[Résolu] PC lent et bizarre

[PatMalek]

Re bonjour Skytech,
Ma femme a installé par erreur une appli qui semble avoir replongé le PC dans la mouise ...
Peut-on refaire une analyse?
Vraiment désolé ..

[nam1962]

Perso, tout ordi avec ces symptômes, je le bascule en Xubuntu.
Sinon passe un Malwarebyte et un Ccleaner pour voir..

Sourire, du coup je le reposte celui là
Ca prend moins de temps à installer que de nettoyer.
...Et après.. plus de malware, plus de programme "installé par erreur" ;)
(regarde le lien dans ma signature)

[SkyTech]

Bonjour,

Je t'en prie, AdwCleaner et OTL

[PatMalek]

Voici le rapport OTL en 2 parties:

OTL logfile created on: 22/03/2014 21:03:21 - Run 3
OTL by OldTimer - Version 3.2.69.0 Folder = D:\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

2.00 Gb Total Physical Memory | 1.13 Gb Available Physical Memory | 56.62% Memory free
3.84 Gb Paging File | 2.72 Gb Available in Paging File | 70.90% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 48.83 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: NTFS
Drive D: | 416.93 Gb Total Space | 14.38 Gb Free Space | 3.45% Space Free | Partition Type: NTFS
Drive Z: | 228.26 Gb Total Space | 38.28 Gb Free Space | 16.77% Space Free | Partition Type: NTFS

Computer Name: ORDI_SALON | User Name: JAMIP | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - D:\Downloads\OTL (2).exe (OldTimer Tools)
PRC - C:\Documents and Settings\JAMIP\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies LTD)
PRC - C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe (Check Point Software Technologies LTD)
PRC - C:\Program Files\CheckPoint\ZoneAlarm\ZAPrivacyService.exe (Check Point Software Technologies, Ltd.)
PRC - C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe (Nokia)
PRC - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe (Nokia)
PRC - C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe (Nokia)
PRC - C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe (Nokia)
PRC - C:\Program Files\Cisco\Cisco Secure Desktop\Storage.exe (Cisco Systems, Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Canon\CAL\CALMAIN.exe (Canon Inc.)


========== Modules (No Company Name) ==========

MOD - C:\Documents and Settings\JAMIP\Local Settings\Application Data\Google\Chrome\Application\33.0.1750.146\ppgooglenaclpluginchrome.dll ()
MOD - C:\Documents and Settings\JAMIP\Local Settings\Application Data\Google\Chrome\Application\33.0.1750.146\PepperFlash\pepflashplayer.dll ()
MOD - C:\Documents and Settings\JAMIP\Local Settings\Application Data\Google\Chrome\Application\33.0.1750.146\pdf.dll ()
MOD - C:\Documents and Settings\JAMIP\Local Settings\Application Data\Google\Chrome\Application\33.0.1750.146\ffmpegsumo.dll ()
MOD - C:\Documents and Settings\JAMIP\Local Settings\Application Data\Google\Chrome\Application\33.0.1750.146\chrome_elf.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8cd995f00848816e3ec49dc326e3d49b\System.ServiceProcess.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\f254328a10638e87223d401b39197c91\System.Configuration.Install.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\4b6e70acd99dc22e29b7fc8f9ac340c4\System.Configuration.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\7faf645dc46781225cb722edf9e1e738\System.Xml.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Core\159b4a6888004de346d499841ec088a7\System.Core.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\4b0455ae94e3cecca4bb3ba8c96828c9\System.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\dae02331a443fb52216ca83292cb2f21\mscorlib.ni.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.ServiceProcess.resources.dll ()
MOD - C:\Program Files\Nokia\Nokia Suite\phonon4.dll ()
MOD - C:\Program Files\Nokia\Nokia Suite\qjson.dll ()
MOD - C:\Program Files\Nokia\Nokia Suite\QtXmlPatterns4.dll ()
MOD - C:\Program Files\Nokia\Nokia Suite\QtXml4.dll ()
MOD - C:\Program Files\Nokia\Nokia Suite\QtWebKit4.dll ()
MOD - C:\Program Files\Nokia\Nokia Suite\QtSql4.dll ()
MOD - C:\Program Files\Nokia\Nokia Suite\QtScript4.dll ()
MOD - C:\Program Files\Nokia\Nokia Suite\QtOpenGL4.dll ()
MOD - C:\Program Files\Nokia\Nokia Suite\QtNetwork4.dll ()
MOD - C:\Program Files\Nokia\Nokia Suite\QtMultimediaKit1.dll ()
MOD - C:\Program Files\Nokia\Nokia Suite\QtGui4.dll ()
MOD - C:\Program Files\Nokia\Nokia Suite\QtDeclarative4.dll ()
MOD - C:\Program Files\Nokia\Nokia Suite\QtCore4.dll ()
MOD - C:\Program Files\Nokia\Nokia Suite\sqldrivers\qsqlite4.dll ()
MOD - C:\Program Files\Nokia\Nokia Suite\Imageformats\qjpeg4.dll ()
MOD - C:\Program Files\Nokia\Nokia Suite\Imageformats\qico4.dll ()
MOD - C:\Program Files\Nokia\Nokia Suite\Imageformats\qgif4.dll ()
MOD - C:\Program Files\Nokia\Nokia Suite\NService.dll ()
MOD - C:\Program Files\Nokia\Nokia Suite\CommonUpdateChecker.dll ()
MOD - C:\Program Files\Nokia\Nokia Suite\ssoengine.dll ()
MOD - C:\Program Files\Nokia\Nokia Suite\securestorage.dll ()
MOD - C:\WINDOWS\system32\msdmo.dll ()
MOD - C:\Program Files\WinRAR\RarExt.dll ()


