Voici mon rapport hijackthis qui peut m'aider

voici mon rapport adw cleaner merci d'avance

# AdwCleaner v1.402 - Rapport créé le 19/12/2011 à 12:20:47
# Mis à jour le 11/12/11 à 19h par Xplode
# Système d'exploitation : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Nom d'utilisateur : sebaste - SEBETALEX (Administrateur)
# Exécuté depuis : C:\Users\sebaste\Downloads\adwcleaner.exe
# Option [Suppression]


***** [Services] *****


***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\ProgramData\Ask
Dossier Supprimé : C:\Users\sebaste\AppData\Roaming\Complitly
Dossier Supprimé : C:\Users\sebaste\AppData\Roaming\EoRezo
Dossier Supprimé : C:\Users\sebaste\AppData\Roaming\FissaSearch
Dossier Supprimé : C:\Users\sebaste\AppData\Roaming\OfferBox
Dossier Supprimé : C:\Users\sebaste\AppData\Roaming\OpenCandy
Dossier Supprimé : C:\Users\sebaste\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
Dossier Supprimé : C:\Users\sebaste\AppData\Local\Conduit
Dossier Supprimé : C:\Users\sebaste\AppData\Local\EoRezo
Dossier Supprimé : C:\Users\sebaste\AppData\Local\OpenCandy
Dossier Supprimé : C:\Users\sebaste\AppData\LocalLow\AskToolbar
Dossier Supprimé : C:\Users\sebaste\AppData\LocalLow\Conduit
Dossier Supprimé : C:\Users\sebaste\AppData\LocalLow\Search Settings
Dossier Supprimé : C:\Users\sebaste\AppData\LocalLow\PriceGong
Dossier Supprimé : C:\Program Files\Complitly
Dossier Supprimé : C:\Program Files\Dealio
Dossier Supprimé : C:\Program Files\EoRezo
Dossier Supprimé : C:\Program Files\Search Settings
Dossier Supprimé : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Dossier Supprimé : C:\Users\sebaste\AppData\Roaming\Mozilla\Firefox\Profiles\5ez6qu7r.default\Conduit
Dossier Supprimé : C:\Users\sebaste\AppData\Roaming\Mozilla\Firefox\Profiles\5ez6qu7r.default\ConduitCommon
Dossier Supprimé : C:\Users\sebaste\AppData\Roaming\Mozilla\Firefox\Profiles\5ez6qu7r.default\SweetIMToolbarData
Dossier Supprimé : C:\Users\sebaste\AppData\Roaming\Mozilla\Firefox\Profiles\5ez6qu7r.default\extensions\{33E0DAA6-3AF3-D8B5-6752-10E949C61516}
Dossier Supprimé : C:\Users\sebaste\AppData\Roaming\Mozilla\Firefox\Profiles\5ez6qu7r.default\extensions\@FissaPlugin
Fichier Supprimé : C:\Windows\system32\conduitEngine.tmp
Fichier Supprimé : C:\Users\sebaste\AppData\Roaming\Mozilla\Firefox\Profiles\5ez6qu7r.default\searchplugins\Conduit.xml

***** [Registre] *****

[*] Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT2582600
Clé Supprimée : HKCU\Software\Ask.com
Clé Supprimée : HKCU\Software\APN
Clé Supprimée : HKCU\Software\Babylon
Clé Supprimée : HKCU\Software\Complitly
Clé Supprimée : HKCU\Software\DataMngr
Clé Supprimée : HKCU\Software\EoRezo
Clé Supprimée : HKCU\Software\FissaSearch
Clé Supprimée : HKCU\Software\Offerbox
Clé Supprimée : HKCU\Software\AppDataLow\Software\AskToolbar
Clé Supprimée : HKCU\Software\AppDataLow\Software\PriceGong
Clé Supprimée : HKLM\SOFTWARE\AskToolbar
Clé Supprimée : HKLM\SOFTWARE\APN
Clé Supprimée : HKLM\SOFTWARE\Conduit
Clé Supprimée : HKLM\SOFTWARE\DataMngr
Clé Supprimée : HKLM\SOFTWARE\Dealio
Clé Supprimée : HKLM\SOFTWARE\EoRezo
Clé Supprimée : HKLM\SOFTWARE\FissaSearch
Clé Supprimée : HKLM\SOFTWARE\Offerbox
Clé Supprimée : HKLM\SOFTWARE\Search Settings
Clé Supprimée : HKLM\SOFTWARE\Classes\Conduit.Engine
Clé Supprimée : HKLM\SOFTWARE\Classes\EoEngineBHO.EOBHO
Clé Supprimée : HKLM\SOFTWARE\Classes\EoEngineBHO.EOBHO.1
Clé Supprimée : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Clé Supprimée : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Clé Supprimée : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils
Clé Supprimée : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator
Clé Supprimée : HKLM\SOFTWARE\Classes\sim-packages
Clé Supprimée : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO
Clé Supprimée : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO.1
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\EoEngineBHO.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{AFBB7970-789A-4264-BA70-E8127DECE400}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Clé Supprimée : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4
Clé Supprimée : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DF76E9B7-35EC-46FC-AF56-5B79DED9D64F}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{eee6c358-6118-11dc-9c72-001320c79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{eee6c35a-6118-11dc-9c72-001320c79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{18AF7201-4F14-4BCF-93FE-45617CF259FF}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{b41306c6-96d0-442a-bcc4-b0f621e82ce9}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D0C73318-7B4A-4D16-A0C4-3B83F075EA88}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4BD271AB-66E2-4D58-AF88-80FE3B0770C4}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\EoRezo_is1
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00000000-6E41-4FD3-8538-502F5495E5FC}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{E312764E-7706-43F1-8DAB-FCDD2B1E416D}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [DataMngr]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SearchSettings]

***** [Navigateurs] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Le registre ne contient aucune entrée illégitime.

-\\ Mozilla Firefox v8.0 (fr)

Profil : 5ez6qu7r.default
Fichier : C:\Users\sebaste\AppData\Roaming\Mozilla\Firefox\Profiles\5ez6qu7r.default\prefs.js

