Hijack this.....

Résolu
nadege1976 -  
Bonjour,

Je crois avoir un pc, infecté de virus.
Je viens de faire un rapport avec hijackthis, mais j'ai peur d'effacer un peu tout et n'importe quoi sachant que je ne suis pas une experte en la matière
Est ce que quelqu'un pourrait il m'aider a supprimer correctement ce que je dois supprimer, afin de rendre mon pc plus performant.

Je suis sous Windows 8

Merci

31 réponses

Résumé de la discussion

Diagnostic d'une suspicion d'infection virale sur un PC Windows 8 après un rapport HijackThis, avec la crainte que supprimer certains éléments n'aggrave le problème potentiellement. La meilleure réponse recommande l'outil ZHPDiag (Nicolas Coolman) pour un diagnostic plus poussé, exécuter en tant qu'administrateur, lancer l'analyse, puis envoyer le rapport via pjjoint.malekal.com et partager le lien obtenu. En complément, un rapport ZHPDiag détaillé montre les éléments détectés, tels que des processus et outils antivirus actifs, des extensions et des paramètres système examinés, utile pour évaluer les prochaines étapes de nettoyage. Des éléments supplémentaires évoquent l'analyse de démarrages, de scripts et de paramètres réseau, ce qui permet de cibler les redirections ou les extensions potentiellement indésirables sans se fier à une seule étape.

Bobot (l’IA à votre service)
  2. nadege1976
    Bonjour,

    Tes explications ont été claires et précises...et c'est un vrai soulagement de voir que mon pc, ne plante plus en cours de travail, qu'il avance beaucoup mieux, et surtout, maintenant il démarre bien.
    Ca devenait plus possible de travailler avec, surtout qu'il n'est pas vieux (5 mois)

    Je lis les liens que tu as posté ils me sauront très utile pour la suite ;-)

    Merci beaucoup, et à très bientôt sur le forum .......

    Nadège
    2. nadege1976
      Voici le rapport delfix

      http://pjjoint.malekal.com/files.php?id=20130409_l136m6m10s9

      Merci pour tout les liens que je vais lire avec soins ;-)

      Je suis sous windows 8, car j'ai acheté mon Portable avec windows 8 integrer.

      Est ce que maintenant, on peu dire que mon ordi est clean?????

      Merci en tout cas :-)
      2. Smart91 Contributeur sécurité
        Fais les mise à jour suivantes:

        Mise à jour Firefox vers la version 20.0.0:
        Lance FireFox, Allez dans ? > Rechercher des mises à jour ... et cliquez sur "Appliquer la mise à jour" ou alors sur "A propos de FireFox"
        Sinon aller sur ce lien ==> http://www.mozilla-europe.org/fr/firefox

        Tu dois aussi mettre à jour tous tes autres programmes pour combler des failles de sécurité... Vérifie les mises à jour disponibles à l'aide de ce petit programme Check&Update de igor 51

        Optimisation:

        Télécharge et installe CCleaner (N'installe pas la Yahoo Toolbar) :
        Avec ce logiciel on va supprimer les fichiers temporaires et inutiles sur ton PC. Ce n'est pas un logiciel qui supprime les infections
        - Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
        - Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.
        - Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs (Sauvegarde la base de registre).

        Désinstallation des outils - Réactivtion de l'UAC - Purge Restauration et Création d'un point de restauration

        - Télécharge DelFix (d'Xplode) sur ton bureau.
        - Lance le, (avec Vista/Seven, clic droit dessus, et sur exécuter en tant qu'administrateur)
        - Coche toutes les cases sauf "Faire une sauvegarde du registre"
        - Clique ensuite sur Exécuter puis patiente pendant le processus de suppression.
        - Le rapport sera enregistré dans le presse-papier. Copie/Colle le dans ta prochaine réponse.

        Quelques conseils de Prévention

        - Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement. Mais n'oublie pas de faire la mise à jour avant de lancer le scan.

        Installe l'extension de sécurité adblock plus pour bloquer les publicités
        ==> http://www.clubic.com/telecharger-fiche45912-adblock-plus.html

        WOT - Extension pour ton navigateur internet :
        Voici une extension à télécharger qui te permettra, en faisant tes recherches sur google, de savoir si le site proposé lors de tes recherches est un site de confiance ou un site à éviter car il pourrait infecter ton PC :
        Pour Firefox : https://addons.mozilla.org/fr/firefox/addon/wot-safe-browsing-tool/
        Pour internet explorer : https://chrome.google.com/webstore/detail/wot-web-of-trust-website/bhmmomiinigofkjcapegjjndpbikblnp
        Pour Chrome: https://chrome.google.com/webstore/detail/wot-web-of-trust-website/bhmmomiinigofkjcapegjjndpbikblnp?hl=fr

        Ci-dessous un tutoriel pour t'aider à installer WOT:
        ==> https://www.commentcamarche.net/faq/15620-wot-web-of-trust-essentiel-pour-l-internaute-avise

        - Installe également ce programme qui va bloquer tous les sites qui proposent des adwares HOSTS Anti-PUPs/Adware
        Voici un tutoriel pour t'aider : http://www.malekal.com/2012/01/10/hosts-anti-pupsadware/
        Si tu souhaites plus tard désinstaller HOSTS_Anti-PUPs/Adware, lance le raccourci qui a été créé sur le bureau.
        Tu peux aussi lancer la commande : %windir%system32HOSTS_Anti-Adware.exe -uninstal en invite de commande.

        - Par rapport au P2P : http://www.libellules.ch/phpBB2/les-risques-securitaires-du-peer-to-peer-en-10-points-t28947.html

        - Les logiciels gratuits à éviter

        - Ouvertures Pop-Up publicitaires

        - Voici un dossier complet sur le prévention et protection, il est absolument à lire (avec Adobe Reader ou Foxit Reader) :
        Prévention et Protection

        - Un autre dossier sur:
        Comment se protéger des logiciels potentiellement indésirables (PUP)

        - Super Important, comme tu es sous Windows 8 :
        Quelques précautions à prendre surtout si tu n'as pas de CD Windows

        Sois plus vigilant(e) sur Internet à l'avenir

        Voilà pour moi c'est terminé. Si tu as des questions n'hésite pas

        Smart
        1. nadege1976
          Genial !!!!!

          J'ai refais une mise à jours ZHPDiag histoire de........

          Le Lien

          http://pjjoint.malekal.com/files.php?id=ZHPDiag_20130409_u7u13f13m6i13
          1. Smart91 Contributeur sécurité
            Refaiss un scan ZHPDiag en cliquent sur la loupe avec un + et poste le rapport via pjjoint.
            Ensuite on va passer à la phase finale. Il nous reste à faire:
            - les mises à jour prioritaires
            - l'optimisation du PC
            - la désinstallation des outils de désinfection
            - les conseils de prévention quand on surfe sur Internet

            Smart
            1. nadege1976
              Rapport de ZHPFix 2013.3.9.1 par Nicolas Coolman, Update du 9/03/2013
              Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-09-04-2013-17-03-15.txt
              Run by nadege at 09/04/2013 17:03:15
              High Elevated Privileges : OK
              Windows 8 Home Premium Edition, 64-bit (Build 9200)

              Corbeille vidée

              ========== Processus mémoire ==========
              SUPPRIME Memory Process: C:\Windows\KMSEmulator.exe

              ========== Clé(s) du Registre ==========
              SUPPRIME Key: CLSID BHO: {03EB0E9C-7A91-4381-A220-9B52B641CDB1}
              SUPPRIME Key: HKCU\Software\AppDataLow\Software\Supreme Savings
              SUPPRIME Key: HKCU\Software\SweetIM
              SUPPRIME Key: HKLM\Software\Wow6432Node\SweetIM
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EB6AF8AEEB922FA4392548F13812E50B
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9EE58E3C298524145B73CBBED3CAC4D3
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B2FD9C0A5B9838449838816A28001F4B
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8724E58E6C7D00C48A0D4F3345EB2C26
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB676B0E1B9EFA049B9F7DDDA9645734
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B31BBB0B825EDEF45AB0FE7099C68C81
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B471D8D7319336B4CA89374ED0D7B806
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BC30043663AA2CA4DA1DAA9CA5FDCC75
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FDC83385E6C239F4C876A77A37DF581D
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1CAE30F47D14B41B5FC8FA53658044
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\30C16B15B255BD349A1157B8A83E2AF9
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12BF94BD06C95F343A77631402B9556A
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2124D8A8CF720FD44866190AF560228E
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27A325ACED8CA4743A30127638591ADB
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\350D17402BD84234EAF7D32F08172D7C
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EE8C5F419057E1478A654868CEE60B5
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4735D908D66E1BA46B6C2D7185A12B2B
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76D8378E2DDAED3428720A631F6E3BF0
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A001B259DB7D694E818BE29B973992C
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE2EC163C6A68A48921573E0E7E199D
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C06C6662FA5B04646829E4A460857770
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEEB3E14ABE8270419B0FD762E18F7C6
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1B5E9A3BDB51349BF96E842C062D98
              SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FECBC2BC14DA6CD459BD59A041709836
              SUPPRIME Key*: HKLM\Software\DomaIQ
              SUPPRIME Key: HKLM\Software\Wow6432Node\Google\Chrome\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib

              ========== Valeur(s) du Registre ==========
              SUPPRIME URLSearchHook: {03EB0E9C-7A91-4381-A220-9B52B641CDB1}
              SUPPRIME URLSearchHook: {05eeb91a-aef7-4f8a-978f-fb83e7b03f8e}
              ABSENT TCP Query User{FF114904-12AA-4B28-8A17-E17245E6C8A1}C:/windows/kmsemulator.exe
              ABSENT UDP Query User{BD56F3FE-59FC-46FD-B837-992806E07759}C:/windows/kmsemulator.exe
              SUPPRIME RunValue: LManager
              ABSENT Valeur Standard Profile: FirewallRaz :
              ABSENT Valeur Domain Profile: FirewallRaz :
              SUPPRIME FirewallRaz (Domain) : {808F1451-4108-46FD-ADBB-F17324B5F0BD}
              SUPPRIME FirewallRaz (Domain) : {E7985E1D-C36F-4787-80A8-6350D07E9266}
              SUPPRIME FirewallRaz (Public) : TCP Query User{FF114904-12AA-4B28-8A17-E17245E6C8A1}C:\windows\kmsemulator.exe
              SUPPRIME FirewallRaz (Public) : UDP Query User{BD56F3FE-59FC-46FD-B837-992806E07759}C:\windows\kmsemulator.exe

              ========== Dossier(s) ==========
              SUPPRIME Folder: C:\Program Files (x86)\Spybot - Search & Destroy
              SUPPRIME Folder: C:\Program Files (x86)\Spybot - Search & Destroy 2
              SUPPRIME Folder: C:\ProgramData\Spybot - Search & Destroy
              SUPPRIME Temporaires Windows
              SUPPRIME Flash Cookies

              ========== Fichier(s) ==========
              SUPPRIME File: c:\program files (x86)\iobit apps toolbar\ie\6.7\iobitappstoolbarie.dll
              ABSENT File: c:\program files (x86)\iobit apps toolbar\ie\6.7\iobitappstoolbarie.dll
              SUPPRIME File: c:\windows\prefetch\optproreminder.exe-eba8c8d1.pf
              SUPPRIME File: c:\windows\kmsemulator.exe
              SUPPRIME File: c:\users\nadege\desktop\hp officejet 5600 series - raccourci.lnk
              SUPPRIME File: c:\users\nadege\downloads\spybot_search_destroy_2_27_03_2013_fr_10965.exe
              ABSENT File: c:\windows\tasks\autokms.job
              SUPPRIME Temporaires Windows
              SUPPRIME Flash Cookies

              ========== Tache planifiée ==========
              SUPPRIME Task: AutoKMS
              SUPPRIME Task: {87D2E17E-20EE-44E3-96F7-FA1B1F4B0F7B}

              ========== Récapitulatif ==========
              1 : Processus mémoire
              86 : Clé(s) du Registre
              11 : Valeur(s) du Registre
              5 : Dossier(s)
              9 : Fichier(s)
              2 : Tache planifiée

              End of clean in 00mn 50s

              ========== Chemin de fichier rapport ==========
              C:\ZHP\ZHPFix[R1].txt - 09/04/2013 16:02:07 [416]
              C:\ZHP\ZHPFix[R2].txt - 09/04/2013 17:03:15 [13636]
              1. Smart91 Contributeur sécurité
                OK. On va supprimer les restes avec un script:

                Télécharge sur ton Bureau ce fichier en faisant clic droit enregistrer la cible sur Nadege.txt

                Ouvre le fichier Nadege, sélectionne toutes les lignes et copie les.

