Help ordi infecté

Bonjour,



mon jour mon ordi a quelque chose qui ne tourne pas rond est ce que quelqun pourrait analyser mon rapport hijackis?? il y a une page pc tools qui souvre de temps a autre
merci d avance
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:44:08, on 06/11/2012
Platform: Unknown Windows (WinNT 6.01.3505 SP1)
MSIE: Internet Explorer v9.00 (9.00.8112.16450)
Boot mode: Normal

Running processes:
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\CANAL+ CANALSAT A LA DEMANDE.EXE
C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Java\jre6\bin\javaw.exe
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
C:\Program Files (x86)\Megaupload\Mega Manager\MegaManager.exe
C:\Users\morgane\Documents\Mes téléchargements\01net_HijackThis.exe
C:\Users\morgane\AppData\Local\Temp\nsg96D3.tmp\ProxyInstaller.exe
C:\Users\morgane\Documents\Mes téléchargements\HiJackThis.exe
C:\Users\morgane\AppData\Local\Temp\nsg96D3.tmp\SecondOffer1.exe
C:\Users\morgane\AppData\Local\Temp\nsb4F0A.tmp\stub.exe
C:\Users\morgane\AppData\Local\Temp\conduitinstaller.exe
c:\users\morgane\appdata\local\temp\nsb4f0a.tmp\ffpath.exe
C:\Users\morgane\AppData\Local\Temp\CT3128284\spff.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?cobrand=asus.msn.com&ocid=ASUDHP&pc=ASU2
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredimail.com?a=6R7MGzjK8K
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\Windows\SysWow64\BhoECart.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: RoboForm BHO - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files (x86)\Megaupload\Mega Manager\MegaIEMn.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O3 - Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - (no file)
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [CANAL+ CANALSAT A LA DEMANDE] "C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\Launcher.exe"
O4 - HKLM\..\Run: [SSDMonitor] C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files (x86)\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [HP Deskjet 3050A J611 series (NET)] "C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN23A581NS05PJ:NW" -scfn "HP Deskjet 3050A J611 series (NET)" -AutoStart 1
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE RÉSEAU')
O4 - Startup: Alertes de surveillance de l'encre - HP Deskjet 3050A J611 series (réseau).lnk = ?
O8 - Extra context menu item: Barre RoboForm - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Enregistrer le formulaire - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Personnaliser le menu - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Remplir le formulaire - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
O9 - Extra 'Tools' menuitem: SmartPrint - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O13 - Gopher Prefix:
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: c:\progra~3\browse~1\22643~1.41\{16cdf~1\browse~1.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: CanalPlus.VOD - Canal+ Active - C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\CanalPlus.VOD.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - PC Tools - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony Ericsson PCCompanion - Avanquest Software - C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 15119 bytes

12 réponses

  1. non ca ne marche pas il me met que le fichier source ne peut pas etre lu!!!
    1. Contributeur sécurité
      Redémarre ton PC puis fais ceci stp :
      * Télécharge puis enregistre sur le bureau de ton PC ZHPDiag
      (de Nicolas Coolman) à partir : ce lien
      * Lance-le, (Clic droit "exécuter en tant qu'administrateur" si tu es sous Vista/7)
      * Clique sur l'icône en forme de loupe pour lancer le diagnostique
      * Héberge le rapport ZHPDiag.txt de ton bureau sur : malekal.com ou cjoint.com
      * Fais copier/coller le lien fourni dans ta prochaine réponse
      * Aide ZHPDiag : <<< ICI >>>
      1. # AdwCleaner v2.006 - Rapport créé le 06/11/2012 à 08:20:54
        # Mis à jour le 30/10/2012 par Xplode
        # Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
        # Nom d'utilisateur : morgane - MORGANE-PC
        # Mode de démarrage : Normal
        # Exécuté depuis : C:\Users\morgane\Documents\Mes téléchargements\adwcleaner(1).exe
        # Option [Suppression]

        ***** [Services] *****

        ***** [Fichiers / Dossiers] *****

        Dossier Supprimé : C:\Program Files (x86)\01NET.com
        Dossier Supprimé : C:\Program Files (x86)\Conduit
        Dossier Supprimé : C:\Users\morgane\AppData\Local\Conduit
        Dossier Supprimé : C:\Users\morgane\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
        Dossier Supprimé : C:\Users\morgane\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehdmaehkiiampolokajdcelladmnopgp
        Dossier Supprimé : C:\Users\morgane\AppData\Local\Temp\CT3128284
        Dossier Supprimé : C:\Users\morgane\AppData\LocalLow\01NET.com
        Dossier Supprimé : C:\Users\morgane\AppData\LocalLow\Conduit
        Dossier Supprimé : C:\Users\morgane\AppData\Roaming\Mozilla\Firefox\Profiles\l093onhz.default\extensions\{8e5025c2-8ea3-430d-80b8-a14151068a6d}
        Fichier Supprimé : C:\Users\morgane\AppData\Roaming\Mozilla\Firefox\Profiles\l093onhz.default\BrowserMngr_extensions.sqlite

        ***** [Registre] *****

        Clé Supprimée : HKCU\Software\AppDataLow\Software
        Clé Supprimée : HKCU\Software\AppDataLow\Toolbar
        Clé Supprimée : HKCU\Software\Conduit
        Clé Supprimée : HKCU\Software\DataMngr_Toolbar
        Clé Supprimée : HKCU\Software\Google\Chrome\Extensions\ehdmaehkiiampolokajdcelladmnopgp
        Clé Supprimée : HKCU\Software\IM
        Clé Supprimée : HKCU\Software\Microsoft\Babylon
        Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
        Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}
        Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
        Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
        Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8B63A8D6-BBED-4341-8867-790E5F524C96}
        Clé Supprimée : HKLM\Software\01NET.com
        Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
        Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT3128284
        Clé Supprimée : HKLM\Software\Conduit
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{151867D5-7359-40AF-8764-66E58D06283C}
        Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{151867D5-7359-40AF-8764-66E58D06283C}
        Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
        Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
        Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ehdmaehkiiampolokajdcelladmnopgp
        Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4EF8E124-0419-4A02-9C5C-08040A774394}
        Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CB56AA61-1945-4993-A470-B35DAF3FD334}
        Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
        Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\01NET.com Toolbar
        Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
        Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
        Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
        Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]

        ***** [Navigateurs] *****

        -\\ Internet Explorer v9.0.8112.16421

        Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com?SearchSource=10&ctid=CT3128284 --> hxxp://www.google.com

        -\\ Mozilla Firefox v16.0.2 (fr)

        Nom du profil : default
        Fichier : C:\Users\morgane\AppData\Roaming\Mozilla\Firefox\Profiles\l093onhz.default\prefs.js

        Supprimée : user_pref("CT3128284.autoDisableScopes", -1);

        -\\ Google Chrome v [Impossible d'obtenir la version]

        Fichier : C:\Users\morgane\AppData\Local\Google\Chrome\User Data\Default\Preferences

