Analyse log hijackthis

Salut vieu bison boiteu

J'ai fait ce que tu m'as demandé. Ils ne m'ont pas donné de solutions bien concluantes je pense.
Merci quand même.

A+

Salut Fish66

Voici le lien demandé : https://pjjoint.malekal.com/files.php?id=ZHPDiag_20120512_k67u5k8z11

A+

Re,

Le rapport:

# AdwCleaner v1.606 - Rapport créé le 12/05/2012 à 15:05:42
# Mis à jour le 10/05/2012 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : Julien - JULIEN-TOSH
# Exécuté depuis : C:\Users\Julien\Downloads\adwcleaner.exe
# Option [Suppression]


***** [Services] *****


***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Users\Julien\AppData\Local\APN
Dossier Supprimé : C:\Users\Julien\AppData\LocalLow\AskToolbar
Dossier Supprimé : C:\Users\Julien\AppData\LocalLow\ShoppingReport2
Dossier Supprimé : C:\Users\Julien\AppData\Roaming\CrazyLoader
Dossier Supprimé : C:\Users\Julien\AppData\Roaming\pdfforge
Dossier Supprimé : C:\Users\Julien\AppData\Roaming\Mozilla\Firefox\Profiles\fzr900s4.default\extensions\ffxtlbra@softonic.com
Fichier Supprimé : C:\Users\Julien\AppData\Roaming\Mozilla\Firefox\Profiles\fzr900s4.default\searchplugins\Startsear.xml
Fichier Supprimé : C:\Program Files (x86)\Mozilla Firefox\Plugins\npvsharetvplg.dll

***** [Registre] *****

Clé Supprimée : HKCU\Software\Softonic
Clé Supprimée : HKCU\Software\StartSearch
Clé Supprimée : HKCU\Software\AppDataLow\Software\ShoppingReport2
Clé Supprimée : HKCU\Software\JavaSoft\Prefs\crazyloader
Clé Supprimée : HKLM\SOFTWARE\VDownloader\OpenCandy
Clé Supprimée : HKLM\SOFTWARE\eRightSoft\OpenCandy
[x64] Clé Supprimée : HKLM\SOFTWARE\Software

***** [Registre - GUID] *****

Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{043C5167-00BB-4324-AF7E-62013FAEDACF}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3B7599DF-3D5D-4EF5-BF51-9C2EDA788E83}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3B7599DF-3D5D-4EF5-BF51-9C2EDA788E83}
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{043C5167-00BB-4324-AF7E-62013FAEDACF}]

***** [Navigateurs] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Le registre ne contient aucune entrée illégitime.

-\\ Mozilla Firefox v12.0 (fr)

Nom du profil : default
Fichier : C:\Users\Julien\AppData\Roaming\Mozilla\Firefox\Profiles\fzr900s4.default\prefs.js

C:\Users\Julien\AppData\Roaming\Mozilla\Firefox\Profiles\fzr900s4.default\user.js ... Supprimé !

Supprimée : user_pref("browser.search.defaultengine", "Web Search");
Supprimée : user_pref("browser.search.defaultenginename", "Web Search");
Supprimée : user_pref("browser.search.order.1", "Web Search");
Supprimée : user_pref("extensions.enabledAddons", "ffxtlbra@softonic.com:1.5.0,{972ce4c6-7e08-4474-a285-3208198c[...]
Supprimée : user_pref("extensions.softonic.admin", false);
Supprimée : user_pref("extensions.softonic.aflt", "SD");
Supprimée : user_pref("extensions.softonic.dfltLng", "FR");
Supprimée : user_pref("extensions.softonic.dfltSrch", false);
Supprimée : user_pref("extensions.softonic.excTlbr", false);
Supprimée : user_pref("extensions.softonic.hmpg", false);
Supprimée : user_pref("extensions.softonic.id", "208eb63400000000000000ff69b9bb4d");
Supprimée : user_pref("extensions.softonic.instlDay", "15372");
Supprimée : user_pref("extensions.softonic.instlRef", "MON00012");
Supprimée : user_pref("extensions.softonic.lastVrsnTs", "1.5.11.516:27:44");
Supprimée : user_pref("extensions.softonic.newTab", false);
Supprimée : user_pref("extensions.softonic.noFFXTlbr", false);
Supprimée : user_pref("extensions.softonic.prdct", "softonic");
Supprimée : user_pref("extensions.softonic.prtnrId", "softonic");
Supprimée : user_pref("extensions.softonic.smplGrp", "eng7");
Supprimée : user_pref("extensions.softonic.tlbrId", "fr12JANdefault");
Supprimée : user_pref("extensions.softonic.tlbrSrchUrl", "hxxp://search.softonic.com/MON00012/tb_v1?SearchSource[...]
Supprimée : user_pref("extensions.softonic.vrsn", "1.5.11.5");
Supprimée : user_pref("extensions.softonic.vrsnTs", "1.5.11.516:27:44");
Supprimée : user_pref("extensions.softonic.vrsni", "1.5.11.5");
Supprimée : user_pref("extensions.softonic_i.aflt", "SD");
Supprimée : user_pref("extensions.softonic_i.dfltLng", "fr");
Supprimée : user_pref("extensions.softonic_i.excTlbr", false);
Supprimée : user_pref("extensions.softonic_i.id", "208eb63400000000000000ff69b9bb4d");
Supprimée : user_pref("extensions.softonic_i.instlDay", "15372");
Supprimée : user_pref("extensions.softonic_i.instlRef", "MON00012");
Supprimée : user_pref("extensions.softonic_i.newTab", false);
Supprimée : user_pref("extensions.softonic_i.prdct", "softonic");
Supprimée : user_pref("extensions.softonic_i.prtnrId", "softonic");
Supprimée : user_pref("extensions.softonic_i.smplGrp", "eng7");
Supprimée : user_pref("extensions.softonic_i.tlbrId", "fr12JANdefault");
Supprimée : user_pref("extensions.softonic_i.tlbrSrchUrl", "hxxp://search.softonic.com/MON00012/tb_v1?SearchSour[...]
Supprimée : user_pref("extensions.softonic_i.vrsn", "1.5.11.5");
Supprimée : user_pref("extensions.softonic_i.vrsnTs", "1.5.11.516:27:44");
Supprimée : user_pref("extensions.softonic_i.vrsni", "1.5.11.5");
Supprimée : user_pref("extensions.vshare@toolbar.update.enabled", false);
Supprimée : user_pref("keyword.URL", "hxxp://startsear.ch/?aff=1&q=");
Supprimée : user_pref("vshare.install.date", "1297900800000");
Supprimée : user_pref("vshare.install.dumpFileCount", 0);
Supprimée : user_pref("vshare.install.dumpFileDisabled", false);
Supprimée : user_pref("vshare.install.finished", "1.0.0");
Supprimée : user_pref("vshare.install.guid", "{5a52e777-298c-4e6e-9bc3-217a02e07f83}");
Supprimée : user_pref("vshare.install.isHidden", true);
Supprimée : user_pref("vshare.install.istoolbarhp", true);
Supprimée : user_pref("vshare.install.istoolbarsearch", true);
Supprimée : user_pref("vshare.install.laststatreq", "1309305600000");
Supprimée : user_pref("vshare.install.newtab", true);
Supprimée : user_pref("vshare.install.overlayVersion", 1);
Supprimée : user_pref("vshare.install.userHPSettings", "hxxp://www.google.com/ig?rls=ig&hl=fr&source=iglk");
Supprimée : user_pref("vshare.install.userSPSettings", "");