Supprimée : user_pref("CT2582600.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Supprimée : user_pref("CT2582600.BrowserCompStateIsOpen_1281043041617662806", true);
Supprimée : user_pref("CT2582600.BrowserCompStateIsOpen_129633201768939870", true);
Supprimée : user_pref("CT2582600.CT2582600", "CT2582600");
Supprimée : user_pref("CT2582600.DSInstall", true);
Supprimée : user_pref("CT2582600.DialogsAlignMode", "LTR");
Supprimée : user_pref("CT2582600.DialogsGetterLastCheckTime", "Mon Dec 05 2011 08:11:32 GMT+0100");
Supprimée : user_pref("CT2582600.EMailNotifierPollDate", "Mon Dec 05 2011 08:11:42 GMT+0100");
Supprimée : user_pref("CT2582600.FeedLastCount4781114544940518214", 275);
Supprimée : user_pref("CT2582600.FeedPollDate1154579606993571455", "Mon Dec 05 2011 08:11:34 GMT+0100");
Supprimée : user_pref("CT2582600.FeedPollDate1154579607031076616", "Mon Dec 05 2011 08:11:34 GMT+0100");
Supprimée : user_pref("CT2582600.FeedPollDate1154579607254614839", "Mon Dec 05 2011 08:11:34 GMT+0100");
Supprimée : user_pref("CT2582600.FeedPollDate1154579607731405437", "Mon Dec 05 2011 08:11:34 GMT+0100");
Supprimée : user_pref("CT2582600.FeedPollDate1154579608231640385", "Mon Dec 05 2011 08:11:34 GMT+0100");
Supprimée : user_pref("CT2582600.FeedPollDate1154579608468016907", "Mon Dec 05 2011 08:11:34 GMT+0100");
Supprimée : user_pref("CT2582600.FeedPollDate1154579608675890832", "Mon Dec 05 2011 08:11:34 GMT+0100");
Supprimée : user_pref("CT2582600.FeedPollDate1154579608833656362", "Mon Dec 05 2011 08:11:34 GMT+0100");
Supprimée : user_pref("CT2582600.FeedPollDate1154579609576983218", "Mon Dec 05 2011 08:11:34 GMT+0100");
Supprimée : user_pref("CT2582600.FeedPollDate1154579610508907107", "Mon Dec 05 2011 08:11:34 GMT+0100");
Supprimée : user_pref("CT2582600.FeedPollDate1154579610709294640", "Mon Dec 05 2011 08:11:34 GMT+0100");
Supprimée : user_pref("CT2582600.FeedTTL1154579606993571455", 5);
Supprimée : user_pref("CT2582600.FeedTTL1154579607731405437", 2);
Supprimée : user_pref("CT2582600.FeedTTL1154579608468016907", 30);
Supprimée : user_pref("CT2582600.FeedTTL1154579608675890832", 2);
Supprimée : user_pref("CT2582600.FeedTTL1154579608833656362", 5);
Supprimée : user_pref("CT2582600.FeedTTL1154579609576983218", 15);
Supprimée : user_pref("CT2582600.FeedTTL1154579610508907107", 5);
Supprimée : user_pref("CT2582600.FeedTTL1154579610709294640", 2);
Supprimée : user_pref("CT2582600.FirstTime", true);
Supprimée : user_pref("CT2582600.FirstTimeFF3", true);
Supprimée : user_pref("CT2582600.FixPageNotFoundErrors", true);
Supprimée : user_pref("CT2582600.HPInstall", true);
Supprimée : user_pref("CT2582600.HasUserGlobalKeys", true);
Supprimée : user_pref("CT2582600.Initialize", true);
Supprimée : user_pref("CT2582600.InitializeCommonPrefs", true);
Supprimée : user_pref("CT2582600.InstalledDate", "Mon Dec 05 2011 08:11:34 GMT+0100");
Supprimée : user_pref("CT2582600.InvalidateCache", false);
Supprimée : user_pref("CT2582600.IsGrouping", false);
Supprimée : user_pref("CT2582600.IsInitSetupIni", true);
Supprimée : user_pref("CT2582600.IsMulticommunity", false);
Supprimée : user_pref("CT2582600.IsOpenThankYouPage", true);
Supprimée : user_pref("CT2582600.IsOpenUninstallPage", true);
Supprimée : user_pref("CT2582600.LanguagePackLastCheckTime", "Mon Dec 05 2011 08:11:34 GMT+0100");
Supprimée : user_pref("CT2582600.Locale", "fr");
Supprimée : user_pref("CT2582600.MCDetectTooltipHeight", "83");
Supprimée : user_pref("CT2582600.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Supprimée : user_pref("CT2582600.MCDetectTooltipWidth", "295");
Supprimée : user_pref("CT2582600.MyStuffEnabledAtInstallation", true);
Supprimée : user_pref("CT2582600.OriginalFirstVersion", "3.8.0.8");
Supprimée : user_pref("CT2582600.RadioLastCheckTime", "Mon Dec 05 2011 08:11:34 GMT+0100");
Supprimée : user_pref("CT2582600.RadioLastUpdateIPServer", "3");
Supprimée : user_pref("CT2582600.RadioLastUpdateServer", "3");
Supprimée : user_pref("CT2582600.RadioShrinkedFromSetup", false);
Supprimée : user_pref("CT2582600.SavedHomepage", "hxxp://y.lo.st");
Supprimée : user_pref("CT2582600.SearchCaption", "pc gear fr Customized Web Search");
Supprimée : user_pref("CT2582600.SearchFromAddressBarIsInit", true);
Supprimée : user_pref("CT2582600.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT258[...]
Supprimée : user_pref("CT2582600.SendProtectorDataViaLogin", true);
Supprimée : user_pref("CT2582600.ServiceMapLastCheckTime", "Mon Dec 05 2011 08:11:31 GMT+0100");
Supprimée : user_pref("CT2582600.SettingsLastCheckTime", "Mon Dec 05 2011 08:11:31 GMT+0100");
Supprimée : user_pref("CT2582600.SettingsLastUpdate", "1322740773");
Supprimée : user_pref("CT2582600.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2582600&SearchSource=13");
Supprimée : user_pref("CT2582600.ThirdPartyComponentsInterval", 504);
Supprimée : user_pref("CT2582600.ThirdPartyComponentsLastCheck", "Mon Dec 05 2011 08:11:31 GMT+0100");
Supprimée : user_pref("CT2582600.ThirdPartyComponentsLastUpdate", "1255344667");
Supprimée : user_pref("CT2582600.ToolbarShrinkedFromSetup", false);
Supprimée : user_pref("CT2582600.alertChannelId", "975433");
Supprimée : user_pref("CT2582600.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B4D4[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7e,x305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C474[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7e-x305", "247E2936303C363679453A3D2A722C797A207B3128333D462[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7e.:2z527", "247E6F727174354379453A3D2A722C757A787D312833232[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7e.x305", "247E2A4137374434337A463B3E2B732D7A7D7C213229343F5[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7e/x305", "247E2B413536327844393C29712B787C7B773027323E4C434[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7e06cg5el8:", "6E6D6F6F736E6C757774");
Supprimée : user_pref("CT2582600.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A747375757974727B7D7A242F4B4947[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7e0x305", "247E2C403A407743383B28702A777C757D2F26313E4129554[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7e1x305", "247E2D41313D403279453A3D2A722C7A77797E31283341473[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7e2x305", "247E2E3542313D3D393A7B473C3F2C742E79207D322934435[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7e3x305", "247E2F413F3B36333F47463F7D493E412E76307E222421352[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7e4x305", "247E302C407642373A276F29777B74762E2530413E4F494A5[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7e5x305", "247E3136422B7743383B28702A79757A772F2631434B3D495[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7e6x305", "247E322C3E32323238453E7C483D402D752F7E7B2424342B3[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7e7x305", "247E333D2C3F3E3F79453A3D2A722C7B7A797A31283347474[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7e8x305", "247E343D3F3B35373B3F367C47472C742E7E7823322934495[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7e9x305", "247E35332C3F327844393C29712B7B757979302732484C4F4[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7e:x305", "247E36333B38327844393C29712B7B76797A3027324948554[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7e;x305", "247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7e<x305", "247E38343030442F463644377D493E412E7630217D2426352[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7e=x305", "247E3933363F41413739357C483D402D752F207E2022342B3[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7e>x305", "247E3A41363F323238387B473C3F2C742E7E20217C332A355[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7e?x305", "247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7e@x305", "247E3C40422B7743383B28702A7B767E782F26314E52543D2[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7eax305", "247E3D3D37387743383B28702A7B7A757E2F26314F4F544A5[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B26[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7ebx305", "247E3E393141303D33454036327E4A3F422F77317B7D23352[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7ecx305", "247E3F3D303043312E7A463B3E2B732D7B207E31283353515[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7edx305", "247E4035422A363879453A3D2A722C7D202F26315247543C4[...]
Supprimée : user_pref("CT2582600.backendstorage./9b+7etx305", "247E6E2F2E3B323342357B44392B732D7A7B7B7C322934215[...]
Supprimée : user_pref("CT2582600.backendstorage./9b-0?3g>d", "663B6E6A6C4341457A4277717320794B792025514D22222A22[...]
Supprimée : user_pref("CT2582600.backendstorage./9b-0?3g@6:5;", "");
Supprimée : user_pref("CT2582600.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F297B7E7D21202F26313E424[...]
Supprimée : user_pref("CT2582600.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "6A696B7273747576");
Supprimée : user_pref("CT2582600.backendstorage./9b3=>@44i48?", "372C2D32697576334236334148477B213F3E484F4E4D464[...]
Supprimée : user_pref("CT2582600.backendstorage./9b5ba==9cjag", "673F6F6E6E7040757A7470757675484B764F7D4F7D");
Supprimée : user_pref("CT2582600.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D6F6F736E6C766E7272747B");
Supprimée : user_pref("CT2582600.backendstorage./9b9643g3/9e", "6A");
Supprimée : user_pref("CT2582600.backendstorage./9b<:222h64<", "393F352F3E");
Supprimée : user_pref("CT2582600.backendstorage./9b=+03eh8h8j?:", "4443");
Supprimée : user_pref("CT2582600.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B26514649[...]
Supprimée : user_pref("CT2582600.backendstorage./9b?b0d:8aj62<h", "6D");
Supprimée : user_pref("CT2582600.backendstorage./9ba@0<0bi6a7gn:6@l?", "6E6B");
Supprimée : user_pref("CT2582600.backendstorage.d_date_ginyas1", "31333233303639303936333634");
Supprimée : user_pref("CT2582600.backendstorage.d_ginyas1", "30");
Supprimée : user_pref("CT2582600.backendstorage.ginyasstest", "676F6F64");
Supprimée : user_pref("CT2582600.backendstorage.hxxp://rv_ginyas_com/app/conduit.bbrs_affid", "706367656172735F6[...]
Supprimée : user_pref("CT2582600.backendstorage.hxxp://rv_ginyas_com/app/conduit.bbrs_bguid", "706367656172735F6[...]
Supprimée : user_pref("CT2582600.backendstorage.hxxp://rv_ginyas_com/app/conduit.bbrs_lba", "3232303531313531");
Supprimée : user_pref("CT2582600.backendstorage.hxxp://rv_ginyas_com/app/conduit.bbrs_lba1", "323031312D31322D35[...]
Supprimée : user_pref("CT2582600.components.1000034", true);
Supprimée : user_pref("CT2582600.components.1000234", true);
Supprimée : user_pref("CT2582600.globalFirstTimeInfoLastCheckTime", "Mon Dec 05 2011 08:11:32 GMT+0100");
Supprimée : user_pref("CT2582600.initDone", true);
Supprimée : user_pref("CT2582600.isAppTrackingManagerOn", true);
Supprimée : user_pref("CT2582600.isFirstRadioInstallation", false);
Supprimée : user_pref("CT2582600.revertSettingsEnabled", true);
Supprimée : user_pref("CT2582600.testingCtid", "");
Supprimée : user_pref("CT2582600.toolbarAppMetaDataLastCheckTime", "Mon Dec 05 2011 08:11:32 GMT+0100");
Supprimée : user_pref("CT2582600.toolbarContextMenuLastCheckTime", "Mon Dec 05 2011 08:11:35 GMT+0100");
Supprimée : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2582600&Search[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2582600/CT2582600[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/FR", "\"0\"")[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/975433/971197/FR", "\"0\"")[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2582600", [...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2582600",[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2582600/CT2582600[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/equalize[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/minimize[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/play.gif[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/stop.gif[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/vol.gif"[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=fr", "\"864[...]
Supprimée : user_pref("CommunityToolbar.EngineHiddenByUser", false);
Supprimée : user_pref("CommunityToolbar.EngineOwner", "");
Supprimée : user_pref("CommunityToolbar.EngineOwnerGuid", "{3f1fbbdd-1444-4838-b1b7-726d9bcf32ab}");
Supprimée : user_pref("CommunityToolbar.EngineOwnerToolbarId", "pc_gear_fr");
Supprimée : user_pref("CommunityToolbar.IsEngineShown", false);
Supprimée : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Supprimée : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\sebaste\\AppData\\Roaming\\Mozilla\[...]
Supprimée : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.8.0.8");
Supprimée : user_pref("CommunityToolbar.OriginalEngineOwner", "");
Supprimée : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "");
Supprimée : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "");
Supprimée : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.shareazaweb.com/web?src=ff[...]
Supprimée : user_pref("CommunityToolbar.ToolbarsList", "CT2582600");
Supprimée : user_pref("CommunityToolbar.ToolbarsList2", "CT2582600");
Supprimée : user_pref("CommunityToolbar.ToolbarsList4", "CT2582600");
Supprimée : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Tue May 24 2011 09:00:34 GMT+02[...]
Supprimée : user_pref("CommunityToolbar.alert.alertEnabled", true);
Supprimée : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Supprimée : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sat Jun 25 2011 20:35:41 GMT+0200");
Supprimée : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Supprimée : user_pref("CommunityToolbar.alert.locale", "en");
Supprimée : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Supprimée : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sat Jun 25 2011 20:35:33 GMT+0200");
Supprimée : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Supprimée : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Supprimée : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Supprimée : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Supprimée : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Supprimée : user_pref("CommunityToolbar.alert.userId", "1f32b53e-66e8-43fd-bce8-cb4eb8656258");
Supprimée : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Mon Dec 05 2011 08:11:35 GMT+0100");
Supprimée : user_pref("CommunityToolbar.globalUserId", "1539cd60-b30a-475f-84d2-dfdedd5c310e");
Supprimée : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Supprimée : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Supprimée : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2582600");
Supprimée : user_pref("CommunityToolbar.killedEngine", true);
Supprimée : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Mon Dec 05 2011 08:11:3[...]
Supprimée : user_pref("CommunityToolbar.notifications.alertEnabled", true);
Supprimée : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
Supprimée : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Supprimée : user_pref("CommunityToolbar.notifications.locale", "en");
Supprimée : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Supprimée : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Mon Dec 05 2011 08:11:32 GMT+0100");
Supprimée : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Supprimée : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Supprimée : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Supprimée : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Supprimée : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Supprimée : user_pref("CommunityToolbar.notifications.userId", "18ff080f-e5f3-4eee-b89e-077f3f7bc584");
Supprimée : user_pref("CommunityToolbar.originalHomepage", "hxxp://y.lo.st");
Supprimée : user_pref("CommunityToolbar.originalSearchEngine", "Google");
Supprimée : user_pref("CommunityToolbar.undefined", "");
Supprimée : user_pref("browser.search.defaultenginename", "SweetIM Search");
Supprimée : user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?ctid=CT2582600&SearchSource=13");
Supprimée : user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
Supprimée : user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
Supprimée : user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
Supprimée : user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
Supprimée : user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
Supprimée : user_pref("sweetim.toolbar.mode.debug", "false");
Supprimée : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "SweetIM Search");
Supprimée : user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "hxxp://search.conduit.com/ResultsEx[...]
Supprimée : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "Google");
Supprimée : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "hxxp://fr.start3.mozilla.com/firefox[...]
Supprimée : user_pref("sweetim.toolbar.previous.keyword.URL", "hxxp://search.shareazaweb.com/web?src=ffb&systemi[...]
Supprimée : user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engin[...]
Supprimée : user_pref("sweetim.toolbar.search.history", "");
Supprimée : user_pref("sweetim.toolbar.search.history.capacity", "10");
Supprimée : user_pref("sweetim.toolbar.simapp_id", "{C221ED61-5D0A-11E0-8658-001E682EC5FC}");
Supprimée : user_pref("sweetim.toolbar.urls.homepage", "hxxp://home.sweetim.com");
Supprimée : user_pref("sweetim.toolbar.version", "1.1.0.2");

