Forums Zebulon.fr: [Résolu] Virus GEMA - Forums Zebulon.fr

Bonjour,

J'ai chopé un virus qui m'empêche d'avoir accès à mon bureau aprt en mode sans échec. Une page s'ouvre avec la fameuse gendarmerie qui m'en veux... Je suis parti en vacance, parlé via skype avec ma copine et quelques heures après sans pouvoir fermer skype le PC s'est rallumé avec cette page de la police.
J'ai essayé avec malwarebytes il me détecte quelque chose, l'efface mais le redétecte à chaque fois.


Voici le rapport de Hijackthis:



Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:38:20, on 14/06/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
C:\Windows\syswow64\cmd.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Hotmail.fr, Messenger, Skype, Actualité, Sport, People, Femmes - MSN France
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Aide à la navigation SFR - {0F6E720A-1A6B-40E1-A294-1D4D19F156C8} - C:\Program Files (x86)\SFR\Kit\SFRNavErrorHelper.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [SPIRunE] Rundll32 SPIRunE.dll,RunDLLEntry
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [VquqNcaFoRB.exe] C:\ProgramData\VquqNcaFoRB.exe
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKCU\..\Run: [CreativeTaskScheduler] "C:\Program Files (x86)\Creative\Shared Files\CTSched.exe" /logon
O4 - HKCU\..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKCU\..\Run: [MobileDocuments] C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
O4 - HKCU\..\Run: [] C:\Users\Christophe\AppData\Local\Temp\k8h0pp.exe
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_2_202_235_Plugin.exe -update plugin
O4 - HKUS\S-1-5-21-558746396-2105712398-235109265-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-558746396-2105712398-235109265-1003\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: AVer HID Receiver.lnk = C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
O4 - Global Startup: AVerQuick.lnk = C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
O4 - Global Startup: ButtonManager.lnk = ?
O4 - Global Startup: Magic-i.lnk = C:\Program Files (x86)\ArcSoft\Magic-i 3\Magic-i.exe
O4 - Global Startup: NewShortcut1.lnk = ?
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.ad...Plus/1.6/gp.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creat...15112/CTPID.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: @appmgmts.dll,-3250 (AppMgmt) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (AudioSrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: AVerRemote - AVerMedia - C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
O23 - Service: AVerScheduleService - Unknown owner - C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Creative ALchemy AL6 Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\cscsvc.dll,-200 (CscService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe
O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe
O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: MgiSvr - ArcSoft, Inc. - C:\Program Files (x86)\ArcSoft\Magic-i 3\uMgiSvr.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe
O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\netprofm.dll,-202 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\peerdistsvc.dll,-9000 (PeerDistSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\sysWow64\perfhost.exe,-2 (PerfHost) - Unknown owner - C:\Windows\SysWow64\perfhost.exe
O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\ipnathlp.dll,-106 (SharedAccess) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppuinotify.dll,-103 (sppuinotify) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\StorSvc.dll,-100 (StorSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Safety Settings Service (swmidi) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\themeservice.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\umrdp.dll,-1000 (UmRdpService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe
O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\Windows\system32\svchost.exe

--
End of file - 23746 bytes



Merci d'avance, cordialement.

Ce message a été modifié par sytchov - 20 juin 2012 - 12:09 .

Bonsoir

Fait ceci s.t.p en mode sans échec.
Télécharger sur le bureau<< RogueKiller >> (by tigzy)
Quitter tous les programmes
Lancer RogueKiller.exe.
Attendre que le Prescan ait fini ...
Cliquer sur Scan. Cliquer sur Rapport et copier-coller le contenu du notepad
Cliquer sur Suppression. Cliquer sur Rapport et copier-coller le contenu du notepad
Puis aussitôt passe MalwaresBytes.

Ensuite ceci.
Télécharges << ZHPDiag>> (de Nicolas Coolman)

dezzipes le fichier sur ton bureau...
Fais un clic-droit sur l'icône ZHPDiag .exe et choisis "exécuter en tant qu'administrateur".


L'installation va créer raccourcis (ZHPDiag et ZHPFix et MBRchek) sur ton bureau




A la fin de l'installation ZHPDiag va se lancer....

Cliques sur l'icône "Options" (image du tournevis) et coches toutes les options.
Cliques sur "Lancer le diagnostique" (image de la loupe) et patiente...

A la fin du scan cliques sur l'icône "sauvegarder le fichier sous" (image de la disquette bleu) et enregistre le rapport sur ton bureau.

