MCFIVE

Bonsoir Pear, alors voici : Rapport de ZHPDiag v1.28.132 par Nicolas Coolman, Update du 08/08/2011 Run by tuyen at 09/08/2011 01:05:48 Web site : ZHPDiag Outil de diagnostic ---\\ Web Browser MSIE: Internet Explorer v8.0.7601.17514 MFIE: Mozilla Firefox 5.0 v (Defaut) GCIE: Google Chrome v13.0.782.107 ---\\ Windows Product Information Windows 7 Ultimate Edition, 64-bit Service Pack 1 (Build 7601) Windows Server License Manager Script : OK ~ Windows® 7, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : HYRR2 Windows License : OK ~ Windows Remaining Initializations Number : 3 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ System Information ~ Processor: Intel64 Family 6 Model 15 Stepping 11, GenuineIntel ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 3006 MB (34% free) System Restore: Activé (Enable) System drive C: has 622 GB (66%) free of 931 GB ---\\ Logged in mode ~ Computer Name: TUYEN-PC ~ User Name: tuyen ~ All Users Names: tuyen, HomeGroupUser$, Administrateur, ~ Unselected Option: O45,O61,O62,O65,O66,O82 Logged in as Administrator ---\\ Environnement Variables ~ System Unit : C:\ ~ %AppData% : C:\Users\tuyen\AppData\Roaming\ ~ %Desktop% : C:\Users\tuyen\Desktop\ ~ %Favorites% : C:\Users\tuyen\Favorites\ ~ %LocalAppData% : C:\Users\tuyen\AppData\Local\ ~ %StartMenu% : C:\Users\tuyen\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\system32\ ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 622 Go of 931 Go) D:\ CD-ROM drive (Not Inserted) E:\ Floppy drive, Flash card reader, USB Key (Not Inserted) F:\ Floppy drive, Flash card reader, USB Key (Not Inserted) G:\ Floppy drive, Flash card reader, USB Key (Not Inserted) H:\ Floppy drive, Flash card reader, USB Key (Not Inserted) I:\ Hard drive, Flash drive, Thumb drive (Free 858 Go of 932 Go) J:\ Hard drive, Flash drive, Thumb drive (Free 466 Go of 466 Go) K:\ CD-ROM drive (Free 0 Go of 0 Go) L:\ Hard drive, Flash drive, Thumb drive (Free 293 Go of 931 Go) M:\ Hard drive, Flash drive, Thumb drive (Free 303 Go of 373 Go) N:\ Hard drive, Flash drive, Thumb drive (Free 170 Go of 596 Go) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoStartMenuSubFolder: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoResolveSearch: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoDispScrSavPage: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK ~ Scan Security Center in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.26/04/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808] [MD5.DD81D91FF3B0763C392422865C9AC12E] - (....) (.14/07/2009 - 02:39:31.) -- C:\Windows\system32\rundll32.exe [45568] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\system32\Wininit.exe [129024] [MD5.2DCA688631F71722B0B5E57F526BB2EB] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.16/06/2011 - 23:08:29.) -- C:\Windows\system32\wininet.dll [1188864] [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.21/11/2010 - 04:24:29.) -- C:\Windows\system32\Winlogon.exe [390656] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\drivers\atapi.sys [24128] [MD5.A2F74975097F52A00745F9637451FDD8] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.26/04/2011 - 07:41:34.) -- C:\Windows\system32\drivers\ntfs.sys [1659776] [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/11/2010 - 04:24:16.) -- C:\Windows\system32\sppcomapi.dll [232448] [MD5.0D57D091E06BB1E58E72E5D08479FDDF] - (....) (.21/11/2010 - 07:18:22.) -- C:\Windows\system32\fr-FR\user32.dll.mui [20480] ~ Scan Generic Processes in 00mn 00s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 16/390 ~ Mes musiques (My Musics) : 8/37 ~ Mes Videos (My Videos) : 6/103 ~ Mes Favoris (My Favorites) : 3/27 ~ Mes Documents (My Documents) : 7/58 ~ Mon Bureau (My Desktop) : 1/20 ~ Menu demarrer (Programs) : 7/38 ~ Scan Hidden Files in 00mn 02s ---\\ Processus lancés [MD5.FCA101438DDE0DE9218A34D89475B805] - (.IObit - Advanced SystemCare 3.) -- C:\Program Files (x86)\IObit\Advanced SystemCare 3\AWC.exe [2402512] [MD5.628989FE4B0C7CC2B4E07713BAB51254] - (.Agence-Exclusive - autoupdater.) -- C:\Users\tuyen\AppData\Roaming\Agence-Exclusive\Agence-Exclusive\autoupdater.exe [671360] [MD5.1E12823EB57AAB6403E5246B4187A5F0] - (.BitTorrent, Inc. - µTorrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe [399736] [MD5.D793EBE6F3F89FF6EB9350EFB6B0C3D3] - (.SpeedBit Ltd. - Download Accelerator Plus (DAP).) -- C:\Program Files (x86)\DAP\DAP.exe [2918576] [MD5.0E88FE2F8152F16AD51D96C1197A1014] - (.SpeedBit LTD - Speedbit Video Accelerator.) -- C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAccelerator.exe [2098376] [MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408] [MD5.F3F709C2D49DD6636F4EDE5C2CAE5448] - (.http://www.emule-project.net - eMule.) -- C:\Program Files (x86)\eMule\emule.exe [5758976] [MD5.9D5E8B45BD348DF0882C69EED0E83111] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [281768] [MD5.BAD6BEA0DE1F69C82BDB74378CE0C20A] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [932288] [MD5.8A6ECE22270BD9D4CFD4553E26B5C69A] - (.ScanSoft, Inc. - OCR Aware.) -- C:\Program Files (x86)\ScanSoft\OmniPageSE4.0\OpWareSE4.exe [75304] [MD5.38957E987A4A565D984AE19B315173D1] - (.PcTuto - PcTuto.) -- C:\Program Files (x86)\Agence-Exclusive\pctuto.exe [1035904] [MD5.B0AE5A13FE867567A428A671E98B0EA5] - (.Mozilla Foundation - Pas de description.) -- C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\prism\openvpn-client.exe [119296] [MD5.6C9CD3ECBA6732661C8BBE37A877A2BD] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [924632] [MD5.4486AD32BB05628967695FCA1BADD46E] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [16856] [MD5.A63DC5C2EA944E6657203E0C8EDEAF61] - (.Microsoft Corporation - COM Surrogate.) -- C:\Windows\SysWOW64\DllHost.exe [7168] [MD5.D19225DDCCF349244FDA57D879410644] - (.Speedbit Ltd. - SBUpdate Module.) -- C:\Program Files (x86)\Common Files\Speedbit\SbUpdate\SBUpdate.exe [92320] [MD5.B0FD3872F6958AA93D6A7103AC01852C] - (...) -- C:\Program Files (x86)\VideoLAN\VLC\vlc.exe [108032] [MD5.FBCD94D1397E447D4DD935BA522AA017] - (.TnB Inc. - Magic Copy Application.) -- C:\Users\tuyen\AppData\Local\Temp\Magic Copy\Magic Copy.exe [396288] [MD5.B5B4E81AADFDF95345186A023A99D2E6] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [664576] [MD5.A5BCBAF0477C4869B67E0195AEA4A9CD] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [136360] [MD5.62F7FD637CE42ADDA3748E1B6E8780D2] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [269480] [MD5.8C02B0CC65BEE71124A565062BA77B39] - (...) -- C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\capiws.exe [24064] [MD5.3A86B43C2539B8733C752905FE98AD8B] - (.SpeedBit Ltd. - VideoAcceleratorService.) -- C:\PROGRA~2\SPEEDB~1\VideoAcceleratorService.exe [265928] [MD5.BC65FDC05F8E0EDF25E89F3DCBD2F859] - (...) -- C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\etc\..\core\openvpn.exe [387584] ~ Scan Processes Running in 00mn 01s ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users\tuyen\AppData\Local\Google\Chrome\User Data\Default\Preferences G1 - GCS: Preference [user Data\Default] None G0 - GCSP: Preference [user Data\Default][HomePage] http://search.speedbit.com G2 - GCE: Preference [user Data\Default] [ajamdngclhjbddfmljnipoppjdkdjelj] Le Meilleur Prix v.1.0.4.17483 (Activé) G2 - GCE: Preference [user Data\Default] [ffdcfjdljhbehggjdkdioajnknjcpbjb] Download Accelerator Plus (DAP) v.2.0.7 (Activé) ~ Scan Google Browser in 00mn 00s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) C:\Users\tuyen\AppData\Roaming\Mozilla\Firefox\Profiles\a9mzb9d5.default\prefs.js M3 - MFPP: Plugins - [tuyen] -- C:\Users\tuyen\AppData\Roaming\Mozilla\Firefox\Profiles\a9mzb9d5.default\searchplugins\qrobeit.xml M3 - MFPP: Plugins - [tuyen] -- C:\Users\tuyen\AppData\Roaming\Mozilla\Firefox\Profiles\a9mzb9d5.default\searchplugins\speedbit.xml M0 - MFSP: prefs.js [tuyen - a9mzb9d5.default] http://search.speedbit.com M2 - MFEP: prefs.js [tuyen - a9mzb9d5.default\{3112ca9c-de6d-4884-a869-9855de68056c}] [] Google Toolbar for Firefox v7.1.20110512W (.Google Inc..) M2 - MFEP: prefs.js [tuyen - a9mzb9d5.default\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}] [dwhelper] DownloadHelper v4.9.4 (.Michel Gutierrez.) P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\tuyen\AppData\Local\Google\Update\1.3.21.65\npGoogleUpdate3.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\tuyen\AppData\Local\Google\Update\1.3.21.65\npGoogleUpdate3.dll ~ Scan Firefox Browser in 00mn 00s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.speedbit.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Search Microsoft.com R0 - HKUS\S-1-5-21-759255424-4122927654-3783367683-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.speedbit.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Microsoft Corporation R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Microsoft Corporation R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (8.00.7600.16385 (win7_rtm.090713-1255)) -- C:\Windows\System32\ieframe.dll R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 ~ Scan IE Browser in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Scan Proxy management in 00mn 00s ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2) F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe ~ Scan Keys in 00mn 00s ---\\ Redirection du fichier Hosts (O1) ~ Scan Hosts File in 00mn 00s ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: Groove GFS Browser Helper [64Bits] - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll O2 - BHO: Google Toolbar Notifier BHO [64Bits] - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg64.dll O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL O2 - BHO: Download Accelerator Plus Integration [64Bits] - {FF6C3CF0-4B15-11D1-ABED-709549C10000} . (.SpeedBit Ltd. - Download Accelerator Plus (DAP) MSIE Loader.) -- C:\Program Files (x86)\DAP\DAPIELoader64.dll O2 - BHO: AcroIEHelperStub [64Bits] - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Groove GFS Browser Helper [64Bits] - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO [64Bits] - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL O2 - BHO: Java Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O2 - BHO: Download Accelerator Plus Integration [64Bits] - {FF6C3CF0-4B15-11D1-ABED-709549C10000} . (.SpeedBit Ltd. - Download Accelerator Plus (DAP) MSIE Loader.) -- C:\PROGRA~2\DAP\DAPIEL~1.DLL ~ Scan BHO in 00mn 00s ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: Google Toolbar [64Bits] - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll ~ Scan Toolbar in 00mn 00s ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [bCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files\Microsoft Office\Office14\BCSSync.exe O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\tuyen\AppData\Local\Google\Update\GoogleUpdate.exe O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent, Inc. - µTorrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe O4 - HKCU\..\Run: [DownloadAccelerator] . (.SpeedBit Ltd. - Download Accelerator Plus (DAP).) -- C:\Program Files (x86)\DAP\DAP.exe O4 - HKCU\..\Run: [speedBitVideoAccelerator] . (.SpeedBit LTD - Speedbit Video Accelerator.) -- C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAccelerator.exe O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [eMuleAutoStart] . (.http://www.emule-project.net - eMule.) -- C:\Program Files (x86)\eMule\emule.exe O4 - HKLM\..\Wow6432Node\Run: [startCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe O4 - HKLM\..\Wow6432Node\Run: [HomePlayer] . (...) -- C:\Program Files (x86)\HomePlayer\HomePlayer.exe O4 - HKLM\..\Wow6432Node\Run: [sSBkgdUpdate] . (.Nuance Communications, Inc. - SSBkgdUpdate.) -- C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe O4 - HKLM\..\Wow6432Node\Run: [OpwareSE4] . (.ScanSoft, Inc. - OCR Aware.) -- C:\Program Files (x86)\ScanSoft\OmniPageSE4.0\OpwareSE4.exe O4 - HKLM\..\Wow6432Node\Run: [pctuto] . (.PcTuto - PcTuto.) -- C:\Program Files (x86)\Agence-Exclusive\pctuto.exe O4 - HKLM\..\Wow6432Node\RunOnce: [autoupdater] . (.Agence-Exclusive - autoupdater.) -- C:\Users\tuyen\AppData\Roaming\Agence-Exclusive\Agence-Exclusive\autoupdater.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-20\..\Run: [sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-21-759255424-4122927654-3783367683-1000\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\tuyen\AppData\Local\Google\Update\GoogleUpdate.exe O4 - HKUS\S-1-5-21-759255424-4122927654-3783367683-1000\..\Run: [uTorrent] . (.BitTorrent, Inc. - µTorrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe O4 - HKUS\S-1-5-21-759255424-4122927654-3783367683-1000\..\Run: [DownloadAccelerator] . (.SpeedBit Ltd. - Download Accelerator Plus (DAP).) -- C:\Program Files (x86)\DAP\DAP.exe O4 - HKUS\S-1-5-21-759255424-4122927654-3783367683-1000\..\Run: [speedBitVideoAccelerator] . (.SpeedBit LTD - Speedbit Video Accelerator.) -- C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAccelerator.exe O4 - HKUS\S-1-5-21-759255424-4122927654-3783367683-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKUS\S-1-5-21-759255424-4122927654-3783367683-1000\..