                A l'attention de ceux qui parcourent le sujet:
                /!\ Ce script est exclusivement réservé à l'utilisateur actuel du sujet, vous ne devez en aucun cas l'utiliser de votre propre chef sur un autre pc, sous risque d'endommager le système /!\

                - Ferme toutes tes applications en cours
                - Lance ZHPFix via le raccourci sur ton Bureau, (Si tu es sous Vista ou Windows 7 n'oublie pas clic droit ==> en tant qu'administrateur")
                - Si tu ne l'as pas, télécharge le depuis ce lien: https://www.zebulon.fr/telechargements/securite/systeme/zhpfix.html
                - Si tu obtiens le message "Voulez-vous autoriser le programme suivant..." tu réponds Oui
                - Clique sur l'icône représentant le presse-papier ("coller le presse-papier")
                - Les lignes du fichier Nadege se collent automatiquement dans ZHPFix, sinon colle les lignes
                - Clique sur le bouton « GO » pour le lancer le nettoyage
                - Copie/colle la totalité du rapport dans ta prochaine réponse

                Et redémarre le PC
                1. nadege1976
                  # AdwCleaner v2.200 - Rapport créé le 09/04/2013 à 11:33:04
                  # Mis à jour le 02/04/2013 par Xplode
                  # Système d'exploitation : Windows 8 (64 bits)
                  # Nom d'utilisateur : nadege - NADÈGE
                  # Mode de démarrage : Normal
                  # Exécuté depuis : C:\Users\nadege\Downloads\adwcleaner(1).exe
                  # Option [Recherche]

                  ***** [Services] *****

                  ***** [Fichiers / Dossiers] *****

                  ***** [Registre] *****

                  ***** [Navigateurs] *****

                  -\\ Internet Explorer v10.0.9200.16519

                  [OK] Le registre ne contient aucune entrée illégitime.

                  -\\ Mozilla Firefox v19.0.2 (fr)

                  Fichier : C:\Users\nadege\AppData\Roaming\Mozilla\Firefox\Profiles\wfchkby5.default\prefs.js

                  [OK] Le fichier ne contient aucune entrée illégitime.

                  *************************

                  AdwCleaner[R1].txt - [750 octets] - [09/04/2013 11:33:04]
                  AdwCleaner[S1].txt - [2761 octets] - [05/04/2013 15:47:13]

                  ########## EOF - C:\AdwCleaner[R1].txt - [869 octets] ##########
                  1. Smart91 Contributeur sécurité
                    Surprenant qu'il reste encore autant de traces.
                    Peux-tu repasser ADCleaner en suppression et poster le rapport

                    Smart
                    1. nadege1976
                      Bonjour,

                      Mille excuse

                      Le lien du rapport

                      http://pjjoint.malekal.com/files.php?id=ZHPDiag_20130409_i9j15u10l910
                      1. Smart91 Contributeur sécurité
                        J'avais bien dit, je l'ai même mis en gras d'utiliser pjjoint pour héberger le rapport et me donner le lien pour y accéder

                        Smart
                        1. nadege1976
                          Ok Ok pour la mise à jour

                          nouveau rapport

                          Rapport de ZHPDiag v2013.4.7.45 par Nicolas Coolman, Update du 07/04/2013
                          Run by nadege at 08/04/2013 17:12:07
                          State : Version à jour.
                          High Elevated Privileges : OK
                          UAC : Activate by user

                          ---\\ Web Browser
                          MSIE: Internet Explorer v10.0.9200.16519
                          MFIE: Mozilla Firefox 19.0.2 v19.0.2 (Defaut)

                          ---\\ Windows Product Information
                          ~ Langage: Français
                          Windows 8 Home Premium Edition, 64-bit (Build 9200)
                          Windows Server License Manager Script : OK
                          ~ ion : Windows(R) Operating System, OEM_DM channel
                          Windows ID Activation : OK
                          ~ Windows Partial Key : 4M2MG
                          Windows License : OK
                          ~ Windows Remaining Initializations Number : 999
                          Software Protection Service (Protection logicielle) : OK
                          Windows Automatic Updates : OK
                          Windows Activation Technologies : OK

                          ---\\ System Information
                          ~ Processor: AMD64 Family 20 Model 2 Stepping 0, AuthenticAMD
                          ~ Operating System: 64 Bits
                          Boot mode: Normal (Normal boot)
                          Total RAM: 3658 MB (52% free)
                          System Restore: Activé (Enable)
                          System drive C: has 393 GB (87%) free of 448 GB

                          ---\\ Logged in mode
                          ~ Computer Name: NADÈGE
                          ~ User Name: nadege
                          ~ All Users Names: nadege, HomeGroupUser$, Administrateur,
                          ~ Unselected Option: None
                          Logged in as Administrator

                          ---\\ Environnement Variables
                          ~ System Unit : C:\
                          ~ %AppData% : C:\Users\nadege\AppData\Roaming\
                          ~ %Desktop% : C:\Users\nadege\Desktop\
                          ~ %Favorites% : C:\Users\nadege\Favorites\
                          ~ %LocalAppData% : C:\Users\nadege\AppData\Local\
                          ~ %StartMenu% : C:\Users\nadege\AppData\Roaming\Microsoft\Windows\Start Menu\
                          ~ %Windir% : C:\Windows\
                          ~ %System% : C:\Windows\System32\

                          ---\\ DOS/Devices
                          C:\ Hard drive, Flash drive, Thumb drive (Free 393 Go of 448 Go)
                          D:\ CD-ROM drive (Not Inserted)
                          E:\ Floppy drive, Flash card reader, USB Key (Free 0 Go of 2 Go)

                          ---\\ Security Center & Tools Informations
                          [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
                          [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
                          [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
                          [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
                          [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
                          [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
                          [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
                          [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
                          [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
                          [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
                          ~ Security Center: Scanned in 00mn 00s

                          ---\\ Recherche particulière de fichiers génériques
                          [MD5.E13A31D5254C25406A7946BDD9B06364] - (.Microsoft Corporation - Explorateur Windows.) (.11/10/2012 - 08:35:16.) -- C:\Windows\Explorer.exe [2380944]
                          [MD5.FE9AB232B56A12224E8A3F3F9878C9A3] - (.Microsoft Corporation - Application de démarrage de Windows.) (.26/07/2012 - 04:08:50.) -- C:\Windows\System32\Wininit.exe [132608]
                          [MD5.2769AF459DDA7140B73227C31DCE61BD] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.04/02/2013 - 23:39:47.) -- C:\Windows\System32\wininet.dll [2246656]
                          [MD5.BCF2036A0DD579E47C008C133550283E] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.11/10/2012 - 06:46:58.) -- C:\Windows\System32\Winlogon.exe [517120]
                          [MD5.9448F5740A037EC0C18F0E9177232DD0] - (.Microsoft Corporation - Bibliothèque de licences.) (.26/07/2012 - 04:07:20.) -- C:\Windows\System32\sppcomapi.dll [273408]
                          [MD5.36D6A3201721558A8AFBCC09C2DA4C2C] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.06/11/2012 - 04:53:44.) -- C:\Windows\system32\Drivers\AFD.sys [560640]
                          [MD5.A721FF570C2387E383BDDEA9632863C9] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.26/07/2012 - 06:00:48.) -- C:\Windows\system32\Drivers\atapi.sys [25840]
                          [MD5.990B1BABE6E81FB18E65A87EBEFB1772] - (.Microsoft Corporation - CD-ROM File System Driver.) (.26/07/2012 - 03:30:10.) -- C:\Windows\system32\Drivers\Cdfs.sys [108544]
                          [MD5.339BFF85D788268752DA8C9644B188EE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.26/07/2012 - 03:26:36.) -- C:\Windows\system32\Drivers\Cdrom.sys [174080]
                          [MD5.09D9EB9E7898F8E6561473A20CC808B9] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.26/07/2012 - 03:26:53.) -- C:\Windows\system32\Drivers\DfsC.sys [118784]
                          [MD5.7D87B5B6C7188D553E11B59DC7F0B111] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/09/2012 - 07:08:44.) -- C:\Windows\system32\Drivers\HDAudBus.sys [71168]
                          [MD5.C9E9CBF73AFFBFE3E801EFB516787BA3] - (.Microsoft Corporation - Pilote de port i8042.) (.26/07/2012 - 03:28:51.) -- C:\Windows\system32\Drivers\i8042prt.sys [112640]
                          [MD5.3969B9C218DD3FAA9F4ED2FFC3651C02] - (.Microsoft Corporation - IP Network Address Translator.) (.26/07/2012 - 03:23:01.) -- C:\Windows\system32\Drivers\IpNat.sys [145920]
                          [MD5.93179D48066918323628CB016D8C94DC] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.05/02/2013 - 23:29:09.) -- C:\Windows\system32\Drivers\MRxSmb.sys [370688]
                          [MD5.7CEC25C682D319D484630B3952C31A11] - (.Microsoft Corporation - MBT Transport driver.) (.26/07/2012 - 03:24:28.) -- C:\Windows\system32\Drivers\netBT.sys [331776]
                          [MD5.76929F4A69E425911A63B407E26C2589] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.02/02/2013 - 11:54:54.) -- C:\Windows\system32\Drivers\ntfs.sys [1933544]
                          [MD5.4563DAF8C6A740AD7F501E219BD10766] - (.Microsoft Corporation - Pilote de port parallèle.) (.26/07/2012 - 03:29:53.) -- C:\Windows\system32\Drivers\Parport.sys [105984]
                          [MD5.A14D625C5AEE5FFE0F47D1A1D419FAAE] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.26/07/2012 - 03:23:17.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [124928]
                          [MD5.B2A3AD74FF2E2FFA73AF2567108231B3] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) (.26/07/2012 - 03:25:18.) -- C:\Windows\system32\Drivers\rdpdr.sys [179712]
                          [MD5.73DC722CE5DF26D7638CE2446F2655C7] - (.Microsoft Corporation - TDI Translation Driver.) (.26/07/2012 - 06:26:47.) -- C:\Windows\system32\Drivers\tdx.sys [117248]
                          [MD5.2FB3CDFD5EAF4CD9D4AFAF96877D13AE] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.26/07/2012 - 05:57:09.) -- C:\Windows\system32\Drivers\volsnap.sys [332016]
                          ~ Generic Processes: Scanned in 00mn 00s

                          ---\\ Etat des fichiers cachés (Caché/Total)
                          ~ Mes images (My Pictures) : 2/675
                          ~ Mes Favoris (My Favorites) : 1/38
                          ~ Mes Documents (My Documents) : 2/180
                          ~ Mon Bureau (My Desktop) : 7/198
                          ~ Menu demarrer (Programs) : 1/31
                          ~ Hidden Files: Scanned in 00mn 01s

                          ---\\ Processus lancés
                          [MD5.7853D2AB445C10F97610B2B05FA4CF0A] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [512360] [PID.3884]
                          [MD5.1B38F4C2BCDB133B757E22BEB61FB3FC] - (.Dritek System Inc. - Launch Manager.) -- C:\Program Files (x86)\Launch Manager\LManager.exe [1176176] [PID.2884]
                          [MD5.148C545849C1379A3D4448F5DE768E86] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4767304] [PID.2420]
                          [MD5.BF2F2717C13A4BD4FD73F2788534E86B] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [917400] [PID.2628]
                          [MD5.AA6844A5127ED4B20DF6D313467B929D] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [17304] [PID.4192]
                          [MD5.680AD8F376970696B45269F074A8A28E] - (.Adobe Systems, Inc. - Adobe Flash Player 11.6 r602.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe [1822424] [PID.4176]
                          [MD5.60A3399135BEFC6F4BADBD6C13A4AC24] - (.Microsoft Corporation - Hôte Microsoft WWA.) -- C:\Windows\syswow64\wwahost.exe [333824] [PID.5028]
                          [MD5.B4773405A0C1632A3584D77C65D0B63E] - (.Mozilla Corporation - Thunderbird.) -- C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe [389016] [PID.1056]
                          [MD5.605664E657464F558F51C84A0F93029F] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [6558208] [PID.4140]
                          ~ Processes Running: Scanned in 00mn 01s

                          ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
                          C:\Users\nadege\AppData\Roaming\Mozilla\Firefox\Profiles\wfchkby5.default\prefs.js
                          M3 - MFPP: Plugins - [nadege] -- C:\Users\nadege\AppData\Roaming\Mozilla\Firefox\Profiles\wfchkby5.default\searchplugins\utorrentbarfr-customized-web-search.xml
                          M3 - MFPP: Plugins - [nadege] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\yahoo.xml
                          ~ Firefox Browser: 13 Legitimates Scanned in 00mn 00s

                          ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
                          R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com
                          R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
                          R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com
                          R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
                          R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com
                          R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com
                          R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
                          R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
                          R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
                          R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
                          R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
                          R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
                          R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (10.00.9200.16384 (win8_rtm.120725-1247)) -- C:\Windows\SysWOW64\ieframe.dll
                          R3 - URLSearchHook: IObit Apps Toolbar [64Bits] - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} . (.Spigot, Inc. - Widgi Toolbar for Internet Explorer.) (6, 7, 0, 4) -- C:\Program Files (x86)\IObit Apps Toolbar\IE\6.7\iobitappsToolbarIE.dll =>PUP.Dealio
                          R3 - URLSearchHook: (no name) [64Bits] - {05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} . (.Spigot, Inc. - Widgi Toolbar for Internet Explorer.) (No version) -- (.not file.) =>PUP.Dealio
                          ~ IE Browser: Scanned in 00mn 00s

