FORUM D’ENTRAIDE INFORMATIQUE (FEI)Site d’assistance et de sécurité informatique

[penelopehoule]

Bonjour,
Je suis désolée, je sais qu’il y a déjà plusieurs sujets concernant les rapports de ZHP mais mon ordinateur plante tellement qu’il m’est difficile de naviguer sur le forum pour les trouver.
Donc voilà, mon ordinateur fonctionne bien mais sur Internet, j’utilise Mozilla, il y a une tonne de pages publicitaires qui ouvrent et quand je fais une recherche, les premiers résultats sont des publicités. J’ai fait mon rapport avec ZHPDiag mais ensuite je ne sais plus quoi coller dans ZHPFix.
Voici le rapport :
~ Rapport de ZHPDiag v2014.1.2.5 - Nicolas Coolman  (2014-01-02)
~ Lancé par Diane (2014-01-07 13:48:07)
~ Adresse du Site Web  http://nicolascoolman.webs.com
~ Forums gratuits d'Assistance à la désinfection : http://nicolascoolman.webs.com/apps/links/
~ Traduit par Nicolas Coolman
~ Etat de la version :
~ Liste blanche : Activée par le programme
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Deactivate by program


---\\ Navigateurs Internet
MSIE: Internet Explorer v11.0.9600.16476
MFIE: Mozilla Firefox 26.0 (Defaut)

---\\ Informations sur les produits Windows
~ Langage: Français
Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_COA_NSLP channel
Windows ID Activation : OK
~ Windows Partial Key : J69X7
Windows License : OK
~ Windows Remaining Initializations Number : 3
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ Logiciels de protection du système
avast! EasyPass v7-7-8-128
Malwarebytes Anti-Malware version 1.75.0.1300
Microsoft Security Client v4.4.0304.0
Windows Defender W7

---\\ Logiciels d'optimisation du système
CCleaner v4.09 =Piriform Ltd

---\\ Logiciels de partage PeerToPeer
µTorrent v3.1.3 =P2P.µTorrent

---\\ Surveillance de Logiciels
Adobe Flash Player 11 Plugin
Adobe Reader X

---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 4078 MB (48% free)
System Restore: Activé (Enable)
System drive C: has 570 GB (84%) free of 677 GB

---\\ Mode de connexion au système
~ Computer Name: DIANE-PC
~ User Name: Diane
~ All Users Names: HomeGroupUser$, Diane, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\Diane\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\Diane\AppData\Roaming\
~ %Desktop% : C:\Users\Diane\Desktop\
~ %Favorites% : C:\Users\Diane\Favorites\
~ %LocalAppData% : C:\Users\Diane\AppData\Local\
~ %StartMenu% : C:\Users\Diane\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 570 Go of 677 Go)
D: CD-ROM drive (Not Inserted)
E: CD-ROM drive (Not Inserted)
F: Hard drive, Flash drive, Thumb drive (Free 254 Go of 254 Go)



---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
~ Security Center: 42 Legitimates Filtered in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.2011-02-25 - 01:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.2009-07-13 - 20:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.9B6678DB9C6A232C5A84D2FDFFF8B0E1] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.2013-11-26 - 02:07:57.) -- C:\Windows\System32\wininet.dll [2334208]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.2010-11-20 - 22:24:29.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.2010-11-20 - 22:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.79059559E89D06E8B80CE2944BE20228] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.2013-09-27 - 20:09:10.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.2009-07-13 - 20:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.2009-07-13 - 18:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.2010-11-20 - 22:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.2010-11-20 - 22:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.2010-11-20 - 22:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.2009-07-13 - 18:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.2009-07-13 - 19:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.2011-09-27 - 12:11:42.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.2010-11-20 - 22:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.2013-04-12 - 09:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.2009-07-13 - 19:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.2010-11-20 - 22:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.2009-07-13 - 19:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.2010-11-20 - 22:24:32.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.2010-11-20 - 22:23:47.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes:  Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/83
~ Mes musiques (My Musics) : 1/161
~ Mes Favoris (My Favorites) : 1/18
~ Mes Documents (My Documents) : 5/46
~ Mon Bureau (My Desktop) : 7/10447
~ Menu demarrer (Programs) : 1/66
~ Hidden Files:  Scanned in 00mn 02s



