Libellules.ch - forum d'informatique • Autocompletepro je voudrais l'auto-virer : Désinfections et demandes d'analyse

par **SAM.SUFFIXE** » 07 Fév 2011 18:54

Bonjour,

Dans Firefox si je tape ma requête dans la barre d'adresse, il fait la recherche et systématiquement il ouvre
le résultat de la recherche sur une page d'avertissement de WOT

je m'aperçois qu'au lieu d'effectuer la recherche avec google, il utilise search.autocompletepro.com et c'est cela qui ne plait pas à Wot.

- je voudrais virer ce truc, mais je ne le trouve pas dans les extensions ni dans les programmes files.

- d'autre part a-t-on une idée où je suis allé charger cette saleté. :oops:

merci d'avance de votre aide

Bravo pour le nouveau Look du site

par **Asstr0naut** » 08 Fév 2011 03:02

Salut Sam !

Jette un coup d'oeil la-dessus, celà pourra peut-être t'aider :roll:

http://comprolive.com/remove/unwanted/a ... ompletepro

as-tu regardé dans les modules complémentaires de firefox s'il y est ??

a+

par **SAM.SUFFIXE** » 09 Fév 2011 20:19

hello Asstronaut

je ne le trouve nulle part

pas dans les modules Firefox
pas dans programmes files
pas dans programmes files 86

mystère
j'ai refait un essai , il est toujours là

j'ai passé MBAM et Spyboot tout est propre (avec mises à jour)

j'ai lu quelque part qu'il était en option avec Tubemaster, j'ai pu le cocher BÊTEMENT, je l'avoue.

bon je ne t'aide pas beaucoup...... des fois si tu as une idée

merci de ton aide

par **Asstr0naut** » 10 Fév 2011 01:08

Hello again !

As-tu jeté un coup-d'œil au lien que je t'ai mis plus haut ? ils parlent de la façon de l'enlever et disent aussi que les fichiers concernés peuvent avoir un autre nom que Autocompletepro seulement.

As-tu regardé dans msconfig -> démarrage voir s'il y figure ? Dans les dossiers cachés ? Et ce Tubemaster, l'as-tu toujours installé ? Si oui, ne pourrais-tu pas tenter de désinstaller ?

J'espère que ça fera avancer le schmilblick un peu

A+

par **Hapax** » 10 Fév 2011 02:24

Autocomplete Pro est un plugin d' Entubemaster qui stocke des cookies cafteurs sur ton pc...Pour ne pas le laisser t'envahir, à la question durant l'installation " Do you want to not install Autocomplete Pro ?", il faut cocher YES ...
Tu devrais désinstaller proprement et intégralement le logiciel (et ,éventuellement,finir le travail en suivant le lien d'Asstronaut...Tu peux utiliser Ava find pour tes recherches...),puis le réinstaller (si tu y tiens) en prenant garde aux cases à cocher.

par **SAM.SUFFIXE** » 16 Mar 2011 23:55

Bonsoir à vous

je vois bien ce que me dit Hapax, mais j'ai du mal à entrer dans les manipulations, j'ai bien désinstallé le programme qui a apporté
cette saleté mais il n'est pas parti avec.

dans Firefox en haut à droite je liste les moteurs de recherche - il n'est plus dedans - à cet endroit je l'avais supprimé

mais toujours à cet endroit si je clique sur l'option "rétablir les moteurs de recherche par défaut" pas de bol il me le remet- :pouark:

il n'est pas non plus dans les modules complémentaires

dans le rapport ci-dessous on le trouve à différents endroits :ptdr:

quelqu'un à t il la gomme miracle

merci

Search bar: hxxp://search.autocompletepro.com/?si=10203&bi=400
Show_ToolBar: yes

C:\Users\Utilisateur\..\eru5lgou.default\prefs.js - keyword.URL: hxxp://search.autocompletepro.com?si=10203&q=

----
.
======= RAPPORT D'AD-REMOVER 2.0.0.0,D | UNIQUEMENT XP/VISTA/7 =======
.
Mis à jour par C_XX le 19/05/10 à 19:20
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 12:23:40 le 27/02/2011 | Mode normal | Option: SCAN
Exécuté de: C:\Ad-Remover\ADR.exe
SE: Microsoft Windows 7 Édition Familiale Premium (Service Pack 1 - X64)
Nom du PC: xxx (System manufacturer System Product Name)
Utilisateur actuel: Utilisateur
.
============== ÉLÉMENT(S) TROUVÉ(S) ==============
.
.
.
.
.
============== SCAN ADDITIONNEL ==============
.
* Mozilla FireFox Version 3.6.13 (fr) *
.
C:\Users\Utilisateur\..\eru5lgou.default\prefs.js - browser.download.lastDir: C:\\Users\\Utilisateur\\Desktop\\wk
C:\Users\Utilisateur\..\eru5lgou.default\prefs.js - browser.search.defaultenginename: ACPro
C:\Users\Utilisateur\..\eru5lgou.default\prefs.js - browser.search.defaulturl: hxxp://search.conduit.com/ResultsExt.as ... ource=3&q={searchTerms}
C:\Users\Utilisateur\..\eru5lgou.default\prefs.js - browser.search.selectedEngine: Google
C:\Users\Utilisateur\..\eru5lgou.default\prefs.js - browser.startup.homepage: hxxp://www.google.com/webhp?hl=fr
C:\Users\Utilisateur\..\eru5lgou.default\prefs.js - browser.startup.homepage_override.mstone: rv:1.9.2.13
C:\Users\Utilisateur\..\eru5lgou.default\prefs.js - keyword.URL: hxxp://search.autocompletepro.com?si=10203&q=
C:\Users\Invité\..\nhca640f.default\prefs.js - browser.search.defaultenginename: Google
C:\Users\Invité\..\nhca640f.default\prefs.js - browser.search.defaulturl: hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
C:\Users\Invité\..\nhca640f.default\prefs.js - browser.search.selectedEngine: Google
C:\Users\Invité\..\nhca640f.default\prefs.js - browser.startup.homepage_override.mstone: rv:1.9.2.3
.
.
* Internet Explorer Version 9.0.8080.16413 *
.
[HKCU\Software\Microsoft\Internet Explorer\Main]
.
Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://search.autocompletepro.com/?si=10203&bi=400
Show_ToolBar: yes
Start Page: hxxp://www.google.fr/#hl=fr&source=hp&q ... a52c8460d6
Use Search Asst: no
.
[HKLM\Software\Microsoft\Internet Explorer\Main]
.
AutoHide: yes
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Delete_Temp_Files_On_Exit: yes
Enable Browser Extensions: yes
Local Page: C:\Windows\SysWOW64\blank.htm
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start Page: hxxp://go.microsoft.com/fwlink/?LinkId=69157
Use Search Asst: no
.
[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
.
Blank: res://mshtml.dll/blank.htm
.
========================================
.
C:\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Ad-Remover\Backup: 0 Fichier(s)
.
C:\Ad-Report-SCAN[1].txt - 2198 Octet(s)
C:\Ad-Report-SCAN[2].txt - 3050 Octet(s)
.
Fin à: 12:28:59, 27/02/2011
.
============== E.O.F - SCAN[2] ==============

par **TopXm** » 17 Mar 2011 10:36

Salut,

Tu as regardé dans les programmes installés (via le panneau de configuration) ?

par **SAM.SUFFIXE** » 17 Mar 2011 10:54

Bonjour TopXm

pour l'instant je ne suis pas devant l'appareil concerné, mais ce dont je suis certain c'est que dans Ccleaner je ne le trouve pas dans
les programmes à désinstaller.

à moins qu'il s'installe sous un autre nom, c'est du genre tordu, mais quand on espionne!!!

et comme je ne m'en suis pas aperçu de suite , la recherche par la date aurait pu m'aider, ta question et ma propre réflexion me fera regarder ce soir dans l'ordre chronologique des installations et creuser de ce côté là :supers:

:

merci à toi et bonne journée

par **TopXm** » 17 Mar 2011 10:59

Re,

Si tu ne mets pas la main dessus on avisera via un rapport OTL (ou autre)

Y'a une clé Run à dégager, une BHO et un ou deux dossiers (de mémoire) - Par contre je me demande si ça n'installe pas non plus RelevantKnowledge

NB : S'il n'est pas dans Ccleaner il ne devrait pas être non plus dans les Programmes installés à partir du moment où les deux listes les clés Uninstall.

Bon en même temps, utiliser Ccleaner à toute les sauces, ça me dépasse :oops:

par **SAM.SUFFIXE** » 27 Mar 2011 18:02

Bonjour TopXm,

voici le rapport

tu me dis

Y'a une clé Run à dégager, une BHO et un ou deux dossiers (de mémoire) - Par contre je me demande si ça n'installe pas non plus RelevantKnowledge

pour moi c'est de l’Hébreu, je serai dans le cas de dire , c'est grave docteur....?

et ce RelecantKnlweledge est - il dangereux ?

merci de ton aide

@+

OTL logfile created on: 27/03/2011 18:34:10 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Utilisateur\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8080.16413)
Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy

6,00 Gb Total Physical Memory | 4,00 Gb Available Physical Memory | 70,00% Memory free
12,00 Gb Paging File | 10,00 Gb Available in Paging File | 85,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 146,39 Gb Total Space | 98,48 Gb Free Space | 67,28% Space Free | Partition Type: NTFS
Drive D: | 465,76 Gb Total Space | 376,90 Gb Free Space | 80,92% Space Free | Partition Type: NTFS
Drive E: | 319,28 Gb Total Space | 34,08 Gb Free Space | 10,67% Space Free | Partition Type: NTFS
Drive H: | 1,28 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF

Computer Name: JPC | User Name: Utilisateur | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/03/27 18:22:43 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Utilisateur\Downloads\OTL.exe
PRC - [2011/03/24 00:54:58 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2011/03/16 11:55:25 | 000,421,032 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
PRC - [2011/03/01 16:47:56 | 002,296,696 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
PRC - [2011/01/10 16:24:20 | 000,993,848 | ---- | M] (Secunia) -- C:\Program Files (x86)\Secunia\PSI\psia.exe
PRC - [2011/01/10 16:24:20 | 000,399,416 | ---- | M] (Secunia) -- C:\Program Files (x86)\Secunia\PSI\sua.exe
PRC - [2011/01/10 16:24:20 | 000,291,896 | ---- | M] (Secunia) -- C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
PRC - [2010/12/18 08:55:00 | 000,267,944 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2010/09/10 00:09:36 | 001,511,424 | ---- | M] (Mortal Universe) -- C:\Program Files (x86)\POP Peeper\POPPeeper.exe
PRC - [2010/08/17 14:32:45 | 000,135,336 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2010/08/17 14:32:32 | 000,339,624 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe
PRC - [2010/08/17 14:32:32 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010/08/17 14:32:31 | 000,539,304 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe
PRC - [2009/10/01 18:03:14 | 001,858,144 | ---- | M] (Emsi Software GmbH) -- C:\Program Files (x86)\a-squared Free\a2service.exe
PRC - [2009/05/25 15:56:18 | 005,391,872 | ---- | M] () -- C:\Program Files\ASUS\TurboV\TurboV.exe
PRC - [2009/05/25 11:33:50 | 006,017,024 | ---- | M] () -- C:\Program Files\ASUS\Six Engine\SixEngine.exe
PRC - [2009/04/29 11:02:01 | 000,270,336 | R--- | M] (LG Electronics) -- C:\Users\Utilisateur\Bluebirds\BlueBirds.exe
PRC - [2009/01/26 16:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
PRC - [2008/11/17 08:47:10 | 000,058,112 | ---- | M] (Space Sciences Laboratory) -- C:\Program Files (x86)\BOINC\boinctray.exe

========== Modules (SafeList) ==========

MOD - [2011/03/27 18:22:43 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Utilisateur\Downloads\OTL.exe
MOD - [2010/11/20 13:55:09 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
MOD - [2009/07/14 03:15:27 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\IconCodecService.dll
MOD - [2009/07/14 03:09:00 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\normaliz.dll

========== Win32 Services (SafeList) ==========

SRV:64bit: - [2011/02/04 14:37:38 | 000,341,296 | ---- | M] (Nitro PDF Software) [Auto | Running] -- C:\Program Files\Common Files\Nitro PDF\Reader\1.0\NitroPDFReaderDriverServicex64.exe -- (NitroReaderDriverReadSpool)
SRV:64bit: - [2010/11/16 02:32:14 | 000,343,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Fix it Center\Matsvc.exe -- (MatSvc)
SRV:64bit: - [2010/10/28 12:14:30 | 000,357,456 | ---- | M] (Logitech, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV:64bit: - [2009/08/18 03:36:20 | 000,203,264 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2009/07/14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2011/03/16 11:55:25 | 000,421,032 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE -- (AntiVirWebService)
SRV - [2011/03/01 16:47:56 | 002,296,696 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe -- (TeamViewer6)
SRV - [2011/01/10 16:24:20 | 000,993,848 | ---- | M] (Secunia) [Auto | Running] -- C:\Program Files (x86)\Secunia\PSI\PSIA.exe -- (Secunia PSI Agent)
SRV - [2011/01/10 16:24:20 | 000,399,416 | ---- | M] (Secunia) [Auto | Running] -- C:\Program Files (x86)\Secunia\PSI\sua.exe -- (Secunia Update Agent)
SRV - [2010/12/18 08:55:00 | 000,267,944 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010/09/12 16:30:52 | 000,251,248 | ---- | M] (CybelSoft) [On_Demand | Stopped] -- C:\Program Files (x86)\ma-config.com\maconfservice.exe -- (maconfservice)
SRV - [2010/08/17 14:32:45 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2010/08/17 14:32:32 | 000,339,624 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe -- (AntiVirMailService)
SRV - [2010/08/17 14:32:31 | 000,539,304 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe -- (AntiVirFirewallService)
SRV - [2010/06/25 19:07:20 | 000,117,264 | ---- | M] (CACE Technologies, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental)
SRV - [2010/05/18 14:40:18 | 000,067,584 | ---- | M] (CobianSoft, Luis Cobian) [Auto | Running] -- C:\Program Files (x86)\Cobian Backup 10\cbVSCService.exe -- (cbVSCService)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/10/01 18:03:14 | 001,858,144 | ---- | M] (Emsi Software GmbH) [Auto | Running] -- C:\Program Files (x86)\a-squared Free\a2service.exe -- (a2free)
SRV - [2009/06/10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009/04/02 06:27:27 | 000,090,112 | R--- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe -- (AsSysCtrlService)
SRV - [2009/02/18 16:31:56 | 000,294,912 | -H-- | M] (DeviceVM) [On_Demand | Stopped] -- C:\ASUS.SYS\config\DVMExportService.exe -- (DvmMDES)
SRV - [2009/01/26 16:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) [Auto | Running] -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe -- (SBSDWSCService)

========== Driver Services (SafeList) ==========

DRV:64bit: - [2011/02/18 17:36:58 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2010/12/18 08:55:05 | 000,083,120 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2010/11/20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 15:32:47 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/11/20 15:32:46 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2010/11/20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/09/01 10:30:58 | 000,017,976 | ---- | M] (Secunia) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\psi_mf.sys -- (PSI)
DRV:64bit: - [2010/08/24 19:29:32 | 000,057,936 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt)
DRV:64bit: - [2010/08/24 19:29:10 | 000,063,568 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt)
DRV:64bit: - [2010/08/24 19:29:10 | 000,013,392 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LHidEqd.sys -- (LHidEqd)
DRV:64bit: - [2010/08/24 19:28:58 | 000,074,320 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LEqdUsb.sys -- (LEqdUsb)
DRV:64bit: - [2010/08/17 14:32:55 | 000,126,792 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avfwot.sys -- (avfwot)
DRV:64bit: - [2010/08/17 14:32:55 | 000,116,568 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:64bit: - [2010/07/27 08:14:24 | 006,465,632 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvuvc64.sys -- (LVUVC64) Logitech Webcam 250(UVC)
DRV:64bit: - [2010/07/27 08:12:16 | 000,339,040 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvrs64.sys -- (LVRS64)
DRV:64bit: - [2010/07/27 08:11:38 | 000,271,712 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvpopf64.sys -- (lvpopf64)
DRV:64bit: - [2010/06/25 19:07:26 | 000,035,344 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\npf.sys -- (NPF)
DRV:64bit: - [2010/06/23 10:10:56 | 000,344,680 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2010/06/17 16:23:50 | 000,098,120 | ---- | M] (Avira GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\avfwim.sys -- (avfwim)
DRV:64bit: - [2010/05/13 11:20:32 | 000,711,712 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\timntr.sys -- (timounter)
DRV:64bit: - [2010/05/13 11:20:32 | 000,081,952 | ---- | M] (Acronis) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\tifsfilt.sys -- (tifsfilter)
DRV:64bit: - [2010/02/03 15:56:56 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:64bit: - [2009/10/07 02:45:50 | 000,030,232 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LVPr2M64.sys -- (LVPr2M64)
DRV:64bit: - [2009/10/04 23:33:48 | 000,131,184 | ---- | M] (QFX Software Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\keyscrambler.sys -- (KeyScrambler)
DRV:64bit: - [2009/08/18 04:48:48 | 006,037,504 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2009/07/14 16:36:28 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGBusEnum.sys -- (LGBusEnum)
DRV:64bit: - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/06/30 05:58:34 | 000,104,408 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\jraid.sys -- (JRAID)
DRV:64bit: - [2009/06/10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:64bit: - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/05/18 15:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2009/05/14 03:26:24 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)
DRV - [2011/02/28 22:21:00 | 000,137,344 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysWOW64\drivers\hwpsgt.sys -- (hwpsgt)
DRV - [2011/02/28 22:21:00 | 000,009,472 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysWOW64\drivers\lemsgt.sys -- (lemsgt)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://search.autocompletepro.com/?si=10203&bi=400
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://fr.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 2E 3D 40 12 20 21 CB 01 [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.autocompletepro.com/?si=10203&bi=400
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://search.autocompletepro.com/?si=10203&bi=400
IE - HKCU\..\URLSearchHook: {4daac69c-cba7-45e2-9bc8-1044483d3352} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "ACPro"
FF - prefs.js..browser.search.defaultenginename: "ACPro"
FF - prefs.js..browser.search.defaultthis.engineName: "Radio Bar 1 Customized Web Search"
FF - prefs.js..browser.search.openintab: true
FF - prefs.js..browser.search.order.1: "ACPro"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.com/webhp?hl=fr"
FF - prefs.js..extensions.enabledItems: autopager@mozilla.org:0.6.2.6
FF - prefs.js..extensions.enabledItems: tabscope@xuldev.org:1.1
FF - prefs.js..extensions.enabledItems: {02450954-cdd9-410f-b1da-db804e18c671}:0.96.3
FF - prefs.js..extensions.enabledItems: {3892FE4C-6DCB-4669-9D01-E23BB9FB61FB}:0.2.10
FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20110323
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: {dc572301-7619-498c-a57d-39143191b318}:0.3.8.5
FF - prefs.js..extensions.enabledItems: {ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}:1.4.1
FF - prefs.js..extensions.enabledItems: keyscrambler@qfx.software.corporation:2.6.0.0
FF - prefs.js..extensions.enabledItems: nosquint@urandom.ca:2.1
FF - prefs.js..extensions.enabledItems: quickdrag@mozilla.ktechcomputing.com:2.1.0.1
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.4
FF - prefs.js..extensions.enabledItems: vtzilla@virustotal.com:1.0
FF - prefs.js..extensions.enabledItems: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.8
FF - prefs.js..extensions.enabledItems: DeviceDetection@logitech.com:1.20.0.66
FF - prefs.js..extensions.enabledItems: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:2.0.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..keyword.URL: "http://search.autocompletepro.com?si=10203&q="

