Bonjour,
J'ai un probleme avec ma page d'accueil, j'ai telechargé le rapport HIjackthis, je vous l'envoie
Merci beaucoup
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:58:27, on 16/11/2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16869)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe
C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil11e_ActiveX.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\SysWOW64\msiexec.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://pentoweb.net/pt5.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=cc0d7f5b0000000000004487fcadedda&tlver=1.4.19.19&ss=1&affID=18026
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {48405d3d-2674-4cd8-b1ef-9a719443bd3f} - (no file)
R3 - URLSearchHook: (no name) - {590ee40d-ab7d-4ed9-b49c-3cc11ad38edf} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
O4 - HKLM\..\Run: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d
O4 - HKLM\..\Run: [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
O4 - HKLM\..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
O4 - HKLM\..\Run: [Hotkey Utility] C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
O4 - HKLM\..\Run: [MDS_Menu] "C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso" UpdateWithCreateOnce "Software\CyberLink\MediaShow Espresso\5.6"
O4 - HKLM\..\Run: [ArcadeMovieService] "C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [BlackBerryAutoUpdate] C:\Program Files (x86)\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe /background
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files (x86)\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [EPSON Stylus DX4400 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATICAE.EXE /FU "C:\Windows\TEMP\E_S5169.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [optical] C:\Program Files (x86)\rbjcl.vbs
O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Startup: OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (AudioSrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe
O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe
O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe
O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\netprofm.dll,-202 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\sysWow64\perfhost.exe,-2 (PerfHost) - Unknown owner - C:\Windows\SysWow64\perfhost.exe
O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files (x86)\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files (x86)\Roxio\Digital Home 9\RoxioUpnpService9.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppuinotify.dll,-103 (sppuinotify) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\themeservice.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Updater Service - Acer Group - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: USBS3S4Detection - Unknown owner - C:\OEM\USBDECTION\USBS3S4Detection.exe
O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe
O23 - Service: Windows Update (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\Windows\system32\svchost.exe

--
End of file - 25397 bytes

Bonjour charlisa,

Très Important!

>>> A faire immédiatement:
- Sauvegarder (en copiant) tous les documents personnels sur un support autre que la partition système: Clé USB, CD/DVD, Disque Dur externe etc.
- TeaTimer de Spybot-S&D peut interférer avec nos utilitaires et causer certains problèmes. Le désactiver dès maintenant s'il est installé sur la machine à traiter: Lancer Spybot-S&D => "Mode Avancé". Outils (à gauche) => "Résident" et Décocher "Résident TeaTimer (...)" => OK.
>>> Que faire durant ce nettoyage: Merci de NE PAS utiliser, installer et/ou désinstaller aucun programme à part ceux qui sont proposés à chaque étape ce qui a pour but d'éviter tout problème d'incompatibilité entre les outils.

>>> Que faire à la réception de nouvelles instructions:

• Lire la totalité du message.
• Certains programmes peuvent créer des problèmes s'ils ne sont pas lancés depuis le Bureau. Aussi, il est demandé de les télécharger et enregistrer DIRECTEMENT sur le Bureau (ou les déplacer avant utilisation par un clic-droit dessus => "Couper" puis clic-droit sur le Bureau => "Coller").
• Procéder toujours dans l'ordre donné et demander des clarifications si nécessaire AVANT de commencer.
• NE PAS hésiter à commenter et signaler tout changement (en bien ou en mal) dans le comportement de la machine ou par rapport au problème initial.

>>> Comment répondre:
- Cliquer sur le bouton Répondre (et non sur Citer car je n'ai pas besoin de relire mes messages précédents).
- Coller le contenu des rapports SANS y ajouter AUCUN formatage de texte (en citation, code, couleur etc...), le but étant pour nous faciliter leur interprétation.
De mon côté, j'utilise certains formatages de texte et/ ou certaines couleurs NON PAS pour faire joli mais juste pour attirer l'attention sur certains points afin d'éviter toute mauvaise manipulation risquant de créer des problèmes.

>>> Ne pas abandonner son sujet avant d'être informé(e) que tout est OK.
============================

Donne plus de détails sur ton problème stp! Ta page ne s'affiche pas, longue à s'ouvrir, redirigée vers autre chose... Est-ce le seul souci avec ta machine?

>>> ZHPDiag/ Analyse: Télécharger, sur le Bureau ZHPDiag (par Nicolas Coolman) depuis ici.
Cliquer-droit sur "ZHPDiag.exe" => "Exécuter en tant qu'administrateur" pour lancer l'installation du programme. Suivre les instructions jusqu'à la fin.
Fermer toutes les applications et fenêtres ouvertes et lancer le programme via l'icône "ZHPDiag" ou "Démarrer" => "Tous les programmes" => "ZHP" => "ZHPDiag". Cliquer sur Lancer le diagnostic (loupe) et patienter jusqu'à la fin (En cas de blocage sur O80, cliquez sur le tournevis pour le décocher).
Un rapport ZHPDiag.txt sera généré et sauvegardé automatiquement sur le Bureau.
Ne pas le poster directement ici car souvent trop long pour les limites du forum mais,
Aller sur le site : cjoint.com
Cliquer sur Parcourir, chercher le fichier et cliquer dessus. Cliquer sur Créer le lien CJoint.
Dans la page suivante --> , une adresse (http//...) sera créée. La copier /coller dans la prochaine réponse.

Bonjour,
Merci pour cette réponse rapide. En ce qui concerne ma page d'accueil, je dois la remettre par defaut à chaque fois que j'ouvre internet. je n'ai pas d'autres soucis.
Bonne journée et encore merci pour vos conseils.

http://cjoint.com/?AKsrA4k8RSQ
La page d'accueil redamarre toujours sur multiexplore.com.
Merci de nous aider à résoudre notre problème.
Cordialement

Bonjour,

Pas de traces de "multiexplore.com"! On verra dans l'ancement du nettoyage.

Imprimer ces instructions ou les enregistrer dans un fichier texte sur le Bureau pour les consulter facilement à tout moment.

>>> Programmes P2P: Ton rapport montre la présence de programme P2P (eMule...) installé dans ta machine.
- Tout ce qui est lié aux applications type P2P/ Torrent devient de plus en plus dangereux pour les machines et les documents personnels et/ ou confidentiels qui y sont stockés.
Fini le partage entre des gens honnêtes. Les pirates, aussi, veulent partager avec le maximum d'internautes et mettent à disposition leurs applications partout où ils peuvent sous de faux noms aussi attractifs que possibles, des Cracks, keygen etc.
C'est OK, les programmes P2P ne sont pas tous dangereux en eux-mêmes (et c'est la preuve qu'il y en a qui le sont ) mais qui sait avec certitude lequel est bon et lequel est dangereux?.
- Penser au principe même de ce type de réseau qui n'est en rien bénéfique: Vous autoriser tout le monde à utiliser votre bande passante ce qui peut ralentir considérablement votre système et communiquer avec votre machine ce qui peut faciliter la tâche aux intrus pour déposer des bombes à retardement.
- En adhérant à ce type de réseau, non seulement, vous ouvrez délibérément des portes à tout et n'importe quoi mais aussi, vous forcez votre pare-feu et antivirus à les tolérer (c'est compris dans la procédure d'installation). On s'étonne après de ce qui arrive à sa machine ou on accuse son antivirus.
Prendre la sage décision de désinstaller tout programme de ce type et rester à l'écart de ce type de réseaux.
Les fichiers/dossiers détectés sont listés ci-dessous pour être supprimés par ZHPFix.


>>> Utiliser ZHPFix: Sélectionner et copier le texte suivant (à partir de R1):