-\\ Google Chrome v18.0.1025.168

Fichier : C:\Users\Julien\AppData\Local\Google\Chrome\User Data\Default\Preferences

Supprimée : "keyword": "startsear.ch",
Supprimée : "name": "Web Search",
Supprimée : "search_url": "hxxp://startsear.ch/?aff=1&q={searchTerms}",
Supprimée : "scriptable_host": [ "*://*.ask.com/", "*://*.bagsbuy.com/*", "*://*.childrenschorus.[...]
Supprimée : "matches": [ "*://*.google.com/*", "*://*.ask.com/", "*://*.bagsbuy.com/*", "*://*[...]
Supprimée : "update_url": "hxxp://apnmedia.ask.com/media/toolbar/supertoolbar/chrome/manifest.php[...]
Supprimée : "name": "vShare.tv plug-in",
Supprimée : "path": "C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npvsharetvplg.dll",
Supprimée : "name": "vShare.tv plug-in"
Supprimée : "name": "Winamp Application Detector",
Supprimée : "name": "Winamp Application Detector"
Supprimée : "path": "C:\\Users\\Julien\\AppData\\LocalLow\\Unity\\WebPlayer\\loader\\npUnity3D32.dll",
Supprimée : "path": "C:\\Users\\Julien\\AppData\\Roaming\\..\\LocalLow\\StoneTrip\\WebPlayer1.8.1\\npSh[...]

*************************

AdwCleaner[S1].txt - [7927 octets] - [12/05/2012 15:05:42]

########## EOF - C:\AdwCleaner[S1].txt - [8055 octets] ##########

A+

Re,

J'ai fait ce que tu m'as dis, j'ai conservé avast et désinstallé mse. Voici le lien du rapport : https://pjjoint.malekal.com/files.php?id=ZHPDiag_20120512_c13y13s7d7g7

Merci de me consacrer de ton temps =)
A+

Re,

Ci-joint le rapport:

ComboFix 12-05-12.01 - Julien 12/05/2012 20:27:00.1.2 - x64
Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.33.1036.18.3964.2615 [GMT 2:00]
Lancé depuis: c:\users\Julien\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\SysWow64\Packet.dll
c:\windows\SysWow64\pthreadVC.dll
c:\windows\SysWow64\wpcap.dll
D:\install.exe
.
.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
-------\Service_npf
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2012-04-12 au 2012-05-12 ))))))))))))))))))))))))))))))))))))
.
.
2012-05-12 18:33 . 2012-05-12 18:33 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-05-12 16:34 . 2012-05-12 16:34 -------- d-----w- c:\program files (x86)\Common Files\Java
2012-05-12 16:33 . 2012-05-12 16:33 -------- d-----w- c:\program files (x86)\Oracle
2012-05-12 16:33 . 2012-04-04 16:47 772504 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2012-05-12 09:37 . 2012-05-12 16:39 -------- d-----w- C:\ZHP
2012-05-12 09:35 . 1999-11-12 03:11 183808 ----a-w- c:\windows\SysWow64\BDEADMIN.CPL
2012-05-12 09:35 . 1999-01-20 03:01 210032 ----a-w- c:\windows\SysWow64\DBCLIENT.DLL
2012-05-12 09:35 . 2012-05-12 09:35 -------- d-----w- c:\program files (x86)\Common Files\Borland Shared
2012-05-12 09:34 . 2012-05-12 16:41 -------- d-----w- c:\program files (x86)\ZebHelpProcess
2012-05-12 09:26 . 2012-05-12 09:26 388096 ----a-r- c:\users\Julien\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-05-10 18:13 . 2012-05-10 18:13 -------- d-----w- C:\CCleaner
2012-05-09 16:28 . 2012-03-03 06:35 1544704 ----a-w- c:\windows\system32\DWrite.dll
2012-05-09 16:28 . 2012-03-03 05:31 1077248 ----a-w- c:\windows\SysWow64\DWrite.dll
2012-05-09 16:28 . 2012-03-31 06:05 5559664 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-05-09 16:28 . 2012-03-31 03:10 3146240 ----a-w- c:\windows\system32\win32k.sys
2012-05-09 16:28 . 2012-03-31 04:39 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-05-09 16:28 . 2012-03-31 04:39 3913072 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-05-09 16:20 . 2012-03-17 07:58 75120 ----a-w- c:\windows\system32\drivers\partmgr.sys
2012-05-09 16:18 . 2012-03-30 11:35 1918320 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-05-09 16:17 . 2012-03-31 05:42 1732096 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2012-05-09 16:17 . 2012-03-31 05:40 1367552 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2012-05-09 16:17 . 2012-03-31 04:29 936960 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll
2012-05-09 16:17 . 2012-03-31 05:40 1402880 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2012-05-09 16:17 . 2012-03-31 05:40 1393664 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2012-05-05 17:12 . 2012-05-05 17:12 -------- d-----w- c:\program files (x86)\Mozilla Maintenance Service
2012-05-05 17:12 . 2012-05-05 17:12 157352 ----a-w- c:\program files (x86)\Mozilla Firefox\maintenanceservice_installer.exe
2012-05-05 17:12 . 2012-05-05 17:12 129976 ----a-w- c:\program files (x86)\Mozilla Firefox\maintenanceservice.exe
2012-05-01 13:33 . 2012-05-01 13:34 -------- d-----w- C:\9d64cc35e580e10d3f52b8c5410f
2012-04-27 21:16 . 2012-04-27 21:29 -------- d-----w- c:\users\Julien\AppData\Roaming\Wallpaper
2012-04-27 21:15 . 2012-04-27 21:16 -------- d-----w- c:\program files (x86)\Wallpaper
2012-04-14 15:58 . 2012-02-28 06:51 887296 ----a-w- c:\program files\Internet Explorer\iedvtool.dll
2012-04-14 15:58 . 2012-02-28 01:13 678912 ----a-w- c:\program files (x86)\Internet Explorer\iedvtool.dll
2012-04-14 15:54 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-04-14 15:54 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2012-04-14 15:54 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2012-04-14 15:54 . 2012-03-01 05:37 172544 ----a-w- c:\windows\SysWow64\wintrust.dll
2012-04-14 15:54 . 2012-03-01 06:38 220672 ----a-w- c:\windows\system32\wintrust.dll
2012-04-14 15:54 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2012-04-14 15:54 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-05-04 20:33 . 2012-04-07 18:43 419488 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-05-04 20:33 . 2011-05-25 21:09 70304 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-05-04 20:33 . 2012-04-07 19:33 8744608 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
2012-04-04 16:47 . 2010-11-13 14:29 687504 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-04-04 13:56 . 2012-02-22 16:55 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-03-22 19:12 . 2012-03-22 19:12 4435968 ----a-w- c:\windows\SysWow64\GPhotos.scr
2012-03-07 00:15 . 2010-11-13 10:38 41184 ----a-w- c:\windows\avastSS.scr
2012-03-07 00:15 . 2010-11-13 10:38 201352 ----a-w- c:\windows\SysWow64\aswBoot.exe
2012-03-07 00:15 . 2011-01-19 17:53 258520 ----a-w- c:\windows\system32\aswBoot.exe
2012-03-07 00:04 . 2011-03-22 17:18 819032 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-03-07 00:04 . 2010-11-13 10:38 337240 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-03-07 00:02 . 2012-02-26 14:38 53080 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2012-03-07 00:01 . 2010-11-13 10:38 59224 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-03-07 00:01 . 2010-11-13 10:38 69976 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-03-07 00:01 . 2010-11-13 10:38 24408 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-02-17 06:38 . 2012-03-14 17:36 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2012-02-17 05:34 . 2012-03-14 17:36 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2012-02-17 04:58 . 2012-03-14 17:36 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-02-17 04:57 . 2012-03-14 17:36 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2006-05-03 10:06 163328 --sha-r- c:\windows\SysWOW64\flvDX.dll
2007-02-21 11:47 31232 --sha-r- c:\windows\SysWOW64\msfDX.dll
2008-03-16 13:30 216064 --sha-r- c:\windows\SysWOW64\nbDX.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-11-14 39408]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-17 252296]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"TOSHIBA Online Product Information"="c:\program files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe" [2010-03-03 4581280]
.
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
TRDCReminder.lnk - c:\program files (x86)\Toshiba\TRDCReminder\TRDCReminder.exe [2009-9-1 481184]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R1 dkbptfyg;dkbptfyg;c:\windows\system32\drivers\dkbptfyg.sys [x]
R2 gupdate;Service Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-14 136176]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-04 257696]
R3 dump_wmimmc;dump_wmimmc;c:\gpotato.eu\Dragonica\Release\GameGuard\dump_wmimmc.sys [x]
R3 gupdatem;Service Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-14 136176]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-05-05 129976]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
R3 TemproMonitoringService;Notebook Performance Tuning Service (TEMPRO);c:\program files (x86)\Toshiba TEMPRO\TemproSvc.exe [2010-02-11 124368]
R3 TMachInfo;TMachInfo;c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [2010-07-01 51576]
R3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [2010-02-05 137560]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 cfWiMAXService;ConfigFree WiMAX Service;c:\program files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe [2010-01-28 249200]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 ConfigFree Service;ConfigFree Service;c:\program files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe [2009-03-10 46448]
S3 FwLnk;FwLnk Driver;c:\windows\system32\DRIVERS\FwLnk.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [x]
S3 PGEffect;Pangu effect driver;c:\windows\system32\DRIVERS\pgeffect.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
.
.
--- Autres Services/Pilotes en mémoire ---
.
*NewlyCreated* - WS2IFSL
.
Contenu du dossier 'Tâches planifiées'
.
2012-05-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-07 20:33]
.
2012-05-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-14 11:43]
.
2012-05-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-14 11:43]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-03-07 00:15 135408 ----a-w- c:\program files\Alwil Software\Avast5\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-03-17 166424]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-03-17 391192]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-03-17 410648]
"cAudioFilterAgent"="c:\program files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe" [2010-03-10 520760]
"SmartAudio"="c:\program files\CONEXANT\SAII\SAIICpl.exe" [2009-11-19 307768]
"TosVolRegulator"="c:\program files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe" [2009-11-11 24376]
"combofix"="c:\combofix\CF30657.3XE" [2010-11-20 345088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Examen supplémentaire -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
uDefault_Search_URL = hxxp://www.google.com/ie
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyServer = http=;ftp=;https=;
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xporter vers Microsoft Excel - c:\progra~2\MIF5BA~1\Office12\EXCEL.EXE/3000
IE: Google Sidewiki...
TCP: DhcpNameServer = 192.168.1.1 192.168.1.1
FF - ProfilePath - c:\users\Julien\AppData\Roaming\Mozilla\Firefox\Profiles\fzr900s4.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/
FF - prefs.js: network.proxy.type - 0
.
- - - - ORPHELINS SUPPRIMES - - - -
.
Toolbar-Locked - (no file)
Toolbar-Locked - (no file)
HKLM-Run-TPwrMain - c:\program files (x86)\TOSHIBA\Power Saver\TPwrMain.EXE
HKLM-Run-SmoothView - c:\program files (x86)\Toshiba\SmoothView\SmoothView.exe
HKLM-Run-00TCrdMain - c:\program files (x86)\TOSHIBA\FlashCards\TCrdMain.exe
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-TosReelTimeMonitor - c:\program files (x86)\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
HKLM-Run-TosNC - c:\program files (x86)\Toshiba\BulletinBoard\TosNcCore.exe
HKLM-Run-SmartFaceVWatcher - c:\program files (x86)\Toshiba\SmartFaceV\SmartFaceVWatcher.exe
AddRemove-HijackThis - c:\users\Julien\AppData\Local\Temp\01net\HijackThis.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_USERS\S-1-5-21-1554649875-3537409464-3770252537-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-1554649875-3537409464-3770252537-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_235_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_235_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
c:\program files (x86)\TOSHIBA\ConfigFree\NDSTray.exe
.
**************************************************************************
.
Heure de fin: 2012-05-12 20:42:34 - La machine a redémarré
ComboFix-quarantined-files.txt 2012-05-12 18:42
.
Avant-CF: 46 260 191 232 octets libres
Après-CF: 45 488 451 584 octets libres
.
- - End Of File - - 97270C3A852F814B3C3482CBD45002CA

