clarine1950

Grand merci Dylav. J'en apprend tous les jours un peu plus ! Bonne journée

Après avoir cherché pendant des heures !! Problème résolu : outils options contenu Avancé DECOCHER "Autoriser les pages web a utiliser leurs propres police ... Merci a Tonton et Dylav pour m'avoir répondu Bonne soirée à tous PS Désolée je n'ai pas su mettre en RESOLU

Merci beaucoup

J'ai essayé avec Photofiltre en fouillant sur internet et j'ai fait cela est ce que c'est bon ? image annulée

Désolée mais Windows 7 n'a pas de presse papier ? J'ai bien photofiltre mais je ne sais comment m'y prendre. Retraitée et peu expérimentée je vous avoue être un peu perdue ! Merci tout de même de vous intéresser à mon problème et même un lundi de Pentecôte !!

Bonjour a tous Problèmes Messagerie Orange dans FIREFOX 12 (sous windows 7) Je surf sans problèmes mais … - je peux lire les messages sans problèmes avec ou sans pièces jointes - en HTML je ne peux pas écrire un message (les blocs signature taille police etc..) sont décalés à droite - en HTML je ne peux pas les transférer (tout le texte se met a droite) et le curseur est invisible Par contre en Texte Brut ça fonctionne ! Une réinitialisation en mode sans échec ne change rien un nouveau profil ne change rien Aucun problème avec la messagerie Internet Explorer 9 J'ai fais une copie d'écran mais je ne sais pas l'insérer ?? Merci pour ce que vous pourrez faire pour moi. ----------- EDIT ---------------- Lien avec sujet précédent : http://forum.zebulon.fr/findpost-t193794-p1618055.html. Tonton.

OK je n'ai pas cette barre de notification je vais la télécharger. En ce qui concerne Internet Explorer : avec Orange je n'ai aucun problème de messagerie, tout se passe très bien réception, envoi, transfert. Je préférais utiliser Firefox car je trouve qu'au niveau des résultats de recherche il est beaucoup plus précis enfin, pour moi. J'utilisais donc pour surfer Firefox et(depuis mon malware)IE pour la messagerie ...ce n'était pas très pratique. Ayant ce problème depuis 1 mois environ j'ai peut être un peu trop "bidouillé" a des endroits où il n'aurait pas fallu (about :...) c'est de ma faute. Je pensais que le fait d'être "infecté" causait mon problème. En tout état de cause je vous adresse un grand MERCI pour avoir éradiquer mes malwares avec simplicité pour moi car comme je vous l'ai dit une suis peu expérimentée en informatique. Merci encore pour tout et je vous souhaite un excellent W.E

Je consulte aussi mes mails dans la boite de réception mail ORANGE sur firefox J'ai un problème avec Thunderbird qui ne reçoit plus de courrier ? Je pense maintenant que je suis désinfectée grâce à vous que je dois m'adresser a un autre poste ?

Je consulte aussi mes mails dans la boite de réception ORANGE sur firefox J'ai un problème avec Thunderbird qui ne reçoit plus de courrier ?

oui je ne peux toujours pas écrire ou transférer de mail avec Firefox 12 Le message est complètement à droite et je n'obtiens pas le curseur ? Merci

Rapport de ZHPFix 1.2.06 par Nicolas Coolman, Update du 17/05/2012 Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-26-05-2012-18-31-47.txt Run by CHANTAL at 26/05/2012 18:31:47 Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601) Web site : ZHPFix Fix de rapport Web site : Blog de NicolasCoolman - ZebHelpProcess - Skyrock.com ========== Clé(s) du Registre ========== SUPPRIME Key*: HKCU\Software\Nosibay SUPPRIME Key: StartupReg: facemoods SUPPRIME Key*: HKCU\Software\Tutorials ========== Valeur(s) du Registre ========== ABSENT {2DFB118F-2336-424D-B6D0-6B0553E5F4FE} ABSENT {F789D0EC-0A4A-4092-B31F-A43FAC9FAA89} ABSENT {6F376BA0-D628-4A18-80D9-722E2B9A4E0B} ABSENT Valeur Standard Profile: FirewallRaz : ABSENT Valeur Domain Profile: FirewallRaz : Aucune valeur présente dans la clé d'exception du registre (FirewallRaz) ========== Dossier(s) ========== SUPPRIME Reboot Folder**: C:\ProgramData\{0F47B255-CF9F-48C5-B558-B7DAF9345268} SUPPRIME Reboot Folder**: C:\ProgramData\{D3B41B92-9BC2-43EB-916A-4FA9E8191837} SUPPRIME Reboot Folder**: C:\Program Files (x86)\Nosibay SUPPRIME Folder: C:\Users\CHANTAL\AppData\Roaming\Nosibay SUPPRIME Folder: C:\Users\CHANTAL\AppData\Roaming\OfferBox SUPPRIME Folder: C:\Users\CHANTAL\AppData\Roaming\Tuto4pc SUPPRIME Folder: C:\Users\CHANTAL\AppData\Local\Tuto4PC SUPPRIME Flash Cookies: SUPPRIME Temporaires Windows: ========== Fichier(s) ========== ABSENT Folder/File: c:\users\chantal\appdata\roaming\nosibay ABSENT Folder/File: c:\users\chantal\appdata\roaming\offerbox ABSENT Folder/File: c:\users\chantal\appdata\roaming\tuto4pc ABSENT Folder/File: c:\users\chantal\appdata\local\tuto4pc ABSENT File: c:\program files (x86)\facemoods.com SUPPRIME Flash Cookies: SUPPRIME Temporaires Windows: ========== Tache planifiée ========== SUPPRIME Task: {3D02A999-600F-4F69-8C27-D43829686E20} SUPPRIME Task: {91E91239-82C2-4253-BF49-0700AA41ED44} SUPPRIME Task: {B4458336-4398-4B95-A906-35000D830DD7} ========== Restauration Système ========== Point de restauration non crée ========== Récapitulatif ========== 3 : Clé(s) du Registre 6 : Valeur(s) du Registre 9 : Dossier(s) 7 : Fichier(s) 3 : Tache planifiée 1 : Restauration Système End of clean in 00mn 52s ========== Chemin de fichier rapport ========== C:\ZHP\ZHPFix[R1].txt - 26/05/2012 18:31:47 [2311

svp Puis je supprimer la quarantaine de MB ? Merci encore

voici la rapport ZHPDIAG Rapport de ZHPDiag v1.31.095 par Nicolas Coolman, Update du 24/05/2012 Run by CHANTAL at 26/05/2012 14:56:15 Web site : ZHPDiag Outil de diagnostic Web site : Blog de NicolasCoolman - ZebHelpProcess - Skyrock.com State : Version à jour. ---\\ Web Browser MSIE: Internet Explorer v9.0.8112.16421 MFIE: Mozilla Firefox 12.0 v12.0 (Defaut) ---\\ Windows Product Information ~ Langage: Français Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601) Windows Server License Manager Script : OK ~ Windows® 7, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : 3Q6C9 Windows License : OK ~ Windows Remaining Initializations Number : 3 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ System Information ~ Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 4095 MB (66% free) System Restore: Activé (Enable) System drive C: has 530 GB (90%) free of 583 GB ---\\ Logged in mode ~ Computer Name: CHANTAL-HP ~ User Name: CHANTAL ~ All Users Names: HomeGroupUser$, CHANTAL, Administrateur, ~ Unselected Option: O45,O61 Logged in as Administrator ---\\ Environnement Variables ~ System Unit : C:\ ~ %AppData% : C:\Users\CHANTAL\AppData\Roaming\ ~ %Desktop% : C:\Users\CHANTAL\Desktop\ ~ %Favorites% : C:\Users\CHANTAL\Favorites\ ~ %LocalAppData% : C:\Users\CHANTAL\AppData\Local\ ~ %StartMenu% : C:\Users\CHANTAL\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 530 Go of 583 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 13 Go) E:\ CD-ROM drive (Not Inserted) G:\ Floppy drive, Flash card reader, USB Key (Not Inserted) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyComputer: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ~ Scan Security Center in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024] [MD5.228443FF3A1FB0B974D278F7C6403FAD] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.28/02/2012 - 07:49:56.) -- C:\Windows\System32\wininet.dll [1390080] [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656] [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448] [MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160] [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456] [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400] [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224] [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208] [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632] [MD5.A2F74975097F52A00745F9637451FDD8] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.11/03/2011 - 07:41:34.) -- C:\Windows\system32\Drivers\ntfs.sys [1659776] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280] [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184] [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296] [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808] ~ Scan Generic Processes in 00mn 00s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 4/939 ~ Mes musiques (My Musics) : 1/127 ~ Mes Videos (My Videos) : 2/3 ~ Mes Favoris (My Favorites) : 1/132 ~ Mes Documents (My Documents) : 1/1659 ~ Mon Bureau (My Desktop) : 2/27 ~ Menu demarrer (Programs) : 1/30 ~ Scan Hidden Files in 00mn 01s ---\\ Processus lancés [MD5.782FEF655DBF8653C9F2722BEBF7A8A6] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4241512] [PID.2768] [MD5.CC926B0811C3FA2363C98711410FEF24] - (...) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [4540928] [PID.1068] [MD5.4041D31508A2A084DFB42C595854090F] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [44768] [PID.] ~ Scan Processes Running in 00mn 00s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) C:\Users\CHANTAL\AppData\Roaming\Mozilla\Firefox\Profiles\7zxxlppw.default\prefs.js M3 - MFPP: Plugins - [CHANTAL] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\amazon-france.xml M3 - MFPP: Plugins - [CHANTAL] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\bing.xml M3 - MFPP: Plugins - [CHANTAL] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml M3 - MFPP: Plugins - [CHANTAL] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\eBay-france.xml M3 - MFPP: Plugins - [CHANTAL] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\google.xml M3 - MFPP: Plugins - [CHANTAL] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\wikipedia-fr.xml M3 - MFPP: Plugins - [CHANTAL] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\yahoo-france.xml M0 - MFSP: prefs.js [CHANTAL - 7zxxlppw.default] Orange : téléphones, forfaits, Internet, actualité, sport, video P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_235.dll P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.4.0] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java Deploy.) -- C:\Windows\system32\npDeployJava1.dll P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.4.0] - (.Oracle Corporation - Next Generation Java Plug-in 10.4.0 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.10411.0.) -- c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\Program Files\Microsoft Office\Office14\NPAUTHZ.dll ~ Scan Firefox Browser in 00mn 00s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Orange : téléphones, forfaits, Internet, actualité, sport, video R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Search Microsoft.com R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = MSN Hotmail.fr, Messenger, Skype, Actualité, Sport, People, Femmes - MSN France R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Search Microsoft.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm R3 - URLSearchHook: (no name) [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) (No version) -- (.not file.) R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 ~ Scan IE Browser in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 ~ Scan Proxy management in 00mn 00s ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2) F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Scan Keys in 00mn 00s ---\\ Redirection du fichier Hosts (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Scan Hosts File in 00mn 06s ~ Nombre de lignes (Lines number): 15262 ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: HP Print Enhancer [64Bits] - {0347C33E-8762-4905-BF09-768834316C61} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: (no name) [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} Clé orpheline O2 - BHO: avast! WebRep [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - avast! WebRep Plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.dll O2 - BHO: HP Smart BHO Class [64Bits] - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll ~ Scan BHO in 00mn 00s ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} . (...) -- (.not file.) ~ Scan Toolbar in 00mn 00s ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe ~ Scan Application in 00mn 00s ---\\ Autres liens utilisateurs (O4) O4 - Global Startup: C:\Users\CHANTAL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\CHANTAL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\CHANTAL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Update Checker.lnk . (.FileHippo.com.) -- C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe O4 - Global Startup: C:\Users\CHANTAL\Desktop\AD-R.lnk . (...) -- C:\Program Files (x86)\Ad-Remover\main.exe O4 - Global Startup: C:\Users\CHANTAL\Desktop\Google.URL . (...) -- C:\Users\CHANTAL\Desktop\Google.URL O4 - Global Startup: C:\Users\CHANTAL\Desktop\ Traduction.URL . (...) -- C:\Users\CHANTAL\Desktop\ Traduction.URL O4 - Global Startup: C:\Users\CHANTAL\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Foxit Reader 5.1.lnk . (...) -- C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Reader.exe O4 - Global Startup: C:\Users\CHANTAL\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\CHANTAL\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE O4 - Global Startup: C:\Users\CHANTAL\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Thunderbird.lnk . (.Mozilla Messaging.) -- C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe ~ Scan Global Startup in 00mn 00s ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: &Envoyer à OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} -- C:\Program Files (x86)\MICROS~3\Office14\ONBttnIE.dll (.not file.) O9 - Extra button: Notes &liées OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} -- C:\Program Files (x86)\MICROS~3\Office14\ONBTTN~1.dll (.not file.) ~ Scan IE Extra Buttons in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll ~ Scan Winsock in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{29D122E8-6E54-4C71-95BA-54B8B5E64E4B}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{29D122E8-6E54-4C71-95BA-54B8B5E64E4B}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{29D122E8-6E54-4C71-95BA-54B8B5E64E4B}: DhcpNameServer = 192.168.1.1 ~ Scan Domain in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (...) -- O18 - Handler: dvd [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (...) -- O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (...) -- O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (...) -- O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (...) -- O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (...) -- O18 - Handler: its [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (...) -- O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (...) -- O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (...) -- O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (...) -- O18 - Handler: mhtml [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (...) -- O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (...) -- O18 - Handler: ms-help [64Bits] - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (...) -- O18 - Handler: skype4com [64Bits] - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (...) -- O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (...) -- O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (...) -- O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll ~ Scan Protocole Additionnel in 00mn 00s ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. ~ Scan SSODL in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe ~ Scan Services in 00mn 00s ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(...) - (.not file.) ~ Scan Desktop Component in 00mn 00s ---\\ BootExecute (O34) O34 - HKLM BootExecute: (autocheck autochk *) - File not found ~ Scan Keys in 00mn 00s ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GlaryInitialize.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\HPCeeScheduleForCHANTAL.job [MD5.76D5A3D2A50402A0B9B6ED13C4371E79] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [MD5.505F8E2A5220ABF35C7CA674CDD1EEDA] [APT] [GlaryInitialize] (.Glarysoft Ltd.) -- C:\Program Files (x86)\Glary Utilities\initialize.exe [MD5.BEAEC745256D3158495FEE10BA673E7C] [APT] [HPCeeScheduleForCHANTAL] (.Hewlett-Packard.) -- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [MD5.00000000000000000000000000000000] [APT] [Microsoft_Hardware_Launch_IPoint_exe] (...) -- c:\Program Files\Microsoft IntelliPoint\IPoint.exe (.not file.) [MD5.ED5D30F5D177A12E1A67401440DEA36D] [APT] [Registration] (...) -- C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [MD5.ED5D30F5D177A12E1A67401440DEA36D] [APT] [servicePlan] (...) -- C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [MD5.4F69AABB5D82AA4EF6DFF7871212ADF6] [APT] [{0D7EB7F3-E9A7-454D-8C8A-6C7CCBD34D7F}] (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [MD5.00000000000000000000000000000000] [APT] [{3D02A999-600F-4F69-8C27-D43829686E20}] (...) -- C:\Users\CHANTAL\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IK6EIH7G\lj1017fr.exe (.not file.) [MD5.D2F3FD7F15418C0FBF587C2FD8AA38B6] [APT] [{40A12B14-E9B3-4B64-B4C9-A05E3A88B787}] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner64.exe [MD5.4F69AABB5D82AA4EF6DFF7871212ADF6] [APT] [{457C4DE3-D0BD-460C-95D4-418453145293}] (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [MD5.4F69AABB5D82AA4EF6DFF7871212ADF6] [APT] [{61A585C6-A774-469E-B7DE-7F4B24F51DB9}] (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [MD5.F1F1FD0131DEFCCA27454641E1E24652] [APT] [{661A7500-EF07-49E1-9D07-F5A595C05EB5}] (.Hewlett-Packard.) -- C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe [MD5.00000000000000000000000000000000] [APT] [{91E91239-82C2-4253-BF49-0700AA41ED44}] (...) -- C:\Users\CHANTAL\Desktop\solitaire.