Je dois avoir un virus Résolu

Question

Bonjour
JE suis sur mon OS Xp Pro, j'ai avast gratuit qui me protège , microsoft sécutity essential ne pouvant plus servir avec Xp et en lançant Google Chrome, Avast me signale qu'une menace est détectée. Il s'agit de BBU.glazetartrans.com.
Pensant être infecté, j'ai lancé un scan avec Avast qui n'a rien trouvé.. J'ai voulu à nouveau lancer Google et aussitôt avast m'a fait la même annonce. J'ai donc désinstallé Chrome , pensant que cela venait de lui, et péniblement j'ai remis une nouvelle édition de Google Chrome mais le résultat est le même. J'ai lancé un scan avec malware et là surpris j'ai découvert qu'il y avait 100 swpywares dénommés yontoo.J'ai mis le rapport en txt et j'ai également une alerte de Malware avec une adresse IP70.186.131.246 avec out bound. je m'adresse à vous pour essayer de me débarasser de ce fléau.
Je vous remercie d'avance pour l'aide que vous pourrez m'apporter

juju666 · Answer

Salut,

&#9654 Télécharge ici : AdwCleaner (de Xplode)

&#9654 Lance-le.

&#9654 Lis et accepte le contrat d'utilisation.

&#9654 Clique sur Scanner puis Nettoyer, et patiente le temps du nettoyage.

&#9654 Poste le contenu du rapport que tu trouveras dans le répertoire AdwCleaner de ton disque dur ( C:\AdwCleaner\AdwCleaner[x].txt) ou son contenu s'il s'ouvre.

 ~~

reparamètres tes navigateurs WEB :

 Internet Explorer et modules complémentaires / moteurs de recherche : https://forum.malekal.com/viewtopic.php?t=41399&start=
 Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start=
 Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start= 
 
A+

August · Answer

Bonsoir juju66
Je renre à l'instant, j'étais parti toute la journée ce qui explique mon retard à te répondre
Voici le rapport que  tu as demndé

Par Nicolas Coolman de ~ ZHPDiag (du 02/10/2015)
~ DÃ © Marra © par Administrateur (Administrateur) (04/10/2015 18:36:42)
~ Site: https://nicolascoolman.eu
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la Version: Version OK
~ Mode: Scanner
~ Rapport: C: \ Documents and Settings \ Administrateur \ Bureau \ ZHPDiag.txt
~ Rapport: C: \ Documents and Settings \ Administrateur \ Application Data \ ZHP \ ZHPDiag.txt
~ UAC: Désactiver
DÃ © marrage ~ du systÃ¨me: Normal (démarrage normal)
Windows XP, 32 bits Service Pack 3 (Build 2600)

--- \ Navigateurs Internet (2) - 0s
GCIE: Google Chrome v45.0.2454.101
MSIE: Internet Explorer v8.0.6001.18702

--- \ Informations sur les Produits de Windows (3) - 0s
Mises à jour automatiques de Windows: OK
Windows Activation Technologies: KO
Programme Windows Genuine Advantage: OK

--- \ Logiciels de protection (2) - 5s
Avast Antivirus Gratuit v10.4.2233
Version Malwarebytes Anti-Malware 2.1.8.1057

--- \ Logiciels d'optimisation (1) - 6s
CCleaner v5.09

--- \ Surveillance de Logiciels (2) - 6s
Adobe Flash Player 19 NPAPI
Adobe Reader X

--- \ Informations Sur Le systÃ¨me (6) - 0s
~ Système d'exploitation: x86 Family 6 Model 23 Stepping 10, GenuineIntel
~ Système d'exploitation: 32 bits 
~ Mode de démarrage: Normal (démarrage normal)
RAM totale: 3106,26 MB (48% sans)
~ Restauration du système: Activa © (Enable)
~ Disque système C: dispose de 44 Go d'espace libre de 78 Go

--- \ Mode de connexion au systÃ¨me (3) - 0s
~ Nom de l'ordinateur: PAUL
~ Nom d'utilisateur: Administrateur
~ Connecté en tant qu'administrateur

--- \ Enûma © ration des UNITA © s Disques (5) - 1s
~ Le lecteur C: dispose d'une connexion de 78 Go (système) 44 Go
~ Le lecteur E: dispose d'une connexion de 476 Go 379 Go
~ Lecteur G: dispose d'une connexion de 476 Go 263 Go
~ Lecteur H: dispose d'une connexion de 953 Go 633 Go
~ Drive I: a 411 Go d'espace libre de 476 Go

--- \ Etat du Centre de SÃ © curitÃ © Windows (9) - 1s
[HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Advanced \ Folder \ Invisible \ NOHIDDEN] CheckedValue: Modifié
[HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Advanced \ Folder \ Invisible \ SHOWALL] CheckedValue: OK
[HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Associations] Application: OK
[HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Associations] Intl: OK
[HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Associations] XMLLookup: OK
[HKLM \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon] Shell: OK
[HKCU \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Windows] Charge: OK
[HKLM \ SYSTEM \ CurrentControlSet \ Services \ COMSysApp] Type: OK
[HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ WindowsUpdate \ Auto Update \ Résultats \ Installer] LastSuccessTime: OK

--- \ Recherche particuliÃ¨re de Fichiers GA pyrénéens riques (23) - 1s
[MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) () - C: \ WINDOWS \ Explorer.exe [1037824] ©
[MD5.93AD0B78C7357A05F50E594EC7C22300] - (.Microsoft Corporation - EXA © DLL mignon UNE EN Tant qu'application.) () - C: \ WINDOWS \ System32 \ rundll32.exe [33792] ©
[MD5.2988BFF8257A55EA8AFD038F49F81A34] - (.Microsoft Corporation - Extensions Internet pour Win32.) () - C: \ WINDOWS \ System32 \ wininet.dll [920064] ©
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Demande d'ouverture de session Windows.) () - C: \ WINDOWS \ System32 \ Winlogon.exe [512000] ©
[MD5.D76A076ADB74F8132924E498D63123A2] - (.Microsoft Corporation - DNS Client API DLL.) () - C: \ WINDOWS \ System32 \ dnsapi.dll [149504] ©
[MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - pilote de fonction auxiliaire pour WinSock.) () - C: \ WINDOWS \ system32 \ drivers \ afd.sys [138496] ©
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE / ATAPI Port Driver.) () - C: \ WINDOWS \ system32 \ drivers \ atapi.sys [96512] ©
[MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) () - C: \ WINDOWS \ system32 \ drivers \ Cdfs.sys [63744] ©
[MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () - C: \ WINDOWS \ system32 \ drivers \ Cdrom.sys [62976] ©
[MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) () - C: \ Windows \ System32 \ drivers \ Fips.sys [44672] ©
[MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 fournisseur DDK - High Definition Audio Driver v1.0a Bus.) () - C: \ Windows \ System32 \ drivers \ HDAudBus.sys [144384]
[MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) () - C: \ Windows \ System32 \ drivers \ i8042prt.sys [54144] ©
[MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) () - C: \ WINDOWS \ system32 \ drivers \ imapi.sys [42112] ©
[MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - Adresse IP Network Traducteur.) () - C: \ Windows \ System32 \ drivers \ Ipnat.sys [152832] ©
[MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - pilote IPSec.) () - C: \ Windows \ System32 \ drivers \ IPSec.sys [75264] ©
[MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () - C: \ WINDOWS \ system32 \ drivers \ Mrxsmb.sys [456320] ©
[MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - pilote MBT Transport.) () - C: \ WINDOWS \ system32 \ drivers \ Netbt.sys [162816] ©
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) () - C: \ WINDOWS \ system32 \ drivers \ ntfs.sys [574976] ©
[MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallÃ¨le.) () - C: \ WINDOWS \ system32 \ drivers \ Parport.sys [80384] ©
[MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - mini-port RAS L2TP / call-gestionnaire pilote.) () - C: \ WINDOWS \ system32 \ drivers \ Rasl2tp.sys [51328] ©
[MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP périphérique redirecteur.) () - C: \ WINDOWS \ system32 \ drivers \ Rdpdr.sys [196224] ©
[MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre Livre audio rouge.) () - C: \ WINDOWS \ system32 \ drivers \ redbook.sys [58752] ©
[MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché © instantanÃ © du volume.) () - C: \ Windows \ System32 \ drivers \ Volsnap.sys [53376] ©

--- \ (20) s Processus Lança © - 3s
[MD5.11120878E5276B367E1A10FF8C9B595B] - (.AVAST Software - avast service!.) - C: \ Program Files \ AVAST Software \ Avast \ AvastSvc.exe [146600] [PID.1572] ©
[MD5.73686FE0B2E0469F89FD2075BE724704] - (.apple Computer, Inc. - service Bonjour.) - C: \ Program Files \ Bonjour \ mDNSResponder.exe [229376] [PID.240] ©
[MD5.301E3FDFCF33640BB8763BA444BC5093] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C: \ Program Files \ Malwarebytes Anti-Malware \ mbamscheduler.exe [1871160] [PID.752] ©
[MD5.ABF8B1379FFE06E2C6A21FF7B1483136] - (.Copyright (c) 2008 - ChangeIcon application MFC.) - C: \ WINDOWS \ system32 \ UMonit.exe [28672] [PID.1924]
[MD5.123CE08362EE48BBA7F9F1D7EB50F24F] - (.AVAST Software - Avast Antivirus!.) - C: \ Program Files \ AVAST Software \ Avast \ AvastUI.exe [6134544] [PID.1952] ©
[MD5.383145864F6543C97A7E1B78505D2F1C] - (.apple Computer, Inc. - QuickTime tâches.) - C: \ Program Files \ QuickTime \ qttask.exe [282624] [PID.2032] ©
[MD5.C1626A1DEB684E044BBC2A03623A0F18] - (.Gadwin Systems, Inc - LLXScreenCut.) - E: écran d'impression \ Gadwin \ PrintScreen \ PrintScreen.exe [493776] [PID.1612]
[MD5.83C982A395D00BAFF6515FB38424EA76] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C: \ Program Files \ Malwarebytes Anti-Malware \ mbamservice.exe [1133880] [PID.1356] ©
[MD5.ABFF2B3A80AA5348BE5E43EFD6B415D1] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C: \ Program Files \ Malwarebytes Anti-Malware \ mbam.exe [6554424] [PID.1376] ©
[MD5.37241629C440EA0C9EBAF96EB53F7981] - (.Skype Technologies SA - Skype.) - C: \ Program Files \ Skype \ Phone \ Skype.exe [57864728] [PID.1396] ©
[MD5.78073F606AE3B24F6C1F555759AA8511] - (.Nero AG - Nero BackItUp.) - C: \ Program Files \ Nero \ nero8 \ Nero BackItUp \ NBService.exe [877864] [PID.1484] ©
[MD5.875E4E0661F3A5994DF9E5E3A0A4F96B] - (.Prolific Technology Inc. - PLFlash service DeviceIoControl.) - C: \ WINDOWS \ system32 \ IoctlSvc.exe [81920] [PID.1540] ©
[MD5.2FCEAD838E64A79250046DD2A15B6A8A] - (.Copyright 2004 - Module RichVideo.) - C: \ Program Files \ CyberLink \ Shared Files \ RichVideo.exe [241734] [PID.1628]
[MD5.71DCFA65CC4349CF08BFFF7A14D8BAE4] - (.Google Inc. - Google Chrome.) - C: \ Program Files \ Google \ Chrome \ Application \ chrome.exe [815944] [PID.2044] ©
[MD5.71DCFA65CC4349CF08BFFF7A14D8BAE4] - (.Google Inc. - Google Chrome.) - C: \ Program Files \ Google \ Chrome \ Application \ chrome.exe [815944] [PID.3712] ©
[MD5.71DCFA65CC4349CF08BFFF7A14D8BAE4] - (.Google Inc. - Google Chrome.) - C: \ Program Files \ Google \ Chrome \ Application \ chrome.exe [815944] [PID.1988] ©
[MD5.71DCFA65CC4349CF08BFFF7A14D8BAE4] - (.Google Inc. - Google Chrome.) - C: \ Program Files \ Google \ Chrome \ Application \ chrome.exe [815944] [PID.3624] ©
[MD5.71DCFA65CC4349CF08BFFF7A14D8BAE4] - (.Google Inc. - Google Chrome.) - C: \ Program Files \ Google \ Chrome \ Application \ chrome.exe [815944] [PID.1696] ©
[MD5.71DCFA65CC4349CF08BFFF7A14D8BAE4] - (.Google Inc. - Google Chrome.) - C: \ Program Files \ Google \ Chrome \ Application \ chrome.exe [815944] [PID.3376] ©
[MD5.DD7DAC8A6913EB893372091E96871F95] - (. .Nicolas Coolman - ZHPDiag) - C: \ Documents et Settings \ Administrateur \ Mes \ Téléchargements \ ZHPDiag3.exe [1940992] [PID.3464] ©

