kader66

Bonjour tous le monde Voilà, je viens vers vous parce que j'ai besoin de votre aide. En effet, je pense que mon pc est très infecté, car j'essaie de le desinfecter avec plusieurs outils de désinfections, ou il bloque au beau milieu de l'inspection ou il ne demarre carrement pas. J'ai passé un petit coup de ZHP et voici son diagnostique : ~ Rapport de ZHPDiag v2014.8.13.118 - Nicolas Coolman (13/08/2014) ~ Lancé par momo (16/08/2014 14:43:18) ~ Adresse du Site Web http://nicolascoolman.fr ~ Adresse du Forum http://forum.nicolascoolman.fr ~ Traduit par Nicolas Coolman ~ Etat de la version : Version à jour. ~ Liste blanche : Désactivée par l'utilisateur ~ Elévation des Privilèges : OK ~ User Account Control (UAC): Activate by user ---\\ Navigateurs Internet MSIE: Internet Explorer v11.0.9600.17126 GCIE: Google Chrome v36.0.1985.125 (Defaut) ---\\ Informations sur les produits Windows ~ Langage: Français Windows 7 Home Premium, 32-bit Service Pack 1 (Build 7601) Windows Server License Manager Script : OK ~ Windows Operating System - Windows® 7, OEM_COA_SLP channel Windows ID Activation : OK ~ Windows Partial Key : PKC6M Windows License : OK ~ Windows Remaining Initializations Number : 4 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ Logiciels de protection du système avast! Free Antivirus v9.0.2018 Malwarebytes Anti-Malware version 2.0.2.1012 Windows Defender W7 (Activate) ---\\ Logiciels d'optimisation du système CCleaner v4.16 ---\\ Logiciels de partage PeerToPeer ---\\ Surveillance de Logiciels Adobe Flash Player 11 ActiveX ---\\ Informations sur le système ~ Processor: x86 Family 16 Model 6 Stepping 3, AuthenticAMD ~ Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 3322 MB (65% free) System Restore: Activé (Enable) System drive C: has 350 GB (78%) free of 445 GB ---\\ Mode de connexion au système ~ Computer Name: MOMO-PC ~ User Name: momo ~ All Users Names: momo, HomeGroupUser$, Administrateur, ~ Unselected Option: None Logged in as Administrator ---\\ Variables d'environnement ~ System Unit : C:\ ~ %AppZHP% : C:\Users\momo\AppData\Roaming\ZHP\ ~ %AppData% : C:\Users\momo\AppData\Roaming\ ~ %Desktop% : C:\Users\momo\Desktop\ ~ %Favorites% : C:\Users\momo\Favorites\ ~ %LocalAppData% : C:\Users\momo\AppData\Local\ ~ %StartMenu% : C:\Users\momo\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ Enumération des unités disques C: Hard drive, Flash drive, Thumb drive (Free 350 Go of 445 Go) D: Hard drive, Flash drive, Thumb drive (Free 3 Go of 20 Go) E: Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go) F: CD-ROM drive (Not Inserted) G: CD-ROM drive (Not Inserted) H: Floppy drive, Flash card reader, USB Key (Free 22 Go of 30 Go) I: CD-ROM drive (Not Inserted) ---\\ Etat du Centre de Sécurité Windows [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date ~ Security Center: 50 Scanned in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 06:30:54.) -- C:\Windows\Explorer.exe [2616320] [MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:14:45.) -- C:\Windows\System32\Wininit.exe [96256] [MD5.771CDBC3D62437D6DB070820BB1EDCCF] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.30/05/2014 - 08:21:10.) -- C:\Windows\System32\wininet.dll [1790976] [MD5.998507B046BA314CE8245364C686FA67] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.04/03/2014 - 10:17:02.) -- C:\Windows\System32\Winlogon.exe [304128] [MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 13:21:24.) -- C:\Windows\System32\sppcomapi.dll [193536] [MD5.F81BB7E487EDCEAB630A7EE66CF23913] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.14/09/2013 - 01:48:58.) -- C:\Windows\system32\Drivers\AFD.sys [338944] [MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:26:15.) -- C:\Windows\system32\Drivers\atapi.sys [21584] [MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:11:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [70656] [MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 09:38:10.) -- C:\Windows\system32\Drivers\Cdrom.sys [108544] [MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 09:42:32.) -- C:\Windows\system32\Drivers\DfsC.sys [78336] [MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 10:59:29.) -- C:\Windows\system32\Drivers\HDAudBus.sys [108544] [MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:11:24.) -- C:\Windows\system32\Drivers\i8042prt.sys [80896] [MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 00:54:29.) -- C:\Windows\system32\Drivers\IpNat.sys [101888] [MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:17:22.) -- C:\Windows\system32\Drivers\MRxSmb.sys [123904] [MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 09:39:44.) -- C:\Windows\system32\Drivers\netBT.sys [187904] [MD5.C8DFF8D07755A66C7A4A738930F0FEAC] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24/01/2014 - 03:18:22.) -- C:\Windows\system32\Drivers\ntfs.sys [1212352] [MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 00:45:35.) -- C:\Windows\system32\Drivers\Parport.sys [79360] [MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.14/07/2009 - 00:54:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [78848] [MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 00:53:41.) -- C:\Windows\system32\Drivers\smb.sys [71168] [MD5.B459575348C20E8121D6039DA063C704] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 09:39:17.) -- C:\Windows\system32\Drivers\tdx.sys [74752] [MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 13:30:16.) -- C:\Windows\system32\Drivers\volsnap.sys [245632] ~ Generic Processes: Scanned in 00mn 00s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 1/117 ~ Mes musiques (My Musics) : 103/464 ~ Mes Favoris (My Favorites) : 1/26 ~ Mes Documents (My Documents) : 1/5462 ~ Mon Bureau (My Desktop) : 1/432 ~ Menu demarrer (Programs) : 1/29 ~ Hidden Files: Scanned in 00mn 07s ---\\ Processus lancés [MD5.F4A92F112DF5A27C542EC0C0B41ABAEF] - (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [309688] [PID.4036] [MD5.C861851A0BBD9903E324487011AA3705] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [299008] [PID.4044] [MD5.21B8FAAFA5CCD89663AAD5833ABF4B35] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe [3890208] [PID.4056] [MD5.7DFCA126F3C2AAA5AABE5DD85C3830CA] - (.AMD - HydraDM.) -- C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe [393216] [PID.4076] [MD5.19CB8B3851F40518DC639C0613273122] - (.Broadcom Corporation. - Bluetooth Tray Application.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [840992] [PID.4092] [MD5.D28C5A1411BB0B47E05E0D6AAF896690] - (.ATI Technologies Inc. - Catalyst Control Center: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [299008] [PID.2764] [MD5.1D721C0A479F378326EA770B3E6FABEE] - (.Broadcom Corporation. - Bluetooth Stack COM Server.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe [2852128] [PID.4928] [MD5.8C1DC5D4FA169AF131AEFCB6ED77A52D] - (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\32788R22FWJFW\cmd.3XE [302592] [PID.5424] [MD5.166711258E34D66FF8E726CA98F51448] - (.Sysinternals - Handle viewer.) -- C:\32788R22FWJFW\handle.3XE [417136] [PID.6020] [MD5.A63DC5C2EA944E6657203E0C8EDEAF61] - (.Microsoft Corporation - COM Surrogate.) -- C:\Windows\system32\DllHost.exe [7168] [PID.944] [MD5.DC2E338E63159454B71659D82515A04E] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8091648] [PID.2268] ~ Processes Running: Scanned in 00mn 00s ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users\momo\AppData\Local\Google\Chrome\User Data\Default\Preferences G0 - GCSP: Preference [user Data\Default][HomePage] G2 - GCE: Preference [user Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Store v.0.2 (Activé) G2 - GCE: Preference [user Data\Default] [booedmolknjekdopkepjjeckmjkdpfgl] Extutil v.0.1 (Activé) =>PUP.Manager G2 - GCE: Preference [user Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Recherche Google v.0.0.0.20 (Activé) G2 - GCE: Preference [user Data\Default] [dgkjhlnnlabicokdgaecdeihkdlkdhjm] GExtend v.213 (Désactivé) G2 - GCE: Preference [user Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activé) G2 - GCE: Preference [user Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.2 (Activé) G2 - GCE: Preference [user Data\Default] [flpcjncodpafbgdpnkljologafpionhb] Managera v.0.1 (Activé) =>PUP.Manager G2 - GCE: Preference [user Data\Default] [gfdkimpbcpahaombhbimeihdjnejgicl] Feedback v.1.0 (Activé) G2 - GCE: Preference [user Data\Default] [kmendfapggjehodndflmmgagdbamhnfd] CryptoTokenExtension v.0.0.1 (Activé) G2 - GCE: Preference [user Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activé) G2 - GCE: Preference [user Data\Default] [mfffpogegjflfpflabcdkioaeobkgjik] GaiaAuthExtension v.0.0.1, (Activé) G2 - GCE: Preference [user Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activé) G2 - GCE: Preference [user Data\Default] [mpfgbnknfnfkhafbllpdimdefhopfckf] Zootool for Chrome v.131 (Désactivé) G2 - GCE: Preference [user Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Activé) G2 - GCE: Preference [user Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Activé) G2 - GCE: Preference [user Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Wallet v.0.0.6.1 (Activé) G2 - GCE: Preference [user Data\Default] [pafkbggdmjlpgkdkcbjmhmfcdpncadgh] Google Now v.1.2.0.1 (Activé) G2 - GCE: Preference [user Data\Default] [pelmeidfhdlhlbjimpabfcbnnojbboma] Quick start v.4.5.7, (Désactivé) =>PUP.QuickStart ---\\ Liste des dossiers d'extension Google Chrome G2 - EXT: C:\Users\momo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [Recherche Google] G2 - EXT: C:\Users\momo\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgkjhlnnlabicokdgaecdeihkdlkdhjm [GExtend] G2 - EXT: C:\Users\momo\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpfgbnknfnfkhafbllpdimdefhopfckf [Zootool for Chrome] G2 - EXT: C:\Users\momo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [Google Wallet] ~ Google Lines Browser: 23 Scanned in 00mn 04s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) P2 - FPN: [HKLM] [@esn/esnlaunch,version=1.104.0] - (.ESN Social Software AB - 1.104.0.) -- C:\Program Files\Battlelog Web Plugins\1.104.0\npesnlaunch.dll P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll =>.Google Inc P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com # win # 6.5.0.1.) -- C:\Program Files\ma-config.com\nphardwaredetection.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\momo\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\momo\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll ~ Firefox Browser: 7 Scanned in 00mn 00s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Google Inc. - Google Update.) (No version) -- (.not file.) R3 - URLSearchHook: YTNavAssistPlugin Class - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} . (.Google Inc. - Google Update.) (No version) -- (.not file.) R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 ~ IE Browser: 13 Scanned in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\\ Hosts file redirection (O1) ~ Le fichier hôte est sain (The hosts file is clean). ~ Hosts File: Scanned in 00mn 00s ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} . (...) -- C:\Program Files\SupTab\SupTab.dll (.not file.) =>PUP.SupTab O2 - BHO: tpeorrfeecTocouepoN - {42F1E8A3-0CD4-5A6E-BECD-D7E99C1AF45F} . (...) -- C:\ProgramData\tpeorrfeecTocouepoN\HW5IqY.dll =>PUP.TPerfectCoupon O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll ~ BHO: 8 Scanned in 00mn 00s ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline ~ Toolbar: Scanned in 00mn 00s ---\\ Autres liens utilisateurs (O4) O4 - GS\QuickLaunch [momo]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\TaskBar [momo]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Users\momo\AppData\Local\Google\Chrome\Application\chrome.exe O4 - GS\Program [momo]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\SystemTools [momo]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\Desktop [momo]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Users\momo\AppData\Local\Google\Chrome\Application\chrome.exe O4 - GS\Desktop [momo]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ~ Global Startup: 6 Scanned in 00mn 02s ---\\ Applications lancées au démarrage du système (O4) O4 - HKLM\..\Run: [startCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe =>.Advanced Micro Devices, Inc O4 - HKLM\..