Pc qui rame!

lasacoche888 -

Bonjour,
depuis peu mon PC rame à mort! de plus ma licence Avast a expiré et on me demande de payer!
Impossible de mettre à jour Avast, donc je décide de supprimer celui-ci, afin de le re-télécharger via le forum... sauf que le téléchargement rame! (temps restant 2 H 17 mns!).
Bref, je recommence et puis... j'abandonne!
Voilà grosse galére! est-ce que quelqu'un pourrait me venir en aide?
Merci d'avance.
Cordialement.

config>Windows XP / Firefox 20.0</config>

Afficher la suite

A voir également

Pc qui rame!
Downloader for pc - Télécharger - Téléchargement & Transfert
Nettoyer un pc qui rame - Guide
Reinitialiser pc - Guide
Telecharger clavier arab pc - Télécharger - Divers Web & Internet
Temperature pc - Guide

12 réponses

Réponse 1 / 12
Malekal_morte- Modérateur
T"as 1Go

bref y a rien d'anormal sur le PC et pas trop de programmes qui tournent.
Pas de raison particulière à ce qu'il rame.

0

Réagir
Réponse 2 / 12
lasacoche888
ok mais celà ne resoudra pas le probléme! d'ailleurs, j'essaie de le télécharcher, temps restant.... 59 mns; 10 mns aprés; 62mns! (pack 3)!
ben voilà, je suis au pied et à la lettre... mais bon!

0

Réagir
Réponse 3 / 12
lasacoche888
??????!!!!

0

Réagir
Réponse 4 / 12
Malekal_morte- Modérateur
Y a rien d'extraordinaire à virer sur le PC.
Y a combien en RAM?

Faudrait installer le service pack 3.
Windows pas à jour = vulnérables = porte d'entrée à virus.
=> https://www.clubic.com/telecharger-fiche242026-windows-xp-service-pack-3.html

0

Réagir
Vous n’avez pas trouvé la réponse que vous recherchez ?

La communauté CCM répond en moyenne en moins de 2h.

Posez votre question
Réponse 5 / 12
lasacoche888 Auteur
voilà, je viens de te poster le rapport hijackthis... l'as-tu reçu?

0

Réagir
1. Malekal_morte- Modérateur
  
  - Donne le lien pjjoint ici.
  
  0
  
  Réagir
2. lasacoche888 Auteur
  
  Logfile of Trend Micro HijackThis v2.0.2
  Scan saved at 17:39:27, on 20/04/2013
  Platform: Windows XP SP2 (WinNT 5.01.2600)
  MSIE: Internet Explorer v8.00 (8.00.6001.18702)
  Boot mode: Normal
  
  Running processes:
  C:\WINDOWS\System32\smss.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\services.exe
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\System32\svchost.exe
  C:\WINDOWS\system32\svchost.exe
  C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  C:\WINDOWS\system32\spoolsv.exe
  C:\WINDOWS\Explorer.EXE
  C:\Program Files\AVAST Software\Avast\avastUI.exe
  C:\WINDOWS\system32\ctfmon.exe
  C:\Program Files\Java\jre7\bin\jqs.exe
  C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
  C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
  C:\WINDOWS\system32\nvsvc32.exe
  C:\WINDOWS\system32\svchost.exe
  C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
  C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
  C:\Program Files\Mozilla Firefox\firefox.exe
  C:\Program Files\Mozilla Firefox\plugin-container.exe
  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
  
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
  O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
  O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
  O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
  O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
  O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
  O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
  O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
  O4 - HKUS\S-1-5-21-1454471165-515967899-682003330-1005\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'UpdatusUser')
  O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
  O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
  O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
  O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} ("Ma-Config.com control) - http://www.ma-config.com/plugins/MaConfig_6_0_1_1.cab
  O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
  O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
  O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
  O23 - Service: Service Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
  O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
  O23 - Service: LVSrvLauncher - Labtec Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
  O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
  O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
  O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
  O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
  O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
  O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
  O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
  O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
  
  0
  
  Réagir
3. lasacoche888
  
  salut melekal... ben je pense avoir posté le lien...! en fait j'y comprend pas grand chose comme tu peux le constaster!
  
  0
  
  Réagir
Réponse 6 / 12
Malekal_morte- Modérateur
- Télécharge https://sourceforge.net/projects/hjt/ ton bureau.
- Pour lancer HijackThis :
* Sur Vista/Seven faire un clic droit puis executer en tant qu'administrater pour le lancer
* Sur XP un simple double-clic suffit
- Génère un rapport en suivant ces indications :
- Exécute le et clique sur Do a scan and save log file.
- Le rapport s'ouvre sur le Bloc-Note
- Enregistre le sur ton bureau
- Envoie le sur http://pjjoint.malekal.com
- Donne le lien pjjoint ici.

0

Réagir
Réponse 7 / 12
lasacoche888 Auteur
========== OTL ==========
Folder C:\Documents and Settings\PC\Application Data\Mozilla\Firefox\Profiles\l5pnr5on.default\extensions\ not found.
Folder C:\Documents and Settings\PC\Application Data\Mozilla\Firefox\Profiles\l5pnr5on.default\extensions\ffxtlbr@funmoods(2).com\ not found.
Error: No service named BpSvc was found to stop!
Service\Driver key BpSvc not found.
File C:\Program Files\BrowserProtect\BpSvc.exe not found.
========== FILES ==========
File\Folder C:\Program Files\BrowserProtect not found.

OTL by OldTimer - Version 3.2.69.0 log created on 04192013_172615

0

Réagir
1. lasacoche888 Auteur
  
  salut melekal, je t'ai fait parvenir le rapport OTL et dans la foulée j'ai activé ma licence AVAST.
  
  0
  
  Réagir
2. Malekal_morte- Modérateur
  
  donc Avast! refonctionne ?
  
  0
  
  Réagir
3. lasacoche888 Auteur
  
  oui mais mon PC rame tjour!
  