\Run: [eMuleAutoStart] . (.http://www.emule-project.net - eMule.) -- C:\Program Files (x86)\eMule\emule.exe O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe ~ Scan Application in 00mn 00s ---\\ Autres liens utilisateurs (O4) O4 - Global Startup: C:\Users\tuyen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\tuyen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\tuyen\Desktop\adsl TV.lnk . (.adsl TV / FM.) -- C:\Program Files (x86)\adslTV\adsltv.exe O4 - Global Startup: C:\Users\tuyen\Desktop\AIDA64 Extreme Edition.lnk . (.FinalWire Ltd..) -- C:\Program Files (x86)\FinalWire\AIDA64 Extreme Edition\aida64.exe O4 - Global Startup: C:\Users\tuyen\Desktop\Alice's Biscuit Light.lnk . (.Kayenko.) -- C:\Program Files (x86)\Alice's Biscuit Light\Alice_light.exe O4 - Global Startup: C:\Users\tuyen\Desktop\Download Accelerator Plus (DAP).lnk . (.SpeedBit Ltd..) -- C:\Program Files (x86)\DAP\DAP.exe O4 - Global Startup: C:\Users\tuyen\Desktop\DVDFab 8 Qt.lnk . (.Fengtao Software Inc..) -- C:\Program Files (x86)\DVDFab 8 Qt\DVDFab.exe O4 - Global Startup: C:\Users\tuyen\Desktop\Google Chrome.lnk . (.Google Inc..) -- C:\Users\tuyen\AppData\Local\Google\Chrome\Application\chrome.exe O4 - Global Startup: C:\Users\tuyen\Desktop\HomePlayer.lnk . (...) -- C:\Program Files (x86)\HomePlayer\HomePlayer.exe O4 - Global Startup: C:\Users\tuyen\Desktop\Microsoft Word 2010.lnk . (...) -- C:\Windows\Installer\{90140000-0011-0000-1000-0000000FF1CE}\wordicon.exe O4 - Global Startup: C:\Users\tuyen\Desktop\My DAP Downloads.lnk . (...) -- C:\TORRENT 411\TORRENTS EN COURS O4 - Global Startup: C:\Users\tuyen\Desktop\SpeedBit Video Accelerator.lnk . (.SpeedBit LTD.) -- C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAccelerator.exe O4 - Global Startup: C:\Users\tuyen\Desktop\TrackerPro.lnk . (...) -- C:\Program Files (x86)\Evisoft\TrackerPro\encreasebt.exe O4 - Global Startup: C:\Users\tuyen\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Advanced SystemCare.lnk . (.IObit.) -- C:\Program Files (x86)\IObit\Advanced SystemCare 3\AWC.exe O4 - Global Startup: C:\Users\tuyen\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\DVDFab 8 Qt.lnk . (.Fengtao Software Inc..) -- C:\Program Files (x86)\DVDFab 8 Qt\DVDFab.exe O4 - Global Startup: C:\Users\tuyen\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\tuyen\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk . (.BitTorrent, Inc..) -- C:\Program Files (x86)\uTorrent\uTorrent.exe ~ Scan Global Startup in 00mn 00s ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8) O8 - Extra context menu item: &Clean Traces . (...) -- C:\Program Files (x86)\DAP\Privacy Package\dapcleanerie.htm O8 - Extra context menu item: &Download with &DAP . (...) -- C:\Program Files (x86)\DAP\dapextie.htm O8 - Extra context menu item: &Envoyer à OneNote . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll O8 - Extra context menu item: Download &all with DAP . (...) -- C:\Program Files (x86)\DAP\dapextie2.htm O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Excel.) -- C:\PROGRA~1\MICROS~2\Office14\EXCEL.exe O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll ~ Scan IE Menu Contextuel in 00mn 00s ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: &Envoyer à OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll O9 - Extra button: Notes &liées OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\PROGRA~1\MICROS~2\Office14\ONBTTN~1.dll ~ Scan IE Extra Buttons in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll ~ Scan Winsock in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{5CEEF023-EC4E-45F1-B0EB-E3140C4A5D1A}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CCS\Services\Tcpip\..\{CC9A158D-C0ED-4F05-8673-C5A20814891D}: DhcpNameServer = 10.1.3.10 88.191.90.195 O17 - HKLM\System\CS1\Services\Tcpip\..\{5CEEF023-EC4E-45F1-B0EB-E3140C4A5D1A}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CS1\Services\Tcpip\..\{CC9A158D-C0ED-4F05-8673-C5A20814891D}: DhcpNameServer = 10.1.3.10 88.191.90.195 O17 - HKLM\System\CS2\Services\Tcpip\..\{5CEEF023-EC4E-45F1-B0EB-E3140C4A5D1A}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CS2\Services\Tcpip\..\{CC9A158D-C0ED-4F05-8673-C5A20814891D}: DhcpNameServer = 10.1.3.10 88.191.90.195 ~ Scan Domain in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\System32\mshtml.dll O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll O18 - Handler: intu-ir2010 [64Bits] - {A344EB2D-3A0F-48fa-A073-2E649BAEC9B3} . (.Intuit Canada, a general partnership/une so - Asynchronous Pluggable Protocol Library.) -- C:\Program Files (x86)\ImpotRapide 2010\ic2010pp.dll O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\System32\mshtml.dll O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\System32\mshtml.dll O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll O18 - Handler: ms-help [64Bits] - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\System32\mshtml.dll O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\System32\mshtml.dll O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll O18 - Filter: deflate [64Bits] - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll O18 - Filter: gzip [64Bits] - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL ~ Scan Protocole Additionnel in 00mn 00s ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. ~ Scan SSODL in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\system32\atiesrxx.exe O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: OpenVPN Access Client (OpenVPNAccessClient) . (...) - C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\capiws.exe O23 - Service: VideoAcceleratorService (VideoAcceleratorService) . (.SpeedBit Ltd. - VideoAcceleratorService.) - C:\PROGRA~2\SPEEDB~1\VideoAcceleratorService.exe ~ Scan Services in 00mn 00s ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(...) - (.not file.) ~ Scan Desktop Component in 00mn 00s ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\AWC Startup.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-759255424-4122927654-3783367683-1000Core.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-759255424-4122927654-3783367683-1000UA.job [MD5.FCA101438DDE0DE9218A34D89475B805] [APT] [AWC Startup] (.IObit.) -- C:\Program Files (x86)\IObit\Advanced SystemCare 3\AWC.exe [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-759255424-4122927654-3783367683-1000Core] (.Google Inc..) -- C:\Users\tuyen\AppData\Local\Google\Update\GoogleUpdate.exe [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-759255424-4122927654-3783367683-1000UA] (.Google Inc..) -- C:\Users\tuyen\AppData\Local\Google\Update\GoogleUpdate.exe [MD5.D19225DDCCF349244FDA57D879410644] [APT] [sBWUpdateTask_Logon_981a234b-00FFCC9A158D] (.Speedbit Ltd..) -- C:\Program Files (x86)\Common Files\Speedbit\SbUpdate\SBUpdate.exe [MD5.D19225DDCCF349244FDA57D879410644] [APT] [sBWUpdateTask_Time_981a234b-00FFCC9A158D] (.Speedbit Ltd..) -- C:\Program Files (x86)\Common Files\Speedbit\SbUpdate\SBUpdate.exe [MD5.00000000000000000000000000000000] [APT] [smartDefrag_Startup] (...) -- C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{54A11451-3E60-4756-BB8E-819FB24E49B3}] (...) -- C:\TORRENT 411\VIDEOS COMPLETES\LOGICIELS\Cfosspeed\cfosspeed-v421-build1402.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{95802866-90CC-4E9F-BB37-D8CDBC4BD14F}] (...) -- C:\TORRENT 411\VIDEOS COMPLETES\LOGICIELS\Cfosspeed\cfosspeed-v421-build1402.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{E767F85C-885D-41CD-8CCC-AF2D5E3EBAD1}] (...) -- C:\TORRENT 411\VIDEOS COMPLETES\LOGICIELS\Cfosspeed\cfosspeed-v421-build1402.exe (.not file.) ~ Scan Scheduled Task in 00mn 03s ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\Windows\system32\DRIVERS\avipbb.sys O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\DRIVERS\cdrom.sys O41 - Driver: C:\Windows\system32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\system32\drivers\csc.sys O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\system32\Drivers\dfsc.sys O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\system32\drivers\discache.sys O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\DRIVERS\mssmbios.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\system32\DRIVERS\netbios.sys O41 - Driver: C:\Windows\system32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\system32\DRIVERS\netbt.sys O41 - Driver: C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\system32\drivers\nsiproxy.sys O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\system32\DRIVERS\rdbss.sys O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\DRIVERS\RDPCDD.sys O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\system32\drivers\rdpencdd.sys O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\system32\drivers\rdprefmp.sys O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\DRIVERS\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys O41 - Driver: C:\Windows\system32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\system32\DRIVERS\wfplwf.sys O41 - Driver: Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0 (ws2ifsl) . (.Microsoft Corporation - Couche IFS Winsock2.) - C:\Windows\system32\drivers\ws2ifsl.sys ~ Scan Drivers in 00mn 00s ---\\ Logiciels installés (O42) O42 - Logiciel: AIDA64 Extreme Edition v1.60 - (.FinalWire Ltd..) [HKLM] -- AIDA64 Extreme Edition_is1 O42 - Logiciel: ATI Catalyst Install Manager - (.ATI Technologies, Inc..) [HKLM] -- {47B188E2-2447-5C40-15B6-9D49DC90BF5B} O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin O42 - Logiciel: Advanced SystemCare 3 - (.IObit.) [HKLM] -- Advanced SystemCare 3_is1 O42 - Logiciel: Alice's Biscuit Light 2.50 - (.Kayenko.) [HKLM] -- {8E8C3547-641B-4AB3-BB17-6ABF9FCEB77F}_is1 O42 - Logiciel: ArcSoft PhotoStudio 5.5 - (.ArcSoft.) [HKLM] -- {85309D89-7BE9-4094-BB17-24999C6118FC} O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner O42 - Logiciel: CD-LabelPrint - (.Pas de propriétaire.) [HKLM] -- MediaNavigation.CDLabelPrint O42 - Logiciel: Canon MP Navigator 3.0 - (.Pas de propriétaire.) [HKLM] -- MP Navigator 3.0 O42 - Logiciel: Canon MP810 - (.Pas de propriétaire.) [HKLM] -- {1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP810 O42 - Logiciel: Canon Utilities Easy-PhotoPrint - (.Pas de propriétaire.) [HKLM] -- Easy-PhotoPrint O42 - Logiciel: ConvertHelper 2.2 - (.DownloadHelper.) [HKLM] -- {27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1 O42 - Logiciel: DVDFab 8.1.0.0 (16/06/2011) Qt - (.Fengtao Software Inc..) [HKLM] -- DVDFab 8 Qt_is1 O42 - Logiciel: Download Accelerator Plus (DAP) - (.Speedbit Ltd..) [HKLM] -- Download Accelerator Plus (DAP) O42 - Logiciel: FoxTab Video Converter - (.Pas de propriétaire.) [HKCU] -- FoxTab Video Converter O42 - Logiciel: Freeplayer - (.Free.) [HKLM] -- Freeplayer O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} O42 - Logiciel: HomePlayer 1.5.9d - (.HomePlayer.) [HKLM] -- HomePlayer O42 - Logiciel: Ma Videothèque V1.4 - (.Soft Creation.) [HKLM] -- Ma Vidéothèque_is1 O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.0.1200 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1 O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile O42 - Logiciel: Microsoft .NET Framework 4 Extended - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Extended O42 - Logiciel: Microsoft Office Professionnel Plus 2010 - (.Microsoft Corporation.) [HKLM] -- Office14.PROPLUS O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Extended FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Extended FRA Language Pack O42 - Logiciel: Mozilla Firefox 5.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 5.0 (x86 fr) O42 - Logiciel: PcTuto 1.1 - (.Agence-Exclusive.) [HKLM] -- PcTuto_is1 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2446708 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2478663 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2518870 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Extended (KB2416472) - (.Microsoft Corporation.) [HKLM] -- {8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2416472 O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {4B5F58F7-C7D1-3CE3-9B37-B657F0852643}.KB2478663 O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {4B5F58F7-C7D1-3CE3-9B37-B657F0852643}.KB2518870 O42 - Logiciel: TrackerPro 2.0 - (.Evisoft.) [HKLM] -- TrackerPro O42 - Logiciel: Tuto Audacity1.0.0.0 - (.pctuto.) [HKLM] -- Tuto Audacity_is1 O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2473228) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2473228 O42 - Logiciel: VLC media player 1.1.11 - (.VideoLAN.) [HKLM] -- VLC media player O42 - Logiciel: WinRAR 4.00 (64-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver O42 - Logiciel: adsl TV - (.adsl TV / FM.) [HKLM] -- {3AFDD2C6-8663-46B5-B195-6CEB00D44768} O42 - Logiciel: eMule - (.Pas de propriétaire.) [HKLM] -- eMule O42 - Logiciel: µTorrent - (.Pas de propriétaire.) [HKLM] -- uTorrent ---\\ HKCU & HKLM Software Keys [HKCU\Software\AMD] [HKCU\Software\ASProtect] [HKCU\Software\ATI] [HKCU\Software\Adobe] [HKCU\Software\Agence-Exclusive] [HKCU\Software\AppDataLow\Software\Microsoft] [HKCU\Software\AppDataLow\Software] [HKCU\Software\AppDataLow] [HKCU\Software\Audacity] [HKCU\Software\Avira] [HKCU\Software\BitTorrent] [HKCU\Software\CanonBJ] [HKCU\Software\Canon] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\DVDFab] [HKCU\Software\FinalWire] [HKCU\Software\Flock] [HKCU\Software\Freeplayer] [HKCU\Software\Google] [HKCU\Software\InstallCore] [HKCU\Software\JavaSoft] [HKCU\Software\Macromedia] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\MediaNavigation] [HKCU\Software\MozillaPlugins] [HKCU\Software\Mozilla] [HKCU\Software\Netscape] [HKCU\Software\ODBC] [HKCU\Software\OTi] [HKCU\Software\OpenVPN Technologies] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\ScanSoft] [HKCU\Software\SpeedBit] [HKCU\Software\Trolltech] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\WinRAR] [HKCU\Software\Wow6432Node] [HKCU\Software\YahooPartnerToolbar] [HKCU\Software\eMule] [HKLM\Software\AMD] [HKLM\Software\ATI