Forum-vista : Entraide et dépannage Windows Vista et Windows Seven

Bonsoir
essaie ceci
Télécharge OTL de OldTimer sur ton bureau.
Clique sur OTL.exe
Coche :
En haut, à droite

• -Tous les utilisateurs
  -Avec analyse 64 bits sera coché automatiquement si c'est la cas de ton système.
  -Rapport standard

En bas, à droite

• -Recherche LOP
  -Recherche Purity

Processus, Services, Drivers, Registre:Standard, Modules, Pilotes doivent être sur [Avec liste blanche] par défaut.
Registre : approfondi est sur Aucun.



Clique sur le bouton [Analyse] en haut en bleu.
L'analyse va prendre une ou deux minutes.
Une fois celle-ci terminée un rapport va s'ouvrir
Tu postes ce rapport par copier-coller et tu le fermes.
Tu fermes aussi le fichier Extras.txt dans la barre des tâches, il sera demandé en cas de nécessité.
Ils seront sauvegardés sur le bureau (OTL.txt et Extras.txt) ou dans le dossier où se trouve OTL.exe.
En cas de difficulté pour poster les rapports par copier-coller, tu peux les héberger sur Cjoint.com
Poste les liens obtenus dans ce cas.
@+

Bonjour,
je te remerçie pour tes explication tres claire, voici le rapport:


OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Marie-Ange\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19019)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 65,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 84,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 223,55 Gb Total Space | 114,77 Gb Free Space | 51,34% Space Free | Partition Type: NTFS
Drive D: | 9,33 Gb Total Space | 1,67 Gb Free Space | 17,87% Space Free | Partition Type: NTFS

Computer Name: LOLO | User Name: Marie-Ange | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/04/12 10:49:06 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Marie-Ange\Desktop\OTL.exe
PRC - [2011/03/10 16:03:53 | 000,304,304 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
PRC - [2011/01/26 16:53:56 | 000,858,624 | ---- | M] (Orange) -- C:\Users\Marie-Ange\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe
PRC - [2011/01/13 10:47:34 | 003,396,624 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2011/01/13 10:47:33 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2010/03/18 12:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
PRC - [2009/12/16 14:36:12 | 000,306,296 | ---- | M] (Sony Ericsson Mobile Communications) -- C:\Program Files\Common Files\Sony Ericsson\Emma Core\Services\EmmaDeviceMgmt.exe
PRC - [2009/12/16 14:36:12 | 000,162,936 | ---- | M] (Sony Ericsson Mobile Communications) -- C:\Program Files\Common Files\Sony Ericsson\Emma Core\Services\EmmaUpdateMgmt.exe
PRC - [2009/07/21 22:33:32 | 000,458,844 | ---- | M] (IDT, Inc.) -- C:\Program Files\IDT\WDM\sttray.exe
PRC - [2009/07/21 22:33:32 | 000,221,266 | ---- | M] (IDT, Inc.) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\stacsv.exe
PRC - [2009/04/30 13:23:26 | 000,090,112 | ---- | M] () -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
PRC - [2009/04/11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009/03/02 18:43:08 | 000,081,920 | ---- | M] (Andrea Electronics Corporation) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\AEstSrv.exe
PRC - [2008/04/26 01:15:26 | 000,361,808 | ---- | M] () -- C:\Windows\SMINST\BLService.exe
PRC - [2007/12/17 11:59:50 | 000,045,056 | ---- | M] (ILEX) -- C:\Windows\galsvw32.exe
PRC - [2007/06/21 07:04:52 | 000,046,432 | ---- | M] (Microsoft® Corporation) -- C:\Program Files\Microsoft Works\WkCalRem.exe
PRC - [2003/02/05 19:34:52 | 000,070,144 | ---- | M] () -- C:\TELVITAL\minitool.exe
PRC - [1997/10/01 19:00:00 | 001,036,824 | ---- | M] () -- C:\TELVITAL\DBSRV50.EXE


========== Modules (SafeList) ==========

MOD - [2011/04/12 10:49:06 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Marie-Ange\Desktop\OTL.exe
MOD - [2011/01/13 10:47:35 | 000,189,728 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\snxhk.dll
MOD - [2010/08/31 17:43:52 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] -- -- (nosGetPlusHelper) getPlus(R)
SRV - File not found [Unknown | Stopped] -- -- (getPlusHelper)
SRV - [2011/01/13 10:47:33 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2010/06/14 14:39:26 | 001,053,424 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Orange\OrangeUpdate\Service\OUCore.exe -- (Orange update Core Service)
SRV - [2010/03/18 12:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [Auto | Running] -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
SRV - [2009/12/16 14:36:12 | 000,306,296 | ---- | M] (Sony Ericsson Mobile Communications) [Auto | Running] -- C:\Program Files\Common Files\Sony Ericsson\Emma Core\Services\EmmaDeviceMgmt.exe -- (EmmaDevMgmtSvc)
SRV - [2009/12/16 14:36:12 | 000,162,936 | ---- | M] (Sony Ericsson Mobile Communications) [Auto | Running] -- C:\Program Files\Common Files\Sony Ericsson\Emma Core\Services\EmmaUpdateMgmt.exe -- (EmmaUpdMgmtSvc)
SRV - [2009/07/25 14:46:23 | 000,069,120 | ---- | M] (BOONTY) [On_Demand | Stopped] -- C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe -- (Boonty Games)
SRV - [2009/07/21 22:33:32 | 000,221,266 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\stacsv.exe -- (STacSV)
SRV - [2009/04/30 13:23:26 | 000,090,112 | ---- | M] () [Auto | Running] -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe -- (OMSI download service)
SRV - [2009/03/04 11:25:12 | 000,621,056 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2009/03/02 18:43:08 | 000,081,920 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\AEstSrv.exe -- (AESTFilters)
SRV - [2008/04/26 01:15:26 | 000,361,808 | ---- | M] () [Auto | Running] -- C:\Windows\SMINST\BLService.exe -- (Recovery Service for Windows)
SRV - [2008/02/03 12:00:00 | 000,129,992 | ---- | M] (EasyBits Sofware AS) [Auto | Running] -- C:\Windows\System32\ezsvc7.dll -- (ezSharedSvc)
SRV - [2008/01/21 04:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)