--- \ Google Chrome, DÃ © marrage, Recherche, extensions (18) - 1s
G0 - GCSP: Préférences sécurisés [User Data \ Default] [HomePage] https://fr.yahoo.com/
G0 - GCSP: Préférences sécurisés [User Data \ Default] [HomePage] https://www.google.fr/?gws_rd=ssl
G0 - GCSP: Préférences sécurisé [User Data \ Default] [HomePage] http://astromenda.com/ => PUP.Optional.Astromenda
G0 - GCSP: Préférences sécurisé [User Data \ Default] [HomePage] http://isearch.omiga-plus.com/ => PUP.Optional.OmigaPlus
G0 - GCSP: Préférences sécurisé [User Data \ Default] [HomePage] http://Vosteran.com/ => PUP.Optional.Vosteran
G0 - GCSP: Préférences sécurisé [User Data \ Default] [HomePage] http://istart.webssearches.com/ => PUP.Optional.IsStart
G2 - GCE:. Préférence [User Data \ Default] [aapocclcgogkmnckokdopfmhonfmgoek] Google Chrome manifeste => Google Inc.
G2 - GCE:. Préférence [User Data \ Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifeste => Google Inc.
G2 - GCE:. Préférence [User Data \ Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifeste => Google Inc.
G2 - GCE: Préférence [User Data \ Default] [bhmmomiinigofkjcapegjjndpbikblnp] WOT: Web of Trust réputation des sites Web Notes
G2 - GCE:. Préférence [User Data \ Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifeste => Google Inc.
G2 - GCE:. Préférence [User Data \ Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifeste => Google Inc.
G2 - GCE: Préférence [User Data \ Default] [eofcbnmajmjmplflapaojjnihcjkigck] Avast SafePrice
G2 - GCE:. Préférence [User Data \ Default] [felcaaldnbdncclmgdcncolpebgiejap] Google Chrome manifeste => Google Inc.
G2 - GCE: Préférence [User Data \ Default] [kngglkijfekbhidmchmlfmpkdffmedob] __MSG_name__
G2 - GCE: Préférence [User Data \ Default] [lccekmodgklaepjeofjdjpbminllajkg] Chrome hotword module partagé
G2 - GCE:. Préférence [User Data \ Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifeste => Google Inc.
G2 - GCE:. Préférence [User Data \ Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifeste => Google Inc.

--- \ Firefox, plugins, DEMARRAGE, Recherche, Extensions (2) - 0s
P2 - EXT fichier: (...) - C: \ Documents and Settings \ Administrateur \ Application Data \ Mozilla \ Firefox \ Profiles \ h7czt54w.default \ extensions \ {B64D9B05-48E1-4CEB-BF58-E0643994E900} .xpi
P2 - FPN: [HKLM] [@ adobe.com / FlashPlayer] - (.adobe Systems Incorporated.) - C: \ WINDOWS \ system32 \ Macromed \ Flash \ NPSWF32_19_0_0_185.dll Â ©

--- \ Internet Explorer, DÃ © marrage, Recherche, URLSearchHook (11) - 0s
R0 - HKCU \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Start Page = https://www.microsoft.com/fr-fr/
R0 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Start Page = https://www.microsoft.com/fr-fr/
R1 - HKCU \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, la recherche Page = https://www.google.com/?gws_rd=ssl
R1 - HKCU \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Search Bar = https://www.google.com/?gws_rd=ssl
R1 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, la recherche Page = https://www.microsoft.com/fr-fr/
R1 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Extensions Off Page = environ: noadd-ons
R1 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, la sécurité risque Page = environ: SecurityRisk
R1 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM \ SOFTWARE \ Microsoft \ Internet Explorer \ AboutURLs, tabs = res: //ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: (pas de nom) - {} CFBFAE00-17A6-11D0-99CB-00C04FD64497 orphée => Microsoft Internet Explorer.

--- \ Internet Explorer, de sollicitation de procurations (6) - 0s
R5 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, ProxyOverride = * .local
R5 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, ProxyEnable = 0
R5 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, MigrateProxy = 1
R5 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, EnableHttp1_1 = 1
R5 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, ProxyHttp1.1 = 0
R5 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, AutoConfigProxy = wininet.dll

--- \ Internet Explorer, IniFiles, les programmes de chargement automatique (3) - 0s
F2 - REG: system.ini: UserInit = C: \ WINDOWS \ system32 \ userinit.exe (.Microsoft Corporation.) ©
F2 - REG: system.ini: Shell = C: \ WINDOWS \ explorer.exe (.Microsoft Corporation.) ©
F2 - REG: system.ini: VMApplet = rundll32 shell32, Control_RunDLL "sysdm.cpl"

--- \ Etude du Fichier hôtes (1) - 0s
~ Le Fichier hÃ'te Est Sain (Le fichier hosts est propre) (20)

--- \ Browser Helper Object de navigateur (BHO) (3) - 1s
O2 - BHO: avast! Sécurité en ligne - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06}. (.AVAST Software - IE WebRep plugin.) - C: \ Program Files \ AVAST Software \ Avast \ aswWebRepIE.dll Â ©
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7}. (.Google Inc. - barre d'outils pour IE.) - C: \ program files \ Google \ googletoolbar1.dll Â ©
O2 - BHO: DVDVideoSoft.WebPageAdjuster - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} (orphée)

--- \ Applications Lança © es dÃ © marrage Au UA systÃ¨me (13) - 0 s
O4 - HKLM \ .. \ Run: [UMonit]. (.Copyright (C) 2008 - Demande ChangeIcon MFC.) - C: \ WINDOWS \ system32 \ UMonit.exe
O4 - HKLM \ .. \ Run: [AvastUI.exe]. (.AVAST Software - Avast Antivirus!.) - C: \ Program Files \ AVAST Software \ Avast \ AvastUI.exe Â ©
O4 - HKLM \ .. \ Run: [QuickTime Task]. (.apple Computer, Inc. - QuickTime tâches.) - C: \ Program Files \ QuickTime \ qttask.exe Â ©
O4 - HKCU \ .. \ Run: [LLXScreenCut]. (.Gadwin Systems, Inc - LLXScreenCut.) - E: écran d'impression \ Gadwin \ PrintScreen \ PrintScreen.exe
O4 - HKCU \ .. \ Run: [Skype]. (.Skype Technologies SA - Skype.) - C: \ Program Files \ Skype \ Phone \ Skype.exe Â ©
O4 - HKCU \ .. \ Run: [ctfmon.exe]. (.Microsoft Corporation - FCT Loader.) - C: \ WINDOWS \ system32 \ ctfmon.exe Â ©
O4 - HKUS \ .DEFAULT \ .. \ Run: [CTFMON.EXE]. (.Microsoft Corporation - FCT Loader.) - C: \ WINDOWS \ system32 \ ctfmon.exe Â ©
O4 - HKUS \ S-1-5-18 \ .. \ Run: [CTFMON.EXE]. (.Microsoft Corporation - FCT Loader.) - C: \ WINDOWS \ system32 \ ctfmon.exe Â ©
O4 - HKUS \ S-1-5-19 \ .. \ Run: [CTFMON.EXE]. (.Microsoft Corporation - FCT Loader.) - C: \ WINDOWS \ system32 \ ctfmon.exe Â ©
O4 - HKUS \ S-1-5-20 \ .. \ Run: [CTFMON.EXE]. (.Microsoft Corporation - FCT Loader.) - C: \ WINDOWS \ system32 \ ctfmon.exe Â ©
O4 - HKUS \ S-1-5-21-1004336348-484061587-839522115-500 \ .. \ Run: [LLXScreenCut]. (.Gadwin Systems, Inc - LLXScreenCut.) - E: écran d'impression \ Gadwin \ PrintScreen \ PrintScreen.exe
O4 - HKUS \ S-1-5-21-1004336348-484061587-839522115-500 \ .. \ Run: [Skype]. (.Skype Technologies SA - Skype.) - C: \ Program Files \ Skype \ Phone \ Skype.exe Â ©
O4 - HKUS \ S-1-5-21-1004336348-484061587-839522115-500 \ .. \ Run: [ctfmon.exe]. (.Microsoft Corporation - FCT Loader.) - C: \ WINDOWS \ system32 \ ctfmon.exe Â ©

--- \ Modification Domaine / Adresses DNS (3) - 0s
O17 - HKLM \ System \ CCS \ Services \ Tcpip \ Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM \ System \ CS1 \ Services \ Tcpip \ Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM \ System \ CS3 \ Services \ Tcpip \ Parameters: DhcpNameServer = 192.168.1.1

--- \ Additionnel Protocole (30) - 1s
O18 - Handler: environ - {3050F406-98B5-11CF-BB82-00AA00BDCE0B}. (.Microsoft Corporation - Microsoft (R) HTML Viewer.) - C: \ WINDOWS \ system32 \ mshtml.dll Â ©
O18 - Handler: CDL - {3dd53d40-7b8b-11D0-b013-00aa0059ce02}. (.Microsoft Corporation - Extensions OLE32 pour Win32.) - C: \ WINDOWS \ system32 \ urlmon.dll Â ©
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC}. (.Microsoft Corporation - contrÃ'le ActiveX verser le flux vidÃ © o.) - C: \ WINDOWS \ system32 \ msvidctl.dll Â ©
O18 - Handler: fichier - {79eac9e7-baf9-11ce-8c82-00aa004ba90b}. (.Microsoft Corporation - Extensions OLE32 pour Win32.) - C: \ WINDOWS \ system32 \ urlmon.dll Â ©
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b}. (.Microsoft Corporation - Extensions OLE32 pour Win32.) - C: \ WINDOWS \ system32 \ urlmon.dll Â ©
O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b}. (.Microsoft Corporation - Extensions OLE32 pour Win32.) - C: \ WINDOWS \ system32 \ urlmon.dll Â ©
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b}. (.Microsoft Corporation - Extensions OLE32 pour Win32.) - C: \ WINDOWS \ system32 \ urlmon.dll Â ©
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b}. (.Microsoft Corporation - Extensions OLE32 pour Win32.) - C: \ WINDOWS \ system32 \ urlmon.dll Â ©
O18 - Handler: son - {9D148291-B9C8-11D0-A4CC-0000F80149F6}. (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) - C: \ WINDOWS \ system32 \ itss.dll Â ©
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B}. (.Microsoft Corporation - Microsoft (R) HTML Viewer.) - C: \ WINDOWS \ system32 \ mshtml.dll Â ©
O18 - Handler: locale - {79eac9e7-baf9-11ce-8c82-00aa004ba90b}. (.Microsoft Corporation - Extensions OLE32 pour Win32.) - C: \ WINDOWS \ system32 \ urlmon.dll Â ©
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B}. (.Microsoft Corporation - Microsoft (R) HTML Viewer.) - C: \ WINDOWS \ system32 \ mshtml.dll Â ©
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4}. (.Microsoft Corporation - API Microsoft Internet Messaging.) - C: \ WINDOWS \ system32 \ inetcomm.dll Â ©
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b}. (.Microsoft Corporation - Extensions OLE32 pour Win32.) - C: \ WINDOWS \ system32 \ urlmon.dll Â ©
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294}. (.Microsoft Corporation - Microsoft® Aide Data Services Module.) - C: \ Program Files \ Fichiers Communs \ Microsoft Shared \ Help \ hxds.dll Â ©
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6}. (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) - C: \ WINDOWS \ system32 \ itss.dll Â ©
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B}. (.Microsoft Corporation - Microsoft (R) HTML Viewer.) - C: \ WINDOWS \ system32 \ mshtml.dll Â ©
O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382}. (.Microsoft Corporation - Microsoft (R) HTML Viewer.) - C: \ WINDOWS \ system32 \ mshtml.dll Â ©
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E}. (.Microsoft Corporation - contrÃ'le ActiveX verser le flux vidÃ © o.) - C: \ WINDOWS \ system32 \ msvidctl.dll Â ©
O18 - Handler: VBScript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B}. (.Microsoft Corporation - Microsoft (R) HTML Viewer.) - C: \ WINDOWS \ system32 \ mshtml.dll Â ©
O18 - Handler: WIA - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE}. (.Microsoft Corporation - Couche WIA Scripting.) - C: \ WINDOWS \ system32 \ wiascr.dll Â ©
O18 - Filtre: application / octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D}. (.Microsoft Corporation - Moteur Microsoft .NET Runtime d'exécution.) - C: \ WINDOWS \ system32 \ mscoree.dll Â ©
O18 - Filtre: application / x-Complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D}. (.Microsoft Corporation - Moteur Microsoft .NET Runtime d'exécution.) - C: \ WINDOWS \ system32 \ mscoree.dll Â ©
O18 - Filtre: application / x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D}. (.Microsoft Corporation - Moteur Microsoft .NET Runtime d'exécution.) - C: \ WINDOWS \ system32 \ mscoree.dll Â ©
O18 - Filtre: Classe gestionnaire d'installation - {32B533BB-EDAE-11D0-BD5A-00AA00B92AF1}. (.Microsoft Corporation - Extensions OLE32 pour Win32.) - C: \ WINDOWS \ system32 \ urlmon.dll Â ©
O18 - Filtre: dégonfler - {8f6b0360-B80D-11D0-a9b3-006097942311}. (.Microsoft Corporation - Extensions OLE32 pour Win32.) - C: \ WINDOWS \ system32 \ urlmon.dll Â ©
O18 - Filtre: gzip - {8f6b0360-B80D-11D0-a9b3-006097942311}. (.Microsoft Corporation - Extensions OLE32 pour Win32.) - C: \ WINDOWS \ system32 \ urlmon.dll Â ©
O18 - Filtre: lzdhtml - {8f6b0360-B80D-11D0-a9b3-006097942311}. (.Microsoft Corporation - Extensions OLE32 pour Win32.) - C: \ WINDOWS \ system32 \ urlmon.dll Â ©
O18 - Filtre: text / webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1}. (.Microsoft Corporation - DLL commune du shell de Windows.) - C: \ WINDOWS \ system32 \ shell32.dll Â ©
O18 - Filtre: text / xml - {807563E5-5146-11D5-A672-00B0D022E945}. (.Microsoft Corporation - Microsoft Office XML MIME filtre.) - C: \ Program Files \ Fichiers Communs \ Microsoft Shared \ OFFICE12 \ Msoxmlmf.dll Â ©

