Infecté par bifrose.trace

Bonsoir, merci de répondre aussi vite, je refais un scan et vous le poste.

Voici le rapport:
Malwarebytes Anti-Malware
www.malwarebytes.org

Date de l'examen: 27/03/2015
Heure de l'examen: 20:34:44
Fichier journal: Rapport malwarebytes.txt
Administrateur: Oui

Version: 2.01.4.1018
Base de données Malveillants: v2015.03.27.08
Base de données Rootkits: v2015.03.26.01
Licence: Gratuit
Protection contre les malveillants: Désactivé(e)
Protection contre les sites Web malveillants: Désactivé(e)
Auto-protection: Désactivé(e)

Système d'exploitation: Windows 7 Service Pack 1
Processeur: x64
Système de fichiers: NTFS
Utilisateur: Virginie

Type d'examen: Examen "Menaces"
Résultat: Terminé
Objets analysés: 531288
Temps écoulé: 19 min, 34 sec

Mémoire: Activé(e)
Démarrage: Activé(e)
Système de fichiers: Activé(e)
Archives: Activé(e)
Rootkits: Désactivé(e)
Heuristique: Activé(e)
PUP: Activé(e)
PUM: Activé(e)

Processus: 0
(Aucun élément malicieux détecté)

Modules: 0
(Aucun élément malicieux détecté)

Clés du Registre: 0
(Aucun élément malicieux détecté)

Valeurs du Registre: 0
(Aucun élément malicieux détecté)

Données du Registre: 0
(Aucun élément malicieux détecté)

Dossiers: 0
(Aucun élément malicieux détecté)

Fichiers: 3
Bifrose.Trace, C:\Users\Virginie\AppData\Roaming\logs.dat, , [cbb94ffb0b7fd85ea0e97fba03015ca4],
Malware.Trace, C:\Users\Virginie\AppData\Local\Temp\UuU.uUu, , [95effa50246642f4646dd58e55af3fc1],
Malware.Trace, C:\Users\Virginie\AppData\Local\Temp\XxX.xXx, , [bec670daa5e5b08628ffacb8ce369769],

Secteurs physiques: 0
(Aucun élément malicieux détecté)


(end)

ok je gère et je vous poste tout ça. Merci

Voilà les rapports:

Addition.txt
https://pjjoint.malekal.com/files.php?id=20150328_r14c5o10y9m13
FRST:txt
https://pjjoint.malekal.com/files.php?id=FRST_20150328_i15i13g12u13p12

Bonjour,

Impossible de trouver combofix /uninstall, j'ai bien suivis les instructions du site officiel, dans recherche des programmes ou fichiers, il ne le trouve pas ???

Tu peux alors le télécharger de nouveau puis tu fais les procédures indiquées
ci-dessus! :-)
En attendant le rapport de combofix

@+

Ok

ComboFix 15-03-25.01 - Virginie 28/03/2015 15:11:22.2.2 - x64
Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.33.1036.18.4077.1124 [GMT 1:00]
Lancé depuis: c:\users\Virginie\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Virginie\messangerr.exe
c:\users\Virginie\messangerrr.exe
c:\users\Virginie\nircmdc.exe
c:\users\Virginie\serche.exe
c:\users\Virginie\serche1.exe
c:\users\Virginie\serche2.exe
c:\users\Virginie\unrar.exe
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2015-02-28 au 2015-03-28 ))))))))))))))))))))))))))))))))))))
.
.
2015-03-28 14:23 . 2015-03-28 14:23 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2015-03-28 14:23 . 2015-03-28 14:23 -------- d-----w- c:\users\TEMP\AppData\Local\temp
2015-03-28 14:23 . 2015-03-28 14:23 -------- d-----w- c:\users\Public\AppData\Local\temp
2015-03-28 14:23 . 2015-03-28 14:23 -------- d-----w- c:\users\noelotte\AppData\Local\temp
2015-03-28 14:23 . 2015-03-28 14:23 -------- d-----w- c:\users\Invité\AppData\Local\temp
2015-03-28 14:23 . 2015-03-28 14:23 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-03-28 13:05 . 2015-03-28 13:05 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{F7FE1D80-7FFA-4E16-8A98-79D9517FF947}\offreg.dll
2015-03-27 12:30 . 2015-03-14 10:02 12002392 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{F7FE1D80-7FFA-4E16-8A98-79D9517FF947}\mpengine.dll
2015-03-25 16:24 . 2015-03-25 16:24 14008 ----a-w- c:\users\Virginie\messangerr.vbs
2015-03-25 16:23 . 2015-03-25 16:23 509312 ----a-w- c:\users\Virginie\Lettre&amour.vbs
2015-03-25 00:17 . 2015-03-11 04:06 677888 ----a-w- c:\windows\system32\generaltel.dll
2015-03-25 00:17 . 2015-03-11 04:06 760832 ----a-w- c:\windows\system32\invagent.dll
2015-03-25 00:17 . 2015-03-11 04:06 414720 ----a-w- c:\windows\system32\devinv.dll
2015-03-25 00:17 . 2015-03-11 04:06 943616 ----a-w- c:\windows\system32\appraiser.dll
2015-03-25 00:17 . 2015-03-11 04:05 30720 ----a-w- c:\windows\system32\acmigration.dll
2015-03-25 00:17 . 2015-03-11 04:05 227328 ----a-w- c:\windows\system32\aepdu.dll
2015-03-25 00:17 . 2015-03-11 04:05 192000 ----a-w- c:\windows\system32\aepic.dll
2015-03-25 00:17 . 2015-03-11 04:02 1107456 ----a-w- c:\windows\system32\aeinv.dll
2015-03-21 19:47 . 2015-03-21 19:47 -------- d-----w- c:\programdata\Microsoft OneDrive
2015-03-21 17:32 . 2015-03-21 17:08 907984 ------w- c:\programdata\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe
2015-03-14 12:52 . 2015-03-14 12:52 -------- d-----w- c:\program files (x86)\Common Files\Java
2015-03-11 10:45 . 2015-02-20 04:41 41984 ----a-w- c:\windows\system32\lpk.dll
2015-03-11 10:43 . 2015-02-13 05:22 14177280 ----a-w- c:\windows\system32\shell32.dll
2015-03-11 10:38 . 2015-02-04 03:16 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2015-03-11 10:38 . 2015-02-04 02:54 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2015-03-09 12:07 . 2015-03-09 12:07 -------- d-----w- c:\programdata\MG_Micro_8
2015-03-09 12:07 . 2015-03-09 12:07 -------- d-----w- c:\users\Virginie\AppData\Local\WDSetup
2015-03-09 11:38 . 2015-03-09 11:38 -------- d-----w- c:\program files (x86)\Memsoft
2015-03-09 11:38 . 2014-01-31 09:21 6544384 ----a-w- c:\windows\system32\cdintf450_64.dll
2015-03-09 11:38 . 2014-01-31 09:21 4840960 ----a-w- c:\windows\SysWow64\cdintf450.dll
2015-03-09 11:38 . 2015-03-09 11:38 -------- d-----w- c:\program files (x86)\Microsoft Chart Controls
2015-03-09 11:37 . 2015-03-09 11:39 -------- d-----w- c:\program files (x86)\Common Files\Memsoft
2015-02-26 17:44 . 2015-02-27 06:33 -------- d-----w- c:\program files (x86)\Mozilla Thunderbird
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-03-27 19:34 . 2014-12-11 10:31 136408 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-03-17 05:15 . 2014-12-11 10:31 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2015-03-17 05:15 . 2014-12-11 10:31 107736 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-03-17 05:15 . 2014-12-11 10:31 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-03-14 12:51 . 2014-11-12 14:02 98216 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2015-03-12 02:02 . 2012-06-05 18:54 122905848 ----a-w- c:\windows\system32\MRT.exe
2015-02-24 03:17 . 2010-11-21 03:27 295552 ------w- c:\windows\system32\MpSigStub.exe
2015-02-04 22:55 . 2012-06-01 21:07 701616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-02-04 22:55 . 2012-02-18 12:32 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-01-27 23:36 . 2015-02-11 09:41 1239720 ----a-w- c:\windows\system32\aitstatic.exe
2015-01-09 03:14 . 2015-02-25 19:41 91136 ----a-w- c:\windows\system32\wdi.dll
2015-01-09 03:14 . 2015-02-25 19:41 950272 ----a-w- c:\windows\system32\perftrack.dll
2015-01-09 03:14 . 2015-02-25 19:41 29696 ----a-w- c:\windows\system32\powertracker.dll
2015-01-09 02:48 . 2015-02-25 19:41 76800 ----a-w- c:\windows\SysWow64\wdi.dll
2015-01-08 09:59 . 2012-06-05 19:11 87912 ----a-w- c:\windows\system32\drivers\aswmonflt.sys
2015-01-08 09:59 . 2015-01-08 09:53 1050432 ----a-w- c:\windows\system32\drivers\aswsnx.sys
2015-01-08 09:53 . 2015-01-08 09:53 267632 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2015-01-08 09:53 . 2015-01-08 09:53 116728 ----a-w- c:\windows\system32\drivers\aswStm.sys
2015-01-08 09:53 . 2015-01-08 09:53 93568 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2015-01-08 09:53 . 2015-01-08 09:53 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2015-01-08 09:53 . 2015-01-08 09:53 29208 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2015-01-08 09:53 . 2015-01-08 09:53 364512 ----a-w- c:\windows\system32\aswBoot.exe
2015-01-08 09:53 . 2015-01-08 09:53 43152 ----a-w- c:\windows\avastSS.scr
2015-01-08 09:53 . 2012-06-05 19:11 436624 ----a-w- c:\windows\system32\drivers\aswSP.sys
2014-12-30 13:32 . 2014-12-30 13:32 22704 ----a-w- c:\windows\system32\drivers\EsgScanner.sys
2006-05-03 09:06 163328 --sha-r- c:\windows\SysWOW64\flvDX.dll
2007-02-21 10:47 31232 --sha-r- c:\windows\SysWOW64\msfDX.dll
2008-03-16 12:30 216064 --sha-r- c:\windows\SysWOW64\nbDX.dll
2010-01-06 22:00 107520 --sha-r- c:\windows\SysWOW64\TAKDSDecoder.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.

• Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Synchronizer"="c:\program files (x86)\Adobe\Reader 11.0\Reader\AdobeCollabSync.exe" [2014-12-03 761064]
"iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2014-11-21 43816]
"ApplePhotoStreams"="c:\program files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2014-11-21 43816]
"AppleIEDAV"="c:\program files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe" [2014-09-19 1080104]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Easybits Recovery"="c:\program files (x86)\EasyBits For Kids\ezRecover.exe" [2011-05-17 61112]
"KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2013-07-15 311152]
"Avira Systray"="c:\program files (x86)\Avira\My Avira\Avira.OE.Systray.exe" [2014-11-20 126200]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2015-01-08 5226600]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-10-15 157480]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2013-05-30 96056]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2015-03-07 335232]
.
c:\users\Virginie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
messangerr.vbs [2015-3-25 14008]
serche.vbs [2015-3-21 16157]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"HideFastUserSwitching"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"EnableShellExecuteHooks"= 1 (0x1)
.
[hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
R0 RapportKE64;RapportKE64;c:\windows\System32\Drivers\RapportKE64.sys;c:\windows\SYSNATIVE\Drivers\RapportKE64.sys [x]
R1 gumsnvku;gumsnvku;c:\windows\system32\drivers\gumsnvku.sys;c:\windows\SYSNATIVE\drivers\gumsnvku.sys [x]
R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
R2 sbapifs;sbapifs;c:\windows\system32\DRIVERS\sbapifs.sys;c:\windows\SYSNATIVE\DRIVERS\sbapifs.sys [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys;c:\windows\SYSNATIVE\Drivers\ssadadb.sys [x]
R3 BytelMediaServer;media center Bouygues Telecom;c:\programdata\media center Bouygues Telecom\MediaServer.exe;c:\programdata\media center Bouygues Telecom\MediaServer.exe [x]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys;c:\windows\SYSNATIVE\drivers\dgderdrv.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 ivusb;Initio Driver for USB Default Controller;c:\windows\system32\DRIVERS\ivusb.sys;c:\windows\SYSNATIVE\DRIVERS\ivusb.sys [x]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x]
R3 netr7364;RT73 USB Extensible Wireless LAN Card Driver;c:\windows\system32\DRIVERS\netr7364.sys;c:\windows\SYSNATIVE\DRIVERS\netr7364.sys [x]
R3 OlyCamComm;OLYMPUS USB Communication Device;c:\windows\system32\DRIVERS\OlyCamComm.sys;c:\windows\SYSNATIVE\DRIVERS\OlyCamComm.sys [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdm.sys [x]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys;c:\windows\SYSNATIVE\DRIVERS\ssadserd.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 Avira.OE.ServiceHost;Avira Service Host;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [x]
S2 ezSharedSvc;Easybits Services for Windows;c:\windows\System32\ezSharedSvcHost.exe;c:\windows\SYSNATIVE\ezSharedSvcHost.exe [x]
S2 HPClientSvc;HP Client Services;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe [x]
S2 PDF Architect Helper Service;PDF Architect Helper Service;c:\program files (x86)\PDF Architect\HelperService.exe;c:\program files (x86)\PDF Architect\HelperService.exe [x]
S2 PDF Architect Service;PDF Architect Service;c:\program files (x86)\PDF Architect\ConversionService.exe;c:\program files (x86)\PDF Architect\ConversionService.exe [x]
S2 pdfcDispatcher;PDF Document Manager;c:\program files (x86)\PDF Complete\pdfsvc.exe;c:\program files (x86)\PDF Complete\pdfsvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 UMVPFSrv;UMVPFSrv;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 athur;Wireless Network Adapter Service;c:\windows\system32\DRIVERS\athurx.sys;c:\windows\SYSNATIVE\DRIVERS\athurx.sys [x]
S3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x]
S3 LVUVC64;Logitech Webcam C210(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys;c:\windows\SYSNATIVE\DRIVERS\lvuvc64.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
--- Autres Services/Pilotes en mémoire ---
.

• NewlyCreated* - DUUJUDXM
• NewlyCreated* - PHNMLXKS
• Deregistered* - duujudxm
• Deregistered* - phnmlxks

.
Contenu du dossier 'Tâches planifiées'
.
2015-03-28 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-01 22:55]
.
2015-03-28 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cf8a3964c18c03.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-05-27 16:56]
.
2015-03-28 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-05-27 16:56]
.
2014-03-13 c:\windows\Tasks\User_Feed_Synchronization-{EA54AEA2-F8A7-4103-961A-14CBC7A9CBB4}.job
- c:\windows\system32\msfeedssync.exe [2013-11-20 02:01]
.
2014-03-06 c:\windows\Tasks\{1A365E30-71D4-4564-8EB1-CFC550DB6A7F}.job
- c:\program files\internet explorer\iexplore.exe [2015-03-11 03:15]
.
2014-03-06 c:\windows\Tasks\{3137F299-3C2A-4D5A-985D-DD15826FAE4C}.job
- c:\program files\internet explorer\iexplore.exe [2015-03-11 03:15]
.
2014-03-06 c:\windows\Tasks\{DB971EBC-E74B-47D2-9ED5-EE83DFB5088D}.job
- c:\program files\internet explorer\iexplore.exe [2015-03-11 03:15]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2015-01-08 09:53 860984 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe" [2008-11-20 62768]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2011-08-01 2417032]
.
------- Examen supplémentaire -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.orange.fr/
mDefault_Search_URL = www.google.com
mDefault_Page_URL = www.google.com
mStart Page = www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = www.google.com
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com
mCustomizeSearch = www.google.com
mSearchAssistant = www.google.com
IE: E&xport to Microsoft Excel - c:\program files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\program files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.1.254
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game.zylom.com/activex/zylomgamesplayer.cab
.
- - - - ORPHELINS SUPPRIMES - - - -
.
Toolbar-10 - (no file)
Toolbar-NoExplorer - (no file)
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
AddRemove-EasyBits Magic Desktop - c:\windows\system32\ezMDUninstall.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files (x86)\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Heure de fin: 2015-03-28 15:26:59
ComboFix-quarantined-files.txt 2015-03-28 14:26
ComboFix2.txt 2015-01-05 17:08
.
Avant-CF: 872 252 395 520 octets libres
Après-CF: 873 794 293 760 octets libres
.
- - End Of File - - C97E554F63D0E46901F6325B42BC1BC2

Voici le rapport, pour le moment ras, je vous tiens au courant...

