Fenêtres publicitaires résistantes

C'est fait.

J'ai cependant aussi utilisé la fonction "nettoyé" de Adwclaner. . Il m'a donner un rapport après le nettoyage. Je l.ai posté sur cjoint. Je ne suis pas certains cependant j'avoir bien utilisé cjoint. Je peux aussi te poster le rapport ici. Je l'ai sous "bloc note".

# AdwCleaner v3.307 - Rapport créé le 17/08/2014 à 13:34:39
# Mis à jour le 17/08/2014 par Xplode
# Système d'exploitation : Windows 7 Professional Service Pack 1 (64 bits)
# Nom d'utilisateur : poste - POSTE-PC
# Exécuté depuis : C:\Users\poste\Desktop\adwcleaner_3.307.exe
# Option : Nettoyer

***** [ Services ] *****

[#] Service Supprimé : netfilter64

***** [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\Users\poste\AppData\Local\Temp\iSafeRightKeyScan
Dossier Supprimé : C:\Users\poste\AppData\Roaming\eCyber
Dossier Supprimé : C:\Users\poste\AppData\Roaming\iSafe
Fichier Supprimé : C:\Windows\System32\drivers\iSafeKrnlBoot.sys
Fichier Supprimé : C:\Windows\System32\log\iSafeKrnlCall.log
Fichier Supprimé : C:\Users\poste\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
Fichier Supprimé : C:\Users\poste\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal

***** [ Tâches planifiées ] *****


***** [ Raccourcis ] *****


***** [ Registre ] *****

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Clé Supprimée : HKLM\SOFTWARE\iSafe
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8724E58E6C7D00C48A0D4F3345EB2C26
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB676B0E1B9EFA049B9F7DDDA9645734
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B31BBB0B825EDEF45AB0FE7099C68C81
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B471D8D7319336B4CA89374ED0D7B806
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BC30043663AA2CA4DA1DAA9CA5FDCC75
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FDC83385E6C239F4C876A77A37DF581D
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A6A9B7407E12FC548852A060E1FEB932
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0

***** [ Navigateurs ] *****

-\\ Internet Explorer v11.0.9600.17239


-\\ Mozilla Firefox v30.0 (fr)

[ Fichier : C:\Users\poste\AppData\Roaming\Mozilla\Firefox\Profiles\1ox6h6ch.default\prefs.js ]


-\\ Google Chrome v36.0.1985.143

[ Fichier : C:\Users\poste\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Supprimée [Search Provider] : hxxp://isearch.avg.com/search?cid={3D5D2561-D651-43F7-991F-C1984B6C5D38}&mid=62f4ca95730c47d69376cd2623c0d0e4-4fa0b9a83a4240b363a158082fa7f6d8561ed120&lang=fr&ds=AVG&pr=fr&d=2012-07-17 09:24:56&v=15.2.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms}

*************************

AdwCleaner[R0].txt - [10461 octets] - [17/08/2014 13:33:46]
AdwCleaner[S0].txt - [10482 octets] - [17/08/2014 13:34:39]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [10543 octets] ##########

~ Rapport de ZHPDiag v2014.8.16.119 - Nicolas Coolman (2014-08-16)
~ Lancé par poste (2014-08-17 15:20:39)
~ Adresse du Site Web https://nicolascoolman.eu
~ Adresse du Forum https://nicolascoolman.eu
~ Traduit par Nicolas Coolman
~ Etat de la version : Version à jour.
~ Liste blanche : Désactivée par l'utilisateur
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Activate by user


---\\ Navigateurs Internet
MSIE: Internet Explorer v11.0.9600.17239
MFIE: Mozilla Firefox 30.0
GCIE: Google Chrome v36.0.1985.143 (Defaut)

---\\ Informations sur les produits Windows
~ Langage: Français
Windows 7 Professional, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Windows ID Activation : OK
~ Windows Partial Key : TY9GK
Windows License : OK
~ Windows Remaining Initializations Number : 4
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ Logiciels de protection du système
AVG 2013 v13.0.3485
Malwarebytes Anti-Malware version 2.0.2.1012
Microsoft Security Client FR-FR Language Pack v2.1.1116.0
Windows Defender W7 (Deactivate)

---\\ Logiciels d'optimisation du système
CCleaner v3.03

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels
Adobe Flash Player 14 Plugin
Adobe Reader X

---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 37 Stepping 2, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 1851 MB (15% free)
System Restore: Activé (Enable)
System drive C: has 402 GB (86%) free of 466 GB

---\\ Mode de connexion au système
~ Computer Name: POSTE-PC
~ User Name: poste
~ All Users Names: poste, HomeGroupUser$, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\poste\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\poste\AppData\Roaming\
~ %Desktop% : C:\Users\poste\Desktop\
~ %Favorites% : C:\Users\poste\Favorites\
~ %LocalAppData% : C:\Users\poste\AppData\Local\
~ %StartMenu% : C:\Users\poste\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 402 Go of 466 Go)
D: CD-ROM drive (Not Inserted)



---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyGames: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Security Center: 49 Scanned in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.2011-02-25 - 01:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.2009-07-13 - 20:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.8E71A5CB5312B8392D4DA4CA37BB5868] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.2014-07-25 - 05:52:06.) -- C:\Windows\System32\wininet.dll [2266624]
[MD5.88AB9B72B4BF3963A0DE0820B4B0B06C] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.2014-03-04 - 04:43:50.) -- C:\Windows\System32\Winlogon.exe [455168]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.2010-11-20 - 08:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.FA886682CFC5D36718D3E436AACF10B9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.2014-05-30 - 01:45:52.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.2009-07-13 - 20:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.2009-07-13 - 18:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.2010-11-20 - 04:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.2010-11-20 - 04:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.2010-11-20 - 05:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.2009-07-13 - 18:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.2009-07-13 - 19:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.2011-04-26 - 21:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.2010-11-20 - 04:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.2014-01-23 - 21:37:55.) -- C:\Windows\system32\Drivers\ntfs.sys [1684928]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.2009-07-13 - 19:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.2010-11-20 - 05:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.1B6163C503398B23FF8B939C67747683] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.2010-11-20 - 06:06:41.) -- C:\Windows\system32\Drivers\rdpdr.sys [165888]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.2009-07-13 - 19:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.2010-11-20 - 04:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.2010-11-20 - 08:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes: Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/585
~ Mes musiques (My Musics) : 4/17
~ Mes Videos (My Videos) : 2/3
~ Mes Favoris (My Favorites) : 1/178
~ Mes Documents (My Documents) : 7/1817
~ Mon Bureau (My Desktop) : 1/31
~ Menu demarrer (Programs) : 1/63
~ Hidden Files: Scanned in 00mn 04s