FF - HKLM\software\mozilla\Firefox\Extensions\\{3112ca9c-de6d-4884-a869-9855de68056c}: C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} [2009/12/16 00:37:50 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/03/24 00:55:02 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/03/25 21:37:17 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.9\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/03/06 12:36:12 | 000,000,000 | ---D | M]

[2010/05/14 09:51:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Extensions
[2009/12/04 22:51:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2011/03/27 09:57:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions
[2010/05/14 09:55:55 | 000,000,000 | ---D | M] (Screengrab) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\{02450954-cdd9-410f-b1da-db804e18c671}
[2010/05/14 09:55:55 | 000,000,000 | ---D | M] (MyWords) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\{3892FE4C-6DCB-4669-9D01-E23BB9FB61FB}
[2011/03/23 21:37:50 | 000,000,000 | ---D | M] (WOT) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2011/03/12 23:16:51 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011/03/12 23:16:49 | 000,000,000 | ---D | M] (Download Statusbar) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}
[2011/03/06 11:16:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\{dc572301-7619-498c-a57d-39143191b318}
[2011/03/12 23:16:49 | 000,000,000 | ---D | M] (DownThemAll!) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
[2010/11/17 21:52:43 | 000,000,000 | ---D | M] (FoxTab) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}
[2011/03/20 11:37:30 | 000,000,000 | ---D | M] ("AutoPager") -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\autopager@mozilla.org
[2010/12/17 14:29:55 | 000,000,000 | ---D | M] (Разпознаване на устройство Logitech) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\DeviceDetection@logitech.com
[2010/05/21 23:42:26 | 000,000,000 | ---D | M] (KeyScrambler) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\keyscrambler@qfx.software.corporation
[2011/01/06 22:22:59 | 000,000,000 | ---D | M] (NoSquint) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\nosquint@urandom.ca
[2011/03/09 00:29:22 | 000,000,000 | ---D | M] (QuickDrag) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\quickdrag@mozilla.ktechcomputing.com
[2011/02/04 00:52:26 | 000,000,000 | ---D | M] (Tab Scope) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\tabscope@xuldev.org
[2010/08/29 22:12:31 | 000,000,000 | ---D | M] (VTzilla) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\vtzilla@virustotal.com
[2011/03/06 11:16:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\{dc572301-7619-498c-a57d-39143191b318}\modules\extensions
[2011/03/25 20:00:42 | 000,002,634 | ---- | M] () -- C:\Users\Utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\eru5lgou.default\searchplugins\pc-astuces.xml
[2011/03/22 21:07:09 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2011/02/04 01:08:07 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011/03/22 21:07:09 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011/03/21 21:40:19 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
File not found (No name found) --
() (No name found) -- C:\USERS\UTILISATEUR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ERU5LGOU.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2011/03/24 00:54:58 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\Mozilla Firefox\components\browsercomps.dll
[2011/03/21 21:39:57 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
[2010/12/22 22:11:45 | 000,003,189 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\acpro.xml
[2011/03/24 00:55:00 | 000,001,516 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\amazon-france.xml
[2011/03/24 00:55:00 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\bing.xml
[2011/03/24 00:55:00 | 000,001,822 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\cnrtl-tlfi-fr.xml
[2011/03/24 00:55:00 | 000,001,154 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\eBay-france.xml
[2011/03/24 00:55:00 | 000,001,426 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\wikipedia-fr.xml
[2011/03/24 00:55:00 | 000,000,956 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\yahoo-france.xml

O1 HOSTS File: ([2011/03/24 09:57:43 | 000,431,482 | R--- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 http://www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 http://www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 http://www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 http://www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 http://www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 http://www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 http://www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 http://www.100888290cs.com
O1 - Hosts: 127.0.0.1 http://www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 http://www.10sek.com
O1 - Hosts: 127.0.0.1 http://www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 127.0.0.1 123fporn.info
O1 - Hosts: 14850 more lines...
O2:64bit: - BHO: (no name) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - No CLSID value found.
O2:64bit: - BHO: (KeyScramblerBHO Class) - {2B9F5787-88A5-4945-90E7-C4B18563BC5E} - C:\Program Files (x86)\KeyScrambler\x64\KeyScramblerIE.dll (QFX Software Corporation)
O2 - BHO: (KeyScramblerBHO Class) - {2B9F5787-88A5-4945-90E7-C4B18563BC5E} - C:\Program Files (x86)\KeyScrambler\KeyScramblerIE.dll (QFX Software Corporation)
O2 - BHO: (Video Download Toolbar Helper) - {83BD144C-5E53-4E12-8E99-5A7F1BBF3EA0} - C:\Program Files (x86)\Video Download Toolbar\v3.3.0.3\Video_Download_Toolbar.dll ()
O2 - BHO: (Video Download Toolbar IE Browser Helper Object) - {B29002A0-87A1-4DC4-AC55-5982034EB61E} - C:\Program Files (x86)\Video Download Toolbar\v3.3.0.3\resources\VideoDownloadToolbar.dll (Sakysoft s.r.l. uninominale)
O2 - BHO: (WOT Helper) - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files (x86)\WOT\WOT.dll ()
O3 - HKLM\..\Toolbar: (WOT) - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll ()
O3 - HKLM\..\Toolbar: (Video Download Toolbar) - {E52BE12D-A44A-4F51-9DC1-34F37A488CC7} - C:\Program Files (x86)\Video Download Toolbar\v3.3.0.3\Video_Download_Toolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (WOT) - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Video Download Toolbar) - {E52BE12D-A44A-4F51-9DC1-34F37A488CC7} - C:\Program Files (x86)\Video Download Toolbar\v3.3.0.3\Video_Download_Toolbar.dll ()
O4:64bit: - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [Logitech Download Assistant] C:\Windows\SysNative\LogiLDA.dll (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [boinctray] C:\Program Files (x86)\BOINC\boinctray.exe (Space Sciences Laboratory)
O4 - HKLM..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe ()
O4 - HKLM..\Run: [TurboV] C:\Program Files\ASUS\TurboV\TurboV.exe ()
O4 - HKCU..\Run: [bluebirds] C:\Users\Utilisateur\Bluebirds\BlueBirds.exe (LG Electronics)
O4 - HKCU..\Run: [boincmgr] C:\Program Files (x86)\BOINC\boincmgr.exe (World Community Grid)
O4 - HKCU..\Run: [EPSON SX510W Series] File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O9:64bit: - Extra 'Tools' menuitem : &KeyScrambler Options - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files (x86)\KeyScrambler\x64\KeyScramblerIE.dll (QFX Software Corporation)
O9 - Extra 'Tools' menuitem : &KeyScrambler Options - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files (x86)\KeyScrambler\KeyScramblerIE.dll (QFX Software Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wot {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - Reg Error: Key error. File not found
O18 - Protocol\Handler\wot {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files (x86)\WOT\WOT.dll ()
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - Reg Error: Key error. - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O22:64bit: - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll (Stardock)
O27:64bit: - HKLM IFEO\discwizard.exe: Debugger - File not found
O27:64bit: - HKLM IFEO\mediabuilder.exe: Debugger - File not found
O27 - HKLM IFEO\discwizard.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" File not found
O27 - HKLM IFEO\mediabuilder.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005/10/18 23:55:48 | 000,000,000 | R--D | M] - H:\AutoRun -- [ UDF ]
O32 - AutoRun File - [2005/10/18 23:47:52 | 000,733,184 | R--- | M] (Electronic Arts Inc.) - H:\AutoRun.exe -- [ UDF ]
O32 - AutoRun File - [2005/10/18 23:55:12 | 000,000,167 | R--- | M] () - H:\autorun.inf -- [ UDF ]
O32 - AutoRun File - [2005/10/10 23:32:44 | 000,573,440 | R--- | M] (Electronic Arts Inc.) - H:\AutoRunGUI.dll -- [ UDF ]
O33 - MountPoints2\{73ddea6c-c578-11de-b3bf-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{73ddea6c-c578-11de-b3bf-806e6f6e6963}\Shell\AutoRun\command - "" = H:\AutoRun.exe -- [2005/10/18 23:47:52 | 000,733,184 | R--- | M] (Electronic Arts Inc.)
O33 - MountPoints2\H\Shell - "" = AutoRun
O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\EPSETUP.EXE
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/03/25 19:07:44 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2011/03/22 23:50:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2011/03/22 23:49:43 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2011/03/22 23:49:42 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2011/03/22 23:49:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2011/03/22 23:48:14 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2011/03/22 23:48:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour
[2011/03/22 21:07:06 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2011/03/22 21:07:06 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2011/03/22 21:07:06 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2011/03/22 21:04:55 | 000,000,000 | ---D | C] -- C:\Users\Utilisateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TubeMaster++
[2011/03/22 21:04:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TubeMaster++
[2011/03/21 21:45:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2011/03/18 09:11:52 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2011/03/17 00:01:24 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\sun
[2011/03/16 23:57:28 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.3
[2011/03/14 22:04:26 | 000,000,000 | ---D | C] -- C:\Users\Utilisateur\AppData\Local\Moovida
[2011/03/14 22:04:05 | 000,000,000 | ---D | C] -- C:\Users\Utilisateur\AppData\Roaming\moovida-1
[2011/03/13 15:53:20 | 000,000,000 | -H-D | C] -- C:\Windows\AxInstSV
[2011/03/13 15:49:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts
[2011/03/10 21:53:58 | 000,000,000 | ---D | C] -- C:\Users\Utilisateur\AppData\Roaming\Uniblue
[2011/03/09 20:48:36 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll
[2011/03/09 20:48:36 | 000,723,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EncDec.dll
[2011/03/09 20:48:35 | 001,118,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sbe.dll
[2011/03/09 20:48:35 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sbe.dll
[2011/03/09 20:48:35 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll
[2011/03/09 20:48:35 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EncDec.dll
[2011/03/09 20:48:35 | 000,259,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax
[2011/03/09 20:48:35 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax
[2011/03/09 20:48:21 | 001,544,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2011/03/09 20:48:21 | 001,076,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DWrite.dll
[2011/03/09 20:48:21 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
[2011/03/09 20:48:21 | 000,739,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d2d1.dll
[2011/03/08 22:12:54 | 000,000,000 | ---D | C] -- C:\Users\Utilisateur\AppData\Local\Electronic Arts
[2011/03/08 22:09:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Electronic Arts
[2011/02/28 22:18:03 | 000,000,000 | ---D | C] -- C:\Windows\Cache
[2011/02/27 13:42:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ad-Remover