---\\ Processus lancés
[MD5.51138BEEA3E2C21EC44D0932C71762A8] - (...) --    [0] [PID.0]
[MD5.B6A87D77CC1E839885EE875A77D89673] - (.Siber Systems - RoboForm TaskBar Icon.) -- C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe   [96056] [PID.2308]
[MD5.1BEF98B2BD922836CCDD0F85620BC755] - (.Nullsoft, Inc. - Winamp Agent.) -- C:\Program Files (x86)\Winamp\winampa.exe   [74752] [PID.3120]
[MD5.48BE298F7FD1BEF4D8FBACB04D8D95C4] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe   [958576] [PID.3200]
[MD5.8E2A7F1F62467A7DCB8AB2C0642F47CA] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe   [152392] [PID.2500]
[MD5.CE5C9977DA751DDC30952AC4DCBCA788] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe   [49208] [PID.3532]
[MD5.E6E8DE4DF98FAD01BCF3770433F3E37B] - (.CHENGDU YIWO Tech Development Co., Ltd - EaseUS Partition Master Free Edition Applic.) -- C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.3.0\bin\EpmNews.exe   [2081792] [PID.3816]
[MD5.5DBDC85A9AB1C338E82DB4F118C04D6E] - (.Apple Inc. - distnoted.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe   [13712] [PID.5292]
[MD5.C027976360520038D17C64EFFEFA61F4] - (.Apple Inc. - SyncServer.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe   [56416] [PID.8872]
[MD5.1EEA6C1B35191DC177EA83672B9C3FC0] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe   [275568] [PID.10484]
[MD5.0DD74786D22EDFF0CE5B8E1B1E398618] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe   [18544] [PID.11088]
[MD5.5D60EE718D0C708D69DFF4B3336B68BF] - (.Adobe Systems, Inc. - Adobe Flash Player 11.9 r900.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe   [1862536] [PID.11236]
[MD5.486BDC196F8914845302745A15310D62] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [8321024] [PID.13148]
[MD5.E433210DD9F9EF43D4D170E52FFFF116] - (.Microsoft Corporation - Microsoft Word.) -- C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.exe   [1423008] [PID.24364]
[MD5.ADDA5E1951B90D3D23C56D3CF0622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe   [65640] [PID.1408]
[MD5.4FE5C6D40664AE07BE5105874357D2ED] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe   [57008] [PID.1484]
[MD5.465680BDE344CE4FF6646626AA3A9125] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe   [223112] [PID.1628]
[MD5.7F32D4C47A50E7223491E8FB9359907D] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe   [325656] [PID.3484]
[MD5.2C16648A12999AE69A9EBF41974B0BA2] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe   [2656280] [PID.4804]
~ Processes Running:  Scanned in 00mn 00s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Diane\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] http://mysearch.avg.com =Adware.MyWebSearch
G2 - GCE: Preference [User Data\Default] [angobeimajilfhlcpeiccndaifchnppl] AppGraffiti - Free Facebook Layouts v.1.0.0.4 (Désactivé) =PUP.AppGraffiti
G2 - GCE: Preference [User Data\Default] [ggbjllldgkpdambbodmcdacgochbchah] BeeMP3 v.4.0 (Désactivé)
G2 - GCE: Preference [User Data\Default] [iehjklkgijkjfcfmmjmjlmcccholamaf] MixiDJ V45 v.10.21.1.7, (Désactivé) =Toolbar.MixiDJ
G2 - GCE: Preference [User Data\Default] [paoponfhfdfnjgddpnpjkambkcgdaaib] uTorrentBar_FR v.2.3.7.1 (Désactivé) =P2P.µTorrent
~ Google Browser: 13 Legitimates Filtered in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Users\Diane\AppData\Roaming\Mozilla\Firefox\Profiles\5303fdpe.default-1363395552046\prefs.js
C:\Users\Diane\AppData\Roaming\Mozilla\Firefox\Profiles\bi13i6tj.default\prefs.js (.not file.)
M3 - MFPP: Plugins - [Diane] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\Search_Results.xml =PUP.SearchResults
M2 - MFEP: prefs.js [Diane - 5303fdpe.default-1363395552046\yxrmijgqp@pslkx-g.net] [] safe essave v1.5 (..) =Adware.SafeSave
M2 - MFEP: prefs.js [Diane - 5303fdpe.default-1363395552046\{5a94bc06-d1eb-4c2b-bad7-58f33ca4b85c}] [] Vafmusic6  v10.23.0.822 (..) =Toolbar.Vafmusic
M2 - MFEP: prefs.js [Diane - 5303fdpe.default-1363395552046\{8b337819-d1e8-48d3-8178-168ae8c99c36}] [] SaveSense v3.0 (..) =PUP.SaveSense
M2 - MFEP: prefs.js [Diane - 5303fdpe.default-1363395552046\{bf9194c2-b86d-4ebc-9b53-1c08b6ff779e}] [] VisualBee V.3  v10.23.0.822 (..) =Adware.VisualBeeToolbar
M2 - MFEP: prefs.js [Diane - 5303fdpe.default-1363395552046\{d2cf9842-af95-48cd-b873-bfbb48cd7f5e}] [] MixiDJ V45  v10.21.1.7 (..) =Toolbar.MixiDJ
~ Firefox Browser: 13 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management:  Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys:  Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File:  Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {1F8F3090-2133-6432-73EA-429527740439} . (...) -- C:\Windows\SysWOW64\rttm.dll
O2 - BHO: Adobe PDF Link Helper [64Bits] - {36D007FC-07C5-1FA0-44D6-2846695353F9} . (...) -- C:\Windows\SysWOW64\msxmml6r.dll
~ BHO: 13 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: avast! EasyPass Toolbar - [HKLM]{724d43a0-0d85-11d4-9908-00400523e39a} . (.AVAST Software - avast! EasyPass Main Module.) -- C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{5755F9B1-1412-4238-8474-00C5A897DFE2} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{872B5B88-9DB5-4310-BDD0-AC189557E5F5} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{D4027C7F-154A-4066-A1AD-4243D8127440} Clé orpheline
~ Toolbar:  Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.)  -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O4 - GS\Desktop [Public]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.)  -- C:\Program Files (x86)\uTorrent\uTorrent.exe =P2P.BitTorrent
O4 - GS\Program [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.)  -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O4 - GS\QuickLaunch [Diane]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\QuickLaunch [Diane]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.)  -- C:\Program Files (x86)\uTorrent\uTorrent.exe =P2P.BitTorrent
O4 - GS\TaskBar [Diane]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.)  -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O4 - GS\Program [Diane]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\SystemTools [Diane]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Desktop [Diane]: dame de pique.lnk - Clé orpheline
O4 - GS\Desktop [Diane]: DXBall.lnk . (...)  -- C:\Program Files (x86)\DX-Ball\DXBall.exe
O4 - GS\Desktop [Diane]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Users\Diane\AppData\Local\Google\Chrome\Application\chrome.exe
O4 - GS\Desktop [Diane]: jeux.lnk - Clé orpheline
~ Global Startup: 65 Legitimates Filtered in 00mn 03s



---\\ Applications lancées au démarrage du sytème (O4)
O4 - GS\Startup [Diane]: Alertes de surveillance de l'encre - HP Deskjet 1000 J110 series.lnk . (.Hewlett-Packard Co. - Print Driver Status Business Logic.)  -- C:\Program Files\HP\HP Deskjet 1000 J110 series\bin\HPStatusBL.dll  =.Hewlett-Packard Co
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe  =.Realtek Semiconductor Corp
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Diane\AppData\Local\Google\Update\GoogleUpdate.exe  =.Google Inc
O4 - HKCU\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper (buildbot_winslav.) -- C:\Program Files (x86)\Steam\Steam.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe  =.DT Soft Ltd
O4 - HKCU\..\Run: [RoboForm] . (.Siber Systems - RoboForm TaskBar Icon.) -- C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
O4 - HKCU\..\Run: [BackgroundContainer] . (.Conduit Ltd. - Background Container.) -- C:\Users\Diane\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll =PUP.Babylon
O4 - HKLM\..\Wow6432Node\Run: [WinampAgent] . (.Nullsoft, Inc. - Winamp Agent.) -- C:\Program Files (x86)\Winamp\winampa.exe
O4 - HKLM\..\Wow6432Node\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe  =.Microsoft Corporation
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe  =.Adobe Systems Incorporated
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe
O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe  =.Hewlett-Packard Co
O4 - HKLM\..\Wow6432Node\Run: [EaseUS EPM tray] . (.CHENGDU YIWO Tech Development Co., Ltd - EaseUS Partition Master Free Edition Applic.) -- C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.3.0\bin\EpmNews.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe  =.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe  =.Microsoft Corporation
O4 - HKUS\S-1-5-18\..\RunOnce: [SpUninstallDeleteDir] Clé orpheline
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe  =.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe  =.Microsoft Corporation
O4 - HKUS\S-1-5-21-874211406-2399046045-1614246573-1000\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Diane\AppData\Local\Google\Update\GoogleUpdate.exe  =.Google Inc
O4 - HKUS\S-1-5-21-874211406-2399046045-1614246573-1000\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper (buildbot_winslav.) -- C:\Program Files (x86)\Steam\Steam.exe
O4 - HKUS\S-1-5-21-874211406-2399046045-1614246573-1000\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe  =.DT Soft Ltd
O4 - HKUS\S-1-5-21-874211406-2399046045-1614246573-1000\..\Run: [RoboForm] . (.Siber Systems - RoboForm TaskBar Icon.) -- C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
O4 - HKUS\S-1-5-21-874211406-2399046045-1614246573-1000\..\Run: [BackgroundContainer] . (.Conduit Ltd. - Background Container.) -- C:\Users\Diane\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll =PUP.Babylon
~ Application:  Scanned in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Send to OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} -- C:\Program Files (x86)\MICROS~3\Office14\ONBttnIE.dll (.not file.)
O9 - Extra button: Remplir les formulaires [64Bits] - {320AF880-6646-11D3-ABEE-C5DBF3571F46} . (.AVAST Software - avast! EasyPass Main Module.) -- C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra button: Enregistrer les formulaires [64Bits] - {320AF880-6646-11D3-ABEE-C5DBF3571F49} . (.AVAST Software - avast! EasyPass Main Module.) -- C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra button: Barre avast! EasyPass [64Bits] - {724d43aa-0d85-11d4-9908-00400523e39a} . (.AVAST Software - avast! EasyPass Main Module.) -- C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra button: OneNote Linked Notes [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} -- C:\Program Files (x86)\MICROS~3\Office14\ONBTTN~1.dll (.not file.)
~ IE Extra Buttons:  Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{38A4B53C-EF06-4947-B304-656CFF67821C}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{38A4B53C-EF06-4947-B304-656CFF67821C}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{38A4B53C-EF06-4947-B304-656CFF67821C}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
~ Domain:  Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll  =.Microsoft Corporation
~ Protocole Additionnel:  Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (...) - C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll (.not file.) =Toolbar.Conduit
~ AppInit DLL:  Scanned in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\At1.job   [354]
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\At2.job   [342]
[MD5.00000000000000000000000000000000] [APT] [Advanced System Protector_startup] (...) -- C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe (.not file.)   [0]  =PUP.AdvancedSystemProtector
[MD5.F63566FB14DF7F1501E17E485CB22F8B] [APT] [At1] (...) -- C:\Windows\SysWOW64\RMActtivate.exe   [57344]
[MD5.F63566FB14DF7F1501E17E485CB22F8B] [APT] [At2] (...) -- C:\Windows\SysWOW64\calcc.exe   [57344]
[MD5.0A08CBE2CAEC5EA278B03C86A1C4EA0A] [APT] [{08128DC0-BF52-4EAC-9CB0-C69F935C645B}] (...) -- C:\Users\Diane\Downloads\Magic.Academy.juego.Spanis.by.el.abuelo.(http://WwW.RiojaTorrent.CoM)\Instalar.exe   [19709487]
[MD5.0808AE5A169D7FE176ED5255A6672237] [APT] [{58DF9DA8-A8CF-4D76-9A10-0F08CA8D2354}] (...) -- C:\Users\Diane\Downloads\iWin - Dream Day Wedding Viva Las Vegas - Duvan\VivaLasVegas.exe   [134603410]
~ Scheduled Task: 24 Legitimates Filtered in 00mn 05s



