619D4-B42A-437A-958C-199BFCAEDB38}\SafariIco.exe
O4 - Global Startup: C:\Users\Barret\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Barret\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk . (.Microsoft Corporation.) -- C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
O4 - Global Startup: C:\Users\Barret\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Users\Barret\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart Essentials.lnk . (.Nero AG.) -- C:\Program Files\Nero\Nero 7\Nero StartSmart\NeroStartSmart.exe
O4 - Global Startup: C:\Users\Barret\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Samsung New PC Studio.lnk . (.Samsung Electronics Co., Ltd..) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSGuide.exe
O4 - Global Startup: C:\Users\Barret\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
O4 - Global Startup: C:\Users\Barret\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
~ Scan Global Startup in 00mn 00s

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: E&xport to Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe
O8 - Extra context menu item: Liens de téléchargement avec Mega Manager... . (...) -- C:\Program Files\Megaupload\Mega Manager\mm_file.htm
~ Scan IE Menu Contextuel in 00mn 00s

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBro
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO
O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO
~ Scan IE Extra Buttons in 00mn 00s

---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - Broken Internet access because of LSP provider (.not file.) -- mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll
~ Scan Winsock in 00mn 00s

---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
~ Scan Objets ActiveX in 00mn 00s

---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{5468C8F7-444C-44DD-B805-4F86D6616042}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{5468C8F7-444C-44DD-B805-4F86D6616042}: DhcpNameServer = 192.168.1.1
~ Scan Domain in 00mn 00s

---\\ Protocole additionnel (O18)
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll
O18 - Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll
O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
~ Scan Protocole Additionnel in 00mn 00s

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\system32\igfxdev.dll
~ Scan Winlogon in 00mn 00s

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\system32\webcheck.dll
~ Scan SSODL in 00mn 00s

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll
~ Scan STS/SSO in 00mn 00s

---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: AcerSyncServiceWinService (AcerSyncServiceWinService) . (...) - C:\Program Files\Acer\AcerSync\AcerSyncService.exe
O23 - Service: ADSM Service (ADSMService) . (.Pas de propriétaire - ADSMSrv.) - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) . (.Pas de propriétaire - ASLDR Service.) - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) . (.Pas de propriétaire - GFNEXSrv.) - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FsUsbExService (FsUsbExService) . (.Teruten - FsUsbDevice.) - C:\Windows\system32\FsUsbExService.exe
O23 - Service: (gpsvc) - Clé orpheline
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) . (.Google - gusvc.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Lavasoft Ad-Aware Service (Lavasoft Ad-Aware Service) . (.Lavasoft Limited - Ad-Aware Service Application.) - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Planificateur LiveUpdate automatique (Planificateur LiveUpdate automatique) . (...) - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (.not file.)
O23 - Service: spmgr (spmgr) . (.Pas de propriétaire - spmgr Module.) - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
~ Scan Services in 00mn 00s

---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\Office12\WINWORD.exe
~ Scan Desktop Component in 00mn 00s

---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk /p \??\I:) - File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - File not found
~ Scan Keys in 00mn 00s

---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\ASUS SmartLogon Console Sensor.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Google Software Updater.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\User_Feed_Synchronization-{7B51CE97-9C1D-40DA-95AF-67199313797D}.job
[MD5.43EB27F4D4346FEBAB4C8A5A444A4C39] [APT] [Ad-Aware Update (Weekly)] (.Lavasoft Limited.) -- C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
~ Scan Scheduled Task in 00mn 01s

---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\system32\Drivers\dfsc.sys
O41 - Driver: (ElbyCDIO) . (.Elaborate Bytes AG - ElbyCD Windows NT/2000/XP I/O driver.) - C:\Windows\system32\Drivers\ElbyCDIO.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\system32\DRIVERS\i8042prt.sys
O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\system32\DRIVERS\kbdclass.sys
O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\system32\DRIVERS\mouclass.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\system32\DRIVERS\netbios.sys
O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\system32\DRIVERS\netbt.sys
O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\system32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\system32\DRIVERS\rasacd.sys
O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\DRIVERS\RDPCDD.sys
O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\system32\DRIVERS\smb.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Tcpip) . (.Microsoft Corporation - TCP/IP Driver.) - C:\Windows\system32\drivers\tcpip.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\system32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys
~ Scan Drivers in 00mn 00s

---\\ Logiciels installés (O42)
O42 - Logiciel: 2007 Microsoft Office system - (.Microsoft Corporation.) [HKLM] -- PROHYBRIDR
O42 - Logiciel: ASUS Data Security Manager - (.ASUS.) [HKLM] -- {1C8521E5-5A7B-4A4E-A9CD-AD53116EAEE0}
O42 - Logiciel: ASUS SmartLogon - (.ASUS.) [HKLM] -- {64452561-169F-4A36-A2FF-B5E118EC65F5}
O42 - Logiciel: ASUS Splendid Video Enhancement Technology - (.ASUSTeK.) [HKLM] -- {C0FC1C14-4824-4A73-87A6-9E888C9C3102}
O42 - Logiciel: ATK Generic Function Service - (.ATK.) [HKLM] -- {D3D54F3E-C5C3-443D-978F-87A72E5616E8}
O42 - Logiciel: ATK Hotkey - (.ATK.) [HKLM] -- {3912D529-02BC-4CA8-B5ED-0D0C20EB6003}
O42 - Logiciel: ATKOSD2 - (.ATK.) [HKLM] -- {5C1DB4ED-E9B4-402D-BB14-D75D97D6C1A6}
O42 - Logiciel: Acer Sync - (.Acer Incorporated.) [HKLM] -- {1FA08A70-6E60-4E06-90B6-7B96A741E9E0}
O42 - Logiciel: Activation Assistant for the 2007 Microsoft Office suites - (.Microsoft Corporation.) [HKLM] -- Activation Assistant for the 2007 Microsoft Office suites
O42 - Logiciel: Ad-Aware - (.Lavasoft.) [HKLM] -- Ad-Aware
O42 - Logiciel: Ad-Aware - (.Lavasoft.) [HKLM] -- {DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
O42 - Logiciel: Adobe Download Manager - (.NOS Microsystems Ltd..) [HKLM] -- {E2883E8F-472F-4fb0-9522-AC9BF37916A7}
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Flash Player ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Reader 8.1.4 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A81300000003}
O42 - Logiciel: Age of Empires III - (.Microsoft Game Studios.) [HKLM] -- InstallShield_{485775E8-AEB8-46BD-922B-242879E03DD5}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {6A3F9D74-BB80-4451-8CA1-4B3A857F1359}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {C23CD6DA-1958-43A5-ADD0-59396572E02E}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: Archiveur WinRAR - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver
O42 - Logiciel: Asus_Camera_ScreenSaver - (.ASUS.) [HKLM] -- Asus_Camera_ScreenSaver
O42 - Logiciel: Atheros Driver Installation Program - (.Atheros.) [HKLM] -- {28006915-2739-4EBE-B5E8-49B25D32EB33}
O42 - Logiciel: Band-in-a-Box 2005: Support de langue français - (.PG Music Inc..) [HKLM] -- BB_is1
O42 - Logiciel: BitTorrent - (.Pas de propriétaire.) [HKLM] -- BitTorrent
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {D03482C5-9AD8-496D-B388-692AE04C93AF}
O42 - Logiciel: Canon MP Navigator 1.1 - (.Pas de propriétaire.) [HKLM] -- MP Navigator 1.1
O42 - Logiciel: Canon Utilities Easy-PhotoPrint EX - (.Pas de propriétaire.) [HKLM] -- Easy-PhotoPrint EX
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: DVD Shrink 3.2 - (.DVD Shrink.) [HKLM] -- DVD Shrink_is1
O42 - Logiciel: Delta - (.Ville de Montpellier.) [HKCU] -- Delta
O42 - Logiciel: DivX Codec - (.DivX, Inc..) [HKLM] -- {7B63B2922B174135AFC0E1377DD81EC2}
O42 - Logiciel: DivX Converter - (.DivX, Inc..) [HKLM] -- {B13A7C41581B411290FBC0395694E2A9}
O42 - Logiciel: DivX Player - (.Pas de propriétaire.) [HKLM] -- {8ADFC4160D694100B5B8A22DE9DCABD9}
O42 - Logiciel: DivX Plus Web Player - (.DivX,Inc..) [HKLM] -- {B7050CBDB2504B34BC2A9CA0A692CC29}
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {488F0347-C4A7-4374-91A7-30818BEDA710}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {B3FED300-806C-11E0-A0D0-B8AC6F97B88E}
O42 - Logiciel: Guitar Pro 5.0 - (.Arobas Music.) [HKLM] -- Guitar Pro 5_is1
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Pas de propriétaire.) [HKLM] -- HDMI
O42 - Logiciel: Java(TM) 6 Update 23 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216010FF}
O42 - Logiciel: Java(TM) 6 Update 3 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160030}
O42 - Logiciel: Java(TM) 6 Update 5 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160050}
O42 - Logiciel: Java(TM) 6 Update 7 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160070}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: KONTROL49 Editor Librarian - (.KORG Inc..) [HKLM] -- {4F8389A4-0106-4CCC-8E18-1B7DCDAB286E}
O42 - Logiciel: KONTROL49 Editor Librarian 1.02 - (.KORG Inc..) [HKLM] -- {ADE93540-B579-4BE6-8B86-35997130AF82}
O42 - Logiciel: KORG USB-MIDI Driver Tools for Windows - (.KORG Inc..) [HKLM] -- {C962EF10-7539-477A-A0AD-F8CBD0E9F7E5}
O42 - Logiciel: LifeFrame3 - (.ASUS.) [HKLM] -- {1DBD1F12-ED93-49C0-A7CC-56CBDE488158}
O42 - Logiciel: MSVC80_x86 - (.Nokia.) [HKLM] -- {212748BB-0DA5-46DE-82A1-403736DC9F27}
O42 - Logiciel: MSVC80_x86_v2 - (.Nokia.) [HKLM] -- {6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}
O42 - Logiciel: MSVC90_x86 - (.Nokia.) [HKLM] -- {AF111648-99A1-453E-81DD-80DBBF6DAD0D}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSXML 4.0 SP2 (KB927978) - (.Microsoft Corporation.) [HKLM] -- {37477865-A3F1-4772-AD43-AAFC6BCFF99F}
O42 - Logiciel: MSXML 4.0 SP2 (KB936181) - (.Microsoft Corporation.) [HKLM] -- {C04E32E0-0416-434D-AFB9-6969D703A9EF}
O42 - Logiciel: MSXML 4.0 SP2 (KB941833) - (.Microsoft Corporation.) [HKLM] -- {C523D256-313D-4866-B36A-F3DE528246EF}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.2.1300 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: MediaConverter 1.2.8 - (.SoMud.) [HKLM] -- MediaConverter
O42 - Logiciel: Mega Manager - (.Megaupload Limited.) [HKLM] -- {3B6E3FC6-274C-4B6C-BC85-5C3B15DE18E2}
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}
O42 - Logiciel: Microsoft Age of Empires II Trial Version - (.Pas de propriétaire.) [HKLM] -- Age of Empires II Trial
O42 - Logiciel: Microsoft Office 2007 Primary Interop Assemblies - (.Microsoft Corporation.) [HKLM] -- {50120000-1105-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0015-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0015-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0015-0410-0000-0000000FF1CE}_PROHYBRIDR_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0015-0413-0000-0000000FF1CE}_PROHYBRIDR_{DC387AA5-94A6-4920-B004-D59846526D81}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-0410-0000-0000000FF1CE}_PROHYBRIDR_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-0413-0000-0000000FF1CE}_PROHYBRIDR_{DC387AA5-94A6-4920-B004-D59846526D81}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-0410-0000-0000000FF1CE}_PROHYBRIDR_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-0413-0000-0000000FF1CE}_PROHYBRIDR_{DC387AA5-94A6-4920-B004-D59846526D81}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0019-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0019-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0019-0410-0000-0000000FF1CE}_PROHYBRIDR_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0019-0413-0000-0000000FF1CE}_PROHYBRIDR_{DC387AA5-94A6-4920-B004-D59846526D81}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001A-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001A-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001A-0410-0000-0000000FF1CE}_PROHYBRIDR_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001A-0413-0000-0000000FF1CE}_PROHYBRIDR_{DC387AA5-94A6-4920-B004-D59846526D81}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_PROHYBRIDR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft

Ok.
Refais un ZHPdiag.

@+

Gabriel.

15:51:47.0037 2184 TDSS rootkit removing tool 2.6.14.0 Oct 28 2011 11:11:01
15:51:49.0039 2184 ============================================================
15:51:49.0039 2184 Current date / time: 2011/10/30 15:51:49.0039
15:51:49.0039 2184 SystemInfo:
15:51:49.0039 2184
15:51:49.0039 2184 OS Version: 6.0.6002 ServicePack: 2.0
15:51:49.0039 2184 Product type: Workstation
15:51:49.0040 2184 ComputerName: PC-DE-BARRET
15:51:49.0040 2184 UserName: Barret
15:51:49.0040 2184 Windows directory: C:\Windows
15:51:49.0040 2184 System windows directory: C:\Windows
15:51:49.0040 2184 Processor architecture: Intel x86
15:51:49.0040 2184 Number of processors: 2
15:51:49.0040 2184 Page size: 0x1000
15:51:49.0040 2184 Boot type: Normal boot
15:51:49.0040 2184 ============================================================
15:51:49.0498 2184 Initialize success
15:51:51.0362 2552 ============================================================
15:51:51.0362 2552 Scan started
15:51:51.0363 2552 Mode: Manual;
15:51:51.0363 2552 ============================================================
15:51:51.0908 2552 61883 (585e64bb6dfbc0a2f1f0b554ded012df) C:\Windows\system32\DRIVERS\61883.sys
15:51:51.0910 2552 61883 - ok
15:51:52.0023 2552 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys
15:51:52.0026 2552 ACPI - ok
15:51:52.0158 2552 adp94xx (2edc5bbac6c651ece337bde8ed97c9fb) C:\Windows\system32\drivers\adp94xx.sys
15:51:52.0163 2552 adp94xx - ok
15:51:52.0214 2552 adpahci (b84088ca3cdca97da44a984c6ce1ccad) C:\Windows\system32\drivers\adpahci.sys
15:51:52.0218 2552 adpahci - ok
15:51:52.0264 2552 adpu160m (7880c67bccc27c86fd05aa2afb5ea469) C:\Windows\system32\drivers\adpu160m.sys
15:51:52.0266 2552 adpu160m - ok
15:51:52.0291 2552 adpu320 (9ae713f8e30efc2abccd84904333df4d) C:\Windows\system32\drivers\adpu320.sys
15:51:52.0294 2552 adpu320 - ok
15:51:52.0481 2552 AFD (3911b972b55fea0478476b2e777b29fa) C:\Windows\system32\drivers\afd.sys
15:51:52.0484 2552 AFD - ok
15:51:52.0555 2552 agp440 (ef23439cdd587f64c2c1b8825cead7d8) C:\Windows\system32\drivers\agp440.sys
15:51:52.0557 2552 agp440 - ok
15:51:52.0591 2552 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
15:51:52.0595 2552 aic78xx - ok
15:51:52.0628 2552 aliide (90395b64600ebb4552e26e178c94b2e4) C:\Windows\system32\drivers\aliide.sys
15:51:52.0630 2552 aliide - ok
15:51:52.0692 2552 amdagp (2b13e304c9dfdfa5eb582f6a149fa2c7) C:\Windows\system32\drivers\amdagp.sys
15:51:52.0694 2552 amdagp - ok
15:51:52.0716 2552 amdide (0577df1d323fe75a739c787893d300ea) C:\Windows\system32\drivers\amdide.sys
15:51:52.0717 2552 amdide - ok
15:51:52.0756 2552 AmdK7 (dc487885bcef9f28eece6fac0e5ddfc5) C:\Windows\system32\drivers\amdk7.sys
15:51:52.0758 2552 AmdK7 - ok
15:51:53.0204 2552 AmdK8 (0ca0071da4315b00fc1328ca86b425da) C:\Windows\system32\drivers\amdk8.sys
15:51:53.0206 2552 AmdK8 - ok
15:51:53.0325 2552 arc (5f673180268bb1fdb69c99b6619fe379) C:\Windows\system32\drivers\arc.sys
15:51:53.0327 2552 arc - ok
15:51:53.0394 2552 arcsas (957f7540b5e7f602e44648c7de5a1c05) C:\Windows\system32\drivers\arcsas.sys
15:51:53.0396 2552 arcsas - ok
15:51:53.0480 2552 AsDsm (4385e371c25c94c804e9d3152bd9e1f7) C:\Windows\system32\drivers\AsDsm.sys
15:51:53.0482 2552 AsDsm - ok
15:51:53.0553 2552 ASMMAP (7b4d08d2017ac06689d422e06c43f0aa) C:\Program Files\ATKGFNEX\ASMMAP.sys
15:51:53.0554 2552 ASMMAP - ok
15:51:53.0687 2552 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
15:51:53.0689 2552 AsyncMac - ok
15:51:53.0734 2552 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys
15:51:53.0737 2552 atapi - ok
15:51:53.0838 2552 athr (dcdfc3a5a8b239055aab6bd975ada889) C:\Windows\system32\DRIVERS\athr.sys
15:51:53.0846 2552 athr - ok
15:51:54.0027 2552 Avc (f4b56425a00beb32f5fa6603ff7b0ea2) C:\Windows\system32\DRIVERS\avc.sys
15:51:54.0029 2552 Avc - ok
15:51:54.0116 2552 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
15:51:54.0117 2552 Beep - ok
15:51:54.0173 2552 blbdrive - ok
15:51:54.0271 2552 bowser (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys
15:51:54.0273 2552 bowser - ok
15:51:54.0339 2552 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
15:51:54.0341 2552 BrFiltLo - ok
15:51:54.0384 2552 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
15:51:54.0385 2552 BrFiltUp - ok
15:51:54.0425 2552 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
15:51:54.0428 2552 Brserid - ok
15:51:54.0470 2552 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
15:51:54.0473 2552 BrSerWdm - ok
15:51:54.0518 2552 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
15:51:54.0520 2552 BrUsbMdm - ok
15:51:54.0569 2552 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
15:51:54.0572 2552 BrUsbSer - ok
15:51:54.0614 2552 BthEnum (a820438255f37ab8baa2bd59753a8d81) C:\Windows\system32\DRIVERS\BthEnum.sys
15:51:54.0617 2552 BthEnum - ok
15:51:54.0676 2552 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys
15:51:54.0679 2552 BTHMODEM - ok
15:51:54.0730 2552 BthPan (b8c3d9ddf85fd197c3e5f849fef71144) C:\Windows\system32\DRIVERS\bthpan.sys
15:51:54.0734 2552 BthPan - ok
15:51:54.0765 2552 BTHPORT (4a74bbb2b6761789f42a6613479bdb1d) C:\Windows\system32\Drivers\BTHport.sys
15:51:54.0770 2552 BTHPORT - ok
15:51:54.0802 2552 BTHUSB (1a407f9b707a06f55aa150f9aa072b09) C:\Windows\system32\Drivers\BTHUSB.sys
15:51:54.0806 2552 BTHUSB - ok
15:51:54.0908 2552 catchme - ok
15:51:54.0953 2552 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
15:51:54.0957 2552 cdfs - ok
15:51:55.0016 2552 cdrom (1ec25cea0de6ac4718bf89f9e1778b57) C:\Windows\system32\DRIVERS\cdrom.sys
15:51:55.0019 2552 cdrom - ok
15:51:55.0077 2552 circlass (da8e0afc7baa226c538ef53ac2f90897) C:\Windows\system32\drivers\circlass.sys
15:51:55.0080 2552 circlass - ok
15:51:55.0142 2552 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys
15:51:55.0153 2552 CLFS - ok
15:51:55.0235 2552 CmBatt (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys
15:51:55.0237 2552 CmBatt - ok
15:51:55.0280 2552 cmdide (45201046c776ffdaf3fc8a0029c581c8) C:\Windows\system32\drivers\cmdide.sys
15:51:55.0283 2552 cmdide - ok
15:51:55.0332 2552 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys
15:51:55.0334 2552 Compbatt - ok
15:51:55.0380 2552 crcdisk (2a213ae086bbec5e937553c7d9a2b22c) C:\Windows\system32\drivers\crcdisk.sys
15:51:55.0383 2552 crcdisk - ok
15:51:55.0430 2552 Crusoe (22a7f883508176489f559ee745b5bf5d) C:\Windows\system32\drivers\crusoe.sys
15:51:55.0433 2552 Crusoe - ok
15:51:55.0517 2552 DfsC (622c41a07ca7e6dd91770f50d532cb6c) C:\Windows\system32\Drivers\dfsc.sys
15:51:55.0520 2552 DfsC - ok
15:51:55.0663 2552 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys
15:51:55.0667 2552 disk - ok
15:51:55.0749 2552 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
15:51:55.0752 2552 drmkaud - ok
15:51:55.0834 2552 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys
15:51:55.0842 2552 DXGKrnl - ok
15:51:55.0902 2552 E1G60 (f88fb26547fd2ce6d0a5af2985892c48) C:\Windows\system32\DRIVERS\E1G60I32.sys
15:51:55.0905 2552 E1G60 - ok
15:51:55.0974 2552 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys
15:51:55.0977 2552 Ecache - ok
15:51:56.0046 2552 ElbyCDIO (44996a2addd2db7454f2ca40b67d8941) C:\Windows\system32\Drivers\ElbyCDIO.sys
15:51:56.0048 2552 ElbyCDIO - ok
15:51:56.0117 2552 elxstor (e8f3f21a71720c84bcf423b80028359f) C:\Windows\system32\drivers\elxstor.sys
15:51:56.0122 2552 elxstor - ok
15:51:56.0206 2552 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys
15:51:56.0211 2552 exfat - ok
15:51:56.0239 2552 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys
15:51:56.0244 2552 fastfat - ok
15:51:56.0296 2552 fdc (63bdada84951b9c03e641800e176898a) C:\Windows\system32\DRIVERS\fdc.sys
15:51:56.0300 2552 fdc - ok
15:51:56.0371 2552 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
15:51:56.0375 2552 FileInfo - ok
15:51:56.0398 2552 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
15:51:56.0401 2552 Filetrace - ok
15:51:56.0457 2552 flpydisk (6603957eff5ec62d25075ea8ac27de68) C:\Windows\system32\DRIVERS\flpydisk.sys