Technologies] [HKLM\Software\ATI] [HKLM\Software\Adobe] [HKLM\Software\Agence-Exclusive] [HKLM\Software\ArcSoft] [HKLM\Software\Avira] [HKLM\Software\CBSTEST] [HKLM\Software\Canon] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\DVDFab] [HKLM\Software\DownloadHelper] [HKLM\Software\Eset] [HKLM\Software\Google] [HKLM\Software\IObit] [HKLM\Software\InstallShield] [HKLM\Software\Intel] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\Kayenko] [HKLM\Software\Khronos] [HKLM\Software\Licenses] [HKLM\Software\Lidan] [HKLM\Software\Macromedia] [HKLM\Software\Magnet] [HKLM\Software\Malwarebytes' Anti-Malware] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\ODBC] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\RegisteredApplications] [HKLM\Software\ScanSoft] [HKLM\Software\Sonic] [HKLM\Software\SpeedBit] [HKLM\Software\VideoLAN] [HKLM\Software\Volatile] [HKLM\Software\WinRAR] [HKLM\Software\Wow6432Node] [HKLM\Software\X-AVCSD] [HKLM\Software\cFos] [HKLM\Software\mozilla.org] ~ Scan Softwares in 00mn 00s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 16/04/2011 - 16:20:22 - [23427369] ----D- C:\Program Files\ATI O43 - CFD: 16/04/2011 - 16:20:54 - [28] ----D- C:\Program Files\ATI Technologies O43 - CFD: 06/06/2011 - 14:12:08 - [24516476] --H-D- C:\Program Files\CanonBJ O43 - CFD: 16/04/2011 - 19:50:50 - [7201624] ----D- C:\Program Files\CCleaner O43 - CFD: 10/06/2011 - 09:02:40 - [282651568] ----D- C:\Program Files\Common Files O43 - CFD: 21/11/2010 - 08:29:42 - [90256916] ----D- C:\Program Files\DVD Maker O43 - CFD: 16/04/2011 - 14:24:56 - [0] -SH-D- C:\Program Files\Fichiers communs O43 - CFD: 05/08/2011 - 08:28:24 - [662365] ----D- C:\Program Files\FreeMi UPnP Media Server O43 - CFD: 16/04/2011 - 17:00:16 - [999080] ----D- C:\Program Files\Google O43 - CFD: 17/06/2011 - 03:17:16 - [5182765] ----D- C:\Program Files\Internet Explorer O43 - CFD: 17/04/2011 - 16:27:56 - [66182091] ----D- C:\Program Files\Microsoft Analysis Services O43 - CFD: 21/11/2010 - 08:29:40 - [149237810] ----D- C:\Program Files\Microsoft Games O43 - CFD: 17/04/2011 - 16:31:22 - [1138198876] ----D- C:\Program Files\Microsoft Office O43 - CFD: 17/04/2011 - 16:31:20 - [2966976] ----D- C:\Program Files\Microsoft SQL Server Compact Edition O43 - CFD: 17/04/2011 - 16:31:20 - [1014647] ----D- C:\Program Files\Microsoft Sync Framework O43 - CFD: 17/04/2011 - 16:31:50 - [326800] ----D- C:\Program Files\Microsoft Synchronization Services O43 - CFD: 14/07/2009 - 07:32:40 - [25757] ----D- C:\Program Files\MSBuild O43 - CFD: 14/07/2009 - 07:32:40 - [36813993] ----D- C:\Program Files\Reference Assemblies O43 - CFD: 17/04/2011 - 12:15:24 - [98183] ----D- C:\Program Files\Topos O43 - CFD: 14/07/2009 - 07:09:28 - [0] --H-D- C:\Program Files\Uninstall Information O43 - CFD: 21/11/2010 - 08:19:02 - [4039680] ----D- C:\Program Files\Windows Defender O43 - CFD: 21/11/2010 - 08:29:42 - [9224824] ----D- C:\Program Files\Windows Journal O43 - CFD: 21/11/2010 - 08:19:02 - [6667776] ----D- C:\Program Files\Windows Mail O43 - CFD: 21/11/2010 - 08:19:02 - [7687085] ----D- C:\Program Files\Windows Media Player O43 - CFD: 16/04/2011 - 14:24:56 - [12627636] ----D- C:\Program Files\Windows NT O43 - CFD: 21/11/2010 - 08:19:02 - [5516056] ----D- C:\Program Files\Windows Photo Viewer O43 - CFD: 21/11/2010 - 05:31:36 - [244736] ----D- C:\Program Files\Windows Portable Devices O43 - CFD: 21/11/2010 - 08:19:02 - [7044767] ----D- C:\Program Files\Windows Sidebar O43 - CFD: 09/05/2011 - 03:17:40 - [5933677] ----D- C:\Program Files\WinRAR O43 - CFD: 16/04/2011 - 16:21:00 - [242952] ----D- C:\Program Files\Common Files\ATI Technologies O43 - CFD: 10/06/2011 - 09:02:40 - [99136] ----D- C:\Program Files\Common Files\DESIGNER O43 - CFD: 10/06/2011 - 09:02:50 - [268963639] ----D- C:\Program Files\Common Files\Microsoft Shared O43 - CFD: 14/07/2009 - 05:20:10 - [2702] ----D- C:\Program Files\Common Files\Services O43 - CFD: 14/07/2009 - 05:20:10 - [608768] ----D- C:\Program Files\Common Files\SpeechEngines O43 - CFD: 10/06/2011 - 08:56:38 - [12734371] ----D- C:\Program Files\Common Files\System O43 - CFD: 27/04/2011 - 23:47:56 - [200110059] ----D- C:\ProgramData\Adobe O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Application Data O43 - CFD: 16/04/2011 - 16:23:48 - [1102493] ----D- C:\ProgramData\ATI O43 - CFD: 16/04/2011 - 23:30:56 - [420379501] ----D- C:\ProgramData\Avira O43 - CFD: 16/04/2011 - 14:24:56 - [0] -SH-D- C:\ProgramData\Bureau O43 - CFD: 10/05/2011 - 23:03:16 - [17517158] --H-D- C:\ProgramData\CanonBJ O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Desktop O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Documents O43 - CFD: 11/05/2011 - 10:06:14 - [0] ----D- C:\ProgramData\eMule O43 - CFD: 16/04/2011 - 14:24:56 - [0] -SH-D- C:\ProgramData\Favoris O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Favorites O43 - CFD: 18/04/2011 - 09:59:22 - [38676] ----D- C:\ProgramData\FreeApp O43 - CFD: 16/04/2011 - 17:00:26 - [539844] ----D- C:\ProgramData\Google O43 - CFD: 06/06/2011 - 14:18:28 - [265] ----D- C:\ProgramData\InstallShield O43 - CFD: 15/05/2011 - 22:07:06 - [700] ----D- C:\ProgramData\Intuit Canada O43 - CFD: 19/04/2011 - 13:10:56 - [85416] ----D- C:\ProgramData\IObit O43 - CFD: 08/07/2011 - 01:05:24 - [216022] ----D- C:\ProgramData\Kaspersky Lab O43 - CFD: 12/05/2011 - 00:19:32 - [16379771] ----D- C:\ProgramData\Malwarebytes O43 - CFD: 21/04/2011 - 21:34:54 - [1080] ----D- C:\ProgramData\McAfee O43 - CFD: 16/04/2011 - 14:24:56 - [0] -SH-D- C:\ProgramData\Menu Démarrer O43 - CFD: 30/04/2011 - 11:06:28 - [345668446] -S--D- C:\ProgramData\Microsoft O43 - CFD: 10/06/2011 - 09:45:10 - [16632] ----D- C:\ProgramData\Microsoft Help O43 - CFD: 16/04/2011 - 14:24:56 - [0] -SH-D- C:\ProgramData\Modèles O43 - CFD: 06/06/2011 - 14:18:18 - [123768] ----D- C:\ProgramData\ScanSoft O43 - CFD: 29/06/2011 - 00:37:36 - [10111093] ----D- C:\ProgramData\SpeedBit O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Start Menu O43 - CFD: 19/06/2011 - 16:49:56 - [119] ----D- C:\ProgramData\Sun O43 - CFD: 08/08/2011 - 19:22:24 - [0] ---AD- C:\ProgramData\TEMP O43 - CFD: 14/07/2009 - 07:08:58 - [0] -SH-D- C:\ProgramData\Templates O43 - CFD: 27/04/2011 - 23:46:54 - [4323757] ----D- C:\Users\tuyen\AppData\Roaming\Adobe O43 - CFD: 01/07/2011 - 09:26:14 - [1450308] ----D- C:\Users\tuyen\AppData\Roaming\Agence-Exclusive O43 - CFD: 16/04/2011 - 16:23:48 - [0] ----D- C:\Users\tuyen\AppData\Roaming\ATI O43 - CFD: 24/04/2011 - 23:13:44 - [0] ----D- C:\Users\tuyen\AppData\Roaming\Avira O43 - CFD: 13/07/2011 - 10:21:38 - [415715] ----D- C:\Users\tuyen\AppData\Roaming\Canon O43 - CFD: 09/08/2011 - 01:01:32 - [199] ----D- C:\Users\tuyen\AppData\Roaming\dvdcss O43 - CFD: 16/04/2011 - 17:06:44 - [0] ----D- C:\Users\tuyen\AppData\Roaming\Google O43 - CFD: 16/04/2011 - 14:25:12 - [0] ----D- C:\Users\tuyen\AppData\Roaming\Identities O43 - CFD: 15/05/2011 - 22:08:44 - [70] ----D- C:\Users\tuyen\AppData\Roaming\Intuit Canada O43 - CFD: 23/05/2011 - 15:38:18 - [3086266] ----D- C:\Users\tuyen\AppData\Roaming\IObit O43 - CFD: 16/04/2011 - 17:00:38 - [1283] ----D- C:\Users\tuyen\AppData\Roaming\Macromedia O43 - CFD: 16/04/2011 - 16:41:58 - [299008] ----D- C:\Users\tuyen\AppData\Roaming\Magic Copy O43 - CFD: 12/05/2011 - 00:20:06 - [18829983] ----D- C:\Users\tuyen\AppData\Roaming\Malwarebytes O43 - CFD: 21/11/2010 - 08:29:28 - [0] ----D- C:\Users\tuyen\AppData\Roaming\Media Center Programs O43 - CFD: 15/06/2011 - 15:35:58 - [10365739] -S--D- C:\Users\tuyen\AppData\Roaming\Microsoft O43 - CFD: 16/04/2011 - 19:56:48 - [36575234] ----D- C:\Users\tuyen\AppData\Roaming\Mozilla O43 - CFD: 16/04/2011 - 17:38:44 - [386511] ----D- C:\Users\tuyen\AppData\Roaming\OpenVPN Technologies O43 - CFD: 06/06/2011 - 14:18:20 - [0] ----D- C:\Users\tuyen\AppData\Roaming\ScanSoft O43 - CFD: 09/08/2011 - 01:06:12 - [1998817] ----D- C:\Users\tuyen\AppData\Roaming\uTorrent O43 - CFD: 09/08/2011 - 00:38:44 - [775752] ----D- C:\Users\tuyen\AppData\Roaming\vlc O43 - CFD: 26/04/2011 - 12:06:38 - [1237116] ----D- C:\Users\tuyen\AppData\Roaming\WinRAR O43 - CFD: 27/04/2011 - 23:46:54 - [14685686] ----D- C:\Users\tuyen\AppData\Local\Adobe O43 - CFD: 11/07/2011 - 13:33:52 - [14520417] ----D- C:\Users\tuyen\AppData\Local\adslTV O43 - CFD: 01/07/2011 - 09:26:14 - [536752] ----D- C:\Users\tuyen\AppData\Local\Agence-Exclusive O43 - CFD: 16/04/2011 - 14:25:02 - [0] -SH-D- C:\Users\tuyen\AppData\Local\Application Data O43 - CFD: 16/04/2011 - 16:23:48 - [95575] ----D- C:\Users\tuyen\AppData\Local\ATI O43 - CFD: 22/07/2011 - 00:27:02 - [441442] ----D- C:\Users\tuyen\AppData\Local\Diagnostics O43 - CFD: 31/05/2011 - 10:40:54 - [0] ----D- C:\Users\tuyen\AppData\Local\ElevatedDiagnostics O43 - CFD: 11/05/2011 - 10:35:38 - [119675] ----D- C:\Users\tuyen\AppData\Local\eMule O43 - CFD: 08/05/2011 - 18:14:56 - [1024000] ----D- C:\Users\tuyen\AppData\Local\Films O43 - CFD: 03/08/2011 - 23:59:16 - [319] ----D- C:\Users\tuyen\AppData\Local\FreeMi O43 - CFD: 17/07/2011 - 09:04:56 - [694478559] ----D- C:\Users\tuyen\AppData\Local\Google O43 - CFD: 16/04/2011 - 14:25:02 - [0] -SH-D- C:\Users\tuyen\AppData\Local\Historique O43 - CFD: 22/04/2011 - 10:38:36 - [1565] ----D- C:\Users\tuyen\AppData\Local\Kayenko O43 - CFD: 25/06/2011 - 17:44:02 - [352866183] ----D- C:\Users\tuyen\AppData\Local\Microsoft O43 - CFD: 18/05/2011 - 15:37:08 - [145900] ----D- C:\Users\tuyen\AppData\Local\Microsoft Help O43 - CFD: 16/04/2011 - 19:56:48 - [53947113] ----D- C:\Users\tuyen\AppData\Local\Mozilla O43 - CFD: 16/04/2011 - 17:38:44 - [1785348] ----D- C:\Users\tuyen\AppData\Local\OpenVPN Technologies O43 - CFD: 10/06/2011 - 09:14:24 - [0] ----D- C:\Users\tuyen\AppData\Local\Scansoft O43 - CFD: 09/08/2011 - 01:06:16 - [505092494] ----D- C:\Users\tuyen\AppData\Local\Temp O43 - CFD: 16/04/2011 - 14:25:02 - [0] -SH-D- C:\Users\tuyen\AppData\Local\Temporary Internet Files O43 - CFD: 24/04/2011 - 23:25:24 - [3326595] ----D- C:\Users\tuyen\AppData\Local\VirtualStore O43 - CFD: 27/04/2011 - 23:45:00 - [114227921] ----D- C:\Program Files (x86)\Adobe O43 - CFD: 11/07/2011 - 13:32:48 - [41354449] ----D- C:\Program Files (x86)\adslTV O43 - CFD: 02/07/2011 - 09:16:56 - [2228229] ----D- C:\Program Files (x86)\Agence-Exclusive O43 - CFD: 22/04/2011 - 10:38:32 - [1507966] ----D- C:\Program Files (x86)\Alice's Biscuit Light O43 - CFD: 16/04/2011 - 16:21:04 - [2448924] ----D- C:\Program Files (x86)\AMD APP O43 - CFD: 06/06/2011 - 14:15:48 - [25533198] ----D- C:\Program Files (x86)\ArcSoft O43 - CFD: 16/04/2011 - 16:20:32 - [40501380] ----D- C:\Program Files (x86)\ATI Technologies O43 - CFD: 01/07/2011 - 09:25:16 - [8691689] ----D- C:\Program Files (x86)\Audacity O43 - CFD: 16/04/2011 - 23:30:56 - [138343587] ----D- C:\Program Files (x86)\Avira O43 - CFD: 06/06/2011 - 14:14:06 - [75077256] ----D- C:\Program Files (x86)\Canon O43 - CFD: 19/06/2011 - 16:49:54 - [198845526] ----D- C:\Program Files (x86)\Common Files O43 - CFD: 05/05/2011 - 13:55:48 - [30845919] ----D- C:\Program Files (x86)\ConvertHelper O43 - CFD: 12/05/2011 - 20:54:56 - [22145125] ----D- C:\Program Files (x86)\DAP O43 - CFD: 05/05/2011 - 10:04:20 - [2601089] ----D- C:\Program Files (x86)\DSL Speed O43 - CFD: 06/08/2011 - 12:19:36 - [52598502] ----D- C:\Program Files (x86)\DVDFab 8 Qt O43 - CFD: 11/05/2011 - 10:03:24 - [10906334] ----D- C:\Program Files (x86)\eMule O43 - CFD: 29/06/2011 - 00:37:02 - [2483820899] ----D- C:\Program Files (x86)\ESET O43 - CFD: 13/05/2011 - 22:59:20 - [1183952] ----D- C:\Program Files (x86)\Evisoft O43 - CFD: 16/04/2011 - 16:21:36 - [22138054] ----D- C:\Program Files (x86)\FinalWire O43 - CFD: 29/06/2011 - 01:10:52 - [12724884] ----D- C:\Program Files (x86)\FoxTabVideoConverter O43 - CFD: 18/04/2011 - 10:10:58 - [0] ----D- C:\Program Files (x86)\FreeApps O43 - CFD: 20/04/2011 - 23:46:06 - [33283418] ----D- C:\Program Files (x86)\Freeplayer O43 - CFD: 13/07/2011 - 08:41:22 - [110153873] ----D- C:\Program Files (x86)\Google O43 - CFD: 29/04/2011 - 17:38:18 - [142304601] ----D- C:\Program Files (x86)\HomePlayer O43 - CFD: 15/05/2011 - 22:08:54 - [71506291] ----D- C:\Program Files (x86)\ImpotRapide 2010 O43 - CFD: 06/06/2011 - 14:15:48 - [1556307] --H-D- C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 17/06/2011 - 03:17:16 - [4594981] ----D- C:\Program Files (x86)\Internet Explorer O43 - CFD: 23/04/2011 - 18:44:36 - [28238120] ----D- C:\Program Files (x86)\IObit O43 - CFD: 19/06/2011 - 16:48:58 - [88550789] ----D- C:\Program Files (x86)\Java O43 - CFD: 06/07/2011 - 08:13:16 - [7582238] ----D- C:\Program Files (x86)\Malwarebytes' Anti-Malware O43 - CFD: 09/05/2011 - 08:20:42 - [10273767] ----D- C:\Program Files (x86)\MaVideotheque O43 - CFD: 17/04/2011 - 16:27:56 - [39769547] ----D- C:\Program Files (x86)\Microsoft Analysis Services O43 - CFD: 17/04/2011 - 16:27:30 - [29589124] ----D- C:\Program Files (x86)\Microsoft Office O43 - CFD: 17/04/2011 - 16:29:44 - [1378033] ----D- C:\Program Files (x86)\Microsoft Visual Studio 8 O43 - CFD: 17/04/2011 - 16:31:20 - [8175999] ----D- C:\Program Files (x86)\Microsoft.NET O43 - CFD: 27/06/2011 - 14:37:14 - [34248751] ----D- C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 10/06/2011 - 09:01:10 - [26521] ----D- C:\Program Files (x86)\MSBuild O43 - CFD: 15/07/2011 - 03:00:40 - [0] ----D- C:\Program Files (x86)\MSXML 4.0 O43 - CFD: 16/04/2011 - 17:37:56 - [54255109] ----D- C:\Program Files (x86)\OpenVPN Technologies O43 - CFD: 01/07/2011 - 09:27:22 - [10003385] ----D- C:\Program Files (x86)\pctuto O43 - CFD: 14/07/2009 - 07:32:40 - [39159041] ----D- C:\Program Files (x86)\Reference Assemblies O43 - CFD: 06/06/2011 - 14:17:38 - [114234930] ----D- C:\Program Files (x86)\ScanSoft O43 - CFD: 28/04/2011 - 11:36:24 - [7708539] ----D- C:\Program Files (x86)\SpeedBit Video Accelerator O43 - CFD: 14/07/2009 - 06:57:08 - [0] --H-D- C:\Program Files (x86)\Uninstall Information O43 - CFD: 16/04/2011 - 22:01:48 - [399736] ----D- C:\Program Files (x86)\uTorrent O43 - CFD: 28/07/2011 - 09:30:40 - [84898038] ----D- C:\Program Files (x86)\VideoLAN O43 - CFD: 