---\\ Processus lancés
[MD5.225BF800EFA6CEE4465B1DD7259351DF] - (.TomTom - MyDrive Connect.) -- C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe [473496] [PID.2204]
[MD5.B2B2FE2671DD98A322B0AD7079C0B2B2] - (.Cyberlink Corp. - PowerDVD RC Service.) -- C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe [71216] [PID.2376]
[MD5.4FBC630768570E6AC35C3DE8F6EC79F5] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [6970168] [PID.2968]
[MD5.8335E440B93C3FD3B699B74583DDE295] - (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe [4411952] [PID.2484]
[MD5.1CCCAD1593C1FD46B46F9E705B4EEBF8] - (.Druide informatique inc. - AgentAntidote.) -- C:\Program Files (x86)\Druide\Antidote 7\Programmes32\agentantidote.exe [947712] [PID.2996]
[MD5.0BDAE865738D27A4D84D50591C8C9D2D] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488] [PID.5576]
[MD5.6F815EE8023E715353C4D9F88F75D2B6] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8092160] [PID.5780]
[MD5.B362181ED3771DC03B4141927C80F801] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65432] [PID.1704]
[MD5.4FE5C6D40664AE07BE5105874357D2ED] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [57008] [PID.1820]
[MD5.8A0D857EE0D05FDF1FAC51D3CC03E18C] - (.AVG Technologies CZ, s.r.o. - AVG Firewall Service.) -- C:\Program Files (x86)\AVG\AVG2013\avgfws.exe [1432080] [PID.2528]
[MD5.4DB93F4DB7077801D2D82013506AC1D0] - (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) -- C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [4939312] [PID.2560]
[MD5.D646FA5135A1CD795877AFE9D17FA9ED] - (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) -- C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [283136] [PID.2604]
[MD5.53DCA61931847E35C950504BFB7559C6] - (.HP - HP LaserJet Service.) -- C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [136704] [PID.2700]
[MD5.D84AEA3F3329D622DFC1297DDDF6163B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720] [PID.2776]
[MD5.4F45ED469906494F9BF754E476390DBD] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472] [PID.2856]
[MD5.06A49B7BDC36CFBF97DD90804F833369] - (.Pas de propriétaire - RichVideo Module.) -- C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe [272024] [PID.3008]
~ Processes Running: Scanned in 00mn 02s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\poste\AppData\Local\Google\Chrome\User Data\Default\Preferences
G0 - GCSP: Preference [User Data\Default][HomePage] about:blank
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Google Store v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [gfdkimpbcpahaombhbimeihdjnejgicl] Feedback v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [jnidgldcbakaidffpjinopjbmobecifb] Vgrabber v1 v.10.31.4.510, (Désactivé) =>PUP.vGrabber
G2 - GCE: Preference [User Data\Default] [kmendfapggjehodndflmmgagdbamhnfd] CryptoTokenExtension v.0.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [mfffpogegjflfpflabcdkioaeobkgjik] GaiaAuthExtension v.0.0.1, (Activé)
G2 - GCE: Preference [User Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Google+ Hangouts v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Wallet v.0.0.6.1 (Activé)
G2 - GCE: Preference [User Data\Default] [pafkbggdmjlpgkdkcbjmhmfcdpncadgh] Google Now v.1.2.0.1 (Activé)

---\\ Liste des dossiers d'extension Google Chrome
G2 - EXT: C:\Users\poste\AppData\Local\Google\Chrome\User Data\Default\Extensions\jnidgldcbakaidffpjinopjbmobecifb [Vgrabber v1] =>PUP.vGrabber
G2 - EXT: C:\Users\poste\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [Google Wallet]
~ Google Lines Browser: 16 Scanned in 00mn 02s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\poste\AppData\Roaming\Mozilla\Firefox\Profiles\1ox6h6ch.default\prefs.js
M3 - MFPP: Plugins - [poste] -- C:\Users\poste\AppData\Roaming\Mozilla\Firefox\Profiles\1ox6h6ch.default\searchplugins\Google.xml
M0 - MFSP: prefs.js [poste - 1ox6h6ch.default] about:blank
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.30514.0.) -- c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.0.5] - (...) -- C:\Program Files\VideoLAN\VLC\npvlc.dll (.not file.)
~ Firefox Browser: 5 Scanned in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?gws_rd=ssl
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.google.com/?gws_rd=ssl
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.9600.17239 (winblue_gdr.140724-2228)) -- C:\Windows\SysWOW64\ieframe.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ IE Browser: 19 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>;*origin.com;*ea.com;*akamaihd.net =>PUP.AkamaiHD
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:42038 =>Hijacker.Proxy
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: (no name) [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} Clé orpheline
O2 - BHO: (no name) [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} Clé orpheline
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
~ BHO: 4 Scanned in 00mn 00s



---\\ Applications lancées au démarrage du système (O4)
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe
O4 - HKCU\..\Run: [MyDriveConnect.exe] . (.TomTom - MyDrive Connect.) -- C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe
O4 - HKLM\..\Wow6432Node\Run: [LanguageShortcut] . (.Pas de propriétaire - Language Application.) -- C:\Program Files (x86)\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Wow6432Node\Run: [RemoteControl] . (.Cyberlink Corp. - PowerDVD RC Service.) -- C:\Program Files (x86)\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
O4 - HKLM\..\Wow6432Node\Run: [PROMT Integrator] . (.PROject MT, Ltd. - PINSTART MFC Application.) -- C:\Program Files (x86)\PROMT5\INTEGRAL\PinStart.exe
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Wow6432Node\Run: [AVG_UI] . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe
O4 - HKLM\..\Wow6432Node\Run: [agentantidote.exe] . (.Druide informatique inc. - AgentAntidote.) -- C:\Program Files (x86)\Druide\Antidote 7\Programmes32\agentantidote.exe
O4 - HKLM\..\Wow6432Node\Run: [agentantidote64.exe] . (.Druide informatique inc. - AgentAntidote.) -- C:\Program Files (x86)\Druide\Antidote 7\Programmes64\agentantidote64.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-3125999958-522453914-3488180623-1000\..\Run: [MyDriveConnect.exe] . (.TomTom - MyDrive Connect.) -- C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe
~ Application: Scanned in 00mn 00s



