comment désinstaller start.iminent

steph43 · le 17 Mar 2013 16:31

Bonjour à tous,

Je n'arrive pas à désinstaller de mon ordi : start.iminent qui s'affichent dès que je lance chrome.
J'ai besoin d'aide.
Merci a vous

HexCrunch · le 17 Mar 2013 16:47

Bonsoir,

Je m’appelle Wahib Mkadmi et je viens répondre à ton appel

Fais ceci,

Télécharge ZHPDiag par Nicolas Coolman et sauvegarde-le sur le Bureau.

Laisse toi guider lors de l'installation, le programme se lancera automatiquement à la fin.
/!\Utilisateur de Vista et Seven : Clique droit sur le logo de ZHPdiag, « exécuter en tant qu'Administrateur»/!\
Cliquer sur l'icône représentant une loupe (« Lancer le diagnostic »)

Ne touche pas au pc lors du Scan ,celui-ci provoquerait un Gel du programme
Enregistrer le rapport sur le Bureau à l'aide de l'icône représentant une disquette
Va sur le site Cjoint
Clique sur le bouton Parcourir et sélectionne le dernier rapport ZHPDiag.txt qui est sur ton bureau.
Clique ensuite sur Créer le lien Cjoint pour déposer le fichier.
Patiente puis copie/colle dans ta réponse le lien qui apparait

[quote]Note: pour les utilisateurs d'Avast : Cet antivirus génère des alertes, il s'agit de faux positif (fausses alertes) délivrés par l'antivirus lorsqu'il rencontre une base de donnée PARADOX Delphi Borland.

On va s'en occuper, tu en bonnes mains,

A+

steph43 · le 17 Mar 2013 16:57

Voila pour le rapport ZHP diag, merci pour ton aide Wahib Mkadmi !!

http://cjoint.com/?CCrq36wCGfW

steph43 · le 17 Mar 2013 18:41

HexCrunch · le 17 Mar 2013 19:01

Bonsoir,

Il ne faut pas faire un up toutes les deux heures, je viens, j'ai une vie moi aussi ^^

Bon, fais ceci

Attention , ce Script a étais spécialement crée en fonction des infections présente sur se pc , il ne doit être en aucun cas utiliser/reproduit sur un autre ordinateur

==========================================

Copie toutes les lignes en ici
A partir du raccourci sur le Bureau
Lance ZHPFix par double clic sous Xp, par clic droit et "exécuter en tant qu'administrateur" sous Vista et Seven.
/!\Fermer toutes applications en cours/!\
Clique sur l'icone représentant le presse-papier ("coller le presse-papier")

les lignes se placent dans la fenêtre de ZHPFix => tu ne dois voir que celles-là
Valide par "OK"
Clique sur « Tous », puis sur « Nettoyer » Ne touche pas au pc pendants la suppression(Risque de plantage) Le temps varie en fonctions des lignes à supprimer
Héberge le sur Cjoint.com et poste moi le lien fourni (Consulte le tuto si besoin)

Tiens moi au courant,

A+

steph43 · le 17 Mar 2013 19:25

http://cjoint.com/?CCrtAIjCspF

HexCrunch · le 17 Mar 2013 21:06

Salut,

Fais ceci,

Télécharges le Adwcleaner (de Xplode) sur ton Bureau !

Fais clic droit dessus, exécuter en tant qu'administrateur sous Windows : 7/8 et Vista

Clic sur Suppression :

Laisse l'outils travailler sans toucher au PC !

Un rapport va s'afficher sur ton écran :

Copie le dans son intégralité, colle le sur le Forum entre les balises :

Code: Tout sélectionner: [code]Rapport .....[/code]

steph43 · le 18 Mar 2013 19:46

Code: Tout sélectionner: # AdwCleaner v2.114 - Rapport créé le 18/03/2013 à 19:45:53 # Mis à jour le 05/03/2013 par Xplode # Système d'exploitation : Windows 7 Ultimate Service Pack 1 (32 bits) # Nom d'utilisateur : steph - STEPH-PC # Mode de démarrage : Normal # Exécuté depuis : E:\Users\steph\Downloads\AdwCleaner.exe # Option [Recherche] ***** [Services] ***** ***** [Fichiers / Dossiers] ***** ***** [Registre] ***** ***** [Navigateurs] ***** -\\ Internet Explorer v9.0.8112.16470 [OK] Le registre ne contient aucune entrée illégitime. -\\ Mozilla Firefox v10.0.1 (fr) Fichier : E:\Users\steph\AppData\Roaming\Mozilla\Firefox\Profiles\hvp1vyg9.default\prefs.js [OK] Le fichier ne contient aucune entrée illégitime. -\\ Google Chrome v25.0.1364.172 Fichier : E:\Users\steph\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] Le fichier ne contient aucune entrée illégitime. Fichier : E:\Users\Emma\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] Le fichier ne contient aucune entrée illégitime. Fichier : E:\Users\Corine\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] Le fichier ne contient aucune entrée illégitime. ************************* AdwCleaner[R10].txt - [17721 octets] - [05/12/2012 20:11:21] AdwCleaner[R11].txt - [34212 octets] - [08/12/2012 14:15:37] AdwCleaner[R12].txt - [14532 octets] - [16/01/2013 10:04:29] AdwCleaner[R13].txt - [39496 octets] - [09/03/2013 07:40:41] AdwCleaner[R14].txt - [3000 octets] - [10/03/2013 17:08:15] AdwCleaner[R15].txt - [1542 octets] - [18/03/2013 19:45:53] AdwCleaner[R1].txt - [3601 octets] - [06/12/2011 17:27:42] AdwCleaner[R2].txt - [1212 octets] - [06/12/2011 19:24:57] AdwCleaner[R3].txt - [1454 octets] - [14/12/2011 20:07:25] AdwCleaner[R4].txt - [14046 octets] - [04/01/2012 15:54:21] AdwCleaner[R5].txt - [1757 octets] - [04/02/2012 10:59:05] AdwCleaner[R6].txt - [15479 octets] - [26/02/2012 11:55:57] AdwCleaner[R7].txt - [16277 octets] - [20/07/2012 11:31:47] AdwCleaner[R8].txt - [17478 octets] - [05/12/2012 13:39:26] AdwCleaner[R9].txt - [17598 octets] - [05/12/2012 19:58:31] AdwCleaner[S10].txt - [386 octets] - [05/12/2012 19:59:03] AdwCleaner[S11].txt - [386 octets] - [05/12/2012 20:11:50] AdwCleaner[S12].txt - [34676 octets] - [08/12/2012 14:16:13] AdwCleaner[S13].txt - [14639 octets] - [16/01/2013 10:09:13] AdwCleaner[S14].txt - [39904 octets] - [09/03/2013 07:41:05] AdwCleaner[S15].txt - [3063 octets] - [10/03/2013 17:08:41] AdwCleaner[S16].txt - [3167 octets] - [17/03/2013 16:15:43] AdwCleaner[S1].txt - [3889 octets] - [06/12/2011 17:28:04] AdwCleaner[S2].txt - [1366 octets] - [06/12/2011 19:25:05] AdwCleaner[S3].txt - [319 octets] - [14/12/2011 20:07:32] AdwCleaner[S4].txt - [14351 octets] - [04/01/2012 15:54:29] AdwCleaner[S5].txt - [1120 octets] - [04/02/2012 10:59:13] AdwCleaner[S6].txt - [1787 octets] - [04/02/2012 11:07:53] AdwCleaner[S7].txt - [386 octets] - [26/02/2012 11:56:03] AdwCleaner[S8].txt - [386 octets] - [20/07/2012 11:31:56] AdwCleaner[S9].txt - [319 octets] - [05/12/2012 13:42:10] ########## EOF - E:\AdwCleaner[R15].txt - [3113 octets] ##########

HexCrunch · le 18 Mar 2013 20:15

Plop,

Comment va le PC ?

steph43 · le 18 Mar 2013 20:19

Rien a changer start.iminent est toujours la.
Grrrrrr !!!

HexCrunch · le 19 Mar 2013 10:37

Hello,

AdwCleaner[R10].txt - [17721 octets] - [05/12/2012 20:11:21]
AdwCleaner[R11].txt - [34212 octets] - [08/12/2012 14:15:37]
AdwCleaner[R12].txt - [14532 octets] - [16/01/2013 10:04:29]
AdwCleaner[R13].txt - [39496 octets] - [09/03/2013 07:40:41]
AdwCleaner[R14].txt - [3000 octets] - [10/03/2013 17:08:15]
AdwCleaner[R15].txt - [1542 octets] - [18/03/2013 19:45:53]
AdwCleaner[R1].txt - [3601 octets] - [06/12/2011 17:27:42]
AdwCleaner[R2].txt - [1212 octets] - [06/12/2011 19:24:57]
AdwCleaner[R3].txt - [1454 octets] - [14/12/2011 20:07:25]
AdwCleaner[R4].txt - [14046 octets] - [04/01/2012 15:54:21]
AdwCleaner[R5].txt - [1757 octets] - [04/02/2012 10:59:05]
AdwCleaner[R6].txt - [15479 octets] - [26/02/2012 11:55:57]
AdwCleaner[R7].txt - [16277 octets] - [20/07/2012 11:31:47]
AdwCleaner[R8].txt - [17478 octets] - [05/12/2012 13:39:26]
AdwCleaner[R9].txt - [17598 octets] - [05/12/2012 19:58:31]
AdwCleaner[S10].txt - [386 octets] - [05/12/2012 19:59:03]
AdwCleaner[S11].txt - [386 octets] - [05/12/2012 20:11:50]
AdwCleaner[S12].txt - [34676 octets] - [08/12/2012 14:16:13]
AdwCleaner[S13].txt - [14639 octets] - [16/01/2013 10:09:13]
AdwCleaner[S14].txt - [39904 octets] - [09/03/2013 07:41:05]
AdwCleaner[S15].txt - [3063 octets] - [10/03/2013 17:08:41]
AdwCleaner[S16].txt - [3167 octets] - [17/03/2013 16:15:43]
AdwCleaner[S1].txt - [3889 octets] - [06/12/2011 17:28:04]
AdwCleaner[S2].txt - [1366 octets] - [06/12/2011 19:25:05]
AdwCleaner[S3].txt - [319 octets] - [14/12/2011 20:07:32]
AdwCleaner[S4].txt - [14351 octets] - [04/01/2012 15:54:29]
AdwCleaner[S5].txt - [1120 octets] - [04/02/2012 10:59:13]
AdwCleaner[S6].txt - [1787 octets] - [04/02/2012 11:07:53]
AdwCleaner[S7].txt - [386 octets] - [26/02/2012 11:56:03]
AdwCleaner[S8].txt - [386 octets] - [20/07/2012 11:31:56]
AdwCleaner[S9].txt - [319 octets] - [05/12/2012 13:42:10]

Tu les as faits tout seul ? j'en aurai besoin.

*************

Fais moi un nouvel ZHPDiag.

A+

steph43 · le 19 Mar 2013 19:10

???
J'ai pas compris ta question ?

HexCrunch · le 19 Mar 2013 20:42

Ceux dans la citation sont des rapports de AdwCleaner, Tu les as faits tout seul ? Donne les moi.

