panne sur hp - Page 3

panne sur hp
Moisebdu02	Le 06/07/2014 à 18:03
	ca ne fonctionne pas non plus, tu crois pas qu'un coup de masse est plus radicale??
Koytlo2	Le 06/07/2014 à 18:15
Fidèle à VIC. Ancien	salut peux-tu démarrer sur ton cd de windows en bootant dessus au démarrage ? si tu n'arrives pas à booter dessus entre dans le bios et va dans la partie boot et règle l'ordre du boot (le cd en 1e et le disque dur en 2e). est-ce que tu as plusieurs lecteurs cd et plusieurs disques ? as-tu un cd quelconque que tu aurais laissé dans le lecteur ? si oui enlève le. sais -tu booter sur un cd live de linux ? as-tu linux en dual boot sur le disque dur avec windows ? sais-tu débrancher par ex ton disque dur ou ton lecteur cd et sais-tu le rebrancher ? salut
Moisebdu02	Le 06/07/2014 à 18:15
	~ Rapport de ZHPDiag v2014.7.6.102 - Nicolas Coolman (06/07/2014) ~ Lancé par sébastien (06/07/2014 18:04:33) ~ Adresse du Site Web http://nicolascoolman.fr ~ Adresse du Forum http://forum.nicolascoolman.fr ~ Traduit par Nicolas Coolman ~ Etat de la version : Version à jour. ~ Liste blanche : Désactivée par l'utilisateur ~ Elévation des Privilèges : OK ~ User Account Control (UAC): Deactivate by program ---\\ Navigateurs Internet MSIE: Internet Explorer v11.0.9600.17126 MFIE: Mozilla Firefox 30.0 (Defaut) ---\\ Informations sur les produits Windows ~ Langage: Français Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601) Windows Server License Manager Script : OK ~ Windows Operating System - Windows(R) 7, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : 3Q6C9 Windows License : OK ~ Windows Remaining Initializations Number : 0 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ Logiciels de protection du système Avira Free Antivirus v14.0.4.672 Microsoft Security Client v4.5.0216.0 Windows Defender W7 (Deactivate) ---\\ Logiciels d'optimisation du système CCleaner v4.01 ---\\ Logiciels de partage PeerToPeer ---\\ Surveillance de Logiciels Adobe Flash Player 13 Plugin Adobe Reader XI ---\\ Informations sur le système ~ Processor: AMD64 Family 21 Model 16 Stepping 1, AuthenticAMD ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 3561 MB (54% free) System Restore: Activé (Enable) System drive C: has 639 GB (70%) free of 911 GB ---\\ Mode de connexion au système ~ Computer Name: SÉBASTIEN-HP ~ User Name: sébastien ~ All Users Names: sébastien, HomeGroupUser$, Administrateur, ~ Unselected Option: None Logged in as Administrator ---\\ Variables d'environnement ~ System Unit : C:\ ~ %AppZHP% : C:\Users\sébastien\AppData\Roaming\ZHP\ ~ %AppData% : C:\Users\sébastien\AppData\Roaming\ ~ %Desktop% : C:\Users\sébastien\Desktop\ ~ %Favorites% : C:\Users\sébastien\Favorites\ ~ %LocalAppData% : C:\Users\sébastien\AppData\Local\ ~ %StartMenu% : C:\Users\sébastien\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ Enumération des unités disques C: Hard drive, Flash drive, Thumb drive (Free 639 Go of 911 Go) D: Hard drive, Flash drive, Thumb drive (Free 2 Go of 20 Go) E: CD-ROM drive (Not Inserted) F: Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go) Q: Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go) ---\\ Etat du Centre de Sécurité Windows [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ~ Security Center: 41 Scanned in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.03/03/2112 - 19:21:56.) -- C:\Windows\Explorer.exe [2871808] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024] [MD5.40BFD9D6EC8E174145F012246CA73CCD] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.30/05/2014 - 08:56:56.) -- C:\Windows\System32\wininet.dll [2266112] [MD5.88AB9B72B4BF3963A0DE0820B4B0B06C] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.04/03/2014 - 10:43:50.) -- C:\Windows\System32\Winlogon.exe [455168] [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/11/2010 - 04:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448] [MD5.79059559E89D06E8B80CE2944BE20228] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/09/2013 - 02:09:10.) -- C:\Windows\system32\Drivers\AFD.sys [497152] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160] [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456] [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400] [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224] [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.03/03/2112 - 19:25:26.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208] [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21/11/2010 - 04:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632] [MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24/01/2014 - 03:37:55.) -- C:\Windows\system32\Drivers\ntfs.sys [1684928] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280] [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/11/2010 - 04:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184] [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\tdx.sys [119296] [MD5.DF8126BD41180351A093A3AD2FC8903B] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.03/03/2112 - 19:18:52.) -- C:\Windows\system32\Drivers\volsnap.sys [296320] ~ Generic Processes: Scanned in 00mn 00s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 1/641 ~ Mes musiques (My Musics) : 17/356 ~ Mes Videos (My Videos) : 1/30 ~ Mes Favoris (My Favorites) : 1/40 ~ Mes Documents (My Documents) : 1/159 ~ Mon Bureau (My Desktop) : 5/24262 ~ Menu demarrer (Programs) : 1/31 ~ Hidden Files: Scanned in 00mn 10s ---\\ Processus lancés [MD5.CBB55C7BED11FE4F995159BCA9904A29] - (.Somoto - FilesFrog.com Update Checker.) -- C:\Users\sébastien\AppData\Local\FilesFrog Update Checker\update_checker.exe [208952] [PID.2496] =>Adware.MegaSearch [MD5.B7F55E2AE978D3D34F7876EE5D689AAE] - (.CyberLink - YouCam Mirage.) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488] [PID.2504] [MD5.4F9236BE13917B89F7A03DEA85F220FA] - (.Pas de propriétaire - WebPlayer.) -- C:\Users\sébastien\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe [202752] [PID.4760] =>Adware.SocialSkinz [MD5.449E6CD914920B84DDDF0F12880411EE] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224] [PID.4784] [MD5.00E10C74F2C0350277B5B0500D51D7D2] - (.Sony - Sony PC Companion.) -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [466656] [PID.4800] [MD5.F0EA603E7B91046CA48EA4B3593A007D] - (.Micro Application - Pas de description.) -- C:\Program Files (x86)\Micro Application\LauncherMA.exe [485376] [PID.4900] [MD5.048EA4B978851788E9F5E8E4F081DF7A] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904] [PID.4976] [MD5.CA1F035A177457B47F9B7D669FE3E91A] - (.Avira Operations GmbH & Co. KG - Avira.) -- C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [187984] [PID.4984] [MD5.5374D3363F5B87CF03125F5FB584C8CE] - (.Avira Operations GmbH & Co. KG - Avira system tray application.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872] [PID.5064] [MD5.0F6D06A88A88007AAEE5F0EE1ECE42E4] - (...) -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe [70880] [PID.4192] [MD5.0A76EB770F0D432AA7795C5DDB27B888] - (.APN - Ask Toolbar Notifier.) -- C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1956760] [PID.3988] =>Toolbar.Ask [MD5.B1E01D636350983E94171E229C759468] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [275568] [PID.2852] [MD5.4F87179386948D61FBF74B0DDF265170] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [18544] [PID.3656] [MD5.038053B5DB6B0DCFB32B7682334B7625] - (.Adobe Systems, Inc. - Adobe Flash Player 13.0 r0.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe [1863856] [PID.5624] [MD5.7E0EBC6933621F994BF6C4232548CDA7] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8074240] [PID.4244] [MD5.0BF3BE441B226D018767C28F92830D34] - (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160] [PID.1788] [MD5.B362181ED3771DC03B4141927C80F801] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65432] [PID.2084] [MD5.0BF3BE441B226D018767C28F92830D34] - (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160] [PID.2148] [MD5.E7F2414D8EBF7C269FC5FC878C1DD1E9] - (.APN LLC. - APN Updater.) -- C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [165784] [PID.2180] =>Toolbar.Ask [MD5.72551A9AE5F68905DFC3CBA0D5242566] - (.Microsoft Corporation - Updates Skype Click to Call.) -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720] [PID.2268] [MD5.6B669A00A431FF6CDCE67458933F5F0F] - (.Microsoft Corporation - Phone Number Recognition (PNR) module.) -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992] [PID.2340] [MD5.CA793DCC1D5F619021EF1D37CC7A831E] - (.EasyBits Software AS - Shared EasyBits services for Windows.) -- C:\Windows\SysWOW64\ezSharedSvcHost.exe [514232] [PID.2388] [MD5.2BEC76BDCD1BC080210325E7B5094834] - (.Hewlett-Packard Development Company, L.P. - HP Quick Launch WMI Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [35200] [PID.2560] [MD5.39B1D0A636A400304565D4521FAD6D77] - (.Microsoft Corporation - Microsoft Application Virtualization Virtua.) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [207528] [PID.2844] [MD5.77C5A741A7452812F278EF2C18478862] - (.Microsoft Corporation - Microsoft Application Virtualization Client.) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [523944] [PID.248] [MD5.FD557A50A65E44041CD2FCEF4BEB04DB] - (.Microsoft Corporation - Microsoft Office Client Virtualization Serv.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.exe [822504] [PID.3080] [MD5.62B0AC6589A46AA9EBA27E63627C2812] - (.Avira Operations GmbH & Co. KG - AntiVir WebGuard WFP Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1039952] [PID.3292] ~ Processes Running: Scanned in 00mn 02s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) C:\Users\sébastien\AppData\Roaming\Mozilla\Firefox\Profiles\0u2m8k6h.default\prefs.js C:\Users\sébastien\AppData\Roaming\Mozilla\Firefox\Profiles\0u2m8k6h.default\user.js C:\Users\sébastien\AppData\Roaming\Mozilla\Firefox\Profiles\usbskqvw.default-1364136879355\prefs.js C:\Users\sébastien\AppData\Roaming\Mozilla\Firefox\Profiles\usbskqvw.default-1364136879355\user.js M3 - MFPP: Plugins - [sébastien] -- C:\Users\sébastien\AppData\Roaming\Mozilla\Firefox\Profiles\0u2m8k6h.default\searchplugins\Web Search.xml =>Parasite.Pugi M3 - MFPP: Plugins - [sébastien] -- C:\Users\sébastien\AppData\Roaming\Mozilla\Firefox\Profiles\usbskqvw.default-1364136879355\searchplugins\trovi-search.xml =>Hijacker.Trovigo M3 - MFPP: Plugins - [sébastien] -- C:\Users\sébastien\AppData\Roaming\Mozilla\Firefox\Profiles\usbskqvw.default-1364136879355\searchplugins\Web Search.xml =>Parasite.Pugi M3 - MFPP: Plugins - [sébastien] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\Web Search.xml =>Parasite.Pugi M2 - MFEP: prefs.js [sébastien - 0u2m8k6h.default\{029afe2e-aa6f-406d-8003-304d06593385}] [] HomeTab v5.7 (..) =>PUP.CertifiedToolbar M2 - MFEP: prefs.js [sébastien - usbskqvw.default-1364136879355\yhwqg@dlhwda.org] [] CostMin v2.2 (..) =>PUP.CostMin M2 - MFEP: prefs.js [sébastien - usbskqvw.default-1364136879355\{029afe2e-aa6f-406d-8003-304d06593385}] [] HomeTab v5.7 (..) =>PUP.CertifiedToolbar M2 - MFEP: prefs.js [sébastien - usbskqvw.default-1364136879355\{5a3a2697-a720-4cf8-b166-8b1c8c4c84d1}] [] QuickShare Widget v5.7 (..) =>PUP.QuickShare P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.30214.0.) -- c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll P2 - FPN: [HKLM] [adobe.com/AdobeAAMDetect] - (.Adobe Systems - A plugin to detect whether the Adobe Application Manager is installed.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (.Skype Limited - Facebook Video Calling Plugin.) -- C:\Users\sébastien\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll ~ Firefox Browser: 12 Scanned in 00mn 00s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://rocket-find.com R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://aartemis.com =>PUP.AArtemis R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://aartemis.com =>PUP.AArtemis R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.helperbar.com =>PUP.HelperBar R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://aartemis.com =>PUP.AArtemis R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://feed.helperbar.com =>PUP.HelperBar R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.aartemis.com =>PUP.AArtemis R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://aartemis.com =>PUP.AArtemis R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.aartemis.com =>PUP.AArtemis R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.helperbar.com =>PUP.HelperBar R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.helperbar.com =>PUP.HelperBar R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.aartemis.com =>PUP.AArtemis R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://aartemis.com =>PUP.AArtemis R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.aartemis.com =>PUP.AArtemis R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.9600.17041 (winblue_gdr.140305-1710)) -- C:\Windows\SysWOW64\ieframe.dll R3 - URLSearchHook: (no name) [64Bits] - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} . (.Microsoft Corporation - Navigateur Internet.) (No version) -- (.not file.) R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 ~ IE Browser: 24 Scanned in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\System32\Userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\\ Hosts file redirection (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Hosts File: Scanned in 00mn 00s ~ Nombre de lignes (Lines number): 21 ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: Bubble Dock SurfMatch [64Bits] - {23AF19F7-1D5B-442c-B14C-3D1081953C94} . (.Nosibay - Bubble Dock.) -- C:\Program Files (x86)\Nosibay\Bubble Dock\extensions\axSurfMatch.dll =>PUP.BubbleDock O2 - BHO: QuickShare WidgetEngine [64Bits] - {31ad400d-1b06-4e33-a59a-90c2c140cba0} . (...) -- mscoree.dll (.not file.) =>PUP.QuickShare O2 - BHO: Search-Results Toolbar [64Bits] - {377e5d4d-77e5-476a-8716-7e70a9272da0} . (...) -- C:\PROGRA~2\SEARCH~1\Datamngr\SRTOOL~1\searchresultsDx.dll (.not file.) =>PUP.Datamngr O2 - BHO: Avira SearchFree Toolbar BHO [64Bits] - {41564952-412D-5637-4300-7A786E7484D7} . (...) -- "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll" (.not file.) =>Toolbar.Avira O2 - BHO: BHO [64Bits] - {47B614AF-B4CC-485B-B331-BE26F02ED4CC} . (.APC - Browser Helper Object.) -- C:\Program Files (x86)\Internet Explorer\IEAddon.dll O2 - BHO: Canon Easy Web Print Helper [64Bits] - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} . (.Pas de propriétaire - Easy-WebPrint EWPBrowseLoader Module.) -- C:\Program Files (x86)\Canon\Easy-WebPrint\EWPBrowseLoader.dll O2 - BHO: AMD SteadyVideo BHO [64Bits] - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} . (.Advanced Micro Devices - This plugin allows the user to turn AMD Ste.) -- C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll O2 - BHO: (no name) [64Bits] - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} Clé orpheline O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Messenger Companion Helper [64Bits] - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O2 - BHO: Adobe Acrobat Create PDF Toolbar Helper [64Bits] - {AE7CD045-E861-484f-8273-0445EE161910} . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll O2 - BHO: SkypeIEPluginBHO [64Bits] - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Microsoft Corporation - Skype Click to Call for Internet Explorer.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: delta Helper Object [64Bits] - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} . (...) -- C:\Program Files (x86)\Delta\delta\1.8.10.0\bh\delta.dll (.not file.) O2 - BHO: HP Network Check Helper [64Bits] - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} . (.Hewlett-Packard - HP Network Check IE Plug-in.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll O2 - BHO: SmartSelect [64Bits] - {F4971EE7-DAA0-4053-9964-665D8EE6A077} . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll ~ BHO: 21 Scanned in 00mn 01s ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: QuickShare Widget - [HKLM]{ae07101b-46d4-4a98-af68-0333ea26e113} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>PUP.QuickShare O3 - Toolbar: Avira SearchFree Toolbar - [HKLM]{41564952-412D-5637-4300-7A786E7484D7} . (.APN LLC. - Passport.) -- C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll =>Toolbar.Ask O3 - Toolbar\WebBrowser: (no name) - [HKCU]{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} Clé orpheline O3 - Toolbar\WebBrowser: (no name) - [HKCU]{41564952-412D-5637-4300-7A786E7484D7} Clé orpheline ~ Toolbar: Scanned in 00mn 00s ---\\ Autres liens utilisateurs (O4) O4 - GS\Desktop [Public]: HP+.lnk . (...) -- C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe O4 - GS\Program [Public]: Webplayer.lnk . (...) -- C:\Program Files (x86)\Webplayer\Webplayer.exe =>Adware.SocialSkinz O4 - GS\QuickLaunch [sébastien]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe http://aartemis.com =>PUP.AArtemis O4 - GS\TaskBar [sébastien]: Photos Snapfish.lnk . (...) -- C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe O4 - GS\Program [sébastien]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://aartemis.com =>PUP.AArtemis O4 - GS\SystemTools [sébastien]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://aartemis.com =>PUP.AArtemis ~ Global Startup: 6 Scanned in 00mn 04s ---\\ Applications lancées au démarrage du système (O4) O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe O4 - HKLM\..\Run: [Logitech Download Assistant] . (.Logitech, Inc. - Logitech Download Assistant.) -- C:\Windows\System32\LogiLDA.dll O4 - HKLM\..\RunOnce: [NCPluginUpdater] . (.Hewlett-Packard - NCPluginUpdater.) -- C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\sébastien\AppData\Local\Facebook\Update\FacebookUpdate.exe O4 - HKCU\..\Run: [Drivers Manager] . (.Avanquest Software - Drivers Manager.) -- C:\Program Files (x86)\Drivers Manager\DMLauncher.exe O4 - HKCU\..\Run: [FLV Player] . (.Pas de propriétaire - WebPlayer.) -- C:\Users\sébastien\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe =>Adware.SocialSkinz O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A. O4 - HKCU\..\Run: [Sony PC Companion] . (.Sony - Sony PC Companion.) -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated O4 - HKLM\..\Wow6432Node\Run: [AnyProtect Scanner] C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe (.not file.) =>PUP.AnyProtect O4 - HKLM\..\Wow6432Node\Run: [fst_fr_274] Clé orpheline =>Adware.FreeSoftToday O4 - HKLM\..\Wow6432Node\Run: [Avira Systray] . (.Avira Operations GmbH & Co. KG - Avira.) -- C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Avira system tray application.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe O4 - HKLM\..\Wow6432Node\Run: [ApnTBMon] . (.APN - Ask Toolbar Notifier.) -- C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe =>Toolbar.Ask O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-2706331780-303319812-4136672300-1001\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\sébastien\AppData\Local\Facebook\Update\FacebookUpdate.exe O4 - HKUS\S-1-5-21-2706331780-303319812-4136672300-1001\..\Run: [Drivers Manager] . (.Avanquest Software - Drivers Manager.) -- C:\Program Files (x86)\Drivers Manager\DMLauncher.exe O4 - HKUS\S-1-5-21-2706331780-303319812-4136672300-1001\..\Run: [FLV Player] . (.Pas de propriétaire - WebPlayer.) -- C:\Users\sébastien\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe =>Adware.SocialSkinz O4 - HKUS\S-1-5-21-2706331780-303319812-4136672300-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A. O4 - HKUS\S-1-5-21-2706331780-303319812-4136672300-1001\..\Run: [Sony PC Companion] . (.Sony - Sony PC Companion.) -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe ~ Application: Scanned in 00mn 00s ---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5) O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no ~ IE Control Panel: 1 Scanned in 00mn 00s ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll,-102 [64Bits] - {25510184-5A38-4A99-B273-DCA8EEF6CD08} . (...) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\Resources\Icons\HP.ico O9 - Extra button: Skype Click to Call [64Bits] - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- c:\program files (x86)\skype\toolbars\internet explorer x64\icon.ico ~ IE Extra Buttons: Scanned in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =>.Microsoft Corporation O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation ~ Winsock: 8 Scanned in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{78AAD45F-AC44-4659-9354-9BD2C4D8EDE0}: DhcpNameServer = 212.27.40.240 212.27.40.241 O17 - HKLM\System\CCS\Services\Tcpip\..\{98A759E0-BDCA-46E4-A0E2-E1FD85755E3A}: DhcpNameServer = 212.27.40.241 212.27.40.240 O17 - HKLM\System\CS1\Services\Tcpip\..\{78AAD45F-AC44-4659-9354-9BD2C4D8EDE0}: DhcpNameServer = 212.27.40.240 212.27.40.241 O17 - HKLM\System\CS1\Services\Tcpip\..\{98A759E0-BDCA-46E4-A0E2-E1FD85755E3A}: DhcpNameServer = 212.27.40.241 212.27.40.240 O17 - HKLM\System\CS2\Services\Tcpip\..\{78AAD45F-AC44-4659-9354-9BD2C4D8EDE0}: DhcpNameServer = 212.27.40.240 212.27.40.241 O17 - HKLM\System\CS2\Services\Tcpip\..\{98A759E0-BDCA-46E4-A0E2-E1FD85755E3A}: DhcpNameServer = 212.27.40.241 212.27.40.240 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241 ~ Domain: Scanned in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- O18 - Filter: video/x-flv [64Bits] - {20C75730-7C25-476B-95DC-C65810F9E489} . (.Advanced Micro Devices - MIME Video Detector for IE.) -- C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll ~ Protocole Additionnel: Scanned in 00mn 00s ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - AppInit_DLLs: . (...) - C:\PROGRA~3\Wincert\WIN64C~1.dll ~ AppInit DLL: Scanned in 00mn 00s ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. ~ SSODL: 1 Scanned in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe O23 - Service: AMD FUEL Service (AMD FUEL Service) . (.Advanced Micro Devices, Inc. - Service Fusion Utility.) - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe O23 - Service: Avira Planificateur (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira Protection temps réel (AntiVirService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe O23 - Service: Avira Protection Web (AntiVirWebService) . (.Avira Operations GmbH & Co. KG - AntiVir WebGuard WFP Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe O23 - Service: Service de mise à jour Ask (APNMCP) . (.APN LLC. - APN Updater.) - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe =>Toolbar.Ask O23 - Service: Avira Service Host (Avira.OE.ServiceHost) . (.Avira Operations GmbH & Co. KG - Avira.OE.ServiceHost.) - C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe O23 - Service: HP Support Assistant Service (HP Support Assistant Service) . (.Hewlett-Packard Company - HP Support Assistant Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe =>.Hewlett-Packard Co O23 - Service: HP Client Services (HPClientSvc) . (.Hewlett-Packard Company - HP Client Services.) - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe O23 - Service: HP Service (hpsrv) . (.Hewlett-Packard Company - HpService.) - C:\Windows\System32\Hpservice.exe O23 - Service: HPWMISVC (HPWMISVC) . (.Hewlett-Packard Development Company, L.P. - HP Quick Launch WMI Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: C:\Windows\System32\stlang64.dll (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Program Files\IDT\WDM\STacSV64.exe ~ Services: 14 Scanned in 00mn 05s ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(...) - (.not file.) ~ Desktop Component: 4 Scanned in 00mn 00s ---\\ Enumère les données de BootExecute (BEX) (O34) O34 - HKLM BootExecute: (autocheck autochk ) - File not found ~ BEX: 1 Scanned in 00mn 00s ---\\ Clés Session Manager (AppCertDlls,KnownDLLs) (O36) O36 - AppCertDlls: (x86) . (...) -- C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll =>PUP.MoviesToolbar O36 - AppCertDlls: (x64) . (...) -- C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\apcrtldr.dll =>PUP.MoviesToolbar ~ Keys: Scanned in 00mn 00s ---\\ Tâches planifiées en automatique (O39) [MD5.09E7C37DF4A911C8A9AA8BF88ACD10AA] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [257712] [MD5.00000000000000000000000000000000] [APT] [APSnotifierPP1] (...) -- C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe (.not file.) [0] =>PUP.AnyProtect [MD5.00000000000000000000000000000000] [APT] [APSnotifierPP2] (...) -- C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe (.not file.) [0] =>PUP.AnyProtect [MD5.00000000000000000000000000000000] [APT] [APSnotifierPP3] (...) -- C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe (.not file.) [0] =>PUP.AnyProtect [MD5.00000000000000000000000000000000] [APT] [bench-S-1-5-21-2706331780-303319812-4136672300-1001] (...) -- C:\Program Files (x86)\Bench\Updater\updater.exe (.not file.) [0] =>PUP.GiganticSavings [MD5.F498F9A6044DE57744BD465662E6AD77] [APT] [BHO updater] (...) -- C:\Program Files (x86)\Internet Explorer\Updater.exe [117760] [MD5.42BC01952E1ED3152DDE0C0C9C2012D4] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [3545880] [MD5.00000000000000000000000000000000] [APT] [da5fafb2-fe4a-4ffa-8ff0-3c951192dd7b-4] (...) -- C:\Program Files (x86)\PlusVid\da5fafb2-fe4a-4ffa-8ff0-3c951192dd7b-4.exe (.not file.) [0] =>PUP.PlusVid [MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-2706331780-303319812-4136672300-1001Core] (.Facebook Inc..) -- C:\Users\sébastien\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096] [MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-2706331780-303319812-4136672300-1001UA] (.Facebook Inc..) -- C:\Users\sébastien\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096] [MD5.00000000000000000000000000000000] [APT] [GoforFilesUpdate] (...) -- C:\Program Files (x86)\GoforFiles\GFFUpdater.exe (.not file.) [0] =>P2P.GoforFiles [MD5.8AA3B22B716A04AC8DD13318A40D708D] [APT] [HPCeeScheduleFors‚bastien] (.Hewlett-Packard.) -- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [95800] [MD5.8AA3B22B716A04AC8DD13318A40D708D] [APT] [HPCeeScheduleForSBASTIEN-HP$] (.Hewlett-Packard.) -- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [95800] [MD5.B7F55E2AE978D3D34F7876EE5D689AAE] [APT] [MirageAgent] (.CyberLink.) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488] [MD5.7A89177D2D3163773748AC335C0EFE73] [APT] [Rocket Updater] (...) -- C:\Users\sébastien\AppData\Roaming\ROCKET~1\UPDATE~1\UPDATE~1.exe [95232] =>PUP.RockTurner [MD5.CBB55C7BED11FE4F995159BCA9904A29] [APT] [SomotoUpdateCheckerAutoStart] (.Somoto.) -- C:\Users\sébastien\AppData\Local\FilesFrog Update Checker\update_checker.exe [208952] =>Adware.MegaSearch [MD5.87948212C71A773AEF4C68029BFAE924] [APT] [wp_update] (...) -- C:\Users\sébastien\AppData\Roaming\~jmyoesp.exe [493272] =>PUP.WpManager [MD5.C155A13687144076286989EF078112C2] [APT] [{01BEFB6A-35E0-4057-892F-6B7B40C6D7A5}] (.Nicolas Coolman.) -- C:\Program Files (x86)\ZHPDiag\ZHPhep.exe [1917440] [MD5.1E47F5A4CBB3221990409E655931EB91] [APT] [{11B30998-C6D6-437B-8DAC-C73918627085}] (.CyberGSM.) -- C:\Users\sébastien\Documents\code calculator\code calculator\Code Calculator 4.1.exe [401408] [MD5.C155A13687144076286989EF078112C2] [APT] [{BD1B0BE7-D78F-48B1-A8E1-E9CB2D07D272}] (.Nicolas Coolman.) -- C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe [1917440] [MD5.3E53CC4591B043C8D42FB3D771D55FCE] [APT] [HP Support Assistant Quick Start] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [542008] [MD5.3E53CC4591B043C8D42FB3D771D55FCE] [APT] [PC Health Analysis] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [542008] [MD5.16F1F09240540D9409DA192839C9D786] [APT] [Update Check] (.Hewlett-Packard Company.) -- C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [630584] [MD5.701C65A8DF4B7663FFA4A1032598DFE9] [APT] [WarrantyChecker_DeviceScan] (.Hewlett-Packard.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1586392] O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002] O39 - APT: APSnotifierPP1 - (...) -- C:\Windows\Tasks\APSnotifierPP1.job [378] =>PUP.AnyProtect O39 - APT: APSnotifierPP1 - (...) -- C:\Windows\System32\Tasks\APSnotifierPP1 [378] =>PUP.AnyProtect O39 - APT: APSnotifierPP2 - (...) -- C:\Windows\Tasks\APSnotifierPP2.job [376] =>PUP.AnyProtect O39 - APT: APSnotifierPP2 - (...) -- C:\Windows\System32\Tasks\APSnotifierPP2 [376] =>PUP.AnyProtect O39 - APT: APSnotifierPP3 - (...) -- C:\Windows\Tasks\APSnotifierPP3.job [376] =>PUP.AnyProtect O39 - APT: APSnotifierPP3 - (...) -- C:\Windows\System32\Tasks\APSnotifierPP3 [376] =>PUP.AnyProtect O39 - APT: bench-S-1-5-21-2706331780-303319812-4136672300-1001 - (...) -- C:\Windows\Tasks\bench-S-1-5-21-2706331780-303319812-4136672300-1001.job [352] =>PUP.GiganticSavings O39 - APT: bench-S-1-5-21-2706331780-303319812-4136672300-1001 - (...) -- C:\Windows\System32\Tasks\bench-S-1-5-21-2706331780-303319812-4136672300-1001 [352] =>PUP.GiganticSavings O39 - APT: da5fafb2-fe4a-4ffa-8ff0-3c951192dd7b-4 - (...) -- C:\Windows\Tasks\da5fafb2-fe4a-4ffa-8ff0-3c951192dd7b-4.job [2156] =>PUP.CrossRider O39 - APT: da5fafb2-fe4a-4ffa-8ff0-3c951192dd7b-4 - (...) -- C:\Windows\System32\Tasks\da5fafb2-fe4a-4ffa-8ff0-3c951192dd7b-4 [2156] =>PUP.CrossRider O39 - APT: FacebookUpdateTaskUserS-1-5-21-2706331780-303319812-4136672300-1001Core - (.Facebook Inc..) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2706331780-303319812-4136672300-1001Core.job [922] O39 - APT: FacebookUpdateTaskUserS-1-5-21-2706331780-303319812-4136672300-1001Core - (.Facebook Inc..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2706331780-303319812-4136672300-1001Core [922] O39 - APT: FacebookUpdateTaskUserS-1-5-21-2706331780-303319812-4136672300-1001UA - (.Facebook Inc..) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2706331780-303319812-4136672300-1001UA.job [944] O39 - APT: FacebookUpdateTaskUserS-1-5-21-2706331780-303319812-4136672300-1001UA - (.Facebook Inc..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2706331780-303319812-4136672300-1001UA [944] O39 - APT: - (..) -- C:\Windows\Tasks\HPCeeScheduleForSÉBASTIEN-HP$.job [352] O39 - APT: - (..) -- C:\Windows\System32\Tasks\HPCeeScheduleForSÉBASTIEN-HP$ [352] O39 - APT: APT: - (..) -- C:\Windows\Tasks\HPCeeScheduleForSÉBASTIEN-HP$.job [352] - (..) -- C:\Windows\Tasks\HPCeeScheduleForsébastien.job [348] O39 - APT: APT: - (..) -- C:\Windows\System32\Tasks\HPCeeScheduleForSÉBASTIEN-HP$ [352] - (..) -- C:\Windows\System32\Tasks\HPCeeScheduleForsébastien [348] O39 - APT: Rocket Updater - (...) -- C:\Windows\Tasks\Rocket Updater.job [306] =>PUP.RockTurner O39 - APT: Rocket Updater - (...) -- C:\Windows\System32\Tasks\Rocket Updater [306] =>PUP.RockTurner ~ Scheduled Task: 36 Scanned in 00mn 06s ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll =>.Microsoft Corporation O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll O40 - ASIC: Internet Explorer [64Bits] - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe =>.Microsoft Corporation O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe =>.Microsoft Corporation O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll ~ Active Setup: 10 Scanned in 00mn 00s ---\\ Pilotes lancés au démarrage du système (O41) O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys O41 - Driver: (avipbb) . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) - C:\Windows\System32\DRIVERS\avipbb.sys O41 - Driver: (avkmgr) . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) - C:\Windows\System32\DRIVERS\avkmgr.sys O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\drivers\blbdrive.sys O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys ~ Drivers: 66 Scanned in 00mn 00s ---\\ Logiciels installés (O42) O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM][64Bits] -- {503F672D-6C84-448A-8F8F-4BC35AC83441} O42 - Logiciel: AMD Accelerated Video Transcoding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {F8E65951-694F-5F50-21C2-391B46B26653} O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {9D1400EC-5703-3983-53B7-AEFB8BFD1CFA} O42 - Logiciel: AMD Steady Video Plug-In - (.AMD.) [HKLM][64Bits] -- {5E015E15-F7AD-3379-523F-AD63C0CB9E71} O42 - Logiciel: Adobe Acrobat XI Pro - (.Adobe Systems.) [HKLM][64Bits] -- {AC76BA86-1033-FFFF-7760-000000000006} O42 - Logiciel: Adobe Download Assistant - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- com.adobe.downloadassistant.AdobeDownloadAssistant O42 - Logiciel: Adobe Download Assistant - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {5E21B617-F52E-BB10-92F9-C8AB2C799A8A} O42 - Logiciel: Adobe Flash Player 13 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 13 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Reader XI (11.0.06) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AB0000000001} O42 - Logiciel: Adobe Shockwave Player 11.6 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Shockwave Player O42 - Logiciel: ArcSoft PhotoStudio 5.5 - (.ArcSoft.) [HKLM][64Bits] -- {85309D89-7BE9-4094-BB17-24999C6118FC} O42 - Logiciel: Atheros Driver Installation Program - (.Atheros.) [HKLM][64Bits] -- {C3A32068-8AB1-4327-BB16-BED9C6219DC7} O42 - Logiciel: Avira Free Antivirus v14.0.4.672 - (.Avira.) [HKLM][64Bits] -- Avira AntiVir Desktop O42 - Logiciel: Avira SearchFree Toolbar v12.15.1.462 - (.APN, LLC.) [HKLM][64Bits] -- {41564952-412D-5637-4300-A758B70C0F01} =>Toolbar.Avira O42 - Logiciel: Avira v1.1.16.30000 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- {356ECF26-71E8-4F4A-A197-59C91657DD43} O42 - Logiciel: Avira v1.1.16.30000 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- {89ef9b48-b56b-48d8-b5c1-4eb9a5ca50cb} O42 - Logiciel: Bejeweled 3 - (.WildTangent.) [HKLM][64Bits] -- WTA-af4017ce-5428-45e7-80b5-1b61c0e76d1b O42 - Logiciel: Browser Helper Object - (.APC Soft.) [HKLM][64Bits] -- Browser Helper Object1.4 O42 - Logiciel: Bubble Dock (remove only) - (.Nosibay.) [HKCU][64Bits] -- Bubble Dock =>PUP.BubbleDock O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner O42 - Logiciel: Cake Mania - (.WildTangent.) [HKLM][64Bits] -- WTA-f0888034-2292-4d4e-8d52-70944cb167fb O42 - Logiciel: Canon MP Navigator 3.0 - (...) [HKLM][64Bits] -- MP Navigator 3.0 O42 - Logiciel: Canon MP160 - (...) [HKLM][64Bits] -- {1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP160 O42 - Logiciel: Canon Utilities Easy-PhotoPrint - (...) [HKLM][64Bits] -- Easy-PhotoPrint O42 - Logiciel: Cartoon Maker - (...) [HKLM][64Bits] -- Cartoon Maker1.7 =>PUP.Babylon O42 - Logiciel: Catalyst Control Center - Branding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {31BF9CD1-A904-43B5-A236-53E5E908AD0E} O42 - Logiciel: Chuzzle Deluxe - (.WildTangent.) [HKLM][64Bits] -- WTA-d97cbfb8-cc92-45b4-b3ef-c7780ebf6c1b O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {64BF0187-F3D2-498B-99EA-163AF9AE6EC9} O42 - Logiciel: Cisco LEAP Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {51C7AD07-C3F6-4635-8E8A-231306D810FE} O42 - Logiciel: Cisco PEAP Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {ED5776D5-59B4-46B7-AF81-5F2D94D7C640} O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6} O42 - Logiciel: Cradle of Rome 2 - (.WildTangent.) [HKLM][64Bits] -- WTA-cd2fc990-a764-4826-bb7d-99481c623b29 O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D} O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D} O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} O42 - Logiciel: Digital Camera Driver - (...) [HKLM][64Bits] -- Digital Camera Driver O42 - Logiciel: Drivers Manager v3.0 - (.Avanquest Software.) [HKLM][64Bits] -- Drivers Manager_is1 O42 - Logiciel: ESU for Microsoft Windows 7 SP1 - (.Hewlett-Packard.) [HKLM][64Bits] -- {768A6276-5822-489C-8A2B-67190F745655} O42 - Logiciel: Easy-WebPrint - (...) [HKLM][64Bits] -- Easy-WebPrint O42 - Logiciel: Enregistrement utilisateur de Canon MP160 - (...) [HKLM][64Bits] -- Enregistrement utilisateur de Canon MP160 =>.Canon Inc O42 - Logiciel: Evernote v. 4.5.2 - (.Evernote Corp..) [HKLM][64Bits] -- {8CE152BA-1D16-11E1-867D-984BE15F174E} O42 - Logiciel: FATE - (.WildTangent.) [HKLM][64Bits] -- WTA-53e5d5f3-e868-40f1-b464-73c71b802fc4 O42 - Logiciel: FLV Player (remove only) - (...) [HKLM][64Bits] -- FLVM Player O42 - Logiciel: FLV Player - (.Somoto Ltd..) [HKCU][64Bits] -- FLV Player =>Adware.MegaSearch O42 - Logiciel: Facebook Video Calling 2.0.0.447 - (.Skype Limited.) [HKLM][64Bits] -- {8DF41A9F-FE13-43E8-A003-5F9B55A011EE} O42 - Logiciel: Farm Frenzy - (.WildTangent.) [HKLM][64Bits] -- WTA-a81c1051-5fd8-463e-bec8-66bc65a0a496 O42 - Logiciel: Farmscapes - (.WildTangent.) [HKLM][64Bits] -- WTA-e525ebb6-0e0b-451c-a94d-75f96036c7a4 O42 - Logiciel: FilesFrog Update Checker - (...) [HKLM][64Bits] -- FilesFrog Update Checker =>Adware.MegaSearch O42 - Logiciel: Final Drive Fury - (.WildTangent.) [HKLM][64Bits] -- WTA-7ce7c700-9b5f-43f6-a26f-c18a010d984b O42 - Logiciel: Fishdom (TM) 2 - (.WildTangent.) [HKLM][64Bits] -- WTA-5ad380cc-592b-4cb9-9b5f-78f2857e657d O42 - Logiciel: HP 3D DriveGuard - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {F9E399CB-046F-45FD-A67F-CF399E2128E4} O42 - Logiciel: HP Auto - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {CC4D56B7-6F18-470B-8734-ABCD75BCF4F1} O42 - Logiciel: HP Client Services - (.Hewlett-Packard.) [HKLM][64Bits] -- {2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2} O42 - Logiciel: HP CoolSense - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {11AF9A96-6D83-4C3B-8DCB-16EA2A358E3F} O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM][64Bits] -- {07FA4960-B038-49EB-891B-9F95930AA544} O42 - Logiciel: HP Documentation - (.Hewlett-Packard.) [HKLM][64Bits] -- {16652164-D80F-4EE6-90C6-2E8D5D06092A} O42 - Logiciel: HP Games - (.WildTangent.) [HKLM][64Bits] -- WildTangent hp Master Uninstall O42 - Logiciel: HP Launch Box - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {5A847522-375C-4D05-BD3D-88C450CC047F} O42 - Logiciel: HP On Screen Display - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {ED1BD69A-07E3-418C-91F1-D856582581BF} O42 - Logiciel: HP Power Manager - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {D8BCE5B9-67CF-4F3F-93AE-3ACC754C72EB} O42 - Logiciel: HP Quick Launch - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {53B17A98-5BF0-40BC-AAFF-850A357975AC} O42 - Logiciel: HP Recovery Manager - (.Hewlett-Packard.) [HKLM][64Bits] -- {DBCD5E64-7379-4648-9444-8A6558DCB614} O42 - Logiciel: HP Security Assistant - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {F9DF0B5D-554B-45D2-8698-7C467FAF4BCA} O42 - Logiciel: HP Setup - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1} O42 - Logiciel: HP Setup Manager - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {AE856388-AFAD-4753-81DF-D96B19D0A17C} O42 - Logiciel: HP Software Framework - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {98D5A5FA-1AA3-4CBE-B26C-A737E20F8A6D} O42 - Logiciel: HP Support Assistant - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {E35A3B13-78CD-4967-8AC8-AA9FDA693EDE} =>.Hewlett-Packard Co O42 - Logiciel: Hewlett-Packard ACLM.NET v1.2.2.3 - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {6F340107-F9AA-47C6-B54C-C3A19F11553F} O42 - Logiciel: IDT Audio - (.IDT.) [HKLM][64Bits] -- {E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001} O42 - Logiciel: Insaniquarium Deluxe - (.WildTangent.) [HKLM][64Bits] -- WTA-b104b1eb-d914-4fb9-b5a8-4896e8ef6ab1 O42 - Logiciel: Jewel Match 3 - (.WildTangent.) [HKLM][64Bits] -- WTA-fa269f46-d387-477c-a47e-228e24658b10 O42 - Logiciel: Jewel Quest II - (.WildTangent.) [HKLM][64Bits] -- WTA-54638065-df56-46f0-9f78-54a59f8bc281 O42 - Logiciel: Jewel Quest Solitaire 2 - (.WildTangent.) [HKLM][64Bits] -- WTA-a9f2c248-77c1-436d-a4b3-d47354327eed O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4} O42 - Logiciel: LauncherMA - (.Micro Application.) [HKLM][64Bits] -- {C06EFB22-B5DB-46C5-9215-BCB5C19C0858} O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: Magic Desktop - (.EasyBits Software AS.) [HKLM][64Bits] -- EasyBits Magic Desktop =>.EasyBits Software AS O42 - Logiciel: Mahjongg Artifacts - (.WildTangent.) [HKLM][64Bits] -- WTA-32adb524-7e7b-47a3-813c-78589f5c4f46 O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM][64Bits] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E} O42 - Logiciel: Messenger Companion - (.Microsoft Corporation.) [HKLM][64Bits] -- {50816F92-1652-4A7C-B9BC-48F682742C4B} O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM][64Bits] -- {BFAE8D5B-F918-486F-B74E-90762DF11C5C} O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Security Client O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: Microsoft Works 6-9 Converter - (.Microsoft Corporation.) [HKLM][64Bits] -- {95140000-0137-040C-0000-0000000FF1CE} O42 - Logiciel: Mozilla Firefox 30.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 30.0 (x86 fr) O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService O42 - Logiciel: Mystery of Mortlake Mansion - (.WildTangent.) [HKLM][64Bits] -- WTA-c798913e-c1cd-4ecc-a501-2402a7a127f2 O42 - Logiciel: PhotoRecoveryPro 2.1.5 - (.LionSea SoftWare.) [HKLM][64Bits] -- {E3CB9CD4-20DE-4ED1-B6ED-7F7F3F07C097}_is1 O42 - Logiciel: Plants vs. Zombies - Game of the Year - (.WildTangent.) [HKLM][64Bits] -- WTA-cf3a27b5-e113-4907-b3d5-e30cf445d860 O42 - Logiciel: Polar Bowler - (.WildTangent.) [HKLM][64Bits] -- WTA-0fe23654-4f42-46a2-80ac-4881c0ccea8a O42 - Logiciel: QuickShare - (.Linkury Inc..) [HKLM][64Bits] -- {11D4FAA0-A577-4FA8-B24E-D24283D861D1} =>PUP.QuickShare O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} O42 - Logiciel: Realtek PCIE Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {C1594429-8296-4652-BF54-9DBE4932A44C} O42 - Logiciel: ScanSoft OmniPage SE 4.0 - (.ScanSoft, Inc..) [HKLM][64Bits] -- {29D851C2-048C-4B5E-8D1F-25D473342BB5} O42 - Logiciel: Search-Results Toolbar - (.APN LLC.) [HKLM][64Bits] -- ilividtoolbargaw =>Adware.Bandoo O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM][64Bits] -- KB931906 O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM][64Bits] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} O42 - Logiciel: Skype Click to Call - (.Microsoft Corporation.) [HKLM][64Bits] -- {BB285C9F-C821-4770-8970-56C4AB52C87E} O42 - Logiciel: Skype™ 6.16 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7} O42 - Logiciel: Sony Mobile Update Engine - (.Sony Mobile Communications AB.) [HKLM][64Bits] -- Update Engine O42 - Logiciel: Sony PC Companion 2.10.211 - (.Sony.) [HKLM][64Bits] -- {F09EF8F2-0976-42C1-8D9D-8DF78337C6E3} O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey O42 - Logiciel: Torchlight - (.WildTangent.) [HKLM][64Bits] -- WTA-5762d597-fe43-455d-941d-d6b7f45a1199 O42 - Logiciel: Update Installer for WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App O42 - Logiciel: Virtual Families - (.WildTangent.) [HKLM][64Bits] -- WTA-c4e950f8-feaa-4857-b63d-59e1b5b3e115 O42 - Logiciel: Virtual Villagers 4 - The Tree of Life - (.WildTangent.) [HKLM][64Bits] -- WTA-6462bdce-da52-4c43-94f1-d09ef3be5ae3 O42 - Logiciel: Webplayer - (.Kreapixel.) [HKLM][64Bits] -- {F750DB0E-D452-3108-63C9-FE16BC686741} =>Adware.SocialSkinz O42 - Logiciel: Wedding Dash - (.WildTangent.) [HKLM][64Bits] -- WTA-227866d5-f671-4cfd-ae97-2e7091152d65 O42 - Logiciel: WildTangent Games App (HP Games) - (.WildTangent.) [HKLM][64Bits] -- {70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp O42 - Logiciel: Zuma's Revenge - (.WildTangent.) [HKLM][64Bits] -- WTA-2bf45398-c64e-4113-88f0-eadbe8eea399 O42 - Logiciel: opensource - (.Your Company Name.) [HKLM][64Bits] -- {3677D4D8-E5E0-49FC-B86E-06541CF00BBE} O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726} ~ Logic: 94 Scanned in 00mn 00s ---\\ HKCU & HKLM Software Keys [HKCU\Software\35497InstEnd] [HKCU\Software\5308d8cb63fec41] =>Hijacker.Eazel [HKCU\Software\APN DTX] =>Toolbar.Ask [HKCU\Software\ATI] [HKCU\Software\Adobe] [HKCU\Software\AnyProtect] =>PUP.AnyProtect [HKCU\Software\AppDataLow\Software\AppDataLow] [HKCU\Software\AppDataLow\Software\BlockAndSurf] =>PUP.BlockAndSurf [HKCU\Software\AppDataLow\Software\Crossrider] =>PUP.CrossRider [HKCU\Software\AppDataLow\Software\Re_markit] =>PUP.ReMarkIt [HKCU\Software\AppDataLow\Software\ilividtoolbargaw] =>Adware.Bandoo [HKCU\Software\AppDataLow] [HKCU\Software\AskPartnerNetwork] [HKCU\Software\Avira] [HKCU\Software\BVRP Software] [HKCU\Software\BabylonToolbar] =>PUP.Babylon [HKCU\Software\Canon] [HKCU\Software\Chromium] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\CyberLink] [HKCU\Software\DataMngr] =>PUP.Datamngr [HKCU\Software\DataMngr_Toolbar] =>PUP.Datamngr [HKCU\Software\Drivers Manager] [HKCU\Software\Facebook] [HKCU\Software\GoforFiles] =>P2P.GoforFiles [HKCU\Software\Hewlett-Packard] [HKCU\Software\IM Providers] [HKCU\Software\InstallCore] =>Adware.InstallCore [HKCU\Software\JavaSoft] [HKCU\Software\Licenses] [HKCU\Software\LogiShrd] [HKCU\Software\Macromedia] [HKCU\Software\MediaChance] [HKCU\Software\MozillaPlugins] [HKCU\Software\Mozilla] [HKCU\Software\Netscape] [HKCU\Software\Norton] [HKCU\Software\Nosibay] [HKCU\Software\ODBC] [HKCU\Software\PhotoRecoveryPro] [HKCU\Software\PhotoRecoveryPro_Init] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\Rocket Browser] =>PUP.RockTurner [HKCU\Software\RocketUpdater] =>PUP.RockTurner [HKCU\Software\ScanSoft] [HKCU\Software\SkypeRS] [HKCU\Software\Skype] [HKCU\Software\SmartbarBackup] =>Hijacker.SmartBar [HKCU\Software\SmartbarLog] =>Hijacker.SmartBar [HKCU\Software\Smartbar] =>Hijacker.SmartBar [HKCU\Software\Softonic] =>Toolbar.Conduit [HKCU\Software\Somoto] =>Adware.MegaSearch [HKCU\Software\Sony] [HKCU\Software\Stellar] [HKCU\Software\Symantec] [HKCU\Software\Synaptics] [HKCU\Software\Systweak] [HKCU\Software\Trolltech] [HKCU\Software\TutoTag] =>PUP.AgenceExclusive [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\WebPlayer] [HKCU\Software\Wow6432Node] [HKCU\Software\ZebHelpProcess Helper] [HKCU\Software\apple] [HKCU\Software\freesofttoday] =>Adware.FreeSoftToday [HKCU\Software\globalUpdate] [HKCU\Software\iLivid] =>Adware.Bandoo [HKCU\Software\ilividtoolbargaw] =>Adware.Bandoo [HKCU\Software\lollipop] =>Adware.Lollipop [HKLM\Software\AMD] [HKLM\Software\ATI Technologies] [HKLM\Software\ATI] [HKLM\Software\Adobe] [HKLM\Software\AskPartnerNetwork] [HKLM\Software\Atheros] [HKLM\Software\CBSTEST] [HKLM\Software\CXT] [HKLM\Software\Canon] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\Cyberlink] [HKLM\Software\Dolby] [HKLM\Software\HPQ] [HKLM\Software\Hewlett-Packard] [HKLM\Software\IDT] [HKLM\Software\IM Providers] [HKLM\Software\Iminent] =>Adware.IMBooster [HKLM\Software\InstalledOptions] [HKLM\Software\Intel] [HKLM\Software\Khronos] [HKLM\Software\Logishrd] [HKLM\Software\Macromedia] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\Norton] [HKLM\Software\ODBC] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\RTLSetup] [HKLM\Software\Realtek Semiconductor Corp.] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\SRS Labs] [HKLM\Software\Sonic] [HKLM\Software\Sony Mobile] [HKLM\Software\Speedchecker Limited] [HKLM\Software\Synaptics] [HKLM\Software\Wow6432Node\5308d8cb63fec41] =>Hijacker.Eazel [HKLM\Software\Wow6432Node\AMD] [HKLM\Software\Wow6432Node\ATI Technologies] [HKLM\Software\Wow6432Node\ATI] [HKLM\Software\Wow6432Node\Adobe] [HKLM\Software\Wow6432Node\AdvertisingSupport] =>PUP.AdvertisingSupport [HKLM\Software\Wow6432Node\AppDataLow] [HKLM\Software\Wow6432Node\ArcSoft] [HKLM\Software\Wow6432Node\AskPartnerNetwork] [HKLM\Software\Wow6432Node\Atheros] [HKLM\Software\Wow6432Node\Avira] [HKLM\Software\Wow6432Node\Babylon] =>PUP.Babylon [HKLM\Software\Wow6432Node\Boxore] =>Adware.Boxore [HKLM\Software\Wow6432Node\Canon] [HKLM\Software\Wow6432Node\Caphyon] [HKLM\Software\Wow6432Node\Classes] [HKLM\Software\Wow6432Node\Clients] [HKLM\Software\Wow6432Node\CyberLink] [HKLM\Software\Wow6432Node\DataMngr] =>PUP.Datamngr [HKLM\Software\Wow6432Node\EasyBits] [HKLM\Software\Wow6432Node\Evernote] [HKLM\Software\Wow6432Node\FrEeSoFtOdAy] [HKLM\Software\Wow6432Node\GlobalUpdate] [HKLM\Software\Wow6432Node\GoforFiles] =>P2P.GoforFiles [HKLM\Software\Wow6432Node\Google] [HKLM\Software\Wow6432Node\Hewlett-Packard] [HKLM\Software\Wow6432Node\IDT] [HKLM\Software\Wow6432Node\IM Providers] [HKLM\Software\Wow6432Node\Iminent] =>Adware.IMBooster [HKLM\Software\Wow6432Node\InstallShield] [HKLM\Software\Wow6432Node\Insyde] [HKLM\Software\Wow6432Node\Intel] [HKLM\Software\Wow6432Node\JavaSoft] [HKLM\Software\Wow6432Node\Khronos] [HKLM\Software\Wow6432Node\Licenses] [HKLM\Software\Wow6432Node\MAXSOFT-OCRON] [HKLM\Software\Wow6432Node\Macromedia] [HKLM\Software\Wow6432Node\MozillaPlugins] [HKLM\Software\Wow6432Node\Mozilla] [HKLM\Software\Wow6432Node\ODBC] [HKLM\Software\Wow6432Node\Policies] [HKLM\Software\Wow6432Node\ProtectedBrowsing] [HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.] [HKLM\Software\Wow6432Node\Realtek] [HKLM\Software\Wow6432Node\RegisteredApplications] [HKLM\Software\Wow6432Node\ScanSoft] [HKLM\Software\Wow6432Node\Skype] [HKLM\Software\Wow6432Node\Software] [HKLM\Software\Wow6432Node\Sony Mobile] [HKLM\Software\Wow6432Node\Sony] [HKLM\Software\Wow6432Node\Stellar Information Systems Ltd.] [HKLM\Software\Wow6432Node\Symantec] [HKLM\Software\Wow6432Node\Systweak] [HKLM\Software\Wow6432Node\Tutorials] =>PUP.AgenceExclusive [HKLM\Software\Wow6432Node\Vittalia] =>PUP.Vittalia [HKLM\Software\Wow6432Node\Volatile] [HKLM\Software\Wow6432Node\WildTangent] [HKLM\Software\Wow6432Node\Win32 Services] [HKLM\Software\Wow6432Node\WorldUnlock Codes Calculator] [HKLM\Software\Wow6432Node\Wow6432Node] [HKLM\Software\Wow6432Node\X-AVCSD] [HKLM\Software\Wow6432Node\aartemisSoftware] =>PUP.AArtemis [HKLM\Software\Wow6432Node\iLividSRTB] =>Adware.Bandoo [HKLM\Software\Wow6432Node\mozilla.org] [HKLM\Software\Wow6432Node\supWPM] =>PUP.WpManager [HKLM\Software\Wow6432Node] ~ Key Software: 387 Scanned in 00mn 00s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 16/12/2013 - 23:29:31 - [] ----D C:\Program Files (x86)\Adobe O43 - CFD: 28/02/2013 - 08:29:05 - [] ----D C:\Program Files (x86)\Adobe Download Assistant O43 - CFD: 25/05/2012 - 02:57:36 - [] ----D C:\Program Files (x86)\AMD O43 - CFD: 25/05/2012 - 02:57:33 - [] ----D C:\Program Files (x86)\AMD APP O43 - CFD: 07/01/2013 - 18:32:31 - [] ----D C:\Program Files (x86)\ArcSoft O43 - CFD: 05/07/2014 - 08:36:51 - [] ----D C:\Program Files (x86)\AskPartnerNetwork O43 - CFD: 25/05/2012 - 03:02:14 - [] ----D C:\Program Files (x86)\Atheros O43 - CFD: 25/05/2012 - 02:57:21 - [] ----D C:\Program Files (x86)\ATI Technologies O43 - CFD: 05/07/2014 - 08:16:29 - [] ----D C:\Program Files (x86)\Avira O43 - CFD: 04/07/2014 - 12:08:23 - [] ----D C:\Program Files (x86)\Bench =>PUP.GiganticSavings O43 - CFD: 08/02/2013 - 18:41:59 - [] ----D C:\Program Files (x86)\Browser Helper Object O43 - CFD: 07/01/2013 - 19:09:46 - [] ----D C:\Program Files (x86)\Canon O43 - CFD: 01/11/2013 - 09:27:50 - [] ----D C:\Program Files (x86)\Cartoon Maker =>PUP.Babylon O43 - CFD: 25/05/2012 - 03:01:51 - [] ----D C:\Program Files (x86)\Cisco O43 - CFD: 04/07/2014 - 18:25:40 - [] ----D C:\Program Files (x86)\Common Files O43 - CFD: 03/07/2014 - 11:02:48 - [] ----D C:\Program Files (x86)\CostMin =>PUP.CostMin O43 - CFD: 25/05/2012 - 03:09:04 - [] ----D C:\Program Files (x86)\CyberLink O43 - CFD: 21/09/2013 - 12:12:02 - [] ----D C:\Program Files (x86)\Digital Camera O43 - CFD: 22/09/2013 - 12:48:14 - [] ----D C:\Program Files (x86)\Drivers Manager O43 - CFD: 25/05/2012 - 03:05:58 - [] ----D C:\Program Files (x86)\EasyBits For Kids O43 - CFD: 01/01/2011 - 01:15:51 - [] ----D C:\Program Files (x86)\Evernote O43 - CFD: 06/02/2014 - 10:19:09 - [] ----D C:\Program Files (x86)\FLV Video Player O43 - CFD: 05/07/2014 - 12:54:25 - [] ----D C:\Program Files (x86)\FLVM Player O43 - CFD: 05/07/2014 - 16:58:02 - [] ----D C:\Program Files (x86)\globalUpdate O43 - CFD: 21/01/2014 - 09:36:31 - [] ----D C:\Program Files (x86)\Hewlett-Packard O43 - CFD: 03/07/2014 - 11:02:48 - [] ----D C:\Program Files (x86)\HomeTab =>PUP.CertifiedToolbar O43 - CFD: 01/01/2011 - 01:23:54 - [] ----D C:\Program Files (x86)\HP Games O43 - CFD: 05/07/2014 - 12:01:20 - [] --H-D C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 12/06/2014 - 11:59:44 - [] ----D C:\Program Files (x86)\Internet Explorer O43 - CFD: 01/11/2013 - 08:40:26 - [] ----D C:\Program Files (x86)\LinkSwift =>PUP.LinkSwift O43 - CFD: 08/10/2013 - 13:23:00 - [] ----D C:\Program Files (x86)\Micro Application O43 - CFD: 06/02/2014 - 11:03:47 - [0] ----D C:\Program Files (x86)\Microsoft O43 - CFD: 12/09/2013 - 18:00:36 - [] ----D C:\Program Files (x86)\Microsoft Application Virtualization Client O43 - CFD: 09/01/2013 - 09:42:56 - [] ----D C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2 O43 - CFD: 09/01/2013 - 12:37:28 - [] ----D C:\Program Files (x86)\Microsoft Office O43 - CFD: 04/04/2014 - 08:37:54 - [] ----D C:\Program Files (x86)\Microsoft Security Client O43 - CFD: 15/03/2014 - 11:51:57 - [] ----D C:\Program Files (x86)\Microsoft Silverlight O43 - CFD: 01/01/2011 - 01:31:00 - [] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition O43 - CFD: 12/01/2013 - 10:46:10 - [] ----D C:\Program Files (x86)\Microsoft Works O43 - CFD: 11/01/2013 - 11:36:15 - [] ----D C:\Program Files (x86)\Microsoft.NET O43 - CFD: 01/11/2013 - 09:27:51 - [] ----D C:\Program Files (x86)\Movies Toolbar =>PUP.MoviesToolbar O43 - CFD: 03/07/2014 - 11:00:17 - [] ----D C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 03/07/2014 - 11:02:49 - [] ----D C:\Program Files (x86)\Mozilla Maintenance Service O43 - CFD: 14/07/2009 - 07:32:38 - [] ----D C:\Program Files (x86)\MSBuild O43 - CFD: 28/02/2013 - 10:30:02 - [] ----D C:\Program Files (x86)\MSECache O43 - CFD: 09/01/2013 - 09:43:02 - [0] ----D C:\Program Files (x86)\MSXML 4.0 O43 - CFD: 03/07/2014 - 11:02:50 - [] ----D C:\Program Files (x86)\MyPC Backup =>PUP.MyPCBackup O43 - CFD: 03/07/2014 - 11:17:53 - [] ----D C:\Program Files (x86)\NetCrawl =>PUP.NetCrawl O43 - CFD: 03/07/2014 - 11:02:50 - [] ----D C:\Program Files (x86)\Nosibay O43 - CFD: 06/01/2013 - 19:16:25 - [] R---D C:\Program Files (x86)\Online Services O43 - CFD: 28/05/2013 - 17:04:56 - [] ----D C:\Program Files (x86)\PhotoRecoveryPro O43 - CFD: 04/07/2014 - 18:37:27 - [0] ----D C:\Program Files (x86)\predm O43 - CFD: 25/05/2012 - 03:00:02 - [] ----D C:\Program Files (x86)\Realtek O43 - CFD: 14/07/2009 - 07:32:38 - [] ----D C:\Program Files (x86)\Reference Assemblies O43 - CFD: 03/07/2014 - 11:02:47 - [] ----D C:\Program Files (x86)\SafetySearch O43 - CFD: 07/01/2013 - 18:35:48 - [] ----D C:\Program Files (x86)\ScanSoft O43 - CFD: 01/11/2013 - 09:26:53 - [] ----D C:\Program Files (x86)\Search Results Toolbar =>PUP.SearchResults O43 - CFD: 31/05/2014 - 10:05:41 - [] R---D C:\Program Files (x86)\Skype O43 - CFD: 03/07/2014 - 11:02:47 - [] ----D C:\Program Files (x86)\SmartSaver+ 3 =>PUP.CrossRider O43 - CFD: 27/03/2013 - 10:52:01 - [] ----D C:\Program Files (x86)\Software O43 - CFD: 05/07/2014 - 12:01:20 - [] ----D C:\Program Files (x86)\Sony O43 - CFD: 03/07/2014 - 11:52:00 - [0] ----D C:\Program Files (x86)\Sony Ericsson O43 - CFD: 05/07/2014 - 12:05:47 - [] ----D C:\Program Files (x86)\Sony Mobile O43 - CFD: 25/05/2012 - 03:12:31 - [] ----D C:\Program Files (x86)\SymSilent O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information O43 - CFD: 29/10/2013 - 09:47:07 - [] ----D C:\Program Files (x86)\VideoLAN O43 - CFD: 16/12/2013 - 22:27:12 - [] ----D C:\Program Files (x86)\Webplayer O43 - CFD: 24/03/2013 - 14:24:32 - [] ----D C:\Program Files (x86)\WildTangent Games O43 - CFD: 11/07/2013 - 07:55:39 - [] ----D C:\Program Files (x86)\Windows Defender O43 - CFD: 06/02/2014 - 11:10:09 - [] ----D C:\Program Files (x86)\Windows Live O43 - CFD: 12/01/2013 - 21:23:26 - [] ----D C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation O43 - CFD: 13/12/2013 - 12:05:14 - [] ----D C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation O43 - CFD: 14/07/2009 - 07:32:38 - [] ----D C:\Program Files (x86)\Windows NT O43 - CFD: 12/01/2013 - 21:23:26 - [] ----D C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 21/11/2010 - 05:31:38 - [] ----D C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 12/01/2013 - 21:23:26 - [] ----D C:\Program Files (x86)\Windows Sidebar O43 - CFD: 06/07/2014 - 15:11:25 - [] ----D C:\Program Files (x86)\ZHPDiag =>.Nicolas Coolman O43 - CFD: 28/02/2013 - 08:50:39 - [] ----D C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 25/05/2012 - 02:57:40 - [] ----D C:\Program Files (x86)\Common Files\ATI Technologies O43 - CFD: 15/05/2014 - 07:43:04 - [] ----D C:\Program Files (x86)\Common Files\DESIGNER O43 - CFD: 07/01/2013 - 18:36:44 - [] ----D C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 12/01/2013 - 10:46:15 - [] ----D C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD: 07/01/2013 - 18:36:45 - [] ----D C:\Program Files (x86)\Common Files\ScanSoft Shared O43 - CFD: 14/07/2009 - 05:20:08 - [] ----D C:\Program Files (x86)\Common Files\Services O43 - CFD: 31/05/2014 - 10:05:07 - [] ----D C:\Program Files (x86)\Common Files\Skype O43 - CFD: 14/07/2009 - 05:20:08 - [] ----D C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 31/03/2013 - 11:20:02 - [0] ----D C:\Program Files (x86)\Common Files\Symantec Shared O43 - CFD: 12/01/2013 - 21:23:26 - [] ----D C:\Program Files (x86)\Common Files\System O43 - CFD: 01/01/2011 - 01:27:39 - [] ----D C:\Program Files (x86)\Common Files\Windows Live O43 - CFD: 03/07/2014 - 10:50:45 - [] ----D C:\ProgramData\a22024690b16694c O43 - CFD: 24/09/2013 - 18:07:34 - [] ----D C:\ProgramData\Adobe O43 - CFD: 25/05/2012 - 02:56:27 - [] ----D C:\ProgramData\AMD O43 - CFD: 02/07/2014 - 06:44:18 - [] ----D C:\ProgramData\APN O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Application Data O43 - CFD: 05/07/2014 - 08:36:51 - [] ----D C:\ProgramData\AskPartnerNetwork O43 - CFD: 25/05/2012 - 03:02:11 - [] ----D C:\ProgramData\Atheros O43 - CFD: 25/05/2012 - 03:18:49 - [] ----D C:\ProgramData\ATI O43 - CFD: 05/07/2014 - 08:16:27 - [] ----D C:\ProgramData\Avira O43 - CFD: 08/02/2013 - 18:42:05 - [0] ----D C:\ProgramData\Babylon =>PUP.Babylon O43 - CFD: 26/03/2013 - 19:25:33 - [0] ----D C:\ProgramData\Browser Manager O43 - CFD: 06/01/2013 - 19:14:52 - [] -SH-D C:\ProgramData\Bureau O43 - CFD: 07/01/2013 - 18:30:10 - [] --H-D C:\ProgramData\CanonBJ O43 - CFD: 03/07/2014 - 11:02:46 - [] ----D C:\ProgramData\CostMin =>PUP.CostMin O43 - CFD: 25/01/2013 - 21:10:43 - [] ----D C:\ProgramData\CyberLink O43 - CFD: 18/12/2013 - 18:06:58 - [0] ----D C:\ProgramData\Datamngr =>PUP.Datamngr O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Desktop O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Documents O43 - CFD: 10/12/2013 - 15:48:05 - [] ----D C:\ProgramData\Easybits Magic Desktop for HP O43 - CFD: 06/01/2013 - 19:14:52 - [] -SH-D C:\ProgramData\Favoris O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Favorites O43 - CFD: 21/01/2014 - 09:33:28 - [] ----D C:\ProgramData\Hewlett-Packard O43 - CFD: 07/01/2013 - 18:37:02 - [] ----D C:\ProgramData\InstallShield O43 - CFD: 06/01/2013 - 19:14:52 - [] -SH-D C:\ProgramData\Menu Démarrer O43 - CFD: 08/10/2013 - 13:22:54 - [] ----D C:\ProgramData\Micro Application O43 - CFD: 06/02/2014 - 11:24:17 - [] -S--D C:\ProgramData\Microsoft O43 - CFD: 12/06/2014 - 07:08:02 - [] ----D C:\ProgramData\Microsoft Help O43 - CFD: 06/01/2013 - 19:14:52 - [] -SH-D C:\ProgramData\Modèles O43 - CFD: 06/01/2013 - 20:58:39 - [] ----D C:\ProgramData\Mozilla O43 - CFD: 31/03/2013 - 14:29:08 - [] ----D C:\ProgramData\Norton O43 - CFD: 25/05/2012 - 03:09:39 - [] ----D C:\ProgramData\NortonInstaller O43 - CFD: 05/07/2014 - 08:16:16 - [] ----D C:\ProgramData\Package Cache O43 - CFD: 04/07/2014 - 11:25:58 - [] ----D C:\ProgramData\PC1Data O43 - CFD: 28/02/2013 - 08:50:39 - [] ----D C:\ProgramData\regid.1986-12.com.adobe O43 - CFD: 07/01/2013 - 18:37:03 - [] ----D C:\ProgramData\ScanSoft O43 - CFD: 31/05/2014 - 10:05:15 - [] ----D C:\ProgramData\Skype O43 - CFD: 27/03/2013 - 10:52:01 - [] ----D C:\ProgramData\Software =>Adware.Boxore O43 - CFD: 05/07/2014 - 12:01:20 - [] ----D C:\ProgramData\Sony O43 - CFD: 03/07/2014 - 11:52:00 - [0] ----D C:\ProgramData\Sony Ericsson O43 - CFD: 05/07/2014 - 12:05:47 - [] ----D C:\ProgramData\Sony Mobile O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Start Menu O43 - CFD: 25/05/2012 - 03:18:48 - [] ----D C:\ProgramData\Synaptics O43 - CFD: 24/09/2013 - 17:20:32 - [] ---AD C:\ProgramData\Temp O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Templates O43 - CFD: 08/01/2013 - 09:06:58 - [] ----D C:\ProgramData\VirtualizedApplications O43 - CFD: 24/03/2013 - 14:26:54 - [] ----D C:\ProgramData\WildTangent O43 - CFD: 18/12/2013 - 18:08:15 - [] ----D C:\ProgramData\Wincert O43 - CFD: 16/12/2013 - 23:37:49 - [] ----D C:\ProgramData\WPM =>PUP.WpManager O43 - CFD: 21/01/2014 - 09:34:56 - [] ----D C:\ProgramData\{18165758-115C-4DC0-9EC2-FF89F725767F} O43 - CFD: 28/02/2013 - 08:55:37 - [] ----D C:\Users\sébastien\AppData\Roaming\Adobe O43 - CFD: 06/01/2013 - 19:21:23 - [] ----D C:\Users\sébastien\AppData\Roaming\ATI O43 - CFD: 02/07/2014 - 06:44:19 - [] ----D C:\Users\sébastien\AppData\Roaming\Avira O43 - CFD: 08/02/2013 - 18:42:04 - [] ----D C:\Users\sébastien\AppData\Roaming\Babylon =>PUP.Babylon O43 - CFD: 07/01/2013 - 19:11:05 - [] ----D C:\Users\sébastien\AppData\Roaming\Canon O43 - CFD: 28/02/2013 - 08:29:09 - [] ----D C:\Users\sébastien\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant O43 - CFD: 25/01/2013 - 21:10:22 - [] ----D C:\Users\sébastien\AppData\Roaming\CyberLink O43 - CFD: 22/09/2013 - 12:48:33 - [] ----D C:\Users\sébastien\AppData\Roaming\Drivers Manager O43 - CFD: 26/03/2013 - 14:25:25 - [] ----D C:\Users\sébastien\AppData\Roaming\GoforFiles =>P2P.GoforFiles O43 - CFD: 06/02/2014 - 12:18:33 - [] ----D C:\Users\sébastien\AppData\Roaming\Hewlett-Packard O43 - CFD: 08/01/2013 - 09:15:33 - [] ----D C:\Users\sébastien\AppData\Roaming\hpqlog O43 - CFD: 24/03/2013 - 16:45:25 - [] ----D C:\Users\sébastien\AppData\Roaming\HTML Executable O43 - CFD: 06/01/2013 - 19:20:50 - [] ----D C:\Users\sébastien\AppData\Roaming\Identities O43 - CFD: 06/01/2013 - 19:24:55 - [] ----D C:\Users\sébastien\AppData\Roaming\Macromedia O43 - CFD: 25/05/2012 - 11:38:25 - [0] ----D C:\Users\sébastien\AppData\Roaming\Media Center Programs O43 - CFD: 11/06/2014 - 17:48:02 - [] -S--D C:\Users\sébastien\AppData\Roaming\Microsoft O43 - CFD: 06/01/2013 - 20:59:00 - [] ----D C:\Users\sébastien\AppData\Roaming\Mozilla O43 - CFD: 07/03/2014 - 12:34:17 - [] ----D C:\Users\sébastien\AppData\Roaming\musicMeDownloader.447DBE4B8352E60C6628BA362FFE0160304ED2DC.1 =>PUP.SoftwareEngine O43 - CFD: 05/07/2014 - 10:53:55 - [] ----D C:\Users\sébastien\AppData\Roaming\Nosibay =>PUP.BubbleDock O43 - CFD: 13/03/2013 - 09:48:53 - [] ----D C:\Users\sébastien\AppData\Roaming\PDAppFlex O43 - CFD: 01/07/2014 - 18:40:33 - [] ----D C:\Users\sébastien\AppData\Roaming\RocketUpdater =>PUP.RockTurner O43 - CFD: 07/01/2013 - 18:36:54 - [] ----D C:\Users\sébastien\AppData\Roaming\ScanSoft O43 - CFD: 03/07/2014 - 10:42:34 - [] ----D C:\Users\sébastien\AppData\Roaming\SimplyTech O43 - CFD: 06/07/2014 - 15:12:49 - [] ----D C:\Users\sébastien\AppData\Roaming\Skype O43 - CFD: 07/01/2013 - 19:59:24 - [] ----D C:\Users\sébastien\AppData\Roaming\SoftGrid Client O43 - CFD: 06/01/2013 - 19:21:18 - [] ----D C:\Users\sébastien\AppData\Roaming\Synaptics O43 - CFD: 05/07/2014 - 11:04:52 - [] ----D C:\Users\sébastien\AppData\Roaming\Systweak O43 - CFD: 07/01/2013 - 17:24:10 - [0] ----D C:\Users\sébastien\AppData\Roaming\TP O43 - CFD: 29/10/2013 - 10:08:11 - [] ----D C:\Users\sébastien\AppData\Roaming\vlc O43 - CFD: 16/12/2013 - 22:29:51 - [] ----D C:\Users\sébastien\AppData\Roaming\Webplayer O43 - CFD: 24/03/2013 - 14:25:12 - [] ----D C:\Users\sébastien\AppData\Roaming\WildTangent O43 - CFD: 22/07/2013 - 16:27:16 - [0] ----D C:\Users\sébastien\AppData\Roaming\Windows Live Writer O43 - CFD: 06/07/2014 - 12:26:55 - [] ----D C:\Users\sébastien\AppData\Roaming\wp_update =>PUP.WpManager O43 - CFD: 06/07/2014 - 18:05:13 - [] ----D C:\Users\sébastien\AppData\Roaming\ZHP =>.Nicolas Coolman O43 - CFD: 13/03/2013 - 09:48:51 - [] ----D C:\Users\sébastien\AppData\Local\Adobe O43 - CFD: 06/01/2013 - 19:21:34 - [] ----D C:\Users\sébastien\AppData\Local\AMD O43 - CFD: 06/01/2013 - 19:15:00 - [] -SH-D C:\Users\sébastien\AppData\Local\Application Data O43 - CFD: 05/07/2014 - 08:37:05 - [] ----D C:\Users\sébastien\AppData\Local\AskPartnerNetwork O43 - CFD: 06/01/2013 - 19:21:23 - [] ----D C:\Users\sébastien\AppData\Local\ATI O43 - CFD: 03/07/2014 - 10:51:22 - [] ----D C:\Users\sébastien\AppData\Local\BenchUpdater =>PUP.GiganticSavings O43 - CFD: 03/07/2014 - 10:50:35 - [] ----D C:\Users\sébastien\AppData\Local\Chromatic Browser O43 - CFD: 03/07/2014 - 10:50:33 - [] ----D C:\Users\sébastien\AppData\Local\Comodo O43 - CFD: 05/07/2014 - 08:13:51 - [] ----D C:\Users\sébastien\AppData\Local\CrashDumps O43 - CFD: 25/01/2013 - 21:10:22 - [] ----D C:\Users\sébastien\AppData\Local\CyberLink O43 - CFD: 04/06/2014 - 04:10:21 - [] ----D C:\Users\sébastien\AppData\Local\Diagnostics O43 - CFD: 03/07/2014 - 11:59:57 - [] ----D C:\Users\sébastien\AppData\Local\ElevatedDiagnostics O43 - CFD: 12/05/2014 - 19:35:42 - [] -SH-D C:\Users\sébastien\AppData\Local\EmieSiteList O43 - CFD: 12/05/2014 - 19:35:42 - [] -SH-D C:\Users\sébastien\AppData\Local\EmieUserList O43 - CFD: 31/03/2013 - 17:21:04 - [] ----D C:\Users\sébastien\AppData\Local\Facebook O43 - CFD: 06/02/2014 - 10:19:14 - [] ----D C:\Users\sébastien\AppData\Local\FilesFrog Update Checker =>Adware.MegaSearch O43 - CFD: 03/07/2014 - 10:33:02 - [] ----D C:\Users\sébastien\AppData\Local\globalUpdate O43 - CFD: 03/07/2014 - 10:50:35 - [] ----D C:\Users\sébastien\AppData\Local\Google O43 - CFD: 15/01/2013 - 09:33:29 - [] ----D C:\Users\sébastien\AppData\Local\Hewlett-Packard O43 - CFD: 06/01/2013 - 19:20:40 - [] ----D C:\Users\sébastien\AppData\Local\Hewlett-Packard_Company O43 - CFD: 06/01/2013 - 19:15:00 - [] -SH-D C:\Users\sébastien\AppData\Local\Historique O43 - CFD: 15/05/2013 - 18:58:07 - [0] ----D