15:51:56.0461 2552 flpydisk - ok
15:51:56.0519 2552 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys
15:51:56.0523 2552 FltMgr - ok
15:51:56.0637 2552 FsUsbExDisk (790a4ca68f44be35967b3df61f3e4675) C:\Windows\system32\FsUsbExDisk.SYS
15:51:56.0668 2552 FsUsbExDisk - ok
15:51:56.0735 2552 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys
15:51:56.0739 2552 Fs_Rec - ok
15:51:56.0809 2552 gagp30kx (4e1cd0a45c50a8882616cae5bf82f3c5) C:\Windows\system32\drivers\gagp30kx.sys
15:51:56.0813 2552 gagp30kx - ok
15:51:56.0901 2552 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\Windows\system32\Drivers\GEARAspiWDM.sys
15:51:56.0905 2552 GEARAspiWDM - ok
15:51:57.0001 2552 ghaio (31b40f40e09513addc460f6a297ad474) C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys
15:51:57.0002 2552 ghaio - ok
15:51:57.0218 2552 HdAudAddService (3f90e001369a07243763bd5a523d8722) C:\Windows\system32\drivers\HdAudio.sys
15:51:57.0223 2552 HdAudAddService - ok
15:51:57.0318 2552 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys
15:51:57.0326 2552 HDAudBus - ok
15:51:57.0381 2552 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys
15:51:57.0386 2552 HidBth - ok
15:51:57.0432 2552 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys
15:51:57.0436 2552 HidIr - ok
15:51:57.0517 2552 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys
15:51:57.0521 2552 HidUsb - ok
15:51:57.0597 2552 HpCISSs (df353b401001246853763c4b7aaa6f50) C:\Windows\system32\drivers\hpcisss.sys
15:51:57.0600 2552 HpCISSs - ok
15:51:57.0677 2552 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys
15:51:57.0684 2552 HTTP - ok
15:51:57.0716 2552 i2omp (324c2152ff2c61abae92d09f3cca4d63) C:\Windows\system32\drivers\i2omp.sys
15:51:57.0722 2552 i2omp - ok
15:51:57.0789 2552 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
15:51:57.0793 2552 i8042prt - ok
15:51:58.0185 2552 iaStor (e5a0034847537eaee3c00349d5c34c5f) C:\Windows\system32\DRIVERS\iaStor.sys
15:51:58.0191 2552 iaStor - ok
15:51:58.0261 2552 iaStorV (c957bf4b5d80b46c5017bf0101e6c906) C:\Windows\system32\drivers\iastorv.sys
15:51:58.0266 2552 iaStorV - ok
15:51:58.0459 2552 igfx (9378d57e2b96c0a185d844770ad49948) C:\Windows\system32\DRIVERS\igdkmd32.sys
15:51:58.0482 2552 igfx - ok
15:51:58.0618 2552 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
15:51:58.0622 2552 iirsp - ok
15:51:58.0693 2552 IntcAzAudAddService - ok
15:51:58.0776 2552 intelide (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys
15:51:58.0780 2552 intelide - ok
15:51:58.0872 2552 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys
15:51:58.0876 2552 intelppm - ok
15:51:58.0973 2552 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
15:51:58.0978 2552 IpFilterDriver - ok
15:51:59.0029 2552 IpInIp - ok
15:51:59.0085 2552 IPMIDRV (40f34f8aba2a015d780e4b09138b6c17) C:\Windows\system32\drivers\ipmidrv.sys
15:51:59.0090 2552 IPMIDRV - ok
15:51:59.0151 2552 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
15:51:59.0157 2552 IPNAT - ok
15:51:59.0247 2552 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
15:51:59.0251 2552 IRENUM - ok
15:51:59.0323 2552 isapnp (350fca7e73cf65bcef43fae1e4e91293) C:\Windows\system32\drivers\isapnp.sys
15:51:59.0327 2552 isapnp - ok
15:51:59.0401 2552 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys
15:51:59.0407 2552 iScsiPrt - ok
15:51:59.0482 2552 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
15:51:59.0486 2552 iteatapi - ok
15:51:59.0536 2552 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
15:51:59.0542 2552 iteraid - ok
15:51:59.0595 2552 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
15:51:59.0600 2552 kbdclass - ok
15:51:59.0644 2552 kbdhid (d2600cb17b7408b4a83f231dc9a11ac3) C:\Windows\system32\drivers\kbdhid.sys
15:51:59.0648 2552 kbdhid - ok
15:51:59.0735 2552 kbfiltr (cc2a86d7bbf14977340dca61bbcba771) C:\Windows\system32\DRIVERS\kbfiltr.sys
15:51:59.0739 2552 kbfiltr - ok
15:51:59.0846 2552 KSecDD (86165728af9bf72d6442a894fdfb4f8b) C:\Windows\system32\Drivers\ksecdd.sys
15:51:59.0855 2552 KSecDD - ok
15:51:59.0995 2552 Lavasoft Kernexplorer (6c4a3804510ad8e0f0c07b5be3d44ddb) C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys
15:51:59.0998 2552 Lavasoft Kernexplorer - ok
15:52:00.0142 2552 Lbd (b7c19ec8b0dd7efa58ad41ffeb8b8cda) C:\Windows\system32\DRIVERS\Lbd.sys
15:52:00.0148 2552 Lbd - ok
15:52:00.0240 2552 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
15:52:00.0245 2552 lltdio - ok
15:52:00.0311 2552 LSI_FC (a2262fb9f28935e862b4db46438c80d2) C:\Windows\system32\drivers\lsi_fc.sys
15:52:00.0316 2552 LSI_FC - ok
15:52:00.0359 2552 LSI_SAS (30d73327d390f72a62f32c103daf1d6d) C:\Windows\system32\drivers\lsi_sas.sys
15:52:00.0363 2552 LSI_SAS - ok
15:52:00.0413 2552 LSI_SCSI (e1e36fefd45849a95f1ab81de0159fe3) C:\Windows\system32\drivers\lsi_scsi.sys
15:52:00.0419 2552 LSI_SCSI - ok
15:52:00.0482 2552 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
15:52:00.0488 2552 luafv - ok
15:52:00.0559 2552 MBAMSwissArmy - ok
15:52:00.0625 2552 megasas (d153b14fc6598eae8422a2037553adce) C:\Windows\system32\drivers\megasas.sys
15:52:00.0630 2552 megasas - ok
15:52:00.0717 2552 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
15:52:00.0722 2552 Modem - ok
15:52:00.0819 2552 MODEMCSA (cbb59c41f19efea1a000793e08070a62) C:\Windows\system32\drivers\MODEMCSA.sys
15:52:00.0823 2552 MODEMCSA - ok
15:52:00.0890 2552 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
15:52:00.0895 2552 monitor - ok
15:52:00.0963 2552 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
15:52:00.0967 2552 mouclass - ok
15:52:01.0013 2552 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
15:52:01.0017 2552 mouhid - ok
15:52:01.0076 2552 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
15:52:01.0081 2552 MountMgr - ok
15:52:01.0149 2552 mpio (583a41f26278d9e0ea548163d6139397) C:\Windows\system32\drivers\mpio.sys
15:52:01.0154 2552 mpio - ok
15:52:01.0194 2552 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
15:52:01.0198 2552 mpsdrv - ok
15:52:01.0256 2552 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
15:52:01.0260 2552 Mraid35x - ok
15:52:01.0316 2552 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys
15:52:01.0321 2552 MRxDAV - ok
15:52:01.0383 2552 mrxsmb (1e94971c4b446ab2290deb71d01cf0c2) C:\Windows\system32\DRIVERS\mrxsmb.sys
15:52:01.0388 2552 mrxsmb - ok
15:52:01.0455 2552 mrxsmb10 (4fccb34d793b116423209c0f8b7a3b03) C:\Windows\system32\DRIVERS\mrxsmb10.sys
15:52:01.0461 2552 mrxsmb10 - ok
15:52:01.0496 2552 mrxsmb20 (c3cb1b40ad4a0124d617a1199b0b9d7c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
15:52:01.0501 2552 mrxsmb20 - ok
15:52:01.0546 2552 msahci (742aed7939e734c36b7e8d6228ce26b7) C:\Windows\system32\drivers\msahci.sys
15:52:01.0552 2552 msahci - ok
15:52:01.0594 2552 msdsm (3fc82a2ae4cc149165a94699183d3028) C:\Windows\system32\drivers\msdsm.sys
15:52:01.0601 2552 msdsm - ok
15:52:01.0683 2552 MSDV (343291a4dfd7c923c3f71f550830ec1c) C:\Windows\system32\DRIVERS\msdv.sys
15:52:01.0689 2552 MSDV - ok
15:52:01.0747 2552 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
15:52:01.0752 2552 Msfs - ok
15:52:01.0804 2552 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
15:52:01.0810 2552 msisadrv - ok
15:52:01.0856 2552 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
15:52:01.0861 2552 MSKSSRV - ok
15:52:01.0924 2552 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
15:52:01.0930 2552 MSPCLOCK - ok
15:52:01.0978 2552 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
15:52:01.0983 2552 MSPQM - ok
15:52:02.0040 2552 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys
15:52:02.0046 2552 MsRPC - ok
15:52:02.0120 2552 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
15:52:02.0126 2552 mssmbios - ok
15:52:02.0178 2552 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
15:52:02.0184 2552 MSTEE - ok
15:52:02.0241 2552 MTsensor (97affa9d95ffe20eee6229bc6be166cf) C:\Windows\system32\DRIVERS\ATKACPI.sys
15:52:02.0243 2552 MTsensor - ok
15:52:02.0295 2552 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys
15:52:02.0301 2552 Mup - ok
15:52:02.0370 2552 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys
15:52:02.0377 2552 NativeWifiP - ok
15:52:02.0443 2552 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys
15:52:02.0454 2552 NDIS - ok
15:52:02.0506 2552 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys
15:52:02.0511 2552 NdisTapi - ok
15:52:02.0567 2552 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys
15:52:02.0572 2552 Ndisuio - ok
15:52:02.0617 2552 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys
15:52:02.0623 2552 NdisWan - ok
15:52:02.0639 2552 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
15:52:02.0645 2552 NDProxy - ok
15:52:02.0672 2552 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys
15:52:02.0678 2552 NetBIOS - ok
15:52:02.0742 2552 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys
15:52:02.0748 2552 netbt - ok
15:52:03.0135 2552 NETw3v32 (a15f219208843a5a210c8cb391384453) C:\Windows\system32\DRIVERS\NETw3v32.sys
15:52:03.0154 2552 NETw3v32 - ok
15:52:03.0288 2552 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
15:52:03.0294 2552 nfrd960 - ok
15:52:03.0360 2552 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys
15:52:03.0365 2552 Npfs - ok
15:52:03.0436 2552 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys
15:52:03.0444 2552 nsiproxy - ok
15:52:03.0546 2552 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys
15:52:03.0561 2552 Ntfs - ok
15:52:03.0615 2552 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
15:52:03.0621 2552 ntrigdigi - ok
15:52:03.0683 2552 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
15:52:03.0690 2552 Null - ok
15:52:03.0922 2552 nvlddmkm (cfddedc1151839dd71f78472645214a5) C:\Windows\system32\DRIVERS\nvlddmkm.sys
15:52:03.0966 2552 nvlddmkm - ok
15:52:04.0024 2552 nvraid (e69e946f80c1c31c53003bfbf50cbb7c) C:\Windows\system32\drivers\nvraid.sys
15:52:04.0031 2552 nvraid - ok
15:52:04.0080 2552 nvstor (9e0ba19a28c498a6d323d065db76dffc) C:\Windows\system32\drivers\nvstor.sys
15:52:04.0087 2552 nvstor - ok
15:52:04.0132 2552 nv_agp (07c186427eb8fcc3d8d7927187f260f7) C:\Windows\system32\drivers\nv_agp.sys
15:52:04.0139 2552 nv_agp - ok
15:52:04.0152 2552 NwlnkFlt - ok
15:52:04.0174 2552 NwlnkFwd - ok
15:52:04.0264 2552 ohci1394 (6f310e890d46e246e0e261a63d9b36b4) C:\Windows\system32\DRIVERS\ohci1394.sys
15:52:04.0270 2552 ohci1394 - ok
15:52:04.0372 2552 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys
15:52:04.0379 2552 Parport - ok
15:52:04.0447 2552 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys
15:52:04.0454 2552 partmgr - ok
15:52:04.0502 2552 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys
15:52:04.0509 2552 Parvdm - ok
15:52:04.0629 2552 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\Windows\system32\DRIVERS\pccsmcfd.sys
15:52:04.0636 2552 pccsmcfd - ok
15:52:04.0698 2552 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys
15:52:04.0705 2552 pci - ok
15:52:04.0788 2552 pciide (3b1901e401473e03eb8c874271e50c26) C:\Windows\system32\drivers\pciide.sys
15:52:04.0795 2552 pciide - ok
15:52:04.0847 2552 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys
15:52:04.0855 2552 pcmcia - ok
15:52:04.0926 2552 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
15:52:04.0941 2552 PEAUTH - ok
15:52:05.0077 2552 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys
15:52:05.0085 2552 PptpMiniport - ok
15:52:05.0145 2552 Processor (0e3cef5d28b40cf273281d620c50700a) C:\Windows\system32\drivers\processr.sys
15:52:05.0152 2552 Processor - ok
15:52:05.0210 2552 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys
15:52:05.0216 2552 PSched - ok
15:52:05.0281 2552 qcusbser (59b96dbe2acb872cc1c9f4c14dbb7690) C:\Windows\system32\DRIVERS\qcusbser.sys
15:52:05.0287 2552 qcusbser - ok
15:52:05.0380 2552 ql2300 (ccdac889326317792480c0a67156a1ec) C:\Windows\system32\drivers\ql2300.sys
15:52:05.0393 2552 ql2300 - ok
15:52:05.0470 2552 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
15:52:05.0476 2552 ql40xx - ok
15:52:05.0555 2552 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
15:52:05.0562 2552 QWAVEdrv - ok
15:52:05.0604 2552 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys
15:52:05.0611 2552 RasAcd - ok
15:52:05.0658 2552 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys
15:52:05.0666 2552 Rasl2tp - ok
15:52:05.0711 2552 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys
15:52:05.0717 2552 RasPppoe - ok
15:52:05.0768 2552 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys
15:52:05.0774 2552 RasSstp - ok
15:52:05.0818 2552 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys
15:52:05.0826 2552 rdbss - ok
15:52:05.0890 2552 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
15:52:05.0896 2552 RDPCDD - ok
15:52:05.0968 2552 rdpdr (e8bd98d46f2ed77132ba927fccb47d8b) C:\Windows\system32\drivers\rdpdr.sys
15:52:05.0976 2552 rdpdr - ok
15:52:06.0023 2552 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys
15:52:06.0030 2552 RDPENCDD - ok
15:52:06.0095 2552 RDPWD (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys
15:52:06.0103 2552 RDPWD - ok
15:52:06.0174 2552 RFCOMM (7ec90c316177ba3f1bce92005264b447) C:\Windows\system32\DRIVERS\rfcomm.sys
15:52:06.0182 2552 RFCOMM - ok
15:52:06.0222 2552 rimmptsk (355aac141b214bef1dbc1483afd9bd50) C:\Windows\system32\DRIVERS\rimmptsk.sys
15:52:06.0229 2552 rimmptsk - ok
15:52:06.0265 2552 rimsptsk (a4216c71dd4f60b26418ccfd99cd0815) C:\Windows\system32\DRIVERS\rimsptsk.sys
15:52:06.0272 2552 rimsptsk - ok
15:52:06.0303 2552 rismxdp (d231b577024aa324af13a42f3a807d10) C:\Windows\system32\DRIVERS\rixdptsk.sys
15:52:06.0311 2552 rismxdp - ok
15:52:06.0375 2552 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys
15:52:06.0382 2552 rspndr - ok
15:52:06.0429 2552 RTL8169 (3d2b6520699d1dcd5a13f9e7cad62199) C:\Windows\system32\DRIVERS\Rtlh86.sys
15:52:06.0437 2552 RTL8169 - ok
15:52:06.0496 2552 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
15:52:06.0504 2552 sbp2port - ok
15:52:06.0592 2552 sdbus (8f36b54688c31eed4580129040c6a3d3) C:\Windows\system32\DRIVERS\sdbus.sys
15:52:06.0599 2552 sdbus - ok
15:52:06.0634 2552 secdrv - ok
15:52:06.0707 2552 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys
15:52:06.0714 2552 Serenum - ok
15:52:06.0758 2552 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys
15:52:06.0766 2552 Serial - ok
15:52:06.0829 2552 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys
15:52:06.0836 2552 sermouse - ok
15:52:06.0936 2552 sffdisk (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\DRIVERS\sffdisk.sys
15:52:06.0944 2552 sffdisk - ok
15:52:06.0981 2552 sffp_mmc (8fd08a310645fe872eeec6e08c6bf3ee) C:\Windows\system32\drivers\sffp_mmc.sys
15:52:06.0987 2552 sffp_mmc - ok
15:52:07.0039 2552 sffp_sd (9f66a46c55d6f1ccabc79bb7afccc545) C:\Windows\system32\DRIVERS\sffp_sd.sys
15:52:07.0046 2552 sffp_sd - ok
15:52:07.0091 2552 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\DRIVERS\sfloppy.sys
15:52:07.0098 2552 sfloppy - ok
15:52:07.0134 2552 sisagp (d2a595d6eebeeaf4334f8e50efbc9931) C:\Windows\system32\drivers\sisagp.sys
15:52:07.0142 2552 sisagp - ok
15:52:07.0173 2552 SiSRaid2 (cedd6f4e7d84e9f98b34b3fe988373aa) C:\Windows\system32\drivers\sisraid2.sys
15:52:07.0181 2552 SiSRaid2 - ok
15:52:07.0209 2552 SiSRaid4 (df843c528c4f69d12ce41ce462e973a7) C:\Windows\system32\drivers\sisraid4.sys
15:52:07.0218 2552 SiSRaid4 - ok
15:52:07.0261 2552 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys
15:52:07.0269 2552 Smb - ok
15:52:07.0332 2552 smserial (d9bfd2298f5cf116d8eaae3b02dcee2e) C:\Windows\system32\DRIVERS\smserial.sys
15:52:07.0346 2552 smserial - ok
15:52:07.0497 2552 SNP2UVC (0302bc619d4a723317e7f8eb0c362bd3) C:\Windows\system32\DRIVERS\snp2uvc.sys
15:52:07.0519 2552 SNP2UVC - ok
15:52:07.0590 2552 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys
15:52:07.0597 2552 spldr - ok
15:52:07.0726 2552 sptd (cdddec541bc3c96f91ecb48759673505) C:\Windows\system32\Drivers\sptd.sys
15:52:07.0726 2552 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: cdddec541bc3c96f91ecb48759673505