========== Files - Modified Within 30 Days ==========

[2011/03/27 18:36:37 | 000,704,242 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat
[2011/03/27 18:36:37 | 000,615,810 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011/03/27 18:36:37 | 000,130,548 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat
[2011/03/27 18:36:37 | 000,106,190 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011/03/27 18:36:36 | 001,549,700 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011/03/27 15:51:31 | 000,015,024 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/03/27 15:51:31 | 000,015,024 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/03/27 15:44:08 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl
[2011/03/27 15:44:02 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/03/24 09:57:43 | 000,431,482 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2011/03/24 09:57:31 | 000,431,482 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.20110324-085743.backup
[2011/03/24 00:55:34 | 000,002,048 | ---- | M] () -- C:\Users\Utilisateur\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/03/22 23:36:04 | 000,000,700 | ---- | M] () -- C:\Users\Utilisateur\Desktop\MP 3.lnk
[2011/03/22 21:04:55 | 000,001,004 | ---- | M] () -- C:\Users\Utilisateur\Desktop\TubeMaster++.lnk
[2011/03/22 15:13:04 | 000,181,363 | ---- | M] () -- C:\Users\Utilisateur\Desktop\verres lunettes.odt
[2011/03/21 21:39:55 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll
[2011/03/21 21:39:55 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2011/03/21 21:39:55 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2011/03/21 21:39:55 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2011/03/20 22:18:08 | 000,000,264 | ---- | M] () -- C:\Windows\tasks\Epson Printer Software Downloader.job
[2011/03/20 11:25:22 | 000,073,728 | ---- | M] () -- C:\Users\Utilisateur\Desktop\FR relief.exe
[2011/03/20 11:00:03 | 000,000,242 | ---- | M] () -- C:\Windows\tasks\TuneUpUtilities_Task_BkGndMaintenance2011.job
[2011/03/18 21:48:11 | 000,001,935 | ---- | M] () -- C:\Users\Utilisateur\Desktop\EPU-6 Engine V1.01.14.lnk
[2011/03/18 21:48:11 | 000,001,935 | ---- | M] () -- C:\Users\Utilisateur\Application Data\Microsoft\Internet Explorer\Quick Launch\EPU-6 Engine V1.01.14.lnk
[2011/03/18 21:46:36 | 000,000,177 | -H-- | M] () -- C:\dvmexp.idx
[2011/03/17 08:03:11 | 000,295,008 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011/03/14 10:50:09 | 000,431,056 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.20110324-085731.backup
[2011/03/14 10:49:16 | 000,431,056 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.20110314-095009.backup
[2011/03/13 15:49:35 | 000,002,276 | ---- | M] () -- C:\Users\Public\Desktop\Harry Potter et la Coupe de Feu™.lnk
[2011/03/02 11:08:39 | 000,010,576 | ---- | M] () -- C:\Users\Utilisateur\Desktop\maths loic.ods
[2011/03/02 00:55:50 | 000,006,656 | ---- | M] () -- C:\Users\Utilisateur\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/03/01 21:16:39 | 000,018,960 | ---- | M] (Logitech, Inc.) -- C:\Windows\SysNative\drivers\LNonPnP.sys
[2011/02/28 22:21:00 | 000,137,344 | ---- | M] () -- C:\Windows\SysWow64\drivers\hwpsgt.sys
[2011/02/28 22:21:00 | 000,009,472 | ---- | M] () -- C:\Windows\SysWow64\drivers\lemsgt.sys
[2011/02/28 11:14:43 | 000,430,182 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.20110314-094916.backup
[2011/02/28 11:13:59 | 000,430,182 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.20110228-101443.backup
[2011/02/27 13:42:04 | 000,001,882 | ---- | M] () -- C:\Users\Utilisateur\Desktop\AD-R.lnk

========== Files Created - No Company Name ==========

[2011/03/24 00:55:03 | 000,001,137 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2011/03/22 23:40:31 | 000,000,700 | ---- | C] () -- C:\Users\Utilisateur\Desktop\MP 3.lnk
[2011/03/22 21:04:55 | 000,001,004 | ---- | C] () -- C:\Users\Utilisateur\Desktop\TubeMaster++.lnk
[2011/03/22 15:02:07 | 000,181,363 | ---- | C] () -- C:\Users\Utilisateur\Desktop\verres lunettes.odt
[2011/03/20 18:58:23 | 000,001,093 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 6.lnk
[2011/03/20 11:25:40 | 000,073,728 | ---- | C] () -- C:\Users\Utilisateur\Desktop\FR relief.exe
[2011/03/20 11:00:03 | 000,000,242 | ---- | C] () -- C:\Windows\tasks\TuneUpUtilities_Task_BkGndMaintenance2011.job
[2011/03/18 21:48:39 | 000,001,935 | ---- | C] () -- C:\Users\Utilisateur\Application Data\Microsoft\Internet Explorer\Quick Launch\EPU-6 Engine V1.01.14.lnk
[2011/03/18 21:48:11 | 000,001,935 | ---- | C] () -- C:\Users\Utilisateur\Desktop\EPU-6 Engine V1.01.14.lnk
[2011/03/13 15:49:35 | 000,002,276 | ---- | C] () -- C:\Users\Public\Desktop\Harry Potter et la Coupe de Feu™.lnk
[2011/02/28 21:22:29 | 000,137,344 | ---- | C] () -- C:\Windows\SysWow64\drivers\hwpsgt.sys
[2011/02/28 21:22:27 | 000,009,472 | ---- | C] () -- C:\Windows\SysWow64\drivers\lemsgt.sys
[2011/02/27 13:42:04 | 000,001,882 | ---- | C] () -- C:\Users\Utilisateur\Desktop\AD-R.lnk
[2010/12/30 22:14:23 | 000,111,932 | ---- | C] () -- C:\Windows\SysWow64\EPPICPrinterDB.dat
[2010/12/30 22:14:23 | 000,031,053 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern131.dat
[2010/12/30 22:14:23 | 000,027,417 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern121.dat
[2010/12/30 22:14:23 | 000,026,154 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern1.dat
[2010/12/30 22:14:23 | 000,024,903 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern3.dat
[2010/12/30 22:14:23 | 000,021,390 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern5.dat
[2010/12/30 22:14:23 | 000,020,148 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern2.dat
[2010/12/30 22:14:23 | 000,011,811 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern4.dat
[2010/12/30 22:14:23 | 000,004,943 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern6.dat
[2010/12/30 22:14:23 | 000,001,146 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_DU.dat
[2010/12/30 22:14:23 | 000,001,139 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_PT.dat
[2010/12/30 22:14:23 | 000,001,139 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_BP.dat
[2010/12/30 22:14:23 | 000,001,136 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_ES.dat
[2010/12/30 22:14:23 | 000,001,129 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_FR.dat
[2010/12/30 22:14:23 | 000,001,129 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_CF.dat
[2010/12/30 22:14:23 | 000,001,120 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_IT.dat
[2010/12/30 22:14:23 | 000,001,107 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_GE.dat
[2010/12/30 22:14:23 | 000,001,104 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_EN.dat
[2010/12/30 22:14:23 | 000,000,097 | ---- | C] () -- C:\Windows\SysWow64\PICSDK.ini
[2010/10/10 08:31:53 | 000,002,560 | ---- | C] () -- C:\Windows\_MSRSTRT.EXE
[2010/09/26 13:14:24 | 000,007,619 | ---- | C] () -- C:\Users\Utilisateur\AppData\Local\resmon.resmoncfg
[2010/09/25 20:41:45 | 000,006,656 | ---- | C] () -- C:\Users\Utilisateur\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/07/27 08:03:20 | 010,829,656 | ---- | C] () -- C:\Windows\SysWow64\LogiDPP.dll
[2010/07/27 08:03:20 | 000,102,744 | ---- | C] () -- C:\Windows\SysWow64\LogiDPPApp.exe
[2010/07/27 08:03:18 | 000,290,648 | ---- | C] () -- C:\Windows\SysWow64\DevManagerCore.dll
[2010/06/25 19:03:12 | 000,053,299 | ---- | C] () -- C:\Windows\SysWow64\pthreadVC.dll
[2010/06/12 08:23:19 | 000,000,411 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
[2009/12/06 16:47:29 | 000,090,112 | ---- | C] () -- C:\Windows\SendToClip.exe
[2009/10/31 22:42:06 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2009/10/31 14:52:06 | 000,000,760 | ---- | C] () -- C:\Users\Utilisateur\AppData\Roaming\setup_ldm.iss
[2009/10/30 23:22:34 | 000,278,528 | ---- | C] () -- C:\Program Files (x86)\Common Files\FDEUnInstaller.exe
[2009/10/30 19:34:24 | 000,024,576 | R--- | C] () -- C:\Windows\SysWow64\AsIO.dll
[2009/10/30 19:34:24 | 000,014,392 | R--- | C] () -- C:\Windows\SysWow64\drivers\AsIO.sys
[2009/10/30 19:34:20 | 000,011,832 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp64.sys
[2009/10/30 19:34:20 | 000,010,216 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp32.sys
[2009/10/30 19:30:17 | 000,031,259 | ---- | C] () -- C:\Windows\Ascd_log.ini
[2009/10/30 19:29:47 | 000,021,590 | ---- | C] () -- C:\Windows\Ascd_tmp.ini
[2009/10/30 19:22:27 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2009/07/14 07:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009/07/14 04:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009/07/14 04:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009/07/14 02:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009/07/14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2008/11/07 19:08:20 | 000,362,029 | ---- | C] () -- C:\Windows\SysWow64\sqlite3.dll
[2007/12/28 09:22:02 | 000,010,296 | ---- | C] () -- C:\Windows\SysWow64\drivers\ASUSHWIO.SYS
[2006/01/10 13:26:30 | 000,000,105 | ---- | C] () -- C:\Windows\oxygene.ini

