Assiste.Forums

de **totof91** » 15 Avr 2012, 16:06

Bonjour,
j'ai un problème suite aux publicités commerciales que m'envoie le site la redoute et taillissime. En effet, depuis 2-3 semaines, lorsque je clique sur la pub pour bénéficier des promotions proposées, je tombe sur une adresse web précédée de http://ad.zanox.com/ppc/?12621111C1452709100T&ULP=

Je vous remercie de votre aide

Voici le rapport de Malwarebytes:

Malwarebytes Anti-Malware (Essai) 1.61.0.1400
www.malwarebytes.org

Version de la base de données: v2012.04.15.03

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
Proprietaire :: PROPRIETAIRE-PC [administrateur]

Protection: Activé

15/04/2012 16:33:05
mbam-log-2012-04-15 (16-33-05).txt

Type d'examen: Examen rapide
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 3255
Temps écoulé: 34 seconde(s) [abandonné]

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)

Fichier(s) détecté(s): 0
(Aucun élément nuisible détecté)

(fin)

de **totof91** » 15 Avr 2012, 16:14

Voici le rapport OTL .txt, en 2 messages car il est trop long

OTL logfile created on: 15/04/2012 16:44:18 - Run 1
OTL by OldTimer - Version 3.2.39.2 Folder = C:\Users\Proprietaire\Desktop
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy

3,18 Gb Total Physical Memory | 2,16 Gb Available Physical Memory | 68,02% Memory free
6,35 Gb Paging File | 4,77 Gb Available in Paging File | 75,13% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 297,99 Gb Total Space | 190,35 Gb Free Space | 63,88% Space Free | Partition Type: NTFS

Computer Name: PROPRIETAIRE-PC | User Name: Proprietaire | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/04/15 16:21:18 | 000,593,920 | ---- | M] (OldTimer Tools) -- C:\Users\Proprietaire\Desktop\OTL.exe
PRC - [2012/04/05 10:33:56 | 000,204,288 | ---- | M] (Facebook) -- C:\Users\Proprietaire\AppData\Local\Facebook\Messenger\2.0.4478.0\FacebookMessenger.exe
PRC - [2012/04/04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012/04/04 15:56:38 | 000,462,408 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2012/04/01 17:04:00 | 000,634,880 | ---- | M] () -- C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe
PRC - [2012/03/07 02:15:17 | 004,241,512 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2012/03/07 02:15:14 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2012/01/03 15:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011/10/24 20:50:28 | 000,273,528 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Real\RealPlayer\Update\realsched.exe
PRC - [2011/09/15 13:06:04 | 000,088,576 | ---- | M] () -- C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
PRC - [2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2011/02/18 11:47:12 | 000,079,192 | ---- | M] (Research In Motion Limited) -- C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
PRC - [2011/01/17 19:09:00 | 011,322,880 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe
PRC - [2011/01/17 19:09:00 | 011,314,688 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin
PRC - [2010/11/20 14:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2010/01/29 23:20:26 | 000,112,208 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
PRC - [2010/01/27 13:30:16 | 001,312,848 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Logitech\SetPointP\SetPoint.exe
PRC - [2009/10/01 05:02:38 | 002,320,920 | R--- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2009/10/01 05:02:36 | 000,268,824 | R--- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2009/10/01 05:02:30 | 001,098,264 | R--- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
PRC - [2009/07/14 03:14:24 | 000,157,184 | ---- | M] (Microsoft Corporation) -- c:\program files\windows defender\MpCmdRun.exe

========== Modules (No Company Name) ==========

MOD - [2012/04/13 08:42:09 | 011,833,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\507b4ca18da9d2fde2e51a1f04593443\System.Web.ni.dll
MOD - [2012/04/12 23:04:38 | 012,433,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\262285b3d0afafc5059f3fe9be69bff5\System.Windows.Forms.ni.dll
MOD - [2012/04/12 23:04:33 | 001,590,784 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\8177623eac8f15cf95b587625439eac7\System.Drawing.ni.dll
MOD - [2012/04/01 17:04:00 | 001,515,520 | ---- | M] () -- C:\Program Files\HTC\HTC Sync 3.0\Maps\R66Api.dll
MOD - [2012/04/01 17:04:00 | 000,634,880 | ---- | M] () -- C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe
MOD - [2012/04/01 17:04:00 | 000,559,244 | ---- | M] () -- C:\Program Files\HTC\HTC Sync 3.0\sqlite3.7.dll
MOD - [2012/04/01 17:04:00 | 000,516,599 | ---- | M] () -- C:\Program Files\HTC\HTC Sync 3.0\sqlite3.dll
MOD - [2012/04/01 17:04:00 | 000,385,024 | ---- | M] () -- C:\Program Files\HTC\HTC Sync 3.0\HtcDetect.dll
MOD - [2012/04/01 17:04:00 | 000,172,032 | ---- | M] () -- C:\Program Files\HTC\HTC Sync 3.0\htcDetectLegend.dll
MOD - [2012/04/01 17:04:00 | 000,151,552 | ---- | M] () -- C:\Program Files\HTC\HTC Sync 3.0\htcDisk.dll
MOD - [2012/04/01 17:04:00 | 000,103,936 | ---- | M] () -- C:\Program Files\HTC\HTC Sync 3.0\OutputLog.dll
MOD - [2012/04/01 17:04:00 | 000,094,208 | ---- | M] () -- C:\Program Files\HTC\HTC Sync 3.0\fdHttpd.dll
MOD - [2012/02/15 07:56:00 | 006,611,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\eedf95f16a7e81ca43dd8accf11498a3\System.Data.ni.dll
MOD - [2012/02/15 07:55:12 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\9866d1f6178e1cde25642f1ac293ff8d\System.Xml.ni.dll
MOD - [2012/02/15 07:55:09 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\e620323cacb5b6bfd93fd28d263440e4\System.Configuration.ni.dll
MOD - [2012/02/15 07:55:07 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\faf4e8730ecbd07570111bb7c3b20565\System.ni.dll
MOD - [2011/11/02 00:26:32 | 000,087,912 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011/11/02 00:26:12 | 001,242,472 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2011/10/13 14:11:55 | 011,490,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\a1a82db68b3badc7c27ea1f6579d22c5\mscorlib.ni.dll
MOD - [2011/08/31 19:13:52 | 000,094,208 | ---- | M] () -- C:\Windows\System32\IccLibDll.dll
MOD - [2011/06/18 13:31:54 | 000,985,088 | ---- | M] () -- C:\Program Files\OpenOffice.org 3\program\libxml2.dll
MOD - [2010/11/13 01:35:41 | 000,430,080 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_fr_b77a5c561934e089\System.Windows.Forms.resources.dll
MOD - [2010/11/13 01:35:38 | 000,311,296 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_fr_b77a5c561934e089\mscorlib.resources.dll
MOD - [2010/11/05 03:58:05 | 002,927,616 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
MOD - [2007/09/20 19:34:58 | 000,129,024 | ---- | M] () -- C:\Program Files\WinRAR\rarext.dll

========== Win32 Services (SafeList) ==========

SRV - [2012/04/14 18:27:20 | 000,253,088 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/04/04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012/03/07 02:15:14 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2012/01/03 15:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011/09/15 13:06:04 | 000,088,576 | ---- | M] () [Auto | Running] -- C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service)
SRV - [2010/06/22 23:09:59 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2010/01/29 23:17:14 | 000,292,944 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe -- (LBTServ)
SRV - [2009/10/01 05:02:38 | 002,320,920 | R--- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R)
SRV - [2009/10/01 05:02:36 | 000,268,824 | R--- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R)
SRV - [2009/07/14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)