========== Services (SafeList) ==========

SRV - (AdobeFlashPlayerUpdateSvc) -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (vsmon) -- C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies LTD)
SRV - (SkypeUpdate) -- C:\Program Files\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (ZAPrivacyService) -- C:\Program Files\CheckPoint\ZoneAlarm\ZAPrivacyService.exe (Check Point Software Technologies, Ltd.)
SRV - (Apple Mobile Device) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (ServiceLayer) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe (Nokia)
SRV - (C-DillaCdaC11BA) -- C:\WINDOWS\system32\drivers\CDAC11BA.EXE (C-Dilla Ltd)
SRV - (TwingoStorageService) -- C:\Program Files\Cisco\Cisco Secure Desktop\Storage.exe (Cisco Systems, Inc.)
SRV - (KaraokeService) -- C:\WINDOWS\system32\KaraokeSer.exe (VIA Technologies, Inc.)
SRV - (nvUpdatusService) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
SRV - (odserv) -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (EPSON_EB_RPCV4_04) -- C:\Program Files\Fichiers communs\EPSON\EPW!3 SSRP\E_S50ST7.EXE (SEIKO EPSON CORPORATION)
SRV - (EPSON_PM_RPCV4_04) -- C:\Program Files\Fichiers communs\EPSON\EPW!3 SSRP\E_S50RP7.EXE (SEIKO EPSON CORPORATION)
SRV - (nSvcIp) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe ()
SRV - (ForceWare Intelligent Application Manager (IAM) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe ()
SRV - (NMIndexingService) -- C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (Nero AG)
SRV - (ose) -- C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (CCALib8) -- C:\Program Files\Canon\CAL\CALMAIN.exe (Canon Inc.)
SRV - (IDriverT) -- C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe (Macrovision Corporation)


========== Driver Services (SafeList) ==========

DRV - (xhunter1) -- C:\WINDOWS\xhunter1.sys File not found
DRV - (vtany) -- C:\WINDOWS\vtany.sys File not found
DRV - (CrystalSysInfo) -- C:\Program Files\MediaCoder\SysInfo.sys File not found
DRV - (Vsdatant) -- C:\WINDOWS\system32\vsdatant.sys (Check Point Software Technologies LTD)
DRV - (nmwcdnsu) -- C:\WINDOWS\system32\drivers\nmwcdnsu.sys (Nokia)
DRV - (nmwcdnsuc) -- C:\WINDOWS\system32\drivers\nmwcdnsuc.sys (Nokia)
DRV - (nmwcdc) -- C:\WINDOWS\system32\drivers\ccdcmbo.sys (Nokia)
DRV - (nmwcd) -- C:\WINDOWS\system32\drivers\ccdcmb.sys (Nokia)
DRV - (UsbserFilt) -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys (Nokia)
DRV - (upperdev) -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys (Nokia)
DRV - (pccsmcfd) -- C:\WINDOWS\system32\drivers\pccsmcfd.sys (Nokia)
DRV - (CdaC15BA) -- C:\WINDOWS\system32\drivers\CDAC15BA.SYS ()
DRV - (KLIF) -- C:\WINDOWS\system32\drivers\klif.sys (Kaspersky Lab)
DRV - (KL1) -- C:\WINDOWS\system32\drivers\kl1.sys (Kaspersky Lab ZAO)
DRV - (kl2) -- C:\WINDOWS\system32\drivers\kl2.sys (Kaspersky Lab ZAO)
DRV - (twingostoragedriver) -- C:\Program Files\Cisco\Cisco Secure Desktop\CSD8df3d.sys ()
DRV - (ggsemc) -- C:\WINDOWS\system32\drivers\ggsemc.sys (Sony Ericsson Mobile Communications)
DRV - (ggflt) -- C:\WINDOWS\system32\drivers\ggflt.sys (Sony Ericsson Mobile Communications)
DRV - (seehcri) -- C:\WINDOWS\system32\drivers\seehcri.sys (Sony Ericsson Mobile Communications)
DRV - (VIAHdAudAddService) -- C:\WINDOWS\system32\drivers\viahduaa.sys (VIA Technologies, Inc.)
DRV - (NVHDA) -- C:\WINDOWS\system32\drivers\nvhda32.sys (NVIDIA Corporation)
DRV - (nvnetbus) -- C:\WINDOWS\system32\drivers\nvnetbus.sys (NVIDIA Corporation)
DRV - (NVENETFD) -- C:\WINDOWS\system32\drivers\NVENETFD.sys (NVIDIA Corporation)
DRV - (nvgts) -- C:\WINDOWS\system32\drivers\nvgts.sys (NVIDIA Corporation)
DRV - (s0016unic) -- C:\WINDOWS\system32\drivers\s0016unic.sys (MCCI Corporation)
DRV - (s0016obex) -- C:\WINDOWS\system32\drivers\s0016obex.sys (MCCI Corporation)
DRV - (s0016nd5) -- C:\WINDOWS\system32\drivers\s0016nd5.sys (MCCI Corporation)
DRV - (s0016mdfl) -- C:\WINDOWS\system32\drivers\s0016mdfl.sys (MCCI Corporation)
DRV - (s0016mdm) -- C:\WINDOWS\system32\drivers\s0016mdm.sys (MCCI Corporation)
DRV - (s0016mgmt) -- C:\WINDOWS\system32\drivers\s0016mgmt.sys (MCCI Corporation)
DRV - (s0016bus) -- C:\WINDOWS\system32\drivers\s0016bus.sys (MCCI Corporation)
DRV - (AmdPPM) -- C:\WINDOWS\system32\drivers\AmdPPM.sys (Advanced Micro Devices)
DRV - (MTsensor) -- C:\WINDOWS\system32\drivers\ASACPI.sys ()
DRV - (snpstd2) -- C:\WINDOWS\system32\drivers\snpstd2.sys ()