---\\ Logiciels installés (O42)
O42 - Logiciel: Little Shop - Memories 1.052 - (...) [HKLM][64Bits] -- Little Shop - Memories 1.052
O42 - Logiciel: Little Shop - Road Trip 1.00 - (...) [HKLM][64Bits] -- Little Shop - Road Trip 1.00
O42 - Logiciel: Rangy Lil's Wild West Adventure 1.00 - (...) [HKLM][64Bits] -- Rangy Lil's Wild West Adventure 1.00
O42 - Logiciel: Sunset Studio Love on the High Seas 1.00 - (...) [HKLM][64Bits] -- Sunset Studio Love on the High Seas 1.00
~ Logic: 32 Legitimates Filtered in 00mn 00s



---\\ HKCU HKLM Software Keys
[HKCU\Software\Conduit] =Toolbar.Conduit
[HKCU\Software\IM]
[HKCU\Software\Mixi.DJ]
[HKCU\Software\Pando Networks]
[HKCU\Software\iLivid] =Adware.Bandoo
[HKLM\Software\DataMngr] =PUP.Datamngr
[HKLM\Software\Tarma Installer] =PUP.Tarma
[HKLM\Software\Wow6432Node\Conduit] =Toolbar.Conduit
[HKLM\Software\Wow6432Node\Freeze.com] =Adware.Freeze
[HKLM\Software\Wow6432Node\Pando Networks]
[HKLM\Software\Wow6432Node\SProtector] =PUP.Mocaflix
~ Key Software: 298 Legitimates Filtered in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 2013-11-01 - 18:35:15 - [877,633] ----D C:\Program Files (x86)\1-click run
O43 - CFD: 2012-10-07 - 13:50:39 - [0,077] ----D C:\Program Files (x86)\BasicScan =Adware.BasicScan
O43 - CFD: 2013-05-23 - 19:59:29 - [0,077] ----D C:\Program Files (x86)\Cate West The Vanishing Files
O43 - CFD: 2013-12-24 - 17:13:00 - [0,274] ----D C:\Program Files (x86)\Conduit
O43 - CFD: 2012-06-17 - 12:22:14 - [75,156] ----D C:\Program Files (x86)\Little Shop - World Traveler
O43 - CFD: 2011-09-30 - 21:42:10 - [0] ----D C:\Program Files (x86)\Pando Networks
O43 - CFD: 2013-05-08 - 12:50:58 - [0,207] ----D C:\Program Files (x86)\PC Performer =Rogue.PCPerformer
O43 - CFD: 2012-08-20 - 12:03:53 - [0,085] ----D C:\Program Files (x86)\The Scruffs - N2KMaster AIO Pack
O43 - CFD: 2013-12-24 - 16:46:24 - [0,024] ----D C:\Program Files (x86)\Vafmusic6 =Toolbar.Vafmusic
O43 - CFD: 2012-09-27 - 06:19:02 - [0] ----D C:\ProgramData\Ask
O43 - CFD: 2012-11-04 - 21:26:14 - [0] ----D C:\ProgramData\boost_interprocess
O43 - CFD: 2014-01-06 - 17:45:44 - [0] ----D C:\ProgramData\Conduit
O43 - CFD: 2012-06-19 - 19:57:24 - [0] ----D C:\ProgramData\GAMESHASTRA
O43 - CFD: 2013-11-28 - 09:07:23 - [5,302] ----D C:\ProgramData\InstallMate =PUP.Tarma
O43 - CFD: 2012-07-10 - 11:26:43 - [0] ----D C:\ProgramData\iWin
O43 - CFD: 2013-04-15 - 15:25:09 - [32,713] ----D C:\ProgramData\Nick Chase A Detective Story
O43 - CFD: 2013-05-28 - 10:46:39 - [0] ----D C:\ProgramData\REXARD
O43 - CFD: 2013-12-24 - 17:35:25 - [1,672] ----D C:\ProgramData\Tarma Installer =PUP.Tarma
O43 - CFD: 2013-03-13 - 19:19:57 - [0] ----D C:\ProgramData\Trymedia =Adware.Trymedia
O43 - CFD: 2012-12-31 - 17:01:19 - [23,027] -SH-D C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
O43 - CFD: 2012-06-17 - 11:59:07 - [0,076] ----D C:\Users\Diane\AppData\Roaming\bigwig_media
O43 - CFD: 2012-06-19 - 19:57:24 - [0,001] ----D C:\Users\Diane\AppData\Roaming\GAMESHASTRA
O43 - CFD: 2012-07-10 - 11:26:43 - [0,072] ----D C:\Users\Diane\AppData\Roaming\iWin
O43 - CFD: 2012-11-27 - 13:20:05 - [0,014] ----D C:\Users\Diane\AppData\Roaming\Old Castle
O43 - CFD: 2013-05-28 - 10:46:39 - [0,354] ----D C:\Users\Diane\AppData\Roaming\REXARD
O43 - CFD: 2012-09-08 - 19:12:33 - [0,002] ----D C:\Users\Diane\AppData\Roaming\TheMissingMonaLisa
O43 - CFD: 2011-12-28 - 21:39:36 - [0,161] ----D C:\Users\Diane\AppData\Local\APN
O43 - CFD: 2013-12-24 - 17:33:44 - [0,835] ----D C:\Users\Diane\AppData\Local\Conduit
O43 - CFD: 2011-10-04 - 08:38:30 - [0] ----D C:\Users\Diane\AppData\Local\OpenCandy =Adware.OpenCandy
O43 - CFD: 2013-12-08 - 13:32:12 - [0,186] ----D C:\Users\Diane\AppData\Local\WhiteListing
O43 - CFD: 2013-11-01 - 18:36:32 - [0,002] ----D C:\Users\Diane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\1-click run
O43 - CFD: 2012-05-19 - 17:55:07 - [0,007] ----D C:\Users\Diane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Big City Adventure - New York
O43 - CFD: 2012-05-19 - 20:37:26 - [0,007] ----D C:\Users\Diane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Big City Adventure - Sydney Australia
O43 - CFD: 2012-05-19 - 20:39:39 - [0,009] ----D C:\Users\Diane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Big City Adventure - Vancouver CE
O43 - CFD: 2013-04-15 - 11:59:16 - [0,007] ----D C:\Users\Diane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Big City Adventure 6 - Paris
O43 - CFD: 2012-06-17 - 12:43:59 - [0,004] ----D C:\Users\Diane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Little Shop - World Traveler
~ Program Folder: 303 Legitimates Filtered in 00mn 17s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.3682B7AEC4F97C2B2F41FC25EAB8A107] - 2013-12-24 - 17:33:00 ---A- . (...) -- C:\logFileUI.txt   [1989]
O44 - LFC:[MD5.F862CD08F1AD4EE39BD506853F3C6103] - 2013-12-25 - 03:06:17 ---A- . (...) -- C:\Windows\System32\ieuinit.inf   [16284]
O44 - LFC:[MD5.991C04A31777ED77CB92A4F96F14C2E2] - 2014-01-06 - 12:37:39 ---A- . (...) -- C:\Windows\System32\EuGdiDrv.sys   [9800]
O44 - LFC:[MD5.6106653B08F4F72EEAA7F099E7C408A4] - 2014-01-06 - 12:37:39 ---A- . (...) -- C:\Windows\System32\epmntdrv.sys   [17480]
O44 - LFC:[MD5.65355919686BE70BE3B5781CBC0999CF] - 2014-01-06 - 12:37:39 ---A- . (...) -- C:\Windows\System32\setupempdrvx64.exe   [100936]
O44 - LFC:[MD5.105542E1CC839C25496ADB62ADF4F73E] - 2014-01-06 - 12:37:40 ---A- . (...) -- C:\Windows\System32\BootMan.exe   [3381832]
O44 - LFC:[MD5.C773F06312FA82C7517D0F9101CFC4CF] - 2014-01-06 - 12:37:40 ---A- . (...) -- C:\Windows\System32\EuEpmGdi.dll   [16256]
O44 - LFC:[MD5.D1E75542EC8D1B4851765A57AC63618E] - 2014-01-06 - 16:16:25 ---A- . (...) -- C:\Windows\diagerr.xml   [1908]
O44 - LFC:[MD5.212BDFD5709E0F6F5B9023E199E638A9] - 2014-01-06 - 16:16:25 ---A- . (...) -- C:\Windows\diagwrn.xml   [2560]
~ Files: 89 Legitimates Filtered in 00mn 01s