========== Driver Services (SafeList) ==========

DRV - [2011/01/13 10:41:16 | 000,294,608 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2011/01/13 10:40:16 | 000,047,440 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2011/01/13 10:37:30 | 000,023,632 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2011/01/13 10:37:19 | 000,051,280 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2011/01/13 10:37:09 | 000,017,744 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2010/10/21 10:45:18 | 000,025,216 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgusbmodem.sys -- (USBModem)
DRV - [2010/10/21 10:45:16 | 000,020,864 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgusbdiag.sys -- (UsbDiag)
DRV - [2010/10/21 10:45:16 | 000,013,056 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgusbbus.sys -- (usbbus)
DRV - [2009/10/03 06:02:06 | 009,905,096 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2009/09/29 09:11:22 | 000,012,160 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\lgbtport.sys -- (LgBttPort)
DRV - [2009/09/29 09:11:20 | 000,012,928 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\lgvmodem.sys -- (LGVMODEM)
DRV - [2009/09/29 09:11:20 | 000,010,496 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\lgbtbus.sys -- (lgbusenum)
DRV - [2009/07/21 22:33:32 | 000,409,088 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\stwrt.sys -- (STHDA)
DRV - [2009/04/06 10:13:52 | 000,025,512 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ggsemc.sys -- (ggsemc)
DRV - [2009/04/06 10:13:52 | 000,013,224 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ggflt.sys -- (ggflt)
DRV - [2008/08/26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008/07/08 12:16:26 | 000,096,856 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\jmcr.sys -- (JMCR)
DRV - [2008/05/14 04:09:00 | 000,043,552 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2008/05/02 15:59:40 | 000,122,368 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2008/03/27 12:12:12 | 000,024,424 | ---- | M] (Hewlett-Packard Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\hpdskflt.sys -- (hpdskflt)
DRV - [2008/03/27 12:11:34 | 000,034,664 | ---- | M] (Hewlett-Packard Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Accelerometer.sys -- (Accelerometer)
DRV - [2008/01/24 15:23:12 | 000,052,736 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\enecir.sys -- (enecir)
DRV - [2008/01/09 13:28:34 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\seehcri.sys -- (seehcri)
DRV - [2007/06/25 11:43:38 | 000,098,344 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s117obex.sys -- (s117obex)
DRV - [2007/06/25 11:43:36 | 000,100,264 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s117mgmt.sys -- (s117mgmt) Sony Ericsson Device 117 USB WMC Device Management Drivers (WDM)
DRV - [2007/06/25 11:43:36 | 000,098,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s117unic.sys -- (s117unic) Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (WDM)
DRV - [2007/06/25 11:43:36 | 000,022,952 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s117nd5.sys -- (s117nd5) Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (NDIS)
DRV - [2007/06/25 10:43:36 | 000,108,456 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s117mdm.sys -- (s117mdm)
DRV - [2007/06/25 10:43:26 | 000,014,888 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s117mdfl.sys -- (s117mdfl)
DRV - [2007/06/25 10:43:22 | 000,082,984 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s117bus.sys -- (s117bus) Sony Ericsson Device 117 driver (WDM)
DRV - [2007/06/18 17:12:04 | 000,016,768 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HpqKbFiltr.sys -- (HpqKbFiltr)
DRV - [2007/04/03 13:57:54 | 000,099,080 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s116unic.sys -- (s116unic) Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (WDM)
DRV - [2007/04/03 13:57:52 | 000,098,696 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s116obex.sys -- (s116obex)
DRV - [2007/04/03 13:57:52 | 000,023,176 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s116nd5.sys -- (s116nd5) Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (NDIS)
DRV - [2007/04/03 13:57:50 | 000,100,488 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s116mgmt.sys -- (s116mgmt) Sony Ericsson Device 116 USB WMC Device Management Drivers (WDM)
DRV - [2007/04/03 13:57:48 | 000,108,680 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s116mdm.sys -- (s116mdm)
DRV - [2007/04/03 13:57:48 | 000,015,112 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s116mdfl.sys -- (s116mdfl)
DRV - [2007/04/03 13:57:42 | 000,083,336 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s116bus.sys -- (s116bus) Sony Ericsson Device 116 driver (WDM)
DRV - [2006/11/10 16:05:00 | 000,018,688 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\afc.sys -- (Afc)
DRV - [2006/11/02 09:30:56 | 000,429,056 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvm60x32.sys -- (NVENETFD)
DRV - [2005/08/30 02:47:38 | 000,058,320 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssm_bus.sys -- (ssm_bus) SAMSUNG Mobile USB Device II 1.0 driver (WDM)
DRV - [2005/08/30 01:49:38 | 000,094,000 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssm_mdm.sys -- (ssm_mdm)
DRV - [2005/08/30 01:49:34 | 000,008,336 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssm_mdfl.sys -- (ssm_mdfl)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Binary data over 100 bytes]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://r.orange.fr/r/Ohome_portail?ref=O_OI_defaultpage


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-729125539-2281209469-1315271956-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKU\S-1-5-21-729125539-2281209469-1315271956-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://r.orange.fr/r/Ohome_portail?ref=O_OI_defaultPage
IE - HKU\S-1-5-21-729125539-2281209469-1315271956-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://fr.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-729125539-2281209469-1315271956-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr
IE - HKU\S-1-5-21-729125539-2281209469-1315271956-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://r.orange.fr/r/Ohome_portail?ref=O_OI_defaultPage"

FF - user.js..browser.startup.homepage: "http://r.orange.fr/r/Ohome_portail?ref=O_OI_defaultPage"

FF - HKLM\software\mozilla\Firefox\Extensions\\{3112ca9c-de6d-4884-a869-9855de68056c}: C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} [2011/04/05 15:05:16 | 000,000,000 | ---D | M]

[2011/03/03 15:33:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marie-Ange\AppData\Roaming\mozilla\Firefox\Profiles\wgbdvh4c.default\extensions
[2011/03/03 15:33:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marie-Ange\AppData\Roaming\mozilla\Firefox\Profiles\wgbdvh4c.default\extensions\menu_contextuel_orange@orange.fr