\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe =>.Samsung Electronics Co O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\momo\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc O4 - HKCU\..\Run: [HydraVisionDesktopManager] . (.AMD - HydraDM.) -- C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe O4 - HKCU\..\Run: [sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-2195301631-1690436889-3112510664-1000\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\momo\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc O4 - HKUS\S-1-5-21-2195301631-1690436889-3112510664-1000\..\Run: [HydraVisionDesktopManager] . (.AMD - HydraDM.) -- C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe O4 - HKUS\S-1-5-21-2195301631-1690436889-3112510664-1000\..\Run: [sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation ~ Application: Scanned in 00mn 00s ---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5) O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no ~ IE Control Panel: 1 Scanned in 00mn 00s ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} . (...) -- C:\Program Files\WIDCOMM\Bluetooth Software\bt_hot_icon.ico ~ IE Extra Buttons: Scanned in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =>.Microsoft Corporation O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll ~ Winsock: 7 Scanned in 00mn 00s ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} ((no name)) - http://fichiers2.touslesdrivers.com/maconfig/MaConfig_6_0_3_0.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://active.macromedia.com/flash2/cabs/swflash.cab ~ Objets ActiveX: Scanned in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{3755E528-02B1-42B4-BE33-EB7EEBEDC0C7}: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CCS\Services\Tcpip\..\{51B10FB8-BAA1-48D4-8B6F-35E3A87C4B5D}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\..\{608E9C80-8DF7-461B-899A-F8C59EF23853}: DhcpNameServer = 212.27.40.241 212.27.40.240 O17 - HKLM\System\CCS\Services\Tcpip\..\{820C69EE-64F4-4650-B2F5-D89AC126FFA1}: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CCS\Services\Tcpip\..\{9AA70520-41A1-421A-9719-CC67B1CDF04F}: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CS1\Services\Tcpip\..\{3755E528-02B1-42B4-BE33-EB7EEBEDC0C7}: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CS1\Services\Tcpip\..\{51B10FB8-BAA1-48D4-8B6F-35E3A87C4B5D}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CS1\Services\Tcpip\..\{608E9C80-8DF7-461B-899A-F8C59EF23853}: DhcpNameServer = 212.27.40.241 212.27.40.240 O17 - HKLM\System\CS1\Services\Tcpip\..\{820C69EE-64F4-4650-B2F5-D89AC126FFA1}: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CS1\Services\Tcpip\..\{9AA70520-41A1-421A-9719-CC67B1CDF04F}: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CS2\Services\Tcpip\..\{3755E528-02B1-42B4-BE33-EB7EEBEDC0C7}: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CS2\Services\Tcpip\..\{51B10FB8-BAA1-48D4-8B6F-35E3A87C4B5D}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CS2\Services\Tcpip\..\{608E9C80-8DF7-461B-899A-F8C59EF23853}: DhcpNameServer = 212.27.40.241 212.27.40.240 O17 - HKLM\System\CS2\Services\Tcpip\..\{820C69EE-64F4-4650-B2F5-D89AC126FFA1}: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CS2\Services\Tcpip\..\{9AA70520-41A1-421A-9719-CC67B1CDF04F}: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 ~ Domain: Scanned in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft ®.) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation ~ Protocole Additionnel: Scanned in 00mn 00s ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. ~ SSODL: 1 Scanned in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: Andrea ST Filters Service (AESTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) - C:\Program Files\IDT\WDM\aestsrv.exe O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe O23 - Service: AMD FUEL Service (AMD FUEL Service) . (.Advanced Micro Devices, Inc. - Service Fusion Utility.) - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: Bluetooth Service (btwdins) . (.Broadcom Corporation. - Bluetooth Support Server.) - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc O23 - Service: HP Service (hpsrv) . (.Hewlett-Packard Company - HpService.) - C:\Windows\System32\Hpservice.exe O23 - Service: PnkBstrA (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe O23 - Service: C:\Windows\System32\stlang.dll (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Program Files\IDT\WDM\STacSV.exe ~ Services: 9 Scanned in 00mn 05s ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(...) - (.not file.) ~ Desktop Component: 4 Scanned in 00mn 00s ---\\ Enumère les données de BootExecute (BEX) (O34) O34 - HKLM BootExecute: (autocheck autochk *) - File not found ~ BEX: 1 Scanned in 00mn 00s ---\\ Tâches planifiées en automatique (O39) [MD5.88077CF32319BEE612C82EBF54680DE8] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [4626712] [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [136176] [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [136176] [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-2195301631-1690436889-3112510664-1000Core] (.Google Inc..) -- C:\Users\momo\AppData\Local\Google\Update\GoogleUpdate.exe [136176] [MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskUserS-1-5-21-2195301631-1690436889-3112510664-1000UA] (.Google Inc..) -- C:\Users\momo\AppData\Local\Google\Update\GoogleUpdate.exe [136176] [MD5.00000000000000000000000000000000] [APT] [{3497F2B0-9967-4E90-ADF9-7F1CFFF51410}] (...) -- C:\Program Files\Origin Games\Battlefield 3\bf3.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{45E01A5B-8973-4D1E-A18D-CBBC307696C8}] (...) -- F:\SETUP.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{63DB0B82-B4AC-45EB-8CD6-5836894C786A}] (...) -- C:\Program Files\Origin Games\Medal of Honor Warfighter\MOHW.exe (.not file.) [0] [MD5.E3CD0A561F3AABE8607BF1474F4AE1DD] [APT] [{948A7CEC-81D1-4DB6-9995-506B55EAC915}] (.Valve Corporation.) -- C:\Program Files\Steam\Steam.exe [1354736] [MD5.E3CD0A561F3AABE8607BF1474F4AE1DD] [APT] [{C58794F7-1298-46ED-A047-499972CA9246}] (.Valve Corporation.) -- C:\Program Files\Steam\Steam.exe [1354736] [MD5.00000000000000000000000000000000] [APT] [{C8C8B958-6140-42CB-9E47-CC7317A2859A}] (...) -- C:\Program Files\Origin Games\Battlefield 3\bf3.exe (.not file.) [0] [MD5.E3CD0A561F3AABE8607BF1474F4AE1DD] [APT] [{C974D8BD-6E55-4E8D-BD9E-DF232E5831CB}] (.Valve Corporation.) -- C:\Program Files\Steam\Steam.exe [1354736] [MD5.00000000000000000000000000000000] [APT] [{D9450142-94B5-4A2A-8711-30762CF7B400}] (...) -- C:\Program Files\Rockstar Games\Max Payne 3\PlayMaxPayne3.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{E477A837-DBA0-4536-A0B3-9C887576A42D}] (...) -- C:\Program Files\Origin Games\Medal of Honor Warfighter\MOHW.exe (.not file.) [0] [MD5.E3CD0A561F3AABE8607BF1474F4AE1DD] [APT] [{F8FF9CCB-B836-4569-8592-91FA13A42578}] (.Valve Corporation.) -- C:\Program Files\Steam\Steam.exe [1354736] O39 - APT: - (..) -- C:\Windows\Tasks\f2a1313a-f96e-45ae-aabb-8491e8b7292f-3.job [3020] =>PUP.CrossRider O39 - APT: - (..) -- C:\Windows\Tasks\f4d750ed-8bd4-49b4-bb12-1d791b6cd184-11.job [3678] O39 - APT: - (..) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2195301631-1690436889-3112510664-1000Core.job [902] O39 - APT: - (..) -- C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job [920] O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1048] O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1048] O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1052] O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1052] O39 - APT: GoogleUpdateTaskUserS-1-5-21-2195301631-1690436889-3112510664-1000Core - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2195301631-1690436889-3112510664-1000Core.job [1022] O39 - APT: GoogleUpdateTaskUserS-1-5-21-2195301631-1690436889-3112510664-1000Core - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2195301631-1690436889-3112510664-1000Core [1022] O39 - APT: GoogleUpdateTaskUserS-1-5-21-2195301631-1690436889-3112510664-1000UA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2195301631-1690436889-3112510664-1000UA.job [1074] O39 - APT: GoogleUpdateTaskUserS-1-5-21-2195301631-1690436889-3112510664-1000UA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2195301631-1690436889-3112510664-1000UA [1074] ~ Scheduled Task: 24 Scanned in 00mn 03s ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation O40 - ASIC: Microsoft Windows Media Player 12.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll =>.Microsoft Corporation O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll O40 - ASIC: Internet Explorer - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe =>.Microsoft Corporation O40 - ASIC: Microsoft Windows - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe =>.Microsoft Corporation O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll ~ Active Setup: 10 Scanned in 00mn 00s ---\\ Pilotes lancés au démarrage du système (O41) O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys O41 - Driver: (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\drivers\aswRdr2.sys O41 - Driver: (aswSnx) . (.AVAST Software - avast! Virtualization Driver.) - C:\Windows\system32\drivers\aswSnx.sys O41 - Driver: (aswSP) . (.AVAST Software - avast! self protection module.) - C:\Windows\system32\drivers\aswSP.sys O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys O41 - Driver: (dtsoftbus01) . (.Disc Soft Ltd - DAEMON Tools Virtual Bus Driver.) - C:\Windows\System32\DRIVERS\dtsoftbus01.sys O41 - Driver: (ISODrive) . (.EZB Systems, Inc. - ISO DVD/CD-ROM Device Driver.) - C:\Program Files\UltraISO\drivers\ISODrive.sys O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys O41 - Driver: C:\Windows\System32\drivers\ws2ifsl.sys (ws2ifsl) . (.Microsoft Corporation - Couche IFS Winsock2.) - C:\Windows\system32\drivers\ws2ifsl.sys ~ Drivers: 78 Scanned in 00mn 00s ---\\ Logiciels installés (O42) O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM] -- {A25FF1C0-80B6-4B8B-A551-DC525697A408} O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM] -- {9CE4B7FA-8626-316B-B483-FCEF49E27430} O42 - Logiciel: AMD Drag and Drop Transcoding - (.ATI Technologies Inc..) [HKLM] -- {A4B7D086-851B-8830-2F80-DC5AE26B3918} O42 - Logiciel: AMD Media Foundation Decoders - (.Advanced Micro Devices, Inc..) [HKLM] -- {7229C35E-2DE5-1474-CD08-446295F69747} O42 - Logiciel: ATI AVIVO Codecs - (.ATI Technologies Inc..) [HKLM] -- {A6359393-A150-C390-4BE5-FF2AB35116EA} O42 - Logiciel: ATI Problem Report Wizard - (.ATI Technologies.) [HKLM] -- {19297666-0519-F4BF-3D3C-B8C1883755E2} O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX O42 - Logiciel: Belkin F7D1102 Surf Wireless Micro USB Adapter - (...) [HKLM] -- {B20F9D1C-A0A5-4cd8-8306-DA03872311B1} O42 - Logiciel: Broadcom 802.11 Network Adapter - (.Broadcom Corporation.) [HKLM] -- Broadcom 802.11 Network Adapter O42 - Logiciel: Browseri_Appe 1.2 - (.app.) [HKLM] -- Browseri_Appe 1.2 =>PUP.BrowseriAppe O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM] -- {0E33EC53-22CE-426C-A88B-2AAC231BAC85} O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM] -- {64BF0187-F3D2-498B-99EA-163AF9AE6EC9} O42 - Logiciel: Cisco LEAP Module - (.Cisco Systems, Inc..) [HKLM] -- {51C7AD07-C3F6-4635-8E8A-231306D810FE} O42 - Logiciel: Cisco PEAP Module - (.Cisco Systems, Inc..) [HKLM] -- {ED5776D5-59B4-46B7-AF81-5F2D94D7C640} O42 - Logiciel: DAEMON Tools Lite - (.Disc Soft Ltd.) [HKLM] -- DAEMON Tools Lite =>.DT Soft Ltd O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKCU] -- Dropbox O42 - Logiciel: Go HD - (.InstallMoon.) [HKLM] -- Go HD O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome O42 - Logiciel: Google Earth Plug-in - (.Google.) [HKLM] -- {4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E} =>.Google Inc O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C} O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} O42 - Logiciel: HydraVision - (.ATI Technologies Inc..) [HKLM] -- {EA5700B4-7DD1-68DE-8F44-7C2B48E59572} O42 - Logiciel: IDT Audio - (.IDT.) [HKLM] -- {E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001} O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {F53369D2-7C15-4E1F-A843-6582D94C4759} O42 - Logiciel: Malwarebytes Anti-Malware version 2.0.2.1012 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes Anti-Malware_is1 O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {E10DB5DA-E576-40EA-A7FC-1CB2A7B283A6} O42 - Logiciel: Origin - (.Electronic Arts, Inc..) [HKLM] -- Origin O42 - Logiciel: Primal Carnage Dedicated Server - (...) [HKLM] -- Steam App 224620 O42 - Logiciel: Ravaged Dedicated Server - (...) [HKLM] -- Steam App 223160 O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM] -- {96AE7E41-E34E-47D0-AC07-1091A8127911} O42 - Logiciel: Rockstar Games Social Club - (.Rockstar Games.) [HKLM] -- Rockstar Games Social Club O42 - Logiciel: SAMSUNG USB Driver for Mobile Phones - (.SAMSUNG Electronics Co., Ltd..) [HKLM] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44} O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- InstallShield_{758C8301-2696-4855-AF45-534B1200980A} O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- {758C8301-2696-4855-AF45-534B1200980A} O42 - Logiciel: Serious Sam 3 Dedicated Server - (...) [HKLM] -- Steam App 41080 O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM] -- {048298C9-A4D3-490B-9FF9-AB023A9238F3} O42 - Logiciel: UltraISO Premium V9.51 - (...) [HKLM] -- UltraISO_is1 O42 - Logiciel: WIDCOMM Bluetooth Software - (.Broadcom Corporation.) [HKLM] -- {436E0B79-2CFB-4E5F-9380-E17C1B25D0C5} O42 - Logiciel: WindowsMangerProtect20.0.0.502 - (.WindowsProtect LIMITED.) [HKLM] -- WindowsMangerProtect =>PUP.Fuyu O42 - Logiciel: Yahoo! Software Update - (...) [HKLM] -- Yahoo! Software Update O42 - Logiciel: Yahoo! Toolbar - (...) [HKLM] -- Yahoo! Companion O42 - Logiciel: ZebHelpProcess 2014 - (.Nicolas Coolman.) [HKLM] -- ZebHelpProcess_is1 O42 - Logiciel: avast! Free Antivirus v9.0.2018 - (.Avast Software.) [HKLM] -- avast O42 - Logiciel: tpeorrfeecTocouepoN - (.tpaerFeectCCoupoN.) [HKLM] -- {23B82977-C816-92D2-66E7-BE67DD1E7786} =>PUP.TPerfectCoupon O42 - Logiciel: webssearches uninstall - (.webssearches.) [HKLM] -- webssearches uninstall =>Hijacker.WebsSearches ~ Logic: 38 Scanned in 00mn 00s ---\\ HKCU & HKLM Software Keys [HKCU\Software\ATI] [HKCU\Software\AppDataLow\Software\MarkAny] [HKCU\Software\AppDataLow\Software\Yahoo] [HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}] [HKCU\Software\AppDataLow] [HKCU\Software\Avast Software] [HKCU\Software\Borland] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\DT Soft] [HKCU\Software\Disc Soft] [HKCU\Software\EA Games] [HKCU\Software\ESET] [HKCU\Software\EasyBoot Systems] [HKCU\Software\Electronic Arts] [HKCU\Software\Evolved] [HKCU\Software\Facebook] [HKCU\Software\GameSpy] [HKCU\Software\Google] [HKCU\Software\IDT] [HKCU\Software\Licenses] [HKCU\Software\Logitech] [HKCU\Software\MOHWSplash] [HKCU\Software\Macromedia] [HKCU\Software\MozillaPlugins] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\Protect Software GmbH] [HKCU\Software\Samsung] [HKCU\Software\SupHpUISoft] =>PUP.CrossRider [HKCU\Software\Sysinternals] [HKCU\Software\Trolltech] [HKCU\Software\TutoTag] =>PUP.AgenceExclusive [HKCU\Software\Tutorials] =>PUP.AgenceExclusive [HKCU\Software\Valve] [HKCU\Software\Widcomm] [HKCU\Software\Yahoo] [HKCU\Software\ZebHelpProcess Helper] [HKCU\Software\cybelsoft] [HKCU\Software\freesofttoday] =>Adware.FreeSoftToday [HKLM\Software\AGEIA Technologies] [HKLM\Software\AMD] [HKLM\Software\ATI Technologies] [HKLM\Software\ATI] [HKLM\Software\AVAST Software] [HKLM\Software\Activision] [HKLM\Software\AdwCleaner] [HKLM\Software\BcmSetup] [HKLM\Software\Belkin International, Inc.] [HKLM\Software\Borland] [HKLM\Software\BrowserChoice] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\DT Soft] [HKLM\Software\Disc Soft] [HKLM\Software\ESN Launcher-1.104.0] [HKLM\Software\EasyBoot Systems] [HKLM\Software\Electronic Arts] [HKLM\Software\Even Balance] [HKLM\Software\FREESOFTTODAY] =>Adware.FreeSoftToday [HKLM\Software\FlvPlayer] [HKLM\Software\GlobalUpdate] [HKLM\Software\Google] [HKLM\Software\IDT] [HKLM\Software\Intel] [HKLM\Software\Khronos] [HKLM\Software\Licenses] [HKLM\Software\Macromedia] [HKLM\Software\Malwarebytes' Anti-Malware] [HKLM\Software\MozillaPlugins] [HKLM\Software\ODBC] [HKLM\Software\Origin Games] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\RTLSetup] [HKLM\Software\Realtek Semiconductor Corp.] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\Reviversoft] [HKLM\Software\Rockstar Games] [HKLM\Software\SAMSUNG] [HKLM\Software\Sonic] [HKLM\Software\SupDp] =>PUP.SupTab [HKLM\Software\Swearware] [HKLM\Software\Tutorials] =>PUP.AgenceExclusive [HKLM\Software\Valve] [HKLM\Software\WidCommUpdate] [HKLM\Software\Widcomm] [HKLM\Software\Wow6432Node] [HKLM\Software\Yahoo] [HKLM\Software\cybelsoft] [HKLM\Software\supTab] =>PUP.SupTab [HKLM\Software\supWPM] =>PUP.WpManager [HKLM\Software\supWindowsMangerProtect] =>PUP.Fuyu [HKLM\Software\webssearchesSoftware] =>Hijacker.WebsSearches ~ Key Software: 185 Scanned in 00mn 00s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 17/10/2011 - 20:33:51 - [] ----D C:\Program Files\AGEIA Technologies O43 - CFD: 27/10/2011 - 14:28:02 - [] ----D C:\Program Files\AMD APP O43 - CFD: 01/07/2009 - 02:21:48 - [] ----D C:\Program Files\ATI O43 - CFD: 27/10/2011 - 14:27:50 - [] ----D C:\Program Files\ATI Technologies O43 - CFD: 26/10/2012 - 01:11:22 - [] ----D C:\Program Files\AVAST Software O43 - CFD: 18/06/2014 - 13:45:38 - [] ----D C:\Program Files\Battlelog Web Plugins O43 - CFD: 29/03/2014 - 20:25:48 - [] ----D C:\Program Files\Belkin O43 - CFD: 01/07/2009 - 02:11:54 - [] ----D C:\Program Files\Broadcom O43 - CFD: 18/07/2014 - 23:27:06 - [] ----D C:\Program Files\Browseri_Appe 1.2 =>PUP.BrowseriAppe O43 - CFD: 16/08/2014 - 13:16:38 - [] ----D C:\Program Files\CCleaner O43 - CFD: 01/07/2009 - 02:12:45 - [] ----D C:\Program Files\Cisco O43 - CFD: 16/08/2014 - 14:27:19 - [] ----D C:\Program Files\Common Files O43 - CFD: 18/06/2014 - 15:53:45 - [] ----D C:\Program Files\DAEMON Tools Lite =>.DT Soft Ltd O43 - CFD: 25/10/2012 - 11:42:38 - [] ----D C:\Program Files\DVD Maker O43 - CFD: 01/07/2009 - 01:57:33 - [] -SH-D C:\Program Files\Fichiers communs O43 - CFD: 19/07/2014 - 16:07:24 - [] ----D C:\Program Files\Go HD O43 - CFD: 16/01/2014 - 21:54:14 - [] ----D C:\Program Files\Google O43 - CFD: 26/10/2012 - 00:12:31 - [] ----D C:\Program Files\IDT O43 - CFD: 29/03/2014 - 13:51:15 - [] --H-D C:\Program Files\InstallShield Installation Information O43 - CFD: 18/06/2014 - 13:44:43 - [] ----D C:\Program Files\Internet Explorer O43 - CFD: 25/10/2012 - 23:57:06 - [] ----D C:\Program Files\ma-config.com O43 - CFD: 16/08/2014 - 14:19:23 - [] ----D C:\Program Files\Malwarebytes Anti-Malware O43 - CFD: 26/10/2012 - 15:42:10 - [0] ----D C:\Program Files\Mastiff O43 - CFD: 14/07/2009 - 11:00:58 - [] ----D C:\Program Files\Microsoft Games O43 - CFD: 27/06/2011 - 15:13:48 - [] ----D C:\Program Files\Microsoft.NET O43 - CFD: 14/07/2009 - 06:52:30 - [] ----D C:\Program Files\MSBuild O43 - CFD: 17/10/2011 - 20:33:50 - [] ----D C:\Program Files\NVIDIA Corporation O43 - CFD: 08/06/2014 - 16:55:57 - [] ----D C:\Program Files\Origin O43 - CFD: 14/11/2012 - 20:01:39 - [] ----D C:\Program Files\Origin Games O43 - CFD: 02/11/2011 - 16:51:08 - [] ----D C:\Program Files\Rage O43 - CFD: 01/07/2009 - 03:11:59 - [] ----D C:\Program Files\Realtek O43 - CFD: 14/07/2009 - 06:52:30 - [] ----D C:\Program Files\Reference Assemblies O43 - CFD: 22/06/2012 - 22:42:57 - [] ----D C:\Program Files\Rockstar Games O43 - CFD: 20/11/2012 - 15:05:34 - [] ----D C:\Program Files\Samsung O43 - CFD: 16/08/2014 - 12:55:11 - [] ----D C:\Program Files\Steam O43 - CFD: 27/10/2011 - 21:23:46 - [] ----D C:\Program Files\UltraISO O43 - CFD: 14/07/2009 - 06:53:23 - [0] --H-D C:\Program Files\Uninstall Information O43 - CFD: 01/07/2009 - 02:15:25 - [] ----D C:\Program Files\WIDCOMM O43 - CFD: 03/08/2013 - 11:09:31 - [] ----D C:\Program Files\Windows Defender O43 - CFD: 03/08/2013 - 11:09:31 - [] ----D C:\Program Files\Windows Journal O43 - CFD: 25/10/2012 - 11:42:38 - [] ----D C:\Program Files\Windows Mail =>.Microsoft Corporation O43 - CFD: 15/12/2013 - 21:28:53 - [] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation O43 - CFD: 01/07/2009 - 01:57:33 - [] ----D C:\Program Files\Windows NT O43 - CFD: 25/10/2012 - 11:42:37 - [] ----D C:\Program Files\Windows Photo Viewer O43 - CFD: 25/10/2012 - 11:42:38 - [] ----D C:\Program Files\Windows Portable Devices O43 - CFD: 25/10/2012 - 11:42:38 - [] ----D C:\Program Files\Windows Sidebar O43 - CFD: 24/04/2012 - 14:20:55 - [] ----D C:\Program Files\Yahoo! O43 - CFD: 16/08/2014 - 14:28:00 - [] ----D C:\Program Files\ZebHelpProcess O43 - CFD: 16/08/2014 - 14:42:40 - [] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman O43 - CFD: 01/07/2009 - 02:31:15 - [] ----D C:\Program Files\Common Files\ATI Technologies O43 - CFD: 16/08/2014 - 14:27:19 - [] ----D C:\Program Files\Common Files\Borland Shared O43 - CFD: 26/10/2012 - 15:33:37 - [] --H-D C:\Program Files\Common Files\EAInstaller O43 - CFD: 27/10/2011 - 21:23:46 - [] ----D C:\Program Files\Common Files\EZB Systems O43 - CFD: 05/07/2012 - 20:53:44 - [] ----D C:\Program Files\Common Files\Logitech O43 - CFD: 01/07/2009 - 02:21:59 - [] ----D C:\Program Files\Common Files\microsoft shared O43 - CFD: 14/07/2009 - 04:37:05 - [] ----D C:\Program Files\Common Files\Services O43 - CFD: 14/07/2009 - 04:37:05 - [] ----D C:\Program Files\Common Files\SpeechEngines O43 - CFD: 14/11/2012 - 21:20:48 - [] ----D C:\Program Files\Common Files\Steam O43 - CFD: 25/10/2012 - 11:42:37 - [] ----D C:\Program Files\Common Files\System O43 - CFD: 17/10/2011 - 20:33:31 - [] ----D C:\Program Files\Common Files\Wise Installation Wizard O43 - CFD: 13/08/2014 - 16:40:33 - [] ----D C:\ProgramData\2bb19c097ff7f2f1 O43 - CFD: 01/07/2009 - 02:31:25 - [] ----D C:\ProgramData\AMD O43 - CFD: 14/07/2009 - 06:53:55 - [] -SH-D C:\ProgramData\Application Data O43 - CFD: 27/10/2011 - 14:28:05 - [] ----D C:\ProgramData\ATI O43 - CFD: 18/06/2014 - 13:19:55 - [] ----D C:\ProgramData\AVAST Software O43 - CFD: 05/03/2012 - 23:47:16 - [] ----D C:\ProgramData\BtCrashDumps O43 - CFD: 01/07/2009 - 01:57:33 - [] -SH-D C:\ProgramData\Bureau O43 - CFD: 18/06/2014 - 16:32:37 - [] ----D C:\ProgramData\DAEMON Tools Lite =>.DT Soft Ltd O43 - CFD: 14/07/2009 - 06:53:55 - [] -SH-D C:\ProgramData\Desktop O43 - CFD: 14/07/2009 - 06:53:55 - [] -SH-D C:\ProgramData\Documents O43 - CFD: 23/06/2011 - 12:53:26 - [] ----D C:\ProgramData\EA Core O43 - CFD: 27/10/2011 - 02:23:33 - [] ----D C:\ProgramData\Electronic Arts O43 - CFD: 01/07/2009 - 01:57:33 - [] -SH-D C:\ProgramData\Favoris O43 - CFD: 14/07/2009 - 06:53:55 - [] -SH-D C:\ProgramData\Favorites O43 - CFD: 12/01/2012 - 17:47:12 - [] ----D C:\ProgramData\Google O43 - CFD: 25/10/2012 - 23:57:06 - [] ----D C:\ProgramData\ma-config.com O43 - CFD: 18/06/2014 - 12:38:35 - [] ----D C:\ProgramData\Malwarebytes O43 - CFD: 18/05/2012 - 20:32:41 - [] ----D C:\ProgramData\Mastiff O43 - CFD: 01/07/2009 - 01:57:33 - [] -SH-D C:\ProgramData\Menu Démarrer O43 - CFD: 02/03/2014 - 11:21:22 - [] -S--D C:\ProgramData\Microsoft O43 - CFD: 01/07/2009 - 01:57:33 - [] -SH-D C:\ProgramData\Modèles O43 - CFD: 07/01/2013 - 14:12:17 - [] ----D C:\ProgramData\Origin O43 - CFD: 16/08/2014 - 13:30:42 - [] ----D C:\ProgramData\RogueKiller O43 - CFD: 20/11/2012 - 15:04:39 - [] ----D C:\ProgramData\Samsung O43 - CFD: 14/07/2009 - 06:53:55 - [] -SH-D C:\ProgramData\Start Menu O43 - CFD: 18/07/2014 - 23:27:21 - [0] ----D C:\ProgramData\TEMP O43 - CFD: 14/07/2009 - 06:53:55 - [] -SH-D C:\ProgramData\Templates O43 - CFD: 13/08/2014 - 16:40:30 - [] ----D C:\ProgramData\tpeorrfeecTocouepoN =>PUP.TPerfectCoupon O43 - CFD: 24/04/2012 - 14:20:55 - [] ----D C:\ProgramData\Yahoo! O43 - CFD: 24/04/2012 - 14:32:00 - [] ----D C:\ProgramData\Yahoo! Companion O43 - CFD: 01/07/2009 - 02:06:56 - [] ----D C:\Users\momo\AppData\Roaming\Adobe O43 - CFD: 01/07/2009 - 02:48:49 - [] ----D C:\Users\momo\AppData\Roaming\ATI O43 - CFD: 18/06/2014 - 13:48:03 - [] ----D C:\Users\momo\AppData\Roaming\AVAST Software O43 - CFD: 18/06/2014 - 16:32:38 - [] ----D C:\Users\momo\AppData\Roaming\DAEMON Tools Lite =>.DT Soft Ltd O43 - CFD: 15/08/2014 - 21:17:55 - [] ----D C:\Users\momo\AppData\Roaming\Dropbox O43 - CFD: 15/08/2014 - 21:17:53 - [] ----D C:\Users\momo\AppData\Roaming\DropboxMaster O43 - CFD: 03/06/2012 - 15:29:07 - [] ----D C:\Users\momo\AppData\Roaming\Evolved O43 - CFD: 13/01/2012 - 11:44:52 - [] ----D C:\Users\momo\AppData\Roaming\Google O43 - CFD: 