---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.8A1D8FD2F1BBF93B3717BCFDD522E1D8] - 2014-01-07 - 13:10:55 ---A- - C:\Windows\Prefetch\_IU14D2N.TMP-3E8F7E4C.pf
~ Prefetcher: 105 Legitimates Filtered in 00mn 00s



---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook [64Bits] - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MIF5BA~1\Office14\GROOVEEX.DLL
~ ShellExecuteHooks:  Scanned in 00mn 00s



---\\ Clé de registre Shell MountPoints2 (MPKS) (O51)
O51 - MPSK:{616e65ee-6309-11e1-839f-f46d043cc957}\AutoRun\command. (...) -- E:\SETUP.exe (.not file.)
~ Keys:  Scanned in 00mn 00s



---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 16 Legitimates Filtered in 00mn 00s



---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
~ MWPE Keys: 3 Legitimates Filtered in 00mn 00s



---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:[MD5.46571ED73AE84469DCA53081D33CF3C8] - 2012-02-29 - 14:27:08 ---A- . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) -- C:\Windows\System32\Drivers\dtsoftbus01.sys   [283200]
O58 - SDL:[MD5.0E5DA5369A0FCAEA12456DD852545184] - 2009-07-13 - 20:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys   [530496]
O58 - SDL:[MD5.F2523EF6460FC42405B12248338AB2F0] - 2009-06-10 - 15:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys   [31232]
O58 - SDL:[MD5.F3817967ED533D08327DC73BC4D5542A] - 2009-07-13 - 20:45:55 ---A- . (.Promise Technology - Promise  SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys   [24656]
O58 - SDL:[MD5.C9E9D59C0099A9FF51697E9306A44240] - 2012-12-13 - 12:50:36 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\Drivers\usbaapl64.sys   [54784]
O58 - SDL:[MD5.6106653B08F4F72EEAA7F099E7C408A4] - 2013-03-07 - 09:49:18 ---A- . (...) -- C:\Windows\System32\epmntdrv.sys   [17480]
O58 - SDL:[MD5.991C04A31777ED77CB92A4F96F14C2E2] - 2013-03-07 - 09:49:18 ---A- . (...) -- C:\Windows\System32\EuGdiDrv.sys   [9800]
O58 - SDL:[MD5.19166026A93206F9C6A8CD3A1F010AE4] - 2009-04-02 - 07:30:14 ---A- . (...) -- C:\Windows\SysWOW64\drivers\ASUSHWIO.SYS   [10296]
O58 - SDL:[MD5.F17F09BA097D8EC3CE2084FA97886B85] - 2013-03-07 - 09:49:20 ---A- . (...) -- C:\Windows\SysWOW64\epmntdrv.sys   [13896]
O58 - SDL:[MD5.F1DE3EEF501DDA7DDF99F2EDF0C5540E] - 2013-03-07 - 09:49:20 ---A- . (...) -- C:\Windows\SysWOW64\EuGdiDrv.sys   [9160]
~ Drivers: 16 Legitimates Filtered in 00mn 03s