< End of report >

par **TopXm** » 28 Mar 2011 08:59

Salut,

[EDIT]Hum, je suis en train de confondre deux sujets sur le coup là : comment-supprimer-autocompletepro-t37229.html#p253161

Je relis le sujet et j'édite, désolé

par **SAM.SUFFIXE** » 28 Mar 2011 09:15

bonjour TopXm

pas de problème , j'ai tardé à répondre ,si tu préfères en finir avec l'autre sujet , je saurai attendre, tu me relanceras quand tu reprendras mon dossier

ce sera plus facile pour tout le monde et surtout pour moi (sauf si tu vois qq chose de tordu dans mon rapport)

bonne journée à toi

par **TopXm** » 28 Mar 2011 09:38

Re,

No souci c'est juste que je m'étais un tantinet égaré

Tu relances OTL en tant qu'administrateur et tu colles les lignes suivantes sous Personnalisation

Code: Tout sélectionner: :OTL IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://search.autocompletepro.com/?si=10203&bi=400 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.autocompletepro.com/?si=10203&bi=400 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://search.autocompletepro.com/?si=10203&bi=400 FF - prefs.js..keyword.URL: "http://search.autocompletepro.com?si=10203&q=" O2:64bit: - BHO: (no name) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - No CLSID value found.

Tu cliques alors sur le bouton Correction
Tu patientes le temps du traitement et tu postes le rapport qui va s'afficher

par **SAM.SUFFIXE** » 28 Mar 2011 11:06

bonjour,

je te mets 2 rapports celui du correctif et la nouvelle analyse
courage à toi pour décortiquer tut cela
========== OTL ==========
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Default_Page_URL| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search\\Default_Search_URL| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search\\Search Page| /E : value set successfully!
Prefs.js: "http://search.autocompletepro.com?si=10203&q=" removed from keyword.URL
64bit-Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}\ deleted successfully.

OTL by OldTimer - Version 3.2.22.3 log created on 03282011_115507

voici le général :learn:

OTL logfile created on: 28/03/2011 11:55:47 - Run 2
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Utilisateur\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8080.16413)
Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy

6,00 Gb Total Physical Memory | 4,00 Gb Available Physical Memory | 71,00% Memory free
12,00 Gb Paging File | 10,00 Gb Available in Paging File | 85,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 146,39 Gb Total Space | 97,78 Gb Free Space | 66,79% Space Free | Partition Type: NTFS
Drive D: | 465,76 Gb Total Space | 376,90 Gb Free Space | 80,92% Space Free | Partition Type: NTFS
Drive E: | 319,28 Gb Total Space | 34,08 Gb Free Space | 10,67% Space Free | Partition Type: NTFS
Drive H: | 0,38 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: JPC | User Name: Utilisateur | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/03/27 18:22:43 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Utilisateur\Downloads\OTL.exe
PRC - [2011/03/16 11:55:25 | 000,421,032 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
PRC - [2011/03/01 16:47:56 | 002,296,696 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
PRC - [2011/01/10 16:24:20 | 000,993,848 | ---- | M] (Secunia) -- C:\Program Files (x86)\Secunia\PSI\psia.exe
PRC - [2011/01/10 16:24:20 | 000,399,416 | ---- | M] (Secunia) -- C:\Program Files (x86)\Secunia\PSI\sua.exe
PRC - [2011/01/10 16:24:20 | 000,291,896 | ---- | M] (Secunia) -- C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
PRC - [2010/12/18 08:55:00 | 000,267,944 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2010/09/10 00:09:36 | 001,511,424 | ---- | M] (Mortal Universe) -- C:\Program Files (x86)\POP Peeper\POPPeeper.exe
PRC - [2010/08/17 14:32:45 | 000,135,336 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2010/08/17 14:32:32 | 000,339,624 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe
PRC - [2010/08/17 14:32:32 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010/08/17 14:32:31 | 000,539,304 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe
PRC - [2010/05/18 19:05:54 | 003,150,336 | ---- | M] (Luis Cobian, CobianSoft) -- C:\Program Files (x86)\Cobian Backup 10\cbInterface.exe
PRC - [2010/05/18 19:05:52 | 000,421,376 | ---- | M] (Luis Cobian, CobianSoft) -- C:\Program Files (x86)\Cobian Backup 10\Cobian.exe
PRC - [2009/10/01 18:03:14 | 001,858,144 | ---- | M] (Emsi Software GmbH) -- C:\Program Files (x86)\a-squared Free\a2service.exe
PRC - [2009/05/25 15:56:18 | 005,391,872 | ---- | M] () -- C:\Program Files\ASUS\TurboV\TurboV.exe
PRC - [2009/05/25 11:33:50 | 006,017,024 | ---- | M] () -- C:\Program Files\ASUS\Six Engine\SixEngine.exe
PRC - [2009/04/29 11:02:01 | 000,270,336 | R--- | M] (LG Electronics) -- C:\Users\Utilisateur\Bluebirds\BlueBirds.exe
PRC - [2009/01/26 16:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
PRC - [2008/11/17 08:47:10 | 000,058,112 | ---- | M] (Space Sciences Laboratory) -- C:\Program Files (x86)\BOINC\boinctray.exe
PRC - [2004/05/02 19:02:51 | 000,062,464 | ---- | M] (Elias Fotinis) -- C:\Program Files (x86)\DeskPins\DeskPins.exe

========== Modules (SafeList) ==========

MOD - [2011/03/27 18:22:43 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Utilisateur\Downloads\OTL.exe
MOD - [2010/11/20 13:55:09 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
MOD - [2009/07/14 03:09:00 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\normaliz.dll

========== Win32 Services (SafeList) ==========

SRV:64bit: - [2011/02/04 14:37:38 | 000,341,296 | ---- | M] (Nitro PDF Software) [Auto | Running] -- C:\Program Files\Common Files\Nitro PDF\Reader\1.0\NitroPDFReaderDriverServicex64.exe -- (NitroReaderDriverReadSpool)
SRV:64bit: - [2010/11/16 02:32:14 | 000,343,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Fix it Center\Matsvc.exe -- (MatSvc)
SRV:64bit: - [2010/10/28 12:14:30 | 000,357,456 | ---- | M] (Logitech, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV:64bit: - [2009/08/18 03:36:20 | 000,203,264 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2009/07/14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2011/03/16 11:55:25 | 000,421,032 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE -- (AntiVirWebService)
SRV - [2011/03/01 16:47:56 | 002,296,696 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe -- (TeamViewer6)
SRV - [2011/01/10 16:24:20 | 000,993,848 | ---- | M] (Secunia) [Auto | Running] -- C:\Program Files (x86)\Secunia\PSI\PSIA.exe -- (Secunia PSI Agent)
SRV - [2011/01/10 16:24:20 | 000,399,416 | ---- | M] (Secunia) [Auto | Running] -- C:\Program Files (x86)\Secunia\PSI\sua.exe -- (Secunia Update Agent)
SRV - [2010/12/18 08:55:00 | 000,267,944 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010/09/12 16:30:52 | 000,251,248 | ---- | M] (CybelSoft) [On_Demand | Stopped] -- C:\Program Files (x86)\ma-config.com\maconfservice.exe -- (maconfservice)
SRV - [2010/08/17 14:32:45 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2010/08/17 14:32:32 | 000,339,624 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe -- (AntiVirMailService)
SRV - [2010/08/17 14:32:31 | 000,539,304 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe -- (AntiVirFirewallService)
SRV - [2010/06/25 19:07:20 | 000,117,264 | ---- | M] (CACE Technologies, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental)
SRV - [2010/05/18 14:40:18 | 000,067,584 | ---- | M] (CobianSoft, Luis Cobian) [Auto | Running] -- C:\Program Files (x86)\Cobian Backup 10\cbVSCService.exe -- (cbVSCService)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/10/01 18:03:14 | 001,858,144 | ---- | M] (Emsi Software GmbH) [Auto | Running] -- C:\Program Files (x86)\a-squared Free\a2service.exe -- (a2free)
SRV - [2009/06/10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009/04/02 06:27:27 | 000,090,112 | R--- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe -- (AsSysCtrlService)
SRV - [2009/02/18 16:31:56 | 000,294,912 | -H-- | M] (DeviceVM) [On_Demand | Stopped] -- C:\ASUS.SYS\config\DVMExportService.exe -- (DvmMDES)
SRV - [2009/01/26 16:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) [Auto | Running] -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe -- (SBSDWSCService)