---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =>.Microsoft Corporation
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll
~ Winsock: 7 Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{8802DB40-2F68-4AC2-8919-986C2BBADF82}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{8802DB40-2F68-4AC2-8919-986C2BBADF82}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{8802DB40-2F68-4AC2-8919-986C2BBADF82}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
~ Domain: Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Filter: text/xml [64Bits] - {807553E5-5146-11D5-A672-00B0D022E945} . (...) --
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: appstoreService (appstoreService) . (...) - C:\Program Files (x86)\iSafe\appstore\appstoreSvc.exe (.not file.) =>Trojan.Staser
O23 - Service: Pare-feu AVG (avgfws) . (.AVG Technologies CZ, s.r.o. - AVG Firewall Service.) - C:\Program Files (x86)\AVG\AVG2013\avgfws.exe
O23 - Service: AVGIDSAgent (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) . (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: HP LaserJet Service (HP LaserJet Service) . (.HP - HP LaserJet Service.) - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: HP SI Service (HPSIService) . (.HP - HP Smart-Install Service.) - C:\Windows\system32\HPSIsvc.exe
O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Pas de propriétaire - RichVideo Module.) - C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe
~ Services: 12 Scanned in 00mn 06s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s



---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
[MD5.A6B6AB9502B63F43A9A56AE6AFB22078] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [262320]
[MD5.00000000000000000000000000000000] [APT] [AVG-Secure-Search-Update_JUNE2013_TB_rmv] (...) -- C:\Windows\TEMP\{AAECCC80-CD39-4D6A-8457-EC284064E75E}.exe (.not file.) [0] =>Toolbar.AVGSearch
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [136176]
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [136176]
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
O39 - APT: AVG-Secure-Search-Update_JUNE2013_TB_rmv - (...) -- C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job [352] =>Toolbar.AVGSearch
O39 - APT: AVG-Secure-Search-Update_JUNE2013_TB_rmv - (...) -- C:\Windows\System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv [352] =>Toolbar.AVGSearch
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1062]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1062]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1066]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1066]
~ Scheduled Task: 11 Scanned in 00mn 05s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Internet Explorer [64Bits] - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe =>.Microsoft Corporation
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Active Setup: 10 Scanned in 00mn 00s



---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (Avgfwfd) . (.AVG Technologies CZ, s.r.o. - AVG Filter Driver.) - C:\Windows\System32\DRIVERS\avgfwd6a.sys
O41 - Driver: (AVGIDSDriver) . (.AVG Technologies CZ, s.r.o. - IDS Application Activity Monitor Driver..) - C:\Windows\System32\DRIVERS\avgidsdrivera.sys
O41 - Driver: (Avgldx64) . (.AVG Technologies CZ, s.r.o. - AVG AVI Loader Driver.) - C:\Windows\System32\DRIVERS\avgldx64.sys
O41 - Driver: (Avgtdia) . (.AVG Technologies CZ, s.r.o. - AVG Network connection watcher.) - C:\Windows\System32\DRIVERS\avgtdia.sys
O41 - Driver: (avgtp) . (.AVG Technologies - Pas de description.) - C:\Windows\system32\drivers\avgtpx64.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\System32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (vpcnfltr) . (.Microsoft Corporation - Virtual PC Network Filter Driver.) - C:\Windows\System32\DRIVERS\vpcnfltr.sys
O41 - Driver: C:\Windows\System32\drivers\vpcvmm.sys (vpcvmm) . (.Microsoft Corporation - Moniteur d'ordinateur virtuel Virtual PC.) - C:\Windows\System32\drivers\vpcvmm.sys
O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Drivers: 87 Scanned in 00mn 02s