--- Liste des services \ au TN non Microsoft et Non dÃ © sactivÃ © s (9) - 0s
O23 - Service: Avast Antivirus (antivirus Avast!). (.AVAST Software - avast service!.) - C: \ Program Files \ AVAST Software \ Avast \ AvastSvc.exe Â ©
O23 - Service: ## Id_String1.6844F930_1628_4223_B5CC_5BB94B879762 ## (Service Bonjour). (.apple Computer, Inc. - service Bonjour.) - C: \ Program Files \ Bonjour \ mDNSResponder.exe Â ©
O23 - Service: Service de mise à jour Google (gupdate) (gupdate). (.Google Inc. - Programme d 'installation de Google.) - C: \ Program Files \ Google \ Update \ GoogleUpdate.exe Â ©
O23 - Service: (MBAMScheduler). (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C: \ Program Files \ Malwarebytes Anti-Malware \ mbamscheduler.exe Â ©
O23 - Service: (MBAMService). (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C: \ Program Files \ Malwarebytes Anti-Malware \ mbamservice.exe Â ©
O23 - Service: Nero BackItUp Scheduler 3 (Nero BackItUp Scheduler 3). (.Nero AG - Nero BackItUp.) - C: \ Program Files \ Nero \ nero8 \ Nero BackItUp \ NBService.exe Â ©
O23 - Service: Service de PLFlash DeviceIoControl (PLFlash service DeviceIoControl). (. .Prolific Technology Inc. - PLFlash service DeviceIoControl) - C: \ WINDOWS \ system32 \ IoctlSvc.exe Â ©
O23 - Service: Service de Cyberlink RichVideo (EVRC) (RichVideo). C (.Copyright 2004 - - Module RichVideo.): Fichiers \ Program Files \ CyberLink \ Shared \ RichVideo.exe
O23 - Service: Skype Updater (SkypeUpdate). (.Skype Technologies - Skype service de mise à jour.) - C: \ Program Files \ Skype \ Updater \ Updater.exe Â ©