O1 HOSTS File: ([2006/09/18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (HistoryTriggerBHO Class) - {21A88CB9-84D2-4020-A2D1-B25A21034884} - C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\LinkAirBrowserHelper.dll (LG Electronics)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (barre d'outils Orange) - {D3028143-6145-4318-99D3-3EDCE54A95A9} - C:\Program Files\orange\ToolbarFR\ToolbarContainer101000320.dll (Orange)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-729125539-2281209469-1315271956-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKU\S-1-5-21-729125539-2281209469-1315271956-1000\..\Toolbar\WebBrowser: (barre d'outils Orange) - {D3028143-6145-4318-99D3-3EDCE54A95A9} - C:\Program Files\orange\ToolbarFR\ToolbarContainer101000320.dll (Orange)
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Google Quick Search Box] C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe (Google Inc.)
O4 - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe (IDT, Inc.)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-729125539-2281209469-1315271956-1000..\Run: [EPSON Stylus DX7400 Series] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATICDE.EXE (SEIKO EPSON CORPORATION)
O4 - HKU\S-1-5-21-729125539-2281209469-1315271956-1000..\Run: [minitool] C:\TELVITAL\minitool.exe ()
O4 - HKU\S-1-5-21-729125539-2281209469-1315271956-1000..\Run: [orangeinside] C:\Users\Marie-Ange\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe (Orange)
O4 - Startup: C:\Users\Marie-Ange\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SERVEUR TELEVITALE MONOPOSTE.lnk = C:\TELVITAL\DBSRV50.EXE ()
O4 - Startup: C:\Users\Marie-Ange\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wkcalrem.LNK = C:\Program Files\Microsoft Works\WkCalRem.exe (Microsoft® Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0
O7 - HKU\S-1-5-21-729125539-2281209469-1315271956-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogoff = 0
O7 - HKU\S-1-5-21-729125539-2281209469-1315271956-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0
O7 - HKU\S-1-5-21-729125539-2281209469-1315271956-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0
O7 - HKU\S-1-5-21-729125539-2281209469-1315271956-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll (Google Inc.)
O9 - Extra Button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL (Microsoft Corporation)
O13 - gopher Prefix: missing
O15 - HKU\.DEFAULT\..Trusted Ranges: Range1 ([http] in Local intranet)
O15 - HKU\S-1-5-18\..Trusted Ranges: Range1 ([http] in Local intranet)
O15 - HKU\S-1-5-21-729125539-2281209469-1315271956-1000\..Trusted Domains: orange.fr ([logicielsgratuits] http in Sites de confiance)
O16 - DPF: {5A779DC0-837B-4590-AC42-C7C0847478C5} http://logicielsgratuits.orange.fr/down ... taller.cab (OrangeInstaller_ModuleIE Control)
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20270.www2.hp.com/ediags/gmn2/i ... ction2.cab (GMNRev Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_06)
O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Marie-Ange\AppData\Roaming\Microsoft\Windows Photo Gallery\BumpPapier peint de la Galerie de photos Windows.bmp
O24 - Desktop BackupWallPaper: C:\Users\Marie-Ange\AppData\Roaming\Microsoft\Windows Photo Gallery\BumpPapier peint de la Galerie de photos Windows.bmp
O28 - HKLM ShellExecuteHooks: {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\System32\ezUPBHook.dll (EasyBits Software Corp.)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/07/30 01:44:29 | 000,000,074 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2011/03/20 20:13:36 | 000,000,826 | ---- | M] () - C:\Autorun_dll.log -- [ NTFS ]
O33 - MountPoints2\{90f5e7ec-f959-11df-99a6-001eeceae0b9}\Shell - "" = AutoRun
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/04/12 10:48:51 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Users\Marie-Ange\Desktop\OTL.exe
[2011/04/11 17:47:01 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2011/04/11 16:55:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
[2011/04/11 16:51:20 | 002,417,214 | ---- | C] (Nicolas Coolman ) -- C:\Users\Marie-Ange\Desktop\ZHPDiag2.exe
[2011/04/11 15:50:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys
[2011/04/11 15:50:54 | 000,000,000 | ---D | C] -- C:\Program Files\Lavalys
[2011/04/10 19:12:04 | 000,000,000 | ---D | C] -- C:\Users\Marie-Ange\AppData\Local\{1A7DE2B3-1436-40EB-83F9-4153ECAD7A89}
[2011/04/05 13:54:25 | 000,000,000 | ---D | C] -- C:\Program Files\ZHPDiag
[2011/04/05 13:35:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/04/05 13:35:41 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2011/04/05 13:35:35 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011/04/05 13:35:35 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011/04/04 15:25:40 | 000,000,000 | ---D | C] -- C:\Users\Marie-Ange\AppData\Local\{1885F1B9-BAFA-4A08-B97D-7F9BC7673DEF}
[2011/04/03 10:52:24 | 000,000,000 | ---D | C] -- C:\Users\Marie-Ange\Desktop\processus
[2011/04/02 11:12:37 | 000,000,000 | ---D | C] -- C:\Users\Marie-Ange\AppData\Local\{9D090E25-BE4E-475F-8667-C956CC13DF2A}
[2011/04/01 18:31:20 | 000,000,000 | ---D | C] -- C:\Users\Marie-Ange\AppData\Local\{CC03A680-28A1-47FD-9EF9-D8C287C4C8F0}
[2011/03/31 17:56:28 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live Safety Center
[2011/03/31 17:41:37 | 000,000,000 | ---D | C] -- C:\Users\Marie-Ange\Desktop\tristan
[2011/03/25 14:59:46 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2011/03/24 16:31:31 | 000,000,000 | ---D | C] -- C:\Users\Marie-Ange\AppData\Roaming\EurekaLog
[2011/03/23 20:13:47 | 000,000,000 | ---D | C] -- C:\ProgramData\NCH Software
[2011/03/23 20:13:24 | 000,000,000 | ---D | C] -- C:\Program Files\NCH Software
[2011/03/23 20:11:13 | 000,047,360 | ---- | C] (VSO Software) -- C:\Users\Marie-Ange\AppData\Roaming\pcouffin.sys
[2011/03/23 20:11:13 | 000,000,000 | ---D | C] -- C:\Users\Marie-Ange\Documents\PcSetup
[2011/03/23 19:51:33 | 000,000,000 | ---D | C] -- C:\Users\Marie-Ange\AppData\Roaming\Vso
[2011/03/23 19:50:36 | 000,000,000 | ---D | C] -- C:\Program Files\VSO
[2011/03/23 19:38:56 | 000,000,000 | ---D | C] -- C:\Users\Marie-Ange\AppData\Local\WinAVI
[2011/03/23 19:21:21 | 000,000,000 | ---D | C] -- C:\Users\Marie-Ange\AppData\Roaming\HamsterSoft
[2011/03/23 19:21:02 | 000,000,000 | ---D | C] -- C:\Program Files\Hamster Soft
[2011/03/23 16:59:15 | 000,000,000 | ---D | C] -- C:\Program Files\DIKO
[2011/03/23 16:47:04 | 000,000,000 | ---D | C] -- C:\Users\Marie-Ange\AppData\Roaming\OfferBox
[2011/03/23 16:47:02 | 000,000,000 | ---D | C] -- C:\Program Files\OfferBox
[2011/03/23 16:17:05 | 000,000,000 | ---D | C] -- C:\Users\Marie-Ange\AppData\Roaming\AVS4YOU
[2011/03/23 16:12:29 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\AVSMedia
[2011/03/23 16:11:53 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml3a.dll
[2011/03/23 16:11:53 | 000,000,000 | ---D | C] -- C:\ProgramData\AVS4YOU
[2011/03/23 16:11:53 | 000,000,000 | ---D | C] -- C:\Program Files\AVS4YOU