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://search.zonealarm.com/?src=h [Binary data over 200 bytes]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://fr.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 18 EB B8 DC 36 E4 CC 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope =
IE - HKCU\..\SearchScopes\{47313964-D8A1-4E52-854E-5F34571B1C88}: "URL" = http://start.mysearchdial.com/results.p ... 703047&ir=
IE - HKCU\..\SearchScopes\{ACFEE283-4E1E-4E0F-8374-D99162B37040}: "URL" = http://www.google.com/search?hl=en&q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>


========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll File not found
FF - HKLM\Software\MozillaPlugins\@nokia.com/EnablerPlugin: C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF - HKLM\Software\MozillaPlugins\@tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Documents and Settings\JAMIP\Application Data\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Documents and Settings\JAMIP\Application Data\Mozilla\plugins\npo1d.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Documents and Settings\JAMIP\Application Data\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\JAMIP\Local Settings\Application Data\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\JAMIP\Local Settings\Application Data\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()


[2012/02/16 04:40:10 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions

O1 HOSTS File: ([2004/08/05 12:00:00 | 000,000,790 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No CLSID value found.
O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre7\bin\jusched.exe" File not found
O4 - HKLM..\Run: [ZoneAlarm] C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe (Check Point Software Technologies LTD)
O4 - HKCU..\Run: [GoogleChromeAutoLaunch_064A0CF039E09F6657A757F50755262F] C:\Documents and Settings\JAMIP\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (Google Inc.)
O4 - HKCU..\Run: [NokiaSuite.exe] C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe (Nokia)
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\TODO.txt ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O9 - Extra 'Tools' menuitem : Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre7\bin\jp2iexp.dll ()
O16 - DPF: {2AB1C516-6654-4D3A-B3D6-2185BBCEB409} https://wastis-eu.st.com/+CSCOL+/csvrloader32.cab (Reg Error: Key error.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/microso ... 9953423984 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microso ... 9953410343 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 10.45.2)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_37)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 10.45.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{33F3B71D-29CF-49BA-A6A8-49936A2D1518}: DhcpNameServer = 192.168.0.254
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Fichiers communs\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Ma page d'accueil) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\JAMIP\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\JAMIP\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/10/01 04:42:04 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

MsConfig - State: "system.ini" - 0
MsConfig - State: "win.ini" - 0
MsConfig - State: "bootini" - 0
MsConfig - State: "services" - 0
MsConfig - State: "startup" - 0

SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: sermouse.sys - Driver
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vga.sys - Driver
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: sermouse.sys - Driver
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vga.sys - Driver
SafeBootNet: vsmon - C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies LTD)
SafeBootNet: {1a3e09be-1e45-494b-9174-d7385b45bbf5} -
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Rendu VML (Vector Graphics Rendering)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4
ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Liaison de données Dynamic HTML pour Java
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
ActiveX: {3F7924B9-D148-3141-87B1-68F36043A940} - .NET Framework
ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Création avancée
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - Classes Java DirectAnimation
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.7
ActiveX: {5056b317-8d4c-43ee-8543-b9d1e234b8f4} - Mise à jour de sécurité pour Windows XP (KB923789)
ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework
ActiveX: {73fa19d0-2d75-11d2-995d-00c04f98bbc9} - Web Folders
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {ACC563BC-4266-43f0-B6ED-9D38C4202C7E} -
ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework
ActiveX: {C3C986D6-06B1-43BF-90DD-BE30756C00DE} - RevokedRootsUpdate
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Planificateur de tâches
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {EF289A85-8E57-408d-BE47-73B55609861A} - RootsUpdate
ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)