15:52:07.0736 2552 sptd ( LockedFile.Multi.Generic ) - warning
15:52:07.0736 2552 sptd - detected LockedFile.Multi.Generic (1)
15:52:08.0025 2552 srv (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys
15:52:08.0034 2552 srv - ok
15:52:08.0214 2552 srv2 (ff33aff99564b1aa534f58868cbe41ef) C:\Windows\system32\DRIVERS\srv2.sys
15:52:08.0223 2552 srv2 - ok
15:52:08.0259 2552 srvnet (7605c0e1d01a08f3ecd743f38b834a44) C:\Windows\system32\DRIVERS\srvnet.sys
15:52:08.0268 2552 srvnet - ok
15:52:08.0335 2552 sscdbus (d6870895fe46a464a19141440eb6cc1e) C:\Windows\system32\DRIVERS\sscdbus.sys
15:52:08.0343 2552 sscdbus - ok
15:52:08.0392 2552 sscdmdfl (0fe167362e4689b716cdc8d93adedda8) C:\Windows\system32\DRIVERS\sscdmdfl.sys
15:52:08.0400 2552 sscdmdfl - ok
15:52:08.0449 2552 sscdmdm (55a15707e32b6709242ad127e62ca55a) C:\Windows\system32\DRIVERS\sscdmdm.sys
15:52:08.0458 2552 sscdmdm - ok
15:52:08.0552 2552 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys
15:52:08.0560 2552 swenum - ok
15:52:08.0633 2552 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
15:52:08.0642 2552 Symc8xx - ok
15:52:08.0697 2552 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
15:52:08.0706 2552 Sym_hi - ok
15:52:08.0753 2552 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
15:52:08.0762 2552 Sym_u3 - ok
15:52:08.0799 2552 SynTP (760e4f5a1e754bbe4a1bd2a0b54f6aa6) C:\Windows\system32\DRIVERS\SynTP.sys
15:52:08.0810 2552 SynTP - ok
15:52:08.0946 2552 Tcpip (2756186e287139310997090797e0182b) C:\Windows\system32\drivers\tcpip.sys
15:52:08.0963 2552 Tcpip - ok
15:52:09.0046 2552 Tcpip6 (2756186e287139310997090797e0182b) C:\Windows\system32\DRIVERS\tcpip.sys
15:52:09.0063 2552 Tcpip6 - ok
15:52:09.0124 2552 tcpipreg (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys
15:52:09.0132 2552 tcpipreg - ok
15:52:09.0191 2552 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys
15:52:09.0198 2552 TDPIPE - ok
15:52:09.0260 2552 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys
15:52:09.0268 2552 TDTCP - ok
15:52:09.0303 2552 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys
15:52:09.0311 2552 tdx - ok
15:52:09.0385 2552 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys
15:52:09.0393 2552 TermDD - ok
15:52:09.0470 2552 TPM (6d9ad3534a9cf7e4b86c6eae8bc335f6) C:\Windows\system32\drivers\tpm.sys
15:52:09.0479 2552 TPM - ok
15:52:09.0625 2552 TrueSight (f69641efdb19acb4753b0155f7fdeed5) c:\windows\system32\drivers\TrueSight.sys
15:52:09.0634 2552 TrueSight - ok
15:52:09.0702 2552 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys
15:52:09.0710 2552 tssecsrv - ok
15:52:09.0780 2552 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys
15:52:09.0788 2552 tunmp - ok
15:52:09.0849 2552 tunnel (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS\tunnel.sys
15:52:09.0858 2552 tunnel - ok
15:52:09.0916 2552 uagp35 (c3ade15414120033a36c0f293d4a4121) C:\Windows\system32\drivers\uagp35.sys
15:52:09.0925 2552 uagp35 - ok
15:52:10.0001 2552 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys
15:52:10.0012 2552 udfs - ok
15:52:10.0087 2552 uliagpkx (75e6890ebfce0841d3291b02e7a8bdb0) C:\Windows\system32\drivers\uliagpkx.sys
15:52:10.0097 2552 uliagpkx - ok
15:52:10.0147 2552 uliahci (3cd4ea35a6221b85dcc25daa46313f8d) C:\Windows\system32\drivers\uliahci.sys
15:52:10.0157 2552 uliahci - ok
15:52:10.0204 2552 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
15:52:10.0213 2552 UlSata - ok
15:52:10.0269 2552 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
15:52:10.0279 2552 ulsata2 - ok
15:52:10.0348 2552 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys
15:52:10.0357 2552 umbus - ok
15:52:10.0425 2552 upperdev - ok
15:52:10.0492 2552 usbaudio (32db9517628ff0d070682aab61e688f0) C:\Windows\system32\drivers\usbaudio.sys
15:52:10.0502 2552 usbaudio - ok
15:52:10.0561 2552 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys
15:52:10.0571 2552 usbccgp - ok
15:52:10.0627 2552 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
15:52:10.0638 2552 usbcir - ok
15:52:10.0708 2552 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys
15:52:10.0717 2552 usbehci - ok
15:52:10.0780 2552 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys
15:52:10.0790 2552 usbhub - ok
15:52:10.0839 2552 usbohci (38dbc7dd6cc5a72011f187425384388b) C:\Windows\system32\drivers\usbohci.sys
15:52:10.0848 2552 usbohci - ok
15:52:10.0880 2552 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys
15:52:10.0889 2552 usbprint - ok
15:52:10.0934 2552 usbscan (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys
15:52:10.0943 2552 usbscan - ok
15:52:11.0015 2552 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS
15:52:11.0024 2552 USBSTOR - ok
15:52:11.0086 2552 usbuhci (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys
15:52:11.0094 2552 usbuhci - ok
15:52:11.0155 2552 usbvideo (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys
15:52:11.0165 2552 usbvideo - ok
15:52:11.0223 2552 VClone (94d73b62e458fb56c9ce60aa96d914f9) C:\Windows\system32\DRIVERS\VClone.sys
15:52:11.0234 2552 VClone - ok
15:52:11.0274 2552 vga (7d92be0028ecdedec74617009084b5ef) C:\Windows\system32\DRIVERS\vgapnp.sys
15:52:11.0285 2552 vga - ok
15:52:11.0322 2552 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys
15:52:11.0331 2552 VgaSave - ok
15:52:11.0361 2552 viaagp (045d9961e591cf0674a920b6ba3ba5cb) C:\Windows\system32\drivers\viaagp.sys
15:52:11.0370 2552 viaagp - ok
15:52:11.0401 2552 ViaC7 (56a4de5f02f2e88182b0981119b4dd98) C:\Windows\system32\drivers\viac7.sys
15:52:11.0410 2552 ViaC7 - ok
15:52:11.0441 2552 viaide (fd2e3175fcada350c7ab4521dca187ec) C:\Windows\system32\drivers\viaide.sys
15:52:11.0450 2552 viaide - ok
15:52:11.0505 2552 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys
15:52:11.0514 2552 volmgr - ok
15:52:11.0620 2552 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys
15:52:11.0631 2552 volmgrx - ok
15:52:11.0706 2552 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys
15:52:11.0717 2552 volsnap - ok
15:52:11.0804 2552 vsmraid (d984439746d42b30fc65a4c3546c6829) C:\Windows\system32\drivers\vsmraid.sys
15:52:11.0816 2552 vsmraid - ok
15:52:11.0879 2552 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
15:52:11.0890 2552 WacomPen - ok
15:52:11.0973 2552 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
15:52:11.0982 2552 Wanarp - ok
15:52:11.0995 2552 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
15:52:12.0006 2552 Wanarpv6 - ok
15:52:12.0074 2552 Wd (afc5ad65b991c1e205cf25cfdbf7a6f4) C:\Windows\system32\drivers\wd.sys
15:52:12.0083 2552 Wd - ok
15:52:12.0140 2552 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys
15:52:12.0153 2552 Wdf01000 - ok
15:52:12.0306 2552 WmiAcpi (701a9f884a294327e9141d73746ee279) C:\Windows\system32\drivers\wmiacpi.sys
15:52:12.0316 2552 WmiAcpi - ok
15:52:12.0398 2552 WpdUsb (de9d36f91a4df3d911626643debf11ea) C:\Windows\system32\DRIVERS\wpdusb.sys
15:52:12.0407 2552 WpdUsb - ok
15:52:12.0462 2552 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys
15:52:12.0471 2552 ws2ifsl - ok
15:52:12.0565 2552 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys
15:52:12.0575 2552 WUDFRd - ok
15:52:12.0615 2552 MBR (0x1B8) (64b1e91c5c6c2157642651010728f90f) \Device\Harddisk0\DR0
15:52:12.0637 2552 \Device\Harddisk0\DR0 - ok
15:52:12.0648 2552 Boot (0x1200) (81b2f67e6dd23dc99b8343abaccaed20) \Device\Harddisk0\DR0\Partition0
15:52:12.0649 2552 \Device\Harddisk0\DR0\Partition0 - ok
15:52:12.0676 2552 Boot (0x1200) (5de650c7eb3aaecc65c4117a15ed60b3) \Device\Harddisk0\DR0\Partition1
15:52:12.0677 2552 \Device\Harddisk0\DR0\Partition1 - ok
15:52:12.0677 2552 ============================================================
15:52:12.0677 2552 Scan finished
15:52:12.0677 2552 ============================================================
15:52:12.0693 2536 Detected object count: 1
15:52:12.0694 2536 Actual detected object count: 1
15:52:51.0761 2536 sptd ( LockedFile.Multi.Generic ) - skipped by user
15:52:51.0761 2536 sptd ( LockedFile.Multi.Generic ) - User select action: Skip

