Seeearch ... Impossible à enlever

C'est pas en installant ZHP et Malwarebytes que tu vas y arriver ... ;)
Si j'ai bien compris, quand tu lance ton navigateur (Firefox 5), la page d'accueil c'est Seearch. Installe Google Desktop, cherche le ficher et supprime-le. Puis change de page d'accueil Firefox...
La prochaine fois que t'installe un logiciel, pense à décocher les cases publicitaires...

Non justement il n'y avais pas de cases publicitaire et même en supprimant VLC
Mais Merci je vais essayer ce que vous m'avez dit

OK désolé j'avais mal compris. Tu l'as téléchargé où VLC ?

@Pacsou,

Tu as des barres d'outils inutiles et infectieuses, des adwares et surement des traces d'un rogue (faux antivirus)

J'aivu que tu as utilisé égalemenr AD-remover peux-tu poster ce rapport C:\Ad-Report-SCAN[1].txt

Tu vas faire d'abord ceci:

- Télécharge sur le bureau RogueKiller de Tigzy
- Quitte tous tes programmes en cours
- Sous Vista/Seven , clique droit -> lancer en tant qu'administrateur
- Sinon lance simplement RogueKiller.exe
- Lorsque demandé, tape 1 [SCAN] et valide
- Un rapport (RKreport.txt) a du se créer sur le bureau, poste-le.

* Note : Si le programme a été bloqué, ne pas hésiter à essayer plusieurs fois. Si cela ne passe toujours pas , (cela peut arriver), renommer RogueKiller.exe en Winlogon.exe

Smart

Le rapport de RKreport :
http://www.cijoint.fr/cjlink.php?file=cj201106/cijeUUj0Pq.txt

Et le Rapport de AD-R :

http://www.cijoint.fr/cjlink.php?file=cj201106/cij4UZIUyv.rtf

OK.

Relance RogueKiller et choisis l'option 2 et poste le rapport

Relance AD-Remover et choisis Nettoyer et poste le rapport.

Tu peux coller les rapports directement dans ta réponse

Smart
"Si tu n'as pas d'ambitions, tu t'installes au bord de la chute" (Kundera)

Rapport RogueKiller :
RogueKiller V5.2.4 [23/06/2011] par Tigzy
contact sur https://www.luanagames.com/index.fr.html
mail: tigzyRK<at>gmail<dot>com
Remontees: https://www.luanagames.com/index.fr.html

Systeme d'exploitation: Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Demarrage : Mode normal
Utilisateur: Anais [Droits d'admin]
Mode: Suppression -- Date : 23/06/2011 20:05:05

Processus malicieux: 2
[SUSP PATH] msadm.dll -- C:\ProgramData\Megamedia\Megakey\msadm.dll -> UNLOADED
[SUSP PATH] msadm.dll -- C:\ProgramData\Megamedia\Megakey\msadm.dll -> UNLOADED

Entrees de registre: 5
[SUSP PATH] HKCU\[...]\Run : cacaoweb ("C:\Users\Anais\AppData\Roaming\cacaoweb\cacaoweb.exe" -noplayer) -> DELETED
[SUSP PATH] HKCU\[...]\Run : Megakey (C:\Users\Anais\AppData\Local\Megamedia\Megakey\Megakey.exe /Tray) -> DELETED
[HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> REPLACED (2)
[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

Fichier HOSTS:

Termine : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt

Et maintenant le rapport Ad-remover

Smart
"Si tu n'as pas d'ambitions, tu t'installes au bord de la chute" (Kundera)

Excusez moi j'ai eu un petit soucis de bureau
Rapport de AD-R :

======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [3]) -> Lancé à 20:39:53 le 23/06/2011, Mode normal

Microsoft Windows 7 Édition Familiale Premium Service Pack 1 (X86)
Anais@ANAIS-PC (Acer Aspire M1201)

============== ACTION(S) ==============

(!) -- Fichiers temporaires supprimés.

============== SCAN ADDITIONNEL ==============

**** Mozilla Firefox Version [5.0 (fr)] ****

HKCU_MozillaPlugins\@megamedia/Megakey (x)
Components\browsercomps.dll (Mozilla Foundation)
HKCU_Extensions|{1D3DB383-DB45-45b2-9F46-91218CA2CBCB} - C:\Users\Anais\AppData\Local\Megamedia\Megakey\{1D3DB383-DB45-45b2-9F46-91218CA2CBCB}

-- C:\Users\Anais\AppData\Roaming\Mozilla\FireFox\Profiles\c0xcfafn.default --
Extensions\cacaoweb@cacaoweb.org (cacaoweb)
Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} (Flagfox)
Extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc} (Vuze Remote Community Toolbar)
Searchplugins\BearShareWebSearch.xml ( hxxp://search.bearshare.com/web?src=ffb&systemid=2&q={searchTerms}/)
User.js - browser.startup.homepage, hxxp://www.seeearch.com/
Prefs.js - browser.download.lastDir, C:\\Users\\Anais\\Pictures
Prefs.js - browser.search.defaultenginename, Yahoo
Prefs.js - browser.search.selectedEngine, Yahoo
Prefs.js - browser.startup.homepage, hxxp://www.seeearch.com/
Prefs.js - browser.startup.homepage_override.buildID, 20110615151330
Prefs.js - browser.startup.homepage_override.mstone, rv:5.0
Prefs.js - keyword.URL, hxxp://fr.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=244506&p=

========================================

**** Internet Explorer Version [8.0.7601.17514] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKCU_URLSearchHooks|{ba14329e-9550-4989-b3f2-9732e92d17cc} (x)
HKCU_URLSearchHooks|{D0D4D607-4E08-49A2-B5E0-DDFDFEAACCDF} (x)
HKCU_SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} - "?" (?)
HKCU_SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69} - "Web Search" (hxxp://search.bearshare.com/web?src=ieb&systemid=2&q={searchTerms})
HKLM_SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69} - "Web Search" (hxxp://search.bearshare.com/web?src=ieb&systemid=2&q={searchTerms})
HKCU_Toolbar\WebBrowser|{1FDA7DDD-25CE-4034-9D5B-38A120A14218} (x)
HKLM_Toolbar|{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} (x)
HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll)
HKLM_Toolbar|{1FDA7DDD-25CE-4034-9D5B-38A120A14218} (x)
HKCU_ElevationPolicy\{83FE00CC-498E-4e11-8CDE-DDC10296597C} - C:\Users\Anais\AppData\Local\Megamedia\Megakey\Megakey.exe (Megamedia Ltd.)
HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\System32\wpcer.exe (x)
HKLM_ElevationPolicy\{08FF730A-494F-4cba-AA0B-E4F1D44715F9} - C:\Program Files\Norton Internet Security\Engine\18.1.0.37\symerr.exe (x)
HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\System32\winfxdocobj.exe (x)
HKLM_ElevationPolicy\{5F17E524-3447-4c7d-8E5F-4EFF31CDE3B7} - C:\Program Files\DivX\DivX Plus Web Player\DDMService.exe (x)
HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x)
BHO\{2DA14D1D-AE74-4A74-A0FE-C79504755DB8} - "TBSB06155 Class" () (x)
BHO\{77F4E711-789B-447F-9614-96759B2F83C6} - "MegaIeHelperBHO Class" (C:\Users\Anais\AppData\Local\Megamedia\Megakey\MegaIeHelper.dll)
BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 68 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 19 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 23/06/2011 20:06:03 (12338 Octet(s))
C:\Ad-Report-CLEAN[2].txt - 23/06/2011 20:38:41 (455 Octet(s))
C:\Ad-Report-CLEAN[3].txt - 23/06/2011 20:39:55 (4605 Octet(s))
C:\Ad-Report-SCAN[1].txt - 22/06/2011 02:00:27 (14559 Octet(s))

Fin à: 20:41:15, 23/06/2011

============== E.O.F ==============

Pourquoi as-tu passé 3fois AD-Remover en mode "nettoyer"
Peux-tu poster ce rapport C:\Ad-Report-CLEAN[1].txt

Smart

Je ne sais pas , car aprés que mon ordi se soit eteinds , le nettoyage a recommencé
Rapport de AD-R :

======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 20:05:55 le 23/06/2011, Mode normal

Microsoft Windows 7 Édition Familiale Premium Service Pack 1 (X86)
Anais@ANAIS-PC (Acer Aspire M1201)

============== ACTION(S) ==============

Dossier supprimé: C:\Users\Anais\AppData\Roaming\Mozilla\FireFox\Profiles\c0xcfafn.default\conduit
Dossier supprimé: C:\Users\Anais\AppData\Roaming\Mozilla\FireFox\Profiles\c0xcfafn.default\ConduitEngine
Dossier supprimé: C:\Users\Anais\AppData\Local\Conduit
Dossier supprimé: C:\Users\Anais\AppData\LocalLow\Conduit

(!) -- Fichiers temporaires supprimés.