        Supprimée [l.1] : urls_to_restore_on_startup ={"browser":{"check_default_browser":false,"last_known_google_url":"hxxp://www.google.fr/","last_prompted_google_url":"hxxp://www.google.fr/","window_placement":{"bottom":850,"left":10,"maximized":false,"right":1060,"top":10,"work_area_bottom":860,"work_area_left":0,"work_area_right":1600,"work_area_top":0}},"countryid_at_install":18002,"default_apps_install_state":2,"distribution":{"alternate_shortcut_text":true,"create_all_shortcuts":true,"do_not_launch_chrome":true,"import_history":false,"import_search_engine":false,"make_chrome_default":false,"require_eula":true,"show_welcome_page":true,"skip_first_run_ui":true,"system_level":true,"verbose_logging":false},"dns_prefetching":{"host_referral_list":[2,["hxxp://download.cnet.com/",["hxxp://asset1.cbsistatic.com/",2.1457765990453503,"hxxp://asset3.cbsistatic.com/",2.1457765990453503,"hxxp://cdn.gigya.com/",2.1457765990453503,"hxxp://download.cnet.com/",2.4575561048895462,"hxxp://i.i.com.com/",4.3282331399547225,"hxxp://platform.twitter.com/",2.1457765990453503,"hxxp://static.ak.facebook.com/",2.4575561048895462,"hxxp://tags.bluekai.com/",3.0811151165779385,"hxxp://www.facebook.com/",2.4575561048895462,"hxxps://apis.google.com/",2.1457765990453503]],["hxxp://platform.twitter.com/",["hxxp://cdn.api.twitter.com/",2.1457765990453503,"hxxp://p.twitter.com/",2.4575561048895462,"hxxp://r.twimg.com/",2.1457765990453503]],["hxxp://static.ak.facebook.com/",["hxxp://sg.perion.com/",2.2733802]],["hxxp://tags.bluekai.com/",["hxxp://a.collective-media.net/",2.1457765990453503,"hxxp://i.i.com.com/",2.1457765990453503]],["hxxp://www.avast.com/",["hxxp://an.avast.com/",1.1018820204109874,"hxxp://dnn506yrbagrg.cloudfront.net/",0.9620910178215338,"hxxp://sg.perion.com/",1.1018820204109874,"hxxp://static.avast.com/",15.498267552473116,"hxxp://www.avast.com/",0.9620910178215338,"hxxp://www.google-analytics.com/",1.4322022204109872]],["hxxp://www.facebook.com/",["hxxp://static.ak.fbcdn.net/",0.8895369271471155]]],"startup_list":[1,"hxxp://an.avast.com/","hxxp://api.webrep.avast.com/","hxxp://dnn506yrbagrg.cloudfront.net/","hxxp://localhost:18821/","hxxp://localhost:27275/","hxxp://localhost:7754/","hxxp://program.avast.com/","hxxp://static.avast.com/","hxxp://www.avast.com/","hxxp://www.google-analytics.com/"]},"download":{"directory_upgrade":true},"extensions":{"alerts":{"initialized":true},"autoupdate":{"next_check":"12990798103497922"},"chrome_url_overrides":{"bookmarks":["chrome-extension://eemcgdkfndhakfknompkggombfjjjeno/main.html"]},"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["appNotifications","management","webstorePrivate"]},"app_launcher_ordinal":"n","page_ordinal":"n"},"dlnembnfbcpjnepmfjmngjenhhajpdfd":{"ack_external":true,"active_permissions":{"api":["plugin","tabs","webNavigation"],"explicit_host":["hxxp://*/*","hxxps://*/*"],"scriptable_host":["hxxp://*/*","hxxps://*/*"]},"events":["runtime.onInstalled"],"from_bookmark":false,"from_webstore":false,"install_time":"12988624250266593","location":3,"manifest":{"background_page":"background.html","content_scripts":[{"all_frames":true,"js":["libraries/ContentScript.js"],"matches":["hxxp://*/*","hxxps://*/*"],"run_at":"document_end"}],"description":"","key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCgmkD2kWeuSqXT4Lo9RdJ66FakQMaLHVRJQcSRattesPWg34ol8hDf5Q0XI0NTKS8dCjxg7U3giCJgkyEIexQCb6IsD9hVHzLU/cwxSk7eRfbGos67d8F3bgOES3aAYtrSpDRDlgzge9SRwE0fzaXS2VPrH5MAXdvcw64KlP7S6QIDAQAB","name":"Web Assistant","permissions":["tabs","webNavigation","hxxp://*/*","hxxps://*/*"],"plugins":[{"path":"npbrowserext.dll","public":false}],"run_at":"document_start","version":"2.0.0.441"},"path":"dlnembnfbcpjnepmfjmngjenhhajpdfd\\2.0.0.441_0","state":1},"icmlaeflemplmjndnaapfdbbnpncnbda":{"ack_external":true,"active_permissions":{"api":["tabs","webNavigation"],"explicit_host":["hxxp://*/*","hxxps://*/*"],"scriptable_host":["hxxp://*/*","hxxps://*/*"]},"events":["runtime.onInstalled"],"from_bookmark":false,"from_webstore":false,"install_time":"12990788832213853","location":3,"manifest":{"background_page":"background.html","browser_action":{"default_icon":"skin/images/icons/grey0-16.png","default_title":"avast! WebRep","popup":"popup.html"},"content_scripts":[{"css":["skin/css/anchor.css"],"matches":["hxxp://*/*","hxxps://*/*"]}],"current_locale":"fr","default_locale":"en","description":"Web Reputation Plugin","icons":{"128":"skin/images/icons/green3-24.png","256":"skin/images/icons/green3-24.png","48":"skin/images/icons/green3-24.png","64":"skin/images/icons/green3-24.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDfBBgbBomL+8Ze0I3H5diuRW5XcxzEGzMgmCWRwf/XB4gdxIKK880IIDrKW13wW/RjlB5M6CipuiERx/91yBYP6Oz+56h22Chwgn0zIiGq35MJpP1cfYbnp4bzl1odIIX/d8j8LZ+Ur22y76sZP+WtoFphr+7axJRXC8IrXhAEcQIDAQAB","name":"avast! WebRep","permissions":["hxxp://*/*","hxxps://*/*","tabs","webNavigation"],"version":"7.0.1466"},"path":"icmlaeflemplmjndnaapfdbbnpncnbda\\7.0.1466_0","state":1},"ehdmaehkiiampolokajdcelladmnopgp":{"ack_external":true}},"toolbar":["icmlaeflemplmjndnaapfdbbnpncnbda"],"toolbarsize":-1},"homepage":"hxxp://search.conduit.com/?ctid=CT3128284&SearchSource=48","homepage_is_newtabpage":false,"net":{"hxxp_server_properties":{"apis.google.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"ssl.gstatic.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"www.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":10},{"id":6,"value":0}],"supports_spdy":true}}},"ntp":{"gplus_required":false,"promo_closed":false,"promo_end":1344981600.0,"promo_group":207,"promo_group_max":1,"promo_group_timeslice":0,"promo_increment":1,"promo_initial_segment":4,"promo_line":"Que pensez-vous de Google\u00A0Chrome\u00A0? \u003Ca href=\"%s\"\u003EParticipez \u00E0 l'enqu\u00EAte\u003C/a\u003E.","promo_num_groups":1000,"promo_resource_cache_update":"1346315229.374809","promo_start":1344463200.0,"promo_views":0,"promo_views_max":15},"plugins":{"enabled_internal_pdf3":true,"enabled_nacl":true,"last_internal_directory":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\21.0.1180.83","plugins_list":[{"enabled":true,"name":"Shockwave Flash","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\21.0.1180.83\\PepperFlash\\pepflashplayer.dll","version":"11.3.31.230"},{"enabled":true,"name":"Shockwave Flash","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\21.0.1180.83\\gcswf32.dll","version":"11,3,300,271"},{"enabled":true,"name":"Shockwave Flash","path":"C:\\Windows\\SysWOW64\\Macromed\\Flash\\NPSWF32_11_3_300_271.dll","version":"11,3,300,271"},{"enabled":true,"name":"Flash"},{"enabled":true,"name":"Remoting Viewer","path":"internal-remoting-viewer","version":""},{"enabled":true,"name":"Remoting Viewer"},{"enabled":true,"name":"Native Client","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\21.0.1180.83\\ppGoogleNaClPluginChrome.dll","version":""},{"enabled":true,"name":"Native Client"},{"enabled":true,"name":"Chrome PDF Viewer","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\21.0.1180.83\\pdf.dll","version":""},{"enabled":true,"name":"Chrome PDF Viewer"},{"enabled":true,"name":"Injovo Extension Plugin","path":"C:\\Users\\morgane\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\dlnembnfbcpjnepmfjmngjenhhajpdfd\\2.0.0.441_0\\npbrowserext.dll","version":"1, 0, 0, 1"},{"enabled":true,"name":"Injovo Extension Plugin"},{"enabled":true,"name":"Adobe Acrobat","path":"C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.dll","version":"10.1.4.38"},{"enabled":false,"name":"Adobe Acrobat"},{"enabled":true,"name":"Java Deployment Toolkit 6.0.240.7","path":"C:\\Program Files (x86)\\Java\\jre6\\bin\\new_plugin\\npdeployJava1.dll","version":"6.0.240.7"},{"enabled":true,"name":"Java(TM) Platform SE 6 U24","path":"C:\\Program Files (x86)\\Java\\jre6\\bin\\new_plugin\\npjp2.dll","version":"6.0.240.7"},{"enabled":true,"name":"Java"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin2.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin3.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin4.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin5.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin6.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin7.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime"},{"enabled":true,"name":"Microsoft Office 2010","path":"C:\\PROGRA~2\\MICROS~1\\Office14\\NPSPWRAP.DLL","version":"14.0.4761.1000"},{"enabled":true,"name":"Microsoft Office"},{"enabled":true,"name":"Google Update","path":"C:\\Program Files (x86)\\Google\\Update\\1.3.21.115\\npGoogleUpdate3.dll","version":"1.3.21.115"},{"enabled":true,"name":"Google Update"},{"enabled":true,"name":"Silverlight Plug-In","path":"C:\\Program Files (x86)\\Microsoft Silverlight\\4.1.10329.0\\npctrl.dll","version":"4.1.10329.0"},{"enabled":true,"name":"Silverlight"},{"enabled":true,"name":"Media Go Detector","path":"C:\\Program Files (x86)\\Sony\\Media Go\\npmediago.dll","version":"1.7.0.1"},{"enabled":true,"name":"Media Go Detector"},{"enabled":true,"name":"Windows Live\u0099 Photo Gallery","path":"C:\\Program Files (x86)\\Windows Live\\Photo Gallery\\NPWLPG.dll","version":"15.4.3508.1109_ship.wlx.w4m4 (ship)"},{"enabled":true,"name":"Windows Live\u0099 Photo Gallery"},{"enabled":true,"name":"iTunes Application Detector","path":"C:\\Program Files (x86)\\iTunes\\Mozilla Plugins\\npitunes.dll","version":"1.0.1.1"},{"enabled":true,"name":"iTunes Application Detector"}]},"profile":{"avatar_index":0,"content_settings":{"clear_on_exit_migrated":true,"pref_version":1},"exited_cleanly":true,"name":"Premier utilisateur"},"session":{"restore_on_startup_migrated":true,["hxxp://www.google.com/ig/redirectdomain?brand=ASUT&bmod=ASUT",["hxxp://search.conduit.com/?ctid=CT3128284&SearchSource=48"]],"restore_on_startup":4}}