                          ---\\ Internet Explorer, Proxy Management (R5)
                          R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
                          R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
                          R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
                          R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
                          R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
                          ~ Proxy management: Scanned in 00mn 00s

                          ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
                          F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
                          F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
                          F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
                          ~ Keys: Scanned in 00mn 00s

                          ---\\ Redirection du fichier Hosts (O1)
                          ~ Le fichier hosts est sain (The hosts file is clean).
                          ~ Hosts File: Scanned in 00mn 00s
                          ~ Nombre de lignes (Lines number): 21

                          ---\\ Browser Helper Objects de navigateur (O2)
                          O2 - BHO: IObit Apps Toolbar [64Bits] - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} . (.Spigot, Inc. - Widgi Toolbar for Internet Explorer.) -- C:\Program Files (x86)\IObit Apps Toolbar\IE\6.7\iobitappsToolbarIE.dll =>PUP.Dealio
                          ~ BHO: 5 Legitimates Scanned in 00mn 00s

                          ---\\ Internet Explorer Toolbars (O3)
                          O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline
                          ~ Toolbar: Scanned in 00mn 00s

                          ---\\ Applications démarrées par registre & par dossier (O4)
                          O4 - HKLM\..\Run: [Apoint] . (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\Apoint2K\Apoint.exe
                          O4 - HKLM\..\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files\Microsoft Office\Office14\BCSSync.exe
                          O4 - HKLM\..\Wow6432Node\Run: [LManager] Clé orpheline
                          O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
                          O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe
                          O4 - HKLM\..\Wow6432Node\Run: [BlueStacks Agent] . (.BlueStack Systems, Inc. - BlueStacks Agent.) -- C:\Program Files (x86)\BlueStacks\HD-Agent.exe
                          O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
                          ~ Application: Scanned in 00mn 00s

                          ---\\ Autres liens utilisateurs (O4)
                          O4 - Global Startup: C:\Documents And Settings\nadege\Desktop\Agenda.url . (...) -- C:\Documents And Settings\nadege\Desktop\Agenda.url
                          O4 - Global Startup: C:\Documents And Settings\nadege\Desktop\Gmail.URL . (...) -- C:\Documents And Settings\nadege\Desktop\Gmail.URL
                          O4 - GS\Desktop: HP Officejet 5600 series - Raccourci.lnk - Clé orpheline
                          O4 - Global Startup: C:\Documents And Settings\nadege\Desktop\Météo 12 jours.URL . (...) -- C:\Documents And Settings\nadege\Desktop\Météo 12 jours.URL
                          ~ Global Startup: Scanned in 00mn 00s

                          ---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
                          ~ IE Control Panel: 1 Legitimates Scanned in 00mn 00s

                          ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
                          O9 - Extra button: &Envoyer à OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~1\Office14\ONBttnIE.dll
                          O9 - Extra button: Notes &liées OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~1\Office14\ONBTTN~1.dll
                          ~ IE Extra Buttons: Scanned in 00mn 00s

                          ---\\ Winsock hijacker (Layered Service Provider) (O10)
                          ~ Winsock: 6 Legitimates Scanned in 00mn 00s

                          ---\\ Modification Domaine/Adresses DNS (O17)
                          O17 - HKLM\System\CCS\Services\Tcpip\..\{BBBF4675-2E0B-4BAE-BB19-9FD41889B630}: DhcpNameServer = 192.168.1.1
                          O17 - HKLM\System\CCS\Services\Tcpip\..\{F9D611D2-4A6F-4168-BF28-9583C27D99C2}: DhcpNameServer = 192.168.1.1
                          O17 - HKLM\System\CS1\Services\Tcpip\..\{BBBF4675-2E0B-4BAE-BB19-9FD41889B630}: DhcpNameServer = 192.168.1.1
                          O17 - HKLM\System\CS1\Services\Tcpip\..\{F9D611D2-4A6F-4168-BF28-9583C27D99C2}: DhcpNameServer = 192.168.1.1
                          O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
                          ~ Domain: Scanned in 00mn 00s

                          ---\\ Protocole additionnel (O18)
                          O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
                          O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll
                          ~ Protocole Additionnel: Scanned in 00mn 00s

                          ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
                          ~ SSODL: 1 Legitimates Scanned in 00mn 00s

                          ---\\ Liste des services NT non Microsoft et non désactivés (O23)
                          ~ Services: 13 Legitimates Scanned in 01mn 48s

                          ---\\ Enumération Active Desktop & MHTML Editor (O24)
                          ~ Desktop Component: 1 Legitimates Scanned in 00mn 00s

                          ---\\ BootExecute (O34)
                          ~ BEX: 2 Legitimates Scanned in 00mn 00s

                          ---\\ Tâches planifiées en automatique (O39)
                          O39 - APT:Automatic Planified Task - C:\Windows\Tasks\AutoKMS.job [314]
                          [MD5.00000000000000000000000000000000] [APT] [AutoKMS] (...) -- C:\WINDOWS\AutoKMS\AutoKMS.exe (.not file.) [0]
                          [MD5.00000000000000000000000000000000] [APT] [{87D2E17E-20EE-44E3-96F7-FA1B1F4B0F7B}] (...) -- C:\PROGRA~3\TARMAI~1\{889DF~1\Setup.exe (.not file.) [0] =>Toolbar.Tarma
                          ~ Scheduled Task: 12 Legitimates Scanned in 00mn 08s

                          ---\\ Composants installés (ActiveSetup Installed Components) (O40)
                          ~ Active Setup: 9 Legitimates Scanned in 00mn 00s

                          ---\\ Pilotes lancés au démarrage (O41)
                          ~ Drivers: 40 Legitimates Scanned in 00mn 00s

                          ---\\ Logiciels installés (O42)
                          O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
                          O42 - Logiciel: Adobe Reader XI (11.0.02) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
                          O42 - Logiciel: avast! Internet Security v8.0.1483.0 - (.AVAST Software.) [HKLM][64Bits] -- avast
                          O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKLM][64Bits] -- uTorrent
                          ~ Logic: 83 Legitimates Scanned in 00mn 01s

                          ---\\ HKCU & HKLM Software Keys
                          [HKCU\Software\AppDataLow\Software\Supreme Savings]
                          [HKCU\Software\BitTorrent]
                          [HKCU\Software\SweetIM] =>PUP.SweetIM
                          [HKLM\Software\DomaIQ]
                          [HKLM\Software\Wow6432Node\SweetIM] =>PUP.SweetIM
                          ~ Key Software: 181 Legitimates Scanned in 00mn 01s

                          ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
                          O43 - CFD: 30/01/2013 - 17:53:27 - [5,086] ----D C:\Program Files (x86)\Spybot - Search & Destroy
                          O43 - CFD: 05/04/2013 - 12:47:29 - [1,294] ----D C:\Program Files (x86)\Spybot - Search & Destroy 2
                          O43 - CFD: 12/12/2012 - 10:53:19 - [0,924] ----D C:\Program Files (x86)\uTorrent
                          O43 - CFD: 31/01/2013 - 13:03:36 - [15,522] ----D C:\ProgramData\Spybot - Search & Destroy
                          O43 - CFD: 18/01/2013 - 17:25:48 - [304,757] --H-D C:\ProgramData\{43B55ACB-A031-4DC3-AA95-8492F35E13ED}
                          O43 - CFD: 31/10/2012 - 19:58:21 - [0,262] ----D C:\Users\nadege\AppData\Roaming\lm
                          O43 - CFD: 07/04/2013 - 09:54:34 - [2,657] ----D C:\Users\nadege\AppData\Roaming\uTorrent
                          ~ Program Folder: 158 Legitimates Scanned in 00mn 03s

                          ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
                          O44 - LFC:[MD5.5C32CBFDFD2EF7F0A0A08DFE03CD0EFA] - 05/04/2013 - 14:47:40 ---A- . (...) -- C:\AdwCleaner[S1].txt [2761]
                          O44 - LFC:[MD5.1582578921B738B981596C0AFF2A109B] - 05/04/2013 - 08:55:34 ---A- . (...) -- C:\UsbFix [Clean 2] NADÈGE.txt [8028]
                          O44 - LFC:[MD5.38E0F1C28DC1280D82A0A50EB68E0F31] - 05/04/2013 - 08:48:08 ----- . (...) -- C:\UsbFix [Scan 1] NADÈGE.txt [6667]
                          ~ Files: 123 Legitimates Scanned in 00mn 11s

                          ---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
                          O45 - LFCP:[MD5.EDD24B2C88D1A9070596C423D641CD63] - 01/04/2013 - 16:30:17 ---A- - C:\Windows\Prefetch\NETPLWIZ.EXE-AFF278BB.pf
                          O45 - LFCP:[MD5.784386D4277B0000B8F9F5B2CBB715B1] - 01/04/2013 - 16:31:42 ---A- - C:\Windows\Prefetch\SYSTEMSETTINGS.EXE-D8CC3B5E.pf
                          O45 - LFCP:[MD5.D1F083C7BA5AD288FF1AD21E7A1C647F] - 02/04/2013 - 15:03:12 ---A- - C:\Windows\Prefetch\TCT-NEIGE.EXE-6B9FD2B2.pf
                          O45 - LFCP:[MD5.F6A10257763C2C030A4278D4CD091717] - 03/04/2013 - 12:48:49 ---A- - C:\Windows\Prefetch\OPTPROREMINDER.EXE-EBA8C8D1.pf
                          O45 - LFCP:[MD5.1036ABC652EEE04CB6F09E7FDF6C4227] - 05/04/2013 - 05:55:53 ---A- - C:\Windows\Prefetch\RESIZE.EXE-5E7A1952.pf
                          O45 - LFCP:[MD5.3150301929F443DB3495CF28F7AFD4DF] - 05/04/2013 - 05:58:44 ---A- - C:\Windows\Prefetch\ONENOTE.EXE-7A7C97BB.pf
                          O45 - LFCP:[MD5.D5FF4D47FE7A52550600A0040922D332] - 05/04/2013 - 05:59:44 ---A- - C:\Windows\Prefetch\MSHTA.EXE-ED0DFDDF.pf
                          O45 - LFCP:[MD5.138F720FCA9954F1812AEC708265B669] - 05/04/2013 - 08:59:34 ---A- - C:\Windows\Prefetch\GO.EXE-34414F70.pf
                          O45 - LFCP:[MD5.9BA09BE41F779698646A412FE4BD1FA7] - 05/04/2013 - 10:44:30 ---A- - C:\Windows\Prefetch\dynreservedpri.db
                          O45 - LFCP:[MD5.4511DFBD0A33618CCA318CFE2AA01BA7] - 05/04/2013 - 12:21:39 ---A- - C:\Windows\Prefetch\IDCARD.EXE-3E87601F.pf
                          O45 - LFCP:[MD5.BDAFD2DFCC4EEBB6BDBF8BB3E38A1D12] - 05/04/2013 - 15:13:25 ---A- - C:\Windows\Prefetch\_IU14D2N.TMP-53C840C8.pf
                          O45 - LFCP:[MD5.D7AB4885CD96ED753531713307A081DF] - 05/04/2013 - 19:43:02 ---A- - C:\Windows\Prefetch\TWITTER-WIN8.EXE-E9757E8E.pf
                          O45 - LFCP:[MD5.F5C293ECF1A907BD72FA248FC187F269] - 06/04/2013 - 06:57:05 ---A- - C:\Windows\Prefetch\BYTECODEGENERATOR.EXE-353D57C0.pf
                          O45 - LFCP:[MD5.C5679B1E8C49AA0D87B094E08D5EE5E0] - 06/04/2013 - 06:58:35 ---A- - C:\Windows\Prefetch\EBP.INVOICING.APPLICATION.EXE-8384E454.pf
                          O45 - LFCP:[MD5.0845B0B3D1C1C2C3EBF6B191C9C96659] - 06/04/2013 - 20:23:30 ---A- - C:\Windows\Prefetch\LIVECOMM.EXE-C9701AA1.pf
                          O45 - LFCP:[MD5.6F72A9D6BCC11CA15940A1466D570A78] - 07/04/2013 - 07:36:32 ---A- - C:\Windows\Prefetch\UTORRENT.EXE-2E583999.pf
                          O45 - LFCP:[MD5.7A2E581C5E694059F67E09E16259BF34] - 07/04/2013 - 11:55:32 ---A- - C:\Windows\Prefetch\RFBTNSVC64.EXE-4CA3F3BE.pf
                          O45 - LFCP:[MD5.30A541D2166384AA4B07D30CB9781625] - 07/04/2013 - 20:32:58 ---A- - C:\Windows\Prefetch\EPOWERBUTTON.EXE-80D380BE.pf
                          O45 - LFCP:[MD5.078C34DC74A6F865B9783C36D56A749A] - 08/04/2013 - 14:30:34 ---A- - C:\Windows\Prefetch\RICONMAN.EXE-D63AD6B8.pf
                          O45 - LFCP:[MD5.D268CD6805610DE1163C5BDB48280F30] - 08/04/2013 - 14:33:12 ---A- - C:\Windows\Prefetch\LMUTILPS32.EXE-9827F12C.pf
                          O45 - LFCP:[MD5.A396C208C511D945B72F4EBA07BD0CDB] - 08/04/2013 - 14:35:54 ---A- - C:\Windows\Prefetch\WSHOST.EXE-05F0A3AF.pf
                          O45 - LFCP:[MD5.9CDF99978BAE79B3FA97BD75ED0E4596] - 08/04/2013 - 15:15:01 ---A- - C:\Windows\Prefetch\DKRUN32.EXE-8583E6AC.pf
                          O45 - LFCP:[MD5.090D8A3FCDA08B4B703F760B9A365AEF] - 08/04/2013 - 15:22:36 ---A- - C:\Windows\Prefetch\MMDX64FX.EXE-4C9473D7.pf
                          O45 - LFCP:[MD5.0AFBAD3FD466381E2B113B5686A2CFE4] - 08/04/2013 - 15:22:38 ---A- - C:\Windows\Prefetch\HD-LOGROTATOR.EXE-AAB4E25E.pf
                          O45 - LFCP:[MD5.96CC29B608CAC71C8E0BFAB036331F89] - 08/04/2013 - 15:26:05 ---A- - C:\Windows\Prefetch\EPOWERSVC.EXE-76E124E6.pf
                          O45 - LFCP:[MD5.F46E4811BF8F6C6FAAB100BCC2A73B91] - 08/04/2013 - 16:07:57 ---A- - C:\Windows\Prefetch\LIVECOMM.EXE-F1928578.pf
                          ~ Prefetcher: 228 Legitimates Scanned in 00mn 01s