Mets le rapport ici car il prend bien de la place.
Cliquez ici.
ou la
Accueil de Cjoint.com

Ce message a été modifié par bernard53 - 14 juin 2012 - 05:35 .

rapport de roguekiller:

RogueKiller V7.5.4 [07/06/2012] par Tigzy
mail: tigzyRK<at>gmail<dot>com
Remontees: [RogueKiller] Remontées (1/54)
Blog: tigzy-RK

Systeme d'exploitation: Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Demarrage :
Utilisateur: Christophe [Droits d'admin]
Mode: Suppression -- Date: 14/06/2012 18:55:29

¤¤¤ Processus malicieux: 0 ¤¤¤

¤¤¤ Entrees de registre: 443 ¤¤¤
[Rans.Gendarm] HKCU\[...]\Run : (C:\Users\Christophe\AppData\Local\Temp\k8h0pp.exe) -> DELETED
[SUSP PATH] HKLM\[...]\Wow6432Node\Run : VquqNcaFoRB.exe (C:\ProgramData\VquqNcaFoRB.exe) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKCU\[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[SUSP PATH] HKUS\S-1-5-21-558746396-2105712398-235109265-1000[...]\Winlogon : Shell (C:\Users\Christophe\AppData\Local\d92096e5\X) -> DELETED
[HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> REPLACED (2)
[HJ] HKLM\[...]\System : EnableLUA (0) -> REPLACED (1)
[WallPP] HKCU\[...]\Desktop : Wallpaper () -> REPLACED (C:\Users\Christophe\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg)
[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

¤¤¤ Driver: [NON CHARGE] ¤¤¤

¤¤¤ Infection : Rans.Gendarm|Root.MBR|ZeroAccess ¤¤¤
[ZeroAccess] sys32\consrv.dll present!

¤¤¤ Fichier HOSTS: ¤¤¤


¤¤¤ MBR Verif: ¤¤¤

+++++ PhysicalDrive0: SAMSUNG HD103SJ ATA Device +++++
--- User ---
[MBR] 114c4428f64c472397fd1babf8450773
[BSP] 0edee093aff9cfd6e440c539ca0f0fb9 : Windows 7 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 953758 Mo
User = LL1 ... OK!
User != LL2 ... KO!
--- LL2 ---
[MBR] 6ac1bdabde7b265f21ca84799170c88f
[BSP] 0edee093aff9cfd6e440c539ca0f0fb9 : Windows 7 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 953758 Mo
2 - [ACTIVE] NTFS (0x17) [HIDDEN!] Offset (sectors): 1953521664 | Size: 1 Mo

Termine : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt



rapport de ZHP:

Cliquez ici.


Meri beaucoup pour l'aide!

ok fait ceci mais par précaution ce virus est tenace donc sauvegarde bien tes données perso.

dans cer ordre s.t.p
Rends toi a cette page et télécharge Kaspersky Windows Unlocker
et passe cet outil.
Laisse ton pc connecté a internet car cet outil te demandera a se mettre à jour donc acceptes.
http://www.malekal.c...lice-nationale/


Ensuite ceci.


* Copie le tout le texte présent dans l'encadré ci-dessous (tu le sélectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C)

Citation

Puis Lance ZHPFix depuis le raccourci du bureau.

Clique sur l'icone représentant la lettre H (« coller les lignes Helper »)
- Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes
- Clique sur le bouton « GO » pour lancer le nettoyage,
- Copie/colle la totalité du rapport dans ta prochaine réponse

-> laisse travailler l'outil et ne touche à rien ...

Une fois terminée, un nouveau rapport s'affiche : copie/colle le contenu de ce dernier dans ta prochaine réponse ...

(ce rapport est en outre sauvegardé dans ce dossier > C:\Program files\ZHPDiag\ZHPFixReport.txt)

Important : s'il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le de suite !.

Puis: Télécharge AdwCleaner ( d'Xplode ) sur ton bureau.
Téléchargements - Outils de Xplode - AdwCleaner

Lance le, clique sur [Suppression]puis patiente le temps du scan.
Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse.

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt


Donne moi des nouvelles après cela s.t.p

Ce message a été modifié par bernard53 - 14 juin 2012 - 07:01 .

Désolé mais j'arrive pas à trouver le lien de téléchargement de kapersky

Je crois que c'est bon il faut suivre ce tuto?

Malekal's forum &bull; Kaspersky Live CD et Windows Unlocker : Tutorial Antivirus

moi j'ai utiliser la commande windowsunlocker dans une fenêtre du terminal.

J'ai redémarré le PC, j'ai accès au bureau nickel, j'ai suivi le tuto pour kapersky sauf que je n'arrive pas à le lancer en usb Jai téléchargé Kaspersky Rescue2Usb tout m'a l'air bon, sais tu
le lancer?

Prends le fichier .ISO pour cd et non pour clé usb.
N"oublies que si tu prends l'option USB il faut que ton pc soit compatible dans cette option de boot
PS tu as retrouvé ton bureau donc normalement pas besoin de passer l'outil Kasperky.
Passe a la suite au besoin si aucune détection est faite.

Ce message a été modifié par bernard53 - 14 juin 2012 - 08:41 .