C:\Users\sébastien\AppData\Local\Lollipop =>Adware.Lollipop O43 - CFD: 03/07/2014 - 11:02:58 - [] ----D C:\Users\sébastien\AppData\Local\LPT =>Adware.Incredibar O43 - CFD: 07/01/2013 - 08:58:05 - [] ----D C:\Users\sébastien\AppData\Local\Macromedia O43 - CFD: 03/07/2014 - 18:17:55 - [] ----D C:\Users\sébastien\AppData\Local\Microsoft O43 - CFD: 23/10/2013 - 12:32:41 - [] ----D C:\Users\sébastien\AppData\Local\Microsoft Games O43 - CFD: 09/01/2013 - 12:34:01 - [0] ----D C:\Users\sébastien\AppData\Local\Microsoft Help O43 - CFD: 19/09/2013 - 07:09:27 - [] ----D C:\Users\sébastien\AppData\Local\Mozilla O43 - CFD: 28/05/2013 - 15:18:12 - [0] ----D C:\Users\sébastien\AppData\Local\PackageAware O43 - CFD: 03/07/2014 - 10:50:43 - [] ----D C:\Users\sébastien\AppData\Local\Packages O43 - CFD: 03/07/2014 - 10:50:27 - [] ----D C:\Users\sébastien\AppData\Local\Programs O43 - CFD: 06/01/2013 - 19:16:07 - [] ----D C:\Users\sébastien\AppData\Local\RemEngine O43 - CFD: 03/07/2014 - 11:02:43 - [] ----D C:\Users\sébastien\AppData\Local\SafetySearch O43 - CFD: 31/05/2014 - 10:05:23 - [] ----D C:\Users\sébastien\AppData\Local\Skype O43 - CFD: 03/07/2014 - 11:01:41 - [] ----D C:\Users\sébastien\AppData\Local\Smartbar O43 - CFD: 07/01/2013 - 17:23:54 - [] ----D C:\Users\sébastien\AppData\Local\SoftGrid Client O43 - CFD: 06/07/2014 - 18:04:53 - [] ----D C:\Users\sébastien\AppData\Local\Temp O43 - CFD: 06/01/2013 - 19:15:00 - [] -SH-D C:\Users\sébastien\AppData\Local\Temporary Internet Files O43 - CFD: 04/07/2014 - 18:26:56 - [] ----D C:\Users\sébastien\AppData\Local\tmp5949 O43 - CFD: 03/07/2014 - 10:50:35 - [] ----D C:\Users\sébastien\AppData\Local\Torch O43 - CFD: 24/09/2013 - 17:04:52 - [] ----D C:\Users\sébastien\AppData\Local\VirtualStore O43 - CFD: 03/07/2014 - 11:03:11 - [] ----D C:\Users\sébastien\AppData\Local\WebPlayer O43 - CFD: 25/07/2013 - 17:38:12 - [] ----D C:\Users\sébastien\AppData\Local\Windows Live O43 - CFD: 22/07/2013 - 16:27:27 - [] ----D C:\Users\sébastien\AppData\Local\Windows Live Writer O43 - CFD: 14/07/2009 - 06:54:32 - [] R---D C:\Users\sébastien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 16/05/2014 - 07:42:21 - [] R---D C:\Users\sébastien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 05/07/2014 - 10:56:35 - [] ----D C:\Users\sébastien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock =>PUP.BubbleDock O43 - CFD: 06/02/2014 - 10:19:14 - [] ----D C:\Users\sébastien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker =>Adware.MegaSearch O43 - CFD: 03/07/2014 - 11:03:13 - [] ----D C:\Users\sébastien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLV Player O43 - CFD: 05/07/2014 - 10:51:57 - [] ----D C:\Users\sébastien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLVM Player O43 - CFD: 14/07/2009 - 06:49:38 - [] R---D C:\Users\sébastien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 03/07/2014 - 11:02:31 - [] ----D C:\Users\sébastien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SafetySearch O43 - CFD: 16/05/2014 - 07:42:21 - [] R---D C:\Users\sébastien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup ~ 62 Dossier CLSID vide (CLSID Empty Folder) ~ Program Folder: 287 Scanned in 00mn 00s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 03/07/2014 - 10:30:57 ---A- . (...) -- C:\Windows\System32\HP_ActiveX_Patch_NOT_DETECTED.txt [0] O44 - LFC:[MD5.9E2EDE952A3EC44754A829F048CE93A0] - 03/07/2014 - 11:13:15 ---A- . (.Microsoft Corporation - Composant Connexion RemoteApp et Bureau à d.) -- C:\Windows\System32\TSWorkspace.dll [1030144] O44 - LFC:[MD5.A4420969E5AB94856E5C0C02E6099D3F] - 03/07/2014 - 11:14:34 ---A- . (.Microsoft Corporation - Remote Desktop Services Client for Microsof.) -- C:\Windows\System32\rdvidcrl.dll [1057280] O44 - LFC:[MD5.8E75B1112C374EBDF18FD640DA2F0655] - 03/07/2014 - 11:14:35 ---A- . (.Microsoft Corporation - Connexion Bureau à distance.) -- C:\Windows\System32\mstsc.exe [1147392] O44 - LFC:[MD5.149A388C17F04AD1F99B477A43BE1A9F] - 03/07/2014 - 11:14:35 ---A- . (.Microsoft Corporation - Microsoft Remote Desktop Services Web Acces.) -- C:\Windows\System32\MsRdpWebAccess.dll [56832] O44 - LFC:[MD5.0D2C2FAC4F29B5868D39B7267058CFEF] - 03/07/2014 - 11:14:35 ---A- . (.Microsoft Corporation - Microsoft Remote Desktop Services Web Proxy.) -- C:\Windows\System32\TSWbPrxy.exe [83968] O44 - LFC:[MD5.79EE5ECB4BE89343E4CF1E48F7769F59] - 03/07/2014 - 11:14:35 ---A- . (.Microsoft Corporation - Runtime de connexion RemoteApp et Bureau à.) -- C:\Windows\System32\wksprt.exe [420864] O44 - LFC:[MD5.7BD2E6E2458A5B95F8341244C7FC7DD4] - 03/07/2014 - 11:14:35 ---A- . (.Microsoft Corporation - WorkspaceRuntime ProxyStub DLL.) -- C:\Windows\System32\wksprtPS.dll [18944] O44 - LFC:[MD5.5289A00E2D21BB3A7D6761646543ED5C] - 03/07/2014 - 11:14:36 ---A- . (.Microsoft Corporation - Client de contrainte de quarantaine de la p.) -- C:\Windows\System32\tsgqec.dll [62976] O44 - LFC:[MD5.FEC6178962DFF33074D39CA907971405] - 03/07/2014 - 11:14:37 ---A- . (.Microsoft Corporation - Extension de stratégie de groupe pour la re.) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll [12800] O44 - LFC:[MD5.E9981ECE8D894CEF7038FD1D040EB426] - 03/07/2014 - 11:14:37 ---A- . (.Microsoft Corporation - Pilote de filtre pour concentrateur USB du.) -- C:\Windows\System32\Drivers\TsUsbFlt.sys [56832] O44 - LFC:[MD5.108C257D765AAD2E6EC46557DA0B02BD] - 03/07/2014 - 11:14:37 ---A- . (.Microsoft Corporation - Remote Desktop USB Redirection GP Extension.) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyControl.exe [13824] O44 - LFC:[MD5.DDED7C5558B3AE09F568945281A9A6D1] - 03/07/2014 - 11:14:42 ---A- . (.Microsoft Corporation - Co-installateur de pilote USB générique du.) -- C:\Windows\System32\TsUsbGDCoInstaller.dll [44544] O44 - LFC:[MD5.879A3F94118D686E63041A386FE91EBE] - 04/07/2014 - 07:57:47 ---A- . (.Microsoft Corporation - Client ActiveX des services Bureau à distan.) -- C:\Windows\System32\mstscax.dll [6574592] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 04/07/2014 - 15:47:45 ---A- . (...) -- C:\Windows\setuperr.log [0] O44 - LFC:[MD5.8902AEC2382A37E9E99A4E0D52DBD42B] - 05/07/2014 - 07:33:41 ---A- . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) -- C:\Windows\System32\Drivers\avipbb.sys [130584] O44 - LFC:[MD5.390184FAD8FCC1B6DA25AEBAE928C3B6] - 05/07/2014 - 07:33:41 ---A- . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) -- C:\Windows\System32\Drivers\avkmgr.sys [28600] O44 - LFC:[MD5.46552023B54E374C887A3A9AAF1279F2] - 05/07/2014 - 07:33:41 ---A- . (.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) -- C:\Windows\System32\Drivers\avgntflt.sys [112080] O44 - LFC:[MD5.3DE0EBA0BF4771C897F544CBF7CB8973] - 05/07/2014 - 07:33:41 ---A- . (.Avira Operations GmbH & Co. KG - Avira WFP Network Driver.) -- C:\Windows\System32\Drivers\avnetflt.sys [84720] O44 - LFC:[MD5.9EBE1640167FF3CCA0EB8340780165A7] - 05/07/2014 - 11:09:30 ---A- . (...) -- C:\Windows\DPINST.LOG [230318] O44 - LFC:[MD5.FD892B90226B88D47A0183172583DD89] - 05/07/2014 - 11:30:16 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1671168] O44 - LFC:[MD5.7CB5CF4A41813CC37AB8E41F9838BA14] - 05/07/2014 - 11:30:16 ---A- . (...) -- C:\Windows\System32\perfc009.dat [122538] O44 - LFC:[MD5.C7276808422979FE6280969AD5CF884F] - 05/07/2014 - 11:30:16 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [150588] O44 - LFC:[MD5.AC676B23870CD9E5EF256FC738DACDCE] - 05/07/2014 - 11:30:16 ---A- . (...) -- C:\Windows\System32\perfh009.dat [654924] O44 - LFC:[MD5.0A3A287AAF9135C3203FDC7A931527B6] - 05/07/2014 - 11:30:16 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [748354] O44 - LFC:[MD5.484134ED8E50B9D616BB34BDE898D246] - 06/07/2014 - 08:49:50 ---A- . (...) -- C:\Windows\PFRO.log [17144] O44 - LFC:[MD5.4F3BB5CA906CDFED4CBEE14065A561F2] - 06/07/2014 - 11:22:09 ---A- . (...) -- C:\Windows\setupact.log [336] O44 - LFC:[MD5.CCF452A3F61707B1299F4852A263224D] - 06/07/2014 - 17:00:59 -S-A- . (...) -- C:\Windows\bootstat.dat [67584] O44 - LFC:[MD5.63590AE445A22C7ACCB009EA385552C5] - 06/07/2014 - 17:01:14 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1979224] O44 - LFC:[MD5.47EDF8F05F6C4CFDC120C002A94BF374] - 30/06/2014 - 16:34:02 ---A- . (.System Speedup - System Speedup.) -- C:\Windows\System32\roboot64.exe [20320] =>PUP.SystemSpeedup ~ Files: 30 Scanned in 00mn 56s ---\\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:[MD5.FBF44DD8348FF3C7BD26E3478673CFB2] - 04/07/2014 - 15:50:42 ---A- - C:\Windows\Prefetch\QUICKSHARE.EXE-0AF76071.pf =>PUP.QuickShare O45 - LFCP:[MD5.E689A8595C42C394CC79659BB1A78136] - 06/07/2014 - 11:26:32 ---A- - C:\Windows\Prefetch\WEBPLAYER.EXE-60526918.pf =>Adware.SocialSkinz ~ Prefetcher: 2 Scanned in 00mn 00s ---\\ Déni du service (Local Security Authority) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\livessp.dll ~ LSA: 9 Scanned in 00mn 00s ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys ~ CSB: 13 Scanned in 00mn 00s ---\\ Image File Execution Options (IFEO) (O50) O50 - IFEO:Image File Execution Options - bitguard.exe - tasklist.exe =>PUP.BitGuard O50 - IFEO:Image File Execution Options - bprotect.exe - tasklist.exe O50 - IFEO:Image File Execution Options - bpsvc.exe - tasklist.exe O50 - IFEO:Image File Execution Options - browserdefender.exe - tasklist.exe =>Hijacker.Eazel O50 - IFEO:Image File Execution Options - browserprotect.exe - tasklist.exe =>Hijacker.Eazel O50 - IFEO:Image File Execution Options - browsersafeguard.exe - tasklist.exe =>PUP.BrowserSafeguard O50 - IFEO:Image File Execution Options - DatamngrCoordinator.exe - tasklist.exe =>PUP.Datamngr O50 - IFEO:Image File Execution Options - protectedsearch.exe - tasklist.exe =>Spyware.ProtectedSearch O50 - IFEO:Image File Execution Options - snapdo.exe - tasklist.exe =>Hijacker.SmartBar O50 - IFEO:Image File Execution Options - stinst32.exe - tasklist.exe O50 - IFEO:Image File Execution Options - stinst64.exe - tasklist.exe ~ IFEO: Scanned in 00mn 00s ---\\ Clé de registre Shell MountPoints2 (MPKS) (O51) O51 - MPSK:{17435d81-eab3-11e2-9270-80c16e538eba}\AutoRun\command. (...) -- F:\Startme.exe (.not file.) O51 - MPSK:{d982aeee-10cb-11e3-b8bd-80c16e538eba}\AutoRun\command. (...) -- F:\Startme.exe (.not file.) ~ Keys: Scanned in 00mn 00s ---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm ~ TDSD: 2 Scanned in 00mn 00s ---\\ Enumération des clés de registre StartupReg (SMSR) (O53) O53 - SMSR:HKLM\...\startupreg\Acrobat Assistant 8.0 [Key] . (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe O53 - SMSR:HKLM\...\startupreg\Adobe ARM [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated O53 - SMSR:HKLM\...\startupreg\AdobeAAMUpdater-1.0 [Key] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe =>.Adobe Systems Incorporated O53 - SMSR:HKLM\...\startupreg\DATAMNGR [Key] . (...) -- C:\Program Files (x86)\SEARCH~1\Datamngr\DATAMN~2.exe (.not file.) =>PUP.Datamngr O53 - SMSR:HKLM\...\startupreg\Easybits Recovery [Key] . (.EasyBits Software AS - Pas de description.) -- C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe =>.EasyBits Software AS O53 - SMSR:HKLM\...\startupreg\HP CoolSense [Key] . (.Hewlett-Packard Development Company, L.P. - HP CoolSense.) -- C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe O53 - SMSR:HKLM\...\startupreg\HP Quick Launch [Key] . (.Hewlett-Packard Development Company, L.P. - HP Message Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe O53 - SMSR:HKLM\...\startupreg\HPOSD [Key] . (.Hewlett-Packard Development Company, L.P. - HP On Screen Display.) -- C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe O53 - SMSR:HKLM\...\startupreg\Magic Desktop for HP notification [Key] . (.Easybits - Software update notification.) -- C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe O53 - SMSR:HKLM\...\startupreg\OpwareSE4 [Key] . (.ScanSoft, Inc. - OCR Aware.) -- C:\Program Files (x86)\ScanSoft\OmniPageSE4.0\OpwareSE4.exe =>.ScanSoft, Inc O53 - SMSR:HKLM\...\startupreg\SetDefault [Key] . (.Hewlett-Packard Development Company, L.P. - SetDefault.) -- C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe O53 - SMSR:HKLM\...\startupreg\SSBkgdUpdate [Key] . (.Scansoft, Inc. - SSBkgdUpdate.) -- C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe O53 - SMSR:HKLM\...\startupreg\StartCCC [Key] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe =>.Advanced Micro Devices, Inc O53 - SMSR:HKLM\...\startupreg\SynTPEnh [Key] . (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O53 - SMSR:HKLM\...\startupreg\SysTrayApp [Key] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray64.exe ~ SMSR Keys: 16 Scanned in 00mn 02s ---\\ Enumération des clés de registre SecurityProviders (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll ~ MSCP: 2 Scanned in 00mn 00s ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0 O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 ~ MWPS: 16 Scanned in 00mn 00s ---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "EnableShellExecuteHooks"=1 ~ MWPE Keys: 4 Scanned in 00mn 00s ---\\ Liste des pilotes du système (SDL) (O58) O58 - SDL:24/09/2012 - 12:40:56 ---A- . (.Hewlett-Packard Company - HP Accelerometer.) -- C:\Windows\System32\Drivers\Accelerometer.sys [43840] O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088] O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\Drivers\adpahci.sys [339536] O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\Drivers\adpu320.sys [182864] O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\Drivers\aliide.sys [15440] O58 - SDL:26/10/2011 - 20:16:46 ---A- . (.Advanced Micro Devices, INC. - AMD USB 3.0 Hub Driver.) -- C:\Windows\System32\Drivers\amdhub30.sys [102528] O58 - SDL:18/02/2010 - 08:18:24 ---A- . (.Advanced Micro Devices - AMD IO Driver.) -- C:\Windows\System32\Drivers\amdiox64.sys [46136] O58 - SDL:02/02/2012 - 09:54:56 ---A- . (.Advanced Micro Devices, Inc. - AMD PCI Root Bus Lower Filter.) -- C:\Windows\System32\Drivers\amdkmpfd.sys [31872] O58 - SDL:03/03/2112 - 19:37:43 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\Drivers\amdsata.sys [107904] O58 - SDL:14/07/2009 - 02:52:20 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows -.) -- C:\Windows\System32\Drivers\amdsbs.sys [194128] O58 - SDL:03/03/2112 - 19:37:43 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\Drivers\amdxata.sys [27008] O58 - SDL:26/10/2011 - 20:16:46 ---A- . (.Advanced Micro Devices, INC. - AMD USB 3.0 Host Controller Driver.) -- C:\Windows\System32\Drivers\amdxhc.sys [219776] O58 - SDL:13/12/2011 - 13:52:44 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\Drivers\amd_sata.sys [82048] O58 - SDL:13/12/2011 - 13:52:44 ---A- . (.Advanced Micro Devices - Stor Filter Driver.) -- C:\Windows\System32\Drivers\amd_xata.sys [42624] O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\Drivers\arc.sys [87632] O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\Drivers\arcsas.sys [97856] O58 - SDL:10/01/2012 - 20:38:28 ---A- . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driver.) -- C:\Windows\System32\Drivers\athrx.sys [2801664] O58 - SDL:06/12/2011 - 12:47:30 ---A- . (.Advanced Micro Devices - AMD High Definition Audio Function Driver.) -- C:\Windows\System32\Drivers\AtihdW76.sys [95248] O58 - SDL:11/02/2012 - 01:26:24 ---A- . (.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\Drivers\atikmdag.sys [10825216] O58 - SDL:10/02/2012 - 21:54:38 ---A- . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\System32\Drivers\atikmpag.sys [328704] O58 - SDL:27/05/2014 - 18:59:35 ---A- . (.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) -- C:\Windows\System32\Drivers\avgntflt.sys [112080] =>.Avira Operations GmbH O58 - SDL:27/05/2014 - 18:59:38 ---A- . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) -- C:\Windows\System32\Drivers\avipbb.sys [130584] =>.Avira Operations GmbH O58 - SDL:27/05/2014 - 18:59:41 ---A- . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) -- C:\Windows\System32\Drivers\avkmgr.sys [28600] =>.Avira Operations GmbH O58 - SDL:27/05/2014 - 18:59:45 ---A- . (.Avira Operations GmbH & Co. KG - Avira WFP Network Driver.) -- C:\Windows\System32\Drivers\avnetflt.sys [84720] =>.Avira Operations GmbH O58 - SDL:10/06/2009 - 21:34:23 ---A- . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x Unified Driver..) -- C:\Windows\System32\Drivers\b57nd60a.sys [270848] O58 - SDL:10/06/2009 - 21:34:38 ---A- . (.Broadcom Corporation - Broadcom 802.11 Network Adapter wireless driver.) -- C:\Windows\System32\Drivers\BCMWL664.SYS [1311232] O58 - SDL:10/06/2009 - 21:41:06 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltLo.sys [18432] O58 - SDL:10/06/2009 - 21:41:06 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltUp.sys [8704] O58 - SDL:14/07/2009 - 02:19:07 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\Drivers\BrSerId.sys [286720] O58 - SDL:10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\Drivers\BrSerWdm.sys [47104] O58 - SDL:10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\Drivers\BrUsbMdm.sys [14976] O58 - SDL:10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\Drivers\BrUsbSer.sys [14720] O58 - SDL:10/06/2009 - 21:34:28 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\Drivers\bxvbda.sys [468480] O58 - SDL:28/07/2010 - 08:13:50 ---A- . (.CyberLink Corporation - CyberLink WebCam Virtual Driver.) -- C:\Windows\System32\Drivers\clwvd.sys [31088] O58 - SDL:14/07/2009 - 02:52:31 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\cmdide.sys [17488] O58 - SDL:14/07/2009 - 02:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496] O58 - SDL:10/06/2009 - 21:34:33 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\Drivers\evbda.sys [3286016] O58 - SDL:31/08/2013 - 09:39:28 ---A- . (.Sony Ericsson Mobile Communications - SEMC USB Flash Driver Filter.) -- C:\Windows\System32\Drivers\ggflt.sys [14448] O58 - SDL:31/08/2013 - 09:39:28 ---A- . (.Sony Ericsson Mobile Communications - SEMC USB Flash Driver.) -- C:\Windows\System32\Drivers\ggsemc.sys [27760] O58 - SDL:10/06/2009 - 21:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232] O58 - SDL:24/09/2012 - 12:40:56 ---A- . (.Hewlett-Packard Company - HP Disk Filter - SATA/RAID.) -- C:\Windows\System32\Drivers\hpdskflt.sys [31040] O58 - SDL:21/11/2010 - 04:23:47 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\System32\Drivers\HpSAMD.sys [78720] O58 - SDL:03/03/2112 - 19:37:43 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\Drivers\iaStorV.sys [410496] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\Drivers\iirsp.sys [44112] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_fc.sys [114752] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas.sys [106560] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas2.sys [65600] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_scsi.sys [115776] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows 7\Server 2008 R2 for.) -- C:\Windows\System32\Drivers\megasas.sys [35392] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\Drivers\MegaSR.sys [284736] O58 - SDL:14/07/2009 - 02:48:26 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\Drivers\nfrd960.sys [51264] O58 - SDL:10/06/2009 - 21:35:35 ---A- . (.NVIDIA Corporation - NVIDIA MCP Networking Function Driver..) -- C:\Windows\System32\Drivers\nvm62x64.sys [408960] O58 - SDL:03/03/2112 - 19:37:43 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\Drivers\nvraid.sys [148352] O58 - SDL:03/03/2112 - 19:37:43 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\Drivers\nvstor.sys [166272] O58 - SDL:14/07/2009 - 02:45:46 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\Drivers\ql2300.sys [1524816] O58 - SDL:14/07/2009 - 02:45:45 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\Drivers\ql40xx.sys [128592] O58 - SDL:24/08/2011 - 06:57:24 ---A- . (.Realtek - Realtek 8136/8168/8169 NDIS 6.20 64-bit Driver.) -- C:\Windows\System32\Drivers\Rt64win7.sys [565352] O58 - SDL:22/09/2011 - 00:33:50 ---A- . (.Realtek Semiconductor Corp. - Realtek Pcie CardReader Driver for 2K/XP/Vista/Win7.) -- C:\Windows\System32\Drivers\RtsP2Stor.sys [258664] O58 - SDL:10/06/2009 - 21:37:19 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\System32\Drivers\secdrv.sys [23040] O58 - SDL:14/07/2009 - 02:45:45 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid2.sys [43584] O58 - SDL:14/07/2009 - 02:45:46 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid4.sys [80464] O58 - SDL:13/05/2011 - 02:21:02 ---A- . (.Google Inc - ADB Interface.) -- C:\Windows\System32\Drivers\ssadadb.sys [36328] O58 - SDL:13/05/2011 - 02:21:02 ---A- . (.MCCI Corporation - SAMSUNG Android USB Composite Device Driver.) -- C:\Windows\System32\Drivers\ssadbus.sys [157672] O58 - SDL:13/05/2011 - 02:21:02 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\Drivers\ssadcm.sys [13288] O58 - SDL:13/05/2011 - 02:21:02 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\Drivers\ssadcmnt.sys [13288] O58 - SDL:13/05/2011 - 02:21:02 ---A- . (.MCCI Corporation - SAMSUNG Android USB Modem Filter Driver.) -- C:\Windows\System32\Drivers\ssadmdfl.sys [16872] O58 - SDL:13/05/2011 - 02:21:04 ---A- . (.MCCI Corporation - SAMSUNG Android USB Modem.) -- C:\Windows\System32\Drivers\ssadmdm.sys [177640] O58 - SDL:13/05/2011 - 02:21:04 ---A- . (.MCCI Corporation - SAMSUNG Android USB Diagnostic Serial Port Device Driver.) -- C:\Windows\System32\Drivers\ssadserd.sys [146920] O58 - SDL:13/05/2011 - 02:21:04 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\Drivers\ssadwh.sys [13800] O58 - SDL:13/05/2011 - 02:21:04 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\Drivers\ssadwhnt.sys [13800] O58 - SDL:19/09/2009 - 04:30:14 ---A- . (.MCCI - SAMSUNG USB Mobile Device.) -- C:\Windows\System32\Drivers\ss_bbus.sys [127488] O58 - SDL:19/09/2009 - 04:30:14 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\Drivers\ss_bcm.sys [15360] O58 - SDL:19/09/2009 - 04:30:14 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\Drivers\ss_bcmnt.sys [15360] O58 - SDL:19/09/2009 - 04:30:14 ---A- . (.MCCI Corporation - SAMSUNG USB Mobile Modem Filter.) -- C:\Windows\System32\Drivers\ss_bmdfl.sys [18944] O58 - SDL:19/09/2009 - 04:30:14 ---A- . (.MCCI Corporation - SAMSUNG USB Mobile Modem.) -- C:\Windows\System32\Drivers\ss_bmdm.sys [161280] O58 - SDL:19/09/2009 - 04:30:14 ---A- . (.MCCI Corporation - SAMSUNG USB Mobile Device (Windows 2000/XP support functions).) -- C:\Windows\System32\Drivers\ss_bwh.sys [15872] O58 - SDL:19/09/2009 - 04:30:14 ---A- . (.MCCI Corporation - SAMSUNG USB Mobile Device (Windows 2000/XP support functions).) -- C:\Windows\System32\Drivers\ss_bwhnt.sys [15872] O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656] O58 - SDL:04/01/2012 - 09:37:16 ---A- . (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\System32\Drivers\stwrt64.sys [535552] O58 - SDL:01/10/2011 - 03:16:50 ---A- . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\System32\Drivers\SynTP.sys [393264] O58 - SDL:14/01/2012 - 13:05:54 ---A- . (.Advanced Micro Devices - AMD USB Filter Driver.) -- C:\Windows\System32\Drivers\usbfilter.sys [56448] O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\viaide.sys [17488] O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\Drivers\vsmraid.sys [161872] O58 - SDL:10/06/2009 - 22:01:11 ---A- . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\Windows\System32\Drivers\VSTAZL6.SYS [292864] O58 - SDL:10/06/2009 - 22:01:11 ---A- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\Windows\System32\Drivers\VSTCNXT6.SYS [740864] O58 - SDL:10/06/2009 - 22:01:11 ---A- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\Windows\System32\Drivers\VSTDPV6.SYS [1485312] O58 - SDL:26/04/2005 - 16:42:48 ---A- . (...) -- C:\Windows\SysWOW64\drivers\MPIXVID.SYS [104593] O58 - SDL:28/06/2004 - 09:16:58 ---A- . (.Atmel Corporation - Universal Serial Bus Camera Driver.) -- C:\Windows\SysWOW64\drivers\USBCamAT.sys [25575] ~ Drivers: 88 Scanned in 00mn 01s ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC: 01/07/2014 - 18:06:42 ----- . (.pennybee.) -- C:\Users\sébastien\AppData\Local\Temp\is45637729\6800519_stp\pm.exe [897104] O61 - LFC: 03/07/2014 - 18:06:42 ---A- . (.Software.) -- C:\Users\sébastien\AppData\Local\Temp\is-H82AO.tmp\package_togglemark_installer_multilang.exe [421448] O61 - LFC: 03/07/2014 - 18:06:42 ---A- . (.Software.) -- C:\Users\sébastien\AppData\Local\Temp\is-HSITT.tmp\package_vuupc_installer_multilang.exe [421368] =>PUP.VuuPC O61 - LFC: 03/07/2014 - 18:06:42 ---A- . (.Software.) -- C:\Users\sébastien\AppData\Local\Temp\is-Q6EIQ.tmp\package_secureprotect_installer_multilang.exe [421928] O61 - LFC: 03/07/2014 - 18:06:44 ---A- . (.Penny Bee Agent.) -- C:\Users\sébastien\AppData\Local\Temp\tmut7493.dll [492032] O61 - LFC: 03/07/2014 - 18:06:45 ---A- . (...) -- C:\Users\sébastien\AppData\Roaming\Mozilla\Firefox\Profiles\usbskqvw.default-1364136879355\Extensions\{029afe2e-aa6f-406d-8003-304d06593385}\wtb_ff.bin [6805] O61 - LFC: 03/07/2014 - 18:07:01 ---A- . (...) -- C:\Users\sébastien\Downloads\windows-8-free.exe [156384] O61 - LFC: 04/07/2014 - 18:06:23 ---A- . (.ClickMeIn Limited.) -- C:\Users\sébastien\AppData\Local\AnyProtectScannerSetup.exe [575887] =>PUP.AnyProtect O61 - LFC: 04/07/2014 - 18:06:41 ---A- . (.Sien SA.) -- C:\Users\sébastien\AppData\Local\Temp\igdhbblpcellaljokkpfhcjlagemhgjl10951d\MinibarChrome.exe [869184] =>PUP.Minibar O61 - LFC: 04/07/2014 - 18:06:42 ----- . (.ClickMeIn Limited.) -- C:\Users\sébastien\AppData\Local\Temp\is45637729\10749751_stp\AnyProtectScannerSetup.exe [575887] =>PUP.AnyProtect O61 - LFC: 04/07/2014 - 18:06:42 ----- . (.ClickMeIn Limited.) -- C:\Users\sébastien\AppData\Local\Temp\is45637729\6451984_stp\AnyProtectScannerSetup.exe [575887] =>PUP.AnyProtect O61 - LFC: 04/07/2014 - 18:06:42 ----- . (.ClickMeIn Limited.) -- C:\Users\sébastien\AppData\Local\Temp\is45637729\6800155_stp\AnyProtectScannerSetup.exe [575887] =>PUP.AnyProtect O61 - LFC: 04/07/2014 - 18:06:42 ---A- . (.S.I.E.N..) -- C:\Users\sébastien\AppData\Local\Temp\IminentSetup_june26.exe [974544] =>Adware.IMBooster O61 - LFC: 04/07/2014 - 18:06:44 ---A- . (.Penny Bee Agent.) -- C:\Users\sébastien\AppData\Local\tmp5949\dag5949.exe [762368] O61 - LFC: 04/07/2014 - 18:06:55 ---A- . (.PC Cleaners.) -- C:\Users\sébastien\Downloads\app3_Install_French_v.exe [4954384] =>Rogue.PCCleanerPro O61 - LFC: 04/07/2014 - 18:06:56 ---A- . (.Driver Restore.) -- C:\Users\sébastien\Downloads\DriverRestore(1).exe [2002656] O61 - LFC: 04/07/2014 - 18:07:00 ---A- . (.Systweak Inc.) -- C:\Users\sébastien\Downloads\sysrc_trial_25044.exe [4318040] O61 - LFC: 05/07/2014 - 18:06:41 ---A- . (.globalUpdate.) -- C:\Users\sébastien\AppData\Local\Temp\comh.153452\GoogleCrashHandler.exe [72872] O61 - LFC: 05/07/2014 - 18:06:41 ---A- . (.globalUpdate.) -- C:\Users\sébastien\AppData\Local\Temp\comh.153452\GoogleUpdate.exe [68608] O61 - LFC: 05/07/2014 - 18:06:41 ---A- . (.globalUpdate.) -- C:\Users\sébastien\AppData\Local\Temp\comh.153452\GoogleUpdateBroker.exe [46080] O61 - LFC: 05/07/2014 - 18:06:41 ---A- . (.globalUpdate.) -- C:\Users\sébastien\AppData\Local\Temp\comh.153452\GoogleUpdateOnDemand.exe [46080] O61 - LFC: 05/07/2014 - 18:06:41 ---A- . (.globalUpdate.) -- C:\Users\sébastien\AppData\Local\Temp\comh.153452\goopdate.dll [761856] O61 - LFC: 05/07/2014 - 18:06:41 ---A- . (.globalUpdate.) -- C:\Users\sébastien\AppData\Local\Temp\comh.153452\goopdateres_en.dll [26792] O61 - LFC: 05/07/2014 - 18:06:41 ---A- . (.globalUpdate.) -- C:\Users\sébastien\AppData\Local\Temp\comh.153452\npGoogleUpdate4.dll [220672] O61 - LFC: 05/07/2014 - 18:06:41 ---A- . (.globalUpdate.) -- C:\Users\sébastien\AppData\Local\Temp\comh.153452\psmachine.dll [155648] O61 - LFC: 05/07/2014 - 18:06:41 ---A- . (.globalUpdate.) -- C:\Users\sébastien\AppData\Local\Temp\comh.153452\psuser.dll [155648] O61 - LFC: 05/07/2014 - 18:06:42 ---A- . (.Bechiro.) -- C:\Users\sébastien\AppData\Local\Temp\n776\FLVMPlayerSetup-c45490cb.exe [5077425] =>PUP.FLVMPlayer O61 - LFC: 05/07/2014 - 18:06:42 ---A- . (.Nosibay.) -- C:\Users\sébastien\AppData\Local\Temp\n776\Bubblefootball_0506-dcafc945.exe [372864] O61 - LFC: 05/07/2014 - 18:06:43 ---A- . (...) -- C:\Users\sébastien\AppData\Local\Temp\n776\VOPackage.exe [282666] =>Adware.Downware O61 - LFC: 05/07/2014 - 18:06:43 ---A- . (...) -- C:\Users\sébastien\AppData\Local\Temp\n776\plusvid_3006-fd0f022b.exe [8742675] =>PUP.PlusVid O61 - LFC: 05/07/2014 - 18:06:43 ---A- . (...) -- C:\Users\sébastien\AppData\Local\Temp\n776\searchprotect_2805-feafc00c.exe [386152] =>PUP.SearchProtect O61 - LFC: 05/07/2014 - 18:06:43 ---A- . (...) -- C:\Users\sébastien\AppData\Local\Temp\n776\systemsspeedup_0307-cd6becd7.exe [4242370] O61 - LFC: 05/07/2014 - 18:06:43 ---A- . (.Setup Aplications.) -- C:\Users\sébastien\AppData\Local\Temp\n776\s776.exe [295256] O61 - LFC: 05/07/2014 - 18:06:55 ---A- . (...) -- C:\Users\sébastien\Downloads\AVIRA_ANTIVIRUS_2014_FR_setup.exe [275600] O61 - LFC: 05/07/2014 - 18:06:55 ---A- . (...) -- C:\Users\sébastien\Downloads\avira_free_antivirus_fr.exe [145171608] O61 - LFC: 05/07/2014 - 18:06:55 ---A- . (.Avira Operations GmbH & Co. KG.) -- C:\Users\sébastien\Downloads\avira_fr_av___ws.exe [4342264] O61 - LFC: 05/07/2014 - 18:06:55 ---A- . (.Driver Manager.) -- C:\Users\sébastien\Downloads\DriverManager.exe [2016040] O61 - LFC: 05/07/2014 - 18:07:00 ---A- . (.Sony Mobile Communications.) -- C:\Users\sébastien\Downloads\Sony PC Companion_Web.exe [28655120] O61 - LFC: 05/07/2014 - 18:07:01 ---A- . (.Microsoft Corporation.) -- C:\Users\sébastien\Downloads\Windows7UpgradeAdvisorSetup.exe [8672032] O61 - LFC: 05/07/2014 - 18:07:01 ---A- . (.Setup Process.) -- C:\Users\sébastien\Downloads\Windows%20XP%20Service%20Pack%203.exe [413600] O61 - LFC: 06/07/2014 - 18:07:02 ---A- . (.Nicolas Coolman.) -- C:\Users\sébastien\Downloads\ZHPDiag2.exe [6857466] =>.Nicolas Coolman O61 - LFC: 30/06/2014 - 18:06:41 ---A- . (...) -- C:\Users\sébastien\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll [49744] ~ 155 Fichiers temporaires (Temporary files) ~ 62 Fichiers cookies (Cookies files) ~ Files: 42 Scanned in 00mn 44s ---\\ Liste des outils de désinfection (LATC) (O63) O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman ~ ADS: Scanned in 00mn 00s ---\\ Liste les services legacy du registre (LALS) (O64) O64 - Services: CurCS - 11/02/2012 - C:\Windows\System32\DRIVERS\atikmdag.sys (amdkmdag) .(.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG O64 - Services: CurCS - 03/03/2112 - C:\Windows\System32\drivers\amdsata.sys (amdsata) .(.Advanced Micro Devices - AHCI 1.2 Device Driver.) - LEGACY_AMDSATA O64 - Services: CurCS - 13/12/2011 - C:\Windows\System32\drivers\amd_sata.sys (amd_sata) .(.Advanced Micro Devices - AHCI 1.2 Device Driver.) - LEGACY_AMD_SATA O64 - Services: CurCS - 27/05/2014 - C:\Windows\System32\DRIVERS\avgntflt.sys (avgntflt) .(.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) - LEGACY_AVGNTFLT O64 - Services: CurCS - 27/05/2014 - C:\Windows\System32\DRIVERS\avipbb.sys (avipbb) .(.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) - LEGACY_AVIPBB O64 - Services: CurCS - 27/05/2014 - C:\Windows\System32\DRIVERS\avkmgr.sys (avkmgr) .(.Avira Operations GmbH & Co. KG - Avira Manager Driver.) - LEGACY_AVKMGR O64 - Services: CurCS - 27/05/2014 - C:\Windows\System32\DRIVERS\avnetflt.sys (avnetflt) .(.Avira Operations GmbH & Co. KG - Avira WFP Network Driver.) - LEGACY_AVNETFLT O64 - Services: CurCS - 10/06/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV ~ Legacy: 82 Scanned in 00mn 00s ---\\ Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" % O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> <FirefoxHTML>[HKLM\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.scr> <scrfile>[HKLM\..\open\Command] (...) -- "%1" /S O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe ~ FASS Keys: 11 Scanned in 00mn 00s ---\\ Menu de démarrage Internet (SMI) (O68) O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (...) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("avg.install.userHPSettings", "http://www.delta-search.com/?affID=119556&babsrc=HP_ss&mntrId=86CE446D5779580D"); =>Toolbar.DeltaSearch O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("avg.install.userSPSettings", "Delta Search"); O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.BabylonToolbar.admin", false); =>PUP.Babylon O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.BabylonToolbar.aflt", "babsst"); =>PUP.Babylon O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}"); =>PUP.Babylon O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.BabylonToolbar.autoRvrt", "false"); =>PUP.Babylon O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.BabylonToolbar.dfltLng", "en"); =>PUP.Babylon O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.BabylonToolbar.excTlbr", false); =>PUP.Babylon O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.BabylonToolbar.ffxUnstlRst", true); =>PUP.Babylon O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.BabylonToolbar.id", "86ce2300000000000000446d5779580d"); =>PUP.Babylon O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.BabylonToolbar.instlDay", "15744"); =>PUP.Babylon O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.BabylonToolbar.instlRef", "sst"); =>PUP.Babylon O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.BabylonToolbar.newTab", false); =>PUP.Babylon O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar"); =>PUP.Babylon O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.BabylonToolbar.prtnrId", "babylon"); =>PUP.Babylon O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.BabylonToolbar.rvrt", "false"); =>PUP.Babylon O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.BabylonToolbar.smplGrp", "none"); =>PUP.Babylon O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.BabylonToolbar.tlbrId", "uninst"); =>PUP.Babylon O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "http://search.babylon.com/?babsrc=TB_def&mntrId=86ce2300000000000000446d577958[...] =>PUP.Babylon O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.BabylonToolbar.vrsn", "1.8.11.10"); =>PUP.Babylon O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.BabylonToolbar.vrsni", "1.8.11.10"); =>PUP.Babylon O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.BabylonToolbar.vrsnTs", "1.8.11.1017:42:26"); =>PUP.Babylon O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.BabylonToolbar_i.babExt", ""); =>PUP.Babylon O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.BabylonToolbar_i.babTrack", "affID=120862"); =>PUP.Babylon O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.BabylonToolbar_i.srcExt", "ss"); =>PUP.Babylon O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.delta.admin", false); O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.delta.aflt", "babsst"); O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}"); O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.delta.autoRvrt", "false"); O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.delta.dfltLng", "en"); O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.delta.excTlbr", false); O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.delta.id", "86ce2300000000000000446d5779580d"); O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.delta.instlDay", "15788"); O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.delta.instlRef", "sst"); O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.delta.newTab", false); O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.delta.prdct", "delta"); O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.delta.prtnrId", "delta"); O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.delta.rvrt", "false"); O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.delta.smplGrp", "none"); O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.delta.tlbrId", "base"); O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.delta.tlbrSrchUrl", ""); O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.delta.vrsn", "1.8.10.0"); O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.delta.vrsni", "1.8.10.0"); O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("extensions.delta.vrsnTs", "1.8.10.015:44:35"); O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.delta.admin", false); O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.delta.aflt", "babsst"); O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}"); O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.delta.autoRvrt", "false"); O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.delta.dfltLng", "en"); O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.delta.excTlbr", false); O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.delta.ffxUnstlRst", true); O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.delta.id", "86ce2300000000000000446d5779580d"); O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.delta.instlDay", "15840"); O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.delta.instlRef", "sst"); O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.delta.newTab", false); O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.delta.prdct", "delta"); O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.delta.prtnrId", "delta"); O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.delta.rvrt", "false"); O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.delta.smplGrp", "none"); O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.delta.tlbrId", "base"); O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.delta.tlbrSrchUrl", ""); O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.delta.vrsn", "1.8.16.16"); O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.delta.vrsnTs", "1.8.16.1618:39:23"); O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.delta.vrsni", "1.8.16.16"); O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.BackPageActive", true); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.Country", "France"); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.DockingPositionDown", false); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.SmartbarDisabled", false); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.SmartbarStateMinimaized", false); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.UserID", "5a3a2697-a720-4cf8-b166-8b1c8c4c84d1"); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.Visibility", false); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.backPageCapacity", 3); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.backPageCounter", 0); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.backPageDay", 10); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.backPageLastEvent", "1394279271357"); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.backPageMinInterval", 15); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.barcodeid", "769"); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.countryiso", "fr"); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.downloadprovider", "quickobrw"); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.externalJsFiles", "{\"d\":\"[{\\\"ExcludeDomains\\\":[\\\"snap.do\\\",\\\"snapdo.com\\\"],\\\"Http[...] =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.fromautoupdate", "true"); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.installationid", "5a3a2697-a720-4cf8-b166-8b1c8c4c84d1"); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.installdate", "26/03/2013"); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.keepAliveLastevent", "1394451968"); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.lastExternalJsUpdate", "1396077573776"); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.publisher", "quickobrw"); =>PUP.HelperBar O69 - SBI: SearchScopes [HKCU] {006ee092-9658-4fd6-bd8e-a21a348e59f5} - (Web Search) - http://feed.helperbar.com =>PUP.HelperBar O69 - SBI: SearchScopes [HKCU] {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} [DefaultScope] - (WSE Rocket) - http://rocket-find.com =>PUP.RockTurner O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {77AA745B-F4F8-45DA-9B14-61D2D95054C8} - (WSE Rocket) - http://rocket-find.com =>PUP.RockTurner O69 - SBI: SearchScopes [HKCU] {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} - (Ask.com) - http://dts.search.ask.com ~ Keys: Scanned in 00mn 00s ---\\ Enumère les service demarrés par Svchost (SSS) (O83) O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [236032] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [777728] O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [859648] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [679424] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll [99328] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll [64512] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [359424] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll [316928] O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll [680960] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [2428952] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll [849920] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688] O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [569344] O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [30720] O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70144] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [156672] O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll [67584] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [242688] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll [121856] O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704] O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104] O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [1110016] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll [90624] O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480] O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [209920] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [44544] O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864] ~ Services: 32 Scanned in 00mn 01s ---\\ Recherche particulière à la racine du système (SPRF) (O84) [MD5.31EBB8ADF314C0439FFB8B038B8DED8C] [SPRF][04/07/2014] (.PC Cleaners - PC Cleaner Pro.) -- C:\ProgramData\pclunst.exe [4954384] =>Rogue.PCCleanerPro [MD5.D41D8CD98F00B204E9800998ECF8427E] [SPRF][02/01/1601] (...) -- C:\Users\sébastien\AppData\Roaming\skype.dat [89088] [MD5.87948212C71A773AEF4C68029BFAE924] [SPRF][16/12/2013] (.Pas de propriétaire - wp_update scheduler.) -- C:\Users\sébastien\AppData\Roaming\~jmyoesp.exe [493272] =>PUP.WpManager [MD5.3FEA9D2EDF23B0283C7A66C8DEA380BD] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player Module.) -- C:\Windows\Downloaded Program Files\dwusplay.dll [24576] [MD5.CDBE35EA59BC9223E4F800BD1DB82D27] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player.) -- C:\Windows\Downloaded Program Files\dwusplay.exe [196608] [MD5.3F4413DCD8D3BBABF08F68F25E6D60E1] [SPRF][16/02/2005] (.InstallShield Software Corporation - InstallShield Update Service Web Agent.) -- C:\Windows\Downloaded Program Files\isusweb.dll [401408] ~ Files: 6 Scanned in 00mn 07s ---\\ Liste des exceptions du parefeu (FirewallRules) (O87) O87 - FAEL: "{8B0199F5-35A0-4A11-825A-814F99EB3949}" \| In - Public - P6 - TRUE \| .(.APN LLC - DtUser.) -- C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\dtUser.exe =>Toolbar.Ask O87 - FAEL: "{53B1CF80-11A5-435F-A755-2A4BAB763E82}" \| In - Public - P17 - TRUE \| .(.APN LLC - DtUser.) -- C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\dtUser.exe =>Toolbar.Ask ~ Firewall: 2 Scanned in 00mn 02s ---\\ Enumère les codes produits des logiciels (PUC) (O90) O90 - PUC: "25946514D214736534007A857BC0F010" . (.Avira SearchFree Toolbar.) -- C:\Windows\Installer\{41564952-412D-5637-4300-A758B70C0F01}\ToolbarIcon.exe =>Toolbar.Avira ~ Update Products: 1 Scanned in 00mn 00s ---\\ Export de clés de registre aléatoires (O91) [HKCU\Software\5308d8cb63fec41\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" =>Hijacker.Eazel [HKCU\Software\5308d8cb63fec41\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:version="2.6.1095.52" =>Hijacker.Eazel [HKCU\Software\5308d8cb63fec41\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1125.80]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" =>Hijacker.Eazel [HKCU\Software\5308d8cb63fec41\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1125.80]:version="2.6.1125.80" =>Hijacker.Eazel [HKCU\Software\5308d8cb63fec41] =>PUP.Babylon^ [HKLM\Software\Wow6432Node\5308d8cb63fec41] => Clé orpheline => Clé orpheline => Clé orpheline => Clé orpheline ~ Export Key Software: Scanned in 00mn 00s ---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS) [MD5.B7426CEF2031125D1A71A98AA65538A5] [WIS][10/03/2014] (.Linkury Inc. - QuickShare Widget.) -- C:\Windows\Installer\2ccee9e3.msi [9572352] =>PUP.QuickShare [MD5.AACB27C8E71C4AF492E78CC3659EA8C1] [WIS][26/06/2014] (.APN, LLC - Avira SearchFree Toolbar.) -- C:\Windows\Installer\3729aa3.msi [856064] =>Toolbar.Avira [MD5.71687EDBD27600E727B54A777ED69E0D] [WIS][16/12/2013] (.Kreapixel - Webplayer.) -- C:\Windows\Installer\b07bb6f.msi [21504] =>Adware.SocialSkinz ~ WIS: 3 Scanned in 00mn 18s ---\\ Recherche de clés de registre Tracing (O100) HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32 =>PUP.AdvancedSystemProtector HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS =>PUP.AdvancedSystemProtector HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32 =>Toolbar.Bing HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BingBar_RASMANCS =>Toolbar.Bing HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\boxore_RASAPI32 =>Adware.Boxore HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\boxore_RASMANCS =>Adware.Boxore HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock BSetup_RASAPI32 =>PUP.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock BSetup_RASMANCS =>PUP.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock Update_RASAPI32 =>PUP.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock Update_RASMANCS =>PUP.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock UpSetup_RASAPI32 =>PUP.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock UpSetup_RASMANCS =>PUP.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock_RASAPI32 =>PUP.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock_RASMANCS =>PUP.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\GoforFiles_RASAPI32 =>P2P.GoforFiles HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\GoforFiles_RASMANCS =>P2P.GoforFiles HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\iLividMediaBar_RASAPI32 =>Adware.Bandoo HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\iLividMediaBar_RASMANCS =>Adware.Bandoo HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\iLividSetup_RASAPI32 =>Adware.Bandoo HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\iLividSetup_RASMANCS =>Adware.Bandoo HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Install_BubbleDock_RASAPI32 =>PUP.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Install_BubbleDock_RASMANCS =>PUP.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LollipopInstaller_RASAPI32 =>Adware.Lollipop HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LollipopInstaller_RASMANCS =>Adware.Lollipop HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Lollipop_RASAPI32 =>Adware.Lollipop HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Lollipop_RASMANCS =>Adware.Lollipop HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MyBabylonTB_RASAPI32 =>PUP.Babylon HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MyBabylonTB_RASMANCS =>PUP.Babylon HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\QuickShare_RASAPI32 =>PUP.QuickShare HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\QuickShare_RASMANCS =>PUP.QuickShare HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SmartbarExeInstaller_RASAPI32 =>Hijacker.SmartBar HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SmartbarExeInstaller_RASMANCS =>Hijacker.SmartBar HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_pour_stellar-phoenix-photo-recovery_RASAPI32 =>Toolbar.Conduit HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_pour_stellar-phoenix-photo-recovery_RASMANCS =>Toolbar.Conduit HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_pour_windows-live-messenger_RASAPI32 =>Toolbar.Conduit HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_pour_windows-live-messenger_RASMANCS =>Toolbar.Conduit ~ BTK: 291 Scanned in 00mn 00s ---\\ Recherche de clés de registre CLSID (O101) [HKCR\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] (QuickShare WidgetEngine) =>PUP.QuickShare [HKCR\CLSID\{41564952-412D-5637-4300-7A786E7484D7}] (Avira SearchFree Toolbar) =>Toolbar.Avira [HKCR\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}] (QuickShare Widget) =>PUP.QuickShare ~ BCK: 4303 Scanned in 00mn 07s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - \| Demand 14/05/2014 257712 \| (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe SS - \| Auto 30/06/2014 138832 \| (Avira.OE.ServiceHost) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe SS - \| Demand 12/10/2010 206072 \| (GamesAppService) . (.WildTangent, Inc..) - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe SS - \| Demand 13/05/2013 1129760 \| (hpqwmiex) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe SS - \| Demand 18/06/2014 119408 \| (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe SS - \| Auto 03/04/2014 315008 \| (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe SS - \| Demand 04/02/2013 155824 \| (Sony PC Companion) . (.Avanquest Software.) - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe SS - \| Demand 14/07/2009 27136 \| C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - \| Auto 21/12/2013 65432 \| (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe SR - \| Auto 10/02/2012 235520 \| (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe SR - \| Auto 10/02/2012 361984 \| (AMD FUEL Service) . (.Advanced Micro Devices, Inc..) - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe SR - \| Auto 27/05/2014 430160 \| (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe SR - \| Auto 27/05/2014 430160 \| (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe SR - \| Auto 27/05/2014 1039952 \| (AntiVirWebService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe SR - \| Auto 23/06/2014 165784 \| (APNMCP) . (.APN LLC..) - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe =>Toolbar.Ask SR - \| Auto 10/07/1658 0 \| (ezSharedSvc) . (.EasyBits Software AS.) - C:\Windows\System32\ezSharedSvcHost.exe =>.EasyBits Software AS SR - \| Auto 04/11/2013 92160 \| (HP Support Assistant Service) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe =>.Hewlett-Packard Co SR - \| Auto 11/10/2010 346168 \| (HPClientSvc) . (.Hewlett-Packard Company.) - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe SR - \| Auto 24/09/2012 31040 \| (hpsrv) . (.Hewlett-Packard Company.) - C:\Windows\System32\Hpservice.exe SR - \| Auto 05/03/2012 35200 \| (HPWMISVC) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe SR - \| Auto 11/03/2014 23808 \| (MsMpSvc) . (.Microsoft Corporation.) - c:\Program Files\Microsoft Security Client\MsMpEng.exe SR - \| Auto 04/01/2012 311808 \| (STacSV) . (.IDT, Inc..) - C:\Program Files\IDT\WDM\STacSV64.exe SR - \| Auto 10/07/1658 0 \| (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation SR - \| Auto 14/07/2009 27136 \| C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe ~ Services: Scanned in 00mn 11s ---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80) Run by sébastien at 06/07/2014 18:09:08 ~ OS 64 not supported by MBR tool ~ MBR: 0 Scanned in 00mn 00s ---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by sébastien at 06/07/2014 18:09:11 ******* Dump file Name ******* C:\PhysicalDisk0_MBR.bin ~ MBR: Scanned in 00mn 02s ---\\ Scan Additionnel (O88) Database Version : 13026 - (06/07/2014) Clés trouvées (Keys found) : 171 Valeurs trouvées (Values found) : 4 Dossiers trouvés (Folders found) : 42 Fichiers trouvés (Files found) : 54 [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{23AF19F7-1D5B-442C-B14C-3D1081953C94}] =>PUP.BubbleDock^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] =>PUP.QuickShare^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{377E5D4D-77E5-476A-8716-7E70A9272DA0}] =>PUP.Datamngr^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-4300-7A786E7484D7}] =>Toolbar.Avira^ [HKLM\SYSTEM\CurrentControlSet\Services\APNMCP] =>Toolbar.Ask^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{41564952-412D-5637-4300-A758B70C0F01}] =>Toolbar.Avira^ [HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Bubble Dock] =>PUP.BubbleDock^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Cartoon Maker1.7] =>PUP.Babylon^ [HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\FLV Player] =>Adware.MegaSearch^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker] =>Adware.MegaSearch^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{11D4FAA0-A577-4FA8-B24E-D24283D861D1}] =>PUP.QuickShare^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ilividtoolbargaw] =>Adware.Bandoo^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F750DB0E-D452-3108-63C9-FE16BC686741}] =>Adware.SocialSkinz^ [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\DATAMNGR] =>PUP.Datamngr^ [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}] =>Hijacker.SmartBar [HKLM\Software\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}] =>PUP.Babylon [HKLM\Software\Wow6432Node\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}] =>PUP.Babylon [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{23AF19F7-1D5B-442c-B14C-3D1081953C94}] =>Adware.SPointer [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{23AF19F7-1D5B-442c-B14C-3D1081953C94}] =>Adware.SPointer [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{23AF19F7-1D5B-442c-B14C-3D1081953C94}] =>Adware.SPointer [HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}] =>PUP.Babylon [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}] =>PUP.Babylon [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] =>Toolbar.Agent [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] =>Toolbar.Agent [HKLM\Software\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] =>Toolbar.Agent [HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] =>PUP.V9Software [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] =>PUP.V9Software [HKLM\Software\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] =>PUP.Babylon [HKLM\Software\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] =>PUP.Babylon [HKLM\Software\Wow6432Node\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] =>PUP.Babylon [HKLM\Software\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}] =>Hijacker.SmartBar [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}] =>Adware.IMBooster [HKLM\Software\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}] =>Hijacker.SmartBar [HKLM\Software\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}] =>Hijacker.SmartBar [HKLM\Software\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}] =>Hijacker.SmartBar [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}] =>Adware.Bandoo [HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}] =>Adware.Bandoo [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ae07101b-46d4-4a98-af68-0333ea26e113}] =>Adware.Agent [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ae07101b-46d4-4a98-af68-0333ea26e113}] =>Adware.Agent [HKLM\Software\Classes\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113}] =>Adware.Agent [HKLM\Software\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}] =>Adware.CDNHelper [HKLM\Software\Wow6432Node\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}] =>Adware.CDNHelper [HKLM\Software\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}] =>Hijacker.SmartBar [HKLM\Software\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>PUP.Babylon [HKLM\Software\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>PUP.Babylon [HKLM\Software\Wow6432Node\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>PUP.Babylon [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}] =>Adware.IMBooster [HKLM\Software\Classes\AppID\escort.dll] =>PUP.Babylon [HKLM\Software\Classes\AppID\escortapp.dll] =>PUP.Babylon [HKLM\Software\Classes\AppID\ieaddon.dll] =>Trojan.FakeAlert [HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASMANCS] =>Toolbar.Bing [HKLM\Software\Classes\escort.escortIEPane] =>PUP.Funmoods [HKLM\Software\Classes\escort.escortIEPane.1] =>PUP.Funmoods [HKCU\Software\APN DTX] =>Toolbar.Ask [HKCU\Software\BabylonToolbar] =>PUP.Babylon [HKLM\Software\Wow6432Node\Boxore] =>Adware.Boxore [HKCU\Software\DataMngr] =>Adware.Bandoo [HKLM\Software\Wow6432Node\DataMngr] =>Adware.Bandoo [HKCU\Software\lollipop] =>Adware.Lollipop [HKLM\Software\Wow6432Node\iLividSRTB] =>Adware.Bandoo [HKCU\Software\ilivid] =>Adware.Bandoo [HKLM\Software\Iminent] =>Adware.IMBooster [HKLM\Software\Wow6432Node\Iminent] =>Adware.IMBooster [HKCU\Software\SmartbarBackup] =>Hijacker.SmartBar [HKCU\Software\SmartbarLog] =>Hijacker.SmartBar [HKCU\Software\Softonic] =>Toolbar.Conduit [HKCU\Software\Somoto] =>Adware.MegaSearch [HKLM\Software\Wow6432Node\Tutorials] =>Spyware.AgenceExclusive [HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASAPI32] =>PUP.Babylon [HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASMANCS] =>PUP.Babylon [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}] =>Toolbar.DeltaSearch [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}] =>Toolbar.DeltaSearch [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}] =>Toolbar.DeltaSearch [HKLM\Software\Classes\Prod.cap] =>PUP.Babylon [HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32] =>Toolbar.Bing [HKCU\Software\InstallCore] =>Adware.InstallCore [HKLM\Software\Wow6432Node\Google\Chrome\Extensions\kkkeikdkpjenmoiicggnnodbkebafgpc] =>PUP.Babylon [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}] =>PUP.Funmoods [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}] =>PUP.Funmoods [HKLM\Software\Wow6432Node\Microsoft\Tracing\QuickShare_RASAPI32] =>PUP.QuickShare [HKLM\Software\Wow6432Node\Microsoft\Tracing\QuickShare_RASMANCS] =>PUP.QuickShare [HKLM\Software\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}] =>Toolbar.DeltaSearch [HKLM\Software\Wow6432Node\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}] =>Toolbar.DeltaSearch [HKLM\Software\Wow6432Node\Microsoft\Tracing\apnstub_RASMANCS] =>Toolbar.Ask [HKLM\Software\Wow6432Node\Microsoft\Tracing\apnstub_RASAPI32] =>Toolbar.Ask [HKLM\Software\Classes\delta.deltaappCore] =>PUP.Funmoods [HKLM\Software\Classes\delta.deltaappCore.1] =>PUP.Funmoods [HKLM\Software\Classes\delta.deltadskBnd] =>PUP.Funmoods [HKLM\Software\Classes\delta.deltadskBnd.1] =>PUP.Funmoods [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{47B614AF-B4CC-485B-B331-BE26F02ED4CC}] =>PUP.Babylon [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{47B614AF-B4CC-485B-B331-BE26F02ED4CC}] =>PUP.Babylon [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{47B614AF-B4CC-485B-B331-BE26F02ED4CC}] =>PUP.Babylon [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Cartoon Maker1.7] =>PUP.Babylon [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Browser Helper Object1.4] =>PUP.Babylon [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{377E5D4D-77E5-476A-8716-7E70A9272DA0}] =>PUP.Datamngr [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{377E5D4D-77E5-476A-8716-7E70A9272DA0}] =>PUP.Datamngr [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{377E5D4D-77E5-476A-8716-7E70A9272DA0}] =>PUP.Datamngr [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{377E5D4D-77E5-476A-8716-7E70A9272DA0}] =>PUP.Datamngr [HKCU\Software\AppDataLow\Software\Crossrider] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Microsoft\Tracing\boxore_RASAPI32] =>Adware.Boxore [HKLM\Software\Wow6432Node\Microsoft\Tracing\boxore_RASMANCS] =>Adware.Boxore [HKCU\Software\AskPartnerNetwork] =>Toolbar.Ask [HKLM\Software\AskPartnerNetwork] =>Toolbar.Ask [HKLM\Software\Wow6432Node\AskPartnerNetwork] =>Toolbar.Ask [HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}] =>Toolbar.Yahoo [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}] =>Toolbar.Yahoo [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{327C2873-E90D-4c37-AA9D-10AC9BABA46C}] =>Toolbar.EasyWebPrint [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{327C2873-E90D-4c37-AA9D-10AC9BABA46C}] =>Toolbar.EasyWebPrint [HKLM\Software\Classes\delta.deltaHlpr] =>Toolbar.DeltaSearch [HKLM\Software\Classes\delta.deltaHlpr.1] =>Toolbar.DeltaSearch [HKLM\Software\Classes\Iminent] =>Adware.IMBooster [HKLM\Software\Classes\Toolband.EB_ExplorerBar] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.EB_ExplorerBar.1] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.FH_HookEventSink] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.FH_HookEventSink.1] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.IPM_PrintListItem] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.IPM_PrintListItem.1] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.PM_DialogEventsHandler] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.PM_DialogEventsHandler.1] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.PM_Launcher] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.PM_Launcher.1] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.PM_PrintManager] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.PM_PrintManager.1] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.PR_BindStatusCallback] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.PR_BindStatusCallback.1] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.PR_CancelButtonEventHandler] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.PR_CancelButtonEventHandler.1] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.PR_PrintDialogCallback] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.PR_PrintDialogCallback.1] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.TBToolband] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.TBToolband.1] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.UserOptions] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.UserOptions.1] =>Toolbar.Agent [HKLM\Software\Classes\AppID\escorTlbr.DLL] =>PUP.Funmoods [HKLM\Software\Wow6432Node\Classes\delta.deltaappCore] =>Toolbar.DeltaSearch [HKLM\Software\Wow6432Node\Classes\delta.deltaappCore.1] =>Toolbar.DeltaSearch [HKLM\Software\Wow6432Node\Classes\delta.deltadskBnd] =>Toolbar.DeltaSearch [HKLM\Software\Wow6432Node\Classes\delta.deltadskBnd.1] =>Toolbar.DeltaSearch [HKLM\Software\Wow6432Node\Classes\delta.deltaHlpr] =>Toolbar.DeltaSearch [HKLM\Software\Wow6432Node\Classes\delta.deltaHlpr.1] =>Toolbar.DeltaSearch [HKLM\Software\Wow6432Node\Classes\escort.escortIEPane] =>PUP.Funmoods [HKLM\Software\Wow6432Node\Classes\escort.escortIEPane.1] =>PUP.Funmoods [HKLM\Software\Wow6432Node\Classes\Iminent] =>Adware.IMBooster [HKLM\Software\Wow6432Node\Classes\Toolband.EB_ExplorerBar] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.EB_ExplorerBar.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.FH_HookEventSink] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.FH_HookEventSink.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.IPM_PrintListItem] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.IPM_PrintListItem.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.PM_DialogEventsHandler] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.PM_DialogEventsHandler.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.PM_Launcher] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.PM_Launcher.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.PM_PrintManager] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.PM_PrintManager.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.PR_BindStatusCallback] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.PR_BindStatusCallback.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.PR_CancelButtonEventHandler] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.PR_CancelButtonEventHandler.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.PR_PrintDialogCallback] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.PR_PrintDialogCallback.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.TBToolband] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.TBToolband.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.UserOptions] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.UserOptions.