R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.babylon.com
[HKCU\Software\AppDataLow\Software\PriceGong]
O69 - SBI: SearchScopes [HKCU] {1F096B29-E9DA-4D64-8D63-936BE7762CC5} - (Search the web (Babylon)) - http://search.babylon.com
[HKLM\Software\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4a99-B4B6-146BF802613B}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4a99-B4B6-146BF802613B}]
[HKLM\Software\WOW6432Node\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49dd-99D7-DC866BE87DBC}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49dd-99D7-DC866BE87DBC}]
[HKLM\Software\WOW6432Node\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}]
[HKLM\Software\WOW6432Node\Classes\CLSID\{E46C8196-B634-44a1-AF6E-957C64278AB1}]
[HKCU\Software\AppDataLow\Software\PriceGong]
C:\Users\HALLART Manuel\AppData\LocalLow\BabylonToolbar
C:\Users\HALLART Manuel\AppData\LocalLow\PriceGong
R3 - URLSearchHook: (no name) [64Bits] - {590ee40d-ab7d-4ed9-b49c-3cc11ad38edf} . (...) (No version) -- (.not file.)
O43 - CFD: 24/08/2011 - 06:22:22 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{00426E9F-BF54-4DB1-99C4-E0131DD957F8}
O43 - CFD: 21/08/2011 - 07:31:10 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{01C38F78-25D4-4867-9269-0B1154081AFB}
O43 - CFD: 03/08/2011 - 07:56:06 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{03449E14-8410-4377-B645-A62DBAFAB3C1}
O43 - CFD: 22/07/2011 - 19:11:08 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{03AA682E-BF1A-45F3-A91C-80F56AFEA89B}
O43 - CFD: 04/09/2011 - 10:51:28 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{06922057-77E1-47C3-BBE8-E5884CAB5646}
O43 - CFD: 05/10/2011 - 05:52:10 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{069362B1-4E8B-4E03-A65C-09E32C990B77}
O43 - CFD: 22/08/2011 - 10:04:12 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{06D767E3-AE29-48C1-8747-4EE151A74B2F}
O43 - CFD: 16/07/2011 - 18:33:22 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{07319DB2-527A-4699-9F2C-322088FD49F2}
O43 - CFD: 16/09/2011 - 15:42:52 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{08A53E10-7A03-4CF3-87EF-5CB4E0C9DC9B}
O43 - CFD: 29/09/2011 - 07:09:18 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{095D955C-FBFA-4B04-ACE5-78B756A55B09}
O43 - CFD: 18/07/2011 - 09:59:46 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{0C8C9A23-9561-43D6-9DCD-C7258633B25A}
O43 - CFD: 02/10/2011 - 06:34:30 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{0E477573-1A58-4AE4-BFF3-CF40BE27C7B9}
O43 - CFD: 06/10/2011 - 18:43:20 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{0EAF62F0-620C-4234-9C58-7659BA42CFDF}
O43 - CFD: 06/09/2011 - 11:47:00 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{0F3B894D-E1AC-470A-AFD2-1AD3CDC8C64E}
O43 - CFD: 17/11/2011 - 08:45:50 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{0F478C16-29AD-49D2-B4C4-83B7F5DD8B88}
O43 - CFD: 24/09/2011 - 06:52:06 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{10087408-BF90-41EB-AA10-C9855E1BE3DD}
O43 - CFD: 17/07/2011 - 21:59:10 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{1139CDEC-B927-48B7-8482-B0CE7E5AA0DF}
O43 - CFD: 17/09/2011 - 07:07:48 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{11B5662A-242E-431C-8E5C-37218D79E269}
O43 - CFD: 22/07/2011 - 06:41:30 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{13545164-C776-4E25-915D-DCD0EFFBAEDD}
O43 - CFD: 25/07/2011 - 06:58:08 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{1433D429-26E0-4D79-8934-4C8302347256}
O43 - CFD: 23/08/2011 - 07:07:34 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{1523247F-4FC2-46EF-AC55-EAA608DB2365}
O43 - CFD: 02/10/2011 - 19:27:48 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{1570294E-EECB-4CF0-B6EC-7F963333392C}
O43 - CFD: 22/08/2011 - 10:04:02 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{178844D1-2214-4FE0-B1BB-6E6B3617E183}
O43 - CFD: 13/09/2011 - 17:30:46 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{179997F3-4C97-423F-A3BC-4BF33F1AFB65}
O43 - CFD: 14/09/2011 - 18:14:28 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{1823F0F6-E9BD-4A7C-A8F7-2C6CB883B8F1}
O43 - CFD: 01/09/2011 - 06:18:32 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{186E29D9-C795-4BA5-AA11-DE936F764048}
O43 - CFD: 21/09/2011 - 10:46:06 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{1A6D6790-8EE1-4D26-86F7-469A445B07D9}
O43 - CFD: 17/07/2011 - 08:03:58 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{1A941024-A29B-4C00-8CE4-CFD80DD0B436}
O43 - CFD: 01/09/2011 - 06:18:14 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{1BC736F6-31AB-4EA7-B7A6-4C3C1D70A277}
O43 - CFD: 22/09/2011 - 05:43:06 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{1BD9D388-A425-4016-A3BB-AC4D0A009013}
O43 - CFD: 03/09/2011 - 07:09:20 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{1BE6B0E0-DB53-428B-9832-66827929E476}
O43 - CFD: 07/11/2011 - 18:11:24 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{1BF61949-0DCE-4BD5-AE40-5ED259FD024D}
O43 - CFD: 23/07/2011 - 07:11:50 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{1CC13DB4-FC2F-46D8-8031-A36FA78F3EA4}
O43 - CFD: 05/08/2011 - 07:02:40 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{1FB91C76-3FD1-4E14-A857-E6EFE8F95CCD}
O43 - CFD: 27/06/2011 - 17:19:04 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{20CE5ECC-2BCA-4014-85D0-C58B6A58F368}
O43 - CFD: 09/08/2011 - 07:19:16 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{20ED8A0F-3304-424A-9A99-49B16EB389B4}
O43 - CFD: 02/10/2011 - 19:27:58 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{26CBDA04-56C2-4833-835C-AE140743FD02}
O43 - CFD: 29/09/2011 - 07:08:56 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{279FD4E0-DB6F-4388-AEFB-5C22753D00CB}
O43 - CFD: 23/09/2011 - 14:24:10 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{28225D91-57FE-4FE9-B3CD-7AE071BF09CA}
O43 - CFD: 11/09/2011 - 11:34:34 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{2A1E4CAF-DE8A-4D0B-9635-7969CC5EB963}
O43 - CFD: 28/06/2011 - 06:48:04 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{2CD81669-5D58-4C1D-B908-326CA6B424CD}
O43 - CFD: 05/10/2011 - 05:51:58 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{2D3C601C-BC5A-435F-B30F-3BCD5E88B82E}
O43 - CFD: 22/09/2011 - 18:15:02 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{2E926E3E-608F-4E99-B322-09BC8B0B4EE1}
O43 - CFD: 07/07/2011 - 05:58:40 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{3017B36D-DD84-4D5F-A10A-B5C2FD101582}
O43 - CFD: 13/07/2011 - 08:57:22 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{305B3CCD-D511-49ED-A7DC-48997E77ADAB}
O43 - CFD: 19/07/2011 - 21:58:30 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{30CE5E00-48F2-4624-8DF9-CD31384547FA}
O43 - CFD: 03/09/2011 - 07:09:30 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{30F14150-694D-49FB-9835-0A948BEB52E7}
O43 - CFD: 09/09/2011 - 06:01:58 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{313AA6AE-735B-45E4-BFC2-9C2F151DA19D}
O43 - CFD: 28/09/2011 - 18:52:56 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{33BCABA7-CFA3-4707-87BC-5F31145C3277}
O43 - CFD: 27/09/2011 - 05:31:52 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{35DB8C60-C365-45CE-A0D5-424A606504EB}
O43 - CFD: 21/07/2011 - 11:55:18 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{399EFE37-C854-41F9-B0B5-58E35D142DA6}
O43 - CFD: 03/10/2011 - 12:01:34 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{3AAB1FF4-1174-4897-8A7D-3AF036081A6B}
O43 - CFD: 28/09/2011 - 06:12:50 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{3B3EBF50-B120-4B7E-89CE-C16A5AE64C36}
O43 - CFD: 15/09/2011 - 06:33:26 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{3E324113-B2D7-4FDF-B35B-2650962483E3}
O43 - CFD: 21/08/2011 - 07:39:16 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{4198F8C0-B2DC-4ED1-B2DA-8348652BC6FD}
O43 - CFD: 14/09/2011 - 18:14:16 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{42F438C0-4F30-4EFB-AB31-1AD12ED105AE}
O43 - CFD: 04/10/2011 - 17:51:22 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{4364A887-FE3D-4407-A94C-2AFCCB85173D}
O43 - CFD: 09/09/2011 - 16:15:26 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{455ECA9E-EF76-4DDE-9E21-BBC0C2671D2A}
O43 - CFD: 25/08/2011 - 07:15:00 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{461B0A0E-351D-478D-970A-66A2798B0C7A}
O43 - CFD: 30/06/2011 - 05:17:32 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{466D3331-75EA-497B-B5EC-FA61E6AA46C8}
O43 - CFD: 16/09/2011 - 15:43:04 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{46F8E1D7-8496-43B6-8E1F-9E571371C30A}
O43 - CFD: 30/09/2011 - 16:04:36 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{478FA681-FD02-4330-8F66-8176C4459BC2}
O43 - CFD: 08/08/2011 - 08:33:42 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{4993449E-708C-4413-8C26-116C7DB2AF1A}
O43 - CFD: 28/09/2011 - 18:52:44 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{4F1C19DC-4718-4707-B5A3-626B1865B3C9}
O43 - CFD: 19/09/2011 - 07:36:26 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{4FB78A62-B861-4CB9-B9E1-DCDF27B9F01F}
O43 - CFD: 18/09/2011 - 18:36:02 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{4FC7E8E5-E929-49AF-9BAF-4B3B71C5025A}
O43 - CFD: 23/08/2011 - 07:07:24 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{515C5E60-B492-4A8F-9CFD-D6292176A0C8}
O43 - CFD: 14/09/2011 - 06:14:04 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{52E4160E-7F36-4015-A991-9E97F997340F}
O43 - CFD: 18/09/2011 - 06:07:12 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{53B971FC-7EBC-48E7-984B-16CD87A864C4}
O43 - CFD: 19/07/2011 - 05:43:24 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{5411DE71-813E-43EF-9776-9C24F2D7E7FE}
O43 - CFD: 04/09/2011 - 09:53:42 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{55A0D9C8-AD04-4DC7-AC8A-9E81BA66666E}
O43 - CFD: 16/07/2011 - 06:32:58 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{590C6139-CE9F-4F98-90A8-D5B5AB460DE9}
O43 - CFD: 10/09/2011 - 07:26:22 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{5CF2182F-1DA2-4F03-B905-0E9FB6A195F8}
O43 - CFD: 07/11/2011 - 18:11:48 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{5F920845-98A3-4E51-A03F-56B9012E571A}
O43 - CFD: 22/09/2011 - 05:42:54 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{60331FD8-C81F-4752-89CD-9144B9A47177}
O43 - CFD: 20/09/2011 - 19:17:38 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{6487C66D-2E3E-40DA-8B2A-1CA24855800B}
O43 - CFD: 15/09/2011 - 18:33:40 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{66BAED3C-40B6-468D-BDED-D4A1C7DAF928}
O43 - CFD: 31/08/2011 - 06:36:48 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{67279D7E-ED01-474B-9779-5FCB86399081}
O43 - CFD: 30/08/2011 - 15:51:42 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{6834CF23-66D7-46D2-B9FB-B672FC1FE250}
O43 - CFD: 03/10/2011 - 12:01:08 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{6D369D76-F6FE-44A4-879A-5449A7754C66}
O43 - CFD: 20/09/2011 - 19:17:26 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{6E61F9CE-F3BE-4ABF-8CDF-7E85CC44D5A8}
O43 - CFD: 30/08/2011 - 15:51:56 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{72DAE888-1DFC-413A-8860-498FAC43C26B}
O43 - CFD: 25/08/2011 - 07:14:50 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{749D7779-DC04-448B-B8CC-650533A83B40}
O43 - CFD: 06/09/2011 - 05:28:00 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{74A99511-6F45-41AB-B436-F5B803D70436}
O43 - CFD: 04/07/2011 - 19:18:08 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{76DA8B12-7564-49DA-8548-871275350403}
O43 - CFD: 12/09/2011 - 10:57:54 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{77C15B99-8DE2-457F-97C4-041EF3B162B7}
O43 - CFD: 22/09/2011 - 18:14:50 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{79F7D0D0-8F6B-4D8E-9E40-2BD1B740ED78}
O43 - CFD: 18/09/2011 - 06:07:24 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{7A72BB60-BC6A-4EC9-8205-7D4035551EAC}
O43 - CFD: 11/09/2011 - 11:34:44 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{7C07E181-0876-46DA-8BEC-2FD591047864}
O43 - CFD: 19/09/2011 - 07:36:14 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{7CABD691-B0B3-432C-9882-663B0B54E7C3}
O43 - CFD: 30/09/2011 - 16:04:58 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{7D692792-2F38-4628-9C71-E745D04047A8}
O43 - CFD: 29/09/2011 - 19:09:32 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{8069377F-BC05-4F40-8871-238B22A97A02}
O43 - CFD: 04/10/2011 - 05:50:58 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{808480D1-50CA-4C8B-90EF-97099E6AD2B7}
O43 - CFD: 22/08/2011 - 09:01:22 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{83EFD27F-AF73-48BD-BB80-BB1E9A91A6BF}
O43 - CFD: 12/09/2011 - 10:58:04 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{889A9DB2-BC4E-45DF-9EA2-43E01087E34C}
O43 - CFD: 07/08/2011 - 10:16:44 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{88B9E2F5-018E-4163-9ADD-EB53A3250410}