-\\ Google Chrome v0.0.0.0

Fichier : C:\Users\sebaste\AppData\Local\Google\Chrome\User Data\Default\Preferences

Supprimée : "homepage": "hxxp://home.sweetim.com/?barid={C221ED61-5D0A-11E0-8658-001E682EC5FC}",
Supprimée : "homepage": "hxxp://home.sweetim.com/?barid={C221ED61-5D0A-11E0-8658-001E682EC5FC}",

*************************

AdwCleaner[S1].txt - [29882 octets] - [19/12/2011 12:20:47]

*************************

Dossier Temporaire : 15 dossier(s)et 25 fichier(s) supprimés

########## EOF - C:\AdwCleaner[S1].txt - [30104 octets] ##########

RogueKiller V6.2.0 [12/12/2011] par Tigzy
mail: tigzyRK<at>gmail<dot>com
Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html
Blog: http://tigzyrk.blogspot.com

Systeme d'exploitation: Windows Vista (6.0.6002 Service Pack 2) 32 bits version
Demarrage : Mode sans echec avec prise en charge reseau
Utilisateur: sebaste [Droits d'admin]
Mode: Recherche -- Date : 22/12/2011 09:18:32

¤¤¤ Processus malicieux: 0 ¤¤¤

¤¤¤ Entrees de registre: 2 ¤¤¤
[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

¤¤¤ Driver: [NOT LOADED] ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ Fichier HOSTS: ¤¤¤
::1 localhost


¤¤¤ MBR Verif: ¤¤¤
--- User ---
[MBR] 1717b28a268c73c1685ffc0aed46d567
[BSP] 11601ba196a5460be3e5657a4884a4e7 : MBR Code unknown
Partition table:
0 - [XXXXXX] NTFS [HIDDEN!] Offset (sectors): 2048 | Size: 1572 Mo
1 - [ACTIVE] NTFS [VISIBLE] Offset (sectors): 3074048 | Size: 126206 Mo
2 - [XXXXXX] NTFS [VISIBLE] Offset (sectors): 249571328 | Size: 122278 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Termine : << RKreport[1].txt >>
RKreport[1].txt

le voici y a t il pour l'instant un gros soucis?
Rapport de ZHPDiag v1.28.291 par Nicolas Coolman, Update du 17/12/2011
Run by sebaste at 20/12/2011 21:14:49
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
State : Nouvelle version disponible


---\\ Web Browser
MSIE: Internet Explorer v9.0.8112.16421
MFIE: Mozilla Firefox 8.0 v8.0

---\\ Windows Product Information
~ Langage: Français
Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)
Windows Server License Manager Script : OK
Windows Automatic Updates : OK

---\\ System Information
~ Processor: x86 Family 6 Model 15 Stepping 13, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Sans échec avec prise en charge du réseau (Fail-safe with network boot)
Total RAM: 2045 MB (79% free)
System Restore: Activé (Enable)
System drive C: has 14 GB (11%) free of 118 GB

---\\ Logged in mode
~ Computer Name: SEBETALEX
~ User Name: sebaste
~ All Users Names: sebaste, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O82,O89
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\sebaste\AppData\Roaming\
~ %Desktop% : C:\Users\sebaste\Desktop\
~ %Favorites% : C:\Users\sebaste\Favorites\
~ %LocalAppData% : C:\Users\sebaste\AppData\Local\
~ %StartMenu% : C:\Users\sebaste\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\system32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 14 Go of 118 Go)
E:\ Hard drive, Flash drive, Thumb drive (Free 109 Go of 114 Go)
F:\ CD-ROM drive (Not Inserted)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoStartMenuSubFolder: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoResolveSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoDispScrSavPage: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyComputer: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Scan Security Center in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.21/10/2009 - 07:27:36.) -- C:\Windows\Explorer.exe [2926592]
[MD5.4B555106290BD117334E9A08761C035A] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) (.08/04/2008 - 10:45:37.) -- C:\Windows\system32\rundll32.exe [44544]
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.05/04/2008 - 03:23:42.) -- C:\Windows\system32\Wininit.exe [96768]
[MD5.02F98B5C0E397AD06124D84428CF8F1A] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.16/12/2011 - 23:39:47.) -- C:\Windows\system32\wininet.dll [1127424]
[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.21/10/2009 - 07:28:13.) -- C:\Windows\system32\Winlogon.exe [314368]
[MD5.95F5FF73B076576C41740F1A842B9B57] - (.Microsoft Corporation - DLL client de l'API uilisateur de Windows multi-utilisateurs.) (.08/04/2008 - 09:33:40.) -- C:\Windows\system32\fr-FR\user32.dll.mui [20480]
[MD5.3911B972B55FEA0478476B2E777B29FA] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.16/06/2011 - 14:58:27.) -- C:\Windows\system32\drivers\AFD.sys [273408]
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.21/10/2009 - 07:32:26.) -- C:\Windows\system32\drivers\atapi.sys [19944]
[MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.05/04/2008 - 03:23:51.) -- C:\Windows\system32\drivers\Cdfs.sys [70144]
[MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/10/2009 - 05:39:17.) -- C:\Windows\system32\drivers\Cdrom.sys [67072]
[MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.16/06/2011 - 15:59:03.) -- C:\Windows\system32\drivers\DfsC.sys [75264]
[MD5.062452B7FFD68C8C042A6261FE8DFF4A] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/10/2009 - 05:42:42.) -- C:\Windows\system32\drivers\HDAudBus.sys [561152]
[MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) (.05/04/2008 - 03:23:20.) -- C:\Windows\system32\drivers\i8042prt.sys [54784]
[MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.08/04/2008 - 03:24:25.) -- C:\Windows\system32\drivers\IpNat.sys [100864]
[MD5.1E94971C4B446AB2290DEB71D01CF0C2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.16/06/2011 - 14:24:40.) -- C:\Windows\system32\drivers\MRxSmb.sys [106496]
[MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) (.21/10/2009 - 05:45:37.) -- C:\Windows\system32\drivers\netBT.sys [185856]
[MD5.6A4A98CEE84CF9E99564510DDA4BAA47] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.21/10/2009 - 07:32:49.) -- C:\Windows\system32\drivers\ntfs.sys [1083880]
[MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) (.05/04/2008 - 09:51:30.) -- C:\Windows\system32\drivers\Parport.sys [79360]
[MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.08/04/2008 - 03:24:55.) -- C:\Windows\system32\drivers\Rasl2tp.sys [76288]
[MD5.FBC0BACD9C3D7F6956853F64A66E252D] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.05/04/2008 - 03:23:01.) -- C:\Windows\system32\drivers\rdpdr.sys [248832]
[MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) (.21/10/2009 - 05:45:22.) -- C:\Windows\system32\drivers\smb.sys [66560]
[MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) (.21/10/2009 - 05:45:56.) -- C:\Windows\system32\drivers\tdx.sys [72192]
[MD5.147281C01FCB1DF9252DE2A10D5E7093] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.21/10/2009 - 07:32:55.) -- C:\Windows\system32\drivers\volsnap.sys [226280]
~ Scan Generic Processes in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 12/5350
~ Mes musiques (My Musics) : 2/11
~ Mes Videos (My Videos) : 1/2
~ Mes Favoris (My Favorites) : 2/133
~ Mes Documents (My Documents) : 16/438
~ Mon Bureau (My Desktop) : 120/2247
~ Menu demarrer (Programs) : 7/28
~ Scan Hidden Files in 00mn 21s