Et génère moi un nouvel ZHPDiag

steph43 · le 20 Mar 2013 18:29

Code: Tout sélectionner: Rapport de ZHPDiag v2013.3.17.41 par Nicolas Coolman, Update du 15/03/2013 Run by steph at 20/03/2013 18:22:13 State : Nouvelle version disponible High Elevated Privileges : OK UAC : Deactivate by program ---\\ Web Browser MSIE: Internet Explorer v9.0.8112.16421 GCIE: Google Chrome v25.0.1364.172 (Defaut) ---\\ Windows Product Information ~ Langage: Français Windows 7 Ultimate Edition, 32-bit Service Pack 1 (Build 7601) Windows Server License Manager Script : OK ~ Windows(R) 7, RETAIL channel Windows ID Activation : OK ~ Windows Partial Key : PPFTP Windows License : OK ~ Windows Remaining Initializations Number : 4 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ System Information ~ Processor: x86 Family 6 Model 15 Stepping 13, GenuineIntel ~ Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 3006 MB (52% free) System Restore: Activé (Enable) System drive E: has 23 GB (16%) free of 140 GB ---\\ Logged in mode ~ Computer Name: STEPH-PC ~ User Name: steph ~ All Users Names: UpdatusUser, steph, HomeGroupUser$, Emma, Corine, Administrateur, ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89 Logged in as Administrator ---\\ Environnement Variables ~ System Unit : E:\ ~ %AppData% : E:\Users\steph\AppData\Roaming\ ~ %Desktop% : E:\Users\steph\Desktop\ ~ %Favorites% : E:\Users\steph\Favorites\ ~ %LocalAppData% : E:\Users\steph\AppData\Local\ ~ %StartMenu% : E:\Users\steph\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : E:\Windows\ ~ %System% : E:\Windows\System32\ ---\\ DOS/Devices A:\ Floppy drive, Flash card reader, USB Key (Not Inserted) C:\ Hard drive, Flash drive, Thumb drive (Free 33 Go of 75 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 0 Go of 153 Go) E:\ Hard drive, Flash drive, Thumb drive (Free 23 Go of 140 Go) F:\ CD-ROM drive (Not Inserted) G:\ CD-ROM drive (Free 0 Go of 1 Go) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ~ Scan Security Center in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 06:30:54.) -- E:\Windows\Explorer.exe [2616320] [MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:14:45.) -- E:\Windows\System32\Wininit.exe [96256] [MD5.03728C624D05C2F157BBD46F6B7F6EA0] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.02/02/2013 - 04:30:21.) -- E:\Windows\System32\wininet.dll [1129472] [MD5.6D13E1406F50C66E2A95D97F22C47560] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.20/11/2010 - 13:17:54.) -- E:\Windows\System32\Winlogon.exe [286720] [MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 13:21:24.) -- E:\Windows\System32\sppcomapi.dll [193536] [MD5.9EBBBA55060F786F0FCAA3893BFA2806] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.25/04/2011 - 03:18:03.) -- E:\Windows\system32\Drivers\AFD.sys [338944] [MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:26:15.) -- E:\Windows\system32\Drivers\atapi.sys [21584] [MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:11:15.) -- E:\Windows\system32\Drivers\Cdfs.sys [70656] [MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 09:38:10.) -- E:\Windows\system32\Drivers\Cdrom.sys [108544] [MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 09:42:32.) -- E:\Windows\system32\Drivers\DfsC.sys [78336] [MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 10:59:29.) -- E:\Windows\system32\Drivers\HDAudBus.sys [108544] [MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:11:24.) -- E:\Windows\system32\Drivers\i8042prt.sys [80896] [MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 00:54:29.) -- E:\Windows\system32\Drivers\IpNat.sys [101888] [MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:17:22.) -- E:\Windows\system32\Drivers\MRxSmb.sys [123904] [MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 09:39:44.) -- E:\Windows\system32\Drivers\netBT.sys [187904] [MD5.0D87503986BB3DFED58E343FE39DDE13] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.31/08/2012 - 18:18:09.) -- E:\Windows\system32\Drivers\ntfs.sys [1211760] [MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 00:45:35.) -- E:\Windows\system32\Drivers\Parport.sys [79360] [MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.14/07/2009 - 00:54:34.) -- E:\Windows\system32\Drivers\Rasl2tp.sys [78848] [MD5.B973FCFC50DC1434E1970A146F7E3885] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.20/11/2010 - 11:24:46.) -- E:\Windows\system32\Drivers\rdpdr.sys [133632] [MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 00:53:41.) -- E:\Windows\system32\Drivers\smb.sys [71168] [MD5.B459575348C20E8121D6039DA063C704] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 09:39:17.) -- E:\Windows\system32\Drivers\tdx.sys [74752] [MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 13:30:16.) -- E:\Windows\system32\Drivers\volsnap.sys [245632] ~ Scan Generic Processes in 00mn 00s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 1/7838 ~ Mes musiques (My Musics) : 11/332 ~ Mes Videos (My Videos) : 1/6 ~ Mes Favoris (My Favorites) : 1/9 ~ Mes Documents (My Documents) : 1/1942 ~ Mon Bureau (My Desktop) : 1/8 ~ Menu demarrer (Programs) : 1/33 ~ Scan Hidden Files in 00mn 15s ---\\ Processus lancés [MD5.7853D2AB445C10F97610B2B05FA4CF0A] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- E:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [512360] [PID.2836] [MD5.0A7E9FDF3BF1980CA09FEEAC7F52EFBC] - (.ALWIL Software - avast! service GUI component.) -- E:\Program Files\Alwil Software\Avast4\ashDisp.exe [81000] [PID.3128] [MD5.4B4F81C294B9A07479F4F4F8FF20E58C] - (.GARMIN Corp. - gStart Application.) -- E:\Program Files\Garmin\Training Center\gStart.exe [1891416] [PID.1200] [MD5.F29BBB60D02E2CB01D3357851B60D144] - (.TomTom - System Tray application for TomTom HOME.) -- E:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [247768] [PID.3212] [MD5.32C26797AB646074A2BB562F9D10ADB5] - (.Microsoft Corporation - Microsoft Office OneNote Quick Launcher.) -- E:\Program Files\Microsoft Office\Office12\ONENOTEM.exe [97680] [PID.3536] [MD5.D610CDEDF1F702EB0A86B0FBD9BB49E5] - (.NVIDIA Corporation - NVIDIA Settings.) -- E:\Program Files\NVIDIA Corporation\Display\nvtray.exe [1820520] [PID.328] [MD5.C63C8C9126343D02E5D762131D7B847E] - (.TuneUp Software - TuneUp Utilities.) -- E:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe [743232] [PID.2840] [MD5.B95AC0CDB8F068F0C024CD344B354298] - (.Google Inc. - Google Chrome.) -- E:\Users\steph\AppData\Local\Google\Chrome\Application\chrome.exe [1274320] [PID.4204] [MD5.77BD0166102F3B9BB9499B2952C3BCFA] - (.Microsoft Corporation - Windows Live Mail.) -- E:\Program Files\Windows Live\Mail\wlmail.exe [92024] [PID.2588] [MD5.C0E0F315590EC848340C218BE0FF04D1] - (.Nicolas Coolman - ZHPDiag.) -- E:\Program Files\ZHPDiag\ZHPDiag.exe [5754880] [PID.5072] ~ Scan Processes Running in 00mn 00s ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) E:\Users\steph\AppData\Local\Google\Chrome\User Data\Default\Preferences G1 - GCS: Preference [User Data\Default] http://start.iminent.com ~ Scan Google Browser in 00mn 00s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) E:\Users\steph\AppData\Roaming\Mozilla\Firefox\Profiles\hvp1vyg9.default\prefs.js M3 - MFPP: Plugins - [steph] -- E:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml M3 - MFPP: Plugins - [steph] -- E:\Program Files\Mozilla FireFox\searchplugins\bing.xml M3 - MFPP: Plugins - [steph] -- E:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml M3 - MFPP: Plugins - [steph] -- E:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml M3 - MFPP: Plugins - [steph] -- E:\Program Files\Mozilla FireFox\searchplugins\google.xml M3 - MFPP: Plugins - [steph] -- E:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml M3 - MFPP: Plugins - [steph] -- E:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml M2 - MFEP: prefs.js [steph - hvp1vyg9.default\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}] [dwhelper] DownloadHelper v4.9.14 (.Michel Gutierrez.) P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- E:\Program Files\Mozilla Firefox\Plugins\NPOFF12.DLL P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.02.) -- E:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- E:\Program Files\Mozilla Firefox\Plugins\npqtplugin.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- E:\Program Files\Mozilla Firefox\Plugins\npqtplugin2.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- E:\Program Files\Mozilla Firefox\Plugins\npqtplugin3.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- E:\Program Files\Mozilla Firefox\Plugins\npqtplugin4.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- E:\Program Files\Mozilla Firefox\Plugins\npqtplugin5.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- E:\Program Files\Mozilla Firefox\Plugins\npqtplugin6.dll P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- E:\Program Files\Mozilla Firefox\Plugins\npqtplugin7.dll P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- E:\Windows\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll P2 - FPN: [HKLM] [@garmin.com/GpsControl] - (.GARMIN Corp. - Garmin Communicator Plug-In 2.6.4.0.) -- E:\Program Files\Garmin GPS Plugin\npGarmin.dll P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- E:\Program Files\Google\Google Earth\plugin\npgeplugin.dll P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.17.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- E:\Windows\system32\npDeployJava1.dll P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.17.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.17.2 for Mozilla browsers.) -- E:\Program Files\Java\jre7\bin\plugin2\npjp2.dll P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.20125.0.) -- E:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3502.0922] - (.Microsoft Corporation - NPWLPG.) -- E:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3508.1109] - (.Microsoft Corporation - NPWLPG.) -- E:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3538.0513] - (.Microsoft Corporation - NPWLPG.) -- E:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3555.0308] - (.Microsoft Corporation - NPWLPG.) -- E:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll P2 - FPN: [HKLM] [@nvidia.com/3DVision] - (.NVIDIA Corporation - NVIDIA 3D Vision plugin for Mozilla browsers.) -- E:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll P2 - FPN: [HKLM] [@nvidia.com/3DVisionStreaming] - (.NVIDIA Corporation - NVIDIA 3D Vision Streaming plugin for Mozilla browsers.) -- E:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- E:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- E:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.02.) -- E:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- E:\Users\steph\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- E:\Users\steph\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll ~ Scan Firefox Browser in 00mn 00s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Google Inc. - Google Update.) (No version) -- (.not file.) R3 - URLSearchHook: (no name) - {472734EA-242A-422b-ADF8-83D1E48CC825} . (.Google Inc. - Google Update.) (No version) -- (.not file.) R3 - URLSearchHook: (no name) - {05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} . (.Google Inc. - Google Update.) (No version) -- (.not file.) R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 ~ Scan IE Browser in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Scan Proxy management in 00mn 00s ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=E:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=E:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=E:\Windows\System32\SystemPropertiesPerformance.exe ~ Scan Keys in 00mn 00s ---\\ Redirection du fichier Hosts (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Scan Hosts File in 00mn 00s ~ Nombre de lignes (Lines number): 23 ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- E:\Program Files\Java\jre7\bin\ssv.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- E:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- E:\Program Files\Windows Live\Companion\companioncore.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- E:\Program Files\Java\jre7\bin\jp2ssv.dll ~ Scan BHO in 00mn 00s ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [avast!] . (.ALWIL Software - avast! service GUI component.) -- E:\Program Files\Alwil Software\Avast4\ashDisp.exe O4 - HKCU\..\Run: [gStart] . (.GARMIN Corp. - gStart Application.) -- E:\Program Files\Garmin\Training Center\gStart.exe O4 - HKCU\..\Run: [TomTomHOME.exe] . (.TomTom - System Tray application for TomTom HOME.) -- E:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_F6BE39D8C5681FF59D4B65C947D82C5A] . (.Google Inc. - Google Chrome.) -- E:\Users\steph\AppData\Local\Google\Chrome\Application\chrome.exe O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- E:\Program Files\Windows Sidebar\sidebar.