        *************************

        AdwCleaner[R1].txt - [31891 octets] - [28/09/2012 17:27:53]
        AdwCleaner[S1].txt - [31231 octets] - [28/09/2012 17:28:41]
        AdwCleaner[R2].txt - [15705 octets] - [06/11/2012 07:59:19]
        AdwCleaner[S2].txt - [15384 octets] - [06/11/2012 08:20:54]

        ########## EOF - C:\AdwCleaner[S2].txt - [15445 octets] ##########
        1. # AdwCleaner v2.006 - Rapport créé le 06/11/2012 à 07:59:19
          # Mis à jour le 30/10/2012 par Xplode
          # Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
          # Nom d'utilisateur : morgane - MORGANE-PC
          # Mode de démarrage : Normal
          # Exécuté depuis : C:\Users\morgane\Documents\Mes téléchargements\adwcleaner(1).exe
          # Option [Recherche]

          ***** [Services] *****

          ***** [Fichiers / Dossiers] *****

          Dossier Présent : C:\Program Files (x86)\01NET.com
          Dossier Présent : C:\Program Files (x86)\Conduit
          Dossier Présent : C:\Users\morgane\AppData\Local\Conduit
          Dossier Présent : C:\Users\morgane\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
          Dossier Présent : C:\Users\morgane\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehdmaehkiiampolokajdcelladmnopgp
          Dossier Présent : C:\Users\morgane\AppData\Local\Temp\CT3128284
          Dossier Présent : C:\Users\morgane\AppData\LocalLow\01NET.com
          Dossier Présent : C:\Users\morgane\AppData\LocalLow\Conduit
          Dossier Présent : C:\Users\morgane\AppData\Roaming\Mozilla\Firefox\Profiles\l093onhz.default\extensions\{8e5025c2-8ea3-430d-80b8-a14151068a6d}
          Fichier Présent : C:\Users\morgane\AppData\Roaming\Mozilla\Firefox\Profiles\l093onhz.default\BrowserMngr_extensions.sqlite