  0
  
  Réagir
Réponse 8 / 12
Malekal_morte- Modérateur
Relance OTL.
o sous Persfonnalisation (Custom Scan), copie_colle le contenu du cadre ci dessous (bien prendre :OTL en début).
Clic Correction (Fix), un rapport apparraitra, copie/colle le contenu ici:

:OTL
[2013/04/03 17:33:01 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\PC\Application Data\Mozilla\Firefox\Profiles\l5pnr5on.default\extensions
[2012/09/03 16:31:20 | 000,000,000 | ---D | M] (Funmoods.com) -- C:\Documents and Settings\PC\Application Data\Mozilla\Firefox\Profiles\l5pnr5on.default\extensions\ffxtlbr@funmoods(2).com
SRV - [2011/11/11 17:41:02 | 001,867,776 | ---- | M] (Web Eight LLC.) [Auto | Running] -- C:\Program Files\BrowserProtect\BpSvc.exe -- (BpSvc)
:files
C:\Program Files\BrowserProtect

* redemarre le pc sous windows et poste le rapport ici

~~

Je pense que tu sois infecté.

Fais toi renvoyer la licence Avast! : http://www.avast.com/fr-fr/resend-license-free-antivirus.php
et remets là dans l'antivirus : https://www.malekal.com/tutoriel-antivirus-avast/

Like the angel you are, you laugh creating a lightness in my chest,
Your eyes they penetrate me,
(Your answer's always 'maybe')
That's when I got up and left

0

Réagir
Réponse 9 / 12
lasacoche888 Auteur
re,
j'ai poté les rapport OTL sur ton lien, je ne sais pas si bien fait et dis-mio si il manque quelque chose!
Cordialement.

0

Réagir
1. Malekal_morte- Modérateur
  
  faut donner le lien ici.
  
  0
  
  Réagir
2. lasacoche888 Auteur
  
  bonjour malekal, voici le rapport OTL;OTL logfile created on: 19/04/2013 16:35:50 - Run 3
  OTL by OldTimer - Version 3.2.69.0 Folder = H:\Téléchargements
  Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
  Internet Explorer (Version = 8.0.6001.18702)
  Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
  
  1023,48 Mb Total Physical Memory | 446,82 Mb Available Physical Memory | 43,66% Memory free
  2,40 Gb Paging File | 1,90 Gb Available in Paging File | 79,03% Paging File free
  Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
  
  %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
  Drive C: | 29,99 Gb Total Space | 0,42 Gb Free Space | 1,41% Space Free | Partition Type: NTFS
  Drive H: | 111,24 Gb Total Space | 33,54 Gb Free Space | 30,15% Space Free | Partition Type: NTFS
  
  Computer Name: PC-D7A37F72866A | User Name: PC | Logged in as Administrator.
  Boot Mode: Normal | Scan Mode: All users | Quick Scan
  Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
  
  [color=#E56717]========== Processes (SafeList) ==========[/color]
  
  PRC - [2013/04/19 16:33:50 | 000,602,112 | ---- | M] (OldTimer Tools) -- H:\Téléchargements\OTL(2).exe
  PRC - [2013/04/12 21:14:43 | 000,920,472 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
  PRC - [2013/03/08 10:38:36 | 000,170,912 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe
  PRC - [2013/03/07 00:32:44 | 004,767,304 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
  PRC - [2013/03/07 00:32:44 | 000,045,248 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  PRC - [2012/12/14 17:49:28 | 000,682,344 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
  PRC - [2012/12/14 17:49:28 | 000,512,360 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
  PRC - [2012/12/14 17:49:28 | 000,398,184 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
  PRC - [2012/08/30 21:10:00 | 001,258,856 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
  PRC - [2012/07/26 14:16:14 | 000,092,632 | ---- | M] (TomTom) -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
  PRC - [2011/11/11 17:41:02 | 001,867,776 | ---- | M] (Web Eight LLC.) -- C:\Program Files\BrowserProtect\BpSvc.exe
  PRC - [2006/03/02 14:00:00 | 001,036,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
  
  [color=#E56717]========== Modules (No Company Name) ==========[/color]
  
  MOD - [2013/04/19 12:07:14 | 002,083,840 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\13041900\algo.dll
  MOD - [2013/04/12 21:14:42 | 003,133,336 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
  MOD - [2006/03/02 14:00:00 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
  
  [color=#E56717]========== Services (SafeList) ==========[/color]
  
  SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
  SRV - [2013/04/19 14:28:01 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  SRV - [2013/04/12 21:14:42 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  SRV - [2013/03/08 10:38:36 | 000,170,912 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
  SRV - [2013/03/07 00:32:44 | 000,045,248 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
  SRV - [2012/12/14 17:49:28 | 000,682,344 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
  SRV - [2012/12/14 17:49:28 | 000,398,184 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
  SRV - [2012/09/23 12:39:48 | 000,312,264 | ---- | M] (CybelSoft) [On_Demand | Stopped] -- C:\Program Files\ma-config.com\maconfservice.exe -- (maconfservice)
  SRV - [2012/08/30 21:10:00 | 001,258,856 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
  SRV - [2012/07/26 14:16:14 | 000,092,632 | ---- | M] (TomTom) [Auto | Running] -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)
  SRV - [2012/07/13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
  SRV - [2011/11/11 17:41:02 | 001,867,776 | ---- | M] (Web Eight LLC.) [Auto | Running] -- C:\Program Files\BrowserProtect\BpSvc.exe -- (BpSvc)
  SRV - [2007/03/06 17:55:24 | 000,105,248 | ---- | M] (Labtec Inc.) [Auto | Stopped] -- C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe -- (LVSrvLauncher)
  SRV - [2003/07/28 20:28:22 | 000,089,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
  
  [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  
  DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
  DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
  DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
  DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
  DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
  DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
  DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
  DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
  DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
  DRV - [2013/03/07 01:33:24 | 000,164,736 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\aswVmm.sys -- (aswVmm)
  DRV - [2013/03/07 01:33:24 | 000,049,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswRvrt.sys -- (aswRvrt)
  DRV - [2013/03/07 01:33:23 | 000,066,336 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswMonFlt.sys -- (aswMonFlt)
  DRV - [2013/03/07 01:33:22 | 000,021,576 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswKbd.sys -- (aswKbd)
  DRV - [2013/03/07 00:33:24 | 000,765,736 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
  DRV - [2013/03/07 00:33:24 | 000,368,176 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
  DRV - [2013/03/07 00:33:24 | 000,062,376 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
  DRV - [2013/03/07 00:33:24 | 000,049,760 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (AswRdr)
  DRV - [2013/03/07 00:33:22 | 000,029,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
  DRV - [2012/12/14 17:49:28 | 000,021,104 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)
  DRV - [2012/06/19 16:54:20 | 006,141,584 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
  DRV - [2011/07/21 20:55:50 | 000,016,640 | ---- | M] (CybelSoft) [Kernel | On_Demand | Stopped] -- C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys -- (driverhardwarev2)
  DRV - [2009/11/18 07:17:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
  DRV - [2009/11/18 07:16:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
  DRV - [2007/03/06 17:52:46 | 002,261,792 | ---- | M] (Labtec Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LVMVdrv.sys -- (LVMVDrv)
  DRV - [2007/03/06 17:50:30 | 001,669,664 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Lvckap.sys -- (LVcKap)
  DRV - [2005/01/07 17:07:16 | 000,145,920 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Hdaudio.sys -- (HdAudAddService)
  DRV - [2004/08/04 00:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139)
  