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{B4458336-4398-4B95-A906-35000D830DD7}] (...) -- C:\Program Files (x86)\PDF Complete\pdfvista.exe (.not file.) [MD5.4F69AABB5D82AA4EF6DFF7871212ADF6] [APT] [{D10F7BC3-4A01-4778-8366-A4887A9B4D92}] (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [MD5.B4BFB9F068A27062AE8C133354D3E31F] [APT] [HP Support Assistant Quick Start] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFMessenger\HPSFMsgr.exe [MD5.7A14C25B7EC229B7F8B3E457779C83CC] [APT] [HP Total Care Tune-Up] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPTuneUp.exe [MD5.F5E1109CFBDE7E3219213177B7B6A9D7] [APT] [PC Health Analysis] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [MD5.F5E1109CFBDE7E3219213177B7B6A9D7] [APT] [PC Tuneup] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [MD5.4272C6DE2C1322B3595F7ACF4F339E32] [APT] [update Check] (.Hewlett-Packard.) -- C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater\HPSFUpdater.exe ~ Scan Scheduled Task in 00mn 01s ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll O40 - ASIC: Internet Explorer [64Bits] - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: Browser Customizations [64Bits] - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . (.Microsoft Corporation - Personnalisation d’IEAK.) -- C:\Windows\System32\iedkcs32.dll O40 - ASIC: Java (Sun) [64Bits] - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll ~ Scan Active Setup in 00mn 00s ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys O41 - Driver: (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\Drivers\aswrdr2.sys O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys ~ Scan Drivers in 00mn 00s ---\\ Logiciels installés (O42) O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {EB879750-CCBD-4013-BFD5-0294D4DA5BD0} O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} O42 - Logiciel: Comptes et Budget (Mono-compte) V6.0 - (.Michel ALAUX..) [HKLM] -- Comptes_et_Budget (Mono-compte) V6.0_is1 O42 - Logiciel: CyberLink DVD Suite Deluxe - (.CyberLink Corp..) [HKLM] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} O42 - Logiciel: CyberLink DVD Suite Deluxe - (.CyberLink Corp..) [HKLM] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} O42 - Logiciel: DVD Menu Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM] -- InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF} O42 - Logiciel: DVD Menu Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM] -- {FB4BB287-37F9-4E27-9C4D-2D3882E08EFF} O42 - Logiciel: Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{33D32206-AC43-4808-B6A2-5B5EEFFE1EF6} O42 - Logiciel: FileHippo.com Update Checker - (.Pas de propriétaire.) [HKLM] -- FileHippo.com O42 - Logiciel: FotoMix version 8.8.1 - (.Digital Photo Software.) [HKLM] -- {10A0255E-0B73-4397-AB4E-E3667EDA70E4}_is1 O42 - Logiciel: Foxit Reader 5.1 - (.Foxit Corporation.) [HKLM] -- Foxit Reader_is1 O42 - Logiciel: Glary Utilities 2.44.0.1450 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1 O42 - Logiciel: HP Advisor - (.Hewlett-Packard.) [HKLM] -- {40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B} O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM] -- {07FA4960-B038-49EB-891B-9F95930AA544} O42 - Logiciel: HP MediaSmart DVD - (.Hewlett-Packard.) [HKLM] -- InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A} O42 - Logiciel: HP MediaSmart DVD - (.Hewlett-Packard.) [HKLM] -- {DCCAD079-F92C-44DA-B258-624FC6517A5A} O42 - Logiciel: HP MediaSmart Music - (.Hewlett-Packard.) [HKLM] -- InstallShield_{91A34181-9FAD-43AB-A35F-E7A8945B7E1C} O42 - Logiciel: HP MediaSmart Music - (.Hewlett-Packard.) [HKLM] -- {91A34181-9FAD-43AB-A35F-E7A8945B7E1C} O42 - Logiciel: HP MediaSmart Photo - (.Hewlett-Packard.) [HKLM] -- InstallShield_{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF} O42 - Logiciel: HP MediaSmart Photo - (.Hewlett-Packard.) [HKLM] -- {6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF} O42 - Logiciel: HP MediaSmart Video - (.Hewlett-Packard.) [HKLM] -- InstallShield_{D12E3E7F-1B13-4933-A915-16C7DD37A095} O42 - Logiciel: HP MediaSmart Video - (.Hewlett-Packard.) [HKLM] -- {D12E3E7F-1B13-4933-A915-16C7DD37A095} O42 - Logiciel: HP Setup - (.Hewlett-Packard.) [HKLM] -- {72D90DB3-A16A-4545-B555-868471101833} O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3} O42 - Logiciel: HPDiagnosticAlert - (.Microsoft.) [HKLM] -- {846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE} O42 - Logiciel: Hewlett-Packard ACLM.NET v1.1.1.0 - (.Hewlett-Packard.) [HKLM] -- {6F340107-F9AA-47C6-B54C-C3A19F11553F} O42 - Logiciel: LightScribe System Software - (.LightScribe.) [HKLM] -- {46BA053F-57B3-4153-BDB6-D37EEC8B12D7} O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: Malwarebytes Anti-Malware version 1.61.0.1400 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1 O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570} O42 - Logiciel: Microsoft Corporation - (.Microsoft Corporation.) [HKLM] -- {B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800} O42 - Logiciel: Microsoft Default Manager - (.Microsoft Corporation.) [HKLM] -- {61BEA823-ECAF-49F1-8378-A59B3B8AD247} O42 - Logiciel: Microsoft Office Access MUI (French) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-0015-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Excel MUI (French) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-0016-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Home and Student 2010 - (.Microsoft Corporation.) [HKLM] -- Office14.SingleImage O42 - Logiciel: Microsoft Office OneNote MUI (French) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-00A1-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Outlook MUI (French) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-001A-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-0018-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (Arabic) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-001F-0401-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (Dutch) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-001F-0413-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (English) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-001F-0409-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (French) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-001F-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (German) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-001F-0407-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (Spanish) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-001F-0C0A-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proofing (French) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-002C-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Publisher MUI (French) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-0019-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Shared MUI (French) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-006E-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Single Image 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-003D-0000-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Word MUI (French) 2010 - (.Microsoft Corporation.) [HKLM] -- {90140000-001B-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8} O42 - Logiciel: Microsoft SQL Server Compact 3.5 FRA - (.Microsoft Corporation.) [HKLM] -- {BE361597-42AC-4513-9BA6-FFAB310038FB} O42 - Logiciel: Microsoft SQL Server Compact 3.5 SP2 ENU - (.Microsoft Corporation.) [HKLM] -- {3A9FC03D-C685-4831-94CF-4EDFD3749497} O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2} O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d} O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F} O42 - Logiciel: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 - (.Microsoft Corporation.) [HKLM] -- {196BB40D-1578-3D01-B289-BEFC77A11A1E} O42 - Logiciel: Movie Theme Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM] -- InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E} O42 - Logiciel: Movie Theme Pack for HP MediaSmart Video - (.Hewlett-Packard.) [HKLM] -- {3023EBDA-BF1B-4831-B347-E5018555F26E} O42 - Logiciel: Mozilla Firefox 12.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 12.0 (x86 fr) O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService O42 - Logiciel: Mozilla Thunderbird 12.