          ***** [Registre] *****

          Clé Présente : HKCU\Software\AppDataLow\Software
          Clé Présente : HKCU\Software\AppDataLow\Software\01NET.com
          Clé Présente : HKCU\Software\AppDataLow\Software\Conduit
          Clé Présente : HKCU\Software\AppDataLow\Software\SmartBar
          Clé Présente : HKCU\Software\AppDataLow\Toolbar
          Clé Présente : HKCU\Software\Conduit
          Clé Présente : HKCU\Software\DataMngr_Toolbar
          Clé Présente : HKCU\Software\Google\Chrome\Extensions\ehdmaehkiiampolokajdcelladmnopgp
          Clé Présente : HKCU\Software\IM
          Clé Présente : HKCU\Software\Microsoft\Babylon
          Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
          Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}
          Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
          Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
          Clé Présente : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8B63A8D6-BBED-4341-8867-790E5F524C96}
          Clé Présente : HKLM\Software\01NET.com
          Clé Présente : HKLM\SOFTWARE\Classes\Prod.cap
          Clé Présente : HKLM\SOFTWARE\Classes\Toolbar.CT3128284
          Clé Présente : HKLM\Software\Conduit
          Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{151867D5-7359-40AF-8764-66E58D06283C}
          Clé Présente : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{151867D5-7359-40AF-8764-66E58D06283C}
          Clé Présente : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
          Clé Présente : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
          Clé Présente : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ehdmaehkiiampolokajdcelladmnopgp
          Clé Présente : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4EF8E124-0419-4A02-9C5C-08040A774394}
          Clé Présente : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CB56AA61-1945-4993-A470-B35DAF3FD334}
          Clé Présente : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
          Clé Présente : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\01NET.com Toolbar
          Clé Présente : HKU\S-1-5-21-2103581431-3732980364-3655351455-1000\Software\Microsoft\Internet Explorer\SearchScopes\{8B63A8D6-BBED-4341-8867-790E5F524C96}
          Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
          Valeur Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
          Valeur Présente : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
          Valeur Présente : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]

          ***** [Navigateurs] *****

          -\\ Internet Explorer v9.0.8112.16421

          [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com?SearchSource=10&ctid=CT3128284

          -\\ Mozilla Firefox v16.0.2 (fr)

          Nom du profil : default
          Fichier : C:\Users\morgane\AppData\Roaming\Mozilla\Firefox\Profiles\l093onhz.default\prefs.js

          Présente : user_pref("CT3128284.autoDisableScopes", -1);

          -\\ Google Chrome v [Impossible d'obtenir la version]

          Fichier : C:\Users\morgane\AppData\Local\Google\Chrome\User Data\Default\Preferences