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- E:\Program Files\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- E:\Program Files\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- E:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- E:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-21-2403120854-2038271503-525162828-1005\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- E:\Program Files\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-21-2403120854-2038271503-525162828-1005\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- E:\Windows\System32\mctadmin.exe ~ Scan Application in 00mn 00s ---\\ Autres liens utilisateurs (O4) O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.) -- E:\Windows\system32\eudcedit.exe O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) -- E:\Windows\system32\WFS.exe O4 - GS\Desktop: ACleaner.lnk . (...) -- E:\Program Files\ACleaner\Allcleaner.exe (.not file.) O4 - GS\TaskBar: Calculator.lnk . (.Microsoft Corporation - Calculatrice de Windows.) -- E:\Windows\system32\calc.exe O4 - GS\TaskBar: Démarrer Google Earth en mode DirectX.lnk . (.Google - Google Earth.) -- E:\Program Files\Google\Google Earth\client\googleearth.exe O4 - GS\TaskBar: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- E:\Users\steph\AppData\Local\Google\Chrome\Application\chrome.exe O4 - GS\TaskBar: Microsoft Office Picture Manager.lnk . (...) -- E:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe O4 - GS\TaskBar: Microsoft Office Word 2007.lnk . (...) -- E:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe O4 - GS\TaskBar: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- E:\Program Files\Mozilla Firefox\firefox.exe O4 - GS\TaskBar: Training Center.lnk . (.GARMIN Corp. - Garmin Training Center(r) Application.) -- E:\Program Files\Garmin\Training Center\Training Center.exe O4 - GS\TaskBar: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- E:\Windows\explorer.exe O4 - GS\TaskBar: Windows Live Mail.lnk . (.Microsoft Corporation - Windows Live Mail.) -- E:\Program Files\Windows Live\Mail\wlmail.exe O4 - GS\TaskBar: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- E:\Program Files\Windows Media Player\wmplayer.exe O4 - GS\Programs: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- E:\Users\steph\AppData\Local\Google\Chrome\Application\chrome.exe O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- E:\Program Files\Internet Explorer\iexplore.exe O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- E:\Program Files\Internet Explorer\iexplore.exe O4 - GS\QuickLaunch: Spybot - Search & Destroy.lnk . (.Safer Networking Limited - Spybot - Search & Destroy.) -- E:\Program Files\Spybot - Search & Destroy\SpybotSD.exe O4 - GS\QuickLaunch: Xilisoft Convertisseur Vidéo Ultimate.lnk . (...) -- E:\Program Files\Xilisoft\Video Converter Ultimate\vcloader.exe O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- E:\Program Files\Internet Explorer\iexplore.exe O4 - GS\Desktop: AdwCleaner - Raccourci.lnk . (...) -- E:\Users\steph\Downloads\AdwCleaner.exe O4 - GS\Desktop: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- E:\Users\steph\AppData\Local\Google\Chrome\Application\chrome.exe O4 - GS\Desktop: Spybot - Search & Destroy.lnk . (.Safer Networking Limited - Spybot - Search & Destroy.) -- E:\Program Files\Spybot - Search & Destroy\SpybotSD.exe O4 - GS\Desktop: TuneUp Maintenance en 1 clic (2).lnk . (.TuneUp Software - TuneUp Maintenance en 1 clic.) -- E:\Program Files\TuneUp Utilities 2010\OneClick.exe O4 - GS\Desktop: WBFS Manager 3.0.lnk . (...) -- E:\Program Files\WBFS\WBFS Manager 3.0\WBFSManager.exe O4 - GS\Desktop: Xilisoft Convertisseur Vidéo Ultimate.lnk . (...) -- E:\Program Files\Xilisoft\Video Converter Ultimate\vcloader.exe ~ Scan Global Startup in 00mn 00s ---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5) O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no ~ Scan IE Control Panel in 00mn 00s ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: @E:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} . (.Microsoft Corporation - Windows Live Messenger Companion core resources.) -- E:\Program Files\Windows Live\Companion\companionres.dll O9 - Extra button: @E:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- E:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- E:\Program Files\MICROS~3\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- E:\Program Files\Microsoft Office\Office12\REFBARH.ICO ~ Scan IE Extra Buttons in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- E:\Windows\system32\NLAapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- E:\Windows\system32\napinsp.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- E:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- E:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- E:\Windows\system32\mswsock.dll O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- E:\Windows\system32\winrnr.dll O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- E:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- E:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll ~ Scan Winsock in 00mn 00s ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - https://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab ~ Scan Objets ActiveX in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{9F022FE9-0ABA-42BA-B6E1-8E42338361CD}: DhcpNameServer = 212.27.40.240 212.27.40.241 O17 - HKLM\System\CS1\Services\Tcpip\..\{9F022FE9-0ABA-42BA-B6E1-8E42338361CD}: DhcpNameServer = 212.27.40.240 212.27.40.241 O17 - HKLM\System\CS2\Services\Tcpip\..\{9F022FE9-0ABA-42BA-B6E1-8E42338361CD}: DhcpNameServer = 212.27.40.240 212.27.40.241 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241 ~ Scan Domain in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- E:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- E:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.dll ~ Scan Protocole Additionnel in 00mn 00s ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - AppInit_DLLs: . (...) - E:\Program Files\browse~1\261070~1.41\{c16c1~1\browse~1.dll (.not file.) ~ Scan AppInit DLL in 00mn 00s ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. ~ Scan SSODL in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - E:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) . (.ALWIL Software - avast! Antivirus updating service.) - E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus (avast! Antivirus) . (.ALWIL Software - avast! antivirus service.) - E:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: Google Update Service (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - E:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - E:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - E:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 306.9.) - E:\Windows\system32\nvvsvc.exe O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) . (.NVIDIA Corporation - NVIDIA Settings Update Manager.) - E:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe O23 - Service: SBSD Security Center Service (SBSDWSCService) . (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) - E:\Program Files\Spybot - Search & Destroy\SDWinSec.exe O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) . (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - E:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: TomTomHOMEService (TomTomHOMEService) . (.TomTom - Windows Service for TomTom HOME.) - E:\Program Files\TomTom HOME 2\TomTomHOMEService.exe O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) . (.TuneUp Software - TuneUp Utilities Service.) - E:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe ~ Scan Services in 00mn 09s ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(...) - (.not file.) ~ Scan Desktop Component in 00mn 00s ---\\ BootExecute (O34) O34 - HKLM BootExecute: (autocheck autochk *) - File not found ~ Scan Keys in 00mn 00s ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - E:\Windows\Tasks\Adobe Flash Player Updater.job [1002] O39 - APT:Automatic Planified Task - E:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1050] O39 - APT:Automatic Planified Task - E:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1054] O39 - APT:Automatic Planified Task - E:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2403120854-2038271503-525162828-1001Core.job [1026] O39 - APT:Automatic Planified Task - E:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2403120854-2038271503-525162828-1001UA.job [1078] O39 - APT:Automatic Planified Task - E:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2403120854-2038271503-525162828-1003Core.job [1022] O39 - APT:Automatic Planified Task - E:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2403120854-2038271503-525162828-1003UA.job [1074] O39 - APT:Automatic Planified Task - E:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2403120854-2038271503-525162828-1004Core.job [1030] O39 - APT:Automatic Planified Task - E:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2403120854-2038271503-525162828-1004UA.job [1082] [MD5.EA856F4A46320389D1899B2CAA7BF40F] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- E:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [253656] [MD5.3CB07566302BCEEB898DE270A0BEC175] [APT] [Adobe Reader and Acrobat Manager] (.Adobe Systems Incorporated.) -- E:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352] [MD5.F9E87505DC0B27A9E3D9A99442303DC3] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- E:\Program Files\CCleaner\CCleaner.exe [3288856] [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [Google Updater and Installer] (.Google Inc..) -- E:\Users\steph\AppData\Local\Google\Update\GoogleUpdate.exe [136176] [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- E:\Program Files\Google\Update\GoogleUpdate.exe [136176] [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- E:\Program Files\Google\Update\GoogleUpdate.exe [136176] [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-2403120854-2038271503-525162828-1001Core] (.Google Inc..) -- E:\Users\steph\AppData\Local\Google\Update\GoogleUpdate.exe [136176] [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-2403120854-2038271503-525162828-1001UA] (.Google Inc..) -- E:\Users\steph\AppData\Local\Google\Update\GoogleUpdate.exe [136176] [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-2403120854-2038271503-525162828-1003Core] (.Google Inc..) -- E:\Users\steph\AppData\Local\Google\Update\GoogleUpdate.exe [136176] [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-2403120854-2038271503-525162828-1003UA] (.Google Inc..) -- E:\Users\steph\AppData\Local\Google\Update\GoogleUpdate.exe [136176] [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-2403120854-2038271503-525162828-1004Core] (.Google Inc..) -- E:\Users\steph\AppData\Local\Google\Update\GoogleUpdate.exe [136176] [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-2403120854-2038271503-525162828-1004UA] (.Google Inc..) -- E:\Users\steph\AppData\Local\Google\Update\GoogleUpdate.exe [136176] [MD5.12916E0642E92561C98B18A2A2D01B14] [APT] [Java Update Scheduler] (.Sun Microsystems, Inc..) -- E:\Program Files\Common Files\Java\Java Update\jusched.exe [252848] [MD5.CF9F7B70B4C955D300CD26D6737C950F] [APT] [TuneUpUtilities_Task_BkGndMaintenance] (.TuneUp Software.) -- E:\Program Files\TuneUp Utilities 2010\OneClick.exe [648000] [MD5.B95AC0CDB8F068F0C024CD344B354298] [APT] [{02BBEE8E-E62D-4411-A39D-5DC5A67719F7}] (.Google Inc..) -- E:\Users\steph\AppData\Local\Google\Chrome\Application\chrome.exe [1274320] [MD5.00000000000000000000000000000000] [APT] [{2924DC44-93D5-4525-9DF0-ED8F0D3A467A}] (...) -- E:\Program Files\Microsoft Office\Office12\OUTLOOK.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{4A67A9C8-9191-40E2-A903-1DF1E5D048CC}] (...) -- F:\SETUP.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{97DF9688-2262-4F42-A500-BA98F8EE50E4}] (...) -- E:\Program Files\LG Electronics\LG Bluetooth Drivers\UninstallShld.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{A9A54E10-77C2-466A-BE37-2BFFE03E1A96}] (...) -- E:\Program Files\Microsoft Office\Office12\OUTLOOK.exe (.not file.) [0] ~ Scan Scheduled Task in 00mn 39s ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- E:\Windows\System32\wmploc.dll O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- E:\Windows\System32\ie4uinit.exe O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d’IEAK.) -- E:\Windows\System32\iedkcs32.dll O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- E:\Program Files\Java\jre6\bin\regutils.dll O40 - ASIC: Microsoft Windows Media Player 12.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- E:\Windows\System32\wmpdxm.dll O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- E:\Windows\System32\themeui.dll O40 - ASIC: Microsoft Windows - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- E:\Program Files\Windows Mail\WinMail.exe O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- E:\Windows\System32\msieftp.dll O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- E:\Windows\System32\wmploc.dll O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- E:\Windows\System32\shell32.dll O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- E:\Windows\System32\ie4uinit.exe O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- E:\Windows\system32\mscories.dll ~ Scan Active Setup in 00mn 00s ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: E:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - E:\Windows\system32\drivers\afd.sys O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - E:\Windows\System32\DRIVERS\blbdrive.sys O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - E:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: E:\Windows\System32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - E:\Windows\System32\drivers\csc.sys O41 - Driver: E:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - E:\Windows\System32\Drivers\dfsc.sys O41 - Driver: E:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - E:\Windows\System32\drivers\discache.sys O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - E:\Windows\system32\drivers\mssmbios.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - E:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: E:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - E:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: E:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - E:\Windows\System32\drivers\nsiproxy.sys O41 - Driver: E:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - E:\Windows\System32\DRIVERS\pacer.sys O41 - Driver: E:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - E:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: E:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - E:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: E:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - E:\Windows\System32\drivers\rdpencdd.sys O41 - Driver: E:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - E:\Windows\System32\drivers\rdprefmp.sys O41 - Driver: E:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - E:\Windows\System32\DRIVERS\tdx.