O43 - CFD: 12/10/2011 - 11:22:54 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{8C528360-4269-4E9E-A278-0F2D93E932D7}
O43 - CFD: 28/06/2011 - 07:24:44 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{9041026E-7982-4DB4-AA10-366D691196B2}
O43 - CFD: 08/09/2011 - 05:52:16 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{926B7181-589B-4D3D-AD9C-192C62AB8938}
O43 - CFD: 26/08/2011 - 12:58:36 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{92D7C47F-0CD3-4DC8-BFEE-52CE5C682A72}
O43 - CFD: 26/06/2011 - 22:04:52 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{965E89C3-1DBA-48D7-9B50-2447E1F259DB}
O43 - CFD: 15/09/2011 - 06:33:12 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{9696269F-13BD-4047-A819-9C7E2DFF08C2}
O43 - CFD: 12/07/2011 - 20:08:56 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{983234BD-DA8E-4D50-9771-A39CF052DBA5}
O43 - CFD: 17/09/2011 - 07:08:02 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{9925A4CF-44E2-4A17-8312-E97BC929672A}
O43 - CFD: 20/07/2011 - 21:11:04 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{9C2A3DA2-3639-4DF1-A0F9-0F8BC45C50A8}
O43 - CFD: 13/09/2011 - 05:26:14 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{9C2C7CBD-5B98-4D3D-BD65-6A9970BF9467}
O43 - CFD: 17/11/2011 - 08:45:38 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{9E66A271-2B4F-4ACC-884C-68C0ABD09504}
O43 - CFD: 14/09/2011 - 06:13:52 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{9EED95FC-7201-44B3-9CD8-5CBF9D8AB421}
O43 - CFD: 05/09/2011 - 12:12:00 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{A24520DB-0EE4-442B-BC32-D0DCA2D943D7}
O43 - CFD: 14/07/2011 - 02:00:58 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{A299DD22-6CA4-46A5-B5BF-384CDD939FD1}
O43 - CFD: 28/07/2011 - 17:51:46 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{A458DE15-CE2C-4036-8CDA-93B415F45F45}
O43 - CFD: 06/10/2011 - 05:32:34 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{A6DD0332-9B13-4D60-9A69-97205815D1FE}
O43 - CFD: 18/11/2011 - 07:18:16 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{A801A3F4-4022-41AF-B82E-4CD13FA0DB7C}
O43 - CFD: 28/06/2011 - 05:19:30 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{A8416CBF-63F8-4B6C-84FC-059D5A469188}
O43 - CFD: 27/09/2011 - 17:32:18 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{A8650BCF-7813-468F-8C1A-F7A0DD7E0457}
O43 - CFD: 04/09/2011 - 10:51:40 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{A9840DB0-79D7-4FC5-92A0-0C9EEB3E5B41}
O43 - CFD: 24/08/2011 - 13:06:04 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{AB2FCF84-4A7A-4C5A-8F84-CD451B9039E5}
O43 - CFD: 20/09/2011 - 05:43:00 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{ABFEB446-8CCF-4F6E-A5F2-89AA4A58A09A}
O43 - CFD: 26/08/2011 - 12:58:24 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{AC6BF757-9140-4489-85B9-43DF72237DD3}
O43 - CFD: 20/09/2011 - 05:43:12 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{AD7851C5-220B-4BFD-88C1-ADE041918E92}
O43 - CFD: 09/09/2011 - 16:15:38 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{AEAF9D19-0C60-4BA3-8A0A-E44F940E5E83}
O43 - CFD: 03/07/2011 - 02:00:48 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{AEC9F88E-6A1A-42B2-9763-010A30BCCD53}
O43 - CFD: 10/08/2011 - 07:10:52 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{B1E354BF-7B15-483A-B98A-E28DEF5CB2F5}
O43 - CFD: 13/09/2011 - 05:26:36 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{B1F85BD2-F33A-4446-AB71-06E46ADDA836}
O43 - CFD: 12/10/2011 - 11:22:42 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{B218A1E8-B61B-4085-805D-339780CFF50B}
O43 - CFD: 12/07/2011 - 06:54:40 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{B223D99E-8D5A-4447-BB02-A6FA268FA3E4}
O43 - CFD: 15/07/2011 - 11:41:36 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{B6B054C9-5305-4FC1-B5C7-617480322103}
O43 - CFD: 02/09/2011 - 05:29:54 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{B7BD08DE-6989-4788-A904-0CEFAC3C0130}
O43 - CFD: 06/10/2011 - 18:43:10 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{B8CF8A93-358B-4726-BFFF-163F8CC299D3}
O43 - CFD: 28/09/2011 - 06:12:36 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{B96284F2-8CCC-4463-8CD9-F4BA8A81861A}
O43 - CFD: 05/09/2011 - 12:12:12 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{BB759C16-E9F3-47B5-B6D3-63DE0D2428ED}
O43 - CFD: 02/10/2011 - 06:34:42 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{BBB4A105-2A27-4FA6-B65F-FC3C0F5AC13D}
O43 - CFD: 27/09/2011 - 05:32:04 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{BE48E6D7-8272-4259-89EE-0160A95F7659}
O43 - CFD: 18/10/2011 - 17:44:40 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{C11A9D91-BAF1-4C5F-BDBC-475275F66E7E}
O43 - CFD: 10/07/2011 - 06:52:44 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{C199F602-15F5-487A-B12A-38AD08CE4647}
O43 - CFD: 26/09/2011 - 11:18:46 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{C1A8C5EE-E700-4750-879B-978E991ED477}
O43 - CFD: 31/07/2011 - 08:26:00 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{C1BF0226-F2B4-4ED4-BD3D-DA6F93756FC5}
O43 - CFD: 27/09/2011 - 17:32:30 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{C2244CA7-7B95-4A9F-8CC2-055A7A1EE6FE}
O43 - CFD: 21/09/2011 - 10:46:26 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{C28D5F5E-6E4C-4660-B71E-9B796B8AB66D}
O43 - CFD: 25/09/2011 - 06:49:30 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{C2C1E5F9-8C49-431B-A1B2-4A6A8A0A927F}
O43 - CFD: 11/07/2011 - 06:53:42 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{C513146D-E069-481B-AF81-CB0840F13591}
O43 - CFD: 25/06/2011 - 06:42:14 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{C82BEA26-7ED1-4A8C-9D32-D8F89821AD31}
O43 - CFD: 13/09/2011 - 17:30:34 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{C96FB534-E42D-48B6-B4DD-CA99DCCBA05D}
O43 - CFD: 30/06/2011 - 17:37:52 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{C982B4EF-5505-4731-8F1B-FDF9EDA4C636}
O43 - CFD: 24/08/2011 - 06:22:32 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{CA235431-8EFC-4B91-87FF-DBC3EB2C379A}
O43 - CFD: 18/11/2011 - 07:18:06 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{CB07F378-C25E-4B84-8067-8D9661E1CE69}
O43 - CFD: 04/10/2011 - 17:51:34 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{CE25B2C6-91A3-493A-8DD4-5F8BBDE4B32A}
O43 - CFD: 25/09/2011 - 06:49:18 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{CF36A33F-0D7B-4BD0-A651-D0793830D75A}
O43 - CFD: 23/09/2011 - 14:23:56 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{D1630224-1976-4567-A8A5-A9E2DE6F17D1}
O43 - CFD: 19/08/2011 - 12:51:04 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{D18CEB71-3F94-467E-B6BF-878E93480010}
O43 - CFD: 22/08/2011 - 10:29:18 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{D2D7BBCA-AFDD-4CB5-BD2F-4FA83A1E70E4}
O43 - CFD: 18/09/2011 - 18:36:14 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{D7433E91-CF7C-485A-B444-CF796B87CA6F}
O43 - CFD: 04/09/2011 - 09:53:30 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{D8B056CB-2273-4EC6-85B2-7A24B5FC9F83}
O43 - CFD: 24/08/2011 - 13:05:50 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{D9E003A0-8AD0-499B-B63F-90774301F088}
O43 - CFD: 06/09/2011 - 11:47:12 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{DBAF5A34-F0E7-48CD-B593-89C16F8189D9}
O43 - CFD: 10/09/2011 - 07:26:10 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{DEA449E7-B697-4606-964F-13FD8EB2F22E}
O43 - CFD: 08/09/2011 - 05:51:58 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{DF91C2DB-D14F-458E-A5EF-347DFC72D8DA}
O43 - CFD: 06/09/2011 - 05:27:48 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{E0E6D429-B659-42DB-9FA9-3B792CE066D9}
O43 - CFD: 24/07/2011 - 07:50:12 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{E2EA9295-6352-4FCA-9978-0DE15ABFB7B5}
O43 - CFD: 26/09/2011 - 11:19:00 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{E3BD5C65-DB4F-4746-9039-B9F0B5DF2475}
O43 - CFD: 30/08/2011 - 10:46:44 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{E454BD42-B22E-4607-87AE-1A91F575E780}
O43 - CFD: 30/08/2011 - 10:46:56 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{E4D2AFCF-3A6D-4BC5-89E6-EB1D122AE71A}
O43 - CFD: 11/07/2011 - 18:54:04 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{E78EFDC5-2063-4C1E-BB4A-75CC93D5C8BD}
O43 - CFD: 09/09/2011 - 06:02:10 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{E799071A-FD39-469D-B65A-6C65A4A48594}
O43 - CFD: 15/09/2011 - 18:33:52 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{EBCD4ADD-D8BE-4935-9B36-E299F006B3F2}
O43 - CFD: 10/07/2011 - 18:53:18 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{EBD4779C-A072-4537-B76C-BC65489A84E4}
O43 - CFD: 31/08/2011 - 06:36:58 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{EC49C8DE-996A-4A9A-8923-3853E5726251}
O43 - CFD: 29/09/2011 - 19:09:44 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{ECA6D8A2-D05F-444B-9116-0B86C0D6E3B2}
O43 - CFD: 07/09/2011 - 06:02:28 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{EDC133D9-CD6D-41EF-99FB-77A4A115B0F5}
O43 - CFD: 18/10/2011 - 17:44:18 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{F00BE1CF-D7C6-413C-9A1B-5FC4BDBBA90F}
O43 - CFD: 02/09/2011 - 05:30:16 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{F1EB67FE-071D-4529-B6F9-45965D6E959F}
O43 - CFD: 08/07/2011 - 06:04:26 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{F387821C-1FCF-4D6D-BEF3-1009161654A4}
O43 - CFD: 04/10/2011 - 05:51:10 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{F4282EBB-2D89-4122-80A2-800F2561E684}
O43 - CFD: 07/09/2011 - 06:02:16 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{F542F7FD-C09B-458A-9340-05FE4DC79BA8}
O43 - CFD: 29/06/2011 - 07:26:20 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{F57A9CCE-EFE9-4641-9081-494AF4CEB097}
O43 - CFD: 24/09/2011 - 06:52:18 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{F66AA744-81A4-4A42-B16C-949A91DBF2D4}
O43 - CFD: 28/06/2011 - 19:25:32 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{F6B8E8F1-EDDF-4301-855E-FFC2FBA3BFB0}
O43 - CFD: 26/06/2011 - 07:01:14 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{F6D878C5-B3E3-479A-8A91-6BCBA9EBEE89}
O43 - CFD: 14/08/2011 - 07:28:22 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{F6E17A76-0377-4508-BE70-37174D542344}
O43 - CFD: 27/06/2011 - 05:18:06 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{F9025B1A-8B74-4847-89A5-A20EE41509FD}
O43 - CFD: 06/10/2011 - 05:32:24 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{F9ABE657-4F3D-4AA6-9EAA-CC41B7FF43B1}
O43 - CFD: 22/08/2011 - 10:29:06 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\{FABD5B22-414B-4D49-9C67-C5308172938F}
O87 - FAEL: "{8C08A544-1CAC-4307-ACE0-316634E15506}" |In - None - P17 - TRUE | .(...) -- C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\TouchMovie.exe (.not file.)
O87 - FAEL: "{E2904D92-DBFF-4484-AD52-EEB702DFDB6A}" |In - None - P17 - TRUE | .(...) -- C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\TouchMovieService.exe (.not file.)
O42 - Logiciel: eMule - (.Pas de propriétaire.) [HKLM] -- eMule
[HKCU\Software\eMule]
O43 - CFD: 06/07/2011 - 12:46:48 - [0] ----D- C:\ProgramData\eMule
O43 - CFD: 06/07/2011 - 12:46:32 - [907810] ----D- C:\Users\HALLART Manuel\AppData\Local\eMule
O43 - CFD: 06/07/2011 - 12:46:34 - [10906334] ----D- C:\Program Files (x86)\eMule
O87 - FAEL: "TCP Query User{6F2FFCA5-3F9A-4226-ADAC-812F48B6A7CA}C:\program files (x86)\emule\emule.exe" | In - Private - P6 - TRUE | .(.http://www.emule-project.net - eMule.) -- C:\program files (x86)\emule\emule.exe
O87 - FAEL: "UDP Query User{F8C50138-BC3F-49E3-AC65-F79CEEBADBCC}C:\program files (x86)\emule\emule.exe" | In - Private - P17 - TRUE | .(.http://www.emule-project.net - eMule.) -- C:\program files (x86)\emule\emule.exe
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
G1 - GCS: Preference [User Data\Default] None
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
G0 - GCSP: Preference [User Data\Default] http://search.conduit.com
R3 - URLSearchHook: (no name) [64Bits] - {48405d3d-2674-4cd8-b1ef-9a719443bd3f} . (...) (No version) -- (.not file.)
[HKCU\Software\AppDataLow\Software\ConduitSearchScopes]
[HKCU\Software\AppDataLow\Software\Conduit]
[HKLM\Software\Conduit]
O43 - CFD: 15/11/2011 - 06:40:36 - [0] ----D- C:\Users\HALLART Manuel\AppData\Local\Conduit
O43 - CFD: 30/10/2011 - 16:38:08 - [638560] ----D- C:\Program Files (x86)\Conduit
O69 - SBI: SearchScopes [HKCU] {afdbddaa-5d3f-42ee-b79c-185a7020515b} - (MyWebsites FR Customized Web Search) - http://search.conduit.com
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}]
[HKLM\Software\WOW6432Node\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}]
[HKCU\Software\AppDataLow\Software\ConduitSearchScopes]
C:\Users\HALLART Manuel\AppData\Local\Conduit
C:\Users\HALLART Manuel\AppData\LocalLow\Conduit
C:\Program Files (x86)\Conduit