========== Driver Services (SafeList) ==========

DRV:64bit: - [2011/02/18 17:36:58 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2010/12/18 08:55:05 | 000,083,120 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2010/11/20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 15:32:47 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/11/20 15:32:46 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2010/11/20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/09/01 10:30:58 | 000,017,976 | ---- | M] (Secunia) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\psi_mf.sys -- (PSI)
DRV:64bit: - [2010/08/24 19:29:32 | 000,057,936 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt)
DRV:64bit: - [2010/08/24 19:29:10 | 000,063,568 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt)
DRV:64bit: - [2010/08/24 19:29:10 | 000,013,392 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LHidEqd.sys -- (LHidEqd)
DRV:64bit: - [2010/08/24 19:28:58 | 000,074,320 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LEqdUsb.sys -- (LEqdUsb)
DRV:64bit: - [2010/08/17 14:32:55 | 000,126,792 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avfwot.sys -- (avfwot)
DRV:64bit: - [2010/08/17 14:32:55 | 000,116,568 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:64bit: - [2010/07/27 08:14:24 | 006,465,632 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvuvc64.sys -- (LVUVC64) Logitech Webcam 250(UVC)
DRV:64bit: - [2010/07/27 08:12:16 | 000,339,040 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvrs64.sys -- (LVRS64)
DRV:64bit: - [2010/07/27 08:11:38 | 000,271,712 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvpopf64.sys -- (lvpopf64)
DRV:64bit: - [2010/06/25 19:07:26 | 000,035,344 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\npf.sys -- (NPF)
DRV:64bit: - [2010/06/23 10:10:56 | 000,344,680 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2010/06/17 16:23:50 | 000,098,120 | ---- | M] (Avira GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\avfwim.sys -- (avfwim)
DRV:64bit: - [2010/05/13 11:20:32 | 000,711,712 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\timntr.sys -- (timounter)
DRV:64bit: - [2010/05/13 11:20:32 | 000,081,952 | ---- | M] (Acronis) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\tifsfilt.sys -- (tifsfilter)
DRV:64bit: - [2010/02/03 15:56:56 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:64bit: - [2009/10/07 02:45:50 | 000,030,232 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LVPr2M64.sys -- (LVPr2M64)
DRV:64bit: - [2009/10/04 23:33:48 | 000,131,184 | ---- | M] (QFX Software Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\keyscrambler.sys -- (KeyScrambler)
DRV:64bit: - [2009/08/18 04:48:48 | 006,037,504 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2009/07/14 16:36:28 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGBusEnum.sys -- (LGBusEnum)
DRV:64bit: - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/06/30 05:58:34 | 000,104,408 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\jraid.sys -- (JRAID)
DRV:64bit: - [2009/06/10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:64bit: - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/05/18 15:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2009/05/14 03:26:24 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)
DRV - [2011/02/28 22:21:00 | 000,137,344 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysWOW64\drivers\hwpsgt.sys -- (hwpsgt)
DRV - [2011/02/28 22:21:00 | 000,009,472 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysWOW64\drivers\lemsgt.sys -- (lemsgt)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://fr.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 2E 3D 40 12 20 21 CB 01 [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page =
IE - HKCU\..\URLSearchHook: {4daac69c-cba7-45e2-9bc8-1044483d3352} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "ACPro"
FF - prefs.js..browser.search.defaultenginename: "ACPro"
FF - prefs.js..browser.search.defaultthis.engineName: "Radio Bar 1 Customized Web Search"
FF - prefs.js..browser.search.openintab: true
FF - prefs.js..browser.search.order.1: "ACPro"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.com/webhp?hl=fr"
FF - prefs.js..extensions.enabledItems: autopager@mozilla.org:0.6.2.6
FF - prefs.js..extensions.enabledItems: tabscope@xuldev.org:1.1
FF - prefs.js..extensions.enabledItems: {02450954-cdd9-410f-b1da-db804e18c671}:0.96.3
FF - prefs.js..extensions.enabledItems: {3892FE4C-6DCB-4669-9D01-E23BB9FB61FB}:0.2.10
FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20110323
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: {dc572301-7619-498c-a57d-39143191b318}:0.3.8.5
FF - prefs.js..extensions.enabledItems: {ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}:1.4.1
FF - prefs.js..extensions.enabledItems: keyscrambler@qfx.software.corporation:2.6.0.0
FF - prefs.js..extensions.enabledItems: nosquint@urandom.ca:2.1
FF - prefs.js..extensions.enabledItems: quickdrag@mozilla.ktechcomputing.com:2.1.0.1
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.4
FF - prefs.js..extensions.enabledItems: vtzilla@virustotal.com:1.0
FF - prefs.js..extensions.enabledItems: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.8
FF - prefs.js..extensions.enabledItems: DeviceDetection@logitech.com:1.20.0.66
FF - prefs.js..extensions.enabledItems: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:2.0.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23

FF - HKLM\software\mozilla\Firefox\Extensions\\{3112ca9c-de6d-4884-a869-9855de68056c}: C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} [2009/12/16 00:37:50 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/03/24 00:55:02 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/03/25 21:37:17 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.9\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/03/06 12:36:12 | 000,000,000 | ---D | M]

[2010/05/14 09:51:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Extensions
[2009/12/04 22:51:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2011/03/27 09:57:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions
[2010/05/14 09:55:55 | 000,000,000 | ---D | M] (Screengrab) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\{02450954-cdd9-410f-b1da-db804e18c671}
[2010/05/14 09:55:55 | 000,000,000 | ---D | M] (MyWords) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\{3892FE4C-6DCB-4669-9D01-E23BB9FB61FB}
[2011/03/23 21:37:50 | 000,000,000 | ---D | M] (WOT) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2011/03/12 23:16:51 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011/03/12 23:16:49 | 000,000,000 | ---D | M] (Download Statusbar) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}
[2011/03/06 11:16:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\{dc572301-7619-498c-a57d-39143191b318}
[2011/03/12 23:16:49 | 000,000,000 | ---D | M] (DownThemAll!) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
[2010/11/17 21:52:43 | 000,000,000 | ---D | M] (FoxTab) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}
[2011/03/20 11:37:30 | 000,000,000 | ---D | M] ("AutoPager") -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\autopager@mozilla.org
[2010/12/17 14:29:55 | 000,000,000 | ---D | M] (Разпознаване на устройство Logitech) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\DeviceDetection@logitech.com
[2010/05/21 23:42:26 | 000,000,000 | ---D | M] (KeyScrambler) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\keyscrambler@qfx.software.corporation
[2011/01/06 22:22:59 | 000,000,000 | ---D | M] (NoSquint) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\nosquint@urandom.ca
[2011/03/09 00:29:22 | 000,000,000 | ---D | M] (QuickDrag) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\quickdrag@mozilla.ktechcomputing.com
[2011/02/04 00:52:26 | 000,000,000 | ---D | M] (Tab Scope) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\tabscope@xuldev.org
[2010/08/29 22:12:31 | 000,000,000 | ---D | M] (VTzilla) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\vtzilla@virustotal.com
[2011/03/06 11:16:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Utilisateur\AppData\Roaming\mozilla\Firefox\Profiles\eru5lgou.default\extensions\{dc572301-7619-498c-a57d-39143191b318}\modules\extensions
[2011/03/25 20:00:42 | 000,002,634 | ---- | M] () -- C:\Users\Utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\eru5lgou.default\searchplugins\pc-astuces.xml
[2011/03/22 21:07:09 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2011/02/04 01:08:07 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011/03/22 21:07:09 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011/03/21 21:40:19 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
File not found (No name found) --
() (No name found) -- C:\USERS\UTILISATEUR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ERU5LGOU.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2011/03/24 00:54:58 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\Mozilla Firefox\components\browsercomps.dll
[2011/03/21 21:39:57 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
[2010/12/22 22:11:45 | 000,003,189 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\acpro.xml
[2011/03/24 00:55:00 | 000,001,516 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\amazon-france.xml
[2011/03/24 00:55:00 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\bing.xml
[2011/03/24 00:55:00 | 000,001,822 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\cnrtl-tlfi-fr.xml
[2011/03/24 00:55:00 | 000,001,154 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\eBay-france.xml
[2011/03/24 00:55:00 | 000,001,426 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\wikipedia-fr.xml
[2011/03/24 00:55:00 | 000,000,956 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\yahoo-france.xml