01/07/2009 - 01:57:51 - [] ----D C:\Users\momo\AppData\Roaming\Identities O43 - CFD: 01/07/2009 - 02:11:52 - [] ----D C:\Users\momo\AppData\Roaming\InstallShield O43 - CFD: 01/07/2009 - 02:06:56 - [] ----D C:\Users\momo\AppData\Roaming\Macromedia O43 - CFD: 14/07/2009 - 11:00:22 - [0] ----D C:\Users\momo\AppData\Roaming\Media Center Programs O43 - CFD: 30/12/2013 - 20:46:48 - [] -S--D C:\Users\momo\AppData\Roaming\Microsoft O43 - CFD: 07/01/2013 - 14:12:05 - [] ----D C:\Users\momo\AppData\Roaming\Origin O43 - CFD: 03/06/2012 - 15:27:59 - [] ----D C:\Users\momo\AppData\Roaming\ProtectDISC O43 - CFD: 20/11/2012 - 15:07:29 - [] ----D C:\Users\momo\AppData\Roaming\Samsung O43 - CFD: 06/07/2012 - 22:19:53 - [] ----D C:\Users\momo\AppData\Roaming\U3 O43 - CFD: 30/04/2012 - 18:03:53 - [] ----D C:\Users\momo\AppData\Roaming\vlc O43 - CFD: 24/04/2012 - 14:20:54 - [] ----D C:\Users\momo\AppData\Roaming\Yahoo! O43 - CFD: 16/08/2014 - 14:43:50 - [] ----D C:\Users\momo\AppData\Roaming\ZHP =>.Nicolas Coolman O43 - CFD: 29/03/2014 - 13:45:49 - [] ----D C:\Users\momo\AppData\Local\Adobe O43 - CFD: 24/04/2012 - 20:41:30 - [] ----D C:\Users\momo\AppData\Local\adslTV O43 - CFD: 01/07/2009 - 02:48:59 - [] ----D C:\Users\momo\AppData\Local\AMD O43 - CFD: 01/07/2009 - 01:57:43 - [] -SH-D C:\Users\momo\AppData\Local\Application Data O43 - CFD: 01/07/2009 - 02:48:49 - [] ----D C:\Users\momo\AppData\Local\ATI O43 - CFD: 01/07/2009 - 02:18:37 - [] ----D C:\Users\momo\AppData\Local\Broadcom O43 - CFD: 22/06/2012 - 23:18:55 - [] ----D C:\Users\momo\AppData\Local\Chromium O43 - CFD: 16/08/2014 - 14:19:34 - [] ----D C:\Users\momo\AppData\Local\CrashDumps O43 - CFD: 25/07/2014 - 02:59:40 - [0] ----D C:\Users\momo\AppData\Local\Diagnostics O43 - CFD: 20/11/2012 - 14:56:03 - [] ----D C:\Users\momo\AppData\Local\Downloaded Installations O43 - CFD: 16/08/2014 - 14:23:34 - [] ----D C:\Users\momo\AppData\Local\ElevatedDiagnostics O43 - CFD: 16/05/2014 - 08:40:44 - [] -SH-D C:\Users\momo\AppData\Local\EmieSiteList O43 - CFD: 16/05/2014 - 08:40:44 - [] -SH-D C:\Users\momo\AppData\Local\EmieUserList O43 - CFD: 26/07/2014 - 13:31:21 - [] ----D C:\Users\momo\AppData\Local\Facebook O43 - CFD: 05/07/2012 - 17:42:45 - [] ----D C:\Users\momo\AppData\Local\Google O43 - CFD: 01/07/2009 - 01:57:43 - [] -SH-D C:\Users\momo\AppData\Local\Historique O43 - CFD: 13/09/2013 - 15:20:23 - [] ----D C:\Users\momo\AppData\Local\messengerdusexe O43 - CFD: 15/12/2013 - 21:35:00 - [] ----D C:\Users\momo\AppData\Local\Microsoft O43 - CFD: 15/03/2014 - 00:51:34 - [] ----D C:\Users\momo\AppData\Local\Microsoft Games O43 - CFD: 26/10/2011 - 22:48:01 - [] ----D C:\Users\momo\AppData\Local\Origin O43 - CFD: 08/11/2013 - 18:47:18 - [] ----D C:\Users\momo\AppData\Local\Programs O43 - CFD: 25/10/2012 - 09:22:08 - [] ----D C:\Users\momo\AppData\Local\PunkBuster O43 - CFD: 20/11/2012 - 15:07:45 - [] ----D C:\Users\momo\AppData\Local\Samsung O43 - CFD: 27/10/2011 - 21:58:41 - [] ----D C:\Users\momo\AppData\Local\SKIDROW O43 - CFD: 16/08/2014 - 14:42:47 - [] ----D C:\Users\momo\AppData\Local\Temp O43 - CFD: 01/07/2009 - 01:57:43 - [] -SH-D C:\Users\momo\AppData\Local\Temporary Internet Files O43 - CFD: 01/07/2009 - 01:57:44 - [0] ----D C:\Users\momo\AppData\Local\VirtualStore O43 - CFD: 14/07/2009 - 06:42:04 - [] R---D C:\Users\momo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 17/05/2014 - 09:47:18 - [] R---D C:\Users\momo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 18/06/2014 - 13:51:48 - [] ----D C:\Users\momo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox O43 - CFD: 11/01/2013 - 11:24:57 - [] ----D C:\Users\momo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome O43 - CFD: 14/07/2009 - 06:37:42 - [] R---D C:\Users\momo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 16/08/2014 - 01:01:46 - [] R---D C:\Users\momo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 19/11/2012 - 18:50:57 - [] ----D C:\Users\momo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam ~ Program Folder: 144 Scanned in 00mn 00s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.0DC5AF80D059DEC792B665ED598C6567] - 15/08/2014 - 17:36:22 ---A- . (.SQLite Development Team - SQLite Dynamic Link Library (No TCL).) -- C:\Windows\System32\sqlite3.dll [536576] O44 - LFC:[MD5.890009E06ACA7E7AFE225B9FD5A3D486] - 16/08/2014 - 11:55:45 ---A- . (...) -- C:\Windows\ntbtlog.txt [365674] O44 - LFC:[MD5.E32840E0AE7E89C88BE364D61B670288] - 16/08/2014 - 12:00:48 ---A- . (...) -- C:\Windows\PFRO.log [165914] O44 - LFC:[MD5.446118FFFF5576434393AE4551A5CA74] - 16/08/2014 - 12:30:43 ---A- . (...) -- C:\Windows\System32\Drivers\TrueSight.sys [33512] O44 - LFC:[MD5.CD4353824CE84C26E086D9803F9301FA] - 16/08/2014 - 12:52:52 ---A- . (...) -- C:\TDSSKiller.3.0.0.40_16.08.2014_13.52.18_log.txt [4906] O44 - LFC:[MD5.34838EFF015EB8D769FB0CBCCCD1CCC1] - 16/08/2014 - 12:54:22 ---A- . (...) -- C:\Windows\setupact.log [19284] O44 - LFC:[MD5.C123EDFE51B5A5ECC6EC63C444202020] - 16/08/2014 - 12:55:36 ---A- . (...) -- C:\TDSSKiller.3.0.0.40_16.08.2014_13.55.24_log.txt [4640] O44 - LFC:[MD5.B18FC92607DD2DDF28AC135151C06C51] - 16/08/2014 - 12:58:55 ---A- . (...) -- C:\TDSSKiller.3.0.0.40_16.08.2014_13.56.29_log.txt [761390] O44 - LFC:[MD5.8683C1B450F4B3872839308D836E0F92] - 16/08/2014 - 13:19:18 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [23256] O44 - LFC:[MD5.1AA835E8A0B8EDF3D676B4ED4BF5EF07] - 16/08/2014 - 13:19:18 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\Drivers\mbamchameleon.sys [74456] O44 - LFC:[MD5.BD27D97297934FD4217A37FD28A7ABC7] - 16/08/2014 - 13:19:18 ---A- . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\Drivers\mwac.sys [51928] O44 - LFC:[MD5.4BC02BD73338C3A26265F5C64DBEC770] - 16/08/2014 - 13:27:19 ---A- . (...) -- C:\Windows\System32\BDEADMIN.CPL [183808] O44 - LFC:[MD5.8C25E347F5E2C2BCA9B5258A68B72AE7] - 16/08/2014 - 13:27:19 ---A- . (...) -- C:\Windows\System32\DBCLIENT.DLL [210032] O44 - LFC:[MD5.877B5EB49997C9A03625F394429424BD] - 16/08/2014 - 13:29:42 ---A- . (...) -- C:\PDOXUSRS.NET [13030] O44 - LFC:[MD5.A65AD3913D639131CAD5C7B1A591FA4A] - 16/08/2014 - 13:40:58 -S-A- . (...) -- C:\Windows\bootstat.dat [67584] O44 - LFC:[MD5.7B429B503D1A2A4BD9472BB49FFF1425] - 16/08/2014 - 13:42:41 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [6324] O44 - LFC:[MD5.11F231C3087294ABB89D8A21B2264901] - 16/08/2014 - 13:42:41 ---A- . (...) -- C:\Windows\System32\perfc009.dat [1901052] O44 - LFC:[MD5.33EDE5467E97FCD4A8527100D5A45001] - 16/08/2014 - 13:42:41 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [2166908] O44 - LFC:[MD5.D7798B39D9EA53AF50E99AED88E1FDE4] - 16/08/2014 - 13:42:41 ---A- . (...) -- C:\Windows\System32\perfh009.dat [2265376] O44 - LFC:[MD5.F2CB421D1A86BAF98F2B78F4F4A08BE5] - 16/08/2014 - 13:42:41 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [6504592] O44 - LFC:[MD5.D53C580BD89B88045D5C73FE53366640] - 16/08/2014 - 13:43:24 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1763855] ~ Files: 21 Scanned in 00mn 05s ---\\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:[MD5.7EDD27929C9B5B10631956C6180709E2] - 14/08/2014 - 06:56:33 ---A- - C:\Windows\Prefetch\FST_FR_304.EXE-7FA9F2DA.pf =>Adware.FreeSoftToday O45 - LFCP:[MD5.6B6902984D38EC661FF13080DAD5FDC1] - 15/08/2014 - 12:32:29 ---A- - C:\Windows\Prefetch\UPFST_FR_304.EXE-1F3D0398.pf =>Adware.FreeSoftToday ~ Prefetcher: 2 Scanned in 00mn 00s ---\\ Déni du service (Local Security Authority) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll ~ LSA: 8 Scanned in 00mn 00s ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\50999499.sys . (...) -- C:\Windows\System32\Drivers\50999499.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\procexp90.Sys . (...) -- C:\Windows\System32\Drivers\procexp90.Sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\50999499.sys . (...) -- C:\Windows\System32\Drivers\50999499.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\procexp90.Sys . (...) -- C:\Windows\System32\Drivers\procexp90.Sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys ~ CSB: 17 Scanned in 00mn 00s ---\\ Clé de registre Shell MountPoints2 (MPKS) (O51) O51 - MPSK:{30c1a80d-f6ef-11e3-bf38-70f395a928f5}\AutoRun\command. (...) -- G:\setup.exe (.not file.) O51 - MPSK:{b2994458-a3eb-11e1-8d52-cc68f6526efa}\AutoRun\command. (...) -- G:\LaunchU3.exe (.not file.) O51 - MPSK:{e2e01d98-3343-11e2-b103-60eb69479912}\AutoRun\command. (...) -- G:\Autorun.exe (.not file.) ~ Keys: Scanned in 00mn 00s ---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm ~ TDSD: 3 Scanned in 00mn 00s ---\\ Enumération des clés de registre StartupReg (SMSR) (O53) O53 - SMSR:HKLM\...\startupreg\DAEMON Tools Lite [Key] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe =>.DT Soft Ltd O53 - SMSR:HKLM\...\startupreg\EADM [Key] . (.Electronic Arts - Origin.) -- C:\Program Files\Origin\Origin.exe O53 - SMSR:HKLM\...\startupreg\fst_fr_304 [Key] . (...) -- C:\Program Files\fst_fr_304\fst_fr_304.exe (.not file.) =>Adware.FreeSoftToday O53 - SMSR:HKLM\...\startupreg\Grid [Key] . (.Pas de propriétaire - HydraGrid Application.) -- C:\Program Files\ATI Technologies\HydraVision\HydraGrd.exe O53 - SMSR:HKLM\...\startupreg\iLivid [Key] . (...) -- C:\Users\momo\AppData\Local\iLivid\iLivid.exe (.not file.) =>Adware.Bandoo O53 - SMSR:HKLM\...\startupreg\KiesAirMessage [Key] . (.Samsung Electronics - Pas de description.) -- C:\Program Files\Samsung\Kies\KiesAirMessage.exe O53 - SMSR:HKLM\...\startupreg\KiesPreload [Key] . (.Samsung - Kies.) -- C:\Program Files\Samsung\Kies\Kies.exe O53 - SMSR:HKLM\...\startupreg\Steam [Key] . (.Valve Corporation - Steam.) -- C:\Program Files\Steam\steam.exe O53 - SMSR:HKLM\...\startupreg\SysTrayApp [Key] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray.exe ~ SMSR Keys: 9 Scanned in 00mn 00s ---\\ Enumération des clés de registre SecurityProviders (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll ~ MSCP: 2 Scanned in 00mn 00s ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0 O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableRegistryTools"=0 ~ MWPS: 17 Scanned in 00mn 00s ---\\ Liste des pilotes du système (SDL) (O58) O58 - SDL:13/05/2011 - 17:57:20 ---A- . (.Hewlett-Packard Company - HP Accelerometer.) -- C:\Windows\System32\Drivers\Accelerometer.sys [35896] O58 - SDL:14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [422976] O58 - SDL:14/07/2009 - 02:26:17 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\Drivers\adpahci.sys [297552] O58 - SDL:14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\Drivers\adpu320.sys [146512] O58 - SDL:14/07/2009 - 02:26:15 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\Drivers\aliide.sys [14400] O58 - SDL:18/02/2010 - 08:18:22 ---A- . (.Advanced Micro Devices - AMD IO Driver.) -- C:\Windows\System32\Drivers\amdiox86.sys [37944] O58 - SDL:11/03/2011 - 06:38:37 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\Drivers\amdsata.sys [80256] O58 - SDL:14/07/2009 - 02:26:15 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows fa.) -- C:\Windows\System32\Drivers\amdsbs.sys [159312] O58 - SDL:11/03/2011 - 06:38:37 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\Drivers\amdxata.sys [22400] O58 - SDL:01/07/2009 - 01:46:32 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\Drivers\amd_sata.sys [66176] O58 - SDL:01/07/2009 - 01:46:32 ---A- . (.Advanced Micro Devices - Stor Filter Driver.) -- C:\Windows\System32\Drivers\amd_xata.sys [31872] O58 - SDL:14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\Drivers\arc.sys [76368] O58 - SDL:14/07/2009 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\Drivers\arcsas.sys [86608] O58 - SDL:18/06/2014 - 12:23:02 ---A- . (...) -- C:\Windows\System32\Drivers\aswHwid.sys [24184] =>.ALWIL Software O58 - SDL:18/06/2014 - 12:23:02 ---A- . (.AVAST Software - avast! File System Minifilter for Windows 2003/Vista.) -- C:\Windows\System32\Drivers\aswMonFlt.sys [67824] O58 - SDL:18/06/2014 - 12:23:02 ---A- . (.AVAST Software - avast! WFP Redirect Driver.) -- C:\Windows\System32\Drivers\aswRdr2.sys [81768] O58 - SDL:18/06/2014 - 12:23:03 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys [49944] =>.ALWIL Software O58 - SDL:19/06/2014 - 19:20:33 ---A- . (.AVAST Software - avast! Virtualization Driver.) -- C:\Windows\System32\Drivers\aswsnx.sys [777488] O58 - SDL:18/06/2014 - 12:23:03 ---A- . (.AVAST Software - avast! Virtualization Driver.) -- C:\Windows\System32\Drivers\aswsnx.sys.1403202032810 [776976] O58 - SDL:19/06/2014 - 19:20:33 ---A- . (.AVAST Software - avast! self protection module.) -- C:\Windows\System32\Drivers\aswsp.sys [411680] O58 - SDL:18/06/2014 - 12:23:03 ---A- . (.AVAST Software - avast! self protection module.) -- C:\Windows\System32\Drivers\aswsp.sys.1403202032810 [411552] O58 - SDL:19/06/2014 - 19:20:33 ---A- . (.AVAST Software - Stream Filter.) -- C:\Windows\System32\Drivers\aswstm.sys [68312] O58 - SDL:18/06/2014 - 12:23:03 ---A- . (...) -- C:\Windows\System32\Drivers\aswVmm.sys [180632] =>.ALWIL Software O58 - SDL:06/06/2011 - 23:06:54 ---A- . (.Advanced Micro Devices - AMD High Definition Audio Function Driver.) -- C:\Windows\System32\Drivers\AtihdW73.sys [211984] O58 - SDL:08/09/2011 - 19:26:10 ---A- . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\Drivers\atikmdag.sys [8606208] O58 - SDL:08/09/2011 - 17:52:20 ---A- . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\System32\Drivers\atikmpag.sys [248832] O58 - SDL:01/07/2009 - 01:46:31 ---A- . (.Advanced Micro Devices Inc. - AMD PCIE Filter Driver for ATI PCIE chipset.) -- C:\Windows\System32\Drivers\AtiPcie.sys [14392] O58 - SDL:13/07/2009 - 23:02:49 ---A- . (.Broadcom Corporation - Pilote unifié NDIS6.x Broadcom NetXtreme Gigabit Ethernet..) -- C:\Windows\System32\Drivers\b57nd60x.sys [229888] O58 - SDL:01/07/2009 - 01:11:50 ---A- . (.Broadcom Corporation - Broadcom 802.11 Network Adapter wireless driver.) -- C:\Windows\System32\Drivers\BCMWL6.SYS [3764800] O58 - SDL:13/07/2009 - 23:53:28 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltLo.sys [13568] O58 - SDL:13/07/2009 - 23:53:28 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltUp.sys [5248] O58 - SDL:14/07/2009 - 01:57:25 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\Drivers\BrSerId.sys [272128] O58 - SDL:13/07/2009 - 23:53:32 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\Drivers\BrSerWdm.sys [62336] O58 - SDL:13/07/2009 - 23:53:33 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\Drivers\BrUsbMdm.sys [12160] O58 - SDL:13/07/2009 - 23:53:33 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\Drivers\BrUsbSer.sys [11904] O58 - SDL:01/07/2009 - 01:15:05 ---A- . (.Broadcom Corporation. - Broadcom Bluetooth USB AMP Filter for Windows Vista.) -- C:\Windows\System32\Drivers\btwampfl.sys [302120] O58 - SDL:01/07/2009 - 01:15:05 ---A- . (.Broadcom Corporation. - Bluetooth Audio Device.) -- C:\Windows\System32\Drivers\btwaudio.sys [93224] O58 - SDL:01/07/2009 - 01:15:05 ---A- . (.Broadcom Corporation. - Broadcom Bluetooth AVDT Service.) -- C:\Windows\System32\Drivers\btwavdt.sys [114728] O58 - SDL:01/07/2009 - 01:15:05 ---A- . (.Broadcom Corporation. - Broadcom Bluetooth L2CAP Service.) -- C:\Windows\System32\Drivers\btwl2cap.sys [33832] O58 - SDL:01/07/2009 - 01:15:05 ---A- . (.Broadcom Corporation. - Bluetooth Remote Control HID Minidriver.) -- C:\Windows\System32\Drivers\btwrchid.sys [18728] O58 - SDL:13/07/2009 - 23:02:48 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\Drivers\bxvbdx.sys [430080] O58 - SDL:14/07/2009 - 02:26:21 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\cmdide.sys [15952] O58 - SDL:14/07/2009 - 02:20:28 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\Drivers\djsvs.sys [70720] O58 - SDL:18/06/2014 - 14:53:45 ---A- . (.Disc Soft Ltd - DAEMON Tools Virtual Bus Driver.) -- C:\Windows\System32\Drivers\dtsoftbus01.sys [243128] O58 - SDL:14/07/2009 - 02:20:28 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [453712] O58 - SDL:13/07/2009 - 23:02:48 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\Drivers\evbdx.sys [3100160] O58 - SDL:13/07/2009 - 23:54:14 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [26624] O58 - SDL:13/05/2011 - 17:57:42 ---A- . (.Hewlett-Packard Company - HP Disk Filter - SATA/RAID.) -- C:\Windows\System32\Drivers\hpdskflt.sys [25656] O58 - SDL:14/07/2009 - 02:20:28 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\System32\Drivers\HpSAMD.sys [67152] O58 - SDL:11/03/2011 - 06:38:51 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\Drivers\iaStorV.sys [332160] O58 - SDL:14/07/2009 - 02:20:36 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\Drivers\iirsp.sys [41040] O58 - SDL:14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_fc.sys [95824] O58 - SDL:14/07/2009 - 02:20:37 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas.sys [89168] O58 - SDL:14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas2.sys [54864] O58 - SDL:14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_scsi.sys [96848] O58 - SDL:12/05/2014 - 06:25:54 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [23256] O58 - SDL:12/05/2014 - 06:25:58 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\Drivers\mbamchameleon.sys [74456] O58 - SDL:14/07/2009 - 02:20:36 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows 7 for x86.) -- C:\Windows\System32\Drivers\megasas.sys [30800] O58 - SDL:14/07/2009 - 02:20:36 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\Drivers\MegaSR.sys [235584] O58 - SDL:12/05/2014 - 06:26:08 ---A- . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\Drivers\mwac.sys [51928] O58 - SDL:14/07/2009 - 02:20:44 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\Drivers\nfrd960.sys [44624] O58 - SDL:11/03/2011 - 06:39:00 ---A- . (.NVIDIA Corporation - NVIDIA® nForce RAID Driver.) -- C:\Windows\System32\Drivers\nvraid.sys [117120] O58 - SDL:11/03/2011 - 06:39:00 ---A- . (.NVIDIA Corporation - NVIDIA® nForce Sata Performance Driver.) -- C:\Windows\System32\Drivers\nvstor.sys [143744] O58 - SDL:14/11/2012 - 18:56:13 ---A- . (...) -- C:\Windows\System32\Drivers\PnkBstrK.sys [139128] O58 - SDL:14/07/2009 - 02:19:04 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\Drivers\ql2300.sys [1383488] O58 - SDL:14/07/2009 - 02:19:04 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\Drivers\ql40xx.sys [106064] O58 - SDL:14/05/2007 - 15:17:16 ---A- . (.Research In Motion Limited - BlackBerry Device Driver.) -- C:\Windows\System32\Drivers\RimUsb.sys [22656] O58 - SDL:01/07/2009 - 02:11:31 ---A- . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.20 32-bit Driver.) -- C:\Windows\System32\Drivers\Rt86win7.sys [327784] O58 - SDL:06/07/2011 - 03:22:55 R--A- . (.Realtek Semiconductor Corporation - Realtek RTL8192C USB NDIS Driver.) -- C:\Windows\System32\Drivers\rtl8192cu.sys [648808] O58 - SDL:01/07/2009 - 01:10:14 ---A- . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/Vista/Win7.) -- C:\Windows\System32\Drivers\RtsUStor.sys [197224] O58 - SDL:13/07/2009 - 21:50:20 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\System32\Drivers\secdrv.sys [20480] O58 - SDL:14/07/2009 - 02:19:04 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid2.sys [40016] O58 - SDL:14/07/2009 - 02:19:04 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid4.sys [77888] O58 - SDL:20/09/2012 - 05:35:36 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudbus.sys [83168] O58 - SDL:20/09/2012 - 05:35:36 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudmdm.sys [181344] O58 - SDL:14/07/2009 - 02:19:04 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [21072] O58 - SDL:22/07/2010 - 01:19:24 ---A- . (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\System32\Drivers\stwrt.sys [431616] O58 - SDL:16/08/2014 - 12:30:43 ---A- . (...) -- C:\Windows\System32\Drivers\TrueSight.sys [33512] O58 - SDL:01/07/2009 - 01:46:33 ---A- . (.Advanced Micro Devices - AMD USB Filter Driver.) -- C:\Windows\System32\Drivers\usbfilter.sys [36992] O58 - SDL:14/07/2009 - 02:19:10 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\viaide.sys [16976] O58 - SDL:14/07/2009 - 02:19:11 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\Drivers\vsmraid.sys [141904] O58 - SDL:24/01/2008 - 23:08:54 ---A- . (.Logicool Co. Ltd. - Logicool WingMan Virtual Bus Enumerator Driver.) -- C:\Windows\System32\Drivers\WmBEnum.sys [19336] O58 - SDL:24/01/2008 - 23:09:04 ---A- . (.Logicool Co. Ltd. - Logicool WingMan Hid Filter Driver.) -- C:\Windows\System32\Drivers\WmFilter.sys [28168] O58 - SDL:24/01/2008 - 23:09:24 ---A- . (.Logicool Co. Ltd. - Logicool WingMan Virtual Hid Device Driver.) -- C:\Windows\System32\Drivers\WmVirHid.sys [14728] O58 - SDL:24/01/2008 - 23:09:34 ---A- . (.Logicool Co. Ltd. - Logicool WingMan Translation Driver.) -- C:\Windows\System32\Drivers\WmXlCore.sys [48904] O58 - SDL:13/07/2009 - 22:40:41 ---A- . (...) -- C:\Windows\System32\ANSI.SYS [9029] O58 - SDL:13/07/2009 - 22:40:44 ---A- . (...) -- C:\Windows\System32\country.sys [27097] O58 - SDL:13/07/2009 - 22:40:40 ---A- . (...) -- C:\Windows\System32\HIMEM.SYS [4768] O58 - SDL:13/07/2009 - 22:40:43 ---A- . (...) -- C:\Windows\System32\KEY01.SYS [42809] O58 - SDL:13/07/2009 - 22:40:43 ---A- . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537] O58 - SDL:13/07/2009 - 22:40:23 ---A- . (...) -- C:\Windows\System32\NTDOS.SYS [27866] O58 - SDL:13/07/2009 - 22:40:31 ---A- . (...) -- C:\Windows\System32\NTDOS404.SYS [29146] O58 - SDL:13/07/2009 - 22:40:35 ---A- . (...) -- C:\Windows\System32\NTDOS411.SYS [29370] O58 - SDL:13/07/2009 - 22:40:39 ---A- . (...) -- C:\Windows\System32\NTDOS412.SYS [29274] O58 - SDL:13/07/2009 - 22:40:27 ---A- . (...) -- C:\Windows\System32\NTDOS804.SYS [29146] O58 - SDL:13/07/2009 - 22:40:11 ---A- . (...) -- C:\Windows\System32\NTIO.SYS [33952] O58 - SDL:13/07/2009 - 22:40:15 ---A- . (...) -- C:\Windows\System32\NTIO404.SYS [34672] O58 - SDL:13/07/2009 - 22:40:17 ---A- . (...) -- C:\Windows\System32\NTIO411.SYS [35776] O58 - SDL:13/07/2009 - 22:40:19 ---A- . (...) -- C:\Windows\System32\NTIO412.SYS [35536] O58 - SDL:13/07/2009 - 22:40:13 ---A- . (...) -- C:\Windows\System32\NTIO804.SYS [34672] ~ Drivers: 100 Scanned in 00mn 04s ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC: 14/08/2014 - 14:44:22 ---A- . (...) -- C:\Users\momo\Desktop\9jvg4xqf.exe [154863304] O61 - LFC: 14/08/2014 - 14:44:23 ---A- . (.Bleeping Computer, LLC.) -- C:\Users\momo\Desktop\sc-cleaner.exe [441592] O61 - LFC: 14/08/2014 - 14:44:23 ---A- . (.Malwarebytes Corporation.) -- C:\Users\momo\Desktop\mbam-setup-2.0.2.1012.exe [17292760] O61 - LFC: 14/08/2014 - 14:44:23 ---A- . (.Thisisu.) -- C:\Users\momo\Desktop\JRT.exe [1016261] O61 - LFC: 15/08/2014 - 14:44:08 ---A- . (...) -- C:\Users\momo\AppData\Local\Google\Chrome\User Data\nacl_validation_cache.bin [128] O61 - LFC: 15/08/2014 - 14:44:12 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\24C62875-5DF3B721-1DB6E789-D015195F\8VnqfjGF.exe [766696] O61 - LFC: 15/08/2014 - 14:44:12 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\24C62875-5DF3B721-1DB6E789-D015195F\1kdEVbgN2tS.dll [2809600] O61 - LFC: 15/08/2014 - 14:44:12 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\24C62875-5DF3B721-1DB6E789-D015195F\fNYo3vNXb66Yu.dll [4584240] O61 - LFC: 15/08/2014 - 14:44:13 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\24C62875-5DF3B721-1DB6E789-D015195F\PqKh9cuvUk9w.exe [728568] O61 - LFC: 15/08/2014 - 14:44:13 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\24C62875-5DF3B721-1DB6E789-D015195F\WpUlgqfeitLF.exe [7198440] O61 - LFC: 15/08/2014 - 14:44:13 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\24C62875-5DF3B721-1DB6E789-D015195F\ibBp8zaD0.exe [2455376] O61 - LFC: 15/08/2014 - 14:44:13 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\24C62875-5DF3B721-1DB6E789-D015195F\xcdaHNUUQc2MoEY.dll [2137856] O61 - LFC: 15/08/2014 - 14:44:13 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\365BFFE0-3FD58FD0-861054C0-9D579090\ar7B5weA6Gc0M.dll [2809600] O61 - LFC: 15/08/2014 - 14:44:13 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\365BFFE0-3FD58FD0-861054C0-9D579090\fwmt9hNympyC8w0.dll [2137856] O61 - LFC: 15/08/2014 - 14:44:14 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\365BFFE0-3FD58FD0-861054C0-9D579090\ILBHmUgiOh6YC.exe [766696] O61 - LFC: 15/08/2014 - 14:44:14 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\365BFFE0-3FD58FD0-861054C0-9D579090\lOYYaYULqhoWd19.exe [2455376] O61 - LFC: 15/08/2014 - 14:44:14 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\365BFFE0-3FD58FD0-861054C0-9D579090\oY3NOeOsyVK.exe [728568] O61 - LFC: 15/08/2014 - 14:44:14 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\365BFFE0-3FD58FD0-861054C0-9D579090\qkygyKhN0SDeH1L.exe [7198440] O61 - LFC: 15/08/2014 - 14:44:14 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\47519118-3E74EDA8-178D8888-BC1BD390\BsO0LWdDccL.exe [728568] O61 - LFC: 15/08/2014 - 14:44:14 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\365BFFE0-3FD58FD0-861054C0-9D579090\jLPDRdXa0msC9j.dll [4584240] O61 - LFC: 15/08/2014 - 14:44:14 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\47519118-3E74EDA8-178D8888-BC1BD390\0IXpMjSodil7yCC.dll [2809600] O61 - LFC: 15/08/2014 - 14:44:14 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\47519118-3E74EDA8-178D8888-BC1BD390\31J2jByvNn.dll [2137856] O61 - LFC: 15/08/2014 - 14:44:15 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\47519118-3E74EDA8-178D8888-BC1BD390\TZj6f6Q2.exe [7198440] O61 - LFC: 15/08/2014 - 14:44:15 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\47519118-3E74EDA8-178D8888-BC1BD390\guAPZAR4m1E45.exe [2455376] O61 - LFC: 15/08/2014 - 14:44:15 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\47519118-3E74EDA8-178D8888-BC1BD390\pXYAdxLsoJdEqrh.exe [766696] O61 - LFC: 15/08/2014 - 14:44:15 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\47519118-3E74EDA8-178D8888-BC1BD390\QE8AHZCQAaD.dll [4584240] O61 - LFC: 15/08/2014 - 14:44:16 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\56C10D0E-79EC5308-7FA89382-16EAA808\Mg5FCkhG0g52L.exe [766696] O61 - LFC: 15/08/2014 - 14:44:16 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\56C10D0E-79EC5308-7FA89382-16EAA808\ft2xDW3anjQop7K.exe [728568] O61 - LFC: 15/08/2014 - 14:44:16 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\56C10D0E-79EC5308-7FA89382-16EAA808\n9mwX75Q4E.exe [2455376] O61 - LFC: 15/08/2014 - 14:44:16 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\56C10D0E-79EC5308-7FA89382-16EAA808\qZk7sF8qQ.exe [7198440] O61 - LFC: 15/08/2014 - 14:44:16 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\56C10D0E-79EC5308-7FA89382-16EAA808\burwgber.dll [4584240] O61 - LFC: 15/08/2014 - 14:44:16 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\56C10D0E-79EC5308-7FA89382-16EAA808\sBGe2o2Lt.dll [2137856] O61 - LFC: 15/08/2014 - 14:44:16 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\56C10D0E-79EC5308-7FA89382-16EAA808\xymuG7yjAfcKEo.dll [2809600] O61 - LFC: 15/08/2014 - 14:44:18 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\92CCB3A8-D3B058-23EB7B20-E3982D78\GqmEtvzE.exe [766696] O61 - LFC: 15/08/2014 - 14:44:18 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\92CCB3A8-D3B058-23EB7B20-E3982D78\QWEqHEaR9gRh.exe [2455376] O61 - LFC: 15/08/2014 - 14:44:18 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\92CCB3A8-D3B058-23EB7B20-E3982D78\cuvMTfU6uxrf8Od.exe [7198440] O61 - LFC: 15/08/2014 - 14:44:18 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\92CCB3A8-D3B058-23EB7B20-E3982D78\9hqOlHSOvOthr.dll [2137856] O61 - LFC: 15/08/2014 - 14:44:18 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\92CCB3A8-D3B058-23EB7B20-E3982D78\Liq1R4soKn5Q.dll [2809600] O61 - LFC: 15/08/2014 - 14:44:18 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\92CCB3A8-D3B058-23EB7B20-E3982D78\pIKVvAgktF.dll [4584240] O61 - LFC: 15/08/2014 - 14:44:19 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\92CCB3A8-D3B058-23EB7B20-E3982D78\xbkT3zDisQ5cx.exe [728568] O61 - LFC: 15/08/2014 - 14:44:19 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\D6AAACE0-3CCEF5E0-EFC64BD0-E3234CE8\JuMcMvKwYxmeTv.exe [728568] O61 - LFC: 15/08/2014 - 14:44:19 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\D6AAACE0-3CCEF5E0-EFC64BD0-E3234CE8\Td5gotTyA.exe [7198440] O61 - LFC: 15/08/2014 - 14:44:19 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\D6AAACE0-3CCEF5E0-EFC64BD0-E3234CE8\nxolLuwG.exe [766696] O61 - LFC: 15/08/2014 - 14:44:19 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\D6AAACE0-3CCEF5E0-EFC64BD0-E3234CE8\FD1DDi62N.dll [2137856] O61 - LFC: 15/08/2014 - 14:44:19 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\D6AAACE0-3CCEF5E0-EFC64BD0-E3234CE8\KMtXuN7Qmhin.dll [2809600] O61 - LFC: 15/08/2014 - 14:44:19 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\D6AAACE0-3CCEF5E0-EFC64BD0-E3234CE8\rGLOkqSAzKYW7C.dll [4584240] O61 - LFC: 15/08/2014 - 14:44:20 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\D6AAACE0-3CCEF5E0-EFC64BD0-E3234CE8\TN4v5NWVzVeEl.exe [2455376] O61 - LFC: 15/08/2014 - 14:44:20 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpsijt2h.dll [41984] O61 - LFC: 15/08/2014 - 14:44:21 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\F8BB934-9F3029CA-48BA5294-73C11462\9CziZCeLYBWAbax.exe [766696] O61 - LFC: 15/08/2014 - 14:44:21 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\F8BB934-9F3029CA-48BA5294-73C11462\GlypOwHc9QHMJ4.exe [7198440] O61 - LFC: 15/08/2014 - 14:44:21 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\F8BB934-9F3029CA-48BA5294-73C11462\5MqDjiTbmbM0zuz.dll [4584240] O61 - LFC: 15/08/2014 - 14:44:21 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\F8BB934-9F3029CA-48BA5294-73C11462\cMz7Tmf3uZNKd.dll [2137856] O61 - LFC: 15/08/2014 - 14:44:21 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\F8BB934-9F3029CA-48BA5294-73C11462\dtKbli2bs24.dll [2809600] O61 - LFC: 15/08/2014 - 14:44:22 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\F8BB934-9F3029CA-48BA5294-73C11462\KTFbscckBE.exe [728568] O61 - LFC: 15/08/2014 - 14:44:22 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\F8BB934-9F3029CA-48BA5294-73C11462\TSDP4z0KZl9gLC.exe [2455376] O61 - LFC: 16/08/2014 - 14:44:12 ---A- . (.Microsoft Corporation.) -- C:\Users\momo\AppData\Local\Temp\1408189577D.bin [56384] O61 - LFC: 16/08/2014 - 14:44:17 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\6282BE8C-524D94A2-957994A-245097F0\P7l1ltXP.exe [766696] O61 - LFC: 16/08/2014 - 14:44:17 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\6282BE8C-524D94A2-957994A-245097F0\b2w2tQGBT85aI4U.exe [2455376] O61 - LFC: 16/08/2014 - 14:44:17 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\6282BE8C-524D94A2-957994A-245097F0\rPvKgHvyMi.exe [7198440] O61 - LFC: 16/08/2014 - 14:44:17 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\6282BE8C-524D94A2-957994A-245097F0\vG9YYBaItFAQsZ.exe [728568] O61 - LFC: 16/08/2014 - 14:44:17 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\6282BE8C-524D94A2-957994A-245097F0\8VAfWsbsv0.dll [4584240] O61 - LFC: 16/08/2014 - 14:44:17 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\6282BE8C-524D94A2-957994A-245097F0\XRIHWE5XLKPn5.dll [2137856] O61 - LFC: 16/08/2014 - 14:44:17 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\6282BE8C-524D94A2-957994A-245097F0\u0J6xbvWPumJ6.dll [2809600] O61 - LFC: 16/08/2014 - 14:44:20 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\EE18AEC0-8FFA00D8-E5B96718-ADECE270\HHhZ4NEL5o.exe [7198440] O61 - LFC: 16/08/2014 - 14:44:20 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\EE18AEC0-8FFA00D8-E5B96718-ADECE270\dcrNIBgwm0kG.exe [766696] O61 - LFC: 16/08/2014 - 14:44:20 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\EE18AEC0-8FFA00D8-E5B96718-ADECE270\Qh6lTndL9.dll [2137856] O61 - LFC: 16/08/2014 - 14:44:20 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\EE18AEC0-8FFA00D8-E5B96718-ADECE270\qvPYh5OrASZ3.dll [4584240] O61 - LFC: 16/08/2014 - 14:44:20 ---A- . (.Doctor Web, Ltd..) -- C:\Users\momo\AppData\Local\Temp\EE18AEC0-8FFA00D8-E5B96718-ADECE270\rssZel5fRSiYF.dll [2809600] O61 - LFC: 16/08/2014 - 14:44:21 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\EE18AEC0-8FFA00D8-E5B96718-ADECE270\WVs0YxXzuI.exe [728568] O61 - LFC: 16/08/2014 - 14:44:21 ---A- . (...) -- C:\Users\momo\AppData\Local\Temp\EE18AEC0-8FFA00D8-E5B96718-ADECE270\tic64vWp6r7gU.exe [2455376] O61 - LFC: 16/08/2014 - 14:44:22 ---A- . (...) -- C:\Users\momo\Desktop\AdwCleaner.exe [1361203] O61 - LFC: 16/08/2014 - 14:44:22 ---A- . (.Kaspersky Lab ZAO.) -- C:\Users\momo\AppData\Local\Temp\{A90900F2-67A1-491C-8F02-95676B28365F}.exe [4181856] O61 - LFC: 16/08/2014 - 14:44:23 ---A- . (...) -- C:\Users\momo\Desktop\RogueKiller.exe [4851288] O61 - LFC: 16/08/2014 - 14:44:23 ---A- . (...) -- C:\Users\momo\Downloads\AdwCleaner.exe [1361203] O61 - LFC: 16/08/2014 - 14:44:23 ---A- . (.Bleeping Computer, LLC.) -- C:\Users\momo\Desktop\rkill.exe [1944824] O61 - LFC: 16/08/2014 - 14:44:23 ---A- . (.ESET.) -- C:\Users\momo\Desktop\ESETNecursCleaner.exe [261872] O61 - LFC: 16/08/2014 - 14:44:23 ---A- . (.Kaspersky Lab ZAO.) -- C:\Users\momo\Desktop\tdsskiller.exe [4181856] O61 - LFC: 16/08/2014 - 14:44:23 ---A- . (.MalwareBytes.) -- C:\Users\momo\Desktop\Chameleon\Windows\firefox.com [755512] O61 - LFC: 16/08/2014 - 14:44:23 ---A- . (.MalwareBytes.) -- C:\Users\momo\Desktop\Chameleon\Windows\firefox.exe [755512] O61 - LFC: 16/08/2014 - 14:44:23 ---A- . (.MalwareBytes.) -- C:\Users\momo\Desktop\Chameleon\Windows\iexplore.exe [755512] O61 - LFC: 16/08/2014 - 14:44:23 ---A- . (.MalwareBytes.) -- C:\Users\momo\Desktop\Chameleon\Windows\mbam-chameleon.com [755512] O61 - LFC: 16/08/2014 - 14:44:23 ---A- . (.MalwareBytes.) -- C:\Users\momo\Desktop\Chameleon\Windows\mbam-chameleon.exe [755512] O61 - LFC: 16/08/2014 - 14:44:23 ---A- . (.MalwareBytes.) -- C:\Users\momo\Desktop\Chameleon\Windows\rundll32.exe [755512] O61 - LFC: 16/08/2014 - 14:44:23 ---A- . (.MalwareBytes.) -- C:\Users\momo\Desktop\Chameleon\Windows\svchost.exe [755512] O61 - LFC: 16/08/2014 - 14:44:23 ---A- . (.MalwareBytes.) -- C:\Users\momo\Desktop\Chameleon\Windows\windows.exe [755512] O61 - LFC: 16/08/2014 - 14:44:23 ---A- . (.MalwareBytes.) -- C:\Users\momo\Desktop\Chameleon\Windows\winlogon.exe [755512] O61 - LFC: 16/08/2014 - 14:44:23 ---A- . (.Swearware.) -- C:\Users\momo\Downloads\ComboFix.exe [5571320] O61 - LFC: 16/08/2014 - 14:44:23 R---- . (.Swearware.) -- C:\Users\momo\Desktop\ComboFix.exe [5571320] O61 - LFC: 16/08/2014 - 14:44:24 ---A- . (...) -- C:\Users\momo\Downloads\RogueKiller.exe [4851288] O61 - LFC: 16/08/2014 - 14:44:24 ---A- . (.Bleeping Computer, LLC.) -- C:\Users\momo\Downloads\rkill.exe [1944824] O61 - LFC: 16/08/2014 - 14:44:24 ---A- . (.Kaspersky Lab ZAO.) -- C:\Users\momo\Downloads\tdsskiller.exe [4181856] O61 - LFC: 16/08/2014 - 14:44:24 ---A- . (.Microsoft Corporation.) -- C:\Users\momo\Downloads\MicrosoftFixit.Performance.FISC.19933162255964365.1.1.Run.exe [347816] O61 - LFC: 16/08/2014 - 14:44:24 ---A- . (.Microsoft Corporation.) -- C:\Users\momo\Downloads\MicrosoftFixit.Performance.FISC.19933162255964365.1.2.Run.exe [347816] O61 - LFC: 16/08/2014 - 14:44:24 ---A- . (.Nicolas Coolman.) -- C:\Users\momo\Downloads\NCDiag (1).exe [1218048] O61 - LFC: 16/08/2014 - 14:44:24 ---A- . (.Nicolas Coolman.) -- C:\Users\momo\Downloads\NCDiag.exe [1218048] O61 - LFC: 16/08/2014 - 14:44:24 ---A- . (.Nicolas Coolman.) -- C:\Users\momo\Downloads\ZHP 2014.exe [16685210] =>.Nicolas Coolman O61 - LFC: 16/08/2014 - 14:44:24 ---A- . (.Nicolas Coolman.) -- C:\Users\momo\Downloads\ZHPDiag2.exe [6857408] =>.Nicolas Coolman ~ 2598 Fichiers temporaires (Temporary files) ~ 621 Fichiers cookies (Cookies files) ~ Files: 97 Scanned in 00mn 16s ---\\ Fichiers Alternate Data Stream (ADS) (O62) O62 - ADS:Alternate Data Stream File - C:\Windows\System32\Drivers\amd_sata.sys:Zone.Identifier O62 - ADS:Alternate Data Stream File - C:\Windows\System32\Drivers\amd_xata.sys:Zone.Identifier O62 - ADS:Alternate Data Stream File - C:\Windows\System32\Drivers\AtiPcie.sys:Zone.Identifier O62 - ADS:Alternate Data Stream File - C:\Windows\System32\Drivers\usbfilter.sys:Zone.Identifier ~ ADS: Scanned in 00mn 01s ---\\ Liste des outils de désinfection (LATC) (O63) O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman ~ ADS: Scanned in 00mn 00s ---\\ Liste les services legacy du registre (LALS) (O64) O64 - Services: CurCS - 08/09/2011 - C:\Windows\System32\DRIVERS\atikmdag.sys (amdkmdag) .(.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG O64 - Services: CurCS - 01/07/2009 - C:\Windows\System32\DRIVERS\amd_sata.sys (amd_sata) .(.Advanced Micro Devices - AHCI 1.2 Device Driver.) - LEGACY_AMD_SATA O64 - Services: CurCS - 24/06/2011 - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys (AODDriver4.01) .(.Advanced Micro Devices - AMD OverDrive Service Driver.) - LEGACY_AODDRIVER4.01 O64 - Services: CurCS - 18/06/2014 - C:\Windows\system32\drivers\aswHwid.sys (aswHwid) .(...) - LEGACY_ASWHWID O64 - Services: CurCS - 18/06/2014 - C:\Windows\system32\drivers\aswMonFlt.sys (aswMonFlt) .