ComboFix 15-03-25.01 - Virginie 28/03/2015 18:43:00.4.2 - x64
Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.33.1036.18.4077.2396 [GMT 1:00]
Lancé depuis: c:\users\Virginie\Desktop\ComboFix.exe
Commutateurs utilisés :: c:\users\Virginie\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\users\Virginie\AppData\Local\Temp\UuU.uUu"
"c:\users\Virginie\AppData\Local\Temp\XxX.xXx"
"c:\users\Virginie\AppData\Roaming\logs.dat"
"c:\windows\system32\drivers\gumsnvku.sys"
"c:\windows\system32\drivers\EsgScanner.sys"
"c:\windows\Tasks\{3137F299-3C2A-4D5A-985D-DD15826FAE4C}.job"
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_gumsnvku
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2015-02-28 au 2015-03-28 ))))))))))))))))))))))))))))))))))))
.
.
2015-03-28 17:51 . 2015-03-28 17:51 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2015-03-28 17:51 . 2015-03-28 17:51 -------- d-----w- c:\users\TEMP\AppData\Local\temp
2015-03-28 17:51 . 2015-03-28 17:51 -------- d-----w- c:\users\Public\AppData\Local\temp
2015-03-28 17:51 . 2015-03-28 17:51 -------- d-----w- c:\users\noelotte\AppData\Local\temp
2015-03-28 17:51 . 2015-03-28 17:51 -------- d-----w- c:\users\Invité\AppData\Local\temp
2015-03-28 17:51 . 2015-03-28 17:51 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-03-28 13:05 . 2015-03-28 13:05 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{F7FE1D80-7FFA-4E16-8A98-79D9517FF947}\offreg.dll
2015-03-27 12:30 . 2015-03-14 10:02 12002392 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{F7FE1D80-7FFA-4E16-8A98-79D9517FF947}\mpengine.dll
2015-03-25 16:24 . 2015-03-25 16:24 14008 ----a-w- c:\users\Virginie\messangerr.vbs
2015-03-25 16:23 . 2015-03-25 16:23 509312 ----a-w- c:\users\Virginie\Lettre&amour.vbs
2015-03-25 00:17 . 2015-03-11 04:06 677888 ----a-w- c:\windows\system32\generaltel.dll
2015-03-25 00:17 . 2015-03-11 04:06 760832 ----a-w- c:\windows\system32\invagent.dll
2015-03-25 00:17 . 2015-03-11 04:06 414720 ----a-w- c:\windows\system32\devinv.dll
2015-03-25 00:17 . 2015-03-11 04:06 943616 ----a-w- c:\windows\system32\appraiser.dll
2015-03-25 00:17 . 2015-03-11 04:05 30720 ----a-w- c:\windows\system32\acmigration.dll
2015-03-25 00:17 . 2015-03-11 04:05 227328 ----a-w- c:\windows\system32\aepdu.dll
2015-03-25 00:17 . 2015-03-11 04:05 192000 ----a-w- c:\windows\system32\aepic.dll
2015-03-25 00:17 . 2015-03-11 04:02 1107456 ----a-w- c:\windows\system32\aeinv.dll
2015-03-21 19:47 . 2015-03-21 19:47 -------- d-----w- c:\programdata\Microsoft OneDrive
2015-03-21 17:32 . 2015-03-21 17:08 907984 ------w- c:\programdata\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe
2015-03-14 12:52 . 2015-03-14 12:52 -------- d-----w- c:\program files (x86)\Common Files\Java
2015-03-11 10:45 . 2015-02-20 04:41 41984 ----a-w- c:\windows\system32\lpk.dll
2015-03-11 10:43 . 2015-02-13 05:22 14177280 ----a-w- c:\windows\system32\shell32.dll
2015-03-11 10:38 . 2015-02-04 03:16 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2015-03-11 10:38 . 2015-02-04 02:54 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2015-03-09 12:07 . 2015-03-09 12:07 -------- d-----w- c:\programdata\MG_Micro_8
2015-03-09 12:07 . 2015-03-09 12:07 -------- d-----w- c:\users\Virginie\AppData\Local\WDSetup
2015-03-09 11:38 . 2015-03-09 11:38 -------- d-----w- c:\program files (x86)\Memsoft
2015-03-09 11:38 . 2014-01-31 09:21 6544384 ----a-w- c:\windows\system32\cdintf450_64.dll
2015-03-09 11:38 . 2014-01-31 09:21 4840960 ----a-w- c:\windows\SysWow64\cdintf450.dll
2015-03-09 11:38 . 2015-03-09 11:38 -------- d-----w- c:\program files (x86)\Microsoft Chart Controls
2015-03-09 11:37 . 2015-03-09 11:39 -------- d-----w- c:\program files (x86)\Common Files\Memsoft
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-03-28 16:16 . 2014-12-11 10:31 136408 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-03-17 05:15 . 2014-12-11 10:31 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2015-03-17 05:15 . 2014-12-11 10:31 107736 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-03-17 05:15 . 2014-12-11 10:31 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-03-14 12:51 . 2014-11-12 14:02 98216 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2015-03-12 02:02 . 2012-06-05 18:54 122905848 ----a-w- c:\windows\system32\MRT.exe
2015-02-24 03:17 . 2010-11-21 03:27 295552 ------w- c:\windows\system32\MpSigStub.exe
2015-02-04 22:55 . 2012-06-01 21:07 701616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-02-04 22:55 . 2012-02-18 12:32 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-01-27 23:36 . 2015-02-11 09:41 1239720 ----a-w- c:\windows\system32\aitstatic.exe
2015-01-09 03:14 . 2015-02-25 19:41 91136 ----a-w- c:\windows\system32\wdi.dll
2015-01-09 03:14 . 2015-02-25 19:41 950272 ----a-w- c:\windows\system32\perftrack.dll
2015-01-09 03:14 . 2015-02-25 19:41 29696 ----a-w- c:\windows\system32\powertracker.dll
2015-01-09 02:48 . 2015-02-25 19:41 76800 ----a-w- c:\windows\SysWow64\wdi.dll
2015-01-08 09:59 . 2012-06-05 19:11 87912 ----a-w- c:\windows\system32\drivers\aswmonflt.sys
2015-01-08 09:59 . 2015-01-08 09:53 1050432 ----a-w- c:\windows\system32\drivers\aswsnx.sys
2015-01-08 09:53 . 2015-01-08 09:53 267632 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2015-01-08 09:53 . 2015-01-08 09:53 116728 ----a-w- c:\windows\system32\drivers\aswStm.sys
2015-01-08 09:53 . 2015-01-08 09:53 93568 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2015-01-08 09:53 . 2015-01-08 09:53 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2015-01-08 09:53 . 2015-01-08 09:53 29208 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2015-01-08 09:53 . 2015-01-08 09:53 364512 ----a-w- c:\windows\system32\aswBoot.exe
2015-01-08 09:53 . 2015-01-08 09:53 43152 ----a-w- c:\windows\avastSS.scr
2015-01-08 09:53 . 2012-06-05 19:11 436624 ----a-w- c:\windows\system32\drivers\aswSP.sys
2014-12-30 13:32 . 2014-12-30 13:32 22704 ----a-w- c:\windows\system32\drivers\EsgScanner.sys
2006-05-03 09:06 163328 --sha-r- c:\windows\SysWOW64\flvDX.dll
2007-02-21 10:47 31232 --sha-r- c:\windows\SysWOW64\msfDX.dll
2008-03-16 12:30 216064 --sha-r- c:\windows\SysWOW64\nbDX.dll
2010-01-06 22:00 107520 --sha-r- c:\windows\SysWOW64\TAKDSDecoder.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.

• Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Synchronizer"="c:\program files (x86)\Adobe\Reader 11.0\Reader\AdobeCollabSync.exe" [2014-12-03 761064]
"iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2014-11-21 43816]
"ApplePhotoStreams"="c:\program files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2014-11-21 43816]
"AppleIEDAV"="c:\program files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe" [2014-09-19 1080104]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Easybits Recovery"="c:\program files (x86)\EasyBits For Kids\ezRecover.exe" [2011-05-17 61112]
"KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2013-07-15 311152]
"Avira Systray"="c:\program files (x86)\Avira\My Avira\Avira.OE.Systray.exe" [2014-11-20 126200]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2015-01-08 5226600]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-10-15 157480]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2013-05-30 96056]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2015-03-07 335232]
.
c:\users\Virginie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
messangerr.vbs [2015-3-25 14008]
serche.vbs [2015-3-21 16157]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"HideFastUserSwitching"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"EnableShellExecuteHooks"= 1 (0x1)
.
[hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
R0 RapportKE64;RapportKE64;c:\windows\System32\Drivers\RapportKE64.sys;c:\windows\SYSNATIVE\Drivers\RapportKE64.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
R2 sbapifs;sbapifs;c:\windows\system32\DRIVERS\sbapifs.sys;c:\windows\SYSNATIVE\DRIVERS\sbapifs.sys [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys;c:\windows\SYSNATIVE\Drivers\ssadadb.sys [x]
R3 BytelMediaServer;media center Bouygues Telecom;c:\programdata\media center Bouygues Telecom\MediaServer.exe;c:\programdata\media center Bouygues Telecom\MediaServer.exe [x]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys;c:\windows\SYSNATIVE\drivers\dgderdrv.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 ivusb;Initio Driver for USB Default Controller;c:\windows\system32\DRIVERS\ivusb.sys;c:\windows\SYSNATIVE\DRIVERS\ivusb.sys [x]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x]
R3 netr7364;RT73 USB Extensible Wireless LAN Card Driver;c:\windows\system32\DRIVERS\netr7364.sys;c:\windows\SYSNATIVE\DRIVERS\netr7364.sys [x]
R3 OlyCamComm;OLYMPUS USB Communication Device;c:\windows\system32\DRIVERS\OlyCamComm.sys;c:\windows\SYSNATIVE\DRIVERS\OlyCamComm.sys [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdm.sys [x]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys;c:\windows\SYSNATIVE\DRIVERS\ssadserd.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
S2 Avira.OE.ServiceHost;Avira Service Host;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [x]
S2 ezSharedSvc;Easybits Services for Windows;c:\windows\System32\ezSharedSvcHost.exe;c:\windows\SYSNATIVE\ezSharedSvcHost.exe [x]
S2 HPClientSvc;HP Client Services;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe [x]
S2 PDF Architect Helper Service;PDF Architect Helper Service;c:\program files (x86)\PDF Architect\HelperService.exe;c:\program files (x86)\PDF Architect\HelperService.exe [x]
S2 PDF Architect Service;PDF Architect Service;c:\program files (x86)\PDF Architect\ConversionService.exe;c:\program files (x86)\PDF Architect\ConversionService.exe [x]
S2 pdfcDispatcher;PDF Document Manager;c:\program files (x86)\PDF Complete\pdfsvc.exe;c:\program files (x86)\PDF Complete\pdfsvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 UMVPFSrv;UMVPFSrv;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 athur;Wireless Network Adapter Service;c:\windows\system32\DRIVERS\athurx.sys;c:\windows\SYSNATIVE\DRIVERS\athurx.sys [x]
S3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x]
S3 LVUVC64;Logitech Webcam C210(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys;c:\windows\SYSNATIVE\DRIVERS\lvuvc64.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
Contenu du dossier 'Tâches planifiées'
.
2015-03-28 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-01 22:55]
.
2015-03-28 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cf8a3964c18c03.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-05-27 16:56]
.
2015-03-28 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-05-27 16:56]
.
2014-03-13 c:\windows\Tasks\User_Feed_Synchronization-{EA54AEA2-F8A7-4103-961A-14CBC7A9CBB4}.job
- c:\windows\system32\msfeedssync.exe [2013-11-20 02:01]
.
2014-03-06 c:\windows\Tasks\{1A365E30-71D4-4564-8EB1-CFC550DB6A7F}.job
- c:\program files\internet explorer\iexplore.exe [2015-03-11 03:15]
.
2014-03-06 c:\windows\Tasks\{3137F299-3C2A-4D5A-985D-DD15826FAE4C}.job
- c:\program files\internet explorer\iexplore.exe [2015-03-11 03:15]
.
2014-03-06 c:\windows\Tasks\{DB971EBC-E74B-47D2-9ED5-EE83DFB5088D}.job
- c:\program files\internet explorer\iexplore.exe [2015-03-11 03:15]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2015-01-08 09:53 860984 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe" [2008-11-20 62768]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2011-08-01 2417032]
.
------- Examen supplémentaire -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.orange.fr/
mDefault_Search_URL = www.google.com
mDefault_Page_URL = www.google.com
mStart Page = www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = www.google.com
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com
mCustomizeSearch = www.google.com
mSearchAssistant = www.google.com
IE: E&xport to Microsoft Excel - c:\program files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\program files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.1.254
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game.zylom.com/activex/zylomgamesplayer.cab
.
- - - - ORPHELINS SUPPRIMES - - - -
.
Toolbar-10 - (no file)
Toolbar-NoExplorer - (no file)
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
AddRemove-EasyBits Magic Desktop - c:\windows\system32\ezMDUninstall.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files (x86)\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\windows\SysWOW64\ezSharedSvcHost.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
.