                          ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
                          O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook [64Bits] - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
                          ~ ShellExecuteHooks: Scanned in 00mn 00s

                          ---\\ Déni du service (Local Security Authority) (O48)
                          ~ LSA: 9 Legitimates Scanned in 00mn 00s

                          ---\\ Contrôle du Safe Boot (CSB) (O49)
                          O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\hitmanpro37.sys . (...) -- C:\Windows\System32\Drivers\hitmanpro37.sys (.not file.)
                          O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\hitmanpro37.sys . (...) -- C:\Windows\System32\Drivers\hitmanpro37.sys (.not file.)
                          ~ CSB: 19 Legitimates Scanned in 00mn 00s

                          ---\\ Trojan Driver Search Data (HKLM) (O52)
                          ~ TDSD: 2 Legitimates Scanned in 00mn 00s

                          ---\\ Microsoft Control Security Providers (O54)
                          ~ MSCP: 2 Legitimates Scanned in 00mn 00s

                          ---\\ Microsoft Windows Policies System (O55)
                          O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0
                          O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
                          O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
                          O55 - MWPS:[HKLM\...\Policies\System] - "EnableLinkedConnections"=1
                          ~ MWPS: 18 Legitimates Scanned in 00mn 00s

                          ---\\ Microsoft Windows Policies Explorer (O56)
                          O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
                          O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
                          ~ MWPE Keys: 7 Legitimates Scanned in 00mn 00s

                          ---\\ Liste des Drivers Système (O58)
                          O58 - SDL:[MD5.4F18D4C7EA14F11A7211F60D553C03DB] - 26/07/2012 - 06:00:49 ---A- . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\Drivers\3ware.sys [106736]
                          ~ Drivers: Scanned in 00mn 00s

                          ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
                          O61 - LFC: 05/04/2013 - 05:28:19 ---A- C:\Users\nadege\AppData\Roaming\Thunderbird\Crash Reports\InstallTime20130328110546 [10]
                          O61 - LFC: 05/04/2013 - 05:28:26 ---A- C:\Users\nadege\AppData\Local\Thunderbird\Mozilla Thunderbird\active-update.xml [57]
                          O61 - LFC: 05/04/2013 - 05:28:27 ---A- C:\Users\nadege\AppData\Local\Thunderbird\Mozilla Thunderbird\updates.xml [4577]
                          O61 - LFC: 05/04/2013 - 05:47:17 -SHA- C:\Users\nadege\Documents\aviva 17.01.13\Thumbs.db [47104]
                          O61 - LFC: 05/04/2013 - 05:48:12 -SHA- C:\Users\nadege\Documents\SITE INTERNET\GOOGLE DOCS\etude de marche aout 2012\Thumbs.db [89600]
                          O61 - LFC: 05/04/2013 - 05:58:43 ---A- C:\Users\nadege\AppData\Roaming\Microsoft\OneNote\14.0\Preferences.dat [196488]
                          O61 - LFC: 05/04/2013 - 08:20:35 ---A- C:\Users\nadege\Downloads\spybot_search_destroy_2_27_03_2013_fr_10965.exe [55454464]
                          O61 - LFC: 05/04/2013 - 08:42:21 ---A- C:\Users\nadege\Downloads\UsbFix.exe [1024813]
                          O61 - LFC: 05/04/2013 - 14:46:44 ---A- C:\Users\nadege\Downloads\adwcleaner.exe [613083]
                          O61 - LFC: 05/04/2013 - 15:14:20 ---A- C:\Users\nadege\Downloads\mbam-setup-1.70.0.1100.exe [10156344]
                          O61 - LFC: 06/04/2013 - 06:58:46 ---A- C:\Users\nadege\AppData\Local\EBP\Invoicing5.0FR03\Info.xml [231]
                          O61 - LFC: 07/04/2013 - 07:36:27 ---A- C:\Users\nadege\AppData\Roaming\uTorrent\dlimagecache\1D67A7A87EE6B20D306B59AC55A6F73A9A1D3540 [37532]
                          O61 - LFC: 07/04/2013 - 08:06:22 ---A- C:\Users\nadege\AppData\Roaming\uTorrent\settings.dat.old [103300]
                          O61 - LFC: 07/04/2013 - 08:36:22 ---A- C:\Users\nadege\AppData\Roaming\uTorrent\settings.dat [103309]
                          O61 - LFC: 07/04/2013 - 08:47:54 ---A- C:\Users\nadege\AppData\Roaming\uTorrent\dht_feed.dat.old [2]
                          O61 - LFC: 07/04/2013 - 08:52:33 ---A- C:\Users\nadege\AppData\Roaming\uTorrent\resume.dat.old [138920]
                          O61 - LFC: 07/04/2013 - 08:52:59 ---A- C:\Users\nadege\AppData\Roaming\uTorrent\dht_feed.dat [2]
                          O61 - LFC: 07/04/2013 - 08:54:34 ---A- C:\Users\nadege\AppData\Roaming\uTorrent\resume.dat [137984]
                          ~ 9 Fichiers temporaires (Temporary files)
                          ~ Files: 1228 Legitimates Scanned in 00mn 31s

                          ---\\ Liste des outils de nettoyage (O63)
                          O63 - Logiciel: UsbFix By El Desaparecido - (.El Desaparecido - SosVirus.org.) [HKLM] -- Usbfix
                          O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
                          O63 - Logiciel: HiJackThis - (.Trend Micro.) [HKLM] -- {45A66726-69BC-466B-A7A4-12FCBA4883D7}
                          ~ ADS: Scanned in 00mn 00s

                          ---\\ File Associations Shell Spawning (O67)
                          ~ FASS Keys: 19 Legitimates Scanned in 00mn 00s

                          ---\\ Start Menu Internet (O68)
                          O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
                          O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
                          ~ Keys: Scanned in 00mn 00s

                          ---\\ Search Browser Infection (O69)
                          O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - http://search.live.com
                          O69 - SBI: SearchScopes [HKCU] {CBDC6EAF-A75F-42B2-AF86-7BCFD5227B58} - (Yahoo! Search) - http://fr.search.yahoo.com
                          ~ Keys: Scanned in 00mn 00s

                          ---\\ Recherche des services démarrés par Svchost (O83)
                          ~ Services: 34 Legitimates Scanned in 00mn 01s

                          ---\\ Firewall Active Exception List (FirewallRules) (O87)
                          O87 - FAEL: "{10CD693B-E6B9-4432-A5A1-D83B48189770}" | In - None - P6 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe
                          O87 - FAEL: "{F960B88E-3FBC-4039-B7EC-A1ED7A59AAB2}" | In - None - P17 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe
                          O87 - FAEL: "TCP Query User{FF114904-12AA-4B28-8A17-E17245E6C8A1}C:\windows\kmsemulator.exe" | In - Public - P6 - TRUE | .(...) -- C:\windows\kmsemulator.exe
                          O87 - FAEL: "UDP Query User{BD56F3FE-59FC-46FD-B837-992806E07759}C:\windows\kmsemulator.exe" | In - Public - P17 - TRUE | .(...) -- C:\windows\kmsemulator.exe
                          ~ Firewall: 223 Legitimates Scanned in 00mn 04s

                          ---\\ Scan Additionnel (O88)
                          Database Version : v2.11492 - (07/04/2013)
                          Clés trouvées (Keys found) : 85
                          Valeurs trouvées (Values found) : 0
                          Dossiers trouvés (Folders found) : 0
                          Fichiers trouvés (Files found) : 1

                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635] =>PUP.SweetIM
                          [HKLM\Software\Wow6432Node\Google\Chrome\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib] =>Toolbar.Conduit
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM
                          [HKCU\Software\SweetIM] =>PUP.SweetIM
                          [HKLM\Software\Wow6432Node\SweetIM] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9EE58E3C298524145B73CBBED3CAC4D3] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B2FD9C0A5B9838449838816A28001F4B] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8724E58E6C7D00C48A0D4F3345EB2C26] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB676B0E1B9EFA049B9F7DDDA9645734] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B31BBB0B825EDEF45AB0FE7099C68C81] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B471D8D7319336B4CA89374ED0D7B806] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BC30043663AA2CA4DA1DAA9CA5FDCC75] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FDC83385E6C239F4C876A77A37DF581D] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420] =>PUP.SweetIM
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1CAE30F47D14B41B5FC8FA53658044] =>PUP.Dealio
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\30C16B15B255BD349A1157B8A83E2AF9] =>PUP.Dealio
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636] =>PUP.SweetIM^
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094] =>PUP.SweetIM^
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12BF94BD06C95F343A77631402B9556A] =>PUP.SweetIM^
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2124D8A8CF720FD44866190AF560228E] =>PUP.SweetIM^
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27A325ACED8CA4743A30127638591ADB] =>PUP.SweetIM^
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536] =>PUP.SweetIM^
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\350D17402BD84234EAF7D32F08172D7C] =>PUP.SweetIM^
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EE8C5F419057E1478A654868CEE60B5] =>PUP.SweetIM^
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4735D908D66E1BA46B6C2D7185A12B2B] =>PUP.SweetIM^
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4] =>PUP.SweetIM^
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76D8378E2DDAED3428720A631F6E3BF0] =>PUP.SweetIM^
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2] =>PUP.SweetIM^
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C] =>PUP.SweetIM^
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A001B259DB7D694E818BE29B973992C] =>PUP.SweetIM^
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789] =>PUP.SweetIM^
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE2EC163C6A68A48921573E0E7E199D] =>PUP.SweetIM^
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399] =>PUP.SweetIM^
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C06C6662FA5B04646829E4A460857770] =>PUP.SweetIM^
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156] =>PUP.SweetIM^
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEEB3E14ABE8270419B0FD762E18F7C6] =>PUP.SweetIM^
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1B5E9A3BDB51349BF96E842C062D98] =>PUP.SweetIM^
                          [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FECBC2BC14DA6CD459BD59A041709836] =>PUP.SweetIM^
                          C:\Windows\KMSEmulator.exe =>Hijacker.Windows
                          ~ Additionnel: Scanned in 01mn 17s

                          ---\\ Product Upgrade Codes (O90)
                          ~ Update Products: 94 Legitimates Scanned in 00mn 00s