          Présente [l.1] : urls_to_restore_on_startup ={"browser":{"check_default_browser":false,"last_known_google_url":"hxxp://www.google.fr/","last_prompted_google_url":"hxxp://www.google.fr/","window_placement":{"bottom":850,"left":10,"maximized":false,"right":1060,"top":10,"work_area_bottom":860,"work_area_left":0,"work_area_right":1600,"work_area_top":0}},"countryid_at_install":18002,"default_apps_install_state":2,"distribution":{"alternate_shortcut_text":true,"create_all_shortcuts":true,"do_not_launch_chrome":true,"import_history":false,"import_search_engine":false,"make_chrome_default":false,"require_eula":true,"show_welcome_page":true,"skip_first_run_ui":true,"system_level":true,"verbose_logging":false},"dns_prefetching":{"host_referral_list":[2,["hxxp://download.cnet.com/",["hxxp://asset1.cbsistatic.com/",2.1457765990453503,"hxxp://asset3.cbsistatic.com/",2.1457765990453503,"hxxp://cdn.gigya.com/",2.1457765990453503,"hxxp://download.cnet.com/",2.4575561048895462,"hxxp://i.i.com.com/",4.3282331399547225,"hxxp://platform.twitter.com/",2.1457765990453503,"hxxp://static.ak.facebook.com/",2.4575561048895462,"hxxp://tags.bluekai.com/",3.0811151165779385,"hxxp://www.facebook.com/",2.4575561048895462,"hxxps://apis.google.com/",2.1457765990453503]],["hxxp://platform.twitter.com/",["hxxp://cdn.api.twitter.com/",2.1457765990453503,"hxxp://p.twitter.com/",2.4575561048895462,"hxxp://r.twimg.com/",2.1457765990453503]],["hxxp://static.ak.facebook.com/",["hxxp://sg.perion.com/",2.2733802]],["hxxp://tags.bluekai.com/",["hxxp://a.collective-media.net/",2.1457765990453503,"hxxp://i.i.com.com/",2.1457765990453503]],["hxxp://www.avast.com/",["hxxp://an.avast.com/",1.1018820204109874,"hxxp://dnn506yrbagrg.cloudfront.net/",0.9620910178215338,"hxxp://sg.perion.com/",1.1018820204109874,"hxxp://static.avast.com/",15.498267552473116,"hxxp://www.avast.com/",0.9620910178215338,"hxxp://www.google-analytics.com/",1.4322022204109872]],["hxxp://www.facebook.com/",["hxxp://static.ak.fbcdn.net/",0.8895369271471155]]],"startup_list":[1,"hxxp://an.avast.com/","hxxp://api.webrep.avast.com/","hxxp://dnn506yrbagrg.cloudfront.net/","hxxp://localhost:18821/","hxxp://localhost:27275/","hxxp://localhost:7754/","hxxp://program.avast.com/","hxxp://static.avast.com/","hxxp://www.avast.com/","hxxp://www.google-analytics.com/"]},"download":{"directory_upgrade":true},"extensions":{"alerts":{"initialized":true},"autoupdate":{"next_check":"12990798103497922"},"chrome_url_overrides":{"bookmarks":["chrome-extension://eemcgdkfndhakfknompkggombfjjjeno/main.html"]},"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["appNotifications","management","webstorePrivate"]},"app_launcher_ordinal":"n","page_ordinal":"n"},"dlnembnfbcpjnepmfjmngjenhhajpdfd":{"ack_external":true,"active_permissions":{"api":["plugin","tabs","webNavigation"],"explicit_host":["hxxp://*/*","hxxps://*/*"],"scriptable_host":["hxxp://*/*","hxxps://*/*"]},"events":["runtime.onInstalled"],"from_bookmark":false,"from_webstore":false,"install_time":"12988624250266593","location":3,"manifest":{"background_page":"background.html","content_scripts":[{"all_frames":true,"js":["libraries/ContentScript.js"],"matches":["hxxp://*/*","hxxps://*/*"],"run_at":"document_end"}],"description":"","key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCgmkD2kWeuSqXT4Lo9RdJ66FakQMaLHVRJQcSRattesPWg34ol8hDf5Q0XI0NTKS8dCjxg7U3giCJgkyEIexQCb6IsD9hVHzLU/cwxSk7eRfbGos67d8F3bgOES3aAYtrSpDRDlgzge9SRwE0fzaXS2VPrH5MAXdvcw64KlP7S6QIDAQAB","name":"Web Assistant","permissions":["tabs","webNavigation","hxxp://*/*","hxxps://*/*"],"plugins":[{"path":"npbrowserext.dll","public":false}],"run_at":"document_start","version":"2.0.0.441"},"path":"dlnembnfbcpjnepmfjmngjenhhajpdfd\\2.0.0.441_0","state":1},"icmlaeflemplmjndnaapfdbbnpncnbda":{"ack_external":true,"active_permissions":{"api":["tabs","webNavigation"],"explicit_host":["hxxp://*/*","hxxps://*/*"],"scriptable_host":["hxxp://*/*","hxxps://*/*"]},"events":["runtime.onInstalled"],"from_bookmark":false,"from_webstore":false,"install_time":"12990788832213853","location":3,"manifest":{"background_page":"background.html","browser_action":{"default_icon":"skin/images/icons/grey0-16.png","default_title":"avast! WebRep","popup":"popup.html"},"content_scripts":[{"css":["skin/css/anchor.css"],"matches":["hxxp://*/*","hxxps://*/*"]}],"current_locale":"fr","default_locale":"en","description":"Web Reputation Plugin","icons":{"128":"skin/images/icons/green3-24.png","256":"skin/images/icons/green3-24.png","48":"skin/images/icons/green3-24.png","64":"skin/images/icons/green3-24.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDfBBgbBomL+8Ze0I3H5diuRW5XcxzEGzMgmCWRwf/XB4gdxIKK880IIDrKW13wW/RjlB5M6CipuiERx/91yBYP6Oz+56h22Chwgn0zIiGq35MJpP1cfYbnp4bzl1odIIX/d8j8LZ+Ur22y76sZP+WtoFphr+7axJRXC8IrXhAEcQIDAQAB","name":"avast! WebRep","permissions":["hxxp://*/*","hxxps://*/*","tabs","webNavigation"],"version":"7.0.1466"},"path":"icmlaeflemplmjndnaapfdbbnpncnbda\\7.0.1466_0","state":1},"ehdmaehkiiampolokajdcelladmnopgp":{"ack_external":true}},"toolbar":["icmlaeflemplmjndnaapfdbbnpncnbda"],"toolbarsize":-1},"homepage":"hxxp://search.conduit.com/?ctid=CT3128284&SearchSource=48","homepage_is_newtabpage":false,"net":{"hxxp_server_properties":{"apis.google.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"ssl.gstatic.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"www.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":10},{"id":6,"value":0}],"supports_spdy":true}}},"ntp":{"gplus_required":false,"promo_closed":false,"promo_end":1344981600.0,"promo_group":207,"promo_group_max":1,"promo_group_timeslice":0,"promo_increment":1,"promo_initial_segment":4,"promo_line":"Que pensez-vous de Google\u00A0Chrome\u00A0? \u003Ca href=\"%s\"\u003EParticipez \u00E0 l'enqu\u00EAte\u003C/a\u003E.","promo_num_groups":1000,"promo_resource_cache_update":"1346315229.374809","promo_start":1344463200.0,"promo_views":0,"promo_views_max":15},"plugins":{"enabled_internal_pdf3":true,"enabled_nacl":true,"last_internal_directory":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\21.0.1180.83","plugins_list":[{"enabled":true,"name":"Shockwave Flash","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\21.0.1180.83\\PepperFlash\\pepflashplayer.dll","version":"11.3.31.230"},{"enabled":true,"name":"Shockwave Flash","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\21.0.1180.83\\gcswf32.dll","version":"11,3,300,271"},{"enabled":true,"name":"Shockwave Flash","path":"C:\\Windows\\SysWOW64\\Macromed\\Flash\\NPSWF32_11_3_300_271.dll","version":"11,3,300,271"},{"enabled":true,"name":"Flash"},{"enabled":true,"name":"Remoting Viewer","path":"internal-remoting-viewer","version":""},{"enabled":true,"name":"Remoting Viewer"},{"enabled":true,"name":"Native Client","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\21.0.1180.83\\ppGoogleNaClPluginChrome.dll","version":""},{"enabled":true,"name":"Native Client"},{"enabled":true,"name":"Chrome PDF Viewer","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\21.0.1180.83\\pdf.dll","version":""},{"enabled":true,"name":"Chrome PDF Viewer"},{"enabled":true,"name":"Injovo Extension Plugin","path":"C:\\Users\\morgane\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\dlnembnfbcpjnepmfjmngjenhhajpdfd\\2.0.0.441_0\\npbrowserext.dll","version":"1, 0, 0, 1"},{"enabled":true,"name":"Injovo Extension Plugin"},{"enabled":true,"name":"Adobe Acrobat","path":"C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.dll","version":"10.1.4.38"},{"enabled":false,"name":"Adobe Acrobat"},{"enabled":true,"name":"Java Deployment Toolkit 6.0.240.7","path":"C:\\Program Files (x86)\\Java\\jre6\\bin\\new_plugin\\npdeployJava1.dll","version":"6.0.240.7"},{"enabled":true,"name":"Java(TM) Platform SE 6 U24","path":"C:\\Program Files (x86)\\Java\\jre6\\bin\\new_plugin\\npjp2.dll","version":"6.0.240.7"},{"enabled":true,"name":"Java"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin2.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin3.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin4.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin5.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin6.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin7.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime"},{"enabled":true,"name":"Microsoft Office 2010","path":"C:\\PROGRA~2\\MICROS~1\\Office14\\NPSPWRAP.DLL","version":"14.0.4761.1000"},{"enabled":true,"name":"Microsoft Office"},{"enabled":true,"name":"Google Update","path":"C:\\Program Files (x86)\\Google\\Update\\1.3.21.115\\npGoogleUpdate3.dll","version":"1.3.21.115"},{"enabled":true,"name":"Google Update"},{"enabled":true,"name":"Silverlight Plug-In","path":"C:\\Program Files (x86)\\Microsoft Silverlight\\4.1.10329.0\\npctrl.dll","version":"4.1.10329.0"},{"enabled":true,"name":"Silverlight"},{"enabled":true,"name":"Media Go Detector","path":"C:\\Program Files (x86)\\Sony\\Media Go\\npmediago.dll","version":"1.7.0.1"},{"enabled":true,"name":"Media Go Detector"},{"enabled":true,"name":"Windows Live\u0099 Photo Gallery","path":"C:\\Program Files (x86)\\Windows Live\\Photo Gallery\\NPWLPG.dll","version":"15.4.3508.1109_ship.wlx.w4m4 (ship)"},{"enabled":true,"name":"Windows Live\u0099 Photo Gallery"},{"enabled":true,"name":"iTunes Application Detector","path":"C:\\Program Files (x86)\\iTunes\\Mozilla Plugins\\npitunes.dll","version":"1.0.1.1"},{"enabled":true,"name":"iTunes Application Detector"}]},"profile":{"avatar_index":0,"content_settings":{"clear_on_exit_migrated":true,"pref_version":1},"exited_cleanly":true,"name":"Premier utilisateur"},"session":{"restore_on_startup_migrated":true,["hxxp://www.google.com/ig/redirectdomain?brand=ASUT&bmod=ASUT",["hxxp://search.conduit.com/?ctid=CT3128284&SearchSource=48"]],"restore_on_startup":4}}

          *************************

          AdwCleaner[R1].txt - [31891 octets] - [28/09/2012 17:27:53]
          AdwCleaner[S1].txt - [31231 octets] - [28/09/2012 17:28:41]
          AdwCleaner[R2].txt - [15576 octets] - [06/11/2012 07:59:19]

          ########## EOF - C:\AdwCleaner[R2].txt - [15637 octets] ##########
          1. Bonjour,
            Fisch vous à demandé de relancer Adwcleaner en cliquant sur Suppression
            Vous postez le rapport de recherche...
        2. Contributeur sécurité
          D'accord!
          Lance AdwCleaner
          Clique sur le bouton [ Suppression ]
          Patiente...
          Poste le rapport qui apparait en fin de recherche.
          (Le rapport est sauvegardé aussi sous C:\ AdwCleaner[SX].Txt)
          1. oups desoléé ou cétait fait en plus!!!!!!