20/06/2011 - 00:28:10 - [197404] ----D- C:\Program Files (x86)\VPN Lifeguard O43 - CFD: 21/11/2010 - 08:19:02 - [524800] ----D- C:\Program Files (x86)\Windows Defender O43 - CFD: 21/11/2010 - 08:19:02 - [6181376] ----D- C:\Program Files (x86)\Windows Mail O43 - CFD: 21/11/2010 - 08:19:02 - [5024017] ----D- C:\Program Files (x86)\Windows Media Player O43 - CFD: 14/07/2009 - 07:32:40 - [12197556] ----D- C:\Program Files (x86)\Windows NT O43 - CFD: 21/11/2010 - 08:19:02 - [4417800] ----D- C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 21/11/2010 - 05:31:40 - [189952] ----D- C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 21/11/2010 - 08:19:02 - [5994626] ----D- C:\Program Files (x86)\Windows Sidebar O43 - CFD: 09/08/2011 - 01:06:08 - [14883458] ----D- C:\Program Files (x86)\ZHPDiag O43 - CFD: 27/04/2011 - 23:45:40 - [3515885] ----D- C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 16/04/2011 - 16:21:00 - [198408] ----D- C:\Program Files (x86)\Common Files\ATI Technologies O43 - CFD: 06/06/2011 - 14:18:10 - [7645308] ----D- C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 15/05/2011 - 22:08:10 - [3245613] ----D- C:\Program Files (x86)\Common Files\Intuit O43 - CFD: 19/06/2011 - 16:49:54 - [1258951] ----D- C:\Program Files (x86)\Common Files\Java O43 - CFD: 10/06/2011 - 09:03:14 - [130313009] ----D- C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD: 06/06/2011 - 14:18:12 - [185896] ----D- C:\Program Files (x86)\Common Files\ScanSoft Shared O43 - CFD: 14/07/2009 - 05:20:10 - [2702] ----D- C:\Program Files (x86)\Common Files\Services O43 - CFD: 14/07/2009 - 05:20:10 - [41103783] ----D- C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 24/04/2011 - 23:14:32 - [837440] ----D- C:\Program Files (x86)\Common Files\SpeedBit O43 - CFD: 21/11/2010 - 08:19:02 - [10538531] ----D- C:\Program Files (x86)\Common Files\System ~ Scan Program Folder in 00mn 11s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.2283EBD5D3647A7F0AF2B59FA7F68E28] - 09/08/2011 - 00:04:47 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1751870] O44 - LFC:[MD5.01DBF3B2BE3A86B953D2F0ACEFE1A1C7] - 09/08/2011 - 00:04:25 ---A- . (...) -- C:\Windows\IE9_main.log [4093] O44 - LFC:[MD5.5D3DDD9E38083C0928790105F548EA7B] - 09/08/2011 - 00:04:14 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI [1662566] O44 - LFC:[MD5.14CC34DBAC660861716CA90D2730FDD4] - 09/08/2011 - 00:04:14 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat [121082] O44 - LFC:[MD5.B7376071CFCDBA908EB8B53FFCD5EC9C] - 09/08/2011 - 00:04:14 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat [148786] O44 - LFC:[MD5.A354FCDDA4A2970C1355FF8AE726B50E] - 09/08/2011 - 00:04:14 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat [652150] O44 - LFC:[MD5.331EEABDFBB9BA1D1313DDFAC0BE7251] - 09/08/2011 - 00:04:14 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat [745268] O44 - LFC:[MD5.5D3DDD9E38083C0928790105F548EA7B] - 09/08/2011 - 00:04:14 ---A- . (...) -- C:\Windows\system32\PerfStringBackup.INI [1662566] O44 - LFC:[MD5.14CC34DBAC660861716CA90D2730FDD4] - 09/08/2011 - 00:04:14 RSHAD . (...) -- C:\Windows\system32\perfc009.dat [121082] O44 - LFC:[MD5.B7376071CFCDBA908EB8B53FFCD5EC9C] - 09/08/2011 - 00:04:14 RSHAD . (...) -- C:\Windows\system32\perfc00C.dat [148786] O44 - LFC:[MD5.A354FCDDA4A2970C1355FF8AE726B50E] - 09/08/2011 - 00:04:14 RSHAD . (...) -- C:\Windows\system32\perfh009.dat [652150] O44 - LFC:[MD5.331EEABDFBB9BA1D1313DDFAC0BE7251] - 09/08/2011 - 00:04:14 RSHAD . (...) -- C:\Windows\system32\perfh00C.dat [745268] O44 - LFC:[MD5.4F6A2BDCBA08310E167D298B20EE6811] - 08/08/2011 - 18:22:00 ---A- . (...) -- C:\Windows\setupact.log [33868] O44 - LFC:[MD5.F24F7DA85601FCDA0905BA01875C31DE] - 08/08/2011 - 18:22:00 -S-A- . (...) -- C:\Windows\bootstat.dat [67584] O44 - LFC:[MD5.CCED316496E78891DEEE34AA4CC01E83] - 07/08/2011 - 16:54:16 ---A- . (...) -- C:\Windows\PFRO.log [27582] O44 - LFC:[MD5.0FF2281C6B3FD24FADA8045216793108] - 16/07/2011 - 02:00:58 ---A- . (...) -- C:\Windows\msxml4-KB973688-enu.LOG [287138] O44 - LFC:[MD5.C56E99E98E6FE21D060CD5CBDCA9AFAB] - 15/07/2011 - 02:01:07 ---A- . (...) -- C:\Windows\msxml4-KB954430-enu.LOG [291110] O44 - LFC:[MD5.972CFC049D029349C7A749F818EA4BC4] - 14/07/2011 - 02:18:55 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT [418064] O44 - LFC:[MD5.972CFC049D029349C7A749F818EA4BC4] - 14/07/2011 - 02:18:55 RSHAD . (...) -- C:\Windows\system32\FNTCACHE.DAT [418064] ~ Scan Files in 00mn 33s ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\system32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\system32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\system32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\system32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\system32\Drivers\volmgrx.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\system32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\system32\Drivers\nsiproxy.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\system32\Drivers\rdpencdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\system32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\system32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\system32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\system32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\system32\Drivers\volmgrx.sys ~ Scan CSB in 00mn 00s ---\\ MountPoints2 Shell Key (O51) O51 - MPSK:{7a8b4e72-722c-11e0-a1df-001c252f66e5}\AutoRun\command. (...) -- M:\Magic Copy.exe (.not file.) O51 - MPSK:{8d166029-6835-11e0-8855-001c252f66e5}\AutoRun\command - Clé orpheline O51 - MPSK:{91b416ca-7c35-11e0-b70b-001c252f66e5}\AutoRun\command. (...) -- M:\Magic Copy.exe (.not file.) O51 - MPSK:{cb582cca-8ee9-11e0-ac46-001c252f66e5}\AutoRun\command - Clé orpheline O51 - MPSK:{d6d84851-a090-11e0-adcc-001c252f66e5}\AutoRun\command - Clé orpheline O51 - MPSK:{e1857416-c1e2-11e0-8e02-001c252f66e5}\AutoRun\command. (.TnB Inc. - Magic Copy Application.) -- K:\Magic Copy.exe O51 - MPSK:{eb905481-695a-11e0-80aa-001c252f66e5}\AutoRun\command - Clé orpheline ~ Scan Keys in 00mn 00s ---\\ Trojan Driver Search Data (HKLM) (O52) O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm ~ Scan Keys in 00mn 00s ---\\ Microsoft Control Security Providers (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll ~ Scan Keys in 00mn 00s ---\\ Microsoft Windows Policies System (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"= O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"= O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 ~ Scan Keys in 00mn 00s ---\\ Microsoft Windows Policies Explorer (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0 ~ Scan Keys in 00mn 00s ---\\ Liste des Drivers Système (O58) O58 - SDL:[MD5.E656FE10D6D27794AFA08136685A69E8] - 08/07/2011 - 00:16:34 ---A- . (.Kaspersky Lab ZAO - Kaspersky Unified Driver.) -- C:\Windows\system32\drivers\64611260.sys [460888] O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 10/06/2009 - 02:52:21 RSHAD . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [491088] O58 - SDL:[MD5.597F78224EE9224EA1A13D6350CED962] - 13/07/2009 - 02:52:21 RSHAD . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [339536] O58 - SDL:[MD5.E109549C90F62FB570B9540C4B148E54] - 13/07/2009 - 02:52:21 RSHAD . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\system32\drivers\adpu320.sys [182864] O58 - SDL:[MD5.5812713A477A3AD7363C7438CA2EE038] - 14/07/2009 - 02:52:21 RSHAD . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [15440] O58 - SDL:[MD5.D4121AE6D0C0E7E13AA221AA57EF2D49] - 26/04/2011 - 07:41:12 RSHAD . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\system32\drivers\amdsata.sys [107904] O58 - SDL:[MD5.F67F933E79241ED32FF46A4F29B5120B] - 10/06/2009 - 02:52:20 RSHAD . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows -.) -- C:\Windows\system32\drivers\amdsbs.sys [194128] O58 - SDL:[MD5.540DAF1CEA6094886D72126FD7C33048] - 26/04/2011 - 07:41:12 RSHAD . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\system32\drivers\amdxata.sys [27008] O58 - SDL:[MD5.C484F8CEB1717C540242531DB7845C4E] - 13/07/2009 - 02:52:21 RSHAD . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [87632] O58 - SDL:[MD5.019AF6924AEFE7839F61C830227FE79C] - 13/07/2009 - 02:52:21 RSHAD . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [97856] O58 - SDL:[MD5.4BF5BCA6E2608CD8A00BC4A6673A9F47] - 16/04/2011 - 13:04:32 RSHAD . (.Advanced Micro Devices - AMD High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\AtihdW76.sys [115216] O58 - SDL:[MD5.BFA9657ADF7DDC29242A6E0E88DE36FA] - 16/04/2011 - 10:22:42 RSHAD . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\system32\drivers\atikmdag.sys [9258496] O58 - SDL:[MD5.8C493027D9B2399283E724E9862EBB42] - 16/04/2011 - 05:17:42 RSHAD . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\system32\drivers\atikmpag.sys [300544] O58 - SDL:[MD5.39C2E2870FC0C2AE0595B883CBE716B4] - 16/04/2011 - 13:38:47 RSHAD . (.Avira GmbH - Avira Minifilter Driver.) -- C:\Windows\system32\drivers\avgntflt.sys [83120] O58 - SDL:[MD5.C98FA6E5AD0E857D22716BD2B8B1F399] - 16/04/2011 - 13:38:47 RSHAD . (.Avira GmbH - Avira Driver for Security Enhancement.) -- C:\Windows\system32\drivers\avipbb.sys [116568] O58 - SDL:[MD5.B5ACE6968304A3900EEB1EBFD9622DF2] - 10/06/2009 - 21:34:23 RSHAD . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x Unified Driver..) -- C:\Windows\system32\drivers\b57nd60a.sys [270848] O58 - SDL:[MD5.F09EEE9EDC320B5E1501F749FDE686C8] - 14/07/2009 - 21:41:06 RSHAD . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [18432] O58 - SDL:[MD5.B114D3098E9BDB8BEA8B053685831BE6] - 14/07/2009 - 21:41:06 RSHAD . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [8704] O58 - SDL:[MD5.43BEA8D483BF1870F018E2D02E06A5BD] - 14/07/2009 - 02:19:07 RSHAD . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [286720] O58 - SDL:[MD5.A6ECA2151B08A09CACECA35C07F05B42] - 14/07/2009 - 21:41:10 RSHAD . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [47104] O58 - SDL:[MD5.B79968002C277E869CF38BD22CD61524] - 14/07/2009 - 21:41:10 RSHAD . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [14976] O58 - SDL:[MD5.A87528880231C54E75EA7A44943B38BF] - 14/07/2009 - 21:41:10 RSHAD . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [14720] O58 - SDL:[MD5.3E5B191307609F7514148C6832BB0842] - 10/06/2009 - 21:34:28 RSHAD . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\system32\drivers\bxvbda.sys [468480] O58 - SDL:[MD5.E19D3F095812725D88F9001985B94EDD] - 14/07/2009 - 02:52:31 RSHAD . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [17488] O58 - SDL:[MD5.0E5DA5369A0FCAEA12456DD852545184] - 10/06/2009 - 02:47:48 RSHAD . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [530496] O58 - SDL:[MD5.DC5D737F51BE844D8C82C695EB17372F] - 10/06/2009 - 21:34:33 RSHAD . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\system32\drivers\evbda.sys [3286016] O58 - SDL:[MD5.F2523EF6460FC42405B12248338AB2F0] - 14/07/2009 - 21:31:59 RSHAD . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\system32\drivers\hcw85cir.sys [31232] O58 - SDL:[MD5.39D2ABCD392F3D8A6DCE7B60AE7B8EFC] - 21/11/2010 - 04:23:47 RSHAD . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\system32\drivers\HpSAMD.sys [78720] O58 - SDL:[MD5.AAAF44DB3BD0B9D1FB6969B23ECC8366] - 26/04/2011 - 07:41:26 RSHAD . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\system32\drivers\iaStorV.sys [410496] O58 - SDL:[MD5.5C18831C61933628F5BB0EA2675B9D21] - 13/07/2009 - 02:48:04 RSHAD . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [44112] O58 - SDL:[MD5.1A93E54EB0ECE102495A51266DCDB6A6] - 13/07/2009 - 02:48:04 RSHAD . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [114752] O58 - SDL:[MD5.1047184A9FDC8BDBFF857175875EE810] - 13/07/2009 - 02:48:04 RSHAD . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [106560] O58 - SDL:[MD5.30F5C0DE1EE8B5BC9306C1F0E4A75F93] - 13/07/2009 - 02:48:04 RSHAD . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas2.sys [65600] O58 - SDL:[MD5.0504EACAFF0D3C8AED161C4B0D369D4A] - 13/07/2009 - 02:48:04 RSHAD . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [115776] O58 - SDL:[MD5.ED49FD1373DE93617A1F6D128D98FE4D] - 12/05/2011 - 08:11:20 RSHAD . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys [25912] O58 - SDL:[MD5.A55805F747C6EDB6A9080D7C633BD0F4] - 10/06/2009 - 02:48:04 RSHAD . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows 7\Server 2008 R2 for.) -- C:\Windows\system32\drivers\megasas.sys [35392] O58 - SDL:[MD5.BAF74CE0072480C3B6B7C13B2A94D6B3] - 13/07/2009 - 02:48:04 RSHAD . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\system32\drivers\MegaSR.sys [284736] O58 - SDL:[MD5.77889813BE4D166CDAB78DDBA990DA92] - 13/07/2009 - 02:48:26 RSHAD . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [51264] O58 - SDL:[MD5.0A92CB65770442ED0DC44834632F66AD] - 26/04/2011 - 07:41:34 RSHAD . (.NVIDIA Corporation - NVIDIA® nForce RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [148352] O58 - SDL:[MD5.DAB0E87525C10052BF65F06152F37E4A] - 26/04/2011 - 07:41:34 RSHAD . (.NVIDIA Corporation - NVIDIA® nForce Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [166272] O58 - SDL:[MD5.A53A15A11EBFD21077463EE2C7AFEEF0] - 10/06/2009 - 02:45:46 RSHAD . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [1524816] O58 - SDL:[MD5.4F6D12B51DE1AAEFF7DC58C4D75423C8] - 13/07/2009 - 02:45:45 RSHAD . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [128592] O58 - SDL:[MD5.68DD0457D18FCCEF7384AE84022F0C86] - 10/06/2009 - 21:35:53 RSHAD . (.Realtek Semiconductor Corporation - Realtek 10/100 X64 Driver.) -- C:\Windows\system32\drivers\Rtnic64.sys [51712] O58 - SDL:[MD5.3EA8A16169C26AFBEB544E0E48421186] - 14/07/2009 - 21:37:19 RSHAD . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [23040] O58 - SDL:[MD5.843CAF1E5FDE1FFD5FF768F23A51E2E1] - 10/06/2009 - 02:45:45 RSHAD . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\system32\drivers\sisraid2.sys [43584] O58 - SDL:[MD5.6A6C106D42E9FFFF8B9FCB4F754F6DA4] - 13/07/2009 - 02:45:46 RSHAD . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [80464] O58 - SDL:[MD5.F3817967ED533D08327DC73BC4D5542A] - 13/07/2009 - 02:45:55 RSHAD . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\system32\drivers\stexstor.sys [24656] O58 - SDL:[MD5.927D0CDB3F96EFC1E98FB1A2C9FB67AD] - 16/04/2011 - 15:25:30 RSHAD . (.The OpenVPN Project - TAP-Win32 Virtual Network Driver.) -- C:\Windows\system32\drivers\tapoas.sys [30720] O58 - SDL:[MD5.E5689D93FFE4E5D66C0178761240DD54] - 14/07/2009 - 02:45:55 RSHAD . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [17488] O58 - SDL:[MD5.5E2016EA6EBACA03C04FEAC5F330D997] - 10/06/2009 - 02:45:55 RSHAD . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\system32\drivers\vsmraid.sys [161872] O58 - SDL:[MD5.B309912717C29FC67E1BA4730A82B6DD] - 06/07/2011 - 08:11:30 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\SysWOW64\drivers\mbamswissarmy.sys [39984] ~ Scan Drivers in 00mn 02s ---\\ Liste des outils de nettoyage (O63) O63 - Logiciel: ZHPDiag 1.28 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 ~ Scan ADS in 00mn 00s ---\\ Liste des services Legacy (O64) O64 - Services: CurCS - 08/07/2011 - C:\Windows\system32\DRIVERS\64611260.sys - No object(No service) .(.Kaspersky Lab ZAO - Kaspersky Unified Driver.) - LEGACY_64611260 O64 - Services: CurCS - 09/03/2011 - C:\Windows\system32\DRIVERS\atikmdag.sys - No object(No service) .(.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG O64 - Services: CurCS - 04/03/2011 - C:\Windows\system32\DRIVERS\avgntflt.sys - No object(No service) .(.Avira GmbH - Avira Minifilter Driver.) - LEGACY_AVGNTFLT O64 - Services: CurCS - 04/03/2011 - C:\Windows\system32\DRIVERS\avipbb.sys - No object(No service) .(.Avira GmbH - Avira Driver for Security Enhancement.) - LEGACY_AVIPBB ~ Scan Services in 00mn 01s ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (. - .) -- "%1" %* O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %* O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %* O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %* O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %* O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ~ Scan Keys in 00mn 00s ---\\ Start Menu Internet (O68) O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe ~ Scan Keys in 00mn 00s ---\\ Search Browser Infection (O69) O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - Bing O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - Bing O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - Google O69 - SBI: SearchScopes [HKCU] {7F4EFF06-7032-458e-AE16-1C1D8255C28A} - (SpeedBit Search) - http://search.speedbit.com ~ Scan Keys in 00mn 00s ---\\ Recherche particuliere à la racine de certains dossiers (O84) [MD5.6A3D1FB144102CDF2BFD1294D0A5DE9B] [sPRF][02/08/2011] (.Solid State Networks - Adobe Flash Player Installer.) -- C:\Users\tuyen\AppData\Local\Temp\install_flashplayer10_chra_aih.exe [731424] [MD5.6A3D1FB144102CDF2BFD1294D0A5DE9B] [sPRF][02/08/2011] (.Solid State Networks - Adobe Flash Player Installer.) -- C:\Users\tuyen\AppData\Local\Temp\install_flashplayer10_mssa_aih.exe [731424] [MD5.6A3D1FB144102CDF2BFD1294D0A5DE9B] [sPRF][02/08/2011] (.Solid State Networks - Adobe Flash Player Installer.) -- C:\Users\tuyen\AppData\Local\Temp\install_flashplayer10_mssa_aih_1.exe [731424] [MD5.008DE55BAED62FBE32A983A54E6F1233] [sPRF][06/07/2011] (.Malwarebytes - Malwarebytes' StartUpLite.) -- C:\Users\tuyen\Desktop\startuplite_startuplite_1.07_anglais_78460.exe [204496] [MD5.BA14B83461F654F1C47BC5B213B27D20] [sPRF][09/08/2011] (.Nicolas Coolman - ZHPDiag.) -- C:\Users\tuyen\Desktop\ZHPDiag2.exe [2572387] [MD5.3FEA9D2EDF23B0283C7A66C8DEA380BD] [sPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player Module.) -- C:\Windows\Downloaded Program Files\dwusplay.dll [24576] [MD5.CDBE35EA59BC9223E4F800BD1DB82D27] [sPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player.) -- C:\Windows\Downloaded Program Files\dwusplay.exe [196608] [MD5.3F4413DCD8D3BBABF08F68F25E6D60E1] [sPRF][16/02/2005] (.InstallShield Software Corporation - InstallShield Update Service Web Agent.) -- C:\Windows\Downloaded Program Files\isusweb.dll [401408] ~ Scan Files in 00mn 00s ---\\ Firewall Active Exception List (FirewallRules) (O87) O87 - FAEL: "{BBFC3DC4-C5D8-4C8E-9F10-E5ED1FA629C4}" | In - None - P6 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe O87 - FAEL: "{8D47D465-3F27-446F-9416-F41DCE4D5B68}" | In - None - P17 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe O87 - FAEL: "{D0897B90-CA85-4E2E-B38A-560D7E87841C}" | In - Private - P6 - TRUE | .(.Mozilla Foundation - Pas de description.) -- C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\prism\openvpn-client.exe O87 - FAEL: "{976662C0-908E-44DD-AE22-34CD383D9347}" | In - Private - P17 - TRUE | .(.Mozilla Foundation - Pas de description.) -- C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\prism\openvpn-client.exe O87 - FAEL: "{F56ECD2B-FF19-472D-9929-FCBAEF7B3002}" | In - Domain - P6 - FALSE | .(.Mozilla Foundation - Pas de description.) -- C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\prism\openvpn-client.exe O87 - FAEL: "{7B4DBE07-9142-495D-91B6-9BA8F3E29576}" | In - Domain - P17 - FALSE | .(.Mozilla Foundation - Pas de description.) -- C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\prism\openvpn-client.exe O87 - FAEL: "{42CF89A3-F96C-46D1-BFD8-31A0A0F51A9A}" | In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\HomePlayer\HomePlayer.exe O87 - FAEL: "{457E75FD-F894-4AF6-A2E5-7D7E2A388A46}" | In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\HomePlayer\HomePlayer.exe O87 - FAEL: "{3EE55B36-E807-49AB-BC4E-FA54D87902B0}" | In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\HomePlayer\VLC\vlc.exe O87 - FAEL: "{36A3ECAD-3DF8-4335-96E5-8ABB4F2ADFFA}" | In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\HomePlayer\VLC\vlc.exe O87 - FAEL: "{3780A0B0-6475-4A75-A571-BED91FF10D86}" | In - Public - P6 - TRUE | .(.adsl TV / FM - Pas de description.) -- C:\Program Files (x86)\adslTV\adsltv.exe O87 - FAEL: "{8271BE6A-E939-48EB-A917-5A87EBEAA39B}" | In - Public - P17 - TRUE | .(.adsl TV / FM - Pas de description.) -- C:\Program Files (x86)\adslTV\adsltv.exe O87 - FAEL: "{3D26472D-C8D2-4623-83EB-D775DF243D13}" | In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\adslTV\VLC\vlc.exe O87 - FAEL: "{F4E5E893-C26F-44AB-AB4B-E1DA45DBEAEC}" | In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\adslTV\VLC\vlc.exe O87 - FAEL: "{1D30A7AD-AB6E-4001-8A97-F6F0735C3902}" | In - Private - P6 - FALSE | .(...) -- C:\Program Files (x86)\adslTV\VLC\vlc.exe O87 - FAEL: "{00263523-49C1-47DA-BBA6-0A947E92EF14}" | In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\adslTV\VLC\vlc.exe O87 - FAEL: "{F62777DF-B3D9-47AF-8BFB-A79C3FBA7119}" | In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\HomePlayer\HomePlayer.exe O87 - FAEL: "{B29E956D-EEB1-4745-BA61-915993761064}" | In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\HomePlayer\HomePlayer.exe O87 - FAEL: "{D3452592-5AA1-45E9-BE16-3DB3B7F341DF}" | In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\HomePlayer\VLC\vlc.exe O87 - FAEL: "{79F6BE54-FD93-4035-966B-67E11CB17246}" | In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\HomePlayer\VLC\vlc.exe O87 - FAEL: "TCP Query User{BF3280D4-AF08-4A01-89ED-F0122898D8C8}C:\program files (x86)\emule\emule.exe" | In - Private - P6 - TRUE | .(.http://www.emule-project.net - eMule.) -- C:\program files (x86)\emule\emule.exe O87 - FAEL: "UDP Query User{7D2AE916-3695-43E8-8840-61300C0054F2}C:\program files (x86)\emule\emule.exe" | In - Private - P17 - TRUE | .(.http://www.emule-project.net - eMule.) -- C:\program files (x86)\emule\emule.exe O87 - FAEL: "{28061818-F55E-461F-9911-84EAE68CFDA1}" | In - Public - P17 - TRUE | .(.http://www.emule-project.net - eMule.) -- C:\program files (x86)\emule\emule.exe O87 - FAEL: "{A61781FB-27D9-48CC-AD29-9888FC1915AD}" | In - Public - P6 - TRUE | .(.http://www.emule-project.net - eMule.) -- C:\program files (x86)\emule\emule.exe O87 - FAEL: "TCP Query User{7917736D-97FE-4010-B401-5F8BE3AC65F5}C:\program files (x86)\dap\dap.exe" | In - Private - P6 - TRUE | .(.SpeedBit Ltd. - Download Accelerator Plus (DAP).) -- C:\program files (x86)\dap\dap.exe O87 - FAEL: "UDP Query User{DE0F7B0B-D96E-418A-8467-7016CB5A21CB}C:\program files (x86)\dap\dap.exe" | In - Private - P17 - TRUE | .(.SpeedBit Ltd. - Download Accelerator Plus (DAP).) -- C:\program files (x86)\dap\dap.exe O87 - FAEL: "{E2BE1A50-5F17-4137-8F75-D84232D1C202}" | In - Public - P17 - TRUE | .(.SpeedBit Ltd. - Download Accelerator Plus (DAP).) -- C:\program files (x86)\dap\dap.exe O87 - FAEL: "{3FC2659E-F182-4CB9-B98C-0418478C6705}" | In - Public - P6 - TRUE | .(.SpeedBit Ltd. - Download Accelerator Plus (DAP).) -- C:\program files (x86)\dap\dap.exe O87 - FAEL: "TCP Query User{B04FB6F3-047C-48B7-9E07-CCE884DCC746}C:\program files (x86)\google\google earth\client\googleearth.exe" | In - Private - P6 - TRUE | .(.Google.) -- C:\program files (x86)\google\google earth\client\googleearth.exe O87 - FAEL: "UDP Query User{2BC6F52C-5FC4-4BC6-9076-5EA818EDAAA9}C:\program files (x86)\google\google earth\client\googleearth.exe" | In - Private - P17 - TRUE | .(.Google.) -- C:\program files (x86)\google\google earth\client\googleearth.exe O87 - FAEL: "{D33EF142-1861-497C-8CD2-22E14C87B484}" | In - Public - P17 - TRUE | .(.Google - Google Earth.) -- C:\program files (x86)\google\google earth\client\googleearth.exe O87 - FAEL: "{88843AC6-662F-4AD8-87B0-512B6E4117A9}" | In - Public - P6 - TRUE | .(.Google - Google Earth.) -- C:\program files (x86)\google\google earth\client\googleearth.exe O87 - FAEL: "TCP Query User{A42B6611-6AD7-4ADF-9D9F-DC9523806B33}C:\program files (x86)\freeplayer\vlc\vlc.exe" | In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\freeplayer\vlc\vlc.exe O87 - FAEL: "UDP Query User{4D6ABDE8-F51C-45FD-88A4-BBA8F5A9DC96}C:\program files (x86)\freeplayer\vlc\vlc.exe" | In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\freeplayer\vlc\vlc.exe O87 - FAEL: "TCP Query User{049108E3-5F65-480E-93BB-CC517E7214AE}C:\program files\freemi upnp media server\freemi upnp media server.exe" | In - Private - P6 - TRUE | .(...) -- C:\program files\freemi upnp media server\freemi upnp media server.exe O87 - FAEL: "UDP Query User{122A601C-F3AB-4406-BF87-F7A99BA5E0F9}C:\program files\freemi upnp media server\freemi upnp media server.exe" | In - Private - P17 - TRUE | .(...) -- C:\program files\freemi upnp media server\freemi upnp media server.exe O87 - FAEL: "{52007CB4-660B-49D5-B016-13E9DE5E6C1C}" | In - Public - P17 - TRUE | .(.Pas de propriétaire - FreeMi UPnP Media Server.) -- C:\program files\freemi upnp media server\freemi upnp media server.exe O87 - FAEL: "{F4DEE4F2-ABEA-496C-A668-3A8CC38B6966}" | In - Public - P6 - TRUE | .(.Pas de propriétaire - FreeMi UPnP Media Server.) -- C:\program files\freemi upnp media server\freemi upnp media server.exe ~ Scan Firewall in 00mn 01s ---\\ Scan Additionnel (O88) Database Version : 8606 - (08/08/2011) Clés trouvées (Keys found) : 4 Valeurs trouvées (Values found) : 0 Dossiers trouvés (Folders found) : 6 Fichiers trouvés (Files found) : 0 [HKLM\Software\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}] =>Toolbar.AskSBar [HKLM\Software\Classes\Interface\{E2ED56B6-35FC-4484-9530-EC87FB458E78}] =>PUP.Eorezo [HKCU\Software\Agence-Exclusive] =>Spyware.AgenceExclusive [HKLM\Software\Wow6432Node\Agence-Exclusive] =>Spyware.AgenceExclusive C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PCTuto =>Spyware.AgenceExclusive C:\Users\tuyen\AppData\Roaming\Agence-Exclusive =>Spyware.AgenceExclusive C:\Users\tuyen\AppData\Local\Agence-Exclusive =>Spyware.AgenceExclusive C:\Program Files (x86)\Agence-Exclusive =>Spyware.AgenceExclusive C:\Program Files (x86)\PCTuto =>Spyware.AgenceExclusive ~ Scan Additionnel in 00mn 07s ---\\ Recherche détournement de DNS routeur (O89) Serveur : UnKnown Address: 10.1.3.10 Nom : www.l.google.com Addresses: 74.125.39.103 74.125.39.104 74.125.39.147 74.125.39.99 74.125.39.105 74.125.39.106 Aliases: www.google.fr www.google.com ~ Scan DNS in 00mn 03s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SR - | Auto 16/04/2011 203776 | (AMD External Events Utility) . (.AMD.) - C:\Windows\system32\atiesrxx.exe SR - | Auto 16/04/2011 136360 | (AntiVirSchedulerService) . (.Avira GmbH.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe SR - | Auto 16/04/2011 269480 | (AntiVirService) . (.Avira GmbH.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe SS - | Auto 16/04/2011 136176 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 16/04/2011 136176 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 16/04/2011 182768 | (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe SR - | Auto 16/04/2011 24064 | (OpenVPNAccessClient) . (...) - C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\capiws.exe SR - | Auto 24/04/2011 265928 | (VideoAcceleratorService) . (.SpeedBit Ltd..) - C:\PROGRA~2\SPEEDB~1\VideoAcceleratorService.exe SR - | Auto 14/07/2009 27136 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe ~ Scan Services in 00mn 05s ---\\ Recherche Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, GMER - Rootkit Detector and Remover ~ Scan MBR in 00mn 07s ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by tuyen at 09/08/2011 01:07:24 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ Scan MBR in 00mn 09s End of the scan (1074 lines in 01mn 35s)(0)