[2011/03/23 15:22:02 | 001,068,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2011/03/23 15:22:02 | 000,288,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2011/03/22 19:26:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
[2011/03/20 20:22:21 | 000,000,000 | R--D | C] -- C:\Users\Marie-Ange\Desktop\LOGITIELS GRAVURE
[2011/03/20 20:10:42 | 000,000,000 | ---D | C] -- C:\Users\Marie-Ange\Documents\Mes muvees
[2011/03/20 19:51:20 | 000,000,000 | ---D | C] -- C:\Users\Marie-Ange\Documents\My Albums
[2011/03/20 18:10:55 | 000,000,000 | ---D | C] -- C:\Users\Marie-Ange\Documents\CyberLink
[2011/03/20 17:29:01 | 000,000,000 | R--D | C] -- C:\Users\Marie-Ange\Contacts
[2011/03/19 17:31:17 | 000,000,000 | ---D | C] -- C:\Users\Marie-Ange\Desktop\video rafaël chanson
[2011/03/18 20:53:40 | 002,944,904 | ---- | C] (Ask) -- C:\Program Files\Common Files\AskToolbarInstaller.exe
[2011/03/18 20:53:38 | 000,000,000 | ---D | C] -- C:\Program Files\VDownloader
[2011/03/18 20:26:47 | 000,000,000 | ---D | C] -- C:\Users\Marie-Ange\AppData\Roaming\vlc
[2011/03/18 20:14:57 | 000,000,000 | ---D | C] -- C:\Program Files\PriceGong
[2011/03/18 14:51:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2011/03/18 14:51:48 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2011/03/18 14:51:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2009/11/19 13:29:53 | 000,148,736 | ---- | C] (Avanquest Software) -- C:\ProgramData\hpe5DD9.dll
[2008/12/19 17:13:08 | 003,063,561 | ---- | C] (Macromedia, Inc.) -- C:\ProgramData\MobileTV.exe
[2008/12/19 17:13:07 | 002,989,660 | ---- | C] (Macromedia, Inc.) -- C:\ProgramData\DVD.exe
[2008/12/19 17:13:07 | 002,864,396 | ---- | C] (Macromedia, Inc.) -- C:\ProgramData\MPV.exe
[2008/12/19 17:13:06 | 002,331,174 | ---- | C] (Macromedia, Inc.) -- C:\ProgramData\Karaoke.exe
[2008/12/19 17:13:06 | 002,231,606 | ---- | C] (Macromedia, Inc.) -- C:\ProgramData\Games.exe
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/04/12 10:54:55 | 004,980,736 | -HS- | M] () -- C:\Users\Marie-Ange\ntuser.dat
[2011/04/12 10:49:06 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Marie-Ange\Desktop\OTL.exe
[2011/04/12 10:38:24 | 000,205,226 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2011/04/12 10:38:24 | 000,205,226 | ---- | M] () -- C:\ProgramData\nvModes.001
[2011/04/12 10:38:20 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/04/12 10:09:00 | 000,001,054 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/04/12 09:36:52 | 000,001,000 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job
[2011/04/12 09:36:08 | 001,519,468 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2011/04/12 09:36:08 | 000,687,206 | ---- | M] () -- C:\Windows\System32\perfh00C.dat
[2011/04/12 09:36:08 | 000,604,160 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011/04/12 09:36:08 | 000,129,920 | ---- | M] () -- C:\Windows\System32\perfc00C.dat
[2011/04/12 09:36:08 | 000,107,364 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011/04/12 09:20:33 | 000,001,050 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/04/12 09:20:30 | 000,000,388 | ---- | M] () -- C:\Windows\tasks\Registry Reviver-Marie-Ange-Startup.job
[2011/04/12 09:20:29 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2011/04/12 09:20:21 | 000,003,344 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/04/12 09:20:20 | 000,003,344 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/04/11 22:32:46 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2011/04/11 22:32:43 | 000,524,288 | -HS- | M] () -- C:\Users\Marie-Ange\ntuser.dat{c0bc7d4f-62a9-11e0-83dc-001eeceae0b9}.TMContainer00000000000000000001.regtrans-ms
[2011/04/11 22:32:43 | 000,065,536 | -HS- | M] () -- C:\Users\Marie-Ange\ntuser.dat{c0bc7d4f-62a9-11e0-83dc-001eeceae0b9}.TM.blf
[2011/04/11 22:32:39 | 001,715,233 | -H-- | M] () -- C:\Users\Marie-Ange\AppData\Local\IconCache.db
[2011/04/11 19:36:38 | 000,000,442 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{28689226-7674-4AA2-9B70-A112BD03FB64}.job
[2011/04/11 16:55:58 | 000,000,795 | ---- | M] () -- C:\Users\Public\Desktop\MBRCheck.lnk
[2011/04/11 16:55:58 | 000,000,788 | ---- | M] () -- C:\Users\Public\Desktop\ZHPDiag.lnk
[2011/04/11 16:55:58 | 000,000,783 | ---- | M] () -- C:\Users\Public\Desktop\ZHPFix.lnk
[2011/04/11 16:05:55 | 000,198,100 | ---- | M] () -- C:\Users\Marie-Ange\Desktop\SAUVEGARDE CLES DE REGISTRE.reg
[2011/04/11 15:50:58 | 000,000,907 | ---- | M] () -- C:\Users\Marie-Ange\Desktop\EVEREST Home Edition.lnk
[2011/04/11 15:38:38 | 002,417,214 | ---- | M] (Nicolas Coolman ) -- C:\Users\Marie-Ange\Desktop\ZHPDiag2.exe
[2011/04/10 08:01:50 | 000,000,261 | ---- | M] () -- C:\Users\Marie-Ange\Desktop\YouTube - mes premieres chansons ainsi font font font.url
[2011/04/09 21:19:04 | 000,524,288 | -HS- | M] () -- C:\Users\Marie-Ange\ntuser.dat{c0bc7d4f-62a9-11e0-83dc-001eeceae0b9}.TMContainer00000000000000000002.regtrans-ms
[2011/04/09 18:48:56 | 000,000,184 | ---- | M] () -- C:\Users\Marie-Ange\Desktop\programme tv.url
[2011/04/09 16:20:07 | 000,002,290 | ---- | M] () -- C:\Users\Marie-Ange\Desktop\REGISTRE ;;; - Raccourci.lnk
[2011/04/09 13:32:46 | 000,524,288 | -HS- | M] () -- C:\Users\Marie-Ange\ntuser.dat{8fb136b1-56e2-11e0-bd6c-001eeceae0b9}.TMContainer00000000000000000001.regtrans-ms
[2011/04/09 13:32:46 | 000,065,536 | -HS- | M] () -- C:\Users\Marie-Ange\ntuser.dat{8fb136b1-56e2-11e0-bd6c-001eeceae0b9}.TM.blf
[2011/04/08 18:45:24 | 000,000,008 | ---- | M] () -- C:\Users\Marie-Ange\AppData\Roaming\DofusAppId0_1
[2011/04/08 18:08:33 | 000,000,177 | ---- | M] () -- C:\Users\Marie-Ange\AppData\Roaming\D2Info0
[2011/04/07 13:34:55 | 000,000,008 | ---- | M] () -- C:\Users\Marie-Ange\AppData\Roaming\DofusAppId0_2
[2011/04/05 14:21:21 | 000,001,610 | ---- | M] () -- C:\Users\Marie-Ange\Desktop\Snipping Tool.lnk
[2011/04/05 13:35:42 | 000,000,906 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/04/02 21:14:51 | 000,196,890 | ---- | M] () -- C:\Users\Marie-Ange\Documents\a restaurer cles registre.reg
[2011/04/02 20:41:49 | 000,170,496 | ---- | M] () -- C:\Users\Marie-Ange\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/03/31 20:29:50 | 000,001,961 | ---- | M] () -- C:\Users\Marie-Ange\Desktop\HP Health Check.lnk
[2011/03/25 22:05:23 | 000,524,288 | -HS- | M] () -- C:\Users\Marie-Ange\ntuser.dat{8fb136b1-56e2-11e0-bd6c-001eeceae0b9}.TMContainer00000000000000000002.regtrans-ms
[2011/03/25 15:18:30 | 000,524,288 | -HS- | M] () -- C:\Users\Marie-Ange\ntuser.dat{c427e2b4-564f-11e0-ac00-001eeceae0b9}.TMContainer00000000000000000001.regtrans-ms
[2011/03/25 15:18:30 | 000,065,536 | -HS- | M] () -- C:\Users\Marie-Ange\ntuser.dat{c427e2b4-564f-11e0-ac00-001eeceae0b9}.TM.blf
[2011/03/24 22:00:58 | 000,524,288 | -HS- | M] () -- C:\Users\Marie-Ange\ntuser.dat{c427e2b4-564f-11e0-ac00-001eeceae0b9}.TMContainer00000000000000000002.regtrans-ms
[2011/03/24 21:24:26 | 000,524,288 | -HS- | M] () -- C:\Users\Marie-Ange\ntuser.dat{4974fc11-262a-11e0-8d52-001eeceae0b9}.TMContainer00000000000000000001.regtrans-ms