-- Fichier ouvert: C:\Users\Anais\AppData\Roaming\Mozilla\FireFox\Profiles\c0xcfafn.default\Prefs.js --
Ligne supprimée: user_pref("CT2504091.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT250...
Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/897164/892962/FR", "\"0\"")...
Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/FR", "\"0\"")...
Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2504091", ...
Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=ct2504091", ...
Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo...
Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc...
Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo...
Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local...
Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\...
Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3...
Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3....
Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2504091",...
Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63...
Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2504091/CT2504091...
Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/ct2504091/CT2504091...
Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en-us", "\"...
Ligne supprimée: user_pref("CommunityToolbar.EngineHiddenByUser", true);
Ligne supprimée: user_pref("CommunityToolbar.EngineOwner", "CT2504091");
Ligne supprimée: user_pref("CommunityToolbar.EngineOwnerGuid", "{ba14329e-9550-4989-b3f2-9732e92d17cc}");
Ligne supprimée: user_pref("CommunityToolbar.EngineOwnerToolbarId", "vuze_remote");
Ligne supprimée: user_pref("CommunityToolbar.IsEngineShown", false);
Ligne supprimée: user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Ligne supprimée: user_pref("CommunityToolbar.OriginalEngineOwner", "CT2504091");
Ligne supprimée: user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{ba14329e-9550-4989-b3f2-9732e92d17cc}");
Ligne supprimée: user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "vuze_remote");
Ligne supprimée: user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://www.questscan.com/?tmp=nemo_resul...
Ligne supprimée: user_pref("CommunityToolbar.ToolbarsList", "ConduitEngine,CT2504091");
Ligne supprimée: user_pref("CommunityToolbar.ToolbarsList2", "CT2504091");
Ligne supprimée: user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Fri May 27 2011 20:04:28 GMT+02...
Ligne supprimée: user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Ligne supprimée: user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Tue Jun 21 2011 17:14:40 GMT+0200");
Ligne supprimée: user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Ligne supprimée: user_pref("CommunityToolbar.alert.locale", "en");
Ligne supprimée: user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Ligne supprimée: user_pref("CommunityToolbar.alert.loginLastCheckTime", "Tue Jun 21 2011 17:14:32 GMT+0200");
Ligne supprimée: user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Ligne supprimée: user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Ligne supprimée: user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Ligne supprimée: user_pref("CommunityToolbar.alert.showTrayIcon", false);
Ligne supprimée: user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Ligne supprimée: user_pref("CommunityToolbar.alert.userId", "3b94acaa-b023-480e-94f6-c856f30ba902");
Ligne supprimée: user_pref("CommunityToolbar.globalUserId", "6e8df828-38a4-4b6b-9f23-a9291c0aaa40");
Ligne supprimée: user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Ligne supprimée: user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Ligne supprimée: user_pref("ConduitEngine.AppTrackingLastCheckTime", "Fri Jun 10 2011 12:12:41 GMT+0200");
Ligne supprimée: user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Fri May 27 2011 20:04:27 GMT+0200");
Ligne supprimée: user_pref("ConduitEngine.FirstServerDate", "05/27/2011 21");
Ligne supprimée: user_pref("ConduitEngine.FirstTime", true);
Ligne supprimée: user_pref("ConduitEngine.FirstTimeFF3", true);
Ligne supprimée: user_pref("ConduitEngine.HasUserGlobalKeys", true);
Ligne supprimée: user_pref("ConduitEngine.HideEngineAfterRestart", true);
Ligne supprimée: user_pref("ConduitEngine.Initialize", true);
Ligne supprimée: user_pref("ConduitEngine.InitializeCommonPrefs", true);
Ligne supprimée: user_pref("ConduitEngine.InstalledDate", "Fri May 27 2011 20:04:28 GMT+0200");
Ligne supprimée: user_pref("ConduitEngine.IsMulticommunity", false);
Ligne supprimée: user_pref("ConduitEngine.IsOpenThankYouPage", false);
Ligne supprimée: user_pref("ConduitEngine.IsOpenUninstallPage", true);
Ligne supprimée: user_pref("ConduitEngine.LanguagePackLastCheckTime", "Fri May 27 2011 20:04:28 GMT+0200");
Ligne supprimée: user_pref("ConduitEngine.LastLogin_3.3.3.2", "Fri May 27 2011 20:04:27 GMT+0200");
Ligne supprimée: user_pref("ConduitEngine.PublisherContainerWidth", 0);
Ligne supprimée: user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Ligne supprimée: user_pref("ConduitEngine.SettingsLastCheckTime", "Fri May 27 2011 20:04:25 GMT+0200");
Ligne supprimée: user_pref("ConduitEngine.UserID", "UN52295360951352038");
Ligne supprimée: user_pref("ConduitEngine.engineLocale", "fr");
Ligne supprimée: user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Fri May 27 2011 20:04:27 GMT+0200");
Ligne supprimée: user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Fri May 27 2011 20:04:30 GMT+0200");
Ligne supprimée: user_pref("ConduitEngine.initDone", true);
Ligne supprimée: user_pref("ConduitEngine.isAppTrackingManagerOn", true);
Ligne supprimée: user_pref("extensions.enabledItems", "toolbar@ask.com:3.11.3.15590,{d10d0bf8-f5b5-c8b4-a8b2-2b9879e0...
-- Fichier Fermé --

Clé supprimée: HKLM\Software\Conduit
Clé supprimée: HKLM\Software\Freeze.com
Clé supprimée: HKCU\Software\Conduit
Clé supprimée: HKCU\Software\DataMngr
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}

Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}

============== SCAN ADDITIONNEL ==============

**** Mozilla Firefox Version [5.0 (fr)] ****

HKCU_MozillaPlugins\@megamedia/Megakey (x)
Components\browsercomps.dll (Mozilla Foundation)
HKCU_Extensions|{1D3DB383-DB45-45b2-9F46-91218CA2CBCB} - C:\Users\Anais\AppData\Local\Megamedia\Megakey\{1D3DB383-DB45-45b2-9F46-91218CA2CBCB}

-- C:\Users\Anais\AppData\Roaming\Mozilla\FireFox\Profiles\c0xcfafn.default --
Extensions\cacaoweb@cacaoweb.org (cacaoweb)
Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} (Flagfox)
Extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc} (Vuze Remote Community Toolbar)
Searchplugins\BearShareWebSearch.xml ( hxxp://search.bearshare.com/web?src=ffb&systemid=2&q={searchTerms}/)
User.js - browser.startup.homepage, hxxp://www.seeearch.com/
Prefs.js - browser.download.lastDir, C:\\Users\\Anais\\Pictures
Prefs.js - browser.search.defaultenginename, Yahoo
Prefs.js - browser.search.selectedEngine, Yahoo
Prefs.js - browser.startup.homepage, hxxp://www.seeearch.com/
Prefs.js - browser.startup.homepage_override.buildID, 20110615151330
Prefs.js - browser.startup.homepage_override.mstone, rv:5.0
Prefs.js - keyword.URL, hxxp://fr.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=244506&p=

========================================

**** Internet Explorer Version [8.0.7601.17514] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKCU_URLSearchHooks|{ba14329e-9550-4989-b3f2-9732e92d17cc} (x)
HKCU_URLSearchHooks|{D0D4D607-4E08-49A2-B5E0-DDFDFEAACCDF} (x)
HKCU_SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} - "?" (?)
HKCU_SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69} - "Web Search" (hxxp://search.bearshare.com/web?src=ieb&systemid=2&q={searchTerms})
HKLM_SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69} - "Web Search" (hxxp://search.bearshare.com/web?src=ieb&systemid=2&q={searchTerms})
HKCU_Toolbar\WebBrowser|{1FDA7DDD-25CE-4034-9D5B-38A120A14218} (x)
HKLM_Toolbar|{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} (x)
HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll)
HKLM_Toolbar|{1FDA7DDD-25CE-4034-9D5B-38A120A14218} (x)
HKCU_ElevationPolicy\{83FE00CC-498E-4e11-8CDE-DDC10296597C} - C:\Users\Anais\AppData\Local\Megamedia\Megakey\Megakey.exe (Megamedia Ltd.)
HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\System32\wpcer.exe (x)
HKLM_ElevationPolicy\{08FF730A-494F-4cba-AA0B-E4F1D44715F9} - C:\Program Files\Norton Internet Security\Engine\18.1.0.37\symerr.exe (x)
HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\System32\winfxdocobj.exe (x)
HKLM_ElevationPolicy\{5F17E524-3447-4c7d-8E5F-4EFF31CDE3B7} - C:\Program Files\DivX\DivX Plus Web Player\DDMService.exe (x)
HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x)
BHO\{2DA14D1D-AE74-4A74-A0FE-C79504755DB8} - "TBSB06155 Class" () (x)
BHO\{77F4E711-789B-447F-9614-96759B2F83C6} - "MegaIeHelperBHO Class" (C:\Users\Anais\AppData\Local\Megamedia\Megakey\MegaIeHelper.dll)
BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 68 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 16 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 23/06/2011 20:06:03 (12132 Octet(s))
C:\Ad-Report-SCAN[1].txt - 22/06/2011 02:00:27 (14559 Octet(s))

Fin à: 20:06:38, 23/06/2011

============== E.O.F ==============

OK. Relance AD-Remover et choisis "désinstaller"

Relance ZHPDiag et clique sur la flèche verte pour installer la mise à jour. Refais un scan et poste le rapport via cijoint

Smart

AD-R a été désinstallé

Rapport ZHPDiag aprés la mise à jour :

Rapport de ZHPDiag v1.27.2346 par Nicolas Coolman, Update du 23/06/2011
Run by Anais at 24/06/2011 11:50:06
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html

---\\ Web Browser
MSIE: Internet Explorer v8.0.7601.17514
MFIE: Mozilla Firefox 5.0 v (Defaut)