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - E:\Windows\system32\drivers\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - E:\Windows\system32\drivers\vga.sys O41 - Driver: E:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - E:\Windows\System32\DRIVERS\wanarp.sys O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - E:\Windows\System32\DRIVERS\wfplwf.sys ~ Scan Drivers in 00mn 00s ---\\ Logiciels installés (O42) O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Reader XI (11.0.02) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AB0000000001} O42 - Logiciel: Archiveur WinRAR - (...) [HKLM] -- WinRAR archiver O42 - Logiciel: Garmin TOPO France Sud-Ouest v2 - (.Garmin Ltd or its subsidiaries.) [HKLM] -- {01B3EA23-E793-4CE4-968E-6B4DB7F39CC9} O42 - Logiciel: Garmin USB Drivers - (.Garmin Ltd or its subsidiaries.) [HKLM] -- {B1102A25-3AA3-446B-AA0F-A699B07A02FD} O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome O42 - Logiciel: Java 7 Update 17 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217017FF} O42 - Logiciel: Malwarebytes Anti-Malware version 1.70.0.1100 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1 O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: VLC media player 1.1.5 - (.VideoLAN.) [HKLM] -- VLC media player O42 - Logiciel: VSO Image Resizer 1.0.9 - (.VSO-Software.) [HKLM] -- VSO Image Resizer_is1 O42 - Logiciel: WBFS Manager 3.0 - (.AlexDP.) [HKLM] -- WBFS Manager 3.0 O42 - Logiciel: Windows Driver Package - Garmin (grmnusb) GARMIN Devices (03/08/2007 2.2.1 - (.Garmin.) [HKLM] -- 45A7283175C62FAC673F913C1F532C5361F97841 O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} O42 - Logiciel: Xilisoft Convertisseur Vidéo Ultimate - (.Xilisoft.) [HKCU] -- Xilisoft Convertisseur Vidéo Ultimate O42 - Logiciel: avast! Antivirus v4.8 - (.Alwil Software.) [HKLM] -- avast! O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKLM] -- uTorrent ---\\ HKCU & HKLM Software Keys [HKCU\Software\AC3Filter] [HKCU\Software\ALWIL Software] [HKCU\Software\ActaLogic] [HKCU\Software\Adobe] [HKCU\Software\AppDataLow\Software\JavaSoft] [HKCU\Software\AppDataLow\Software\Microsoft] [HKCU\Software\AppDataLow\Software] [HKCU\Software\AppDataLow] [HKCU\Software\Apple Computer, Inc.] [HKCU\Software\Apple Inc.] [HKCU\Software\BVRP Software] [HKCU\Software\BitTorrent] [HKCU\Software\Canneverbe Limited] [HKCU\Software\CeWe Color] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\DameWare Development] [HKCU\Software\DivXNetworks] [HKCU\Software\Dropbox] [HKCU\Software\Eraser] [HKCU\Software\FreeTime] [HKCU\Software\GARMIN] [HKCU\Software\GNU] [HKCU\Software\Gabest] [HKCU\Software\Google] [HKCU\Software\Hewlett-Packard] [HKCU\Software\IM Providers] [HKCU\Software\ISSS] [HKCU\Software\ITNConv] [HKCU\Software\JavaSoft] [HKCU\Software\LG PC Suite2] [HKCU\Software\Ligos] [HKCU\Software\LowRegistry] [HKCU\Software\MCAFEE] [HKCU\Software\Macromedia] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\Memory-Map] [HKCU\Software\Modern UI Test] [HKCU\Software\MozillaPlugins] [HKCU\Software\NVIDIA Corporation] [HKCU\Software\Netscape] [HKCU\Software\ODBC] [HKCU\Software\Orange] [HKCU\Software\Pige Electronique] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\SCS Software] [HKCU\Software\SUPERAntiSpyware.com] [HKCU\Software\Safer Networking Limited] [HKCU\Software\Sony Ericsson] [HKCU\Software\TeleCharger] [HKCU\Software\TomTom] [HKCU\Software\Trolltech] [HKCU\Software\TuneUp] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\VSO] [HKCU\Software\WinRAR SFX] [HKCU\Software\WinRAR] [HKCU\Software\Wise Solutions] [HKCU\Software\Xilisoft] [HKCU\Software\ZAR] [HKCU\Software\ZebHelpProcess Helper] [HKCU\Software\dskMetrics] [HKCU\Software\mozilla] [HKLM\Software\AGEIA Technologies] [HKLM\Software\ALWIL Software] [HKLM\Software\ASUS] [HKLM\Software\ATI Technologies] [HKLM\Software\ActaLogic] [HKLM\Software\Adobe] [HKLM\Software\AdwCleaner] [HKLM\Software\AppDataLow] [HKLM\Software\Apple Computer, Inc.] [HKLM\Software\Apple Inc.] [HKLM\Software\Bunndle] [HKLM\Software\CDDB] [HKLM\Software\Canneverbe Limited] [HKLM\Software\CheckPoint] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\DivXNetworks] [HKLM\Software\DivX] [HKLM\Software\DownloadHelper] [HKLM\Software\GEAR Software] [HKLM\Software\GNU] [HKLM\Software\Garmin] [HKLM\Software\Google] [HKLM\Software\HPS] [HKLM\Software\Hewlett-Packard] [HKLM\Software\ISSS] [HKLM\Software\Intel] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\Khronos] [HKLM\Software\Licenses] [HKLM\Software\Loader] [HKLM\Software\Macromedia] [HKLM\Software\Malwarebytes' Anti-Malware] [HKLM\Software\McAfee.com] [HKLM\Software\MimarSinan] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\NVIDIA Corporation] [HKLM\Software\ODBC] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\RegisteredApplications] [HKLM\Software\SCS Software] [HKLM\Software\SUPERAntiSpyware.com] [HKLM\Software\Safer Networking Limited] [HKLM\Software\SecureDigitalServices] [HKLM\Software\Sonic] [HKLM\Software\Symantec] [HKLM\Software\TomTom] [HKLM\Software\TuneUp] [HKLM\Software\Uniblue] [HKLM\Software\VideoLAN] [HKLM\Software\Windows] [HKLM\Software\Wise Solutions] [HKLM\Software\Wow6432Node] [HKLM\Software\ZTE] [HKLM\Software\Zone Labs] [HKLM\Software\dotNetInstaller] [HKLM\Software\mozilla.org] [HKLM\Software\vso] ~ Scan Softwares in 00mn 00s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 09/03/2013 - 08:05:58 - [0,001] ----D E:\Program Files\ACleaner O43 - CFD: 10/03/2013 - 18:00:08 - [119,532] ----D E:\Program Files\Adobe O43 - CFD: 28/02/2011 - 16:42:29 - [212,261] ----D E:\Program Files\Alwil Software O43 - CFD: 14/03/2011 - 18:19:37 - [0,140] ----D E:\Program Files\AviSynth 2.5 O43 - CFD: 09/03/2013 - 07:20:23 - [5,085] ----D E:\Program Files\CCleaner O43 - CFD: 16/08/2012 - 13:19:27 - [0] ----D E:\Program Files\CDBurnerXP O43 - CFD: 25/12/2012 - 19:03:17 - [0] ----D E:\Program Files\cdp.pl O43 - CFD: 30/06/2012 - 18:39:19 - [0] ----D E:\Program Files\Cell_Phone_Unlock O43 - CFD: 16/03/2013 - 19:52:39 - [416,237] ----D E:\Program Files\Common Files O43 - CFD: 04/05/2011 - 18:07:06 - [0,290] ----D E:\Program Files\DIFX O43 - CFD: 05/06/2011 - 12:26:41 - [1,610] ----D E:\Program Files\DivX O43 - CFD: 05/03/2011 - 13:05:30 - [79,371] ----D E:\Program Files\DVD Maker O43 - CFD: 28/02/2011 - 18:42:08 - [2,825] ----D E:\Program Files\Eraser O43 - CFD: 28/02/2011 - 16:33:00 - [0] R---D E:\Program Files\Fichiers communs O43 - CFD: 27/12/2012 - 18:39:50 - [0] ----D E:\Program Files\Fnac O43 - CFD: 09/03/2013 - 08:09:58 - [0,116] ----D E:\Program Files\Free Video Converter O43 - CFD: 16/01/2013 - 09:23:48 - [0] ----D E:\Program Files\FreeTime O43 - CFD: 09/03/2013 - 10:59:40 - [95,284] ----D E:\Program Files\Garmin O43 - CFD: 09/03/2013 - 11:00:44 - [7,796] ----D E:\Program Files\Garmin GPS Plugin O43 - CFD: 23/11/2011 - 19:10:01 - [98,132] ----D E:\Program Files\Google O43 - CFD: 30/06/2012 - 18:42:21 - [4,967] --H-D E:\Program Files\InstallShield Installation Information O43 - CFD: 15/03/2013 - 17:32:39 - [6,232] ----D E:\Program Files\Internet Explorer O43 - CFD: 10/03/2013 - 18:04:16 - [206,902] ----D E:\Program Files\Java O43 - CFD: 10/03/2013 - 17:50:03 - [12,156] ----D E:\Program Files\Malwarebytes' Anti-Malware O43 - CFD: 14/03/2011 - 18:26:15 - [0] ----D E:\Program Files\Microsoft O43 - CFD: 14/07/2009 - 10:01:21 - [140,966] ----D E:\Program Files\Microsoft Games O43 - CFD: 06/07/2011 - 17:59:11 - [359,620] ----D E:\Program Files\Microsoft Office O43 - CFD: 15/03/2013 - 17:32:35 - [40,835] ----D E:\Program Files\Microsoft Silverlight O43 - CFD: 28/02/2011 - 20:57:01 - [1,745] ----D E:\Program Files\Microsoft SQL Server Compact Edition O43 - CFD: 07/07/2011 - 19:47:24 - [3,554] ----D E:\Program Files\Microsoft Works O43 - CFD: 06/07/2011 - 17:58:52 - [7,789] ----D E:\Program Files\Microsoft.NET O43 - CFD: 15/02/2012 - 11:54:10 - [38,211] ----D E:\Program Files\Mozilla Firefox O43 - CFD: 06/07/2011 - 17:42:23 - [0,025] ----D E:\Program Files\MSBuild O43 - CFD: 31/08/2011 - 09:13:53 - [0] ----D E:\Program Files\MSXML 4.0 O43 - CFD: 18/11/2012 - 20:39:03 - [750,820] ----D E:\Program Files\NVIDIA Corporation O43 - CFD: 07/12/2012 - 19:03:30 - [72,326] ----D E:\Program Files\QuickTime O43 - CFD: 14/07/2009 - 05:52:30 - [37,357] ----D E:\Program Files\Reference Assemblies O43 - CFD: 05/01/2012 - 13:05:48 - [62,829] ----D E:\Program Files\Spybot - Search & Destroy O43 - CFD: 03/06/2011 - 13:53:51 - [0] ----D E:\Program Files\TomTom DesktopSuite O43 - CFD: 21/09/2012 - 19:00:30 - [48,470] ----D E:\Program Files\TomTom HOME 2 O43 - CFD: 03/06/2011 - 13:54:52 - [0,021] ----D E:\Program Files\TomTom International B.V O43 - CFD: 16/03/2011 - 16:33:07 - [55,561] ----D E:\Program Files\TuneUp Utilities 2010 O43 - CFD: 09/03/2013 - 08:13:02 - [0] ----D E:\Program Files\UltraISO O43 - CFD: 14/07/2009 - 05:53:23 - [0] --H-D E:\Program Files\Uninstall Information O43 - CFD: 10/12/2012 - 18:39:16 - [0,924] ----D E:\Program Files\uTorrent O43 - CFD: 28/02/2011 - 18:12:29 - [76,799] ----D E:\Program Files\VideoLAN O43 - CFD: 03/03/2011 - 18:10:33 - [11,329] ----D E:\Program Files\VSO O43 - CFD: 07/01/2012 - 13:58:56 - [3,150] ----D E:\Program Files\WBFS O43 - CFD: 05/03/2011 - 13:05:29 - [2,909] ----D E:\Program Files\Windows Defender O43 - CFD: 10/05/2012 - 08:13:31 - [6,689] ----D E:\Program Files\Windows Journal O43 - CFD: 27/04/2012 - 20:32:37 - [183,937] ----D E:\Program Files\Windows Live O43 - CFD: 05/03/2011 - 13:05:30 - [5,895] ----D E:\Program Files\Windows Mail O43 - CFD: 05/03/2011 - 13:05:29 - [6,298] ----D E:\Program Files\Windows Media Player O43 - CFD: 28/02/2011 - 16:33:00 - [11,632] ----D E:\Program Files\Windows NT O43 - CFD: 05/03/2011 - 13:05:29 - [4,213] ----D E:\Program Files\Windows Photo Viewer O43 - CFD: 05/03/2011 - 13:05:29 - [0,181] ----D E:\Program Files\Windows Portable Devices O43 - CFD: 05/03/2011 - 13:05:30 - [6,724] ----D E:\Program Files\Windows Sidebar O43 - CFD: 09/03/2013 - 08:43:57 - [3,342] ----D E:\Program Files\WinRAR O43 - CFD: 16/03/2013 - 19:52:36 - [110,880] ----D E:\Program Files\Xilisoft O43 - CFD: 13/06/2011 - 08:19:45 - [0,158] ----D E:\Program Files\ZAR O43 - CFD: 20/03/2013 - 18:22:42 - [15,219] ----D E:\Program Files\ZHPDiag O43 - CFD: 13/04/2012 - 18:46:20 - [21,688] ----D E:\Program Files\ZTE O43 - CFD: 10/03/2013 - 18:00:19 - [6,274] ----D E:\Program Files\Common Files\Adobe O43 - CFD: 16/03/2013 - 20:33:47 - [64,666] ----D E:\Program Files\Common Files\Apple O43 - CFD: 06/07/2011 - 17:59:07 - [0,089] ----D E:\Program Files\Common Files\DESIGNER O43 - CFD: 02/04/2011 - 16:21:22 - [1,825] ----D E:\Program Files\Common Files\InstallShield O43 - CFD: 15/02/2013 - 19:07:14 - [1,184] ----D E:\Program Files\Common Files\Java O43 - CFD: 02/03/2012 - 12:46:07 - [258,279] ----D E:\Program Files\Common Files\microsoft shared O43 - CFD: 05/06/2011 - 12:26:38 - [0,438] ----D E:\Program Files\Common Files\PX Storage Engine O43 - CFD: 14/07/2009 - 03:37:05 - [0,003] ----D E:\Program Files\Common Files\Services O43 - CFD: 14/07/2009 - 03:37:05 - [39,200] ----D E:\Program Files\Common Files\SpeechEngines O43 - CFD: 10/11/2011 - 17:51:18 - [42,206] ----D E:\Program Files\Common Files\System O43 - CFD: 28/02/2011 - 19:08:22 - [0] ----D E:\Program Files\Common Files\Windows Live O43 - CFD: 16/03/2013 - 20:33:47 - [0,005] ----D E:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1 O43 - CFD: 10/03/2013 - 18:03:35 - [239,583] ----D E:\ProgramData\Adobe O43 - CFD: 09/06/2012 - 07:39:02 - [158,434] ----D E:\ProgramData\Apple O43 - CFD: 09/06/2012 - 07:39:48 - [25,679] ----D E:\ProgramData\Apple Computer O43 - CFD: 14/07/2009 - 05:53:55 - [0] --H-D E:\ProgramData\Application Data O43 - CFD: 28/02/2011 - 16:33:00 - [0] --H-D E:\ProgramData\Bureau O43 - CFD: 14/05/2011 - 18:01:37 - [0] ----D E:\ProgramData\BVRP Software O43 - CFD: 06/03/2011 - 17:43:47 - [0] ----D E:\ProgramData\Canneverbe Limited O43 - CFD: 04/01/2012 - 14:16:19 - [0,004] ----D E:\ProgramData\CheckPoint O43 - CFD: 14/07/2009 - 05:53:55 - [0] --H-D E:\ProgramData\Desktop O43 - CFD: 05/06/2011 - 12:26:44 - [1,040] ----D E:\ProgramData\DivX O43 - CFD: 14/07/2009 - 05:53:55 - [0] --H-D E:\ProgramData\Documents O43 - CFD: 28/02/2011 - 16:33:00 - [0] --H-D E:\ProgramData\Favoris O43 - CFD: 14/07/2009 - 05:53:55 - [0] --H-D E:\ProgramData\Favorites O43 - CFD: 26/03/2011 - 19:32:30 - [532,435] ----D E:\ProgramData\GARMIN O43 - CFD: 26/12/2012 - 16:49:13 - [0,938] ----D E:\ProgramData\hps O43 - CFD: 06/01/2012 - 18:57:00 - [18,407] ----D E:\ProgramData\Malwarebytes O43 - CFD: 30/11/2012 - 18:24:37 - [0] ----D E:\ProgramData\McAfee O43 - CFD: 28/02/2011 - 16:33:00 - [0] --H-D E:\ProgramData\Menu Démarrer O43 - CFD: 06/07/2011 - 17:43:12 - [197,764] -S--D E:\ProgramData\Microsoft O43 - CFD: 14/03/2013 - 20:13:39 - [0,062] ----D E:\ProgramData\Microsoft Help O43 - CFD: 28/02/2011 - 16:33:00 - [0] --H-D E:\ProgramData\Modèles O43 - CFD: 05/06/2011 - 17:03:27 - [0,000] ----D E:\ProgramData\Norton O43 - CFD: 05/06/2011 - 15:15:13 - [0,164] ----D E:\ProgramData\NortonInstaller O43 - CFD: 20/03/2013 - 16:41:33 - [2,252] ----D E:\ProgramData\NVIDIA O43 - CFD: 05/03/2011 - 11:37:31 - [2,085] ----D E:\ProgramData\NVIDIA Corporation O43 - CFD: 17/12/2011 - 09:32:45 - [69,803] ----D E:\ProgramData\PC Tools O43 - CFD: 09/06/2012 - 11:25:16 - [0,563] ----D E:\ProgramData\Sony Ericsson O43 - CFD: 10/03/2013 - 19:55:04 - [1,785] ----D E:\ProgramData\Spybot - Search & Destroy O43 - CFD: 14/07/2009 - 05:53:55 - [0] --H-D E:\ProgramData\Start Menu O43 - CFD: 06/01/2012 - 21:11:30 - [0,628] ----D E:\ProgramData\STOPzilla! O43 - CFD: 12/03/2011 - 13:37:52 - [0,000] ----D E:\ProgramData\Sun O43 - CFD: 06/12/2011 - 19:32:14 - [0,004] ----D E:\ProgramData\SUPERAntiSpyware.com O43 - CFD: 05/06/2011 - 17:03:25 - [0,000] ----D E:\ProgramData\Symantec O43 - CFD: 17/12/2011 - 09:33:02 - [0] ---AD E:\ProgramData\TEMP O43 - CFD: 14/07/2009 - 05:53:55 - [0] --H-D E:\ProgramData\Templates O43 - CFD: 26/12/2012 - 18:51:16 - [4,900] ----D E:\ProgramData\tmp O43 - CFD: 03/06/2011 - 13:55:12 - [0,035] ----D E:\ProgramData\TomTom O43 - CFD: 16/03/2011 - 16:29:59 - [11,719] ----D E:\ProgramData\TuneUp Software O43 - CFD: 04/01/2012 - 15:51:43 - [0] ----D E:\ProgramData\ZA_PreservedFiles O43 - CFD: 28/02/2011 - 18:34:30 - [0,007] ----D E:\ProgramData\ZoneFiveSoftware O43 - CFD: 09/06/2012 - 07:40:23 - [0,002] ----D E:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521} O43 - CFD: 16/03/2011 - 16:29:03 - [17,670] -SH-D E:\ProgramData\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC} O43 - CFD: 22/03/2012 - 17:53:51 - [9,731] ----D E:\Users\steph\AppData\Roaming\Adobe O43 - CFD: 07/10/2012 - 08:36:38 - [-1038,281] ----D E:\Users\steph\AppData\Roaming\Apple Computer O43 - CFD: 06/03/2011 - 17:43:47 - [0,002] ----D E:\Users\steph\AppData\Roaming\Canneverbe Limited O43 - CFD: 12/08/2012 - 16:49:51 - [0,003] ----D E:\Users\steph\AppData\Roaming\DameWare Development O43 - CFD: 05/06/2011 - 12:20:07 - [0,123] ----D E:\Users\steph\AppData\Roaming\DivX O43 - CFD: 16/08/2012 - 13:22:28 - [0,076] ----D E:\Users\steph\AppData\Roaming\Dropbox O43 - CFD: 13/08/2012 - 14:10:33 - [0] ----D E:\Users\steph\AppData\Roaming\DWMRCMSI O43 - CFD: 16/01/2013 - 10:23:58 - [0,001] ----D E:\Users\steph\AppData\Roaming\FreeVideoConverter O43 - CFD: 04/05/2011 - 18:07:15 - [9,840] ----D E:\Users\steph\AppData\Roaming\GARMIN O43 - CFD: 28/02/2011 - 18:48:12 - [0,001] ----D E:\Users\steph\AppData\Roaming\gtopala O43 - CFD: 28/07/2012 - 11:50:16 - [0,000] ----D E:\Users\steph\AppData\Roaming\Identities O43 - CFD: 07/01/2012 - 10:37:45 - [0,001] ----D E:\Users\steph\AppData\Roaming\LG Electronics O43 - CFD: 28/02/2011 - 16:41:01 - [14,462] ----D