========== Driver Services (SafeList) ==========

DRV - [2012/04/04 15:56:40 | 000,022,344 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2012/03/07 02:03:51 | 000,612,184 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2012/03/07 02:03:38 | 000,337,880 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2012/03/07 02:02:43 | 000,024,408 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswKbd.sys -- (aswKbd)
DRV - [2012/03/07 02:02:14 | 000,044,376 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr2.sys -- (aswRdr)
DRV - [2012/03/07 02:01:53 | 000,053,848 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2012/03/07 02:01:48 | 000,057,688 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2012/03/07 02:01:30 | 000,020,696 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2010/11/20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/11/20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010/06/23 11:24:56 | 000,023,040 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\htcnprot.sys -- (htcnprot)
DRV - [2009/11/10 13:55:32 | 000,028,560 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LUsbFilt.sys -- (LUsbFilt)
DRV - [2009/11/10 13:55:08 | 000,037,392 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2009/11/10 13:54:52 | 000,035,984 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2009/09/26 01:41:12 | 000,200,192 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\IntcDAud.sys -- (IntcDAud) Son Intel(R)
DRV - [2009/09/23 11:09:56 | 000,208,552 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\e1k6232.sys -- (e1kexpress) Intel(R)
DRV - [2009/09/21 14:20:26 | 000,028,632 | ---- | M] (Intel Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\iqvw32.sys -- (NAL)
DRV - [2009/09/17 21:54:14 | 000,041,088 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HECI.sys -- (HECI) Intel(R)
DRV - [2009/03/09 01:53:43 | 000,038,400 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\DgivEcp.sys -- (DgiVecp)
DRV - [2007/01/10 01:46:25 | 000,005,120 | ---- | M] (Samsung Electronics) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\SSPORT.sys -- (SSPORT)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/kcsoftwares/{E79FD839-F8A8-4293-A456-519DE4B6731F}
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-2159176293-633151126-1273594381-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
IE - HKU\S-1-5-21-2159176293-633151126-1273594381-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKU\S-1-5-21-2159176293-633151126-1273594381-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/kcsoftwares/{E79FD839-F8A8-4293-A456-519DE4B6731F}
IE - HKU\S-1-5-21-2159176293-633151126-1273594381-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://fr.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-2159176293-633151126-1273594381-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr
IE - HKU\S-1-5-21-2159176293-633151126-1273594381-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = B9 08 86 1F 80 DD CB 01 [binary data]
IE - HKU\S-1-5-21-2159176293-633151126-1273594381-1000\..\URLSearchHook: {05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} - No CLSID value found
IE - HKU\S-1-5-21-2159176293-633151126-1273594381-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-2159176293-633151126-1273594381-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2159176293-633151126-1273594381-1000\..\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}: "URL" = http://www.bigseekpro.com/search/browser/kcsoftwares/{E79FD839-F8A8-4293-A456-519DE4B6731F}?q={searchTerms}
IE - HKU\S-1-5-21-2159176293-633151126-1273594381-1000\..\SearchScopes\{A25CB66C-225B-410A-98FB-93B0D02EB3D0}: "URL" = http://www.google.com/search?hl=en&q={searchTerms}
IE - HKU\S-1-5-21-2159176293-633151126-1273594381-1000\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = http://www.daemon-search.com/search/web?q={searchTerms}
IE - HKU\S-1-5-21-2159176293-633151126-1273594381-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2159176293-633151126-1273594381-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultthis.engineName: "Oryte Games 1.17 Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2830576&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "about:home"
FF - prefs.js..extensions.enabledItems: DeviceDetection@logitech.com:1.23.0.5
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.7
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29
FF - prefs.js..extensions.enabledItems: {3C5F0F00-683D-4847-89C8-E7AF64FD1CFB}:1.3.330.6
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_233.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Content Upload Plugin,version=1.0.0: C:\Program Files\DivX\DivX Content Uploader\npUpload.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.669: c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.669: c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.669: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.669: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.669: c:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@RIM.com/WebSLLauncher,version=1.0: C:\Program Files\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll ()
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.3: C:\Users\Proprietaire\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll ( )
FF - HKCU\Software\MozillaPlugins\facebook.com/fbDesktopPlugin: C:\Users\Proprietaire\AppData\Local\Facebook\Messenger\2.0.4478.0\npFbDesktopPlugin.dll (Facebook, Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/02/09 22:36:25 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/04/12 06:37:51 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

[2010/04/19 19:18:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Proprietaire\AppData\Roaming\mozilla\Extensions
[2010/04/19 19:18:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Proprietaire\AppData\Roaming\mozilla\Extensions\mozswing@mozswing.org
[2012/04/10 22:27:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Proprietaire\AppData\Roaming\mozilla\Firefox\Profiles\902j0t4o.default\extensions
[2012/04/10 21:40:19 | 000,000,000 | ---D | M] (Bitdefender QuickScan) -- C:\Users\Proprietaire\AppData\Roaming\mozilla\Firefox\Profiles\902j0t4o.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
[2011/11/11 21:09:51 | 000,000,000 | ---D | M] (Разпознаване на устройство Logitech) -- C:\Users\Proprietaire\AppData\Roaming\mozilla\Firefox\Profiles\902j0t4o.default\extensions\DeviceDetection@logitech.com
[2010/12/30 18:20:40 | 000,000,935 | ---- | M] () -- C:\Users\Proprietaire\AppData\Roaming\Mozilla\Firefox\Profiles\902j0t4o.default\searchplugins\conduit.xml
[2011/03/08 20:54:03 | 000,002,059 | ---- | M] () -- C:\Users\Proprietaire\AppData\Roaming\Mozilla\Firefox\Profiles\902j0t4o.default\searchplugins\daemon-search.xml
[2011/11/11 14:44:17 | 000,002,380 | ---- | M] () -- C:\Users\Proprietaire\AppData\Roaming\Mozilla\Firefox\Profiles\902j0t4o.default\searchplugins\search.xml
[2012/03/11 21:44:25 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions
[2012/03/11 21:44:25 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}
[2012/01/15 12:18:20 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012/03/11 21:44:18 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011/11/05 06:13:41 | 000,001,516 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-france.xml
[2011/11/05 05:32:18 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011/11/05 06:13:41 | 000,001,822 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\cnrtl-tlfi-fr.xml
[2011/11/05 06:13:41 | 000,001,154 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-france.xml
[2011/11/05 06:13:41 | 000,001,426 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-fr.xml
[2011/11/05 06:13:41 | 000,000,956 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-france.xml

O1 HOSTS File: ([2009/06/10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKU\S-1-5-21-2159176293-633151126-1273594381-1000\..\Toolbar\WebBrowser: (no name) - {05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E} - No CLSID value found.
O3 - HKU\S-1-5-21-2159176293-633151126-1273594381-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKU\S-1-5-21-2159176293-633151126-1273594381-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avast] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [BHR] C:\new\Browser Hijack Retaliator 4.5\BHR.exe (Zamaan's Software)
O4 - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)
O4 - HKLM..\Run: [HTC Sync Loader] C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe ()
O4 - HKLM..\Run: [IMSS] C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe ()
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NBKeyScan] C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe (Nero AG)
O4 - HKLM..\Run: [RIMBBLaunchAgent.exe] C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe (Research In Motion Limited)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKU\S-1-5-21-2159176293-633151126-1273594381-1000..\Run: [Facebook Update] C:\Users\Proprietaire\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKU\.DEFAULT..\RunOnce: [adawarebp] reg.exe delete "HKCU\Software\AppDataLow\Software\adawarebp" /f File not found
O4 - HKU\.DEFAULT..\RunOnce: [adawarebp_XP] reg.exe delete "HKCU\Software\adawarebp" /f File not found
O4 - HKU\S-1-5-18..\RunOnce: [adawarebp] reg.exe delete "HKCU\Software\AppDataLow\Software\adawarebp" /f File not found
O4 - HKU\S-1-5-18..\RunOnce: [adawarebp_XP] reg.exe delete "HKCU\Software\adawarebp" /f File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Proprietaire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk = C:\Users\Proprietaire\AppData\Local\Facebook\Messenger\2.0.4478.0\FacebookMessenger.exe (Facebook)
O4 - Startup: C:\Users\Proprietaire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe (Lime Wire, LLC)
O4 - Startup: C:\Users\Proprietaire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8 - Extra context menu item: SmarThru4 Capture Selection - C:\Program Files\SmarThru 4\WebCapture.dll2.htm ()
O8 - Extra context menu item: SmarThru4 Enregistrer au format HTML - C:\Program Files\SmarThru 4\WebCapture.dll1.htm ()
O8 - Extra context menu item: SmarThru4 Enregistrer le texte sélectionné - C:\Program Files\SmarThru 4\WebCapture.dll.htm ()
O8 - Extra context menu item: SmarThru4 Save as HTML - C:\Program Files\SmarThru 4\WebCapture.dll1.htm ()
O8 - Extra context menu item: SmarThru4 Save Selected Text - C:\Program Files\SmarThru 4\WebCapture.dll.htm ()
O8 - Extra context menu item: SmarThru4 Sélection par capture - C:\Program Files\SmarThru 4\WebCapture.dll2.htm ()
O8 - Extra context menu item: SmarThru4 Web Capture - C:\Program Files\SmarThru 4\WebCapture.dll ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0F1F913F-038D-4E0F-8B1E-39282C06AEFE}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0F1F913F-038D-4E0F-8B1E-39282C06AEFE}: NameServer = 178.33.41.181,88.191.223.122
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