.
Heure de fin: 2015-03-28 19:00:34 - La machine a redémarré
ComboFix-quarantined-files.txt 2015-03-28 18:00
ComboFix2.txt 2015-03-28 14:48
ComboFix3.txt 2015-03-28 14:27
.
Avant-CF: 874 723 737 600 octets libres
Après-CF: 874 720 632 832 octets libres
.
- - End Of File - - B4B75247A5990D913F478B3670E886B4

ok

Bonjour, je reviens vers vous après un week end chargé, voici le rapport de Malwarebytes

Malwarebytes Anti-Malware
www.malwarebytes.org


Error, 28/03/2015 15:32:52, SYSTEM, VIRGINIE-HP, Protection, IsLicensed, 13,
Protection, 28/03/2015 15:32:52, SYSTEM, VIRGINIE-HP, Protection, Malware Protection, Stopping,
Protection, 28/03/2015 15:32:52, SYSTEM, VIRGINIE-HP, Protection, Malware Protection, Stopped,
Error, 28/03/2015 15:52:27, SYSTEM, VIRGINIE-HP, Protection, IsLicensed, 13,
Protection, 28/03/2015 15:52:27, SYSTEM, VIRGINIE-HP, Protection, Malware Protection, Stopping,
Protection, 28/03/2015 15:52:27, SYSTEM, VIRGINIE-HP, Protection, Malware Protection, Stopped,
Update, 28/03/2015 16:44:19, SYSTEM, VIRGINIE-HP, Manual, Malware Database, 2015.3.27.8, 2015.3.28.3,
Scan, 28/03/2015 17:14:55, SYSTEM, VIRGINIE-HP, Manual, Départ: 28/03/2015 16:44:20, Durée: 20 minutes 42 secondes, Examen "Menaces", Terminé, Détection de malveillants 1, Détection de non-malveillants de 0,
Update, 28/03/2015 17:16:44, SYSTEM, VIRGINIE-HP, Manual, Malware Database, 2015.3.28.3, 2015.3.28.4,
Scan, 28/03/2015 17:35:08, SYSTEM, VIRGINIE-HP, Manual, Départ: 28/03/2015 17:16:44, Durée: 18 minutes 23 secondes, Examen "Menaces", Terminé, Détection de malveillants 0, Détection de non-malveillants de 0,
Error, 28/03/2015 18:54:15, SYSTEM, VIRGINIE-HP, Protection, IsLicensed, 13,
Protection, 28/03/2015 18:54:15, SYSTEM, VIRGINIE-HP, Protection, Malware Protection, Stopping,
Protection, 28/03/2015 18:54:15, SYSTEM, VIRGINIE-HP, Protection, Malware Protection, Stopped,
Error, 28/03/2015 19:10:31, SYSTEM, VIRGINIE-HP, Protection, IsLicensed, 13,
Protection, 28/03/2015 19:10:31, SYSTEM, VIRGINIE-HP, Protection, Malware Protection, Stopping,
Protection, 28/03/2015 19:10:31, SYSTEM, VIRGINIE-HP, Protection, Malware Protection, Stopped,
Update, 28/03/2015 19:22:42, SYSTEM, VIRGINIE-HP, Manual, Malware Database, 2015.3.28.4, 2015.3.28.5,
Scan, 28/03/2015 19:45:31, SYSTEM, VIRGINIE-HP, Manual, Départ: 28/03/2015 19:24:25, Durée: 21 minutes 6 secondes, Examen "Menaces", Terminé, Détection de malveillants 0, Détection de non-malveillants de 0,
Scan, 28/03/2015 20:09:44, SYSTEM, VIRGINIE-HP, Manual, Départ: 28/03/2015 19:47:11, Durée: 22 minutes 32 secondes, Examen "Menaces", Terminé, Détection de malveillants 0, Détection de non-malveillants de 0,

(end)

Voici les rapport de FRST :

Addition:
https://pjjoint.malekal.com/files.php?id=20150329_f5n14z6p13i8

FRST :
https://pjjoint.malekal.com/files.php?id=20150329_w6h98w13b6

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
Ran by Virginie at 2015-03-29 21:40:01 Run:1
Running from C:\Users\Virginie\Desktop
Loaded Profiles: Virginie & UpdatusUser (Available profiles: Virginie & noelotte & UpdatusUser & Invité)
Boot Mode: Normal
==============================================

Content of fixlist:

start
CloseProcesses:
CreateRestorePoint:
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1386252288-951527657-418686438-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-1386252288-951527657-418686438-1002 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPDTDF [Pays IE - 185.23.44.87]
2014-02-01 17:08 - 2014-02-26 00:50 - 0000100 _____ () C:\Users\Virginie\AppData\Roaming\WB.CFG
2013-03-16 10:11 - 2013-03-16 10:11 - 0000129 _____ () C:\Users\Virginie\AppData\Local\7e3582d4668682df72b07353f3354ad92014-05-30 13:14 - 2014-05-30 13:14 - 0003584 _____ () C:\Users\Virginie\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
C:\Users\Virginie\Lettre&amour.vbs
C:\Users\Virginie\messangerr.vbs
C:\Windows\Tasks\{1A365E30-71D4-4564-8EB1-CFC550DB6A7F}.job
C:\Windows\Tasks\{3137F299-3C2A-4D5A-985D-DD15826FAE4C}.job
C:\Windows\Tasks\{DB971EBC-E74B-47D2-9ED5-EE83DFB5088D}.job
Task: {679ECC46-057F-4141-9AD1-165889F7C272} - System32\Tasks\ZLo7pl4D3KFw2Wx => C:\Users\Virginie\AppData\Roaming\vCBIorc\JSYlgcy.exe [2014-12-24] ( )
Task: {841BF019-C8A4-4FF3-973B-AA9933A4EC94} - System32\Tasks\u0Y3xTzMAjuf2G1 => C:\Users\Virginie\AppData\Roaming\WgCRO3p\d5sQ7Hy.exe
Task: {8C2F6F5C-FA8D-4788-A106-03BC86123038} - System32\Tasks\klfZBbUbncJAvwG => C:\Users\Virginie\AppData\Roaming\fdSotON\VOOccro.exe
Task: {ADB18461-FD57-4D12-AE45-DA8EF81D2E48} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe
Task: {E7C08F74-2379-4907-86B8-883088EC9DED} - System32\Tasks\WIN-statsAdmin => C:\Users\Virginie\AppData\Local\Microsoft\WinU\~cecqnmv.exe <==== ATTENTION
Task: {EA0B0CBE-3289-435C-9DB8-6B034F62C5CF} - System32\Tasks\{18C1A3B8-68BB-4C23-BE6E-D76A23353DD0} => pcalua.exe -a C:\Program Files (x86)\MUSICSTATION\musicstation.exe
C:\Program Files\Enigma Software Group
Task: {EA0B0CBE-3289-435C-9DB8-6B034F62C5CF} - System32\Tasks\{18C1A3B8-68BB-4C23-BE6E-D76A23353DD0} => pcalua.exe -a C:\Program Files (x86)\MUSICSTATION\musicstation.exe
HKU\S-1-5-21-1386252288-951527657-418686438-1000\Software\Classes\exefile: <===== ATTENTION!
AlternateDataStreams: C:\ProgramData\Temp:373E1720
AlternateDataStreams: C:\Users\Virginie\Downloads:Shareaza.GUID