            # AdwCleaner v2.006 - Rapport créé le 06/11/2012 à 07:59:19
            # Mis à jour le 30/10/2012 par Xplode
            # Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
            # Nom d'utilisateur : morgane - MORGANE-PC
            # Mode de démarrage : Normal
            # Exécuté depuis : C:\Users\morgane\Documents\Mes téléchargements\adwcleaner(1).exe
            # Option [Recherche]

            ***** [Services] *****

            ***** [Fichiers / Dossiers] *****

            Dossier Présent : C:\Program Files (x86)\01NET.com
            Dossier Présent : C:\Program Files (x86)\Conduit
            Dossier Présent : C:\Users\morgane\AppData\Local\Conduit
            Dossier Présent : C:\Users\morgane\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
            Dossier Présent : C:\Users\morgane\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehdmaehkiiampolokajdcelladmnopgp
            Dossier Présent : C:\Users\morgane\AppData\Local\Temp\CT3128284
            Dossier Présent : C:\Users\morgane\AppData\LocalLow\01NET.com
            Dossier Présent : C:\Users\morgane\AppData\LocalLow\Conduit
            Dossier Présent : C:\Users\morgane\AppData\Roaming\Mozilla\Firefox\Profiles\l093onhz.default\extensions\{8e5025c2-8ea3-430d-80b8-a14151068a6d}
            Fichier Présent : C:\Users\morgane\AppData\Roaming\Mozilla\Firefox\Profiles\l093onhz.default\BrowserMngr_extensions.sqlite

            ***** [Registre] *****

            Clé Présente : HKCU\Software\AppDataLow\Software
            Clé Présente : HKCU\Software\AppDataLow\Software\01NET.com
            Clé Présente : HKCU\Software\AppDataLow\Software\Conduit
            Clé Présente : HKCU\Software\AppDataLow\Software\SmartBar
            Clé Présente : HKCU\Software\AppDataLow\Toolbar
            Clé Présente : HKCU\Software\Conduit
            Clé Présente : HKCU\Software\DataMngr_Toolbar
            Clé Présente : HKCU\Software\Google\Chrome\Extensions\ehdmaehkiiampolokajdcelladmnopgp
            Clé Présente : HKCU\Software\IM
            Clé Présente : HKCU\Software\Microsoft\Babylon
            Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
            Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}
            Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
            Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
            Clé Présente : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8B63A8D6-BBED-4341-8867-790E5F524C96}
            Clé Présente : HKLM\Software\01NET.com
            Clé Présente : HKLM\SOFTWARE\Classes\Prod.cap
            Clé Présente : HKLM\SOFTWARE\Classes\Toolbar.CT3128284
            Clé Présente : HKLM\Software\Conduit
            Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{151867D5-7359-40AF-8764-66E58D06283C}
            Clé Présente : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{151867D5-7359-40AF-8764-66E58D06283C}
            Clé Présente : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
            Clé Présente : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
            Clé Présente : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ehdmaehkiiampolokajdcelladmnopgp
            Clé Présente : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4EF8E124-0419-4A02-9C5C-08040A774394}
            Clé Présente : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CB56AA61-1945-4993-A470-B35DAF3FD334}
            Clé Présente : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
            Clé Présente : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\01NET.com Toolbar
            Clé Présente : HKU\S-1-5-21-2103581431-3732980364-3655351455-1000\Software\Microsoft\Internet Explorer\SearchScopes\{8B63A8D6-BBED-4341-8867-790E5F524C96}
            Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
            Valeur Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
            Valeur Présente : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
            Valeur Présente : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]

            ***** [Navigateurs] *****

            -\\ Internet Explorer v9.0.8112.16421

            [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com?SearchSource=10&ctid=CT3128284

            -\\ Mozilla Firefox v16.0.2 (fr)

            Nom du profil : default
            Fichier : C:\Users\morgane\AppData\Roaming\Mozilla\Firefox\Profiles\l093onhz.default\prefs.js

            Présente : user_pref("CT3128284.autoDisableScopes", -1);

            -\\ Google Chrome v [Impossible d'obtenir la version]

            Fichier : C:\Users\morgane\AppData\Local\Google\Chrome\User Data\Default\Preferences