CREATERESTOREPOINT
Error creating restore point.
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2014/03/11 20:26:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JAMIP\Application Data\Mozilla
[2014/02/27 21:38:35 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files
[2014/02/27 07:40:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JAMIP\Local Settings\Application Data\Skype
[2014/02/27 07:40:15 | 000,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\Skype
[2014/02/27 07:40:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Skype
[2014/02/27 07:40:14 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2014/02/25 19:08:28 | 000,000,000 | R--D | C] -- D:\Dropbox
[2014/02/25 19:07:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JAMIP\Application Data\DropboxMaster
[2014/02/25 19:07:19 | 000,000,000 | ---D | C] -- C:\Program Files\Dropbox
[2014/02/25 19:07:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JAMIP\Menu Démarrer\Programmes\Dropbox
[2014/02/25 18:13:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\JAMIP\Application Data\Dropbox
[1 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2014/03/22 21:07:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At2.job
[2014/03/22 21:07:00 | 000,000,410 | ---- | M] () -- C:\WINDOWS\tasks\At1.job
[2014/03/22 21:05:37 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2014/03/22 20:46:00 | 000,001,002 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2014/03/22 20:26:00 | 000,001,148 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-179605362-682003330-1005UA.job
[2014/03/22 15:53:01 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2014/03/22 15:26:00 | 000,001,096 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-179605362-682003330-1005Core.job
[2014/03/22 11:40:15 | 000,000,432 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{1C137512-06FB-4AD6-8EDA-2C50DFC28EC7}.job
[2014/03/22 09:02:09 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2014/03/16 10:41:54 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2014/03/14 10:01:56 | 000,285,312 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2014/03/14 09:48:46 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2014/03/12 10:46:11 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2014/03/12 10:46:11 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2014/03/11 09:02:50 | 000,001,764 | ---- | M] () -- C:\Documents and Settings\JAMIP\Application Data\Microsoft\Internet Explorer\Quick Launch\Nokia Suite.lnk
[2014/03/06 14:45:01 | 000,000,005 | ---- | M] () -- C:\WINDOWS\Twain001.Mtx
[2014/03/06 14:44:58 | 000,000,156 | ---- | M] () -- C:\WINDOWS\Twunk001.MTX
[2014/03/04 11:29:37 | 000,092,160 | ---- | M] () -- C:\Documents and Settings\JAMIP\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2014/03/04 11:29:37 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2014/03/04 09:30:56 | 000,002,307 | ---- | M] () -- C:\Documents and Settings\JAMIP\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2014/02/25 19:08:28 | 000,001,001 | ---- | M] () -- C:\Documents and Settings\JAMIP\Bureau\Dropbox.lnk
[2014/02/24 16:25:54 | 000,174,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ie4uinit.exe
[2014/02/24 16:25:54 | 000,174,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ie4uinit.exe
[2014/02/24 12:45:24 | 000,920,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wininet.dll
[2014/02/24 12:45:23 | 000,759,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vgx.dll
[2014/02/24 12:45:22 | 001,216,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\urlmon.dll
[2014/02/24 12:45:21 | 000,206,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\occache.dll
[2014/02/24 12:45:21 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\url.dll
[2014/02/24 12:45:21 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\url.dll
[2014/02/24 12:45:20 | 000,611,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mstime.dll
[2014/02/24 12:45:20 | 000,611,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstime.dll
[2014/02/24 12:45:19 | 006,022,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshtml.dll
[2014/02/24 12:45:19 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshtmled.dll
[2014/02/24 12:45:11 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeedsbs.dll
[2014/02/24 12:45:11 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2014/02/24 12:45:10 | 000,630,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeeds.dll
[2014/02/24 12:45:10 | 000,630,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll
[2014/02/24 12:45:10 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\licmgr10.dll
[2014/02/24 12:45:10 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\licmgr10.dll
[2014/02/24 12:45:09 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsdbgui.dll
[2014/02/24 12:45:09 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\jsproxy.dll
[2014/02/24 12:45:09 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsproxy.dll
[2014/02/24 12:45:08 | 002,006,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll
[2014/02/24 12:45:08 | 001,469,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcpl.cpl
[2014/02/24 12:45:08 | 001,469,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetcpl.cpl
[2014/02/24 12:45:06 | 000,184,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\iepeers.dll
[2014/02/24 12:45:06 | 000,184,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iepeers.dll
[2014/02/24 12:45:05 | 011,113,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll
[2014/02/24 12:45:01 | 000,743,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedvtool.dll
[2014/02/24 12:45:00 | 000,387,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\iedkcs32.dll
[2014/02/24 12:45:00 | 000,387,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedkcs32.dll
[2014/02/24 12:44:59 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\corpol.dll
[2014/02/24 12:44:59 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\corpol.dll
[2014/02/24 11:55:52 | 000,385,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\html.iec
[1 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]

[PatMalek]

========== Files Created - No Company Name ==========

[2014/03/11 09:02:50 | 000,001,764 | ---- | C] () -- C:\Documents and Settings\JAMIP\Application Data\Microsoft\Internet Explorer\Quick Launch\Nokia Suite.lnk
[2014/02/25 19:08:28 | 000,001,001 | ---- | C] () -- C:\Documents and Settings\JAMIP\Bureau\Dropbox.lnk
[2014/02/05 21:07:04 | 000,000,090 | ---- | C] () -- C:\Documents and Settings\NetworkService\Application Data\WB.CFG
[2014/02/04 21:07:20 | 000,000,043 | ---- | C] () -- C:\Documents and Settings\JAMIP\Application Data\WB.CFG
[2014/01/19 07:15:08 | 000,286,720 | ---- | C] () -- C:\WINDOWS\vsnpstd2.exe
[2014/01/19 07:15:08 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\dsnpstd2.dll
[2014/01/19 07:15:08 | 000,015,541 | ---- | C] () -- C:\WINDOWS\snpstd2.ini
[2014/01/19 07:15:03 | 000,334,080 | ---- | C] () -- C:\WINDOWS\System32\drivers\snpstd2.sys
[2014/01/19 07:15:00 | 000,061,440 | ---- | C] ( ) -- C:\WINDOWS\System32\csnpstd2.dll
[2014/01/19 07:15:00 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\rsnpstd2.dll
[2014/01/19 07:15:00 | 000,036,864 | ---- | C] ( ) -- C:\WINDOWS\System32\vsnpstd2.dll
[2014/01/19 07:14:57 | 000,020,480 | ---- | C] () -- C:\WINDOWS\usnpstd2.exe
[2014/01/10 21:38:37 | 000,038,433 | ---- | C] () -- C:\Documents and Settings\JAMIP\Application Data\Microsoft Excel 97-2003.ADR
[2014/01/10 21:38:34 | 000,000,028 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2013/11/20 09:25:46 | 000,583,776 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2013/03/16 20:26:57 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2012/10/11 17:39:30 | 000,138,056 | ---- | C] () -- C:\Documents and Settings\JAMIP\Application Data\PnkBstrK.sys
[2012/10/11 17:14:38 | 000,000,207 | ---- | C] () -- C:\WINDOWS\disneysy.ini
[2012/10/11 05:30:01 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2011/11/09 22:40:35 | 000,000,579 | ---- | C] () -- C:\Documents and Settings\JAMIP\Local Settings\Application Data\Images.fl
[2011/10/24 13:05:04 | 000,092,160 | ---- | C] () -- C:\Documents and Settings\JAMIP\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/10/03 21:03:59 | 000,000,106 | ---- | C] () -- C:\Documents and Settings\JAMIP\default.pls
[2011/10/01 04:48:17 | 006,553,600 | -H-- | C] () -- C:\Documents and Settings\JAMIP\NTUSER.bak