[2011/03/24 21:24:26 | 000,065,536 | -HS- | M] () -- C:\Users\Marie-Ange\ntuser.dat{4974fc11-262a-11e0-8d52-001eeceae0b9}.TM.blf
[2011/03/23 21:27:12 | 000,001,373 | ---- | M] () -- C:\Windows\win.ini
[2011/03/23 20:11:13 | 000,087,608 | ---- | M] () -- C:\Users\Marie-Ange\AppData\Roaming\inst.exe
[2011/03/23 20:11:13 | 000,047,360 | ---- | M] (VSO Software) -- C:\Users\Marie-Ange\AppData\Roaming\pcouffin.sys
[2011/03/23 20:11:13 | 000,007,887 | ---- | M] () -- C:\Users\Marie-Ange\AppData\Roaming\pcouffin.cat
[2011/03/23 20:11:13 | 000,001,144 | ---- | M] () -- C:\Users\Marie-Ange\AppData\Roaming\pcouffin.inf
[2011/03/23 20:10:59 | 000,001,057 | ---- | M] () -- C:\Users\Marie-Ange\AppData\Roaming\vso_ts_preview.xml
[2011/03/23 15:39:52 | 000,001,024 | ---- | M] () -- C:\Users\Marie-Ange\Desktop\convertir.mpg
[2011/03/22 18:13:57 | 000,000,008 | ---- | M] () -- C:\Users\Marie-Ange\AppData\Roaming\DofusAppId0_3
[2011/03/20 20:01:36 | 000,000,023 | ---- | M] () -- C:\Windows\VI20.set
[2011/03/20 14:23:31 | 000,001,227 | ---- | M] () -- C:\Users\Marie-Ange\Desktop\Windows Live Photo Gallery.lnk
[2011/03/19 17:29:36 | 000,388,096 | ---- | M] () -- C:\Users\Marie-Ange\Documents\filmotech.data
[2011/03/18 20:16:10 | 000,000,859 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/04/11 22:32:39 | 001,715,233 | -H-- | C] () -- C:\Users\Marie-Ange\AppData\Local\IconCache.db
[2011/04/11 16:55:58 | 000,000,795 | ---- | C] () -- C:\Users\Public\Desktop\MBRCheck.lnk
[2011/04/11 16:55:58 | 000,000,788 | ---- | C] () -- C:\Users\Public\Desktop\ZHPDiag.lnk
[2011/04/11 16:55:58 | 000,000,783 | ---- | C] () -- C:\Users\Public\Desktop\ZHPFix.lnk
[2011/04/11 16:05:34 | 000,198,100 | ---- | C] () -- C:\Users\Marie-Ange\Desktop\SAUVEGARDE CLES DE REGISTRE.reg
[2011/04/11 15:50:58 | 000,000,907 | ---- | C] () -- C:\Users\Marie-Ange\Desktop\EVEREST Home Edition.lnk
[2011/04/09 16:20:07 | 000,002,290 | ---- | C] () -- C:\Users\Marie-Ange\Desktop\REGISTRE ;;; - Raccourci.lnk
[2011/04/09 15:04:00 | 000,524,288 | -HS- | C] () -- C:\Users\Marie-Ange\ntuser.dat{c0bc7d4f-62a9-11e0-83dc-001eeceae0b9}.TMContainer00000000000000000002.regtrans-ms
[2011/04/09 15:03:59 | 000,524,288 | -HS- | C] () -- C:\Users\Marie-Ange\ntuser.dat{c0bc7d4f-62a9-11e0-83dc-001eeceae0b9}.TMContainer00000000000000000001.regtrans-ms
[2011/04/09 15:03:59 | 000,065,536 | -HS- | C] () -- C:\Users\Marie-Ange\ntuser.dat{c0bc7d4f-62a9-11e0-83dc-001eeceae0b9}.TM.blf
[2011/04/05 14:21:21 | 000,001,610 | ---- | C] () -- C:\Users\Marie-Ange\Desktop\Snipping Tool.lnk
[2011/04/05 13:35:42 | 000,000,906 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/04/03 19:55:38 | 000,000,184 | ---- | C] () -- C:\Users\Marie-Ange\Desktop\programme tv.url
[2011/04/02 21:12:38 | 000,196,890 | ---- | C] () -- C:\Users\Marie-Ange\Documents\a restaurer cles registre.reg
[2011/03/31 20:29:50 | 000,001,961 | ---- | C] () -- C:\Users\Marie-Ange\Desktop\HP Health Check.lnk
[2011/03/25 19:40:42 | 000,000,261 | ---- | C] () -- C:\Users\Marie-Ange\Desktop\YouTube - mes premieres chansons ainsi font font font.url
[2011/03/25 15:34:50 | 000,524,288 | -HS- | C] () -- C:\Users\Marie-Ange\ntuser.dat{8fb136b1-56e2-11e0-bd6c-001eeceae0b9}.TMContainer00000000000000000002.regtrans-ms
[2011/03/25 15:34:50 | 000,524,288 | -HS- | C] () -- C:\Users\Marie-Ange\ntuser.dat{8fb136b1-56e2-11e0-bd6c-001eeceae0b9}.TMContainer00000000000000000001.regtrans-ms
[2011/03/25 15:34:50 | 000,065,536 | -HS- | C] () -- C:\Users\Marie-Ange\ntuser.dat{8fb136b1-56e2-11e0-bd6c-001eeceae0b9}.TM.blf
[2011/03/24 21:51:19 | 000,524,288 | -HS- | C] () -- C:\Users\Marie-Ange\ntuser.dat{c427e2b4-564f-11e0-ac00-001eeceae0b9}.TMContainer00000000000000000002.regtrans-ms
[2011/03/24 21:51:19 | 000,524,288 | -HS- | C] () -- C:\Users\Marie-Ange\ntuser.dat{c427e2b4-564f-11e0-ac00-001eeceae0b9}.TMContainer00000000000000000001.regtrans-ms
[2011/03/24 21:51:19 | 000,065,536 | -HS- | C] () -- C:\Users\Marie-Ange\ntuser.dat{c427e2b4-564f-11e0-ac00-001eeceae0b9}.TM.blf
[2011/03/23 20:11:13 | 000,087,608 | ---- | C] () -- C:\Users\Marie-Ange\AppData\Roaming\inst.exe
[2011/03/23 20:11:13 | 000,007,887 | ---- | C] () -- C:\Users\Marie-Ange\AppData\Roaming\pcouffin.cat
[2011/03/23 20:11:13 | 000,001,144 | ---- | C] () -- C:\Users\Marie-Ange\AppData\Roaming\pcouffin.inf
[2011/03/23 19:51:33 | 000,001,057 | ---- | C] () -- C:\Users\Marie-Ange\AppData\Roaming\vso_ts_preview.xml
[2011/03/23 15:39:51 | 000,001,024 | ---- | C] () -- C:\Users\Marie-Ange\Desktop\convertir.mpg
[2011/03/20 14:23:31 | 000,001,227 | ---- | C] () -- C:\Users\Marie-Ange\Desktop\Windows Live Photo Gallery.lnk
[2011/03/18 20:16:10 | 000,000,859 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2011/03/02 20:08:55 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2010/12/04 15:23:49 | 000,000,029 | ---- | C] () -- C:\Windows\DEBUGSM.INI
[2010/11/13 14:42:51 | 000,000,008 | ---- | C] () -- C:\Users\Marie-Ange\AppData\Roaming\DofusAppId0_4
[2010/10/04 10:52:28 | 000,000,008 | ---- | C] () -- C:\Users\Marie-Ange\AppData\Roaming\DofusAppId0_3
[2010/10/03 20:59:49 | 000,000,008 | ---- | C] () -- C:\Users\Marie-Ange\AppData\Roaming\DofusAppId0_1
[2010/10/03 20:42:23 | 000,000,177 | ---- | C] () -- C:\Users\Marie-Ange\AppData\Roaming\D2Info0
[2010/10/03 20:42:23 | 000,000,008 | ---- | C] () -- C:\Users\Marie-Ange\AppData\Roaming\DofusAppId0_2
[2010/07/29 17:09:13 | 000,000,051 | ---- | C] () -- C:\Windows\npornap.INI
[2010/06/20 15:45:22 | 000,045,056 | ---- | C] () -- C:\Users\Marie-Ange\AppData\Roaming\chrtmp
[2010/03/27 12:31:48 | 000,221,184 | --S- | C] () -- C:\Windows\System32\glut32.dll
[2010/03/10 18:39:35 | 000,000,554 | ---- | C] () -- C:\Windows\mInstall.ini
[2010/03/06 17:00:40 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2010/03/06 17:00:40 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2010/03/06 17:00:07 | 000,368,640 | ---- | C] () -- C:\Windows\System32\msjetoledb40.dll
[2010/02/12 13:56:34 | 000,005,632 | ---- | C] () -- C:\Windows\System32\StarOpen.sys
[2009/07/16 12:47:52 | 000,000,118 | ---- | C] () -- C:\Users\Marie-Ange\AppData\Roaming\wklnhst.dat
[2009/06/06 15:58:03 | 000,000,010 | ---- | C] () -- C:\Windows\popcinfo.dat
[2009/02/26 16:24:12 | 000,000,290 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2009/02/26 15:07:57 | 000,275,480 | ---- | C] () -- C:\Windows\WL50ENT.DLL
[2009/02/26 15:07:57 | 000,155,648 | ---- | C] () -- C:\Windows\Oc_Tao32.dll
[2009/02/26 15:07:57 | 000,086,016 | ---- | C] () -- C:\Windows\IMPCL32.DLL
[2009/02/26 15:07:57 | 000,000,564 | ---- | C] () -- C:\Windows\sesam.ini
[2009/02/26 15:07:56 | 000,000,440 | ---- | C] () -- C:\Windows\galss.ini
[2008/12/22 14:11:42 | 000,000,680 | ---- | C] () -- C:\Users\Marie-Ange\AppData\Local\d3d9caps.dat
[2008/12/20 20:56:46 | 000,031,007 | ---- | C] () -- C:\Users\Marie-Ange\AppData\Roaming\UserTile.png