  [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  
  [color=#E56717]========== Internet Explorer ==========[/color]
  
  IE - HKLM\..\SearchScopes,DefaultScope =
  
  IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
  IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  
  IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
  IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  
  IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
  
  IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
  
  IE - HKU\S-1-5-21-1454471165-515967899-682003330-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
  IE - HKU\S-1-5-21-1454471165-515967899-682003330-1004\..\SearchScopes,DefaultScope =
  IE - HKU\S-1-5-21-1454471165-515967899-682003330-1004\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&FORM=IE8SRC
  IE - HKU\S-1-5-21-1454471165-515967899-682003330-1004\..\SearchScopes\{5518A9D3-A1F5-4749-9291-F6A4FCCF58AF}: "URL" = http://www.search.ask.com/?l=dis{searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=YYYYYYYYFR&apn_uid=86B0F355-657E-4A36-8E91-8E9E9767EB7A&apn_sauid=6B435C9F-F0D5-4B9A-A286-E79405CDF7BF
  IE - HKU\S-1-5-21-1454471165-515967899-682003330-1004\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&FORM=IE8SRC
  IE - HKU\S-1-5-21-1454471165-515967899-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  
  IE - HKU\S-1-5-21-1454471165-515967899-682003330-1005\..\SearchScopes,DefaultScope =
  
  [color=#E56717]========== FireFox ==========[/color]
  
  FF - prefs.js..browser.startup.homepage: "https://www.orange.fr/portail"
  FF - prefs.js..browser.search.defaultenginename: ""
  FF - prefs.js..browser.search.suggest.enabled: false
  FF - prefs.js..browser.search.useDBForOrder: true
  FF - prefs.js..browser.startup.homepage: "https://www.orange.fr/portail"
  FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:20.0.1
  FF - user.js - File not found
  
  FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_169.dll ()
  FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
  FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
  FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  FF - HKLM\Software\MozillaPlugins\@ma-config.com/HardwareDetection: C:\Program Files\ma-config.com\nphardwaredetection.dll (Cybelsoft)
  FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
  FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
  FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
  FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
  FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  
  FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013/04/15 22:50:13 | 000,000,000 | ---D | M]
  FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/04/12 21:14:44 | 000,000,000 | ---D | M]
  FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013/04/12 21:14:09 | 000,000,000 | ---D | M]
  FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\addlyrics@addlyrics.net: C:\Documents and Settings\PC\Local Settings\Application Data\AddLyrics\FF\
  
  [2012/12/06 19:13:39 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\PC\Application Data\Mozilla\Extensions
  [2012/09/07 17:40:49 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\PC\Application Data\Mozilla\Extensions\home2@tomtom.com
  [2013/04/03 17:33:01 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\PC\Application Data\Mozilla\Firefox\Profiles\l5pnr5on.default\extensions
  [2012/09/03 16:31:20 | 000,000,000 | ---D | M] (Funmoods.com) -- C:\Documents and Settings\PC\Application Data\Mozilla\Firefox\Profiles\l5pnr5on.default\extensions\ffxtlbr@funmoods(2).com
  [2013/04/12 21:14:01 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
  [2013/04/12 21:14:44 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
  [2013/01/11 18:13:29 | 000,001,609 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-france.xml
  [2012/12/06 22:19:53 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
  [2012/12/06 22:19:53 | 000,002,035 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\cnrtl-tlfi-fr.xml
  [2013/02/27 15:25:51 | 000,001,472 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-france.xml
  [2013/01/11 18:13:29 | 000,001,399 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-fr.xml
  [2012/12/06 22:19:53 | 000,001,169 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-france.xml
  
  [color=#E56717]========== Chrome ==========[/color]
  
  CHR - homepage: http://safesearchr.lavasoft.com/?source=3336ca5f&tbp=homepage&toolbarid=adawaretb&v=2_2&u=1211DFDE6060B6B09C67DA50C0CF0845
  CHR - homepage: http://safesearchr.lavasoft.com/?source=3336ca5f&tbp=homepage&toolbarid=adawaretb&v=2_2&u=1211DFDE6060B6B09C67DA50C0CF0845
  CHR - Extension: No name found = C:\Documents and Settings\PC\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hcemhggbahmlmhgnbpbbdaklcojhbecn\2.0.0.0_0\
  
  O1 HOSTS File: ([2013/04/03 16:43:54 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
  O1 - Hosts: 127.0.0.1 localhost
  O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
  O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
  O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
  O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
  O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  O7 - HKU\S-1-5-21-1454471165-515967899-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  O7 - HKU\S-1-5-21-1454471165-515967899-682003330-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} http://www.ma-config.com/plugins/MaConfig_6_0_1_1.cab ("Ma-Config.com control)
  O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
  O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BBC6A3F5-0729-4014-B553-99221C31247F}: DhcpNameServer = 192.168.1.1
  O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
  O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Fichiers communs\Skype\Skype4COM.dll (Skype Technologies)
  O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
  O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
  O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
  O24 - Desktop Components:0 (Ma page d'accueil) - About:Home
  O24 - Desktop WallPaper: C:\Documents and Settings\PC\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
  O24 - Desktop BackupWallPaper: C:\Documents and Settings\PC\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
  O32 - HKLM CDRom: AutoRun - 1
  O32 - AutoRun File - [2012/08/10 17:16:03 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
  O32 - AutoRun File - [2010/03/06 15:25:26 | 000,000,000 | ---D | M] - H:\autorun.inf -- [ NTFS ]
  O33 - MountPoints2\{c5d51e2c-f901-11e1-a5c2-0014856bad1b}\Shell\AutoRun\command - "" = J:\InstallTomTomHOME.exe
  O34 - HKLM BootExecute: (autocheck autochk *)
  O35 - HKLM\..comfile [open] -- "%1" %*
  O35 - HKLM\..exefile [open] -- "%1" %*
  O37 - HKLM\...com [@ = comfile] -- "%1" %*
  O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  
  NetSvcs: 6to4 - File not found
  NetSvcs: AppMgmt - %SystemRoot%\System32\appmgmts.dll File not found
  NetSvcs: Ias - File not found
  NetSvcs: Iprip - File not found
  NetSvcs: Irmon - File not found
  NetSvcs: NWCWorkstation - File not found
  NetSvcs: Nwsapagent - File not found
  NetSvcs: WmdmPmSp - File not found
  