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\AppID\escort.DLL] =>PUP.Funmoods [HKLM\Software\Wow6432Node\Classes\AppID\escortApp.DLL] =>PUP.Funmoods [HKLM\Software\Wow6432Node\Classes\AppID\escorTlbr.DLL] =>PUP.Funmoods [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^ [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{ae07101b-46d4-4a98-af68-0333ea26e113} =>PUP.QuickShare^ [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:FLV Player =>Adware.SocialSkinz^ [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:AnyProtect Scanner =>PUP.AnyProtect^ [HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks]:{84FF7BD6-B47F-46F8-9130-01B2696B36CB} =>Adware.IMBooster C:\Users\sébastien\AppData\Roaming\Mozilla\Firefox\Profiles\0u2m8k6h.default\extensions\{029afe2e-aa6f-406d-8003-304d06593385} =>PUP.CertifiedToolbar^ C:\Users\sébastien\AppData\Roaming\Mozilla\Firefox\Profiles\usbskqvw.default-1364136879355\extensions\yhwqg@dlhwda.org =>PUP.CostMin^ C:\Users\sébastien\AppData\Roaming\Mozilla\Firefox\Profiles\usbskqvw.default-1364136879355\extensions\{029afe2e-aa6f-406d-8003-304d06593385} =>PUP.CertifiedToolbar^ C:\Users\sébastien\AppData\Roaming\Mozilla\Firefox\Profiles\usbskqvw.default-1364136879355\extensions\{5a3a2697-a720-4cf8-b166-8b1c8c4c84d1} =>PUP.QuickShare^ C:\Program Files (x86)\Bench =>PUP.GiganticSavings^ C:\Program Files (x86)\Cartoon Maker =>PUP.Babylon^ C:\Program Files (x86)\CostMin =>PUP.CostMin^ C:\Program Files (x86)\HomeTab =>PUP.CertifiedToolbar^ C:\Program Files (x86)\LinkSwift =>PUP.LinkSwift^ C:\Program Files (x86)\Movies Toolbar =>PUP.MoviesToolbar^ C:\Program Files (x86)\MyPC Backup =>PUP.MyPCBackup^ C:\Program Files (x86)\NetCrawl =>PUP.NetCrawl^ C:\Program Files (x86)\Search Results Toolbar =>PUP.SearchResults^ C:\Program Files (x86)\SmartSaver+ 3 =>PUP.CrossRider^ C:\ProgramData\Babylon =>PUP.Babylon^ C:\ProgramData\CostMin =>PUP.CostMin^ C:\ProgramData\Datamngr =>PUP.Datamngr^ C:\ProgramData\Software =>Adware.Boxore^ C:\ProgramData\WPM =>PUP.WpManager^ C:\Users\sébastien\AppData\Roaming\Babylon =>PUP.Babylon^ C:\Users\sébastien\AppData\Roaming\GoforFiles =>P2P.GoforFiles^ C:\Users\sébastien\AppData\Roaming\musicMeDownloader.447DBE4B8352E60C6628BA362FFE0160304ED2DC.1 =>PUP.SoftwareEngine^ C:\Users\sébastien\AppData\Roaming\Nosibay =>PUP.BubbleDock^ C:\Users\sébastien\AppData\Roaming\RocketUpdater =>PUP.RockTurner^ C:\Users\sébastien\AppData\Roaming\wp_update =>PUP.WpManager^ C:\Users\sébastien\AppData\Local\BenchUpdater =>PUP.GiganticSavings^ C:\Users\sébastien\AppData\Local\FilesFrog Update Checker =>Adware.MegaSearch^ C:\Users\sébastien\AppData\Local\Lollipop =>Adware.Lollipop^ C:\Users\sébastien\AppData\Local\LPT =>Adware.Incredibar^ C:\Users\sébastien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock =>PUP.BubbleDock^ C:\Users\sébastien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker =>Adware.MegaSearch^ C:\Program Files (x86)\Software =>Adware.Boxore C:\Program Files (x86)\Browser Helper Object =>PUP.Babylon C:\Program Files (x86)\AskPartnerNetwork =>Toolbar.Ask C:\Program Files (x86)\Mozilla Firefox\Extensions\ffxtlbr@babylon.com =>PUP.Babylon C:\ProgramData\Browser Manager =>PUP.Babylon C:\ProgramData\AskPartnerNetwork =>Toolbar.Ask C:\Users\sébastien\AppData\Local\Smartbar =>Hijacker.SmartBar C:\Users\sébastien\AppData\Local\AskPartnerNetwork =>Toolbar.Ask C:\Users\sébastien\AppData\LocalLow\searchresultstb =>Toolbar.Agent C:\Users\sébastien\AppData\LocalLow\Smartbar =>Hijacker.SmartBar C:\Users\sébastien\AppData\Local\Temp\Iminent =>Adware.IMBooster C:\Users\sébastien\AppData\Local\FilesFrog Update Checker\update_checker.exe =>Adware.MegaSearch^ C:\Users\sébastien\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe =>Adware.SocialSkinz^ C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe =>Toolbar.Ask^ C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe =>Toolbar.Ask^ C:\Users\sébastien\AppData\Roaming\ROCKET~1\UPDATE~1\UPDATE~1.exe =>PUP.RockTurner^ C:\Users\sébastien\AppData\Roaming\~jmyoesp.exe =>PUP.WpManager^ C:\Windows\Tasks\APSnotifierPP1.job =>PUP.AnyProtect^ C:\Windows\System32\Tasks\APSnotifierPP1 =>PUP.AnyProtect^ C:\Windows\Tasks\APSnotifierPP2.job =>PUP.AnyProtect^ C:\Windows\System32\Tasks\APSnotifierPP2 =>PUP.AnyProtect^ C:\Windows\Tasks\APSnotifierPP3.job =>PUP.AnyProtect^ C:\Windows\System32\Tasks\APSnotifierPP3 =>PUP.AnyProtect^ C:\Windows\Tasks\bench-S-1-5-21-2706331780-303319812-4136672300-1001.job =>PUP.GiganticSavings^ C:\Windows\System32\Tasks\bench-S-1-5-21-2706331780-303319812-4136672300-1001 =>PUP.GiganticSavings^ C:\Windows\Tasks\da5fafb2-fe4a-4ffa-8ff0-3c951192dd7b-4.job =>PUP.CrossRider^ C:\Windows\System32\Tasks\da5fafb2-fe4a-4ffa-8ff0-3c951192dd7b-4 =>PUP.CrossRider^ C:\Windows\Tasks\Rocket Updater.job =>PUP.RockTurner^ C:\Windows\System32\Tasks\Rocket Updater =>PUP.RockTurner^ [HKCU\Software\AnyProtect] =>PUP.AnyProtect^ [HKCU\Software\AppDataLow\Software\BlockAndSurf] =>PUP.BlockAndSurf^ [HKCU\Software\AppDataLow\Software\Re_markit] =>PUP.ReMarkIt^ [HKCU\Software\AppDataLow\Software\ilividtoolbargaw] =>Adware.Bandoo^ [HKCU\Software\DataMngr_Toolbar] =>PUP.Datamngr^ [HKCU\Software\GoforFiles] =>P2P.GoforFiles^ [HKCU\Software\Rocket Browser] =>PUP.RockTurner^ [HKCU\Software\RocketUpdater] =>PUP.RockTurner^ [HKCU\Software\Smartbar] =>Hijacker.SmartBar^ [HKCU\Software\TutoTag] =>PUP.AgenceExclusive^ [HKCU\Software\freesofttoday] =>Adware.FreeSoftToday^ [HKCU\Software\iLivid] =>Adware.Bandoo^ [HKCU\Software\ilividtoolbargaw] =>Adware.Bandoo^ [HKLM\Software\Wow6432Node\AdvertisingSupport] =>PUP.AdvertisingSupport^ [HKLM\Software\Wow6432Node\Babylon] =>PUP.Babylon^ [HKLM\Software\Wow6432Node\GoforFiles] =>P2P.GoforFiles^ [HKLM\Software\Wow6432Node\Vittalia] =>PUP.Vittalia^ [HKLM\Software\Wow6432Node\aartemisSoftware] =>PUP.AArtemis^ [HKLM\Software\Wow6432Node\supWPM] =>PUP.WpManager^ C:\ProgramData\pclunst.exe =>Rogue.PCCleanerPro^ [HKCU\Software\5308d8cb63fec41\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" =>Hijacker.Eazel^ [HKCU\Software\5308d8cb63fec41\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1125.80]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" =>Hijacker.Eazel^ [HKCU\Software\5308d8cb63fec41] =>PUP.Babylon^^ C:\Windows\Installer\2ccee9e3.msi =>PUP.QuickShare^ C:\Windows\Installer\3729aa3.msi =>Toolbar.Avira^ C:\Windows\Installer\b07bb6f.msi =>Adware.SocialSkinz^ [HKCR\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] (QuickShare WidgetEngine) =>PUP.QuickShare^ [HKCR\CLSID\{41564952-412D-5637-4300-7A786E7484D7}] (Avira SearchFree Toolbar) =>Toolbar.Avira^ [HKCR\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}] (QuickShare Widget) =>PUP.QuickShare^ C:\Users\sébastien\AppData\Local\Temp\uninst1.exe =>PUP.Babylon C:\Users\sébastien\Downloads\flvmplayer.exe =>PUP.Offerware C:\Program Files (x86)\Internet Explorer\cr_addon.crx =>PUP.Babylon C:\Users\sébastien\AppData\Local\Temp\IminentSetup_june26.exe =>Adware.IMBooster C:\Users\sébastien\AppData\Local\Temp\dlLogic.exe =>Toolbar.Conduit ~ Additionnel Scan: 278116 Items scanned in 01mn 19s ---\\ Informations complémentaires sur les modules ~ http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer, Proxy Management (R5) ~ http://nicolascoolman.fr/o2-browser-helper-objects-de-navigateur/ =>.Browser Helper Objects de navigateur (O2) ~ http://nicolascoolman.fr/o3-internet-explorer-toolbars/ =>.Internet Explorer Toolbars (O3) ~ http://nicolascoolman.fr/o4-applications-demarrees-par-le-registre/ =>.Applications lancées au démarrage du système (O4) ~ http://nicolascoolman.fr/o50-image-file-execution-options-zhpdiag/ =>.Image File Execution Options (IFEO) (O50) ~ http://nicolascoolman.fr/o51-mountpoints2-shell-key-mpsk/ =>.Clé de registre Shell MountPoints2 (MPKS) (O51) ~ AMI: 6 Scanned in 00mn 00s ---\\ Récapitulatif des détections trouvées sur votre station http://nicolascoolman.fr/adware-megasearch =>Adware.MegaSearch http://nicolascoolman.fr/adware-socialskinz =>Adware.SocialSkinz http://nicolascoolman.fr/toolbar-ask =>Toolbar.Ask http://nicolascoolman.fr/parasite-pugi =>Parasite.Pugi http://nicolascoolman.fr/hijacker-trovigo =>Hijacker.Trovigo http://nicolascoolman.fr/pup-certifiedtoolbar =>PUP.CertifiedToolbar http://nicolascoolman.fr/pup-costmin =>PUP.CostMin http://nicolascoolman.fr/pup-quickshare =>PUP.QuickShare http://nicolascoolman.fr/pup-aartemis =>PUP.AArtemis http://nicolascoolman.fr/pup-helperbar =>PUP.HelperBar http://nicolascoolman.fr/pup-bubbledock =>PUP.BubbleDock http://nicolascoolman.fr/pup-datamngr =>PUP.Datamngr http://nicolascoolman.fr/pup-anyprotect =>PUP.AnyProtect http://nicolascoolman.fr/adware-freesofttoday =>Adware.FreeSoftToday http://nicolascoolman.fr/pup-moviestoolbar =>PUP.MoviesToolbar http://nicolascoolman.fr/pup-giganticsavings =>PUP.GiganticSavings http://nicolascoolman.fr/pup-plusvid =>PUP.PlusVid http://nicolascoolman.fr/pup-rockturner =>PUP.RockTurner http://nicolascoolman.fr/pup-wpmanager =>PUP.WpManager http://nicolascoolman.fr/pup-crossrider =>PUP.CrossRider http://nicolascoolman.fr/pup-babylon =>PUP.Babylon http://nicolascoolman.fr/adware-bandoo =>Adware.Bandoo http://nicolascoolman.fr/hijacker-eazel =>Hijacker.Eazel http://nicolascoolman.fr/pup-blockandsurf =>PUP.BlockAndSurf http://nicolascoolman.fr/pup-remarkit =>PUP.ReMarkIt http://nicolascoolman.fr/adware-installcore =>Adware.InstallCore http://nicolascoolman.fr/hijacker-smartbar =>Hijacker.SmartBar http://nicolascoolman.fr/toolbar-conduit =>Toolbar.Conduit http://nicolascoolman.fr/spyware-agenceexclusive =>PUP.AgenceExclusive http://nicolascoolman.fr/adware-lollipop =>Adware.Lollipop http://nicolascoolman.fr/adware-imbooster =>Adware.IMBooster http://nicolascoolman.fr/adware-boxore =>Adware.Boxore http://nicolascoolman.fr/pup-vittalia =>PUP.Vittalia http://nicolascoolman.fr/pup-linkswift =>PUP.LinkSwift http://nicolascoolman.fr/pup-mypcbackup =>PUP.MyPCBackup http://nicolascoolman.fr/pup-netcrawl =>PUP.NetCrawl http://nicolascoolman.fr/pup-searchresults =>PUP.SearchResults http://nicolascoolman.fr/pup-softwareengine =>PUP.SoftwareEngine http://nicolascoolman.fr/adware-incredibar =>Adware.Incredibar http://nicolascoolman.fr/pup-systemspeedup =>PUP.SystemSpeedup http://nicolascoolman.fr/pup-bitguard =>PUP.BitGuard http://nicolascoolman.fr/pup-browsersafeguard =>PUP.BrowserSafeguard http://nicolascoolman.fr/spyware-protectedsearch =>Spyware.ProtectedSearch http://nicolascoolman.fr/pup-vuupc =>PUP.VuuPC http://nicolascoolman.fr/pup-minibar =>PUP.Minibar http://nicolascoolman.fr/adware-downware =>Adware.Downware http://nicolascoolman.fr/pup-searchprotect =>PUP.SearchProtect http://nicolascoolman.fr/toolbar-deltasearch =>Toolbar.DeltaSearch http://nicolascoolman.fr/pup-advancedsystemprotector =>PUP.AdvancedSystemProtector http://nicolascoolman.fr/adware-spointer =>Adware.SPointer http://nicolascoolman.fr/pup-v9software =>PUP.V9Software http://nicolascoolman.fr/pup-funmoods =>PUP.Funmoods http://nicolascoolman.fr/pup-offerware =>PUP.Offerware ~ MSI: 53 link(s) detected in 00mn 00s End of the scan (1990 lines in 06mn 01s)(0)
Koytlo2	Le 06/07/2014 à 18:25
Fidèle à VIC. Ancien	salut je crois que l'on s'est croisé sur le forum car le temps que tu me fasse passer le rapprot je t'ai envoyé un message. peux-tu le lire stp ? il est donc juste avant le tien. je vois de par ailleurs que tu peux de nouveau installer des logs car tu as pu installer zhpdiag . peux-tu m'en dire plus la dessus ? je vais étudier ton rapport et je reviens . si tu pouvais en attendant me répondre sur mon message précédent çà serait bien merci salut
Moisebdu02	Le 06/07/2014 à 18:30
	ok, je vais essayer !! lol
Moisebdu02	Le 06/07/2014 à 18:35
	bon bin honnetement, je comprend pas, et je suis nul !! lol
Koytlo2	Le 06/07/2014 à 18:44
Fidèle à VIC. Ancien	salut c'est de nouveau moi.! si tu es amateur de record je t'annonce une bonne nouvelle : tu as battu un record et je pense que tu vas le détenir durant un moment. jusqu'à présent le record était 85 lignes infecté par 7 malwares et autres pup ou virus. Toi tu à 471 lignes infectés par 50 malwares et autres pup ou virus !!!!!!!!! çà vaudrait peut-être le coup que tu réinstalles windows après avoir sauvegarder tous tes docs. mais il y a aussi la possibilité de tout désinfecter . Si c'est des malwares standarts çà ira et çà se fera sans trop de problème sinon çà risque d’être la galère. j'ai pas de conseil à donner mais tu devrais faire gaffe lorsque tu installes des logs. il ne faut pas aller les chercher sur des site de p2p ou autres site bizarres. il faut aller sur clubic ou le site de l'éditeur. de plus lorsqu'il te propose lors de l'installation d'installer autre chose il faut penser à décocher et donc ne pas accepter sinon à longue tu te retrouves avec des tas de malwares sur ton pc. FAIT CE QUE JE TE DIS POINT PAR POINT POUR CE QUI SUIT : remarque : la prochaine fois passe par cjoint.com pour faire passer les rapport car çà sera plus facile. si tu sais pas demande moi. 1- laisse tomber les messages d'avant çà sert plus à rien 2a- installe ccleaner et fait un scan des fichiers temps et élimine tout ce qu'il trouve 2b- fait la même chose en faisant un scan du registre (avec ccleaner) et efface tout se qu'il trouve. FAis-le une deuxième fois (c'est normal t'inquiète pas) 3- met à jour ton anti-virus ou installe en un si tu n'en as pas et fait un scan complet. Elimine tout ce qu'il te trouvera. 4- installe malwarebyte et fais un scan complet et élimine tout ce qu'il te trouvera. fais passer le rapport 5- fais tout çà et tu referas un rapport avec zhpdiag que tu me feras passer par cjoint.com. REMARQUE : fais tout çà dans l'ordre tel que je te le dis. si tu as un soucis fais le moi savoir salut
Moisebdu02	Le 06/07/2014 à 18:49
	vu que jai le reccord, je gagne quoi?? bon j'essai tout ca et te dit quoi, un grand merci en attendant
Moisebdu02	Le 06/07/2014 à 20:14
	bon bin j'ai tous fait dans l'ordre comme tu ma dit et voici le rapport, je doute que ca est changer !! ~ Rapport de ZHPDiag v2014.7.6.102 - Nicolas Coolman (06/07/2014) ~ Lancé par sébastien (06/07/2014 19:53:18) ~ Adresse du Site Web http://nicolascoolman.fr ~ Adresse du Forum http://forum.nicolascoolman.fr ~ Traduit par Nicolas Coolman ~ Etat de la version : Version à jour. ~ Liste blanche : Désactivée par l'utilisateur ~ Elévation des Privilèges : OK ~ User Account Control (UAC): Activate by user ---\\ Navigateurs Internet MSIE: Internet Explorer v11.0.9600.17126 MFIE: Mozilla Firefox 30.0 (Defaut) ---\\ Informations sur les produits Windows ~ Langage: Français Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601) Windows Server License Manager Script : OK ~ Windows Operating System - Windows(R) 7, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : 3Q6C9 Windows License : OK ~ Windows Remaining Initializations Number : 0 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ Logiciels de protection du système Avira Free Antivirus v14.0.4.672 Malwarebytes Anti-Malware version 2.0.2.1012 Microsoft Security Client v4.5.0216.0 Windows Defender W7 (Deactivate) ---\\ Logiciels d'optimisation du système CCleaner v4.01 ---\\ Logiciels de partage PeerToPeer ---\\ Surveillance de Logiciels Adobe Flash Player 13 Plugin Adobe Reader XI ---\\ Informations sur le système ~ Processor: AMD64 Family 21 Model 16 Stepping 1, AuthenticAMD ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 3561 MB (51% free) System Restore: Activé (Enable) System drive C: has 640 GB (70%) free of 911 GB ---\\ Mode de connexion au système ~ Computer Name: SÉBASTIEN-HP ~ User Name: sébastien ~ All Users Names: sébastien, HomeGroupUser$, Administrateur, ~ Unselected Option: None Logged in as Administrator ---\\ Variables d'environnement ~ System Unit : C:\ ~ %AppZHP% : C:\Users\sébastien\AppData\Roaming\ZHP\ ~ %AppData% : C:\Users\sébastien\AppData\Roaming\ ~ %Desktop% : C:\Users\sébastien\Desktop\ ~ %Favorites% : C:\Users\sébastien\Favorites\ ~ %LocalAppData% : C:\Users\sébastien\AppData\Local\ ~ %StartMenu% : C:\Users\sébastien\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ Enumération des unités disques C: Hard drive, Flash drive, Thumb drive (Free 640 Go of 911 Go) D: Hard drive, Flash drive, Thumb drive (Free 2 Go of 20 Go) E: CD-ROM drive (Not Inserted) F: Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go) Q: Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go) ---\\ Etat du Centre de Sécurité Windows [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ~ Security Center: 41 Scanned in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.03/03/2112 - 19:21:56.) -- C:\Windows\Explorer.exe [2871808] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024] [MD5.40BFD9D6EC8E174145F012246CA73CCD] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.30/05/2014 - 08:56:56.) -- C:\Windows\System32\wininet.dll [2266112] [MD5.88AB9B72B4BF3963A0DE0820B4B0B06C] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.04/03/2014 - 10:43:50.) -- C:\Windows\System32\Winlogon.exe [455168] [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/11/2010 - 04:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448] [MD5.79059559E89D06E8B80CE2944BE20228] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/09/2013 - 02:09:10.) -- C:\Windows\system32\Drivers\AFD.sys [497152] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160] [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456] [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400] [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224] [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.03/03/2112 - 19:25:26.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208] [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21/11/2010 - 04:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632] [MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24/01/2014 - 03:37:55.) -- C:\Windows\system32\Drivers\ntfs.sys [1684928] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280] [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/11/2010 - 04:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184] [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\tdx.sys [119296] [MD5.DF8126BD41180351A093A3AD2FC8903B] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.03/03/2112 - 19:18:52.) -- C:\Windows\system32\Drivers\volsnap.sys [296320] ~ Generic Processes: Scanned in 00mn 04s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 1/641 ~ Mes musiques (My Musics) : 17/356 ~ Mes Videos (My Videos) : 1/30 ~ Mes Favoris (My Favorites) : 1/40 ~ Mes Documents (My Documents) : 1/160 ~ Mon Bureau (My Desktop) : 5/24262 ~ Menu demarrer (Programs) : 1/29 ~ Hidden Files: Scanned in 02mn 11s ---\\ Processus lancés [MD5.4FBC630768570E6AC35C3DE8F6EC79F5] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [6970168] [PID.3336] [MD5.B7F55E2AE978D3D34F7876EE5D689AAE] - (.CyberLink - YouCam Mirage.) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488] [PID.4624] [MD5.4F9236BE13917B89F7A03DEA85F220FA] - (.Pas de propriétaire - WebPlayer.) -- C:\Users\sébastien\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe [202752] [PID.4240] =>Adware.SocialSkinz [MD5.449E6CD914920B84DDDF0F12880411EE] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224] [PID.4704] [MD5.00E10C74F2C0350277B5B0500D51D7D2] - (.Sony - Sony PC Companion.) -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [466656] [PID.4928] [MD5.048EA4B978851788E9F5E8E4F081DF7A] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904] [PID.1332] [MD5.CA1F035A177457B47F9B7D669FE3E91A] - (.Avira Operations GmbH & Co. KG - Avira.) -- C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [187984] [PID.3092] [MD5.5374D3363F5B87CF03125F5FB584C8CE] - (.Avira Operations GmbH & Co. KG - Avira system tray application.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872] [PID.4004] [MD5.F0EA603E7B91046CA48EA4B3593A007D] - (.Micro Application - Pas de description.) -- C:\Program Files (x86)\Micro Application\LauncherMA.exe [485376] [PID.2720] [MD5.0A76EB770F0D432AA7795C5DDB27B888] - (.APN - Ask Toolbar Notifier.) -- C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1956760] [PID.5104] =>Toolbar.Ask [MD5.0F6D06A88A88007AAEE5F0EE1ECE42E4] - (...) -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe [70880] [PID.1900] [MD5.7E0EBC6933621F994BF6C4232548CDA7] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8074240] [PID.3128] [MD5.0BF3BE441B226D018767C28F92830D34] - (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160] [PID.1940] [MD5.B362181ED3771DC03B4141927C80F801] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65432] [PID.1504] [MD5.0BF3BE441B226D018767C28F92830D34] - (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160] [PID.1960] [MD5.E7F2414D8EBF7C269FC5FC878C1DD1E9] - (.APN LLC. - APN Updater.) -- C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [165784] [PID.2060] =>Toolbar.Ask [MD5.72551A9AE5F68905DFC3CBA0D5242566] - (.Microsoft Corporation - Updates Skype Click to Call.) -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720] [PID.2108] [MD5.6B669A00A431FF6CDCE67458933F5F0F] - (.Microsoft Corporation - Phone Number Recognition (PNR) module.) -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992] [PID.2140] [MD5.CA793DCC1D5F619021EF1D37CC7A831E] - (.EasyBits Software AS - Shared EasyBits services for Windows.) -- C:\Windows\SysWOW64\ezSharedSvcHost.exe [514232] [PID.2240] [MD5.2BEC76BDCD1BC080210325E7B5094834] - (.Hewlett-Packard Development Company, L.P. - HP Quick Launch WMI Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [35200] [PID.2304] [MD5.D84AEA3F3329D622DFC1297DDDF6163B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720] [PID.2368] [MD5.4F45ED469906494F9BF754E476390DBD] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472] [PID.2484] [MD5.39B1D0A636A400304565D4521FAD6D77] - (.Microsoft Corporation - Microsoft Application Virtualization Virtua.) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [207528] [PID.2808] [MD5.77C5A741A7452812F278EF2C18478862] - (.Microsoft Corporation - Microsoft Application Virtualization Client.) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [523944] [PID.2964] [MD5.BC38AB90A166625BA160941D64906A65] - (.Avira Operations GmbH & Co. KG - Avira.OE.ServiceHost.) -- C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [138832] [PID.748] [MD5.FD557A50A65E44041CD2FCEF4BEB04DB] - (.Microsoft Corporation - Microsoft Office Client Virtualization Serv.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.exe [822504] [PID.3212] [MD5.62B0AC6589A46AA9EBA27E63627C2812] - (.Avira Operations GmbH & Co. KG - AntiVir WebGuard WFP Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1039952] [PID.3264] ~ Processes Running: Scanned in 00mn 04s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) C:\Users\sébastien\AppData\Roaming\Mozilla\Firefox\Profiles\0u2m8k6h.default\prefs.js C:\Users\sébastien\AppData\Roaming\Mozilla\Firefox\Profiles\0u2m8k6h.default\user.js C:\Users\sébastien\AppData\Roaming\Mozilla\Firefox\Profiles\usbskqvw.default-1364136879355\prefs.js C:\Users\sébastien\AppData\Roaming\Mozilla\Firefox\Profiles\usbskqvw.default-1364136879355\user.js M2 - MFEP: prefs.js [sébastien - 0u2m8k6h.default\{029afe2e-aa6f-406d-8003-304d06593385}] [] HomeTab v5.7 (..) =>PUP.CertifiedToolbar M2 - MFEP: prefs.js [sébastien - usbskqvw.default-1364136879355\yhwqg@dlhwda.org] [] CostMin v2.2 (..) =>PUP.CostMin M2 - MFEP: prefs.js [sébastien - usbskqvw.default-1364136879355\{029afe2e-aa6f-406d-8003-304d06593385}] [] HomeTab v5.7 (..) =>PUP.CertifiedToolbar M2 - MFEP: prefs.js [sébastien - usbskqvw.default-1364136879355\{5a3a2697-a720-4cf8-b166-8b1c8c4c84d1}] [] QuickShare Widget v5.7 (..) =>PUP.QuickShare P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.30214.0.) -- c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll P2 - FPN: [HKLM] [adobe.com/AdobeAAMDetect] - (.Adobe Systems - A plugin to detect whether the Adobe Application Manager is installed.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (.Skype Limited - Facebook Video Calling Plugin.) -- C:\Users\sébastien\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll ~ Firefox Browser: 8 Scanned in 00mn 01s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = www.google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.aartemis.com =>PUP.AArtemis R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.aartemis.com =>PUP.AArtemis R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = www.google.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.aartemis.com =>PUP.AArtemis R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.aartemis.com =>PUP.AArtemis R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.9600.17041 (winblue_gdr.140305-1710)) -- C:\Windows\SysWOW64\ieframe.dll R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 ~ IE Browser: 23 Scanned in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\System32\Userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\\ Hosts file redirection (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Hosts File: Scanned in 00mn 00s ~ Nombre de lignes (Lines number): 21 ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: Avira SearchFree Toolbar BHO [64Bits] - {41564952-412D-5637-4300-7A786E7484D7} . (...) -- "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll" (.not file.) =>Toolbar.Avira O2 - BHO: BHO [64Bits] - {47B614AF-B4CC-485B-B331-BE26F02ED4CC} . (.APC - Browser Helper Object.) -- C:\Program Files (x86)\Internet Explorer\IEAddon.dll O2 - BHO: Canon Easy Web Print Helper [64Bits] - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} . (.Pas de propriétaire - Easy-WebPrint EWPBrowseLoader Module.) -- C:\Program Files (x86)\Canon\Easy-WebPrint\EWPBrowseLoader.dll O2 - BHO: AMD SteadyVideo BHO [64Bits] - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} . (.Advanced Micro Devices - This plugin allows the user to turn AMD Ste.) -- C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Messenger Companion Helper [64Bits] - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O2 - BHO: Adobe Acrobat Create PDF Toolbar Helper [64Bits] - {AE7CD045-E861-484f-8273-0445EE161910} . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll O2 - BHO: SkypeIEPluginBHO [64Bits] - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Microsoft Corporation - Skype Click to Call for Internet Explorer.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: HP Network Check Helper [64Bits] - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} . (.Hewlett-Packard - HP Network Check IE Plug-in.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll O2 - BHO: SmartSelect [64Bits] - {F4971EE7-DAA0-4053-9964-665D8EE6A077} . (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll ~ BHO: 15 Scanned in 00mn 01s ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: QuickShare Widget - [HKLM]{ae07101b-46d4-4a98-af68-0333ea26e113} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>PUP.QuickShare O3 - Toolbar: Avira SearchFree Toolbar - [HKLM]{41564952-412D-5637-4300-7A786E7484D7} . (.APN LLC. - Passport.) -- C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll =>Toolbar.Ask O3 - Toolbar\WebBrowser: (no name) - [HKCU]{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} Clé orpheline O3 - Toolbar\WebBrowser: (no name) - [HKCU]{41564952-412D-5637-4300-7A786E7484D7} Clé orpheline ~ Toolbar: Scanned in 00mn 00s ---\\ Autres liens utilisateurs (O4) O4 - GS\Desktop [Public]: HP+.lnk . (...) -- C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe O4 - GS\Program [Public]: Webplayer.lnk . (...) -- C:\Program Files (x86)\Webplayer\Webplayer.exe =>Adware.SocialSkinz O4 - GS\QuickLaunch [sébastien]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe http://aartemis.com =>PUP.AArtemis O4 - GS\TaskBar [sébastien]: Photos Snapfish.lnk . (...) -- C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe O4 - GS\Program [sébastien]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://aartemis.com =>PUP.AArtemis O4 - GS\SystemTools [sébastien]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://aartemis.com =>PUP.AArtemis ~ Global Startup: 6 Scanned in 00mn 07s ---\\ Applications lancées au démarrage du système (O4) O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe O4 - HKLM\..\Run: [Logitech Download Assistant] . (.Logitech, Inc. - Logitech Download Assistant.) -- C:\Windows\System32\LogiLDA.dll O4 - HKLM\..\RunOnce: [NCPluginUpdater] . (.Hewlett-Packard - NCPluginUpdater.) -- C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\sébastien\AppData\Local\Facebook\Update\FacebookUpdate.exe O4 - HKCU\..\Run: [Drivers Manager] . (.Avanquest Software - Drivers Manager.) -- C:\Program Files (x86)\Drivers Manager\DMLauncher.exe O4 - HKCU\..\Run: [FLV Player] . (.Pas de propriétaire - WebPlayer.) -- C:\Users\sébastien\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe =>Adware.SocialSkinz O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A. O4 - HKCU\..\Run: [Sony PC Companion] . (.Sony - Sony PC Companion.) -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated O4 - HKLM\..\Wow6432Node\Run: [Avira Systray] . (.Avira Operations GmbH & Co. KG - Avira.) -- C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Avira system tray application.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe O4 - HKLM\..\Wow6432Node\Run: [ApnTBMon] . (.APN - Ask Toolbar Notifier.) -- C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe =>Toolbar.Ask O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-2706331780-303319812-4136672300-1001\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\sébastien\AppData\Local\Facebook\Update\FacebookUpdate.exe O4 - HKUS\S-1-5-21-2706331780-303319812-4136672300-1001\..\Run: [Drivers Manager] . (.Avanquest Software - Drivers Manager.) -- C:\Program Files (x86)\Drivers Manager\DMLauncher.exe O4 - HKUS\S-1-5-21-2706331780-303319812-4136672300-1001\..\Run: [FLV Player] . (.Pas de propriétaire - WebPlayer.) -- C:\Users\sébastien\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe =>Adware.SocialSkinz O4 - HKUS\S-1-5-21-2706331780-303319812-4136672300-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A. O4 - HKUS\S-1-5-21-2706331780-303319812-4136672300-1001\..\Run: [Sony PC Companion] . (.Sony - Sony PC Companion.) -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe ~ Application: Scanned in 00mn 00s ---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5) O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no ~ IE Control Panel: 1 Scanned in 00mn 00s ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll,-102 [64Bits] - {25510184-5A38-4A99-B273-DCA8EEF6CD08} . (...) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\Resources\Icons\HP.ico O9 - Extra button: Skype Click to Call [64Bits] - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- c:\program files (x86)\skype\toolbars\internet explorer x64\icon.ico ~ IE Extra Buttons: Scanned in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =>.Microsoft Corporation O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation ~ Winsock: 8 Scanned in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{78AAD45F-AC44-4659-9354-9BD2C4D8EDE0}: DhcpNameServer = 212.27.40.240 212.27.40.241 O17 - HKLM\System\CCS\Services\Tcpip\..\{98A759E0-BDCA-46E4-A0E2-E1FD85755E3A}: DhcpNameServer = 212.27.40.241 212.27.40.240 O17 - HKLM\System\CS1\Services\Tcpip\..\{78AAD45F-AC44-4659-9354-9BD2C4D8EDE0}: DhcpNameServer = 212.27.40.240 212.27.40.241 O17 - HKLM\System\CS1\Services\Tcpip\..\{98A759E0-BDCA-46E4-A0E2-E1FD85755E3A}: DhcpNameServer = 212.27.40.241 212.27.40.240 O17 - HKLM\System\CS2\Services\Tcpip\..\{78AAD45F-AC44-4659-9354-9BD2C4D8EDE0}: DhcpNameServer = 212.27.40.240 212.27.40.241 O17 - HKLM\System\CS2\Services\Tcpip\..\{98A759E0-BDCA-46E4-A0E2-E1FD85755E3A}: DhcpNameServer = 212.27.40.241 212.27.40.240 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241 ~ Domain: Scanned in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- O18 - Filter: video/x-flv [64Bits] - {20C75730-7C25-476B-95DC-C65810F9E489} . (.Advanced Micro Devices - MIME Video Detector for IE.) -- C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll ~ Protocole Additionnel: Scanned in 00mn 00s ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - AppInit_DLLs: . (...) - C:\PROGRA~3\Wincert\WIN64C~1.dll (.not file.) ~ AppInit DLL: Scanned in 00mn 00s ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. ~ SSODL: 1 Scanned in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe O23 - Service: AMD FUEL Service (AMD FUEL Service) . (.Advanced Micro Devices, Inc. - Service Fusion Utility.) - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe O23 - Service: Avira Planificateur (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira Protection temps réel (AntiVirService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe O23 - Service: Avira Protection Web (AntiVirWebService) . (.Avira Operations GmbH & Co. KG - AntiVir WebGuard WFP Service.