---\\ Processus lancés
[MD5.3708CCEE4878EB0B9E7B92355A631853] - (.Microsoft Corporation - Aide et support Microsoft®.) -- C:\Windows\helppane.exe [498176] [PID.996]
[MD5.B7C5410D1A88DADE14BFD135AA5B80DF] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [712192] [PID.808]
[MD5.6080A176D09435FC8E6E800996656E18] - (.Microsoft Corporation - Console IME.) -- C:\Windows\system32\conime.exe [69120] [PID.2028]
~ Scan Processes Running in 00mn 00s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\sebaste\AppData\Local\Google\Chrome\User Data\Default\Preferences
~ Scan Google Browser in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\sebaste\AppData\Roaming\Mozilla\Firefox\Profiles\5ez6qu7r.default\prefs.js
M3 - MFPP: Plugins - [sebaste] -- C:\Users\sebaste\AppData\Roaming\Mozilla\Firefox\Profiles\5ez6qu7r.default\searchplugins\bing.xml
M3 - MFPP: Plugins - [sebaste] -- C:\Users\sebaste\AppData\Roaming\Mozilla\Firefox\Profiles\5ez6qu7r.default\searchplugins\MyStart Search.xml
M3 - MFPP: Plugins - [sebaste] -- C:\Users\sebaste\AppData\Roaming\Mozilla\Firefox\Profiles\5ez6qu7r.default\searchplugins\ShareazaWebSearch.xml
M3 - MFPP: Plugins - [sebaste] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [sebaste] -- C:\Program Files\Mozilla FireFox\searchplugins\avg-secure-search.xml
M3 - MFPP: Plugins - [sebaste] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [sebaste] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [sebaste] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [sebaste] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [sebaste] -- C:\Program Files\Mozilla FireFox\searchplugins\MediaDICO-fr.xml
M3 - MFPP: Plugins - [sebaste] -- C:\Program Files\Mozilla FireFox\searchplugins\ShareazaWebSearch.xml
M3 - MFPP: Plugins - [sebaste] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [sebaste] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
M0 - MFSP: prefs.js [sebaste - 5ez6qu7r.default] http://search.conduit.com
M2 - MFEP: prefs.js [sebaste - 5ez6qu7r.default\{20a82645-c095-46ed-80e3-08825760534b}] [MicrosoftCG] Microsoft .NET Framework Assistant v1.1 (.Microsoft.)
M2 - MFEP: prefs.js [sebaste - 5ez6qu7r.default\{D46E8522-6E86-44b1-A622-58C0668AD78E}] [] Classic Compact v4.0.9.4 (.Ken Barbalace EnvironmentalChemistry.com.)
M2 - MFEP: prefs.js [sebaste - 5ez6qu7r.default\{e001c731-5e37-4538-a5cb-8168736a2360}] [bitdefender] BitDefender QuickScan v0.9.9.99 (.Echipa R&D BitDefender.)
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files\Mozilla Firefox\Plugins\np-mswmp.dll
P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - 1.9.0009.1.) -- C:\Program Files\Mozilla Firefox\Plugins\npLegitCheckPlugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 8.3.1.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\System32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_29 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60831.0.) -- C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3502.0922] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3508.1109] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1] - (.Yahoo! Inc. - Yahoo! activeX Plug-in Bridge.) -- C:\Program Files\Yahoo!\Common\npyaxmpb.dll
~ Scan Firefox Browser in 00mn 01s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} . (...) (No version) -- C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: (no name) - {3f1fbbdd-1444-4838-b1b7-726d9bcf32ab} . (...) (No version) -- (.not file.)
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)) -- C:\Windows\System32\ieframe.dll
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 0
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Scan Keys in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} . (.Yahoo! Inc. - Yahoo! Toolbar.) -- C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} . (.AVG Technologies CZ, s.r.o. - Safe Search for Internet Explorer.) -- C:\Program Files\AVG\AVG2012\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} . (.Pas de propriétaire - AVG Secure Search.) -- C:\Program Files\AVG Secure Search\9.0.0.21\AVG Secure Search_toolbar.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
~ Scan BHO in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} . (.Yahoo! Inc. - Yahoo! Toolbar.) -- C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: (no name) - {EE9A4208-64EC-11DE-8440-204256D89593} . (...) -- (.not file.)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} . (.Pas de propriétaire - AVG Secure Search.) -- C:\Program Files\AVG Secure Search\9.0.0.21\AVG Secure Search_toolbar.dll
~ Scan Toolbar in 00mn 00s



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe
O4 - HKLM\..\Run: [Desktop SMS] . (.Interactive Digital Media - Desktop SMS - German.) -- C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe
O4 - HKLM\..\Run: [Google Desktop Search] . (.Google - Google Desktop.) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O4 - HKLM\..\Run: [topi] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files\Toshiba\Toshiba Online Product Information\TOPI.exe
O4 - HKLM\..\Run: [StartCCC] . (...) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Camera Assistant Software] . (.Chicony - traybar.) -- C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
O4 - HKLM\..\Run: [HDMICtrlMan] . (.TOSHIBA Corporation. - HDMICtrlMan.exe.) -- C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe
O4 - HKLM\..\Run: [TPwrMain] . (.TOSHIBA Corporation - TOSHIBA Power Saver.) -- C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
O4 - HKLM\..\Run: [HSON] . (.TOSHIBA Corporation - HotStartOn.) -- C:\Program Files\Toshiba\TBS\HSON.exe
O4 - HKLM\..\Run: [SmoothView] . (.TOSHIBA Corporation - SmoothView.) -- C:\Program Files\Toshiba\SmoothView\SmoothView.exe
O4 - HKLM\..\Run: [00TCrdMain] . (.TOSHIBA Corporation - TOSHIBA Flash Cards.) -- C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
O4 - HKLM\..\Run: [Toshiba Registration] . (.Toshiba - Vista Registration.) -- C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe
O4 - HKLM\..\Run: [Toshiba TEMPO] . (.Toshiba Europe GmbH - Toshiba TEMPRO.) -- C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe
O4 - HKLM\..\Run: [ORAHSSSessionManager] . (.France Telecom SA - Pas de description.) -- C:\Program Files\Orange\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe
O4 - HKLM\..\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKLM\..\Run: [AVG_TRAY] . (.AVG Technologies CZ, s.r.o. - AVG Tray Monitor.) -- C:\Program Files\AVG\AVG2012\avgtray.exe
O4 - HKLM\..\Run: [vProt] . (.Pas de propriétaire - VProtect Application.) -- C:\Program Files\AVG Secure Search\vprot.exe
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [IncrediMail] . (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files\IncrediMail\bin\IncMail.exe
O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe
O4 - HKCU\..\Run: [TomTomHOME.exe] . (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] . (.Google Inc. - Picasa.) -- C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] . (.Google Inc. - Picasa.) -- C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] oobefldr.dll
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] oobefldr.dll
O4 - HKUS\S-1-5-21-2544701978-14319235-1414945659-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKUS\S-1-5-21-2544701978-14319235-1414945659-1000\..\Run: [IncrediMail] . (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files\IncrediMail\bin\IncMail.exe
O4 - HKUS\S-1-5-21-2544701978-14319235-1414945659-1000\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe
O4 - HKUS\S-1-5-21-2544701978-14319235-1414945659-1000\..\Run: [TomTomHOME.exe] . (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
~ Scan Application in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\sebaste\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\sebaste\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe
O4 - Global Startup: C:\Users\sebaste\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Users\sebaste\Desktop\Ad-Remover.lnk . (...) -- C:\Program Files\Ad-Remover\main.exe
O4 - Global Startup: C:\Users\sebaste\Desktop\AVG PC Tuneup 2011.lnk . (.AVG.) -- C:\Program Files\AVG\AVG PC Tuneup\BoostSpeed.exe
O4 - Global Startup: C:\Users\sebaste\Desktop\CCleaner (2).lnk . (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe
O4 - Global Startup: C:\Users\sebaste\Desktop\CCleaner.lnk . (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe
O4 - Global Startup: C:\Users\sebaste\Desktop\CDBurnerXP.lnk . (.CDBurnerXP Soft.) -- C:\Program Files\CDBurnerXP\cdbxpp.exe
O4 - Global Startup: C:\Users\sebaste\Desktop\Incoming.lnk . (...) -- C:\Users\sebaste\Downloads\eMule\Incoming
O4 - Global Startup: C:\Users\sebaste\Desktop\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\sebaste\Desktop\OpenOffice.org 3.2.lnk . (.OpenOffice.org.) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe
O4 - Global Startup: C:\Users\sebaste\Desktop\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
O4 - Global Startup: C:\Users\sebaste\Desktop\Vos Démarches Administratives.lnk - Clé orpheline
O4 - Global Startup: C:\Users\sebaste\Desktop\Windows Live Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - Global Startup: C:\Users\sebaste\Desktop\µTorrent.lnk . (.BitTorrent, Inc..) -- C:\Program Files\uTorrent\uTorrent.exe
O4 - Global Startup: C:\Users\sebaste\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\AVG PC Tuneup 2011.lnk . (.AVG.) -- C:\Program Files\AVG\AVG PC Tuneup\BoostSpeed.exe
O4 - Global Startup: C:\Users\sebaste\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\IncrediMail 2.0.lnk . (.IncrediMail, Ltd..) -- C:\Program Files\IncrediMail\bin\IncMail.exe
O4 - Global Startup: C:\Users\sebaste\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\sebaste\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O4 - Global Startup: C:\Users\sebaste\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk . (.Safer Networking Limited.) -- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
O4 - Global Startup: C:\Users\sebaste\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Vos Démarches Administratives.lnk - Clé orpheline
O4 - Global Startup: C:\Users\sebaste\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Live Messenger.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - Global Startup: C:\Users\sebaste\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Users\sebaste\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk . (.BitTorrent, Inc..) -- C:\Program Files\uTorrent\uTorrent.exe
~ Scan Global Startup in 00mn 00s