---\\ System Information
Windows 7 Home Premium Edition, 32-bit Service Pack 1 (Build 7601)
Processor: x86 Family 16 Model 6 Stepping 2, AuthenticAMD
Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 1791 MB (45% free)
System Restore: Activé (Enable)
System drive C: has 15 GB (28%) free of 54 GB

---\\ Logged in mode
Computer Name: ANAIS-PC
User Name: Anais
All Users Names: HomeGroupUser$, Anais, Administrateur,
Unselected Option: O45,O61,O62,O65,O66,O82
Logged in as Administrator

---\\ Environnement Variables
%AppData%=C:\Users\Anais\AppData\Roaming
%LocalAppData%=C:\Users\Anais\AppData\Local
%StartMenu%=C:\Users\Anais\AppData\Roaming\Microsoft\Windows\Start Menu

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 15 Go of 54 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 10 Go of 81 Go)
E:\ CD-ROM drive (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
J:\ Floppy drive, Flash card reader, USB Key (Not Inserted)

---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoStartMenuSubFolder: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoResolveSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK

---\\ Recherche particulière de fichiers génériques
[MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 06:30:54.) -- C:\Windows\Explorer.exe [2616320]
[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 02:14:45.) -- C:\Windows\system32\Wininit.exe [96256]
[MD5.2CA020EACDC6DDB2BEA89FEA02C90945] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.22/04/2011 20:10:01.) -- C:\Windows\system32\wininet.dll [981504]
[MD5.6D13E1406F50C66E2A95D97F22C47560] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.20/11/2010 13:17:54.) -- C:\Windows\system32\Winlogon.exe [286720]
[MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 02:26:15.) -- C:\Windows\system32\drivers\atapi.sys [21584]
[MD5.81189C3D7763838E55C397759D49007A] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.11/03/2011 06:39:00.) -- C:\Windows\system32\drivers\ntfs.sys [1211264]

---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/552
~ Mes musiques (My Musics) : 1/2
~ Mes Videos (My Videos) : 1/8
~ Mes Favoris (My Favorites) : 2/18
~ Mes Documents (My Documents) : 9/101
~ Mon Bureau (My Desktop) : 1/37
~ Menu demarrer (Programs) : 6/22
~ Dossier utilisateur (AppData) : 51/1640

---\\ Processus lancés
[MD5.4C6898F15701AE7C41775C14E423FE25] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe [3459712]
[MD5.635538786A1C04FCB9EF009DE0BE7DEB] - (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [3370296]
[MD5.01BC447DAC92D664BBA0A569E6D5715B] - (.Pas de propriétaire - KiesPDLR.) -- C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [13824]
[MD5.569E547273C25B019054A12A40400ECE] - (.OpenOffice.org - OpenOffice.org 3.2.) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe [11318784]
[MD5.4B723F33D7331F20E06F3A2FD76EC1D5] - (.OpenOffice.org - OpenOffice.org 3.2.) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin [11312128]
[MD5.6C9CD3ECBA6732661C8BBE37A877A2BD] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [924632]
[MD5.4486AD32BB05628967695FCA1BADD46E] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [16856]
[MD5.A80C173AC5C75706BB74AE4D78F2A53D] - (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmplayer.exe [164864]
[MD5.6CB68ED83F4318B185BCD941C06F7D81] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [660992]

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\Anais\AppData\Roaming\Mozilla\Firefox\Profiles\c0xcfafn.default\prefs.js
M3 - MFPP: Plugins - [Anais] -- C:\Users\Anais\AppData\Roaming\Mozilla\Firefox\Profiles\c0xcfafn.default\searchplugins\BearShareWebSearch.xml
M3 - MFPP: Plugins - [Anais] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_26 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
M0 - MFSP: prefs.js [Anais - c0xcfafn.default] http://ww10.seeearch.com
M2 - MFEP: prefs.js [Anais - c0xcfafn.default\cacaoweb@cacaoweb.org] [] cacaoweb v1.0.15 (.http://www.cacaoweb.org/
M2 - MFEP: prefs.js [Anais - c0xcfafn.default\{1018e4d6-728f-4b20-ad56-37578a4de76b}] [] Flagfox v4.1.4 (.Dave Garrett.)
M2 - MFEP: prefs.js [Anais - c0xcfafn.default\{ba14329e-9550-4989-b3f2-9732e92d17cc}] [] Vuze Remote Community Toolbar v3.5.0.12 (.Conduit Ltd..)

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKUS\S-1-5-21-674506431-2845913022-1992234994-1002\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} . (...) (No version) -- (.not file.)
R3 - URLSearchHook: (no name) - {D0D4D607-4E08-49A2-B5E0-DDFDFEAACCDF} . (...) (No version) -- (.not file.)
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1

---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe

---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: TBSB06155 - {2DA14D1D-AE74-4A74-A0FE-C79504755DB8} Clé orpheline
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll

---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: (no name) - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} . (...) -- (.not file.)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O3 - Toolbar: IE Toolbar - {1FDA7DDD-25CE-4034-9D5B-38A120A14218} . (...) -- (.not file.)

---\\ ---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [avast5] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\avastUI.exe
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [ares] . (.Ares Development Group - Ares p2p for windows.) -- C:\Program Files\Ares\Ares.exe
O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent, Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe
O4 - HKCU\..\Run: [KiesHelper] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\KiesHelper.exe
O4 - HKCU\..\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
O4 - HKCU\..\Run: [KiesPDLR] . (.Pas de propriétaire - KiesPDLR.) -- C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKCU\..\Run: [MegakeyUpdater] C:\Users\Anais\AppData\Local\Megamedia\Megakey\MegakeyUpdater.exe (.not file.)
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-21-674506431-2845913022-1992234994-1002\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKUS\S-1-5-21-674506431-2845913022-1992234994-1002\..\Run: [ares] . (.Ares Development Group - Ares p2p for windows.) -- C:\Program Files\Ares\Ares.exe
O4 - HKUS\S-1-5-21-674506431-2845913022-1992234994-1002\..\Run: [uTorrent] . (.BitTorrent, Inc. - µTorrent.) -- C:\Program Files\uTorrent\uTorrent.exe
O4 - HKUS\S-1-5-21-674506431-2845913022-1992234994-1002\..\Run: [KiesHelper] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\KiesHelper.exe
O4 - HKUS\S-1-5-21-674506431-2845913022-1992234994-1002\..\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
O4 - HKUS\S-1-5-21-674506431-2845913022-1992234994-1002\..\Run: [KiesPDLR] . (.Pas de propriétaire - KiesPDLR.) -- C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKUS\S-1-5-21-674506431-2845913022-1992234994-1002\..\Run: [MegakeyUpdater] C:\Users\Anais\AppData\Local\Megamedia\Megakey\MegakeyUpdater.exe (.not file.)
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - Global Startup: C:\Users\Anais\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk . (...) -- C:\Program Files\OpenOffice.org 3\program\quickstart.exe

---\\ ---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\Anais\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Anais\Desktop\Disque local.lnk . (...) -- F:\ (.not file.)
O4 - Global Startup: C:\Users\Anais\Desktop\Free FLV Converter.lnk . (.Koyote Soft.) -- C:\Program Files\Free FLV Converter\FreeFLVConverter.exe
O4 - Global Startup: C:\Users\Anais\Desktop\Glary Utilities.lnk . (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities\Integrator.exe
O4 - Global Startup: C:\Users\Anais\Desktop\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Anais\Desktop\Liens vers doc à irina.lnk . (...) -- \\Maxime-pc\k
O4 - Global Startup: C:\Users\Anais\Desktop\MBRCheck.lnk . (...) -- C:\Program Files\ZHPDiag\mbrcheck.exe
O4 - Global Startup: C:\Users\Anais\Desktop\Mes documents.lnk . (...) -- D:\
O4 - Global Startup: C:\Users\Anais\Desktop\Mon disque réseau.lnk . (...) -- \\Maxime-pc\h
O4 - Global Startup: C:\Users\Anais\Desktop\musique.lnk . (...) -- A:\musique (.not file.)
O4 - Global Startup: C:\Users\Anais\Desktop\Public.lnk . (...) -- \\Maxime-pc\j
O4 - Global Startup: C:\Users\Anais\Desktop\Remote Control PC - Host.lnk . (.Remote-Control-PC.com.) -- C:\Program Files\Remote Control PC\apc_host.exe
O4 - Global Startup: C:\Users\Anais\Desktop\ZHPDiag.lnk . (.Nicolas Coolman.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe
O4 - Global Startup: C:\Users\Anais\Desktop\ZHPFix.lnk . (.Nicolas Coolman.) -- C:\Program Files\ZHPDiag\ZHPFix.exe
O4 - Global Startup: C:\Users\Anais\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Anais\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Samsung Kies.lnk . (.Samsung.) -- C:\Program Files\Samsung\Kies\Kies.exe
O4 - Global Startup: C:\Users\Anais\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk . (.BitTorrent, Inc..) -- C:\Program Files\uTorrent\uTorrent.exe

---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll

---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://active.macromedia.com/flash2/cabs/swflash.cab

---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{2E1243D2-49E2-4610-A2C5-875D833D6A95}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{2E1243D2-49E2-4610-A2C5-875D833D6A95}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CS2\Services\Tcpip\..\{2E1243D2-49E2-4610-A2C5-875D833D6A95}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 89.2.0.1 89.2.0.2

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.