--- \ (93) s 'installation © Logiciels - 7s
O42 - Logiciel: Adobe Flash Player 19 ActiveX - (.adobe Systems Incorporated.) [HKLM] - Adobe Flash Player ActiveX Â ©
O42 - Logiciel: Adobe Flash Player 19 NPAPI - (.adobe Systems Incorporated.) [HKLM] - Adobe Flash Player NPAPI Â ©
O42 - Logiciel: Ajouter OÜ supprimer Adobe Creative Suite 3 Master Collection - (.adobe Systems Incorporated.) [HKLM] - Adobe_b5d5789539ea1f004a4defceea74312 Â ©
O42 - Logiciel: Avast Free Antivirus - (.AVAST Logiciel.) [HKLM] - Avast Â ©
O42 - Logiciel: Bel Atout 5.23 - (. .Vincent BrÃ © vart) [HKLM] - BelAtoutFr_is1 Â ©
O42 - Logiciel: Canon ScanGear Toolbox 3.1 - (...) [HKLM] - Canon ScanGear Toolbox 3.1
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] - CCleaner Â ©
O42 - Logiciel: Firebird SQL Server - MAGIX édition 2.0.0.1 (F) - (.MAGIX AG.) [HKLM] - Firebird SQL Server F Â ©
O42 - Logiciel: FormatFactory 3.7.0.0 - (. .Format Usine) [HKLM] - FormatFactory Â ©
O42 - Logiciel: Free YouTube to MP3 Converter version 4.0.0.915 - (.DVDVideoSoft Ltd ..) [HKLM] - Free YouTube to MP3 Converter_is1 Â ©
O42 - Logiciel: LLXScreenCut - (.Gadwin Systems, Inc ..) [HKLM] - LLXScreenCut Â ©
O42 - Logiciel: Google Chrome - (.Google Inc ..) [HKLM] - Google Chrome Â ©
O42 - Logiciel: Intel (R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM] - HDMI Â ©
O42 - Logiciel: hp deskjet 940c series (Supprimer uniquement) - (...) [HKLM] - hp deskjet 940c series
O42 - Logiciel: Windows Internet Explorer 8 - (. .Microsoft Corporation) [HKLM] - IE8 Â ©
O42 - Logiciel: SmartSound Quicktracks Plugin - (.SmartSound Software Inc.) [HKLM] - {InstallShield_ 4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}
O42 - Logiciel: QuickTime - (.apple Computer, Inc ..) [HKLM] - {InstallShield_ C21D5524-A970-42FA-AC8A-59B8C7CDCA31} Â ©
O42 - Logiciel: CyberLink PowerDirector - (.CyberLink Corp ..) [HKLM] - {InstallShield_ CB099890-1D5F-11D5-9EA9-0050BAE317E1} Â ©
O42 - Logiciel: CyberLink PhotoNow - (.CyberLink Corp ..) [HKLM] - InstallShield_ {} D36DD326-7280-11D8-97C8-000129760CBE Â ©
O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] - KB888111WXPSP2 Â ©
O42 - Logiciel: correctif pour Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] - KB954550-v5 Â ©
O42 - Logiciel: MAGIX Audio Cleanic 2007 deluxe 8.0.1.0 (F) - (. .MAGIX AG) [HKLM] - MAGIX Audio Cleanic 2007 deluxe F Â ©
O42 - Logiciel: Version Malwarebytes Anti-Malware 2.1.8.1057 - (. .Malwarebytes Corporation) [HKLM] - Malwarebytes Anti-Malware_is1 Â ©
O42 - Logiciel: MSN - (...) [HKLM] - MSNINST
O42 - Logiciel: OmniPage Pro 9.0 - (...) [HKLM] - OmniPagePro9.0DeinstKey
O42 - Logiciel: proDAD Heroglyph 2.5 - (...) [HKLM] - proDAD Heroglyph-2.5
O42 - Logiciel: proDAD Vitascene 1.0 - (...) [HKLM] - proDAD Vitascene 1.0
O42 - Logiciel: SFR - Kit de connexion - (.SFR.) [HKLM] - SFR_Kit Â ©
O42 - Logiciel: VLC media player - (. .VideoLAN) [HKLM] - VLC media player Â ©
O42 - Logiciel: Microsoft Kernel-Mode Driver Framework 1.9 Feature Pack - (. .Microsoft Corporation) [HKLM] - Wdf01009 Â ©
O42 - Logiciel: application Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] - WgaNotify Â ©
O42 - Logiciel: Windows Media Format Runtime - (...) [HKLM] - Windows Media Format Runtime
O42 - Logiciel: Windows XP Service PACKA 3 - (. .Microsoft Corporation) [HKLM] - Windows XP Service Â ©
O42 - Logiciel: XML Paper Specification composants partagés Language Pack 1.0 - (. .Microsoft Corporation) [HKLM] - XPSEPSCLP Â ©
O42 - Logiciel: Adobe XMP DVA Panneaux CS3 - (.adobe Systems Incorporated.) [HKLM] - {0224CACC-994D-45F8-B973-D65056EA9C2F} ©
O42 - Logiciel: Adobe Réunion Démarrer Bridge - (. .adobe Systems Incorporated) [HKLM] - {08B32819-6EEF-4057-AEDA-5AB681A36A23} Â ©
O42 - Logiciel: Studio 11 - (. .Pinnacle Systems) [HKLM] - {110B1ADF-2EAE-4E8F-B501-D2A1E6D8ED9D} Â ©
O42 - Logiciel: Adobe Setup - (. .adobe Systems Incorporated) [HKLM] - {1628F6BD-5ED1-4FD1-B90F-C106AF4E00F0} Â ©
O42 - Logiciel: Adobe WinSoft Linguistique Plugin - (. .adobe Systems Incorporated) [HKLM] - {184CE391-7E0E-4C63-9935-D7A10EDFD3C6} Â ©
O42 - Logiciel: Adobe After Effects CS3 Presets - (. .adobe Systems Incorporated) [HKLM] - {193EAFD0-1BAF-4FB4-B18F-79D5D6A4B285} Â ©
O42 - Logiciel: barre d'outils Google pour Internet Explorer - (...) [HKLM] - {} 2318C2B1-4965-11d4-9B18-009027A5CD4F
O42 - Logiciel: Adobe Stock Photos CS3 - (. .adobe Systems Incorporated) [HKLM] - {29E5EA97-5F74-4A57-B8B2-D4F169117183} Â ©
O42 - Logiciel: VCRedistSetup - (. .Nero AG) [HKLM] - {3921A67A-5AB1-4E48-9444-C71814CF3027} Â ©
O42 - Logiciel: Studio 11 Bonus DVD - (Systèmes .Pinnacle.) [HKLM] - {45A1BF92-700A-4408-B95E-79F462E3D67D} Â ©
O42 - Logiciel: Adobe CS3 Linguistique - (. .adobe Systems Incorporated) [HKLM] - {54793AA1-5001-42F4-ABB6-C364617C6078} Â ©
O42 - Logiciel: neroxml - (. .Nero AG) [HKLM] - {56C049BE-79E9-4502-BEA7-9754A3E60F9B} Â ©
O42 - Logiciel: Google Update Helper - (.Google Inc ..) [HKLM] - {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} Â ©
O42 - Logiciel: Skypeâ "¢ 7.11 - (.Skype Technologies SA.) [HKLM] - {6A0549A9-1B96-498C-ACBC-3943001FEB19} Â ©
O42 - Logiciel: Adobe toutes les polices - (. .adobe Systems Incorporated) [HKLM] - {6ABE0BEE-D572-4FE8-B434-9E72A289431B} Â ©
O42 - Logiciel: Adobe MotionPicture Color Files - (. .adobe Systems Incorporated) [HKLM] - {6B708481-748A-4EB4-97C1-CD386244FF77} Â ©
O42 - Logiciel: contenu AVS pour Acrobat et Flash - (.adobe Systems Incorporated.) [HKLM] - {6BBAA81D-6A7E-43AD-8889-2F002DCAAFDD} Â ©
O42 - Logiciel: Adobe Asset services CS3 - (. .adobe Systems Incorporated) [HKLM] - {6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61} Â ©
O42 - Logiciel: MSXML 4.0 SP2 Parser et SDK - (.Microsoft Corporation.) [HKLM] - {716E0306-8318-4364-8B8F-0CC4E9376BAC} Â ©
O42 - Logiciel: paramètres recommandés de couleurs Adobe UE - (.adobe Systems Incorporated.) [HKLM] - {73B5D990-04EA-4751-B10F-5534770B91F2} ©
O42 - Logiciel: Adobe Help Viewer CS3 - (. .adobe Systems Incorporated) [HKLM] - {7ACFB90E-8FD0-4397-AD3A-5195412623A3} Â ©
O42 - Logiciel: Adobe profils vidéo - (.adobe Systems Incorporated.) [HKLM] - {} 845A8DB9-8802-4FD3-9FE3-938A6C46A2EC Â ©
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] - {86493ADD-824d-4B8E-BD72-8C5DCDC52A71} Â ©
O42 - Logiciel: Adobe Device Central CS3 - (. .adobe Systems Incorporated) [HKLM] - {8D2BA474-F406-4710-9AE4-D4F22D21F0DD} Â ©
O42 - Logiciel: Samsung_MonSetup - (.Samsung.) [HKLM] - {8EA79DBF-D637-448A-89D6-410A087A4493} Â ©
O42 - Logiciel: Adobe Anchor service CS3 - (. .adobe Systems Incorporated) [HKLM] - {90176341-0A8B-4CCC-A78D-F862228A6B95} Â ©
O42 - Logiciel: USB Mass Storage Device Genesys - (. .Genesys Logic) [HKLM] - {959B7F35-2819-40C5-A0CD-3C53B5FCC935}
O42 - Logiciel: Adobe Bridge CS3 - (. .adobe Systems Incorporated) [HKLM] - {9C9824D9-9000-4373-A6A5-D0E5D4831394} Â ©
O42 - Logiciel: Adobe CMaps - (.adobe Systems Incorporated.) [HKLM] - {A2B242BD-FF8D-4840-9DAA-9170EABEC59C} ©
O42 - Logiciel: couleur Adobe - Photoshop spécifique - (. .adobe Systems Incorporated) [HKLM] - {A2D81E70-2A98-4A08-A628-94388B063C5E} Â ©
O42 - Logiciel: Paramètres PDF - (.adobe Systems Incorporated.) [HKLM] - {AC5B0C19-D851-42F4-BDA0-410ECF7F70A5} ©
O42 - Logiciel: Adobe Reader X (10.1.11) - Français - (. .adobe Systems Incorporated) [HKLM] - {AC76BA86-7AD7-1036-7B44-AA1000000001} Â ©
O42 - Logiciel: Adobe Camera Raw 4.0 - (. .adobe Systems Incorporated) [HKLM] - {B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C} Â ©
O42 - Logiciel: Adobe CS3 SING - (. .adobe Systems Incorporated) [HKLM] - {B671CBFD-4109-4D35-9252-3062D3CCB7B2} Â ©
O42 - Logiciel: Adobe CS3 BridgeTalk Plugin - (. .adobe Systems Incorporated) [HKLM] - {B73CFB12-C814-4638-AFFD-7E3AAFAF0B4E} Â ©
O42 - Logiciel: Adobe CS3 Langue par défaut - (. .adobe Systems Incorporated) [HKLM] - {B9B35331-B7E4-4E5C-BF4C-7BC87856124D} Â ©
O42 - Logiciel: Adobe Extension Manager CS3 - (. .adobe Systems Incorporated) [HKLM] - {} BE5F3842-8309-4754-92D5-83E02E6077A3 Â ©
O42 - Logiciel: Adobe ExtendScript Toolkit 2 - (. .adobe Systems Incorporated) [HKLM] - {C2D69781-F392-4118-A5A7-C7E9C38DBFC2} Â ©
O42 - Logiciel: Adobe CS3 WAS - (.adobe Systems Incorporated.) [HKLM] - {C5BD220A-EFE8-48A5-B70E-9503D535FACE} Â ©
O42 - Logiciel: REALTEK GbE et FE Ethernet PCI-E pilote NIC - (. .Realtek) [HKLM] - {C9BED750-1211-4480-B1A5-718A3BE15525} Â ©
O42 - Logiciel: Nero 8 - (. .Nero AG) [HKLM] - {C9FFC925-E27E-436E-A2DF-652324D51036} Â ©
O42 - Logiciel: CyberLink PowerDirector - (.CyberLink Corp ..) [HKLM] - {CB099890-1D5F-11D5-9EA9-0050BAE317E1} Â ©
O42 - Logiciel: Studio 11 Ultimate - (Systèmes .Pinnacle.) [HKLM] - {CC874CBB-BD87-4126-9465-AE73BB62D6E0} Â ©
O42 - Logiciel: Adobe Version Cue CS3 client - (.adobe Systems Incorporated.) [HKLM] - {D0DFF92A-492E-4C40-B862-A74A173C25C5} Â ©
O42 - Logiciel: Adobe PDF Library Files - (.adobe Systems Incorporated.) [HKLM] - {D2559B88-CC9D-4B48-81BB-F492BAA9C48C} Â ©
O42 - Logiciel: Adobe XMP Panneaux CS3 - (.adobe Systems Incorporated.) [HKLM] - {D5A31AB1-345D-47C7-A87B-036A669F6DF1} ©
O42 - Logiciel: couleur Adobe Paramètres communs - (. Systems Incorporated .adobe) [HKLM] - {DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9} Â ©
O42 - Logiciel: barre d'outils Google pour Internet Explorer - (.Google Inc ..) [HKLM] - {} DBEA1034-5882-4A88-8033-81C4EF0CFA29 Â ©
O42 - Logiciel: JA couleur Adobe Paramètres supplémentaires - (.adobe Systems Incorporated.) [HKLM] - {} DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029 ©
O42 - Logiciel: FoxTarot la version 5.1 - (. .Fabrice RENARD) [HKLM] - {DF3DD8E3-BD6C-4D57-B20d-3FED6D36716F} _is1 Â ©
O42 - Logiciel: Scan Manager 5.2 - (.ScanSoft, Inc ..) [HKLM] - {E0A1559B-9886-11D4-8D06-0050DA284A39} Â ©
O42 - Logiciel: Adobe Update Manager CS3 - (. .adobe Systems Incorporated) [HKLM] - {E69AE897-9E0B-485C-8552-7841F48D42D8} Â ©
O42 - Logiciel: Adobe InDesign CS3 Icône Handler - (. .adobe Systems Incorporated) [HKLM] - {EA7B3CC4-366D-4CF6-8350-FD7A7034116E} Â ©
O42 - Logiciel: Pinnacle Instant DVD Recorder - (...) [HKLM] - {EF781A5C-58F5-4BFD-87F9-E4F14D382F25}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp ..) [HKLM] - {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} Â ©
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] - {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} Â ©
O42 - Logiciel: Yahoo! bureau Connexion - (Systèmes .Pinnacle.) [HKLM] - {F9AEEC34-CF00-4CBD-9E36-DF9DC4002685} Â ©
O42 - Logiciel: Olympus Wave Player - (...) [HKLM] - {FB91E774-867B-4567-ACE7-8144EF036068}
O42 - Logiciel: Adobe Couleur NA Paramètres supplémentaires - (.adobe Systems Incorporated.) [HKLM] - {FF29A7E2-FF40-4D07-B7E4-2093DE59E10A} ©

--- \ HKCU et HKLM Software Clés (89) - 7s
HKLM \ SOFTWARE \ Acorn
HKLM \ SOFTWARE \ Adobe
HKLM \ SOFTWARE \ Ahead
HKLM \ SOFTWARE \ Apple Computer, Inc.
HKLM \ SOFTWARE \ Audible
HKLM \ Software SOFTWARE \ AVAST
HKLM \ SOFTWARE \ AviSynth
HKLM \ SOFTWARE \ C07ft5Y
HKLM \ SOFTWARE \ Caere Corp
HKLM \ SOFTWARE \ Canon
HKLM \ SOFTWARE \ COMODO
HKLM \ SOFTWARE \ Creative Tech
HKLM \ SOFTWARE \ CyberLink
HKLM \ SOFTWARE \ DivX
HKLM \ SOFTWARE \ DVC150
HKLM \ SOFTWARE \ DVDVideoSoft
HKLM \ SOFTWARE \ Multimédia FAST
HKLM \ SOFTWARE \ Gemplus
HKLM \ SOFTWARE \ Genesys Logic
HKLM \ SOFTWARE \ GNU
HKLM \ SOFTWARE \ Google
HKLM \ SOFTWARE \ HaaliMkx
HKLM \ SOFTWARE \ Hewlett-Packard
HKLM \ Software \ IM fournisseurs
HKLM \ SOFTWARE \ InstallShield
HKLM \ SOFTWARE \ Intel
HKLM \ SOFTWARE \ Macromedia
HKLM \ SOFTWARE \ Macrovision
HKLM \ SOFTWARE \ Magix
Anti-Malware de HKLM \ SOFTWARE \ Malwarebytes
HKLM \ SOFTWARE \ MovieBox USB
HKLM \ SOFTWARE \ Mozilla
HKLM \ SOFTWARE \ mozilla.org
HKLM \ Software \ MozillaPlugins
HKLM \ SOFTWARE \ Nero
HKLM \ SOFTWARE \ NeroDigital
HKLM \ SOFTWARE \ Neuf
HKLM \ SOFTWARE \ ODBC
HKLM \ SOFTWARE \ Olympus
Imagerie HKLM \ SOFTWARE \ Pegasus
HKLM \ SOFTWARE \ PegasusImaging
HKLM \ SOFTWARE \ Pinnacle Systems
HKLM \ SOFTWARE \ Piriform
HKLM \ SOFTWARE \ proDAD
HKLM \ Software \ groupes de programmes
HKLM \ SOFTWARE \ Realtek
HKLM \ SOFTWARE \ Realtek Semiconductor Corp.
HKLM \ Software \ RegisteredApplications
HKLM \ SOFTWARE \ RTLSetup
HKLM \ SOFTWARE \ Samsung
HKLM \ SOFTWARE \ Schlumberger
HKLM \ SOFTWARE \ sécurisé
HKLM \ SOFTWARE \ Skype
Logiciel HKLM \ SOFTWARE \ SmartSound
HKLM \ SOFTWARE \ VideoLAN
HKLM \ SOFTWARE \ Windows 3.1 État de la migration
HKCU \ SOFTWARE \ Adobe
HKCU \ SOFTWARE \ Ahead
HKCU \ SOFTWARE \ Apple Computer, Inc.
HKCU \ SOFTWARE \ AVAST Software
HKCU \ SOFTWARE \ Caere Corp
HKCU \ SOFTWARE \ Canon
HKCU \ SOFTWARE \ CyberLink
HKCU \ SOFTWARE \ DivXNetworks
HKCU \ SOFTWARE \ DVDVideoSoft
HKCU \ SOFTWARE \ FreeTime
HKCU \ SOFTWARE \ Gabest
HKCU \ SOFTWARE \ Systems Gadwin
HKCU \ SOFTWARE \ GNU
HKCU \ SOFTWARE \ Google
HKCU \ SOFTWARE \ Haali
HKCU \ SOFTWARE \ IM fournisseurs
HKCU \ SOFTWARE \ Intel
HKCU \ SOFTWARE \ Ligos
HKCU \ SOFTWARE \ Macromedia
HKCU \ SOFTWARE \ Magix
HKCU \ SOFTWARE \ MozillaPlugins
HKCU \ SOFTWARE \ Nero
HKCU \ SOFTWARE \ Netscape
HKCU \ SOFTWARE \ ODBC
HKCU \ SOFTWARE \ Olympus
HKCU \ SOFTWARE \ Pinnacle Systems
HKCU \ SOFTWARE \ Piriform
HKCU \ SOFTWARE \ QtProject
HKCU \ SOFTWARE \ Realtek
HKCU \ SOFTWARE \ Skype
HKCU \ SOFTWARE \ VOB
HKCU \ SOFTWARE \ Yahoo
HKCU \ SOFTWARE \ ZebHelpProcess Helper