E:\Users\steph\AppData\Roaming\Macromedia O43 - CFD: 06/01/2012 - 18:57:21 - [0,021] ----D E:\Users\steph\AppData\Roaming\Malwarebytes O43 - CFD: 14/07/2009 - 10:00:32 - [0] ----D E:\Users\steph\AppData\Roaming\Media Center Programs O43 - CFD: 13/09/2012 - 19:20:00 - [2,359] -S--D E:\Users\steph\AppData\Roaming\Microsoft O43 - CFD: 04/03/2011 - 18:22:29 - [21,548] ----D E:\Users\steph\AppData\Roaming\Mozilla O43 - CFD: 16/03/2013 - 20:31:06 - [0,955] ----D E:\Users\steph\AppData\Roaming\NVIDIA O43 - CFD: 03/06/2011 - 13:54:56 - [1,186] ----D E:\Users\steph\AppData\Roaming\TomTom O43 - CFD: 16/03/2011 - 16:30:07 - [0,121] ----D E:\Users\steph\AppData\Roaming\TuneUp Software O43 - CFD: 16/03/2013 - 19:51:45 - [3,835] ----D E:\Users\steph\AppData\Roaming\uTorrent O43 - CFD: 15/01/2013 - 21:10:27 - [0] ----D E:\Users\steph\AppData\Roaming\VideoConverterPackages O43 - CFD: 02/03/2013 - 18:57:20 - [2,032] ----D E:\Users\steph\AppData\Roaming\vlc O43 - CFD: 21/07/2012 - 20:57:52 - [0,001] ----D E:\Users\steph\AppData\Roaming\Vso O43 - CFD: 02/03/2011 - 17:38:05 - [0,000] ----D E:\Users\steph\AppData\Roaming\Windows Live Writer O43 - CFD: 28/02/2011 - 16:42:10 - [0,447] ----D E:\Users\steph\AppData\Roaming\WinRAR O43 - CFD: 16/03/2013 - 19:52:36 - [0,072] ----D E:\Users\steph\AppData\Roaming\Xilisoft O43 - CFD: 22/03/2012 - 18:20:57 - [0,000] ----D E:\Users\steph\AppData\Roaming\ZinioAlertMessenger.9310D8F796442B71068C511E15D70529A702D19D.1 O43 - CFD: 22/03/2012 - 17:55:07 - [125,195] ----D E:\Users\steph\AppData\Roaming\ZinioReader4.9310D8F796442B71068C511E15D70529A702D19D.1 O43 - CFD: 22/03/2012 - 17:53:12 - [32,036] ----D E:\Users\steph\AppData\Local\Adobe O43 - CFD: 27/03/2011 - 16:35:19 - [13,348] ----D E:\Users\steph\AppData\Local\adslTV O43 - CFD: 09/06/2012 - 07:37:59 - [0] ----D E:\Users\steph\AppData\Local\Apple O43 - CFD: 22/06/2012 - 17:48:15 - [181,905] ----D E:\Users\steph\AppData\Local\Apple Computer O43 - CFD: 28/02/2011 - 16:33:13 - [0] ----D E:\Users\steph\AppData\Local\Application Data O43 - CFD: 28/02/2011 - 16:39:24 - [1,173] ----D E:\Users\steph\AppData\Local\Apps O43 - CFD: 28/02/2011 - 20:37:49 - [0,051] ----D E:\Users\steph\AppData\Local\BuildAGadget Content O43 - CFD: 30/06/2012 - 18:34:30 - [0] ----D E:\Users\steph\AppData\Local\BVRP Software O43 - CFD: 28/07/2012 - 13:30:02 - [2,619] ----D E:\Users\steph\AppData\Local\CRE O43 - CFD: 28/02/2011 - 16:39:38 - [0] ----D E:\Users\steph\AppData\Local\Deployment O43 - CFD: 24/02/2013 - 13:41:44 - [0] ----D E:\Users\steph\AppData\Local\Diagnostics O43 - CFD: 21/09/2012 - 18:59:14 - [76,663] ----D E:\Users\steph\AppData\Local\Downloaded Installations O43 - CFD: 25/09/2011 - 17:13:35 - [0] ----D E:\Users\steph\AppData\Local\ElevatedDiagnostics O43 - CFD: 28/02/2011 - 20:16:26 - [0,171] ----D E:\Users\steph\AppData\Local\Eraser 6 O43 - CFD: 04/05/2011 - 18:07:16 - [500,547] ----D E:\Users\steph\AppData\Local\Garmin O43 - CFD: 07/12/2011 - 19:15:49 - [898,162] ----D E:\Users\steph\AppData\Local\Google O43 - CFD: 28/02/2011 - 16:33:13 - [0] ----D E:\Users\steph\AppData\Local\Historique O43 - CFD: 20/09/2012 - 19:26:37 - [0] ----D E:\Users\steph\AppData\Local\Macromedia O43 - CFD: 15/01/2013 - 21:10:25 - [-1507,846] ----D E:\Users\steph\AppData\Local\Microsoft O43 - CFD: 12/01/2012 - 19:20:06 - [1,653] ----D E:\Users\steph\AppData\Local\Microsoft Games O43 - CFD: 19/05/2012 - 14:08:56 - [0,325] ----D E:\Users\steph\AppData\Local\Microsoft Help O43 - CFD: 04/03/2011 - 18:22:21 - [71,127] ----D E:\Users\steph\AppData\Local\Mozilla O43 - CFD: 24/12/2012 - 15:11:35 - [1,344] ----D E:\Users\steph\AppData\Local\MPlayer O43 - CFD: 05/12/2011 - 10:53:09 - [0] ----D E:\Users\steph\AppData\Local\PackageAware O43 - CFD: 30/08/2011 - 09:36:55 - [0,001] ----D E:\Users\steph\AppData\Local\Programs O43 - CFD: 09/06/2012 - 11:25:16 - [0,112] ----D E:\Users\steph\AppData\Local\Sony Ericsson O43 - CFD: 20/03/2013 - 18:23:49 - [7,521] ----D E:\Users\steph\AppData\Local\Temp O43 - CFD: 28/02/2011 - 16:33:13 - [0] ----D E:\Users\steph\AppData\Local\Temporary Internet Files O43 - CFD: 03/06/2011 - 13:54:56 - [1,738] ----D E:\Users\steph\AppData\Local\TomTom O43 - CFD: 27/03/2011 - 18:43:39 - [0,099] ----D E:\Users\steph\AppData\Local\VirtualStore O43 - CFD: 31/12/2011 - 17:53:59 - [0,005] ----D E:\Users\steph\AppData\Local\WBFSManager O43 - CFD: 07/01/2012 - 11:55:31 - [0,000] ----D E:\Users\steph\AppData\Local\Western Digital O43 - CFD: 18/08/2012 - 16:34:44 - [0,125] ----D E:\Users\steph\AppData\Local\Windows Live O43 - CFD: 02/03/2011 - 17:55:44 - [0,618] ----D E:\Users\steph\AppData\Local\Windows Live Writer O43 - CFD: 28/02/2011 - 18:40:48 - [0,030] ----D E:\Users\steph\AppData\Local\ZoneFiveSoftware O43 - CFD: 18/03/2013 - 19:45:19 - [0] ----D E:\Users\steph\AppData\Local\{213E7CE0-B2BB-4299-B64C-F2D767E6F162} O43 - CFD: 19/03/2013 - 19:08:08 - [0] ----D E:\Users\steph\AppData\Local\{31E4A203-BEB5-409E-AECC-4EFB519665FE} O43 - CFD: 20/03/2013 - 18:19:05 - [0] ----D E:\Users\steph\AppData\Local\{573E0713-AF7D-4A29-82E9-685C2704ED73} O43 - CFD: 14/07/2009 - 05:42:04 - [0,014] R---D E:\Users\steph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 13/07/2012 - 16:26:31 - [0,000] R---D E:\Users\steph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 27/12/2011 - 15:06:33 - [0,000] ----D E:\Users\steph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 14/01/2013 - 19:34:15 - [0,002] ----D E:\Users\steph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome O43 - CFD: 14/07/2009 - 05:37:42 - [0,001] R---D E:\Users\steph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 05/12/2012 - 13:30:20 - [0,001] R---D E:\Users\steph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 07/01/2012 - 13:59:08 - [0,001] ----D E:\Users\steph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WBFS Manager O43 - CFD: 12/03/2013 - 20:02:15 - [0,001] ----D E:\Users\steph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 16/03/2013 - 20:28:32 - [0,006] ----D E:\Users\steph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Xilisoft ~ Scan Program Folder in 00mn 20s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.CB3938335C485C5F3008D139C0DC8580] - 20/03/2013 - 17:47:00 ---A- . (...) -- E:\Windows\WindowsUpdate.log [1685092] O44 - LFC:[MD5.7557072340E76CEAA2E8EF25EFB577A1] - 20/03/2013 - 16:41:34 ---A- . (...) -- E:\Windows\setupact.log [1464] O44 - LFC:[MD5.A6F13054CD989904CFCF64C6F9918421] - 20/03/2013 - 16:41:32 -S-A- . (...) -- E:\Windows\bootstat.dat [67584] O44 - LFC:[MD5.A64754BEE21D0A26100A65DAF8555CE7] - 18/03/2013 - 19:46:06 ---A- . (...) -- E:\AdwCleaner[R15].txt [3183] O44 - LFC:[MD5.234B360CAA10C9E0AE65A9CBCAA8144B] - 18/03/2013 - 19:35:37 ---A- . (...) -- E:\Windows\PFRO.log [2192] O44 - LFC:[MD5.7F9EF84FFC90DCEA66EADB3E21B60A63] - 17/03/2013 - 16:20:52 ---A- . (...) -- E:\AdwCleaner[S16].txt [3167] O44 - LFC:[MD5.D28998201BB60447968917E9C8ECBF23] - 16/03/2013 - 19:21:34 ---A- . (...) -- E:\Windows\System32\PerfStringBackup.INI [5374] O44 - LFC:[MD5.2B0F7AC2431337AD00C63A14D6CD7038] - 16/03/2013 - 19:21:34 ---A- . (...) -- E:\Windows\System32\perfc009.dat [963300] O44 - LFC:[MD5.6DA0E0BB0E96197B3A054CFB36237DC7] - 16/03/2013 - 19:21:34 ---A- . (...) -- E:\Windows\System32\perfc00C.dat [1115558] O44 - LFC:[MD5.E80ED14F19664334E07216EF08865881] - 16/03/2013 - 19:21:34 ---A- . (...) -- E:\Windows\System32\perfh009.dat [1515492] O44 - LFC:[MD5.12A47239E9AB5F13661E7D159FBD7D5B] - 16/03/2013 - 19:21:34 ---A- . (...) -- E:\Windows\System32\perfh00C.dat [3715886] O44 - LFC:[MD5.1FBCCC1C540ACC4EB3F718B659ED63CA] - 13/03/2013 - 11:49:03 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- E:\Windows\System32\FlashPlayerApp.exe [693976] O44 - LFC:[MD5.19718827ED5CA9E0D82AF2F0C5791A6E] - 13/03/2013 - 11:49:03 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- E:\Windows\System32\FlashPlayerCPLApp.cpl [73432] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 11/03/2013 - 18:10:55 ---A- . (...) -- E:\Windows\setuperr.log [0] O44 - LFC:[MD5.350C713C2D9B9F5549C50A8D3924E789] - 10/03/2013 - 18:04:20 ---A- . (.Oracle Corporation - Pas de description.) -- E:\Windows\System32\WindowsAccessBridge.dll [94112] O44 - LFC:[MD5.0B56B878192DBA95D66A3162D38911F2] - 10/03/2013 - 18:04:19 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- E:\Windows\System32\javaw.exe [174496] O44 - LFC:[MD5.A7F317118AFDE7A29D2EF7A722AC13B2] - 10/03/2013 - 18:04:19 ---A- . (.Oracle Corporation - Java(TM) Web Start Launcher.) -- E:\Windows\System32\javaws.exe [262560] O44 - LFC:[MD5.477D36327B9687846BEDCA9D3CC52AC5] - 10/03/2013 - 18:04:18 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- E:\Windows\System32\deployJava1.dll [782240] O44 - LFC:[MD5.04F4D7D7B97C616C33DC3EFFD48875E0] - 10/03/2013 - 18:04:18 ---A- . (.Oracle Corporation - Java(TM) Platform SE binary.) -- E:\Windows\System32\java.exe [174496] O44 - LFC:[MD5.D4BD9F86123C87ECA570418B69326F99] - 10/03/2013 - 18:04:18 ---A- . (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(T.) -- E:\Windows\System32\npDeployJava1.dll [861088] O44 - LFC:[MD5.629CABB0421668C9D3D402A3C3D77E14] - 10/03/2013 - 17:48:52 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- E:\Windows\System32\Drivers\mbam.sys [21104] O44 - LFC:[MD5.DDC594A5972FA53D8F5C13C7CEC2640B] - 10/03/2013 - 17:42:39 ---A- . (...) -- E:\PhysicalDisk0_MBR.bin [512] O44 - LFC:[MD5.B800BBCD95894C48A5430F54D0F9739D] - 10/03/2013 - 17:13:56 ---A- . (...) -- E:\AdwCleaner[S15].txt [3063] O44 - LFC:[MD5.61BFC693BABA9F4F76B56858962692B7] - 10/03/2013 - 17:08:26 ---A- . (...) -- E:\AdwCleaner[R14].txt [3000] O44 - LFC:[MD5.A57E2798F8BF5A3BDECABE0379AC5B1E] - 09/03/2013 - 07:47:14 ---A- . (...) -- E:\AdwCleaner[S14].txt [39904] O44 - LFC:[MD5.7DF2903C11D7B993F57F60E9AFD919AA] - 09/03/2013 - 07:40:59 ---A- . (...) -- E:\AdwCleaner[R13].txt [39496] O44 - LFC:[MD5.A36BD1EEC8F6B2CD30E665332F372767] - 08/03/2013 - 20:01:38 ---A- . (...) -- E:\Windows\System32\InstallUtil.InstallLog [1576] ~ Scan Files in 00mn 29s ---\\ Déni du service (Local Security Authority) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- E:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- E:\Windows\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- E:\Windows\System32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- E:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- E:\Windows\System32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- E:\Windows\System32\wdigest.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- E:\Windows\System32\tspkg.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- E:\Windows\System32\pku2u.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- E:\Windows\System32\livessp.dll ~ Scan Keys in 00mn 00s ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- E:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- E:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- E:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- E:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- E:\Windows\System32\Drivers\volmgrx.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- E:\Windows\System32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- E:\Windows\System32\Drivers\nsiproxy.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- E:\Windows\System32\Drivers\rdpencdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- E:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- E:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- E:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- E:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- E:\Windows\System32\Drivers\volmgrx.sys ~ Scan CSB in 00mn 00s ---\\ MountPoints2 Shell Key (O51) O51 - MPSK:{fe529880-8568-11e1-a241-001bfcd9ee95}\AutoRun\command. (...) -- H:\AutoRun.exe (.not file.) ~ Scan Keys in 00mn 00s ---\\ Trojan Driver Search Data (HKLM) (O52) O52 - TDSD: \Drivers32\"vidc.i420"="i420vfw.dll" . (.www.helixcommunity.org - Helix I420 YUV Codec.) -- E:\Windows\System32\i420vfw.dll O52 - TDSD: \Drivers32\"msacm.l3acm"="E:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- E:\Windows\System32\l3codeca.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- E:\Windows\System32\iccvid.dll O52 - TDSD: \drivers.desc\"E:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- E:\Windows\System32\l3codeca.acm ~ Scan Keys in 00mn 00s ---\\ ShareTools MSconfig StartupReg (O53) (None) ---\\ Microsoft Control Security Providers (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- E:\Windows\System32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- E:\Windows\System32\credssp.dll ~ Scan Keys in 00mn 00s ---\\ Microsoft Windows Policies System (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0 O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 O55 - MWPS:[HKCU\...\Policies\System] - "LogonHoursAction"=2 O55 - MWPS:[HKCU\...\Policies\System] - "DontDisplayLogonHoursWarnings"=1 ~ Scan Keys in 00mn 00s ---\\ Microsoft Windows Policies Explorer (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145 ~ Scan Keys in 00mn 00s ---\\ Liste des Drivers Système (O58) O58 - SDL:[MD5.21E785EBD7DC90A06391141AAC7892FB] - 14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- E:\Windows\System32\Drivers\adp94xx.sys [422976] O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 13/07/2009 - 22:40:41 ---A- . (...) -- E:\Windows\System32\ANSI.SYS [9029] ~ Scan Drivers in 00mn 00s ---\\ Liste des outils de nettoyage (O63) O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 ~ Scan ADS in 00mn 00s ---\\ Liste des services Legacy (O64) O64 - Services: CurCS - 25/11/2009 - E:\Windows\System32\DRIVERS\aswFsBlk.sys (aswFsBlk) .(.ALWIL Software - avast! File System Access Blocking Driver.) - LEGACY_ASWFSBLK O64 - Services: CurCS - 25/11/2009 - E:\Windows\System32\DRIVERS\aswMonFlt.sys (aswMonFlt) .(.ALWIL Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT O64 - Services: CurCS - 25/11/2009 - E:\Windows\System32\Drivers\aswRdr.sys (aswRdr) .(.ALWIL Software - avast! TDI RDR Driver.) - LEGACY_ASWRDR O64 - Services: CurCS - 25/11/2009 - E:\Windows\System32\Drivers\aswSP.sys (aswSP) .(.ALWIL Software - avast! self protection module.) - LEGACY_ASWSP O64 - Services: CurCS - 25/11/2009 - E:\Windows\System32\Drivers\aswTdi.sys (aswTdi) .(.ALWIL Software - avast! TDI Filter Driver.) - LEGACY_ASWTDI O64 - Services: CurCS - 14/12/2012 - E:\Windows\system32\drivers\mbam.sys (MBAMProtector) .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBAMPROTECTOR O64 - Services: CurCS - 13/07/2009 - E:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV O64 - Services: CurCS - 14/10/2009 - E:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys (TuneUpUtilitiesDrv) .