Rapport de ZHPFix:

Rapport de ZHPFix 1.2.06 par Nicolas Coolman, Update du 17/05/2012
Fichier d'export Registre :
Run by Christophe at 14/06/2012 22:00:25
Windows 7 Business Edition, 64-bit Service Pack 1 (Build 7601)
Web site : ZHPFix Fix de rapport
Web site : Blog de NicolasCoolman - ZebHelpProcess - Skyrock.com

========== Logiciel(s) ==========
ABSENT Software Key: {26A24AE4-039D-4CA4-87B4-2F83216020F0}
ABSENT Software Key: {26A24AE4-039D-4CA4-87B4-2F83216020FF}
ABSENT Software Key: {86D4B82A-ABED-442A-BE86-96357B70F4FE}

========== Clé(s) du Registre ==========
SUPPRIME Key*: HKCU\Software\AppDataLow\Software\Conduit
SUPPRIME Key*: HKCU\Software\AppDataLow\Software\PriceGong
SUPPRIME Key*: HKCU\Software\AppDataLow\Software\ShopperReports3
SUPPRIME Key*: HKCU\Software\AppDataLow\Software\Softonic_France
ABSENT Key: HKLM\Software\AskToolbar
ABSENT Key: HKLM\Software\Iminent
ABSENT Key: HKLM\Software\MetaStream
ABSENT Key: HKLM\Software\Softonic_France
SUPPRIME Key*: SearchScopes :{63525819-C279-4725-B934-B560EE26FDBE}

========== Valeur(s) du Registre ==========
ABSENT Value Key: Application
ABSENT Valeur Standard Profile: FirewallRaz :
ABSENT Valeur Domain Profile: FirewallRaz :
Aucune valeur présente dans la clé d'exception du registre (FirewallRaz)