EmptyTemp
EmptyFlash

Lancer ZHPFix (raccourci sur le Bureau ou "Démarrer" => "Tous les programmes" => "ZHP" => "ZHPFix") et cliquer sur le bouton [H].
Vérifier que toutes les lignes copiées (et rien d'autre) apparaissent dans la fenêtre (et disposées exactement de la même façon) et clique sur le bouton [OK] puis sur sur le bouton [Tous].
Fermer toutes les applications et autres fenêtres en cours désactive (y compris Internet) et désactiver tous les programmes de protection (antivirus, pare-feu et antispyware).
Enfin, clique sur le bouton [Nettoyer] et laisser faire. Redémarrer le PC pour finir le nettoyage si demandé.
Copier/ coller le contenu du rapport qui s'ouvre dans la prochaine réponse. Ce rapport est en outre sauvegardé dans ce dossier > C:\Program files\ZHPDiag\ZHPFixReport.txt.

Télécharger sur le Bureau:

• ComboFix© (par sUBs) depuis ici ou ici
• Security Check (par screen317) depuis ici ou ici.

>>> ComboFix/Analyse: Fermer toutes les applications et fenêtres ouvertes, désactiver antivirus/ pare-feu/ antispyware et cliquer-droit sur ComboFix.exe => "Exécuter en tant qu'administrateur". Suivre les instructions.
NE PAS TOUCHER la machine avant la fin (même si les choses semblent ne pas avancer).
Quand c'est fini, un rapport (ComboFix.txt) s'affiche. Il est sauvegardé, automatiquement, à la racine de la partition système (généralement C:\).
Copier/coller directement son contenu dans la prochaine réponse.


>>> Utiliser SecurityCheck: Fermer toutes les fenêtres et applications ouvertes et double-cliquer/cliquer-droit sur SecurityCheck.exe => "Exécuter en tant qu'administrateur" pour lancer le programme.
Appuyer sur une touche comme demandé et suivre les indications.
Si un des programmes de sécurité demande la permission d'accéder à Internet depuis "dig.exe", acceptez.
Le Rapport "checkup.txt" s'ouvre à la fin.
Copier/coller directement son contenu dans la prochaine réponse.
Ce rapport ne sera pas enregistré automatiquement. Si vous voulez en garder une copie, cliquez sur "Fichier" => "Enregistrer sous", choisissez un endroit (Bureau par exemple) et cliquez sur "Enregistrer" en bas à droite.


>>> Rapports demandés à coller directement:

• ZHPFixReport.tx
• ComboFix.txt
• checkup.txt

Un changement quelconque?

Results of screen317's Security Check version 0.99.28
Windows 7 x64 (UAC is enabled)
Internet Explorer 8 Out of date!
``````````````````````````````
Antivirus/Firewall Check:
avast! Free Antivirus
McAfee Security Scan Plus
WMI entry may not exist for antivirus; attempting automatic update.
```````````````````````````````
Anti-malware/Other Utilities Check:
Ad-Aware
Adobe Reader X (10.1.1)
Mozilla Firefox (8.0.)
````````````````````````````````
Process Check:
objlist.exe by Laurent
Ad-Aware AAWService.exe is disabled!
Ad-Aware AAWTray.exe is disabled!
Symantec Norton Online Backup NOBuAgent.exe
AVAST Software Avast AvastSvc.exe
AVAST Software Avast AvastUI.exe
``````````End of Log````````````
ComboFix 11-11-22.03 - HALLART Manuel 23/11/2011 7:43.1.4 - x64
Microsoft Windows 7 Édition Familiale Premium 6.1.7600.0.1252.33.1036.18.4023.2506 [GMT 1:00]
Lancé depuis: c:\users\HALLART Manuel\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\rbjcl.vbs
c:\programdata\FullRemove.exe
c:\users\HALLART Manuel\Desktop\Setup.exe
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-10-23 au 2011-11-23 ))))))))))))))))))))))))))))))))))))
.
.
2011-11-23 06:47 . 2011-11-23 06:47 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-11-23 06:07 . 2011-10-07 04:16 8570192 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A0338870-C896-45AC-BF28-2D0D4613B0C6}\mpengine.dll
2011-11-20 10:12 . 2011-11-22 10:12 -------- d-----w- c:\program files (x86)\McAfee Security Scan
2011-11-20 10:12 . 2011-11-20 10:12 -------- d-----w- c:\programdata\McAfee Security Scan
2011-11-18 19:32 . 2011-11-18 19:32 55384 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2011-11-18 19:29 . 2011-11-18 19:30 -------- d-----w- c:\users\HALLART Manuel\AppData\Local\adaware
2011-11-18 19:29 . 2011-11-23 06:49 -------- d-----w- c:\programdata\Ad-Aware Browsing Protection
2011-11-18 19:29 . 2011-11-19 18:06 -------- d-----w- c:\program files (x86)\Toolbar Cleaner
2011-11-18 19:29 . 2011-11-18 19:33 -------- dc----w- c:\windows\system32\DRVSTORE
2011-11-18 19:29 . 2011-11-18 19:33 -------- d-----w- c:\programdata\Lavasoft
2011-11-18 19:09 . 2011-11-19 18:06 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy
2011-11-18 19:09 . 2011-11-18 19:29 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2011-11-18 16:25 . 2011-11-18 16:25 512 ----a-w- C:\PhysicalDisk0_MBR.bin
2011-11-18 16:23 . 2011-11-19 06:53 -------- d-----w- C:\ZHP
2011-11-18 16:22 . 2011-11-19 18:06 -------- d-----w- c:\program files (x86)\ZHPDiag
2011-11-18 15:33 . 2011-11-19 18:06 -------- d-----w- c:\program files\CCleaner
2011-11-18 13:08 . 2011-11-18 13:08 -------- d-----w- c:\programdata\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}
2011-11-18 13:01 . 2011-11-18 13:01 -------- d-----w- c:\users\HALLART Manuel\AppData\Local\PackageAware
2011-11-16 16:56 . 2011-11-19 18:06 -------- d-----w- c:\program files (x86)\Trend Micro
2011-11-16 16:56 . 2011-11-16 16:56 388096 ----a-r- c:\users\HALLART Manuel\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-11-14 14:05 . 2011-11-19 18:06 -------- d-----w- c:\users\HALLART Manuel\AppData\Roaming\Skype
2011-11-14 14:03 . 2011-11-19 18:06 -------- d-----w- c:\programdata\Skype
2011-11-14 14:00 . 2011-11-14 14:00 -------- d-----w- c:\users\HALLART Manuel\AppData\Local\ElevatedDiagnostics
2011-11-12 14:11 . 2011-11-19 18:04 -------- d-----w- c:\users\HALLART Manuel\AppData\Roaming\OpenOffice.org
2011-11-12 13:41 . 2011-11-19 18:04 -------- d-----w- c:\program files (x86)\OpenOffice.org 3
2011-11-12 07:04 . 2011-11-12 07:04 -------- d-----w- c:\users\HALLART Manuel\AppData\Local\Apps
2011-11-09 17:51 . 2011-10-01 05:28 886784 ----a-w- c:\program files\Common Files\System\wab32.dll
2011-11-09 17:51 . 2011-10-01 04:43 708608 ----a-w- c:\program files (x86)\Common Files\System\wab32.dll
2011-11-09 17:51 . 2011-09-29 16:24 1897328 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-11-09 17:51 . 2011-09-29 04:09 3141120 ----a-w- c:\windows\system32\win32k.sys
2011-11-08 14:55 . 2011-11-19 18:03 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2011-11-08 14:51 . 2011-11-20 10:12 -------- d-----w- c:\users\HALLART Manuel\AppData\Local\Solid State Networks
2011-10-30 15:38 . 2011-11-19 18:05 -------- d-----w- c:\program files (x86)\Conduit
2011-10-26 05:25 . 2011-08-15 05:08 6144 ----a-w- c:\program files\Internet Explorer\iecompat.dll
2011-10-26 05:25 . 2011-08-15 04:25 6144 ----a-w- c:\program files (x86)\Internet Explorer\iecompat.dll
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-23 06:51 . 2011-11-23 06:51 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A0338870-C896-45AC-BF28-2D0D4613B0C6}\offreg.dll
2011-11-20 10:12 . 2011-08-22 09:04 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-10-01 03:21 . 2011-10-13 14:56 1638912 ----a-w- c:\windows\system32\mshtml.tlb
2011-10-01 02:59 . 2011-10-13 14:56 1638912 ----a-w- c:\windows\SysWow64\mshtml.tlb
2011-09-11 10:41 . 2011-09-11 10:41 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-08-27 05:40 . 2011-10-13 14:56 331776 ----a-w- c:\windows\system32\oleacc.dll
2011-08-27 05:40 . 2011-10-13 14:56 861184 ----a-w- c:\windows\system32\oleaut32.dll
2011-08-27 04:43 . 2011-10-13 14:56 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
2011-08-27 04:43 . 2011-10-13 14:56 233472 ----a-w- c:\windows\SysWow64\oleacc.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 03:40 120176 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM"="c:\program files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2008-10-24 206112]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-11-18 39408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-03-04 284696]
"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2010-05-27 337264]
"EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2010-03-11 201584]
"EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2010-03-11 407920]
"Norton Online Backup"="c:\program files (x86)\Symantec\Norton Online Backup\NOBuClient.exe" [2010-06-01 1155928]
"Hotkey Utility"="c:\program files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe" [2010-12-03 618600]
"MDS_Menu"="c:\program files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504]
"ArcadeMovieService"="c:\program files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe" [2010-06-29 124136]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-07-04 3493720]
"BlackBerryAutoUpdate"="c:\program files (x86)\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe" [2009-07-01 623960]
"RoxWatchTray"="c:\program files (x86)\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2009-04-11 236016]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"Ad-Aware Browsing Protection"="c:\programdata\Ad-Aware Browsing Protection\adawarebp.exe" [2011-10-21 198032]
.
c:\users\HALLART Manuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 - Capture d'écran et lancement.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer4"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Service Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-07-03 136176]
R3 gupdatem;Service Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-07-03 136176]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-05-27 305520]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-03-04 13336]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-11-09 369256]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2010-01-29 243232]
S2 USBS3S4Detection;USBS3S4Detection;c:\oem\USBDECTION\USBS3S4Detection.exe [2009-12-09 76320]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
Contenu du dossier 'Tâches planifiées'
.
2011-11-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-07-03 06:48]
.
2011-11-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-07-03 06:48]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-07-04 11:43 134384 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 03:42 137584 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"mwlDaemon"="c:\program files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe" [2010-05-27 349552]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-02-24 9642528]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://pentoweb.net/pt5.php
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://acer.msn.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xporter vers Microsoft Excel - c:\progra~2\MICROS~3\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 212.27.40.241 212.27.40.240
FF - ProfilePath - c:\users\HALLART Manuel\AppData\Roaming\Mozilla\Firefox\Profiles\ewtdx814.default\
FF - prefs.js: browser.search.selectedEngine - Search the Web
FF - prefs.js: browser.startup.homepage - hxxp://pentoweb.net/pt5.php
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=utf-8&m ... awaretb&q=
.
- - - - ORPHELINS SUPPRIMES - - - -
.
URLSearchHooks-{48405d3d-2674-4cd8-b1ef-9a719443bd3f} - (no file)
URLSearchHooks-{590ee40d-ab7d-4ed9-b49c-3cc11ad38edf} - (no file)
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-optical - c:\program files (x86)\rbjcl.vbs
Toolbar-Locked - (no file)
WebBrowser-{48405D3D-2674-4CD8-B1EF-9A719443BD3F} - (no file)
WebBrowser-{590EE40D-AB7D-4ED9-B49C-3CC11AD38EDF} - (no file)
AddRemove-{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA} - c:\programdata\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}\bm_installer.exe
.
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_USERS\S-1-5-21-1725602463-3394975434-1511070320-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*í*Æ*%\OpenWithList]
@Class="Shell"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Cyberlink\Shared files\RichVideo.exe
c:\program files (x86)\OpenOffice.org 3\program\soffice.exe
c:\program files (x86)\OpenOffice.org 3\program\soffice.bin
.
**************************************************************************
.
Heure de fin: 2011-11-23 07:54:46 - La machine a redémarré
ComboFix-quarantined-files.txt 2011-11-23 06:54
.
Avant-CF: 430 690 631 680 octets libres
Après-CF: 430 549 250 048 octets libres
.
- - End Of File - - 46911479A2FB1C9D6BD4BD9EF687488A