---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC: 2014-01-06 - 13:48:54 ---A- . (...) -- C:\Users\Diane\AppData\Local\SearchProtect\SearchProtect\rep\UserRepository.dat   [105054] =Toolbar.Conduit
O61 - LFC: 2014-01-06 - 13:48:54 ---A- . (...) -- C:\Users\Diane\AppData\Local\SearchProtect\SearchProtect\rep\UserSettings.dat   [3534] =Toolbar.Conduit
O61 - LFC: 2014-01-06 - 13:48:54 ---A- . (...) -- C:\Users\Diane\AppData\Local\SearchProtect\UI\rep\UIRepository.dat   [5342] =Toolbar.Conduit
O61 - LFC: 2014-01-06 - 13:48:54 ---A- . (...) -- C:\Users\Diane\AppData\Local\resmon.resmoncfg   [17]
O61 - LFC: 2014-01-06 - 13:49:01 ---A- . (.EaseUS.) -- C:\Users\Diane\Downloads\epm.exe   [21832632]
O61 - LFC: 2014-01-06 - 13:49:13 R--A- . (...) -- C:\Users\Diane\Downloads\Windows XP Home Edition(SP3)[.ISO]\READ)))(((ME!!!.txt   [785]
O61 - LFC: 2014-01-06 - 13:49:13 R--A- . (...) -- C:\Users\Diane\Downloads\Windows XP Home Edition(SP3)[.ISO]\WindowsXP_SP3_HomeEdition.iso   [620724224]
O61 - LFC: 2014-01-07 - 13:48:59 ---A- . (...) -- C:\Users\Diane\AppData\Roaming\ZHP\Log.txt   [130460]  =.Nicolas Coolman
O61 - LFC: 2014-01-07 - 13:48:59 ---A- . (...) -- C:\Users\Diane\AppData\Roaming\ZHP\TestsZHPDiag.txt   [2850]  =.Nicolas Coolman
O61 - LFC: 2014-01-07 - 13:48:59 ---A- . (...) -- C:\Users\Diane\AppData\Roaming\ZHP\ZHPADSReport.txt   [351]  =.Nicolas Coolman
O61 - LFC: 2014-01-07 - 13:48:59 ---A- . (...) -- C:\Users\Diane\AppData\Roaming\ZHP\ZHPDiag.txt   [60435]  =.Nicolas Coolman
O61 - LFC: 2014-01-07 - 13:48:59 ---A- . (...) -- C:\Users\Diane\AppData\Roaming\ZHP\ZHPExportRegistry-2014-01-07-13-01-49.txt   [177346]  =.Nicolas Coolman
O61 - LFC: 2014-01-07 - 13:49:00 ---A- . (...) -- C:\Users\Diane\AppData\Roaming\ZHP\ZHPExportRegistry-2014-01-07-13-06-03.txt   [792]  =.Nicolas Coolman
O61 - LFC: 2014-01-07 - 13:49:00 ---A- . (...) -- C:\Users\Diane\AppData\Roaming\ZHP\ZHPFixQuarantine.txt   [241635]  =.Nicolas Coolman
O61 - LFC: 2014-01-07 - 13:49:00 ---A- . (...) -- C:\Users\Diane\AppData\Roaming\ZHP\ZHPFix[R1].txt   [122150]  =.Nicolas Coolman
O61 - LFC: 2014-01-07 - 13:49:00 ---A- . (...) -- C:\Users\Diane\AppData\Roaming\ZHP\ZHPFix[R2].txt   [1298]  =.Nicolas Coolman
O61 - LFC: 2014-01-07 - 13:49:00 ---A- . (...) -- C:\Users\Diane\AppData\Roaming\ZHP\ZHPFix[R3].txt   [1041]  =.Nicolas Coolman
~ 3 Fichiers temporaires (Temporary files)
~ Files: 55 Legitimates Filtered in 00mn 21s



---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1  =.Nicolas Coolman
~ ADS:  Scanned in 00mn 00s



---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\Diane\AppData\Local\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys:  Scanned in 00mn 00s



---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("CT3287802.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.as ... CUI=UN9110[...]
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("CT3287802.http___facebook_conduitapps_com.APP_WIN_FEATURES.enc", "cmVzaXphYmxlPTAsaHNjcm9sbD0wLHZzY3JvbGw9MCx0aXRsZWJhc[...]
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("CT3287802.http___gmaps_conduitapps_com_v3_2_1.gmaps_Country.enc", "Q0FOQURB");
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("CT3287802.http___gmaps_conduitapps_com_v3_2_1.gmaps_HomeLocation.enc", "NTYuMTMwMzY2LC0xMDYuMzQ2NzcwOTk5OTk5OTk=");
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("CT3287802.http___gmaps_conduitapps_com_v3_2_1.gmaps_Ip.enc", "MTg0Ljc1LjE0MC4xNzcK");
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("CT3287802.http___gmaps_conduitapps_com_v3_2_1.gmaps_Language.enc", "RnJhbsOnYWlz");
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("CT3287802.http___gmaps_conduitapps_com_v3_2_1.gmaps_LanguageAlias.enc", "ZnI=");
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("CT3287802.http___gmaps_conduitapps_com_v3_2_1.gmaps_SidebarContent.enc", "cm91dGVz");
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("CT3287802.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"http://search.conduit.com/?ctid=CT3287802octid=CT3[...]
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("CT3298581.originalSearchAddressUrl", "http://search.conduit.com/ResultsExt.as ... 2CUI=UN911[...]
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("CT3298581.originalSearchEngine", "VisualBee V.3 Customized Web Search"); =Adware.VisualBeeToolbar
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("CT3298581.originalSearchEngineName", "VisualBee V.3 Customized Web Search"); =Adware.VisualBeeToolbar
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("Smartbar.ConduitHomepagesList", "http://search.conduit.com/?ctid=CT32985 ... I=UN426367[...] =Hijacker.SmartBar
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("Smartbar.ConduitSearchEngineList", "VisualBee V.3 Customized Web Search"); =Adware.VisualBeeToolbar
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("Smartbar.ConduitSearchUrlList", "http://search.conduit.com/ResultsExt.as ... UN91102504[...] =Hijacker.SmartBar
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("Smartbar.SearchFromAddressBarSavedUrl", "http://search.conduit.com/ResultsExt.as ... ce=2CUI=UN[...] =Hijacker.SmartBar
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("aol_toolbar.default.homepage.check", false);
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("aol_toolbar.default.search.check", false);
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("browser.search.defaultthis.engineName", "MixiDJ V45 Customized Web Search"); =Toolbar.MixiDJ
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("browser.search.defaulturl", "http://search.conduit.com/ResultsExt.as ... 13UM=2Sear[...]
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("extensions.BabylonToolbar.prtkDS", 0); =PUP.Babylon
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("extensions.BabylonToolbar.prtkHmpg", 0); =PUP.Babylon
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("extensions.crossrider.bic", "141e2163cfd3b9e55a8d911a881bfea3"); =PUP.CrossRider
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("keyword.URL", "http://search.conduit.com/ResultsExt.as ... 7971UM=2q="[...]
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("plugin.state.npconduitfirefoxplugin", 2);
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("smartbar.conduitHomepageList", "http://search.conduit.com/?ctid=CT32878 ... 77971UM=99[...] =Hijacker.SmartBar
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("smartbar.conduitSearchAddressUrlList", "http://search.conduit.com/ResultsExt.as ... e=2CUI=UN9[...] =Hijacker.SmartBar
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("smartbar.originalHomepage", "http://search.conduit.com/?ctid=CT32985 ... hSource=13"); =Hijacker.SmartBar
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", ""); =PUP.SweetIM
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", ""); =PUP.SweetIM
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("sweetim.toolbar.previous.browser.startup.homepage", ""); =PUP.SweetIM
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("sweetim.toolbar.previous.keyword.URL", ""); =PUP.SweetIM
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("sweetim.toolbar.scripts.1.domain-blacklist", ""); =PUP.SweetIM
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", ""); =PUP.SweetIM
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", ""); =PUP.SweetIM
O69 - SBI: prefs.js [Diane - 5303fdpe.default-1363395552046] user_pref("sweetim.toolbar.searchguard.enable", ""); =PUP.SweetIM
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {16501D1F-26A2-47E1-A994-026E97EACCEB} - (Ask Search) - http://websearch.ask.com =Toolbar.Ask
O69 - SBI: SearchScopes [HKCU] {60F562E8-E5D9-4307-A837-20A72566F7F5} [DefaultScope] - (MixiDJ V45 Customized Web Search) - http://search.conduit.com =Toolbar.MixiDJ
O69 - SBI: SearchScopes [HKCU] {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} - (Search Results) - http://dts.search-results.com =PUP.SearchResults
O69 - SBI: SearchScopes [HKCU] {A62FC701-ADBB-41EF-BF0A-A757505E2FA9} - (Yahoo! Search) - http://search.yahoo.com
O69 - SBI: SearchScopes [HKCU] {C04B7D22-5AEC-4561-8F49-27F6269208F6} - (Inbox Recherche) - http://toolbar.inbox.com
O69 - SBI: SearchScopes [HKCU] {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} - (AOL Web Search) - http://slirsredirect.search.aol.com
~ Keys:  Scanned in 00mn 00s