(.TuneUp Software - TuneUp Utilities Driver.) - LEGACY_TUNEUPUTILITIESDRV ~ Scan Services in 00mn 00s ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- E:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- E:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- E:\Program Files\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- E:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- E:\Windows\regedit.exe O67 - Shell Spawning: <.exe> <exefile>[HKCU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Google Inc. - Google Chrome.) -- E:\Users\steph\AppData\Local\Google\Chrome\Application\chrome.exe O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- E:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> <evtfile>[HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- E:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> <ChromeHTML>[HKCR\..\open\Command] (.Google Inc. - Google Chrome.) -- E:\Users\steph\AppData\Local\Google\Chrome\Application\chrome.exe O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- E:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- E:\Windows\regedit.exe ~ Scan Keys in 00mn 00s ---\\ Start Menu Internet (O68) O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- E:\Program Files\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- E:\Users\steph\AppData\Local\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: <Google Chrome.Corine> <Google Chrome.Corine>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- E:\Users\Corine\AppData\Local\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: <Google Chrome.Emma> <Google Chrome.Emma>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- E:\Users\Emma\AppData\Local\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- E:\Program Files\Internet Explorer\iexplore.exe ~ Scan Keys in 00mn 00s ---\\ Search Browser Infection (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (@ieframe.dll,-12512) - http://www.bing.com ~ Scan Keys in 00mn 00s ---\\ Recherche des services démarrés par Svchost (O83) O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- E:\Windows\System32\aelupsvc.dll [62464] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- E:\Windows\System32\certprop.dll [67584] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- E:\Windows\System32\certprop.dll [67584] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- E:\Windows\System32\srvsvc.dll [168960] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- E:\Windows\System32\gpsvc.dll [593408] O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- E:\Windows\System32\ikeext.dll [674304] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- E:\Windows\System32\Audiosrv.dll [473600] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- E:\Windows\System32\rasauto.dll [90624] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- E:\Windows\System32\rasmans.dll [286208] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- E:\Windows\System32\mprdim.dll [75264] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- E:\Windows\System32\sens.dll [49664] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- E:\Windows\System32\ipnathlp.dll [300544] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- E:\Windows\System32\tapisrv.dll [242176] O83 - Search Svchost Services: UxTuneUp (UxTuneUp) . (.TuneUp Software - TuneUp Theme Extension.) -- E:\Windows\System32\uxtuneup.dll [30016] O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- E:\Windows\System32\termsrv.dll [521216] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- E:\Windows\System32\wuaueng.dll [1933848] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- E:\Windows\System32\qmgr.dll [585728] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- E:\Windows\System32\shsvcs.dll [328192] O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- E:\Windows\System32\iphlpsvc.dll [499712] O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- E:\Windows\system32\seclogon.dll [21504] O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- E:\Windows\System32\appinfo.dll [47104] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- E:\Windows\System32\iscsiexe.dll [114688] O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- E:\Windows\System32\mmcss.dll [49664] O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- E:\Windows\System32\wercplsupport.dll [61440] O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- E:\Windows\System32\eapsvc.dll [98304] O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- E:\Windows\System32\profsvc.dll [164352] O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- E:\Windows\System32\schedsvc.dll [750592] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- E:\Windows\System32\kmsvc.dll [71168] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- E:\Windows\System32\sessenv.dll [113664] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- E:\Windows\System32\wbem\WMIsvc.dll [168960] O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- E:\Windows\System32\browser.dll [102912] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- E:\Windows\System32\themeservice.dll [37376] O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- E:\Windows\System32\bdesvc.dll [76800] O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- E:\Windows\System32\appmgmts.dll [149504] ~ Scan Services in 00mn 00s ---\\ Recherche particuliere à la racine de certains dossiers (O84) [MD5.36C05573CF75F6230D453AD168EF54EA] [SPRF][05/05/2011] (.Adobe Systems, Inc. - Adobe® Flash® Player Installer/Uninstaller 10.3 r181.) -- E:\Windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe [3119264] ~ Scan Files in 00mn 00s ---\\ Firewall Active Exception List (FirewallRules) (O87) O87 - FAEL: "TCP Query User{99353637-6AE0-41E9-BCAC-D599ECD626DA}E:\users\steph\appdata\local\google\chrome\application\chrome.exe" | In - Private - P6 - TRUE | .(.Google Inc..) -- E:\users\steph\appdata\local\google\chrome\application\chrome.exe O87 - FAEL: "UDP Query User{A2374C72-73D4-4EBB-B51E-8896F946F205}E:\users\steph\appdata\local\google\chrome\application\chrome.exe" | In - Private - P17 - TRUE | .(.Google Inc..) -- E:\users\steph\appdata\local\google\chrome\application\chrome.exe O87 - FAEL: "TCP Query User{0297EFC8-8819-4F29-B8B4-4AC8FA256DB8}E:\program files\google\google earth\plugin\geplugin.exe" | In - Private - P6 - TRUE | .(.Google - Google Earth.) -- E:\program files\google\google earth\plugin\geplugin.exe O87 - FAEL: "UDP Query User{ACE832EE-3863-4124-86D9-505FA1BE4015}E:\program files\google\google earth\plugin\geplugin.exe" | In - Private - P17 - TRUE | .(.Google - Google Earth.) -- E:\program files\google\google earth\plugin\geplugin.exe O87 - FAEL: "TCP Query User{1F7573E4-8264-46FC-849F-D297D0690122}E:\program files\videolan\vlc\vlc.exe" | In - Private - P6 - TRUE | .(...) -- E:\program files\videolan\vlc\vlc.exe O87 - FAEL: "UDP Query User{02728ABA-A356-44B9-8DB6-2A49712C4111}E:\program files\videolan\vlc\vlc.exe" | In - Private - P17 - TRUE | .(...) -- E:\program files\videolan\vlc\vlc.exe O87 - FAEL: "TCP Query User{F52A8B92-B28F-4097-9E1A-529D8A9F20D0}E:\program files\google\google earth\client\googleearth.exe" | In - Private - P6 - TRUE | .(.Google - Google Earth.) -- E:\program files\google\google earth\client\googleearth.exe O87 - FAEL: "UDP Query User{1D649970-BED9-407C-9580-DAC8E55B7848}E:\program files\google\google earth\client\googleearth.exe" | In - Private - P17 - TRUE | .(.Google - Google Earth.) -- E:\program files\google\google earth\client\googleearth.exe O87 - FAEL: "{EB7C6F90-4650-4157-A6B7-0F66376F62DA}" | In - Private - P6 - FALSE | .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- E:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe O87 - FAEL: "{EE2DA904-78B8-46CA-8A55-473F5D920465}" | In - Private - P17 - FALSE | .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- E:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe O87 - FAEL: "TCP Query User{B825E749-95C3-4DC0-81BF-0010FFA872A0}E:\program files\utorrent\utorrent.exe" | In - Private - P6 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- E:\program files\utorrent\utorrent.exe O87 - FAEL: "UDP Query User{CDE7C0DF-A57E-45CA-9F77-E823C996ACB1}E:\program files\utorrent\utorrent.exe" | In - Private - P17 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- E:\program files\utorrent\utorrent.exe O87 - FAEL: "{244E0F69-EBF3-4377-8C70-34E02535E5FC}" | In - None - P6 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- E:\Program Files\uTorrent\uTorrent.exe O87 - FAEL: "{8ADC9856-5F36-424A-827C-11D719691433}" | In - None - P17 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- E:\Program Files\uTorrent\uTorrent.exe ~ Scan Firewall in 00mn 01s ---\\ Scan Additionnel (O88) Database Version : v2.11264 - (15/03/2013) Clés trouvées (Keys found) : 1 Valeurs trouvées (Values found) : 0 Dossiers trouvés (Folders found) : 0 Fichiers trouvés (Files found) : 0 [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}] =>Toolbar.Bing ~ Scan Additionnel in 00mn 14s ---\\ Product Upgrade Codes (O90) O90 - PUC: "076CFAAAB965F2A4284B2449E5D03EFE" . (.Windows Live Writer.) -- E:\Windows\Installer\{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}\ApplicationIcon.ico O90 - PUC: "0C7EC0FA4E3A37D489B82B1978CEE6A9" . (.QuickTime.) -- E:\Windows\Installer\{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}\Installer.ico O90 - PUC: "11F12B5E3396B0E42AC597363E0CD711" . (.Windows Live Messenger.) -- E:\Windows\Installer\{E5B21F11-6933-4E0B-A25C-7963E3C07D11}\MsblIco.Exe O90 - PUC: "1271C3A5DE8F0E11A8BF8BCAF6798BE8" . (.Google Earth.) -- E:\Windows\Installer\{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}\ARPPRODUCTICON.exe O90 - PUC: "1C4235E6CF4867F4A9A36CE5708FE06E" . (.Complément Messenger.) -- E:\Windows\Installer\{6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}\CompanionIcon O90 - PUC: "1D034B0FAA6BD374B960AAD30DF10D8B" . (.Microsoft SQL Server 2005 Compact Edition [ENU].) -- E:\Windows\Installer\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}\ProductIcon O90 - PUC: "254245D7BE480C7479AB37C525A35B55" . (.Garmin Training Center.) -- E:\Windows\Installer\{7D542452-84EB-47C0-97BA-735C523AB555}\GarminSetup.ico O90 - PUC: "32AE3B10397E4EC469E8B6D47B3FC99C" . (.Garmin TOPO France Sud-Ouest v2.) -- E:\Windows\Installer\{01B3EA23-E793-4CE4-968E-6B4DB7F39CC9}\GarminSetup.ico O90 - PUC: "3933BDD5B80EE74429F5C6009BD5F07E" . (.iCloud.) -- E:\Windows\Installer\{5DDB3393-E08B-447E-925F-6C00B95D0FE7}\ARP.ico O90 - PUC: "3F1E9F561C2A9AA4F9333AEA0B52F5E0" . (.Garmin USB Drivers.) -- E:\Windows\Installer\{65F9E1F3-A2C1-4AA9-9F33-A3AEB0255F0E}\GarminSetup.ico O90 - PUC: "52A2011B3AA3B644AAF06A990BA720DF" . (.Garmin USB Drivers.) -- E:\Windows\Installer\{B1102A25-3AA3-446B-AA0F-A699B07A02FD}\GarminSetup.ico O90 - PUC: "68AB67CA7DA76301B744BA0000000010" . (.Adobe Reader XI (11.0.02) - Français.) -- E:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AB0000000001}\SC_Reader.ico O90 - PUC: "79D3E6D2FDF13994CA57275FE94C545C" . (.Windows Live Family Safety.) -- E:\Windows\Installer\{2D6E3D97-1FDF-4993-AC75-72F59EC445C5}\fssicon.ico O90 - PUC: "8A9E41CBF14E5434AB3BE26CCC130558" . (.Eraser 6.0.6.1376.) -- E:\Windows\Installer\{BC14E9A8-E41F-4345-BAB3-2EC6CC315085}\Eraser.exe O90 - PUC: "D366E3D3E7E477545A06E7DCDD5445A8" . (.PVSonyDll.) -- E:\Windows\Installer\{3D3E663D-4E7E-4577-A560-7ECDDD45548A}\ARPPRODUCTICON.exe O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- e:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon O90 - PUC: "FAEC7109A5EB37F4A8E08CE76279E155" . (.TomTom HOME.) -- E:\Windows\Installer\{9017CEAF-BE5A-4F73-8A0E-C87E26971E55}\ARPPRODUCTICON.exe ~ Scan Files in 00mn 00s ---\\ MyComputer Name Space (O92) O92 - MNS: Flux de photos - {F0D63F85-37EC-4097-B30D-61B4A8917118} ~ Scan MNS in 00mn 00s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SR - | Auto 18/12/2012 65192 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - E:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe SS - | Demand 13/03/2013 253656 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - E:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe SR - | Auto 25/11/2009 18752 | (aswUpdSv) . (.ALWIL Software.) - E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe SR - | Auto 25/11/2009 138680 | (avast! Antivirus) . (.ALWIL Software.) - E:\Program Files\Alwil Software\Avast4\ashServ.exe SR - | Demand 25/11/2009 254040 | (avast! Mail Scanner) . (.ALWIL Software.) - E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe SR - | Demand 25/11/2009 352920 | (avast! Web Scanner) . (.ALWIL Software.) - E:\Program Files\Alwil Software\Avast4\ashWebSv.exe SS - | Auto 28/02/2011 136176 | (gupdate) . (.Google Inc..) - E:\Program Files\Google\Update\GoogleUpdate.exe SS - | Demand 28/02/2011 136176 | (gupdatem) . (.Google Inc..) - E:\Program Files\Google\Update\GoogleUpdate.exe SR - | Auto 14/12/2012 398184 | (MBAMScheduler) . (.Malwarebytes Corporation.) - E:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe SR - | Auto 14/12/2012 682344 | (MBAMService) . (.Malwarebytes Corporation.) - E:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe SR - | Auto 02/10/2012 645992 | (nvsvc) . (.NVIDIA Corporation.) - E:\Windows\system32\nvvsvc.exe SR - | Auto 10/10/2012 1258856 | (nvUpdatusService) . (.NVIDIA Corporation.) - E:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe SR - | Auto 26/01/2009 1153368 | (SBSDWSCService) . (.Safer Networking Ltd..) - E:\Program Files\Spybot - Search & Destroy\SDWinSec.exe SR - | Auto 02/10/2012 382824 | (Stereo Service) . (.NVIDIA Corporation.) - E:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe SR - | Auto 26/07/2012 92632 | (TomTomHOMEService) . (.TomTom.) - E:\Program Files\TomTom HOME 2\TomTomHOMEService.exe SS - | Demand 16/03/2011 435008 | (TuneUp.Defrag) . (.TuneUp Software.) - E:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe SR - | Auto 30/09/2010 1051968 | (TuneUp.UtilitiesSvc) . (.TuneUp Software.) - E:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe SR - | Auto 14/07/2009 20992 | E:\Windows\System32\uxtuneup.dll (UxTuneUp) . (.TuneUp Software.) - E:\Windows\System32\svchost.exe SR - | Auto 14/07/2009 20992 | E:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - E:\Windows\System32\svchost.exe SR - | Auto 14/07/2009 20992 | E:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - E:\Windows\System32\svchost.exe ~ Scan Services in 00mn 01s End of the scan (1099 lines in 02mn 34s)(0)