Rapport de ZHPFix 1.12.3370 par Nicolas Coolman, Update du 17/11/2011
Fichier d'export Registre :
Run by HALLART Manuel at 19/11/2011 07:53:44
Windows 7 Home Premium Edition, 64-bit (Build 7600)
Web site : http://www.premiumorange.com/zeb-help-p ... hpfix.html

========== Logiciel(s) ==========
ABSENT Software Key: eMule

========== Clé(s) du Registre ==========
ABSENT R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Search,SearchAssistant
SUPPRIME Key: HKCU\Software\AppDataLow\Software\PriceGong
SUPPRIME Key: SearchScopes :{1F096B29-E9DA-4D64-8D63-936BE7762CC5}
SUPPRIME Key: HKLM\Software\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}
ABSENT Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4a99-B4B6-146BF802613B}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4a99-B4B6-146BF802613B}
SUPPRIME Key: HKLM\Software\WOW6432Node\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49dd-99D7-DC866BE87DBC}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49dd-99D7-DC866BE87DBC}
SUPPRIME Key: HKLM\Software\WOW6432Node\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}
SUPPRIME Key: HKLM\Software\WOW6432Node\Classes\CLSID\{E46C8196-B634-44a1-AF6E-957C64278AB1}
SUPPRIME Key: HKCU\Software\eMule
SUPPRIME Key: HKCU\Software\AppDataLow\Software\ConduitSearchScopes
SUPPRIME Key: HKCU\Software\AppDataLow\Software\Conduit
ABSENT Key: HKLM\Software\Conduit
SUPPRIME Key: SearchScopes :{afdbddaa-5d3f-42ee-b79c-185a7020515b}
ABSENT Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
SUPPRIME Key: HKLM\Software\WOW6432Node\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}

========== Valeur(s) du Registre ==========
SUPPRIME URLSearchHook: {590ee40d-ab7d-4ed9-b49c-3cc11ad38edf}
SUPPRIME {8C08A544-1CAC-4307-ACE0-316634E15506}
SUPPRIME {E2904D92-DBFF-4484-AD52-EEB702DFDB6A}
SUPPRIME TCP Query User{6F2FFCA5-3F9A-4226-ADAC-812F48B6A7CA}C:/program files (x86)/emule/emule.exe
SUPPRIME UDP Query User{F8C50138-BC3F-49E3-AC65-F79CEEBADBCC}C:/program files (x86)/emule/emule.exe
SUPPRIME MWPS Value: EnableUIADesktopToggle
SUPPRIME MWPS Value: FilterAdministratorToken
SUPPRIME MWPE Value: NoActiveDesktop
SUPPRIME MWPE Value: NoActiveDesktopChanges
SUPPRIME URLSearchHook: {48405d3d-2674-4cd8-b1ef-9a719443bd3f}

========== Elément(s) de donnée du Registre ==========
REMPLACE Value NoActiveDesktopChanges : Good (0) - Bad (1)
SUPPRIME R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy

========== Préférences navigateur ==========
PRESENT Chrome File: C:\Users\HALLART Manuel\AppData\Local\Google\Chrome\User Data\Default\Preferences
ABSENT Chrome Site: None
PRESENT Chrome File: C:\Users\HALLART Manuel\AppData\Local\Google\Chrome\User Data\Default\Preferences
SUPPRIME Chrome Site: http://search.conduit.com
SUPPRIME Chrome Site: http://search.conduit.com
SUPPRIME Chrome Site: http://search.conduit.com

========== Dossier(s) ==========
SUPPRIME Folder: c:\users\hallart manuel\appdata\locallow\babylontoolbar
SUPPRIME Folder: c:\users\hallart manuel\appdata\locallow\pricegong
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{00426E9F-BF54-4DB1-99C4-E0131DD957F8}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{01C38F78-25D4-4867-9269-0B1154081AFB}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{03449E14-8410-4377-B645-A62DBAFAB3C1}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{03AA682E-BF1A-45F3-A91C-80F56AFEA89B}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{06922057-77E1-47C3-BBE8-E5884CAB5646}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{069362B1-4E8B-4E03-A65C-09E32C990B77}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{06D767E3-AE29-48C1-8747-4EE151A74B2F}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{07319DB2-527A-4699-9F2C-322088FD49F2}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{08A53E10-7A03-4CF3-87EF-5CB4E0C9DC9B}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{095D955C-FBFA-4B04-ACE5-78B756A55B09}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{0C8C9A23-9561-43D6-9DCD-C7258633B25A}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{0E477573-1A58-4AE4-BFF3-CF40BE27C7B9}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{0EAF62F0-620C-4234-9C58-7659BA42CFDF}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{0F3B894D-E1AC-470A-AFD2-1AD3CDC8C64E}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{0F478C16-29AD-49D2-B4C4-83B7F5DD8B88}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{10087408-BF90-41EB-AA10-C9855E1BE3DD}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{1139CDEC-B927-48B7-8482-B0CE7E5AA0DF}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{11B5662A-242E-431C-8E5C-37218D79E269}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{13545164-C776-4E25-915D-DCD0EFFBAEDD}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{1433D429-26E0-4D79-8934-4C8302347256}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{1523247F-4FC2-46EF-AC55-EAA608DB2365}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{1570294E-EECB-4CF0-B6EC-7F963333392C}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{178844D1-2214-4FE0-B1BB-6E6B3617E183}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{179997F3-4C97-423F-A3BC-4BF33F1AFB65}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{1823F0F6-E9BD-4A7C-A8F7-2C6CB883B8F1}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{186E29D9-C795-4BA5-AA11-DE936F764048}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{1A6D6790-8EE1-4D26-86F7-469A445B07D9}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{1A941024-A29B-4C00-8CE4-CFD80DD0B436}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{1BC736F6-31AB-4EA7-B7A6-4C3C1D70A277}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{1BD9D388-A425-4016-A3BB-AC4D0A009013}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{1BE6B0E0-DB53-428B-9832-66827929E476}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{1BF61949-0DCE-4BD5-AE40-5ED259FD024D}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{1CC13DB4-FC2F-46D8-8031-A36FA78F3EA4}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{1FB91C76-3FD1-4E14-A857-E6EFE8F95CCD}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{20CE5ECC-2BCA-4014-85D0-C58B6A58F368}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{20ED8A0F-3304-424A-9A99-49B16EB389B4}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{26CBDA04-56C2-4833-835C-AE140743FD02}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{279FD4E0-DB6F-4388-AEFB-5C22753D00CB}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{28225D91-57FE-4FE9-B3CD-7AE071BF09CA}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{2A1E4CAF-DE8A-4D0B-9635-7969CC5EB963}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{2CD81669-5D58-4C1D-B908-326CA6B424CD}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{2D3C601C-BC5A-435F-B30F-3BCD5E88B82E}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{2E926E3E-608F-4E99-B322-09BC8B0B4EE1}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{3017B36D-DD84-4D5F-A10A-B5C2FD101582}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{305B3CCD-D511-49ED-A7DC-48997E77ADAB}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{30CE5E00-48F2-4624-8DF9-CD31384547FA}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{30F14150-694D-49FB-9835-0A948BEB52E7}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{313AA6AE-735B-45E4-BFC2-9C2F151DA19D}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{33BCABA7-CFA3-4707-87BC-5F31145C3277}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{35DB8C60-C365-45CE-A0D5-424A606504EB}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{399EFE37-C854-41F9-B0B5-58E35D142DA6}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{3AAB1FF4-1174-4897-8A7D-3AF036081A6B}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{3B3EBF50-B120-4B7E-89CE-C16A5AE64C36}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{3E324113-B2D7-4FDF-B35B-2650962483E3}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{4198F8C0-B2DC-4ED1-B2DA-8348652BC6FD}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{42F438C0-4F30-4EFB-AB31-1AD12ED105AE}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{4364A887-FE3D-4407-A94C-2AFCCB85173D}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{455ECA9E-EF76-4DDE-9E21-BBC0C2671D2A}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{461B0A0E-351D-478D-970A-66A2798B0C7A}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{466D3331-75EA-497B-B5EC-FA61E6AA46C8}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{46F8E1D7-8496-43B6-8E1F-9E571371C30A}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{478FA681-FD02-4330-8F66-8176C4459BC2}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{4993449E-708C-4413-8C26-116C7DB2AF1A}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{4F1C19DC-4718-4707-B5A3-626B1865B3C9}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{4FB78A62-B861-4CB9-B9E1-DCDF27B9F01F}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{4FC7E8E5-E929-49AF-9BAF-4B3B71C5025A}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{515C5E60-B492-4A8F-9CFD-D6292176A0C8}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{52E4160E-7F36-4015-A991-9E97F997340F}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{53B971FC-7EBC-48E7-984B-16CD87A864C4}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{5411DE71-813E-43EF-9776-9C24F2D7E7FE}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{55A0D9C8-AD04-4DC7-AC8A-9E81BA66666E}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{590C6139-CE9F-4F98-90A8-D5B5AB460DE9}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{5CF2182F-1DA2-4F03-B905-0E9FB6A195F8}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{5F920845-98A3-4E51-A03F-56B9012E571A}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{60331FD8-C81F-4752-89CD-9144B9A47177}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{6487C66D-2E3E-40DA-8B2A-1CA24855800B}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{66BAED3C-40B6-468D-BDED-D4A1C7DAF928}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{67279D7E-ED01-474B-9779-5FCB86399081}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{6834CF23-66D7-46D2-B9FB-B672FC1FE250}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{6D369D76-F6FE-44A4-879A-5449A7754C66}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{6E61F9CE-F3BE-4ABF-8CDF-7E85CC44D5A8}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{72DAE888-1DFC-413A-8860-498FAC43C26B}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{749D7779-DC04-448B-B8CC-650533A83B40}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{74A99511-6F45-41AB-B436-F5B803D70436}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{76DA8B12-7564-49DA-8548-871275350403}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{77C15B99-8DE2-457F-97C4-041EF3B162B7}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{79F7D0D0-8F6B-4D8E-9E40-2BD1B740ED78}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{7A72BB60-BC6A-4EC9-8205-7D4035551EAC}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{7C07E181-0876-46DA-8BEC-2FD591047864}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{7CABD691-B0B3-432C-9882-663B0B54E7C3}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{7D692792-2F38-4628-9C71-E745D04047A8}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{8069377F-BC05-4F40-8871-238B22A97A02}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{808480D1-50CA-4C8B-90EF-97099E6AD2B7}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{83EFD27F-AF73-48BD-BB80-BB1E9A91A6BF}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{889A9DB2-BC4E-45DF-9EA2-43E01087E34C}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{88B9E2F5-018E-4163-9ADD-EB53A3250410}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{8C528360-4269-4E9E-A278-0F2D93E932D7}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{9041026E-7982-4DB4-AA10-366D691196B2}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{926B7181-589B-4D3D-AD9C-192C62AB8938}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{92D7C47F-0CD3-4DC8-BFEE-52CE5C682A72}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{965E89C3-1DBA-48D7-9B50-2447E1F259DB}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{9696269F-13BD-4047-A819-9C7E2DFF08C2}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{983234BD-DA8E-4D50-9771-A39CF052DBA5}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{9925A4CF-44E2-4A17-8312-E97BC929672A}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{9C2A3DA2-3639-4DF1-A0F9-0F8BC45C50A8}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{9C2C7CBD-5B98-4D3D-BD65-6A9970BF9467}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{9E66A271-2B4F-4ACC-884C-68C0ABD09504}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{9EED95FC-7201-44B3-9CD8-5CBF9D8AB421}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{A24520DB-0EE4-442B-BC32-D0DCA2D943D7}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{A299DD22-6CA4-46A5-B5BF-384CDD939FD1}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{A458DE15-CE2C-4036-8CDA-93B415F45F45}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{A6DD0332-9B13-4D60-9A69-97205815D1FE}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{A801A3F4-4022-41AF-B82E-4CD13FA0DB7C}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{A8416CBF-63F8-4B6C-84FC-059D5A469188}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{A8650BCF-7813-468F-8C1A-F7A0DD7E0457}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{A9840DB0-79D7-4FC5-92A0-0C9EEB3E5B41}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{AB2FCF84-4A7A-4C5A-8F84-CD451B9039E5}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{ABFEB446-8CCF-4F6E-A5F2-89AA4A58A09A}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{AC6BF757-9140-4489-85B9-43DF72237DD3}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{AD7851C5-220B-4BFD-88C1-ADE041918E92}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{AEAF9D19-0C60-4BA3-8A0A-E44F940E5E83}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{AEC9F88E-6A1A-42B2-9763-010A30BCCD53}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{B1E354BF-7B15-483A-B98A-E28DEF5CB2F5}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{B1F85BD2-F33A-4446-AB71-06E46ADDA836}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{B218A1E8-B61B-4085-805D-339780CFF50B}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{B223D99E-8D5A-4447-BB02-A6FA268FA3E4}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{B6B054C9-5305-4FC1-B5C7-617480322103}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{B7BD08DE-6989-4788-A904-0CEFAC3C0130}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{B8CF8A93-358B-4726-BFFF-163F8CC299D3}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{B96284F2-8CCC-4463-8CD9-F4BA8A81861A}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{BB759C16-E9F3-47B5-B6D3-63DE0D2428ED}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{BBB4A105-2A27-4FA6-B65F-FC3C0F5AC13D}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{BE48E6D7-8272-4259-89EE-0160A95F7659}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{C11A9D91-BAF1-4C5F-BDBC-475275F66E7E}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{C199F602-15F5-487A-B12A-38AD08CE4647}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{C1A8C5EE-E700-4750-879B-978E991ED477}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{C1BF0226-F2B4-4ED4-BD3D-DA6F93756FC5}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{C2244CA7-7B95-4A9F-8CC2-055A7A1EE6FE}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{C28D5F5E-6E4C-4660-B71E-9B796B8AB66D}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{C2C1E5F9-8C49-431B-A1B2-4A6A8A0A927F}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{C513146D-E069-481B-AF81-CB0840F13591}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{C82BEA26-7ED1-4A8C-9D32-D8F89821AD31}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{C96FB534-E42D-48B6-B4DD-CA99DCCBA05D}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{C982B4EF-5505-4731-8F1B-FDF9EDA4C636}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{CA235431-8EFC-4B91-87FF-DBC3EB2C379A}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{CB07F378-C25E-4B84-8067-8D9661E1CE69}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{CE25B2C6-91A3-493A-8DD4-5F8BBDE4B32A}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{CF36A33F-0D7B-4BD0-A651-D0793830D75A}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{D1630224-1976-4567-A8A5-A9E2DE6F17D1}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{D18CEB71-3F94-467E-B6BF-878E93480010}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{D2D7BBCA-AFDD-4CB5-BD2F-4FA83A1E70E4}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{D7433E91-CF7C-485A-B444-CF796B87CA6F}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{D8B056CB-2273-4EC6-85B2-7A24B5FC9F83}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{D9E003A0-8AD0-499B-B63F-90774301F088}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{DBAF5A34-F0E7-48CD-B593-89C16F8189D9}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{DEA449E7-B697-4606-964F-13FD8EB2F22E}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{DF91C2DB-D14F-458E-A5EF-347DFC72D8DA}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{E0E6D429-B659-42DB-9FA9-3B792CE066D9}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{E2EA9295-6352-4FCA-9978-0DE15ABFB7B5}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{E3BD5C65-DB4F-4746-9039-B9F0B5DF2475}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{E454BD42-B22E-4607-87AE-1A91F575E780}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{E4D2AFCF-3A6D-4BC5-89E6-EB1D122AE71A}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{E78EFDC5-2063-4C1E-BB4A-75CC93D5C8BD}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{E799071A-FD39-469D-B65A-6C65A4A48594}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{EBCD4ADD-D8BE-4935-9B36-E299F006B3F2}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{EBD4779C-A072-4537-B76C-BC65489A84E4}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{EC49C8DE-996A-4A9A-8923-3853E5726251}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{ECA6D8A2-D05F-444B-9116-0B86C0D6E3B2}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{EDC133D9-CD6D-41EF-99FB-77A4A115B0F5}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{F00BE1CF-D7C6-413C-9A1B-5FC4BDBBA90F}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{F1EB67FE-071D-4529-B6F9-45965D6E959F}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{F387821C-1FCF-4D6D-BEF3-1009161654A4}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{F4282EBB-2D89-4122-80A2-800F2561E684}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{F542F7FD-C09B-458A-9340-05FE4DC79BA8}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{F57A9CCE-EFE9-4641-9081-494AF4CEB097}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{F66AA744-81A4-4A42-B16C-949A91DBF2D4}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{F6B8E8F1-EDDF-4301-855E-FFC2FBA3BFB0}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{F6D878C5-B3E3-479A-8A91-6BCBA9EBEE89}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{F6E17A76-0377-4508-BE70-37174D542344}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{F9025B1A-8B74-4847-89A5-A20EE41509FD}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{F9ABE657-4F3D-4AA6-9EAA-CC41B7FF43B1}
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\{FABD5B22-414B-4D49-9C67-C5308172938F}
SUPPRIME Folder: C:\ProgramData\eMule
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\eMule
SUPPRIME Folder: C:\Program Files (x86)\eMule
SUPPRIME Folder: C:\Users\HALLART Manuel\AppData\Local\Conduit
SUPPRIME Folder: C:\Program Files (x86)\Conduit
SUPPRIME Folder: c:\users\hallart manuel\appdata\locallow\conduit