========== ZeroAccess Check ==========

[2011/10/04 18:53:41 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2011/06/21 19:19:04 | 001,510,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009/02/09 11:53:55 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008/04/13 18:33:50 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== Custom Scans ==========

< %ALLUSERSPROFILE%\Application Data\*. >
[2013/12/06 17:18:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2012/10/13 05:35:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ABBYY
[2011/10/02 21:22:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Adobe
[2011/10/03 11:53:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ahead
[2011/10/25 12:34:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Apple
[2011/12/15 13:35:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Apple Computer
[2012/10/20 12:32:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BVRP Software
[2011/11/22 12:46:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\CheckPoint
[2013/01/15 17:47:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Electronic Arts
[2012/10/13 06:08:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EPSON
[2011/11/09 08:33:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Google
[2012/10/11 07:10:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Kaspersky SDK
[2011/10/01 05:22:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2013/12/27 08:02:02 | 000,000,000 | --SD | M] -- C:\Documents and Settings\All Users\Application Data\Microsoft
[2014/03/14 09:46:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Microsoft Help
[2011/10/03 11:52:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Nero
[2013/12/27 07:58:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Nokia
[2013/12/27 07:56:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NokiaInstallerCache
[2011/10/01 05:06:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NVIDIA
[2011/10/01 05:06:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NVIDIA Corporation
[2013/01/15 17:47:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Origin
[2013/12/27 08:02:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Suite
[2012/10/21 11:19:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Regressi
[2014/02/27 07:40:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Skype
[2012/10/20 12:37:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Sony Ericsson
[2011/12/12 20:57:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Sun
[2013/12/28 23:41:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TomTom
[2012/10/13 06:11:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\UDL
[2011/10/01 05:27:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2011/10/25 12:35:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2012/10/21 11:19:15 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{74E9B3B4-EF23-4AE9-98CA-1BBF7BF6AC61}

< %ALLUSERSPROFILE%\Application Data\*.exe /s >
[2011/05/16 08:48:06 | 002,925,742 | ---- | M] (Evariste ) -- C:\Documents and Settings\All Users\Application Data\{74E9B3B4-EF23-4AE9-98CA-1BBF7BF6AC61}\regressi.exe
[2012/08/21 13:01:28 | 001,977,816 | ---- | M] (GEAR Software, Inc.) -- C:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1\GEARDIFx.exe
[2012/08/21 13:01:22 | 000,115,672 | ---- | M] (GEAR Software, Inc.) -- C:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1\x86\DifXInst32.exe
[2012/01/03 08:37:53 | 000,320,456 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\All Users\Application Data\Adobe\ARM\Reader_10.1.1\20371\AcrobatUpdater.exe
[2012/01/03 08:37:53 | 000,843,712 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\All Users\Application Data\Adobe\ARM\Reader_10.1.1\20371\AdobeARM.exe
[2012/01/03 08:37:53 | 000,320,456 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\All Users\Application Data\Adobe\ARM\Reader_10.1.1\20371\AdobeARMHelper.exe
[2012/01/03 08:37:53 | 000,320,456 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\All Users\Application Data\Adobe\ARM\Reader_10.1.1\20371\ReaderUpdater.exe
[2011/09/05 22:51:05 | 001,560,520 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\All Users\Application Data\Adobe\Setup\{AC76BA86-7AD7-1036-7B44-AA1000000001}\setup.exe
[2013/12/06 17:09:52 | 000,077,136 | ---- | M] (Apple Inc.) -- C:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 11.1.3.8\SetupAdmin.exe
[2013/12/26 22:19:35 | 106,320,416 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\{EDB188F5-D8E8-42EE-89E0-F212DA48CB81}\Installer.exe
[2013/12/27 07:56:39 | 000,125,288 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\{EDB188F5-D8E8-42EE-89E0-F212DA48CB81}\Installer\InstallerService.exe
[2013/12/27 07:56:39 | 000,053,096 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\{EDB188F5-D8E8-42EE-89E0-F212DA48CB81}\Installer\InstallerServiceExec.exe
[2013/12/27 07:56:39 | 000,053,608 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\{EDB188F5-D8E8-42EE-89E0-F212DA48CB81}\Installer\IsPinned.exe
[2013/12/27 07:56:46 | 000,046,144 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\{EDB188F5-D8E8-42EE-89E0-F212DA48CB81}\Installer\CommonCustomActions\pcswpc.exe
[2013/12/27 07:56:46 | 000,047,616 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\{EDB188F5-D8E8-42EE-89E0-F212DA48CB81}\Installer\CommonCustomActions\RepairMplatform.exe
[2013/12/27 07:56:46 | 000,077,824 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\{EDB188F5-D8E8-42EE-89E0-F212DA48CB81}\Installer\CommonCustomActions\Run_XML6_SP1.exe
[2013/12/27 07:56:46 | 000,038,912 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\{EDB188F5-D8E8-42EE-89E0-F212DA48CB81}\Installer\CommonCustomActions\WMF11Runx86.exe
[2013/12/27 07:56:47 | 012,212,040 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\All Users\Application Data\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\{EDB188F5-D8E8-42EE-89E0-F212DA48CB81}\Installer\CommonCustomActions\WMFDist11-WindowsXP-X86-ENU.exe
[2011/09/10 13:36:00 | 000,195,904 | ---- | M] (NVIDIA Corporation) -- C:\Documents and Settings\All Users\Application Data\NVIDIA\Updatus\WLMerger.exe