;

Code: Tout sélectionner: # AdwCleaner v2.115 - Rapport créé le 20/03/2013 à 18:27:33 # Mis à jour le 17/03/2013 par Xplode # Système d'exploitation : Windows 7 Ultimate Service Pack 1 (32 bits) # Nom d'utilisateur : steph - STEPH-PC # Mode de démarrage : Normal # Exécuté depuis : E:\Users\steph\Downloads\AdwCleaner.exe # Option [Recherche] ***** [Services] ***** ***** [Fichiers / Dossiers] ***** Dossier Présent : E:\Users\steph\AppData\Local\PackageAware ***** [Registre] ***** ***** [Navigateurs] ***** -\\ Internet Explorer v9.0.8112.16470 [OK] Le registre ne contient aucune entrée illégitime. -\\ Mozilla Firefox v10.0.1 (fr) Fichier : E:\Users\steph\AppData\Roaming\Mozilla\Firefox\Profiles\hvp1vyg9.default\prefs.js [OK] Le fichier ne contient aucune entrée illégitime. -\\ Google Chrome v25.0.1364.172 Fichier : E:\Users\steph\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] Le fichier ne contient aucune entrée illégitime. Fichier : E:\Users\Emma\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] Le fichier ne contient aucune entrée illégitime. Fichier : E:\Users\Corine\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] Le fichier ne contient aucune entrée illégitime. ************************* AdwCleaner[R10].txt - [17721 octets] - [05/12/2012 20:11:21] AdwCleaner[R11].txt - [34212 octets] - [08/12/2012 14:15:37] AdwCleaner[R12].txt - [14532 octets] - [16/01/2013 10:04:29] AdwCleaner[R13].txt - [39496 octets] - [09/03/2013 07:40:41] AdwCleaner[R14].txt - [3000 octets] - [10/03/2013 17:08:15] AdwCleaner[R15].txt - [3183 octets] - [18/03/2013 19:45:53] AdwCleaner[R16].txt - [1664 octets] - [20/03/2013 18:27:33] AdwCleaner[R1].txt - [3601 octets] - [06/12/2011 17:27:42] AdwCleaner[R2].txt - [1212 octets] - [06/12/2011 19:24:57] AdwCleaner[R3].txt - [1454 octets] - [14/12/2011 20:07:25] AdwCleaner[R4].txt - [14046 octets] - [04/01/2012 15:54:21] AdwCleaner[R5].txt - [1757 octets] - [04/02/2012 10:59:05] AdwCleaner[R6].txt - [15479 octets] - [26/02/2012 11:55:57] AdwCleaner[R7].txt - [16277 octets] - [20/07/2012 11:31:47] AdwCleaner[R8].txt - [17478 octets] - [05/12/2012 13:39:26] AdwCleaner[R9].txt - [17598 octets] - [05/12/2012 19:58:31] AdwCleaner[S10].txt - [386 octets] - [05/12/2012 19:59:03] AdwCleaner[S11].txt - [386 octets] - [05/12/2012 20:11:50] AdwCleaner[S12].txt - [34676 octets] - [08/12/2012 14:16:13] AdwCleaner[S13].txt - [14639 octets] - [16/01/2013 10:09:13] AdwCleaner[S14].txt - [39904 octets] - [09/03/2013 07:41:05] AdwCleaner[S15].txt - [3063 octets] - [10/03/2013 17:08:41] AdwCleaner[S16].txt - [3167 octets] - [17/03/2013 16:15:43] AdwCleaner[S1].txt - [3889 octets] - [06/12/2011 17:28:04] AdwCleaner[S2].txt - [1366 octets] - [06/12/2011 19:25:05] AdwCleaner[S3].txt - [319 octets] - [14/12/2011 20:07:32] AdwCleaner[S4].txt - [14351 octets] - [04/01/2012 15:54:29] AdwCleaner[S5].txt - [1120 octets] - [04/02/2012 10:59:13] AdwCleaner[S6].txt - [1787 octets] - [04/02/2012 11:07:53] AdwCleaner[S7].txt - [386 octets] - [26/02/2012 11:56:03] AdwCleaner[S8].txt - [386 octets] - [20/07/2012 11:31:56] AdwCleaner[S9].txt - [319 octets] - [05/12/2012 13:42:10] ########## EOF - E:\AdwCleaner[R16].txt - [3235 octets] ##########