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT O64 - Services: CurCS - 18/06/2014 - C:\Windows\system32\drivers\aswRdr2.sys (aswRdr) .(.AVAST Software - avast! WFP Redirect Driver.) - LEGACY_ASWRDR O64 - Services: CurCS - 18/06/2014 - C:\Windows\System32\Drivers\aswRvrt.sys (aswRvrt) .(...) - LEGACY_ASWRVRT O64 - Services: CurCS - 19/06/2014 - C:\Windows\system32\drivers\aswSnx.sys (aswSnx) .(.AVAST Software - avast! Virtualization Driver.) - LEGACY_ASWSNX O64 - Services: CurCS - 19/06/2014 - C:\Windows\system32\drivers\aswSP.sys (aswSP) .(.AVAST Software - avast! self protection module.) - LEGACY_ASWSP O64 - Services: CurCS - 18/06/2014 - C:\Windows\System32\Drivers\aswVmm.sys (aswVmm) .(...) - LEGACY_ASWVMM O64 - Services: CurCS - 29/01/2010 - C:\Program Files\UltraISO\drivers\ISODrive.sys (ISODrive) .(.EZB Systems, Inc. - ISO DVD/CD-ROM Device Driver.) - LEGACY_ISODRIVE O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV O64 - Services: CurCS - 16/08/2014 - C:\Windows\system32\drivers\TrueSight.sys (TrueSight) .(...) - LEGACY_TRUESIGHT ~ Legacy: 101 Scanned in 00mn 00s ---\\ Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.scr> <scrfile>[HKLM\..\open\Command] (...) -- "%1" /S O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\momo\AppData\Local\Google\Chrome\Application\chrome.exe ~ FASS Keys: 11 Scanned in 00mn 00s ---\\ Menu de démarrage Internet (SMI) (O68) O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (...) -- C:\Users\momo\AppData\Local\Google\Chrome\Application\chrome.exe" O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (...) -- C:\Program Files\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) O69 - SBI: SearchScopes [HKCU] {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} [DefaultScope] - (Trovi search) - O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {2F4D135A-329F-848B-C479-252E7440A7BA} - (Bing) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {33BB0A4E-99AF-4226-BDF6-49120163DE86} - (webssearches) - O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.com ~ Keys: Scanned in 00mn 00s ---\\ Enumère les service demarrés par Svchost (SSS) (O83) O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [62464] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [67584] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [67584] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [168960] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [593408] O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [679424] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [473600] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll [90624] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [286208] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [75264] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll [49664] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [300544] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows.) -- C:\Windows\System32\tapisrv.dll [242176] O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll [521216] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [1933848] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll [585728] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [328192] O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [499712] O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [21504] O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [47104] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [114688] O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll [49664] O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [61440] O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [98304] O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [164352] O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [750592] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll [71168] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll [113664] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [168960] O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [102912] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [37376] O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [76800] ~ Services: 32 Scanned in 00mn 00s ---\\ Recherche particulière à la racine du système (SPRF) (O84) [MD5.475048300F9919381C60A3701430CFD7] [sPRF][24/10/2012] (...) -- C:\Users\momo\AppData\Roaming\PnkBstrK.sys [138904] [MD5.BEE7326E30F25BAACF2F20D98750640F] [sPRF][27/10/2011] (.Advanced Micro Devices, Inc. - 11-9_mobility_vista_win7_32_dd_ccc_ocl.) -- C:\Users\momo\Desktop\11-9_mobility_vista_win7_32_dd_ccc_ocl.exe [64870512] [MD5.2B5CE65C977184908FE506A7F38A52A8] [sPRF][14/08/2014] (...) -- C:\Users\momo\Desktop\9jvg4xqf.exe [154863304] [MD5.59BEE71E552AFA5FD3E3DE48075EAA6F] [sPRF][16/08/2014] (...) -- C:\Users\momo\Desktop\AdwCleaner.exe [1361203] [MD5.BE9E90F96DCD4637CBF82A2136DFB305] [sPRF][16/08/2014] (.Swearware - ComboFix NSIS Installer.) -- C:\Users\momo\Desktop\ComboFix.exe [5571320] [MD5.395D3672392525F3CEC0919F978CC883] [sPRF][16/08/2014] (.ESET - ESET Win32/Necurs cleaner.) -- C:\Users\momo\Desktop\ESETNecursCleaner.exe [261872] [MD5.CA630DBADEB5B6101531F986ADFE46C9] [sPRF][14/08/2014] (.Thisisu - Junkware Removal Tool.) -- C:\Users\momo\Desktop\JRT.exe [1016261] [MD5.E90BF9E1562F40140161573B79CD5720] [sPRF][14/08/2014] (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Users\momo\Desktop\mbam-setup-2.0.2.1012.exe [17292760] [MD5.FCCD0F6A733248E8F624B9FE813F0324] [sPRF][16/08/2014] (.Bleeping Computer, LLC - Terminates malware processes so that you can run your normal security programs..) -- C:\Users\momo\Desktop\rkill.exe [1944824] [MD5.7A486A517C5CFA84962D88CE6B28FFB6] [sPRF][16/08/2014] (...) -- C:\Users\momo\Desktop\RogueKiller.exe [4851288] [MD5.C1974F029A2E6A44E6BB5A75762235B8] [sPRF][14/08/2014] (.Bleeping Computer, LLC - Windows shortcut cleaner..) -- C:\Users\momo\Desktop\sc-cleaner.exe [441592] [MD5.D40E7B5FBB8E0EAA7C5C294389AF95AB] [sPRF][16/08/2014] (.Kaspersky Lab ZAO - TDSS rootkit removing tool.) -- C:\Users\momo\Desktop\tdsskiller.exe [4181856] [MD5.A5739BE02519D07A147AC83564DD0F79] [sPRF][24/05/2011] (.Adobe Systems, Inc. - Adobe® Flash® Player Installer/Uninstaller 10.3 r181.) -- C:\Windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe [3119776] ~ Files: 13 Scanned in 00mn 04s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Auto 12/01/2012 136176 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Demand 12/01/2012 136176 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Demand 25/08/2012 194032 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe SS - | Demand 25/10/2012 312264 | (maconfservice) . (.CybelSoft.) - C:\Program Files\ma-config.com\maconfservice.exe SS - | Demand 14/11/2012 529744 | (Steam Client Service) . (.Valve Corporation.) - C:\Program Files\Common Files\Steam\SteamService.exe SS - | Auto 14/07/2009 20992 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 03/03/2009 81920 | (AESTFilters) . (.Andrea Electronics Corporation.) - C:\Program Files\IDT\WDM\aestsrv.exe SR - | Auto 08/09/2011 176128 | (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe SR - | Auto 08/09/2011 291840 | (AMD FUEL Service) . (.Advanced Micro Devices, Inc..) - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe SR - | Auto 18/06/2014 50344 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe SR - | Auto 25/03/2011 660768 | (btwdins) . (.Broadcom Corporation..) - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe SR - | Auto 13/05/2011 26168 | (hpsrv) . (.Hewlett-Packard Company.) - C:\Windows\System32\Hpservice.exe SR - | Auto 24/10/2012 76888 | (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe SR - | Auto 22/07/2010 245842 | (STacSV) . (.IDT, Inc..) - C:\Program Files\IDT\WDM\STacSV.exe SR - | Auto 14/07/2009 20992 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 09/11/2008 602392 | (YahooAUService) . (.Yahoo! Inc..) - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe ~ Services: Scanned in 00mn 12s ---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net Run by momo at 16/08/2014 14:45:16 device: opened successfully user: MBR read successfully Disk trace: called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys hpdskflt.sys halmacpi.dll amd_xata.sys storport.sys amd_sata.sys C:\Windows\system32\DRIVERS\hpdskflt.sys Hewlett-Packard Company Mobile Data Protection System C:\Windows\system32\DRIVERS\amd_xata.sys Advanced Micro Devices Stor Filter Driver C:\Windows\system32\DRIVERS\amd_sata.sys Advanced Micro Devices AHCI 1.2 Device Driver 1 ntkrnlpa!IofCallDriver[0x83A7FBBA] >> \Device\Harddisk0\DR0[0x87501030] 3 CLASSPNP[0x8CDDF59E] >> ntkrnlpa!IofCallDriver[0x83A7FBBA] >> [0x875006C0] 5 hpdskflt[0x8D001F92] >> ntkrnlpa!IofCallDriver[0x83A7FBBA] >> [0x874BF3F8] 7 amd_xata[0x8CA018DF] >> ntkrnlpa!IofCallDriver[0x83A7FBBA] >> \Device\00000067[0x8734FB60] kernel: MBR read successfully user & kernel MBR OK copy of MBR has been found in sector 1 ! copy of MBR has been found in sector 2 ! ~ MBR: 19 Scanned in 00mn 02s ---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by momo at 16/08/2014 14:45:18 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ MBR: Scanned in 00mn 04s ---\\ Liste des émulateurs de CD/DVD (MBR Hook) O42 - Logiciel: DAEMON Tools Lite - (.Disc Soft Ltd.) [HKLM] -- DAEMON Tools Lite =>.DT Soft Ltd ~ Emulateurs: Scanned in 00mn 04s ---\\ Scan Additionnel (O88) Database Version : 13026 - (13/08/2014) Clés trouvées (Keys found) : 18 Valeurs trouvées (Values found) : 6 Dossiers trouvés (Folders found) : 5 Fichiers trouvés (Files found) : 10 [HKLM\Software\Google\Chrome\Extensions\booedmolknjekdopkepjjeckmjkdpfgl] =>PUP.Manager^ [HKLM\Software\Google\Chrome\Extensions\flpcjncodpafbgdpnkljologafpionhb] =>PUP.Manager^ [HKLM\Software\Google\Chrome\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma] =>PUP.QuickStart^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}] =>PUP.SupTab^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{42F1E8A3-0CD4-5A6E-BECD-D7E99C1AF45F}] =>PUP.TPerfectCoupon^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Browseri_Appe 1.2] =>PUP.BrowseriAppe^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\WindowsMangerProtect] =>PUP.Fuyu^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{23B82977-C816-92D2-66E7-BE67DD1E7786}] =>PUP.TPerfectCoupon^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\webssearches uninstall] =>Hijacker.WebsSearches^ [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\fst_fr_304] =>Adware.FreeSoftToday^ [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\iLivid] =>Adware.Bandoo^ [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] =>PUP.V9Software [HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] =>PUP.V9Software [HKCU\Software\Tutorials] =>Spyware.AgenceExclusive [HKLM\Software\Tutorials] =>Spyware.AgenceExclusive [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Companion] =>Toolbar.Yahoo [HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}] =>PUP.OptimizerPro [HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}] =>PUP.OptimizerPro C:\Users\momo\AppData\Local\Google\Chrome\User Data\Default\Extensions\booedmolknjekdopkepjjeckmjkdpfgl =>PUP.Manager^ C:\Users\momo\AppData\Local\Google\Chrome\User Data\Default\Extensions\flpcjncodpafbgdpnkljologafpionhb =>PUP.Manager^ C:\Users\momo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma =>PUP.QuickStart^ C:\Program Files\Browseri_Appe 1.2 =>PUP.BrowseriAppe^ C:\ProgramData\tpeorrfeecTocouepoN =>PUP.TPerfectCoupon^ C:\Windows\Tasks\f2a1313a-f96e-45ae-aabb-8491e8b7292f-3.job =>PUP.CrossRider^ [HKCU\Software\SupHpUISoft] =>PUP.CrossRider^ [HKCU\Software\TutoTag] =>PUP.AgenceExclusive^ [HKCU\Software\freesofttoday] =>Adware.FreeSoftToday^ [HKLM\Software\FREESOFTTODAY] =>Adware.FreeSoftToday^ [HKLM\Software\SupDp] =>PUP.SupTab^ [HKLM\Software\supTab] =>PUP.SupTab^ [HKLM\Software\supWPM] =>PUP.WpManager^ [HKLM\Software\supWindowsMangerProtect] =>PUP.Fuyu^ [HKLM\Software\webssearchesSoftware] =>Hijacker.WebsSearches^ ~ Additionnel Scan: 163234 Items scanned in 00mn 30s ---\\ Informations complémentaires sur les modules ~ ~ ~ ~ ~ ~ ~ ~ AMI: 7 Scanned in 00mn 00s ---\\ Récapitulatif des détections trouvées sur votre station ~ MSI: 13 link(s) detected in 00mn 00s End of the scan (1334 lines in 02mn 36s)(0) J'espère vivement que vous pourrez m'aider ! Merci d'avance !