  MsConfig - StartUpReg: [b]Adobe ARM[/b] - hkey= - key= - C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
  MsConfig - StartUpReg: [b]AgentMonitor[/b] - hkey= - key= - C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe ()
  MsConfig - StartUpReg: [b]CTFMON.EXE[/b] - hkey= - key= - File not found
  MsConfig - StartUpReg: [b]LogitechCommunicationsManager[/b] - hkey= - key= - C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe (Labtec Inc,)
  MsConfig - StartUpReg: [b]LogitechQuickCamRibbon[/b] - hkey= - key= - C:\Program Files\Labtec\WebCam10\WebCam10.exe ()
  MsConfig - StartUpReg: [b]NvCplDaemon[/b] - hkey= - key= - File not found
  MsConfig - StartUpReg: [b]NvMediaCenter[/b] - hkey= - key= - File not found
  MsConfig - StartUpReg: [b]nwiz[/b] - hkey= - key= - C:\Program Files\NVIDIA Corporation\nview\nwiz.exe ()
  MsConfig - StartUpReg: [b]PC Performer43619.exe[/b] - hkey= - key= - File not found
  MsConfig - StartUpReg: [b]Skype[/b] - hkey= - key= - C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
  MsConfig - StartUpReg: [b]SpybotSD TeaTimer[/b] - hkey= - key= - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)
  MsConfig - StartUpReg: [b]SunJavaUpdateSched[/b] - hkey= - key= - C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
  MsConfig - StartUpReg: [b]TomTomHOME.exe[/b] - hkey= - key= - C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe (TomTom)
  MsConfig - State: "system.ini" - 0
  MsConfig - State: "win.ini" - 0
  MsConfig - State: "bootini" - 0
  MsConfig - State: "services" - 0
  MsConfig - State: "startup" - 2
  
  SafeBootMin: AppMgmt - %SystemRoot%\System32\appmgmts.dll File not found
  SafeBootMin: Base - Driver Group
  SafeBootMin: Boot Bus Extender - Driver Group
  SafeBootMin: Boot file system - Driver Group
  SafeBootMin: File system - Driver Group
  SafeBootMin: Filter - Driver Group
  SafeBootMin: PCI Configuration - Driver Group
  SafeBootMin: PNP Filter - Driver Group
  SafeBootMin: Primary disk - Driver Group
  SafeBootMin: SCSI Class - Driver Group
  SafeBootMin: sermouse.sys - Driver
  SafeBootMin: System Bus Extender - Driver Group
  SafeBootMin: vga.sys - Driver
  SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  
  SafeBootNet: AppMgmt - %SystemRoot%\System32\appmgmts.dll File not found
  SafeBootNet: Base - Driver Group
  SafeBootNet: Boot Bus Extender - Driver Group
  SafeBootNet: Boot file system - Driver Group
  SafeBootNet: File system - Driver Group
  SafeBootNet: Filter - Driver Group
  SafeBootNet: NDIS Wrapper - Driver Group
  SafeBootNet: NetBIOSGroup - Driver Group
  SafeBootNet: NetDDEGroup - Driver Group
  SafeBootNet: Network - Driver Group
  SafeBootNet: NetworkProvider - Driver Group
  SafeBootNet: PCI Configuration - Driver Group
  SafeBootNet: PNP Filter - Driver Group
  SafeBootNet: PNP_TDI - Driver Group
  SafeBootNet: Primary disk - Driver Group
  SafeBootNet: SCSI Class - Driver Group
  SafeBootNet: sermouse.sys - Driver
  SafeBootNet: Streams Drivers - Driver Group
  SafeBootNet: System Bus Extender - Driver Group
  SafeBootNet: TDI - Driver Group
  SafeBootNet: vga.sys - Driver
  SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
  SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
  SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
  SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
  SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  
  ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Rendu VML (Vector Graphics Rendering)
  ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
  ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4
  ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
  ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
  ActiveX: {30F71986-F2F2-33C8-89AA-99E566B04FD2} - .NET Framework
  ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Liaison de données Dynamic HTML pour Java
  ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
  ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
  ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Création avancée
  ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
  ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
  ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
  ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
  ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
  ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - Classes Java DirectAnimation
  ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.8
  ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
  ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
  ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
  ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
  ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
  ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
  ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Dossiers Web
  ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
  ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
  ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings
  ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install
  ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
  ActiveX: {ACC563BC-4266-43f0-B6ED-9D38C4202C7E} -
  ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
  ActiveX: {CAAFB8F9-F8D1-3D27-9AAA-6301A4429440} - .NET Framework
  ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Planificateur de tâches
  ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
  ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Macromedia Shockwave Flash
  ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
  ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
  ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe
  ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
  ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig
  ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
  ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
  ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE
  
  Drivers32: msacm.ac3acm - C:\WINDOWS\System32\ac3acm.acm (fccHandler)
  Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
  Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  Drivers32: msacm.lameacm - C:\WINDOWS\System32\lameACM.acm (http://www.mp3dev.org/
  Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
  Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
  Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
  Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
  Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll ()
  Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
  Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
  Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
  Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
  Drivers32: VIDC.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
  Drivers32: VIDC.YV12 - C:\WINDOWS\System32\xvidvfw.dll ()
  
  CREATERESTOREPOINT
  Restore point Set: OTL Restore Point
  PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin
  