---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: Add to Windows &Live Favorites - (.not file.) - http:\\favorites.live.com\quickadd.aspx
O8 - Extra context menu item: Compare Prices with &Dealio - (.not file.) - C:\Users\sebaste\AppData\LocalLow\Dealio\kb127\res\DealioSearch.html
~ Scan IE Menu Contextuel in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} . (.Microsoft Corporation - Windows Live Messenger Companion core resources.) -- C:\Program Files\Windows Live\Companion\companion
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBro
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {76577871-04EC-495E-A12B-91F7C3600AFA} . (...) -- C:\Toshiba\Webshops\ebay.ico
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {8A918C1D-E123-4E36-B562-5C1519E434CE} . (...) -- C:\Toshiba\Webshops\amazon.ico
O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (...) -- C:\Toshiba\Webshops\amazon.ico
~ Scan IE Extra Buttons in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\System32\nlaapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\System32\NapiNSP.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\System32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\System32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\System32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\System32\winrnr.dll
~ Scan Winsock in 00mn 00s



---\\ Site dans la Zone de confiance d'Internet Explorer (O15)
O15 - Trusted Zone: [HKCU\...\Domains\www] http.orange.fr
~ Scan IE Zone Confiance in 00mn 01s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{0E1DC4AE-95FF-4212-BA02-71B092B972FB}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{0E1DC4AE-95FF-4212-BA02-71B092B972FB}: DhcpNameServer = 192.168.1.1
~ Scan Domain in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} . (.AVG Technologies CZ, s.r.o. - Safe Search pluggable protocol.) -- C:\Program Files\AVG\AVG2012\avgpp.dll
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} . (...) -- C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\9.0.1\ViProtocol.dll
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll
O18 - Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
~ Scan Protocole Additionnel in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (.Discordia, LTD - Data Manager.) - C:\Program Files\SHAREA~1\MediaBar\Datamngr\datamngr.dll
~ Scan AppInit DLL in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll
~ Scan SSODL in 00mn 00s



---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll
~ Scan STS/SSO in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: (Ati External Event Utility) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall (avast! Firewall) . (.AVAST Software - avast! firewall service.) - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Pare-feu AVG (avgfws) . (.AVG Technologies CZ, s.r.o. - AVG Firewall Service.) - C:\Program Files\AVG\AVG2012\avgfws.exe
O23 - Service: AVGIDSAgent (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) - C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) . (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) - C:\Program Files\AVG\AVG2012\avgwdsvc.exe
O23 - Service: ConfigFree Service (ConfigFree Service) . (.TOSHIBA CORPORATION - Service of ConfigFree..) - C:\Program Files\Toshiba\ConfigFree\CFSvcs.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) . (.France Telecom SA - Pas de description.) - C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: NMSAccessU (NMSAccessU) . (...) - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: O2Micro Flash Memory Card Service (o2flash) . (.O2Micro International - O2 Flash Memory Service.) - C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe
O23 - Service: Remote Procedure Call (RPC) Net (rpcnet) . (.Absolute Software Corp. - rpcnet.) - C:\Windows\System32\rpcnet.exe
O23 - Service: (RpcSs) - Clé orpheline
O23 - Service: Notebook Performance Tuning Service (TempoMonitoringService) . (.Toshiba Europe GmbH - Toshiba TEMPRO.) - C:\Program Files\Toshiba TEMPRO\TempoSVC.exe
O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) . (.TOSHIBA Corporation - TOSHIBA Navi Support Service.) - C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) . (.TOSHIBA Corporation - TDCSrv Application.) - C:\Windows\System32\TODDSrv.exe
O23 - Service: TomTomHOMEService (TomTomHOMEService) . (.TomTom - Windows Service for TomTom HOME.) - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) . (.TOSHIBA Corporation - TOSHIBA Power Saver.) - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA Bluetooth Service (TOSHIBA Bluetooth Service) . (...) - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (.not file.)
O23 - Service: TOSHIBA SMART Log Service (TOSHIBA SMART Log Service) . (.TOSHIBA Corporation - TosIPCSrv.exe.) - C:\Program Files\Toshiba\SMARTLogService\TosIPCSrv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) . (.Ulead Systems, Inc. - ULCDRSvr.) - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: (vToolbarUpdater) . (.Pas de propriétaire - ToolbarU Application.) - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\9.0.1\ToolbarUpdater.exe
O23 - Service: XAudioService (XAudioService) . (.Conexant Systems, Inc. - Modem Audio Service.) - C:\Windows\system32\DRIVERS\xaudio.exe
~ Scan Services in 00mn 01s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Scan Desktop Component in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart) (.AVG Technologies CZ, s.r.o. - AVG Resident Shield Service.) -- C:\PROGRA~1\AVG\AVG2012\avgrsx.exe
~ Scan Keys in 00mn 00s



---\\ Session Manager Key (AppCertDlls,KnownDLLs) (O36)
O36 - KnownDLLs: (clbcatq) . (.Microsoft Corporation - COM+ Configuration Catalog.) -- C:\Windows\system32\clbcatq.dll
O36 - KnownDLLs: (ole32) . (.Microsoft Corporation - Microsoft OLE pour Windows.) -- C:\Windows\system32\ole32.dll
O36 - KnownDLLs: (advapi32) . (.Microsoft Corporation - API avancées Windows 32.) -- C:\Windows\system32\advapi32.dll
O36 - KnownDLLs: (COMDLG32) . (.Microsoft Corporation - DLL commune de boîtes de dialogues.) -- C:\Windows\system32\COMDLG32.dll
O36 - KnownDLLs: (gdi32) . (.Microsoft Corporation - GDI Client DLL.) -- C:\Windows\system32\gdi32.dll
O36 - KnownDLLs: (IERTUTIL) . (.Microsoft Corporation - Run time utility for Internet Explorer.) -- C:\Windows\system32\IERTUTIL.dll
O36 - KnownDLLs: (IMAGEHLP) . (.Microsoft Corporation - Windows NT Image Helper.) -- C:\Windows\system32\IMAGEHLP.dll
O36 - KnownDLLs: (IMM32) . (.Microsoft Corporation - Multi-User Windows IMM32 API Client DLL.) -- C:\Windows\system32\IMM32.dll
O36 - KnownDLLs: (kernel32) . (.Microsoft Corporation - DLL du client API BASE Windows NT.) -- C:\Windows\system32\kernel32.dll
O36 - KnownDLLs: (LPK) . (.Microsoft Corporation - Language Pack.) -- C:\Windows\system32\LPK.dll
O36 - KnownDLLs: (MSCTF) . (.Microsoft Corporation - DLL de MSCTF Server.) -- C:\Windows\system32\MSCTF.dll
O36 - KnownDLLs: (MSVCRT) . (.Microsoft Corporation - Windows NT CRT DLL.) -- C:\Windows\system32\MSVCRT.dll
O36 - KnownDLLs: (NORMALIZ) . (.Microsoft Corporation - Unicode Normalization DLL.) -- C:\Windows\system32\NORMALIZ.dll
O36 - KnownDLLs: (NSI) . (.Microsoft Corporation - NSI User-mode interface DLL.) -- C:\Windows\system32\NSI.dll
O36 - KnownDLLs: (OLEAUT32) . (.Microsoft Corporation - Pas de description.) -- C:\Windows\system32\OLEAUT32.dll
O36 - KnownDLLs: (rpcrt4) . (.Microsoft Corporation - Runtime d'appel de procédure distante.) -- C:\Windows\system32\rpcrt4.dll
O36 - KnownDLLs: (Setupapi) . (.Microsoft Corporation - Installation de L'API Windows.) -- C:\Windows\system32\Setupapi.dll
O36 - KnownDLLs: (SHELL32) . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\system32\SHELL32.dll
O36 - KnownDLLs: (SHLWAPI) . (.Microsoft Corporation - Bibliothèque d'utilitaires légers du Shell.) -- C:\Windows\system32\SHLWAPI.dll
O36 - KnownDLLs: (URLMON) . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\URLMON.dll
O36 - KnownDLLs: (user32) . (.Microsoft Corporation - DLL client de l'API uilisateur de Windows m.) -- C:\Windows\system32\user32.dll
O36 - KnownDLLs: (USP10) . (.Microsoft Corporation - Uniscribe Unicode script processor.) -- C:\Windows\system32\USP10.dll
O36 - KnownDLLs: (WININET) . (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\system32\WININET.dll
O36 - KnownDLLs: (WLDAP32) . (.Microsoft Corporation - DLL API LDAP Win32.) -- C:\Windows\system32\WLDAP32.dll
O36 - KnownDLLs: (WS2_32) . (.Microsoft Corporation - Windows Socket 2.0 32-Bit DLL.) -- C:\Windows\system32\WS2_32.dll
~ Scan Keys in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
~ Scan Scheduled Task in 00mn 00s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d'installation du Lecteur Windows Media de Microsoft.) -- C:\Windows\system32\unregmp2.exe
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\system32\ie4uinit.exe
O40 - ASIC: YInstStarterUpgrade Class - {0291E591-EA41-4c82-8106-3DC6CE7F7664} . (.Yahoo! Inc. - YInstHelper Module.) -- C:\Program Files\Yahoo!\Common\yinsthelper.dll
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll
O40 - ASIC: Microsoft Windows Media Player 11.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll
O40 - ASIC: YInstStarter Class - {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} . (.Yahoo! Inc. - YInstHelper Module.) -- C:\Program Files\Yahoo!\Common\yinsthelper.dll
O40 - ASIC: YSearchSetting2 Class - {347B0667-C7ED-429B-BDE3-CC8D3BACAA31} . (.Yahoo! Inc. - YInstHelper Module.) -- C:\Program Files\Yahoo!\Common\yinsthelper.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Windows Media Player.) -- C:\Windows\system32\wmp.dll
O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
O40 - ASIC: Adobe Flash Player 9 ActiveX - {D27CDB6E-AE6D-11CF-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 11.0 r1.) -- C:\Windows\System32\Macromed\Flash\Flash11c.ocx
~ Scan Active Setup in 00mn 00s