--- \ Contenu des Dossiers Programmes (159) - 5s
O43 - CFD: 19/09/2015 08:08:44 - [] D - C: \ Program Files \ Adobe
O43 - CFD: 03/08/2015 17:50:03 - [] D - C: \ Program Files \ AdorageI-GfxDatas
O43 - CFD: 03/08/2015 17:49:43 - [] D - C: \ Program Files \ AdorageI-SAL
O43 - CFD: 14/08/2015 14:55:10 - [] D - C: Software \ Program Files \ AVAST
O43 - CFD: 12/09/2015 16:00:37 - [] D - C: \ Program Files \ Bonjour
O43 - CFD: 06/08/2015 15:05:56 - [] D - C: \ Program Files \ Caere
O43 - CFD: 06/08/2015 15:09:40 - [] D - C: \ Program Files \ Canon
O43 - CFD: 19/09/2015 07:38:19 - [] D - C: \ Program Files \ CCleaner
O43 - CFD: 2015/08/01 09:49:50 - [0] D - C: \ Program Files \ COMPLUS Applications
O43 - CFD: 09/08/2015 10:49:21 - [] D - C: \ Program Files \ CyberLink
O43 - CFD: 03/10/2015 18:12:01 - [] D - C: \ Program Files \ DVDVideoSoft
O43 - CFD: 03/10/2015 20:26:57 - [] D - C: \ Program Files \ Fichiers Communs
O43 - CFD: 15/08/2015 12:58:40 - [] D - C: \ Program Files \ FormatFactory
O43 - CFD: 14/08/2015 15:39:56 - [] D - C: \ Program Files \ FoxTarot5
O43 - CFD: 18/09/2015 19:56:59 - [] D - C: \ Program Files \ PDF to Word Converter gratuit
O43 - CFD: 25/09/2015 10:13:27 - [] D - C: \ Program Files \ FreeCodecPack
O43 - CFD: 2015/09/18 11:37:30 - [] D - C: \ Program Files \ Systems Gadwin
O43 - CFD: 03/10/2015 20:39:21 - [] D - C: \ Program Files \ Google
O43 - CFD: 06/08/2015 15:46:54 - [] D - C: \ Program Files \ Hewlett-Packard
O43 - CFD: 14/08/2015 20:42:40 - [] D - C: \ Program Files \ hp deskjet 940c série
O43 - CFD: 28/09/2015 10:03:19 - [] HD - C: \ Program Files \ InstallShield Installation Information
O43 - CFD: 01/08/2015 09:58:15 - [] D - C: \ Program Files \ Intel
O43 - CFD: 19/09/2015 07:25:21 - [] D - C: \ Program Files \ Internet Explorer
O43 - CFD: 14/08/2015 15:22:17 - [] D - C: \ Program Files \ Jeux de cartes
O43 - CFD: 03/10/2015 19:38:26 - [] D - C: \ Program Files \ Malwarebytes Anti-Malware
O43 - CFD: 14/08/2015 11:04:46 - [] D - C: \ Program Files \ Messenger
O43 - CFD: 01/08/2015 09:53:01 - [] D - C: \ Program Files \ Microsoft FrontPage
O43 - CFD: 03/08/2015 20:48:02 - [] D - C: \ Program Files \ Microsoft Office
O43 - CFD: 2015/08/03 20:48:13 - [] D - C: \ Program Files \ Microsoft Works
O43 - CFD: 03/08/2015 20:47:37 - [] D - C: \ Program Files \ Microsoft.NET
O43 - CFD: 13/08/2015 16:19:20 - [] D - C: \ Program Files \ MonitorDriver
O43 - CFD: 14/08/2015 10:56:45 - [] D - C: \ Program Files \ Movie Maker
O43 - CFD: 25/09/2015 12:50:00 - [] D - C: \ Program Files \ MSBuild
O43 - CFD: 03/08/2015 18:17:24 - [] D - C: \ Program Files \ MSN
O43 - CFD: 01/08/2015 09:49:26 - [] D - C: \ Program Files \ MSN Gaming Zone
O43 - CFD: 01/08/2015 09:57:50 - [0] D - C: \ Program Files \ MSXML 4.0
O43 - CFD: 13/08/2015 14:29:03 - [] D - C: \ Program Files \ Nero
O43 - CFD: 13/08/2015 16:51:40 - [] D - C: \ Program Files \ NetMeeting
O43 - CFD: 28/09/2015 10:03:41 - [] D - C: \ Program Files \ Olympus
O43 - CFD: 2015/08/01 09:49:34 - [] D - C: \ Program Files \ Services en ligne
O43 - CFD: 14/08/2015 10:57:02 - [] D - C: \ Program Files \ Outlook Express
O43 - CFD: 2015/08/15 13:11:40 - [] D - C: \ Program Files \ PicosmosTools
O43 - CFD: 03/08/2015 17:09:03 - [] D - C: \ Program Files \ Pinnacle
O43 - CFD: 03/08/2015 17:59:39 - [] D - C: \ Program Files \ proDAD
O43 - CFD: 03/08/2015 18:14:14 - [] D - C: \ Program Files \ QuickTime
O43 - CFD: 14/08/2015 13:47:46 - [] D - C: \ Program Files \ Rainlendar2
O43 - CFD: 01/08/2015 10:00:34 - [] D - C: \ Program Files \ Realtek
O43 - CFD: 2015/09/25 12:49:07 - [] D - C: \ Program Files \ Reference Assemblies
O43 - CFD: 01/08/2015 09:51:25 - [] D - C: \ Program Files \ Services en ligne
O43 - CFD: 03/08/2015 18:25:02 - [] D - C: \ Program Files \ SFR
O43 - CFD: 25/09/2015 14:02:29 - [] RD - C: \ Program Files \ Skype
O43 - CFD: 09/08/2015 10:47:44 - [] D - C: \ Program Files \ SmartSound Software
O43 - CFD: 01/08/2015 09:55:58 - [0] HD - C: \ Program Files \ Uninstall information
O43 - CFD: 03/08/2015 19:55:46 - [] D - C: \ Program Files \ VideoLAN
O43 - CFD: 13/08/2015 16:52:59 - [] D - C: \ Program Files \ Windows Media Player
O43 - CFD: 13/08/2015 16:51:37 - [] D - C: \ Program Files \ Windows NT
O43 - CFD: 01/08/2015 09:51:29 - [0] HD - C: \ Program Files \ WindowsUpdate
O43 - CFD: 01/08/2015 09:53:01 - [] D - C: \ Program Files \ Xerox
O43 - CFD: 13/08/2015 16:53:08 - [] RD - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Accessoires
O43 - CFD: 12/09/2015 16:06:50 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Adobe CS3 Master Collection
O43 - CFD: 06/08/2015 15:06:10 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Applications Caere
O43 - CFD: 14/08/2015 14:56:58 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ AVAST Software
O43 - CFD: 06/08/2015 15:09:43 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Canon ScanGear Toolbox 3.1
O43 - CFD: 03/10/2015 18:12:00 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ DVDVideoSoft
O43 - CFD: 01/10/2015 09:04:43 - [] RD - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ DÃ © marrage
O43 - CFD: 14/08/2015 15:39:56 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ FoxTarot
O43 - CFD: 03/10/2015 20:41:15 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Google Chrome
O43 - CFD: 06/08/2015 15:47:04 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ de Hewlett-Packard
O43 - CFD: 03/08/2015 19:33:07 - [] RD - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Jeux
O43 - CFD: 14/08/2015 15:22:18 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Jeux de cartes
O43 - CFD: 19/09/2015 10:37:22 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ MAGIX
O43 - CFD: 03/10/2015 19:38:28 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Malwarebytes Anti-Malware
O43 - CFD: 03/08/2015 20:48:38 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Microsoft Office
O43 - CFD: 13/08/2015 14:30:40 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Nero 8
O43 - CFD: 28/09/2015 10:03:41 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Olympus Wave Player
O43 - CFD: 03/08/2015 17:06:17 - [] RD - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Outils d'administration
O43 - CFD: 03/08/2015 17:08:48 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Pinnacle Hollywood FX 6.0 pour Studio 11
O43 - CFD: 03/08/2015 17:58:09 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ proDAD
O43 - CFD: 03/08/2015 18:13:41 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ QuickTime
O43 - CFD: 14/08/2015 13:47:53 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Rainlendar2
O43 - CFD: 01/08/2015 10:05:31 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Realtek
O43 - CFD: 03/08/2015 18:25:07 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ SFR
O43 - CFD: 25/09/2015 14:02:29 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Skype
O43 - CFD: 03/08/2015 17:09:03 - [] D - C: \ Documents and Settings \ All Users \ Menu DÃ © marrer \ Programmes \ Studio 11
O43 - CFD: 19/09/2015 09:53:36 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ Adobe
O43 - CFD: 03/08/2015 18:13:05 - [] D - C: \ Documents and Settings \ All Users \ Application Data Computer \ Pomme
O43 - CFD: 14/08/2015 14:54:39 ??- [] D - C: \ Documents and Settings \ All Users \ Application Data Software \ AVAST
O43 - CFD: 14/08/2015 14:48:05 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ Comodo
O43 - CFD: 14/08/2015 14:50:28 - [0] D - C: \ Documents and Settings \ All Users \ Application Data \ Comodo Downloader
O43 - CFD: 03/08/2015 18:43:28 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ CyberLink
O43 - CFD: 12/09/2015 14:41:48 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ FLEXnet
O43 - CFD: 12/09/2015 10:48:01 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ Google
O43 - CFD: 10/08/2015 08:53:06 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ MAGIX
O43 - CFD: 03/10/2015 19:38:22 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ Malwarebytes
O43 - CFD: 19/09/2015 09:39:56 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ McAfee
O43 - CFD: 18/09/2015 19:55:46 - [] SD - C: \ Documents and Settings \ All Users \ Application Data \ Microsoft
O43 - CFD: 19/09/2015 11:38:20 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ Microsoft Aide
O43 - CFD: 13/08/2015 14:29:04 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ Nero
O43 - CFD: 03/08/2015 17:10:00 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ Pinnacle
O43 - CFD: 03/08/2015 17:03:08 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ Pinnacle Studio
O43 - CFD: 25/09/2015 14:05:25 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ Skype
O43 - CFD: 09/08/2015 10:47:44 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ SmartSound Software Inc
O43 - CFD: 01/09/2015 15:16:55 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ Temp
O43 - CFD: 14/08/2015 12:03:51 - [] D - C: \ Documents and Settings \ All Users \ Application Data \ Windows Genuine Advantage
O43 - CFD: 19/09/2015 08:08:44 - [] D - C: \ Program Files \ Fichiers Communs \ Adobe
O43 - CFD: 06/08/2015 15:06:28 - [] D - C: \ Program Files \ Fichiers Communs \ Caere
O43 - CFD: 03/08/2015 20:47:59 - [] D - C: \ Program Files \ Fichiers Communs \ DESIGNER
O43 - CFD: 03/10/2015 18:11:32 - [] D - C: \ Program Files \ Fichiers Communs \ DVDVideoSoft
O43 - CFD: 28/09/2015 10:01:28 - [] D - C: \ Program Files \ Fichiers Communs \ InstallShield
O43 - CFD: 12/09/2015 15:55:25 - [] D - C: \ Program Files \ Fichiers Communs \ Macrovision Shared
O43 - CFD: 10/08/2015 08:53:15 - [] D - C: \ Program Files \ Fichiers Communs \ MAGIX partagée
O43 - CFD: 12/08/2015 13:41:44 - [] D - C: \ Program Files \ Fichiers Communs \ Microsoft Shared
O43 - CFD: 01/08/2015 09:50:46 - [] D - C: \ Program Files \ Fichiers Communs \ MSSOAP
O43 - CFD: 13/08/2015 14:29:41 - [] D - C: \ Program Files \ Fichiers Communs \ Nero
O43 - CFD: 01/08/2015 11:39:59 - [] D - C: \ Program Files \ Fichiers Communs \ ODBC
O43 - CFD: 01/08/2015 09:50:49 - [] D - C: \ Program Files \ Fichiers Communs \ Services
O43 - CFD: 25/09/2015 14:02:29 - [] D - C: \ Program Files \ Fichiers Communs \ Skype
O43 - CFD: 01/08/2015 11:39:56 - [] D - C: \ Program Files \ Fichiers Communs \ SpeechEngines
O43 - CFD: 13/08/2015 16:51:33 - [] D - C: \ Program Files \ Fichiers Communs \ System
O43 - CFD: 18/09/2015 10:04:18 - [] D - C: \ Documents and Settings \ Administrateur \ Application Data \ Adobe
O43 - CFD: 14/08/2015 14:57:24 - [] D - C: \ Documents and Software Settings \ Administrateur \ Application Data \ AVAST
O43 - CFD: 20/09/2015 06:26:11 - [] D - C: \ Documents and Settings \ Administrateur \ Application Data \ Canon
O43 - CFD: 03/08/2015 18:43:15 - [] D - C: \ Documents and Settings \ Administrateur \ Application Data \ CyberLink
O43 - CFD: 03/10/2015 18:12:26 - [] D - C: \ Documents and Settings \ Administrateur \ Application Data \ DVDVideoSoft
O43 - CFD: 18/09/2015 19:55:32 - [] D - C: \ Documents et données Settings \ Administrateur \ Application \ Free-PDF-to-Word.com
O43 - CFD: 18/09/2015 11:24:20 - [] D - C: \ Documents and Settings \ Administrateur \ Application Data \ Gadwin
O43 - CFD: 03/08/2015 18:13:52 - [] D - C: \ Documents and Settings \ Administrateur \ Application Data \ Google
O43 - CFD: 05/08/2015 15:18:18 - [0] D - C: \ Documents and Settings \ Administrateur \ Application Data \ Help
O43 - CFD: 01/08/2015 09:55:59 - [] D - C: \ Documents and Settings \ Administrateur \ Application Data \ Identities
O43 - CFD: 03/08/2015 16:59:46 - [] D - C: \ Documents et données Settings \ Administrateur \ Application \ InstallShield
O43 - CFD: 09/08/2015 08:50:11 - [] D - C: \ Documents and Settings \ Administrateur \ Application Data \ Macromedia
O43 - CFD: 29/08/2015 15:21:19 - [] D - C: \ Documents and Settings \ Administrateur \ Application Data \ MAGIX
O43 - CFD: 19/09/2015 11:38:21 - [] SD - C: \ Documents and Settings \ Administrateur \ Application Data \ Microsoft
O43 - CFD: 15/08/2015 07:20:40 - [] D - C: \ Documents and Settings Data \ Administrateur \ Application \ Mozilla
O43 - CFD: 13/08/2015 14:30:15 - [] D - C: \ Documents and Settings \ Administrateur \ Application Data \ Nero
O43 - CFD: 03/08/2015 17:59:39 - [] D - C: \ Documents and Settings \ Administrateur \ Application Data \ proDAD
O43 - CFD: 25/09/2015 10:13:12 - [] D - C: \ Documents et données Settings \ Administrateur \ Application \ RPEng
O43 - CFD: 04/10/2015 18:16:44 - [] D - C: \ Documents et données Settings \ Administrateur \ Application \ Skype
O43 - CFD: 03/10/2015 18:02:05 - [] D - C: \ Documents et données Settings \ Administrateur \ Application \ vlc
O43 - CFD: 04/10/2015 18:37:04 - [] D - C: \ Documents and Settings \ Administrateur \ Application Data \ ZHP
O43 - CFD: 19/09/2015 09:51:29 - [] D - C: \ Documents and Settings \ Administrateur \ Local Settings \ Application Data \ Adobe
O43 - CFD: 29/08/2015 14:22:17 - [] D - C: \ Documents and Settings \ Administrateur \ Local Settings \ Application Data \ Ahead
O43 - CFD: 19/09/2015 07:33:16 - [] D - C: \ Documents and Computer Settings \ Administrateur \ Local Settings \ Application Data \ Pomme
O43 - CFD: 18/08/2015 15:03:48 - [] D - C: \ Documents and Settings Data \ Administrateur \ Local Settings \ Application \ ApplicationHistory
O43 - CFD: 03/10/2015 18:41:29 - [0] D - C: \ Documents and Settings \ Administrateur \ Local Settings \ Application Data \ Deployment
O43 - CFD: 18/09/2015 11:24:20 - [] D - C: \ Documents and Settings \ Administrateur \ Local Settings \ Application Data \ Gadwin
O43 - CFD: 03/10/2015 20:39:21 - [] D - C: \ Documents and Settings \ Administrateur \ Local Settings \ Application Data \ Google
O43 - CFD: 05/08/2015 15:18:18 - [0] D - C: \ Documents and Settings \ Administrateur \ Local Settings \ Application Data \ Help
O43 - CFD: 13/08/2015 17:34:05 - [] D - C: \ Documents and Settings \ Administrateur \ Local Settings \ Application Data \ Identities
O43 - CFD: 18/09/2015 10:04:18 - [] D - C: \ Documents and Settings \ Administrateur \ Local Settings \ Application Data \ Microsoft
O43 - CFD: 03/08/2015 20:45:25 - [0] D - C: \ Documents and Settings \ Administrateur \ Local Settings \ Application Data \ Microsoft Aide
O43 - CFD: 15/08/2015 07:20:20 - [] D - C: \ Documents and Settings Data \ Administrateur \ Local Settings \ Application \ Mozilla
O43 - CFD: 25/09/2015 14:02:47 - [] D - C: \ Documents and Settings Data \ Administrateur \ Local Settings \ Application \ Skype
O43 - CFD: 18/09/2015 10:04:18 - [] D - C: \ Documents and Settings \ Administrateur \ Local Settings \ Application Data \ Temp
O43 - CFD: 14/08/2015 11:59:54 - [] RD - C: \ Documents and Settings \ Administrateur \ Menu DÃ © marrer \ Programmes \ Accessoires
O43 - CFD: 09/08/2015 10:47:36 - [] D - C: \ Documents and Settings \ Administrateur \ Menu DÃ © marrer \ Programmes \ CyberLink PowerDirector
O43 - CFD: 01/08/2015 11:39:35 - [] RD - C: \ Documents and Settings \ Administrateur \ Menu DÃ © marrer \ Programmes \ DÃ © marrage
O43 - CFD: 15/08/2015 12:58:40 - [] D - C: \ Documents and Settings \ Administrateur \ Menu DÃ © marrer \ Programmes \ FormatFactory
O43 - CFD: 18/09/2015 11:39:15 - [] D - C: \ Documents and Settings \ Administrateur \ Menu DÃ © marrer \ Programmes \ Systems Gadwin