========== Préférences navigateur ==========
SUPPRIME Mozilla Pref: user_pref("CT2542115.AboutPrivacyUrl", "http://www.conduit.com/privacy/Default.aspx");
SUPPRIME Mozilla Pref: user_pref("CT2542115.CTID", "CT2542115");
SUPPRIME Mozilla Pref: user_pref("CT2542115.CurrentServerDate", "25-7-2010");
SUPPRIME Mozilla Pref: user_pref("CT2542115.DialogsAlignMode", "LTR");
SUPPRIME Mozilla Pref: user_pref("CT2542115.EMailNotifierPollDate", "Sun Jul 25 2010 00:55:56 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedLastCount3702671119025834822", 350);
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedPollDate129212453356189313", "Sun Jul 25 2010 00:55:55 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedPollDate129212453356189319", "Sun Jul 25 2010 00:55:55 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedPollDate129212453356189325", "Sun Jul 25 2010 00:55:55 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedPollDate129212453356189331", "Sun Jul 25 2010 00:55:55 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedPollDate129212453356189337", "Sun Jul 25 2010 00:55:55 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedPollDate129212453356189343", "Sun Jul 25 2010 00:55:55 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedPollDate129212453356189349", "Sun Jul 25 2010 00:55:55 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedPollDate129212453356189355", "Sun Jul 25 2010 00:55:55 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedPollDate129212453356189361", "Sun Jul 25 2010 00:55:55 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedPollDate129212453356189367", "Sun Jul 25 2010 00:55:56 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedPollDate129212453356189373", "Sun Jul 25 2010 00:55:56 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedPollDate129212453356189379", "Sun Jul 25 2010 00:55:56 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedPollDate129212453356189385", "Sun Jul 25 2010 00:55:56 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedPollDate129212453356189391", "Sun Jul 25 2010 00:55:56 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedPollDate129212453356189397", "Sun Jul 25 2010 00:55:56 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedPollDate129212453356189403", "Sun Jul 25 2010 00:55:56 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedPollDate129212453356189409", "Sun Jul 25 2010 00:55:56 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedPollDate129212453356189415", "Sun Jul 25 2010 00:55:56 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedPollDate129212453356189421", "Sun Jul 25 2010 00:55:56 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedPollDate129212453356189427", "Sun Jul 25 2010 00:55:57 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedPollDate129212453356189433", "Sun Jul 25 2010 00:55:57 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedTTL129212453356189313", 30);
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedTTL129212453356189319", 2);
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedTTL129212453356189325", 2);
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedTTL129212453356189337", 2);
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedTTL129212453356189343", 30);
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedTTL129212453356189361", 5);
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedTTL129212453356189367", 5);
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedTTL129212453356189373", 5);
SUPPRIME Mozilla Pref: user_pref("CT2542115.FeedTTL129212453356189391", 5);
SUPPRIME Mozilla Pref: user_pref("CT2542115.FirstServerDate", "25-7-2010");
SUPPRIME Mozilla Pref: user_pref("CT2542115.FirstTime", true);
SUPPRIME Mozilla Pref: user_pref("CT2542115.FirstTimeFF3", true);
SUPPRIME Mozilla Pref: user_pref("CT2542115.FixPageNotFoundErrors", true);
SUPPRIME Mozilla Pref: user_pref("CT2542115.GroupingServerCheckInterval", 1440);
SUPPRIME Mozilla Pref: user_pref("CT2542115.GroupingServiceUrl", "http://grouping.services.conduit.com/");
SUPPRIME Mozilla Pref: user_pref("CT2542115.Initialize", true);
SUPPRIME Mozilla Pref: user_pref("CT2542115.InitializeCommonPrefs", true);
SUPPRIME Mozilla Pref: user_pref("CT2542115.InstalledDate", "Sun Jul 25 2010 00:55:54 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.InvalidateCache", false);
SUPPRIME Mozilla Pref: user_pref("CT2542115.IsGrouping", false);
SUPPRIME Mozilla Pref: user_pref("CT2542115.IsMulticommunity", false);
SUPPRIME Mozilla Pref: user_pref("CT2542115.IsOpenThankYouPage", false);
SUPPRIME Mozilla Pref: user_pref("CT2542115.IsOpenUninstallPage", true);
SUPPRIME Mozilla Pref: user_pref("CT2542115.LanguagePackLastCheckTime", "Sun Jul 25 2010 00:55:56 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.LanguagePackReloadIntervalMM", 1440);
SUPPRIME Mozilla Pref: user_pref("CT2542115.LanguagePackServiceUrl", "http://translation.users.conduit.com/Translation.ashx");
SUPPRIME Mozilla Pref: user_pref("CT2542115.LastLogin_2.5.8.6", "Sun Jul 25 2010 00:55:55 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.LatestVersion", "2.1.0.18");