CREATERESTOREPOINT
Restore point Set: OTL Restore Point
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2012/04/15 16:27:53 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2012/04/15 16:24:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT
[2012/04/15 16:24:48 | 000,000,000 | ---D | C] -- C:\Program Files\ERUNT
[2012/04/15 16:24:16 | 000,791,393 | ---- | C] (Lars Hederer ) -- C:\Users\Proprietaire\Desktop\erunt-setup.exe
[2012/04/15 16:23:13 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Roaming\Malwarebytes
[2012/04/15 16:22:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/04/15 16:22:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012/04/15 16:22:55 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012/04/15 16:22:55 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012/04/15 16:22:16 | 010,063,000 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\Proprietaire\Desktop\mbam-setup-1.61.0.1400.exe
[2012/04/15 16:21:13 | 000,593,920 | ---- | C] (OldTimer Tools) -- C:\Users\Proprietaire\Desktop\OTL.exe
[2012/04/15 12:19:27 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{83807F2A-FDD1-41EF-A79B-14E5596D0A58}
[2012/04/15 12:19:16 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{605915ED-37B1-4EAA-8F27-8A4D2CF8F9FA}
[2012/04/14 20:06:00 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{6F9913B2-1227-4533-916D-8C505C305E77}
[2012/04/14 18:29:14 | 014,852,504 | ---- | C] (Adobe Systems Inc.) -- C:\Users\Proprietaire\Desktop\AdobeAIRInstaller.exe
[2012/04/14 08:05:20 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{734D52A5-E111-4673-B0FB-B01C9043B39D}
[2012/04/14 08:05:08 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{BBDFD479-E32B-4415-8B53-C389E1E08F59}
[2012/04/13 10:42:25 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{63EB4569-CEEA-4FF8-BE80-989B0532490F}
[2012/04/13 10:42:03 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{3E2E4F1E-F092-43B2-8F58-FDFF6CA7EA65}
[2012/04/12 23:04:21 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2012/04/12 23:04:20 | 001,799,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2012/04/12 23:04:19 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2012/04/12 23:04:19 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2012/04/12 23:04:19 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2012/04/12 23:04:18 | 001,427,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2012/04/12 22:41:37 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{8286C7C6-E68F-458E-B369-4AD776D6EB1A}
[2012/04/12 10:05:13 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{E25E2E1F-5647-4788-AF39-DFF2189D1CAB}
[2012/04/12 10:04:49 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{DF46CDFA-5226-4921-970D-7CEEDCB2C033}
[2012/04/12 06:35:54 | 003,968,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2012/04/12 06:35:53 | 003,913,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2012/04/11 22:04:24 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{4A2B6F9B-4F86-4E13-955F-B750C80E78B1}
[2012/04/11 09:19:35 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{13B4C26F-FD20-4DF4-995A-92D1E6B682D3}
[2012/04/11 09:19:12 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{41CDFA33-3D3E-4FDC-A69B-27274B1231B1}
[2012/04/10 23:10:44 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2012/04/10 23:09:40 | 002,322,184 | ---- | C] (ESET) -- C:\Users\Proprietaire\Desktop\esetsmartinstaller_enu.exe
[2012/04/10 22:59:11 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\Desktop\GenProc1
[2012/04/10 22:29:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zamaan's Software
[2012/04/10 22:29:40 | 001,081,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSCOMCTL.OCX
[2012/04/10 22:29:40 | 000,244,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSFLXGRD.OCX
[2012/04/10 22:29:40 | 000,203,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\richtx32.ocx
[2012/04/10 22:29:40 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msstdfmt.dll
[2012/04/10 22:15:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2012/04/10 22:02:21 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
[2012/04/10 21:59:29 | 000,433,757 | ---- | C] (Headlight Software, Inc.) -- C:\Users\Proprietaire\Desktop\hijackthis_telechargement_01net.exe
[2012/04/10 21:42:20 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Roaming\QuickScan
[2012/04/10 21:38:59 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2012/04/10 21:38:27 | 003,645,656 | ---- | C] (Piriform Ltd) -- C:\Users\Proprietaire\Desktop\ccsetup317.exe
[2012/04/10 21:34:45 | 000,000,000 | ---D | C] -- C:\new
[2012/04/10 21:34:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC Sync
[2012/04/10 21:33:55 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\Desktop\EmsisoftEmergencyKit
[2012/04/10 21:18:27 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{D8CFF366-F277-4E68-AD6F-DE8EAB0554A7}
[2012/04/10 21:18:09 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{A9766CD2-A2AE-4D4E-876F-D3950E955C2F}
[2012/04/10 06:23:38 | 000,000,000 | ---D | C] -- C:\Windows\fr
[2012/04/10 06:09:53 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{5C28234F-D8B9-4500-8BFC-37C46E71EEFE}
[2012/04/10 06:09:37 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{336C413A-9A15-4D1C-94B1-56C7B476C2B5}
[2012/04/09 22:24:36 | 000,101,720 | ---- | C] (Sunbelt Software) -- C:\Windows\System32\drivers\SBREDrv.sys
[2012/04/09 22:20:51 | 000,000,000 | ---D | C] -- C:\Program Files\Toolbar Cleaner
[2012/04/09 22:20:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Lavasoft
[2012/04/09 22:11:27 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Roaming\GetRightToGo
[2012/04/09 11:09:38 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{1865A3FB-9AA5-4716-8221-50A38EF5BC40}
[2012/04/09 11:08:10 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook
[2012/04/09 11:07:58 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{5396F68B-E57C-4EA8-B0CE-620DBB801DB7}
[2012/04/09 11:07:50 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\Facebook
[2012/04/09 11:07:44 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{7F0B7526-886A-4904-8E89-FFC0B54B686B}
[2012/04/08 11:28:10 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{28DBD9CB-2A7C-437A-8550-3A538D550EF5}
[2012/04/08 11:27:59 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{70CA72DA-E351-43AD-B97A-13671E3246C1}
[2012/04/06 18:21:18 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{F7DE8F7D-EC3C-4C90-BF3F-5F2C0DCA5EB7}
[2012/04/05 06:30:36 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{EA4BF32E-B174-47E5-BE98-4A0A1996AD6F}
[2012/04/04 11:55:46 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{656AC4FB-DD8F-4294-87CF-DEAC2258D201}
[2012/04/03 20:01:36 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{57F613CA-CB86-40DA-B47A-6416583AFA18}
[2012/04/03 07:56:03 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{710C87D2-38A3-4A08-9799-35BD37AFCE05}
[2012/04/02 09:37:13 | 000,418,464 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012/04/02 09:34:06 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{575A8114-4C35-44F9-933C-F69AB7A865C0}
[2012/03/31 19:44:45 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{32A06799-F71E-4A8D-AAB2-2DB340F1B113}
[2012/03/31 07:44:10 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{EEE5565A-3E77-49E3-9D81-1E35120103E3}
[2012/03/30 08:46:33 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{7EA6292C-74ED-4120-BF6E-C931FC0BF35C}
[2012/03/29 06:30:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2012/03/29 06:24:26 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{CE646047-C35B-4664-8AD3-FA64C9E7CB17}
[2012/03/28 09:56:53 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{847F049F-66A9-4D1D-9DB7-3212CAE512E7}
[2012/03/28 09:56:37 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{A0E0A7B9-2A41-4818-93BE-59825C599FC6}
[2012/03/27 21:54:10 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{49A15A31-A82F-4ED0-8FC9-76288D050696}
[2012/03/27 21:53:58 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{1171036C-314A-425F-B5B3-E0FB97D928A0}
[2012/03/26 21:47:07 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{092D2A4D-ADD2-488C-BD2F-C7D8ABE00362}
[2012/03/26 21:46:56 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{FA1B58F1-ECBD-4B95-90A9-EBEA7D88325F}
[2012/03/26 06:11:40 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{C136F0BB-0827-43F3-8390-B3A9ADFB9520}
[2012/03/26 06:11:27 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{EF69EA76-B929-497C-B209-C0CFE95C2A23}
[2012/03/25 10:45:29 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{99CACCC7-74CA-4A74-BEC6-7B7D31DFFD67}
[2012/03/25 10:45:19 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{0C22CEB4-AFF2-488F-8E03-E0E33999A2B1}
[2012/03/24 22:45:05 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{482EAF24-EFFF-495C-8195-E604FC93D323}
[2012/03/24 10:13:05 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{C785403B-3E43-45C2-BC1A-021261C80FBC}
[2012/03/24 10:12:53 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{580B7EAF-0AF0-4B63-BAF4-7F75CD1431E6}
[2012/03/23 21:25:18 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{0FEF6746-B075-43E5-9D0D-B4B038B944C2}
[2012/03/23 21:24:55 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{EB51DFF9-17DE-494B-8AE1-1EBBD84514C6}
[2012/03/23 08:18:59 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{B54F9309-E80D-4174-9671-9EACD790D314}
[2012/03/23 08:18:47 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{A9F7ADB4-03BC-4475-9101-B0E3C88AD671}
[2012/03/22 20:08:32 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{FFDA920A-766B-4661-9685-1A033C0466BA}
[2012/03/22 20:08:19 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{CFA6F304-2B37-4CB2-9FAC-D6C7EEC4B032}
[2012/03/21 21:08:20 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{D869D8E4-3DB4-4CC8-8282-72869E6F8861}
[2012/03/21 09:07:57 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{0777E5AE-EDE1-43E8-9B60-F7F8C7C05363}
[2012/03/21 09:07:35 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{FAD6ADC2-48F5-4506-B787-0EDD009A7852}
[2012/03/20 21:07:10 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{2D516EA1-256E-45CB-9EF4-44720AEAC20F}
[2012/03/20 21:07:00 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{A8919A60-0606-4715-84C9-547F3FB06205}
[2012/03/20 09:06:35 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{BB9B79AA-E918-4C74-B24D-E96FA17F90A4}
[2012/03/20 09:06:13 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{24E0EA02-40CC-4C33-BC55-4A4F34A5187D}
[2012/03/19 21:05:48 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{C8FA063A-D3A5-4F13-A018-806841D4B980}
[2012/03/19 08:41:27 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{9BC042A6-8346-4B64-89A8-684E153906B7}
[2012/03/19 08:41:06 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{BF88B897-09D2-43A3-99CD-46DA3C2631DF}
[2012/03/18 20:40:40 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{53C7630F-7C33-44AD-86F8-C38ECACA0418}
[2012/03/18 20:40:19 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{78BC0A58-9D6A-4F7C-A6FD-4EA266D43751}
[2012/03/18 08:39:50 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{5B8B9923-22C4-47DE-929B-8721B788B041}
[2012/03/18 08:39:40 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{CFCD00C1-3C41-4DF5-A8FB-8A4A42185F30}
[2012/03/17 16:28:17 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{33310C8D-BC39-4405-8D82-59E506206093}
[2012/03/17 16:28:05 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{AC2DE196-9D93-423E-895D-795956B7AB1A}
[2012/03/16 20:54:10 | 000,000,000 | ---D | C] -- C:\Users\Proprietaire\AppData\Local\{9AEE276B-6F9E-46D0-B971-E1CE54269453}