---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\system32\atiesrxx.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: FsUsbExService (FsUsbExService) . (.Teruten - FsUsbDevice.) - C:\Windows\system32\FsUsbExService.exe
O23 - Service: RCP-Host (RCP-Host) . (.Remote-Control-PC.com - Remote Control PC www.remote-control-pc.com.) - C:\Program Files\Remote Control PC\apc_host.exe

---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)

---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GlaryInitialize.job
[MD5.6745EF9F67D02E1BDDE0D3A1E4C9E7C8] [APT] [GlaryInitialize] (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities\initialize.exe
[MD5.00000000000000000000000000000000] [APT] [Java Update Scheduler] (...) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe (.not file.)
[MD5.4B16082F7031C6677423336209D2CBD6] [APT] [{EBC6DDF6-B650-4B67-95BD-E04605547204}] (...) -- D:\Data.....Life\Games.....Magic\GTA-ViceCity\gta-vc 5 .exe
[MD5.00000000000000000000000000000000] [APT] [{ED48E999-458B-45ED-9429-B92DBA721A73}] (...) -- D:\Fichiers Recus\Limewire\Ares\Ares.exe (.not file.)

---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\system32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\system32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys

---\\ Logiciels installés (O42)
O42 - Logiciel: Akamai NetSession Interface - (.Pas de propriétaire.) [HKLM] -- Akamai
O42 - Logiciel: EPSON SX110 Series Printer Uninstall - (.SEIKO EPSON Corporation.) [HKLM] -- EPSON SX110 Series
O42 - Logiciel: Free FLV Converter V 6.98.0 - (.Koyote Soft.) [HKLM] -- Free FLV Converter_is1
O42 - Logiciel: Glary Utilities 2.31.0.1098 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1
O42 - Logiciel: Java(TM) 6 Update 26 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF}
O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.0.1200 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 - (.Microsoft Corporation.) [HKLM] -- {FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack
O42 - Logiciel: Mozilla Firefox 5.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 5.0 (x86 fr)
O42 - Logiciel: MyFreeCodec - (.Pas de propriétaire.) [HKCU] -- MyFreeCodec
O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM] -- {266517E6-D866-439D-919C-B8B1A52E6080}
O42 - Logiciel: Remote Control PC 4.9.2.0 - (.Remote-Control-PC.com.) [HKLM] -- {1897E915-A158-4306-A788-FE77888439AD}
O42 - Logiciel: SAMSUNG USB Driver for Mobile Phones - (.SAMSUNG Electronics Co., Ltd..) [HKLM] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44}
O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- InstallShield_{758C8301-2696-4855-AF45-534B1200980A}
O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- {758C8301-2696-4855-AF45-534B1200980A}
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2446708
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2478663
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2518870
O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2478663
O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2518870
O42 - Logiciel: avast! Free Antivirus - (.AVAST Software.) [HKLM] -- avast
O42 - Logiciel: µTorrent - (.Pas de propriétaire.) [HKLM] -- uTorrent

---\\ HKCU & HKLM Software Keys
[HKCU\Software\4Media]
[HKCU\Software\AC3filter]
[HKCU\Software\ALWIL Software]
[HKCU\Software\AVAST Software]
[HKCU\Software\Antanda]
[HKCU\Software\AppDataLow\Software\MarkAny]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow]
[HKCU\Software\Ares]
[HKCU\Software\BearShare]
[HKCU\Software\BitTorrent]
[HKCU\Software\Canneverbe Limited]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CoreVorbis]
[HKCU\Software\DivX]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\GlarySoft]
[HKCU\Software\Haali]
[HKCU\Software\JavaSoft]
[HKCU\Software\MONOGRAM]
[HKCU\Software\Macromedia]
[HKCU\Software\Magnet]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Myfree Codec]
[HKCU\Software\Netscape]
[HKCU\Software\Norton]
[HKCU\Software\OpenOffice.org]
[HKCU\Software\PhotoFiltre]
[HKCU\Software\Policies]
[HKCU\Software\River Past]
[HKCU\Software\Samsung]
[HKCU\Software\Trolltech]
[HKCU\Software\TuneUp]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\cacaoweb]
[HKCU\Software\ej-technologies]
[HKCU\Software\madFlac]
[HKLM\Software\4Media]
[HKLM\Software\ALWIL Software]
[HKLM\Software\AMD]
[HKLM\Software\ATI Technologies]
[HKLM\Software\AVAST Software]
[HKLM\Software\Aeria Games]
[HKLM\Software\BrowserChoice]
[HKLM\Software\Bunndle]
[HKLM\Software\Canneverbe Limited]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\DivX]
[HKLM\Software\EPSON]
[HKLM\Software\GNU]
[HKLM\Software\Google]
[HKLM\Software\HaaliMkx]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\MP3Torpedo]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\OpenOffice.org]
[HKLM\Software\Policies]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SAMSUNG]
[HKLM\Software\Sonic]
[HKLM\Software\Sun Microsystems]
[HKLM\Software\TuneUp]
[HKLM\Software\W3i]
[HKLM\Software\Windows]
[HKLM\Software\instinno]
[HKLM\Software\magnet]
[HKLM\Software\mozilla.org]