---\\ Logiciels installés (O42)
O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- AVG
O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- {063D422F-5ED7-495F-82F4-4D83CAB4FD3C}
O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- {4274C1D4-6234-42EC-88B4-98817F662028}
O42 - Logiciel: Adobe Digital Editions 2.0 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Digital Editions 2.0
O42 - Logiciel: Adobe Flash Player 14 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 14 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader X (10.1.11) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
O42 - Logiciel: Adobe Shockwave Player 11.6 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Shockwave Player
O42 - Logiciel: Advertising Center - (.Nero AG.) [HKLM][64Bits] -- {B2EC4A38-B545-4A00-8214-13FE0E915E6D}
O42 - Logiciel: Antidote HD - (.Druide informatique inc..) [HKLM][64Bits] -- {56CDB4FE-895F-4E0D-8BB4-9A8D4310898D}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {46F044A5-CE8B-4196-984E-5BD6525E361D}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {2F72F540-1F60-4266-9506-952B21D6640D}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} =>.Apple Inc
O42 - Logiciel: Assistant de téléchargement - (.Druide informatique inc..) [HKLM][64Bits] -- {92154A3C-9BB7-49D7-A571-4EB6373FA5AD}
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner
O42 - Logiciel: Copernic Agent Personal - (.Copernic.) [HKLM][64Bits] -- Copernic Agent Personal
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: HP LaserJet Professional P1100-P1560-P1600 Series - (...) [HKLM][64Bits] -- HP LaserJet Professional P1100-P1560-P1600 Series
O42 - Logiciel: HPSSupply - (.Hewlett Packard Development Company L.P..) [HKLM][64Bits] -- {7902E313-FF0F-4493-ACB1-A8147B78DCD0}
O42 - Logiciel: Java(TM) 6 Update 31 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83216031FF}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM][64Bits] -- {81E95872-8357-4363-A764-8F98B28340C5}
O42 - Logiciel: Malwarebytes Anti-Malware version 2.0.2.1012 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: Microsoft Antimalware Service FR-FR Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {32E9C1A5-0FDA-4483-987D-DBABF9CC1DD8}
O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM][64Bits] -- {BFAE8D5B-F918-486F-B74E-90762DF11C5C}
O42 - Logiciel: Microsoft Security Client FR-FR Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {DC911ADF-7B60-40F2-A112-FB1EB6402D07}
O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Security Client
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Mozilla Firefox 30.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 30.0 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: MyDriveConnect 3.3.0.1318 - (.TomTom.) [HKLM][64Bits] -- MyDriveConnect
O42 - Logiciel: Nero ControlCenter - (.Nero AG.) [HKLM][64Bits] -- {BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}
O42 - Logiciel: Nero Installer - (.Nero AG.) [HKLM][64Bits] -- {E8A80433-302B-4FF1-815D-FCC8EAC482FF}
O42 - Logiciel: Nero Online Upgrade - (.Nero AG.) [HKLM][64Bits] -- {C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}
O42 - Logiciel: Nero StartSmart - (.Nero AG.) [HKLM][64Bits] -- {7748AC8C-18E3-43BB-959B-088FAEA16FB2}
O42 - Logiciel: PhotoFiltre - (...) [HKCU][64Bits] -- PhotoFiltre
O42 - Logiciel: PowerDVD - (.CyberLink Corporation.) [HKLM][64Bits] -- {6811CAA0-BF12-11D4-9EA1-0050BAE317E1}
O42 - Logiciel: QuickTime 7 - (.Apple Inc..) [HKLM][64Bits] -- {111EE7DF-FC45-40C7-98A7-753AC46B12FB}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Visual Studio 2008 x64 Redistributables - (.AVG Technologies.) [HKLM][64Bits] -- {FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}
O42 - Logiciel: Visual Studio 2010 x64 Redistributables - (.AVG Technologies.) [HKLM][64Bits] -- {21B133D6-5979-47F0-BE1C-F6A6B304693F}
O42 - Logiciel: Warcraft III - (...) [HKLM][64Bits] -- Warcraft III
O42 - Logiciel: Warcraft III: All Products - (...) [HKCU][64Bits] -- Warcraft III
O42 - Logiciel: Windows XP Mode - (.Microsoft Corporation.) [HKLM][64Bits] -- {1374CC63-B520-4f3f-98E8-E9020BF01CFF}
O42 - Logiciel: neroxml - (.Nero AG.) [HKLM][64Bits] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}
O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726}
~ Logic: 40 Scanned in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Avg]
[HKCU\Software\AppDataLow\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Avg]
[HKCU\Software\AppDataLow\Software\Macromedia]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Auslogics]
[HKCU\Software\Avg]
[HKCU\Software\Battle.net]
[HKCU\Software\Blizzard Entertainment]
[HKCU\Software\Cartesian Products]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Copernic]
[HKCU\Software\Cyberlink]
[HKCU\Software\Druide informatique inc.]
[HKCU\Software\Google]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\Intel]
[HKCU\Software\JEDI-VCL]
[HKCU\Software\JavaSoft]
[HKCU\Software\Lake]
[HKCU\Software\Licenses]
[HKCU\Software\Macromedia]
[HKCU\Software\Marvell]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\Novell]
[HKCU\Software\ODBC]
[HKCU\Software\PROject MT]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Realtek]
[HKCU\Software\Safer Networking Limited]
[HKCU\Software\SecuROM]
[HKCU\Software\Skype]
[HKCU\Software\TomTom]
[HKCU\Software\Trolltech]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\Valve]
[HKCU\Software\Wargaming.net]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\cybelsoft]
[HKLM\Software\ATI Technologies]
[HKLM\Software\AllDaySavings ] =>PUP.AllDaySavings
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\DTS]
[HKLM\Software\Druide informatique inc.]
[HKLM\Software\EnigmaSoftwareGroup]
[HKLM\Software\GEAR Software]
[HKLM\Software\Google]
[HKLM\Software\Intel]
[HKLM\Software\Macromedia]
[HKLM\Software\Marvell]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\RST]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SI-App]
[HKLM\Software\SRS Labs]