                          ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
                          SR - | Auto 18/12/2012 65192 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
                          SS - | Demand 12/03/2013 253656 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
                          SR - | Auto 07/11/2012 239616 | (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
                          SR - | Auto 07/03/2013 45248 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
                          SR - | Auto 07/03/2013 136912 | (avast! Firewall) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\afwServ.exe
                          SS - | Auto 05/12/2012 393080 | (BstHdAndroidSvc) . (.BlueStack Systems, Inc..) - C:\Program Files (x86)\BlueStacks\HD-Service.exe
                          SR - | Auto 05/12/2012 384888 | (BstHdLogRotatorSvc) . (.BlueStack Systems, Inc..) - C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
                          SS - | Demand 31/07/2012 466064 | (DeviceFastLaneService) . (.Acer Incorporated.) - C:\Program Files\Packard Bell\Packard Bell Device Fast-lane\DeviceFastLaneSvc.exe
                          SR - | Auto 21/08/2012 348784 | (DsiWMIService) . (.Dritek System Inc..) - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
                          SR - | Demand 31/07/2012 659600 | (ePowerSvc) . (.Acer Incorporated.) - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
                          SR - | Auto 29/03/2013 109352 | (HitmanProScheduler) . (.SurfRight B.V..) - C:\Program Files\HitmanPro\hmpsched.exe
                          SR - | Auto 13/07/2012 2451456 | (IconMan_R) . (.Realsil Microelectronics Inc..) - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
                          SR - | Auto 14/12/2012 398184 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
                          SR - | Auto 14/12/2012 682344 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
                          SS - | Demand 11/03/2013 115608 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
                          SR - | Auto 26/11/2011 687400 | (NAUpdate) . (.Nero AG.) - C:\Program Files (x86)\Nero\Update\NASvc.exe
                          SR - | Auto 04/09/2012 93296 | (RfButtonDriverService) . (.Dritek System INC..) - C:\Windows\RfBtnSvc64.exe
                          SR - | Auto 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
                          SS - | Auto 20/09/2012 29696 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
                          ~ Services: Scanned in 00mn 01s

                          ---\\ Recherche Master Boot Record Infection (MBR)(O80)
                          Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
                          ~ MBR: 1 Legitimates Scanned in 00mn 02s

                          ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
                          Written by ad13, http://ad13.geekstog
                          Run by nadege at 08/04/2013 17:22:23

                          ********* Dump file Name *********
                          C:\PhysicalDisk0_MBR.bin
                          ~ MBR: Scanned in 00mn 04s

                          ~ 2449 Legitimates filtered by white list
                          End of the scan (607 lines in 10mn 16s)(0)
                          1. Smart91 Contributeur sécurité
                            La version de ZHPDiag n'est plus à jour ( normal depuis 5 jours).
                            Relance ZHPDiag, clique sur la fléche verte pour installer la mise à jour et poste le rapport via pjjoint
                            Très important utilise pjjoint poster le rapport

                            Smart
                            1. nadege1976
                              Bonjour,

                              Me re-voila.

                              Je post donc le rapport, désolé pour ne pas l'avoir poster avant, c'est la faute du week end lol ;)
                              J'éspère que tu es toujours la, et que tu pourras regarder mon rapport?!!!
                              Cordialement !
                              Nadège.

                              Rapport de ZHPDiag v2013.4.4.17 par Nicolas Coolman, Update du 04/04/2013
                              Run by nadege at 08/04/2013 16:24:40
                              State : Nouvelle version disponible
                              High Elevated Privileges : OK
                              UAC : Activate by user

                              ---\\ Web Browser
                              MSIE: Internet Explorer v10.0.9200.16519
                              MFIE: Mozilla Firefox 19.0.2 v19.0.2 (Defaut)

                              ---\\ Windows Product Information
                              ~ Langage: Français
                              Windows 8 Home Premium Edition, 64-bit (Build 9200)
                              Windows Server License Manager Script : OK
                              ~ ion : Windows(R) Operating System, OEM_DM channel
                              Windows ID Activation : OK
                              ~ Windows Partial Key : 4M2MG
                              Windows License : OK
                              ~ Windows Remaining Initializations Number : 999
                              Software Protection Service (Protection logicielle) : OK
                              Windows Automatic Updates : OK
                              Windows Activation Technologies : OK

                              ---\\ System Information
                              ~ Processor: AMD64 Family 20 Model 2 Stepping 0, AuthenticAMD
                              ~ Operating System: 64 Bits
                              Boot mode: Normal (Normal boot)
                              Total RAM: 3658 MB (76% free)
                              System Restore: Activé (Enable)
                              System drive C: has 393 GB (87%) free of 448 GB

                              ---\\ Logged in mode
                              ~ Computer Name: NADÈGE
                              ~ User Name: nadege
                              ~ All Users Names: nadege, HomeGroupUser$, Administrateur,
                              ~ Unselected Option: None
                              Logged in as Administrator

                              ---\\ Environnement Variables
                              ~ System Unit : C:\
                              ~ %AppData% : C:\Users\nadege\AppData\Roaming\
                              ~ %Desktop% : C:\Users\nadege\Desktop\
                              ~ %Favorites% : C:\Users\nadege\Favorites\
                              ~ %LocalAppData% : C:\Users\nadege\AppData\Local\
                              ~ %StartMenu% : C:\Users\nadege\AppData\Roaming\Microsoft\Windows\Start Menu\
                              ~ %Windir% : C:\Windows\
                              ~ %System% : C:\Windows\System32\

                              ---\\ DOS/Devices
                              C:\ Hard drive, Flash drive, Thumb drive (Free 393 Go of 448 Go)
                              D:\ CD-ROM drive (Not Inserted)
                              E:\ Floppy drive, Flash card reader, USB Key (Free 0 Go of 2 Go)

                              ---\\ Security Center & Tools Informations
                              [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
                              [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
                              [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
                              [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
                              [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
                              [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
                              [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
                              [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
                              [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
                              [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
                              ~ Security Center: Scanned in 00mn 00s

                              ---\\ Recherche particulière de fichiers génériques
                              [MD5.E13A31D5254C25406A7946BDD9B06364] - (.Microsoft Corporation - Explorateur Windows.) (.11/10/2012 - 08:35:16.) -- C:\Windows\Explorer.exe [2380944]
                              [MD5.FE9AB232B56A12224E8A3F3F9878C9A3] - (.Microsoft Corporation - Application de démarrage de Windows.) (.26/07/2012 - 04:08:50.) -- C:\Windows\System32\Wininit.exe [132608]
                              [MD5.2769AF459DDA7140B73227C31DCE61BD] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.04/02/2013 - 23:39:47.) -- C:\Windows\System32\wininet.dll [2246656]
                              [MD5.BCF2036A0DD579E47C008C133550283E] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.11/10/2012 - 06:46:58.) -- C:\Windows\System32\Winlogon.exe [517120]
                              [MD5.9448F5740A037EC0C18F0E9177232DD0] - (.Microsoft Corporation - Bibliothèque de licences.) (.26/07/2012 - 04:07:20.) -- C:\Windows\System32\sppcomapi.dll [273408]
                              [MD5.36D6A3201721558A8AFBCC09C2DA4C2C] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.06/11/2012 - 04:53:44.) -- C:\Windows\system32\Drivers\AFD.sys [560640]
                              [MD5.A721FF570C2387E383BDDEA9632863C9] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.26/07/2012 - 06:00:48.) -- C:\Windows\system32\Drivers\atapi.sys [25840]
                              [MD5.990B1BABE6E81FB18E65A87EBEFB1772] - (.Microsoft Corporation - CD-ROM File System Driver.) (.26/07/2012 - 03:30:10.) -- C:\Windows\system32\Drivers\Cdfs.sys [108544]
                              [MD5.339BFF85D788268752DA8C9644B188EE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.26/07/2012 - 03:26:36.) -- C:\Windows\system32\Drivers\Cdrom.sys [174080]
                              [MD5.09D9EB9E7898F8E6561473A20CC808B9] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.26/07/2012 - 03:26:53.) -- C:\Windows\system32\Drivers\DfsC.sys [118784]
                              [MD5.7D87B5B6C7188D553E11B59DC7F0B111] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/09/2012 - 07:08:44.) -- C:\Windows\system32\Drivers\HDAudBus.sys [71168]
                              [MD5.C9E9CBF73AFFBFE3E801EFB516787BA3] - (.Microsoft Corporation - Pilote de port i8042.) (.26/07/2012 - 03:28:51.) -- C:\Windows\system32\Drivers\i8042prt.sys [112640]
                              [MD5.3969B9C218DD3FAA9F4ED2FFC3651C02] - (.Microsoft Corporation - IP Network Address Translator.) (.26/07/2012 - 03:23:01.) -- C:\Windows\system32\Drivers\IpNat.sys [145920]
                              [MD5.93179D48066918323628CB016D8C94DC] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.05/02/2013 - 23:29:09.) -- C:\Windows\system32\Drivers\MRxSmb.sys [370688]
                              [MD5.7CEC25C682D319D484630B3952C31A11] - (.Microsoft Corporation - MBT Transport driver.) (.26/07/2012 - 03:24:28.) -- C:\Windows\system32\Drivers\netBT.sys [331776]
                              [MD5.76929F4A69E425911A63B407E26C2589] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.02/02/2013 - 11:54:54.) -- C:\Windows\system32\Drivers\ntfs.sys [1933544]
                              [MD5.4563DAF8C6A740AD7F501E219BD10766] - (.Microsoft Corporation - Pilote de port parallèle.) (.26/07/2012 - 03:29:53.) -- C:\Windows\system32\Drivers\Parport.sys [105984]
                              [MD5.A14D625C5AEE5FFE0F47D1A1D419FAAE] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.26/07/2012 - 03:23:17.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [124928]
                              [MD5.B2A3AD74FF2E2FFA73AF2567108231B3] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) (.26/07/2012 - 03:25:18.) -- C:\Windows\system32\Drivers\rdpdr.sys [179712]
                              [MD5.73DC722CE5DF26D7638CE2446F2655C7] - (.Microsoft Corporation - TDI Translation Driver.) (.26/07/2012 - 06:26:47.) -- C:\Windows\system32\Drivers\tdx.sys [117248]
                              [MD5.2FB3CDFD5EAF4CD9D4AFAF96877D13AE] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.26/07/2012 - 05:57:09.) -- C:\Windows\system32\Drivers\volsnap.sys [332016]
                              ~ Generic Processes: Scanned in 00mn 01s

                              ---\\ Etat des fichiers cachés (Caché/Total)
                              ~ Mes images (My Pictures) : 2/675
                              ~ Mes Favoris (My Favorites) : 1/38
                              ~ Mes Documents (My Documents) : 2/180
                              ~ Mon Bureau (My Desktop) : 7/198
                              ~ Menu demarrer (Programs) : 1/31
                              ~ Hidden Files: Scanned in 00mn 06s

                              ---\\ Processus lancés
                              [MD5.7853D2AB445C10F97610B2B05FA4CF0A] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [512360] [PID.3884]
                              [MD5.1B38F4C2BCDB133B757E22BEB61FB3FC] - (.Dritek System Inc. - Launch Manager.) -- C:\Program Files (x86)\Launch Manager\LManager.exe [1176176] [PID.2884]
                              [MD5.148C545849C1379A3D4448F5DE768E86] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4767304] [PID.2420]
                              [MD5.BF2F2717C13A4BD4FD73F2788534E86B] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [917400] [PID.2628]
                              [MD5.CC94B2146C58DBD29976AEE9F841E2BA] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [6471680] [PID.4572]
                              ~ Processes Running: Scanned in 00mn 03s

                              ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
                              C:\Users\nadege\AppData\Roaming\Mozilla\Firefox\Profiles\wfchkby5.default\prefs.js
                              M3 - MFPP: Plugins - [nadege] -- C:\Users\nadege\AppData\Roaming\Mozilla\Firefox\Profiles\wfchkby5.default\searchplugins\utorrentbarfr-customized-web-search.xml
                              M3 - MFPP: Plugins - [nadege] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\amazon-france.xml
                              M3 - MFPP: Plugins - [nadege] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\bing.xml
                              M3 - MFPP: Plugins - [nadege] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
                              M3 - MFPP: Plugins - [nadege] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\eBay-france.xml
                              M3 - MFPP: Plugins - [nadege] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\google.xml
                              M3 - MFPP: Plugins - [nadege] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\wikipedia-fr.xml
                              M3 - MFPP: Plugins - [nadege] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\yahoo-france.xml
                              M3 - MFPP: Plugins - [nadege] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\yahoo.xml
                              M0 - MFSP: prefs.js [nadege - wfchkby5.default] http://www.google.fr
                              P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_180.dll
                              P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.20125.0.) -- c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll
                              P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\Program Files\Microsoft Office\Office14\NPAUTHZ.dll
                              ~ Firefox Browser: Scanned in 00mn 00s

                              ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
                              R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com
                              R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
                              R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com
                              R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
                              R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com
                              R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com
                              R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
                              R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
                              R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
                              R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
                              R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
                              R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
                              R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (10.00.9200.16384 (win8_rtm.120725-1247)) -- C:\Windows\SysWOW64\ieframe.dll
                              R3 - URLSearchHook: IObit Apps Toolbar [64Bits] - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} . (.Spigot, Inc. - Widgi Toolbar for Internet Explorer.) (6, 7, 0, 4) -- C:\Program Files (x86)\IObit Apps Toolbar\IE\6.7\iobitappsToolbarIE.dll
                              R3 - URLSearchHook: (no name) [64Bits] - {05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} . (.Spigot, Inc. - Widgi Toolbar for Internet Explorer.) (No version) -- (.not file.)
                              ~ IE Browser: Scanned in 00mn 00s

                              ---\\ Internet Explorer, Proxy Management (R5)
                              R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
                              R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
                              R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
                              R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
                              R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
                              ~ Proxy management: Scanned in 00mn 00s

                              ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
                              F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
                              F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
                              F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
                              ~ Keys: Scanned in 00mn 00s