[2008/12/20 17:36:47 | 000,170,496 | ---- | C] () -- C:\Users\Marie-Ange\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/12/20 17:01:53 | 000,111,932 | ---- | C] () -- C:\Windows\System32\EPPICPrinterDB.dat
[2008/12/20 17:01:53 | 000,031,053 | ---- | C] () -- C:\Windows\System32\EPPICPattern131.dat
[2008/12/20 17:01:53 | 000,027,417 | ---- | C] () -- C:\Windows\System32\EPPICPattern121.dat
[2008/12/20 17:01:53 | 000,026,154 | ---- | C] () -- C:\Windows\System32\EPPICPattern1.dat
[2008/12/20 17:01:53 | 000,024,903 | ---- | C] () -- C:\Windows\System32\EPPICPattern3.dat
[2008/12/20 17:01:53 | 000,021,390 | ---- | C] () -- C:\Windows\System32\EPPICPattern5.dat
[2008/12/20 17:01:53 | 000,020,148 | ---- | C] () -- C:\Windows\System32\EPPICPattern2.dat
[2008/12/20 17:01:53 | 000,011,811 | ---- | C] () -- C:\Windows\System32\EPPICPattern4.dat
[2008/12/20 17:01:53 | 000,004,943 | ---- | C] () -- C:\Windows\System32\EPPICPattern6.dat
[2008/12/20 17:01:53 | 000,001,146 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_DU.dat
[2008/12/20 17:01:53 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_PT.dat
[2008/12/20 17:01:53 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_BP.dat
[2008/12/20 17:01:53 | 000,001,136 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_ES.dat
[2008/12/20 17:01:53 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_FR.dat
[2008/12/20 17:01:53 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_CF.dat
[2008/12/20 17:01:53 | 000,001,120 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_IT.dat
[2008/12/20 17:01:53 | 000,001,107 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_GE.dat
[2008/12/20 17:01:53 | 000,001,104 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_EN.dat
[2008/12/20 17:01:53 | 000,000,097 | ---- | C] () -- C:\Windows\System32\PICSDK.ini
[2008/12/20 16:55:13 | 000,000,025 | ---- | C] () -- C:\Windows\CDE DX7400DEFGIPS.ini
[2008/12/20 15:24:44 | 000,000,032 | ---- | C] () -- C:\ProgramData\ezsid.dat
[2008/12/19 18:17:36 | 000,000,048 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat
[2008/12/19 17:43:16 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2008/12/19 17:21:37 | 000,077,304 | ---- | C] () -- C:\Users\Marie-Ange\AppData\Local\GDIPFONTCACHEV1.DAT
[2008/10/22 03:24:57 | 000,000,249 | ---- | C] () -- C:\ProgramData\hpqp.ini
[2008/10/22 03:17:27 | 000,205,226 | ---- | C] () -- C:\ProgramData\nvModes.001
[2008/10/22 03:16:58 | 000,205,226 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2008/07/30 10:06:09 | 000,687,206 | ---- | C] () -- C:\Windows\System32\perfh00C.dat
[2008/07/30 10:06:09 | 000,340,236 | ---- | C] () -- C:\Windows\System32\perfi00C.dat
[2008/07/30 10:06:09 | 000,129,920 | ---- | C] () -- C:\Windows\System32\perfc00C.dat
[2008/07/30 10:06:09 | 000,037,390 | ---- | C] () -- C:\Windows\System32\perfd00C.dat
[2008/07/30 02:07:07 | 000,008,308 | ---- | C] () -- C:\Windows\System32\ezdigsgn.dat
[2008/07/30 00:20:07 | 000,000,012 | ---- | C] () -- C:\Windows\bthservsdp.dat
[2008/01/21 04:24:38 | 000,060,124 | ---- | C] () -- C:\Windows\System32\tcpmon.ini
[2006/11/02 14:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006/11/02 14:47:37 | 003,666,640 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 12:33:01 | 001,519,468 | ---- | C] () -- C:\Windows\System32\PerfStringBackup.INI
[2006/11/02 12:33:01 | 000,604,160 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006/11/02 12:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006/11/02 12:33:01 | 000,107,364 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006/11/02 12:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006/11/02 12:24:31 | 000,001,405 | ---- | C] () -- C:\Windows\msdfmap.ini
[2006/11/02 12:23:31 | 000,001,373 | ---- | C] () -- C:\Windows\win.ini
[2006/11/02 12:23:31 | 000,000,219 | ---- | C] () -- C:\Windows\system.ini
[2006/11/02 12:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006/11/02 10:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006/11/02 10:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006/11/02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/11/02 09:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2006/11/02 09:10:37 | 000,053,536 | ---- | C] () -- C:\Windows\System32\dosx.exe
[2006/11/02 09:10:02 | 000,000,718 | ---- | C] () -- C:\Windows\System32\mscdexnt.exe
[2006/11/02 09:10:00 | 000,002,842 | ---- | C] () -- C:\Windows\System32\redir.exe
[2006/11/02 09:09:59 | 000,069,886 | ---- | C] () -- C:\Windows\System32\edit.com
[2006/11/02 09:09:59 | 000,019,694 | ---- | C] () -- C:\Windows\System32\GRAPHICS.COM
[2006/11/02 09:09:59 | 000,000,882 | ---- | C] () -- C:\Windows\System32\share.exe
[2006/11/02 09:09:59 | 000,000,882 | ---- | C] () -- C:\Windows\System32\fastopen.exe
[2006/11/02 09:09:57 | 000,014,710 | ---- | C] () -- C:\Windows\System32\KB16.COM
[2006/11/02 09:09:56 | 000,007,052 | ---- | C] () -- C:\Windows\System32\nlsfunc.exe
[2006/11/02 09:09:55 | 000,039,274 | ---- | C] () -- C:\Windows\System32\mem.exe
[2006/11/02 09:09:55 | 000,001,131 | ---- | C] () -- C:\Windows\System32\LOADFIX.COM
[2006/11/02 09:09:53 | 000,011,753 | ---- | C] () -- C:\Windows\System32\setver.exe
[2006/11/02 09:09:52 | 000,020,634 | ---- | C] () -- C:\Windows\System32\debug.exe
[2006/11/02 09:09:51 | 000,008,424 | ---- | C] () -- C:\Windows\System32\exe2bin.exe
[2006/11/02 09:09:50 | 000,012,642 | ---- | C] () -- C:\Windows\System32\edlin.exe
[2006/11/02 09:09:49 | 000,050,648 | ---- | C] () -- C:\Windows\System32\COMMAND.COM
[2006/11/02 09:09:49 | 000,012,498 | ---- | C] () -- C:\Windows\System32\append.exe
[2006/11/02 09:09:45 | 000,027,097 | ---- | C] () -- C:\Windows\System32\country.sys
[2006/11/02 09:09:44 | 000,042,809 | ---- | C] () -- C:\Windows\System32\KEY01.SYS
[2006/11/02 09:09:44 | 000,042,537 | ---- | C] () -- C:\Windows\System32\KEYBOARD.SYS
[2006/11/02 09:09:42 | 000,009,029 | ---- | C] () -- C:\Windows\System32\ANSI.SYS
[2006/11/02 09:09:41 | 000,004,768 | ---- | C] () -- C:\Windows\System32\HIMEM.SYS
[2006/11/02 09:09:40 | 000,029,274 | ---- | C] () -- C:\Windows\System32\NTDOS412.SYS
[2006/11/02 09:09:38 | 000,029,370 | ---- | C] () -- C:\Windows\System32\NTDOS411.SYS
[2006/11/02 09:09:35 | 000,029,146 | ---- | C] () -- C:\Windows\System32\NTDOS404.SYS
[2006/11/02 09:09:31 | 000,029,146 | ---- | C] () -- C:\Windows\System32\NTDOS804.SYS
[2006/11/02 09:09:29 | 000,027,866 | ---- | C] () -- C:\Windows\System32\NTDOS.SYS
[2006/11/02 09:09:26 | 000,035,536 | ---- | C] () -- C:\Windows\System32\NTIO412.SYS
[2006/11/02 09:09:24 | 000,035,776 | ---- | C] () -- C:\Windows\System32\NTIO411.SYS
[2006/11/02 09:09:23 | 000,034,672 | ---- | C] () -- C:\Windows\System32\NTIO404.SYS
[2006/11/02 09:09:22 | 000,034,672 | ---- | C] () -- C:\Windows\System32\NTIO804.SYS
[2006/11/02 09:09:20 | 000,033,952 | ---- | C] () -- C:\Windows\System32\NTIO.SYS
[2006/11/02 08:25:08 | 000,013,312 | ---- | C] () -- C:\Windows\System32\win87em.dll
[2002/01/10 17:27:22 | 000,045,056 | ---- | C] () -- C:\Windows\atlw32.dll