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 08/03/2011 - 04:52:22 - [94376080] ----D- C:\Program Files\4Media
O43 - CFD: 24/06/2011 - 11:48:30 - [527371] ----D- C:\Program Files\Ad-Remover
O43 - CFD: 16/01/2011 - 15:10:54 - [163471687] ----D- C:\Program Files\Alwil Software
O43 - CFD: 27/05/2011 - 20:04:46 - [1015808] ----D- C:\Program Files\Ares
O43 - CFD: 23/06/2011 - 14:16:00 - [119158496] ----D- C:\Program Files\Common Files
O43 - CFD: 28/01/2011 - 18:36:46 - [168] ----D- C:\Program Files\CPUID
O43 - CFD: 22/02/2011 - 22:47:28 - [1295375] ----D- C:\Program Files\DivX
O43 - CFD: 22/06/2011 - 02:13:16 - [83226644] ----D- C:\Program Files\DVD Maker
O43 - CFD: 15/01/2011 - 13:52:36 - [0] -SH-D- C:\Program Files\Fichiers communs
O43 - CFD: 23/06/2011 - 14:02:18 - [14076907] ----D- C:\Program Files\Free FLV Converter
O43 - CFD: 22/02/2011 - 22:35:12 - [37850] ----D- C:\Program Files\Free Offers from Freeze.com
O43 - CFD: 28/01/2011 - 18:38:34 - [19491854] ----D- C:\Program Files\Glary Utilities
O43 - CFD: 25/01/2011 - 19:16:06 - [17563050] ----D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 22/06/2011 - 02:13:16 - [4616801] ----D- C:\Program Files\Internet Explorer
O43 - CFD: 23/06/2011 - 12:10:38 - [90783819] ----D- C:\Program Files\Java
O43 - CFD: 15/01/2011 - 14:13:40 - [16295712] ----D- C:\Program Files\JRE
O43 - CFD: 14/03/2011 - 02:58:26 - [36864] ----D- C:\Program Files\K-Lite Codec Pack
O43 - CFD: 22/06/2011 - 02:04:18 - [7566403] ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD: 14/07/2009 - 09:49:32 - [147813426] ----D- C:\Program Files\Microsoft Games
O43 - CFD: 17/01/2011 - 04:01:18 - [15715] ----D- C:\Program Files\Microsoft.NET
O43 - CFD: 21/06/2011 - 19:45:26 - [34238443] ----D- C:\Program Files\Mozilla Firefox
O43 - CFD: 14/07/2009 - 06:52:32 - [25757] ----D- C:\Program Files\MSBuild
O43 - CFD: 25/03/2011 - 08:02:30 - [10980822] ----D- C:\Program Files\MyFree Codec
O43 - CFD: 15/01/2011 - 14:13:40 - [386500926] ----D- C:\Program Files\OpenOffice.org 3
O43 - CFD: 14/07/2009 - 06:52:32 - [39159041] ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 24/05/2011 - 21:29:12 - [6147014] ----D- C:\Program Files\Remote Control PC
O43 - CFD: 25/01/2011 - 19:17:54 - [218784831] ----D- C:\Program Files\Samsung
O43 - CFD: 14/07/2009 - 06:53:24 - [0] --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 12/04/2011 - 12:11:28 - [399736] ----D- C:\Program Files\uTorrent
O43 - CFD: 09/03/2011 - 20:52:06 - [47593972] ----D- C:\Program Files\Win7codecs
O43 - CFD: 22/06/2011 - 02:13:14 - [3050496] ----D- C:\Program Files\Windows Defender
O43 - CFD: 22/06/2011 - 02:13:16 - [7013496] ----D- C:\Program Files\Windows Journal
O43 - CFD: 22/06/2011 - 02:13:18 - [6181376] ----D- C:\Program Files\Windows Mail
O43 - CFD: 22/06/2011 - 02:13:16 - [6604034] ----D- C:\Program Files\Windows Media Player
O43 - CFD: 15/01/2011 - 13:52:36 - [12197556] ----D- C:\Program Files\Windows NT
O43 - CFD: 22/06/2011 - 02:13:16 - [4417800] ----D- C:\Program Files\Windows Photo Viewer
O43 - CFD: 22/06/2011 - 02:13:16 - [189952] ----D- C:\Program Files\Windows Portable Devices
O43 - CFD: 22/06/2011 - 02:13:16 - [6831100] ----D- C:\Program Files\Windows Sidebar
O43 - CFD: 24/06/2011 - 11:50:22 - [7508841] ----D- C:\Program Files\ZHPDiag
O43 - CFD: 23/06/2011 - 21:03:20 - [17953404] ----D- C:\Program Files\Common Files\Akamai
O43 - CFD: 23/06/2011 - 12:11:08 - [1004255] ----D- C:\Program Files\Common Files\Java
O43 - CFD: 16/01/2011 - 15:11:10 - [48389549] ----D- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 22/02/2011 - 22:47:26 - [459184] ----D- C:\Program Files\Common Files\PX Storage Engine
O43 - CFD: 14/07/2009 - 04:37:06 - [2702] ----D- C:\Program Files\Common Files\Services
O43 - CFD: 14/07/2009 - 04:37:06 - [41103783] ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 15/01/2011 - 20:20:04 - [10245619] ----D- C:\Program Files\Common Files\System
O43 - CFD: 27/05/2011 - 19:24:32 - [3957] ----D- C:\ProgramData\1F2EB
O43 - CFD: 08/03/2011 - 04:52:22 - [8192] ----D- C:\ProgramData\4Media
O43 - CFD: 16/01/2011 - 15:10:54 - [240300178] ----D- C:\ProgramData\Alwil Software
O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Application Data
O43 - CFD: 15/01/2011 - 13:52:36 - [0] -SH-D- C:\ProgramData\Bureau
O43 - CFD: 06/02/2011 - 16:18:12 - [0] ----D- C:\ProgramData\Canneverbe Limited
O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Desktop
O43 - CFD: 22/02/2011 - 22:47:30 - [639999] ----D- C:\ProgramData\DivX
O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Documents
O43 - CFD: 27/05/2011 - 13:47:28 - [0] ----D- C:\ProgramData\eMule
O43 - CFD: 22/06/2011 - 02:34:52 - [8155132] ----D- C:\ProgramData\EPSON
O43 - CFD: 15/01/2011 - 13:52:36 - [0] -SH-D- C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Favorites
O43 - CFD: 22/06/2011 - 02:04:18 - [6850873] ----D- C:\ProgramData\Malwarebytes
O43 - CFD: 15/01/2011 - 13:52:36 - [0] -SH-D- C:\ProgramData\Menu Démarrer
O43 - CFD: 23/06/2011 - 14:02:18 - [219829092] -S--D- C:\ProgramData\Microsoft
O43 - CFD: 15/01/2011 - 13:52:36 - [0] -SH-D- C:\ProgramData\Modèles
O43 - CFD: 27/05/2011 - 12:58:30 - [19737] ----D- C:\ProgramData\MP3Torpedo
O43 - CFD: 23/06/2011 - 14:17:26 - [13130] ----D- C:\ProgramData\Norton
O43 - CFD: 23/06/2011 - 14:04:18 - [15790864] ----D- C:\ProgramData\NortonInstaller
O43 - CFD: 15/05/2011 - 13:43:06 - [34042] ----D- C:\ProgramData\Remote Control PC
O43 - CFD: 08/03/2011 - 04:52:52 - [2893] ----D- C:\ProgramData\River Past G5
O43 - CFD: 25/01/2011 - 19:17:40 - [7456649] ----D- C:\ProgramData\Samsung
O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Start Menu
O43 - CFD: 15/01/2011 - 14:13:08 - [154] ----D- C:\ProgramData\Sun
O43 - CFD: 14/07/2009 - 06:53:56 - [0] -SH-D- C:\ProgramData\Templates
O43 - CFD: 23/06/2011 - 14:27:34 - [1914242] ----D- C:\ProgramData\TuneUp Software
O43 - CFD: 09/03/2011 - 20:52:12 - [26343938] ----D- C:\ProgramData\Win7codecs
O43 - CFD: 23/06/2011 - 14:26:18 - [18478080] -SH-D- C:\ProgramData\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
O43 - CFD: 08/03/2011 - 04:54:02 - [0] ----D- C:\Users\Anais\AppData\Roaming\4Media
O43 - CFD: 15/01/2011 - 14:21:06 - [6644068] ----D- C:\Users\Anais\AppData\Roaming\Adobe
O43 - CFD: 27/05/2011 - 19:58:58 - [1671649] ----D- C:\Users\Anais\AppData\Roaming\Azureus
O43 - CFD: 23/06/2011 - 19:55:44 - [352368667] ----D- C:\Users\Anais\AppData\Roaming\cacaoweb
O43 - CFD: 06/02/2011 - 16:18:12 - [1483] ----D- C:\Users\Anais\AppData\Roaming\Canneverbe Limited
O43 - CFD: 22/02/2011 - 22:42:54 - [95232] ----D- C:\Users\Anais\AppData\Roaming\DivX
O43 - CFD: 03/02/2011 - 21:41:12 - [198] ----D- C:\Users\Anais\AppData\Roaming\FreeAudioPack
O43 - CFD: 23/06/2011 - 14:06:32 - [52687] ----D- C:\Users\Anais\AppData\Roaming\FreeFLVConverter
O43 - CFD: 27/05/2011 - 19:39:46 - [24901951] ----D- C:\Users\Anais\AppData\Roaming\FrostWire
O43 - CFD: 28/01/2011 - 18:38:16 - [21450] ----D- C:\Users\Anais\AppData\Roaming\GlarySoft
O43 - CFD: 27/05/2011 - 20:00:38 - [143] ----D- C:\Users\Anais\AppData\Roaming\HTML Executable
O43 - CFD: 15/01/2011 - 13:53:18 - [0] ----D- C:\Users\Anais\AppData\Roaming\Identities
O43 - CFD: 15/01/2011 - 14:21:06 - [9359] ----D- C:\Users\Anais\AppData\Roaming\Macromedia
O43 - CFD: 22/06/2011 - 02:04:28 - [10351] ----D- C:\Users\Anais\AppData\Roaming\Malwarebytes
O43 - CFD: 14/07/2009 - 09:48:20 - [0] ----D- C:\Users\Anais\AppData\Roaming\Media Center Programs
O43 - CFD: 30/03/2011 - 11:46:50 - [3837278] -S--D- C:\Users\Anais\AppData\Roaming\Microsoft
O43 - CFD: 15/01/2011 - 15:27:38 - [45551375] ----D- C:\Users\Anais\AppData\Roaming\Mozilla
O43 - CFD: 27/05/2011 - 13:45:40 - [1644794] ----D- C:\Users\Anais\AppData\Roaming\MP3Torpedo
O43 - CFD: 16/01/2011 - 16:01:34 - [2406465] ----D- C:\Users\Anais\AppData\Roaming\OpenOffice.org
O43 - CFD: 30/01/2011 - 22:38:34 - [455] ----D- C:\Users\Anais\AppData\Roaming\PhotoFiltre
O43 - CFD: 08/03/2011 - 04:37:10 - [464] ----D- C:\Users\Anais\AppData\Roaming\River Past G5