[HKLM\Software\SonicFocus]
[HKLM\Software\Sonic]
[HKLM\Software\Upt]
[HKLM\Software\VideoLAN]
[HKLM\Software\Waves Audio]
[HKLM\Software\WinUpd]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\AdwCleaner]
[HKLM\Software\Wow6432Node\AppDataLow]
[HKLM\Software\Wow6432Node\Apple Computer, Inc.]
[HKLM\Software\Wow6432Node\Apple Inc.]
[HKLM\Software\Wow6432Node\Avg]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\Copernic]
[HKLM\Software\Wow6432Node\CyberLink]
[HKLM\Software\Wow6432Node\Druide informatique inc.]
[HKLM\Software\Wow6432Node\Filseclab]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\Hewlett-Packard]
[HKLM\Software\Wow6432Node\HewlettPackard]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\JavaSoft]
[HKLM\Software\Wow6432Node\JreMetrics]
[HKLM\Software\Wow6432Node\Lake]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\Nero]
[HKLM\Software\Wow6432Node\Novell]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\PROject MT]
[HKLM\Software\Wow6432Node\Panda Software]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\RST]
[HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.]
[HKLM\Software\Wow6432Node\Realtek]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\SI-App]
[HKLM\Software\Wow6432Node\Skype]
[HKLM\Software\Wow6432Node\TomTom]
[HKLM\Software\Wow6432Node\Upt]
[HKLM\Software\Wow6432Node\Valve]
[HKLM\Software\Wow6432Node\Volatile]
[HKLM\Software\Wow6432Node\WinUpd]
[HKLM\Software\Wow6432Node\Windows]
[HKLM\Software\Wow6432Node\cybelsoft]
[HKLM\Software\Wow6432Node\mozilla.org]
[HKLM\Software\Wow6432Node]
~ Key Software: 217 Scanned in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 2014-08-14 - 20:36:51 - [] ----D C:\Program Files (x86)\395821AD-3E17-4F17-BAB2-932B7EA6E81B
O43 - CFD: 2013-10-11 - 14:51:19 - [] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 2013-03-16 - 23:13:53 - [] ----D C:\Program Files (x86)\Apple Software Update =>.Apple Inc
O43 - CFD: 2013-03-27 - 09:48:03 - [] ----D C:\Program Files (x86)\AVG
O43 - CFD: 2013-03-16 - 23:13:11 - [] ----D C:\Program Files (x86)\Bonjour
O43 - CFD: 2014-07-29 - 19:57:05 - [] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 2012-02-29 - 08:20:37 - [] ----D C:\Program Files (x86)\Copernic Agent
O43 - CFD: 2011-02-18 - 14:41:34 - [] ----D C:\Program Files (x86)\CyberLink
O43 - CFD: 2014-07-07 - 06:55:27 - [] ----D C:\Program Files (x86)\Druide
O43 - CFD: 2014-04-18 - 00:08:05 - [] ----D C:\Program Files (x86)\Google
O43 - CFD: 2011-05-14 - 09:11:18 - [] ----D C:\Program Files (x86)\HP
O43 - CFD: 2011-02-18 - 14:41:35 - [] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 2011-02-18 - 14:41:35 - [] ----D C:\Program Files (x86)\Intel
O43 - CFD: 2014-08-15 - 04:03:00 - [] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 2011-10-23 - 07:18:29 - [] ----D C:\Program Files (x86)\Java
O43 - CFD: 2014-07-29 - 22:00:37 - [0] ----D C:\Program Files (x86)\Lavasoft
O43 - CFD: 2011-02-18 - 14:41:40 - [] ----D C:\Program Files (x86)\ma-config.com
O43 - CFD: 2014-08-17 - 10:42:42 - [] ----D C:\Program Files (x86)\Malwarebytes Anti-Malware
O43 - CFD: 2011-11-26 - 22:22:43 - [] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 2014-04-03 - 03:02:39 - [] ----D C:\Program Files (x86)\Microsoft Security Client
O43 - CFD: 2014-07-27 - 13:06:39 - [] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 2011-02-18 - 20:40:23 - [] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 2014-06-25 - 23:24:20 - [] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 2014-07-07 - 05:36:18 - [] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 2009-07-14 - 01:32:38 - [] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 2011-10-18 - 06:29:13 - [] ----D C:\Program Files (x86)\MSECache
O43 - CFD: 2011-02-01 - 04:03:24 - [0] ----D C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 2013-11-17 - 19:49:15 - [] ----D C:\Program Files (x86)\MyDrive Connect
O43 - CFD: 2011-02-18 - 14:41:42 - [] ----D C:\Program Files (x86)\Nero
O43 - CFD: 2013-07-25 - 21:56:12 - [0] ----D C:\Program Files (x86)\Panda Security
O43 - CFD: 2011-11-05 - 10:11:39 - [] ----D C:\Program Files (x86)\PhotoFiltre
O43 - CFD: 2012-09-01 - 07:33:45 - [] ----D C:\Program Files (x86)\PROMT5
O43 - CFD: 2014-05-08 - 17:42:15 - [] ----D C:\Program Files (x86)\QuickTime
O43 - CFD: 2011-02-18 - 14:41:48 - [] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 2009-07-14 - 01:32:38 - [] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 2011-01-31 - 17:07:10 - [0] --H-D C:\Program Files (x86)\Temp
O43 - CFD: 2009-07-14 - 00:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 2014-08-16 - 09:10:05 - [] ----D C:\Program Files (x86)\Warcraft III
O43 - CFD: 2013-07-10 - 07:07:27 - [] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 2011-06-26 - 12:17:17 - [] ----D C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
O43 - CFD: 2013-12-14 - 12:32:38 - [] ----D C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 2009-07-14 - 01:32:38 - [] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 2011-06-26 - 12:17:17 - [] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 2011-06-26 - 12:17:17 - [] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 2011-06-26 - 12:17:17 - [] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 2011-02-18 - 19:36:16 - [] ----D C:\Program Files (x86)\Windows Virtual PC
O43 - CFD: 2013-01-05 - 01:30:26 - [] ----D C:\Program Files (x86)\zeta
O43 - CFD: 2014-08-17 - 15:19:37 - [] ----D C:\Program Files (x86)\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 2011-07-24 - 23:01:02 - [] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 2013-07-25 - 21:55:18 - [] ----D C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 2012-02-29 - 08:20:40 - [] ----D C:\Program Files (x86)\Common Files\Copernic
O43 - CFD: 2011-02-18 - 20:40:55 - [] ----D C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 2011-02-18 - 14:41:13 - [] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 2011-02-20 - 10:06:55 - [] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 2011-02-18 - 14:41:13 - [] ----D C:\Program Files (x86)\Common Files\Nero