========== LOP Check ==========

[2010/10/03 20:42:28 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\app
[2010/08/08 11:19:34 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\Bump Technologies, Inc
[2010/06/29 16:58:08 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/04/08 18:28:19 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\Dofus 2
[2010/10/03 20:42:23 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\Dofus-2.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2010/10/04 10:52:28 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\Dofus-3.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2010/11/13 14:42:51 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\Dofus-4.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2010/10/03 20:59:49 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\Dofus.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2009/09/21 13:35:51 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\EoRezo
[2008/12/20 17:32:55 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\EPSON
[2011/03/24 16:31:31 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\EurekaLog
[2011/01/22 16:03:22 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\Filmotech
[2011/03/19 17:36:23 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\Filmotech_prefs
[2010/06/17 12:12:42 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\gtk-2.0
[2011/03/23 19:21:21 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\HamsterSoft
[2010/10/23 15:22:39 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\Icones
[2009/09/20 11:05:57 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\ItsLabel
[2009/01/06 18:55:58 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\Leadertech
[2010/02/01 17:56:04 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\muvee Technologies
[2009/06/24 16:14:54 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\Nokia
[2011/03/23 16:47:18 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\OfferBox
[2009/07/20 18:43:00 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\OpenCandy
[2011/03/02 20:24:07 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\Orange
[2009/06/24 16:18:32 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\PC Suite
[2008/12/20 20:56:45 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\PeerNetworking
[2010/06/28 10:21:53 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\PhotoFiltre
[2010/10/03 20:42:28 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
[2009/03/01 12:54:51 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\Sony
[2010/06/29 17:32:08 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2009/07/16 17:22:50 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\Template
[2011/03/23 20:11:16 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\Vso
[2008/12/19 18:12:24 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\WildTangent
[2010/01/12 15:25:10 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\Windows Live Writer
[2010/07/18 19:14:31 | 000,000,000 | ---D | M] -- C:\Users\Marie-Ange\AppData\Roaming\Zylom
[2010/03/21 13:05:12 | 000,000,214 | ---- | M] () -- C:\Windows\Tasks\CreateChoiceProcessTask.job
[2011/04/12 09:20:30 | 000,000,388 | ---- | M] () -- C:\Windows\Tasks\Registry Reviver-Marie-Ange-Startup.job
[2011/04/11 22:32:47 | 000,032,614 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2011/04/11 19:36:38 | 000,000,442 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{28689226-7674-4AA2-9B70-A112BD03FB64}.job

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 138 bytes -> C:\ProgramData\TEMP:6051163F
@Alternate Data Stream - 137 bytes -> C:\ProgramData\TEMP:FDD78BE5
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:84ECD9DF
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:206E2596

< End of report >

Merci encore, je reprends espo!!r

Bonjour
Télécharge AD-Remover sur ton bureau.
http://www.teamxscript.org/adremoverTelechargement.html
Double clique sur AD-R.exe
Clique sur le bouton Nettoyer.
Poste le rapport qui va s'ouvrir en fin de scan.
Le rapport est sauvegardé sous C:\Ad-report-SCAN[1].txt
Puis ferme le programme par Quitter.
@+

Bonjour,
voiçi le rapport ad-r nettoyage



Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [2]) -> Lancé à 13:43:04 le 12/04/2011, Mode normal

Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2 (X86)
Marie-Ange@LOLO (Hewlett-Packard HP Pavilion dv7 Notebook PC)

============== ACTION(S) ==============



(!) -- Fichiers temporaires supprimés.




============== SCAN ADDITIONNEL ==============

-- C:\Users\Marie-Ange\AppData\Roaming\Mozilla\FireFox\Profiles\wgbdvh4c.default --
Extensions\menu_contextuel_orange@orange.fr (?)
User.js - browser.startup.homepage, hxxp://r.orange.fr/r/Ohome_portail?ref=O_OI_defaultPage
Prefs.js - browser.startup.homepage, hxxp://r.orange.fr/r/Ohome_portail?ref=O_OI_defaultPage

========================================

**** Internet Explorer Version [8.0.6001.19019] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=i ... ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKCU_SearchScopes\{814C76CB-2623-43F4-AAD0-58A0E5190A20} - "Orange" (hxxp://www.orange.fr/bin/frame1px.cgi?u=hxxp%3 ... %3D{search...)
HKCU_Toolbar\WebBrowser|{D3028143-6145-4318-99D3-3EDCE54A95A9} (C:\Program Files\orange\ToolbarFR\ToolbarContainer101000320.dll)
HKCU_Toolbar\WebBrowser|{E84CC2C1-B722-48FC-A39C-EDB8B525C777} (x)
HKCU_Toolbar\WebBrowser|{EEE6C35B-6118-11DC-9C72-001320C79847} (x)
HKLM_Toolbar|{D3028143-6145-4318-99D3-3EDCE54A95A9} (C:\Program Files\orange\ToolbarFR\ToolbarContainer101000320.dll)
HKCU_ElevationPolicy\{D3DE705E-0BB6-47E6-AB61-6FF78BE040A0} - C:\Program Files\Internet Explorer\minftnet.exe (Synersoft)
HKLM_ElevationPolicy\{08E8D305-8D6D-49fe-8603-03A926E46AE0} - C:\Program Files\Common Files\Adobe\Updater6\Adobe_Updater.exe (x)
HKLM_ElevationPolicy\{6A4E5109-F35C-469e-BEBC-A9241C14D8B3} - C:\Program Files\Hp\Common\iPAQDetection2.exe (?)
HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x)
HKLM_ElevationPolicy\{76E2369A-75BA-41F9-8B9E-16059E5CF9A6} - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (x)
HKLM_ElevationPolicy\{A6E2003F-95C5-4591-BA9A-0093080FDB5C} - C:\Program Files\Common Files\Oberon Media\OberonBroker\1.0.0.63\OberonBroker.exe (?)
BHO\{21A88CB9-84D2-4020-A2D1-B25A21034884} - "HistoryTriggerBHO Class" (C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\LinkAirBrowserHelper.dll)
BHO\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - "Search Helper" (C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 55 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 16 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 12/04/2011 13:38:44 (7041 Octet(s))
C:\Ad-Report-CLEAN[2].txt - 12/04/2011 13:45:02 (3481 Octet(s))

Fin à: 13:47:05, 12/04/2011

============== E.O.F =============

Bonjour
C'est ce rapport : C:\Ad-Report-CLEAN[1].txt - 12/04/2011 13:38:44 qui m'intéresse.
@+

RE,
desolee,
voici le rapport


Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 13:38:04 le 12/04/2011, Mode normal

Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2 (X86)
Marie-Ange@LOLO (Hewlett-Packard HP Pavilion dv7 Notebook PC)

============== ACTION(S) ==============


Fichier supprimé: C:\Windows\Downloaded Program Files\F3initialsetup1.0.1.1.inf
Dossier supprimé: C:\Users\Marie-Ange\AppData\Local\Conduit
Dossier supprimé: C:\Users\Marie-Ange\AppData\LocalLow\FunWebProducts
Dossier supprimé: C:\Program Files\GamesBar
Dossier supprimé: C:\Users\Marie-Ange\AppData\LocalLow\MyWebSearch
Dossier supprimé: C:\Users\Marie-Ange\AppData\Roaming\OpenCandy
Dossier supprimé: C:\Program Files\PriceGong
Dossier supprimé: C:\ProgramData\Viewpoint
Dossier supprimé: C:\Program Files\Viewpoint
Dossier supprimé: C:\Users\Marie-Ange\AppData\Roaming\EoRezo
Dossier supprimé: C:\Users\Marie-Ange\AppData\Roaming\ItsLabel
Dossier supprimé: C:\Users\Marie-Ange\AppData\Roaming\OfferBox
Dossier supprimé: C:\Program Files\OfferBox

(!) -- Fichiers temporaires supprimés.