                              ---\\ Redirection du fichier Hosts (O1)
                              ~ Le fichier hosts est sain (The hosts file is clean).
                              ~ Hosts File: Scanned in 00mn 00s
                              ~ Nombre de lignes (Lines number): 21

                              ---\\ Browser Helper Objects de navigateur (O2)
                              O2 - BHO: IObit Apps Toolbar [64Bits] - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} . (.Spigot, Inc. - Widgi Toolbar for Internet Explorer.) -- C:\Program Files (x86)\IObit Apps Toolbar\IE\6.7\iobitappsToolbarIE.dll
                              ~ BHO: 5 Legitimates Scanned in 00mn 00s

                              ---\\ Internet Explorer Toolbars (O3)
                              O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline
                              ~ Toolbar: Scanned in 00mn 00s

                              ---\\ Applications démarrées par registre & par dossier (O4)
                              O4 - HKLM\..\Run: [Apoint] . (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\Apoint2K\Apoint.exe
                              O4 - HKLM\..\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files\Microsoft Office\Office14\BCSSync.exe
                              O4 - HKLM\..\Wow6432Node\Run: [LManager] Clé orpheline
                              O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
                              O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe
                              O4 - HKLM\..\Wow6432Node\Run: [BlueStacks Agent] . (.BlueStack Systems, Inc. - BlueStacks Agent.) -- C:\Program Files (x86)\BlueStacks\HD-Agent.exe
                              O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
                              ~ Application: Scanned in 00mn 00s

                              ---\\ Autres liens utilisateurs (O4)
                              O4 - Global Startup: C:\Documents And Settings\nadege\Desktop\Agenda.url . (...) -- C:\Documents And Settings\nadege\Desktop\Agenda.url
                              O4 - Global Startup: C:\Documents And Settings\nadege\Desktop\Gmail.URL . (...) -- C:\Documents And Settings\nadege\Desktop\Gmail.URL
                              O4 - GS\Desktop: HP Officejet 5600 series - Raccourci.lnk - Clé orpheline
                              O4 - Global Startup: C:\Documents And Settings\nadege\Desktop\Météo 12 jours.URL . (...) -- C:\Documents And Settings\nadege\Desktop\Météo 12 jours.URL
                              ~ Global Startup: Scanned in 00mn 00s

                              ---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
                              ~ IE Control Panel: 1 Legitimates Scanned in 00mn 00s

                              ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
                              O9 - Extra button: &Envoyer à OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~1\Office14\ONBttnIE.dll
                              O9 - Extra button: Notes &liées OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~1\Office14\ONBTTN~1.dll
                              ~ IE Extra Buttons: Scanned in 00mn 00s

                              ---\\ Winsock hijacker (Layered Service Provider) (O10)
                              ~ Winsock: 6 Legitimates Scanned in 00mn 00s

                              ---\\ Modification Domaine/Adresses DNS (O17)
                              O17 - HKLM\System\CCS\Services\Tcpip\..\{BBBF4675-2E0B-4BAE-BB19-9FD41889B630}: DhcpNameServer = 192.168.1.1
                              O17 - HKLM\System\CCS\Services\Tcpip\..\{F9D611D2-4A6F-4168-BF28-9583C27D99C2}: DhcpNameServer = 192.168.1.1
                              O17 - HKLM\System\CS1\Services\Tcpip\..\{BBBF4675-2E0B-4BAE-BB19-9FD41889B630}: DhcpNameServer = 192.168.1.1
                              O17 - HKLM\System\CS1\Services\Tcpip\..\{F9D611D2-4A6F-4168-BF28-9583C27D99C2}: DhcpNameServer = 192.168.1.1
                              O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
                              ~ Domain: Scanned in 00mn 00s

                              ---\\ Protocole additionnel (O18)
                              O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
                              O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll
                              ~ Protocole Additionnel: Scanned in 00mn 00s

                              ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
                              ~ SSODL: 1 Legitimates Scanned in 00mn 00s

                              ---\\ Liste des services NT non Microsoft et non désactivés (O23)
                              O23 - Service: Dritek WMI Service (DsiWMIService) . (.Dritek System Inc. - Dritek WMI Service.) - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
                              O23 - Service: HitmanPro Scheduler (HitmanProScheduler) . (.SurfRight B.V. - HitmanPro Scheduler.) - C:\Program Files\HitmanPro\hmpsched.exe
                              O23 - Service: Dritek RF Button Command Service (RfButtonDriverService) . (.Dritek System INC. - RfBtnSvc Application.) - C:\Windows\RfBtnSvc64.exe
                              ~ Services: 13 Legitimates Scanned in 01mn 07s

                              ---\\ Enumération Active Desktop & MHTML Editor (O24)
                              ~ Desktop Component: 1 Legitimates Scanned in 00mn 00s

                              ---\\ BootExecute (O34)
                              ~ BEX: 2 Legitimates Scanned in 00mn 00s

                              ---\\ Tâches planifiées en automatique (O39)
                              O39 - APT:Automatic Planified Task - C:\Windows\Tasks\AutoKMS.job [314]
                              [MD5.A35F3BCC83B932F0F50571F7B12632DF] [APT] [ALU] (...) -- C:\Program Files (x86)\Packard Bell\Live Updater\updater.exe [3331216]
                              [MD5.BD0BA490E0300E859DB99DA3AB024371] [APT] [ALUAgent] (...) -- C:\Program Files (x86)\Packard Bell\Live Updater\liveupdater_agent.exe [39568]
                              [MD5.00000000000000000000000000000000] [APT] [AutoKMS] (...) -- C:\WINDOWS\AutoKMS\AutoKMS.exe (.not file.) [0]
                              [MD5.A05EACA4BAA606947B948B3EE213F8D1] [APT] [Power Management] (.Acer Incorporated.) -- C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [5294736]
                              [MD5.00000000000000000000000000000000] [APT] [{87D2E17E-20EE-44E3-96F7-FA1B1F4B0F7B}] (...) -- C:\PROGRA~3\TARMAI~1\{889DF~1\Setup.exe (.not file.) [0] =>Toolbar.Tarma
                              ~ Scheduled Task: 12 Legitimates Scanned in 00mn 28s

                              ---\\ Composants installés (ActiveSetup Installed Components) (O40)
                              ~ Active Setup: 9 Legitimates Scanned in 00mn 00s

                              ---\\ Pilotes lancés au démarrage (O41)
                              O41 - Driver: (aswFW) . (.AVAST Software - avast! Filtering TDI driver.) - C:\Windows\system32\drivers\aswFW.sys
                              ~ Drivers: 40 Legitimates Scanned in 00mn 00s

                              ---\\ Logiciels installés (O42)
                              O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
                              O42 - Logiciel: Adobe Reader XI (11.0.02) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
                              O42 - Logiciel: EBP Auto-entrepreneur Pratic Open Line 2013 5.0 - (.EBP.) [HKLM][64Bits] -- EBP Auto-entrepreneur Pratic Open Line 2013 5.0
                              O42 - Logiciel: Light Image Resizer 4.4.1.4 - (.ObviousIdea.) [HKLM][64Bits] -- {EBE030DD-D404-4D92-85E9-8C3624820808}_is1
                              O42 - Logiciel: avast! Internet Security v8.0.1483.0 - (.AVAST Software.) [HKLM][64Bits] -- avast
                              O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKLM][64Bits] -- uTorrent
                              ~ Logic: 85 Legitimates Scanned in 00mn 01s

                              ---\\ HKCU & HKLM Software Keys
                              [HKCU\Software\AppDataLow\Software\Supreme Savings]
                              [HKCU\Software\BitTorrent]
                              [HKCU\Software\SweetIM] =>PUP.SweetIM
                              [HKLM\Software\DomaIQ]
                              [HKLM\Software\Wow6432Node\SweetIM] =>PUP.SweetIM
                              ~ Key Software: 181 Legitimates Scanned in 00mn 01s

                              ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
                              O43 - CFD: 30/01/2013 - 17:53:27 - [5,086] ----D C:\Program Files (x86)\Spybot - Search & Destroy
                              O43 - CFD: 05/04/2013 - 12:47:29 - [1,294] ----D C:\Program Files (x86)\Spybot - Search & Destroy 2
                              O43 - CFD: 12/12/2012 - 10:53:19 - [0,924] ----D C:\Program Files (x86)\uTorrent
                              O43 - CFD: 31/01/2013 - 13:03:36 - [15,522] ----D C:\ProgramData\Spybot - Search & Destroy
                              O43 - CFD: 18/01/2013 - 17:25:48 - [304,757] --H-D C:\ProgramData\{43B55ACB-A031-4DC3-AA95-8492F35E13ED}
                              O43 - CFD: 18/01/2013 - 17:23:01 - [10,667] --H-D C:\ProgramData\{DD7CFB04-42B1-4737-ACA3-D31B857C0687}
                              O43 - CFD: 31/10/2012 - 19:58:21 - [0,261] ----D C:\Users\nadege\AppData\Roaming\lm
                              O43 - CFD: 17/12/2012 - 17:24:52 - [0,001] ----D C:\Users\nadege\AppData\Roaming\PDF Pro 10
                              O43 - CFD: 07/04/2013 - 09:54:34 - [2,657] ----D C:\Users\nadege\AppData\Roaming\uTorrent
                              O43 - CFD: 18/01/2013 - 17:36:04 - [0] ----D C:\Users\nadege\AppData\Local\Stimulsoft
                              O43 - CFD: 18/01/2013 - 17:36:17 - [0] ----D C:\Users\nadege\AppData\Local\StimulsoftReportsResources
                              ~ Program Folder: 158 Legitimates Scanned in 00mn 43s

                              ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
                              O44 - LFC:[MD5.5C32CBFDFD2EF7F0A0A08DFE03CD0EFA] - 05/04/2013 - 14:47:40 ---A- . (...) -- C:\AdwCleaner[S1].txt [2761]
                              O44 - LFC:[MD5.1582578921B738B981596C0AFF2A109B] - 05/04/2013 - 08:55:34 ---A- . (...) -- C:\UsbFix [Clean 2] NADÈGE.txt [8028]
                              O44 - LFC:[MD5.38E0F1C28DC1280D82A0A50EB68E0F31] - 05/04/2013 - 08:48:08 ----- . (...) -- C:\UsbFix [Scan 1] NADÈGE.txt [6667]
                              ~ Files: 123 Legitimates Scanned in 00mn 33s