  [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  
  [2013/04/15 22:50:55 | 000,029,816 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
  [2013/04/15 22:50:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\avast! Free Antivirus
  [2013/04/15 22:50:54 | 000,368,176 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
  [2013/04/15 22:50:53 | 000,049,760 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
  [2013/04/15 22:50:52 | 000,765,736 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys
  [2013/04/15 22:50:52 | 000,062,376 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
  [2013/04/15 22:50:51 | 000,228,600 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
  [2013/04/15 22:49:56 | 000,041,664 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr
  [2013/04/13 16:54:46 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\PC\Recent
  [2013/04/12 21:14:00 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
  [2013/04/03 17:14:55 | 000,000,000 | -HSD | C] -- C:\RECYCLER
  [2013/04/03 16:41:57 | 000,000,000 | ---D | C] -- C:\RECYCLER(2)
  [2013/04/03 16:06:35 | 000,000,000 | ---D | C] -- C:\cmdcons
  [2013/04/03 15:59:10 | 000,000,000 | ---D | C] -- C:\Qoobox
  [2013/04/03 15:58:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\erdnt
  [2013/03/23 20:09:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Google Earth
  [2013/03/20 19:53:48 | 000,000,000 | ---D | C] -- C:\Program Files\inKline Global
  [5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
  [2 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]
  [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
  
  [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  
  [2013/04/19 16:39:08 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
  [2013/04/19 16:12:04 | 000,001,002 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
  [2013/04/19 16:00:04 | 000,001,048 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
  [2013/04/19 14:02:32 | 000,000,316 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
  [2013/04/19 14:01:49 | 000,001,044 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
  [2013/04/19 14:01:41 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
  [2013/04/19 14:01:38 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
  [2013/04/19 14:01:34 | 1073,270,784 | -HS- | M] () -- C:\hiberfil.sys
  [2013/04/16 12:30:33 | 000,003,072 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
  [2013/04/15 22:50:55 | 000,001,689 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\avast! Free Antivirus.lnk
  [2013/04/03 16:43:54 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
  [2013/04/01 16:38:01 | 000,453,286 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat
  [2013/04/01 16:38:00 | 000,390,094 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
  [2013/04/01 16:38:00 | 000,058,904 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat
  [2013/04/01 16:38:00 | 000,049,198 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
  [2013/03/23 20:09:08 | 000,001,915 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Google Earth.lnk
  [5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
  [2 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]
  [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
  
  [color=#E56717]========== Files Created - No Company Name ==========[/color]
  
  [2013/04/16 14:38:25 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
  [2013/04/15 22:50:55 | 000,001,689 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\avast! Free Antivirus.lnk
  [2013/04/15 22:50:52 | 000,000,316 | -H-- | C] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
  [2013/04/03 16:06:39 | 000,000,216 | ---- | C] () -- C:\Boot.bak
  [2013/04/03 16:06:37 | 000,263,488 | RHS- | C] () -- C:\cmldr
  [2013/03/23 20:09:08 | 000,001,915 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Google Earth.lnk
  [2013/03/05 15:49:04 | 000,164,736 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
  [2013/03/05 15:49:04 | 000,049,248 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys
  [2012/12/11 22:46:46 | 000,000,580 | ---- | C] () -- C:\Documents and Settings\PC\Local Settings\Application Data\cookies.ini
  [2012/11/21 18:44:52 | 000,096,864 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
  [2012/09/25 18:05:25 | 001,094,820 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
  [2012/09/25 18:05:25 | 001,094,820 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
  [2012/09/25 18:05:25 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
  [2012/09/25 18:04:28 | 002,811,988 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data
  [2012/09/03 23:06:36 | 000,000,552 | ---- | C] () -- C:\WINDOWS\System32\d3d8caps.dat
  [2012/08/26 22:28:25 | 000,001,324 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
  [2012/08/10 19:06:14 | 000,004,205 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
  [2012/08/10 19:03:03 | 000,130,888 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
  [2012/08/10 17:40:09 | 000,048,640 | ---- | C] () -- C:\Documents and Settings\PC\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  [2012/08/10 17:33:08 | 000,025,548 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTAIODAT.DAT
  [2012/08/10 17:18:08 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
  [2012/08/10 17:16:36 | 000,000,385 | ---- | C] () -- C:\WINDOWS\ODBC.INI
  [2012/08/10 17:13:26 | 000,021,892 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
  [2012/08/10 17:11:15 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
  [2012/08/10 17:11:13 | 000,650,752 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
  [2012/08/10 17:11:13 | 000,243,200 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
  [2012/08/10 17:11:13 | 000,074,752 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
  
  [color=#E56717]========== ZeroAccess Check ==========[/color]
  
  [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  
  [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  
  [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  "" = %SystemRoot%\system32\shdocvw.dll -- [2009/01/07 18:21:08 | 001,497,088 | ---- | M] (Microsoft Corporation)
  "ThreadingModel" = Apartment
  
  [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  "" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2006/03/02 14:00:00 | 000,472,064 | ---- | M] (Microsoft Corporation)
  "ThreadingModel" = Free
  
  [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  "" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2006/03/02 14:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation)
  "ThreadingModel" = Both
  
  [color=#E56717]========== LOP Check ==========[/color]
  
  [2012/12/06 19:02:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ad-Aware Browsing Protection
  [2012/12/07 17:02:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\albumphoto
  [2013/04/15 22:49:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVAST Software
  [2012/09/25 17:25:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ma-config.com
  [2012/09/25 17:29:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ShieldApps
  [2012/09/07 17:41:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TomTom
  [2012/12/11 22:44:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\VTech
  [2012/12/06 18:59:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PC\Application Data\Ad-Aware Antivirus
  [2012/08/10 17:10:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PC\Application Data\Oracle
  [2012/10/30 21:22:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PC\Application Data\PMU
  [2012/09/07 17:40:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PC\Application Data\TomTom
  
  [color=#E56717]========== Purity Check ==========[/color]
  
  [color=#E56717]========== Custom Scans ==========[/color]
  
  [color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*. >[/color]
  [2012/12/06 19:02:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ad-Aware Browsing Protection
  [2013/01/12 18:06:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Adobe
  [2012/12/07 17:02:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\albumphoto
  [2013/04/15 22:49:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVAST Software
  [2012/11/10 19:43:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DivX
  [2013/01/03 19:33:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Google
  [2012/09/25 17:25:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ma-config.com
  [2012/09/03 18:14:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
  [2012/09/02 10:57:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\McAfee
  [2012/11/29 19:41:31 | 000,000,000 | --SD | M] -- C:\Documents and Settings\All Users\Application Data\Microsoft
  [2012/08/10 17:42:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Mozilla
  [2012/09/25 18:07:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NVIDIA
  [2012/09/25 18:07:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NVIDIA Corporation
  [2012/11/10 18:23:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Real
  [2012/09/25 17:29:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ShieldApps
  [2012/10/14 14:30:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Skype
  [2012/12/07 18:24:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
  [2012/08/10 17:10:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Sun
  [2012/09/07 17:41:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TomTom
  [2012/12/11 22:44:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\VTech
  [2012/08/10 17:11:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
  