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Thunderbird 12.0.1 (x86 fr) O42 - Logiciel: PHOTOfunSTUDIO 6.0 - (.Panasonic Corporation.) [HKLM] -- {B62A8A6F-5E48-4336-BF13-1632D5921872} O42 - Logiciel: PL-2303 USB-to-Serial - (.Prolific Technology INC.) [HKLM] -- {ECC3713C-08A4-40E3-95F1-7D0704F1CE5E} O42 - Logiciel: PhotoNow! - (.CyberLink Corp..) [HKLM] -- InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE} O42 - Logiciel: PhotoNow! - (.CyberLink Corp..) [HKLM] -- {D36DD326-7280-11D8-97C8-000129760CBE} O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658} O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM] -- {40BF1E83-20EB-11D8-97C5-0009C5020658} O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM] -- InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1} O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM] -- {CB099890-1D5F-11D5-9EA9-0050BAE317E1} O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {0E64B098-8018-4256-BA23-C316A43AD9B0} O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} O42 - Logiciel: Recovery Manager - (.CyberLink Corp..) [HKLM] -- {44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5} O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2478663 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2518870 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2539636 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2572078 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2604121 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2633870 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656351 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656368 O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656405 O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client P - (.Microsoft Corporation.) [HKLM] -- {4B5F58F7-C7D1-3CE3-9B37-B657F0852643}.KB2478663 O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client P - (.Microsoft Corporation.) [HKLM] -- {4B5F58F7-C7D1-3CE3-9B37-B657F0852643}.KB2518870 O42 - Logiciel: Skype™ 5.9 - (.Skype Technologies S.A..) [HKLM] -- {EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8} O42 - Logiciel: TomTom HOME 2.8.3.2499 - (.TomTom.) [HKLM] -- TomTom HOME O42 - Logiciel: TomTom HOME Visual Studio Merge Modules - (.TomTom International B.V..) [HKLM] -- {8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533} O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2468871) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871 O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2533523) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523 O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2600217) - (.Microsoft Corporation.) [HKLM] -- {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217 O42 - Logiciel: Update for Microsoft Office 2010 (KB2494150) - (.Microsoft.) [HKLM] -- {90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA} O42 - Logiciel: VLC media player 2.0.1 - (.VideoLAN.) [HKLM] -- VLC media player O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} O42 - Logiciel: avast! Free Antivirus v7.0.1426.0 - (.AVAST Software.) [HKLM] -- avast ---\\ HKCU & HKLM Software Keys [HKCU\Software\AppDataLow\Software\Microsoft] [HKCU\Software\AppDataLow\Software] [HKLM\Software\AVAST Software] [HKLM\Software\AVS4YOU] [HKLM\Software\Adobe] [HKLM\Software\AdwCleaner] [HKLM\Software\Apple Computer, Inc.] [HKLM\Software\Apple Inc.] [HKLM\Software\Caphyon] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\CyberLink] [HKLM\Software\EasyBits] [HKLM\Software\Foxit Software] [HKLM\Software\GlarySoft] [HKLM\Software\Google] [HKLM\Software\HP] [HKLM\Software\Hewlett-Packard] [HKLM\Software\Intel] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\Khronos] [HKLM\Software\Licenses] [HKLM\Software\LightScribe] [HKLM\Software\MAGIX] [HKLM\Software\Macromedia] [HKLM\Software\Malwarebytes' Anti-Malware] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\ODBC] [HKLM\Software\PDR_Upgrade] [HKLM\Software\Panasonic] [HKLM\Software\Policies] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\Safer Networking Limited] [HKLM\Software\Skype] [HKLM\Software\TomTom] [HKLM\Software\TuneUp] [HKLM\Software\VideoLAN] [HKLM\Software\Volatile] [HKLM\Software\WildTangent] [HKLM\Software\Win32 Services] [HKLM\Software\Windows] [HKLM\Software\Xara] [HKLM\Software\mozilla.org] ~ Scan Softwares in 00mn 00s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 26/05/2012 - 10:33:52 - [2,694] ----D C:\Program Files (x86)\Ad-Remover O43 - CFD: 15/03/2012 - 10:33:04 - [2,316] ----D C:\Program Files (x86)\Apple Software Update O43 - CFD: 20/05/2012 - 18:23:29 - [378,676] ----D C:\Program Files (x86)\Common Files O43 - CFD: 12/11/2011 - 19:55:19 - [11,404] ----D C:\Program Files (x86)\Comptes et Budget Free V6.0 O43 - CFD: 26/03/2012 - 17:29:06 - [1155,750] ----D C:\Program Files (x86)\CyberLink O43 - CFD: 26/03/2012 - 18:18:40 - [5,284] ----D C:\Program Files (x86)\Digital Photo Software O43 - CFD: 17/04/2012 - 18:17:35 - [0,420] ----D C:\Program Files (x86)\FileHippo.com O43 - CFD: 26/04/2012 - 16:47:28 - [56,989] ----D C:\Program Files (x86)\Foxit Software O43 - CFD: 18/04/2012 - 17:25:55 - [37,911] ----D C:\Program Files (x86)\Glary Utilities O43 - CFD: 25/02/2012 - 19:49:10 - [0] ----D C:\Program Files (x86)\Google O43 - CFD: 11/12/2011 - 18:49:32 - [1503,628] ----D C:\Program Files (x86)\Hewlett-Packard O43 - CFD: 27/12/2011 - 15:27:08 - [180,622] ----D C:\Program Files (x86)\Hp O43 - CFD: 26/03/2012 - 17:28:22 - [243,491] --H-D C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 11/04/2012 - 16:59:28 - [5,987] ----D C:\Program Files (x86)\Internet Explorer O43 - CFD: 12/04/2012 - 17:48:22 - [20,610] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware O43 - CFD: 14/02/2012 - 19:23:33 - [0] ----D C:\Program Files (x86)\Microsoft O43 - CFD: 08/08/2011 - 20:46:08 - [38,002] ----D C:\Program Files (x86)\Microsoft Analysis Services O43 - CFD: 08/08/2011 - 20:33:33 - [28,015] ----D C:\Program Files (x86)\Microsoft LifeCam O43 - CFD: 13/03/2012 - 18:58:27 - [856,754] ----D C:\Program Files (x86)\Microsoft Office O43 - CFD: 16/05/2012 - 14:10:36 - [40,838] ----D C:\Program Files (x86)\Microsoft Silverlight O43 - CFD: 21/10/2011 - 17:13:48 - [5,112] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition O43 - CFD: 21/10/2011 - 17:13:48 - [0,378] ----D C:\Program Files (x86)\Microsoft Synchronization Services O43 - CFD: 14/12/2011 - 19:30:39 - [7,789] ----D C:\Program Files (x86)\Microsoft.NET O43 - CFD: 24/05/2012 - 17:17:55 - [37,569] ----D C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 24/05/2012 - 17:17:58 - [0,210] ----D C:\Program Files (x86)\Mozilla Maintenance Service O43 - CFD: 01/05/2012 - 15:21:44 - [55,703] ----D C:\Program Files (x86)\Mozilla Thunderbird O43 - CFD: 14/07/2009 - 07:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild O43 - CFD: 18/01/2012 - 10:55:32 - [63,464] ----D C:\Program Files (x86)\MSECache O43 - CFD: 08/08/2011 - 18:58:08 - [0] ----D C:\Program Files (x86)\MSXML 4.0 O43 - CFD: 25/05/2012 - 17:31:00 - [0] ----D C:\Program Files (x86)\Nosibay O43 - CFD: 21/02/2012 - 19:18:24 - [18,588] R---D C:\Program Files (x86)\Online Services O43 - CFD: 21/10/2011 - 17:13:59 - [76,310] ----D C:\Program Files (x86)\Panasonic O43 - CFD: 10/09/2011 - 16:00:03 - [0] ----D C:\Program Files (x86)\PDF Complete O43 - CFD: 04/04/2012 - 13:03:46 - [41,715] ----D C:\Program Files (x86)\Photofiltre O43 - CFD: 24/11/2011 - 14:53:08 - [0,318] ----D C:\Program Files (x86)\Prolific Technology INC O43 - CFD: 20/05/2012 - 10:34:10 - [72,431] ----D C:\Program Files (x86)\QuickTime O43 - CFD: 09/08/2011 - 00:36:40 - [46,195] ----D C:\Program Files (x86)\Realtek O43 - CFD: 14/07/2009 - 07:32:38 - [37,349] ----D C:\Program Files (x86)\Reference Assemblies O43 - CFD: 18/04/2012 - 17:16:57 - [17,694] R---D C:\Program Files (x86)\Skype O43 - CFD: 09/08/2011 - 00:36:54 - [0] --H-D C:\Program Files (x86)\Temp O43 - CFD: 19/03/2012 - 17:47:10 - [48,338] ----D C:\Program Files (x86)\TomTom HOME 2 O43 - CFD: 19/03/2012 - 17:47:15 - [0,021] ----D C:\Program Files (x86)\TomTom International B.V O43 - CFD: 27/11/2011 - 18:32:59 - [0,093] ----D C:\Program Files (x86)\UnFREEz O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information O43 - CFD: 24/05/2012 - 14:48:52 - [0,006] ----D C:\Program Files (x86)\UpdateIcons O43 - CFD: 21/03/2012 - 16:18:49 - [110,025] ----D C:\Program Files (x86)\VideoLAN O43 - CFD: 07/10/2011 - 17:21:56 - [6,420] ----D C:\Program Files (x86)\VS Revo Group O43 - CFD: 09/08/2011 - 10:19:29 - [0,500] ----D C:\Program Files (x86)\Windows Defender O43 - CFD: 20/12/2011 - 10:41:36 - [6,986] ----D C:\Program Files (x86)\Windows Live O43 - CFD: 08/08/2011 - 17:22:49 - [0,234] ----D C:\Program Files (x86)\Windows Live SkyDrive O43 - CFD: 09/08/2011 - 18:05:28 - [5,895] ----D C:\Program Files (x86)\Windows Mail O43 - CFD: 18/04/2012 - 17:19:53 - [5,095] ----D C:\Program Files (x86)\Windows Media Player O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT O43 - CFD: 09/08/2011 - 18:05:28 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 09/08/2011 - 18:05:28 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 24/03/2012 - 11:29:35 - [0,322] ----D C:\Program Files (x86)\Windows Sidebar O43 - CFD: 26/05/2012 - 14:56:19 - [13,963] ----D C:\Program Files (x86)\ZHPDiag O43 - CFD: 15/03/2012 - 10:33:11 - [60,279] ----D C:\Program Files (x86)\Common Files\Apple O43 - CFD: 02/05/2012 - 16:44:52 - [0] ----D C:\Program Files (x86)\Common Files\AVSMedia O43 - CFD: 20/05/2012 - 18:23:29 - [0,095] ----D C:\Program Files (x86)\Common Files\DESIGNER O43 - CFD: 08/08/2011 - 21:20:49 - [0,951] ----D C:\Program Files (x86)\Common Files\Hewlett-Packard O43 - CFD: 08/08/2011 - 21:20:57 - [1,343] ----D C:\Program Files (x86)\Common Files\HP O43 - CFD: 09/08/2011 - 00:36:38 - [3,805] ----D C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 09/08/2011 - 00:52:36 - [36,729] ---AD C:\Program Files (x86)\Common Files\LightScribe O43 - CFD: 09/08/2011 - 00:51:23 - [0,049] ---AD C:\Program Files (x86)\Common Files\LS Getting Started O43 - CFD: 17/03/2012 - 10:25:04 - [1,700] ----D C:\Program Files (x86)\Common Files\MAGIX Shared O43 - CFD: 20/05/2012 - 18:23:46 - [215,796] ----D C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD: 21/10/2011 - 17:14:22 - [0,583] ----D C:\Program Files (x86)\Common Files\Panasonic O43 - CFD: 24/05/2012 - 14:48:58 - [0,003] ----D C:\Program Files (x86)\Common Files\Services O43 - CFD: 17/04/2012 - 18:25:02 - [2,056] ----D C:\Program Files (x86)\Common Files\Skype O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 20/05/2012 - 18:15:29 - [16,088] ----D C:\Program Files (x86)\Common Files\System O43 - CFD: 08/08/2011 - 17:21:19 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live O43 - CFD: 30/01/2012 - 18:22:04 - [0] ----D C:\ProgramData\Adobe O43 - CFD: 22/10/2011 - 16:52:49 - [60,009] ----D C:\ProgramData\Apple O43 - CFD: 20/05/2012 - 10:33:57 - [25,578] ----D C:\ProgramData\Apple Computer O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Application Data O43 - CFD: 25/02/2012 - 19:38:05 - [10,135] ----D C:\ProgramData\AVAST Software O43 - CFD: 26/03/2012 - 17:32:57 - [0,169] ----D C:\ProgramData\CyberLink O43 - CFD: 19/05/2012 - 15:44:47 - [0,002] ----D C:\ProgramData\DAUSSY Dominique O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Desktop O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Documents O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Favorites O43 - CFD: 07/11/2011 - 20:53:55 - [93,998] ----D C:\ProgramData\Hewlett-Packard O43 - CFD: 08/08/2011 - 21:52:00 - [19,376] ----D C:\ProgramData\HP O43 - CFD: 08/08/2011 - 21:23:11 - [0,009] ----D C:\ProgramData\HP Product Assistant O43 - CFD: 08/08/2011 - 21:56:10 - [0,000] ----D C:\ProgramData\HPSSUPPLY O43 - CFD: 11/01/2012 - 18:56:16 - [7,651] ----D C:\ProgramData\MAGIX O43 - CFD: 09/08/2011 - 08:37:27 - [17,458] ----D C:\ProgramData\Malwarebytes O43 - CFD: 04/04/2012 - 16:03:05 - [289,854] -S--D C:\ProgramData\Microsoft O43 - CFD: 20/05/2012 - 18:24:37 - [0,316] ----D C:\ProgramData\Microsoft Help O43 - CFD: 24/04/2012 - 09:42:11 - [0,004] ----D C:\ProgramData\Mozilla O43 - CFD: 09/08/2011 - 01:04:47 - [0] ----D C:\ProgramData\NewspaperDirect O43 - CFD: 08/08/2011 - 17:32:15 - [0,000] ----D C:\ProgramData\Norton O43 - CFD: 09/08/2011 - 01:10:50 - [1,588] ----D C:\ProgramData\NortonInstaller O43 - CFD: 23/09/2011 - 16:33:41 - [0,264] ----D C:\ProgramData\NVIDIA O43 - CFD: 08/08/2011 - 19:44:22 - [0,548] ----D C:\ProgramData\NVIDIA Corporation O43 - CFD: 21/10/2011 - 17:19:28 - [3,662] ----D C:\ProgramData\Panasonic O43 - CFD: 10/09/2011 - 13:13:58 - [0] ----D C:\ProgramData\PDFC O43 - CFD: 05/11/2011 - 14:50:55 - [0,001] ----D C:\ProgramData\Photodex O43 - CFD: 26/02/2012 - 03:57:35 - [0,074] ----D C:\ProgramData\Recovery O43 - CFD: 17/04/2012 - 18:24:58 - [70,114] ----D C:\ProgramData\Skype O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Start Menu O43 - CFD: 13/08/2011 - 16:02:24 - [0,000] ----D C:\ProgramData\Sun O43 - CFD: 26/03/2012 - 17:28:37 - [0,820] ----D C:\ProgramData\Temp O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Templates O43 - CFD: 04/11/2011 - 18:50:41 - [0,025] ----D C:\ProgramData\TomTom O43 - CFD: 24/03/2012 - 11:29:32 - [0,397] ----D C:\ProgramData\TuneUp Software O43 - CFD: 08/08/2011 - 21:53:02 - [0,000] ----D C:\ProgramData\WEBREG O43 - CFD: 09/08/2011 - 01:04:32 - [1786,662] ----D C:\ProgramData\WildTangent O43 - CFD: 09/08/2011 - 00:34:53 - [33,439] ----D C:\ProgramData\{0F47B255-CF9F-48C5-B558-B7DAF9345268} O43 - CFD: 24/03/2012 - 11:27:59 - [22,936] -SH-D C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936} O43 - CFD: 25/10/2011 - 09:34:06 - [45,266] ----D C:\ProgramData\{D3B41B92-9BC2-43EB-916A-4FA9E8191837} O43 - CFD: 28/01/2012 - 16:05:11 - [5,537] ----D C:\Users\CHANTAL\AppData\Roaming\Adobe O43 - CFD: 14/08/2011 - 16:54:28 - [0,174] ----D C:\Users\CHANTAL\AppData\Roaming\AlauxSoft O43 - CFD: 16/03/2012 - 18:47:46 - [0,009] ----D C:\Users\CHANTAL\AppData\Roaming\Apple Computer O43 - CFD: 02/05/2012 - 16:45:17 - [0] ----D C:\Users\CHANTAL\AppData\Roaming\AVS4YOU O43 - CFD: 08/10/2011 - 16:59:35 - [0,117] ----D C:\Users\CHANTAL\AppData\Roaming\CyberLink O43 - CFD: 19/05/2012 - 15:44:47 - [3,029] ----D C:\Users\CHANTAL\AppData\Roaming\DDaussy O43 - CFD: 06/09/2011 - 10:42:59 - [0] ----D C:\Users\CHANTAL\AppData\Roaming\EssentialPIM O43 - CFD: 04/05/2012 - 13:43:12 - [0,000] ----D C:\Users\CHANTAL\AppData\Roaming\Foxit Software O43 - CFD: 10/01/2012 - 13:02:24 - [0,109] ----D C:\Users\CHANTAL\AppData\Roaming\GlarySoft O43 - CFD: 25/10/2011 - 09:31:57 - [0,072] ----D C:\Users\CHANTAL\AppData\Roaming\Hewlett-Packard O43 - CFD: 08/08/2011 - 21:54:19 - [0,177] ----D C:\Users\CHANTAL\AppData\Roaming\HP O43 - CFD: 01/05/2012 - 10:27:26 - [0,000] ----D C:\Users\CHANTAL\AppData\Roaming\HP Support Assistant O43 - CFD: 25/10/2011 - 09:35:43 - [0,086] ----D C:\Users\CHANTAL\AppData\Roaming\hpqLog O43 - CFD: 01/05/2012 - 10:27:26 - [0,030] ----D C:\Users\CHANTAL\AppData\Roaming\HpUpdate O43 - CFD: 08/08/2011 - 17:29:11 - [0] ----D C:\Users\CHANTAL\AppData\Roaming\Identities O43 - CFD: 21/10/2011 - 17:16:16 - [0] ----D C:\Users\CHANTAL\AppData\Roaming\InstallShield O43 - CFD: 23/05/2012 - 14:48:39 - [0,001] ----D C:\Users\CHANTAL\AppData\Roaming\Macromedia O43 - CFD: 03/11/2011 - 18:43:14 - [0,011] ----D C:\Users\CHANTAL\AppData\Roaming\MAGIX O43 - CFD: 09/08/2011 - 08:37:33 - [14,426] ----D C:\Users\CHANTAL\AppData\Roaming\Malwarebytes O43 - CFD: 14/07/2009 - 09:44:38 - [0] ----D C:\Users\CHANTAL\AppData\Roaming\Media Center Programs O43 - CFD: 25/05/2012 - 17:29:53 - [11,843] -S--D C:\Users\CHANTAL\AppData\Roaming\Microsoft O43 - CFD: 24/05/2012 - 17:18:02 - [13,727] ----D C:\Users\CHANTAL\AppData\Roaming\Mozilla O43 - CFD: 05/11/2011 - 14:51:01 - [0] ----D C:\Users\CHANTAL\AppData\Roaming\Netscape O43 - CFD: 25/05/2012 - 17:31:53 - [0] ----D C:\Users\CHANTAL\AppData\Roaming\Nosibay O43 - CFD: 21/02/2012 - 17:26:16 - [0] ----D C:\Users\CHANTAL\AppData\Roaming\OfferBox O43 - CFD: 22/05/2012 - 16:29:35 - [0,046] ----D C:\Users\CHANTAL\AppData\Roaming\QuickScan O43 - CFD: 30/09/2011 - 09:38:41 - [0] ----D C:\Users\CHANTAL\AppData\Roaming\Schedulia O43 - CFD: 16/05/2012 - 14:12:32 - [5,325] ----D C:\Users\CHANTAL\AppData\Roaming\Skype O43 - CFD: 14/02/2012 - 11:32:41 - [390,276] ----D C:\Users\CHANTAL\AppData\Roaming\Thunderbird O43 - CFD: 19/03/2012 - 19:34:40 - [0,824] ----D C:\Users\CHANTAL\AppData\Roaming\TomTom O43 - CFD: 24/03/2012 - 11:29:11 - [0,064] ----D C:\Users\CHANTAL\AppData\Roaming\TuneUp Software O43 - CFD: 25/05/2012 - 11:25:04 - [0] ----D C:\Users\CHANTAL\AppData\Roaming\Tuto4pc O43 - CFD: 24/05/2012 - 14:48:55 - [0,077] ----D C:\Users\CHANTAL\AppData\Roaming\vlc O43 - CFD: 25/10/2011 - 09:33:03 - [0] ----D C:\Users\CHANTAL\AppData\Roaming\WinBatch O43 - CFD: 21/02/2012 - 16:55:04 - [0,079] ----D C:\Users\CHANTAL\AppData\Roaming\XnView O43 - CFD: 05/10/2011 - 17:30:26 - [0,001] ----D C:\Users\CHANTAL\AppData\Roaming\XWindows Dock O43 - CFD: 08/08/2011 - 21:04:05 - [0,004] ----D C:\Users\CHANTAL\AppData\Roaming\_MDLogs O43 - CFD: 08/08/2011 - 17:20:46 - [0] ----D C:\Users\CHANTAL\AppData\Local\Application Data O43 - CFD: 10/08/2011 - 07:48:30 - [8,874] ----D C:\Users\CHANTAL\AppData\Local\Apps O43 - CFD: 28/10/2011 - 21:33:19 - [0,133] ----D C:\Users\CHANTAL\AppData\Local\CyberLink O43 - CFD: 16/11/2011 - 18:49:22 - [0] ----D C:\Users\CHANTAL\AppData\Local\Deployment O43 - CFD: 14/05/2012 - 17:19:57 - [0] ----D C:\Users\CHANTAL\AppData\Local\Diagnostics O43 - CFD: 24/05/2012 - 18:48:31 - [0,680] ----D C:\Users\CHANTAL\AppData\Local\ElevatedDiagnostics O43 - CFD: 25/02/2012 - 19:48:30 - [0] ----D C:\Users\CHANTAL\AppData\Local\Google O43 - CFD: 11/08/2011 - 20:17:16 - [22,242] ----D C:\Users\CHANTAL\AppData\Local\Hewlett-Packard O43 - CFD: 08/08/2011 - 17:20:46 - [0] ----D C:\Users\CHANTAL\AppData\Local\Historique O43 - CFD: 08/08/2011 - 21:51:57 - [0,047] ----D C:\Users\CHANTAL\AppData\Local\HP O43 - CFD: 30/01/2012 - 19:18:35 - [0] ----D C:\Users\CHANTAL\AppData\Local\LogMeIn Rescue Applet O43 - CFD: 03/11/2011 - 17:18:34 - [0,117] ----D C:\Users\CHANTAL\AppData\Local\MAGIX O43 - CFD: 03/11/2011 - 18:45:55 - [0,002] ----D C:\Users\CHANTAL\AppData\Local\MAGIX_AG O43 - CFD: 12/05/2012 - 14:36:16 - [178,526] ----D C:\Users\CHANTAL\AppData\Local\Microsoft O43 - CFD: 26/02/2012 - 04:02:01 - [0,840] ----D C:\Users\CHANTAL\AppData\Local\Microsoft Games O43 - CFD: 02/01/2012 - 19:13:39 - [1,278] ----D C:\Users\CHANTAL\AppData\Local\Microsoft Help O43 - CFD: 13/10/2011 - 10:36:32 - [0] ----D C:\Users\CHANTAL\AppData\Local\MigWiz O43 - CFD: 08/08/2011 - 18:04:49 - [63,012] ----D C:\Users\CHANTAL\AppData\Local\Mozilla O43 - CFD: 21/10/2011 - 17:17:45 - [0,858] ----D C:\Users\CHANTAL\AppData\Local\Panasonic O43 - CFD: 10/08/2011 - 19:03:54 - [0] ----D C:\Users\CHANTAL\AppData\Local\PDFC O43 - CFD: 19/12/2011 - 19:28:52 - [0] ----D C:\Users\CHANTAL\AppData\Local\PowerCinema O43 - CFD: 26/05/2012 - 14:55:15 - [33,494] ----D C:\Users\CHANTAL\AppData\Local\Temp O43 - CFD: 08/08/2011 - 17:20:46 - [0] ----D C:\Users\CHANTAL\AppData\Local\Temporary Internet Files O43 - CFD: 14/02/2012 - 12:19:35 - [6,447] ----D C:\Users\CHANTAL\AppData\Local\Thunderbird O43 - CFD: 04/11/2011 - 18:31:33 - [3,802] ----D C:\Users\CHANTAL\AppData\Local\TomTom O43 - CFD: 25/05/2012 - 11:29:23 - [0] ----D C:\Users\CHANTAL\AppData\Local\Tuto4PC O43 - CFD: 22/10/2011 - 15:59:08 - [0,114] ----D C:\Users\CHANTAL\AppData\Local\VirtualStore O43 - CFD: 19/05/2012 - 15:44:34 - [0] ----D C:\Users\CHANTAL\AppData\Local\WDSetup O43 - CFD: 03/11/2011 - 17:18:35 - [0,105] ----D C:\Users\CHANTAL\AppData\Local\Xara O43 - CFD: 27/11/2011 - 18:32:59 - [0,014] R---D C:\Users\CHANTAL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 06/04/2012 - 16:04:11 - [0,061] R---D C:\Users\CHANTAL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 23/02/2012 - 18:51:00 - [0,000] ----D C:\Users\CHANTAL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 14/07/2009 - 06:49:38 - [0,001] R---D C:\Users\CHANTAL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 01/04/2012 - 09:46:11 - [0] ----D C:\Users\CHANTAL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre652 O43 - CFD: 16/05/2012 - 14:19:21 - [0,005] ----D C:\Users\CHANTAL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller O43 - CFD: 16/02/2012 - 19:19:03 - [0,000] R---D C:\Users\CHANTAL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 26/05/2012 - 10:33:52 - [2,694] ----D C:\Program Files (x86)\Ad-Remover O43 - CFD: 15/03/2012 - 10:33:04 - [2,316] ----D C:\Program Files (x86)\Apple Software Update O43 - CFD: 20/05/2012 - 18:23:29 - [378,676] ----D C:\Program Files (x86)\Common Files O43 - CFD: 12/11/2011 - 19:55:19 - [11,404] ----D C:\Program Files (x86)\Comptes et Budget Free V6.0 O43 - CFD: 26/03/2012 - 17:29:06 - [1155,750] ----D C:\Program Files (x86)\CyberLink O43 - CFD: 26/03/2012 - 18:18:40 - [5,284] ----D C:\Program Files (x86)\Digital Photo Software O43 - CFD: 17/04/2012 - 18:17:35 - [0,420] ----D C:\Program Files (x86)\FileHippo.com O43 - CFD: 26/04/2012 - 16:47:28 - [56,989] ----D C:\Program Files (x86)\Foxit Software O43 - CFD: 18/04/2012 - 17:25:55 - [37,911] ----D C:\Program Files (x86)\Glary Utilities O43 - CFD: 25/02/2012 - 19:49:10 - [0] ----D C:\Program Files (x86)\Google O43 - CFD: 11/12/2011 - 18:49:32 - [1503,628] ----D C:\Program Files (x86)\Hewlett-Packard O43 - CFD: 27/12/2011 - 15:27:08 - [180,622] ----D C:\Program Files (x86)\Hp O43 - CFD: 26/03/2012 - 17:28:22 - [243,491] --H-D C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 11/04/2012 - 16:59:28 - [5,987] ----D C:\Program Files (x86)\Internet Explorer O43 - CFD: 12/04/2012 - 17:48:22 - [20,610] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware O43 - CFD: 14/02/2012 - 19:23:33 - [0] ----D C:\Program Files (x86)\Microsoft O43 - CFD: 08/08/2011 - 20:46:08 - [38,002] ----D C:\Program Files (x86)\Microsoft Analysis Services O43 - CFD: 08/08/2011 - 20:33:33 - [28,015] ----D C:\Program Files (x86)\Microsoft LifeCam O43 - CFD: 13/03/2012 - 18:58:27 - [856,754] ----D C:\Program Files (x86)\Microsoft Office O43 - CFD: 16/05/2012 - 14:10:36 - [40,838] ----D C:\Program Files (x86)\Microsoft Silverlight O43 - CFD: 21/10/2011 - 17:13:48 - [5,112] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition O43 - CFD: 21/10/2011 - 17:13:48 - [0,378] ----D C:\Program Files (x86)\Microsoft Synchronization Services O43 - CFD: 14/12/2011 - 19:30:39 - [7,789] ----D C:\Program Files (x86)\Microsoft.NET O43 - CFD: 24/05/2012 - 17:17:55 - [37,569] ----D C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 24/05/2012 - 17:17:58 - [0,210] ----D C:\Program Files (x86)\Mozilla Maintenance Service O43 - CFD: 01/05/2012 - 15:21:44 - [55,703] ----D C:\Program Files (x86)\Mozilla Thunderbird O43 - CFD: 14/07/2009 - 07:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild O43 - CFD: 18/01/2012 - 10:55:32 - [63,464] ----D C:\Program Files (x86)\MSECache O43 - CFD: 08/08/2011 - 18:58:08 - [0] ----D C:\Program Files (x86)\MSXML 4.0 O43 - CFD: 25/05/2012 - 17:31:00 - [0] ----D C:\Program Files (x86)\Nosibay O43 - CFD: 21/02/2012 - 19:18:24 - [18,588] R---D C:\Program Files (x86)\Online Services O43 - CFD: 21/10/2011 - 17:13:59 - [76,310] ----D C:\Program Files (x86)\Panasonic O43 - CFD: 10/09/2011 - 16:00:03 - [0] ----D C:\Program Files (x86)\PDF Complete O43 - CFD: 04/04/2012 - 13:03:46 - [41,715] ----D C:\Program Files (x86)\Photofiltre O43 - CFD: 24/11/2011 - 14:53:08 - [0,318] ----D C:\Program Files (x86)\Prolific Technology INC O43 - CFD: 20/05/2012 - 10:34:10 - [72,431] ----D C:\Program Files (x86)\QuickTime O43 - CFD: 09/08/2011 - 00:36:40 - [46,195] ----D C:\Program Files (x86)\Realtek O43 - CFD: 14/07/2009 - 07:32:38 - [37,349] ----D C:\Program Files (x86)\Reference Assemblies O43 - CFD: 18/04/2012 - 17:16:57 - [17,694] R---D C:\Program Files (x86)\Skype O43 - CFD: 09/08/2011 - 00:36:54 - [0] --H-D C:\Program Files (x86)\Temp O43 - CFD: 19/03/2012 - 17:47:10 - [48,338] ----D C:\Program Files (x86)\TomTom HOME 2 O43 - CFD: 19/03/2012 - 17:47:15 - [0,021] ----D C:\Program Files (x86)\TomTom International B.V O43 - CFD: 27/11/2011 - 18:32:59 - [0,093] ----D C:\Program Files (x86)\UnFREEz O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information O43 - CFD: 24/05/2012 - 14:48:52 - [0,006] ----D C:\Program Files (x86)\UpdateIcons O43 - CFD: 21/03/2012 - 16:18:49 - [110,025] ----D C:\Program Files (x86)\VideoLAN O43 - CFD: 07/10/2011 - 17:21:56 - [6,420] ----D C:\Program Files (x86)\VS Revo Group O43 - CFD: 09/08/2011 - 10:19:29 - [0,500] ----D C:\Program Files (x86)\Windows Defender O43 - CFD: 20/12/2011 - 10:41:36 - [6,986] ----D C:\Program Files (x86)\Windows Live O43 - CFD: 08/08/2011 - 17:22:49 - [0,234] ----D C:\Program Files (x86)\Windows Live SkyDrive O43 - CFD: 09/08/2011 - 18:05:28 - [5,895] ----D C:\Program Files (x86)\Windows Mail O43 - CFD: 18/04/2012 - 17:19:53 - [5,095] ----D C:\Program Files (x86)\Windows Media Player O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT O43 - CFD: 09/08/2011 - 18:05:28 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 09/08/2011 - 18:05:28 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 24/03/2012 - 11:29:35 - [0,322] ----D C:\Program Files (x86)\Windows Sidebar O43 - CFD: 26/05/2012 - 14:56:19 - [13,963] ----D C:\Program Files (x86)\ZHPDiag O43 - CFD: 15/03/2012 - 10:33:11 - [60,279] ----D C:\Program Files (x86)\Common Files\Apple O43 - CFD: 02/05/2012 - 16:44:52 - [0] ----D C:\Program Files (x86)\Common Files\AVSMedia O43 - CFD: 20/05/2012 - 18:23:29 - [0,095] ----D C:\Program Files (x86)\Common Files\DESIGNER O43 - CFD: 08/08/2011 - 21:20:49 - [0,951] ----D C:\Program Files (x86)\Common Files\Hewlett-Packard O43 - CFD: 08/08/2011 - 21:20:57 - [1,343] ----D C:\Program Files (x86)\Common Files\HP O43 - CFD: 09/08/2011 - 00:36:38 - [3,805] ----D C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 09/08/2011 - 00:52:36 - [36,729] ---AD C:\Program Files (x86)\Common Files\LightScribe O43 - CFD: 09/08/2011 - 00:51:23 - [0,049] ---AD C:\Program Files (x86)\Common Files\LS Getting Started O43 - CFD: 17/03/2012 - 10:25:04 - [1,700] ----D C:\Program Files (x86)\Common Files\MAGIX Shared O43 - CFD: 20/05/2012 - 18:23:46 - [215,796] ----D C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD: 21/10/2011 - 17:14:22 - [0,583] ----D C:\Program Files (x86)\Common Files\Panasonic O43 - CFD: 24/05/2012 - 14:48:58 - [0,003] ----D C:\Program Files (x86)\Common Files\Services O43 - CFD: 17/04/2012 - 18:25:02 - [2,056] ----D C:\Program Files (x86)\Common Files\Skype O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 20/05/2012 - 18:15:29 - [16,088] ----D C:\Program Files (x86)\Common Files\System O43 - CFD: 08/08/2011 - 17:21:19 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live ~ Scan Program Folder in 00mn 04s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.5231C6E40BBCB614FF38BD330AEC87D6] - 26/05/2012 - 13:10:56 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI [1566842] O44 - LFC:[MD5.D9662542B643CF7282212D6EFAC4842B] - 26/05/2012 - 13:10:56 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat [108526] O44 - LFC:[MD5.D93F644329A82591D09DA17D6C4F422D] - 26/05/2012 - 13:10:56 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat [133344] O44 - LFC:[MD5.73F4C563684169C51013A2DC19D457AC] - 26/05/2012 - 13:10:56 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat [621446] O44 - LFC:[MD5.559304AF3D04AF3CA0DF78C3C9B0581F] - 26/05/2012 - 13:10:56 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat [710086] O44 - LFC:[MD5.5231C6E40BBCB614FF38BD330AEC87D6] - 26/05/2012 - 13:10:56 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1566842] O44 - LFC:[MD5.712B3F213996D7DFCE972D542443C25F] - 26/05/2012 - 13:09:53 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1155393] O44 - LFC:[MD5.77DCF3E67E7D03C7C3D7C22FD0A30EF4] - 26/05/2012 - 13:06:28 ---A- . (...) -- C:\Windows\setupact.log [672] O44 - LFC:[MD5.A260942FDDE34471CF30FCFB1A6044D8] - 26/05/2012 - 13:06:27 -S-A- . (...) -- C:\Windows\bootstat.dat [67584] O44 - LFC:[MD5.80F97337DCD194A032BD1710B198598B] - 26/05/2012 - 13:06:16 ---A- . (...) -- C:\Windows\PFRO.log [3306] O44 - LFC:[MD5.B681126316DFCFF80EED03D6DF7F69B8] - 26/05/2012 - 09:36:56 ---A- . (...) -- C:\AdwCleaner[R4].txt [1900] O44 - LFC:[MD5.4932561C33FA672E3476F833B2B0F1DD] - 25/05/2012 - 17:16:00 ---A- . (.Oracle Corporation - Java Platform SE binary.) -- C:\Windows\SysNative\javaw.exe [189384] O44 - LFC:[MD5.BAB07F4038B27CE7607BDC98F2BA1D50] - 25/05/2012 - 17:16:00 ---A- . (.Oracle Corporation - Java Web Start Launcher.) -- C:\Windows\SysNative\javaws.exe [268744] O44 - LFC:[MD5.5A394C82C88346BE0ACA25D343E653D3] - 25/05/2012 - 17:15:59 ---A- . (.Oracle Corporation - Java Platform SE binary.) -- C:\Windows\SysNative\java.exe [188872] O44 - LFC:[MD5.6531DD54EE42219F663E310E5014758C] - 25/05/2012 - 17:15:59 ---A- . (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(T.) -- C:\Windows\SysNative\npdeployJava1.dll [955848] O44 - LFC:[MD5.18F1952983C7F4F4B912369BDF6259E5] - 25/05/2012 - 16:29:14 ---A- . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Windows\SysNative\deployJava1.dll [525544] O44 - LFC:[MD5.18F1952983C7F4F4B912369BDF6259E5] - 25/05/2012 - 16:29:14 ---A- . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Windows\System32\deployJava1.dll [525544] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 24/05/2012 - 15:16:48 ---A- . (...) -- C:\Windows\setuperr.log [0] O44 - LFC:[MD5.12A65329EAE2B15F9A0DC6B8E8866B40] - 20/05/2012 - 17:25:58 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT [475008] O44 - LFC:[MD5.0B692BA436F32356D8F116AF8CDF69D7] - 20/05/2012 - 17:15:32 ---A- . (...) -- C:\Windows\win.ini [513] O44 - LFC:[MD5.F4C456F9235ED440B81107E951555411] - 31/03/2012 - 04:10:03 . (...) -- C:\Windows\System32\win32k.sys [1566842]] O44 - LFC:[MD5.ACB82BDA8F46C84F465C1AFA517DC4B9] - 30/03/2012 - 12:35:47 . (...) -- C:\Windows\System32\Drivers\tcpip.sys []] O44 - LFC:[MD5.E9766131EEADE40A27DC27D2D68FBA9C] - 17/03/2012 - 08:58:57 . (...) -- C:\Windows\System32\Drivers\partmgr.sys [] ~ Scan Files in 00mn 02s ---\\ Déni du service (Local Security Authority) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll ~ Scan Keys in 00mn 00s ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys ~ Scan CSB in 00mn 00s ---\\ MountPoints2 Shell Key (O51) (None) ---\\ Trojan Driver Search Data (HKLM) (O52) O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm ~ Scan Keys in 00mn 00s ---\\ ShareTools MSconfig StartupReg (O53) O53 - SMSR:HKLM\...\startupreg\APSDaemon [Key] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe O53 - SMSR:HKLM\...\startupreg\ccleaner [Key] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe O53 - SMSR:HKLM\...\startupreg\facemoods [Key] . (...) -- C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\HP Software Update [Key] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe O53 - SMSR:HKLM\...\startupreg\HPPowerAssistant [Key] . (.Hewlett-Packard - HP Power Assistant.) -- C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe O53 - SMSR:HKLM\...\startupreg\hpsysdrv [Key] . (.Hewlett-Packard - hpsysdrv.) -- c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe O53 - SMSR:HKLM\...\startupreg\LifeCam [Key] . (.Microsoft Corporation - LifeExp.exe.) -- C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe O53 - SMSR:HKLM\...\startupreg\Microsoft Default Manager [Key] . (...) -- C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\PDF Complete [Key] . (...) -- C:\Program Files (x86)\PDF Complete\pdfsty.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\QuickTime Task [Key] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe O53 - SMSR:HKLM\...\startupreg\Skype [Key] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe O53 - SMSR:HKLM\...\startupreg\SmartMenu [Key] . (.Pas de propriétaire - SmartMenu.) -- C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched [Key] . (...) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\TomTomHOME.exe [Key] . (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe ~ Scan SMSR Keys in 00mn 00s ---\\ Microsoft Control Security Providers (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll ~ Scan Keys in 00mn 00s ---\\ Microsoft Windows Policies System (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=0 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0 O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 O55 - MWPS:[HKLM\...\Policies\System] - "HideFastUserSwitching"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableLockWorkstation"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableTaskMgr"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableChangePassword"=0 ~ Scan Keys in 00mn 00s ---\\ Microsoft Windows Policies Explorer (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "EnableShellExecuteHooks"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoInternetOpenWith"=1 ~ Scan Keys in 00mn 00s ---\\ Liste des Drivers Système (O58) O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088] O58 - SDL:[MD5.A16FB34E56C781DC56BE7492315655B9] - 03/08/2005 - 16:05:02 ---A- . (.Prolific Technology Inc. - USB-Serial USB Driver.) -- C:\Windows\SysWOW64\SER9PL.sys [35892] ~ Scan Drivers in 00mn 00s ---\\ Liste des outils de nettoyage (O63) O63 - Logiciel: Ad-Remover par C_XX - (.C_XX.) [HKLM] -- Ad-Remover O63 - Logiciel: ZHPDiag 1.31 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 ~ Scan ADS in 00mn 00s ---\\ Liste des fichiers non signés (O65) (None) ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> <evtfile>[HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ~ Scan Keys in 00mn 00s ---\\ Start Menu Internet (O68) O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe (.not file.) O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.) O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe (.not file.) O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.) O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe (.not file.) O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.) ~ Scan Keys in 00mn 00s ---\\ Recherche des services démarrés par Svchost (O83) O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [236032] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [236032] O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [853504] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [679424] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll [99328] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll [64512] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [359424] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows.) -- C:\Windows\System32\tapisrv.dll [316928] O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll [680960] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\system32\wuaueng.dll [2420736] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\system32\wuaueng.dll [2420736] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688] O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [569344] O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [30720] O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70656] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [156672] O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll [67584] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [242688] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll [121856] O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136192] O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136192] O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [1110016] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [1110016] O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480] O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [209920] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [44544] O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [44544] ~ Scan Services in 00mn 00s ---\\ Recherche particuliere à la racine de certains dossiers (O84) [MD5.E4C98E2325949D4A232069DB62E1B748] [sPRF][25/05/2012] (.Oracle Corporation - Java Platform SE binary.) -- C:\Users\CHANTAL\AppData\Local\Temp\firefoxjre_exe.exe [892360] [MD5.35AA30406F5683E8138136FEBB2E26B9] [sPRF][25/05/2012] (.Nosibay - Bubble Dock installer.) -- C:\Users\CHANTAL\AppData\Local\Temp\Install_BubbleDock.exe [154424] ~ Scan Files in 00mn 00s ---\\ Firewall Active Exception List (FirewallRules) (O87) O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{EA469866-0EB9-4156-962A-7F7FF961B33E}" | In - Domain - P6 - TRUE | .(.CyberLink Corp. - PowerDirector.) -- c:\Program Files (x86)\CyberLink\PowerDirector\PDR8.exe O87 - FAEL: "{1DADB009-58DA-4E75-8B06-2E8AEA63210B}" | In - Domain - P6 - TRUE | .