---\\ Enumère les fichiers Crack Keygen (CKF) (O82)
C:\Users\Diane\Downloads\Bigfish Games - Mystery Stories Island of Hope + Adnan_Boy 2008 + Precracked + New Hidden Object Game\Mystery Stories Island of Hope.exe
C:\Users\Diane\Downloads\Death Pages - Ghost Library CE - Full PreCracked - Foxy Games\Death Pages - Ghost Library CE - Full PreCracked - Foxy Games.exe
C:\Users\Diane\Downloads\Farmington Tales - Full PreCracked - Foxy Games\Farmington Tales - Full PreCracked - Foxy Games.exe
C:\Users\Diane\Downloads\Jewel Quest Mysteries The Oracle of Ur CE - Full PreCracked - Foxy Games\Jewel Quest Mysteries The Oracle of Ur CE - Full PreCracked - Foxy Games.exe
C:\Users\Diane\Downloads\Lost Tales - Forgotten Souls With Guide - Full PreCracked - Foxy Games\Lost Tales - Forgotten Souls With Guide - Full PreCracked - Foxy Games.exe
C:\Users\Diane\Downloads\Mystery Stories - Mountains of Madness - Full PreCracked - Foxy Games\Mystery Stories - Mountains of Madness - Full PreCracked - Foxy Games.exe
C:\Users\Diane\Downloads\Surface - Mystery of Another World CE - Full PreCracked - Foxy Games\Surface - Mystery of Another World CE - Full PreCracked - Foxy Games.exe
C:\Users\Diane\Downloads\The Scruffs 2 - Return of the Duke - Foxy Games - Full PreCracked\The Scruffs 2 - Return of the Duke - Foxy Games - Full PreCracked.exe
C:\Users\Diane\Downloads\Time Chronicles - The Missing Mona Lisa - Full PreCracked - Foxy Games\Time Chronicles - The Missing Mona Lisa - Full PreCracked - Foxy Games.exe
C:\Users\Diane\Downloads\Vacation Quest 2 - Australia - Full PreCracked - Foxy Games\Vacation Quest 2 - Australia - Full PreCracked - Foxy Games.exe
C:\Users\Diane\Downloads\Bigfish Games - Mystery Stories Island of Hope + Adnan_Boy 2008 + Precracked + New Hidden Object Game\Mystery Stories Island of Hope.exe
C:\Users\Diane\Downloads\Death Pages - Ghost Library CE - Full PreCracked - Foxy Games\Death Pages - Ghost Library CE - Full PreCracked - Foxy Games.exe
C:\Users\Diane\Downloads\Farmington Tales - Full PreCracked - Foxy Games\Farmington Tales - Full PreCracked - Foxy Games.exe
C:\Users\Diane\Downloads\Jewel Quest Mysteries The Oracle of Ur CE - Full PreCracked - Foxy Games\Jewel Quest Mysteries The Oracle of Ur CE - Full PreCracked - Foxy Games.exe
C:\Users\Diane\Downloads\Lost Tales - Forgotten Souls With Guide - Full PreCracked - Foxy Games\Lost Tales - Forgotten Souls With Guide - Full PreCracked - Foxy Games.exe
C:\Users\Diane\Downloads\Mystery Stories - Mountains of Madness - Full PreCracked - Foxy Games\Mystery Stories - Mountains of Madness - Full PreCracked - Foxy Games.exe
C:\Users\Diane\Downloads\Surface - Mystery of Another World CE - Full PreCracked - Foxy Games\Surface - Mystery of Another World CE - Full PreCracked - Foxy Games.exe
C:\Users\Diane\Downloads\The Scruffs 2 - Return of the Duke - Foxy Games - Full PreCracked\The Scruffs 2 - Return of the Duke - Foxy Games - Full PreCracked.exe
C:\Users\Diane\Downloads\Time Chronicles - The Missing Mona Lisa - Full PreCracked - Foxy Games\Time Chronicles - The Missing Mona Lisa - Full PreCracked - Foxy Games.exe
C:\Users\Diane\Downloads\Vacation Quest 2 - Australia - Full PreCracked - Foxy Games\Vacation Quest 2 - Australia - Full PreCracked - Foxy Games.exe
~ Files:  Scanned in 00mn 22s



---\\ Recherche particulière à la racine du système (SPRF) (O84)
[MD5.83C2C0169AE23CA830D5A9CA7805E705] [SPRF][2014-01-06] (...) -- C:\ProgramData\NTUser.dat   [262144]
[MD5.A70060B32ECDB335F20E030347AA9E2F] [SPRF][2010-04-14] (.Just For Fun Games - Mystery Masterpiece - The Moonstone 1.00 Installation.) -- C:\Users\Diane\AppData\Roaming\Mystery_Masterpiece_-_The_Moonstone.exe   [169684196]
[MD5.42097ED325772131A0914A6034199FBE] [SPRF][2010-04-14] (...) -- C:\Users\Diane\AppData\Roaming\url.bat   [41]
~ Files: 4 Legitimates Filtered in 00mn 01s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 2013-12-24 257416 |  (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Auto 2011-05-24 204288 |  (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
SS - | Auto 2013-10-28 116648 |  (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 2013-10-28 116648 |  (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 2013-12-05 119408 |  (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Auto 2009-07-13 27136 | C:\Windows\system32\HPZinw12.dll (Net Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe
SS - | Auto 2009-07-13 27136 | C:\Windows\system32\HPZipm12.dll (Pml Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe
SS - | Demand 2013-12-11 569768 |  (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
SS - | Demand 2009-07-13 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe

SR - | Auto 2013-05-10 65640 |  (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SR - | Auto 2012-12-21 57008 |  (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 2011-08-30 462184 |  (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Demand 2013-02-20 641352 |  (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 2010-12-20 325656 |  (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SR - | Auto 2013-10-23 23808 |  (MsMpSvc) . (.Microsoft Corporation.) - c:\Program Files\Microsoft Security Client\MsMpEng.exe
SR - | Auto 2010-12-20 2656280 |  (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SR - | Auto 1658-07-10 0 |  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe  =.Microsoft Corporation
SR - | Auto 2009-07-13 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe

~ Services:  Scanned in 00mn 09s



---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
Run by Diane at 2014-01-07 13:49:53
~ OS 64 not supported by MBR tool

~ MBR: 0 Legitimates Filtered in 00mn 00s



---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by Diane at 2014-01-07 13:49:55

********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin

~ MBR:  Scanned in 00mn 02s



---\\ Scan Additionnel (O88)
Database Version : 13018 - (2014-01-02)
Clés trouvées (Keys found) : 45
Valeurs trouvées (Values found) : 4
Dossiers trouvés  (Folders found) : 30
Fichiers trouvés  (Files found) : 4

[HKLM\Software\Google\Chrome\Extensions\angobeimajilfhlcpeiccndaifchnppl]   =PUP.AppGraffiti^
[HKLM\Software\Google\Chrome\Extensions\iehjklkgijkjfcfmmjmjlmcccholamaf]   =Toolbar.MixiDJ^
[HKLM\Software\Google\Chrome\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib]   =P2P.µTorrent^
[HKLM\Software\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}]   =Toolbar.Ask
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}]   =Toolbar.Crawler
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}]   =Adware.Bandoo
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}]   =Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}]   =Adware.Bandoo
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}]   =Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}]   =Toolbar.InBox
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}]   =Adware.Yontoo
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4DC8-84D1-F5D7BAF2DB0C}]   =Adware.IMBooster
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4DC8-84D1-F5D7BAF2DB0C}]   =Adware.IMBooster
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib]   =Toolbar.Conduit
[HKCU\Software\AppDataLow\Software\ConduitSearchScopes]   =Toolbar.Conduit
[HKLM\Software\DataMngr]   =Adware.Bandoo
[HKLM\Software\Wow6432Node\freeze.com]   =Adware.BHO
[HKCU\Software\ilivid]   =Adware.Bandoo
[HKCU\Software\AppDataLow\Software\PriceGong]   =Adware.PriceGong
[HKCU\Software\AppDataLow\Software\Search Settings]   =PUP.Dealio
[HKLM\Software\Wow6432Node\SProtector]   =PUP.AdvancedSystemProtector
[HKLM\Software\Tarma Installer]   =PUP.Tarma
[HKLM\Software\Wow6432Node\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32]   =Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS]   =Adware.Bandoo
[HKLM\Software\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}]   =PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}]   =PUP.Funmoods
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CC99A798-FD3D-4AB4-969E-6071612524F9}]   =PUP.AppGraffiti
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\plmlpkfpkijnlijgalnjaacllnjmoamo]   =Toolbar.DVDVideoSoft
[HKLM\Software\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}]   =Adware.MagniPic
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\00E944CB89111313EAF35A0553F547F9]   =PUP.Dealio
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\53F55AF3F4049ED3FA6EA6F88E414E24]   =PUP.Dealio
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E4BF4B11615E03C97732FD581AB607]   =PUP.Dealio
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CE3DDAB2D152683FBCEB4866BCD2B0F]   =PUP.Dealio
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AF6CE16AFEA5C9A39B766468A8B35C21]   =PUP.Dealio
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB1E44269B58F433A8C8E671E37CFDCF]   =PUP.Dealio
[HKCU\Software\Mixi.DJ]   =Toolbar.MixiDJ
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}]   =Toolbar.DVDVideoSoft
[HKLM\Software\Wow6432Node\Microsoft\Tracing\ConduitInstaller_RASAPI32]   =Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Tracing\ConduitInstaller_RASMANCS]   =Toolbar.Conduit
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}]   =PUP.AppGraffiti
[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}]   =PUP.OptimizerPro
[HKLM\Software\Wow6432Node\Microsoft\Tracing\apnstub_RASAPI32]   =Toolbar.Ask
[HKLM\Software\Wow6432Node\Microsoft\Tracing\apnstub_RASMANCS]   =Toolbar.Ask
[HKLM\Software\Wow6432Node\Microsoft\Tracing\askpartnercobrandingtool_rasapi32]   =Toolbar.Ask
[HKLM\Software\Wow6432Node\Microsoft\Tracing\askpartnercobrandingtool_rasmancs]   =Toolbar.Ask
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:BackgroundContainer   =PUP.Babylon^
[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{D4027C7F-154A-4066-A1AD-4243D8127440}   =Toolbar.Avira
C:\Users\Diane\AppData\Local\Google\Chrome\User Data\Default\Extensions\angobeimajilfhlcpeiccndaifchnppl   =PUP.AppGraffiti^
C:\Users\Diane\AppData\Local\Google\Chrome\User Data\Default\Extensions\iehjklkgijkjfcfmmjmjlmcccholamaf   =Toolbar.MixiDJ^
C:\Users\Diane\AppData\Local\Google\Chrome\User Data\Default\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib   =P2P.µTorrent^
C:\Users\Diane\AppData\Roaming\Mozilla\Firefox\Profiles\5303fdpe.default-1363395552046\extensions\yxrmijgqp@pslkx-g.net   =Adware.SafeSave^
C:\Users\Diane\AppData\Roaming\Mozilla\Firefox\Profiles\5303fdpe.default-1363395552046\extensions\{5a94bc06-d1eb-4c2b-bad7-58f33ca4b85c}   =Toolbar.Vafmusic^
C:\Users\Diane\AppData\Roaming\Mozilla\Firefox\Profiles\5303fdpe.default-1363395552046\extensions\{8b337819-d1e8-48d3-8178-168ae8c99c36}   =PUP.SaveSense^
C:\Users\Diane\AppData\Roaming\Mozilla\Firefox\Profiles\5303fdpe.default-1363395552046\extensions\{bf9194c2-b86d-4ebc-9b53-1c08b6ff779e}   =Adware.VisualBeeToolbar^
C:\Users\Diane\AppData\Roaming\Mozilla\Firefox\Profiles\5303fdpe.default-1363395552046\extensions\{d2cf9842-af95-48cd-b873-bfbb48cd7f5e}   =Toolbar.MixiDJ^
C:\Program Files (x86)\BasicScan   =Adware.BasicScan^
C:\Program Files (x86)\PC Performer   =Rogue.PCPerformer^
C:\Program Files (x86)\Vafmusic6   =Toolbar.Vafmusic^
C:\ProgramData\InstallMate   =PUP.Tarma^
C:\ProgramData\Tarma Installer   =PUP.Tarma^
C:\ProgramData\Trymedia   =Adware.Trymedia^
C:\Users\Diane\AppData\Local\OpenCandy   =Adware.OpenCandy^
C:\Program Files (x86)\Conduit   =Toolbar.Conduit
C:\Program Files (x86)\SearchProtect   =Toolbar.Conduit
C:\Program Files (x86)\Optimizer Pro   =PUP.OptimizerPro
C:\Program Files (x86)\Common Files\AVG Secure Search   =Toolbar.AVGSearch
C:\ProgramData\Conduit   =Toolbar.Conduit
C:\ProgramData\iWin   =Adware.iWinArcade
C:\ProgramData\DeviceVM   =Toolbar.Splashtop
C:\Users\Diane\AppData\Roaming\iWin   =Adware.iWinArcade
C:\Users\Diane\AppData\Roaming\DeviceVM   =Toolbar.Splashtop
C:\Users\Diane\AppData\Local\Conduit   =Toolbar.Conduit
C:\Users\Diane\AppData\Local\SearchProtect   =Toolbar.Conduit
C:\Users\Diane\AppData\LocalLow\searchresultstb   =Toolbar.Agent
C:\Users\Diane\AppData\LocalLow\Conduit   =Toolbar.Conduit
C:\Users\Diane\AppData\LocalLow\PriceGong   =Adware.PriceGong
C:\Users\Diane\AppData\Roaming\Mozilla\Firefox\Profiles\5303fdpe.default-1363395552046\Smartbar   =Hijacker.SmartBar
[HKCU\Software\Conduit]   =Toolbar.Conduit^
[HKCU\Software\iLivid]   =Adware.Bandoo^
[HKLM\Software\Wow6432Node\Conduit]   =Toolbar.Conduit^
[HKLM\Software\Wow6432Node\Freeze.com]   =Adware.Freeze^
~ Additionnel Scan: 315603 Items scanned in 00mn 13s