                              ---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
                              O45 - LFCP:[MD5.296A08CB3CAA48C8B06ED42EA3F1C145] - 01/04/2013 - 08:22:32 ---A- - C:\Windows\Prefetch\HPPSDR.EXE-58D6C017.pf
                              O45 - LFCP:[MD5.1A85C6BF2157C34EEB7CE66DC49E7A0C] - 01/04/2013 - 08:25:03 ---A- - C:\Windows\Prefetch\HPDIAGNOSTICCOREUI.EXE-E552A55F.pf
                              O45 - LFCP:[MD5.EDD24B2C88D1A9070596C423D641CD63] - 01/04/2013 - 16:30:17 ---A- - C:\Windows\Prefetch\NETPLWIZ.EXE-AFF278BB.pf
                              O45 - LFCP:[MD5.784386D4277B0000B8F9F5B2CBB715B1] - 01/04/2013 - 16:31:42 ---A- - C:\Windows\Prefetch\SYSTEMSETTINGS.EXE-D8CC3B5E.pf
                              O45 - LFCP:[MD5.D1F083C7BA5AD288FF1AD21E7A1C647F] - 02/04/2013 - 15:03:12 ---A- - C:\Windows\Prefetch\TCT-NEIGE.EXE-6B9FD2B2.pf
                              O45 - LFCP:[MD5.F6A10257763C2C030A4278D4CD091717] - 03/04/2013 - 12:48:49 ---A- - C:\Windows\Prefetch\OPTPROREMINDER.EXE-EBA8C8D1.pf
                              O45 - LFCP:[MD5.1036ABC652EEE04CB6F09E7FDF6C4227] - 05/04/2013 - 05:55:53 ---A- - C:\Windows\Prefetch\RESIZE.EXE-5E7A1952.pf
                              O45 - LFCP:[MD5.3150301929F443DB3495CF28F7AFD4DF] - 05/04/2013 - 05:58:44 ---A- - C:\Windows\Prefetch\ONENOTE.EXE-7A7C97BB.pf
                              O45 - LFCP:[MD5.D5FF4D47FE7A52550600A0040922D332] - 05/04/2013 - 05:59:44 ---A- - C:\Windows\Prefetch\MSHTA.EXE-ED0DFDDF.pf
                              O45 - LFCP:[MD5.7AEF3A95DB8DFC388C93ECFBCA28EF82] - 05/04/2013 - 08:14:42 ---A- - C:\Windows\Prefetch\SPYBOTSD2(3).TMP-247BC9BF.pf
                              O45 - LFCP:[MD5.869208AB6A3399F15AED2745B1EBF0F5] - 05/04/2013 - 08:14:42 ---A- - C:\Windows\Prefetch\SPYBOTSD2(3).TMP-F66703A0.pf
                              O45 - LFCP:[MD5.A2776ABEFA0A270724C4F1E33C01F84E] - 05/04/2013 - 08:21:23 ---A- - C:\Windows\Prefetch\SPYBOT_SEARCH_DESTROY_2_27_03-E4458552.pf
                              O45 - LFCP:[MD5.71CD7DB7A8EC7F445E7D9D426D5D658C] - 05/04/2013 - 08:21:27 ---A- - C:\Windows\Prefetch\SPYBOT_SEARCH_DESTROY_2_27_03-FD61A110.pf
                              O45 - LFCP:[MD5.92E4CA4CD4D34323A643CB964DB56B2D] - 05/04/2013 - 08:48:44 ---A- - C:\Windows\Prefetch\GIMP-2.8.EXE-C510E11E.pf
                              O45 - LFCP:[MD5.138F720FCA9954F1812AEC708265B669] - 05/04/2013 - 08:59:34 ---A- - C:\Windows\Prefetch\GO.EXE-34414F70.pf
                              O45 - LFCP:[MD5.11BC958D69F528F4AF525C7BA29B06D3] - 05/04/2013 - 09:19:58 ---A- - C:\Windows\Prefetch\UNINS000.EXE-6B3C5C94.pf
                              O45 - LFCP:[MD5.9BA09BE41F779698646A412FE4BD1FA7] - 05/04/2013 - 10:44:30 ---A- - C:\Windows\Prefetch\dynreservedpri.db
                              O45 - LFCP:[MD5.B8A70977BF3BB2C12DBCF303832FC415] - 05/04/2013 - 11:45:40 ---A- - C:\Windows\Prefetch\UNINS000.EXE-7905E4F2.pf
                              O45 - LFCP:[MD5.4511DFBD0A33618CCA318CFE2AA01BA7] - 05/04/2013 - 12:21:39 ---A- - C:\Windows\Prefetch\IDCARD.EXE-3E87601F.pf
                              O45 - LFCP:[MD5.CBD798631E89F9AF72071FCEAB250714] - 05/04/2013 - 15:13:22 ---A- - C:\Windows\Prefetch\UNINS000.EXE-B2F9B9B1.pf
                              O45 - LFCP:[MD5.BDAFD2DFCC4EEBB6BDBF8BB3E38A1D12] - 05/04/2013 - 15:13:25 ---A- - C:\Windows\Prefetch\_IU14D2N.TMP-53C840C8.pf
                              O45 - LFCP:[MD5.D7AB4885CD96ED753531713307A081DF] - 05/04/2013 - 19:43:02 ---A- - C:\Windows\Prefetch\TWITTER-WIN8.EXE-E9757E8E.pf
                              O45 - LFCP:[MD5.F5C293ECF1A907BD72FA248FC187F269] - 06/04/2013 - 06:57:05 ---A- - C:\Windows\Prefetch\BYTECODEGENERATOR.EXE-353D57C0.pf
                              O45 - LFCP:[MD5.C5679B1E8C49AA0D87B094E08D5EE5E0] - 06/04/2013 - 06:58:35 ---A- - C:\Windows\Prefetch\EBP.INVOICING.APPLICATION.EXE-8384E454.pf
                              O45 - LFCP:[MD5.DA9F440906DC221EA470FD99115F514B] - 06/04/2013 - 07:04:08 ---A- - C:\Windows\Prefetch\EBP.WEBCLIENT.EXE-2AFB847A.pf
                              O45 - LFCP:[MD5.0845B0B3D1C1C2C3EBF6B191C9C96659] - 06/04/2013 - 20:23:30 ---A- - C:\Windows\Prefetch\LIVECOMM.EXE-C9701AA1.pf
                              O45 - LFCP:[MD5.6F72A9D6BCC11CA15940A1466D570A78] - 07/04/2013 - 07:36:32 ---A- - C:\Windows\Prefetch\UTORRENT.EXE-2E583999.pf
                              O45 - LFCP:[MD5.7A2E581C5E694059F67E09E16259BF34] - 07/04/2013 - 11:55:32 ---A- - C:\Windows\Prefetch\RFBTNSVC64.EXE-4CA3F3BE.pf
                              O45 - LFCP:[MD5.30A541D2166384AA4B07D30CB9781625] - 07/04/2013 - 20:32:58 ---A- - C:\Windows\Prefetch\EPOWERBUTTON.EXE-80D380BE.pf
                              O45 - LFCP:[MD5.078C34DC74A6F865B9783C36D56A749A] - 08/04/2013 - 14:30:34 ---A- - C:\Windows\Prefetch\RICONMAN.EXE-D63AD6B8.pf
                              O45 - LFCP:[MD5.38A886096328E3589FD77EBDAE8CE8DD] - 08/04/2013 - 14:33:12 ---A- - C:\Windows\Prefetch\HITMANPRO.EXE-EC5CE514.pf
                              O45 - LFCP:[MD5.D268CD6805610DE1163C5BDB48280F30] - 08/04/2013 - 14:33:12 ---A- - C:\Windows\Prefetch\LMUTILPS32.EXE-9827F12C.pf
                              O45 - LFCP:[MD5.A396C208C511D945B72F4EBA07BD0CDB] - 08/04/2013 - 14:35:54 ---A- - C:\Windows\Prefetch\WSHOST.EXE-05F0A3AF.pf
                              O45 - LFCP:[MD5.9CDF99978BAE79B3FA97BD75ED0E4596] - 08/04/2013 - 15:15:01 ---A- - C:\Windows\Prefetch\DKRUN32.EXE-8583E6AC.pf
                              O45 - LFCP:[MD5.9AD7ABA66083C68E97F16093F375FDF7] - 08/04/2013 - 15:15:10 ---A- - C:\Windows\Prefetch\LMANAGER.EXE-49876884.pf
                              O45 - LFCP:[MD5.090D8A3FCDA08B4B703F760B9A365AEF] - 08/04/2013 - 15:22:36 ---A- - C:\Windows\Prefetch\MMDX64FX.EXE-4C9473D7.pf
                              O45 - LFCP:[MD5.0AFBAD3FD466381E2B113B5686A2CFE4] - 08/04/2013 - 15:22:38 ---A- - C:\Windows\Prefetch\HD-LOGROTATOR.EXE-AAB4E25E.pf
                              O45 - LFCP:[MD5.96CC29B608CAC71C8E0BFAB036331F89] - 08/04/2013 - 15:26:05 ---A- - C:\Windows\Prefetch\EPOWERSVC.EXE-76E124E6.pf
                              O45 - LFCP:[MD5.CE94E3DC6C24DFE2FBE98C13D20BBA12] - 08/04/2013 - 15:26:41 ---A- - C:\Windows\Prefetch\SETAPM.EXE-9D9BA1F2.pf
                              O45 - LFCP:[MD5.CC11E1DA67C3BD4F04B11DAE64215121] - 09/03/2013 - 09:16:08 ---A- - C:\Windows\Prefetch\GIMP-2.8.4-SETUP.TMP-15731882.pf
                              O45 - LFCP:[MD5.F0DC5B5925D6B5CD702FCD7B0D262E21] - 09/03/2013 - 09:16:10 ---A- - C:\Windows\Prefetch\GIMP-2.8.4-SETUP.TMP-1014D41C.pf
                              O45 - LFCP:[MD5.A498561B80D36E3ECC382FAA345BA3B6] - 09/03/2013 - 09:21:21 ---A- - C:\Windows\Prefetch\GIMP-2.8.2-SETUP-1.TMP-CF66C8F2.pf
                              O45 - LFCP:[MD5.61B4CE3BD12E04F07A560E6D392E0C4C] - 27/03/2013 - 09:02:08 ---A- - C:\Windows\Prefetch\LIGHT_IMAGE_RESIZER4_SETUP_SO-73180A1D.pf
                              O45 - LFCP:[MD5.4876687896C4F4BD111F9E8478F05812] - 27/03/2013 - 09:02:10 ---A- - C:\Windows\Prefetch\LIGHT_IMAGE_RESIZER4_SETUP_SO-3AE36651.pf
                              O45 - LFCP:[MD5.7198C63DC3AD101841F63B131422B0BA] - 31/03/2013 - 12:49:19 ---A- - C:\Windows\Prefetch\PICKERHOST.EXE-03F09186.pf
                              ~ Prefetcher: 222 Legitimates Scanned in 00mn 04s

                              ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
                              O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook [64Bits] - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
                              ~ ShellExecuteHooks: Scanned in 00mn 00s

                              ---\\ Déni du service (Local Security Authority) (O48)
                              ~ LSA: 9 Legitimates Scanned in 00mn 00s

                              ---\\ Contrôle du Safe Boot (CSB) (O49)
                              O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\hitmanpro37.sys . (...) -- C:\Windows\System32\Drivers\hitmanpro37.sys (.not file.)
                              O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\hitmanpro37.sys . (...) -- C:\Windows\System32\Drivers\hitmanpro37.sys (.not file.)
                              ~ CSB: 19 Legitimates Scanned in 00mn 00s

                              ---\\ Trojan Driver Search Data (HKLM) (O52)
                              ~ TDSD: 2 Legitimates Scanned in 00mn 00s

                              ---\\ Microsoft Control Security Providers (O54)
                              ~ MSCP: 2 Legitimates Scanned in 00mn 00s

                              ---\\ Microsoft Windows Policies System (O55)
                              O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0
                              O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
                              O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
                              O55 - MWPS:[HKLM\...\Policies\System] - "EnableLinkedConnections"=1
                              ~ MWPS: 18 Legitimates Scanned in 00mn 00s

                              ---\\ Microsoft Windows Policies Explorer (O56)
                              O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveAutoRun"=3
                              O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
                              O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
                              O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveAutoRun"=3
                              ~ MWPE Keys: 7 Legitimates Scanned in 00mn 00s

                              ---\\ Liste des Drivers Système (O58)
                              O58 - SDL:[MD5.4F18D4C7EA14F11A7211F60D553C03DB] - 26/07/2012 - 06:00:49 ---A- . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\Drivers\3ware.sys [106736]
                              ~ Drivers: Scanned in 00mn 00s

                              ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
                              O61 - LFC: 05/04/2013 - 05:28:19 ---A- C:\Users\nadege\AppData\Roaming\Thunderbird\Crash Reports\InstallTime20130328110546 [10]
                              O61 - LFC: 05/04/2013 - 05:28:26 ---A- C:\Users\nadege\AppData\Local\Thunderbird\Mozilla Thunderbird\active-update.xml [57]
                              O61 - LFC: 05/04/2013 - 05:28:27 ---A- C:\Users\nadege\AppData\Local\Thunderbird\Mozilla Thunderbird\updates.xml [4577]
                              O61 - LFC: 05/04/2013 - 05:47:17 -SHA- C:\Users\nadege\Documents\aviva 17.01.13\Thumbs.db [47104]
                              O61 - LFC: 05/04/2013 - 05:48:12 -SHA- C:\Users\nadege\Documents\SITE INTERNET\GOOGLE DOCS\etude de marche aout 2012\Thumbs.db [89600]
                              O61 - LFC: 05/04/2013 - 05:58:43 ---A- C:\Users\nadege\AppData\Roaming\Microsoft\OneNote\14.0\Preferences.dat [196488]
                              O61 - LFC: 05/04/2013 - 08:20:35 ---A- C:\Users\nadege\Downloads\spybot_search_destroy_2_27_03_2013_fr_10965.exe [55454464]
                              O61 - LFC: 05/04/2013 - 08:42:21 ---A- C:\Users\nadege\Downloads\UsbFix.exe [1024813]
                              O61 - LFC: 05/04/2013 - 08:48:35 ---A- C:\Users\nadege\.gimp-2.8\themerc [355]
                              O61 - LFC: 05/04/2013 - 08:48:46 ---A- C:\Users\nadege\.gimp-2.8\pluginrc [277770]
                              O61 - LFC: 05/04/2013 - 08:51:13 ---A- C:\Users\nadege\.gimp-2.8\colorrc [739]
                              O61 - LFC: 05/04/2013 - 08:51:13 ---A- C:\Users\nadege\.gimp-2.8\controllerrc [1863]
                              O61 - LFC: 05/04/2013 - 08:51:13 ---A- C:\Users\nadege\.gimp-2.8\dockrc [1124]
                              O61 - LFC: 05/04/2013 - 08:51:13 ---A- C:\Users\nadege\.gimp-2.8\menurc [72513]
                              O61 - LFC: 05/04/2013 - 08:51:13 ---A- C:\Users\nadege\.gimp-2.8\sessionrc [821]
                              O61 - LFC: 05/04/2013 - 08:51:14 ---A- C:\Users\nadege\.gimp-2.8\toolrc [3996]
                              O61 - LFC: 05/04/2013 - 08:51:15 ---A- C:\Users\nadege\.gimp-2.8\parasiterc [102]
                              O61 - LFC: 05/04/2013 - 08:51:15 ---A- C:\Users\nadege\.gimp-2.8\tags.xml [34247]
                              O61 - LFC: 05/04/2013 - 08:51:15 ---A- C:\Users\nadege\.gimp-2.8\templaterc [4817]
                              O61 - LFC: 05/04/2013 - 08:51:15 ---A- C:\Users\nadege\.gimp-2.8\unitrc [1178]
                              O61 - LFC: 05/04/2013 - 14:46:44 ---A- C:\Users\nadege\Downloads\adwcleaner.exe [613083]
                              O61 - LFC: 05/04/2013 - 15:14:20 ---A- C:\Users\nadege\Downloads\mbam-setup-1.70.0.1100.exe [10156344]
                              O61 - LFC: 06/04/2013 - 06:58:46 ---A- C:\Users\nadege\AppData\Local\EBP\Invoicing5.0FR03\Info.xml [231]
                              O61 - LFC: 07/04/2013 - 07:36:27 ---A- C:\Users\nadege\AppData\Roaming\uTorrent\dlimagecache\1D67A7A87EE6B20D306B59AC55A6F73A9A1D3540 [37532]
                              O61 - LFC: 07/04/2013 - 08:06:22 ---A- C:\Users\nadege\AppData\Roaming\uTorrent\settings.dat.old [103300]
                              O61 - LFC: 07/04/2013 - 08:36:22 ---A- C:\Users\nadege\AppData\Roaming\uTorrent\settings.dat [103309]
                              O61 - LFC: 07/04/2013 - 08:47:54 ---A- C:\Users\nadege\AppData\Roaming\uTorrent\dht_feed.dat.old [2]
                              O61 - LFC: 07/04/2013 - 08:52:33 ---A- C:\Users\nadege\AppData\Roaming\uTorrent\resume.dat.old [138920]
                              O61 - LFC: 07/04/2013 - 08:52:59 ---A- C:\Users\nadege\AppData\Roaming\uTorrent\dht_feed.dat [2]
                              O61 - LFC: 07/04/2013 - 08:54:34 ---A- C:\Users\nadege\AppData\Roaming\uTorrent\resume.dat [137984]
                              ~ 9 Fichiers temporaires (Temporary files)
                              ~ Files: 1208 Legitimates Scanned in 02mn 49s