EmptyTemp:
end

Processes closed successfully.
Restore point was successfully created.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
"HKU\S-1-5-21-1386252288-951527657-418686438-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
HKU\S-1-5-21-1386252288-951527657-418686438-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827} => Key not found.
HKCR\CLSID\{2fa28606-de77-4029-af96-b231e3b8f827} => Key not found.
C:\Users\Virginie\AppData\Roaming\WB.CFG => Moved successfully.
C:\Users\Virginie\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => Moved successfully.
C:\Users\Virginie\Lettre&amour.vbs => Moved successfully.
C:\Users\Virginie\messangerr.vbs => Moved successfully.
C:\Windows\Tasks\{1A365E30-71D4-4564-8EB1-CFC550DB6A7F}.job => Moved successfully.
C:\Windows\Tasks\{3137F299-3C2A-4D5A-985D-DD15826FAE4C}.job => Moved successfully.
C:\Windows\Tasks\{DB971EBC-E74B-47D2-9ED5-EE83DFB5088D}.job => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{679ECC46-057F-4141-9AD1-165889F7C272}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{679ECC46-057F-4141-9AD1-165889F7C272}" => Key deleted successfully.
C:\Windows\System32\Tasks\ZLo7pl4D3KFw2Wx => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ZLo7pl4D3KFw2Wx" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{841BF019-C8A4-4FF3-973B-AA9933A4EC94}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{841BF019-C8A4-4FF3-973B-AA9933A4EC94}" => Key deleted successfully.
C:\Windows\System32\Tasks\u0Y3xTzMAjuf2G1 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\u0Y3xTzMAjuf2G1" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{8C2F6F5C-FA8D-4788-A106-03BC86123038}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8C2F6F5C-FA8D-4788-A106-03BC86123038}" => Key deleted successfully.
C:\Windows\System32\Tasks\klfZBbUbncJAvwG => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\klfZBbUbncJAvwG" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{ADB18461-FD57-4D12-AE45-DA8EF81D2E48}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ADB18461-FD57-4D12-AE45-DA8EF81D2E48}" => Key deleted successfully.
C:\Windows\System32\Tasks\SpyHunter4Startup => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SpyHunter4Startup" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E7C08F74-2379-4907-86B8-883088EC9DED}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E7C08F74-2379-4907-86B8-883088EC9DED}" => Key deleted successfully.
C:\Windows\System32\Tasks\WIN-statsAdmin => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WIN-statsAdmin" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EA0B0CBE-3289-435C-9DB8-6B034F62C5CF}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EA0B0CBE-3289-435C-9DB8-6B034F62C5CF}" => Key deleted successfully.
C:\Windows\System32\Tasks\{18C1A3B8-68BB-4C23-BE6E-D76A23353DD0} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{18C1A3B8-68BB-4C23-BE6E-D76A23353DD0}" => Key deleted successfully.
"C:\Program Files\Enigma Software Group" => File/Directory not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EA0B0CBE-3289-435C-9DB8-6B034F62C5CF} => Key not found.
C:\Windows\System32\Tasks\{18C1A3B8-68BB-4C23-BE6E-D76A23353DD0} not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{18C1A3B8-68BB-4C23-BE6E-D76A23353DD0} => Key not found.
"HKU\S-1-5-21-1386252288-951527657-418686438-1000\Software\Classes\exefile" => Key deleted successfully.
C:\ProgramData\Temp => ":373E1720" ADS removed successfully.
"C:\Users\Virginie\Downloads" => ":Shareaza.GUID" ADS not found.
EmptyTemp: => Removed 287.9 MB temporary data.


The system needed a reboot.

End of Fixlog 21:42:45

Bonjour je ne vous oublie pas il scan...

rapport ESET

http://pjjoint.malekal.com/files.php?id=20150331_m8n13d15b11x5

Bonjour, je reviens vers vous je n'arrive pas à faire la dernière étape ? il me demande de faire le scan au redémarrage, ce que j'ai fait et après je ne sais pas ???

Message CHKDSK :
chkdsk ne peut pas s'exécuter parce que le volume est utilisé par un autre processus. Voulez-vous que le volume soit vérifié au prochain démarrage du système ? (O/N)

Bonjour,
Choisis O

Bonjour,

Rapport FRST : http://pjjoint.malekal.com/files.php?id=FRST_20150407_g14o8d14g9i9

Rapport ADDITION : http://pjjoint.malekal.com/files.php?id=FRST_20150407_g14o8d14g9i9