A+

Re bonjour,

1) J'ai donc bien effectué ce que tu m'as demandé (si j'ai bien compris création d'un fichier texte avec ce qu'il y a entre les lignes que j'ai nommé CFScript, glisser/déposer ce fichier vers l'icône bureau de Combofix). Écoute pour l'instant les problèmes semblent avoir disparues, plus de freeze, temps de démarrage correct par rapport à avant. Voici quand même le rapport qu'il a sorti:

ComboFix 12-05-12.01 - Julien 12/05/2012 22:22:13.2.2 - x64
Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.33.1036.18.3964.2226 [GMT 2:00]
Lancé depuis: c:\users\Julien\Desktop\ComboFix.exe
Commutateurs utilisés :: c:\users\Julien\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\gpotato.eu\Dragonica\Release\GameGuard\dump_wmimmc.sys"
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_dkbptfyg
-------\Service_dump_wmimmc
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2012-04-12 au 2012-05-12 ))))))))))))))))))))))))))))))))))))
.
.
2012-05-12 16:34 . 2012-05-12 16:34 -------- d-----w- c:\program files (x86)\Common Files\Java
2012-05-12 16:33 . 2012-05-12 16:33 -------- d-----w- c:\program files (x86)\Oracle
2012-05-12 16:33 . 2012-04-04 16:47 772504 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2012-05-12 09:37 . 2012-05-12 16:39 -------- d-----w- C:\ZHP
2012-05-12 09:35 . 1999-11-12 03:11 183808 ----a-w- c:\windows\SysWow64\BDEADMIN.CPL
2012-05-12 09:35 . 1999-01-20 03:01 210032 ----a-w- c:\windows\SysWow64\DBCLIENT.DLL
2012-05-12 09:35 . 2012-05-12 09:35 -------- d-----w- c:\program files (x86)\Common Files\Borland Shared
2012-05-12 09:34 . 2012-05-12 16:41 -------- d-----w- c:\program files (x86)\ZebHelpProcess
2012-05-12 09:26 . 2012-05-12 09:26 388096 ----a-r- c:\users\Julien\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-05-10 18:13 . 2012-05-10 18:13 -------- d-----w- C:\CCleaner
2012-05-09 16:28 . 2012-03-03 06:35 1544704 ----a-w- c:\windows\system32\DWrite.dll
2012-05-09 16:28 . 2012-03-03 05:31 1077248 ----a-w- c:\windows\SysWow64\DWrite.dll
2012-05-09 16:28 . 2012-03-31 06:05 5559664 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-05-09 16:28 . 2012-03-31 03:10 3146240 ----a-w- c:\windows\system32\win32k.sys
2012-05-09 16:28 . 2012-03-31 04:39 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-05-09 16:28 . 2012-03-31 04:39 3913072 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-05-09 16:20 . 2012-03-17 07:58 75120 ----a-w- c:\windows\system32\drivers\partmgr.sys
2012-05-09 16:18 . 2012-03-30 11:35 1918320 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-05-09 16:17 . 2012-03-31 05:42 1732096 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2012-05-09 16:17 . 2012-03-31 05:40 1367552 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2012-05-09 16:17 . 2012-03-31 04:29 936960 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll
2012-05-09 16:17 . 2012-03-31 05:40 1402880 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2012-05-09 16:17 . 2012-03-31 05:40 1393664 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2012-05-05 17:12 . 2012-05-05 17:12 -------- d-----w- c:\program files (x86)\Mozilla Maintenance Service
2012-05-05 17:12 . 2012-05-05 17:12 157352 ----a-w- c:\program files (x86)\Mozilla Firefox\maintenanceservice_installer.exe
2012-05-05 17:12 . 2012-05-05 17:12 129976 ----a-w- c:\program files (x86)\Mozilla Firefox\maintenanceservice.exe
2012-05-01 13:33 . 2012-05-01 13:34 -------- d-----w- C:\9d64cc35e580e10d3f52b8c5410f
2012-04-27 21:16 . 2012-04-27 21:29 -------- d-----w- c:\users\Julien\AppData\Roaming\Wallpaper
2012-04-27 21:15 . 2012-04-27 21:16 -------- d-----w- c:\program files (x86)\Wallpaper
2012-04-14 15:58 . 2012-02-28 06:51 887296 ----a-w- c:\program files\Internet Explorer\iedvtool.dll
2012-04-14 15:58 . 2012-02-28 01:13 678912 ----a-w- c:\program files (x86)\Internet Explorer\iedvtool.dll
2012-04-14 15:54 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-04-14 15:54 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2012-04-14 15:54 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2012-04-14 15:54 . 2012-03-01 05:37 172544 ----a-w- c:\windows\SysWow64\wintrust.dll
2012-04-14 15:54 . 2012-03-01 06:38 220672 ----a-w- c:\windows\system32\wintrust.dll
2012-04-14 15:54 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2012-04-14 15:54 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-05-04 20:33 . 2012-04-07 18:43 419488 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-05-04 20:33 . 2011-05-25 21:09 70304 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-05-04 20:33 . 2012-04-07 19:33 8744608 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
2012-04-04 16:47 . 2010-11-13 14:29 687504 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-04-04 13:56 . 2012-02-22 16:55 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-03-22 19:12 . 2012-03-22 19:12 4435968 ----a-w- c:\windows\SysWow64\GPhotos.scr
2012-03-07 00:15 . 2010-11-13 10:38 41184 ----a-w- c:\windows\avastSS.scr
2012-03-07 00:15 . 2010-11-13 10:38 201352 ----a-w- c:\windows\SysWow64\aswBoot.exe
2012-03-07 00:15 . 2011-01-19 17:53 258520 ----a-w- c:\windows\system32\aswBoot.exe
2012-03-07 00:04 . 2011-03-22 17:18 819032 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-03-07 00:04 . 2010-11-13 10:38 337240 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-03-07 00:02 . 2012-02-26 14:38 53080 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2012-03-07 00:01 . 2010-11-13 10:38 59224 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-03-07 00:01 . 2010-11-13 10:38 69976 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-03-07 00:01 . 2010-11-13 10:38 24408 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-02-23 08:18 . 2010-11-13 10:45 279656 ------w- c:\windows\system32\MpSigStub.exe
2012-02-17 06:38 . 2012-03-14 17:36 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2012-02-17 05:34 . 2012-03-14 17:36 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2012-02-17 04:58 . 2012-03-14 17:36 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-02-17 04:57 . 2012-03-14 17:36 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2006-05-03 10:06 163328 --sha-r- c:\windows\SysWOW64\flvDX.dll
2007-02-21 11:47 31232 --sha-r- c:\windows\SysWOW64\msfDX.dll
2008-03-16 13:30 216064 --sha-r- c:\windows\SysWOW64\nbDX.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2012-05-12_18.36.03 )))))))))))))))))))))))))))))))))))))))))