Ok.
Refais TDSSkiller en le retéléchargeant, je te redonne la procédure :

- Télécharge TDSSKiller : https://support.kaspersky.com/downloads/utils/tdsskiller.zip

- Lance-le (Utilisateurs de Vista/Seven => Clic droit puis "Exécuter en tant que administrateur")

L'outil va télécharger automatiquement la dernière version de TDSSKiller puis lancera une analyse.

Patiente pendant le scan. À la fin de l'analyse, appuie sur une touche de ton choix. Un rapport va s'ouvrir.

- Copie/Colle son contenu dans ta prochaine réponse sur le forum.

N.B : Le rapport se trouve également sous C:\tdsskiller.txt.

Si TDSS.tdl2 est détecté l'option delete sera cochée par défaut.
Si TDSS.tdl3 est détecté assure toi que Cure est bien cochée.
Si TDSS.tdl4 (\HardDisk0\MBR) est détecté assure toi que Cure est bien cochée.
Si Suspicious file est indiqué, laisse l''option cochée sur Skip
Si Rootkit.Win32.ZAccess est détecté règle sur "cure" en haut , et "delete" en bas.

Si tu as des questions sur l'utilisation de TDSSkiller, n'hésite pas à me les poser !

@+

Gabriel.

Bonjour,

voici le rapport Malwarebytes:

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Version de la base de données: 8040

Windows 6.0.6002 Service Pack 2
Internet Explorer 7.0.6002.18005

30/10/2011 13:42:56
mbam-log-2011-10-30 (13-42-56).txt

Type d'examen: Examen complet (C:\|D:\|E:\|F:\|)
Elément(s) analysé(s): 377936
Temps écoulé: 3 heure(s), 40 minute(s), 22 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 5
Fichier(s) infecté(s): 11

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\asc3550p (Rootkit.Agent) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform\SRS_IT_E8790472B7765A513EAB95 (Malware.Trace) -> Value: SRS_IT_E8790472B7765A513EAB95 -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowMyComputer (PUM.Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
c:\Windows\System32\drivers\downld (Trojan.Agent) -> Quarantined and deleted successfully.
c:\program files\mozilla firefox\extensions\{d9adb0a8-7bfb-498d-9880-ee78a81ccfa0} (Adware.QuestBrowse) -> Quarantined and deleted successfully.
c:\program files\mozilla firefox\extensions\{d9adb0a8-7bfb-498d-9880-ee78a81ccfa0}\chrome (Adware.QuestBrowse) -> Quarantined and deleted successfully.
c:\program files\mozilla firefox\extensions\{d9adb0a8-7bfb-498d-9880-ee78a81ccfa0}\defaults (Adware.QuestBrowse) -> Quarantined and deleted successfully.
c:\program files\mozilla firefox\extensions\{d9adb0a8-7bfb-498d-9880-ee78a81ccfa0}\defaults\preferences (Adware.QuestBrowse) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
c:\programdata\bqmaiuhfsndl.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\programdata\he04903jcfec04903\he04903jcfec04903.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\Users\Barret\Desktop\rk_quarantine\bqmaiuhfsndl.exe.vir (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\Users\Barret\Desktop\rk_quarantine\kb3133030.exe.vir (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\Users\Barret\Desktop\rk_quarantine\kb3133919.exe.vir (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\Windows\System32\drivers\secdrv.sys (Trojan.Vundo) -> Quarantined and deleted successfully.
c:\Windows\winsxs\x86_macrovision-protection-safedisc_31bf3856ad364e35_6.0.6000.16386_none_5b761551c05a7af8\secdrv.sys (Trojan.Vundo) -> Quarantined and deleted successfully.
c:\program files\mozilla firefox\extensions\{d9adb0a8-7bfb-498d-9880-ee78a81ccfa0}\chrome.manifest (Adware.QuestBrowse) -> Quarantined and deleted successfully.
c:\program files\mozilla firefox\extensions\{d9adb0a8-7bfb-498d-9880-ee78a81ccfa0}\install.rdf (Adware.QuestBrowse) -> Quarantined and deleted successfully.
c:\program files\mozilla firefox\extensions\{d9adb0a8-7bfb-498d-9880-ee78a81ccfa0}\chrome\questbrowse.jar (Adware.QuestBrowse) -> Quarantined and deleted successfully.
c:\program files\mozilla firefox\extensions\{d9adb0a8-7bfb-498d-9880-ee78a81ccfa0}\defaults\preferences\prefs.js (Adware.QuestBrowse) -> Quarantined and deleted successfully.

Bien :)

ATTENTION ! Plusieurs heures de scan sont probables !

Tu pourras brancher tes périphériques externes pour les scanner en même temps si tu le souhaites.

Télécharge Malwarebytes' Anti-Malware MBAMsur ton bureau : http://www.malwarebytes.org/mbam/program/mbam-setup.exe

Si problème essaie avec celui-ci : https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/

. Enregistre-le sur ton bureau.
. Double clique sur le fichier téléchargé pour lancer le processus d'installation. (Vista et 7 : Éxécuter en tant qu'administrateur)
. Si le pare-feu demande l'autorisation de se connecter pour malwarebytes, accepte.
. Dans l'onglet "Mise à jour", clique sur le bouton "Recherche de mise à jour".

Fais le plusieurs fois jusqu'à ce qu'il te dise que tu as la dernière version de base de données.

. Une fois la mise à jour terminée :
. Rends-toi dans l'onglet "Recherche"
. Sélectionne Exécuter un Examen complet.
. Sélectionne Tous les disques si proposé.
. Clique sur Rechercher.
. Le scan démarre. Patiente, cela peut durer plusieurs heures, selon la taille de tes disques.
. À la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement ou autre. Clique sur "Afficher les résultats" pour afficher tous les objets trouvés.
. Cliques sur Ok pour poursuivre.
. Si des malwares ont été détectés<souligne>, clique sur Afficher les résultats.
. <souligne>Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
. Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse.
. Redemarre le PC si il le fait pas lui même.
. Une fois redémarré double-clique sur Malwarebytes' AntiMalware.
. Rends toi dans l'onglet "rapport/log".
. Tu cliques sur le rapport pour l'afficher.
. Tu cliques sur Edition en haut du boc notes,et puis sur Sélectionner tout.
. Tu recliques sur Edition et puis sur Copier et tu reviens sur le forum et dans ta réponse, colle le rapport (CTRL + V).

=> Si tu as besoin d'aide regarde ce tutoriel :

https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

Si tu as des questions, n'hésite pas à me les poser !

@+

Gabriel.

Bonjour,
Pour indication, avant de cliquer sur "nettoyer" (soit, après avoir fait "ok"), une boite de dial s'est ouverte pour me demander si je souhaitais déinstaller windows.... de crainte j'ai fais "annuler". Puis j'ai repris à l'étape "nettoyer"

Voici le rapport:

Rapport de ZHPFix 1.12.3366 par Nicolas Coolman, Update du 26/10/2011
Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-29-10-2011-13-37-55.txt
Run by Barret at 29/10/2011 13:38:22
Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Logiciel(s) ==========
ABSENT Software Key: {835525BE-63BD-4EC4-9425-00CEAD4849C2}

========== Processus mémoire ==========
SUPPRIME Memory Process: C:\Users\Barret\AppData\Local\Temp\MyBabylonTB.exe

========== Clé(s) du Registre ==========
ABSENT Key: CLSID BHO: {64F56FC1-1272-44CD-BA6E-39723696E350}
ABSENT Key: HKCU\Software\AppDataLow\Software\PriceGong
ABSENT Key: HKCU\Software\Spointer
ABSENT Key: HKCU\Software\WakeNet
ABSENT Key: HKCU\Software\WideStream
ABSENT Key: HKCU\Software\bisoft
ABSENT Key: HKLM\Software\EoRezo
SUPPRIME Key: HKLM\Software\QuestBrowse
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\QuestBrowse
SUPPRIME Key: HKLM\Software\Classes\shopperreports.reporter
SUPPRIME Key: HKLM\Software\Classes\shopperreports.reporter.1
SUPPRIME Key: HKLM\Software\Classes\CLSID\{12D6D31C-C5BF-4C66-BF8D-D54D5BFD3D41}
SUPPRIME Key: HKLM\Software\Classes\Interface\{12D6D31C-C5BF-4C66-BF8D-D54D5BFD3D41}
SUPPRIME Key: HKLM\Software\Classes\Interface\{24CBAA7E-4C85-4B75-B101-9803391AC327}
SUPPRIME Key: HKLM\Software\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}
SUPPRIME Key: HKLM\Software\Classes\CLSID\{48ACB95E-38BE-4377-BE46-67F5B68C1A77}
SUPPRIME Key: HKLM\Software\Classes\CLSID\{6D4630E6-2F14-4615-8FE3-26ECBC39AC2A}
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6D4630E6-2F14-4615-8FE3-26ECBC39AC2A}
SUPPRIME Key: HKLM\Software\Classes\CLSID\{723328FF-22D0-497f-9EB5-1AC919582DE1}
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{723328FF-22D0-497f-9EB5-1AC919582DE1}
SUPPRIME Key: HKLM\Software\Classes\Interface\{7D21B744-838A-4208-8CEF-3D70162B053B}
SUPPRIME Key: HKLM\Software\Classes\Interface\{8273A950-A894-497B-B408-A19B33968243}
SUPPRIME Key: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7}
SUPPRIME Key: HKLM\Software\Classes\Interface\{A0DFD148-D748-4C58-B8E7-396B85D62091}
SUPPRIME Key: HKLM\Software\Classes\TypeLib\{A36EC25F-1846-45D0-903F-A9F9B5CF0FD0}
SUPPRIME Key: HKLM\Software\Classes\TypeLib\{A4D74ECD-AEF8-45EB-929C-DB36E4D00ECF}
SUPPRIME Key: HKLM\Software\Classes\TypeLib\{B5E29133-7CC2-4174-B60E-42F51C7E7919}
SUPPRIME Key: HKLM\Software\Classes\Interface\{EAE5C2BC-AE3F-4C6F-A736-03DDF56FA2D9}
SUPPRIME Key: HKLM\Software\Classes\CLSID\{F030DBBA-EFC2-4443-A1D1-0B716CE0CC78}
SUPPRIME Key: HKLM\Software\Classes\Interface\{F030DBBA-EFC2-4443-A1D1-0B716CE0CC78}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{835525BE-63BD-4EC4-9425-00CEAD4849C2}
SUPPRIME Key: HKLM\Software\EoRezo
ABSENT Key: HKLM\Software\QuestBrowse
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\QuestBrowse
ABSENT Key: HKLM\Software\Classes\shopperreports.reporter
ABSENT Key: HKLM\Software\Classes\shopperreports.reporter.1
ABSENT Key: HKLM\Software\Classes\CLSID\{12D6D31C-C5BF-4C66-BF8D-D54D5BFD3D41}
ABSENT Key: HKLM\Software\Classes\Interface\{12D6D31C-C5BF-4C66-BF8D-D54D5BFD3D41}
ABSENT Key: HKLM\Software\Classes\Interface\{24CBAA7E-4C85-4B75-B101-9803391AC327}
ABSENT Key: HKLM\Software\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}
ABSENT Key: HKLM\Software\Classes\CLSID\{48ACB95E-38BE-4377-BE46-67F5B68C1A77}
ABSENT Key: HKLM\Software\Classes\CLSID\{6D4630E6-2F14-4615-8FE3-26ECBC39AC2A}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6D4630E6-2F14-4615-8FE3-26ECBC39AC2A}
ABSENT Key: HKLM\Software\Classes\CLSID\{723328FF-22D0-497f-9EB5-1AC919582DE1}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{723328FF-22D0-497f-9EB5-1AC919582DE1}
ABSENT Key: HKLM\Software\Classes\Interface\{7D21B744-838A-4208-8CEF-3D70162B053B}
ABSENT Key: HKLM\Software\Classes\Interface\{8273A950-A894-497B-B408-A19B33968243}
ABSENT Key: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7}
ABSENT Key: HKLM\Software\Classes\Interface\{A0DFD148-D748-4C58-B8E7-396B85D62091}
ABSENT Key: HKLM\Software\Classes\TypeLib\{A36EC25F-1846-45D0-903F-A9F9B5CF0FD0}
ABSENT Key: HKLM\Software\Classes\TypeLib\{A4D74ECD-AEF8-45EB-929C-DB36E4D00ECF}
ABSENT Key: HKLM\Software\Classes\TypeLib\{B5E29133-7CC2-4174-B60E-42F51C7E7919}
ABSENT Key: HKLM\Software\Classes\Interface\{EAE5C2BC-AE3F-4C6F-A736-03DDF56FA2D9}
ABSENT Key: HKLM\Software\Classes\CLSID\{F030DBBA-EFC2-4443-A1D1-0B716CE0CC78}
ABSENT Key: HKLM\Software\Classes\Interface\{F030DBBA-EFC2-4443-A1D1-0B716CE0CC78}