========== Files - Modified Within 30 Days ==========

[2012/04/15 16:47:25 | 000,015,344 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/04/15 16:47:25 | 000,015,344 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/04/15 16:45:56 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012/04/15 16:28:34 | 000,198,449 | ---- | M] () -- C:\Users\Proprietaire\Desktop\00-PAD-nickW.pdf
[2012/04/15 16:27:00 | 000,001,002 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/04/15 16:24:49 | 000,000,894 | ---- | M] () -- C:\Users\Proprietaire\Desktop\NTREGOPT.lnk
[2012/04/15 16:24:49 | 000,000,875 | ---- | M] () -- C:\Users\Proprietaire\Desktop\ERUNT.lnk
[2012/04/15 16:24:18 | 000,791,393 | ---- | M] (Lars Hederer ) -- C:\Users\Proprietaire\Desktop\erunt-setup.exe
[2012/04/15 16:22:56 | 000,001,067 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/04/15 16:22:25 | 010,063,000 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\Proprietaire\Desktop\mbam-setup-1.61.0.1400.exe
[2012/04/15 16:21:26 | 000,000,417 | ---- | M] () -- C:\Users\Proprietaire\Desktop\scan.zip
[2012/04/15 16:21:18 | 000,593,920 | ---- | M] (OldTimer Tools) -- C:\Users\Proprietaire\Desktop\OTL.exe
[2012/04/15 15:50:28 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/04/15 14:12:01 | 000,000,956 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2159176293-633151126-1273594381-1000UA.job
[2012/04/15 12:18:01 | 2558,496,768 | -HS- | M] () -- C:\hiberfil.sys
[2012/04/14 23:29:39 | 002,505,361 | ---- | M] () -- C:\Users\Proprietaire\Desktop\fiche-technique-ML-2008.pdf
[2012/04/14 19:31:27 | 000,704,242 | ---- | M] () -- C:\Windows\System32\perfh00C.dat
[2012/04/14 19:31:27 | 000,615,810 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012/04/14 19:31:27 | 000,130,548 | ---- | M] () -- C:\Windows\System32\perfc00C.dat
[2012/04/14 19:31:27 | 000,106,190 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012/04/14 18:29:36 | 014,852,504 | ---- | M] (Adobe Systems Inc.) -- C:\Users\Proprietaire\Desktop\AdobeAIRInstaller.exe
[2012/04/14 18:27:20 | 000,418,464 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012/04/14 18:27:20 | 000,070,304 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012/04/14 11:22:19 | 000,000,934 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2159176293-633151126-1273594381-1000Core.job
[2012/04/10 23:09:42 | 002,322,184 | ---- | M] (ESET) -- C:\Users\Proprietaire\Desktop\esetsmartinstaller_enu.exe
[2012/04/10 22:58:55 | 000,381,930 | ---- | M] () -- C:\Users\Proprietaire\Desktop\GenProc.zip
[2012/04/10 22:02:21 | 000,003,003 | ---- | M] () -- C:\Users\Proprietaire\Desktop\HiJackThis.lnk
[2012/04/10 22:00:06 | 001,402,880 | ---- | M] () -- C:\Users\Proprietaire\Desktop\hijackthis_hijackthis_2.0.4_anglais_17891.msi
[2012/04/10 21:59:31 | 000,433,757 | ---- | M] (Headlight Software, Inc.) -- C:\Users\Proprietaire\Desktop\hijackthis_telechargement_01net.exe
[2012/04/10 21:50:30 | 000,003,126 | ---- | M] () -- C:\Users\Proprietaire\Documents\cc_20120410_215026.reg
[2012/04/10 21:50:07 | 000,198,042 | ---- | M] () -- C:\Users\Proprietaire\Documents\cc_20120410_214949.reg
[2012/04/10 21:46:53 | 000,871,456 | ---- | M] () -- C:\Users\Proprietaire\Desktop\bitdefender_isecurity_qs.exe
[2012/04/10 21:38:34 | 003,645,656 | ---- | M] (Piriform Ltd) -- C:\Users\Proprietaire\Desktop\ccsetup317.exe
[2012/04/10 21:33:35 | 063,048,070 | ---- | M] () -- C:\Users\Proprietaire\Desktop\EmsisoftEmergencyKit.zip
[2012/04/09 22:24:35 | 000,101,720 | ---- | M] (Sunbelt Software) -- C:\Windows\System32\drivers\SBREDrv.sys
[2012/04/09 22:21:38 | 000,000,064 | ---- | M] () -- C:\Windows\System32\rp_stats.dat
[2012/04/09 22:21:38 | 000,000,044 | ---- | M] () -- C:\Windows\System32\rp_rules.dat
[2012/04/09 22:18:54 | 012,442,112 | ---- | M] () -- C:\Users\Proprietaire\Desktop\Ad-Aware96Install.msi
[2012/04/09 11:08:10 | 000,001,330 | ---- | M] () -- C:\Users\Proprietaire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk
[2012/04/04 15:56:40 | 000,022,344 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012/03/29 16:31:27 | 000,012,800 | ---- | M] () -- C:\Users\Proprietaire\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/03/29 06:30:33 | 000,001,024 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2012/03/23 21:34:15 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2012/03/17 20:44:24 | 000,844,489 | ---- | M] () -- C:\Users\Proprietaire\Desktop\GEL DES PENSIONS DE RETRAITES.pdf