O1 HOSTS File: ([2011/03/24 09:57:43 | 000,431,482 | R--- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 http://www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 http://www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 http://www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 http://www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 http://www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 http://www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 http://www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 http://www.100888290cs.com
O1 - Hosts: 127.0.0.1 http://www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 http://www.10sek.com
O1 - Hosts: 127.0.0.1 http://www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 127.0.0.1 123fporn.info
O1 - Hosts: 14850 more lines...
O2:64bit: - BHO: (KeyScramblerBHO Class) - {2B9F5787-88A5-4945-90E7-C4B18563BC5E} - C:\Program Files (x86)\KeyScrambler\x64\KeyScramblerIE.dll (QFX Software Corporation)
O2 - BHO: (KeyScramblerBHO Class) - {2B9F5787-88A5-4945-90E7-C4B18563BC5E} - C:\Program Files (x86)\KeyScrambler\KeyScramblerIE.dll (QFX Software Corporation)
O2 - BHO: (Video Download Toolbar Helper) - {83BD144C-5E53-4E12-8E99-5A7F1BBF3EA0} - C:\Program Files (x86)\Video Download Toolbar\v3.3.0.3\Video_Download_Toolbar.dll ()
O2 - BHO: (Video Download Toolbar IE Browser Helper Object) - {B29002A0-87A1-4DC4-AC55-5982034EB61E} - C:\Program Files (x86)\Video Download Toolbar\v3.3.0.3\resources\VideoDownloadToolbar.dll (Sakysoft s.r.l. uninominale)
O2 - BHO: (WOT Helper) - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files (x86)\WOT\WOT.dll ()
O3 - HKLM\..\Toolbar: (WOT) - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll ()
O3 - HKLM\..\Toolbar: (Video Download Toolbar) - {E52BE12D-A44A-4F51-9DC1-34F37A488CC7} - C:\Program Files (x86)\Video Download Toolbar\v3.3.0.3\Video_Download_Toolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (WOT) - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Video Download Toolbar) - {E52BE12D-A44A-4F51-9DC1-34F37A488CC7} - C:\Program Files (x86)\Video Download Toolbar\v3.3.0.3\Video_Download_Toolbar.dll ()
O4:64bit: - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [Launch LCDMon] C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe (Logitech Inc.)
O4:64bit: - HKLM..\Run: [Launch LGDCore] C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe (Logitech Inc.)
O4:64bit: - HKLM..\Run: [Launch LgDeviceAgent] C:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe (Logitech Inc.)
O4:64bit: - HKLM..\Run: [Logitech Download Assistant] C:\Windows\SysNative\LogiLDA.dll (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [Seagate Scheduler2 Service] File not found
O4:64bit: - HKLM..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [AcronisTimounterMonitor] File not found
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [boinctray] C:\Program Files (x86)\BOINC\boinctray.exe (Space Sciences Laboratory)
O4 - HKLM..\Run: [Cobian Backup 9 interface] File not found
O4 - HKLM..\Run: [DiscWizardMonitor.exe] File not found
O4 - HKLM..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe ()
O4 - HKLM..\Run: [TurboV] C:\Program Files\ASUS\TurboV\TurboV.exe ()
O4 - HKCU..\Run: [bluebirds] C:\Users\Utilisateur\Bluebirds\BlueBirds.exe (LG Electronics)
O4 - HKCU..\Run: [boincmgr] C:\Program Files (x86)\BOINC\boincmgr.exe (World Community Grid)
O4 - HKCU..\Run: [Cobian Backup 10] C:\Program Files (x86)\Cobian Backup 10\Cobian.exe (Luis Cobian, CobianSoft)
O4 - HKCU..\Run: [EPSON SX510W Series] File not found
O4 - HKCU..\Run: [Logitech Vid] File not found
O4 - HKCU..\Run: [Logitech Vid HD] File not found
O4 - HKCU..\Run: [POP Peeper] C:\Program Files (x86)\POP Peeper\POPPeeper.exe (Mortal Universe)
O4 - HKCU..\Run: [Screenpresso] C:\Users\Utilisateur\AppData\Local\LearnPulse\Screenpresso\Screenpresso.exe (LearnPulse)
O4 - HKCU..\Run: [SoftAuto.exe] File not found
O4 - Startup: C:\Users\Utilisateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DeskPins.lnk = C:\Program Files (x86)\DeskPins\DeskPins.exe (Elias Fotinis)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O9:64bit: - Extra 'Tools' menuitem : &KeyScrambler Options - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files (x86)\KeyScrambler\x64\KeyScramblerIE.dll (QFX Software Corporation)
O9 - Extra 'Tools' menuitem : &KeyScrambler Options - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files (x86)\KeyScrambler\KeyScramblerIE.dll (QFX Software Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wot {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - Reg Error: Key error. File not found
O18 - Protocol\Handler\wot {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files (x86)\WOT\WOT.dll ()
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - Reg Error: Key error. - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O22:64bit: - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll (Stardock)
O27:64bit: - HKLM IFEO\discwizard.exe: Debugger - File not found
O27:64bit: - HKLM IFEO\mediabuilder.exe: Debugger - File not found
O27 - HKLM IFEO\discwizard.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" File not found
O27 - HKLM IFEO\mediabuilder.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/04/29 11:02:01 | 000,000,055 | R--- | M] () - H:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{73ddea6c-c578-11de-b3bf-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{73ddea6c-c578-11de-b3bf-806e6f6e6963}\Shell\AutoRun\command - "" = H:\BlueBirds.exe -- [2009/04/29 11:02:01 | 000,270,336 | R--- | M] (LG Electronics)
O33 - MountPoints2\H\Shell - "" = AutoRun
O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\EPSETUP.EXE
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/03/28 11:55:07 | 000,000,000 | ---D | C] -- C:\_OTL
[2011/03/25 19:07:44 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2011/03/22 23:50:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2011/03/22 23:49:43 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2011/03/22 23:49:42 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2011/03/22 23:49:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2011/03/22 23:48:14 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2011/03/22 23:48:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour
[2011/03/22 21:07:06 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2011/03/22 21:07:06 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2011/03/22 21:07:06 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2011/03/22 21:04:55 | 000,000,000 | ---D | C] -- C:\Users\Utilisateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TubeMaster++
[2011/03/22 21:04:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TubeMaster++
[2011/03/21 21:45:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2011/03/18 09:11:52 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2011/03/17 00:01:24 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\sun
[2011/03/16 23:57:28 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.3
[2011/03/14 22:04:26 | 000,000,000 | ---D | C] -- C:\Users\Utilisateur\AppData\Local\Moovida
[2011/03/14 22:04:05 | 000,000,000 | ---D | C] -- C:\Users\Utilisateur\AppData\Roaming\moovida-1
[2011/03/13 15:53:20 | 000,000,000 | -H-D | C] -- C:\Windows\AxInstSV
[2011/03/13 15:49:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts
[2011/03/10 21:53:58 | 000,000,000 | ---D | C] -- C:\Users\Utilisateur\AppData\Roaming\Uniblue
[2011/03/09 20:48:36 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll
[2011/03/09 20:48:36 | 000,723,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EncDec.dll
[2011/03/09 20:48:35 | 001,118,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sbe.dll
[2011/03/09 20:48:35 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sbe.dll
[2011/03/09 20:48:35 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll
[2011/03/09 20:48:35 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EncDec.dll
[2011/03/09 20:48:35 | 000,259,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax
[2011/03/09 20:48:35 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax
[2011/03/09 20:48:21 | 001,544,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2011/03/09 20:48:21 | 001,076,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DWrite.dll
[2011/03/09 20:48:21 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
[2011/03/09 20:48:21 | 000,739,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d2d1.dll
[2011/03/08 22:12:54 | 000,000,000 | ---D | C] -- C:\Users\Utilisateur\AppData\Local\Electronic Arts
[2011/03/08 22:09:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Electronic Arts
[2011/02/28 22:18:03 | 000,000,000 | ---D | C] -- C:\Windows\Cache
[2011/02/27 13:42:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ad-Remover

========== Files - Modified Within 30 Days ==========

[2011/03/28 10:11:19 | 000,015,024 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/03/28 10:11:19 | 000,015,024 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/03/28 09:03:46 | 001,549,700 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011/03/28 09:03:46 | 000,704,242 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat
[2011/03/28 09:03:46 | 000,615,810 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011/03/28 09:03:46 | 000,130,548 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat
[2011/03/28 09:03:46 | 000,106,190 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011/03/28 08:57:41 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl
[2011/03/28 08:57:34 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/03/27 20:05:47 | 397,008,981 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2011/03/24 09:57:43 | 000,431,482 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2011/03/24 09:57:31 | 000,431,482 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.20110324-085743.backup
[2011/03/24 00:55:34 | 000,002,048 | ---- | M] () -- C:\Users\Utilisateur\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/03/22 23:36:04 | 000,000,700 | ---- | M] () -- C:\Users\Utilisateur\Desktop\MP 3.lnk
[2011/03/22 21:04:55 | 000,001,004 | ---- | M] () -- C:\Users\Utilisateur\Desktop\TubeMaster++.lnk
[2011/03/22 15:13:04 | 000,181,363 | ---- | M] () -- C:\Users\Utilisateur\Desktop\verres lunettes.odt
[2011/03/21 21:39:55 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll
[2011/03/21 21:39:55 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2011/03/21 21:39:55 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2011/03/21 21:39:55 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2011/03/20 22:18:08 | 000,000,264 | ---- | M] () -- C:\Windows\tasks\Epson Printer Software Downloader.job
[2011/03/20 11:25:22 | 000,073,728 | ---- | M] () -- C:\Users\Utilisateur\Desktop\FR relief.exe
[2011/03/20 11:00:03 | 000,000,242 | ---- | M] () -- C:\Windows\tasks\TuneUpUtilities_Task_BkGndMaintenance2011.job
[2011/03/18 21:48:11 | 000,001,935 | ---- | M] () -- C:\Users\Utilisateur\Desktop\EPU-6 Engine V1.01.14.lnk
[2011/03/18 21:48:11 | 000,001,935 | ---- | M] () -- C:\Users\Utilisateur\Application Data\Microsoft\Internet Explorer\Quick Launch\EPU-6 Engine V1.01.14.lnk
[2011/03/18 21:46:36 | 000,000,177 | -H-- | M] () -- C:\dvmexp.idx
[2011/03/17 08:03:11 | 000,295,008 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011/03/14 10:50:09 | 000,431,056 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.20110324-085731.backup
[2011/03/14 10:49:16 | 000,431,056 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.20110314-095009.backup
[2011/03/13 15:49:35 | 000,002,276 | ---- | M] () -- C:\Users\Public\Desktop\Harry Potter et la Coupe de Feu™.lnk
[2011/03/02 11:08:39 | 000,010,576 | ---- | M] () -- C:\Users\Utilisateur\Desktop\maths loic.ods
[2011/03/02 00:55:50 | 000,006,656 | ---- | M] () -- C:\Users\Utilisateur\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/03/01 21:16:39 | 000,018,960 | ---- | M] (Logitech, Inc.) -- C:\Windows\SysNative\drivers\LNonPnP.sys
[2011/02/28 22:21:00 | 000,137,344 | ---- | M] () -- C:\Windows\SysWow64\drivers\hwpsgt.sys
[2011/02/28 22:21:00 | 000,009,472 | ---- | M] () -- C:\Windows\SysWow64\drivers\lemsgt.sys
[2011/02/28 11:14:43 | 000,430,182 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.20110314-094916.backup
[2011/02/28 11:13:59 | 000,430,182 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.20110228-101443.backup
[2011/02/27 13:42:04 | 000,001,882 | ---- | M] () -- C:\Users\Utilisateur\Desktop\AD-R.lnk