.
- 2011-03-20 18:22 . 2012-05-12 16:35 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2011-03-20 18:22 . 2012-05-12 20:34 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
- 2009-07-14 04:54 . 2012-05-12 17:26 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2012-05-12 20:35 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2012-05-12 20:35 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2012-05-12 17:26 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2012-05-12 17:26 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2012-05-12 20:35 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-04-07 10:57 . 2012-05-12 19:01 32480 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2012-05-12 20:36 44718 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2010-11-13 10:19 . 2012-05-12 20:36 10354 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1554649875-3537409464-3770252537-1000_UserData.bin
- 2012-05-12 18:35 . 2012-05-12 18:35 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-05-12 20:34 . 2012-05-12 20:34 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-05-12 18:35 . 2012-05-12 18:35 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-05-12 20:34 . 2012-05-12 20:34 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2009-07-14 05:01 . 2012-05-12 18:34 438652 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 05:01 . 2012-05-12 20:33 438652 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2010-12-06 12:59 . 2012-05-12 20:33 3637252 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1554649875-3537409464-3770252537-1000-8192.dat
- 2010-12-06 12:59 . 2012-05-12 18:34 3637252 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1554649875-3537409464-3770252537-1000-8192.dat
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-11-14 39408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-17 252296]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"TOSHIBA Online Product Information"="c:\program files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe" [2010-03-03 4581280]
.
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
TRDCReminder.lnk - c:\program files (x86)\Toshiba\TRDCReminder\TRDCReminder.exe [2009-9-1 481184]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Service Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-14 136176]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-04 257696]
R3 gupdatem;Service Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-14 136176]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-05-05 129976]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
R3 TemproMonitoringService;Notebook Performance Tuning Service (TEMPRO);c:\program files (x86)\Toshiba TEMPRO\TemproSvc.exe [2010-02-11 124368]
R3 TMachInfo;TMachInfo;c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [2010-07-01 51576]
R3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [2010-02-05 137560]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 cfWiMAXService;ConfigFree WiMAX Service;c:\program files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe [2010-01-28 249200]
S2 ConfigFree Service;ConfigFree Service;c:\program files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe [2009-03-10 46448]
S3 FwLnk;FwLnk Driver;c:\windows\system32\DRIVERS\FwLnk.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [x]
S3 PGEffect;Pangu effect driver;c:\windows\system32\DRIVERS\pgeffect.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
.
.
Contenu du dossier 'Tâches planifiées'
.
2012-05-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-07 20:33]
.
2012-05-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-14 11:43]
.
2012-05-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-14 11:43]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-03-07 00:15 135408 ----a-w- c:\program files\Alwil Software\Avast5\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-03-17 166424]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-03-17 391192]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-03-17 410648]
"cAudioFilterAgent"="c:\program files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe" [2010-03-10 520760]
"SmartAudio"="c:\program files\CONEXANT\SAII\SAIICpl.exe" [2009-11-19 307768]
"TPwrMain"="c:\program files (x86)\TOSHIBA\Power Saver\TPwrMain.EXE" [BU]
"SmoothView"="c:\program files (x86)\Toshiba\SmoothView\SmoothView.exe" [BU]
"00TCrdMain"="c:\program files (x86)\TOSHIBA\FlashCards\TCrdMain.exe" [BU]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"TosReelTimeMonitor"="c:\program files (x86)\TOSHIBA\ReelTime\TosReelTimeMonitor.exe" [BU]
"TosNC"="c:\program files (x86)\Toshiba\BulletinBoard\TosNcCore.exe" [BU]
"SmartFaceVWatcher"="c:\program files (x86)\Toshiba\SmartFaceV\SmartFaceVWatcher.exe" [BU]
"TosVolRegulator"="c:\program files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe" [2009-11-11 24376]
"combofix"="c:\combofix\CF20467.3XE" [2010-11-20 345088]
.
------- Examen supplémentaire -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
uDefault_Search_URL = hxxp://www.google.com/ie
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyServer = http=;ftp=;https=;
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xporter vers Microsoft Excel - c:\progra~2\MIF5BA~1\Office12\EXCEL.EXE/3000
IE: Google Sidewiki...
TCP: DhcpNameServer = 192.168.1.1 192.168.1.1
FF - ProfilePath - c:\users\Julien\AppData\Roaming\Mozilla\Firefox\Profiles\fzr900s4.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/
FF - prefs.js: network.proxy.type - 0
.
- - - - ORPHELINS SUPPRIMES - - - -
.
Toolbar-Locked - (no file)
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_USERS\S-1-5-21-1554649875-3537409464-3770252537-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-1554649875-3537409464-3770252537-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_235_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_235_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
c:\program files (x86)\TOSHIBA\ConfigFree\NDSTray.exe
.
**************************************************************************
.
Heure de fin: 2012-05-12 22:49:07 - La machine a redémarré
ComboFix-quarantined-files.txt 2012-05-12 20:49
ComboFix2.txt 2012-05-12 18:42
.
Avant-CF: 45 486 485 504 octets libres
Après-CF: 45 119 152 128 octets libres
.
- - End Of File - - 8223A4DA40B837D105164684454CD408