  [color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*.exe /s >[/color]
  [2012/11/16 11:09:00 | 000,542,104 | ---- | M] (Lavasoft) -- C:\Documents and Settings\All Users\Application Data\Ad-Aware Browsing Protection\adawarebp.exe
  [2012/11/16 11:09:18 | 000,444,504 | ---- | M] (Lavasoft) -- C:\Documents and Settings\All Users\Application Data\Ad-Aware Browsing Protection\uninstall.exe
  [2012/01/04 09:31:52 | 037,218,200 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\All Users\Application Data\Adobe\Reader\9.4\ARM\AdbeRdr950_fr_FR.exe
  [2012/01/03 09:37:53 | 000,320,456 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\All Users\Application Data\Adobe\Reader\9.4\ARM\32204\AcrobatUpdater.exe
  [2012/01/03 09:37:53 | 000,843,712 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\All Users\Application Data\Adobe\Reader\9.4\ARM\32204\AdobeARM.exe
  [2012/01/03 09:37:53 | 000,320,456 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\All Users\Application Data\Adobe\Reader\9.4\ARM\32204\AdobeARMHelper.exe
  [2012/01/03 09:37:53 | 000,320,456 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\All Users\Application Data\Adobe\Reader\9.4\ARM\32204\ReaderUpdater.exe
  [2012/12/18 22:34:03 | 000,364,816 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\All Users\Application Data\Adobe\Setup\{AC76BA86-7AD7-1036-7B44-AB0000000001}\setup.exe
  [2013/04/17 18:18:33 | 010,285,040 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
  
  [color=#A23BEC]< %APPDATA%\*. >[/color]
  [2012/12/06 18:59:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PC\Application Data\Ad-Aware Antivirus
  [2013/01/12 18:02:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PC\Application Data\Adobe
  [2012/11/10 17:56:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PC\Application Data\DivX
  [2013/01/03 19:33:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PC\Application Data\Google
  [2012/08/10 16:21:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PC\Application Data\Identities
  [2012/12/06 18:58:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PC\Application Data\LavasoftStatistics
  [2012/08/10 16:33:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PC\Application Data\Macromedia
  [2012/09/03 18:14:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PC\Application Data\Malwarebytes
  [2013/03/02 18:49:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PC\Application Data\Media Player Classic
  [2013/01/12 18:02:51 | 000,000,000 | --SD | M] -- C:\Documents and Settings\PC\Application Data\Microsoft
  [2012/08/11 19:17:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PC\Application Data\Mozilla
  [2012/09/26 20:50:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PC\Application Data\NVIDIA
  [2012/08/10 17:10:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PC\Application Data\Oracle
  [2012/10/30 21:22:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PC\Application Data\PMU
  [2012/11/10 18:23:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PC\Application Data\Real
  [2012/10/15 18:47:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PC\Application Data\Skype
  [2012/08/10 17:08:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PC\Application Data\Sun
  [2012/09/07 17:40:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PC\Application Data\TomTom
  [2013/01/15 15:29:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PC\Application Data\vlc
  
  [color=#A23BEC]< %APPDATA%\*.exe /s >[/color]
  [2012/10/14 14:19:51 | 000,010,134 | R--- | M] () -- C:\Documents and Settings\PC\Application Data\Microsoft\Installer\{35725FBC-A136-4A46-9F29-091759D9BB93}\ARPPRODUCTICON.exe
  [2012/10/14 14:20:11 | 000,010,134 | R--- | M] () -- C:\Documents and Settings\PC\Application Data\Microsoft\Installer\{BEF726DD-4037-4214-8C6A-E625C02D2870}\ARPPRODUCTICON.exe
  [2012/10/14 14:19:41 | 000,010,134 | R--- | M] () -- C:\Documents and Settings\PC\Application Data\Microsoft\Installer\{EA516024-D84D-41F1-814F-83175A6188F2}\ARPPRODUCTICON.exe
  
  [color=#A23BEC]< %temp%\.exe /s >[/color]
  
  [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]
  
  [color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
  
  [color=#A23BEC]< %systemroot%\system32\consrv.dll >[/color]
  
  [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
  [1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
  
  [color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]
  
  [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color]
  
  [color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color]
  [2012/08/10 19:01:57 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
  [2012/08/10 19:01:57 | 000,638,976 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
  [2012/08/10 19:01:57 | 000,450,560 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav
  
  [color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
  [2006/03/02 14:00:00 | 001,036,288 | ---- | M] (Microsoft Corporation) MD5=2A7BD330924252A2FD80344FC949BB72 -- C:\WINDOWS\explorer.exe
  [2006/03/02 14:00:00 | 001,036,288 | ---- | M] (Microsoft Corporation) MD5=2A7BD330924252A2FD80344FC949BB72 -- C:\WINDOWS\system32\dllcache\explorer.exe
  
  [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
  [2006/03/02 14:00:00 | 000,506,368 | ---- | M] (Microsoft Corporation) MD5=123EEA158F74D0F67A51DCDF065D1091 -- C:\WINDOWS\system32\dllcache\winlogon.exe
  [2006/03/02 14:00:00 | 000,506,368 | ---- | M] (Microsoft Corporation) MD5=123EEA158F74D0F67A51DCDF065D1091 -- C:\WINDOWS\system32\winlogon.exe
  [2012/12/14 17:49:28 | 000,216,424 | ---- | M] () MD5=22101A85B3CA2FE2BE05FE9A61A7A83D -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
  
  [color=#A23BEC]< HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32 /s >[/color]
  "" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2006/03/02 14:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation)
  "ThreadingModel" = Both
  
  [color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /s >[/color]
  
  [color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s >[/color]
  "Debug" =
  "Kmode" = %SystemRoot%\system32\win32k.sys -- [2006/03/02 14:00:00 | 001,836,032 | ---- | M] (Microsoft Corporation)
  "Optional" = Posix [binary data]
  "Posix" = %SystemRoot%\system32\psxss.exe
  "Required" = DebugWindows [binary data]
  "Windows" = %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\CSRSS]
  "CsrSrvSharedSectionBase" = 2137980928
  