(.CyberLink Corp. - HP DVDSmart Main Program.) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPDVDSmart.exe O87 - FAEL: "{9D7D0245-F89E-4188-9583-05914EBFC986}" | In - Domain - P6 - TRUE | .(.CyberLink Corp. - HP MediaSmart Photo Main Program.) -- C:\Program Files (x86)\Hewlett-Packard\MediaSmart\Photo\HPMediaSmartPhoto.exe O87 - FAEL: "{59C290B1-2FE8-44CD-8D74-4B96EE4AF626}" | In - Domain - P6 - TRUE | .(.CyberLink Corp. - HP MediaSmart Video.) -- C:\Program Files (x86)\Hewlett-Packard\MediaSmart\Video\HPMediaSmartVideo.exe O87 - FAEL: "{7FB36596-618F-4661-99B9-5FAA7B79E4E9}" | In - Domain - P6 - TRUE | .(.CyberLink Corp. - HP MediaSmart Music Main Program.) -- C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Music\HPTouchSmartMusic.exe O87 - FAEL: "{94FDB5BC-2460-446D-9085-193B17526763}" |Out - Private - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{98115F2A-7284-4289-9849-F1F3DFB1AF01}" |In - Private - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{E12EA7C0-7A04-4A86-BC22-34A0D601A760}" |Out - Private - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{E3450D43-3525-497E-92DD-DE6396DE0C65}" |In - Private - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.) O87 - FAEL: "{2E6D1F38-0442-4C06-B6B1-32B9178CD966}" | In - Domain - P6 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe O87 - FAEL: "{2DFB118F-2336-424D-B6D0-6B0553E5F4FE}" |In - Domain - P17 - TRUE | .(...) -- E:\setup\hpznui40.exe (.not file.) O87 - FAEL: "{32416D39-1993-4F73-BA70-6ADBEE0FD83F}" | In - Domain - P17 - TRUE | .(.Hewlett-Packard - HP Update Client.) -- C:\Program Files (x86)\HP\hp software update\hpwucli.exe O87 - FAEL: "{DD6DDD1E-B852-4F5F-BB69-E3A030562D65}" | In - Public - P6 - FALSE | .(.CyberLink Corp. - PowerDirector.) -- c:\Program Files (x86)\CyberLink\PowerDirector\PDR8.exe O87 - FAEL: "{445D13AC-71A8-4A5A-82F4-0FFA61A0EE44}" | In - Private - P6 - FALSE | .(.CyberLink Corp. - PowerDirector.) -- c:\Program Files (x86)\CyberLink\PowerDirector\PDR8.exe O87 - FAEL: "{D4AC2F96-E7C4-4E10-AF51-61E45E6FFADE}" | In - Public - P6 - FALSE | .(.CyberLink Corp. - HP DVDSmart Main Program.) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPDVDSmart.exe O87 - FAEL: "{FB489858-C482-46D8-94D7-91859F92B327}" | In - Private - P6 - FALSE | .(.CyberLink Corp. - HP DVDSmart Main Program.) -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPDVDSmart.exe O87 - FAEL: "{874D5715-A1AA-442F-B4F4-CECCDF5987FE}" | In - Public - P6 - FALSE | .(.CyberLink Corp. - HP MediaSmart Photo Main Program.) -- C:\Program Files (x86)\Hewlett-Packard\MediaSmart\Photo\HPMediaSmartPhoto.exe O87 - FAEL: "{C8DD4ABA-8C54-49AD-A704-0DD4986ECD9F}" | In - Private - P6 - FALSE | .(.CyberLink Corp. - HP MediaSmart Photo Main Program.) -- C:\Program Files (x86)\Hewlett-Packard\MediaSmart\Photo\HPMediaSmartPhoto.exe O87 - FAEL: "{EF6EF035-95F4-4C54-BC4F-F878127242C6}" | In - Public - P6 - FALSE | .(.CyberLink Corp. - HP MediaSmart Video.) -- C:\Program Files (x86)\Hewlett-Packard\MediaSmart\Video\HPMediaSmartVideo.exe O87 - FAEL: "{83E5D91F-7E54-4052-A711-694B9F52295E}" | In - Private - P6 - FALSE | .(.CyberLink Corp. - HP MediaSmart Video.) -- C:\Program Files (x86)\Hewlett-Packard\MediaSmart\Video\HPMediaSmartVideo.exe O87 - FAEL: "{F9DF8887-629E-485D-B0F8-6DCB8AEC8E7D}" | In - Public - P6 - FALSE | .(.CyberLink Corp. - HP MediaSmart Music Main Program.) -- C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Music\HPTouchSmartMusic.exe O87 - FAEL: "{73C739F4-42D2-494B-B155-DC76AE0A7481}" | In - Private - P6 - FALSE | .(.CyberLink Corp. - HP MediaSmart Music Main Program.) -- C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Music\HPTouchSmartMusic.exe O87 - FAEL: "{1325BCE1-7B4F-4620-9CDD-E9879B2521A1}" | In - Public - P6 - FALSE | .(.Hewlett-Packard - HP Update Client.) -- C:\Program Files (x86)\HP\hp software update\hpwucli.exe O87 - FAEL: "{7D5489B5-98BB-4C91-A827-5C75AA9DA7AE}" | In - Private - P6 - FALSE | .(.Hewlett-Packard - HP Update Client.) -- C:\Program Files (x86)\HP\hp software update\hpwucli.exe O87 - FAEL: "{F789D0EC-0A4A-4092-B31F-A43FAC9FAA89}" |In - Public - P6 - FALSE | .(...) -- E:\setup\hpznui40.exe (.not file.) O87 - FAEL: "{6F376BA0-D628-4A18-80D9-722E2B9A4E0B}" |In - Private - P6 - FALSE | .(...) -- E:\setup\hpznui40.exe (.not file.) O87 - FAEL: "{FEBE5037-7375-4FB9-B9C0-60DC782D093E}" | In - Public - P17 - FALSE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe O87 - FAEL: "{4F6350E2-6611-43A4-9A5F-7733CD0F5406}" | In - Private - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe O87 - FAEL: "{EF03B898-41A4-42C9-A2EA-901EBEABA246}" | In - None - P17 - TRUE | .(.Apple Inc. - WebKit2WebProcess.exe.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe ~ Scan Firewall in 00mn 00s ---\\ Scan Additionnel (O88) Database Version : 9170 - (24/05/2012) Clés trouvées (Keys found) : 2 Valeurs trouvées (Values found) : 0 Dossiers trouvés (Folders found) : 6 Fichiers trouvés (Files found) : 0 [HKCU\Software\Nosibay] =>Adware.SPointer [HKCU\Software\Tutorials] =>Toolbar.Agent C:\Program Files (x86)\Nosibay =>Adware.SPointer C:\Users\CHANTAL\AppData\Roaming\Nosibay =>Adware.SPointer C:\Users\CHANTAL\AppData\Roaming\OfferBox =>PUP.OfferBox C:\Users\CHANTAL\AppData\Roaming\Tuto4PC =>PUP.Eorezo C:\Users\CHANTAL\AppData\Local\Tuto4PC =>PUP.Eorezo ~ Scan Additionnel in 00mn 08s ---\\ Recherche détournement de DNS routeur (O89) (None) ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Demand 24/05/2012 257696 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe SR - | Auto 07/03/2012 44768 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe SS - | Disabled 30/12/1899 0 | (ezSharedSvc) . (.EasyBits Software AS.) - C:\Windows\System32\ezSharedSvcHost.exe SS - | Demand 107576 | (HP Power Assistant Service) . (...) - C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe SS - | Demand 21/06/2011 85560 | (HP Support Assistant Service) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe SS - | Demand 28/03/2011 94264 | (HPDrvMntSvc.exe) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll (hpqcxs08) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll (hpqddsvc) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe SS - | Demand 28/03/2011 799800 | (hpqwmiex) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.dll (HPSLPSVC) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe SS - | Disabled 19/05/2010 73728 | (LightScribeService) . (.Hewlett-Packard Company.) - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe SS - | Demand 21/04/2012 129976 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe SR - | Auto 14/07/2009 27136 | C:\Windows\system32\HPZinw12.dll (Net Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe SS - | Demand 03/05/2011 1005160 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe SR - | Auto 14/07/2009 27136 | C:\Windows\system32\HPZipm12.dll (Pml Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe SS - | Demand 05/04/2012 158856 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe SS - | Demand 23/01/2012 92592 | (TomTomHOMEService) . (.TomTom.) - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe SS - | Demand 23/01/2012 92592 | (TrkWks) . (.TomTom.) - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe SS - | Demand 23/01/2012 92592 | (TrustedInstaller) . (.TomTom.) - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SS - | Disabled 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe SR - | Auto 14/07/2009 27136 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe ~ Scan Services in 00mn 03s ---\\ Recherche Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, GMER - Rootkit Detector and Remover Run by CHANTAL at 26/05/2012 14:57:49 device: opened successfully user: error reading MBR Disk trace: error: Read Descripteur non valide kernel: error reading MBR ~ Scan MBR in 00mn 02s ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by CHANTAL at 26/05/2012 14:57:51 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ Scan MBR in 00mn 04s End of the scan (1117 lines in 01mn 36s)(0)

2ème rapport MB Malwarebytes Anti-Malware 1.61.0.1400 www.malwarebytes.org Version de la base de données: v2012.05.26.02 Windows 7 x64 NTFS Internet Explorer 9.0.8112.16421 CHANTAL :: CHANTAL-HP [administrateur] 26/05/2012 14:11:00 mbam-log-2012-05-26 (14-11-00).txt Type d'examen: Examen complet Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM Options d'examen désactivées: P2P Elément(s) analysé(s): 411946 Temps écoulé: 29 minute(s), 26 seconde(s) Processus mémoire détecté(s): 0 (Aucun élément nuisible détecté) Module(s) mémoire détecté(s): 0 (Aucun élément nuisible détecté) Clé(s) du Registre détectée(s): 0 (Aucun élément nuisible détecté) Valeur(s) du Registre détectée(s): 0 (Aucun élément nuisible détecté) Elément(s) de données du Registre détecté(s): 0 (Aucun élément nuisible détecté) Dossier(s) détecté(s): 0 (Aucun élément nuisible détecté) Fichier(s) détecté(s): 0 (Aucun élément nuisible détecté) (fin)