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe O23 - Service: Service de mise à jour Ask (APNMCP) . (.APN LLC. - APN Updater.) - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe =>Toolbar.Ask O23 - Service: Avira Service Host (Avira.OE.ServiceHost) . (.Avira Operations GmbH & Co. KG - Avira.OE.ServiceHost.) - C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe O23 - Service: HP Support Assistant Service (HP Support Assistant Service) . (.Hewlett-Packard Company - HP Support Assistant Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe =>.Hewlett-Packard Co O23 - Service: HP Client Services (HPClientSvc) . (.Hewlett-Packard Company - HP Client Services.) - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe O23 - Service: HP Service (hpsrv) . (.Hewlett-Packard Company - HpService.) - C:\Windows\System32\Hpservice.exe O23 - Service: HPWMISVC (HPWMISVC) . (.Hewlett-Packard Development Company, L.P. - HP Quick Launch WMI Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: C:\Windows\System32\stlang64.dll (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Program Files\IDT\WDM\STacSV64.exe ~ Services: 16 Scanned in 00mn 13s ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(...) - (.not file.) ~ Desktop Component: 4 Scanned in 00mn 00s ---\\ Enumère les données de BootExecute (BEX) (O34) O34 - HKLM BootExecute: (autocheck autochk ) - File not found ~ BEX: 1 Scanned in 00mn 00s ---\\ Clés Session Manager (AppCertDlls,KnownDLLs) (O36) O36 - AppCertDlls: (x86) . (...) -- C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll =>PUP.MoviesToolbar O36 - AppCertDlls: (x64) . (...) -- C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\apcrtldr.dll =>PUP.MoviesToolbar ~ Keys: Scanned in 00mn 00s ---\\ Tâches planifiées en automatique (O39) [MD5.09E7C37DF4A911C8A9AA8BF88ACD10AA] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [257712] [MD5.00000000000000000000000000000000] [APT] [APSnotifierPP1] (...) -- C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe (.not file.) [0] =>PUP.AnyProtect [MD5.00000000000000000000000000000000] [APT] [APSnotifierPP2] (...) -- C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe (.not file.) [0] =>PUP.AnyProtect [MD5.00000000000000000000000000000000] [APT] [APSnotifierPP3] (...) -- C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe (.not file.) [0] =>PUP.AnyProtect [MD5.F498F9A6044DE57744BD465662E6AD77] [APT] [BHO updater] (...) -- C:\Program Files (x86)\Internet Explorer\Updater.exe [117760] [MD5.42BC01952E1ED3152DDE0C0C9C2012D4] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [3545880] [MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-2706331780-303319812-4136672300-1001Core] (.Facebook Inc..) -- C:\Users\sébastien\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096] [MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-2706331780-303319812-4136672300-1001UA] (.Facebook Inc..) -- C:\Users\sébastien\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096] [MD5.00000000000000000000000000000000] [APT] [GoforFilesUpdate] (...) -- C:\Program Files (x86)\GoforFiles\GFFUpdater.exe (.not file.) [0] =>P2P.GoforFiles [MD5.8AA3B22B716A04AC8DD13318A40D708D] [APT] [HPCeeScheduleFors‚bastien] (.Hewlett-Packard.) -- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [95800] [MD5.8AA3B22B716A04AC8DD13318A40D708D] [APT] [HPCeeScheduleForSBASTIEN-HP$] (.Hewlett-Packard.) -- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [95800] [MD5.B7F55E2AE978D3D34F7876EE5D689AAE] [APT] [MirageAgent] (.CyberLink.) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488] [MD5.00000000000000000000000000000000] [APT] [Rocket Updater] (...) -- C:\Users\sébastien\AppData\Roaming\ROCKET~1\UPDATE~1\UPDATE~1.exe (.not file.) [0] =>PUP.RockTurner [MD5.00000000000000000000000000000000] [APT] [SomotoUpdateCheckerAutoStart] (...) -- C:\Users\sébastien\AppData\Local\FilesFrog Update Checker\update_checker.exe (.not file.) [0] =>Adware.MegaSearch [MD5.00000000000000000000000000000000] [APT] [wp_update] (...) -- C:\Users\sébastien\AppData\Roaming\~jmyoesp.exe (.not file.) [0] =>PUP.WpManager [MD5.C155A13687144076286989EF078112C2] [APT] [{01BEFB6A-35E0-4057-892F-6B7B40C6D7A5}] (.Nicolas Coolman.) -- C:\Program Files (x86)\ZHPDiag\ZHPhep.exe [1917440] [MD5.1E47F5A4CBB3221990409E655931EB91] [APT] [{11B30998-C6D6-437B-8DAC-C73918627085}] (.CyberGSM.) -- C:\Users\sébastien\Documents\code calculator\code calculator\Code Calculator 4.1.exe [401408] [MD5.C155A13687144076286989EF078112C2] [APT] [{BD1B0BE7-D78F-48B1-A8E1-E9CB2D07D272}] (.Nicolas Coolman.) -- C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe [1917440] [MD5.3E53CC4591B043C8D42FB3D771D55FCE] [APT] [HP Support Assistant Quick Start] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [542008] [MD5.3E53CC4591B043C8D42FB3D771D55FCE] [APT] [PC Health Analysis] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [542008] [MD5.16F1F09240540D9409DA192839C9D786] [APT] [Update Check] (.Hewlett-Packard Company.) -- C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [630584] [MD5.701C65A8DF4B7663FFA4A1032598DFE9] [APT] [WarrantyChecker_DeviceScan] (.Hewlett-Packard.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1586392] O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002] O39 - APT: APSnotifierPP1 - (...) -- C:\Windows\Tasks\APSnotifierPP1.job [378] =>PUP.AnyProtect O39 - APT: APSnotifierPP1 - (...) -- C:\Windows\System32\Tasks\APSnotifierPP1 [378] =>PUP.AnyProtect O39 - APT: APSnotifierPP2 - (...) -- C:\Windows\Tasks\APSnotifierPP2.job [376] =>PUP.AnyProtect O39 - APT: APSnotifierPP2 - (...) -- C:\Windows\System32\Tasks\APSnotifierPP2 [376] =>PUP.AnyProtect O39 - APT: APSnotifierPP3 - (...) -- C:\Windows\Tasks\APSnotifierPP3.job [376] =>PUP.AnyProtect O39 - APT: APSnotifierPP3 - (...) -- C:\Windows\System32\Tasks\APSnotifierPP3 [376] =>PUP.AnyProtect O39 - APT: FacebookUpdateTaskUserS-1-5-21-2706331780-303319812-4136672300-1001Core - (.Facebook Inc..) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2706331780-303319812-4136672300-1001Core.job [922] O39 - APT: FacebookUpdateTaskUserS-1-5-21-2706331780-303319812-4136672300-1001Core - (.Facebook Inc..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2706331780-303319812-4136672300-1001Core [922] O39 - APT: FacebookUpdateTaskUserS-1-5-21-2706331780-303319812-4136672300-1001UA - (.Facebook Inc..) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2706331780-303319812-4136672300-1001UA.job [944] O39 - APT: FacebookUpdateTaskUserS-1-5-21-2706331780-303319812-4136672300-1001UA - (.Facebook Inc..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2706331780-303319812-4136672300-1001UA [944] O39 - APT: - (..) -- C:\Windows\Tasks\HPCeeScheduleForSÉBASTIEN-HP$.job [352] O39 - APT: - (..) -- C:\Windows\System32\Tasks\HPCeeScheduleForSÉBASTIEN-HP$ [352] O39 - APT: APT: - (..) -- C:\Windows\Tasks\HPCeeScheduleForSÉBASTIEN-HP$.job [352] - (..) -- C:\Windows\Tasks\HPCeeScheduleForsébastien.job [348] O39 - APT: APT: - (..) -- C:\Windows\System32\Tasks\HPCeeScheduleForSÉBASTIEN-HP$ [352] - (..) -- C:\Windows\System32\Tasks\HPCeeScheduleForsébastien [348] O39 - APT: Rocket Updater - (...) -- C:\Windows\Tasks\Rocket Updater.job [306] =>PUP.RockTurner O39 - APT: Rocket Updater - (...) -- C:\Windows\System32\Tasks\Rocket Updater [306] =>PUP.RockTurner ~ Scheduled Task: 31 Scanned in 00mn 09s ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll =>.Microsoft Corporation O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll O40 - ASIC: Internet Explorer [64Bits] - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe =>.Microsoft Corporation O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe =>.Microsoft Corporation O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll ~ Active Setup: 10 Scanned in 00mn 00s ---\\ Pilotes lancés au démarrage du système (O41) O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys O41 - Driver: (avipbb) . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) - C:\Windows\System32\DRIVERS\avipbb.sys O41 - Driver: (avkmgr) . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) - C:\Windows\System32\DRIVERS\avkmgr.sys O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\drivers\blbdrive.sys O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys ~ Drivers: 66 Scanned in 00mn 00s ---\\ Logiciels installés (O42) O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM][64Bits] -- {503F672D-6C84-448A-8F8F-4BC35AC83441} O42 - Logiciel: AMD Accelerated Video Transcoding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {F8E65951-694F-5F50-21C2-391B46B26653} O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {9D1400EC-5703-3983-53B7-AEFB8BFD1CFA} O42 - Logiciel: AMD Steady Video Plug-In - (.AMD.) [HKLM][64Bits] -- {5E015E15-F7AD-3379-523F-AD63C0CB9E71} O42 - Logiciel: Adobe Acrobat XI Pro - (.Adobe Systems.) [HKLM][64Bits] -- {AC76BA86-1033-FFFF-7760-000000000006} O42 - Logiciel: Adobe Download Assistant - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- com.adobe.downloadassistant.AdobeDownloadAssistant O42 - Logiciel: Adobe Download Assistant - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {5E21B617-F52E-BB10-92F9-C8AB2C799A8A} O42 - Logiciel: Adobe Flash Player 13 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 13 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Reader XI (11.0.06) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AB0000000001} O42 - Logiciel: Adobe Shockwave Player 11.6 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Shockwave Player O42 - Logiciel: ArcSoft PhotoStudio 5.5 - (.ArcSoft.) [HKLM][64Bits] -- {85309D89-7BE9-4094-BB17-24999C6118FC} O42 - Logiciel: Atheros Driver Installation Program - (.Atheros.) [HKLM][64Bits] -- {C3A32068-8AB1-4327-BB16-BED9C6219DC7} O42 - Logiciel: Avira Free Antivirus v14.0.4.672 - (.Avira.) [HKLM][64Bits] -- Avira AntiVir Desktop O42 - Logiciel: Avira SearchFree Toolbar v12.15.1.462 - (.APN, LLC.) [HKLM][64Bits] -- {41564952-412D-5637-4300-A758B70C0F01} =>Toolbar.Avira O42 - Logiciel: Avira v1.1.16.30000 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- {356ECF26-71E8-4F4A-A197-59C91657DD43} O42 - Logiciel: Avira v1.1.16.30000 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- {89ef9b48-b56b-48d8-b5c1-4eb9a5ca50cb} O42 - Logiciel: Bejeweled 3 - (.WildTangent.) [HKLM][64Bits] -- WTA-af4017ce-5428-45e7-80b5-1b61c0e76d1b O42 - Logiciel: Browser Helper Object - (.APC Soft.) [HKLM][64Bits] -- Browser Helper Object1.4 O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner O42 - Logiciel: Cake Mania - (.WildTangent.) [HKLM][64Bits] -- WTA-f0888034-2292-4d4e-8d52-70944cb167fb O42 - Logiciel: Canon MP Navigator 3.0 - (...) [HKLM][64Bits] -- MP Navigator 3.0 O42 - Logiciel: Canon MP160 - (...) [HKLM][64Bits] -- {1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP160 O42 - Logiciel: Canon Utilities Easy-PhotoPrint - (...) [HKLM][64Bits] -- Easy-PhotoPrint O42 - Logiciel: Cartoon Maker - (...) [HKLM][64Bits] -- Cartoon Maker1.7 =>PUP.Babylon O42 - Logiciel: Catalyst Control Center - Branding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {31BF9CD1-A904-43B5-A236-53E5E908AD0E} O42 - Logiciel: Chuzzle Deluxe - (.WildTangent.) [HKLM][64Bits] -- WTA-d97cbfb8-cc92-45b4-b3ef-c7780ebf6c1b O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {64BF0187-F3D2-498B-99EA-163AF9AE6EC9} O42 - Logiciel: Cisco LEAP Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {51C7AD07-C3F6-4635-8E8A-231306D810FE} O42 - Logiciel: Cisco PEAP Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {ED5776D5-59B4-46B7-AF81-5F2D94D7C640} O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6} O42 - Logiciel: Cradle of Rome 2 - (.WildTangent.) [HKLM][64Bits] -- WTA-cd2fc990-a764-4826-bb7d-99481c623b29 O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D} O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D} O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} O42 - Logiciel: Digital Camera Driver - (...) [HKLM][64Bits] -- Digital Camera Driver O42 - Logiciel: Drivers Manager v3.0 - (.Avanquest Software.) [HKLM][64Bits] -- Drivers Manager_is1 O42 - Logiciel: ESU for Microsoft Windows 7 SP1 - (.Hewlett-Packard.) [HKLM][64Bits] -- {768A6276-5822-489C-8A2B-67190F745655} O42 - Logiciel: Easy-WebPrint - (...) [HKLM][64Bits] -- Easy-WebPrint O42 - Logiciel: Enregistrement utilisateur de Canon MP160 - (...) [HKLM][64Bits] -- Enregistrement utilisateur de Canon MP160 =>.Canon Inc O42 - Logiciel: Evernote v. 4.5.2 - (.Evernote Corp..) [HKLM][64Bits] -- {8CE152BA-1D16-11E1-867D-984BE15F174E} O42 - Logiciel: FATE - (.WildTangent.) [HKLM][64Bits] -- WTA-53e5d5f3-e868-40f1-b464-73c71b802fc4 O42 - Logiciel: FLV Player - (.Somoto Ltd..) [HKCU][64Bits] -- FLV Player =>Adware.MegaSearch O42 - Logiciel: Facebook Video Calling 2.0.0.447 - (.Skype Limited.) [HKLM][64Bits] -- {8DF41A9F-FE13-43E8-A003-5F9B55A011EE} O42 - Logiciel: Farm Frenzy - (.WildTangent.) [HKLM][64Bits] -- WTA-a81c1051-5fd8-463e-bec8-66bc65a0a496 O42 - Logiciel: Farmscapes - (.WildTangent.) [HKLM][64Bits] -- WTA-e525ebb6-0e0b-451c-a94d-75f96036c7a4 O42 - Logiciel: Final Drive Fury - (.WildTangent.) [HKLM][64Bits] -- WTA-7ce7c700-9b5f-43f6-a26f-c18a010d984b O42 - Logiciel: Fishdom (TM) 2 - (.WildTangent.) [HKLM][64Bits] -- WTA-5ad380cc-592b-4cb9-9b5f-78f2857e657d O42 - Logiciel: HP 3D DriveGuard - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {F9E399CB-046F-45FD-A67F-CF399E2128E4} O42 - Logiciel: HP Auto - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {CC4D56B7-6F18-470B-8734-ABCD75BCF4F1} O42 - Logiciel: HP Client Services - (.Hewlett-Packard.) [HKLM][64Bits] -- {2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2} O42 - Logiciel: HP CoolSense - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {11AF9A96-6D83-4C3B-8DCB-16EA2A358E3F} O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM][64Bits] -- {07FA4960-B038-49EB-891B-9F95930AA544} O42 - Logiciel: HP Documentation - (.Hewlett-Packard.) [HKLM][64Bits] -- {16652164-D80F-4EE6-90C6-2E8D5D06092A} O42 - Logiciel: HP Games - (.WildTangent.) [HKLM][64Bits] -- WildTangent hp Master Uninstall O42 - Logiciel: HP Launch Box - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {5A847522-375C-4D05-BD3D-88C450CC047F} O42 - Logiciel: HP On Screen Display - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {ED1BD69A-07E3-418C-91F1-D856582581BF} O42 - Logiciel: HP Power Manager - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {D8BCE5B9-67CF-4F3F-93AE-3ACC754C72EB} O42 - Logiciel: HP Quick Launch - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {53B17A98-5BF0-40BC-AAFF-850A357975AC} O42 - Logiciel: HP Recovery Manager - (.Hewlett-Packard.) [HKLM][64Bits] -- {DBCD5E64-7379-4648-9444-8A6558DCB614} O42 - Logiciel: HP Security Assistant - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {F9DF0B5D-554B-45D2-8698-7C467FAF4BCA} O42 - Logiciel: HP Setup - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1} O42 - Logiciel: HP Setup Manager - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {AE856388-AFAD-4753-81DF-D96B19D0A17C} O42 - Logiciel: HP Software Framework - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {98D5A5FA-1AA3-4CBE-B26C-A737E20F8A6D} O42 - Logiciel: HP Support Assistant - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {E35A3B13-78CD-4967-8AC8-AA9FDA693EDE} =>.Hewlett-Packard Co O42 - Logiciel: Hewlett-Packard ACLM.NET v1.2.2.3 - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {6F340107-F9AA-47C6-B54C-C3A19F11553F} O42 - Logiciel: IDT Audio - (.IDT.) [HKLM][64Bits] -- {E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001} O42 - Logiciel: Insaniquarium Deluxe - (.WildTangent.) [HKLM][64Bits] -- WTA-b104b1eb-d914-4fb9-b5a8-4896e8ef6ab1 O42 - Logiciel: Jewel Match 3 - (.WildTangent.) [HKLM][64Bits] -- WTA-fa269f46-d387-477c-a47e-228e24658b10 O42 - Logiciel: Jewel Quest II - (.WildTangent.) [HKLM][64Bits] -- WTA-54638065-df56-46f0-9f78-54a59f8bc281 O42 - Logiciel: Jewel Quest Solitaire 2 - (.WildTangent.) [HKLM][64Bits] -- WTA-a9f2c248-77c1-436d-a4b3-d47354327eed O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4} O42 - Logiciel: LauncherMA - (.Micro Application.) [HKLM][64Bits] -- {C06EFB22-B5DB-46C5-9215-BCB5C19C0858} O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: Magic Desktop - (.EasyBits Software AS.) [HKLM][64Bits] -- EasyBits Magic Desktop =>.EasyBits Software AS O42 - Logiciel: Mahjongg Artifacts - (.WildTangent.) [HKLM][64Bits] -- WTA-32adb524-7e7b-47a3-813c-78589f5c4f46 O42 - Logiciel: Malwarebytes Anti-Malware version 2.0.2.1012 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1 O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM][64Bits] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E} O42 - Logiciel: Messenger Companion - (.Microsoft Corporation.) [HKLM][64Bits] -- {50816F92-1652-4A7C-B9BC-48F682742C4B} O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM][64Bits] -- {BFAE8D5B-F918-486F-B74E-90762DF11C5C} O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Security Client O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: Microsoft Works 6-9 Converter - (.Microsoft Corporation.) [HKLM][64Bits] -- {95140000-0137-040C-0000-0000000FF1CE} O42 - Logiciel: Mozilla Firefox 30.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 30.0 (x86 fr) O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService O42 - Logiciel: Mystery of Mortlake Mansion - (.WildTangent.) [HKLM][64Bits] -- WTA-c798913e-c1cd-4ecc-a501-2402a7a127f2 O42 - Logiciel: PhotoRecoveryPro 2.1.5 - (.LionSea SoftWare.) [HKLM][64Bits] -- {E3CB9CD4-20DE-4ED1-B6ED-7F7F3F07C097}_is1 O42 - Logiciel: Plants vs. Zombies - Game of the Year - (.WildTangent.) [HKLM][64Bits] -- WTA-cf3a27b5-e113-4907-b3d5-e30cf445d860 O42 - Logiciel: Polar Bowler - (.WildTangent.) [HKLM][64Bits] -- WTA-0fe23654-4f42-46a2-80ac-4881c0ccea8a O42 - Logiciel: QuickShare - (.Linkury Inc..) [HKLM][64Bits] -- {11D4FAA0-A577-4FA8-B24E-D24283D861D1} =>PUP.QuickShare O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} O42 - Logiciel: Realtek PCIE Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {C1594429-8296-4652-BF54-9DBE4932A44C} O42 - Logiciel: ScanSoft OmniPage SE 4.0 - (.ScanSoft, Inc..) [HKLM][64Bits] -- {29D851C2-048C-4B5E-8D1F-25D473342BB5} O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM][64Bits] -- KB931906 O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM][64Bits] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} O42 - Logiciel: Skype Click to Call - (.Microsoft Corporation.) [HKLM][64Bits] -- {BB285C9F-C821-4770-8970-56C4AB52C87E} O42 - Logiciel: Skype™ 6.16 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7} O42 - Logiciel: Sony Mobile Update Engine - (.Sony Mobile Communications AB.) [HKLM][64Bits] -- Update Engine O42 - Logiciel: Sony PC Companion 2.10.211 - (.Sony.) [HKLM][64Bits] -- {F09EF8F2-0976-42C1-8D9D-8DF78337C6E3} O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey O42 - Logiciel: Torchlight - (.WildTangent.) [HKLM][64Bits] -- WTA-5762d597-fe43-455d-941d-d6b7f45a1199 O42 - Logiciel: Update Installer for WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App O42 - Logiciel: Virtual Families - (.WildTangent.) [HKLM][64Bits] -- WTA-c4e950f8-feaa-4857-b63d-59e1b5b3e115 O42 - Logiciel: Virtual Villagers 4 - The Tree of Life - (.WildTangent.) [HKLM][64Bits] -- WTA-6462bdce-da52-4c43-94f1-d09ef3be5ae3 O42 - Logiciel: Webplayer - (.Kreapixel.) [HKLM][64Bits] -- {F750DB0E-D452-3108-63C9-FE16BC686741} =>Adware.SocialSkinz O42 - Logiciel: Wedding Dash - (.WildTangent.) [HKLM][64Bits] -- WTA-227866d5-f671-4cfd-ae97-2e7091152d65 O42 - Logiciel: WildTangent Games App (HP Games) - (.WildTangent.) [HKLM][64Bits] -- {70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp O42 - Logiciel: Zuma's Revenge - (.WildTangent.) [HKLM][64Bits] -- WTA-2bf45398-c64e-4113-88f0-eadbe8eea399 O42 - Logiciel: opensource - (.Your Company Name.) [HKLM][64Bits] -- {3677D4D8-E5E0-49FC-B86E-06541CF00BBE} O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726} ~ Logic: 91 Scanned in 00mn 00s ---\\ HKCU & HKLM Software Keys [HKCU\Software\35497InstEnd] [HKCU\Software\5308d8cb63fec41] =>Hijacker.Eazel [HKCU\Software\APN DTX] =>Toolbar.Ask [HKCU\Software\ATI] [HKCU\Software\Adobe] [HKCU\Software\AnyProtect] =>PUP.AnyProtect [HKCU\Software\AppDataLow\Software\AppDataLow] [HKCU\Software\AppDataLow\Software\BlockAndSurf] =>PUP.BlockAndSurf [HKCU\Software\AppDataLow\Software\Re_markit] =>PUP.ReMarkIt [HKCU\Software\AppDataLow\Software\ilividtoolbargaw] =>Adware.Bandoo [HKCU\Software\AppDataLow] [HKCU\Software\AskPartnerNetwork] [HKCU\Software\Avira] [HKCU\Software\Canon] [HKCU\Software\Chromium] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\CyberLink] [HKCU\Software\Drivers Manager] [HKCU\Software\Facebook] [HKCU\Software\GoforFiles] =>P2P.GoforFiles [HKCU\Software\Hewlett-Packard] [HKCU\Software\IM Providers] [HKCU\Software\JavaSoft] [HKCU\Software\Licenses] [HKCU\Software\LogiShrd] [HKCU\Software\Macromedia] [HKCU\Software\MediaChance] [HKCU\Software\MozillaPlugins] [HKCU\Software\Mozilla] [HKCU\Software\Netscape] [HKCU\Software\Nosibay] [HKCU\Software\ODBC] [HKCU\Software\PhotoRecoveryPro] [HKCU\Software\PhotoRecoveryPro_Init] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\Rocket Browser] =>PUP.RockTurner [HKCU\Software\RocketUpdater] =>PUP.RockTurner [HKCU\Software\ScanSoft] [HKCU\Software\SkypeRS] [HKCU\Software\Skype] [HKCU\Software\Smartbar] =>Hijacker.SmartBar [HKCU\Software\Softonic] =>Toolbar.Conduit [HKCU\Software\Somoto] =>Adware.MegaSearch [HKCU\Software\Sony] [HKCU\Software\Stellar] [HKCU\Software\Symantec] [HKCU\Software\Synaptics] [HKCU\Software\Systweak] [HKCU\Software\Trolltech] [HKCU\Software\TutoTag] =>PUP.AgenceExclusive [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\WebPlayer] [HKCU\Software\Wow6432Node] [HKCU\Software\ZebHelpProcess Helper] [HKCU\Software\apple] [HKCU\Software\freesofttoday] =>Adware.FreeSoftToday [HKCU\Software\globalUpdate] [HKCU\Software\iLivid] =>Adware.Bandoo [HKCU\Software\ilividtoolbargaw] =>Adware.Bandoo [HKCU\Software\lollipop] =>Adware.Lollipop [HKLM\Software\AMD] [HKLM\Software\ATI Technologies] [HKLM\Software\ATI] [HKLM\Software\Adobe] [HKLM\Software\AskPartnerNetwork] [HKLM\Software\Atheros] [HKLM\Software\CBSTEST] [HKLM\Software\CXT] [HKLM\Software\Canon] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\Cyberlink] [HKLM\Software\Dolby] [HKLM\Software\HPQ] [HKLM\Software\Hewlett-Packard] [HKLM\Software\IDT] [HKLM\Software\IM Providers] [HKLM\Software\InstalledOptions] [HKLM\Software\Intel] [HKLM\Software\Khronos] [HKLM\Software\Logishrd] [HKLM\Software\Macromedia] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\ODBC] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\RTLSetup] [HKLM\Software\Realtek Semiconductor Corp.] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\SRS Labs] [HKLM\Software\Sonic] [HKLM\Software\Sony Mobile] [HKLM\Software\Speedchecker Limited] [HKLM\Software\Synaptics] [HKLM\Software\Wow6432Node\AMD] [HKLM\Software\Wow6432Node\ATI Technologies] [HKLM\Software\Wow6432Node\ATI] [HKLM\Software\Wow6432Node\Adobe] [HKLM\Software\Wow6432Node\AdvertisingSupport] =>PUP.AdvertisingSupport [HKLM\Software\Wow6432Node\AppDataLow] [HKLM\Software\Wow6432Node\ArcSoft] [HKLM\Software\Wow6432Node\AskPartnerNetwork] [HKLM\Software\Wow6432Node\Atheros] [HKLM\Software\Wow6432Node\Avira] [HKLM\Software\Wow6432Node\Babylon] =>PUP.Babylon [HKLM\Software\Wow6432Node\Canon] [HKLM\Software\Wow6432Node\Caphyon] [HKLM\Software\Wow6432Node\Classes] [HKLM\Software\Wow6432Node\Clients] [HKLM\Software\Wow6432Node\CyberLink] [HKLM\Software\Wow6432Node\EasyBits] [HKLM\Software\Wow6432Node\Evernote] [HKLM\Software\Wow6432Node\GoforFiles] =>P2P.GoforFiles [HKLM\Software\Wow6432Node\Google] [HKLM\Software\Wow6432Node\Hewlett-Packard] [HKLM\Software\Wow6432Node\IDT] [HKLM\Software\Wow6432Node\IM Providers] [HKLM\Software\Wow6432Node\InstallShield] [HKLM\Software\Wow6432Node\Insyde] [HKLM\Software\Wow6432Node\Intel] [HKLM\Software\Wow6432Node\JavaSoft] [HKLM\Software\Wow6432Node\Khronos] [HKLM\Software\Wow6432Node\Licenses] [HKLM\Software\Wow6432Node\MAXSOFT-OCRON] [HKLM\Software\Wow6432Node\Macromedia] [HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware] [HKLM\Software\Wow6432Node\MozillaPlugins] [HKLM\Software\Wow6432Node\Mozilla] [HKLM\Software\Wow6432Node\ODBC] [HKLM\Software\Wow6432Node\Policies] [HKLM\Software\Wow6432Node\ProtectedBrowsing] [HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.] [HKLM\Software\Wow6432Node\Realtek] [HKLM\Software\Wow6432Node\RegisteredApplications] [HKLM\Software\Wow6432Node\ScanSoft] [HKLM\Software\Wow6432Node\Skype] [HKLM\Software\Wow6432Node\Sony Mobile] [HKLM\Software\Wow6432Node\Sony] [HKLM\Software\Wow6432Node\Symantec] [HKLM\Software\Wow6432Node\Systweak] [HKLM\Software\Wow6432Node\Tutorials] =>PUP.AgenceExclusive [HKLM\Software\Wow6432Node\Vittalia] =>PUP.Vittalia [HKLM\Software\Wow6432Node\Volatile] [HKLM\Software\Wow6432Node\WildTangent] [HKLM\Software\Wow6432Node\Win32 Services] [HKLM\Software\Wow6432Node\WorldUnlock Codes Calculator] [HKLM\Software\Wow6432Node\Wow6432Node] [HKLM\Software\Wow6432Node\X-AVCSD] [HKLM\Software\Wow6432Node\aartemisSoftware] =>PUP.AArtemis [HKLM\Software\Wow6432Node\iLividSRTB] =>Adware.Bandoo [HKLM\Software\Wow6432Node\mozilla.org] [HKLM\Software\Wow6432Node\supWPM] =>PUP.WpManager [HKLM\Software\Wow6432Node] ~ Key Software: 363 Scanned in 00mn 00s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 16/12/2013 - 23:29:31 - [] ----D C:\Program Files (x86)\Adobe O43 - CFD: 28/02/2013 - 08:29:05 - [] ----D C:\Program Files (x86)\Adobe Download Assistant O43 - CFD: 25/05/2012 - 02:57:36 - [] ----D C:\Program Files (x86)\AMD O43 - CFD: 25/05/2012 - 02:57:33 - [] ----D C:\Program Files (x86)\AMD APP O43 - CFD: 07/01/2013 - 18:32:31 - [] ----D C:\Program Files (x86)\ArcSoft O43 - CFD: 05/07/2014 - 08:36:51 - [] ----D C:\Program Files (x86)\AskPartnerNetwork O43 - CFD: 25/05/2012 - 03:02:14 - [] ----D C:\Program Files (x86)\Atheros O43 - CFD: 25/05/2012 - 02:57:21 - [] ----D C:\Program Files (x86)\ATI Technologies O43 - CFD: 05/07/2014 - 08:16:29 - [] ----D C:\Program Files (x86)\Avira O43 - CFD: 06/07/2014 - 19:30:25 - [0] ----D C:\Program Files (x86)\Bench =>PUP.GiganticSavings O43 - CFD: 08/02/2013 - 18:41:59 - [] ----D C:\Program Files (x86)\Browser Helper Object O43 - CFD: 07/01/2013 - 19:09:46 - [] ----D C:\Program Files (x86)\Canon O43 - CFD: 01/11/2013 - 09:27:50 - [] ----D C:\Program Files (x86)\Cartoon Maker =>PUP.Babylon O43 - CFD: 25/05/2012 - 03:01:51 - [] ----D C:\Program Files (x86)\Cisco O43 - CFD: 04/07/2014 - 18:25:40 - [] ----D C:\Program Files (x86)\Common Files O43 - CFD: 25/05/2012 - 03:09:04 - [] ----D C:\Program Files (x86)\CyberLink O43 - CFD: 21/09/2013 - 12:12:02 - [] ----D C:\Program Files (x86)\Digital Camera O43 - CFD: 22/09/2013 - 12:48:14 - [] ----D C:\Program Files (x86)\Drivers Manager O43 - CFD: 25/05/2012 - 03:05:58 - [] ----D C:\Program Files (x86)\EasyBits For Kids O43 - CFD: 01/01/2011 - 01:15:51 - [] ----D C:\Program Files (x86)\Evernote O43 - CFD: 06/02/2014 - 10:19:09 - [] ----D C:\Program Files (x86)\FLV Video Player O43 - CFD: 05/07/2014 - 12:54:25 - [] ----D C:\Program Files (x86)\FLVM Player O43 - CFD: 05/07/2014 - 16:58:02 - [] ----D C:\Program Files (x86)\globalUpdate O43 - CFD: 21/01/2014 - 09:36:31 - [] ----D C:\Program Files (x86)\Hewlett-Packard O43 - CFD: 01/01/2011 - 01:23:54 - [] ----D C:\Program Files (x86)\HP Games O43 - CFD: 05/07/2014 - 12:01:20 - [] --H-D C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 12/06/2014 - 11:59:44 - [] ----D C:\Program Files (x86)\Internet Explorer O43 - CFD: 06/07/2014 - 19:02:15 - [] ----D C:\Program Files (x86)\Malwarebytes Anti-Malware O43 - CFD: 08/10/2013 - 13:23:00 - [] ----D C:\Program Files (x86)\Micro Application O43 - CFD: 06/02/2014 - 11:03:47 - [0] ----D C:\Program Files (x86)\Microsoft O43 - CFD: 12/09/2013 - 18:00:36 - [] ----D C:\Program Files (x86)\Microsoft Application Virtualization Client O43 - CFD: 09/01/2013 - 09:42:56 - [] ----D C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2 O43 - CFD: 09/01/2013 - 12:37:28 - [] ----D C:\Program Files (x86)\Microsoft Office O43 - CFD: 04/04/2014 - 08:37:54 - [] ----D C:\Program Files (x86)\Microsoft Security Client O43 - CFD: 15/03/2014 - 11:51:57 - [] ----D C:\Program Files (x86)\Microsoft Silverlight O43 - CFD: 01/01/2011 - 01:31:00 - [] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition O43 - CFD: 12/01/2013 - 10:46:10 - [] ----D C:\Program Files (x86)\Microsoft Works O43 - CFD: 11/01/2013 - 11:36:15 - [] ----D C:\Program Files (x86)\Microsoft.NET O43 - CFD: 06/07/2014 - 19:32:20 - [0] ----D C:\Program Files (x86)\Movies Toolbar =>PUP.MoviesToolbar O43 - CFD: 03/07/2014 - 11:00:17 - [] ----D C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 03/07/2014 - 11:02:49 - [] ----D C:\Program Files (x86)\Mozilla Maintenance Service O43 - CFD: 14/07/2009 - 07:32:38 - [] ----D C:\Program Files (x86)\MSBuild O43 - CFD: 28/02/2013 - 10:30:02 - [] ----D C:\Program Files (x86)\MSECache O43 - CFD: 09/01/2013 - 09:43:02 - [0] ----D C:\Program Files (x86)\MSXML 4.0 O43 - CFD: 03/07/2014 - 11:02:50 - [] ----D C:\Program Files (x86)\MyPC Backup =>PUP.MyPCBackup O43 - CFD: 03/07/2014 - 11:17:53 - [] ----D C:\Program Files (x86)\NetCrawl =>PUP.NetCrawl O43 - CFD: 06/07/2014 - 19:30:26 - [0] ----D C:\Program Files (x86)\Nosibay O43 - CFD: 06/01/2013 - 19:16:25 - [] R---D C:\Program Files (x86)\Online Services O43 - CFD: 28/05/2013 - 17:04:56 - [] ----D C:\Program Files (x86)\PhotoRecoveryPro O43 - CFD: 04/07/2014 - 18:37:27 - [0] ----D C:\Program Files (x86)\predm O43 - CFD: 25/05/2012 - 03:00:02 - [] ----D C:\Program Files (x86)\Realtek O43 - CFD: 14/07/2009 - 07:32:38 - [] ----D C:\Program Files (x86)\Reference Assemblies O43 - CFD: 03/07/2014 - 11:02:47 - [] ----D C:\Program Files (x86)\SafetySearch O43 - CFD: 07/01/2013 - 18:35:48 - [] ----D C:\Program Files (x86)\ScanSoft O43 - CFD: 06/07/2014 - 19:30:16 - [0] ----D C:\Program Files (x86)\Search Results Toolbar =>PUP.SearchResults O43 - CFD: 31/05/2014 - 10:05:41 - [] R---D C:\Program Files (x86)\Skype O43 - CFD: 27/03/2013 - 10:52:01 - [] ----D C:\Program Files (x86)\Software O43 - CFD: 05/07/2014 - 12:01:20 - [] ----D C:\Program Files (x86)\Sony O43 - CFD: 03/07/2014 - 11:52:00 - [0] ----D C:\Program Files (x86)\Sony Ericsson O43 - CFD: 05/07/2014 - 12:05:47 - [] ----D C:\Program Files (x86)\Sony Mobile O43 - CFD: 25/05/2012 - 03:12:31 - [] ----D C:\Program Files (x86)\SymSilent O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information O43 - CFD: 29/10/2013 - 09:47:07 - [] ----D C:\Program Files (x86)\VideoLAN O43 - CFD: 16/12/2013 - 22:27:12 - [] ----D C:\Program Files (x86)\Webplayer O43 - CFD: 24/03/2013 - 14:24:32 - [] ----D C:\Program Files (x86)\WildTangent Games O43 - CFD: 11/07/2013 - 07:55:39 - [] ----D C:\Program Files (x86)\Windows Defender O43 - CFD: 06/02/2014 - 11:10:09 - [] ----D C:\Program Files (x86)\Windows Live O43 - CFD: 12/01/2013 - 21:23:26 - [] ----D C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation O43 - CFD: 13/12/2013 - 12:05:14 - [] ----D C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation O43 - CFD: 14/07/2009 - 07:32:38 - [] ----D C:\Program Files (x86)\Windows NT O43 - CFD: 12/01/2013 - 21:23:26 - [] ----D C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 21/11/2010 - 05:31:38 - [] ----D C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 12/01/2013 - 21:23:26 - [] ----D C:\Program Files (x86)\Windows Sidebar O43 - CFD: 06/07/2014 - 15:11:25 - [] ----D C:\Program Files (x86)\ZHPDiag =>.Nicolas Coolman O43 - CFD: 28/02/2013 - 08:50:39 - [] ----D C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 25/05/2012 - 02:57:40 - [] ----D C:\Program Files (x86)\Common Files\ATI Technologies O43 - CFD: 15/05/2014 - 07:43:04 - [] ----D C:\Program Files (x86)\Common Files\DESIGNER O43 - CFD: 07/01/2013 - 18:36:44 - [] ----D C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 12/01/2013 - 10:46:15 - [] ----D C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD: 07/01/2013 - 18:36:45 - [] ----D C:\Program Files (x86)\Common Files\ScanSoft Shared O43 - CFD: 14/07/2009 - 05:20:08 - [] ----D C:\Program Files (x86)\Common Files\Services O43 - CFD: 31/05/2014 - 10:05:07 - [] ----D C:\Program Files (x86)\Common Files\Skype O43 - CFD: 14/07/2009 - 05:20:08 - [] ----D C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 31/03/2013 - 11:20:02 - [0] ----D C:\Program Files (x86)\Common Files\Symantec Shared O43 - CFD: 12/01/2013 - 21:23:26 - [] ----D C:\Program Files (x86)\Common Files\System O43 - CFD: 01/01/2011 - 01:27:39 - [] ----D C:\Program Files (x86)\Common Files\Windows Live O43 - CFD: 03/07/2014 - 10:50:45 - [] ----D C:\ProgramData\a22024690b16694c O43 - CFD: 24/09/2013 - 18:07:34 - [] ----D C:\ProgramData\Adobe O43 - CFD: 25/05/2012 - 02:56:27 - [] ----D C:\ProgramData\AMD O43 - CFD: 02/07/2014 - 06:44:18 - [] ----D C:\ProgramData\APN O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Application Data O43 - CFD: 05/07/2014 - 08:36:51 - [] ----D C:\ProgramData\AskPartnerNetwork O43 - CFD: 25/05/2012 - 03:02:11 - [] ----D C:\ProgramData\Atheros O43 - CFD: 25/05/2012 - 03:18:49 - [] ----D C:\ProgramData\ATI O43 - CFD: 05/07/2014 - 08:16:27 - [] ----D C:\ProgramData\Avira O43 - CFD: 08/02/2013 - 18:42:05 - [0] ----D C:\ProgramData\Babylon =>PUP.Babylon O43 - CFD: 26/03/2013 - 19:25:33 - [0] ----D C:\ProgramData\Browser Manager O43 - CFD: 06/01/2013 - 19:14:52 - [] -SH-D C:\ProgramData\Bureau O43 - CFD: 07/01/2013 - 18:30:10 - [] --H-D C:\ProgramData\CanonBJ O43 - CFD: 25/01/2013 - 21:10:43 - [] ----D C:\ProgramData\CyberLink O43 - CFD: 18/12/2013 - 18:06:58 - [0] ----D C:\ProgramData\Datamngr =>PUP.Datamngr O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Desktop O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Documents O43 - CFD: 10/12/2013 - 15:48:05 - [] ----D C:\ProgramData\Easybits Magic Desktop for HP O43 - CFD: 06/01/2013 - 19:14:52 - [] -SH-D C:\ProgramData\Favoris O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Favorites O43 - CFD: 21/01/2014 - 09:33:28 - [] ----D C:\ProgramData\Hewlett-Packard O43 - CFD: 07/01/2013 - 18:37:02 - [] ----D C:\ProgramData\InstallShield O43 - CFD: 06/07/2014 - 19:02:09 - [] ----D C:\ProgramData\Malwarebytes O43 - CFD: 06/01/2013 - 19:14:52 - [] -SH-D C:\ProgramData\Menu Démarrer O43 - CFD: 08/10/2013 - 13:22:54 - [] ----D C:\ProgramData\Micro Application O43 - CFD: 06/02/2014 - 11:24:17 - [] -S--D C:\ProgramData\Microsoft O43 - CFD: 12/06/2014 - 07:08:02 - [] ----D C:\ProgramData\Microsoft Help O43 - CFD: 06/01/2013 - 19:14:52 - [] -SH-D C:\ProgramData\Modèles O43 - CFD: 06/01/2013 - 20:58:39 - [] ----D