Clé supprimée: HKLM\Software\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Clé supprimée: HKLM\Software\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Clé supprimée: HKLM\Software\Classes\Interface\{115CCBAE-27B0-47C3-BA42-BAB708424393}
Clé supprimée: HKLM\Software\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}
Clé supprimée: HKLM\Software\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Clé supprimée: HKLM\Software\Classes\TypeLib\{937936AF-28CA-4973-B8AE-F250406149A2}
Clé supprimée: HKLM\Software\Classes\AxMetaStream.MetaStreamCtl
Clé supprimée: HKLM\Software\Classes\AxMetaStream.MetaStreamCtl.1
Clé supprimée: HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary
Clé supprimée: HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary.1
Clé supprimée: HKLM\Software\OfferBox
Clé supprimée: HKLM\Software\Conduit
Clé supprimée: HKLM\Software\GamesBarSetup
Clé supprimée: HKLM\Software\MetaStream
Clé supprimée: HKLM\Software\PopCap
Clé supprimée: HKLM\Software\Viewpoint
Clé supprimée: HKCU\Software\OfferBox
Clé supprimée: HKCU\Software\FissaSearch
Clé supprimée: HKCU\Software\ItsLabel
Clé supprimée: HKCU\Software\Grand Virtual
Clé supprimée: HKCU\Software\Zugo
Clé supprimée: HKCU\Software\AppDataLow\Software\Toolbar
Clé supprimée: HKCU\Software\AppDataLow\Software\Conduit
Clé supprimée: HKCU\Software\AppDataLow\Software\Fun Web Products
Clé supprimée: HKCU\Software\AppDataLow\Software\FunWebProducts
Clé supprimée: HKCU\Software\AppDataLow\Software\MyWebSearch
Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{F756994E-FC37-29D0-B6B3-004938757426}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Titan Poker
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ViewpointMediaPlayer
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé supprimée: HKLM\Software\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom
Clé supprimée: HKLM\Software\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Clé supprimée: HKLM\Software\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}

Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}


============== SCAN ADDITIONNEL ==============

-- C:\Users\Marie-Ange\AppData\Roaming\Mozilla\FireFox\Profiles\wgbdvh4c.default --
Extensions\menu_contextuel_orange@orange.fr (?)
User.js - browser.startup.homepage, hxxp://r.orange.fr/r/Ohome_portail?ref=O_OI_defaultPage
Prefs.js - browser.startup.homepage, hxxp://r.orange.fr/r/Ohome_portail?ref=O_OI_defaultPage

========================================

**** Internet Explorer Version [8.0.6001.19019] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=i ... ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKCU_SearchScopes\{814C76CB-2623-43F4-AAD0-58A0E5190A20} - "Orange" (hxxp://www.orange.fr/bin/frame1px.cgi?u=hxxp%3 ... %3D{search...)
HKCU_Toolbar\WebBrowser|{D3028143-6145-4318-99D3-3EDCE54A95A9} (C:\Program Files\orange\ToolbarFR\ToolbarContainer101000320.dll)
HKCU_Toolbar\WebBrowser|{E84CC2C1-B722-48FC-A39C-EDB8B525C777} (x)
HKCU_Toolbar\WebBrowser|{EEE6C35B-6118-11DC-9C72-001320C79847} (x)
HKLM_Toolbar|{D3028143-6145-4318-99D3-3EDCE54A95A9} (C:\Program Files\orange\ToolbarFR\ToolbarContainer101000320.dll)
HKCU_ElevationPolicy\{D3DE705E-0BB6-47E6-AB61-6FF78BE040A0} - C:\Program Files\Internet Explorer\minftnet.exe (Synersoft)
HKLM_ElevationPolicy\{08E8D305-8D6D-49fe-8603-03A926E46AE0} - C:\Program Files\Common Files\Adobe\Updater6\Adobe_Updater.exe (x)
HKLM_ElevationPolicy\{6A4E5109-F35C-469e-BEBC-A9241C14D8B3} - C:\Program Files\Hp\Common\iPAQDetection2.exe (?)
HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x)
HKLM_ElevationPolicy\{76E2369A-75BA-41F9-8B9E-16059E5CF9A6} - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (x)
HKLM_ElevationPolicy\{A6E2003F-95C5-4591-BA9A-0093080FDB5C} - C:\Program Files\Common Files\Oberon Media\OberonBroker\1.0.0.63\OberonBroker.exe (?)
BHO\{21A88CB9-84D2-4020-A2D1-B25A21034884} - "HistoryTriggerBHO Class" (C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\LinkAirBrowserHelper.dll)
BHO\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - "Search Helper" (C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 55 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 14 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 12/04/2011 13:38:44 (6902 Octet(s))

Fin à: 13:40:23, 12/04/2011

============== E.O.F ==============

Merci pour le rapport.
Comment vont les choses maintenant ?
@+

bonjour,

rien n'a change, toujours aussi tres tres lent, c'est a dire le sablier n'en fini plus , ouvrir 2 fichiers c'est impossible il me faut20 mn, et j'ai des logitiels qui se bloque et je suis obliger de debrancher mon pc, ne pouvant meme pas l'eteindre, meme internet est tres long aussi, j'ai fais une reinisialisation d'ei MAIS ca ne change rien, j'ai l'impression que mon pc chauffe aussi. Vraiment je commence à desesperer. POUR TELECHARCHER UN FICHIER TRES TRES LONG AUSSI, bref tout est tres long et presque impossible de pouvoir m'en servir sans passer des heures.
Je te remercie, j'espere encore que tu vas pouvoir m 'aider.

Bonsoir,
J'arrive au bout de mes moyens d'investigation.
Désolé de na pouvoir faire mieux.
@+

Bonjour,

merci, pour tout.

Se pourrait il que la cause de mon probleme pourrait etre un ennui materiel de mon pc?

Merci

Bonjour
Cela peut venir de la mémoire, d'une défaillance d'une partie de la carte-mère, voire de l'alimentation ou du processeur.
Tu peux tester la mémoire.

Tu télécharges ce fichier
http://www.memtest86.com/memtest86-4.0.iso.zip
Tu le décompresses
Tu graves le fichier iso obtenu sur un cd
Tu mets le cd dans le lecteur et tu redémarres
Tu tapotes sur F8 et tu choisis le lecteur de cd/dvd avec les flèches quand le menu s'ouvre .
Tu valides par Entrer
Memetest va s'ouvrir.
Un cycle de contrôle varie de 15 minutes à plus d'une heure selon la configuration matérielle.
Les erreurs, s'il y en a seront affichées dans le cadre du bas.
@+

MERCI, je vais faire ce que tu m'a expliquer, je te tiens au courant

Bonjour,

pour mon probleme, en fait c'etais un fichier video de cahnsons pour enfants que j'avais pris sur you tube et que j'avais converti en mpeg.
je me suis apperçu que je n'arrivais pas à le supprimer, j'ai reussi avec unlock et depuis mon pc marche bien.
j'espère que çà va continuer.

Merci encore.