Donc j'attends ta réponse pour voir et lorsque ça sera bon je marquerai comme résolu ce sujet.

2)J'ai bien désinstallé Spybot puisque qu'il ne sert pas à grand chose et gardé malwarebytes puisque il semble un peu mieux.

Merci pour ta précieuse aide et bonne journée.

A+

Re,

Le lien: https://pjjoint.malekal.com/files.php?id=ZHPDiag_20120513_b69s10i15e9

A+

Tu fixes aussi la ligne indiquée en MP

Re,

Désolé j'étais pas là cet aprèm, je copie quelles lignes alors ? (celles du premier ou du second commentaire)

Re,

Les deux :-)
Les serveur n'a pas accepté la ligne envoyé par MP!

J'attends alors les 2 rapports

@+

Re,

Alors je crois que ya un petit problème j'ai commencé par les lignes du premier commentaire, j'ai commencé à insérer le rapport dans mon message, du coup j'ai lancé les lignes du 2ème commentaire et bien sûr ça a fermé internet qui n'a pas sauvegardé mon message et donc je pense que j'ai perdu le 1er rapport. Mais c'est pas sûr (donc j'ai tout refait).

Rapport 1er commentaire:

Rapport de ZHPFix 1.12.3378 par Nicolas Coolman, Update du 10/01/2011
Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-13-05-2012-22-12-43.txt
Run by Julien at 13/05/2012 22:12:43
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Web site : http://nicolascoolman.skyrock.com/

========== Clé(s) du Registre ==========
ABSENT Key: HKLM\Software\CrazyLoader

========== Valeur(s) du Registre ==========
ABSENT {AE50D13A-3A6E-4867-9412-6D9AEAB5414E}
ABSENT {5B8E0F24-8B0E-45C5-9A51-5CE5925BA71B}
ABSENT Valeur Standard Profile: FirewallRaz :
ABSENT Valeur Domain Profile: FirewallRaz :

========== Préférences navigateur ==========
PRESENT Chrome File: C:\Users\Julien\AppData\Local\Google\Chrome\User Data\Default\Preferences
ABSENT Chrome Site: http://startsear.ch

========== Dossier(s) ==========
ABSENT C:\Program Files (x86)\Spybot - Search & Destroy
ABSENT C:\ProgramData\C__Users_Julien_AppData_Local_Temp_Rar$EX11.009_Real Hide IP v4.0.6.8_Crack_RealHideIP.exe
ABSENT C:\ProgramData\C__Users_Julien_AppData_Local_Temp_Rar$EX16.680_Real Hide IP v4.0.6.8_Crack_RealHideIP.exe
ABSENT C:\ProgramData\Spybot - Search & Destroy
ABSENT C:\Users\Julien\AppData\Roaming\C__Users_Julien_AppData_Local_Temp_Rar$EX11.009_Real Hide IP v4.0.6.8_Crack_RealHideIP.exe
ABSENT C:\Users\Julien\AppData\Roaming\C__Users_Julien_AppData_Local_Temp_Rar$EX16.680_Real Hide IP v4.0.6.8_Crack_RealHideIP.exe
ABSENT C:\Users\Julien\AppData\Local\CAMEO Chemicals
ABSENT C:\Users\Julien\AppData\Local\NOAA_32
ABSENT C:\Users\Julien\AppData\Local\{00B29516-39C8-492D-BBCD-9A1A57AF3600}
ABSENT C:\Users\Julien\AppData\Local\{019BD205-1B73-41C5-A01A-E1FD2C91BDDF}
ABSENT C:\Users\Julien\AppData\Local\{048C31F5-F839-423C-8463-AABC7E515B17}
ABSENT C:\Users\Julien\AppData\Local\{06B933F3-A893-40A8-AF0F-2C09F8B2820F}
ABSENT C:\Users\Julien\AppData\Local\{09998DFE-C313-4EA8-94D0-3FE7095F4B6C}
ABSENT C:\Users\Julien\AppData\Local\{1511A875-CCA4-4877-A2D2-E9D41138C189}
ABSENT C:\Users\Julien\AppData\Local\{1A6F2743-8735-453E-B23F-0205A006B33C}
ABSENT C:\Users\Julien\AppData\Local\{2BA721D1-111D-49E4-A149-846CD1371862}
ABSENT C:\Users\Julien\AppData\Local\{2BE9C624-2374-4F39-9952-E894C9B6E2A1}
ABSENT C:\Users\Julien\AppData\Local\{2D4000AD-FBB1-45F3-B408-42A860BBCC58}
ABSENT C:\Users\Julien\AppData\Local\{3E9E2A52-4F63-41A8-9456-5F465F38C04A}
ABSENT C:\Users\Julien\AppData\Local\{419DB758-78DB-46ED-AE66-F6F0F8CF72A0}
ABSENT C:\Users\Julien\AppData\Local\{4425138B-2DBD-4697-8CDD-8351BC5D491F}
ABSENT C:\Users\Julien\AppData\Local\{54F70B38-CCF1-49FB-9DB9-1EBD8D5B016B}
ABSENT C:\Users\Julien\AppData\Local\{55F3CACE-C852-4C63-8B13-D82E80B0615E}
ABSENT C:\Users\Julien\AppData\Local\{5B6570A3-6DAF-4324-8FB9-F8DB9EB0DBE6}
ABSENT C:\Users\Julien\AppData\Local\{5CFA04C7-B979-4084-BAB0-7FB7532A14F0}
ABSENT C:\Users\Julien\AppData\Local\{6EB733D2-0684-476C-9B18-B74EF7729979}
ABSENT C:\Users\Julien\AppData\Local\{753A1C48-5453-4970-BC8D-D5DC6255E5A0}
ABSENT C:\Users\Julien\AppData\Local\{7A271808-7F29-4BC7-8CB8-9D0C73EB7CF3}
ABSENT C:\Users\Julien\AppData\Local\{86A8FBD4-E840-4C53-8E69-CEAFC0FC87BD}
ABSENT C:\Users\Julien\AppData\Local\{927EDBEE-91C3-4CEB-89B9-C2379759AD13}
ABSENT C:\Users\Julien\AppData\Local\{9CA91A77-92AD-4800-9ED9-A701FF609F31}
ABSENT C:\Users\Julien\AppData\Local\{A3B3E2CC-0411-4A92-9BB3-A0D37CEB9B5D}
ABSENT C:\Users\Julien\AppData\Local\{A3F65B87-8246-4F22-A866-3B3ACA947CC7}
ABSENT C:\Users\Julien\AppData\Local\{A77CAE94-6296-4587-8436-389722A425AC}
ABSENT C:\Users\Julien\AppData\Local\{B8C92649-3BA3-415A-B56D-F846E3AC55A7}
ABSENT C:\Users\Julien\AppData\Local\{B96C54CB-40E9-490D-991F-AB16C1ECC44C}
ABSENT C:\Users\Julien\AppData\Local\{BBFDE5AE-C8C2-4FD0-B784-6074EE7D2DBA}
ABSENT C:\Users\Julien\AppData\Local\{BF02FA20-F501-4EE7-AA80-DCE62084E0E6}
ABSENT C:\Users\Julien\AppData\Local\{C0FF24A2-55AF-4BA3-A0C2-45BCF70390E1}
ABSENT C:\Users\Julien\AppData\Local\{C811F259-0991-40F2-AF4D-C72C918BCC09}
ABSENT C:\Users\Julien\AppData\Local\{CC379AAC-186C-4832-AF1B-949193F3C159}
ABSENT C:\Users\Julien\AppData\Local\{D7CE682E-D123-4B5D-87D1-40EB51EE3C62}
ABSENT C:\Users\Julien\AppData\Local\{E7FE47F9-2C32-440D-8ABC-FFE854307FE8}
ABSENT C:\Users\Julien\AppData\Local\{F7AA5219-DE0D-4B30-842B-8074F26327FF}
SUPPRIME Temporaires Windows: : 2
SUPPRIME Flash Cookies: 1

========== Fichier(s) ==========
ABSENT Folder/File: c:\users\julien\appdata\local\microsoft\windows\temporary internet files\content.ie5\0booicxw\netfx64
SUPPRIME Temporaires Windows: : 1
SUPPRIME Flash Cookies: 0