bonjour, ME voilà avec des fenêtre publicitaires surprises qui me collent après 2 mois d'absence de mon" home"; un constat mes mouflets ont utilisés mon pc..et re. Donc me impossibe de m'en dépétrer...Quels conseils judicieux peux tu m'évoquer stp ? merci

BONJOUR MES GOSSES ST +débrouillards que moi concernant les cracks et les machins et j'utilise ton info pour les brief fer, ilxs savent que je n'apprécie que très pedu qu'ils utilises mon pc losque je suis absent. bref, j'ai utilise le VRT , il n'a rien trouvé, mais veux-tu don rapport ?

Bonjour Appolo est ce que je peux considérer mon souci réglé ou doit on continuer stp ? merci

hello, effectivement je me suis mélangé les pinceaux avec MBAM, mais j'ai tout de même son rapport, si tu juges nécessaire dis le moi. voici le rapport ESET : C:\disque dur BRULE RECUP. MICHEL\VIDEOS INTERNET\registrybooster.exe multiple threats deleted - quarantined C:\Program Files (x86)\FoxTabVideoConverter\VideoConverter.exe a variant of Win32/Adware.WhiteSmoke.B application cleaned by deleting - quarantined C:\Program Files (x86)\FoxTabVideoConverter\Uninstall\Uninstall.exe a variant of Win32/Adware.WhiteSmoke.B application cleaned by deleting - quarantined C:\ProgramData\SpeedBit\DAP\Offers\speedupmypc.exe Win32/SpeedUpMyPC application deleted - quarantined C:\TORRENT 411\TORRENTS EN COURS\VideoConverterSetup_1.exe a variant of Win32/Adware.WhiteSmoke.B application cleaned by deleting - quarantined C:\TORRENT 411\VIDEOS COMPLETES\LOGICIELS\DivX.Plus.v8.1.2.Build.10.2.1.20.Multilingual.Incl.Keymaker-DJiNN.rar probably a variant of MSIL/Injector.GW trojan deleted - quarantined C:\TORRENT 411\VIDEOS COMPLETES\LOGICIELS\TrustyFiles.exe Win32/Adware.Toolbar.Dealio application deleted - quarantined C:\TORRENT 411\VIDEOS COMPLETES\LOGICIELS\Cfosspeed\cfosspeed-v421-build1402.exe a variant of MSIL/TrojanDropper.Agent.EZ trojan cleaned by deleting - quarantined C:\TORRENT 411\VIDEOS COMPLETES\LOGICIELS\Google.Earth.Gold.Edition($400)HD\Google Earth Pro + Crack 100%\Crack.rar probably a variant of Win32/Bifrose.HJMPLSB trojan deleted - quarantined C:\TORRENT 411\VIDEOS COMPLETES\LOGICIELS\MICROSOFT.OFFICE.2010.VF.64.BIT.FRENCH.RETAIL.FINAL.BY.PARISIEN99.SMS{up mick1973}\MICROSOFT.OFFICE.2010.VF.64.BIT.FRENCH.RETAIL.FINAL.BY.PARISIEN99.SMS{up mick1973}.iso Win32/HackKMS.A application deleted - quarantined C:\TORRENT 411\VIDEOS COMPLETES\LOGICIELS\PHOTOSHOP LOGICIELS\Adobe Photoshop CS4 Extended Français v11 ISO\Adobe Photoshop CS4 Extended Français v11 ISO up by sahbouche.iso a variant of Win32/Keygen.BH application deleted - quarantined C:\TORRENT 411\VIDEOS COMPLETES\LOGICIELS\remove what 2.25\remove what 2.25.rar a variant of MSIL/Injector.DV trojan deleted - quarantined C:\TORRENT 411\VIDEOS COMPLETES\LOGICIELS\Super Mp3 Download v 4.6.7.6\Super Mp3 Download v 4.6.7.6.rar a variant of MSIL/Injector.GY trojan deleted - quarantined C:\TORRENT 411\VIDEOS COMPLETES\LOGICIELS\VideoConverterSetup\VideoConverterSetup.exe a variant of Win32/Adware.WhiteSmoke.B application cleaned by deleting - quarantined C:\TORRENT 411\VIDEOS EN COURS de réception\Internet Download Manager 6.05 Build 12.sfx.exe a variant of Win32/Injector.GIS trojan deleted - quarantined C:\TORRENT 411\VIDEOS EN COURS de réception\patch.rar probably a variant of Win32/HackTool.Patcher.A application deleted - quarantined C:\Users\tuyen\Downloads\TrustyFiles.exe Win32/Adware.Toolbar.Dealio application deleted - quarantined J:\films PROVIENT DISQUE DUR CRAME-Utilisateur MICHEL\Videos\VIDEOS INTERNET\registrybooster.exe multiple threats deleted - quarantined J:\films PROVIENT DISQUE DUR CRAME-Utilisateur MICHEL\Downloads\SpywareRemovalToolkit_Setup.exe multiple threats deleted - quarantined J:\films PROVIENT DISQUE DUR CRAME-Utilisateur MICHEL\ZEUS\LOGICIELS téléchargés utiles\DVDFab Platinum v8.0.8.2 Final + Patch\DVDFab Platinum v8.0.8.2 Final + Patch.rar Win32/Delf.NVC trojan deleted - quarantined L:\MICHEL-PC\Backup Set 2011-01-26 222741\Backup Files 2011-01-26 222741\Backup files 1.zip multiple threats deleted - quarantined L:\MICHEL-PC\Backup Set 2011-01-26 222741\Backup Files 2011-01-26 222741\Backup files 7.zip multiple threats deleted - quarantined L:\MICHEL-PC\Backup Set 2011-01-26 222741\Backup Files 2011-01-26 222741\Backup files 8.zip Win32/OpenCandy application deleted - quarantined L:\MICHEL-PC\Backup Set 2011-01-26 222741\Backup Files 2011-01-26 222741\Backup files 9.zip Win32/RegistryBooster application deleted - quarantined