SUPPRIME Mozilla Pref: user_pref("CT2542115.Locale", "fr-fr");
SUPPRIME Mozilla Pref: user_pref("CT2542115.LoginCache", 4);
SUPPRIME Mozilla Pref: user_pref("CT2542115.MCDetectTooltipHeight", "83");
SUPPRIME Mozilla Pref: user_pref("CT2542115.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
SUPPRIME Mozilla Pref: user_pref("CT2542115.MCDetectTooltipWidth", "295");
SUPPRIME Mozilla Pref: user_pref("CT2542115.RadioIsPodcast", false);
SUPPRIME Mozilla Pref: user_pref("CT2542115.RadioLastCheckTime", "Sun Jul 25 2010 00:55:55 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.RadioLastUpdateIPServer", "3");
SUPPRIME Mozilla Pref: user_pref("CT2542115.RadioLastUpdateServer", "3");
SUPPRIME Mozilla Pref: user_pref("CT2542115.RadioMediaID", "9962");
SUPPRIME Mozilla Pref: user_pref("CT2542115.RadioMediaType", "Media Player");
SUPPRIME Mozilla Pref: user_pref("CT2542115.RadioMenuSelectedID", "EBRadioMenu_CT25421159962");
SUPPRIME Mozilla Pref: user_pref("CT2542115.RadioStationName", "California%20Rock");
SUPPRIME Mozilla Pref: user_pref("CT2542115.RadioStationURL", "http://feedlive.net/california.asx");
SUPPRIME Mozilla Pref: user_pref("CT2542115.SHRINK_TOOLBAR", 1);
SUPPRIME Mozilla Pref: user_pref("CT2542115.SearchEngine", "Recherche||http://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2542115&octid=EB_O[...]
SUPPRIME Mozilla Pref: user_pref("CT2542115.SearchFromAddressBarIsInit", true);
SUPPRIME Mozilla Pref: user_pref("CT2542115.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2542115&q=");
SUPPRIME Mozilla Pref: user_pref("CT2542115.SearchInNewTabEnabled", true);
SUPPRIME Mozilla Pref: user_pref("CT2542115.SearchInNewTabIntervalMM", 1440);
SUPPRIME Mozilla Pref: user_pref("CT2542115.SearchInNewTabLastCheckTime", "Sun Jul 25 2010 00:55:55 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.SearchInNewTabServiceUrl", "http://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
SUPPRIME Mozilla Pref: user_pref("CT2542115.SearchInNewTabUsageUrl", "http://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_T[...]
SUPPRIME Mozilla Pref: user_pref("CT2542115.SettingsCheckIntervalMin", 120);
SUPPRIME Mozilla Pref: user_pref("CT2542115.SettingsLastCheckTime", "Sun Jul 25 2010 00:55:53 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.SettingsLastUpdate", "1279444348");
SUPPRIME Mozilla Pref: user_pref("CT2542115.ThirdPartyComponentsInterval", 504);
SUPPRIME Mozilla Pref: user_pref("CT2542115.ThirdPartyComponentsLastCheck", "Sun Jul 25 2010 00:55:53 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.ThirdPartyComponentsLastUpdate", "1279444348");
SUPPRIME Mozilla Pref: user_pref("CT2542115.TrusteLinkUrl", "http://www.truste.org/pvr.php?page=validate&softwareProgramId=101&sealid=112");
SUPPRIME Mozilla Pref: user_pref("CT2542115.UserID", "UN56093133060332279");
SUPPRIME Mozilla Pref: user_pref("CT2542115.ValidationData_Toolbar", 0);
SUPPRIME Mozilla Pref: user_pref("CT2542115.WeatherNetwork", "");
SUPPRIME Mozilla Pref: user_pref("CT2542115.WeatherPollDate", "Sun Jul 25 2010 00:55:55 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("CT2542115.WeatherUnit", "C");
SUPPRIME Mozilla Pref: user_pref("CT2542115.alertChannelId", "935078");
SUPPRIME Mozilla Pref: user_pref("CT2542115.clientLogIsEnabled", true);
SUPPRIME Mozilla Pref: user_pref("CT2542115.clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
SUPPRIME Mozilla Pref: user_pref("CT2542115.myStuffEnabled", true);
SUPPRIME Mozilla Pref: user_pref("CT2542115.myStuffPublihserMinWidth", 400);
SUPPRIME Mozilla Pref: user_pref("CT2542115.myStuffSearchUrl", "http://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&oct[...]
SUPPRIME Mozilla Pref: user_pref("CT2542115.myStuffServiceIntervalMM", 1440);
SUPPRIME Mozilla Pref: user_pref("CT2542115.myStuffServiceUrl", "http://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE[...]
SUPPRIME Mozilla Pref: user_pref("CT2542115.uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.ToolbarsList", "CT2542115");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.ToolbarsList2", "CT2542115");
SUPPRIME Mozilla Pref: user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sun Jul 25 2010 00:55:55 GMT+0200");
SUPPRIME Mozilla Pref: user_pref("extensions.asktb.cbid", "NV
SUPPRIME Mozilla Pref: user_pref("extensions.asktb.dtid", "YYYYYYYYFR
SUPPRIME Mozilla Pref: user_pref("extensions.asktb.first-launch-url", "http://127.0.0.1:895/config/?action=connect&lang=fre&afd=1293055777&afc=C480E02551[...]
SUPPRIME Mozilla Pref: user_pref("extensions.asktb.fresh-install", false);
SUPPRIME Mozilla Pref: user_pref("extensions.asktb.l", "dis
SUPPRIME Mozilla Pref: user_pref("extensions.asktb.last-config-req", "1294607561789
SUPPRIME Mozilla Pref: user_pref("extensions.asktb.locale", "fr_FR
SUPPRIME Mozilla Pref: user_pref("extensions.asktb.o", "15666
SUPPRIME Mozilla Pref: user_pref("extensions.asktb.overlay-reloaded-using-restart", true);
SUPPRIME Mozilla Pref: user_pref("extensions.asktb.qsrc", "2871
SUPPRIME Mozilla Pref: user_pref("extensions.asktb.r", "2");
SUPPRIME Mozilla Pref: user_pref("extensions.asktb.search-suggestions-enabled", true);