  [color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls /s >[/color]
  
  [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList /s >[/color]
  "ProfilesDirectory" = %SystemDrive%\Documents and Settings -- [2012/11/10 19:05:32 | 000,000,000 | ---D | M]
  "DefaultUserProfile" = Default User
  "AllUsersProfile" = All Users
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18]
  "Flags" = 12
  "State" = 0
  "RefCount" = 1
  "Sid" = 01 01 00 00 00 00 00 05 12 00 00 00 [binary data]
  "ProfileImagePath" = %systemroot%\system32\config\systemprofile -- [2013/04/03 17:18:10 | 000,000,000 | ---D | M]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19]
  "ProfileImagePath" = %SystemDrive%\Documents and Settings\LocalService -- [2013/04/03 17:18:10 | 000,000,000 | -HSD | M]
  "Sid" = 01 01 00 00 00 00 00 05 13 00 00 00 [binary data]
  "Flags" = 9
  "State" = 0
  "CentralProfile" =
  "ProfileLoadTimeLow" = -1475569448
  "ProfileLoadTimeHigh" = 30293237
  "RefCount" = 2
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20]
  "ProfileImagePath" = %SystemDrive%\Documents and Settings\NetworkService -- [2013/04/03 17:18:10 | 000,000,000 | -HSD | M]
  "Sid" = 01 01 00 00 00 00 00 05 14 00 00 00 [binary data]
  "Flags" = 9
  "State" = 0
  "CentralProfile" =
  "ProfileLoadTimeLow" = -1501975698
  "ProfileLoadTimeHigh" = 30293237
  "RefCount" = 2
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1454471165-515967899-682003330-1004]
  "ProfileImagePath" = %SystemDrive%\Documents and Settings\PC -- [2013/04/18 11:44:30 | 000,000,000 | ---D | M]
  "Sid" = 01 05 00 00 00 00 00 05 15 00 00 00 FD 77 B1 56 9B 0B C1 1E 82 8B A6 28 EC 03 00 00 [binary data]
  "Flags" = 0
  "State" = 256
  "CentralProfile" =
  "ProfileLoadTimeLow" = -1472131948
  "ProfileLoadTimeHigh" = 30293237
  "RefCount" = 1
  "RunLogonScriptSync" = 0
  "OptimizedLogonStatus" = 11
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1454471165-515967899-682003330-1005]
  "ProfileImagePath" = %SystemDrive%\Documents and Settings\UpdatusUser -- [2013/04/03 17:18:10 | 000,000,000 | ---D | M]
  "Sid" = 01 05 00 00 00 00 00 05 15 00 00 00 FD 77 B1 56 9B 0B C1 1E 82 8B A6 28 ED 03 00 00 [binary data]
  "Flags" = 1
  "State" = 0
  "CentralProfile" =
  "ProfileLoadTimeLow" = -1333694448
  "ProfileLoadTimeHigh" = 30293237
  "RefCount" = 1
  
  [color=#A23BEC]< nslookup www.google.fr /c >[/color]
  No captured output from command...
  
  [color=#A23BEC]< hklm\software\clients\startmenuinternet|command /rs >[/color]
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\HideIconsCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /HideShortcuts [2013/04/12 21:14:37 | 000,867,936 | ---- | M] (Mozilla Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ShowIconsCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /ShowShortcuts [2013/04/12 21:14:37 | 000,867,936 | ---- | M] (Mozilla Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ReinstallCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /SetAsDefaultAppGlobal [2013/04/12 21:14:37 | 000,867,936 | ---- | M] (Mozilla Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\open\command\\: C:\Program Files\Mozilla Firefox\firefox.exe [2013/04/12 21:14:43 | 000,920,472 | ---- | M] (Mozilla Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\properties\command\\: "C:\Program Files\Mozilla Firefox\firefox.exe" -preferences [2013/04/12 21:14:43 | 000,920,472 | ---- | M] (Mozilla Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\safemode\command\\: "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode [2013/04/12 21:14:43 | 000,920,472 | ---- | M] (Mozilla Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\WINDOWS\system32\ie4uinit.exe" -reinstall [2009/03/08 04:32:54 | 000,173,056 | ---- | M] (Microsoft Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\WINDOWS\system32\ie4uinit.exe" -hide [2009/03/08 04:32:54 | 000,173,056 | ---- | M] (Microsoft Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\WINDOWS\system32\ie4uinit.exe" -show [2009/03/08 04:32:54 | 000,173,056 | ---- | M] (Microsoft Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2009/03/08 14:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: C:\Program Files\Internet Explorer\iexplore.exe [2009/03/08 14:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation)
  
  [color=#A23BEC]< hklm\software\clients\startmenuinternet|command /64 /rs >[/color]
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\HideIconsCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /HideShortcuts [2013/04/12 21:14:37 | 000,867,936 | ---- | M] (Mozilla Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ShowIconsCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /ShowShortcuts [2013/04/12 21:14:37 | 000,867,936 | ---- | M] (Mozilla Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ReinstallCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /SetAsDefaultAppGlobal [2013/04/12 21:14:37 | 000,867,936 | ---- | M] (Mozilla Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\open\command\\: C:\Program Files\Mozilla Firefox\firefox.exe [2013/04/12 21:14:43 | 000,920,472 | ---- | M] (Mozilla Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\properties\command\\: "C:\Program Files\Mozilla Firefox\firefox.exe" -preferences [2013/04/12 21:14:43 | 000,920,472 | ---- | M] (Mozilla Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\safemode\command\\: "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode [2013/04/12 21:14:43 | 000,920,472 | ---- | M] (Mozilla Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\WINDOWS\system32\ie4uinit.exe" -reinstall [2009/03/08 04:32:54 | 000,173,056 | ---- | M] (Microsoft Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\WINDOWS\system32\ie4uinit.exe" -hide [2009/03/08 04:32:54 | 000,173,056 | ---- | M] (Microsoft Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\WINDOWS\system32\ie4uinit.exe" -show [2009/03/08 04:32:54 | 000,173,056 | ---- | M] (Microsoft Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2009/03/08 14:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation)
  HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: C:\Program Files\Internet Explorer\iexplore.exe [2009/03/08 14:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation)
  
  [color=#A23BEC]< >[/color]
  [2012/08/10 16:33:17 | 000,001,002 | ---- | C] () -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
  [2012/08/10 17:14:07 | 000,000,065 | RH-- | C] () -- C:\WINDOWS\Tasks\desktop.ini
  [2012/08/10 17:20:44 | 000,000,006 | -H-- | C] () -- C:\WINDOWS\Tasks\SA.DAT
  [2012/09/03 16:16:27 | 000,001,044 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
  [2012/09/03 16:16:28 | 000,001,048 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
  [2013/04/15 22:50:52 | 000,000,316 | -H-- | C] () -- C:\WINDOWS\Tasks\avast! Emergency Update.job
  
  [color=#A23BEC]< >[/color]
  
  < End of report >
  
  0
  
  Réagir
3. Malekal_morte- Modérateur
  
  Faut donner le lien du rapport pjjoint ici, 3e edition.
  