            Présente [l.1] : urls_to_restore_on_startup ={"browser":{"check_default_browser":false,"last_known_google_url":"hxxp://www.google.fr/","last_prompted_google_url":"hxxp://www.google.fr/","window_placement":{"bottom":850,"left":10,"maximized":false,"right":1060,"top":10,"work_area_bottom":860,"work_area_left":0,"work_area_right":1600,"work_area_top":0}},"countryid_at_install":18002,"default_apps_install_state":2,"distribution":{"alternate_shortcut_text":true,"create_all_shortcuts":true,"do_not_launch_chrome":true,"import_history":false,"import_search_engine":false,"make_chrome_default":false,"require_eula":true,"show_welcome_page":true,"skip_first_run_ui":true,"system_level":true,"verbose_logging":false},"dns_prefetching":{"host_referral_list":[2,["hxxp://download.cnet.com/",["hxxp://asset1.cbsistatic.com/",2.1457765990453503,"hxxp://asset3.cbsistatic.com/",2.1457765990453503,"hxxp://cdn.gigya.com/",2.1457765990453503,"hxxp://download.cnet.com/",2.4575561048895462,"hxxp://i.i.com.com/",4.3282331399547225,"hxxp://platform.twitter.com/",2.1457765990453503,"hxxp://static.ak.facebook.com/",2.4575561048895462,"hxxp://tags.bluekai.com/",3.0811151165779385,"hxxp://www.facebook.com/",2.4575561048895462,"hxxps://apis.google.com/",2.1457765990453503]],["hxxp://platform.twitter.com/",["hxxp://cdn.api.twitter.com/",2.1457765990453503,"hxxp://p.twitter.com/",2.4575561048895462,"hxxp://r.twimg.com/",2.1457765990453503]],["hxxp://static.ak.facebook.com/",["hxxp://sg.perion.com/",2.2733802]],["hxxp://tags.bluekai.com/",["hxxp://a.collective-media.net/",2.1457765990453503,"hxxp://i.i.com.com/",2.1457765990453503]],["hxxp://www.avast.com/",["hxxp://an.avast.com/",1.1018820204109874,"hxxp://dnn506yrbagrg.cloudfront.net/",0.9620910178215338,"hxxp://sg.perion.com/",1.1018820204109874,"hxxp://static.avast.com/",15.498267552473116,"hxxp://www.avast.com/",0.9620910178215338,"hxxp://www.google-analytics.com/",1.4322022204109872]],["hxxp://www.facebook.com/",["hxxp://static.ak.fbcdn.net/",0.8895369271471155]]],"startup_list":[1,"hxxp://an.avast.com/","hxxp://api.webrep.avast.com/","hxxp://dnn506yrbagrg.cloudfront.net/","hxxp://localhost:18821/","hxxp://localhost:27275/","hxxp://localhost:7754/","hxxp://program.avast.com/","hxxp://static.avast.com/","hxxp://www.avast.com/","hxxp://www.google-analytics.com/"]},"download":{"directory_upgrade":true},"extensions":{"alerts":{"initialized":true},"autoupdate":{"next_check":"12990798103497922"},"chrome_url_overrides":{"bookmarks":["chrome-extension://eemcgdkfndhakfknompkggombfjjjeno/main.html"]},"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["appNotifications","management","webstorePrivate"]},"app_launcher_ordinal":"n","page_ordinal":"n"},"dlnembnfbcpjnepmfjmngjenhhajpdfd":{"ack_external":true,"active_permissions":{"api":["plugin","tabs","webNavigation"],"explicit_host":["hxxp://*/*","hxxps://*/*"],"scriptable_host":["hxxp://*/*","hxxps://*/*"]},"events":["runtime.onInstalled"],"from_bookmark":false,"from_webstore":false,"install_time":"12988624250266593","location":3,"manifest":{"background_page":"background.html","content_scripts":[{"all_frames":true,"js":["libraries/ContentScript.js"],"matches":["hxxp://*/*","hxxps://*/*"],"run_at":"document_end"}],"description":"","key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCgmkD2kWeuSqXT4Lo9RdJ66FakQMaLHVRJQcSRattesPWg34ol8hDf5Q0XI0NTKS8dCjxg7U3giCJgkyEIexQCb6IsD9hVHzLU/cwxSk7eRfbGos67d8F3bgOES3aAYtrSpDRDlgzge9SRwE0fzaXS2VPrH5MAXdvcw64KlP7S6QIDAQAB","name":"Web Assistant","permissions":["tabs","webNavigation","hxxp://*/*","hxxps://*/*"],"plugins":[{"path":"npbrowserext.dll","public":false}],"run_at":"document_start","version":"2.0.0.441"},"path":"dlnembnfbcpjnepmfjmngjenhhajpdfd\\2.0.0.441_0","state":1},"icmlaeflemplmjndnaapfdbbnpncnbda":{"ack_external":true,"active_permissions":{"api":["tabs","webNavigation"],"explicit_host":["hxxp://*/*","hxxps://*/*"],"scriptable_host":["hxxp://*/*","hxxps://*/*"]},"events":["runtime.onInstalled"],"from_bookmark":false,"from_webstore":false,"install_time":"12990788832213853","location":3,"manifest":{"background_page":"background.html","browser_action":{"default_icon":"skin/images/icons/grey0-16.png","default_title":"avast! WebRep","popup":"popup.html"},"content_scripts":[{"css":["skin/css/anchor.css"],"matches":["hxxp://*/*","hxxps://*/*"]}],"current_locale":"fr","default_locale":"en","description":"Web Reputation Plugin","icons":{"128":"skin/images/icons/green3-24.png","256":"skin/images/icons/green3-24.png","48":"skin/images/icons/green3-24.png","64":"skin/images/icons/green3-24.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDfBBgbBomL+8Ze0I3H5diuRW5XcxzEGzMgmCWRwf/XB4gdxIKK880IIDrKW13wW/RjlB5M6CipuiERx/91yBYP6Oz+56h22Chwgn0zIiGq35MJpP1cfYbnp4bzl1odIIX/d8j8LZ+Ur22y76sZP+WtoFphr+7axJRXC8IrXhAEcQIDAQAB","name":"avast! WebRep","permissions":["hxxp://*/*","hxxps://*/*","tabs","webNavigation"],"version":"7.0.1466"},"path":"icmlaeflemplmjndnaapfdbbnpncnbda\\7.0.1466_0","state":1},"ehdmaehkiiampolokajdcelladmnopgp":{"ack_external":true}},"toolbar":["icmlaeflemplmjndnaapfdbbnpncnbda"],"toolbarsize":-1},"homepage":"hxxp://search.conduit.com/?ctid=CT3128284&SearchSource=48","homepage_is_newtabpage":false,"net":{"hxxp_server_properties":{"apis.google.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"ssl.gstatic.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"www.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":10},{"id":6,"value":0}],"supports_spdy":true}}},"ntp":{"gplus_required":false,"promo_closed":false,"promo_end":1344981600.0,"promo_group":207,"promo_group_max":1,"promo_group_timeslice":0,"promo_increment":1,"promo_initial_segment":4,"promo_line":"Que pensez-vous de Google\u00A0Chrome\u00A0? \u003Ca href=\"%s\"\u003EParticipez \u00E0 l'enqu\u00EAte\u003C/a\u003E.","promo_num_groups":1000,"promo_resource_cache_update":"1346315229.374809","promo_start":1344463200.0,"promo_views":0,"promo_views_max":15},"plugins":{"enabled_internal_pdf3":true,"enabled_nacl":true,"last_internal_directory":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\21.0.1180.83","plugins_list":[{"enabled":true,"name":"Shockwave Flash","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\21.0.1180.83\\PepperFlash\\pepflashplayer.dll","version":"11.3.31.230"},{"enabled":true,"name":"Shockwave Flash","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\21.0.1180.83\\gcswf32.dll","version":"11,3,300,271"},{"enabled":true,"name":"Shockwave Flash","path":"C:\\Windows\\SysWOW64\\Macromed\\Flash\\NPSWF32_11_3_300_271.dll","version":"11,3,300,271"},{"enabled":true,"name":"Flash"},{"enabled":true,"name":"Remoting Viewer","path":"internal-remoting-viewer","version":""},{"enabled":true,"name":"Remoting Viewer"},{"enabled":true,"name":"Native Client","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\21.0.1180.83\\ppGoogleNaClPluginChrome.dll","version":""},{"enabled":true,"name":"Native Client"},{"enabled":true,"name":"Chrome PDF Viewer","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\21.0.1180.83\\pdf.dll","version":""},{"enabled":true,"name":"Chrome PDF Viewer"},{"enabled":true,"name":"Injovo Extension Plugin","path":"C:\\Users\\morgane\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\dlnembnfbcpjnepmfjmngjenhhajpdfd\\2.0.0.441_0\\npbrowserext.dll","version":"1, 0, 0, 1"},{"enabled":true,"name":"Injovo Extension Plugin"},{"enabled":true,"name":"Adobe Acrobat","path":"C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.dll","version":"10.1.4.38"},{"enabled":false,"name":"Adobe Acrobat"},{"enabled":true,"name":"Java Deployment Toolkit 6.0.240.7","path":"C:\\Program Files (x86)\\Java\\jre6\\bin\\new_plugin\\npdeployJava1.dll","version":"6.0.240.7"},{"enabled":true,"name":"Java(TM) Platform SE 6 U24","path":"C:\\Program Files (x86)\\Java\\jre6\\bin\\new_plugin\\npjp2.dll","version":"6.0.240.7"},{"enabled":true,"name":"Java"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin2.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin3.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin4.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin5.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin6.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin7.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime"},{"enabled":true,"name":"Microsoft Office 2010","path":"C:\\PROGRA~2\\MICROS~1\\Office14\\NPSPWRAP.DLL","version":"14.0.4761.1000"},{"enabled":true,"name":"Microsoft Office"},{"enabled":true,"name":"Google Update","path":"C:\\Program Files (x86)\\Google\\Update\\1.3.21.115\\npGoogleUpdate3.dll","version":"1.3.21.115"},{"enabled":true,"name":"Google Update"},{"enabled":true,"name":"Silverlight Plug-In","path":"C:\\Program Files (x86)\\Microsoft Silverlight\\4.1.10329.0\\npctrl.dll","version":"4.1.10329.0"},{"enabled":true,"name":"Silverlight"},{"enabled":true,"name":"Media Go Detector","path":"C:\\Program Files (x86)\\Sony\\Media Go\\npmediago.dll","version":"1.7.0.1"},{"enabled":true,"name":"Media Go Detector"},{"enabled":true,"name":"Windows Live\u0099 Photo Gallery","path":"C:\\Program Files (x86)\\Windows Live\\Photo Gallery\\NPWLPG.dll","version":"15.4.3508.1109_ship.wlx.w4m4 (ship)"},{"enabled":true,"name":"Windows Live\u0099 Photo Gallery"},{"enabled":true,"name":"iTunes Application Detector","path":"C:\\Program Files (x86)\\iTunes\\Mozilla Plugins\\npitunes.dll","version":"1.0.1.1"},{"enabled":true,"name":"iTunes Application Detector"}]},"profile":{"avatar_index":0,"content_settings":{"clear_on_exit_migrated":true,"pref_version":1},"exited_cleanly":true,"name":"Premier utilisateur"},"session":{"restore_on_startup_migrated":true,["hxxp://www.google.com/ig/redirectdomain?brand=ASUT&bmod=ASUT",["hxxp://search.conduit.com/?ctid=CT3128284&SearchSource=48"]],"restore_on_startup":4}}