========== Dossier(s) ==========
SUPPRIME Reboot Folder**: C:\Program Files (x86)\Conduit
SUPPRIME Reboot Folder**: C:\Program Files (x86)\CrazyLoader
ABSENT C:\Program Files (x86)\Iminent
SUPPRIME Folder: C:\Users\Christophe\AppData\Roaming\CrazyLoader
SUPPRIME Folder: C:\Users\Christophe\AppData\Roaming\teamspeak2
SUPPRIME Folder: C:\Users\Christophe\AppData\Local\crazyloader Air
SUPPRIME Folder: C:\Users\Christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CrazyLoader
SUPPRIME Flash Cookies:
SUPPRIME Temporaires Windows:

========== Fichier(s) ==========
SUPPRIME Flash Cookies:
SUPPRIME Temporaires Windows:

========== Tache planifiée ==========
SUPPRIME Task: Scheduled Update for Ask Toolbar
SUPPRIME Task: {5E1238AF-6253-47D3-841A-C49F902D98AF}
SUPPRIME Task: {8FAB2E51-9386-481F-934A-69E9948F5087}
SUPPRIME Task: {9B5E2FE5-7B55-4196-8AEB-4295F9412E56}
SUPPRIME Task: {FD657B59-C17F-4BE7-B09D-A1DF9959D04B}

========== Autre ==========
NON TRAITE [HKCU\Software\AppDataLow\AskToolbarIn
NON TRAITE [HKCU\Software\AppDataLow\Software\AskToolba
NON TRAITE [HKCU\Software\AppDataLow\Toolbar


========== Récapitulatif ==========
9 : Clé(s) du Registre
4 : Valeur(s) du Registre
9 : Dossier(s)
2 : Fichier(s)
3 : Logiciel(s)
115 : Préférences navigateur
5 : Tache planifiée
3 : Autre


End of clean in 00mn 47s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 14/06/2012 22:00:25 [13619]




Rapport de Adwcleaner:

# AdwCleaner v1.609 - Rapport créé le 14/06/2012 à 22:22:48
# Mis à jour le 10/06/2012 par Xplode
# Système d'exploitation : Windows 7 Professional Service Pack 1 (64 bits)
# Nom d'utilisateur : Christophe - CHRIS
# Exécuté depuis : C:\Users\Christophe\Desktop\adwcleaner.exe
# Option [Suppression]


***** [Services] *****


***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Users\CHRIST~1\AppData\Local\Temp\Iminent
Dossier Supprimé : C:\Users\Christophe\AppData\LocalLow\AskToolbar
Dossier Supprimé : C:\Users\Christophe\AppData\LocalLow\Conduit
Dossier Supprimé : C:\Users\Christophe\AppData\LocalLow\PriceGong
Dossier Supprimé : C:\Users\Christophe\AppData\LocalLow\ShopperReports3
Dossier Supprimé : C:\Users\Christophe\AppData\LocalLow\Toolbar4
Dossier Supprimé : C:\Users\Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\mghaulj5.default\Conduit
Dossier Supprimé : C:\ProgramData\Viewpoint
Dossier Supprimé : C:\Program Files (x86)\Conduit
Dossier Supprimé : C:\Program Files (x86)\CrazyLoader
Dossier Supprimé : C:\Program Files (x86)\Viewpoint
Dossier Supprimé : C:\Program Files (x86)\vShare.tv plugin
Dossier Supprimé : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Fichier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navigateur OfferBox.lnk
Fichier Supprimé : C:\Program Files (x86)\Mozilla Firefox\Plugins\npvsharetvplg.dll

***** [Registre] *****

Clé Supprimée : HKCU\Software\Ask.com
Clé Supprimée : HKCU\Software\Ask.com.tmp
Clé Supprimée : HKCU\Software\Nosibay
Clé Supprimée : HKCU\Software\Softonic
Clé Supprimée : HKCU\Software\Spointer
Clé Supprimée : HKCU\Software\StartSearch
Clé Supprimée : HKCU\Software\AppDataLow\AskToolbarInfo
Clé Supprimée : HKCU\Software\AppDataLow\Toolbar
Clé Supprimée : HKCU\Software\AppDataLow\Software\AskToolbar
Clé Supprimée : HKCU\Software\JavaSoft\Prefs\crazyloader
Clé Supprimée : HKLM\SOFTWARE\AskToolbar
Clé Supprimée : HKLM\SOFTWARE\Conduit
Clé Supprimée : HKLM\SOFTWARE\Iminent
Clé Supprimée : HKLM\SOFTWARE\MetaStream
Clé Supprimée : HKLM\SOFTWARE\Viewpoint
Clé Supprimée : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl
Clé Supprimée : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl.1
Clé Supprimée : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary
Clé Supprimée : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary.1
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@viewpoint.com/VMP
[x64] Clé Supprimée : HKLM\SOFTWARE\Software
[x64] Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF

***** [Registre - GUID] *****

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B32966A2-F7C2-4362-A6CF-399EC8B44110}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{79D60450-56C5-4A8C-9321-6D5BC2A81E5A}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{99C22A61-21BA-4F81-85FF-CDC9EB5DB10B}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1BB22D38-A411-4B13-A746-C2A4F4EC7344}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1BB22D38-A411-4B13-A746-C2A4F4EC7344}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{1BB22D38-A411-4B13-A746-C2A4F4EC7344}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3D782BB2-F2A5-11D3-BF4C-000000000000}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
[x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}

***** [Navigateurs] *****

-\\ Internet Explorer v8.0.7601.17514

[OK] Le registre ne contient aucune entrée illégitime.

-\\ Mozilla Firefox v11.0 (fr)

Nom du profil : default
Fichier : C:\Users\Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\mghaulj5.default\prefs.js