voici le rapport de SEAF /

1. ========================= SEAF 1.0.1.0 - C_XX
2.
3. Commencé à: 21:31:02 le 08/04/2015
4.
5. Valeur(s) recherchée(s):
6. explorer.exe
7.
8. Légende: TC => Date de création, TM => Date de modification, DA => Dernier accès
9.
10. (!) --- Calcul du Hash "MD5"
11. (!) --- Informations supplémentaires
12. (!) --- Recherche registre
13.
14. ====== Fichier(s) ======
15.
16.
17. "C:\System Volume Information\SystemRestore\FRStaging\Windows\erdnt\cache86\explorer.exe" [ ARCHIVE | 2872 Ko ]
18. TC: 01/01/2014,13:08:52 | TM: 18/02/2012,14:14:41 | DA: 30/03/2015,22:59:10
19.
20. Hash MD5: 332FEAB1435662FC6C672E25BEB37BE3
21.
22. CompanyName: Microsoft Corporation
23. ProductName: Microsoft® Windows® Operating System
24. InternalName: explorer
25. OriginalFileName: EXPLORER.EXE
26. LegalCopyright: © Microsoft Corporation. All rights reserved.
27. ProductVersion: 6.1.7601.17567
28. FileVersion: 6.1.7601.17567 (win7sp1_gdr.110224-1502)
29.
30. =========================
31.
32.
33. "C:\System Volume Information\SystemRestore\FRStaging\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe" [ ARCHIVE | 2872 Ko ]
34. TC: 18/02/2012,14:14:41 | TM: 18/02/2012,14:14:41 | DA: 30/03/2015,23:00:09
35.
36. Hash MD5: 332FEAB1435662FC6C672E25BEB37BE3
37.
38. CompanyName: Microsoft Corporation
39. ProductName: Microsoft® Windows® Operating System
40. InternalName: explorer
41. OriginalFileName: EXPLORER.EXE
42. LegalCopyright: © Microsoft Corporation. All rights reserved.
43. ProductVersion: 6.1.7601.17567
44. FileVersion: 6.1.7601.17567 (win7sp1_gdr.110224-1502)
45.
46. =========================
47.
48.
49. "C:\Windows\erdnt\cache86\explorer.exe" [ ARCHIVE | 2872 Ko ]
50. TC: 01/01/2014,13:08:52 | TM: 18/02/2012,14:14:41 | DA: 30/03/2015,23:32:24
51.
52. Hash MD5: 332FEAB1435662FC6C672E25BEB37BE3
53.
54. CompanyName: Microsoft Corporation
55. ProductName: Microsoft® Windows® Operating System
56. InternalName: explorer
57. OriginalFileName: EXPLORER.EXE
58. LegalCopyright: © Microsoft Corporation. All rights reserved.
59. ProductVersion: 6.1.7601.17567
60. FileVersion: 6.1.7601.17567 (win7sp1_gdr.110224-1502)
61.
62. =========================
63.
64.
65. "C:\Windows\explorer.exe" [ ARCHIVE | 2872 Ko ]
66. TC: 18/02/2012,14:14:41 | TM: 18/02/2012,14:14:41 | DA: 07/04/2015,16:52:02
67.
68. Hash MD5: 332FEAB1435662FC6C672E25BEB37BE3
69.
70. CompanyName: Microsoft Corporation
71. ProductName: Système d'exploitation Microsoft® Windows®
72. InternalName: explorer
73. OriginalFileName: EXPLORER.EXE.MUI
74. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
75. ProductVersion: 6.1.7600.16385
76. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
77.
78. =========================
79.
80.
81. "C:\Windows\fr-FR\explorer.exe.mui" [ ARCHIVE | 27 Ko ]
82. TC: 18/02/2012,14:07:53 | TM: 18/02/2012,14:07:53 | DA: 30/03/2015,23:32:34
83.
84. Hash MD5: BE31703AC133F7C80896D7898687BEF0
85.
86. CompanyName: Microsoft Corporation
87. ProductName: Système d'exploitation Microsoft® Windows®
88. InternalName: explorer
89. OriginalFileName: EXPLORER.EXE.MUI
90. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
91. ProductVersion: 6.1.7600.16385
92. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
93.
94. =========================
95.
96.
97. "C:\Windows\Prefetch\EXPLORER.EXE-A80E4F97.pf" [ NOT_CONTENT_INDEXED|ARCHIVE | 29 Ko ]
98. TC: 07/04/2015,16:52:02 | TM: 07/04/2015,16:52:02 | DA: 07/04/2015,16:52:02
99.
100. Hash MD5: 0B5409B1FDAEC8087158215D085E5492
101.
102.
103. =========================
104.
105.
106. "C:\Windows\System32\fr-FR\explorer.exe.mui" [ ARCHIVE | 27 Ko ]
107. TC: 18/02/2012,14:07:56 | TM: 18/02/2012,14:07:56 | DA: 06/04/2015,02:32:11
108.
109. Hash MD5: FD173730E78468962F9AF98C274B723B
110.
111. CompanyName: Microsoft Corporation
112. ProductName: Système d'exploitation Microsoft® Windows®
113. InternalName: explorer
114. OriginalFileName: EXPLORER.EXE.MUI
115. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
116. ProductVersion: 6.1.7600.16385
117. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
118.
119. =========================
120.
121.
122. "C:\Windows\SysWOW64\fr-FR\explorer.exe.mui" [ ARCHIVE | 27 Ko ]
123. TC: 18/02/2012,14:07:56 | TM: 18/02/2012,14:07:56 | DA: 06/04/2015,02:32:11
124.
125. Hash MD5: FD173730E78468962F9AF98C274B723B
126.
127. CompanyName: Microsoft Corporation
128. ProductName: Système d'exploitation Microsoft® Windows®
129. InternalName: explorer
130. OriginalFileName: EXPLORER.EXE.MUI
131. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
132. ProductVersion: 6.1.7600.16385
133. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
134.
135. =========================
136.
137.
138. "C:\Windows\winsxs\amd64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_046a4ba7804bd9a2\explorer.exe.mui" [ ARCHIVE | 27 Ko ]
139. TC: 18/02/2012,14:07:53 | TM: 18/02/2012,14:07:53 | DA: 30/03/2015,23:32:34
140.
141. Hash MD5: BE31703AC133F7C80896D7898687BEF0
142.
143. CompanyName: Microsoft Corporation
144. ProductName: Système d'exploitation Microsoft® Windows®
145. InternalName: explorer
146. OriginalFileName: EXPLORER.EXE.MUI
147. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
148. ProductVersion: 6.1.7600.16385
149. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
150.
151. =========================
152.
153.
154. "C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe" [ ARCHIVE | 2872 Ko ]
155. TC: 21/11/2010,05:24:11 | TM: 21/11/2010,05:24:11 | DA: 30/03/2015,23:51:41
156.
157. Hash MD5: AC4C51EB24AA95B77F705AB159189E24
158.
159. CompanyName: Microsoft Corporation
160. ProductName: Microsoft® Windows® Operating System
161. InternalName: explorer
162. OriginalFileName: EXPLORER.EXE
163. LegalCopyright: © Microsoft Corporation. All rights reserved.
164. ProductVersion: 6.1.7601.17514
165. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
166.
167. =========================
168.
169.
170. "C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe" [ ARCHIVE | 2872 Ko ]
171. TC: 18/02/2012,14:14:41 | TM: 18/02/2012,14:14:41 | DA: 16/01/2015,16:21:53
172.
173. Hash MD5: 332FEAB1435662FC6C672E25BEB37BE3
174.
175. CompanyName: Microsoft Corporation
176. ProductName: Microsoft® Windows® Operating System
177. InternalName: explorer
178. OriginalFileName: EXPLORER.EXE
179. LegalCopyright: © Microsoft Corporation. All rights reserved.
180. ProductVersion: 6.1.7601.17567
181. FileVersion: 6.1.7601.17567 (win7sp1_gdr.110224-1502)
182.
183. =========================
184.
185.
186. "C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe" [ ARCHIVE | 2872 Ko ]
187. TC: 18/02/2012,14:14:41 | TM: 18/02/2012,14:14:41 | DA: 30/03/2015,23:51:41
188.
189. Hash MD5: 3B69712041F3D63605529BD66DC00C48
190.
191. CompanyName: Microsoft Corporation
192. ProductName: Microsoft® Windows® Operating System
193. InternalName: explorer
194. OriginalFileName: EXPLORER.EXE
195. LegalCopyright: © Microsoft Corporation. All rights reserved.
196. ProductVersion: 6.1.7601.21669
197. FileVersion: 6.1.7601.21669 (win7sp1_ldr.110225-1503)
198.
199. =========================
200.
201.
202. "C:\Windows\winsxs\wow64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_0ebef5f9b4ac9b9d\explorer.exe.mui" [ ARCHIVE | 27 Ko ]
203. TC: 18/02/2012,14:07:56 | TM: 18/02/2012,14:07:56 | DA: 30/03/2015,23:49:50
204.
205. Hash MD5: FD173730E78468962F9AF98C274B723B
206.
207. CompanyName: Microsoft Corporation
208. ProductName: Système d'exploitation Microsoft® Windows®
209. InternalName: explorer
210. OriginalFileName: EXPLORER.EXE.MUI
211. LegalCopyright: © Microsoft Corporation. Tous droits réservés.
212. ProductVersion: 6.1.7600.16385
213. FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
214.
215. =========================
216.
217.
218. "C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe" [ ARCHIVE | 2616 Ko ]
219. TC: 21/11/2010,05:24:25 | TM: 21/11/2010,05:24:25 | DA: 31/03/2015,00:04:10
220.
221. Hash MD5: 40D777B7A95E00593EB1568C68514493
222.
223. CompanyName: Microsoft Corporation
224. ProductName: Microsoft® Windows® Operating System
225. InternalName: explorer
226. OriginalFileName: EXPLORER.EXE
227. LegalCopyright: © Microsoft Corporation. All rights reserved.
228. ProductVersion: 6.1.7601.17514
229. FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
230.
231. =========================
232.
233.
234. "C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe" [ ARCHIVE | 2616 Ko ]
235. TC: 18/02/2012,14:14:41 | TM: 18/02/2012,14:14:41 | DA: 31/03/2015,00:04:10
236.
237. Hash MD5: 42E5C3420D7916BB29B851F0743B2685
238.
239.
240. =========================
241.
242.
243. "C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe" [ ARCHIVE | 2616 Ko ]
244. TC: 18/02/2012,14:14:41 | TM: 18/02/2012,14:14:41 | DA: 31/03/2015,00:04:10
245.
246. Hash MD5: 0FB9C74046656D1579A64660AD67B746
247.
248. CompanyName: Microsoft Corporation
249. ProductName: Microsoft® Windows® Operating System
250. InternalName: explorer
251. OriginalFileName: EXPLORER.EXE
252. LegalCopyright: © Microsoft Corporation. All rights reserved.
253. ProductVersion: 6.1.7601.21669
254. FileVersion: 6.1.7601.21669 (win7sp1_ldr.110225-1503)
255.
256. =========================
257.
258.
259.
260. ====== Entrée(s) du registre ======
261.
262.
263. [HKLM\Software\Microsoft\Internet Explorer\Low Rights\DragDrop\{20D04FE0-3AEA-1069-A2D8-08002B30309D}]
264. "AppName"="explorer.exe" (REG_SZ)
265.
266. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BEHAVIORS]
267. "explorer.exe"="1" (REG_DWORD)
268.
269. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]
270. "explorer.exe"="1" (REG_DWORD)
271.
272. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]
273. "explorer.exe"="1" (REG_DWORD)
274.
275. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MAXCONNECTIONSPER1_0SERVER]
276. "explorer.exe"="4" (REG_DWORD)
277.
278. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]
279. "explorer.exe"="2" (REG_DWORD)
280.
281. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MIME_HANDLING]
282. "explorer.exe"="1" (REG_DWORD)
283.
284. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MIME_SNIFFING]
285. "explorer.exe"="1" (REG_DWORD)
286.
287. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_OBJECT_CACHING]
288. "explorer.exe"="1" (REG_DWORD)
289.
290. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]
291. "explorer.exe"="0" (REG_DWORD)
292.
293. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]
294. "explorer.exe"="1" (REG_DWORD)
295.
296. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]
297. "explorer.exe"="1" (REG_DWORD)
298.
299. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]
300. "explorer.exe"="1" (REG_DWORD)
301.
302. [HKLM\Software\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_ZONE_ELEVATION]
303. "explorer.exe"="1" (REG_DWORD)
304.
305. [HKLM\Software\Microsoft\RADAR\HeapLeakDetection\ReflectionApplications\explorer.exe]
306. DA: 08/07/2014 19:06:00
307.
308. [HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\FileAssociation]
309. "KillList"="%1;explorer.exe;dvdplay.exe;msohtmed.exe;quikview.exe;rundll.exe;rundll32.exe;taskman.exe;bck32api.dll;" (REG_SZ)
310.
311. [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
312. "Shell"="explorer.exe" (REG_SZ)
313.
314. [HKLM\Software\Microsoft\Windows Search\Capabilities]
315. "ApplicationDescription"="@%SystemRoot%\explorer.exe,-6012" (REG_EXPAND_SZ)
316.
317. [HKLM\Software\Microsoft\Windows Search\Capabilities]
318. "ApplicationName"="@%SystemRoot%\explorer.exe,-6011" (REG_EXPAND_SZ)
319.
320. [HKLM\Software\Classes\Applications\explorer.exe]
321. DA: 26/03/2015 10:20:05
322.
323. [HKLM\Software\Classes\CABFolder\shell\find\command]
324. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
325.
326. [HKLM\Software\Classes\CABFolder\shell\Open\Command]
327. ""="%SystemRoot%\Explorer.exe /idlist,%I,%L" (REG_EXPAND_SZ)
328.
329. [HKLM\Software\Classes\CLSID\{0AFACED1-E828-11D1-9187-B532F1E9575D}\shell\find\command]
330. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
331.
332. [HKLM\Software\Classes\CLSID\{208D2C60-3AEA-1069-A2D7-08002B30309D}\shell\find\command]
333. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
334.
335. [HKLM\Software\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell\find\command]
336. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
337.
338. [HKLM\Software\Classes\CLSID\{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}]
339. "LocalizedString"="@%SystemRoot%\explorer.exe,-7020" (REG_EXPAND_SZ)
340.