            *************************

            AdwCleaner[R1].txt - [31891 octets] - [28/09/2012 17:27:53]
            AdwCleaner[S1].txt - [31231 octets] - [28/09/2012 17:28:41]
            AdwCleaner[R2].txt - [15576 octets] - [06/11/2012 07:59:19]

            ########## EOF - C:\AdwCleaner[R2].txt - [15637 octets] ##########
            1. voila voila

              Logfile of Trend Micro HijackThis v2.0.2
              Scan saved at 07:44:08, on 06/11/2012
              Platform: Unknown Windows (WinNT 6.01.3505 SP1)
              MSIE: Internet Explorer v9.00 (9.00.8112.16450)
              Boot mode: Normal

              Running processes:
              C:\Windows\AsScrPro.exe
              C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
              C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe
              C:\Program Files\Alwil Software\Avast5\AvastUI.exe
              C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
              C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
              C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
              C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
              C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
              C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\CANAL+ CANALSAT A LA DEMANDE.EXE
              C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe
              C:\Program Files (x86)\Mozilla Firefox\firefox.exe
              C:\Program Files (x86)\Java\jre6\bin\javaw.exe
              C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
              C:\Program Files (x86)\Megaupload\Mega Manager\MegaManager.exe
              C:\Users\morgane\Documents\Mes téléchargements\01net_HijackThis.exe
              C:\Users\morgane\AppData\Local\Temp\nsg96D3.tmp\ProxyInstaller.exe
              C:\Users\morgane\Documents\Mes téléchargements\HiJackThis.exe
              C:\Users\morgane\AppData\Local\Temp\nsg96D3.tmp\SecondOffer1.exe
              C:\Users\morgane\AppData\Local\Temp\nsb4F0A.tmp\stub.exe
              C:\Users\morgane\AppData\Local\Temp\conduitinstaller.exe
              c:\users\morgane\appdata\local\temp\nsb4f0a.tmp\ffpath.exe
              C:\Users\morgane\AppData\Local\Temp\CT3128284\spff.exe

              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredimail.com?a=6R7MGzjK8K
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
              R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
              R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
              R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
              R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
              F2 - REG:system.ini: UserInit=userinit.exe,
              O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
              O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\Windows\SysWow64\BhoECart.dll
              O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
              O2 - BHO: RoboForm BHO - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
              O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
              O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
              O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
              O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files (x86)\Megaupload\Mega Manager\MegaIEMn.dll
              O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
              O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
              O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
              O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
              O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
              O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
              O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
              O3 - Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - (no file)
              O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
              O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
              O4 - HKLM\..\Run: [CANAL+ CANALSAT A LA DEMANDE] "C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\Launcher.exe"
              O4 - HKLM\..\Run: [SSDMonitor] C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
              O4 - HKCU\..\Run: [IncrediMail] C:\Program Files (x86)\IncrediMail\bin\IncMail.exe /c
              O4 - HKCU\..\Run: [HP Deskjet 3050A J611 series (NET)] "C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN23A581NS05PJ:NW" -scfn "HP Deskjet 3050A J611 series (NET)" -AutoStart 1
              O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE LOCAL')
              O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE LOCAL')
              O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE RÉSEAU')
              O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE RÉSEAU')
              O4 - Startup: Alertes de surveillance de l'encre - HP Deskjet 3050A J611 series (réseau).lnk = ?
              O8 - Extra context menu item: Barre RoboForm - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
              O8 - Extra context menu item: Enregistrer le formulaire - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html
              O8 - Extra context menu item: Personnaliser le menu - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
              O8 - Extra context menu item: Remplir le formulaire - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html
              O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
              O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
              O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
              O9 - Extra 'Tools' menuitem: SmartPrint - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
              O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html
              O9 - Extra 'Tools' menuitem: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html
              O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html
              O9 - Extra 'Tools' menuitem: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html
              O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
              O9 - Extra 'Tools' menuitem: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
              O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
              O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
              O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
              O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
              O13 - Gopher Prefix:
              O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab
              O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
              O20 - AppInit_DLLs: c:\progra~3\browse~1\22643~1.41\{16cdf~1\browse~1.dll
              O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
              O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
              O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
              O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
              O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
              O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
              O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
              O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
              O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
              O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
              O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
              O23 - Service: CanalPlus.VOD - Canal+ Active - C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\CanalPlus.VOD.exe
              O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
              O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
              O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
              O23 - Service: Service Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
              O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
              O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
              O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
              O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
              O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
              O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
              O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
              O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - PC Tools - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
              O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
              O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
              O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
              O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
              O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
              O23 - Service: Sony Ericsson PCCompanion - Avanquest Software - C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe
              O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
              O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
              O23 - Service: @C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe
              O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe
              O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
              O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
              O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
              O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
              O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
              O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
              O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
              O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
              1. Contributeur sécurité
                Bonjour,
                1/
                Désinstalle Spybot, il ne sert à rien.

                2/
                Évite de télécharger les logiciels depuis 01Net et Softonic!
                ===========
                Télécharge AdwCleaner (merci à Xplode)
                Lance AdwCleaner
                Clique sur le bouton [Recherche ]
                Patiente...
                Poste le rapport qui apparait en fin de recherche.
                (Le rapport est sauvegardé aussi sous C:\ AdwCleaner[SX].Txt)

                ¤¤¤ Le meilleur remède pour tous les problèmes, c'est la patience.... ¤¤¤