========== Files Created - No Company Name ==========

[2011/03/27 20:05:47 | 397,008,981 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2011/03/24 00:55:03 | 000,001,137 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2011/03/22 23:40:31 | 000,000,700 | ---- | C] () -- C:\Users\Utilisateur\Desktop\MP 3.lnk
[2011/03/22 21:04:55 | 000,001,004 | ---- | C] () -- C:\Users\Utilisateur\Desktop\TubeMaster++.lnk
[2011/03/22 15:02:07 | 000,181,363 | ---- | C] () -- C:\Users\Utilisateur\Desktop\verres lunettes.odt
[2011/03/20 18:58:23 | 000,001,093 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 6.lnk
[2011/03/20 11:25:40 | 000,073,728 | ---- | C] () -- C:\Users\Utilisateur\Desktop\FR relief.exe
[2011/03/20 11:00:03 | 000,000,242 | ---- | C] () -- C:\Windows\tasks\TuneUpUtilities_Task_BkGndMaintenance2011.job
[2011/03/18 21:48:39 | 000,001,935 | ---- | C] () -- C:\Users\Utilisateur\Application Data\Microsoft\Internet Explorer\Quick Launch\EPU-6 Engine V1.01.14.lnk
[2011/03/18 21:48:11 | 000,001,935 | ---- | C] () -- C:\Users\Utilisateur\Desktop\EPU-6 Engine V1.01.14.lnk
[2011/03/13 15:49:35 | 000,002,276 | ---- | C] () -- C:\Users\Public\Desktop\Harry Potter et la Coupe de Feu™.lnk
[2011/02/28 21:22:29 | 000,137,344 | ---- | C] () -- C:\Windows\SysWow64\drivers\hwpsgt.sys
[2011/02/28 21:22:27 | 000,009,472 | ---- | C] () -- C:\Windows\SysWow64\drivers\lemsgt.sys
[2011/02/27 13:42:04 | 000,001,882 | ---- | C] () -- C:\Users\Utilisateur\Desktop\AD-R.lnk
[2010/12/30 22:14:23 | 000,111,932 | ---- | C] () -- C:\Windows\SysWow64\EPPICPrinterDB.dat
[2010/12/30 22:14:23 | 000,031,053 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern131.dat
[2010/12/30 22:14:23 | 000,027,417 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern121.dat
[2010/12/30 22:14:23 | 000,026,154 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern1.dat
[2010/12/30 22:14:23 | 000,024,903 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern3.dat
[2010/12/30 22:14:23 | 000,021,390 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern5.dat
[2010/12/30 22:14:23 | 000,020,148 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern2.dat
[2010/12/30 22:14:23 | 000,011,811 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern4.dat
[2010/12/30 22:14:23 | 000,004,943 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern6.dat
[2010/12/30 22:14:23 | 000,001,146 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_DU.dat
[2010/12/30 22:14:23 | 000,001,139 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_PT.dat
[2010/12/30 22:14:23 | 000,001,139 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_BP.dat
[2010/12/30 22:14:23 | 000,001,136 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_ES.dat
[2010/12/30 22:14:23 | 000,001,129 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_FR.dat
[2010/12/30 22:14:23 | 000,001,129 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_CF.dat
[2010/12/30 22:14:23 | 000,001,120 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_IT.dat
[2010/12/30 22:14:23 | 000,001,107 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_GE.dat
[2010/12/30 22:14:23 | 000,001,104 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_EN.dat
[2010/12/30 22:14:23 | 000,000,097 | ---- | C] () -- C:\Windows\SysWow64\PICSDK.ini
[2010/10/10 08:31:53 | 000,002,560 | ---- | C] () -- C:\Windows\_MSRSTRT.EXE
[2010/09/26 13:14:24 | 000,007,619 | ---- | C] () -- C:\Users\Utilisateur\AppData\Local\resmon.resmoncfg
[2010/09/25 20:41:45 | 000,006,656 | ---- | C] () -- C:\Users\Utilisateur\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/07/27 08:03:20 | 010,829,656 | ---- | C] () -- C:\Windows\SysWow64\LogiDPP.dll
[2010/07/27 08:03:20 | 000,102,744 | ---- | C] () -- C:\Windows\SysWow64\LogiDPPApp.exe
[2010/07/27 08:03:18 | 000,290,648 | ---- | C] () -- C:\Windows\SysWow64\DevManagerCore.dll
[2010/06/25 19:03:12 | 000,053,299 | ---- | C] () -- C:\Windows\SysWow64\pthreadVC.dll
[2010/06/12 08:23:19 | 000,000,411 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
[2009/12/06 16:47:29 | 000,090,112 | ---- | C] () -- C:\Windows\SendToClip.exe
[2009/10/31 22:42:06 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2009/10/31 14:52:06 | 000,000,760 | ---- | C] () -- C:\Users\Utilisateur\AppData\Roaming\setup_ldm.iss
[2009/10/30 23:22:34 | 000,278,528 | ---- | C] () -- C:\Program Files (x86)\Common Files\FDEUnInstaller.exe
[2009/10/30 19:34:24 | 000,024,576 | R--- | C] () -- C:\Windows\SysWow64\AsIO.dll
[2009/10/30 19:34:24 | 000,014,392 | R--- | C] () -- C:\Windows\SysWow64\drivers\AsIO.sys
[2009/10/30 19:34:20 | 000,011,832 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp64.sys
[2009/10/30 19:34:20 | 000,010,216 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp32.sys
[2009/10/30 19:30:17 | 000,031,259 | ---- | C] () -- C:\Windows\Ascd_log.ini
[2009/10/30 19:29:47 | 000,021,590 | ---- | C] () -- C:\Windows\Ascd_tmp.ini
[2009/10/30 19:22:27 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2009/07/14 07:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009/07/14 04:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009/07/14 04:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009/07/14 02:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009/07/14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2008/11/07 19:08:20 | 000,362,029 | ---- | C] () -- C:\Windows\SysWow64\sqlite3.dll
[2007/12/28 09:22:02 | 000,010,296 | ---- | C] () -- C:\Windows\SysWow64\drivers\ASUSHWIO.SYS
[2006/01/10 13:26:30 | 000,000,105 | ---- | C] () -- C:\Windows\oxygene.ini

< End of report >

par **TopXm** » 28 Mar 2011 14:11

Re,

OK normalement tu ne devrais plus avoir de soucis avec AutoCompletionPro, tu confirmes ?

Par contre c'est quoi ton lecteur H: ?

par **SAM.SUFFIXE** » 28 Mar 2011 14:29

hello,

si je tape dans la barre d'adresse "météo" là à l'instant
voici le résultat

http://search.autocompletepro.com/?si=10203&q=meteo

pour h c'est le lecteur DVD RW de marque LG

@+ SAM

par **TopXm** » 28 Mar 2011 14:50

OK bon on va ratisser plus large,

Quel navigateur ta recherche ?

par **SAM.SUFFIXE** » 28 Mar 2011 14:56

FIREFOX 4
MAIS SUR LE 3.6 çà le faisait déjà

par **TopXm** » 28 Mar 2011 14:57

Passes un coup de MBAM : http://www.libellules.ch/dotclear/index ... lware-mbam

Double clique sur le fichier téléchargé pour lancer le processus d'installation.
Dans l'onglet "Mise à jour", clique sur le bouton "Recherche de mise à jour": si le pare-feu demande l'autorisation à MBAM de se connecter, accepte.
Une fois la mise à jour terminée, rends-toi dans l'onglet "Recherche".
Sélectionne "Exécuter un examen rapide"
Clique sur "Rechercher"
L'analyse démarre.
A la fin de l'analyse (mais ce n'est pas fini), un message s'affiche :
L'examen s'est terminé normalement. Clique sur 'Afficher les résultats' pour afficher tous les objets trouvés.

Clique sur "Ok" pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi. N'oublie pas la suite.
Ferme tes navigateurs.
Si des malwares ont été détectés, clique sur Afficher les résultats.
Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport et poste-le dans ta prochaine réponse.

NB : Si MBAM te demande à redémarrer, fais-le.
Pour récupérer le rapport de MBAM si tu as redémarré un peu vite, démarre MBAM et va dans l'onglet log/rapports, tu pourras double cliquer dessus (ils sont datés) pour le poster.

par **SAM.SUFFIXE** » 28 Mar 2011 15:02

re

j'ai fait spyboot et MBAM complet ce jour même tout est clean

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Version de la base de données: 6190

Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8080.16413

28/03/2011 14:28:05
mbam-log-2011-03-28 (14-28-05).txt

Type d'examen: Examen complet (C:\|D:\|E:\|)
Elément(s) analysé(s): 334794
Temps écoulé: 2 heure(s), 1 minute(s), 2 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Autocompletepro je voudrais l'auto-virer

Autocompletepro je voudrais l'auto-virer

Re: Autocompletepro je voudrais l'auto-virer

Re: Autocompletepro je voudrais l'auto-virer

Re: Autocompletepro je voudrais l'auto-virer

Re: Autocompletepro je voudrais l'auto-virer

Re: Autocompletepro je voudrais l'auto-virer

Re: Autocompletepro je voudrais l'auto-virer

Re: Autocompletepro je voudrais l'auto-virer

Re: Autocompletepro je voudrais l'auto-virer

Re: Autocompletepro je voudrais l'auto-virer

Re: Autocompletepro je voudrais l'auto-virer

Re: Autocompletepro je voudrais l'auto-virer

Re: Autocompletepro je voudrais l'auto-virer

Re: Autocompletepro je voudrais l'auto-virer

Re: Autocompletepro je voudrais l'auto-virer

Re: Autocompletepro je voudrais l'auto-virer

Re: Autocompletepro je voudrais l'auto-virer

Re: Autocompletepro je voudrais l'auto-virer

Re: Autocompletepro je voudrais l'auto-virer

Re: Autocompletepro je voudrais l'auto-virer

Qui est en ligne