341. [HKLM\Software\Classes\CLSID\{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}]
342. "InfoTip"="@explorer.exe,-7000" (REG_SZ)
343.
344. [HKLM\Software\Classes\CLSID\{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}]
345. "LocalizedString"="@%SystemRoot%\explorer.exe,-7021" (REG_EXPAND_SZ)
346.
347. [HKLM\Software\Classes\CLSID\{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}]
348. "InfoTip"="@explorer.exe,-7001" (REG_SZ)
349.
350. [HKLM\Software\Classes\CLSID\{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}]
351. "LocalizedString"="@%SystemRoot%\explorer.exe,-7022" (REG_EXPAND_SZ)
352.
353. [HKLM\Software\Classes\CLSID\{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}]
354. "LocalizedString"="@%SystemRoot%\explorer.exe,-7023" (REG_EXPAND_SZ)
355.
356. [HKLM\Software\Classes\CLSID\{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}]
357. "InfoTip"="@explorer.exe,-7003" (REG_SZ)
358.
359. [HKLM\Software\Classes\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}]
360. "LocalizedString"="@%SystemRoot%\explorer.exe,-7025" (REG_EXPAND_SZ)
361.
362. [HKLM\Software\Classes\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}]
363. "InfoTip"="@explorer.exe,-7005" (REG_SZ)
364.
365. [HKLM\Software\Classes\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\DefaultIcon]
366. ""="%SystemRoot%\explorer.exe,-254" (REG_EXPAND_SZ)
367.
368. [HKLM\Software\Classes\CLSID\{3080F90D-D7AD-11D9-BD98-0000947B0257}\DefaultIcon]
369. ""="%SystemRoot%\explorer.exe,-103" (REG_EXPAND_SZ)
370.
371. [HKLM\Software\Classes\CLSID\{3080F90E-D7AD-11D9-BD98-0000947B0257}\DefaultIcon]
372. ""="%SystemRoot%\explorer.exe,-258" (REG_EXPAND_SZ)
373.
374. [HKLM\Software\Classes\CLSID\{450D8FBA-AD25-11D0-98A8-0800361B1103}\shell\find\command]
375. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
376.
377. [HKLM\Software\Classes\CLSID\{48e7caab-b918-4e58-a94d-505519c795dc}\shell\find\command]
378. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
379.
380. [HKLM\Software\Classes\CLSID\{682159d9-c321-47ca-b3f1-30e36b2ec8b9}\LocalServer32]
381. ""="%SystemRoot%\explorer.exe /factory,{682159d9-c321-47ca-b3f1-30e36b2ec8b9}" (REG_EXPAND_SZ)
382.
383. [HKLM\Software\Classes\CLSID\{75dff2b7-6936-4c06-a8bb-676a7b00b24b}\LocalServer32]
384. ""="%SystemRoot%\SysWow64\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b}" (REG_EXPAND_SZ)
385.
386. [HKLM\Software\Classes\CLSID\{ceff45ee-c862-41de-aee2-a022c81eda92}\LocalServer32]
387. ""="%SystemRoot%\SysWow64\explorer.exe /factory,{ceff45ee-c862-41de-aee2-a022c81eda92}" (REG_EXPAND_SZ)
388.
389. [HKLM\Software\Classes\CompressedFolder\shell\find\command]
390. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
391.
392. [HKLM\Software\Classes\CompressedFolder\shell\Open\Command]
393. ""="%SystemRoot%\Explorer.exe /idlist,%I,%L" (REG_EXPAND_SZ)
394.
395. [HKLM\Software\Classes\DeviceDisplayObject\AllItems\Shell\Microsoft.DxpOpen\command]
396. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
397.
398. [HKLM\Software\Classes\DeviceDisplayObject\AllItems\Shell\Microsoft.DxpOpenInNewWindow\command]
399. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
400.
401. [HKLM\Software\Classes\DeviceDisplayObject\HardwareId\USB#VID_046D&PID_0819&MI_00\Shell\LogitechLink1\command]
402. ""="explorer.exe "http://www.logitech.com"" (REG_EXPAND_SZ)
403.
404. [HKLM\Software\Classes\DeviceDisplayObject\HardwareId\USB#VID_046D&PID_0819&MI_00\Shell\LogitechLink2\command]
405. ""="explorer.exe "http://www.logitech.com/support"" (REG_EXPAND_SZ)
406.
407. [HKLM\Software\Classes\Directory\shell\find\command]
408. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
409.
410. [HKLM\Software\Classes\Drive\shell\find\command]
411. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
412.
413. [HKLM\Software\Classes\Explorer.AssocProtocol.search-ms]
414. "FriendlyTypeName"="@%SystemRoot%\explorer.exe,-6010" (REG_EXPAND_SZ)
415.
416. [HKLM\Software\Classes\Explorer.AssocProtocol.search-ms\shell\open\command]
417. ""="%SystemRoot%\Explorer.exe /separate,/idlist,%I,%L" (REG_EXPAND_SZ)
418.
419. [HKLM\Software\Classes\Folder\shell\open\command]
420. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
421.
422. [HKLM\Software\Classes\opensearchdescription\shell\open\command]
423. ""="%SystemRoot%\explorer.exe" (REG_EXPAND_SZ)
424.
425. [HKLM\Software\Classes\Publishing Folder\shell\explore\command]
426. ""="explorer.exe /e,/idlist,%I,%L" (REG_SZ)
427.
428. [HKLM\Software\Classes\Publishing Folder\shell\open\command]
429. ""="explorer.exe /idlist,%I,%L" (REG_SZ)
430.
431. [HKLM\Software\Classes\search]
432. "FriendlyTypeName"="@%SystemRoot%\explorer.exe,-6010" (REG_EXPAND_SZ)
433.
434. [HKLM\Software\Classes\search\shell\open\command]
435. ""="%SystemRoot%\Explorer.exe /separate,/idlist,%I,%L" (REG_EXPAND_SZ)
436.
437. [HKLM\Software\Classes\search-ms]
438. "FriendlyTypeName"="@%SystemRoot%\explorer.exe,-6010" (REG_EXPAND_SZ)
439.
440. [HKLM\Software\Classes\search-ms\shell\open\command]
441. ""="%SystemRoot%\Explorer.exe /separate,/idlist,%I,%L" (REG_EXPAND_SZ)
442.
443. [HKLM\Software\Classes\SHCmdFile\shell\open\command]
444. ""="%SystemRoot%\explorer.exe" (REG_EXPAND_SZ)
445.
446. [HKLM\Software\Classes\SystemFileAssociations\.bmp\Shell\setdesktopwallpaper\Command]
447. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
448.
449. [HKLM\Software\Classes\SystemFileAssociations\.dib\Shell\setdesktopwallpaper\Command]
450. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
451.
452. [HKLM\Software\Classes\SystemFileAssociations\.gif\Shell\setdesktopwallpaper\Command]
453. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
454.
455. [HKLM\Software\Classes\SystemFileAssociations\.jfif\Shell\setdesktopwallpaper\Command]
456. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
457.
458. [HKLM\Software\Classes\SystemFileAssociations\.jpe\Shell\setdesktopwallpaper\Command]
459. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
460.
461. [HKLM\Software\Classes\SystemFileAssociations\.jpeg\Shell\setdesktopwallpaper\Command]
462. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
463.
464. [HKLM\Software\Classes\SystemFileAssociations\.jpg\Shell\setdesktopwallpaper\Command]
465. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
466.
467. [HKLM\Software\Classes\SystemFileAssociations\.png\Shell\setdesktopwallpaper\Command]
468. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
469.
470. [HKLM\Software\Classes\SystemFileAssociations\.tif\Shell\setdesktopwallpaper\Command]
471. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
472.
473. [HKLM\Software\Classes\SystemFileAssociations\.tiff\Shell\setdesktopwallpaper\Command]
474. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
475.
476. [HKLM\Software\Classes\SystemFileAssociations\.wdp\Shell\setdesktopwallpaper\Command]
477. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
478.
479. [HKLM\Software\Classes\Wow6432Node\CLSID\{0AFACED1-E828-11D1-9187-B532F1E9575D}\shell\find\command]
480. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
481.
482. [HKLM\Software\Classes\Wow6432Node\CLSID\{208D2C60-3AEA-1069-A2D7-08002B30309D}\shell\find\command]
483. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
484.
485. [HKLM\Software\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell\find\command]
486. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
487.
488. [HKLM\Software\Classes\Wow6432Node\CLSID\{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}]
489. "LocalizedString"="@%SystemRoot%\explorer.exe,-7020" (REG_EXPAND_SZ)
490.
491. [HKLM\Software\Classes\Wow6432Node\CLSID\{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}]
492. "InfoTip"="@explorer.exe,-7000" (REG_SZ)
493.
494. [HKLM\Software\Classes\Wow6432Node\CLSID\{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}]
495. "LocalizedString"="@%SystemRoot%\explorer.exe,-7021" (REG_EXPAND_SZ)
496.
497. [HKLM\Software\Classes\Wow6432Node\CLSID\{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}]
498. "InfoTip"="@explorer.exe,-7001" (REG_SZ)
499.
500. [HKLM\Software\Classes\Wow6432Node\CLSID\{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}]
501. "LocalizedString"="@%SystemRoot%\explorer.exe,-7022" (REG_EXPAND_SZ)
502.
503. [HKLM\Software\Classes\Wow6432Node\CLSID\{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}]
504. "LocalizedString"="@%SystemRoot%\explorer.exe,-7023" (REG_EXPAND_SZ)
505.
506. [HKLM\Software\Classes\Wow6432Node\CLSID\{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}]
507. "InfoTip"="@explorer.exe,-7003" (REG_SZ)
508.
509. [HKLM\Software\Classes\Wow6432Node\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}]
510. "LocalizedString"="@%SystemRoot%\explorer.exe,-7025" (REG_EXPAND_SZ)
511.
512. [HKLM\Software\Classes\Wow6432Node\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}]
513. "InfoTip"="@explorer.exe,-7005" (REG_SZ)
514.
515. [HKLM\Software\Classes\Wow6432Node\CLSID\{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}\DefaultIcon]
516. ""="%SystemRoot%\explorer.exe,-254" (REG_EXPAND_SZ)
517.
518. [HKLM\Software\Classes\Wow6432Node\CLSID\{3080F90D-D7AD-11D9-BD98-0000947B0257}\DefaultIcon]
519. ""="%SystemRoot%\explorer.exe,-103" (REG_EXPAND_SZ)
520.
521. [HKLM\Software\Classes\Wow6432Node\CLSID\{3080F90E-D7AD-11D9-BD98-0000947B0257}\DefaultIcon]
522. ""="%SystemRoot%\explorer.exe,-258" (REG_EXPAND_SZ)
523.
524. [HKLM\Software\Classes\Wow6432Node\CLSID\{450D8FBA-AD25-11D0-98A8-0800361B1103}\shell\find\command]
525. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
526.
527. [HKLM\Software\Classes\Wow6432Node\CLSID\{48e7caab-b918-4e58-a94d-505519c795dc}\shell\find\command]
528. ""="%SystemRoot%\Explorer.exe" (REG_EXPAND_SZ)
529.
530. [HKLM\Software\Classes\Wow6432Node\CLSID\{682159d9-c321-47ca-b3f1-30e36b2ec8b9}\LocalServer32]
531. ""="%SystemRoot%\explorer.exe /factory,{682159d9-c321-47ca-b3f1-30e36b2ec8b9}" (REG_EXPAND_SZ)
532.
533. [HKLM\Software\Classes\Wow6432Node\CLSID\{75dff2b7-6936-4c06-a8bb-676a7b00b24b}\LocalServer32]
534. ""="%SystemRoot%\SysWow64\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b}" (REG_EXPAND_SZ)
535.
536. [HKLM\Software\Classes\Wow6432Node\CLSID\{ceff45ee-c862-41de-aee2-a022c81eda92}\LocalServer32]
537. ""="%SystemRoot%\SysWow64\explorer.exe /factory,{ceff45ee-c862-41de-aee2-a022c81eda92}" (REG_EXPAND_SZ)
538.
539. [HKU\S-1-5-21-1386252288-951527657-418686438-1000\Software\Microsoft\IntelliPoint\AppSpecific\explorer.exe]
540. DA: 30/03/2015 22:06:18
541.
542. [HKU\S-1-5-21-1386252288-951527657-418686438-1000\Software\Classes\Local Settings\MuiCache\374\D9B7F780]
543. "@C:\Windows\explorer.exe,-7021"="Aide et support" (REG_SZ)
544.
545. [HKU\S-1-5-21-1386252288-951527657-418686438-1000\Software\Classes\Local Settings\MuiCache\374\D9B7F780]
546. "@%windir%\explorer.exe,-307"="Modifiez les paramètres et personnalisez la fonctionnalité de votre ordinateur." (REG_SZ)
547.
548. [HKU\S-1-5-21-1386252288-951527657-418686438-1000\Software\Classes\Local Settings\MuiCache\374\D9B7F780]
549. "@%windir%\explorer.exe,-7003"="Ouvrez un programme, un dossier, un document ou un site Web." (REG_SZ)
550.
551. [HKU\S-1-5-21-1386252288-951527657-418686438-1000\Software\Classes\Local Settings\MuiCache\374\D9B7F780]
552. "@explorer.exe,-8243"="Rechercher partout" (REG_SZ)
553.
554. [HKU\S-1-5-21-1386252288-951527657-418686438-1000_Classes\Local Settings\MuiCache\374\D9B7F780]
555. "@C:\Windows\explorer.exe,-7021"="Aide et support" (REG_SZ)
556.
557. [HKU\S-1-5-21-1386252288-951527657-418686438-1000_Classes\Local Settings\MuiCache\374\D9B7F780]
558. "@%windir%\explorer.exe,-307"="Modifiez les paramètres et personnalisez la fonctionnalité de votre ordinateur." (REG_SZ)
559.
560. [HKU\S-1-5-21-1386252288-951527657-418686438-1000_Classes\Local Settings\MuiCache\374\D9B7F780]
561. "@%windir%\explorer.exe,-7003"="Ouvrez un programme, un dossier, un document ou un site Web." (REG_SZ)
562.
563. [HKU\S-1-5-21-1386252288-951527657-418686438-1000_Classes\Local Settings\MuiCache\374\D9B7F780]
564. "@explorer.exe,-8243"="Rechercher partout" (REG_SZ)
565.
566. [HKU\S-1-5-21-1386252288-951527657-418686438-1002\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
567. "C:\Windows\Explorer.exe"="Explorateur Windows" (REG_SZ)
568.
569. [HKU\S-1-5-21-1386252288-951527657-418686438-1002_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
570. "C:\Windows\Explorer.exe"="Explorateur Windows" (REG_SZ)
571.
572. =========================
573.
574. Fin à: 21:37:09 le 08/04/2015
575. 882942 Éléments analysés
576.
577. =========================
578. E.O.F