========== Fichier(s) ==========
ABSENT Folder/File: c:\users\hallart manuel\appdata\local\conduit
ABSENT Folder/File: c:\program files (x86)\conduit


========== Récapitulatif ==========
19 : Clé(s) du Registre
10 : Valeur(s) du Registre
2 : Elément(s) de donnée du Registre
190 : Dossier(s)
2 : Fichier(s)
1 : Logiciel(s)
6 : Préférences navigateur


End of clean in 00mn 18s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 19/11/2011 07:53:44 [21548]

Bonjour,

>>> ComboFix/ Correction: Cliquer sur "Démarrer" => "Exécuter". Saisir Notepad et cliquer sur "OK".
Copier et coller ces lignes:

Folder::
c:\program files (x86)\Conduit

RegLock::
[HKEY_USERS\S-1-5-21-1725602463-3394975434-1511070320-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*í*Æ*%\OpenWithList]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

Cliquer sur "Fichier" => "Enregistrer". Dans "Nom du fichier", saisir ou coller CFScript.txt, cliquer sur Bureau à gauche puis sur "Enregistrer" en bas à droite.
Fermer toutes les fenêtres et applications ouvertes et désactiver antivirus, pare-feu et antispyware pour éviter qu'ils interfèrent avec ComboFix.
Glisser le fichier CFScript.txt et le déposer sur ComboFix.exe
Ceci a pour effet de lancer ComboFix. Patienter!
A la fin, redémarrer le PC (s'il ne redémarre pas automatiquement) et Copier/coller le contenu du rapport généré dans la prochaine réponse. Il est sauvegardé, automatiquement, à la racine de la partition système (généralement C:\).


>>> Autres symptômes à vérifier?

Bonjour,
J'ai bien reçu votre réponse mais je n'arrive pas à trouver combofix/correction.
J'ai à nouveau besoin de votre aide! Etre pro de l'informatique c'est pas donné à tout le monde! merci pour votre aide
cordialement
Manuel

>>> ComboFix/ Correction: est le titre du paragraphe pour que tu saches qu'on va utiliser ComboFix (qui est sur ton Bureau) pour faire une correction (=réparation).

Tout ce que tu as à faire et de lire et appliquer (au fur et à mesure) la suite en commençant par "Cliquer sur "Démarrer" => "Exécuter"..." etc...