  0
  
  Réagir
4. lasacoche888 Auteur
  
  désolé j'abandonne, car je ne vois pas du tout comment faire!
  Merci tout de meme.
  
  0
  
  Réagir
Réponse 10 / 12
lasacoche888 Auteur
bonjour Malekal, je te remercie de m'aider.
Je te poste le rapport AdwCleaner;# AdwCleaner v2.200 - Rapport créé le 16/04/2013 à 12:57:31
# Mis à jour le 02/04/2013 par Xplode
# Système d'exploitation : Microsoft Windows XP Service Pack 2 (32 bits)
# Nom d'utilisateur : PC - PC-D7A37F72866A
# Mode de démarrage : Normal
# Exécuté depuis : H:\Téléchargements\adwcleaner(6).exe
# Option [Suppression]

***** [Services] *****

***** [Fichiers / Dossiers] *****

Supprimé au redémarrage : C:\Program Files\BrowserProtect

***** [Registre] *****

***** [Navigateurs] *****

-\\ Internet Explorer v8.0.6001.18702

[OK] Le registre ne contient aucune entrée illégitime.

-\\ Mozilla Firefox v16.0.2 (fr)

Fichier : C:\Documents and Settings\PC\Application Data\Mozilla\Firefox\Profiles\l5pnr5on.default\prefs.js

[OK] Le fichier ne contient aucune entrée illégitime.

-\\ Google Chrome v [Impossible d'obtenir la version]

Fichier : C:\Documents and Settings\PC\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

[OK] Le fichier ne contient aucune entrée illégitime.

*************************

AdwCleaner[R1].txt - [26000 octets] - [07/12/2012 18:18:30]
AdwCleaner[R2].txt - [8973 octets] - [16/01/2013 23:34:08]
AdwCleaner[R3].txt - [8029 octets] - [20/01/2013 19:09:13]
AdwCleaner[R4].txt - [7380 octets] - [07/03/2013 16:40:15]
AdwCleaner[R5].txt - [9897 octets] - [03/04/2013 15:22:35]
AdwCleaner[S1].txt - [26198 octets] - [07/12/2012 18:19:49]
AdwCleaner[S2].txt - [9099 octets] - [16/01/2013 23:34:43]
AdwCleaner[S3].txt - [8036 octets] - [20/01/2013 20:33:39]
AdwCleaner[S4].txt - [7518 octets] - [07/03/2013 16:41:07]
AdwCleaner[S6].txt - [1621 octets] - [16/04/2013 12:57:31]

########## EOF - C:\AdwCleaner[S6].txt - [1681 octets] ##########

0

Réagir
Réponse 11 / 12
BmwZX6
Essaye de télécharger Avast imperativement !
Soit tu le fait avec le Pc en question, soit tu le fait a partir d'un autre ordinateur, et tu installe depuis une clé Usb.
Ensuite, il faudrait faire un defragmentation du Pc, un scan de virus, et aussi voir a suppprimer d'eventuels proggrames dont tu ne te sert peut etre plus !
Ensuite télécharge Ccleaner, et fait un netoyage des erreurs de registres, sa devrais déja etre pas mal !

0

Réagir
Réponse 12 / 12
Malekal_morte- Modérateur
Salut,

Normalement, tu peux reprendre une licence gratuit d'un an.
Lis bien ce qui est dit.
Regarde dans Maintenance puis Enregistrement => https://www.malekal.com/tutoriel-antivirus-avast/

Télécharge http://general-changelog-team.fr/telechargements/logiciels/viewdownload/75-outils-de-xplode/28-adwcleaner AdwCleaner ( d'Xplode ) sur ton bureau.
Lance le, clique sur [Suppression] puis patiente le temps du scan (Pas besoin de faire de Recherche avant).
Une fois le scan fini, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

puis :

Faire un scan OTL pour diagnostiquer les programmes qui tournent et déceler des infections - Le programme va générer deux rapports OTL.txt et Extras.txt
Fournir les deux rapports :

Tu peux suivre les indications de cette page pour t'aider : https://www.malekal.com/tutorial-otl/

* Télécharge http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ sur ton bureau.
(Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur)

Dans le cas d'Avast!, ne pas lancer le programme dans la Sandbox (voir lien d'aide ci-dessus).

* Lance OTL
* En haut à droite de Analyse rapide, coche "tous les utilisateurs"
* Sur OTL, sous Personnalisation, copie-colle le script ci-dessous :

netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%temp%\.exe /s
%SYSTEMDRIVE%\*.exe
%systemroot%\*. /mp /s
%systemroot%\system32\consrv.dll
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
/md5start
explorer.exe
winlogon.exe
wininit.exe
/md5stop
HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32 /s
HKEY_LOCAL_MACHINE\SYSTEM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /s
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls /s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList /s
CREATERESTOREPOINT
nslookup www.google.fr /c
SAVEMBR:0
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs

* Clique sur le bouton Analyse.

NE PAS COPIER/COLLER LE RAPPORT ICI - DONNER LE LIEN PJJOINT
* Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer le rapport OTL.txt (et Extra.txt si présent), donne le ou les liens pjjoint qui pointent vers ces rapports ici dans un nouveau message.
NE PAS COPIER/COLLER LE RAPPORT ICI - DONNER LE LIEN PJJOINT

Like the angel you are, you laugh creating a lightness in my chest,
Your eyes they penetrate me,
(Your answer's always 'maybe')
That's when I got up and left

0

Réagir

Newsletters