---\\ Récapitulatif des détections trouvées sur votre station
~ http://nicolascoolman.webs.com/apps/blo ... ywebsearch   =Adware.MyWebSearch
~ http://nicolascoolman.webs.com/apps/blo ... ppgraffiti  =PUP.AppGraffiti
~ http://nicolascoolman.webs.com/apps/blo ... rchresults   =PUP.SearchResults
~ http://nicolascoolman.webs.com/apps/blo ... e-safesave   =Adware.SafeSave
~ http://nicolascoolman.webs.com/apps/blo ... -savesense   =PUP.SaveSense
~ http://nicolascoolman.webs.com/apps/blo ... beetoolbar   =Adware.VisualBeeToolbar
~ http://nicolascoolman.webs.com/apps/blo ... ar-babylon  =PUP.Babylon
~ http://nicolascoolman.webs.com/apps/blo ... ar-conduit   =Toolbar.Conduit
~ http://nicolascoolman.webs.com/apps/blo ... mprotector   =PUP.AdvancedSystemProtector
~ http://nicolascoolman.webs.com/apps/blo ... are-bandoo  =Adware.Bandoo
~ http://nicolascoolman.webs.com/apps/blo ... p-datamngr   =PUP.Datamngr
~ http://nicolascoolman.webs.com/apps/blo ... lbar-tarma   =PUP.Tarma
~ http://nicolascoolman.webs.com/apps/blo ... are-freeze  =Adware.Freeze
~ http://nicolascoolman.webs.com/apps/blo ... p-mocaflix   =PUP.MocaFlix
~ http://nicolascoolman.webs.com/apps/blo ... -basicscan  =Adware.BasicScan
~ http://nicolascoolman.webs.com/apps/blo ... e-trymedia   =Adware.Trymedia
~ http://nicolascoolman.webs.com/apps/blo ... -opencandy   =Adware.OpenCandy
~ http://nicolascoolman.webs.com/apps/blo ... r-smartbar   =Hijacker.SmartBar
~ http://nicolascoolman.webs.com/apps/blo ... crossrider   =PUP.CrossRider
~ http://nicolascoolman.webs.com/apps/blo ... up-sweetim   =PUP.SweetIM
~ http://nicolascoolman.webs.com/apps/blo ... oolbar-ask   =Toolbar.Ask
~ http://nicolascoolman.webs.com/apps/blo ... are-yontoo   =Adware.Yontoo
~ http://nicolascoolman.webs.com/apps/blo ... -imbooster  =Adware.IMBooster
~ http://nicolascoolman.webs.com/apps/blo ... -pricegong   =Adware.PriceGong
~ http://nicolascoolman.webs.com/apps/blo ... pup-dealio   =PUP.Dealio
~ http://nicolascoolman.webs.com/apps/blo ... p-funmoods   =PUP.Funmoods
~ http://nicolascoolman.webs.com/apps/blo ... e-magnipic   =Adware.MagniPic
~ http://nicolascoolman.webs.com/apps/blo ... timizerpro   =PUP.OptimizerPro
~ http://nicolascoolman.webs.com/apps/blo ... iwinarcade  =Adware.iWinArcade
~ MSI: 29 link(s) detected in 00mn 13s



~ 1454 Legitimates filtered by white list
End of the scan (718 lines in 02mn 02s)(20)


Merci énormément de m'aider!!

[penelopehoule]

http://www.cjoint.com/confirm.php?cjoint=DAht1WP5210

Je crois que c'est le lien par cjoint mais je ne suis pas sûre qu'il fonctionne pour tous.

[penelopehoule]

Je dis ZPH mais si vous avez une autre solution aussi...

[2011N2]

Bonsoir,

Passe AdwCleaner et poste le rapport : http://www.forum-entraide-informatique. ... -de-xplode

Puis passe SFTGC et poste le rapport hébergé : http://www.forum-entraide-informatique. ... c-tutoriel

Gabriel.

[penelopehoule]

Merci infiniment pour votre réponse!!
Voici le rapport pour Adwcleaner:
http://cjoint.com/14jv/DAiaqaEDok2.htm

et celui hébergé est ici:
http://cjoint.com/?0AiaorF8zgd

[2011N2]

Bonjour,

OK, fais un nouveau rapport ZHPDiag.

Gabriel.

[Dori@n]

Où en-est votre problème ?

Deux solutions,

• Votre problème est résolu, dans ce cas pensez à nous en faire part.
• Votre problème est toujours d'actualité, merci de nous renseigner sur ce qui ne va pas, et donner des nouvelles régulièrement.
  
  
  À bientôt sur FEI !

[Dori@n]

Bonjour,

Nous n'avons plus de nouvelle de l'auteur de ce sujet depuis plus de 10 jours. Nous considérons donc ce problème comme résolu ou abandonné par son auteur. La prochaine fois, merci de nous tenir au courant de l'évolution de votre problème, ou à faire un UP régulièrement !

Ce sujet est verrouillé, si vous souhaitez le reprendre, merci de contacter par message privé un membre de l'équipe de modération du forum.

À bientôt sur FEI !