< %APPDATA%\*. >
[2014/02/08 15:59:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\Adobe
[2013/01/16 18:08:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\Aeria Games & Entertainment
[2011/12/02 22:45:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\Ahead
[2013/03/31 22:38:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\Apple Computer
[2014/02/08 15:59:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\avidemux
[2014/03/05 08:46:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\CheckPoint
[2011/10/26 07:25:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\Cisco
[2014/03/06 08:01:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\Dropbox
[2014/02/25 19:08:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\DropboxMaster
[2014/03/06 14:45:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\Epson
[2012/01/18 13:50:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\Google
[2011/10/04 19:10:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\Leadertech
[2011/10/01 05:27:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\Macromedia
[2014/02/17 13:49:47 | 000,000,000 | --SD | M] -- C:\Documents and Settings\JAMIP\Application Data\Microsoft
[2011/11/16 14:34:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\Mindscape
[2014/03/11 20:26:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\Mozilla
[2014/03/04 08:31:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\Nokia
[2013/12/27 08:05:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\Nokia Suite
[2011/12/28 08:26:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\NVIDIA
[2011/11/09 22:51:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\ObviousIdea
[2013/12/31 15:12:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\OpenOffice.org
[2014/02/08 15:59:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\Origin
[2013/12/27 08:04:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\PC Suite
[2014/02/10 21:06:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\PDF Architect
[2012/10/21 11:19:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\Regressi
[2011/10/04 19:16:18 | 000,000,000 | RH-D | M] -- C:\Documents and Settings\JAMIP\Application Data\SecuROM
[2014/03/18 22:02:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\Skype
[2014/02/04 21:10:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\Softland
[2011/12/12 20:53:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\Sun
[2013/12/28 23:40:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\TomTom
[2011/12/19 12:40:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\JAMIP\Application Data\vlc

< %APPDATA%\*.exe /s >
[2014/02/01 00:16:26 | 032,179,440 | ---- | M] (Dropbox, Inc.) -- C:\Documents and Settings\JAMIP\Application Data\Dropbox\bin\Dropbox.exe
[2014/02/01 00:17:50 | 000,244,640 | ---- | M] (Dropbox, Inc.) -- C:\Documents and Settings\JAMIP\Application Data\Dropbox\bin\DropboxUninstaller.exe
[2014/02/01 00:16:30 | 000,143,648 | ---- | M] (Dropbox, Inc.) -- C:\Documents and Settings\JAMIP\Application Data\Dropbox\bin\DropboxUpdateHelper.exe