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (Avgfwfd) . (.AVG Technologies CZ, s.r.o. - AVG Filter Driver.) - C:\Windows\system32\DRIVERS\avgfwd6x.sys
O41 - Driver: (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
O41 - Driver: (Avgldx86) . (.AVG Technologies CZ, s.r.o. - AVG AVI Loader Driver.) - C:\Windows\system32\DRIVERS\avgldx86.sys
O41 - Driver: (Avgmfx86) . (.AVG Technologies CZ, s.r.o. - AVG Resident Shield Minifilter Driver.) - C:\Windows\system32\DRIVERS\avgmfx86.sys
O41 - Driver: (Avgtdix) . (.AVG Technologies CZ, s.r.o. - AVG Network connection watcher.) - C:\Windows\system32\DRIVERS\avgtdix.sys
O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for RootKit Detection.) - C:\Windows\system32\DRIVERS\avipbb.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\system32\Drivers\dfsc.sys
O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\system32\DRIVERS\i8042prt.sys
O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\system32\DRIVERS\kbdclass.sys
O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\system32\DRIVERS\mouclass.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\system32\DRIVERS\netbios.sys
O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\system32\DRIVERS\netbt.sys
O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\system32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\system32\DRIVERS\rasacd.sys
O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\system32\DRIVERS\rdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\DRIVERS\RDPCDD.sys
O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\system32\DRIVERS\smb.sys
O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\system32\DRIVERS\ssmdrv.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\system32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys
~ Scan Drivers in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: AVG 2012 - (.AVG Technologies.) [HKLM] -- AVG
O42 - Logiciel: AVG 2012 - (.AVG Technologies.) [HKLM] -- {4E74D41C-5864-4561-9F6B-069372513A0B}
O42 - Logiciel: AVG 2012 - (.AVG Technologies.) [HKLM] -- {8398852A-7B61-4808-8F58-D0A40D1B2CB6}
O42 - Logiciel: AVG PC Tuneup - (.AVG.) [HKLM] -- {50316C0A-CC2A-460A-9EA5-F486E54AC17D}_is1
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {A2BCA9F1-566C-4805-97D1-7FDC93386723}
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader 8.3.1 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A83000000003}
O42 - Logiciel: Archiveur WinRAR - (.Pas de propriétaire.) [HKLM] -- WinRAR archiver
O42 - Logiciel: Bluetooth Stack for Windows by Toshiba - (.TOSHIBA CORPORATION.) [HKLM] -- {CEBB6BFB-D708-4F99-A633-BC2600E01EF6}
O42 - Logiciel: CCleaner (remove only) - (.Pas de propriétaire.) [HKLM] -- CCleaner
O42 - Logiciel: CDBurnerXP - (.CDBurnerXP.) [HKLM] -- {7E265513-8CDA-4631-B696-F40D983F3B07}_is1
O42 - Logiciel: Camera Assistant Software for Toshiba - (.Chicony Electronics Co.,Ltd..) [HKLM] -- {37C866E4-AA67-4725-9E95-A39968DD7960}
O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM] -- {D58A1E94-9EEA-4C6E-B9FB-D7C63DC6C941}
O42 - Logiciel: Codeur Windows Media Série 9 - (.Microsoft Corporation.) [HKLM] -- {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
O42 - Logiciel: Codeur Windows Media Série 9 - (.Pas de propriétaire.) [HKLM] -- Windows Media Encoder 9
O42 - Logiciel: Command & Conquer Generals - (.Electronic Arts.) [HKLM] -- InstallShield_{06F80017-8F98-4C94-B868-52358569FC32}
O42 - Logiciel: Complitly - (.Complitly.) [HKLM] -- {4FFBB818-B13C-11E0-931D-B2664824019B}_is1
O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}
O42 - Logiciel: Conexant HD Audio - (.Conexant.) [HKLM] -- CNXT_AUDIO_HDA
O42 - Logiciel: Conquist - (.Pas de propriétaire.) [HKLM] -- Conquist
O42 - Logiciel: Contrôle ActiveX Windows Live Mesh pour connexions à distance - (.Microsoft Corporation.) [HKLM] -- {55D003F4-9599-44BF-BA9E-95D060730DD3}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: DVD MovieFactory for TOSHIBA - (.Ulead Systems, Inc..) [HKLM] -- {F214EAA4-A069-4BAF-9DA4-4DB8BEEDE485}
O42 - Logiciel: Desktop SMS - (.IDM.) [HKLM] -- {5980B928-1C95-4B3E-957B-B02D8147FF9E}
O42 - Logiciel: Everest Poker.fr (Remove Only) - (.Pas de propriétaire.) [HKLM] -- Everest Poker.fr
O42 - Logiciel: Extension de Windows Live Toolbar (Windows Live Toolbar) - (.Microsoft Corporation.) [HKLM] -- {0CA6047C-D28B-4295-834A-07C52BA20C2D}
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {488F0347-C4A7-4374-91A7-30818BEDA710}
O42 - Logiciel: Google Desktop - (.Google.) [HKLM] -- Google Desktop
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}
O42 - Logiciel: HDAUDIO Soft Data Fax Modem with SmartCP - (.Pas de propriétaire.) [HKLM] -- CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_5051&SUBSYS_1179
O42 - Logiciel: HDMI Control Manager - (.TOSHIBA.) [HKLM] -- {CBDF64B0-8CAB-45C7-B3B2-4637C9F88769}
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: IncrediMail - (.IncrediMail.) [HKLM] -- {5E97F3BD-CDDC-4188-9D98-532E14FABB5D}
O42 - Logiciel: IncrediMail 2.0 - (.IncrediMail Ltd..) [HKLM] -- IncrediMail
O42 - Logiciel: Intel® Matrix Storage Manager - (.Pas de propriétaire.) [HKLM] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}
O42 - Logiciel: Java(TM) 6 Update 29 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF}
O42 - Logiciel: Java(TM) 6 Update 3 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160030}
O42 - Logiciel: Java(TM) 6 Update 7 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160070}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: LG PC Suite II - (.LG PC Suite.) [HKLM] -- {14DCD95A-EBA3-4BF0-B7EF-533852E99BE6}
O42 - Logiciel: LG USB Modem Driver - (.LG Electronics.) [HKLM] -- {C3ABE126-2BB2-4246-BFE1-6797679B3579}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSXML 4.0 SP2 (KB941833) - (.Microsoft Corporation.) [HKLM] -- {C523D256-313D-4866-B36A-F3DE528246EF}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.2.1300 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Manuels TOSHIBA - (.TOSHIBA.) [HKLM] -- {5B1DD5AA-FF34-4D6E-A912-CB46BB7378DC}
O42 - Logiciel: Marvell Miniport Driver - (.Marvell.) [HKLM] -- {C950420B-4182-49EA-850A-A6A2ABF06C6B}
O42 - Logiciel: MediaBar - (.Discordia, LTD.) [HKLM] -- Shareaza MediaBar
O42 - Logiciel: Menus intelligents (Windows Live Toolbar) - (.Microsoft Corporation.) [HKLM] -- {0CC70FEF-5068-4CD5-B4DE-86FFD98EC929}
O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E}
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}
O42 - Logiciel: Microsoft Office 2000 Professional - (.Microsoft Corporation.) [HKLM] -- {0001040C-78E1-11D2-B60F-006097C998E7}
O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (French) - (.Microsoft Corporation.) [HKLM] -- {95120000-00AF-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F}
O42 - Logiciel: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 - (.Microsoft Corporation.) [HKLM] -- {F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}
O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack
O42 - Logiciel: Mozilla Firefox 8.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 8.0 (x86 fr)
O42 - Logiciel: Navigateur Orange - (.Pas de propriétaire.) [HKLM] -- {ORAHSS}.Browser
O42 - Logiciel: NetWaiting - (.BVRP Software, Inc.) [HKLM] -- {3F92ABBB-6BBF-11D5-B229-002078017FBF}
O42 - Logiciel: O2Micro Flash Memory Card Reader Driver (x86) - (.O2Micro.) [HKLM] -- {372B31CF-77FB-4E29-860C-A0EA2985AB7F}
O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM] -- {266517E6-D866-439D-919C-B8B1A52E6080}
O42 - Logiciel: Orange - Logiciels Internet - (.Pas de propriétaire.) [HKLM] -- {ORAHSS}.UninstallSuite
O42 - Logiciel: PC Connectivity Solution - (.Nokia.) [HKLM] -- {AC599724-5755-48C1-ABE7-ABB857652930}
O42 - Logiciel: Package de pilotes Windows - Nokia pccsmcfd (10/12/2007 6.85.4.0) - (.Nokia.) [HKLM] -- 3A5DEFA413DDE699DBA6EBE0A63534ACA524D30F
O42 - Logiciel: PhotoMail Maker - (.Nom de votre société.) [HKLM] -- {15382D89-6EF6-4D21-9484-B500F2B10E46}
O42 - Logiciel: Picasa 2 - (.Google, Inc..) [HKLM] -- Picasa2
O42 - Logiciel: Réducteur de bruit du lecteur de CD/DVD - (.TOSHIBA.) [HKLM] -- {9FE35071-CAB2-4E79-93E7-BFC6A2DC5C5D}
O42 - Logiciel: SAMSUNG Mobile Composite Device Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile Composite Device
O42 - Logiciel: SAMSUNG Mobile Modem Driver Set - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile Modem
O42 - Logiciel: SAMSUNG Mobile USB Modem 1.0 Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile USB Modem 1.0
O42 - Logiciel: SAMSUNG Mobile USB Modem Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG Mobile USB Modem
O42 - Logiciel: SAMSUNG USB Mobile Device Software - (.Pas de propriétaire.) [HKLM] -- SAMSUNG USB Mobile Device
O42 - Logiciel: Samsung Mobile Modem Device Software - (.Pas de propriétaire.) [HKLM] -- Samsung Mobile Modem Device
O42 - Logiciel: Samsung Mobile phone USB driver Software - (.Pas de propriétaire.) [HKLM] -- Samsung Mobile phone USB driver
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2446708
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2478663
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Pro