Supprimée : /*user_pref("CT2542115.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");*/
Supprimée : /*user_pref("CT2542115.CTID", "CT2542115");*/
Supprimée : /*user_pref("CT2542115.CurrentServerDate", "25-7-2010");*/
Supprimée : /*user_pref("CT2542115.DialogsAlignMode", "LTR");*/
Supprimée : /*user_pref("CT2542115.EMailNotifierPollDate", "Sun Jul 25 2010 00:55:56 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.FeedLastCount3702671119025834822", 350);*/
Supprimée : /*user_pref("CT2542115.FeedPollDate129212453356189313", "Sun Jul 25 2010 00:55:55 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.FeedPollDate129212453356189319", "Sun Jul 25 2010 00:55:55 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.FeedPollDate129212453356189325", "Sun Jul 25 2010 00:55:55 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.FeedPollDate129212453356189331", "Sun Jul 25 2010 00:55:55 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.FeedPollDate129212453356189337", "Sun Jul 25 2010 00:55:55 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.FeedPollDate129212453356189343", "Sun Jul 25 2010 00:55:55 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.FeedPollDate129212453356189349", "Sun Jul 25 2010 00:55:55 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.FeedPollDate129212453356189355", "Sun Jul 25 2010 00:55:55 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.FeedPollDate129212453356189361", "Sun Jul 25 2010 00:55:55 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.FeedPollDate129212453356189367", "Sun Jul 25 2010 00:55:56 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.FeedPollDate129212453356189373", "Sun Jul 25 2010 00:55:56 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.FeedPollDate129212453356189379", "Sun Jul 25 2010 00:55:56 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.FeedPollDate129212453356189385", "Sun Jul 25 2010 00:55:56 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.FeedPollDate129212453356189391", "Sun Jul 25 2010 00:55:56 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.FeedPollDate129212453356189397", "Sun Jul 25 2010 00:55:56 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.FeedPollDate129212453356189403", "Sun Jul 25 2010 00:55:56 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.FeedPollDate129212453356189409", "Sun Jul 25 2010 00:55:56 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.FeedPollDate129212453356189415", "Sun Jul 25 2010 00:55:56 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.FeedPollDate129212453356189421", "Sun Jul 25 2010 00:55:56 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.FeedPollDate129212453356189427", "Sun Jul 25 2010 00:55:57 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.FeedPollDate129212453356189433", "Sun Jul 25 2010 00:55:57 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.FeedTTL129212453356189313", 30);*/
Supprimée : /*user_pref("CT2542115.FeedTTL129212453356189319", 2);*/
Supprimée : /*user_pref("CT2542115.FeedTTL129212453356189325", 2);*/
Supprimée : /*user_pref("CT2542115.FeedTTL129212453356189337", 2);*/
Supprimée : /*user_pref("CT2542115.FeedTTL129212453356189343", 30);*/
Supprimée : /*user_pref("CT2542115.FeedTTL129212453356189361", 5);*/
Supprimée : /*user_pref("CT2542115.FeedTTL129212453356189367", 5);*/
Supprimée : /*user_pref("CT2542115.FeedTTL129212453356189373", 5);*/
Supprimée : /*user_pref("CT2542115.FeedTTL129212453356189391", 5);*/
Supprimée : /*user_pref("CT2542115.FirstServerDate", "25-7-2010");*/
Supprimée : /*user_pref("CT2542115.FirstTime", true);*/
Supprimée : /*user_pref("CT2542115.FirstTimeFF3", true);*/
Supprimée : /*user_pref("CT2542115.FixPageNotFoundErrors", true);*/
Supprimée : /*user_pref("CT2542115.GroupingServerCheckInterval", 1440);*/
Supprimée : /*user_pref("CT2542115.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");*/
Supprimée : /*user_pref("CT2542115.Initialize", true);*/
Supprimée : /*user_pref("CT2542115.InitializeCommonPrefs", true);*/
Supprimée : /*user_pref("CT2542115.InstalledDate", "Sun Jul 25 2010 00:55:54 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.InvalidateCache", false);*/
Supprimée : /*user_pref("CT2542115.IsGrouping", false);*/
Supprimée : /*user_pref("CT2542115.IsMulticommunity", false);*/
Supprimée : /*user_pref("CT2542115.IsOpenThankYouPage", false);*/
Supprimée : /*user_pref("CT2542115.IsOpenUninstallPage", true);*/
Supprimée : /*user_pref("CT2542115.LanguagePackLastCheckTime", "Sun Jul 25 2010 00:55:56 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.LanguagePackReloadIntervalMM", 1440);*/
Supprimée : /*user_pref("CT2542115.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.as[...]
Supprimée : /*user_pref("CT2542115.LastLogin_2.5.8.6", "Sun Jul 25 2010 00:55:55 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.LatestVersion", "2.1.0.18");*/
Supprimée : /*user_pref("CT2542115.Locale", "fr-fr");*/
Supprimée : /*user_pref("CT2542115.LoginCache", 4);*/
Supprimée : /*user_pref("CT2542115.MCDetectTooltipHeight", "83");*/
Supprimée : /*user_pref("CT2542115.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");*/
Supprimée : /*user_pref("CT2542115.MCDetectTooltipWidth", "295");*/
Supprimée : /*user_pref("CT2542115.RadioIsPodcast", false);*/
Supprimée : /*user_pref("CT2542115.RadioLastCheckTime", "Sun Jul 25 2010 00:55:55 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.RadioLastUpdateIPServer", "3");*/
Supprimée : /*user_pref("CT2542115.RadioLastUpdateServer", "3");*/
Supprimée : /*user_pref("CT2542115.RadioMediaID", "9962");*/
Supprimée : /*user_pref("CT2542115.RadioMediaType", "Media Player");*/
Supprimée : /*user_pref("CT2542115.RadioMenuSelectedID", "EBRadioMenu_CT25421159962");*/
Supprimée : /*user_pref("CT2542115.RadioStationName", "California%20Rock");*/
Supprimée : /*user_pref("CT2542115.RadioStationURL", "hxxp://feedlive.net/california.asx");*/
Supprimée : /*user_pref("CT2542115.SHRINK_TOOLBAR", 1);*/
Supprimée : /*user_pref("CT2542115.SearchEngine", "Recherche||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARC[...]
Supprimée : /*user_pref("CT2542115.SearchFromAddressBarIsInit", true);*/
Supprimée : /*user_pref("CT2542115.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2[...]
Supprimée : /*user_pref("CT2542115.SearchInNewTabEnabled", true);*/
Supprimée : /*user_pref("CT2542115.SearchInNewTabIntervalMM", 1440);*/
Supprimée : /*user_pref("CT2542115.SearchInNewTabLastCheckTime", "Sun Jul 25 2010 00:55:55 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB[...]
Supprimée : /*user_pref("CT2542115.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServ[...]
Supprimée : /*user_pref("CT2542115.SettingsCheckIntervalMin", 120);*/
Supprimée : /*user_pref("CT2542115.SettingsLastCheckTime", "Sun Jul 25 2010 00:55:53 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.SettingsLastUpdate", "1279444348");*/
Supprimée : /*user_pref("CT2542115.ThirdPartyComponentsInterval", 504);*/
Supprimée : /*user_pref("CT2542115.ThirdPartyComponentsLastCheck", "Sun Jul 25 2010 00:55:53 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.ThirdPartyComponentsLastUpdate", "1279444348");*/
Supprimée : /*user_pref("CT2542115.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramI[...]
Supprimée : /*user_pref("CT2542115.UserID", "UN56093133060332279");*/
Supprimée : /*user_pref("CT2542115.ValidationData_Toolbar", 0);*/
Supprimée : /*user_pref("CT2542115.WeatherNetwork", "");*/
Supprimée : /*user_pref("CT2542115.WeatherPollDate", "Sun Jul 25 2010 00:55:55 GMT+0200");*/
Supprimée : /*user_pref("CT2542115.WeatherUnit", "C");*/
Supprimée : /*user_pref("CT2542115.alertChannelId", "935078");*/
Supprimée : /*user_pref("CT2542115.clientLogIsEnabled", true);*/
Supprimée : /*user_pref("CT2542115.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.a[...]
Supprimée : /*user_pref("CT2542115.myStuffEnabled", true);*/
Supprimée : /*user_pref("CT2542115.myStuffPublihserMinWidth", 400);*/
Supprimée : /*user_pref("CT2542115.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSource[...]
Supprimée : /*user_pref("CT2542115.myStuffServiceIntervalMM", 1440);*/
Supprimée : /*user_pref("CT2542115.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?[...]
Supprimée : /*user_pref("CT2542115.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/R[...]
Supprimée : /*user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.[...]
Supprimée : /*user_pref("CommunityToolbar.ToolbarsList", "CT2542115");*/
Supprimée : /*user_pref("CommunityToolbar.ToolbarsList2", "CT2542115");*/
Supprimée : /*user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sun Jul 25 2010 00:55:55 GMT+0200");[...]
Supprimée : user_pref("browser.search.defaultengine", "Web Search");
Supprimée : user_pref("browser.search.order.1", "Web Search");
Supprimée : /*user_pref("extensions.asktb.cbid", "NV");*/
Supprimée : user_pref("extensions.asktb.default-channel-url-mask", "hxxp://fr.ask.com/web?q={query}&qsrc={qsrc}&[...]
Supprimée : /*user_pref("extensions.asktb.dtid", "YYYYYYYYFR");*/
Supprimée : /*user_pref("extensions.asktb.first-launch-url", "hxxp://127.0.0.1:895/config/?action=connect&lang=f[...]
Supprimée : /*user_pref("extensions.asktb.fresh-install", false);*/
Supprimée : /*user_pref("extensions.asktb.l", "dis");*/
Supprimée : /*user_pref("extensions.asktb.last-config-req", "1294607561789");*/
Supprimée : /*user_pref("extensions.asktb.locale", "fr_FR");*/
Supprimée : /*user_pref("extensions.asktb.o", "15666");*/
Supprimée : /*user_pref("extensions.asktb.overlay-reloaded-using-restart", true);*/
Supprimée : /*user_pref("extensions.asktb.qsrc", "2871");*/
Supprimée : /*user_pref("extensions.asktb.r", "2");*/
Supprimée : /*user_pref("extensions.asktb.search-suggestions-enabled", true);*/
Supprimée : user_pref("extensions.vshare@toolbar.update.enabled", false);

*************************

AdwCleaner[R1].txt - [29112 octets] - [14/06/2012 22:22:40]
AdwCleaner[S1].txt - [25981 octets] - [14/06/2012 22:22:48]

########## EOF - C:\AdwCleaner[S1].txt - [26110 octets] ##########







Tout m'a l'air nickel, je l'ai redémarré plusieurs fois