ComboFix 11-11-22.03 - HALLART Manuel 23/11/2011 14:26:16.6.4 - x64
Microsoft Windows 7 Édition Familiale Premium 6.1.7600.0.1252.33.1036.18.4023.2581 [GMT 1:00]
Lancé depuis: c:\users\HALLART Manuel\Desktop\ComboFix.exe
Commutateurs utilisés :: c:\users\HALLART Manuel\Desktop\CFScript.txt
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Exécution préalable -------
.
c:\program files (x86)\Conduit\Community Alerts\Alert.dll
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-10-23 au 2011-11-23 ))))))))))))))))))))))))))))))))))))
.
.
2011-11-23 13:33 . 2011-11-23 13:33 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A0338870-C896-45AC-BF28-2D0D4613B0C6}\offreg.dll
2011-11-23 13:29 . 2011-11-23 13:29 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-11-23 06:07 . 2011-10-07 04:16 8570192 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A0338870-C896-45AC-BF28-2D0D4613B0C6}\mpengine.dll
2011-11-20 10:12 . 2011-11-22 10:12 -------- d-----w- c:\program files (x86)\McAfee Security Scan
2011-11-20 10:12 . 2011-11-20 10:12 -------- d-----w- c:\programdata\McAfee Security Scan
2011-11-18 19:32 . 2011-11-18 19:32 55384 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2011-11-18 19:29 . 2011-11-18 19:30 -------- d-----w- c:\users\HALLART Manuel\AppData\Local\adaware
2011-11-18 19:29 . 2011-11-23 13:31 -------- d-----w- c:\programdata\Ad-Aware Browsing Protection
2011-11-18 19:29 . 2011-11-19 18:06 -------- d-----w- c:\program files (x86)\Toolbar Cleaner
2011-11-18 19:29 . 2011-11-18 19:33 -------- dc----w- c:\windows\system32\DRVSTORE
2011-11-18 19:29 . 2011-11-18 19:33 -------- d-----w- c:\programdata\Lavasoft
2011-11-18 19:09 . 2011-11-19 18:06 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy
2011-11-18 19:09 . 2011-11-18 19:29 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2011-11-18 16:25 . 2011-11-18 16:25 512 ----a-w- C:\PhysicalDisk0_MBR.bin
2011-11-18 16:23 . 2011-11-19 06:53 -------- d-----w- C:\ZHP
2011-11-18 16:22 . 2011-11-19 18:06 -------- d-----w- c:\program files (x86)\ZHPDiag
2011-11-18 15:33 . 2011-11-19 18:06 -------- d-----w- c:\program files\CCleaner
2011-11-18 13:08 . 2011-11-18 13:08 -------- d-----w- c:\programdata\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}
2011-11-18 13:01 . 2011-11-18 13:01 -------- d-----w- c:\users\HALLART Manuel\AppData\Local\PackageAware
2011-11-16 16:56 . 2011-11-19 18:06 -------- d-----w- c:\program files (x86)\Trend Micro
2011-11-16 16:56 . 2011-11-16 16:56 388096 ----a-r- c:\users\HALLART Manuel\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-11-14 14:05 . 2011-11-19 18:06 -------- d-----w- c:\users\HALLART Manuel\AppData\Roaming\Skype
2011-11-14 14:03 . 2011-11-19 18:06 -------- d-----w- c:\programdata\Skype
2011-11-14 14:00 . 2011-11-14 14:00 -------- d-----w- c:\users\HALLART Manuel\AppData\Local\ElevatedDiagnostics
2011-11-12 14:11 . 2011-11-19 18:04 -------- d-----w- c:\users\HALLART Manuel\AppData\Roaming\OpenOffice.org
2011-11-12 13:41 . 2011-11-19 18:04 -------- d-----w- c:\program files (x86)\OpenOffice.org 3
2011-11-12 07:04 . 2011-11-12 07:04 -------- d-----w- c:\users\HALLART Manuel\AppData\Local\Apps
2011-11-09 17:51 . 2011-10-01 05:28 886784 ----a-w- c:\program files\Common Files\System\wab32.dll
2011-11-09 17:51 . 2011-10-01 04:43 708608 ----a-w- c:\program files (x86)\Common Files\System\wab32.dll
2011-11-09 17:51 . 2011-09-29 16:24 1897328 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-11-09 17:51 . 2011-09-29 04:09 3141120 ----a-w- c:\windows\system32\win32k.sys
2011-11-08 14:55 . 2011-11-19 18:03 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2011-11-08 14:51 . 2011-11-20 10:12 -------- d-----w- c:\users\HALLART Manuel\AppData\Local\Solid State Networks
2011-10-26 05:25 . 2011-08-15 05:08 6144 ----a-w- c:\program files\Internet Explorer\iecompat.dll
2011-10-26 05:25 . 2011-08-15 04:25 6144 ----a-w- c:\program files (x86)\Internet Explorer\iecompat.dll
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-20 10:12 . 2011-08-22 09:04 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-10-01 03:21 . 2011-10-13 14:56 1638912 ----a-w- c:\windows\system32\mshtml.tlb
2011-10-01 02:59 . 2011-10-13 14:56 1638912 ----a-w- c:\windows\SysWow64\mshtml.tlb
2011-09-11 10:41 . 2011-09-11 10:41 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-08-27 05:40 . 2011-10-13 14:56 331776 ----a-w- c:\windows\system32\oleacc.dll
2011-08-27 05:40 . 2011-10-13 14:56 861184 ----a-w- c:\windows\system32\oleaut32.dll
2011-08-27 04:43 . 2011-10-13 14:56 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
2011-08-27 04:43 . 2011-10-13 14:56 233472 ----a-w- c:\windows\SysWow64\oleacc.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-11-23_06.49.40 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-07-14 04:54 . 2011-11-23 13:31 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-07-14 04:54 . 2011-11-23 06:49 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2011-11-23 13:31 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2011-11-23 06:49 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2011-11-23 06:49 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2011-11-23 13:31 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-12-08 06:08 . 2011-11-23 13:32 44682 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
- 2009-07-14 05:10 . 2011-11-23 06:03 28924 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2011-11-23 13:32 28924 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2011-06-22 17:34 . 2011-11-23 13:31 32768 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-06-22 17:34 . 2011-11-23 06:49 32768 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-06-22 17:34 . 2011-11-23 06:49 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2011-06-22 17:34 . 2011-11-23 13:31 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2011-11-23 06:49 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2011-11-23 13:31 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-06-23 10:47 . 2011-11-23 13:31 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-06-23 10:47 . 2011-11-23 06:49 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-06-23 10:47 . 2011-11-23 13:31 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2011-06-23 10:47 . 2011-11-23 06:49 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2011-06-23 10:47 . 2011-11-23 13:31 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2011-06-23 10:47 . 2011-11-23 06:49 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-06-23 10:42 . 2011-11-23 13:31 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-06-23 10:42 . 2011-11-23 06:49 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-06-23 11:07 . 2011-11-23 13:09 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\Fichiers Internet temporaires\Content.IE5\index.dat
- 2011-06-23 11:07 . 2011-11-23 06:04 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\Fichiers Internet temporaires\Content.IE5\index.dat
- 2011-03-09 13:16 . 2011-11-23 06:49 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-03-09 13:16 . 2011-11-23 13:31 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-06-23 10:42 . 2011-11-23 13:32 7120 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1725602463-3394975434-1511070320-1000_UserData.bin
- 2011-11-23 06:48 . 2011-11-23 06:48 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2011-11-23 13:30 . 2011-11-23 13:30 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2011-11-23 13:30 . 2011-11-23 13:30 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2011-11-23 06:48 . 2011-11-23 06:48 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2011-06-23 12:55 . 2011-11-23 11:53 281244 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_FastS4.bin
+ 2011-03-04 16:32 . 2011-11-23 13:23 712986 c:\windows\system32\perfh00C.dat
- 2011-03-04 16:32 . 2011-11-23 06:06 712986 c:\windows\system32\perfh00C.dat
+ 2009-07-14 02:36 . 2011-11-23 13:23 624094 c:\windows\system32\perfh009.dat
- 2009-07-14 02:36 . 2011-11-23 06:06 624094 c:\windows\system32\perfh009.dat
+ 2011-03-04 16:32 . 2011-11-23 13:23 134708 c:\windows\system32\perfc00C.dat
- 2011-03-04 16:32 . 2011-11-23 06:06 134708 c:\windows\system32\perfc00C.dat
+ 2009-07-14 02:36 . 2011-11-23 13:23 110078 c:\windows\system32\perfc009.dat
- 2009-07-14 02:36 . 2011-11-23 06:06 110078 c:\windows\system32\perfc009.dat
+ 2009-07-14 05:12 . 2011-11-23 13:31 262144 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
- 2009-07-14 05:12 . 2011-11-23 06:49 262144 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2009-07-14 05:01 . 2011-11-23 13:30 358472 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
- 2009-07-14 05:01 . 2011-11-23 06:47 358472 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 02:34 . 2011-11-23 11:21 10223616 c:\windows\system32\SMI\Store\Machine\schema.dat
- 2009-07-14 02:34 . 2011-11-23 06:17 10223616 c:\windows\system32\SMI\Store\Machine\schema.dat
+ 2011-06-23 13:07 . 2011-11-23 13:02 10588980 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1725602463-3394975434-1511070320-1000-8192.dat
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 03:40 120176 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM"="c:\program files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2008-10-24 206112]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-11-18 39408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-03-04 284696]
"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2010-05-27 337264]
"EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2010-03-11 201584]
"EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2010-03-11 407920]
"Norton Online Backup"="c:\program files (x86)\Symantec\Norton Online Backup\NOBuClient.exe" [2010-06-01 1155928]
"Hotkey Utility"="c:\program files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe" [2010-12-03 618600]
"MDS_Menu"="c:\program files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504]
"ArcadeMovieService"="c:\program files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe" [2010-06-29 124136]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-07-04 3493720]
"BlackBerryAutoUpdate"="c:\program files (x86)\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe" [2009-07-01 623960]
"RoxWatchTray"="c:\program files (x86)\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2009-04-11 236016]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"Ad-Aware Browsing Protection"="c:\programdata\Ad-Aware Browsing Protection\adawarebp.exe" [2011-10-21 198032]
.
c:\users\HALLART Manuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 - Capture d'écran et lancement.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer4"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Service Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-07-03 136176]
R3 gupdatem;Service Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-07-03 136176]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-05-27 305520]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-03-04 13336]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-11-09 369256]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2010-01-29 243232]
S2 USBS3S4Detection;USBS3S4Detection;c:\oem\USBDECTION\USBS3S4Detection.exe [2009-12-09 76320]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
Contenu du dossier 'Tâches planifiées'
.
2011-11-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-07-03 06:48]
.
2011-11-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-07-03 06:48]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-07-04 11:43 134384 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 03:42 137584 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"mwlDaemon"="c:\program files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe" [2010-05-27 349552]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-02-24 9642528]
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://pentoweb.net/pt5.php
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://acer.msn.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xporter vers Microsoft Excel - c:\progra~2\MICROS~3\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 212.27.40.241 212.27.40.240
FF - ProfilePath - c:\users\HALLART Manuel\AppData\Roaming\Mozilla\Firefox\Profiles\ewtdx814.default\
FF - prefs.js: browser.search.selectedEngine - Search the Web
FF - prefs.js: browser.startup.homepage - hxxp://pentoweb.net/pt5.php
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=utf-8&m ... awaretb&q=
.
- - - - ORPHELINS SUPPRIMES - - - -
.
Toolbar-Locked - (no file)
.
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_USERS\S-1-5-21-1725602463-3394975434-1511070320-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*í*Æ*%\OpenWithList]
@Class="Shell"
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Cyberlink\Shared files\RichVideo.exe
c:\program files (x86)\OpenOffice.org 3\program\soffice.exe
c:\program files (x86)\OpenOffice.org 3\program\soffice.bin
.
**************************************************************************
.
Heure de fin: 2011-11-23 14:36:43 - La machine a redémarré
ComboFix-quarantined-files.txt 2011-11-23 13:36
ComboFix2.txt 2011-11-23 13:07
ComboFix3.txt 2011-11-23 11:14
ComboFix4.txt 2011-11-23 06:54
.
Avant-CF: 433 046 491 136 octets libres
Après-CF: 432 989 753 344 octets libres
.
- - End Of File - - 938DA89310AE4C89C8AB0D9DCFC80AEA

Tu ne lis jamais la fin de l'histoire ?
Vois un peu la dernière ligne de mes derniers messages.
--

Ouvre le fichier CFScrpt.txt (sur ton Bureau) et efface tout son contenu et colle ceci à la place (à partir de DDS):

DDS::
uStart Page = hxxp://pentoweb.net/pt5.php

Firefox::
FF - prefs.js: browser.startup.homepage - hxxp://pentoweb.net/pt5.php

RegLock::
[HKEY_USERS\S-1-5-21-1725602463-3394975434-1511070320-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*í*Æ*%\OpenWithList]

Cliquer sur "Fichier" => "enregistrer" et,
Fermer toutes les fenêtres et applications ouvertes et désactiver antivirus, pare-feu et antispyware pour éviter qu'ils interfèrent avec ComboFix.
Glisser le fichier CFScript.txt et le déposer sur ComboFix.exe
Ceci a pour effet de lancer ComboFix. Patienter!
A la fin, redémarrer le PC (s'il ne redémarre pas automatiquement) et Copier/coller le contenu du rapport généré dans la prochaine réponse. Il est sauvegardé, automatiquement, à la racine de la partition système (généralement C:\).