========== Files Created - No Company Name ==========

[2012/04/15 16:45:56 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012/04/15 16:28:28 | 000,198,449 | ---- | C] () -- C:\Users\Proprietaire\Desktop\00-PAD-nickW.pdf
[2012/04/15 16:24:49 | 000,000,894 | ---- | C] () -- C:\Users\Proprietaire\Desktop\NTREGOPT.lnk
[2012/04/15 16:24:49 | 000,000,875 | ---- | C] () -- C:\Users\Proprietaire\Desktop\ERUNT.lnk
[2012/04/15 16:22:56 | 000,001,067 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/04/15 16:21:25 | 000,000,417 | ---- | C] () -- C:\Users\Proprietaire\Desktop\scan.zip
[2012/04/14 23:29:33 | 002,505,361 | ---- | C] () -- C:\Users\Proprietaire\Desktop\fiche-technique-ML-2008.pdf
[2012/04/14 18:34:52 | 000,000,824 | ---- | C] () -- C:\Users\Proprietaire\Desktop\hosts
[2012/04/10 22:58:54 | 000,381,930 | ---- | C] () -- C:\Users\Proprietaire\Desktop\GenProc.zip
[2012/04/10 22:02:21 | 000,003,003 | ---- | C] () -- C:\Users\Proprietaire\Desktop\HiJackThis.lnk
[2012/04/10 22:00:03 | 001,402,880 | ---- | C] () -- C:\Users\Proprietaire\Desktop\hijackthis_hijackthis_2.0.4_anglais_17891.msi
[2012/04/10 21:50:27 | 000,003,126 | ---- | C] () -- C:\Users\Proprietaire\Documents\cc_20120410_215026.reg
[2012/04/10 21:49:53 | 000,198,042 | ---- | C] () -- C:\Users\Proprietaire\Documents\cc_20120410_214949.reg
[2012/04/10 21:46:51 | 000,871,456 | ---- | C] () -- C:\Users\Proprietaire\Desktop\bitdefender_isecurity_qs.exe
[2012/04/10 21:32:31 | 063,048,070 | ---- | C] () -- C:\Users\Proprietaire\Desktop\EmsisoftEmergencyKit.zip
[2012/04/09 22:21:38 | 000,000,064 | ---- | C] () -- C:\Windows\System32\rp_stats.dat
[2012/04/09 22:21:38 | 000,000,044 | ---- | C] () -- C:\Windows\System32\rp_rules.dat
[2012/04/09 22:18:28 | 012,442,112 | ---- | C] () -- C:\Users\Proprietaire\Desktop\Ad-Aware96Install.msi
[2012/04/09 11:08:10 | 000,001,330 | ---- | C] () -- C:\Users\Proprietaire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk
[2012/04/09 11:07:56 | 000,000,956 | ---- | C] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2159176293-633151126-1273594381-1000UA.job
[2012/04/09 11:07:55 | 000,000,934 | ---- | C] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2159176293-633151126-1273594381-1000Core.job
[2012/04/02 09:37:15 | 000,001,002 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/03/29 06:30:33 | 000,001,024 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2012/03/17 20:44:22 | 000,844,489 | ---- | C] () -- C:\Users\Proprietaire\Desktop\GEL DES PENSIONS DE RETRAITES.pdf
[2012/01/10 22:29:54 | 013,904,384 | ---- | C] () -- C:\Windows\System32\ig4icd32.dll
[2012/01/10 22:14:34 | 000,004,096 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll
[2011/11/03 21:36:40 | 000,000,199 | ---- | C] () -- C:\Windows\NIMEGUE3.INI
[2011/08/31 19:46:18 | 000,128,204 | ---- | C] () -- C:\Windows\System32\igcompkrng575.bin
[2011/08/31 19:46:12 | 000,105,608 | ---- | C] () -- C:\Windows\System32\igfcg575m.bin
[2011/08/31 19:46:10 | 000,867,020 | ---- | C] () -- C:\Windows\System32\igkrng575.bin
[2011/08/31 19:13:52 | 000,094,208 | ---- | C] () -- C:\Windows\System32\IccLibDll.dll
[2011/01/08 17:27:59 | 000,012,800 | ---- | C] () -- C:\Users\Proprietaire\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/06/11 21:34:11 | 000,010,740 | ---- | C] () -- C:\Users\Proprietaire\AppData\Roaming\SmarThruOptions.xml
[2010/06/11 21:34:09 | 000,036,864 | ---- | C] () -- C:\Windows\System32\SvcMan.exe
[2010/06/11 21:34:06 | 000,172,032 | ---- | C] () -- C:\Windows\System32\SecSNMP.dll
[2010/06/11 21:30:44 | 000,113,768 | R--- | C] () -- C:\Windows\WiaInst.exe
[2010/06/01 21:12:52 | 000,000,256 | ---- | C] () -- C:\Windows\System32\pool.bin
[2010/04/19 19:24:47 | 000,088,280 | -H-- | C] () -- C:\Windows\System32\mlfcache.dat

========== LOP Check ==========

[2011/03/03 20:42:53 | 000,000,000 | ---D | M] -- C:\Users\Proprietaire\AppData\Roaming\Bouygues-BboxMini.649F13D0CDF968A472A16014E8BC8A2ED131D04E.1
[2010/12/25 20:16:47 | 000,000,000 | ---D | M] -- C:\Users\Proprietaire\AppData\Roaming\calibre
[2012/04/10 21:48:28 | 000,000,000 | ---D | M] -- C:\Users\Proprietaire\AppData\Roaming\DAEMON Tools Lite
[2010/05/18 20:37:26 | 000,000,000 | ---D | M] -- C:\Users\Proprietaire\AppData\Roaming\ESET
[2010/05/02 16:26:22 | 000,000,000 | ---D | M] -- C:\Users\Proprietaire\AppData\Roaming\Facebook
[2012/04/10 21:48:23 | 000,000,000 | ---D | M] -- C:\Users\Proprietaire\AppData\Roaming\FrostWire
[2012/04/09 22:17:13 | 000,000,000 | ---D | M] -- C:\Users\Proprietaire\AppData\Roaming\GetRightToGo
[2011/11/11 12:53:03 | 000,000,000 | ---D | M] -- C:\Users\Proprietaire\AppData\Roaming\GrabIt
[2012/01/19 07:19:41 | 000,000,000 | ---D | M] -- C:\Users\Proprietaire\AppData\Roaming\HTC
[2011/02/14 20:43:38 | 000,000,000 | ---D | M] -- C:\Users\Proprietaire\AppData\Roaming\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1
[2010/05/19 23:42:04 | 000,000,000 | ---D | M] -- C:\Users\Proprietaire\AppData\Roaming\Leadertech
[2012/04/15 12:18:54 | 000,000,000 | ---D | M] -- C:\Users\Proprietaire\AppData\Roaming\LimeWire
[2010/05/07 20:58:12 | 000,000,000 | ---D | M] -- C:\Users\Proprietaire\AppData\Roaming\OpenOffice.org
[2012/04/10 21:42:23 | 000,000,000 | ---D | M] -- C:\Users\Proprietaire\AppData\Roaming\QuickScan
[2010/08/24 22:28:22 | 000,000,000 | ---D | M] -- C:\Users\Proprietaire\AppData\Roaming\Research in Motion
[2010/06/11 21:34:12 | 000,000,000 | ---D | M] -- C:\Users\Proprietaire\AppData\Roaming\SmarThru4
[2012/03/06 23:43:26 | 000,000,000 | ---D | M] -- C:\Users\Proprietaire\AppData\Roaming\TuneUpMedia
[2011/11/11 14:56:12 | 000,000,000 | ---D | M] -- C:\Users\Proprietaire\AppData\Roaming\uTorrent
[2012/01/02 09:10:35 | 000,000,000 | ---D | M] -- C:\Users\Proprietaire\AppData\Roaming\Windows Live Writer
[2011/10/23 02:53:32 | 000,000,340 | ---- | M] () -- C:\Windows\Tasks\Driver Fetch.job
[2012/04/14 11:22:19 | 000,000,934 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2159176293-633151126-1273594381-1000Core.job
[2012/04/15 14:12:01 | 000,000,956 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2159176293-633151126-1273594381-1000UA.job
[2012/02/10 19:40:48 | 000,032,482 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

de **totof91** » 15 Avr 2012, 16:15

Suite du rapport OTL.txt

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.exe >
[2007/11/07 08:03:18 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\install.exe

< MD5 for: AGP440.SYS >
[2009/07/14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys
[2009/07/14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696\AGP440.sys
[2009/07/14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys
[2009/07/14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys

< MD5 for: CNGAUDIT.DLL >
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll

< MD5 for: CTFMON.EXE >
[2009/07/14 03:14:16 | 000,008,704 | ---- | M] (Microsoft Corporation) MD5=4A3CDCEF8ED41B221F3DBEF5792FB52D -- C:\Windows\System32\ctfmon.exe
[2009/07/14 03:14:16 | 000,008,704 | ---- | M] (Microsoft Corporation) MD5=4A3CDCEF8ED41B221F3DBEF5792FB52D -- C:\Windows\winsxs\x86_microsoft-windows-t..cesframework-ctfmon_31bf3856ad364e35_6.1.7600.16385_none_9d06e2f6f1e51f98\ctfmon.exe

< MD5 for: EXPLORER.EXE >
[2011/02/26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2009/07/14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2011/02/26 07:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_525b5180f3f95373\explorer.exe
[2009/10/31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2011/02/26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_51a3a583dafd0cef\explorer.exe
[2010/11/20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\explorer.exe
[2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe
[2009/08/03 07:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009/08/03 07:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009/10/31 08:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe

< MD5 for: IASTORV.SYS >
[2011/03/11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\System32\drivers\iaStorV.sys
[2011/03/11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_0bcee2057afcc090\iaStorV.sys
[2011/03/11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_b0daddb9e6380745\iaStorV.sys
[2011/03/11 07:43:55 | 000,332,160 | ---- | M] (Intel Corporation) MD5=71F1A494FEDF4B33C02C4A6A28D6D9E9 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_aef580fde910b4b0\iaStorV.sys
[2011/03/11 07:28:00 | 000,332,160 | ---- | M] (Intel Corporation) MD5=778D0E6D7D9EBA0C403BADBAAD41DB20 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_b152a892ff64119f\iaStorV.sys
[2009/07/14 03:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys
[2010/11/20 14:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_668286aa35d55928\iaStorV.sys
[2010/11/20 14:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_b118bc63e60a139a\iaStorV.sys
[2011/03/11 07:52:21 | 000,332,160 | ---- | M] (Intel Corporation) MD5=B9039A34C2F8769490DCC494E2402445 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_afae2d45020c148b\iaStorV.sys

< MD5 for: NETLOGON.DLL >
[2010/11/20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\System32\netlogon.dll
[2010/11/20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_ffbf212e963c0162\netlogon.dll
[2009/07/14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll

< MD5 for: NVSTOR.SYS >
[2011/03/11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\System32\drivers\nvstor.sys
[2011/03/11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_0276fc3b3ea60d41\nvstor.sys
[2011/03/11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_3ba44e691d6eb11d\nvstor.sys
[2011/03/11 07:44:01 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4520B63899E867F354EE012D34E11536 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_39bef1ad20475e88\nvstor.sys
[2011/03/11 07:28:10 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=66D468654A58594F5F3BA63D5AD5B1AF -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_3c1c1942369abb77\nvstor.sys
[2011/03/11 07:52:25 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=8A7583A3B58D3EEB28BB26626526BC91 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_3a779df43942be63\nvstor.sys
[2010/11/20 14:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14\nvstor.sys
[2010/11/20 14:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvstor.sys
[2009/07/14 03:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys

< MD5 for: SCECLI.DLL >
[2009/07/14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll
[2010/11/20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll
[2010/11/20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll

< MD5 for: USERINIT.EXE >
[2010/11/20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe
[2010/11/20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009/07/14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe

< MD5 for: WININIT.EXE >
[2009/07/14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\System32\wininit.exe
[2009/07/14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe

< MD5 for: WINLOGON.EXE >
[2012/04/04 15:56:38 | 000,199,240 | ---- | M] () MD5=097D0E812D7A9A3101CE46CB2BE0474D -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2009/10/28 08:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009/10/28 07:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2010/11/20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe
[2010/11/20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2009/07/14 03:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

========== Alternate Data Streams ==========

@Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:63238B95

< End of report >

de **totof91** » 15 Avr 2012, 16:18

Voici le rapport extras.txt, merci de votre aide (pour info, j'utilise mozilla firefox version 9.0.1 et avast pro antivirus version 7.0.1426

OTL Extras logfile created on: 15/04/2012 16:44:18 - Run 1
OTL by OldTimer - Version 3.2.39.2 Folder = C:\Users\Proprietaire\Desktop
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy

3,18 Gb Total Physical Memory | 2,16 Gb Available Physical Memory | 68,02% Memory free
6,35 Gb Paging File | 4,77 Gb Available in Paging File | 75,13% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 297,99 Gb Total Space | 190,35 Gb Free Space | 63,88% Space Free | Partition Type: NTFS

Computer Name: PROPRIETAIRE-PC | User Name: Proprietaire | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

[HKEY_USERS\S-1-5-21-2159176293-633151126-1273594381-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{05653DE1-6567-40C6-B930-39D399B64369}" = OpenOffice.org 3.3
"{05E379CC-F626-4E7D-8354-463865B303BF}" = Windows Live UX Platform Language Pack
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}" = Microsoft .NET Framework 4 Client Profile FRA Language Pack
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{1CE76936-BE60-414E-8031-8544B2E52036}" = Intel(R) Integrator Assistant
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{26A24AE4-039D-4CA4-87B4-2F83216022F0}" = Java(TM) 6 Update 22
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{2D6E3D97-1FDF-4993-AC75-72F59EC445C5}" = Windows Live Family Safety
"{31A559C1-9E4D-423B-9DD3-34A6C5398752}" = HTC BMP USB Driver
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live
"{343666E2-A059-48AC-AD67-230BF74E2DB2}" = Apple Application Support
"{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup
"{3B9A92DA-6374-4872-B646-253F18624D5F}" = Windows Live Writer
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{470C8EFE-AEB0-402E-B05A-91E08C201036}" = Nero 8 Essentials
"{47FA2C44-D148-4DBC-AF60-B91934AA4842}" = Adobe AIR
"{488F0347-C4A7-4374-91A7-30818BEDA710}" = Galerie de photos Windows Live
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A423411-E28A-4A13-BDB0-8E8BC42FFA29}" = HTC Sync
"{55D003F4-9599-44BF-BA9E-95D060730DD3}" = Contrôle ActiveX Windows Live Mesh pour connexions à distance
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{62687B11-58B5-4A18-9BC3-9DF4CE03F194}" = Windows Live Writer Resources
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{662E930A-FBF8-4451-A5A6-4C094160B4BC}" = Intel(R) Desktop Utilities
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6D6664A9-3342-4948-9B7E-034EFE366F0F}" = HTC Driver Installer
"{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker
"{6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}" = Complément Messenger
"{710BF966-43C8-4216-A8EC-BC4E169FF7C1}" = MobileMe Control Panel
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{75157F34-02C6-4831-BD66-3BC49E7A8394}" = BlackBerry Desktop Software 6.1
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7B63B2922B174135AFC0E1377DD81EC2}" =
"{7BE15435-2D3E-4B58-867F-9C75BED0208C}" = QuickTime
"{8153ED9A-C94A-426E-9880-5E6775C08B62}" = Apple Mobile Device Support
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}" = Windows Live Mesh
"{846E263D-CB9B-4169-AF6B-C47A8532653A}" = BlackBerry Device Software v5.0.0 pour smartphone BlackBerry 9700
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8ED44FA5-DB47-4BF8-646C-4D5590D0363D}" = Bouygues Telecom Mes services en un clic
"{90F1943D-EA4A-4460-B59F-30023F3BA69A}" = SmarThru 4
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C05B2CC-68D0-4B46-A9C8-40CC4BF10C33}" = Windows Live Family Safety
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9FAE6E8D-E686-49F5-A574-0A58DFD9580C}" = Windows Live Mail
"{A10B9E4E-9C40-4491-A3E1-C2B53DAB03C1}" = Facebook Messenger 2.0.4478.0
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AB61A2E9-37D3-485D-9085-19FBDF8CEF4A}" = Windows Live Messenger
"{AB93C51F-71F9-4A28-8134-FE1B5B9373E9}" = Windows Live Remote Service Resources
"{AC76BA86-7AD7-1036-7B44-AA1000000001}" = Adobe Reader X (10.1.3) - Français
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{C6150D8A-86ED-41D3-87BB-F3BB51B0B77F}" = Windows Live ID Sign-in Assistant
"{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common
"{CCC68887-6E07-4438-A035-7C22EFBDC15E}" = Intel(R) Network Connections 14.6.9.0
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240BB}" = WinZip 14.0
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DFDBE1F9-04CE-4645-BB6C-4590EABC7A9C}" = Windows Live Remote Client Resources
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Graphics Media Accelerator Driver
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F6D6B258-E3CA-4AAC-965A-68D3E3140A8C}" = iTunes
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
"{FDB5E0F3-86EA-4379-8A2F-1BC2436543E9}" = iCloud
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"avast" = avast! Pro Antivirus
"BlackBerry_Desktop" = BlackBerry Desktop Software 6.1
"Bouygues-BboxMini.649F13D0CDF968A472A16014E8BC8A2ED131D04E.1" = Bouygues Telecom Mes services en un clic
"Browser Hijack Retaliator_is1" = Browser Hijack Retaliator 4.5.0 Build 471
"DAEMON Tools Toolbar" = DAEMON Tools Toolbar
"DivX Setup.divx.com" = Configuration DivX
"ERUNT_is1" = ERUNT 1.1j
"ESET Online Scanner" = ESET Online Scanner v3
"LastFM_is1" = Last.fm 1.5.4.27091
"LimeWire" = LimeWire 5.6.2
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.61.0.1400
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile FRA Language Pack" = Module linguistique Microsoft .NET Framework 4 Client Profile FRA
"MIKSOFT Mobile 3GP converter_is1" = MIKSOFT Mobile 3GP converter
"Mozilla Firefox 9.0.1 (x86 fr)" = Mozilla Firefox 9.0.1 (x86 fr)
"PROSetDX" = Intel(R) Network Connections 14.6.9.0
"RealPlayer 12.0" = RealPlayer
"Samsung SCX-4500 Series" = Samsung SCX-4500 Series
"SP6" = Logitech SetPoint 6.0
"TuneUpMedia" = TuneUp Companion 2.1.1
"TVWiz" = Intel(R) TV Wizard
"VLC media player" = VLC media player 2.0.1
"WinLiveSuite" = Windows Live
"WinRAR archiver" = Archiveur WinRAR

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-2159176293-633151126-1273594381-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Facebook Plug-In" = Facebook Plug-In

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 14/04/2012 08:26:51 | Computer Name = Proprietaire-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 999

Error - 14/04/2012 08:26:52 | Computer Name = Proprietaire-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 14/04/2012 08:26:52 | Computer Name = Proprietaire-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 2013

Error - 14/04/2012 08:26:52 | Computer Name = Proprietaire-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 2013

Error - 14/04/2012 08:26:53 | Computer Name = Proprietaire-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 14/04/2012 08:26:53 | Computer Name = Proprietaire-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 3011

Error - 14/04/2012 08:26:53 | Computer Name = Proprietaire-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 3011

Error - 15/04/2012 07:14:15 | Computer Name = Proprietaire-PC | Source = SideBySide | ID = 16842785
Description = La création du contexte d’activation a échoué pour « C:\Program Files\HTC\HTC
Sync 3.0\FDAgentForOutlook64.exe ». Assembly dépendant Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"
introuvable. Utilisez sxstrace.exe pour un diagnostic détaillé.