je te joins dans la foulée le rapport MBAM en espérant que je ne suis pas trop brouillon et merci encore de ta patience : RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 ======= Mis à jour par TeamXscript le 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com Site web: http://www.teamxscript.org C:\Program Files (x86)\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 23:53:59 le 26/06/2011, Mode normal Microsoft Windows 7 Édition Intégrale Service Pack 1 (X64) tuyen@TUYEN-PC (PACKARD BELL BV IMEDIA X9651) ============== ACTION(S) ============== (!) -- Fichiers temporaires supprimés. Clé supprimée: HKLM\Software\Classes\Interface\{384FE458-A963-450D-9187-EEFF81913FD0} Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5} ============== SCAN ADDITIONNEL ============== **** Mozilla Firefox Version [4.0.1 (fr)] **** Searchplugins\bing.xml ( hxxp://www.bing.com/search) Components\browsercomps.dll (Mozilla Foundation) HKCU_Extensions|{F17C1572-C9EC-4e5c-A542-D05CBB5C5A08} - C:\Program Files (x86)\DAP\DAPFireFox -- C:\Users\tuyen\AppData\Roaming\Mozilla\FireFox\Profiles\a9mzb9d5.default -- Extensions\ffxtlbr@babylon.com (Babylon) Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} (Google Toolbar for Firefox) Searchplugins\qrobeit.xml (?) User.js - browser.search.defaultenginename, SpeedBit Search User.js - browser.search.defaulturl, hxxp://search.speedbit.com/searchresults.asp?src=default&q= User.js - browser.search.selectedEngine, SpeedBit Search User.js - browser.startup.homepage, hxxp://search.speedbit.com User.js - browser.startup.homepage_override_url, hxxp://search.speedbit.com User.js - keyword.URL, hxxp://search.speedbit.com/searchresults.asp?src=default&q= Prefs.js - browser.search.defaultenginename, SpeedBit Search Prefs.js - browser.search.defaulturl, hxxp://search.speedbit.com/searchresults.asp?src=default&q= Prefs.js - browser.search.selectedEngine, SpeedBit Search Prefs.js - browser.startup.homepage, hxxp://search.speedbit.com Prefs.js - browser.startup.homepage_override.buildID, 20110413222027 Prefs.js - browser.startup.homepage_override.mstone, rv:2.0.1 Prefs.js - browser.startup.homepage_override_url, hxxp://search.speedbit.com Prefs.js - keyword.URL, hxxp://search.babylon.com/?babsrc=SP_ss&mntrId=981a234b00000000000000ffcc9a158d&tlver=1.4.19.19&instlRef=ss... ======================================== **** Google Chrome Version [12.0.742.100] **** Extension\dhkplhfnhceodhffomolpfigojocbpcb (C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbar.crx) (x) Extension\ffdcfjdljhbehggjdkdioajnknjcpbjb (C:\Program Files (x86)\DAP\DAPChrome\DAPChrome6.crx) (?) -- C:\Users\tuyen\AppData\Local\Google\Chrome\User Data\Default -- Preferences - default_search_provider: "Google" (Activé: true) (?) Preferences - homepage: hxxp://search.speedbit.com Preferences - homepage_is_newtabpage: false Plugin - "getPlusPlus for Adobe 162100" (Activé: true) ======================================== **** Internet Explorer Version [8.0.7601.17514] **** HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896 HKCU_Main|Start Page - hxxp://fr.msn.com/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Start Page - hxxp://fr.msn.com/ HKCU_SearchScopes\{7F4EFF06-7032-458e-AE16-1C1D8255C28A} - "SpeedBit Search" (hxxp://search.speedbit.com/searchresults.asp?src=default&q={searchTerms}) HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\SysWOW64\wpcer.exe (x) HKLM_ElevationPolicy\{08f24d68-9087-4b24-81ad-7b34af3e3ed6} - C:\Program Files (x86)\DAP\DAP.exe (SpeedBit Ltd.) HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\SysWOW64\winfxdocobj.exe (x) HKLM_ElevationPolicy\{6a0490af-eadc-416c-abda-d6146b8ea0ee} - C:\Program Files (x86)\DAP\DAPupd.exe (Speedbit Ltd.) HKLM_ElevationPolicy\{6A7C9604-8A57-4B28-821B-BDEDF0E04788} - C:\Program Files\Microsoft Office\Office14\winproj.exe (x) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files (x86)\Internet Explorer\iedw.exe (x) HKLM_ElevationPolicy\{B43A0C1E-B63F-4691-B68F-CD807A45DA01} - C:\Windows\system32\TSWbPrxy.exe (x) BHO\{FF6C3CF0-4B15-11D1-ABED-709549C10000} - "Download Accelerator Plus Integration" (C:\PROGRA~2\DAP\DAPIEL~1.DLL) ======================================== C:\Program Files (x86)\Ad-Remover\Quarantine: 0 Fichier(s) C:\Program Files (x86)\Ad-Remover\Backup: 17 Fichier(s) C:\Ad-Report-CLEAN[1].txt - 26/06/2011 23:54:21 (4906 Octet(s)) C:\Ad-Report-SCAN[1].txt - 26/06/2011 23:29:49 (4926 Octet(s)) C:\Ad-Report-SCAN[2].txt - 26/06/2011 23:48:20 (4991 Octet(s)) Fin à: 23:55:29, 26/06/2011 ============== E.O.F ==============

suite...... ca y est j'ai compris , j'ai re-scanner puis nettoyer....là j'ai nettoyer direct, donc j'espère que cela sera encore utile , voici : RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 ======= Mis à jour par TeamXscript le 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com Site web: http://www.teamxscript.org C:\Program Files (x86)\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 23:53:59 le 26/06/2011, Mode normal Microsoft Windows 7 Édition Intégrale Service Pack 1 (X64) tuyen@TUYEN-PC (PACKARD BELL BV IMEDIA X9651) ============== ACTION(S) ============== (!) -- Fichiers temporaires supprimés. Clé supprimée: HKLM\Software\Classes\Interface\{384FE458-A963-450D-9187-EEFF81913FD0} Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5} ============== SCAN ADDITIONNEL ============== **** Mozilla Firefox Version [4.0.1 (fr)] **** Searchplugins\bing.xml ( hxxp://www.bing.com/search) Components\browsercomps.dll (Mozilla Foundation) HKCU_Extensions|{F17C1572-C9EC-4e5c-A542-D05CBB5C5A08} - C:\Program Files (x86)\DAP\DAPFireFox -- C:\Users\tuyen\AppData\Roaming\Mozilla\FireFox\Profiles\a9mzb9d5.default -- Extensions\ffxtlbr@babylon.com (Babylon) Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} (Google Toolbar for Firefox) Searchplugins\qrobeit.xml (?) User.js - browser.search.defaultenginename, SpeedBit Search User.js - browser.search.defaulturl, hxxp://search.speedbit.com/searchresults.asp?src=default&q= User.js - browser.search.selectedEngine, SpeedBit Search User.js - browser.startup.homepage, hxxp://search.speedbit.com User.js - browser.startup.homepage_override_url, hxxp://search.speedbit.com User.js - keyword.URL, hxxp://search.speedbit.com/searchresults.asp?src=default&q= Prefs.js - browser.search.defaultenginename, SpeedBit Search Prefs.js - browser.search.defaulturl, hxxp://search.speedbit.com/searchresults.asp?src=default&q= Prefs.js - browser.search.selectedEngine, SpeedBit Search Prefs.js - browser.startup.homepage, hxxp://search.speedbit.com Prefs.js - browser.startup.homepage_override.buildID, 20110413222027 Prefs.js - browser.startup.homepage_override.mstone, rv:2.0.1 Prefs.js - browser.startup.homepage_override_url, hxxp://search.speedbit.com Prefs.js - keyword.URL, hxxp://search.babylon.com/?babsrc=SP_ss&mntrId=981a234b00000000000000ffcc9a158d&tlver=1.4.19.19&instlRef=ss... ======================================== **** Google Chrome Version [12.0.742.100] **** Extension\dhkplhfnhceodhffomolpfigojocbpcb (C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbar.crx) (x) Extension\ffdcfjdljhbehggjdkdioajnknjcpbjb (C:\Program Files (x86)\DAP\DAPChrome\DAPChrome6.crx) (?) -- C:\Users\tuyen\AppData\Local\Google\Chrome\User Data\Default -- Preferences - default_search_provider: "Google" (Activé: true) (?) Preferences - homepage: hxxp://search.speedbit.com Preferences - homepage_is_newtabpage: false Plugin - "getPlusPlus for Adobe 162100" (Activé: true) ======================================== **** Internet Explorer Version [8.0.7601.17514] **** HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896 HKCU_Main|Start Page - hxxp://fr.msn.com/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Start Page - hxxp://fr.msn.com/ HKCU_SearchScopes\{7F4EFF06-7032-458e-AE16-1C1D8255C28A} - "SpeedBit Search" (hxxp://search.speedbit.com/searchresults.asp?src=default&q={searchTerms}) HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\SysWOW64\wpcer.exe (x) HKLM_ElevationPolicy\{08f24d68-9087-4b24-81ad-7b34af3e3ed6} - C:\Program Files (x86)\DAP\DAP.exe (SpeedBit Ltd.) HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\SysWOW64\winfxdocobj.exe (x) HKLM_ElevationPolicy\{6a0490af-eadc-416c-abda-d6146b8ea0ee} - C:\Program Files (x86)\DAP\DAPupd.exe (Speedbit Ltd.) HKLM_ElevationPolicy\{6A7C9604-8A57-4B28-821B-BDEDF0E04788} - C:\Program Files\Microsoft Office\Office14\winproj.exe (x) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files (x86)\Internet Explorer\iedw.exe (x) HKLM_ElevationPolicy\{B43A0C1E-B63F-4691-B68F-CD807A45DA01} - C:\Windows\system32\TSWbPrxy.exe (x) BHO\{FF6C3CF0-4B15-11D1-ABED-709549C10000} - "Download Accelerator Plus Integration" (C:\PROGRA~2\DAP\DAPIEL~1.DLL) ======================================== C:\Program Files (x86)\Ad-Remover\Quarantine: 0 Fichier(s) C:\Program Files (x86)\Ad-Remover\Backup: 17 Fichier(s) C:\Ad-Report-CLEAN[1].txt - 26/06/2011 23:54:21 (4906 Octet(s)) C:\Ad-Report-SCAN[1].txt - 26/06/2011 23:29:49 (4926 Octet(s)) C:\Ad-Report-SCAN[2].txt - 26/06/2011 23:48:20 (4991 Octet(s)) Fin à: 23:55:29, 26/06/2011 ============== E.O.F ============== donc, maintenant j'ai relance mbam

bonsoir, donc je reprends enfin cette communication avec toi . j'ai dû faire peut être i erreur de chronologie d'action....mais si c'est le cas je ne m'en suis pas aperçu. donc, je vais reprendre à partir de ad-remover: === RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 ======= Mis à jour par TeamXscript le 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com Site web: http://www.teamxscript.org C:\Program Files (x86)\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 23:29:42 le 26/06/2011, Mode normal Microsoft Windows 7 Édition Intégrale Service Pack 1 (X64) tuyen@TUYEN-PC (PACKARD BELL BV IMEDIA X9651) ============== RECHERCHE ============== Clé trouvée: HKLM\Software\Classes\Interface\{384FE458-A963-450D-9187-EEFF81913FD0} Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5} ============== SCAN ADDITIONNEL ============== **** Mozilla Firefox Version [4.0.1 (fr)] **** Searchplugins\bing.xml ( hxxp://www.bing.com/search) Components\browsercomps.dll (Mozilla Foundation) HKCU_Extensions|{F17C1572-C9EC-4e5c-A542-D05CBB5C5A08} - C:\Program Files (x86)\DAP\DAPFireFox -- C:\Users\tuyen\AppData\Roaming\Mozilla\FireFox\Profiles\a9mzb9d5.default -- Extensions\ffxtlbr@babylon.com (Babylon) Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} (Google Toolbar for Firefox) Searchplugins\qrobeit.xml (?) User.js - browser.search.defaultenginename, SpeedBit Search User.js - browser.search.defaulturl, hxxp://search.speedbit.com/searchresults.asp?src=default&q= User.js - browser.search.selectedEngine, SpeedBit Search User.js - browser.startup.homepage, hxxp://search.speedbit.com User.js - browser.startup.homepage_override_url, hxxp://search.speedbit.com User.js - keyword.URL, hxxp://search.speedbit.com/searchresults.asp?src=default&q= Prefs.js - browser.search.defaultenginename, SpeedBit Search Prefs.js - browser.search.defaulturl, hxxp://search.speedbit.com/searchresults.asp?src=default&q= Prefs.js - browser.search.selectedEngine, SpeedBit Search Prefs.js - browser.startup.homepage, hxxp://search.speedbit.com Prefs.js - browser.startup.homepage_override.buildID, 20110413222027 Prefs.js - browser.startup.homepage_override.mstone, rv:2.0.1 Prefs.js - browser.startup.homepage_override_url, hxxp://search.speedbit.com Prefs.js - keyword.URL, hxxp://search.babylon.com/?babsrc=SP_ss&mntrId=981a234b00000000000000ffcc9a158d&tlver=1.4.19.19&instlRef=ss... ======================================== **** Google Chrome Version [12.0.742.100] **** Extension\dhkplhfnhceodhffomolpfigojocbpcb (C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbar.crx) (x) Extension\ffdcfjdljhbehggjdkdioajnknjcpbjb (C:\Program Files (x86)\DAP\DAPChrome\DAPChrome6.crx) (?) -- C:\Users\tuyen\AppData\Local\Google\Chrome\User Data\Default -- Preferences - default_search_provider: "Google" (Activé: true) (?) Preferences - homepage: hxxp://search.speedbit.com Preferences - homepage_is_newtabpage: false Plugin - "getPlusPlus for Adobe 162100" (Activé: true) ======================================== **** Internet Explorer Version [8.0.7601.17514] **** HKCU_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKCU_Main|Start Page - hxxp://search.speedbit.com HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKCU_SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5} - "Search the web (Babylon)" (hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=981a234b000000000...) HKCU_SearchScopes\{7F4EFF06-7032-458e-AE16-1C1D8255C28A} - "SpeedBit Search" (hxxp://search.speedbit.com/searchresults.asp?src=default&q={searchTerms}) HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\SysWOW64\wpcer.exe (x) HKLM_ElevationPolicy\{08f24d68-9087-4b24-81ad-7b34af3e3ed6} - C:\Program Files (x86)\DAP\DAP.exe (SpeedBit Ltd.) HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\SysWOW64\winfxdocobj.exe (x) HKLM_ElevationPolicy\{6a0490af-eadc-416c-abda-d6146b8ea0ee} - C:\Program Files (x86)\DAP\DAPupd.exe (Speedbit Ltd.) HKLM_ElevationPolicy\{6A7C9604-8A57-4B28-821B-BDEDF0E04788} - C:\Program Files\Microsoft Office\Office14\winproj.exe (x) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files (x86)\Internet Explorer\iedw.exe (x) HKLM_ElevationPolicy\{B43A0C1E-B63F-4691-B68F-CD807A45DA01} - C:\Windows\system32\TSWbPrxy.exe (x) BHO\{FF6C3CF0-4B15-11D1-ABED-709549C10000} - "Download Accelerator Plus Integration" (C:\PROGRA~2\DAP\DAPIEL~1.DLL) ======================================== C:\Program Files (x86)\Ad-Remover\Quarantine: 0 Fichier(s) C:\Program Files (x86)\Ad-Remover\Backup: 1 Fichier(s) C:\Ad-Report-SCAN[1].txt - 26/06/2011 23:29:49 (4788 Octet(s)) Fin à: 23:30:31, 26/06/2011 ============== E.O.F ============== si là, je me souviens de la même chose que maintenant : ad-removera comme maintenant : au nettoyage le burau n'a pas disparu et à l'instant j'ai relancé ad-remover mais je ne peux nettoyer car, c'est grisé;;