C:\ProgramData\Mozilla O43 - CFD: 31/03/2013 - 14:29:08 - [] ----D C:\ProgramData\Norton O43 - CFD: 25/05/2012 - 03:09:39 - [] ----D C:\ProgramData\NortonInstaller O43 - CFD: 05/07/2014 - 08:16:16 - [] ----D C:\ProgramData\Package Cache O43 - CFD: 04/07/2014 - 11:25:58 - [] ----D C:\ProgramData\PC1Data O43 - CFD: 28/02/2013 - 08:50:39 - [] ----D C:\ProgramData\regid.1986-12.com.adobe O43 - CFD: 07/01/2013 - 18:37:03 - [] ----D C:\ProgramData\ScanSoft O43 - CFD: 31/05/2014 - 10:05:15 - [] ----D C:\ProgramData\Skype O43 - CFD: 27/03/2013 - 10:52:01 - [] ----D C:\ProgramData\Software =>Adware.Boxore O43 - CFD: 05/07/2014 - 12:01:20 - [] ----D C:\ProgramData\Sony O43 - CFD: 03/07/2014 - 11:52:00 - [0] ----D C:\ProgramData\Sony Ericsson O43 - CFD: 05/07/2014 - 12:05:47 - [] ----D C:\ProgramData\Sony Mobile O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Start Menu O43 - CFD: 25/05/2012 - 03:18:48 - [] ----D C:\ProgramData\Synaptics O43 - CFD: 24/09/2013 - 17:20:32 - [] ---AD C:\ProgramData\Temp O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Templates O43 - CFD: 08/01/2013 - 09:06:58 - [] ----D C:\ProgramData\VirtualizedApplications O43 - CFD: 24/03/2013 - 14:26:54 - [] ----D C:\ProgramData\WildTangent O43 - CFD: 06/07/2014 - 19:29:35 - [0] ----D C:\ProgramData\Wincert O43 - CFD: 16/12/2013 - 23:37:49 - [] ----D C:\ProgramData\WPM =>PUP.WpManager O43 - CFD: 21/01/2014 - 09:34:56 - [] ----D C:\ProgramData\{18165758-115C-4DC0-9EC2-FF89F725767F} O43 - CFD: 28/02/2013 - 08:55:37 - [] ----D C:\Users\sébastien\AppData\Roaming\Adobe O43 - CFD: 06/01/2013 - 19:21:23 - [] ----D C:\Users\sébastien\AppData\Roaming\ATI O43 - CFD: 02/07/2014 - 06:44:19 - [] ----D C:\Users\sébastien\AppData\Roaming\Avira O43 - CFD: 08/02/2013 - 18:42:04 - [] ----D C:\Users\sébastien\AppData\Roaming\Babylon =>PUP.Babylon O43 - CFD: 07/01/2013 - 19:11:05 - [] ----D C:\Users\sébastien\AppData\Roaming\Canon O43 - CFD: 28/02/2013 - 08:29:09 - [] ----D C:\Users\sébastien\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant O43 - CFD: 25/01/2013 - 21:10:22 - [] ----D C:\Users\sébastien\AppData\Roaming\CyberLink O43 - CFD: 22/09/2013 - 12:48:33 - [] ----D C:\Users\sébastien\AppData\Roaming\Drivers Manager O43 - CFD: 26/03/2013 - 14:25:25 - [] ----D C:\Users\sébastien\AppData\Roaming\GoforFiles =>P2P.GoforFiles O43 - CFD: 06/02/2014 - 12:18:33 - [] ----D C:\Users\sébastien\AppData\Roaming\Hewlett-Packard O43 - CFD: 08/01/2013 - 09:15:33 - [] ----D C:\Users\sébastien\AppData\Roaming\hpqlog O43 - CFD: 24/03/2013 - 16:45:25 - [] ----D C:\Users\sébastien\AppData\Roaming\HTML Executable O43 - CFD: 06/01/2013 - 19:20:50 - [] ----D C:\Users\sébastien\AppData\Roaming\Identities O43 - CFD: 06/01/2013 - 19:24:55 - [] ----D C:\Users\sébastien\AppData\Roaming\Macromedia O43 - CFD: 25/05/2012 - 11:38:25 - [0] ----D C:\Users\sébastien\AppData\Roaming\Media Center Programs O43 - CFD: 11/06/2014 - 17:48:02 - [] -S--D C:\Users\sébastien\AppData\Roaming\Microsoft O43 - CFD: 06/01/2013 - 20:59:00 - [] ----D C:\Users\sébastien\AppData\Roaming\Mozilla O43 - CFD: 07/03/2014 - 12:34:17 - [] ----D C:\Users\sébastien\AppData\Roaming\musicMeDownloader.447DBE4B8352E60C6628BA362FFE0160304ED2DC.1 =>PUP.SoftwareEngine O43 - CFD: 06/07/2014 - 19:30:15 - [0] ----D C:\Users\sébastien\AppData\Roaming\Nosibay =>PUP.BubbleDock O43 - CFD: 13/03/2013 - 09:48:53 - [] ----D C:\Users\sébastien\AppData\Roaming\PDAppFlex O43 - CFD: 06/07/2014 - 19:30:26 - [0] ----D C:\Users\sébastien\AppData\Roaming\RocketUpdater =>PUP.RockTurner O43 - CFD: 07/01/2013 - 18:36:54 - [] ----D C:\Users\sébastien\AppData\Roaming\ScanSoft O43 - CFD: 06/07/2014 - 19:29:58 - [0] ----D C:\Users\sébastien\AppData\Roaming\SimplyTech O43 - CFD: 06/07/2014 - 15:12:49 - [] ----D C:\Users\sébastien\AppData\Roaming\Skype O43 - CFD: 07/01/2013 - 19:59:24 - [] ----D C:\Users\sébastien\AppData\Roaming\SoftGrid Client O43 - CFD: 06/01/2013 - 19:21:18 - [] ----D C:\Users\sébastien\AppData\Roaming\Synaptics O43 - CFD: 06/07/2014 - 19:30:26 - [] ----D C:\Users\sébastien\AppData\Roaming\Systweak O43 - CFD: 07/01/2013 - 17:24:10 - [0] ----D C:\Users\sébastien\AppData\Roaming\TP O43 - CFD: 29/10/2013 - 10:08:11 - [] ----D C:\Users\sébastien\AppData\Roaming\vlc O43 - CFD: 16/12/2013 - 22:29:51 - [] ----D C:\Users\sébastien\AppData\Roaming\Webplayer O43 - CFD: 24/03/2013 - 14:25:12 - [] ----D C:\Users\sébastien\AppData\Roaming\WildTangent O43 - CFD: 22/07/2013 - 16:27:16 - [0] ----D C:\Users\sébastien\AppData\Roaming\Windows Live Writer O43 - CFD: 06/07/2014 - 12:26:55 - [] ----D C:\Users\sébastien\AppData\Roaming\wp_update =>PUP.WpManager O43 - CFD: 06/07/2014 - 19:56:26 - [] ----D C:\Users\sébastien\AppData\Roaming\ZHP =>.Nicolas Coolman O43 - CFD: 13/03/2013 - 09:48:51 - [] ----D C:\Users\sébastien\AppData\Local\Adobe O43 - CFD: 06/01/2013 - 19:21:34 - [] ----D C:\Users\sébastien\AppData\Local\AMD O43 - CFD: 06/01/2013 - 19:15:00 - [] -SH-D C:\Users\sébastien\AppData\Local\Application Data O43 - CFD: 05/07/2014 - 08:37:05 - [] ----D C:\Users\sébastien\AppData\Local\AskPartnerNetwork O43 - CFD: 06/01/2013 - 19:21:23 - [] ----D C:\Users\sébastien\AppData\Local\ATI O43 - CFD: 03/07/2014 - 10:50:35 - [] ----D C:\Users\sébastien\AppData\Local\Chromatic Browser O43 - CFD: 03/07/2014 - 10:50:33 - [] ----D C:\Users\sébastien\AppData\Local\Comodo O43 - CFD: 06/07/2014 - 18:55:21 - [0] ----D C:\Users\sébastien\AppData\Local\CrashDumps O43 - CFD: 25/01/2013 - 21:10:22 - [] ----D C:\Users\sébastien\AppData\Local\CyberLink O43 - CFD: 04/06/2014 - 04:10:21 - [] ----D C:\Users\sébastien\AppData\Local\Diagnostics O43 - CFD: 03/07/2014 - 11:59:57 - [] ----D C:\Users\sébastien\AppData\Local\ElevatedDiagnostics O43 - CFD: 12/05/2014 - 19:35:42 - [] -SH-D C:\Users\sébastien\AppData\Local\EmieSiteList O43 - CFD: 12/05/2014 - 19:35:42 - [] -SH-D C:\Users\sébastien\AppData\Local\EmieUserList O43 - CFD: 31/03/2013 - 17:21:04 - [] ----D C:\Users\sébastien\AppData\Local\Facebook O43 - CFD: 03/07/2014 - 10:33:02 - [] ----D C:\Users\sébastien\AppData\Local\globalUpdate O43 - CFD: 03/07/2014 - 10:50:35 - [] ----D C:\Users\sébastien\AppData\Local\Google O43 - CFD: 15/01/2013 - 09:33:29 - [] ----D C:\Users\sébastien\AppData\Local\Hewlett-Packard O43 - CFD: 06/01/2013 - 19:20:40 - [] ----D C:\Users\sébastien\AppData\Local\Hewlett-Packard_Company O43 - CFD: 06/01/2013 - 19:15:00 - [] -SH-D C:\Users\sébastien\AppData\Local\Historique O43 - CFD: 15/05/2013 - 18:58:07 - [0] ----D C:\Users\sébastien\AppData\Local\Lollipop =>Adware.Lollipop O43 - CFD: 07/01/2013 - 08:58:05 - [] ----D C:\Users\sébastien\AppData\Local\Macromedia O43 - CFD: 03/07/2014 - 18:17:55 - [] ----D C:\Users\sébastien\AppData\Local\Microsoft O43 - CFD: 23/10/2013 - 12:32:41 - [] ----D C:\Users\sébastien\AppData\Local\Microsoft Games O43 - CFD: 09/01/2013 - 12:34:01 - [0] ----D C:\Users\sébastien\AppData\Local\Microsoft Help O43 - CFD: 19/09/2013 - 07:09:27 - [] ----D C:\Users\sébastien\AppData\Local\Mozilla O43 - CFD: 28/05/2013 - 15:18:12 - [0] ----D C:\Users\sébastien\AppData\Local\PackageAware O43 - CFD: 03/07/2014 - 10:50:43 - [] ----D C:\Users\sébastien\AppData\Local\Packages O43 - CFD: 03/07/2014 - 10:50:27 - [] ----D C:\Users\sébastien\AppData\Local\Programs O43 - CFD: 06/01/2013 - 19:16:07 - [] ----D C:\Users\sébastien\AppData\Local\RemEngine O43 - CFD: 03/07/2014 - 11:02:43 - [] ----D C:\Users\sébastien\AppData\Local\SafetySearch O43 - CFD: 31/05/2014 - 10:05:23 - [] ----D C:\Users\sébastien\AppData\Local\Skype O43 - CFD: 07/01/2013 - 17:23:54 - [] ----D C:\Users\sébastien\AppData\Local\SoftGrid Client O43 - CFD: 06/07/2014 - 19:51:42 - [] ----D C:\Users\sébastien\AppData\Local\Temp O43 - CFD: 06/01/2013 - 19:15:00 - [] -SH-D C:\Users\sébastien\AppData\Local\Temporary Internet Files O43 - CFD: 04/07/2014 - 18:26:56 - [] ----D C:\Users\sébastien\AppData\Local\tmp5949 O43 - CFD: 03/07/2014 - 10:50:35 - [] ----D C:\Users\sébastien\AppData\Local\Torch O43 - CFD: 24/09/2013 - 17:04:52 - [] ----D C:\Users\sébastien\AppData\Local\VirtualStore O43 - CFD: 03/07/2014 - 11:03:11 - [] ----D C:\Users\sébastien\AppData\Local\WebPlayer O43 - CFD: 25/07/2013 - 17:38:12 - [] ----D C:\Users\sébastien\AppData\Local\Windows Live O43 - CFD: 22/07/2013 - 16:27:27 - [] ----D C:\Users\sébastien\AppData\Local\Windows Live Writer O43 - CFD: 14/07/2009 - 06:54:32 - [] R---D C:\Users\sébastien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 16/05/2014 - 07:42:21 - [] R---D C:\Users\sébastien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 05/07/2014 - 10:56:35 - [] ----D C:\Users\sébastien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock =>PUP.BubbleDock O43 - CFD: 03/07/2014 - 11:03:13 - [] ----D C:\Users\sébastien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLV Player O43 - CFD: 05/07/2014 - 10:51:57 - [] ----D C:\Users\sébastien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLVM Player O43 - CFD: 14/07/2009 - 06:49:38 - [] R---D C:\Users\sébastien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 03/07/2014 - 11:02:31 - [] ----D C:\Users\sébastien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SafetySearch O43 - CFD: 16/05/2014 - 07:42:21 - [] R---D C:\Users\sébastien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup ~ 62 Dossier CLSID vide (CLSID Empty Folder) ~ Program Folder: 279 Scanned in 00mn 02s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 03/07/2014 - 10:30:57 ---A- . (...) -- C:\Windows\System32\HP_ActiveX_Patch_NOT_DETECTED.txt [0] O44 - LFC:[MD5.9E2EDE952A3EC44754A829F048CE93A0] - 03/07/2014 - 11:13:15 ---A- . (.Microsoft Corporation - Composant Connexion RemoteApp et Bureau à d.) -- C:\Windows\System32\TSWorkspace.dll [1030144] O44 - LFC:[MD5.A4420969E5AB94856E5C0C02E6099D3F] - 03/07/2014 - 11:14:34 ---A- . (.Microsoft Corporation - Remote Desktop Services Client for Microsof.) -- C:\Windows\System32\rdvidcrl.dll [1057280] O44 - LFC:[MD5.8E75B1112C374EBDF18FD640DA2F0655] - 03/07/2014 - 11:14:35 ---A- . (.Microsoft Corporation - Connexion Bureau à distance.) -- C:\Windows\System32\mstsc.exe [1147392] O44 - LFC:[MD5.149A388C17F04AD1F99B477A43BE1A9F] - 03/07/2014 - 11:14:35 ---A- . (.Microsoft Corporation - Microsoft Remote Desktop Services Web Acces.) -- C:\Windows\System32\MsRdpWebAccess.dll [56832] O44 - LFC:[MD5.0D2C2FAC4F29B5868D39B7267058CFEF] - 03/07/2014 - 11:14:35 ---A- . (.Microsoft Corporation - Microsoft Remote Desktop Services Web Proxy.) -- C:\Windows\System32\TSWbPrxy.exe [83968] O44 - LFC:[MD5.79EE5ECB4BE89343E4CF1E48F7769F59] - 03/07/2014 - 11:14:35 ---A- . (.Microsoft Corporation - Runtime de connexion RemoteApp et Bureau à.) -- C:\Windows\System32\wksprt.exe [420864] O44 - LFC:[MD5.7BD2E6E2458A5B95F8341244C7FC7DD4] - 03/07/2014 - 11:14:35 ---A- . (.Microsoft Corporation - WorkspaceRuntime ProxyStub DLL.) -- C:\Windows\System32\wksprtPS.dll [18944] O44 - LFC:[MD5.5289A00E2D21BB3A7D6761646543ED5C] - 03/07/2014 - 11:14:36 ---A- . (.Microsoft Corporation - Client de contrainte de quarantaine de la p.) -- C:\Windows\System32\tsgqec.dll [62976] O44 - LFC:[MD5.FEC6178962DFF33074D39CA907971405] - 03/07/2014 - 11:14:37 ---A- . (.Microsoft Corporation - Extension de stratégie de groupe pour la re.) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll [12800] O44 - LFC:[MD5.E9981ECE8D894CEF7038FD1D040EB426] - 03/07/2014 - 11:14:37 ---A- . (.Microsoft Corporation - Pilote de filtre pour concentrateur USB du.) -- C:\Windows\System32\Drivers\TsUsbFlt.sys [56832] O44 - LFC:[MD5.108C257D765AAD2E6EC46557DA0B02BD] - 03/07/2014 - 11:14:37 ---A- . (.Microsoft Corporation - Remote Desktop USB Redirection GP Extension.) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyControl.exe [13824] O44 - LFC:[MD5.DDED7C5558B3AE09F568945281A9A6D1] - 03/07/2014 - 11:14:42 ---A- . (.Microsoft Corporation - Co-installateur de pilote USB générique du.) -- C:\Windows\System32\TsUsbGDCoInstaller.dll [44544] O44 - LFC:[MD5.879A3F94118D686E63041A386FE91EBE] - 04/07/2014 - 07:57:47 ---A- . (.Microsoft Corporation - Client ActiveX des services Bureau à distan.) -- C:\Windows\System32\mstscax.dll [6574592] O44 - LFC:[MD5.8902AEC2382A37E9E99A4E0D52DBD42B] - 05/07/2014 - 07:33:41 ---A- . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) -- C:\Windows\System32\Drivers\avipbb.sys [130584] O44 - LFC:[MD5.390184FAD8FCC1B6DA25AEBAE928C3B6] - 05/07/2014 - 07:33:41 ---A- . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) -- C:\Windows\System32\Drivers\avkmgr.sys [28600] O44 - LFC:[MD5.46552023B54E374C887A3A9AAF1279F2] - 05/07/2014 - 07:33:41 ---A- . (.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) -- C:\Windows\System32\Drivers\avgntflt.sys [112080] O44 - LFC:[MD5.3DE0EBA0BF4771C897F544CBF7CB8973] - 05/07/2014 - 07:33:41 ---A- . (.Avira Operations GmbH & Co. KG - Avira WFP Network Driver.) -- C:\Windows\System32\Drivers\avnetflt.sys [84720] O44 - LFC:[MD5.FD892B90226B88D47A0183172583DD89] - 05/07/2014 - 11:30:16 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1671168] O44 - LFC:[MD5.7CB5CF4A41813CC37AB8E41F9838BA14] - 05/07/2014 - 11:30:16 ---A- . (...) -- C:\Windows\System32\perfc009.dat [122538] O44 - LFC:[MD5.C7276808422979FE6280969AD5CF884F] - 05/07/2014 - 11:30:16 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [150588] O44 - LFC:[MD5.AC676B23870CD9E5EF256FC738DACDCE] - 05/07/2014 - 11:30:16 ---A- . (...) -- C:\Windows\System32\perfh009.dat [654924] O44 - LFC:[MD5.0A3A287AAF9135C3203FDC7A931527B6] - 05/07/2014 - 11:30:16 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [748354] O44 - LFC:[MD5.E4ABC7233A4A6A6D3DE4C7B8A3D7DB2B] - 06/07/2014 - 17:09:09 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512] O44 - LFC:[MD5.F92B0E478C0FAA6D6661E6E977247E60] - 06/07/2014 - 18:02:09 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [25816] O44 - LFC:[MD5.9D9ED48F841EA37AA5310D54B9E5D3C7] - 06/07/2014 - 18:02:09 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\Drivers\mbamchameleon.sys [91352] O44 - LFC:[MD5.15E8ABC06843672955CE26A009533BAD] - 06/07/2014 - 18:02:09 ---A- . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\Drivers\mwac.sys [63704] O44 - LFC:[MD5.08A01CBE94A999A84834AED1B173681C] - 06/07/2014 - 18:43:21 ---A- . (...) -- C:\Windows\PFRO.log [943934] O44 - LFC:[MD5.A1099715F17C68BF141DD912A153650F] - 06/07/2014 - 18:45:37 -S-A- . (...) -- C:\Windows\bootstat.dat [67584] O44 - LFC:[MD5.D74E3C688AA4F552EB9F55CB8EA67170] - 06/07/2014 - 18:45:43 ---A- . (...) -- C:\Windows\setupact.log [56] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 06/07/2014 - 18:45:43 ---A- . (...) -- C:\Windows\setuperr.log [0] O44 - LFC:[MD5.8A50D5304E6AE48664CF5838EC32F647] - 06/07/2014 - 18:50:21 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\MBAMSwissArmy.sys [122584] O44 - LFC:[MD5.753D5C938A4BC06A2E3F13B502C41467] - 06/07/2014 - 18:56:17 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1980992] O44 - LFC:[MD5.47EDF8F05F6C4CFDC120C002A94BF374] - 30/06/2014 - 16:34:02 ---A- . (.System Speedup - System Speedup.) -- C:\Windows\System32\roboot64.exe [20320] =>PUP.SystemSpeedup ~ Files: 34 Scanned in 01mn 09s ---\\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:[MD5.FBF44DD8348FF3C7BD26E3478673CFB2] - 04/07/2014 - 15:50:42 ---A- - C:\Windows\Prefetch\QUICKSHARE.EXE-0AF76071.pf =>PUP.QuickShare O45 - LFCP:[MD5.D0F0ACD58017998A147A9C2BCEEA2F61] - 06/07/2014 - 18:50:59 ---A- - C:\Windows\Prefetch\WEBPLAYER.EXE-60526918.pf =>Adware.SocialSkinz ~ Prefetcher: 2 Scanned in 00mn 00s ---\\ Déni du service (Local Security Authority) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\livessp.dll ~ LSA: 9 Scanned in 00mn 00s ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys ~ CSB: 13 Scanned in 00mn 00s ---\\ Image File Execution Options (IFEO) (O50) O50 - IFEO:Image File Execution Options - bitguard.exe - tasklist.exe =>PUP.BitGuard O50 - IFEO:Image File Execution Options - bprotect.exe - tasklist.exe O50 - IFEO:Image File Execution Options - bpsvc.exe - tasklist.exe O50 - IFEO:Image File Execution Options - browserdefender.exe - tasklist.exe =>Hijacker.Eazel O50 - IFEO:Image File Execution Options - browserprotect.exe - tasklist.exe =>Hijacker.Eazel O50 - IFEO:Image File Execution Options - browsersafeguard.exe - tasklist.exe =>PUP.BrowserSafeguard O50 - IFEO:Image File Execution Options - protectedsearch.exe - tasklist.exe =>Spyware.ProtectedSearch O50 - IFEO:Image File Execution Options - snapdo.exe - tasklist.exe =>Hijacker.SmartBar O50 - IFEO:Image File Execution Options - stinst32.exe - tasklist.exe O50 - IFEO:Image File Execution Options - stinst64.exe - tasklist.exe ~ IFEO: Scanned in 00mn 00s ---\\ Clé de registre Shell MountPoints2 (MPKS) (O51) O51 - MPSK:{17435d81-eab3-11e2-9270-80c16e538eba}\AutoRun\command. (...) -- F:\Startme.exe (.not file.) O51 - MPSK:{d982aeee-10cb-11e3-b8bd-80c16e538eba}\AutoRun\command. (...) -- F:\Startme.exe (.not file.) ~ Keys: Scanned in 00mn 00s ---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm ~ TDSD: 2 Scanned in 00mn 00s ---\\ Enumération des clés de registre StartupReg (SMSR) (O53) O53 - SMSR:HKLM\...\startupreg\Acrobat Assistant 8.0 [Key] . (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe O53 - SMSR:HKLM\...\startupreg\Adobe ARM [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated O53 - SMSR:HKLM\...\startupreg\AdobeAAMUpdater-1.0 [Key] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe =>.Adobe Systems Incorporated O53 - SMSR:HKLM\...\startupreg\DATAMNGR [Key] . (...) -- C:\Program Files (x86)\SEARCH~1\Datamngr\DATAMN~2.exe (.not file.) =>PUP.Datamngr O53 - SMSR:HKLM\...\startupreg\Easybits Recovery [Key] . (.EasyBits Software AS - Pas de description.) -- C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe =>.EasyBits Software AS O53 - SMSR:HKLM\...\startupreg\HP CoolSense [Key] . (.Hewlett-Packard Development Company, L.P. - HP CoolSense.) -- C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe O53 - SMSR:HKLM\...\startupreg\HP Quick Launch [Key] . (.Hewlett-Packard Development Company, L.P. - HP Message Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe O53 - SMSR:HKLM\...\startupreg\HPOSD [Key] . (.Hewlett-Packard Development Company, L.P. - HP On Screen Display.) -- C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe O53 - SMSR:HKLM\...\startupreg\Magic Desktop for HP notification [Key] . (.Easybits - Software update notification.) -- C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe O53 - SMSR:HKLM\...\startupreg\OpwareSE4 [Key] . (.ScanSoft, Inc. - OCR Aware.) -- C:\Program Files (x86)\ScanSoft\OmniPageSE4.0\OpwareSE4.exe =>.ScanSoft, Inc O53 - SMSR:HKLM\...\startupreg\SetDefault [Key] . (.Hewlett-Packard Development Company, L.P. - SetDefault.) -- C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe O53 - SMSR:HKLM\...\startupreg\SSBkgdUpdate [Key] . (.Scansoft, Inc. - SSBkgdUpdate.) -- C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe O53 - SMSR:HKLM\...\startupreg\StartCCC [Key] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe =>.Advanced Micro Devices, Inc O53 - SMSR:HKLM\...\startupreg\SynTPEnh [Key] . (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O53 - SMSR:HKLM\...\startupreg\SysTrayApp [Key] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray64.exe ~ SMSR Keys: 16 Scanned in 00mn 03s ---\\ Enumération des clés de registre SecurityProviders (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll ~ MSCP: 2 Scanned in 00mn 00s ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0 O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 ~ MWPS: 16 Scanned in 00mn 00s ---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "EnableShellExecuteHooks"=1 ~ MWPE Keys: 4 Scanned in 00mn 00s ---\\ Liste des pilotes du système (SDL) (O58) O58 - SDL:24/09/2012 - 12:40:56 ---A- . (.Hewlett-Packard Company - HP Accelerometer.) -- C:\Windows\System32\Drivers\Accelerometer.sys [43840] O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088] O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\Drivers\adpahci.sys [339536] O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\Drivers\adpu320.sys [182864] O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\Drivers\aliide.sys [15440] O58 - SDL:26/10/2011 - 20:16:46 ---A- . (.Advanced Micro Devices, INC. - AMD USB 3.0 Hub Driver.) -- C:\Windows\System32\Drivers\amdhub30.sys [102528] O58 - SDL:18/02/2010 - 08:18:24 ---A- . (.Advanced Micro Devices - AMD IO Driver.) -- C:\Windows\System32\Drivers\amdiox64.sys [46136] O58 - SDL:02/02/2012 - 09:54:56 ---A- . (.Advanced Micro Devices, Inc. - AMD PCI Root Bus Lower Filter.) -- C:\Windows\System32\Drivers\amdkmpfd.sys [31872] O58 - SDL:03/03/2112 - 19:37:43 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\Drivers\amdsata.sys [107904] O58 - SDL:14/07/2009 - 02:52:20 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows -.) -- C:\Windows\System32\Drivers\amdsbs.sys [194128] O58 - SDL:03/03/2112 - 19:37:43 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\Drivers\amdxata.sys [27008] O58 - SDL:26/10/2011 - 20:16:46 ---A- . (.Advanced Micro Devices, INC. - AMD USB 3.0 Host Controller Driver.) -- C:\Windows\System32\Drivers\amdxhc.sys [219776] O58 - SDL:13/12/2011 - 13:52:44 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\Drivers\amd_sata.sys [82048] O58 - SDL:13/12/2011 - 13:52:44 ---A- . (.Advanced Micro Devices - Stor Filter Driver.) -- C:\Windows\System32\Drivers\amd_xata.sys [42624] O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\Drivers\arc.sys [87632] O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\Drivers\arcsas.sys [97856] O58 - SDL:10/01/2012 - 20:38:28 ---A- . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driver.) -- C:\Windows\System32\Drivers\athrx.sys [2801664] O58 - SDL:06/12/2011 - 12:47:30 ---A- . (.Advanced Micro Devices - AMD High Definition Audio Function Driver.) -- C:\Windows\System32\Drivers\AtihdW76.sys [95248] O58 - SDL:11/02/2012 - 01:26:24 ---A- . (.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\Drivers\atikmdag.sys [10825216] O58 - SDL:10/02/2012 - 21:54:38 ---A- . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\System32\Drivers\atikmpag.sys [328704] O58 - SDL:27/05/2014 - 18:59:35 ---A- . (.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) -- C:\Windows\System32\Drivers\avgntflt.sys [112080] =>.Avira Operations GmbH O58 - SDL:27/05/2014 - 18:59:38 ---A- . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) -- C:\Windows\System32\Drivers\avipbb.sys [130584] =>.Avira Operations GmbH O58 - SDL:27/05/2014 - 18:59:41 ---A- . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) -- C:\Windows\System32\Drivers\avkmgr.sys [28600] =>.Avira Operations GmbH O58 - SDL:27/05/2014 - 18:59:45 ---A- . (.Avira Operations GmbH & Co. KG - Avira WFP Network Driver.) -- C:\Windows\System32\Drivers\avnetflt.sys [84720] =>.Avira Operations GmbH O58 - SDL:10/06/2009 - 21:34:23 ---A- . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x Unified Driver..) -- C:\Windows\System32\Drivers\b57nd60a.sys [270848] O58 - SDL:10/06/2009 - 21:34:38 ---A- . (.Broadcom Corporation - Broadcom 802.11 Network Adapter wireless driver.) -- C:\Windows\System32\Drivers\BCMWL664.SYS [1311232] O58 - SDL:10/06/2009 - 21:41:06 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltLo.sys [18432] O58 - SDL:10/06/2009 - 21:41:06 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltUp.sys [8704] O58 - SDL:14/07/2009 - 02:19:07 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\Drivers\BrSerId.sys [286720] O58 - SDL:10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\Drivers\BrSerWdm.sys [47104] O58 - SDL:10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\Drivers\BrUsbMdm.sys [14976] O58 - SDL:10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\Drivers\BrUsbSer.sys [14720] O58 - SDL:10/06/2009 - 21:34:28 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\Drivers\bxvbda.sys [468480] O58 - SDL:28/07/2010 - 08:13:50 ---A- . (.CyberLink Corporation - CyberLink WebCam Virtual Driver.) -- C:\Windows\System32\Drivers\clwvd.sys [31088] O58 - SDL:14/07/2009 - 02:52:31 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\cmdide.sys [17488] O58 - SDL:14/07/2009 - 02:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496] O58 - SDL:10/06/2009 - 21:34:33 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\Drivers\evbda.sys [3286016] O58 - SDL:31/08/2013 - 09:39:28 ---A- . (.Sony Ericsson Mobile Communications - SEMC USB Flash Driver Filter.) -- C:\Windows\System32\Drivers\ggflt.sys [14448] O58 - SDL:31/08/2013 - 09:39:28 ---A- . (.Sony Ericsson Mobile Communications - SEMC USB Flash Driver.) -- C:\Windows\System32\Drivers\ggsemc.sys [27760] O58 - SDL:10/06/2009 - 21:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232] O58 - SDL:24/09/2012 - 12:40:56 ---A- . (.Hewlett-Packard Company - HP Disk Filter - SATA/RAID.) -- C:\Windows\System32\Drivers\hpdskflt.sys [31040] O58 - SDL:21/11/2010 - 04:23:47 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\System32\Drivers\HpSAMD.sys [78720] O58 - SDL:03/03/2112 - 19:37:43 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\Drivers\iaStorV.sys [410496] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\Drivers\iirsp.sys [44112] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_fc.sys [114752] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas.sys [106560] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas2.sys [65600] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_scsi.sys [115776] O58 - SDL:12/05/2014 - 06:25:56 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [25816] O58 - SDL:12/05/2014 - 06:26:00 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\Drivers\mbamchameleon.sys [91352] O58 - SDL:06/07/2014 - 18:50:21 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\MBAMSwissArmy.sys [122584] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows 7\Server 2008 R2 for.) -- C:\Windows\System32\Drivers\megasas.sys [35392] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\Drivers\MegaSR.sys [284736] O58 - SDL:12/05/2014 - 06:26:10 ---A- . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\Drivers\mwac.sys [63704] O58 - SDL:14/07/2009 - 02:48:26 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\Drivers\nfrd960.sys [51264] O58 - SDL:10/06/2009 - 21:35:35 ---A- . (.NVIDIA Corporation - NVIDIA MCP Networking Function Driver..) -- C:\Windows\System32\Drivers\nvm62x64.sys [408960] O58 - SDL:03/03/2112 - 19:37:43 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\Drivers\nvraid.sys [148352] O58 - SDL:03/03/2112 - 19:37:43 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\Drivers\nvstor.sys [166272] O58 - SDL:14/07/2009 - 02:45:46 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\Drivers\ql2300.sys [1524816] O58 - SDL:14/07/2009 - 02:45:45 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\Drivers\ql40xx.sys [128592] O58 - SDL:24/08/2011 - 06:57:24 ---A- . (.Realtek - Realtek 8136/8168/8169 NDIS 6.20 64-bit Driver.) -- C:\Windows\System32\Drivers\Rt64win7.sys [565352] O58 - SDL:22/09/2011 - 00:33:50 ---A- . (.Realtek Semiconductor Corp. - Realtek Pcie CardReader Driver for 2K/XP/Vista/Win7.) -- C:\Windows\System32\Drivers\RtsP2Stor.sys [258664] O58 - SDL:10/06/2009 - 21:37:19 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\System32\Drivers\secdrv.sys [23040] O58 - SDL:14/07/2009 - 02:45:45 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid2.sys [43584] O58 - SDL:14/07/2009 - 02:45:46 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid4.sys [80464] O58 - SDL:13/05/2011 - 02:21:02 ---A- . (.Google Inc - ADB Interface.) -- C:\Windows\System32\Drivers\ssadadb.sys [36328] O58 - SDL:13/05/2011 - 02:21:02 ---A- . (.MCCI Corporation - SAMSUNG Android USB Composite Device Driver.) -- C:\Windows\System32\Drivers\ssadbus.sys [157672] O58 - SDL:13/05/2011 - 02:21:02 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\Drivers\ssadcm.sys [13288] O58 - SDL:13/05/2011 - 02:21:02 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\Drivers\ssadcmnt.sys [13288] O58 - SDL:13/05/2011 - 02:21:02 ---A- . (.MCCI Corporation - SAMSUNG Android USB Modem Filter Driver.) -- C:\Windows\System32\Drivers\ssadmdfl.sys [16872] O58 - SDL:13/05/2011 - 02:21:04 ---A- . (.MCCI Corporation - SAMSUNG Android USB Modem.) -- C:\Windows\System32\Drivers\ssadmdm.sys [177640] O58 - SDL:13/05/2011 - 02:21:04 ---A- . (.MCCI Corporation - SAMSUNG Android USB Diagnostic Serial Port Device Driver.) -- C:\Windows\System32\Drivers\ssadserd.sys [146920] O58 - SDL:13/05/2011 - 02:21:04 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\Drivers\ssadwh.sys [13800] O58 - SDL:13/05/2011 - 02:21:04 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\Drivers\ssadwhnt.sys [13800] O58 - SDL:19/09/2009 - 04:30:14 ---A- . (.MCCI - SAMSUNG USB Mobile Device.) -- C:\Windows\System32\Drivers\ss_bbus.sys [127488] O58 - SDL:19/09/2009 - 04:30:14 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\Drivers\ss_bcm.sys [15360] O58 - SDL:19/09/2009 - 04:30:14 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\Drivers\ss_bcmnt.sys [15360] O58 - SDL:19/09/2009 - 04:30:14 ---A- . (.MCCI Corporation - SAMSUNG USB Mobile Modem Filter.) -- C:\Windows\System32\Drivers\ss_bmdfl.sys [18944] O58 - SDL:19/09/2009 - 04:30:14 ---A- . (.MCCI Corporation - SAMSUNG USB Mobile Modem.) -- C:\Windows\System32\Drivers\ss_bmdm.sys [161280] O58 - SDL:19/09/2009 - 04:30:14 ---A- . (.MCCI Corporation - SAMSUNG USB Mobile Device (Windows 2000/XP support functions).) -- C:\Windows\System32\Drivers\ss_bwh.sys [15872] O58 - SDL:19/09/2009 - 04:30:14 ---A- . (.MCCI Corporation - SAMSUNG USB Mobile Device (Windows 2000/XP support functions).) -- C:\Windows\System32\Drivers\ss_bwhnt.sys [15872] O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656] O58 - SDL:04/01/2012 - 09:37:16 ---A- . (.IDT, Inc. - IDT PC Audio.) -- C:\Windows\System32\Drivers\stwrt64.sys [535552] O58 - SDL:01/10/2011 - 03:16:50 ---A- . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\System32\Drivers\SynTP.sys [393264] O58 - SDL:14/01/2012 - 13:05:54 ---A- . (.Advanced Micro Devices - AMD USB Filter Driver.) -- C:\Windows\System32\Drivers\usbfilter.sys [56448] O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\viaide.sys [17488] O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\Drivers\vsmraid.sys [161872] O58 - SDL:10/06/2009 - 22:01:11 ---A- . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\Windows\System32\Drivers\VSTAZL6.SYS [292864] O58 - SDL:10/06/2009 - 22:01:11 ---A- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\Windows\System32\Drivers\VSTCNXT6.SYS [740864] O58 - SDL:10/06/2009 - 22:01:11 ---A- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\Windows\System32\Drivers\VSTDPV6.SYS [1485312] O58 - SDL:26/04/2005 - 16:42:48 ---A- . (...) -- C:\Windows\SysWOW64\drivers\MPIXVID.SYS [104593] O58 - SDL:28/06/2004 - 09:16:58 ---A- . (.Atmel Corporation - Universal Serial Bus Camera Driver.) -- C:\Windows\SysWOW64\drivers\USBCamAT.sys [25575] ~ Drivers: 92 Scanned in 00mn 01s ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC: 03/07/2014 - 19:58:04 ---A- . (...) -- C:\Users\sébastien\AppData\Roaming\Mozilla\Firefox\Profiles\usbskqvw.default-1364136879355\Extensions\{029afe2e-aa6f-406d-8003-304d06593385}\wtb_ff.bin [6805] O61 - LFC: 04/07/2014 - 19:57:54 ---A- . (.ClickMeIn Limited.) -- C:\Users\sébastien\AppData\Local\AnyProtectScannerSetup.exe [575887] =>PUP.AnyProtect O61 - LFC: 04/07/2014 - 19:58:01 ---A- . (.Penny Bee Agent.) -- C:\Users\sébastien\AppData\Local\tmp5949\dag5949.exe [762368] O61 - LFC: 04/07/2014 - 19:58:18 ---A- . (.PC Cleaners.) -- C:\Users\sébastien\Downloads\app3_Install_French_v.exe [4954384] =>Rogue.PCCleanerPro O61 - LFC: 04/07/2014 - 19:58:32 ---A- . (.Driver Restore.) -- C:\Users\sébastien\Downloads\DriverRestore(1).exe [2002656] O61 - LFC: 05/07/2014 - 19:58:20 ---A- . (...) -- C:\Users\sébastien\Downloads\AVIRA_ANTIVIRUS_2014_FR_setup.exe [275600] O61 - LFC: 05/07/2014 - 19:58:22 ---A- . (...) -- C:\Users\sébastien\Downloads\avira_free_antivirus_fr.exe [145171608] O61 - LFC: 05/07/2014 - 19:58:23 ---A- . (.Avira Operations GmbH & Co. KG.) -- C:\Users\sébastien\Downloads\avira_fr_av___ws.exe [4342264] O61 - LFC: 05/07/2014 - 19:58:31 ---A- . (.Driver Manager.) -- C:\Users\sébastien\Downloads\DriverManager.exe [2016040] O61 - LFC: 05/07/2014 - 19:58:56 ---A- . (.Sony Mobile Communications.) -- C:\Users\sébastien\Downloads\Sony PC Companion_Web.exe [28655120] O61 - LFC: 05/07/2014 - 19:58:59 ---A- . (.Microsoft Corporation.) -- C:\Users\sébastien\Downloads\Windows7UpgradeAdvisorSetup.exe [8672032] O61 - LFC: 06/07/2014 - 19:58:42 ---A- . (.Malwarebytes Corporation.) -- C:\Users\sébastien\Downloads\malwarebytes-anti-malware_2-0-2-1012_fr_215092.exe [17292760] O61 - LFC: 06/07/2014 - 19:59:02 ---A- . (.Nicolas Coolman.) -- C:\Users\sébastien\Downloads\ZHPDiag2.exe [6857466] =>.Nicolas Coolman O61 - LFC: 30/06/2014 - 19:58:01 ---A- . (...) -- C:\Users\sébastien\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll [49744] ~ 18 Fichiers temporaires (Temporary files) ~ 8 Fichiers cookies (Cookies files) ~ Files: 14 Scanned in 01mn 10s ---\\ Liste des outils de désinfection (LATC) (O63) O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman ~ ADS: Scanned in 00mn 00s ---\\ Liste les services legacy du registre (LALS) (O64) O64 - Services: CurCS - 11/02/2012 - C:\Windows\System32\DRIVERS\atikmdag.sys (amdkmdag) .