O43 - CFD: 2009-07-13 - 23:20:08 - [] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 2009-07-13 - 23:20:08 - [] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 2011-02-18 - 14:41:14 - [] ----D C:\Program Files (x86)\Common Files\Steam
O43 - CFD: 2011-11-10 - 04:20:09 - [] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 2014-07-29 - 19:57:06 - [] ----D C:\Program Files (x86)\Common Files\Wise Installation Wizard
O43 - CFD: 2013-07-25 - 21:55:18 - [] ----D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
O43 - CFD: 2013-04-24 - 06:39:59 - [] ----D C:\ProgramData\Adobe
O43 - CFD: 2013-03-16 - 23:13:38 - [] ----D C:\ProgramData\Apple
O43 - CFD: 2014-05-08 - 17:41:36 - [] ----D C:\ProgramData\Apple Computer
O43 - CFD: 2009-07-14 - 01:08:56 - [] -SH-D C:\ProgramData\Application Data
O43 - CFD: 2013-03-27 - 08:41:08 - [] ----D C:\ProgramData\AVG2013
O43 - CFD: 2011-02-18 - 17:02:40 - [] -SH-D C:\ProgramData\Bureau
O43 - CFD: 2011-02-20 - 09:34:59 - [] --H-D C:\ProgramData\Common Files
O43 - CFD: 2014-06-05 - 17:52:11 - [] ----D C:\ProgramData\CyberLink
O43 - CFD: 2009-07-14 - 01:08:56 - [] -SH-D C:\ProgramData\Desktop
O43 - CFD: 2009-07-14 - 01:08:56 - [] -SH-D C:\ProgramData\Documents
O43 - CFD: 2011-02-18 - 17:02:40 - [] -SH-D C:\ProgramData\Favoris
O43 - CFD: 2009-07-14 - 01:08:56 - [] -SH-D C:\ProgramData\Favorites
O43 - CFD: 2014-04-18 - 00:08:09 - [] ----D C:\ProgramData\Google
O43 - CFD: 2011-05-14 - 09:17:39 - [] ----D C:\ProgramData\Hewlett-Packard
O43 - CFD: 2012-02-04 - 14:08:42 - [] ----D C:\ProgramData\HPSSUPPLY
O43 - CFD: 2014-07-29 - 21:27:58 - [] ----D C:\ProgramData\Lavasoft
O43 - CFD: 2011-02-18 - 14:41:49 - [] ----D C:\ProgramData\ma-config.com
O43 - CFD: 2014-08-17 - 10:27:59 - [] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 2011-02-18 - 17:02:40 - [] -SH-D C:\ProgramData\Menu Démarrer
O43 - CFD: 2014-08-17 - 15:14:57 - [] ----D C:\ProgramData\MFAData
O43 - CFD: 2014-04-18 - 03:05:04 - [] -S--D C:\ProgramData\Microsoft
O43 - CFD: 2011-02-18 - 17:02:40 - [] -SH-D C:\ProgramData\Modèles
O43 - CFD: 2012-09-04 - 06:25:29 - [] ----D C:\ProgramData\Mozilla
O43 - CFD: 2011-02-18 - 14:41:51 - [] ----D C:\ProgramData\Nero
O43 - CFD: 2012-09-05 - 06:13:47 - [] ----D C:\ProgramData\Skype
O43 - CFD: 2013-11-29 - 13:50:08 - [] ----D C:\ProgramData\Spybot - Search & Destroy
O43 - CFD: 2009-07-14 - 01:08:56 - [] -SH-D C:\ProgramData\Start Menu
O43 - CFD: 2011-02-18 - 14:41:51 - [] ----D C:\ProgramData\Sun
O43 - CFD: 2009-07-14 - 01:08:56 - [] -SH-D C:\ProgramData\Templates
O43 - CFD: 2013-09-16 - 21:57:56 - [] ----D C:\ProgramData\TomTom
O43 - CFD: 2011-03-20 - 11:36:16 - [] ----D C:\Users\poste\AppData\Roaming\Adobe
O43 - CFD: 2013-03-16 - 23:25:39 - [] ----D C:\Users\poste\AppData\Roaming\Apple Computer
O43 - CFD: 2013-03-27 - 08:53:09 - [] ----D C:\Users\poste\AppData\Roaming\AVG2013
O43 - CFD: 2014-08-13 - 07:40:41 - [] ----D C:\Users\poste\AppData\Roaming\computer software market
O43 - CFD: 2012-02-29 - 08:20:51 - [] ----D C:\Users\poste\AppData\Roaming\Copernic
O43 - CFD: 2014-06-05 - 17:52:15 - [] ----D C:\Users\poste\AppData\Roaming\CyberLink
O43 - CFD: 2011-02-22 - 13:16:58 - [] ----D C:\Users\poste\AppData\Roaming\Druide
O43 - CFD: 2013-04-05 - 22:17:57 - [] ----D C:\Users\poste\AppData\Roaming\dvdcss
O43 - CFD: 2011-02-18 - 14:43:46 - [] ----D C:\Users\poste\AppData\Roaming\Google
O43 - CFD: 2011-05-14 - 09:09:06 - [] ----D C:\Users\poste\AppData\Roaming\HP
O43 - CFD: 2011-02-18 - 14:43:46 - [] ----D C:\Users\poste\AppData\Roaming\Identities
O43 - CFD: 2014-07-29 - 22:03:37 - [0] ----D C:\Users\poste\AppData\Roaming\Lavasoft
O43 - CFD: 2014-07-29 - 21:32:33 - [] ----D C:\Users\poste\AppData\Roaming\LavasoftStatistics
O43 - CFD: 2011-02-18 - 14:43:46 - [] ----D C:\Users\poste\AppData\Roaming\Macromedia
O43 - CFD: 2009-07-14 - 11:35:18 - [0] ----D C:\Users\poste\AppData\Roaming\Media Center Programs
O43 - CFD: 2014-07-29 - 21:24:14 - [] -S--D C:\Users\poste\AppData\Roaming\Microsoft
O43 - CFD: 2011-12-20 - 18:50:06 - [] ----D C:\Users\poste\AppData\Roaming\Mozilla
O43 - CFD: 2013-03-09 - 10:54:06 - [] ----D C:\Users\poste\AppData\Roaming\Nero
O43 - CFD: 2011-11-05 - 10:43:15 - [] ----D C:\Users\poste\AppData\Roaming\PhotoFiltre
O43 - CFD: 2012-09-05 - 06:13:44 - [] ----D C:\Users\poste\AppData\Roaming\Skype
O43 - CFD: 2013-09-16 - 21:57:52 - [] ----D C:\Users\poste\AppData\Roaming\TomTom
O43 - CFD: 2013-03-27 - 08:39:12 - [] ----D C:\Users\poste\AppData\Roaming\TuneUp Software
O43 - CFD: 2011-08-06 - 10:18:00 - [0] ----D C:\Users\poste\AppData\Roaming\WinRAR
O43 - CFD: 2014-08-17 - 15:21:22 - [] ----D C:\Users\poste\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 2014-07-16 - 06:00:19 - [] ----D C:\Users\poste\AppData\Local\Adobe
O43 - CFD: 2013-10-11 - 14:51:41 - [] ----D C:\Users\poste\AppData\Local\Adobe_Systems_Incorporate
O43 - CFD: 2011-02-18 - 14:43:44 - [] ----D C:\Users\poste\AppData\Local\Apple
O43 - CFD: 2013-03-16 - 23:16:55 - [] ----D C:\Users\poste\AppData\Local\Apple Computer
O43 - CFD: 2011-02-18 - 14:39:37 - [] -SH-D C:\Users\poste\AppData\Local\Application Data
O43 - CFD: 2013-03-27 - 22:37:31 - [] ----D C:\Users\poste\AppData\Local\Avg2013
O43 - CFD: 2014-07-27 - 13:04:13 - [0] ----D C:\Users\poste\AppData\Local\CheckCode
O43 - CFD: 2013-01-19 - 22:16:48 - [] ----D C:\Users\poste\AppData\Local\CRE
O43 - CFD: 2014-06-22 - 12:23:30 - [0] ----D C:\Users\poste\AppData\Local\Diagnostics
O43 - CFD: 2013-09-16 - 21:55:12 - [] ----D C:\Users\poste\AppData\Local\Downloaded Installations
O43 - CFD: 2014-02-23 - 05:47:12 - [0] ----D C:\Users\poste\AppData\Local\ElevatedDiagnostics
O43 - CFD: 2014-04-18 - 06:30:23 - [] -SH-D C:\Users\poste\AppData\Local\EmieSiteList
O43 - CFD: 2014-04-18 - 06:30:23 - [] -SH-D C:\Users\poste\AppData\Local\EmieUserList
O43 - CFD: 2013-12-06 - 08:09:31 - [] ----D C:\Users\poste\AppData\Local\Google
O43 - CFD: 2011-02-18 - 14:39:37 - [] -SH-D C:\Users\poste\AppData\Local\Historique