O43 - CFD: 25/01/2011 - 19:14:34 - [9007041] ----D- C:\Users\Anais\AppData\Roaming\Samsung
O43 - CFD: 23/06/2011 - 14:27:06 - [43378] ----D- C:\Users\Anais\AppData\Roaming\TuneUp Software
O43 - CFD: 23/06/2011 - 21:26:28 - [4235395] ----D- C:\Users\Anais\AppData\Roaming\uTorrent
O43 - CFD: 19/06/2011 - 17:22:44 - [1087592] ----D- C:\Users\Anais\AppData\Roaming\vlc
O43 - CFD: 09/03/2011 - 20:52:12 - [1025] ----D- C:\Users\Anais\AppData\Roaming\Win7codecs
O43 - CFD: 18/01/2011 - 04:43:34 - [12] ----D- C:\Users\Anais\AppData\Roaming\WinRAR
O43 - CFD: 15/01/2011 - 13:52:56 - [0] -SH-D- C:\Users\Anais\Appdata\Local\Application Data
O43 - CFD: 10/03/2011 - 21:55:40 - [2685477] ----D- C:\Users\Anais\Appdata\Local\Ares
O43 - CFD: 27/05/2011 - 19:29:50 - [85207766] ----D- C:\Users\Anais\Appdata\Local\BearShare
O43 - CFD: 23/06/2011 - 19:56:34 - [2562135] ----D- C:\Users\Anais\Appdata\Local\CrashDumps
O43 - CFD: 18/02/2011 - 14:06:18 - [0] ----D- C:\Users\Anais\Appdata\Local\Diagnostics
O43 - CFD: 25/01/2011 - 19:11:46 - [89597830] ----D- C:\Users\Anais\Appdata\Local\Downloaded Installations
O43 - CFD: 05/06/2011 - 01:49:36 - [64280] ----D- C:\Users\Anais\Appdata\Local\ElevatedDiagnostics
O43 - CFD: 27/05/2011 - 13:47:14 - [7639595] ----D- C:\Users\Anais\Appdata\Local\eMule
O43 - CFD: 15/01/2011 - 13:52:56 - [0] -SH-D- C:\Users\Anais\Appdata\Local\Historique
O43 - CFD: 27/05/2011 - 12:57:14 - [51] ----D- C:\Users\Anais\Appdata\Local\MediaGet2
O43 - CFD: 30/03/2011 - 11:44:40 - [374122560] ----D- C:\Users\Anais\Appdata\Local\Microsoft
O43 - CFD: 26/01/2011 - 12:19:36 - [364028] ----D- C:\Users\Anais\Appdata\Local\Microsoft Games
O43 - CFD: 15/01/2011 - 15:27:26 - [126105649] ----D- C:\Users\Anais\Appdata\Local\Mozilla
O43 - CFD: 27/05/2011 - 19:23:36 - [0] ----D- C:\Users\Anais\Appdata\Local\PackageAware
O43 - CFD: 25/01/2011 - 19:20:18 - [13143] ----D- C:\Users\Anais\Appdata\Local\Samsung
O43 - CFD: 24/06/2011 - 11:49:56 - [40346275] ----D- C:\Users\Anais\Appdata\Local\Temp
O43 - CFD: 15/01/2011 - 13:52:56 - [0] -SH-D- C:\Users\Anais\Appdata\Local\Temporary Internet Files
O43 - CFD: 15/01/2011 - 13:53:00 - [0] ----D- C:\Users\Anais\Appdata\Local\VirtualStore
O43 - CFD: 14/07/2009 - 06:42:06 - [14635] R---D- C:\Users\Anais\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 22/06/2011 - 02:21:14 - [174] R---D- C:\Users\Anais\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 08/05/2011 - 16:39:20 - [0] ----D- C:\Users\Anais\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames
O43 - CFD: 29/01/2011 - 13:21:52 - [238] ----D- C:\Users\Anais\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 14/07/2009 - 06:37:44 - [580] R---D- C:\Users\Anais\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 30/01/2011 - 22:27:06 - [0] ----D- C:\Users\Anais\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre
O43 - CFD: 22/06/2011 - 02:36:26 - [1193] R---D- C:\Users\Anais\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.9CEE1200FEFFFFFF57494E444F577E31] - 24/06/2011 - 09:29:20 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1531547]
O44 - LFC:[MD5.216A89774BDDB0EFD9B6DB629B88A458] - 23/06/2011 - 20:11:12 --HA- . (...) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [17008]
O44 - LFC:[MD5.216A89774BDDB0EFD9B6DB629B88A458] - 23/06/2011 - 20:11:12 --HA- . (...) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [17008]
O44 - LFC:[MD5.7492357881F9C2B807C74D452D8ABC5F] - 23/06/2011 - 20:02:56 ---A- . (...) -- C:\Windows\setupact.log [8131]
O44 - LFC:[MD5.174E7DD8C35B26CF5A2B67FAF25C06BE] - 23/06/2011 - 20:02:54 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.2DF98CDFC75E2FC7EBB257498C6C698C] - 23/06/2011 - 19:54:12 ---A- . (...) -- C:\Windows\PFRO.log [255014]
O44 - LFC:[MD5.2340832B8B1EFB379280A30140D1B7ED] - 23/06/2011 - 11:10:52 ---A- . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Windows\System32\java.exe [145184]
O44 - LFC:[MD5.FD8AB373BD7834A65114DD899199D00B] - 23/06/2011 - 11:10:52 ---A- . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Windows\System32\javaw.exe [145184]
O44 - LFC:[MD5.4EDDB64328BE19A164657230C647913E] - 23/06/2011 - 11:10:52 ---A- . (.Sun Microsystems, Inc. - Java(TM) Web Start Launcher.) -- C:\Windows\System32\javaws.exe [157472]
O44 - LFC:[MD5.12684313236EC0C5CC738A75265DAC8F] - 23/06/2011 - 11:10:37 ---A- . (...) -- C:\Windows\System32\jupdate-1.6.0_26-b03.log [6281]
O44 - LFC:[MD5.5F09C2AF4E9779AFE6451279B6713C3F] - 23/06/2011 - 02:23:45 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1549700]
O44 - LFC:[MD5.B33F93B706B74D2A04D096198749C8E7] - 23/06/2011 - 02:23:45 ---A- . (...) -- C:\Windows\System32\perfc009.dat [106190]
O44 - LFC:[MD5.69C8239A0AC51C4E05FDBF0CBC44E406] - 23/06/2011 - 02:23:45 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [130548]
O44 - LFC:[MD5.57275E6EE1E9D68C67B62B1987F58A76] - 23/06/2011 - 02:23:45 ---A- . (...) -- C:\Windows\System32\perfh009.dat [615810]
O44 - LFC:[MD5.C1B7A4E851DF19F9E72EC0092AD61BC7] - 23/06/2011 - 02:23:45 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [704242]
O44 - LFC:[MD5.22B8D5F6F49EFD5ABEC7EEA4FD61AC5F] - 22/06/2011 - 01:35:18 ---A- . (...) -- C:\ZHPExportRegistry-22-06-2011-02-35-18.txt [9426]
O44 - LFC:[MD5.188DBC12081F39B0F4804E299EFE18B4] - 22/06/2011 - 01:16:11 ---A- . (...) -- C:\Windows\System32\FNTCACHE.DAT [289720]
O44 - LFC:[MD5.2F3545E56FC75B9264C9D83483C9C5E2] - 21/06/2011 - 18:18:32 ---A- . (...) -- C:\Windows\IE9_main.log [2552]
O44 - LFC:[MD5.4BE1D6FF372FE06E96E8A06172DA6827] - 21/06/2011 - 16:27:19 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512]
O44 - LFC:[MD5.83EEB82E9ED7098EBC0C083C6BFD3116] - 20/06/2011 - 16:31:39 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [404640]
O44 - LFC:[MD5.01C47C2ECED034EF6F8C1552A97CFF00] - 17/06/2011 - 23:44:10 ---A- . (...) -- C:\Windows\System32\config.nt [2577]
O44 - LFC:[MD5.B64134316FCD1F20E0F10EF3E65BD522] - 17/06/2011 - 23:44:10 ---A- . (.AVAST Software - avast! Virtualization Driver.) -- C:\Windows\System32\drivers\aswSnx.sys [441176]
O44 - LFC:[MD5.518318A103C888001054EFA1236E5033] - 09/06/2011 - 03:49:23 ---A- . (.Microsoft Corporation - Bibliothèque d'assistance au déploiement de.) -- C:\Windows\System32\dfshim.dll [1130824]
O44 - LFC:[MD5.C9FB8C3D650EF8BD76865EC20A19A5BC] - 09/06/2011 - 03:48:55 ---A- . (.Microsoft - Filtre du convertisseur RDP (redirecteur).) -- C:\Windows\System32\DShowRdpFilter.dll [252928]
O44 - LFC:[MD5.39B9273CA01364E115B464416CFB729B] - 09/06/2011 - 03:48:32 ---A- . (.Microsoft - robocopy.) -- C:\Windows\System32\Robocopy.exe [98816]
O44 - LFC:[MD5.737AFC772243C75E6AD17A7A8E8E23F9] - 09/06/2011 - 03:48:19 ---A- . (.Windows (R) Codename Longhorn DDK provider - Services de gestion des polices.) -- C:\Windows\System32\fms.dll [93696]
O44 - LFC:[MD5.163A95975E1D8819E653AA3E961371CA] - 09/06/2011 - 03:48:16 ---A- . (.Twain Working Group - Gestionnaire de sources Twain_32 (Image Acq.) -- C:\Windows\twain_32.dll [51200]
O44 - LFC:[MD5.1DE21EC4A2232FF4F5298ADCAE7B3690] - 09/06/2011 - 03:48:05 ---A- . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll [82944]
O44 - LFC:[MD5.B309912717C29FC67E1BA4730A82B6DD] - 29/05/2011 - 08:11:30 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\System32\drivers\mbamswissarmy.sys [39984]
O44 - LFC:[MD5.3D2C13377763EEAC0CA6FB46F57217ED] - 29/05/2011 - 08:11:20 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [22712]
O44 - LFC:[MD5.03783D0840B2C54D7665248425C74417] - 20/11/2010 - 06:23:54 ---A- . (...) -- C:\Windows\System32\dosx.exe [53600]
O44 - LFC:[MD5.5C18CD22BE4628865FCB63337A6E5EF6] - 10/11/2010 - 02:45:49 ---A- . (...) -- C:\Windows\System32\ScavengeSpace.xml [10429]
O44 - LFC:[MD5.B8CBB46B42570D373C9933FBDF25EBCE] - 05/11/2010 - 03:20:53 ---A- . (...) -- C:\Windows\System32\systemsf.ebd [146852]
O44 - LFC:[MD5.C236A8735A48B165A2A7724357DBE332] - 05/11/2010 - 03:20:45 ---A- . (...) -- C:\Windows\System32\RacRules.xml [105559]