Merci de ton aide.

Rapport FRST :

Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Virginie at 2015-04-08 22:13:14
Running from C:\Users\Virginie\Desktop
Boot Mode: Normal

================== Search Files: "explorer.exe " =============

C:\Windows\explorer.exe
[2012-02-18 14:14][2012-02-18 14:14] 2871808 ____A (Microsoft Corporation) 332FEAB1435662FC6C672E25BEB37BE3 [File is signed]

C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2012-02-18 14:14][2012-02-18 14:14] 2616320 ____A (Microsoft Corporation) 0FB9C74046656D1579A64660AD67B746 [File is signed]

C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2012-02-18 14:14][2012-02-18 14:14] 2616320 ____A () 42E5C3420D7916BB29B851F0743B2685

C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2010-11-21 05:24][2010-11-21 05:24] 2616320 ____A (Microsoft Corporation) 40D777B7A95E00593EB1568C68514493 [File is signed]

C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2012-02-18 14:14][2012-02-18 14:14] 2871808 ____A (Microsoft Corporation) 3B69712041F3D63605529BD66DC00C48 [File is signed]

C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2012-02-18 14:14][2012-02-18 14:14] 2871808 ____A (Microsoft Corporation) 332FEAB1435662FC6C672E25BEB37BE3 [File is signed]

C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2010-11-21 05:24][2010-11-21 05:24] 2872320 ____A (Microsoft Corporation) AC4C51EB24AA95B77F705AB159189E24 [File is signed]

C:\Windows\erdnt\cache86\explorer.exe
[2014-01-01 13:08][2012-02-18 14:14] 2871808 ____A (Microsoft Corporation) 332FEAB1435662FC6C672E25BEB37BE3 [File is signed]

C:\System Volume Information\SystemRestore\FRStaging\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2012-02-18 14:14][2012-02-18 14:14] 2871808 ____A (Microsoft Corporation) 332FEAB1435662FC6C672E25BEB37BE3 [File is signed]

C:\System Volume Information\SystemRestore\FRStaging\Windows\erdnt\cache86\explorer.exe
[2014-01-01 13:08][2012-02-18 14:14] 2871808 ____A (Microsoft Corporation) 332FEAB1435662FC6C672E25BEB37BE3 [File is signed]

End Of Search

Farbar Recovery Scan Tool
---------------------------
Fix completed. The "Fixlog.txt" is saved in the same directory FRST is located.



The computer needs a restart. Please close all open windows. Note that you will not get any notificatation from the tool after restart.



Click OK to restart.
---------------------------
OK
---------------------------

Bonsoir,
Et voilà,

http://pjjoint.malekal.com/files.php?id=20150409_i13c10q14j15l6

Bien! :-)
1/
Pour vérification, redémarre ton PC puis lance l'analyse de FRST et poste
les deux nouveaux rapports

2/
Comment fontionne ton PC maintenant ?

Bonne soirée

Ok je m'en occupe demain, je vais profiter des liens pour lire attentivement les conseils.

Bonne soirée

Bonjour,

Voilà le rapport de SFTGC
http://pjjoint.malekal.com/files.php?id=20150410_m10i6g15g12t8

et Delfix
http://pjjoint.malekal.com/files.php?id=20150410_f7g9f13t7u7

encore merci pour ton aide.

Bonjour,
On a terminé, sois prudent et bonsurf..! :-)