O43 - CFD: 2012-07-29 - 10:17:46 - [] ----D C:\Users\poste\AppData\Local\LANCITE
O43 - CFD: 2012-08-25 - 07:49:30 - [] ----D C:\Users\poste\AppData\Local\Macromedia
O43 - CFD: 2013-03-27 - 08:29:45 - [] ----D C:\Users\poste\AppData\Local\MFAData
O43 - CFD: 2013-12-01 - 04:40:04 - [] ----D C:\Users\poste\AppData\Local\Microsoft
O43 - CFD: 2013-06-02 - 10:21:49 - [] ----D C:\Users\poste\AppData\Local\Microsoft Games
O43 - CFD: 2013-10-13 - 21:38:00 - [] ----D C:\Users\poste\AppData\Local\Mozilla
O43 - CFD: 2013-01-19 - 22:16:06 - [] ----D C:\Users\poste\AppData\Local\Programs
O43 - CFD: 2014-08-17 - 15:20:58 - [] ----D C:\Users\poste\AppData\Local\Temp
O43 - CFD: 2011-02-18 - 14:39:37 - [] -SH-D C:\Users\poste\AppData\Local\Temporary Internet Files
O43 - CFD: 2013-09-16 - 21:57:52 - [] ----D C:\Users\poste\AppData\Local\TomTom
O43 - CFD: 2011-11-05 - 10:45:10 - [] ----D C:\Users\poste\AppData\Local\VirtualStore
O43 - CFD: 2009-07-14 - 00:54:32 - [] R---D C:\Users\poste\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2014-08-15 - 04:10:31 - [] R---D C:\Users\poste\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2014-08-17 - 13:37:27 - [] ----D C:\Users\poste\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
O43 - CFD: 2012-10-06 - 06:23:24 - [] ----D C:\Users\poste\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 2009-07-14 - 00:49:38 - [] R---D C:\Users\poste\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2011-11-05 - 10:11:39 - [0] ----D C:\Users\poste\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre
O43 - CFD: 2014-08-15 - 04:10:31 - [] R---D C:\Users\poste\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2012-05-14 - 07:18:05 - [] ----D C:\Users\poste\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Warcraft III
O43 - CFD: 2011-02-18 - 20:00:47 - [] ----D C:\Users\poste\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Virtual PC
~ Program Folder: 151 Scanned in 00mn 00s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.349CF386805783D2E6810A767642F1B8] - 2014-08-06 - 21:01:34 ---A- . (.Microsoft Corporation - Application Experience Program Inventory Co.) -- C:\Windows\System32\aeinv.dll [424448]
O44 - LFC:[MD5.9D455E3049B7F93483D7165422B7D0AF] - 2014-08-06 - 21:06:41 ---A- . (.Microsoft Corporation - Mise à jour des données de compatibilité de.) -- C:\Windows\System32\aepdu.dll [529920]
O44 - LFC:[MD5.F947D57534E01E3CA597BCF2AD8AE65B] - 2014-08-14 - 05:25:57 ---A- . (.Microsoft Corporation - Runtime d'appel de procédure distante.) -- C:\Windows\System32\rpcrt4.dll [1216000]
O44 - LFC:[MD5.ECA387DCD57F683C52171C766CF400F0] - 2014-08-14 - 05:27:14 ---A- . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [23645696]
O44 - LFC:[MD5.1C660588CFFB3A17BCF0F6B4779BF985] - 2014-08-14 - 05:27:20 ---A- . (.Microsoft Corporation - Microsoft Spell Checking Facility.) -- C:\Windows\System32\MsSpellCheckingFacility.exe [940032]
O44 - LFC:[MD5.C02C78DE9BB4E68F6C78B1588ADD6ADC] - 2014-08-14 - 05:27:28 ---A- . (.Microsoft Corporation - DAC for Trident DOM.) -- C:\Windows\System32\MshtmlDac.dll [83968]
O44 - LFC:[MD5.EDF22FBAE75ACB48BF51D099C6808B39] - 2014-08-14 - 05:27:28 ---A- . (.Microsoft Corporation - DLL de gestion d'utilisateur local et de co.) -- C:\Windows\System32\msrating.dll [195584]
O44 - LFC:[MD5.8E71A5CB5312B8392D4DA4CA37BB5868] - 2014-08-14 - 05:27:29 ---A- . (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [2266624]
O44 - LFC:[MD5.472C409F9B0FF67C1015F511C73E1889] - 2014-08-14 - 05:27:30 ---A- . (.Microsoft Corporation - Microsoft (R) JScript.) -- C:\Windows\System32\jscript9.dll [5824512]
O44 - LFC:[MD5.BAC44396088ECC1C9021ED3E3345337C] - 2014-08-14 - 05:27:30 ---A- . (.Microsoft Corporation - Microsoft SmartScreen Filter.) -- C:\Windows\System32\ieapfltr.dll [846336]
O44 - LFC:[MD5.920F690FC7424DE71888AA2E46E917EA] - 2014-08-14 - 05:27:30 ---A- . (.Microsoft Corporation - Microsoft ® JScript Diagnostics.) -- C:\Windows\System32\jscript9diag.dll [758272]
O44 - LFC:[MD5.6ED6DA2A04F8F0C9BDAD647284BAEFB6] - 2014-08-14 - 05:27:30 ---A- . (.Microsoft Corporation - Microsoft ® VBScript.) -- C:\Windows\System32\vbscript.dll [548352]
O44 - LFC:[MD5.1F02286D001AB5EA5719540C587224FE] - 2014-08-14 - 05:27:31 ---A- . (.Microsoft Corporation - Microsoft (R) HTML Media DLL.) -- C:\Windows\System32\mshtmlmedia.dll [1249280]
O44 - LFC:[MD5.2639E152D246F2A651F09764807CA153] - 2014-08-14 - 05:27:31 ---A- . (.Microsoft Corporation - Microsoft® HTML Editing Component.) -- C:\Windows\System32\mshtmled.dll [85504]
O44 - LFC:[MD5.1EEF9FE30DBE458A89B5F7A16FC68397] - 2014-08-14 - 05:27:31 ---A- . (.Microsoft Corporation - Outil d'installation sans assistance d'IE 7.) -- C:\Windows\System32\ieUnatt.exe [139264]
O44 - LFC:[MD5.72B7D166D1B0D353330A34FDED3F5AA6] - 2014-08-14 - 05:27:32 ---A- . (.Microsoft Corporation - Moteur de l'interface utilisateur d'Interne.) -- C:\Windows\System32\ieui.dll [598016]
O44 - LFC:[MD5.1B26610C1659EF54ED000233FB96F20C] - 2014-08-14 - 05:27:32 ---A- . (.Microsoft Corporation - Navigateur Internet.) -- C:\Windows\System32\ieframe.dll [13547008]
O44 - LFC:[MD5.FCC86367BB0FB6DEB6614885CBE74FD5] - 2014-08-14 - 05:27:37 ---A- . (.Microsoft Corporation - JScript Proxy Auto-Configuration.) -- C:\Windows\System32\jsproxy.dll [51200]
O44 - LFC:[MD5.39A85C005BCDEEF4092646EBBC2526AA] - 2014-08-14 - 05:27:39 ---A- . (.Microsoft Corporation - Panneau de configuration Internet.) -- C:\Windows\System32\inetcpl.cpl [2087936]
O44 - LFC:[MD5.9C9FE69902CD45A7D9AB1F0C4EDE646C] - 2014-08-14 - 05:27:39 ---A- . (.Microsoft Corporation - Personnalisation d'IEAK.) -- C:\Windows\System32\iedkcs32.dll [348856]
O44 - LFC:[MD5.DB382D89D8004F40BD2C55BAE6A15B30] - 2014-08-14 - 05:27:39 ---A- . (.Microsoft Corporation - Run time utility for Internet Explorer.) -- C:\Windows\System32\iertutil.dll [2774528]
O44 - LFC:[MD5.DF485877CCE229776E6B8BB9116B67FE] - 2014-08-14 - 05:27:40 ---A- . (.Microsoft Corporation - IOD Version Map.) -- C:\Windows\System32\i