Error - 15/04/2012 07:14:28 | Computer Name = Proprietaire-PC | Source = SideBySide | ID = 16842785
Description = La création du contexte d’activation a échoué pour « C:\Program Files\Research
In Motion\BlackBerry Desktop\MailServerMAPIProxy64.exe ». Assembly dépendant Microsoft.VC90.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"
introuvable. Utilisez sxstrace.exe pour un diagnostic détaillé.

Error - 15/04/2012 07:14:33 | Computer Name = Proprietaire-PC | Source = SideBySide | ID = 16842785
Description = La création du contexte d’activation a échoué pour « C:\Program Files\Common
Files\Research In Motion\AppLoader\MailServerMAPIProxy64.exe ». Assembly dépendant
Microsoft.VC90.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"
introuvable. Utilisez sxstrace.exe pour un diagnostic détaillé.

[ System Events ]
Error - 26/03/2012 00:11:03 | Computer Name = Proprietaire-PC | Source = Disk | ID = 262151
Description = Le périphérique \Device\Harddisk2\DR2 comporte un bloc défectueux.

Error - 26/03/2012 00:20:54 | Computer Name = Proprietaire-PC | Source = Disk | ID = 262151
Description = Le périphérique \Device\Harddisk2\DR4 comporte un bloc défectueux.

Error - 26/03/2012 00:31:37 | Computer Name = Proprietaire-PC | Source = Disk | ID = 262151
Description = Le périphérique \Device\Harddisk2\DR2 comporte un bloc défectueux.

Error - 29/03/2012 00:23:23 | Computer Name = Proprietaire-PC | Source = Disk | ID = 262151
Description = Le périphérique \Device\Harddisk2\DR2 comporte un bloc défectueux.

Error - 30/03/2012 09:47:58 | Computer Name = Proprietaire-PC | Source = Service Control Manager | ID = 7011
Description = Le dépassement de délai (30000 millisecondes) a été atteint lors de
l’attente de la réponse transactionnelle du service lmhosts.

Error - 09/04/2012 16:23:59 | Computer Name = Proprietaire-PC | Source = Service Control Manager | ID = 7034
Description = Le service Lavasoft Ad-Aware Service s’est terminé de façon inattendue
pour la 1ème fois.

Error - 09/04/2012 16:28:00 | Computer Name = Proprietaire-PC | Source = Service Control Manager | ID = 7034
Description = Le service RelevantKnowledge s’est terminé de façon inattendue pour
la 1ème fois.

Error - 10/04/2012 16:21:09 | Computer Name = Proprietaire-PC | Source = EventLog | ID = 6008
Description = L’arrêt système précédant à 22:19:49 le ?10/?04/?2012 n’était pas
prévu.

Error - 14/04/2012 13:10:49 | Computer Name = Proprietaire-PC | Source = Disk | ID = 262151
Description = Le périphérique \Device\Harddisk2\DR2 comporte un bloc défectueux.

Error - 14/04/2012 17:20:14 | Computer Name = Proprietaire-PC | Source = Disk | ID = 262155
Description = Le pilote a détecté une erreur du contrôleur sur \...\DR1.

< End of report >

de **nickW** » 16 Avr 2012, 21:18

Bonsoir,

Ce qu'est zanox:

Le Performance advertising qui vend

zanox, le réseau publicitaire à la performance leader en Europe

http://www.zanox.com/fr/
http://www.zanox.com/fr/a-propos-de-zanox/societe/

La Redoute est un des clients de zanox.
Il est impossible d'éviter zanox sur le site de La Redoute!

Donc en fait, (merci à Sloshy) la page en question profite d'un service commercial Zanox permettant de rémunérer l'auteur du site en fonction du clic sur les liens.
Lorsque tu cliques sur un lien, tu passes par Zanox (qui comptabilise le clic rémunérateur pour l'auteur) pour ensuite atterrir sur le site désiré.
Auteur: Gof sur Zebulon (Merci à lui).

Peux-tu expliquer si tu accèdes au site demandé (en passant par le site zanox)?

Recherche de logiciels publicitaires:

Étape 1: AdwCleaner (de Xplode), téléchargement
Télécharger AdwCleaner depuis la page ci-dessous:
http://general-changelog-team.fr/telech ... adwcleaner
Enregistrer le fichier adwcleaner.exe sur le Bureau.

Étape 2: AdwCleaner (de Xplode), analyse
Faire un clic droit sur adwcleaner.exe puis choisir "Exécuter en tant qu'Administrateur" pour lancer l'outil.

L'écran principal d'AdwCleaner s'affiche:

Cliquer sur le bouton Recherche.

Laisser l'outil travailler sans l'interrompre.
Lorsque l'outil a terminé, il y a ouverture d'une fenêtre du Bloc-notes contenant un rapport (log).
Fermer la fenêtre d'AdwCleaner.
Fermer le Bloc-notes.

Étape 3: Résultat
Envoyer en réponse:
*- le rapport d'analyse d'AdwCleaner (contenu du fichier %SystemDrive%\AdwCleaner[Rn].txt, n étant un numéro d'ordre).
[%SystemDrive% représente la partition sur laquelle est installé le système, généralement C:]

A suivre,

de **totof91** » 20 Avr 2012, 05:31

Bonjour,

non je n'accède pas au site de la redoute mais à une page blanche

voici le rapport d'adwcleaner :

# AdwCleaner v1.602 - Rapport créé le 20/04/2012 à 06:28:25
# Mis à jour le 19/04/2012 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (32 bits)
# Nom d'utilisateur : Proprietaire - PROPRIETAIRE-PC
# Exécuté depuis : C:\Users\Proprietaire\Desktop\adwcleaner.exe
# Option [Recherche]

***** [Services] *****

***** [Fichiers / Dossiers] *****

Dossier Présent : C:\Users\Proprietaire\AppData\Local\Conduit
Dossier Présent : C:\Users\Proprietaire\AppData\Local\OpenCandy
Dossier Présent : C:\Users\Proprietaire\AppData\Local\TempDir
Dossier Présent : C:\Users\PROPRI~1\AppData\Local\Temp\AskSearch
Dossier Présent : C:\Users\Proprietaire\AppData\LocalLow\Conduit
Dossier Présent : C:\Users\Proprietaire\AppData\LocalLow\Toolbar4
Dossier Présent : C:\Users\Proprietaire\AppData\Roaming\GetRightToGo
Dossier Présent : C:\Program Files\Ask.com
Dossier Présent : C:\Program Files\Conduit
Fichier Présent : C:\Users\Proprietaire\AppData\Roaming\Mozilla\Firefox\Profiles\902j0t4o.default\searchplugins\Conduit.xml

***** [H. Navipromo] *****

***** [Registre] *****

[*] Clé Présente : HKLM\SOFTWARE\Classes\Toolbar.CT2851639
Clé Présente : HKLM\SOFTWARE\Conduit
Clé Présente : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils
Clé Présente : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1
Clé Présente : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager
Clé Présente : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager.1
Clé Présente : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager
Clé Présente : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager.1
Clé Présente : HKLM\SOFTWARE\Classes\TbHelper.TbRequest
Clé Présente : HKLM\SOFTWARE\Classes\TbHelper.TbRequest.1
Clé Présente : HKLM\SOFTWARE\Classes\TbHelper.TbTask
Clé Présente : HKLM\SOFTWARE\Classes\TbHelper.TbTask.1
Clé Présente : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper
Clé Présente : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper.1
Clé Présente : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL
Clé Présente : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE

***** [Registre - GUID] *****

Clé Présente : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}
Clé Présente : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}
Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Clé Présente : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Clé Présente : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{96BD48DD-741B-41AE-AC4A-AFF96BA00F7E}
Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}]
Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}]

***** [Navigateurs] *****

-\\ Internet Explorer v9.0.8112.16421

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.bigseekpro.com/kcsoftwares/{E79FD839-F8A8-4293-A456-519DE4B6731F}
[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.bigseekpro.com/kcsoftwares/{E79FD839-F8A8-4293-A456-519DE4B6731F}

-\\ Mozilla Firefox v11.0 (fr)

## Fichier : C:\Users\Proprietaire\AppData\Roaming\Mozilla\Firefox\Profiles\902j0t4o.default\prefs.js

Présente : user_pref("browser.search.defaultthis.engineName", "Oryte Games 1.17 Customized Web Search");
Présente : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2830576&Sea[...]

*************************

AdwCleaner[R1].txt - [4685 octets] - [20/04/2012 06:28:25]

########## EOF - C:\AdwCleaner[R1].txt - [4813 octets] ##########

de **nickW** » 24 Avr 2012, 23:37

Bonsoir,

Premiers nettoyages:

Je te conseille d'imprimer la procédure, ou d'en sélectionner toutes les lignes puis de copier cette sélection dans un fichier texte sur ton PC (Note: tu n'auras pas accès à Internet lors de l'étape 2).
Il faut exécuter toutes les étapes, sans interruption, dans l'ordre exact indiqué ci-dessous.