--- \ Derniers Fichiers de Windows Dans Prefetcher crÃ © Ã de © (1) - 3s
O45 - LFCP: [MD5.38021C925EFA4D1B8014AABE9E02ACED] 2015/10/01 09:35:41 A - C: \ WINDOWS \ Prefetch \ BROWSERHELPERSINSTALLER.EXE-289AD998.pf => PUP.Optional.SearchDonkey

--- \ ShellIconOverlayIdentifiers (SIOI) (2) - 0s
O106 - SIOI: avast [00avast] - {472083B0-C522-11CF-8763-00608CC02F24}. (.AVAST Software - avast Shell Extension!.) - C: \ Program Files \ AVAST Software \ Avast \ ashShell.dll Â ©
O106 - SIOI: Fichiers hors connexion Menu [Fichiers hors connexion] - {750fdf0e-2a26-11d1-a3ea-080036587f03}. (.Microsoft Corporation - UI de cache Côté © client.) - C: \ WINDOWS \ system32 \ Cscui.dll Â ©

--- \ Enûma StartupReg de © ration des clÃ © (17) - 3s
O53 - SMSR: HKLM \ ... \ startupreg \ Adobe ARM [Key]. (.adobe Systems Incorporated - Adobe Reader et Acrobat Manager.) - C: \ Program Files \ Fichiers Communs \ Adobe \ ARM \ 1.0 \ AdobeARM.exe Â ©
O53 - SMSR: HKLM \ ... \ startupreg \ CCleaner surveillance [Key]. (.Piriform Ltd - CCleaner.) - C: \ Program Files \ CCleaner \ CCleaner.exe Â ©
O53 - SMSR: HKLM \ ... \ startupreg \ CTFMON.EXE [Key]. (.Microsoft Corporation - FCT Loader.) - C: \ WINDOWS \ system32 \ ctfmon.exe Â ©
O53 - SMSR: HKLM \ ... \ startupreg \ LLXScreenCut (32-bit) [Key]. (Systèmes .Gadwin - LLXScreenCut.) - E: \ Program Files (x86) \ Gadwin \ LLXScreenCut \ PrintScreen32.exe
O53 - SMSR: HKLM \ ... \ startupreg \ HotKeysCmds [Key]. (.Intel Corporation - Module hkcmd.) - C: \ WINDOWS \ system32 \ hkcmd.exe Â ©
O53 - SMSR: HKLM \ ... \ startupreg \ HPDJ Taskbar Utility [Key]. (.HP -.) - C: \ WINDOWS \ system32 \ spool \ drivers \ w32x86 \ 3 \ hpztsb04.exe Â ©
O53 - SMSR: HKLM \ ... \ startupreg \ IgfxTray [Key]. (.Intel Corporation - Module igfxTray.) - C: \ WINDOWS \ system32 \ igfxtray.exe Â ©
O53 - SMSR: HKLM \ ... \ startupreg \ {IndxStoreSvr_ 79662E04-7C6C-4d9f-84C7-88D8A56B10AA} [Key]. (.Nero AG - Nero Home.) - C: \ Program Files \ Fichiers Communs \ Nero \ Lib \ NMIndexStoreSvr.exe Â ©
O53 - SMSR: HKLM \ ... \ startupreg \ msmsgs [Key]. (.Microsoft Corporation - Windows Messenger.) - C: \ Program Files \ Messenger \ msmsgs.exe Â ©
O53 - SMSR: HKLM \ ... \ startupreg \ NBKeyScan [Key]. (.Nero AG - Nero BackItUp.) - C: \ Program Files \ Nero \ nero8 \ Nero BackItUp \ NBKeyScan.exe Â ©
O53 - SMSR: HKLM \ ... \ startupreg \ NeroFilterCheck [Key]. (.Nero AG - NeroCheck.) - C: \ Program Files \ Fichiers Communs \ Nero \ Lib \ NeroCheck.exe Â ©
O53 - SMSR: HKLM \ ... \ startupreg \ OmniPage [Key]. (.Caere Corporation - OCR Aware (32-bit).) - C: \ Program Files \ Caere \ OmniPagePro90 \ OPware32.exe
O53 - SMSR: HKLM \ ... \ startupreg \ Persistance [Key]. (.Intel Corporation - Module de persistance.) - C: \ WINDOWS \ system32 \ igfxpers.exe Â ©
O53 - SMSR: HKLM \ ... \ startupreg \ QuickTime Groupe [Key]. (.apple Computer, Inc. - QuickTime tâches.) - C: \ Program Files \ QuickTime \ qttask.exe Â ©
O53 - SMSR: HKLM \ ... \ startupreg \ Rainlendar2 [Key]. (.Copyright (C) de 2006 à 2014 Kimmo 'Rainy' Pekkola - Rainlendar2.) - C: \ Program Files \ Rainlendar2 \ Rainlendar2.exe
O53 - SMSR: HKLM \ ... \ startupreg \ RTHDCPL [Key]. (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) - Rthdcpl.exe (. Fichier .pas) ©
O53 - SMSR: HKLM \ ... \ startupreg \ swg [Key]. (.Google Inc. - GoogleToolbarNotifier.) - C: \ Program Files \ Google \ GoogleToolbarNotifier \ 1.2.911.3380 \ GoogleToolbarNotifier.exe Â ©