< %temp%\*.exe /s >
[2012/10/01 17:44:51 | 000,912,880 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\jre-6u37-windows-i586-iftw.exe
[2013/02/16 06:00:49 | 000,897,448 | ---- | M] (Oracle Corporation) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\jre-7u15-windows-i586-iftw.exe
[2013/10/08 19:27:49 | 000,915,368 | ---- | M] (Oracle Corporation) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\jre-7u45-windows-i586-iftw.exe
[658 C:\DOCUME~1\JAMIP\LOCALS~1\Temp\*.tmp files -> C:\DOCUME~1\JAMIP\LOCALS~1\Temp\*.tmp -> ]
[2013/03/12 09:59:14 | 000,015,968 | R-S- | M] (Tarma Software Research Pty Ltd) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\{5CAD489B-E896-4407-A6EC-A0B4874E6A6D}\Setup.exe
[2013/01/14 19:08:24 | 000,563,664 | ---- | M] (Google Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\CRX_DF399A9B283A\ChromeRecovery.exe
[2013/01/14 19:08:24 | 000,765,280 | ---- | M] (Google Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\CRX_DF399A9B283A\GoogleUpdateSetup.exe
[2011/11/14 11:23:02 | 000,123,392 | ---- | M] (Flexera Software) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\DriverPatch104.exe
[2011/11/14 11:23:02 | 000,117,560 | ---- | M] () -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\remove.exe
[2011/11/14 11:23:02 | 000,233,784 | ---- | M] () -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\win64_32.exe
[2011/11/14 11:23:02 | 000,123,704 | ---- | M] () -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\win64_32_x64.exe
[2011/11/14 11:23:02 | 000,053,728 | ---- | M] () -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\ZGWin32LaunchHelper.exe
[2011/11/14 11:23:42 | 000,033,056 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\java-rmi.exe
[2011/11/14 11:23:42 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\java.exe
[2011/11/14 11:23:42 | 000,059,168 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\javacpl.exe
[2011/11/14 11:23:42 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\javaw.exe
[2011/11/14 11:23:42 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\javaws.exe
[2011/11/14 11:23:42 | 000,079,648 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\jbroker.exe
[2011/11/14 11:23:42 | 000,022,816 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\jp2launcher.exe
[2011/11/14 11:23:42 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\jqs.exe
[2011/11/14 11:23:42 | 000,055,072 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\jqsnotify.exe
[2011/11/14 11:23:42 | 000,386,872 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\jucheck.exe
[2011/11/14 11:23:42 | 000,055,072 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\jureg.exe
[2011/11/14 11:23:42 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\jusched.exe
[2011/11/14 11:23:42 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\keytool.exe
[2011/11/14 11:23:42 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\kinit.exe
[2011/11/14 11:23:42 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\klist.exe
[2011/11/14 11:23:42 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\ktab.exe
[2011/11/14 11:23:42 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\orbd.exe
[2011/11/14 11:23:42 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\pack200.exe
[2011/11/14 11:23:42 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\policytool.exe
[2011/11/14 11:23:42 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\rmid.exe
[2011/11/14 11:23:42 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\rmiregistry.exe
[2011/11/14 11:23:42 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\servertool.exe
[2011/11/14 11:23:42 | 000,018,208 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\ssvagent.exe
[2011/11/14 11:23:42 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\tnameserv.exe
[2011/11/14 11:23:42 | 000,132,896 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362237766\Windows\resource\jre\bin\unpack200.exe
[2011/11/14 11:23:02 | 000,123,392 | ---- | M] (Flexera Software) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\DriverPatch104.exe
[2011/11/14 11:23:02 | 000,117,560 | ---- | M] () -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\remove.exe
[2011/11/14 11:23:02 | 000,233,784 | ---- | M] () -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\win64_32.exe
[2011/11/14 11:23:02 | 000,123,704 | ---- | M] () -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\win64_32_x64.exe
[2011/11/14 11:23:02 | 000,053,728 | ---- | M] () -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\ZGWin32LaunchHelper.exe
[2011/11/14 11:23:42 | 000,033,056 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\java-rmi.exe
[2011/11/14 11:23:42 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\java.exe
[2011/11/14 11:23:42 | 000,059,168 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\javacpl.exe
[2011/11/14 11:23:42 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\javaw.exe
[2011/11/14 11:23:42 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\javaws.exe
[2011/11/14 11:23:42 | 000,079,648 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\jbroker.exe
[2011/11/14 11:23:42 | 000,022,816 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\jp2launcher.exe
[2011/11/14 11:23:42 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\jqs.exe
[2011/11/14 11:23:42 | 000,055,072 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\jqsnotify.exe
[2011/11/14 11:23:42 | 000,386,872 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\jucheck.exe
[2011/11/14 11:23:42 | 000,055,072 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\jureg.exe
[2011/11/14 11:23:42 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\jusched.exe
[2011/11/14 11:23:42 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\keytool.exe
[2011/11/14 11:23:42 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\kinit.exe
[2011/11/14 11:23:42 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\klist.exe
[2011/11/14 11:23:42 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\ktab.exe
[2011/11/14 11:23:42 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\orbd.exe
[2011/11/14 11:23:42 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\pack200.exe
[2011/11/14 11:23:42 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\policytool.exe
[2011/11/14 11:23:42 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\rmid.exe
[2011/11/14 11:23:42 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\rmiregistry.exe
[2011/11/14 11:23:42 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\servertool.exe
[2011/11/14 11:23:42 | 000,018,208 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\ssvagent.exe
[2011/11/14 11:23:42 | 000,033,568 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\tnameserv.exe
[2011/11/14 11:23:42 | 000,132,896 | ---- | M] (Sun Microsystems, Inc.) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\I1362238027\Windows\resource\jre\bin\unpack200.exe
[2014/02/04 21:06:24 | 004,201,928 | ---- | M] (Softland ) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\is42483369\1648649_stp.EXE
[2013/08/15 17:44:28 | 000,011,264 | ---- | M] () -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\is42483369\1648728_stp\wajam_validate.exe
[2014/01/23 10:46:30 | 002,234,640 | ---- | M] (Setup © ) -- C:\DOCUME~1\JAMIP\LOCALS~1\Temp\is42483369\1648765_stp\Mysearchdial.exe

< %SYSTEMDRIVE%\*.exe >

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2011/10/01 06:31:28 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2011/10/01 06:31:28 | 001,069,056 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2011/10/01 06:31:28 | 000,446,464 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav

< MD5 for: EXPLORER.EXE >
[2008/04/13 18:34:04 | 001,037,824 | ---- | M] (Microsoft Corporation) MD5=F2317622D29F9FF0F88AEECD5F60F0DD -- C:\WINDOWS\explorer.exe
[2008/04/13 18:34:04 | 001,037,824 | ---- | M] (Microsoft Corporation) MD5=F2317622D29F9FF0F88AEECD5F60F0DD -- C:\WINDOWS\system32\dllcache\explorer.exe

< MD5 for: WINLOGON.EXE >
[2008/04/13 18:34:30 | 000,512,000 | ---- | M] (Microsoft Corporation) MD5=DD73D6B9F6B4CB630CF35B438B540174 -- C:\WINDOWS\system32\dllcache\winlogon.exe
[2008/04/13 18:34:30 | 000,512,000 | ---- | M] (Microsoft Corporation) MD5=DD73D6B9F6B4CB630CF35B438B540174 -- C:\WINDOWS\system32\winlogon.exe

< HKEY_LOCAL_MACHINE\SYSTEM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /s >

< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s >
"Debug" =
"Kmode" = %SystemRoot%\system32\win32k.sys -- [2014/02/07 07:36:35 | 001,879,168 | ---- | M] (Microsoft Corporation)
"Optional" = Posix [binary data]
"Posix" = %SystemRoot%\system32\psxss.exe
"Required" = DebugWindows [binary data]
"Windows" = %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\CSRSS]
"CsrSrvSharedSectionBase" = 2137980928