BONJOUR, en principe oui. Je suis dans 1 endroit ou n'y a pas d'internet donc pas mon pc, je serai rentré demainje vérifierais ce que j'ai peut-être raté je te remercie à +

bonsoir, merci d'avoir patienter ja rentre du taf que ce soir; alors voilà pour MBAM ( le bureau ne s'est pas effacé, rien d e spécial):Malwarebytes' Anti-Malware 1.51.0.1200 www.malwarebytes.org Version de la base de données: 6773 Windows 6.1.7601 Service Pack 1 Internet Explorer 8.0.7601.17514 05/06/2011 00:53:35 mbam-log-2011-06-05 (00-53-35).txt Type d'examen: Examen complet (C:\|) Elément(s) analysé(s): 240927 Temps écoulé: 22 minute(s), 4 seconde(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 0 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): (Aucun élément nuisible détecté)

voici MBAM : CMalwarebytes' Anti-Malware 1.51.0.1200 www.malwarebytes.org Version de la base de données: 6705 Windows 6.1.7601 Service Pack 1 Internet Explorer 8.0.7601.17514 01/06/2011 00:01:04 mbam-log-2011-06-01 (00-00-57).txt Type d'examen: Examen complet (C:\|J:\|) Elément(s) analysé(s): 253440 Temps écoulé: 28 minute(s), 29 seconde(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 1 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): c:\torrent 411\videos completes\logiciels\microsoft.office.2010.vf.64.bit.french.retail.final.by.parisien99.sms{up mick1973}\mini-kms_activator_v1.052\mini-kms_activator_v1.052.exe (Riskware.Keygen) -> No action taken.

voici rapport Ad-c : ======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 ======= Mis à jour par TeamXscript le 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com Site web: http://www.teamxscript.org C:\Program Files (x86)\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 23:10:55 le 31/05/2011, Mode normal Microsoft Windows 7 Édition Intégrale Service Pack 1 (X64) tuyen@TUYEN-PC (PACKARD BELL BV IMEDIA X9651) ============== RECHERCHE ============== Clé trouvée: HKLM\Software\Classes\Interface\{384FE458-A963-450D-9187-EEFF81913FD0} ============== SCAN ADDITIONNEL ============== **** Mozilla Firefox Version [4.0.1 (fr)] **** Searchplugins\bing.xml ( hxxp://www.bing.com/search) Components\browsercomps.dll (Mozilla Foundation) HKLM_Extensions|searchpredict@speedbit.com - C:\Program Files (x86)\SearchPredict\SPFireFox HKCU_Extensions|{F17C1572-C9EC-4e5c-A542-D05CBB5C5A08} - C:\Program Files (x86)\DAP\DAPFireFox -- C:\Users\tuyen\AppData\Roaming\Mozilla\FireFox\Profiles\a9mzb9d5.default -- Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} (Google Toolbar for Firefox) Searchplugins\speedbit.xml (hxxp://search.speedbit.com/searchresults.asp) Prefs.js - browser.search.defaultenginename, SpeedBit Search Prefs.js - browser.search.defaulturl, hxxp://search.speedbit.com/searchresults.asp?src=default&q= Prefs.js - browser.search.selectedEngine, Google Prefs.js - browser.startup.homepage, hxxp://search.speedbit.com Prefs.js - browser.startup.homepage_override.buildID, 20110413222027 Prefs.js - browser.startup.homepage_override.mstone, rv:2.0.1 Prefs.js - browser.startup.homepage_override_url, hxxp://search.speedbit.com ======================================== **** Google Chrome Version [11.0.696.71] **** Extension\ffdcfjdljhbehggjdkdioajnknjcpbjb (C:\Program Files (x86)\DAP\DAPChrome\DAPChrome6.crx) (?) -- C:\Users\tuyen\AppData\Local\Google\Chrome\User Data\Default -- Preferences - default_search_provider: "SpeedBit Search" (Activé: true) (hxxp://search.speedbit.com/searchresults.asp?src=default&q={searchTerms}) Preferences - homepage: hxxp://search.speedbit.com Preferences - homepage_is_newtabpage: false Plugin - "getPlusPlus for Adobe 162100" (Activé: true) ======================================== **** Internet Explorer Version [8.0.7601.17514] **** HKCU_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKCU_Main|Start Page - hxxp://search.speedbit.com HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://go.microsoft.com/fwlink/?LinkId=69157 AboutUrls|Tabs - hxxp://search.speedbit.com/tab/ HKCU_SearchScopes\{7F4EFF06-7032-458e-AE16-1C1D8255C28A} - "SpeedBit Search" (hxxp://search.speedbit.com/searchresults.asp?src=default&q={searchTerms}) HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\SysWOW64\wpcer.exe (x) HKLM_ElevationPolicy\{08f24d68-9087-4b24-81ad-7b34af3e3ed6} - C:\Program Files (x86)\DAP\DAP.exe (SpeedBit Ltd.) HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\SysWOW64\winfxdocobj.exe (x) HKLM_ElevationPolicy\{6a0490af-eadc-416c-abda-d6146b8ea0ee} - C:\Program Files (x86)\DAP\DAPupd.exe (Speedbit Ltd.) HKLM_ElevationPolicy\{6A7C9604-8A57-4B28-821B-BDEDF0E04788} - C:\Program Files\Microsoft Office\Office14\winproj.exe (x) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files (x86)\Internet Explorer\iedw.exe (x) HKLM_ElevationPolicy\{B43A0C1E-B63F-4691-B68F-CD807A45DA01} - C:\Windows\system32\TSWbPrxy.exe (x) BHO\{389943B0-C3A2-4E69-82CB-8596A84CB3DC} - "SearchPredictObj Class" (C:\PROGRA~2\SEARCH~1\SEARCH~1.DLL) BHO\{FF6C3CF0-4B15-11D1-ABED-709549C10000} - "Download Accelerator Plus Integration" (C:\PROGRA~2\DAP\DAPIEL~1.DLL) ======================================== C:\Program Files (x86)\Ad-Remover\Quarantine: 0 Fichier(s) C:\Program Files (x86)\Ad-Remover\Backup: 1 Fichier(s) C:\Ad-Report-SCAN[1].txt - 31/05/2011 23:12:29 (4119 Octet(s)) Fin à: 23:13:05, 31/05/2011 ============== E.O.F ==============

bonsoir! voici le rapport : Rapport de ZHPFix 1.12.3288 par Nicolas Coolman, Update du 29/05/2011 Fichier d'export Registre : C:\ZHPExportRegistry-31-05-2011-22-48-21.txt Run by tuyen at 31/05/2011 22:48:21 Windows 7 Ultimate Edition, 64-bit Service Pack 1 (Build 7601) Web site : ZHPFix Fix de rapport ========== Logiciel(s) ========== O42 - Logiciel: PcTuto 1.1 - (.Agence-Exclusive.) [HKLM][64Bits] -- PcTuto_is1 => Logiciel absent O42 - Logiciel: Tuto Emule1.0.0.0 - (.PCTuto.) [HKLM][64Bits] -- Tuto Emule_is1 => Logiciel absent ========== Clé(s) du Registre ========== HKCU\Software\Agence-Exclusive => Clé supprimée avec succès HKLM\Software\Agence-Exclusive => Clé absente HKLM\Software\Wow6432Node\Agence-Exclusive => Clé supprimée avec succès HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\PcTuto_is1 => Clé absente ========== Valeur(s) du Registre ========== O4 - HKLM\..\Wow6432Node\Run: [pctuto] . (.PcTuto - PcTuto.) -- C:\Program Files (x86)\Agence-Exclusive\pctuto.exe => Valeur supprimée avec succès O4 - HKLM\..\Wow6432Node\RunOnce: [autoupdater] . (.Agence-Exclusive - autoupdater.) -- C:\Users\tuyen\AppData\Roaming\Agence-Exclusive\Agence-Exclusive\autoupdater.exe => Valeur supprimée avec succès [HKLM\Software\Microsoft\Windows\CurrentVersion\Run]:PCTuto => Valeur absente ========== Dossier(s) ========== C:\Users\tuyen\AppData\Roaming\Agence-Exclusive => Supprimé et mis en quarantaine C:\Users\tuyen\Appdata\Local\Agence-Exclusive => Supprimé et mis en quarantaine C:\Program Files (x86)\Agence-Exclusive => Supprimé et mis en quarantaine C:\Program Files (x86)\PCTuto => Supprimé et mis en quarantaine c:\programdata\microsoft\windows\start menu\programs\pctuto => Supprimé et mis en quarantaine Dossiers temporaires Windows supprimés: 25 Dossiers Flash Cookies supprimés : 140 ========== Fichier(s) ========== c:\users\tuyen\appdata\roaming\agence-exclusive\agence-exclusive\autoupdater.exe [671360] => Fichier absent c:\program files (x86)\agence-exclusive\pctuto.exe [1035904] => Fichier absent c:\users\tuyen\appdata\roaming\agence-exclusive => Fichier absent c:\users\tuyen\appdata\local\agence-exclusive => Fichier absent c:\documents and settings\tuyen\local settings\application data\agence-exclusive => Fichier absent Fichiers temporaires Windows supprimés : 59 Fichiers Flash Cookies supprimés : 26 ========== Récapitulatif ========== 4 : Clé(s) du Registre 3 : Valeur(s) du Registre 7 : Dossier(s) 7 : Fichier(s) 2 : Logiciel(s) End of the scan

BONSOIR, merci de t'intéresser à mon souci : voici le lien "ci-joint.fr" : Cijoint.fr - Service gratuit de dépôt de fichiers bon, ben j'espère que c'était ainsi qu'il fallait procéder ... A+

HELLO! 4..5 fenêtre de publicité , pas méchantes apparemment ,(j'ai MBAM, iobit, antivir) s'affichent et je ne parviens pas à les éradiquées. question : comment faire ? je te remercie d'avance

bonsoir Leminou merci de ta réponse il ne me serait pas inutile de m'indiquer comment pratiquer 'remettre en interne' mon disque dur sur ma tour , je ne pourrais m'en occuper qu'à mon retour..et mettre en pratique cette passionnante démarche en attendant de pouvoir te lire, bonne soirée MCFIVE

BONSOIR TICLOU, j'ignore ce qu'il faut effectuer comme tâche pour " remettre en interne" . Désolé Ticlou, mais je n'ai guère fait de progrès depuis ton dernier soutien pour l'instant, je suis dans la Pampa sans disques dur je rentrerais dans qques jours; donc là je pense pouvoir continuer mon expérience avec toi Merci beaucoup; A+

BONJOUR A TOUTES ET A TOUS! toujours néophite MON DISQUE DUR ANCIEN "STOREX" 1 To(western digital sata/8MB cache) a été remis dans 1 une boite à disque dur et enfin, était reconnu régulièrement jusqu' à ce jour. Il m'est demandé de " formater" avant de l'utiliser : cela a commencé par ne pas être reconnu puis reconnu...puis 1 autre fois reconnecté mais non reconnu puiis reconnu au bout d'1 demi heure et là maintenant ...RIEN ! aucune présence etc... Mais là c'est grave ... Je voudrais évidemment transférer mes données ailleurs ... Que puis je faire SVP Peux-t'on m'aider ?? merci beaucoup

BONJOUR TICLOU, apparemment c'était avast qui posait des problèemes...Je vais me satisfaire de cela pour l'instant , Peux tu me dire comment je dois faire pour clore 'il te plait? merci Mcfive

Bonsoir Ticlou, Meilleurs voeux pour cette année 2010; Tonton à bien trouver mon PC, j'ai essayer de trouver dans mon pc sa trouvaille , mais je n'ai pas compris ou trouver l'équivalent du chemin précis qu'il a utilisé. VOICI CE QUE J 'AI TENTE : j'ai désinstallé mon antivirus AVAST remplacé par ANTIVIR... et là, mon PC à repris 1 comportement à 90% .mais 1 message ressort quand je clique : " typeError: Components.classes [cid] is undefined " sur l'icône Mozilla Firerefox et que faire ? Bonne nuit mcfive

BONSOIR, Je te souhaite aussi 1 très bonne année. Bien vu l'artiste ! c'est bien celui là , (seulement le PC) je ne m'y attendais pas! Mais où est le chemin pour trouver tout cela ?? PAR CONTRE, VOICI CE QUE J 'AI TENTE : j'ai désinstallé mon antivirus AVAST remplacé par ANTIVIR... et là, mon PC à repris 1 comportement à 90% .mais 1 message ressort quand je clique : " typeError: Components.classes [cid] is undefined " sur l'icône Mozilla Firerefox et que faire ? Bonne nuit mcfive

BONSOIR,

BONJOUR, j'espère que ces fêtes de Noel seront 1 bon souvenir pour toi Ticlou. l'indication marquée derrière mon pc qui mamanquait à ce que je t'ai indiqué plus haut("Model/Type ref : UTOW-SFR S/N : 101239610371 P/N : PB80X14802") est : MS Model N° : SFC 20. Je ne comprends pas la raison pour laquelle on ne retrouve pas le visuel sur leur site, car à " l'époque" le visuel de cet ordi était montré avec beaucoup de versions. Mais mon pc n'indique pas PT ou PV mais IMEDIA X... ; Mais ce que je peux trouver est que l'on dit que la carte graphique n'est pas à la hauteur du processeur voilà

salut, dans quel coin et comment je peux trouver ces références qui commencent par PT ou PV stp? MERCI

* salut tonton57, peux-tu mde dire ou je trouve ou fait pour touver ma config, stp? merci