--- \ Liste des pilotes du systÃ¨me (101) - 18
O58 - SDL: 11/08/2015 16:03:56 A. (.Creative - Creative pilote WDM Audio 3D.) - C: \ WINDOWS \ system32 \ drivers \ Ambfilt.sys [1691480] ©
O58 - SDL: 13/04/2008 11:36:40 N. (.Advanced Micro Devices, Inc. - AMD Win2000 AGP Filter.) - C: \ WINDOWS \ system32 \ drivers \ amdagp.sys [43008] ©
O58 - SDL: 25/09/2015 09:15:44 A. (.AVAST Software - avast HWID!.) - C: \ WINDOWS \ system32 \ drivers \ aswHwid.sys [24016] ©
O58 - SDL: 25/09/2015 09:15:44 A. (! .AVAST Software - avast File System MiniFilter pour Windows 2.) - C: \ Windows \ System32 \ drivers \ aswMonFlt.sys [76000] ©
O58 - SDL: 25/09/2015 09:15:44 A. (! .AVAST Software - avast TDI Rediriger pilote.) - C: \ WINDOWS \ system32 \ drivers \ aswRdr.sys [55200] ©
O58 - SDL: 25/09/2015 09:15:44 A. (! .AVAST Software - avast Revert.) - C: \ WINDOWS \ system32 \ drivers \ aswRvrt.sys [49776] ©
O58 - SDL: 25/09/2015 09:15:29 A. (! .AVAST Software - avast virtualisation pilote.) - C: \ WINDOWS \ system32 \ drivers \ aswSnx.sys [789296] ©
O58 - SDL: 25/09/2015 09:15:44 A. (! .AVAST Software - avast auto module de protection.) - C: \ WINDOWS \ system32 \ drivers \ aswSP.sys [434184] ©
O58 - SDL: 25/09/2015 09:15:44 A. (! .AVAST Software - avast flux filtre.) - C: \ WINDOWS \ system32 \ drivers \ aswStmXP.sys [157888] ©
O58 - SDL: 25/09/2015 09:15:44 A. (! .AVAST Software - avast TDI pilote de filtre.) - C: \ WINDOWS \ system32 \ drivers \ aswTdi.sys [57888] ©
O58 - SDL: 25/09/2015 09:15:44 A. (.AVAST Software - avast VM moniteur!.) - C: \ WINDOWS \ system32 \ drivers \ aswVmm.sys [208664] ©
O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI WDM BT829 MiniDriver (A).) - C: \ Windows \ System32 \ drivers \ ati1btxx.sys [56623] ©
O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI spécialisés MVD VBI Codec.) - C: \ Windows \ System32 \ drivers \ ati1mdxx.sys [11615] ©
O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI spécialisés PCD VBI Codec.) - C: \ Windows \ System32 \ drivers \ ati1pdxx.sys [12047] ©
O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI Rage Theater Audio WDM Minidriver.) - C: \ Windows \ System32 \ drivers \ ati1raxx.sys [30671] ©
O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI Rage Theater WDM MiniDriver.) - C: \ WINDOWS \ system32 \ drivers \ ati1rvxx.sys [63663] ©
O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI WDM TV Son MiniDriver.) - C: \ Windows \ System32 \ drivers \ ati1snxx.sys [26367] ©
O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI WDM télétexte.) - C: \ Windows \ System32 \ drivers \ ati1ttxx.sys [21343] ©
O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI WDM tvtuner MiniDriver.) - C: \ Windows \ System32 \ drivers \ ati1tuxx.sys [36463] ©
O58 - SDL: 13/04/2008 09:34:20 N. (.ATI Technologies Inc. - ATI WDM CrossBar MiniDriver.) - C: \ Windows \ System32 \ drivers \ ati1xbxx.sys [29455] ©
O58 - SDL: 13/04/2008 09:34:20 N. (.ATI Technologies Inc. - ATI WDM TVAUDIO_CrossBar MiniDriver.) - C: \ Windows \ System32 \ drivers \ ati1xsxx.sys [34735] ©
O58 - SDL: 13/04/2008 18:55:32 N. (.ATI Technologies Inc. - Pilote de miniport ATI RAGE 128.) - C: \ Windows \ System32 \ drivers \ ati2mtaa.sys [327168] ©
O58 - SDL: 13/04/2008 18:55:34 N. (.ATI Technologies Inc. - Pilote de miniport ATI RAGE 128.) - C: \ Windows \ System32 \ drivers \ ati2mtag.sys [701440] ©
O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI WDM BT829 MiniDriver (A).) - C: \ Windows \ System32 \ drivers \ atinbtxx.sys [57856] ©
O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI spécialisés MVD VBI Codec RT2.) - C: \ WINDOWS \ system32 \ drivers \ atinmdxx.sys [13824] ©
O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI spécialisés PCD VBI Codec RT2.) - C: \ WINDOWS \ system32 \ drivers \ atinpdxx.sys [14336] ©
O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI Rage Theater Audio WDM Minidriver.) - C: \ Windows \ System32 \ drivers \ atinraxx.sys [52224] ©
O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI Rage Theater WDM MiniDriver RT2.) - C: \ WINDOWS \ system32 \ drivers \ atinrvxx.sys [104960] ©
O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI WDM TV Son MiniDriver.) - C: \ Windows \ System32 \ drivers \ atinsnxx.sys [28672] ©
O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI WDM télétexte.) - C: \ Windows \ System32 \ drivers \ atinttxx.sys [13824] ©
O58 - SDL: 13/04/2008 09:34:18 N. (.ATI Technologies Inc. - ATI WDM tvtuner MiniDriver.) - C: \ Windows \ System32 \ drivers \ atintuxx.sys [73216] ©
O58 - SDL: 13/04/2008 09:34:20 N. (.ATI Technologies Inc. - ATI WDM CrossBar MiniDriver.) - C: \ Windows \ System32 \ drivers \ atinxbxx.sys [31744] ©
O58 - SDL: 13/04/2008 09:34:20 N. (.ATI Technologies Inc. - ATI WDM TVAUDIO_CrossBar MiniDriver RT2.) - C: \ Windows \ System32 \ drivers \ atinxsxx.sys [63488] ©
O58 - SDL: 02/03/2006 14:00:00 A. (.RAVISENT Technologies Inc. - Pilote principale CineMaster C 1.2 WDM.) - C: \ Windows \ System32 \ drivers \ cinemst2.sys [262528] ©
O58 - SDL: 02/03/2006 14:00:00 A. (.Compaq Computer Corporation - Compaq PA-1 pilote Player.) - C: \ Windows \ System32 \ drivers \ cpqdap01.sys [11776] ©
O58 - SDL: 24/06/2002 06:31:30 RA. (.D-Link Corporation - D-Link DFE-538TX Adaptateur 10/100.) - C: \ Windows \ System32 \ drivers \ DLKRTS.SYS [45568] ©
O58 - SDL: 13/04/2008 19:05:08 A. (.Microsoft Corp., Veritas Software - Pilote de dÃ © marrage du Gestionnaire de disq.) - C: \ Windows \ System32 \ drivers \ dmboot.sys [800256] ©
O58 - SDL: 13/04/2008 19:05:14 A. (.Microsoft Corp., logiciel Veritas - Pilote E / S du Gestionnaire de disques NT.) - C: \ Windows \ System32 \ drivers \ Dmio.sys [154496] ©
O58 - SDL: 02/03/2006 14:00:00 A. (.Microsoft Corp., Veritas Software - NT Disk Manager démarrage pilote..) - C: \ Windows \ System32 \ drivers \ dmload.sys [5888] ©
O58 - SDL: 09/04/2001 19:17:58 A. (.OLYMPUS OPTICAL CO, LTD - DW90USB Pilote pour Windows 2000...) - C: \ Windows \ System32 \ drivers \ DW90USB.SYS [39096]
O58 - SDL: 2012/07/06 13:50:10 Une. (.GenesysLogic - GeneStor.) - C: \ Windows \ System32 \ drivers \ GeneStor.sys [56832] ©
O58 - SDL: 13/04/2008 09:36:06 N. (.Windows (R) Server 2003 fournisseur DDK - High Definition Audio Driver v1.0a Bus.) - C: \ WINDOWS \ system32 \ drivers \ hdaudbus.sys [144384]
O58 - SDL: 07/01/2005 17:07:16 N. (.Windows (R) Server 2003 fournisseur DDK - High Definition Audio Fonction Pilote v1.0a.) - C: \ WINDOWS \ system32 \ drivers \ Hdaudio.sys [145920]
O58 - SDL: 13/04/2008 11:23:50 N. (.Conexant Systems, Inc. - pilote WDM HSF_HWB2.) - C: \ Windows \ System32 \ drivers \ hsfbs2s2.sys [220032] ©
O58 - SDL: 13/04/2008 11:23:52 N. (.Conexant Systems, Inc. - HSF_CNXT pilote.) - C: \ WINDOWS \ system32 \ drivers \ hsfcxts2.sys [685056] ©
O58 - SDL: 13/04/2008 11:23:54 N. (.Conexant Systems, Inc. - HSF_DP pilote.) - C: \ WINDOWS \ system32 \ drivers \ hsfdpsp2.sys [1041536] ©
O58 - SDL: 2009/01/21 05:42:56 RA. (.Intel Corporation - Intel Graphics pilote miniport.) - C: \ WINDOWS \ system32 \ drivers \ igxpmp32.sys [6278560] ©
O58 - SDL: 08/06/2008 08:37:46 A. (.Ahead Software AG - miniport Nero ImageDrive SCSI.) - C: \ Windows \ System32 \ drivers \ imagedrv.sys [11304] ©
O58 - SDL: 08/06/2008 08:37:56 A. (.Ahead Software AG - Nero Image Server.) - C: \ Windows \ S

juju666 · Answer

Salut,
Pas de soucis pour le retard, par contre je n'ai nullement demandé de ZHPDiag ?! Je n'utilise pas cet outil d'ailleurs.

Relis les instructions. Et fourni le rapport demandé. 

Bien à toi

le Siberien · Answer

Désolé juju666, je ne sais pas pourquoi j'ai fait un rapport HPZDiag, trop préssé  de te répondre.
Je suis passé sur mon os seven car je n'arrive plus à ecrire  depuis que j'ai téléchargé le rapport sur  xp c'a va s'arranger après je pense.
Voici le lien de Adwcleaner
 AdwCleaner v5.010 - Rapport créé le 04/10/2015 à 19:18:17
# Mis à jour le 04/10/2015 par Xplode
# Base de données : 2015-10-04.3 [Serveur]
# Système d'exploitation : Microsoft Windows XP Service Pack 3 (x86)
# Nom d'utilisateur : Administrateur - PAUL
# Exécuté depuis : C:\Documents and Settings\Administrateur\Mes documents\Downloads\adwcleaner_5.010.exe
# Option : Scanner
# Support : http://toolslib.net/forum

 [ Services ] *****
 [ Dossiers ] *****

Dossier Trouvé : C:\Documents and Settings\Administrateur\Application Data\RPEng

 [ Fichiers ] *****

Fichier Trouvé : C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\h7czt54w.default\Extensions\{b64d9b05-48e1-4ceb-bf58-e0643994e900}.xpi
Fichier Trouvé : C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\hxxp_pstatic.kingtopdeals.com_0.localstorage
Fichier Trouvé : C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\hxxp_pstatic.kingtopdeals.com_0.localstorage-journal
Fichier Trouvé : C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\hxxps_www.tradeadexchange.com_0.localstorage
Fichier Trouvé : C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\hxxps_www.tradeadexchange.com_0.localstorage-journal

 [ DLLs ] *****
 [ Raccourcis ] *****
 [ Tâches planifiées ] *****
 [ Registre ] *****

Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{363F46BE-27B4-4C8D-99E7-B1E049B84376}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{3CCC052E-BDEE-408A-BEA7-90914EF2964B}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{525F116F-04AD-40A2-AE2F-A0C4E1AFEF98}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{61F47056-E400-43D3-AF1E-AB7DFFD4C4AD}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{90A9B7D2-3794-45EA-9E23-140E3938D2D9}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{9852A670-F845-491B-9BE6-EBD841B8A613}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{A753A1EC-973E-4718-AF8E-A3F554D45C44}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{ACE4747B-35BD-4E97-9DD7-1D4245B0695C}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{CE77C59C-CFD2-429F-868C-8B04D23F94CA}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{E2B98EEA-EE55-4E9B-A8C1-6E5288DF785A}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{F544E0F5-CA3C-47EA-A64D-35FCF1602396}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{02AFA80F-4BEE-41FD-8572-214B58A9EF90}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Clé Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A2D81E70-2A98-4A08-A628-94388B063C5E}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{cfd32d46-7d3f-483f-bace-7172aec5592d}

 [ Navigateurs ] *****

[C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Trouvée : hxxp://www.google.fr/?ctid=CT3318001&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP0D91D54D-7812-4A4C-9CB1-6F54348C12E8&SSPV=
[C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Trouvée : hxxp://astromenda.com/?f=7&a=ast_tgraduit_14_40_ie&cd=2XzuyEtN2Y1L1QzutDtDtByBtD0EtAyC0AyEtAtDyD0DtD0AtN0D0Tzu0StCtDtDyEtN1L2XzutAtFtBtFtCtFyCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCtBtCtC0CyB0BzztGtAyCtAzztG0B0D0EyEtG0EyBtByCtGyEtAyDyCtCyC0FyCyEzzyB0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DtCzz0C0EyD0AtGyCtA0E0CtGyEyB0FyBtGzztAtC0FtGtD0F0B0AyByCyEyD0AtDyEyE2Q&cr=45520239&ir=
[C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Trouvée : hxxp://astromenda.com/?f=7&a=ast_ggbc_14_40_ie&cd=2XzuyEtN2Y1L1QzutDtDtC0ByByBtByEyB0FtCyBtByE0AyEtN0D0Tzu0StCtDtDyCtN1L2XzutAtFtBtFtCtFyCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDtA0FtC0DtB0E0CtG0A0F0C0EtG0C0AzyyEtGyB0BtC0EtGtD0C0AtDzy0AtBtA0FyByBtC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtA0BtBzzyC0DyDtG0EyEyD0DtGyEyByEzytG0AtCyB0BtGzy0D0E0A0FtCzz0Fzz0BtD0F2Q&cr=360718047&ir=
[C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Trouvée : hxxp://astromenda.com/?f=7&a=ast_ggfc_14_40_ie&cd=2XzuyEtN2Y1L1QzutDtDtByBtD0EtAyC0AyEtAtDyD0DtD0AtN0D0Tzu0StCtDtDzztN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyCtBtCtC0CyB0BzztGtAyCtAzztG0B0D0EyEtG0EyBtByCtGyEtAyDyCtCyC0FyCyEzzyB0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DtCzz0C0EyD0AtGyCtA0E0CtGyEyB0FyBtGzztAtC0FtGtD0F0B0AyByCyEyD0AtDyEyE2Q&cr=813386991&ir=
[C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Trouvée : hxxp://astromenda.com/?f=7&a=ast_ggfc_14_40_ie&cd=2XzuyEtN2Y1L1QzutDtDtByBtD0EtAyC0AyEtAtDyD0DtD0AtN0D0Tzu0StCtDtDzztN1L2XzutAtFtBtFtCtFyCtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyCtBtCtC0CyB0BzztGtAyCtAzztG0B0D0EyEtG0EyBtByCtGyEtAyDyCtCyC0FyCyEzzyB0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DtCzz0C0EyD0AtGyCtA0E0CtGyEyB0FyBtGzztAtC0FtGtD0F0B0AyByCyEyD0AtDyEyE2Q&cr=847391344&ir=
[C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Trouvée : hxxp://isearch.omiga-plus.com/?type=hp&ts=1414246715&from=tugs&uid=ST380021A_3HV0SCQK
[C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Trouvée : hxxp://Vosteran.com/?f=7&a=vst_ggfc_14_50_ch&cd=2XzuyEtN2Y1L1QzutDtDtByBtD0EtAyC0AyEtAtDtA0EtDzztN0D0Tzu0StCtDyBtAtN1L2XzutAtFyCtFtCtDtFtCtDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCtDtA0EtCyC0FtBtGyCzyyEyBtG0C0FtCtBtGtB0A0B0AtGtAtCtC0C0AtAzytD0B0C0D0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0B0Czy0CzyyBtAtG0EzztD0BtGyE0DyE0EtGzy0C0EtDtGzztB0EtD0B0A0FyD0E0AyB0A2Q&cr=397589653&ir=
[C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Trouvée : hxxp://istart.webssearches.com/?type=hp&ts=1418302820&from=slb2&uid=ST380021A_3HV0SCQK
[C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Trouvée : eagomcfjiefffhpaejnlpjccikpipdoe
[C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Trouvée : hxxp://www.trovi.com/?gd=&ctid=CT3329707&octid=EB_ORIGINAL_CTID&ISID=MC78AAE5E-0508-4967-B180-BBD6CD114602&SearchSource=55&CUI=&UM=6&UP=SP3300B6EB-3CCE-4DCA-BE69-B94A0A9B311B&SSPV=

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [7045 octets] ##########

juju666 · Answer

Ok, vu.

Mais j'avais dit : 

Clique sur Scanner puis Nettoyer,  

Je répète : 

Clique sur Scanner puis Nettoyer, 

:-)

le siberien · Answer

Bonjour juju666
J'avais bien fait ce que tu m'avais dit mais le nettoyage était bloqué à la fin et je pensais que c'était terminé. 
Je viens de le refaire et il s'est à nouveau bloqué, il a fallu que je laisse tourner presque 5 minutes avant que ce soit fini.
Je joins le nouveau rapport qui est apparu, j'espere que ce sera le bon
# AdwCleaner v5.010 - Rapport créé le 05/10/2015 à 06:48:48
# Mis à jour le 04/10/2015 par Xplode
# Base de données : 2015-10-04.3 [Serveur]
# Système d'exploitation : Microsoft Windows XP Service Pack 3 (x86)
# Nom d'utilisateur : Administrateur - PAUL
# Exécuté depuis : C:\Documents and Settings\Administrateur\Mes documents\Downloads\adwcleaner_5.010 (2).exe
# Option : Nettoyer
# Support : http://toolslib.net/forum

 [ Services ] *****
 [ Dossiers ] *****
 [ Fichiers ] *****
 [ DLLs ] *****
 [ Raccourcis ] *****
 [ Tâches planifiées ] *****
 [ Registre ] *****
 [ Navigateurs ] *****

[-] [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Supprimé : hxxp://www.google.fr/?ctid=CT3318001&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SP0D91D54D-7812-4A4C-9CB1-6F54348C12E8&SSPV=
[-] [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Supprimé : hxxp://astromenda.com/?f=7&a=ast_tgraduit_14_40_ie&cd=2XzuyEtN2Y1L1QzutDtDtByBtD0EtAyC0AyEtAtDyD0DtD0AtN0D0Tzu0StCtDtDyEtN1L2XzutAtFtBtFtCtFyCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCtBtCtC0CyB0BzztGtAyCtAzztG0B0D0EyEtG0EyBtByCtGyEtAyDyCtCyC0FyCyEzzyB0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DtCzz0C0EyD0AtGyCtA0E0CtGyEyB0FyBtGzztAtC0FtGtD0F0B0AyByCyEyD0AtDyEyE2Q&cr=45520239&ir=
[-] [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Supprimé : hxxp://astromenda.com/?f=7&a=ast_ggbc_14_40_ie&cd=2XzuyEtN2Y1L1QzutDtDtC0ByByBtByEyB0FtCyBtByE0AyEtN0D0Tzu0StCtDtDyCtN1L2XzutAtFtBtFtCtFyCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDtA0FtC0DtB0E0CtG0A0F0C0EtG0C0AzyyEtGyB0BtC0EtGtD0C0AtDzy0AtBtA0FyByBtC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtA0BtBzzyC0DyDtG0EyEyD0DtGyEyByEzytG0AtCyB0BtGzy0D0E0A0FtCzz0Fzz0BtD0F2Q&cr=360718047&ir=
[-] [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Supprimé : hxxp://astromenda.com/?f=7&a=ast_ggfc_14_40_ie&cd=2XzuyEtN2Y1L1QzutDtDtByBtD0EtAyC0AyEtAtDyD0DtD0AtN0D0Tzu0StCtDtDzztN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyCtBtCtC0CyB0BzztGtAyCtAzztG0B0D0EyEtG0EyBtByCtGyEtAyDyCtCyC0FyCyEzzyB0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DtCzz0C0EyD0AtGyCtA0E0CtGyEyB0FyBtGzztAtC0FtGtD0F0B0AyByCyEyD0AtDyEyE2Q&cr=813386991&ir=
[-] [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Supprimé : hxxp://astromenda.com/?f=7&a=ast_ggfc_14_40_ie&cd=2XzuyEtN2Y1L1QzutDtDtByBtD0EtAyC0AyEtAtDyD0DtD0AtN0D0Tzu0StCtDtDzztN1L2XzutAtFtBtFtCtFyCtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyCtBtCtC0CyB0BzztGtAyCtAzztG0B0D0EyEtG0EyBtByCtGyEtAyDyCtCyC0FyCyEzzyB0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DtCzz0C0EyD0AtGyCtA0E0CtGyEyB0FyBtGzztAtC0FtGtD0F0B0AyByCyEyD0AtDyEyE2Q&cr=847391344&ir=
[-] [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Supprimé : hxxp://isearch.omiga-plus.com/?type=hp&ts=1414246715&from=tugs&uid=ST380021A_3HV0SCQK
[-] [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Supprimé : hxxp://Vosteran.com/?f=7&a=vst_ggfc_14_50_ch&cd=2XzuyEtN2Y1L1QzutDtDtByBtD0EtAyC0AyEtAtDtA0EtDzztN0D0Tzu0StCtDyBtAtN1L2XzutAtFyCtFtCtDtFtCtDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCtDtA0EtCyC0FtBtGyCzyyEyBtG0C0FtCtBtGtB0A0B0AtGtAtCtC0C0AtAzytD0B0C0D0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0B0Czy0CzyyBtAtG0EzztD0BtGyE0DyE0EtGzy0C0EtDtGzztB0EtD0B0A0FyD0E0AyB0A2Q&cr=397589653&ir=
[-] [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Supprimé : hxxp://istart.webssearches.com/?type=hp&ts=1418302820&from=slb2&uid=ST380021A_3HV0SCQK
[-] [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Supprimé : eagomcfjiefffhpaejnlpjccikpipdoe
[-] [C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Supprimé : hxxp://www.trovi.com/?gd=&ctid=CT3329707&octid=EB_ORIGINAL_CTID&ISID=MC78AAE5E-0508-4967-B180-BBD6CD114602&SearchSource=55&CUI=&UM=6&UP=SP3300B6EB-3CCE-4DCA-BE69-B94A0A9B311B&SSPV=



:: Paramètres Winsock réinitialisés

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [4706 octets] ##########

juju666 · Answer

Salut,
Bah oui, tant qu'il n'a pas indiqué clairement qu'il a terminé, c'est parce qu'il n'a pas terminé. :)

Bien lu, j'aimerais savoir si tu as réinitialisé tes navigateurs ? 
Est-ce que les pus continuent ?

A+

le siberien · Answer

Bonsoir juju666
J'ai réinitialiser Internet et Google et j'ai supprimé les modules complémentaires, je ne suis plus averti par avast oiu malware d'une  présence suspecte et mon pc va nettement mieux, je peux écrire mes réponses et mes fichiers s'ouvrent facilement sans bloquer pour le moment

juju666 · Answer

Super :)

Tu peux relancer AdwCleaner et cliquer sur Désinstaller.

Lire Les PUPs/LPIs pour ne plus te faire avoir à l'avenir : https://www.malekal.com/adwares-pup-protection/ 
 
Je passe le sujet en résolu. 

Bon surf et prudence ;)

Je dois avoir un virus

9 réponses

Discussions similaires

Newsletters