ok le voici
http://www.terafiles.net/v-125016.html

merci

RogueKiller V6.2.0 [12/12/2011] par Tigzy
mail: tigzyRK<at>gmail<dot>com
Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html
Blog: http://tigzyrk.blogspot.com

Systeme d'exploitation: Windows Vista (6.0.6002 Service Pack 2) 32 bits version
Demarrage : Mode normal
Utilisateur: sebaste [Droits d'admin]
Mode: Suppression -- Date : 22/12/2011 10:09:49

¤¤¤ Processus malicieux: 0 ¤¤¤

¤¤¤ Entrees de registre: 2 ¤¤¤
[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

¤¤¤ Driver: [LOADED] ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ Fichier HOSTS: ¤¤¤
::1 localhost


¤¤¤ MBR Verif: ¤¤¤
--- User ---
[MBR] 1717b28a268c73c1685ffc0aed46d567
[BSP] 11601ba196a5460be3e5657a4884a4e7 : MBR Code unknown
Partition table:
0 - [XXXXXX] NTFS [HIDDEN!] Offset (sectors): 2048 | Size: 1572 Mo
1 - [ACTIVE] NTFS [VISIBLE] Offset (sectors): 3074048 | Size: 126206 Mo
2 - [XXXXXX] NTFS [VISIBLE] Offset (sectors): 249571328 | Size: 122278 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Termine : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt

re
dans zhp fix ils m'ont demander pres avoir fait "go" si je voulais nettoyer j'ai mis oui en esperant que c'est bon
la le nettoyage est en cours faut il interrompre?
merci

voici le rapport zhp fix
Rapport de ZHPFix 1.12.3375 par Nicolas Coolman, Update du 16/12/2011
Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-22-12-2011-12-43-48.txt
Run by sebaste at 22/12/2011 12:43:48
Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Clé(s) du Registre ==========
SUPPRIME Key: Menu Contextuel: Compare Prices with &Dealio
SUPPRIME Key: HKCU\Software\WideStream
SUPPRIME Key: SearchScopes :{71C63272-91A7-436a-843D-A1C641D1C626}

========== Elément(s) de donnée du Registre ==========
SUPPRIME PhishingFilter Value: Enabled = 0
SUPPRIME AppInit: ta Manager.) - C:\Program Files\SHAREA~1\MediaBar\Datamngr\datamngr.dll