steph43 · le 20 Mar 2013 18:57

Oups AdwCleaner est ici !!!

Code: Tout sélectionner: # AdwCleaner v2.115 - Rapport créé le 20/03/2013 à 18:31:30 # Mis à jour le 17/03/2013 par Xplode # Système d'exploitation : Windows 7 Ultimate Service Pack 1 (32 bits) # Nom d'utilisateur : steph - STEPH-PC # Mode de démarrage : Normal # Exécuté depuis : E:\Users\steph\Downloads\AdwCleaner.exe # Option [Suppression] ***** [Services] ***** ***** [Fichiers / Dossiers] ***** Dossier Supprimé : E:\Users\steph\AppData\Local\PackageAware ***** [Registre] ***** ***** [Navigateurs] ***** -\\ Internet Explorer v9.0.8112.16470 [OK] Le registre ne contient aucune entrée illégitime. -\\ Mozilla Firefox v10.0.1 (fr) Fichier : E:\Users\steph\AppData\Roaming\Mozilla\Firefox\Profiles\hvp1vyg9.default\prefs.js [OK] Le fichier ne contient aucune entrée illégitime. -\\ Google Chrome v25.0.1364.172 Fichier : E:\Users\steph\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] Le fichier ne contient aucune entrée illégitime. Fichier : E:\Users\Emma\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] Le fichier ne contient aucune entrée illégitime. Fichier : E:\Users\Corine\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] Le fichier ne contient aucune entrée illégitime. ************************* AdwCleaner[R10].txt - [17721 octets] - [05/12/2012 20:11:21] AdwCleaner[R11].txt - [34212 octets] - [08/12/2012 14:15:37] AdwCleaner[R12].txt - [14532 octets] - [16/01/2013 10:04:29] AdwCleaner[R13].txt - [39496 octets] - [09/03/2013 07:40:41] AdwCleaner[R14].txt - [3000 octets] - [10/03/2013 17:08:15] AdwCleaner[R15].txt - [3183 octets] - [18/03/2013 19:45:53] AdwCleaner[R16].txt - [3305 octets] - [20/03/2013 18:27:33] AdwCleaner[R1].txt - [3601 octets] - [06/12/2011 17:27:42] AdwCleaner[R2].txt - [1212 octets] - [06/12/2011 19:24:57] AdwCleaner[R3].txt - [1454 octets] - [14/12/2011 20:07:25] AdwCleaner[R4].txt - [14046 octets] - [04/01/2012 15:54:21] AdwCleaner[R5].txt - [1757 octets] - [04/02/2012 10:59:05] AdwCleaner[R6].txt - [15479 octets] - [26/02/2012 11:55:57] AdwCleaner[R7].txt - [16277 octets] - [20/07/2012 11:31:47] AdwCleaner[R8].txt - [17478 octets] - [05/12/2012 13:39:26] AdwCleaner[R9].txt - [17598 octets] - [05/12/2012 19:58:31] AdwCleaner[S10].txt - [386 octets] - [05/12/2012 19:59:03] AdwCleaner[S11].txt - [386 octets] - [05/12/2012 20:11:50] AdwCleaner[S12].txt - [34676 octets] - [08/12/2012 14:16:13] AdwCleaner[S13].txt - [14639 octets] - [16/01/2013 10:09:13] AdwCleaner[S14].txt - [39904 octets] - [09/03/2013 07:41:05] AdwCleaner[S15].txt - [3063 octets] - [10/03/2013 17:08:41] AdwCleaner[S16].txt - [3167 octets] - [17/03/2013 16:15:43] AdwCleaner[S17].txt - [2701 octets] - [20/03/2013 18:31:30] AdwCleaner[S1].txt - [3889 octets] - [06/12/2011 17:28:04] AdwCleaner[S2].txt - [1366 octets] - [06/12/2011 19:25:05] AdwCleaner[S3].txt - [319 octets] - [14/12/2011 20:07:32] AdwCleaner[S4].txt - [14351 octets] - [04/01/2012 15:54:29] AdwCleaner[S5].txt - [1120 octets] - [04/02/2012 10:59:13] AdwCleaner[S6].txt - [1787 octets] - [04/02/2012 11:07:53] AdwCleaner[S7].txt - [386 octets] - [26/02/2012 11:56:03] AdwCleaner[S8].txt - [386 octets] - [20/07/2012 11:31:56] AdwCleaner[S9].txt - [319 octets] - [05/12/2012 13:42:10] ########## EOF - E:\AdwCleaner[S17].txt - [3299 octets] ##########

comment désinstaller start.iminent

comment désinstaller start.iminent

Re: comment désinstaller start.iminent

Re: comment désinstaller start.iminent

Re: comment désinstaller start.iminent

Re: comment désinstaller start.iminent

Re: comment désinstaller start.iminent

Re: comment désinstaller start.iminent

Re: comment désinstaller start.iminent

Re: comment désinstaller start.iminent

Re: comment désinstaller start.iminent

Re: comment désinstaller start.iminent

Re: comment désinstaller start.iminent

Re: comment désinstaller start.iminent

Re: comment désinstaller start.iminent

Re: comment désinstaller start.iminent

Sujets similaires

Qui est en ligne