========== Tache planifiée ==========
ABSENT Task: {0086AFED-12E8-47D6-8D4B-5B116A1AE98C}
ABSENT Task: {2A58B231-AB1A-4061-8C46-D7ABC5614256}
ABSENT Task: {2EC5840C-C44C-466E-AF62-5AE33E802B03}
ABSENT Task: {5956C2CB-AA39-4F5B-9A16-677E0E04A6C3}


========== Récapitulatif ==========
1 : Clé(s) du Registre
4 : Valeur(s) du Registre
46 : Dossier(s)
3 : Fichier(s)
2 : Préférences navigateur
4 : Tache planifiée


End of clean in 00mn 02s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 13/05/2012 20:54:33 [7279]
C:\ZHP\ZHPFix[R2].txt - 13/05/2012 20:57:53 [4736]
C:\ZHP\ZHPFix[R3].txt - 13/05/2012 20:59:44 [5278]
C:\ZHP\ZHPFix[R4].txt - 13/05/2012 21:02:22 [5330]
C:\ZHP\ZHPFix[R5].txt - 13/05/2012 21:04:55 [4940]
C:\ZHP\ZHPFix[R6].txt - 13/05/2012 22:12:43 [5382]


Rapport 2ème commentaire:

Rapport de ZHPFix 1.12.3378 par Nicolas Coolman, Update du 10/01/2011
Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-13-05-2012-22-14-17.txt
Run by Julien at 13/05/2012 22:14:17
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Web site : http://nicolascoolman.skyrock.com/

========== Clé(s) du Registre ==========
ABSENT Key: HKLM\Software\CrazyLoader

========== Valeur(s) du Registre ==========
ABSENT {AE50D13A-3A6E-4867-9412-6D9AEAB5414E}
ABSENT {5B8E0F24-8B0E-45C5-9A51-5CE5925BA71B}
ABSENT Valeur Standard Profile: FirewallRaz :
ABSENT Valeur Domain Profile: FirewallRaz :

========== Préférences navigateur ==========
PRESENT Chrome File: C:\Users\Julien\AppData\Local\Google\Chrome\User Data\Default\Preferences
ABSENT Chrome Site: http://startsear.ch

========== Dossier(s) ==========
ABSENT C:\ProgramData\Spybot - Search & Destroy
ABSENT C:\Users\Julien\AppData\Local\CAMEO Chemicals
ABSENT C:\Users\Julien\AppData\Local\NOAA_32
ABSENT C:\Users\Julien\AppData\Local\{00B29516-39C8-492D-BBCD-9A1A57AF3600}
ABSENT C:\Users\Julien\AppData\Local\{019BD205-1B73-41C5-A01A-E1FD2C91BDDF}
ABSENT C:\Users\Julien\AppData\Local\{048C31F5-F839-423C-8463-AABC7E515B17}
ABSENT C:\Users\Julien\AppData\Local\{06B933F3-A893-40A8-AF0F-2C09F8B2820F}
ABSENT C:\Users\Julien\AppData\Local\{09998DFE-C313-4EA8-94D0-3FE7095F4B6C}
ABSENT C:\Users\Julien\AppData\Local\{1511A875-CCA4-4877-A2D2-E9D41138C189}
ABSENT C:\Users\Julien\AppData\Local\{1A6F2743-8735-453E-B23F-0205A006B33C}
ABSENT C:\Users\Julien\AppData\Local\{2BA721D1-111D-49E4-A149-846CD1371862}
ABSENT C:\Users\Julien\AppData\Local\{2BE9C624-2374-4F39-9952-E894C9B6E2A1}
ABSENT C:\Users\Julien\AppData\Local\{2D4000AD-FBB1-45F3-B408-42A860BBCC58}
ABSENT C:\Users\Julien\AppData\Local\{3E9E2A52-4F63-41A8-9456-5F465F38C04A}
ABSENT C:\Users\Julien\AppData\Local\{419DB758-78DB-46ED-AE66-F6F0F8CF72A0}
ABSENT C:\Users\Julien\AppData\Local\{4425138B-2DBD-4697-8CDD-8351BC5D491F}
ABSENT C:\Users\Julien\AppData\Local\{54F70B38-CCF1-49FB-9DB9-1EBD8D5B016B}
ABSENT C:\Users\Julien\AppData\Local\{55F3CACE-C852-4C63-8B13-D82E80B0615E}
ABSENT C:\Users\Julien\AppData\Local\{5B6570A3-6DAF-4324-8FB9-F8DB9EB0DBE6}
ABSENT C:\Users\Julien\AppData\Local\{5CFA04C7-B979-4084-BAB0-7FB7532A14F0}
ABSENT C:\Users\Julien\AppData\Local\{6EB733D2-0684-476C-9B18-B74EF7729979}
ABSENT C:\Users\Julien\AppData\Local\{753A1C48-5453-4970-BC8D-D5DC6255E5A0}
ABSENT C:\Users\Julien\AppData\Local\{7A271808-7F29-4BC7-8CB8-9D0C73EB7CF3}
ABSENT C:\Users\Julien\AppData\Local\{86A8FBD4-E840-4C53-8E69-CEAFC0FC87BD}
ABSENT C:\Users\Julien\AppData\Local\{927EDBEE-91C3-4CEB-89B9-C2379759AD13}
ABSENT C:\Users\Julien\AppData\Local\{9CA91A77-92AD-4800-9ED9-A701FF609F31}
ABSENT C:\Users\Julien\AppData\Local\{A3B3E2CC-0411-4A92-9BB3-A0D37CEB9B5D}
ABSENT C:\Users\Julien\AppData\Local\{A3F65B87-8246-4F22-A866-3B3ACA947CC7}
ABSENT C:\Users\Julien\AppData\Local\{A77CAE94-6296-4587-8436-389722A425AC}
ABSENT C:\Users\Julien\AppData\Local\{B8C92649-3BA3-415A-B56D-F846E3AC55A7}
ABSENT C:\Users\Julien\AppData\Local\{B96C54CB-40E9-490D-991F-AB16C1ECC44C}
ABSENT C:\Users\Julien\AppData\Local\{BBFDE5AE-C8C2-4FD0-B784-6074EE7D2DBA}
ABSENT C:\Users\Julien\AppData\Local\{BF02FA20-F501-4EE7-AA80-DCE62084E0E6}
ABSENT C:\Users\Julien\AppData\Local\{C0FF24A2-55AF-4BA3-A0C2-45BCF70390E1}
ABSENT C:\Users\Julien\AppData\Local\{C811F259-0991-40F2-AF4D-C72C918BCC09}
ABSENT C:\Users\Julien\AppData\Local\{CC379AAC-186C-4832-AF1B-949193F3C159}
ABSENT C:\Users\Julien\AppData\Local\{D7CE682E-D123-4B5D-87D1-40EB51EE3C62}
ABSENT C:\Users\Julien\AppData\Local\{E7FE47F9-2C32-440D-8ABC-FFE854307FE8}
ABSENT C:\Users\Julien\AppData\Local\{F7AA5219-DE0D-4B30-842B-8074F26327FF}
ABSENT C:\Program Files (x86)\Spybot - Search & Destroy
SUPPRIME Temporaires Windows: : 2
SUPPRIME Flash Cookies: 1