Étape 1: Pas de processus de contrôle en temps réel
Désactiver le module résident de l'antivirus.

avast5!: clic droit sur l'icône dans la SysBarre (à coté de l'horloge), choisir "Gestion des Agents avast!" puis "Désactiver définitivement" et confirmer en cliquant sur Oui

Étape 2: AdwCleaner (de Xplode), nettoyage

Fermer tous les navigateurs internet (Internet Explorer, Firefox, Opera, Google Chrome, etc).

Faire un clic droit sur adwcleaner.exe puis choisir "Exécuter en tant qu'Administrateur" pour lancer l'outil.

L'écran principal d'AdwCleaner s'affiche:

Cliquer sur le bouton Suppression.

Laisser l'outil travailler sans l'interrompre.
Lorsque l'outil a terminé, il y a ouverture d'une fenêtre du Bloc-notes contenant un rapport (log).
Fermer la fenêtre d'AdwCleaner.
Fermer le Bloc-notes.

Étape 3: Processus de contrôle en temps réel
Important: Réactiver le module résident de l'antivirus.

Étape 4: Résultat
Envoyer en réponse:
*- le rapport de nettoyage d'AdwCleaner (contenu du fichier %SystemDrive%\AdwCleaner[Sn].txt, n étant un numéro d'ordre).
[%SystemDrive% représente la partition sur laquelle est installé le système, généralement C:]

Quant au problème de ad.zanox, il doit être dû à un blocage de zanox par l'antivirus/antispyware.

A suivre,

de **pierre** » 25 Avr 2012, 12:06

totof91 a écrit:Bonjour,
j'ai un problème suite aux publicités commerciales que m'envoie le site la redoute et taillissime. En effet, depuis 2-3 semaines, lorsque je clique sur la pub pour bénéficier des promotions proposées, je tombe sur une adresse web précédée de http://ad.zanox.com/ppc/?12621111C1452709100T&ULP=

Je vous remercie de votre aide

Bonjour totof91,

Zanox est une plateforme d'affiliation et une régie publicitaire.

Des sociétés, parfois importantes, lui ont confié la gestion de leurs publicités, comme :

La Redoute FR
neckermann.de
Orange Mobile
FDJ.fr
Cofidis
congstar DE
La Maison de Valerie

Si vous cliquez sur des pubs c'est que :

Les pubs vous intéressent
Vous n'êtes pas protégé contre les effets indésirables de la pub : le Tracking, le Profiling et le Marketing Comportemental.

C'est votre choix personnel.

Assiste est tourné vers la protection de la vie privée sur l'Internet et le besoin des publicistes et de vous :
"Délivrer le bon message publicitaire, au bon moment, à la bonne personne, par le bon canal"
Il est donc nécessaire qu'ils vous espionnent, qu'ils vous filent, afin de faire votre "profil", au même titre que les Renseignements Généraux espionnaient et profilaient certains individus qui avaient sorti la tête hors de l'eau.

Il n'y a pas d'attaque ou de malveillance en ce qui concerne Zanox. Il y a simplement l'aspect "Régie Publicitaire" et ses effets collatéraux.
Les liens Zanox sont des liens légaux sur le site de La Redoute et sur les sites affiliés à La Redoute.

Un exemple pour comprendre comment cela fonctionne :

Publicité et Cookie
Si le site Assiste souhaite recevoir quelques subsides en vous conseillant d'acheter tel livre à tel endroit, et si l'endroit en question est géré par la plateforme Zanox, les liens seront des liens Zanox qui permettent de savoir que la vente de tel livre a été réalisée grâce à Assiste qui touchera quelques centimes d'€ au passage.
Si la vente n'est pas réalisée immédiatement, et si Assiste est le premier à vous diriger vers ce livre chez ce vendeur, cela est noté dans un cookie dont la durée est variable selon les plateformes (quelques jours à un mois, en général) afin que, même si la vente se fait au travers d'un autre site qu'Assiste, dans les jours qui suivent, ce soit Assiste qui soit rémunéré pour sa démarche dite, en termes de commerce, "apporteur d'affaire". Si c'est un autre site qui vous a dirigé vers ce livre en premier et que la vente se fasse peu après au travers d'un lien sur le site Assiste, c'est l'autre site qui sera rémunéré.
Publicité et Web Bug
Il s'agit d'utiliser les caractéristiques techniques des infrastructures Internet et des entêtes des paquets d'informations qui précèdent obligatoirement toutes informations circulant sur le Net, pour capturer et archiver des informations sur votre ordinateur, vos logiciels, les mots clés recherchés, les pages visitées (et donc le contenu de ces pages), les contacts et le cercle de connaissances qui aide considérablement à l'établissement des profils ("dit moi qui tu hantes, je te dirai qui tu es") etc. ...

Le nouveau site est en cours d'écriture et les pages suivantes ne sont pas encore réellement écrites ni annoncées mais contiennent déjà quelques notes qui peuvent vous mettre sur la piste du risque de violation de la vie privée sur l'Internet :
Web Bug (le grand truc des régies publicitaires et des "services" de mesure d'audience des sites)
Opt Out

Et enfin, pour bien comprendre ce qu'est la pieuvre de la filature sur l'Internet, qui nous enserre dans ses gros bras musclés, conduisant au Profiling, une histoire qui n'est pas tant que cela de l'anticipation :
"Commander une pizza"

Cordialement

de **totof91** » 25 Avr 2012, 19:38

Bonsoir,

voici le dernier rapport suite à l'utilisation de adwcleaner, option suppression

# AdwCleaner v1.602 - Rapport créé le 25/04/2012 à 20:30:41
# Mis à jour le 19/04/2012 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (32 bits)
# Nom d'utilisateur : Proprietaire - PROPRIETAIRE-PC
# Exécuté depuis : C:\Users\Proprietaire\Desktop\adwcleaner.exe
# Option [Suppression]

***** [Services] *****

***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Users\Proprietaire\AppData\Local\Conduit
Dossier Supprimé : C:\Users\Proprietaire\AppData\Local\OpenCandy
Dossier Supprimé : C:\Users\Proprietaire\AppData\Local\TempDir
Dossier Supprimé : C:\Users\PROPRI~1\AppData\Local\Temp\AskSearch
Dossier Supprimé : C:\Users\Proprietaire\AppData\LocalLow\Conduit
Dossier Supprimé : C:\Users\Proprietaire\AppData\LocalLow\Toolbar4
Dossier Supprimé : C:\Users\Proprietaire\AppData\Roaming\GetRightToGo
Dossier Supprimé : C:\Program Files\Ask.com
Dossier Supprimé : C:\Program Files\Conduit
Fichier Supprimé : C:\Users\Proprietaire\AppData\Roaming\Mozilla\Firefox\Profiles\902j0t4o.default\searchplugins\Conduit.xml

***** [H. Navipromo] *****

***** [Registre] *****

[*] Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT2851639
Clé Supprimée : HKLM\SOFTWARE\Conduit
Clé Supprimée : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils
Clé Supprimée : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager.1
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager.1
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbRequest
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbRequest.1
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbTask
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbTask.1
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper.1
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE

***** [Registre - GUID] *****

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{96BD48DD-741B-41AE-AC4A-AFF96BA00F7E}
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}]

***** [Navigateurs] *****

-\\ Internet Explorer v9.0.8112.16421

Remplacé : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.bigseekpro.com/kcsoftwares/{E79FD839-F8A8-4293-A456-519DE4B6731F} --> hxxp://www.google.fr
Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.bigseekpro.com/kcsoftwares/{E79FD839-F8A8-4293-A456-519DE4B6731F} --> hxxp://www.google.fr

-\\ Mozilla Firefox v11.0 (fr)

## Fichier : C:\Users\Proprietaire\AppData\Roaming\Mozilla\Firefox\Profiles\902j0t4o.default\prefs.js

Supprimée : user_pref("browser.search.defaultthis.engineName", "Oryte Games 1.17 Customized Web Search");
Supprimée : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2830576&Sea[...]

*************************

AdwCleaner[R1].txt - [4814 octets] - [20/04/2012 06:28:25]
AdwCleaner[S1].txt - [4866 octets] - [25/04/2012 20:30:41]

########## EOF - C:\AdwCleaner[S1].txt - [4994 octets] ##########

de **totof91** » 16 Mai 2012, 19:32

Heeeeeeelppppppppp!!!
M'auriez vous oublié, chers lecteurs?

merci

Assiste.Forums

demande d'analyse

demande d'analyse

Re: demande d'analyse

Re: demande d'analyse

Re: demande d'analyse

Re: demande d'analyse

Re: demande d'analyse

Re: demande d'analyse

Re: demande d'analyse

Re: demande d'analyse

Re: demande d'analyse

Qui est en ligne