ComboFix 11-11-22.03 - HALLART Manuel 23/11/2011 17:58:29.7.4 - x64
Microsoft Windows 7 Édition Familiale Premium 6.1.7600.0.1252.33.1036.18.4023.3132 [GMT 1:00]
Lancé depuis: c:\users\HALLART Manuel\Desktop\ComboFix.exe
Commutateurs utilisés :: c:\users\HALLART Manuel\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-10-23 au 2011-11-23 ))))))))))))))))))))))))))))))))))))
.
.
2011-11-23 17:01 . 2011-11-23 17:01 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-11-23 06:07 . 2011-10-07 04:16 8570192 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A0338870-C896-45AC-BF28-2D0D4613B0C6}\mpengine.dll
2011-11-20 10:12 . 2011-11-22 10:12 -------- d-----w- c:\program files (x86)\McAfee Security Scan
2011-11-20 10:12 . 2011-11-20 10:12 -------- d-----w- c:\programdata\McAfee Security Scan
2011-11-18 19:32 . 2011-11-18 19:32 55384 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2011-11-18 19:29 . 2011-11-18 19:30 -------- d-----w- c:\users\HALLART Manuel\AppData\Local\adaware
2011-11-18 19:29 . 2011-11-23 17:03 -------- d-----w- c:\programdata\Ad-Aware Browsing Protection
2011-11-18 19:29 . 2011-11-19 18:06 -------- d-----w- c:\program files (x86)\Toolbar Cleaner
2011-11-18 19:29 . 2011-11-18 19:33 -------- dc----w- c:\windows\system32\DRVSTORE
2011-11-18 19:29 . 2011-11-18 19:33 -------- d-----w- c:\programdata\Lavasoft
2011-11-18 19:09 . 2011-11-19 18:06 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy
2011-11-18 19:09 . 2011-11-18 19:29 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2011-11-18 16:25 . 2011-11-18 16:25 512 ----a-w- C:\PhysicalDisk0_MBR.bin
2011-11-18 16:23 . 2011-11-19 06:53 -------- d-----w- C:\ZHP
2011-11-18 16:22 . 2011-11-19 18:06 -------- d-----w- c:\program files (x86)\ZHPDiag
2011-11-18 15:33 . 2011-11-19 18:06 -------- d-----w- c:\program files\CCleaner
2011-11-18 13:08 . 2011-11-18 13:08 -------- d-----w- c:\programdata\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}
2011-11-18 13:01 . 2011-11-18 13:01 -------- d-----w- c:\users\HALLART Manuel\AppData\Local\PackageAware
2011-11-16 16:56 . 2011-11-19 18:06 -------- d-----w- c:\program files (x86)\Trend Micro
2011-11-16 16:56 . 2011-11-16 16:56 388096 ----a-r- c:\users\HALLART Manuel\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-11-14 14:05 . 2011-11-19 18:06 -------- d-----w- c:\users\HALLART Manuel\AppData\Roaming\Skype
2011-11-14 14:03 . 2011-11-19 18:06 -------- d-----w- c:\programdata\Skype
2011-11-14 14:00 . 2011-11-14 14:00 -------- d-----w- c:\users\HALLART Manuel\AppData\Local\ElevatedDiagnostics
2011-11-12 14:11 . 2011-11-19 18:04 -------- d-----w- c:\users\HALLART Manuel\AppData\Roaming\OpenOffice.org
2011-11-12 13:41 . 2011-11-19 18:04 -------- d-----w- c:\program files (x86)\OpenOffice.org 3
2011-11-12 07:04 . 2011-11-12 07:04 -------- d-----w- c:\users\HALLART Manuel\AppData\Local\Apps
2011-11-09 17:51 . 2011-10-01 05:28 886784 ----a-w- c:\program files\Common Files\System\wab32.dll
2011-11-09 17:51 . 2011-10-01 04:43 708608 ----a-w- c:\program files (x86)\Common Files\System\wab32.dll
2011-11-09 17:51 . 2011-09-29 16:24 1897328 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-11-09 17:51 . 2011-09-29 04:09 3141120 ----a-w- c:\windows\system32\win32k.sys
2011-11-08 14:55 . 2011-11-19 18:03 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2011-11-08 14:51 . 2011-11-20 10:12 -------- d-----w- c:\users\HALLART Manuel\AppData\Local\Solid State Networks
2011-10-26 05:25 . 2011-08-15 05:08 6144 ----a-w- c:\program files\Internet Explorer\iecompat.dll
2011-10-26 05:25 . 2011-08-15 04:25 6144 ----a-w- c:\program files (x86)\Internet Explorer\iecompat.dll
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-20 10:12 . 2011-08-22 09:04 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-10-01 03:21 . 2011-10-13 14:56 1638912 ----a-w- c:\windows\system32\mshtml.tlb
2011-10-01 02:59 . 2011-10-13 14:56 1638912 ----a-w- c:\windows\SysWow64\mshtml.tlb
2011-09-11 10:41 . 2011-09-11 10:41 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-08-27 05:40 . 2011-10-13 14:56 331776 ----a-w- c:\windows\system32\oleacc.dll
2011-08-27 05:40 . 2011-10-13 14:56 861184 ----a-w- c:\windows\system32\oleaut32.dll
2011-08-27 04:43 . 2011-10-13 14:56 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
2011-08-27 04:43 . 2011-10-13 14:56 233472 ----a-w- c:\windows\SysWow64\oleacc.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-11-23_06.49.40 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-12-08 06:08 . 2011-11-23 13:32 44682 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2011-11-23 17:04 28924 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
- 2009-07-14 05:10 . 2011-11-23 06:03 28924 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2011-06-22 17:34 . 2011-11-23 17:03 32768 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-06-22 17:34 . 2011-11-23 06:49 32768 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-06-22 17:34 . 2011-11-23 17:03 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2011-06-22 17:34 . 2011-11-23 06:49 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2011-11-23 17:03 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2011-11-23 06:49 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-06-23 10:42 . 2011-11-23 17:04 7120 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1725602463-3394975434-1511070320-1000_UserData.bin
+ 2011-06-23 12:55 . 2011-11-23 16:49 281418 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_FastS4.bin
- 2011-03-04 16:32 . 2011-11-23 06:06 712986 c:\windows\system32\perfh00C.dat
+ 2011-03-04 16:32 . 2011-11-23 13:36 712986 c:\windows\system32\perfh00C.dat
- 2009-07-14 02:36 . 2011-11-23 06:06 624094 c:\windows\system32\perfh009.dat
+ 2009-07-14 02:36 . 2011-11-23 13:36 624094 c:\windows\system32\perfh009.dat
+ 2011-03-04 16:32 . 2011-11-23 13:36 134708 c:\windows\system32\perfc00C.dat
- 2011-03-04 16:32 . 2011-11-23 06:06 134708 c:\windows\system32\perfc00C.dat
- 2009-07-14 02:36 . 2011-11-23 06:06 110078 c:\windows\system32\perfc009.dat
+ 2009-07-14 02:36 . 2011-11-23 13:36 110078 c:\windows\system32\perfc009.dat
- 2009-07-14 05:12 . 2011-11-23 06:49 262144 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2009-07-14 05:12 . 2011-11-23 17:03 262144 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
- 2009-07-14 02:34 . 2011-11-23 06:17 10223616 c:\windows\system32\SMI\Store\Machine\schema.dat
+ 2009-07-14 02:34 . 2011-11-23 13:44 10223616 c:\windows\system32\SMI\Store\Machine\schema.dat
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 03:40 120176 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM"="c:\program files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2008-10-24 206112]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-11-18 39408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-03-04 284696]
"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2010-05-27 337264]
"EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2010-03-11 201584]
"EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2010-03-11 407920]
"Norton Online Backup"="c:\program files (x86)\Symantec\Norton Online Backup\NOBuClient.exe" [2010-06-01 1155928]
"Hotkey Utility"="c:\program files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe" [2010-12-03 618600]
"MDS_Menu"="c:\program files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504]
"ArcadeMovieService"="c:\program files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe" [2010-06-29 124136]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-07-04 3493720]
"BlackBerryAutoUpdate"="c:\program files (x86)\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe" [2009-07-01 623960]
"RoxWatchTray"="c:\program files (x86)\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2009-04-11 236016]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"Ad-Aware Browsing Protection"="c:\programdata\Ad-Aware Browsing Protection\adawarebp.exe" [2011-10-21 198032]
.
c:\users\HALLART Manuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 - Capture d'écran et lancement.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer4"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Service Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-07-03 136176]
R3 gupdatem;Service Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-07-03 136176]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-05-27 305520]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-03-04 13336]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-11-09 369256]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2010-01-29 243232]
S2 USBS3S4Detection;USBS3S4Detection;c:\oem\USBDECTION\USBS3S4Detection.exe [2009-12-09 76320]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
Contenu du dossier 'Tâches planifiées'
.
2011-11-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-07-03 06:48]
.
2011-11-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-07-03 06:48]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-07-04 11:43 134384 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 03:42 137584 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"mwlDaemon"="c:\program files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe" [2010-05-27 349552]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-02-24 9642528]
.
------- Examen supplémentaire -------
.
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://acer.msn.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xporter vers Microsoft Excel - c:\progra~2\MICROS~3\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 212.27.40.241 212.27.40.240
FF - ProfilePath - c:\users\HALLART Manuel\AppData\Roaming\Mozilla\Firefox\Profiles\ewtdx814.default\
FF - prefs.js: browser.search.selectedEngine - Search the Web
FF - prefs.js: browser.startup.homepage - hxxp://pentoweb.net/pt5.php
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=utf-8&m ... awaretb&q=
.
- - - - ORPHELINS SUPPRIMES - - - -
.
Toolbar-Locked - (no file)
.
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_USERS\S-1-5-21-1725602463-3394975434-1511070320-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*í*Æ*%\OpenWithList]
@Class="Shell"
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Cyberlink\Shared files\RichVideo.exe
c:\program files (x86)\OpenOffice.org 3\program\soffice.exe
c:\program files (x86)\OpenOffice.org 3\program\soffice.bin
.
**************************************************************************
.
Heure de fin: 2011-11-23 18:07:12 - La machine a redémarré
ComboFix-quarantined-files.txt 2011-11-23 17:07
ComboFix2.txt 2011-11-23 13:36
ComboFix3.txt 2011-11-23 13:07
ComboFix4.txt 2011-11-23 11:14
ComboFix5.txt 2011-11-23 16:57
.
Avant-CF: 433 071 730 688 octets libres
Après-CF: 432 950 059 008 octets libres
.
- - End Of File - - A6A36A675AFDCE9FD637F38F1CB85265

Tu peux me dire où t'en es avec ta machine?

Ce matin, en utilisant internet explorer, notre page MSN est bien arrivé - par contre en utilisant mozilla il y avait toujours multiexplore - j'ai donc désinstallé mozilla
je vous remercie de votre patience et vos résultats
En espérant ne pas devoir vous embêter de nouveau
Merci
Manuel

Bonjour,

Pas l'air de vouloir aller plus loin!

Si pas d'autres soucis, voici quelques suggestions pour t'aider à prendre soin de ta machine (ignore les points déjà traités et/ou ceux que tu juges inutiles pour toi ou ne s'appliquant pas à ton système).


>>> Supprimer les utilitaires:

• Supprimer ZHPDiag depuis "Ajout/ suppression de programmes.
• Pour supprimer ComboFix, cliquer sur "Démarrer" => "Exécuter" et saisir (ou copier/ coller): ComboFix /Uninstall (espace entre "ComboFix" et "/Uninstall"). Cliquer sur "OK".
  Ce qui a pour effet de supprimer ComboFix ainsi que les dossiers/ fichiers qu'il a installés et ré-initialiser les points de restauration.
• Pour supprimer les autres utilitaires et leurs rapports, s'il en reste sur le Bureau et/ou à la racine de la partition système, cliquer-droit dessus => "Supprimer".

>>> Protéger/ Sécuriser:

• Contrôler et configurer les mises à jour Windows: Cliquer sur "Démarrer" => "Tous les programmes" => "Windows update" et installer toutes les Mises à jour critiques après avoir accepté l'installation de l'ActiveX (si proposé).
  - Windows XP: Cliquer sur "Démarrer" => "Panneau de configuration" => "Mises à jour automatiques" et choisir "Installation automatique (recommandé)". Préférer "tous les jours" à une heur où le PC est allumé.
  - Windows Vista/W7: Cliquer sur "Démarrer" => "Tous les programmes" => "Windows Update". Cliquer sur "Modifier les paramètres" => "Installer les mises à jour automatiquement (recommandé)". Préférer "tous les jours" à une heure où le PC est allumé.
  
• Installer Update Checker pour surveiller les MAJ logiciels.
  
• Utiliser Mes drivers pour les MAJ des pilotes (cliquer sur Lancer la détection
  
• Sauvegarder le Registre avec Erunt.
  Pour des raisons évidentes, garder les copies de sauvegarde sur un support autre que le disque système.
  
• Immunisez votre machine avec Spyware Blaster, compatible avec Toutes les versions de Windows 32bit et 64bit et peut s'installer en même temps qu'autre antispyware. Tuto.
  
• Vaccinez votre machine et vos médias amovibles (clés USB...) contre les "vers" (Autorun worms) avec USBFix ou Autorun Protector. Juste brancher tous les médias amovibles, lancer le programme et cliquer sur le bouton Vaccination (l'action est réversible en cliquant sur "Supprimer la vaccination".
  
• Opter pour Firefox ou Opera pour la navigation de tous les jours et réserver Internet Explorer pour les Mises à jour et les cas bien spécifiques.

>>> Optimiser Windows:

• Il y a toujours des programmes qui se lancent inutilement en même temps que Windows.
  Télécharger, sur le Bureau, MBAM' StartUpLite depuis ici.
  Fermer toutes les applications et autres fenêtres en cours et double-cliquer sur StartUpLite.exe Vista W7, cliquer-droit => "Exécuter en tant qu'administrateur") pour lancer le programme qui affichera toutes les entrées inutiles en démarrage automatique. Sélectionner les entrées affichées et cliquer sur "Continue" (à moins que vous vouliez en garder).
  S'il affiche "No unnecessary startups found!", c'est qu'il n'y a rien à faire.
  On peut, aussi, utiliser CCleaner pour gérer l'activité de ces processus:
  Lancer CCleaner => Outils => Démarrage. Dans la liste de droite, sélectionner un processus marqué "Oui" et cliquer sur le bouton "Désactiver".
  Fermer CCleaner et redémarrer pour vérifier s'il n'y a pas d'incidences apparentes (réactiver le processus si nécessaire).
  
• Nettoyer avec (CCleaner) et PureRa puis dé-fragmenter (Defraggler), régulièrement, les Partitions/ Disques.

>>> Ajouter Résolu à ton 1er post (mode d'emploi).


Bonne chance!