ok je te remercie

C'est fait, j'ai utilisé OTC et ensuite j'ai rebooté le pc.

Voici le rapport hijackthis : Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:13:32, on 25/12/2009 Platform: Unknown Windows (WinNT 6.01.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16385) Boot mode: Normal Running processes: C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe C:\Windows\Explorer.EXE C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe C:\Program Files\Athan\Athan.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\HomePlayer\HomePlayer.exe C:\Windows\PixArt\Pac7311\Monitor.exe C:\Program Files\PowerISO\PWRISOVM.EXE C:\Windows\tsnp2std.exe C:\Windows\WindowsMobile\wmdc.exe C:\Program Files\KEMailKb\DsiMmKbd.EXE C:\Program Files\CounterPath\X-Lite\x-lite.exe C:\Program Files\Nosibay\Mon Widget RMC\Launcher.exe C:\Program Files\Skype\Phone\Skype.exe C:\Windows\Speech\Common\sapisvr.exe C:\Program Files\Nosibay\Mon Widget RMC\Mon Widget RMC.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Users\Abdelkader\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe C:\Program Files\Xfire\Xfire.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Skype\Toolbars\Shared\SkypeNames.exe C:\Program Files\Internet Download Manager\IDMan.exe C:\Program Files\Internet Download Manager\IEMonitor.exe C:\Windows\system32\SearchFilterHost.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll O2 - BHO: NitroPDFBHO Class - {CF070CB8-F02F-4af4-A7B7-8D45CAD4BB54} - C:\Program Files\Nitro PDF\PDF Download\NitroPDF.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - (no file) O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2010\IEToolbar.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe O4 - HKLM\..\Run: [Athan] C:\Program Files\Athan\Athan.exe O4 - HKLM\..\Run: [bDAgent] "C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe" O4 - HKLM\..\Run: [bitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe" O4 - HKLM\..\Run: [HomePlayer] C:\Program Files\HomePlayer\HomePlayer.exe -autostart O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [PAC7311_Monitor] C:\Windows\PixArt\PAC7311\Monitor.exe O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [tsnp2std] C:\Windows\tsnp2std.exe O4 - HKLM\..\Run: [Windows Mobile Device Center] %windir%\WindowsMobile\wmdc.exe O4 - HKLM\..\Run: [KEMailKb] C:\PROGRA~1\KEMailKb\DsiMmKbd.EXE O4 - HKCU\..\Run: [eyeBeam SIP Client] "C:\Program Files\CounterPath\X-Lite\x-lite.exe" O4 - HKCU\..\Run: [iSUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup O4 - HKCU\..\Run: [Mon Widget RMC] "C:\Program Files\Nosibay\Mon Widget RMC\launcher.exe" O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [speech Recognition] "C:\Windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup O4 - HKCU\..\Run: [steam] "C:\Program Files\Steam\Steam.exe" -silent O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [iDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot O4 - Startup: Notification de cadeaux MSN.lnk = C:\Users\Abdelkader\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe O4 - Global Startup: La Solution Ciel.lnk = ? O4 - Global Startup: LaunchU3.exe.lnk = ? O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_5F1A57F0B9B89E2E.dll/cmsidewiki.html O8 - Extra context menu item: Télécharger avec IDM - C:\Program Files\Internet Download Manager\IEExt.htm O8 - Extra context menu item: Télécharger le contenu de video FLV avec IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm O8 - Extra context menu item: Télécharger tous les liens avec IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing) O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing) O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL O9 - Extra button: PDF Download - {F1C0FD6C-A6A0-49a7-A932-71A56461867F} - C:\Program Files\Nitro PDF\PDF Download\NitroPDF.dll (HKCU) O15 - Trusted Zone: http://www.google.fr O15 - Trusted Zone: http://fr.msn.com O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (Ma-Config control) - http://fichiers.touslesdrivers.com/maconfi...fig_4_0_1_3.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{0CB6DAF2-5DE8-4689-A3CD-9ED21599B4A1}: NameServer = 212.27.40.240,212.27.40.241 O17 - HKLM\System\CS1\Services\Tcpip\..\{0CB6DAF2-5DE8-4689-A3CD-9ED21599B4A1}: NameServer = 212.27.40.240,212.27.40.241 O17 - HKLM\System\CS2\Services\Tcpip\..\{0CB6DAF2-5DE8-4689-A3CD-9ED21599B4A1}: NameServer = 212.27.40.240,212.27.40.241 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: BitDefender Serveur Arrakis (Arrakis3) - BitDefender S.R.L. http://www.bitdefender.com - C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S30RP1.EXE O23 - Service: Service Google Update (gupdate1c9f0cf6a3dcad1) (gupdate1c9f0cf6a3dcad1) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender S.R.L. - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: STI Simulator - Unknown owner - C:\Windows\System32\PAStiSvc.exe O23 - Service: TeamViewer 4 (TeamViewer4) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe -- End of file - 11772 bytes

Bonjour, Le problème vient effectivement de Threatfire, car je l'ai désinstallé et tout est redevenu normal, tout les problèmes ont disparu. Je te remercie de ton aide, et je te souhaite de passer de bonnes fêtes.

Bonjour, Voici le rapport que tu m'as demandé Results of screen317's Security Check version 0.99.1 Windows 7 (UAC is disabled!) `````````````````````````````` Antivirus/Firewall Check: BitDefender Antivirus 2010 a-squared Free 4.5 Antivirus up to date! (On Access scanning disabled!) `````````````````````````````` Anti-malware/Other Utilities Check: ThreatFire HijackThis 2.0.2 CCleaner Java 6 Update 15 Out of date Java installed! Adobe Flash Player 10 Adobe Reader 9.2 - Français `````````````````````````````` Process Check: objlist.exe by Laurent ThreatFire TFTray.exe ThreatFire TFService.exe Common Files BitDefender BitDefender Update Service livesrv.exe BitDefender BitDefender 2010 vsserv.exe BitDefender BitDefender 2010 bdagent.exe BitDefender BitDefender 2010 seccenter.exe BitDefender BitDefender 2010 uiscan.exe `````````````````````````````` DNS Vulnerability Check: GREAT! (Not vulnerable to DNS cache poisoning) `````````End of Log```````````

Non malheureusement cela n'a pas marché, bien que j'ai pu le désinstaller en mode sans echec, je ne peux le réinstaller. A la fin de l'installation, il y a un message d'erreur. Cela vaut pour mbam et idm. J'ai les doigts qui me démangent pour faire un reformatage et tous recommencer de zéro, mais franchement ce serait dommage, parce que à part ca le pc tourne bien.

Je te remercie enormément pour ton aide, je t'en suis reconnaissant. Je te souhaite de bonnes fêtes et une bonne année

Et si je l'installais en mode sans echec, qu'est ce que tu en penses ?

Avec Ajout/suppression le programme n'y figure pas, avec ccleaner impossible à désinstaller

Non il n'y a pas de boutons Oui/non Lorsque je veux désinstaller mbam avec mbamclean, j'ai le message suivant ""SHGetvalue failed with error code0" et simplement le bouton OK c'est tout. Lorsque je veux effacer le dossier dans le dossier programme, j'ai le message que je n'ai pas d'autorisation toujours avec le bouton ok.

Mais c'est justement le problème, c'est que je n'ai pas le choix.

J'ai beau désinstaller et réinstaller Bitdefender, le problème persiste toujours. C'est-à-dire que lorsque je souhaite démarrer mbam, celui-ci m'indique que j'ai besoin d'autorisation. Lorsque je veux le désinstaller avec le programme adéquat, un message apparait "SHGetvalue failed with error code0". Qu'en penses tu ?

C'est bon ca marche pour les modules et je t'en remercie, mais en ce qui concerne les programmes que je t'ai cités aurais tu une idée ?

J'ai fait ce que tu m'as dit, mais le problème que j'ai en ce moment c'est que je ne peux plus utiliser, les modules complémentaires de firefox (googletoolbar etc...) et les programmes mbam et idm. Donc je ne sais plus quoi faire, si tu as une idée pour résoudre ces problèmes, je t'en remercierai grandement.