========== Fichier(s) ==========
ABSENT Folder/File: c:\users\julien\appdata\local\microsoft\windows\temporary internet files\content.ie5\0booicxw\netfx64
SUPPRIME Temporaires Windows: : 1
SUPPRIME Flash Cookies: 0

========== Tache planifiée ==========
ABSENT Task: {0086AFED-12E8-47D6-8D4B-5B116A1AE98C}
ABSENT Task: {2A58B231-AB1A-4061-8C46-D7ABC5614256}
ABSENT Task: {2EC5840C-C44C-466E-AF62-5AE33E802B03}
ABSENT Task: {5956C2CB-AA39-4F5B-9A16-677E0E04A6C3}


========== Récapitulatif ==========
1 : Clé(s) du Registre
4 : Valeur(s) du Registre
42 : Dossier(s)
3 : Fichier(s)
2 : Préférences navigateur
4 : Tache planifiée


End of clean in 00mn 02s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 13/05/2012 20:54:33 [7279]
C:\ZHP\ZHPFix[R2].txt - 13/05/2012 20:57:53 [4736]
C:\ZHP\ZHPFix[R3].txt - 13/05/2012 20:59:44 [5278]
C:\ZHP\ZHPFix[R4].txt - 13/05/2012 21:02:22 [5330]
C:\ZHP\ZHPFix[R5].txt - 13/05/2012 21:04:55 [4940]
C:\ZHP\ZHPFix[R6].txt - 13/05/2012 21:12:43 [5434]
C:\ZHP\ZHPFix[R7].txt - 13/05/2012 22:14:17 [4944]

A+

Re,

Oui j'ai recommencé plusieurs fois en effet ; )

Voici enfin le rapport:

Rapport de ZHPFix 1.12.3378 par Nicolas Coolman, Update du 10/01/2011
Fichier d'export Registre :
Run by Julien at 13/05/2012 22:35:01
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Web site : http://nicolascoolman.skyrock.com/

========== Dossier(s) ==========
ABSENT C:\ProgramData\C__Users_Julien_AppData_Local_Temp_Rar$EX11.009_Real Hide IP v4.0.6.8_Crack_RealHideIP.exe
ABSENT C:\ProgramData\C__Users_Julien_AppData_Local_Temp_Rar$EX16.680_Real Hide IP v4.0.6.8_Crack_RealHideIP.exe


========== Récapitulatif ==========
2 : Dossier(s)


End of clean in 00mn 00s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 13/05/2012 20:54:33 [7279]
C:\ZHP\ZHPFix[R2].txt - 13/05/2012 20:57:53 [4736]
C:\ZHP\ZHPFix[R3].txt - 13/05/2012 20:59:44 [5278]
C:\ZHP\ZHPFix[R4].txt - 13/05/2012 21:02:22 [5330]
C:\ZHP\ZHPFix[R5].txt - 13/05/2012 21:04:55 [4940]
C:\ZHP\ZHPFix[R6].txt - 13/05/2012 21:12:43 [5434]
C:\ZHP\ZHPFix[R7].txt - 13/05/2012 21:14:17 [4996]
C:\ZHP\ZHPFix[R8].txt - 13/05/2012 22:35:01 [1090]

A+

Re,

Voici le rapport demandé:

# DelFix v8.8 - Rapport créé le 14/05/2012 à 17:52:06
# Mis à jour le 12/02/12 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : Julien - JULIEN-TOSH (Administrateur)
# Exécuté depuis : C:\Users\Julien\Downloads\delfix.exe
# Option [Suppression]


~~~~~~ Dossiers(s) ~~~~~~

Supprimé : C:\Qoobox
Supprimé : C:\ZHP
Supprimé : C:\Program Files (x86)\Trend Micro\Hijackthis

~~~~~~ Fichier(s) ~~~~~~

Supprimé : C:\AdwCleaner[S1].txt
Supprimé : C:\ComboFix.txt
Supprimé : C:\Users\Julien\Desktop\ComboFix.exe
Supprimé : C:\Users\Julien\Desktop\HiJackThis.lnk
Supprimé : C:\Users\Julien\Desktop\hijackthis.log
Supprimé : C:\Users\Julien\Desktop\ZHPDiag.txt
Supprimé : C:\Users\Julien\Desktop\ZHPFixReport.txt
Supprimé : C:\Users\Julien\Downloads\adwcleaner.exe
Supprimé : C:\Users\Julien\Downloads\Defogger.exe
Supprimé : C:\Users\Julien\Downloads\defogger_enable.log
Supprimé : C:\Users\Julien\Downloads\HijackThis.msi
Supprimé : C:\Users\Julien\Downloads\hijackthis_telechargement_01net.exe
Supprimé : C:\Users\Julien\Downloads\ZHPFix.exe
Supprimé : C:\Users\Public\Desktop\ZHPFix.lnk
Supprimé : C:\Windows\grep.exe
Supprimé : C:\Windows\PEV.exe
Supprimé : C:\Windows\NIRCMD.exe
Supprimé : C:\Windows\MBR.exe
Supprimé : C:\Windows\SED.exe
Supprimé : C:\Windows\SWREG.exe
Supprimé : C:\Windows\SWSC.exe
Supprimé : C:\Windows\SWXCACLS.exe
Supprimé : C:\Windows\Zip.exe

~~~~~~ Registre ~~~~~~

Clé Supprimée : HKLM\SOFTWARE\AdwCleaner
Clé Supprimée : HKLM\SOFTWARE\Swearware
Clé Supprimée : HKLM\SOFTWARE\TrendMicro\Hijackthis
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Hijackthis
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\HijackThis.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe

~~~~~~ Autres ~~~~~~

-> Prefetch Vidé

*************************

DelFix[S1].txt - [1962 octets] - [14/05/2012 17:52:06]

########## EOF - C:\DelFix[S1].txt - [2086 octets] ##########

A+

Ok je vais faire ça.
Merci encore pour ton aide.
J'aurai peut-être des questions mais je te les enverrai en message perso.

Bonne soirée.

De rien :-)

J'aurai peut-être des questions mais je te les enverrai en message perso. 

Sans problèmes!

Bonne soirée