(.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG O64 - Services: CurCS - 03/03/2112 - C:\Windows\System32\drivers\amdsata.sys (amdsata) .(.Advanced Micro Devices - AHCI 1.2 Device Driver.) - LEGACY_AMDSATA O64 - Services: CurCS - 13/12/2011 - C:\Windows\System32\drivers\amd_sata.sys (amd_sata) .(.Advanced Micro Devices - AHCI 1.2 Device Driver.) - LEGACY_AMD_SATA O64 - Services: CurCS - 27/05/2014 - C:\Windows\System32\DRIVERS\avgntflt.sys (avgntflt) .(.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) - LEGACY_AVGNTFLT O64 - Services: CurCS - 27/05/2014 - C:\Windows\System32\DRIVERS\avipbb.sys (avipbb) .(.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) - LEGACY_AVIPBB O64 - Services: CurCS - 27/05/2014 - C:\Windows\System32\DRIVERS\avkmgr.sys (avkmgr) .(.Avira Operations GmbH & Co. KG - Avira Manager Driver.) - LEGACY_AVKMGR O64 - Services: CurCS - 27/05/2014 - C:\Windows\System32\DRIVERS\avnetflt.sys (avnetflt) .(.Avira Operations GmbH & Co. KG - Avira WFP Network Driver.) - LEGACY_AVNETFLT O64 - Services: CurCS - 12/05/2014 - C:\Windows\system32\drivers\mbam.sys (MBAMProtector) .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBAMPROTECTOR O64 - Services: CurCS - 06/07/2014 - C:\Windows\system32\drivers\MBAMSwissArmy.sys (MBAMSwissArmy) .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBAMSWISSARMY O64 - Services: CurCS - 12/05/2014 - C:\Windows\system32\drivers\mwac.sys (MBAMWebAccessControl) .(.Malwarebytes Corporation - Malwarebytes Web Access Control.) - LEGACY_MBAMWEBACCESSCONTROL O64 - Services: CurCS - 10/06/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV ~ Legacy: 85 Scanned in 00mn 00s ---\\ Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" % O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> <FirefoxHTML>[HKLM\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.scr> <scrfile>[HKLM\..\open\Command] (...) -- "%1" /S O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe ~ FASS Keys: 11 Scanned in 00mn 00s ---\\ Menu de démarrage Internet (SMI) (O68) O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (...) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("avg.install.userHPSettings", "http://www.delta-search.com/?affID=119556&babsrc=HP_ss&mntrId=86CE446D5779580D"); =>Toolbar.DeltaSearch O69 - SBI: prefs.js [sébastien - 0u2m8k6h.default] user_pref("avg.install.userSPSettings", "Delta Search"); O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.BackPageActive", true); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.Country", "France"); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.DockingPositionDown", false); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.SmartbarDisabled", false); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.SmartbarStateMinimaized", false); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.UserID", "5a3a2697-a720-4cf8-b166-8b1c8c4c84d1"); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.Visibility", false); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.backPageCapacity", 3); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.backPageCounter", 0); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.backPageDay", 10); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.backPageLastEvent", "1394279271357"); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.backPageMinInterval", 15); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.barcodeid", "769"); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.countryiso", "fr"); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.downloadprovider", "quickobrw"); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.externalJsFiles", "{\"d\":\"[{\\\"ExcludeDomains\\\":[\\\"snap.do\\\",\\\"snapdo.com\\\"],\\\"Http[...] =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.fromautoupdate", "true"); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.installationid", "5a3a2697-a720-4cf8-b166-8b1c8c4c84d1"); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.installdate", "26/03/2013"); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.keepAliveLastevent", "1394451968"); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.lastExternalJsUpdate", "1396077573776"); =>PUP.HelperBar O69 - SBI: prefs.js [sébastien - usbskqvw.default-1364136879355] user_pref("extensions.helperbar.publisher", "quickobrw"); =>PUP.HelperBar O69 - SBI: SearchScopes [HKCU] {006ee092-9658-4fd6-bd8e-a21a348e59f5} - (Web Search) - http://feed.helperbar.com =>PUP.HelperBar O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} - (Ask.com) - http://dts.search.ask.com ~ Keys: Scanned in 00mn 00s ---\\ Enumère les service demarrés par Svchost (SSS) (O83) O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [236032] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [777728] O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [859648] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [679424] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll [99328] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll [64512] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [359424] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll [316928] O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll [680960] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [2428952] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll [849920] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688] O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [569344] O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [30720] O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70144] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [156672] O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll [67584] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [242688] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll [121856] O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704] O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104] O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [1110016] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll [90624] O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480] O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [209920] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [44544] O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864] ~ Services: 32 Scanned in 00mn 01s ---\\ Recherche particulière à la racine du système (SPRF) (O84) [MD5.31EBB8ADF314C0439FFB8B038B8DED8C] [SPRF][04/07/2014] (.PC Cleaners - PC Cleaner Pro.) -- C:\ProgramData\pclunst.exe [4954384] =>Rogue.PCCleanerPro [MD5.3FEA9D2EDF23B0283C7A66C8DEA380BD] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player Module.) -- C:\Windows\Downloaded Program Files\dwusplay.dll [24576] [MD5.CDBE35EA59BC9223E4F800BD1DB82D27] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player.) -- C:\Windows\Downloaded Program Files\dwusplay.exe [196608] [MD5.3F4413DCD8D3BBABF08F68F25E6D60E1] [SPRF][16/02/2005] (.InstallShield Software Corporation - InstallShield Update Service Web Agent.) -- C:\Windows\Downloaded Program Files\isusweb.dll [401408] ~ Files: 4 Scanned in 00mn 05s ---\\ Enumère les codes produits des logiciels (PUC) (O90) O90 - PUC: "25946514D214736534007A857BC0F010" . (.Avira SearchFree Toolbar.) -- C:\Windows\Installer\{41564952-412D-5637-4300-A758B70C0F01}\ToolbarIcon.exe =>Toolbar.Avira ~ Update Products: 1 Scanned in 00mn 00s ---\\ Export de clés de registre aléatoires (O91) [HKCU\Software\5308d8cb63fec41\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" =>Hijacker.Eazel [HKCU\Software\5308d8cb63fec41\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:version="2.6.1095.52" =>Hijacker.Eazel [HKCU\Software\5308d8cb63fec41\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1125.80]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" =>Hijacker.Eazel [HKCU\Software\5308d8cb63fec41\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1125.80]:version="2.6.1125.80" =>Hijacker.Eazel [HKCU\Software\5308d8cb63fec41] =>PUP.Babylon^ ~ Export Key Software: Scanned in 00mn 00s ---\\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS) [MD5.AACB27C8E71C4AF492E78CC3659EA8C1] [WIS][26/06/2014] (.APN, LLC - Avira SearchFree Toolbar.) -- C:\Windows\Installer\3729aa3.msi [856064] =>Toolbar.Avira [MD5.71687EDBD27600E727B54A777ED69E0D] [WIS][16/12/2013] (.Kreapixel - Webplayer.) -- C:\Windows\Installer\b07bb6f.msi [21504] =>Adware.SocialSkinz ~ WIS: 2 Scanned in 00mn 09s ---\\ Recherche de clés de registre Tracing (O100) HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32 =>PUP.AdvancedSystemProtector HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS =>PUP.AdvancedSystemProtector HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32 =>Toolbar.Bing HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BingBar_RASMANCS =>Toolbar.Bing HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\boxore_RASAPI32 =>Adware.Boxore HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\boxore_RASMANCS =>Adware.Boxore HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock BSetup_RASAPI32 =>PUP.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock BSetup_RASMANCS =>PUP.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock Update_RASAPI32 =>PUP.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock Update_RASMANCS =>PUP.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock UpSetup_RASAPI32 =>PUP.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock UpSetup_RASMANCS =>PUP.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock_RASAPI32 =>PUP.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock_RASMANCS =>PUP.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\GoforFiles_RASAPI32 =>P2P.GoforFiles HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\GoforFiles_RASMANCS =>P2P.GoforFiles HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\iLividMediaBar_RASAPI32 =>Adware.Bandoo HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\iLividMediaBar_RASMANCS =>Adware.Bandoo HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\iLividSetup_RASAPI32 =>Adware.Bandoo HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\iLividSetup_RASMANCS =>Adware.Bandoo HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Install_BubbleDock_RASAPI32 =>PUP.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Install_BubbleDock_RASMANCS =>PUP.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LollipopInstaller_RASAPI32 =>Adware.Lollipop HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LollipopInstaller_RASMANCS =>Adware.Lollipop HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Lollipop_RASAPI32 =>Adware.Lollipop HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Lollipop_RASMANCS =>Adware.Lollipop HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MyBabylonTB_RASAPI32 =>PUP.Babylon HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\MyBabylonTB_RASMANCS =>PUP.Babylon HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\QuickShare_RASAPI32 =>PUP.QuickShare HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\QuickShare_RASMANCS =>PUP.QuickShare HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SmartbarExeInstaller_RASAPI32 =>Hijacker.SmartBar HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SmartbarExeInstaller_RASMANCS =>Hijacker.SmartBar HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_pour_stellar-phoenix-photo-recovery_RASAPI32 =>Toolbar.Conduit HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_pour_stellar-phoenix-photo-recovery_RASMANCS =>Toolbar.Conduit HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_pour_windows-live-messenger_RASAPI32 =>Toolbar.Conduit HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_pour_windows-live-messenger_RASMANCS =>Toolbar.Conduit ~ BTK: 291 Scanned in 00mn 00s ---\\ Recherche de clés de registre CLSID (O101) [HKCR\CLSID\{41564952-412D-5637-4300-7A786E7484D7}] (Avira SearchFree Toolbar) =>Toolbar.Avira [HKCR\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}] (QuickShare Widget) =>PUP.QuickShare ~ BCK: 4301 Scanned in 00mn 05s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - \| Demand 14/05/2014 257712 \| (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe SS - \| Demand 12/10/2010 206072 \| (GamesAppService) . (.WildTangent, Inc..) - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe SS - \| Demand 13/05/2013 1129760 \| (hpqwmiex) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe SS - \| Demand 18/06/2014 119408 \| (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe SS - \| Auto 03/04/2014 315008 \| (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe SS - \| Demand 04/02/2013 155824 \| (Sony PC Companion) . (.Avanquest Software.) - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe SS - \| Demand 14/07/2009 27136 \| C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - \| Auto 21/12/2013 65432 \| (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe SR - \| Auto 10/02/2012 235520 \| (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe SR - \| Auto 10/02/2012 361984 \| (AMD FUEL Service) . (.Advanced Micro Devices, Inc..) - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe SR - \| Auto 27/05/2014 430160 \| (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe SR - \| Auto 27/05/2014 430160 \| (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe SR - \| Auto 27/05/2014 1039952 \| (AntiVirWebService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe SR - \| Auto 23/06/2014 165784 \| (APNMCP) . (.APN LLC..) - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe =>Toolbar.Ask SR - \| Auto 30/06/2014 138832 \| (Avira.OE.ServiceHost) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe SR - \| Auto 10/07/1658 0 \| (ezSharedSvc) . (.EasyBits Software AS.) - C:\Windows\System32\ezSharedSvcHost.exe =>.EasyBits Software AS SR - \| Auto 04/11/2013 92160 \| (HP Support Assistant Service) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe =>.Hewlett-Packard Co SR - \| Auto 11/10/2010 346168 \| (HPClientSvc) . (.Hewlett-Packard Company.) - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe SR - \| Auto 24/09/2012 31040 \| (hpsrv) . (.Hewlett-Packard Company.) - C:\Windows\System32\Hpservice.exe SR - \| Auto 05/03/2012 35200 \| (HPWMISVC) . (.Hewlett-Packard Development Company, L.P..) - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe SR - \| Auto 12/05/2014 1809720 \| (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe SR - \| Auto 12/05/2014 860472 \| (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe SR - \| Auto 11/03/2014 23808 \| (MsMpSvc) . (.Microsoft Corporation.) - c:\Program Files\Microsoft Security Client\MsMpEng.exe SR - \| Auto 04/01/2012 311808 \| (STacSV) . (.IDT, Inc..) - C:\Program Files\IDT\WDM\STacSV64.exe SR - \| Auto 10/07/1658 0 \| (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation SR - \| Auto 14/07/2009 27136 \| C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe ~ Services: Scanned in 00mn 08s ---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80) Run by sébastien at 06/07/2014 20:01:28 ~ OS 64 not supported by MBR tool ~ MBR: 0 Scanned in 00mn 00s ---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by sébastien at 06/07/2014 20:01:30 ******* Dump file Name ******* C:\PhysicalDisk0_MBR.bin ~ MBR: Scanned in 00mn 02s ---\\ Scan Additionnel (O88) Database Version : 13026 - (06/07/2014) Clés trouvées (Keys found) : 114 Valeurs trouvées (Values found) : 3 Dossiers trouvés (Folders found) : 31 Fichiers trouvés (Files found) : 39 [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-4300-7A786E7484D7}] =>Toolbar.Avira^ [HKLM\SYSTEM\CurrentControlSet\Services\APNMCP] =>Toolbar.Ask^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{41564952-412D-5637-4300-A758B70C0F01}] =>Toolbar.Avira^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Cartoon Maker1.7] =>PUP.Babylon^ [HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\FLV Player] =>Adware.MegaSearch^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{11D4FAA0-A577-4FA8-B24E-D24283D861D1}] =>PUP.QuickShare^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F750DB0E-D452-3108-63C9-FE16BC686741}] =>Adware.SocialSkinz^ [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\DATAMNGR] =>PUP.Datamngr^ [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}] =>Hijacker.SmartBar [HKLM\Software\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}] =>PUP.Babylon [HKLM\Software\Wow6432Node\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}] =>PUP.Babylon [HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}] =>PUP.Babylon [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}] =>PUP.Babylon [HKLM\Software\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] =>PUP.Babylon [HKLM\Software\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] =>PUP.Babylon [HKLM\Software\Wow6432Node\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] =>PUP.Babylon [HKLM\Software\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}] =>Hijacker.SmartBar [HKLM\Software\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}] =>Hijacker.SmartBar [HKLM\Software\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}] =>Hijacker.SmartBar [HKLM\Software\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}] =>Hijacker.SmartBar [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}] =>Adware.Bandoo [HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}] =>Adware.Bandoo [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ae07101b-46d4-4a98-af68-0333ea26e113}] =>Adware.Agent [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ae07101b-46d4-4a98-af68-0333ea26e113}] =>Adware.Agent [HKLM\Software\Classes\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113}] =>Adware.Agent [HKLM\Software\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}] =>Adware.CDNHelper [HKLM\Software\Wow6432Node\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}] =>Adware.CDNHelper [HKLM\Software\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}] =>Hijacker.SmartBar [HKLM\Software\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>PUP.Babylon [HKLM\Software\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>PUP.Babylon [HKLM\Software\Wow6432Node\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>PUP.Babylon [HKLM\Software\Classes\AppID\escort.dll] =>PUP.Babylon [HKLM\Software\Classes\AppID\escortapp.dll] =>PUP.Babylon [HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASMANCS] =>Toolbar.Bing [HKCU\Software\APN DTX] =>Toolbar.Ask [HKCU\Software\lollipop] =>Adware.Lollipop [HKLM\Software\Wow6432Node\iLividSRTB] =>Adware.Bandoo [HKCU\Software\ilivid] =>Adware.Bandoo [HKCU\Software\Softonic] =>Toolbar.Conduit [HKCU\Software\Somoto] =>Adware.MegaSearch [HKLM\Software\Wow6432Node\Tutorials] =>Spyware.AgenceExclusive [HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASAPI32] =>PUP.Babylon [HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASMANCS] =>PUP.Babylon [HKLM\Software\Classes\Prod.cap] =>PUP.Babylon [HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32] =>Toolbar.Bing [HKLM\Software\Wow6432Node\Google\Chrome\Extensions\kkkeikdkpjenmoiicggnnodbkebafgpc] =>PUP.Babylon [HKLM\Software\Wow6432Node\Microsoft\Tracing\QuickShare_RASAPI32] =>PUP.QuickShare [HKLM\Software\Wow6432Node\Microsoft\Tracing\QuickShare_RASMANCS] =>PUP.QuickShare [HKLM\Software\Wow6432Node\Microsoft\Tracing\apnstub_RASMANCS] =>Toolbar.Ask [HKLM\Software\Wow6432Node\Microsoft\Tracing\apnstub_RASAPI32] =>Toolbar.Ask [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{47B614AF-B4CC-485B-B331-BE26F02ED4CC}] =>PUP.Babylon [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{47B614AF-B4CC-485B-B331-BE26F02ED4CC}] =>PUP.Babylon [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{47B614AF-B4CC-485B-B331-BE26F02ED4CC}] =>PUP.Babylon [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Cartoon Maker1.7] =>PUP.Babylon [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Browser Helper Object1.4] =>PUP.Babylon [HKLM\Software\Wow6432Node\Microsoft\Tracing\boxore_RASAPI32] =>Adware.Boxore [HKLM\Software\Wow6432Node\Microsoft\Tracing\boxore_RASMANCS] =>Adware.Boxore [HKCU\Software\AskPartnerNetwork] =>Toolbar.Ask [HKLM\Software\AskPartnerNetwork] =>Toolbar.Ask [HKLM\Software\Wow6432Node\AskPartnerNetwork] =>Toolbar.Ask [HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}] =>Toolbar.Yahoo [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}] =>Toolbar.Yahoo [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{327C2873-E90D-4c37-AA9D-10AC9BABA46C}] =>Toolbar.EasyWebPrint [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{327C2873-E90D-4c37-AA9D-10AC9BABA46C}] =>Toolbar.EasyWebPrint [HKLM\Software\Classes\Toolband.EB_ExplorerBar] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.EB_ExplorerBar.1] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.FH_HookEventSink] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.FH_HookEventSink.1] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.IPM_PrintListItem] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.IPM_PrintListItem.1] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.PM_DialogEventsHandler] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.PM_DialogEventsHandler.1] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.PM_Launcher] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.PM_Launcher.1] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.PM_PrintManager] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.PM_PrintManager.1] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.PR_BindStatusCallback] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.PR_BindStatusCallback.1] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.PR_CancelButtonEventHandler] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.PR_CancelButtonEventHandler.1] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.PR_PrintDialogCallback] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.PR_PrintDialogCallback.1] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.TBToolband] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.TBToolband.1] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.UserOptions] =>Toolbar.Agent [HKLM\Software\Classes\Toolband.UserOptions.1] =>Toolbar.Agent [HKLM\Software\Classes\AppID\escorTlbr.DLL] =>PUP.Funmoods [HKLM\Software\Wow6432Node\Classes\Toolband.EB_ExplorerBar] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.EB_ExplorerBar.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.FH_HookEventSink] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.FH_HookEventSink.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.IPM_PrintListItem] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.IPM_PrintListItem.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.PM_DialogEventsHandler] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.PM_DialogEventsHandler.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.PM_Launcher] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.PM_Launcher.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.PM_PrintManager] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.PM_PrintManager.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.PR_BindStatusCallback] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.PR_BindStatusCallback.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.PR_CancelButtonEventHandler] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.PR_CancelButtonEventHandler.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.PR_PrintDialogCallback] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.PR_PrintDialogCallback.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.TBToolband] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.TBToolband.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.UserOptions] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolband.UserOptions.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\AppID\escort.DLL] =>PUP.Funmoods [HKLM\Software\Wow6432Node\Classes\AppID\escortApp.DLL] =>PUP.Funmoods [HKLM\Software\Wow6432Node\Classes\AppID\escorTlbr.DLL] =>PUP.Funmoods [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^ [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{ae07101b-46d4-4a98-af68-0333ea26e113} =>PUP.QuickShare^ [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:FLV Player =>Adware.SocialSkinz^ [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:ApnTBMon =>Toolbar.Ask^ C:\Users\sébastien\AppData\Roaming\Mozilla\Firefox\Profiles\0u2m8k6h.default\extensions\{029afe2e-aa6f-406d-8003-304d06593385} =>PUP.CertifiedToolbar^ C:\Users\sébastien\AppData\Roaming\Mozilla\Firefox\Profiles\usbskqvw.default-1364136879355\extensions\yhwqg@dlhwda.org =>PUP.CostMin^ C:\Users\sébastien\AppData\Roaming\Mozilla\Firefox\Profiles\usbskqvw.default-1364136879355\extensions\{029afe2e-aa6f-406d-8003-304d06593385} =>PUP.CertifiedToolbar^ C:\Users\sébastien\AppData\Roaming\Mozilla\Firefox\Profiles\usbskqvw.default-1364136879355\extensions\{5a3a2697-a720-4cf8-b166-8b1c8c4c84d1} =>PUP.QuickShare^ C:\Program Files (x86)\Bench =>PUP.GiganticSavings^ C:\Program Files (x86)\Cartoon Maker =>PUP.Babylon^ C:\Program Files (x86)\Movies Toolbar =>PUP.MoviesToolbar^ C:\Program Files (x86)\MyPC Backup =>PUP.MyPCBackup^ C:\Program Files (x86)\NetCrawl =>PUP.NetCrawl^ C:\Program Files (x86)\Search Results Toolbar =>PUP.SearchResults^ C:\ProgramData\Babylon =>PUP.Babylon^ C:\ProgramData\Datamngr =>PUP.Datamngr^ C:\ProgramData\Software =>Adware.Boxore^ C:\ProgramData\WPM =>PUP.WpManager^ C:\Users\sébastien\AppData\Roaming\Babylon =>PUP.Babylon^ C:\Users\sébastien\AppData\Roaming\GoforFiles =>P2P.GoforFiles^ C:\Users\sébastien\AppData\Roaming\musicMeDownloader.447DBE4B8352E60C6628BA362FFE0160304ED2DC.1 =>PUP.SoftwareEngine^ C:\Users\sébastien\AppData\Roaming\Nosibay =>PUP.BubbleDock^ C:\Users\sébastien\AppData\Roaming\RocketUpdater =>PUP.RockTurner^ C:\Users\sébastien\AppData\Roaming\wp_update =>PUP.WpManager^ C:\Users\sébastien\AppData\Local\Lollipop =>Adware.Lollipop^ C:\Users\sébastien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock =>PUP.BubbleDock^ C:\Program Files (x86)\Software =>Adware.Boxore C:\Program Files (x86)\Browser Helper Object =>PUP.Babylon C:\Program Files (x86)\AskPartnerNetwork =>Toolbar.Ask C:\Program Files (x86)\Mozilla Firefox\Extensions\ffxtlbr@babylon.com =>PUP.Babylon C:\ProgramData\Browser Manager =>PUP.Babylon C:\ProgramData\AskPartnerNetwork =>Toolbar.Ask C:\Users\sébastien\AppData\Local\AskPartnerNetwork =>Toolbar.Ask C:\Users\sébastien\AppData\LocalLow\searchresultstb =>Toolbar.Agent C:\Users\sébastien\AppData\LocalLow\Smartbar =>Hijacker.SmartBar C:\Users\sébastien\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe =>Adware.SocialSkinz^ C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe =>Toolbar.Ask^ C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe =>Toolbar.Ask^ C:\Windows\Tasks\APSnotifierPP1.job =>PUP.AnyProtect^ C:\Windows\System32\Tasks\APSnotifierPP1 =>PUP.AnyProtect^ C:\Windows\Tasks\APSnotifierPP2.job =>PUP.AnyProtect^ C:\Windows\System32\Tasks\APSnotifierPP2 =>PUP.AnyProtect^ C:\Windows\Tasks\APSnotifierPP3.job =>PUP.AnyProtect^ C:\Windows\System32\Tasks\APSnotifierPP3 =>PUP.AnyProtect^ C:\Windows\Tasks\Rocket Updater.job =>PUP.RockTurner^ C:\Windows\System32\Tasks\Rocket Updater =>PUP.RockTurner^ [HKCU\Software\AnyProtect] =>PUP.AnyProtect^ [HKCU\Software\AppDataLow\Software\BlockAndSurf] =>PUP.BlockAndSurf^ [HKCU\Software\AppDataLow\Software\Re_markit] =>PUP.ReMarkIt^ [HKCU\Software\AppDataLow\Software\ilividtoolbargaw] =>Adware.Bandoo^ [HKCU\Software\GoforFiles] =>P2P.GoforFiles^ [HKCU\Software\Rocket Browser] =>PUP.RockTurner^ [HKCU\Software\RocketUpdater] =>PUP.RockTurner^ [HKCU\Software\Smartbar] =>Hijacker.SmartBar^ [HKCU\Software\TutoTag] =>PUP.AgenceExclusive^ [HKCU\Software\freesofttoday] =>Adware.FreeSoftToday^ [HKCU\Software\iLivid] =>Adware.Bandoo^ [HKCU\Software\ilividtoolbargaw] =>Adware.Bandoo^ [HKLM\Software\Wow6432Node\AdvertisingSupport] =>PUP.AdvertisingSupport^ [HKLM\Software\Wow6432Node\Babylon] =>PUP.Babylon^ [HKLM\Software\Wow6432Node\GoforFiles] =>P2P.GoforFiles^ [HKLM\Software\Wow6432Node\Vittalia] =>PUP.Vittalia^ [HKLM\Software\Wow6432Node\aartemisSoftware] =>PUP.AArtemis^ [HKLM\Software\Wow6432Node\supWPM] =>PUP.WpManager^ C:\ProgramData\pclunst.exe =>Rogue.PCCleanerPro^ [HKCU\Software\5308d8cb63fec41\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" =>Hijacker.Eazel^ [HKCU\Software\5308d8cb63fec41\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1125.80]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" =>Hijacker.Eazel^ [HKCU\Software\5308d8cb63fec41] =>PUP.Babylon^^ C:\Windows\Installer\3729aa3.msi =>Toolbar.Avira^ C:\Windows\Installer\b07bb6f.msi =>Adware.SocialSkinz^ [HKCR\CLSID\{41564952-412D-5637-4300-7A786E7484D7}] (Avira SearchFree Toolbar) =>Toolbar.Avira^ [HKCR\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}] (QuickShare Widget) =>PUP.QuickShare^ C:\Users\sébastien\Downloads\flvmplayer.exe =>PUP.Offerware C:\Program Files (x86)\Internet Explorer\cr_addon.crx =>PUP.Babylon ~ Additionnel Scan: 275028 Items scanned in 00mn 30s ---\\ Informations complémentaires sur les modules ~ http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer, Proxy Management (R5) ~ http://nicolascoolman.fr/o2-browser-helper-objects-de-navigateur/ =>.Browser Helper Objects de navigateur (O2) ~ http://nicolascoolman.fr/o3-internet-explorer-toolbars/ =>.Internet Explorer Toolbars (O3) ~ http://nicolascoolman.fr/o4-applications-demarrees-par-le-registre/ =>.Applications lancées au démarrage du système (O4) ~ http://nicolascoolman.fr/o50-image-file-execution-options-zhpdiag/ =>.Image File Execution Options (IFEO) (O50) ~ http://nicolascoolman.fr/o51-mountpoints2-shell-key-mpsk/ =>.Clé de registre Shell MountPoints2 (MPKS) (O51) ~ AMI: 6 Scanned in 00mn 00s ---\\ Récapitulatif des détections trouvées sur votre station http://nicolascoolman.fr/adware-socialskinz =>Adware.SocialSkinz http://nicolascoolman.fr/toolbar-ask =>Toolbar.Ask http://nicolascoolman.fr/pup-certifiedtoolbar =>PUP.CertifiedToolbar http://nicolascoolman.fr/pup-costmin =>PUP.CostMin http://nicolascoolman.fr/pup-quickshare =>PUP.QuickShare http://nicolascoolman.fr/pup-aartemis =>PUP.AArtemis http://nicolascoolman.fr/pup-moviestoolbar =>PUP.MoviesToolbar http://nicolascoolman.fr/pup-anyprotect =>PUP.AnyProtect http://nicolascoolman.fr/pup-rockturner =>PUP.RockTurner http://nicolascoolman.fr/adware-megasearch =>Adware.MegaSearch http://nicolascoolman.fr/pup-wpmanager =>PUP.WpManager http://nicolascoolman.fr/pup-babylon =>PUP.Babylon http://nicolascoolman.fr/hijacker-eazel =>Hijacker.Eazel http://nicolascoolman.fr/pup-blockandsurf =>PUP.BlockAndSurf http://nicolascoolman.fr/pup-remarkit =>PUP.ReMarkIt http://nicolascoolman.fr/adware-bandoo =>Adware.Bandoo http://nicolascoolman.fr/hijacker-smartbar =>Hijacker.SmartBar http://nicolascoolman.fr/toolbar-conduit =>Toolbar.Conduit http://nicolascoolman.fr/spyware-agenceexclusive =>PUP.AgenceExclusive http://nicolascoolman.fr/adware-freesofttoday =>Adware.FreeSoftToday http://nicolascoolman.fr/adware-lollipop =>Adware.Lollipop http://nicolascoolman.fr/pup-vittalia =>PUP.Vittalia http://nicolascoolman.fr/pup-giganticsavings =>PUP.GiganticSavings http://nicolascoolman.fr/pup-mypcbackup =>PUP.MyPCBackup http://nicolascoolman.fr/pup-netcrawl =>PUP.NetCrawl http://nicolascoolman.fr/pup-searchresults =>PUP.SearchResults http://nicolascoolman.fr/pup-datamngr =>PUP.Datamngr http://nicolascoolman.fr/adware-boxore =>Adware.Boxore http://nicolascoolman.fr/pup-softwareengine =>PUP.SoftwareEngine http://nicolascoolman.fr/pup-bubbledock =>PUP.BubbleDock http://nicolascoolman.fr/pup-systemspeedup =>PUP.SystemSpeedup http://nicolascoolman.fr/pup-bitguard =>PUP.BitGuard http://nicolascoolman.fr/pup-browsersafeguard =>PUP.BrowserSafeguard http://nicolascoolman.fr/spyware-protectedsearch =>Spyware.ProtectedSearch http://nicolascoolman.fr/toolbar-deltasearch =>Toolbar.DeltaSearch http://nicolascoolman.fr/pup-helperbar =>PUP.HelperBar http://nicolascoolman.fr/pup-advancedsystemprotector =>PUP.AdvancedSystemProtector http://nicolascoolman.fr/pup-funmoods =>PUP.Funmoods http://nicolascoolman.fr/pup-offerware =>PUP.Offerware ~ MSI: 39 link(s) detected in 00mn 00s End of the scan (1758 lines in 08mn 45s)(0)
Koytlo2	Le 06/07/2014 à 20:47
Fidèle à VIC. Ancien	re je t'ai demandé de faire passer le rapport via cjoint.com . pourquoi ne le fais-tu pas ? je t'ai demandé de faire passer le rapport de l'anti-virus et de malwarebyte . peux-tu me les faire passer .... via cjoint.com. si tu ne sais pas te servir de cjoint.com tu peux me demander . a tout de suite

Vous avez résolu votre problème avec VIC ? Faites-le savoir sur les réseaux sociaux !