Bonjours

Qu'et-ce que tu veux dire par "héberge"?

Bonjours,

voici le lien:
https://www.cjoint.com/?0HrvYJLop6F

Es-tu retenue?

Depuis hier, j'ai un nouveauproblème, le serveur proxi ne me reocnnais pluis. ««je suis juste capable d'ouvrir Google. Je t'écris d'une autre ordinateur dans ma maison.

J'ai désactivé MSE. Firefoxe semble déjà être à jour. Je ne crois pas avoir flashplayeur. Pour le reste, comme le serveur proxi ne me reconnait pas, je ne suis pas capable de faire grand chose.

Je fais quoi ensuite?

C'est fait, enfin je crois ...

https://www.cjoint.com/?DHvcowux96U

Je remarque sur mon Adwcleaner que j'ai des virus (?) qui se réinstallent continuellement, même après un nettoyage.

https://www.cjoint.com/?DHvlEIIywrh

Service Présent : iSafeKrnl
Service Présent : iSafeKrnlBoot
Service Présent : iSafeKrnlKit
Service Présent : iSafeKrnlR3
Service Présent : iSafeNetFilter
Service Présent : iSafeService

J'ai finalement été capable de mettre à jour flashplayeur.

Voici mon nouveau rapport de scan:
https://www.cjoint.com/?DHvmKr6c8kp

Il y a eu un executable Mbam sur mon ordi, mais Window ne le trouve plus ...

Est-il possible de le télécharger quelque part?

O.K.
J'ai trouvé où le télécharger

Je fais ça!

Rien de changé! Toujours les mêmes virus

Dernier diagnostique:
https://www.cjoint.com/?DHxqpgmOqjr

Je ne parviens pas à désinstaller YAC. Je l'avais désinstaller il y a plusieurs jours, mais j'ai fais une récupération d'une versions antérieurs de Windows. YAC s'est réinstallé et là il ne répond plus à la commande de désinstallation sur mon paneau de configuration.

Est-ce que je peux simplement aller le vider de la section "programme file"?

Je pourrais aussi désactiver Mbam, réinstaller YAC pour ensuite le désinstaller de la bonne façon et réinstaller finalement Mbam?

C'est quoi le mieux?

YAC ne veut pas se désinstaller, même avec REVO. Je fais toute la procédure approfondie, mais il ne disparait pas.

Je ne sais pas comment procéder pour passer en mode sans échec et pour y soliciter ensuite un logiciel de désinstallation.

J,'ai quand même désinstallé MSE et mis à jour Abode

https://www.cjoint.com/?DHyqHZuy2YW

¨Ca va jusqu,à ce que je clic su GO.

Le programme se lance mais arrête prèsq

Ça va jusqu'à ce que je clic su GO. Le programme démare, mais arrête presque immédiatement en ouvrant une fenêtre où est écrit:

Zhpfix

X Impossible de créer le fichier
"C:\Users\poste\AppData\Roaming\Mozilla\Forefox\Profils\1ox
6h6ch.default\pref.js". Accès refusé

L'icone de travail tournait, mais j'ai laissé le programme travailler plusieurs minutes et rien ne semblait avancer

Je peux recommancer et le laisser travailler une heure ou deux pour voir ...

BON ENFIN!

Sous mode sans échec, j'ai désinstallé YAC.
Ensuite, en mode normale j'ai désinstallé FIREFOX puis j'ai fait le "fix" que tu recommandais.

Rapport de fix:
https://www.cjoint.com/?DHytk2vRqsE

Rapport de diag:
https://www.cjoint.com/?DHytmcU998l

rapport du diag mis à jour:
https://www.cjoint.com/?DHytRbdoY4v

Si c'est fini, merci pour tout. C'est très généreux de ta part de t'occuper de "nuls" comme moi.