========== Valeur(s) du Registre ==========
ABSENT RunValue: ItsTV
SUPPRIME IFC: [FEATURE_BROWSER_EMULATION] svchost.exe
ABSENT IFC: [FEATURE_BROWSER_EMULATION] svchost.exe
SUPPRIME [HKLM\Software\Mozilla\Firefox\Extensions]:widestream6@spointer.com
SUPPRIME {F7D148D8-0529-4EE7-97DC-0DEFEA73AF5B}
SUPPRIME {263C2402-AFB9-4171-9BCA-FB9A70115F4A}
SUPPRIME {371A1EB3-8D7A-40F8-89CE-094CEF6170DD}
SUPPRIME {56BB64BD-8D69-4C24-B988-6B8BF15F2DC9}
SUPPRIME URLSearchHook: {ef79f67a-6ad7-4715-a0f8-932fca442023}
SUPPRIME [HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{32099aac-c132-4136-9e9a-4e364a424e17}
ABSENT [HKLM\Software\Mozilla\Firefox\Extensions]:widestream6@spointer.com
ABSENT {F7D148D8-0529-4EE7-97DC-0DEFEA73AF5B}
ABSENT {263C2402-AFB9-4171-9BCA-FB9A70115F4A}
ABSENT {371A1EB3-8D7A-40F8-89CE-094CEF6170DD}
ABSENT {56BB64BD-8D69-4C24-B988-6B8BF15F2DC9}
ABSENT URLSearchHook: {ef79f67a-6ad7-4715-a0f8-932fca442023}
ABSENT [HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{32099aac-c132-4136-9e9a-4e364a424e17}

========== Elément(s) de donnée du Registre ==========
SUPPRIME R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant
REMPLACE Value Start_ShowSearch : Good (1) - Bad (0)

========== Préférences navigateur ==========
SUPPRIME Mozilla Pref: user_pref("CT2849852.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2849852&q=");
SUPPRIME Mozilla Pref: user_pref("ConduitEngine.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CTXXXX&q=");
SUPPRIME Mozilla Pref: user_pref("CT2849852.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2849852&q=");
SUPPRIME Mozilla Pref: user_pref("ConduitEngine.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CTXXXX&q=");

========== Dossier(s) ==========
SUPPRIME Folder: C:\Program Files\Widestream6
SUPPRIME Folder: C:\ProgramData\bb
SUPPRIME Reboot Folder**: C:\Users\Barret\AppData\Roaming\OfferBox
SUPPRIME Folder: C:\Users\Barret\AppData\Roaming\widestream
SUPPRIME Folder: C:\Users\Barret\AppData\Local\widestream6 Air
SUPPRIME Folder: C:\Users\Barret\AppData\Roaming\Mozilla\Firefox\Profiles\mdt5edyd.default\extensions\{ef79f67a-6ad7-4715-a0f8-932fca442023}
SUPPRIME Folder: C:\ProgramData\Winamp Toolbar
SUPPRIME Temporaires Windows: : 238
SUPPRIME Flash Cookies: 1871
ABSENT C:\Program Files\Widestream6
ABSENT C:\ProgramData\bb
ABSENT C:\Users\Barret\AppData\Roaming\widestream
ABSENT C:\Users\Barret\AppData\Local\widestream6 Air
ABSENT C:\ProgramData\Winamp Toolbar
SUPPRIME Temporaires Windows: : 0
SUPPRIME Flash Cookies: 2

========== Fichier(s) ==========
ABSENT File: c:\users\barret\appdata\roaming\mozilla\firefox\profiles\mdt5edyd.default\searchplugins\fissa.xml
ABSENT File: c:\program files\itslabel\itstv.exe
SUPPRIME File: c:\windows\system32\drivers\asc3550p.sys
ABSENT Folder/File: c:\program files\widestream6
ABSENT Folder/File: c:\users\barret\appdata\roaming\widestream
ABSENT Folder/File: c:\users\barret\appdata\local\widestream6 air
ABSENT Folder/File: c:\users\barret\appdata\roaming\mozilla\firefox\profiles\mdt5edyd.default\searchplugins\fissa.xml
SUPPRIME File: c:\users\barret\appdata\local\temp\mybabylontb.exe
ABSENT Folder/File: c:\programdata\winamp toolbar
SUPPRIME Temporaires Windows: : 942
SUPPRIME Flash Cookies: 1049
ABSENT File: c:\windows\system32\drivers\asc3550p.sys
ABSENT Folder/File: c:\users\barret\appdata\local\temp\mybabylontb.exe
SUPPRIME Temporaires Windows: : 38
SUPPRIME Flash Cookies: 0

========== Restauration Système ==========
Point de restauration du système créé avec succès

========== Récapitulatif ==========
1 : Processus mémoire
55 : Clé(s) du Registre
17 : Valeur(s) du Registre
2 : Elément(s) de donnée du Registre
16 : Dossier(s)
15 : Fichier(s)
1 : Logiciel(s)
4 : Préférences navigateur
1 : Restauration Système

End of clean in 02mn 04s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 29/10/2011 12:37:55 [5855]
C:\ZHP\ZHPFix[R2].txt - 29/10/2011 13:38:22 [9025]

Ok.

>Copie les lignes du fichier.txt (Avec Ctrl + C) : http://dl.dropbox.com/u/32869654/Pour%20ksp034.txt

>Ouvre ZHPfix, icone seringue (Vista et 7 : "Exécuter en tant qu'administrateur").
>Colle les lignes helpers : Pour ce, clique sur la balise document, à droite de l'appareil photo. Ou alors sur le H.
>Faire Ok.
>Clique sur "Tous".
>Clique sur "Nettoyer".
>Copie le rapport, et coller-le dans la prochaine réponse sur le forum.

P.S. Si le bureau disparaît, fais Ctrl + Alt + Suppr afin d'ouvrir le gestionnaire des tâches puis dans Applications, clic sur Nouvelle Tache puis tape explorer.exe. Le bureau devrait normalent réapparaître.

Si tu as des questions, n'hésite pas à me les poser !

@+

Gabriel.

ayé !

https://www.cjoint.com/?AJDaJitts11

.....

"Violation d'accès à l'adresse 004052E4 dans le module 'ZHPDiag.exe' Ecriture de l'adresse 000003AC"

WTF ais-je envi de dire !!

Ok.
Refais moi un ZHPdiag ;)

Merci,

Gabriel.

DSl, petit plantage au redémarrage

https://www.cjoint.com/?3JCx5paa7Sj