---\\ Export de clé d'application autorisée (O47)
O47 - AAKE:Key Export SP - "C:\Program Files\River Past\Audio Converter Pro\AudioConverter.exe" [Enabled] .(...) -- C:\Program Files\River Past\Audio Converter Pro\AudioConverter.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Users\Anais\AppData\Roaming\cacaoweb\cacaoweb.exe" [Enabled] .(...) -- C:\Users\Anais\AppData\Roaming\cacaoweb\cacaoweb.exe

---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d'extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d'extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys

---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll
O52 - TDSD: \Drivers32\"vidc.x264"="x264vfw.dll" . (...) -- C:\Windows\System32\x264vfw.dll
O52 - TDSD: \Drivers32\"msacm.ac3filter"="ac3filter.acm" . (...) -- C:\Windows\System32\ac3filter.acm
O52 - TDSD: \Drivers32\"msacm.avis"="ff_acm.acm" . (.Pas de propriétaire - ffdshow Audio Decoder.) -- C:\Windows\System32\ff_acm.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"wdmaud.drv"="Pilote de fonction UAA 1.1 Microsoft pour High Definition Audio" . (...) -- (.not file.)
O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (...) -- (.not file.)
O52 - TDSD: \drivers.desc\"x264vfw.dll"="H264 Video codec" . (...) -- C:\Windows\System32\x264vfw.dll
O52 - TDSD: \drivers.desc\"xvidvfw.dll"="Xvid MPEG-4 Video Codec" . (...) -- (.not file.)
O52 - TDSD: \drivers.desc\"ac3filter.acm"="AC3Filter ACM codec" . (...) -- C:\Windows\System32\ac3filter.acm
O52 - TDSD: \drivers.desc\"ff_acm.acm"="ffdshow ACM codec" . (.Pas de propriétaire - ffdshow Audio Decoder.) -- C:\Windows\System32\ff_acm.acm

---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll

---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0

---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145

---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.21E785EBD7DC90A06391141AAC7892FB] - 14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [422976]
O58 - SDL:[MD5.0C676BC278D5B59FF5ABD57BBE9123F2] - 14/07/2009 - 02:26:17 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [297552]
O58 - SDL:[MD5.7C7B5EE4B7B822EC85321FE23A27DB33] - 14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys [146512]
O58 - SDL:[MD5.0D40BCF52EA90FC7DF2AEAB6503DEA44] - 14/07/2009 - 02:26:15 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [14400]
O58 - SDL:[MD5.D320BF87125326F996D4904FE24300FC] - 11/03/2011 - 06:38:37 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\system32\drivers\amdsata.sys [80256]
O58 - SDL:[MD5.EA43AF0C423FF267355F74E7A53BDABA] - 14/07/2009 - 02:26:15 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows fa.) -- C:\Windows\system32\drivers\amdsbs.sys [159312]
O58 - SDL:[MD5.46387FB17B086D16DEA267D5BE23A2F2] - 11/03/2011 - 06:38:37 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\system32\drivers\amdxata.sys [22400]
O58 - SDL:[MD5.2932004F49677BD84DBC72EDB754FFB3] - 14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [76368]
O58 - SDL:[MD5.5D6F36C46FD283AE1B57BD2E9FEB0BC7] - 14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [86608]
O58 - SDL:[MD5.7F08D9C504B015D81A8ABD75C80028C5] - 10/05/2011 - 12:59:35 ---A- . (.AVAST Software - avast! File System Access Blocking Driver.) -- C:\Windows\system32\drivers\aswFsBlk.sys [19544]
O58 - SDL:[MD5.9BDC8E9CE17B773F69D2C6696C768C4F] - 10/05/2011 - 12:59:44 ---A- . (.AVAST Software - avast! File System Minifilter for Windows 2003/Vista.) -- C:\Windows\system32\drivers\aswMonFlt.sys [53592]
O58 - SDL:[MD5.AC48BDD4CD5D44AF33087C06D6E9511C] - 10/05/2011 - 12:59:56 ---A- . (.AVAST Software - avast! TDI RDR Driver.) -- C:\Windows\system32\drivers\aswRdr.sys [25432]
O58 - SDL:[MD5.B64134316FCD1F20E0F10EF3E65BD522] - 10/05/2011 - 13:03:54 ---A- . (.AVAST Software - avast! Virtualization Driver.) -- C:\Windows\system32\drivers\aswSnx.sys [441176]
O58 - SDL:[MD5.D6788E3211AFA9951ED7A4D617F68A4F] - 10/05/2011 - 13:03:44 ---A- . (.AVAST Software - avast! self protection module.) -- C:\Windows\system32\drivers\aswSP.sys [307928]
O58 - SDL:[MD5.4D100C45517809439C7B6DD98997FA00] - 10/05/2011 - 13:02:37 ---A- . (.AVAST Software - avast! TDI Filter Driver.) -- C:\Windows\system32\drivers\aswTdi.sys [49240]
O58 - SDL:[MD5.04F09923A393E4E0E8453A8F78361E73] - 18/08/2009 - 02:48:06 ---A- . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\system32\drivers\atikmdag.sys [4994560]
O58 - SDL:[MD5.BD8869EB9CDE6BBE4508D869929869EE] - 14/07/2009 - 23:02:49 ---A- . (.Broadcom Corporation - Pilote unifié NDIS6.x Broadcom NetXtreme Gigabit Ethernet..) -- C:\Windows\system32\drivers\b57nd60x.sys [229888]
O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 14/07/2009 - 23:53:28 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [13568]
O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 14/07/2009 - 23:53:28 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [5248]
O58 - SDL:[MD5.845B8CE732E67F3B4133164868C666EA] - 14/07/2009 - 01:57:25 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [272128]
O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 14/07/2009 - 23:53:32 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [62336]
O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 14/07/2009 - 23:53:33 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [12160]
O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 14/07/2009 - 23:53:33 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [11904]
O58 - SDL:[MD5.1A231ABEC60FD316EC54C66715543CEC] - 14/07/2009 - 23:02:48 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\system32\drivers\bxvbdx.sys [430080]
O58 - SDL:[MD5.C537B1DB64D495B9B4717B4D6D9EDBF2] - 14/07/2009 - 02:26:21 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [15952]
O58 - SDL:[MD5.C2EB4539A4F6AB6EDD01BDC191619975] - 09/11/2010 - 14:35:30 ---A- . (.CPUID - CPUID Driver.) -- C:\Windows\system32\drivers\cpuz135_x32.sys [21992]
O58 - SDL:[MD5.8B30250D573A8F6B4BD23195160D8707] - 14/07/2009 - 02:20:28 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys [70720]
O58 - SDL:[MD5.0ED67910C8C326796FAA00B2BF6D9D3C] - 14/07/2009 - 02:20:28 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [453712]
O58 - SDL:[MD5.024E1B5CAC09731E4D868E64DBFB4AB0] - 14/07/2009 - 23:02:48 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\system32\drivers\evbdx.sys [3100160]
O58 - SDL:[MD5.C44E3C2BAB6837DB337DDEE7544736DB] - 14/07/2009 - 23:54:14 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\system32\drivers\hcw85cir.sys [26624]
O58 - SDL:[MD5.295FDC419039090EB8B49FFDBB374549] - 14/07/2009 - 02:20:28 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\system32\drivers\HpSAMD.sys [67152]
O58 - SDL:[MD5.5CD5F9A5444E6CDCB0AC89BD62D8B76E] - 11/03/2011 - 06:38:51 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\system32\drivers\iaStorV.sys [332160]
O58 - SDL:[MD5.4173FF5708F3236CF25195FECD742915] - 14/07/2009 - 02:20:36 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [41040]
O58 - SDL:[MD5.EB119A53CCF2ACC000AC71B065B78FEF] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [95824]
O58 - SDL:[MD5.8ADE1C877256A22E49B75D1CC9161F9C] - 14/07/2009 - 02:20:37 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [89168]
O58 - SDL:[MD5.DC9DC3D3DAA0E276FD2EC262E38B11E9] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas2.sys [54864]
O58 - SDL:[MD5.0A036C7D7CAB643A7F07135AC47E0524] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [96848]
O58 - SDL:[MD5.3D2C13377763EEAC0CA6FB46F57217ED] - 29/05/2011 - 08:11:20 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys [22712]
O58 - SDL:[MD5.B309912717C29FC67E1BA4730A82B6DD] - 29/05/2011 - 08:11:30 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbamswissarmy.sys [39984]
O58 - SDL:[MD5.0FFF5B045293002AB38EB1FD1FC2FB74] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows 7 for x86.) -- C:\Windows\system32\drivers\megasas.sys [30800]
O58 - SDL:[MD5.DCBAB2920C75F390CAF1D29F675D03D6] - 14/07/2009 - 02:20:36 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\system32\drivers\MegaSR.sys [235584]
O58 - SDL:[MD5.1D85C4B390B0EE09C7A46B91EFB2C097] - 14/07/2009 - 02:20:44 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [44624]
O58 - SDL:[MD5.B3E25EE28883877076E0E1FF877D02E0] - 11/03/2011 - 06:39:00 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [117120]
O58 - SDL:[MD5.4380E59A170D88C4F1022EFF6719A8A4] - 11/03/2011 - 06:39:00 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [143744]
O58 - SDL:[MD5.AB95ECF1F6659A60DDC166D8315B0751] - 14/07/2009 - 02:19:04 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [1383488]
O58 - SDL:[MD5.B4DD51DD25182244B86737DC51AF2270] - 14/07/2009 - 02:19:04 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [106064]
O58 - SDL:[MD5.949F74CB383A1D5DA67AEA9CCD4A8B87] - 31/03/2010 - 02:13:28 ---A- . (.Realtek Semiconductor Corporation - Realtek RTL8187B NDIS Driver.) -- C:\Windows\system32\drivers\RTL8187B.sys [379904]
O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 13/07/2009 - 21:50:20 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [20480]
O58 - SDL:[MD5.5FB7FCEA0490D821F26F39CC5EA3D1E2] - 14/07/2009 - 00:45:33 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\serial.sys [83456]
O58 - SDL:[MD5.A9F0486851BECB6DDA1D89D381E71055] - 14/07/2009 - 02:19:04 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor

Il faut poster le rapport via cijoint comme demandé, car il est trop long pour être mis directement dans la réponse.