========== Préférences navigateur ==========
SUPPRIME Mozilla Pref: user_pref("CT2582600.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
SUPPRIME Mozilla Pref: user_pref("CT2582600.BrowserCompStateIsOpen_1281043041617662806", true);
SUPPRIME Mozilla Pref: user_pref("CT2582600.BrowserCompStateIsOpen_129633201768939870", true);
SUPPRIME Mozilla Pref: user_pref("CT2582600.CT2582600", "CT2582600");
SUPPRIME Mozilla Pref: user_pref("CT2582600.DSInstall", true);
SUPPRIME Mozilla Pref: user_pref("CT2582600.DialogsAlignMode", "LTR");
SUPPRIME Mozilla Pref: user_pref("CT2582600.DialogsGetterLastCheckTime", "Mon Dec 05 2011 08:11:32 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CT2582600.EMailNotifierPollDate", "Mon Dec 05 2011 08:11:42 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CT2582600.FeedLastCount4781114544940518214", 275);
SUPPRIME Mozilla Pref: user_pref("CT2582600.FeedPollDate1154579606993571455", "Mon Dec 05 2011 08:11:34 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CT2582600.FeedPollDate1154579607031076616", "Mon Dec 05 2011 08:11:34 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CT2582600.FeedPollDate1154579607254614839", "Mon Dec 05 2011 08:11:34 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CT2582600.FeedPollDate1154579607731405437", "Mon Dec 05 2011 08:11:34 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CT2582600.FeedPollDate1154579608231640385", "Mon Dec 05 2011 08:11:34 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CT2582600.FeedPollDate1154579608468016907", "Mon Dec 05 2011 08:11:34 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CT2582600.FeedPollDate1154579608675890832", "Mon Dec 05 2011 08:11:34 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CT2582600.FeedPollDate1154579608833656362", "Mon Dec 05 2011 08:11:34 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CT2582600.FeedPollDate1154579609576983218", "Mon Dec 05 2011 08:11:34 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CT2582600.FeedPollDate1154579610508907107", "Mon Dec 05 2011 08:11:34 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CT2582600.FeedPollDate1154579610709294640", "Mon Dec 05 2011 08:11:34 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CT2582600.FeedTTL1154579606993571455", 5);
SUPPRIME Mozilla Pref: user_pref("CT2582600.FeedTTL1154579607731405437", 2);
SUPPRIME Mozilla Pref: user_pref("CT2582600.FeedTTL1154579608468016907", 30);
SUPPRIME Mozilla Pref: user_pref("CT2582600.FeedTTL1154579608675890832", 2);
SUPPRIME Mozilla Pref: user_pref("CT2582600.FeedTTL1154579608833656362", 5);
SUPPRIME Mozilla Pref: user_pref("CT2582600.FeedTTL1154579609576983218", 15);
SUPPRIME Mozilla Pref: user_pref("CT2582600.FeedTTL1154579610508907107", 5);
SUPPRIME Mozilla Pref: user_pref("CT2582600.FeedTTL1154579610709294640", 2);
SUPPRIME Mozilla Pref: user_pref("CT2582600.FirstTime", true);
SUPPRIME Mozilla Pref: user_pref("CT2582600.FirstTimeFF3", true);
SUPPRIME Mozilla Pref: user_pref("CT2582600.FixPageNotFoundErrors", true);
SUPPRIME Mozilla Pref: user_pref("CT2582600.HPInstall", true);
SUPPRIME Mozilla Pref: user_pref("CT2582600.HasUserGlobalKeys", true);
SUPPRIME Mozilla Pref: user_pref("CT2582600.Initialize", true);
SUPPRIME Mozilla Pref: user_pref("CT2582600.InitializeCommonPrefs", true);
SUPPRIME Mozilla Pref: user_pref("CT2582600.InstalledDate", "Mon Dec 05 2011 08:11:34 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CT2582600.InvalidateCache", false);
SUPPRIME Mozilla Pref: user_pref("CT2582600.IsGrouping", false);
SUPPRIME Mozilla Pref: user_pref("CT2582600.IsInitSetupIni", true);
SUPPRIME Mozilla Pref: user_pref("CT2582600.IsMulticommunity", false);
SUPPRIME Mozilla Pref: user_pref("CT2582600.IsOpenThankYouPage", true);
SUPPRIME Mozilla Pref: user_pref("CT2582600.IsOpenUninstallPage", true);
SUPPRIME Mozilla Pref: user_pref("CT2582600.LanguagePackLastCheckTime", "Mon Dec 05 2011 08:11:34 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CT2582600.Locale", "fr");
SUPPRIME Mozilla Pref: user_pref("CT2582600.MCDetectTooltipHeight", "83");
SUPPRIME Mozilla Pref: user_pref("CT2582600.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
SUPPRIME Mozilla Pref: user_pref("CT2582600.MCDetectTooltipWidth", "295");
SUPPRIME Mozilla Pref: user_pref("CT2582600.MyStuffEnabledAtInstallation", true);
SUPPRIME Mozilla Pref: user_pref("CT2582600.OriginalFirstVersion", "3.8.0.8");
SUPPRIME Mozilla Pref: user_pref("CT2582600.RadioLastCheckTime", "Mon Dec 05 2011 08:11:34 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CT2582600.RadioLastUpdateIPServer", "3");
SUPPRIME Mozilla Pref: user_pref("CT2582600.RadioLastUpdateServer", "3");
SUPPRIME Mozilla Pref: user_pref("CT2582600.RadioShrinkedFromSetup", false);
SUPPRIME Mozilla Pref: user_pref("CT2582600.SavedHomepage", "http://y.lo.st");
SUPPRIME Mozilla Pref: user_pref("CT2582600.SearchCaption", "pc gear fr Customized Web Search");
SUPPRIME Mozilla Pref: user_pref("CT2582600.SearchFromAddressBarIsInit", true);
SUPPRIME Mozilla Pref: user_pref("CT2582600.SendProtectorDataViaLogin", true);
SUPPRIME Mozilla Pref: user_pref("CT2582600.ServiceMapLastCheckTime", "Mon Dec 05 2011 08:11:31 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CT2582600.SettingsLastCheckTime", "Mon Dec 05 2011 08:11:31 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CT2582600.SettingsLastUpdate", "1322740773");
SUPPRIME Mozilla Pref: user_pref("CT2582600.ThirdPartyComponentsInterval", 504);
SUPPRIME Mozilla Pref: user_pref("CT2582600.ThirdPartyComponentsLastCheck", "Mon Dec 05 2011 08:11:31 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CT2582600.ThirdPartyComponentsLastUpdate", "1255344667");
SUPPRIME Mozilla Pref: user_pref("CT2582600.ToolbarShrinkedFromSetup", false);
SUPPRIME Mozilla Pref: user_pref("CT2582600.alertChannelId", "975433");
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage./9b+7e+x305",
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage./9b+7e,x305",
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage./9b+7e06cg5el8:", "6E6D6F6F736E6C757774");
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A747375757974727B7D7A242F4B49474F42357D5D5C3D");
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage./9b+7e0x305",
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage./9b+7e2x305",
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage./9b+7e7x305",
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage./9b+7e:x305",
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage./9b+7e@x305",
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage./9b+7eax305",
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage./9b+7ebe3g=;d9n9=d",
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage./9b+7ecx305",
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage./9b-3=3eccja=f>",
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage./9b3
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D6F6F736E6C766E7272747B");
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage./9b9643g3/9e", "6A");
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage./9b<:222h64<", "393F352F3E");
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage./9b=+03eh8h8j?:", "4443");
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage./9b?+e2a52d8",
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage./9ba@0<0bi6a7gn:6@l?", "6E6B");
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage.d_date_ginyas1", "31333233303639303936333634");
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage.d_ginyas1", "30");
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage.ginyasstest", "676F6F64");
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage.http://rv_ginyas_com/app/conduit.bbrs_affid", "706367656172735F636F6E64756974");
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage.http://rv_ginyas_com/app/conduit.bbrs_bguid",
SUPPRIME Mozilla Pref: user_pref("CT2582600.backendstorage.http://rv_ginyas_com/app/conduit.bbrs_lba1", "323031312D31322D35");
SUPPRIME Mozilla Pref: user_pref("CT2582600.components.1000034", true);
SUPPRIME Mozilla Pref: user_pref("CT2582600.components.1000234", true);
SUPPRIME Mozilla Pref: user_pref("CT2582600.globalFirstTimeInfoLastCheckTime", "Mon Dec 05 2011 08:11:32 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CT2582600.initDone", true);
SUPPRIME Mozilla Pref: user_pref("CT2582600.isAppTrackingManagerOn", true);
SUPPRIME Mozilla Pref: user_pref("CT2582600.isFirstRadioInstallation", false);
SUPPRIME Mozilla Pref: user_pref("CT2582600.revertSettingsEnabled", true);
SUPPRIME Mozilla Pref: user_pref("CT2582600.testingCtid", "");
SUPPRIME Mozilla Pref: user_pref("CT2582600.toolbarAppMetaDataLastCheckTime", "Mon Dec 05 2011 08:11:32 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CT2582600.toolbarContextMenuLastCheckTime", "Mon Dec 05 2011 08:11:35 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.EngineHiddenByUser", false);
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.EngineOwner", "");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.EngineOwnerToolbarId", "pc_gear_fr");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.IsEngineShown", false);
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\sebaste\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\5ez6qu7r.d[...]
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.OriginalEngineOwner", "");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.ToolbarsList", "CT2582600");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.ToolbarsList2", "CT2582600");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.ToolbarsList4", "CT2582600");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Tue May 24 2011 09:00:34 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.alert.alertEnabled", true);
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sat Jun 25 2011 20:35:41 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.alert.locale", "en");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sat Jun 25 2011 20:35:33 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.alert.showTrayIcon", false);
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.alert.userId", "1f32b53e-66e8-43fd-bce8-cb4eb8656258");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Mon Dec 05 2011 08:11:35 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.globalUserId", "1539cd60-b30a-475f-84d2-dfdedd5c310e");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2582600");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.killedEngine", true);
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Mon Dec 05 2011 08:11:35 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.notifications.alertEnabled", true);
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.notifications.locale", "en");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Mon Dec 05 2011 08:11:32 GMT+0100");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.notifications.showTrayIcon", false);
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.notifications.userId", "18ff080f-e5f3-4eee-b89e-077f3f7bc584");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.originalHomepage", "http://y.lo.st");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.originalSearchEngine", "Google");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.undefined", "");
SUPPRIME Mozilla Pref: user_pref("browser.search.defaultenginename", "SweetIM Search");
SUPPRIME Mozilla Pref: user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
SUPPRIME Mozilla Pref: user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
SUPPRIME Mozilla Pref: user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
SUPPRIME Mozilla Pref: user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
SUPPRIME Mozilla Pref: user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
SUPPRIME Mozilla Pref: user_pref("sweetim.toolbar.mode.debug", "false");
SUPPRIME Mozilla Pref: user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "SweetIM Search");
SUPPRIME Mozilla Pref: user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engine=\"http://*google.*\" param=
SUPPRIME Mozilla Pref: user_pref("sweetim.toolbar.search.history", "");
SUPPRIME Mozilla Pref: user_pref("sweetim.toolbar.search.history.capacity", "10");
SUPPRIME Mozilla Pref: user_pref("sweetim.toolbar.simapp_id", "{C221ED61-5D0A-11E0-8658-001E682EC5FC}");
SUPPRIME Mozilla Pref: user_pref("sweetim.toolbar.version", "1.1.0.2");

========== Dossier(s) ==========
SUPPRIME Folder: C:\Program Files\BitTorrent Fastest Tool
SUPPRIME Folder: C:\Program Files\Widestream6
SUPPRIME Folder: C:\Users\sebaste\AppData\Roaming\widestream
SUPPRIME Folder: C:\Users\sebaste\AppData\Local\widestream6 Air

========== Fichier(s) ==========
SUPPRIME File: c:\users\sebaste\appdata\roaming\mozilla\firefox\profiles\5ez6qu7r.default\searchplugins\mystart search.xml
ABSENT File: c:\users\sebaste\appdata\locallow\dealio\kb127\res\dealiosearch.html
SUPPRIME File: c:\program files\sharea~1\mediabar\datamngr\datamngr.dll
SUPPRIME File: c:\windows\system32\rpcnetp.exe

VOICI LE RAPPORT OTM

========== FILES ==========
File/Folder C:\Program Files\Widestream6 not found.
File/Folder C:\Users\sebaste\AppData\Roaming\Widestream not found.
File/Folder C:\Users\sebaste\AppData\Local\widestream6 Air not found.
File/Folder C:\Users\sebaste\AppData\Roaming\Mozilla\Firefox\Profiles\5ez6qu7r.default\SearchPlugins\MyStart Search.xml not found.
========== REGISTRY ==========
Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{21234BEA-125E-40DB-95EA-6B322E21F59B}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21234BEA-125E-40DB-95EA-6B322E21F59B}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{3EDDA953-1C3B-4823-8F25-D075FBB2D2B5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3EDDA953-1C3B-4823-8F25-D075FBB2D2B5}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{4C1E5902-FE99-4591-8582-2A2605462857}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4C1E5902-FE99-4591-8582-2A2605462857}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{5C00A371-2011-4AF3-97C8-6CE66AA744CB}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C00A371-2011-4AF3-97C8-6CE66AA744CB}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{5F5A840B-359D-46F2-81BF-52470CE866A2}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5F5A840B-359D-46F2-81BF-52470CE866A2}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{9F038672-0425-4792-BC9C-36DE3308E8AA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9F038672-0425-4792-BC9C-36DE3308E8AA}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{B67A4CBA-520A-43DB-B03F-414E539F90EC}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B67A4CBA-520A-43DB-B03F-414E539F90EC}\ not found.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{e908b145-c847-4e85-b315-07e2e70decf8}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e908b145-c847-4e85-b315-07e2e70decf8}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{F9C4F914-CB58-4272-8A3F-F732A1D1E91D}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F9C4F914-CB58-4272-8A3F-F732A1D1E91D}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Installer\Features\81337C0DA4B761D40A4CB3380F57AE88\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Installer\Features\C8465016C3C0D184C811F194256DBF35\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\compare prices with &dealio\ not found.
Registry key HKEY_CURRENT_USER\Software\WideStream\ not found.

OTM by OldTimer - Version 3.1.19.0 log created on 12222011_125544

MERCI
PEUX TU ME DIRE ce qu'il a exactement merci

TRES BIEN
A TON AVIS LESUEL GARDER?
Sinon y a til d'autres manip à faire?
c'etait ca qui le faisait ramer ou j'avais aussi des virus

ok des que je lance zhp diag en mode normal ca bloque toujours à 44 %
Par contre ca marche en mode sans echec je n'y comprend rien

oui avast desinstalle
je viens de lancer zhp diag mais en mode sans echec

Répond moi stp en cliquant sur l'onglet vert "Répondre au sujet " juste en bas :-)
@+

je n'arrive pas à poster le rapport

il me demande de donner le titre du message

rebonjour
le voici
excuses moi pour tout ce derangement
mais c'est penible de ne pas avoir son pc qui fonctionne
merci
http://www.toofiles.com/fr/oip/documents/txt/7798_zhpdiag.html