                              ---\\ Liste des outils de nettoyage (O63)
                              O63 - Logiciel: UsbFix By El Desaparecido - (.El Desaparecido - SosVirus.org.) [HKLM] -- Usbfix
                              O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
                              O63 - Logiciel: HiJackThis - (.Trend Micro.) [HKLM] -- {45A66726-69BC-466B-A7A4-12FCBA4883D7}
                              ~ ADS: Scanned in 00mn 00s

                              ---\\ File Associations Shell Spawning (O67)
                              O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
                              O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
                              O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
                              O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
                              O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d'événements.) -- C:\Windows\System32\eventvwr.exe
                              O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
                              O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
                              O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
                              O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
                              O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
                              O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
                              O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
                              O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*
                              O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %*
                              O67 - Shell Spawning: <.evt> <evtfile>[HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d'événements.) -- C:\Windows\System32\eventvwr.exe
                              O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
                              O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
                              O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
                              O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
                              ~ Keys: Scanned in 00mn 00s

                              ---\\ Start Menu Internet (O68)
                              O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
                              O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
                              ~ Keys: Scanned in 00mn 00s

                              ---\\ Search Browser Infection (O69)
                              O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - http://search.live.com
                              O69 - SBI: SearchScopes [HKCU] {CBDC6EAF-A75F-42B2-AF86-7BCFD5227B58} - (Yahoo! Search) - http://fr.search.yahoo.com
                              ~ Keys: Scanned in 00mn 00s

                              ---\\ Recherche des services démarrés par Svchost (O83)
                              ~ Services: 34 Legitimates Scanned in 00mn 00s

                              ---\\ Firewall Active Exception List (FirewallRules) (O87)
                              O87 - FAEL: "{10CD693B-E6B9-4432-A5A1-D83B48189770}" | In - None - P6 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe
                              O87 - FAEL: "{F960B88E-3FBC-4039-B7EC-A1ED7A59AAB2}" | In - None - P17 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe
                              O87 - FAEL: "TCP Query User{FF114904-12AA-4B28-8A17-E17245E6C8A1}C:\windows\kmsemulator.exe" | In - Public - P6 - TRUE | .(...) -- C:\windows\kmsemulator.exe
                              O87 - FAEL: "UDP Query User{BD56F3FE-59FC-46FD-B837-992806E07759}C:\windows\kmsemulator.exe" | In - Public - P17 - TRUE | .(...) -- C:\windows\kmsemulator.exe
                              ~ Firewall: 223 Legitimates Scanned in 00mn 03s

                              ---\\ Scan Additionnel (O88)
                              Database Version : v2.11417 - (04/04/2013)
                              Clés trouvées (Keys found) : 85
                              Valeurs trouvées (Values found) : 0
                              Dossiers trouvés (Folders found) : 0
                              Fichiers trouvés (Files found) : 1

                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635] =>PUP.SweetIM
                              [HKLM\Software\Wow6432Node\Google\Chrome\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib] =>Toolbar.Conduit
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM
                              [HKCU\Software\SweetIM] =>PUP.SweetIM
                              [HKLM\Software\Wow6432Node\SweetIM] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9EE58E3C298524145B73CBBED3CAC4D3] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B2FD9C0A5B9838449838816A28001F4B] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8724E58E6C7D00C48A0D4F3345EB2C26] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB676B0E1B9EFA049B9F7DDDA9645734] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B31BBB0B825EDEF45AB0FE7099C68C81] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B471D8D7319336B4CA89374ED0D7B806] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BC30043663AA2CA4DA1DAA9CA5FDCC75] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FDC83385E6C239F4C876A77A37DF581D] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420] =>PUP.SweetIM
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1CAE30F47D14B41B5FC8FA53658044] =>PUP.Dealio
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\30C16B15B255BD349A1157B8A83E2AF9] =>PUP.Dealio
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636] =>PUP.SweetIM^
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094] =>PUP.SweetIM^
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12BF94BD06C95F343A77631402B9556A] =>PUP.SweetIM^
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2124D8A8CF720FD44866190AF560228E] =>PUP.SweetIM^
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27A325ACED8CA4743A30127638591ADB] =>PUP.SweetIM^
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536] =>PUP.SweetIM^
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\350D17402BD84234EAF7D32F08172D7C] =>PUP.SweetIM^
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EE8C5F419057E1478A654868CEE60B5] =>PUP.SweetIM^
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4735D908D66E1BA46B6C2D7185A12B2B] =>PUP.SweetIM^
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4] =>PUP.SweetIM^
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76D8378E2DDAED3428720A631F6E3BF0] =>PUP.SweetIM^
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2] =>PUP.SweetIM^
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C] =>PUP.SweetIM^
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A001B259DB7D694E818BE29B973992C] =>PUP.SweetIM^
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789] =>PUP.SweetIM^
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE2EC163C6A68A48921573E0E7E199D] =>PUP.SweetIM^
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399] =>PUP.SweetIM^
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C06C6662FA5B04646829E4A460857770] =>PUP.SweetIM^
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156] =>PUP.SweetIM^
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEEB3E14ABE8270419B0FD762E18F7C6] =>PUP.SweetIM^
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1B5E9A3BDB51349BF96E842C062D98] =>PUP.SweetIM^
                              [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FECBC2BC14DA6CD459BD59A041709836] =>PUP.SweetIM^
                              C:\Windows\KMSEmulator.exe =>Hijacker.Windows
                              ~ Additionnel: Scanned in 00mn 54s

                              ---\\ Product Upgrade Codes (O90)
                              O90 - PUC: "7672DADFAC1183D4C94C8477C03ECCB7" . (.Notification Center.) -- C:\Windows\Installer\{FDAD2767-11CA-4D38-9CC4-48770CE3CC7B}\BlueStacksIcon
                              ~ Update Products: 94 Legitimates Scanned in 00mn 00s

                              ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
                              SR - | Auto 18/12/2012 65192 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
                              SS - | Demand 12/03/2013 253656 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
                              SR - | Auto 07/11/2012 239616 | (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
                              SR - | Auto 07/03/2013 45248 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
                              SR - | Auto 07/03/2013 136912 | (avast! Firewall) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\afwServ.exe
                              SS - | Auto 05/12/2012 393080 | (BstHdAndroidSvc) . (.BlueStack Systems, Inc..) - C:\Program Files (x86)\BlueStacks\HD-Service.exe
                              SR - | Auto 05/12/2012 384888 | (BstHdLogRotatorSvc) . (.BlueStack Systems, Inc..) - C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
                              SS - | Demand 31/07/2012 466064 | (DeviceFastLaneService) . (.Acer Incorporated.) - C:\Program Files\Packard Bell\Packard Bell Device Fast-lane\DeviceFastLaneSvc.exe
                              SR - | Auto 21/08/2012 348784 | (DsiWMIService) . (.Dritek System Inc..) - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
                              SR - | Demand 31/07/2012 659600 | (ePowerSvc) . (.Acer Incorporated.) - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
                              SR - | Auto 29/03/2013 109352 | (HitmanProScheduler) . (.SurfRight B.V..) - C:\Program Files\HitmanPro\hmpsched.exe
                              SR - | Auto 13/07/2012 2451456 | (IconMan_R) . (.Realsil Microelectronics Inc..) - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
                              SR - | Auto 14/12/2012 398184 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
                              SR - | Auto 14/12/2012 682344 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
                              SS - | Demand 11/03/2013 115608 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
                              SR - | Auto 26/11/2011 687400 | (NAUpdate) . (.Nero AG.) - C:\Program Files (x86)\Nero\Update\NASvc.exe
                              SR - | Auto 04/09/2012 93296 | (RfButtonDriverService) . (.Dritek System INC..) - C:\Windows\RfBtnSvc64.exe
                              SR - | Auto 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
                              SR - | Auto 20/09/2012 29696 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
                              ~ Services: Scanned in 00mn 02s

                              ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
                              Written by ad13, http://ad13.geekstog
                              Run by nadege at 08/04/2013 16:35:59

                              ********* Dump file Name *********
                              C:\PhysicalDisk0_MBR.bin
                              ~ MBR: Scanned in 00mn 04s

                              End of the scan (673 lines in 11mn 19s)(0)
                              1. Smart91 Contributeur sécurité
                                Refais un scan ZHPDiag et poste le rapport via pjjoint

                                Smart
                                1. nadege1976 Auteur
                                  Ben finalement cela a été bien plus rapide que c e que je pensai ;)

                                  Le rapport, le voici ;)

                                  Malwarebytes Anti-Malware 1.70.0.1100
                                  www.malwarebytes.org

                                  Version de la base de données: v2013.04.05.06

                                  Windows 8 x64 NTFS
                                  Internet Explorer 10.0.9200.16519
                                  nadege :: NADÈGE [administrateur]

                                  05/04/2013 16:22:09
                                  mbam-log-2013-04-05 (16-22-09).txt

                                  Type d'examen: Examen complet (C:\|)
                                  Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
                                  Options d'examen désactivées: P2P
                                  Elément(s) analysé(s): 377049
                                  Temps écoulé: 1 heure(s), 15 minute(s), 43 seconde(s)

                                  Processus mémoire détecté(s): 0
                                  (Aucun élément nuisible détecté)

                                  Module(s) mémoire détecté(s): 0
                                  (Aucun élément nuisible détecté)

                                  Clé(s) du Registre détectée(s): 0
                                  (Aucun élément nuisible détecté)

                                  Valeur(s) du Registre détectée(s): 0
                                  (Aucun élément nuisible détecté)

                                  Elément(s) de données du Registre détecté(s): 0
                                  (Aucun élément nuisible détecté)

                                  Dossier(s) détecté(s): 0
                                  (Aucun élément nuisible détecté)

                                  Fichier(s) détecté(s): 0
                                  (Aucun élément nuisible détecté)

                                  (fin)
                                  1. Smart91 Contributeur sécurité
                                    OK. A demain ou peut-être à tout à l'heure, cela dépend du scan MBAM :-)

                                    Smart
                                    1. nadege1976 Auteur
                                      Ok super !!!!!! merci beaucoup ;)

                                      Bon si j'ai bien compris, je posterai pas un nouveau message au moins avant demain matin lol.

                                      Je vais suivre pas à pas tes recommandations puis je te tiendrais au courant, et je posterai le rapport.

                                      Merci encore une fois pour cette aide

                                      cordialement

                                      Nadège
                                      • 1
                                      • 2

                                      Discussions similaires

                                      503 Service Unavailable
                                      TIT0M87

                                      1 réponse
                                      Mon navigateur ouvre des pages internet tout seul
                                      Adelyss

                                      3 réponses
                                      Écran noir Cannot Display This Video Mode
                                      Julien

                                      11 réponses
                                      Réponse automatique mailbox unavailable
                                      boop

                                      17 réponses
                                      defaire error 503 service unavailable
                                      michou

                                      1 réponse