Smart

Ah Excusez moi
Rapport ZHPDiag :
http://www.cijoint.fr/cjlink.php?file=cj201106/cijVOSVnzA.rtf

Il restes encores des traces:

- Ferme toutes tes applications en cours
- Lance ZHPFix (soit via le raccourci sur ton Bureau, soit via ZHPDiag en cliquant sur l'écusson vert)
Si tu ne l'as pas, télécharge le depuis ce lien: https://www.zebulon.fr/telechargements/securite/systeme/zhpfix.html
Copie/colle les lignes en gras suivantes :

----------------------------------------------------------
M2 - MFEP: prefs.js [Anais - c0xcfafn.default\cacaoweb@cacaoweb.org] [] cacaoweb v1.0.15 (.<http://www.cacaoweb.org/>.)
[MD5.4B16082F7031C6677423336209D2CBD6] [APT] [{EBC6DDF6-B650-4B67-95BD-E04605547204}] (...) -- D:\Data.....Life\Games.....Magic\GTA-ViceCity\gta-vc 5 .exe
[HKCU\Software\cacaoweb]
O43 - CFD: 27/05/2011 - 19:24:32 - [3957] ----D- C:\ProgramData\1F2EB
O43 - CFD: 23/06/2011 - 19:55:44 - [352368667] ----D- C:\Users\Anais\AppData\Roaming\cacaoweb
O43 - CFD: 27/05/2011 - 12:57:14 - [51] ----D- C:\Users\Anais\Appdata\Local\MediaGet2
O69 - SBI: SearchScopes [HKCU] {9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69} - (Web Search) - <http://search.bearshare.com>
C:\ProgramData\1F2EB
O87 - FAEL: "TCP Query User{ED2581B0-179B-437D-AEDF-045C0B002A2E}C:\users\anais\appdata\roaming\cacaoweb\cacaoweb.exe" | In - Private - P6 - TRUE | .(...) -- C:\users\anais\appdata\roaming\cacaoweb\cacaoweb.exe
O87 - FAEL: "UDP Query User{C5524F94-157D-4C85-94E2-792B33A4BF21}C:\users\anais\appdata\roaming\cacaoweb\cacaoweb.exe" | In - Private - P17 - TRUE | .(...) -- C:\users\anais\appdata\roaming\cacaoweb\cacaoweb.exe
O87 - FAEL: "TCP Query User{4065D350-A900-4402-AB84-8A5E26C30490}C:\users\anais\appdata\roaming\cacaoweb\cacaoweb.exe" | In - Public - P6 - TRUE | .(...) -- C:\users\anais\appdata\roaming\cacaoweb\cacaoweb.exe
O87 - FAEL: "UDP Query User{F9FCA1EF-6128-4BAE-9C7F-CF79D0FD522E}C:\users\anais\appdata\roaming\cacaoweb\cacaoweb.exe" | In - Public - P17 - TRUE | .(...) -- C:\users\anais\appdata\roaming\cacaoweb\cacaoweb.exe
[HKLM\Software\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}]
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}]
[HKLM\Software\Classes\AppID\{d2083641-e57f-4eab-bb85-0582424f4a29}]
[HKCU\Software\cacaoweb]
C:\Users\Anais\AppData\Roaming\cacaoweb
C:\Users\Anais\Appdata\Local\MediaGet2
C:\Documents and Settings\Anais\Local Settings\Application Data\MediaGet2
M0 - MFSP: prefs.js [Anais - c0xcfafn.default] <http://ww10.seeearch.com
R3 - URLSearchHook: (no name) - {D0D4D607-4E08-49A2-B5E0-DDFDFEAACCDF} . (...) (No version) -- (.not file.)
O2 - BHO: TBSB06155 - {2DA14D1D-AE74-4A74-A0FE-C79504755DB8} Clé orpheline
O3 - Toolbar: (no name) - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} . (...) -- (.not file.)
O3 - Toolbar: IE Toolbar - {1FDA7DDD-25CE-4034-9D5B-38A120A14218} . (...) -- (.not file.)
M2 - MFEP: prefs.js [Anais - c0xcfafn.default\{ba14329e-9550-4989-b3f2-9732e92d17cc}] [] Vuze Remote Community Toolbar v3.5.0.12 (.Conduit Ltd..)
R3 - URLSearchHook: (no name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} . (...) (No version) -- (.not file.)
O69 - SBI: SearchScopes [HKCU] {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} - (Bing) - <http://www.bing.com>
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}]
O47 - AAKE:Key Export SP - "C:\Users\Anais\AppData\Roaming\cacaoweb\cacaoweb.exe" [Enabled] .(...) -- C:\Users\Anais\AppData\Roaming\cacaoweb\cacaoweb.exe
EmptyTemp
EmptyFlash
----------------------------------------------------------
- Clique sur l'icone représentant la lettre H (« coller les lignes Helper »)
- Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes
- Clique sur le bouton « GO » pour le lancer le nettoyage
- Copie/colle la totalité du rapport dans ta prochaine réponse

Smart

Rapport de ZHPFix 1.12.3325 par Nicolas Coolman, Update du 23/06/2011
Fichier d'export Registre : C:\ZHPExportRegistry-24-06-2011-12-28-10.txt
Run by Anais at 24/06/2011 12:28:10
Windows 7 Home Premium Edition, 32-bit Service Pack 1 (Build 7601)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Clé(s) du Registre ==========
SUPPRIME Key*: HKCU\Software\cacaoweb
SUPPRIME Key*: SearchScopes :{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}
SUPPRIME Key: HKLM\Software\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}
ABSENT Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}
ABSENT Key: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}
SUPPRIME Key: HKLM\Software\Classes\AppID\{d2083641-e57f-4eab-bb85-0582424f4a29}
ABSENT Key: HKCU\Software\cacaoweb
SUPPRIME Key: CLSID BHO: {2DA14D1D-AE74-4A74-A0FE-C79504755DB8}
SUPPRIME Key*: SearchScopes :{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
ABSENT Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}

========== Valeur(s) du Registre ==========
ABSENT TCP Query User{ED2581B0-179B-437D-AEDF-045C0B002A2E}C:\users\anais\appdata\roaming\cacaoweb\cacaoweb.exe
ABSENT UDP Query User{C5524F94-157D-4C85-94E2-792B33A4BF21}C:\users\anais\appdata\roaming\cacaoweb\cacaoweb.exe
ABSENT TCP Query User{4065D350-A900-4402-AB84-8A5E26C30490}C:\users\anais\appdata\roaming\cacaoweb\cacaoweb.exe
ABSENT UDP Query User{F9FCA1EF-6128-4BAE-9C7F-CF79D0FD522E}C:\users\anais\appdata\roaming\cacaoweb\cacaoweb.exe
SUPPRIME URLSearchHook: {D0D4D607-4E08-49A2-B5E0-DDFDFEAACCDF}
SUPPRIME Toolbar: {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}
SUPPRIME Toolbar: {1FDA7DDD-25CE-4034-9D5B-38A120A14218}
SUPPRIME URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc}
SUPPRIME AAKE KeyValue: C:\Users\Anais\AppData\Roaming\cacaoweb\cacaoweb.exe

========== Préférences navigateur ==========
ABSENT Mozilla Pref: <http://ww10.seeearch.com

========== Dossier(s) ==========
SUPPRIME C:\Users\Anais\AppData\Roaming\Mozilla\Firefox\Profiles\c0xcfafn.default\extensions\cacaoweb@cacaoweb.org
SUPPRIME C:\ProgramData\1F2EB
SUPPRIME C:\Users\Anais\AppData\Roaming\cacaoweb
SUPPRIME C:\Users\Anais\Appdata\Local\MediaGet2
SUPPRIME C:\Users\Anais\AppData\Roaming\Mozilla\Firefox\Profiles\c0xcfafn.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}
SUPPRIME Temporaires Windows: : 139
SUPPRIME Flash Cookies: 52

========== Fichier(s) ==========
ABSENT Folder/File: c:\programdata\1f2eb
ABSENT Folder/File: c:\users\anais\appdata\roaming\cacaoweb
ABSENT Folder/File: c:\users\anais\appdata\local\mediaget2
ABSENT Folder/File: c:\documents and settings\anais\local settings\application data\mediaget2
ABSENT File: c:\users\anais\appdata\roaming\cacaoweb\cacaoweb.exe
SUPPRIME Temporaires Windows: : 137
SUPPRIME Flash Cookies: 29

========== Tache planifiée ==========
SUPPRIME Task: {EBC6DDF6-B650-4B67-95BD-E04605547204}

========== Récapitulatif ==========
10 : Clé(s) du Registre
9 : Valeur(s) du Registre
7 : Dossier(s)
7 : Fichier(s)
1 : Préférences navigateur
1 : Tache planifiée

========== Chemin du fichier rapport ==========
C:\Program Files\ZHPDiag\ZHPFixReport.txt

End of the scan

Comment se comporte le PC. AS-tu toujours Seeearch ?

Refais un scan ZHPDiag et poste le rapport via cijoint

Smart

Oui Seeearch est encore là mais je ne comprend pas , c'est un virus ?

Scan :
http://www.cijoint.fr/cjlink.php?file=cj201106/cijhP2CGwY.rtf