< nslookup http://www.google.fr /c >
Serveur : UnKnown
Address: 192.168.0.254

< hklm\software\clients\startmenuinternet|command /rs >
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\chrome.exe\shell\open\command\\: "C:\Documents and Settings\JAMIP\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" [2014/03/02 03:35:27 | 000,859,464 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ShowIconsCommand: "C:\Documents and Settings\JAMIP\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --show-icons [2014/03/02 03:35:27 | 000,859,464 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\HideIconsCommand: "C:\Documents and Settings\JAMIP\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --hide-icons [2014/03/02 03:35:27 | 000,859,464 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ReinstallCommand: "C:\Documents and Settings\JAMIP\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --make-default-browser [2014/03/02 03:35:27 | 000,859,464 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\\: "C:\Documents and Settings\JAMIP\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" [2014/03/02 03:35:27 | 000,859,464 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\WINDOWS\system32\ie4uinit.exe" -reinstall [2014/02/24 16:25:54 | 000,174,592 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\WINDOWS\system32\ie4uinit.exe" -hide [2014/02/24 16:25:54 | 000,174,592 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\WINDOWS\system32\ie4uinit.exe" -show [2014/02/24 16:25:54 | 000,174,592 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2009/03/08 13:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: C:\Program Files\Internet Explorer\iexplore.exe [2009/03/08 13:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation)

< hklm\software\clients\startmenuinternet|command /64 /rs >
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\chrome.exe\shell\open\command\\: "C:\Documents and Settings\JAMIP\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" [2014/03/02 03:35:27 | 000,859,464 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ShowIconsCommand: "C:\Documents and Settings\JAMIP\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --show-icons [2014/03/02 03:35:27 | 000,859,464 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\HideIconsCommand: "C:\Documents and Settings\JAMIP\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --hide-icons [2014/03/02 03:35:27 | 000,859,464 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ReinstallCommand: "C:\Documents and Settings\JAMIP\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --make-default-browser [2014/03/02 03:35:27 | 000,859,464 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\\: "C:\Documents and Settings\JAMIP\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" [2014/03/02 03:35:27 | 000,859,464 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\WINDOWS\system32\ie4uinit.exe" -reinstall [2014/02/24 16:25:54 | 000,174,592 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\WINDOWS\system32\ie4uinit.exe" -hide [2014/02/24 16:25:54 | 000,174,592 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\WINDOWS\system32\ie4uinit.exe" -show [2014/02/24 16:25:54 | 000,174,592 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2009/03/08 13:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: C:\Program Files\Internet Explorer\iexplore.exe [2009/03/08 13:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation)

< End of report >

[PatMalek]

Rapport adw:

# AdwCleaner v3.022 - Rapport créé le 22/03/2014 à 21:57:56
# Mis à jour le 13/03/2014 par Xplode
# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)
# Nom d'utilisateur : JAMIP - ORDI_SALON
# Exécuté depuis : D:\Downloads\adwcleaner (1).exe
# Option : Nettoyer

***** [ Services ] *****


***** [ Fichiers / Dossiers ] *****


***** [ Raccourcis ] *****


***** [ Registre ] *****


***** [ Navigateurs ] *****

-\\ Internet Explorer v8.0.6001.18702


*************************

AdwCleaner[R0].txt - [585 octets] - [22/03/2014 21:57:08]

[PatMalek]

je viens de voir aussi que mon disque C: est plein, ce qui est vraiment bizarre ...
Ce n'était pas le cas avant ...
En regardant de plus près, il y aurait 12.7Go dans Documents and settings.
Pourtant je ne stocke quasi rien sous C:, tout est sous D:

[SkyTech]

Bonjour,

je viens de voir aussi que mon disque C: est plein, ce qui est vraiment bizarre ...
Ce n'était pas le cas avant ...
En regardant de plus près, il y aurait 12.7Go dans Documents and settings.
Pourtant je ne stocke quasi rien sous C:, tout est sous D:

voir : https://www.malekal.com/2011/09/04/comm ... ce-disque/


Quel était le logiciel qui posait problème ?

Relance AdwCleaner et prends Désinstaller.

Relance OTL.
o sous Personnalisation, copie_colle le contenu du cadre ci dessous (TOUT SELECTIONNER avant) et clic Correction, un rapport apparraitra suite à l’operation que tu conserveras afin d’en coller le resultat:

Code : Tout sélectionner

:OTL
IE - HKCU\..\SearchScopes\{47313964-D8A1-4E52-854E-5F34571B1C88}: "URL" = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=tele0103&cd=2XzuyEtN2Y1L1QzutBtD0C0FtAtD0A0BtA0EtD0A0FyC0CtBtN0D0Tzu0SyByCyCtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtD
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://search.zonealarm.com/?src=h [Binary data over 200 bytes]
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\JAMIP\Local Settings\Application Data\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\JAMIP\Local Settings\Application Data\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No CLSID value found.
O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre7\bin\jusched.exe" File not found
[1 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]
[2014/03/22 21:07:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\At2.job
[2014/03/22 21:07:00 | 000,000,410 | ---- | M] () -- C:\WINDOWS\tasks\At1.job
[2014/03/22 20:26:00 | 000,001,148 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-179605362-682003330-1005UA.job
[2014/03/22 15:26:00 | 000,001,096 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-179605362-682003330-1005Core.job
:commands
[purity]
[emptytemp]
[emptyflash]

* redemarre le pc sous windows et poste le rapport ici

[PatMalek]

Bonjour Skytech,
Finalement j'ai restauré un ghost que j'avais, c'était trop galère.
Merci quand même !!.
Bon dimanche

[SkyTech]

Bonjour,

Tu as bien fais.

@+