un virus impossible a supprimer, bloquer ... Fermé

Question

Bonjour, j'ai un gros probleme . 
j'ai un virus dans mon ordinateur ( windows 7 et 64 bit)
c'est des cheval de troie (trojan:W64Zaccess.R) et (trojan.sirefef.GY)qui est dans le fichier C:\$Recycle.Bin\S-1-5-21-3496322804-3287504975-2506799764-1001\$35d1807f96a55ebc62d2718b7b4a7dbf\U
mais a chaque fois que je le supprime ou que je l'ai mit en quarrantaine il réapparer dans le meme dossier quelque seconde apres .
mon anti-virus est firewall de orange et windows defender arrive a le supprimer.
il me gene assez en m'envoyant des pubs et eteint l'ordinateur assez souvent .
j'espere une reponce assez rapide 
merci d'avance

Fish66 · Answer

Bonjour,
ZéroAccess pour 64 bits c'est parfois coriace!
=================
 Avant d'utiliser ComboFix :  
	
Les logiciels d'émulation de CD comme Daemon Tools peuvent gêner les outils de désinfection. Utilise Defogger pour les désactiver temporairement :  

si tu as ce genre de d'outils sur ton pc Utilise Defogger pour les désactiver temporairement : sinon passe directement à combofix  

* Télécharge Defogger (de jpshortstuff) sur  ton Bureau  
* Lance le  

* Une fenêtre apparait : clique sur "Disable"  

* Fais redémarrer l'ordinateur si l'outil te le demande  

Note : Quand nous aurons terminé la désinfection, tu pourras réactiver ces logiciels en relançant Defogger et en cliquant sur "Re-enable"  

===================================================  

Attention, avant de commencer, lis attentivement la procédure  

******************************************************** 

/!\ Ne pas utiliser ce logiciel en dehors du cadre de cette désinfection : DANGEUREUX /!\  

* Fais un clic droit sur ce lien, enregistre le dans ton bureau sous un autre nom exemple « ton pseudo.exe »  
Voici Aide combofix 

* /!\ Déconnecte-toi du net et ARRÊTE TES LOGICIELS DE PROTECTION /!\  
 

*Double-clique sur ComboFix.exe (ou exécuter en tant qu'administrateur pour vista et seven)  

Un "pop-up" va apparaître qui dit que ComboFix est utilisé à vos risques et avec aucune garantie... Clique sur oui pour accepter  

** SURTOUT INSTALLES LA CONSOLE DE RECUPERATION  
(si il te propose de l'installer remets internet)  

? Ne touche à rien(souris, clavier) tant que le scan n'est pas terminé, car tu risques de planter ton PC  

*En fin de scan, il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire.  

* Une fois le scan achevé, un rapport va s'afficher : Poste son contenu  

** /!\ Réactive la protection en temps réel de ton antivirus et de ton antispyware avant de te reconnecter à Internet. /!\  

*Note : Le rapport se trouve également là : C:\ComboFix.txt

ronobo · Answer

merci pour cette reponce tres rapide   
mais faire re-enable reactive quelle logiciel 
sinon j'ai d'abors disable puis j'ai re-enable et mon anti-virus m'a directement envoyer un messable de danger 
je vient d'utiliser combofix et tout a marcher.mais le virus est toujours la 
que faire?
voila le rapport de combofix 
ComboFix 12-08-28.03 - loho 29/08/2012  15:17:50.1.4 - x64
Microsoft Windows 7 Édition Familiale Premium   6.1.7601.1.1252.33.1036.18.6126.4219 [GMT 2:00]
Lancé depuis: c:\users\loho\Desktop\fezsdfzfd.exe.exe
AV: Anti-virus firewall 9.10 *Disabled/Updated* {15414183-282E-D62C-CA37-EF24860A2F17}
FW: Anti-virus firewall 9.10 *Disabled* {2D7AC0A6-6241-D774-E168-461178D9686C}
SP: Anti-virus firewall 9.10 *Disabled/Updated* {AE20A067-0E14-D9A2-F087-D456FD8D65AA}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\2YourFace\bhO.dll
c:\program files (x86)\Complitly
c:\program files (x86)\Complitly\chrome\ComplitlyChrome.crx
c:\program files (x86)\Complitly\FireFoxExtension.exe
c:\program files (x86)\Complitly\InstTracker.exe
c:\program files (x86)\Complitly\support@Complitly.com\chrome.manifest
c:\program files (x86)\Complitly\support@Complitly.com\chrome\content\appIcon.png
c:\program files (x86)\Complitly\support@Complitly.com\chrome\content\browserOverlay.xul
c:\program files (x86)\Complitly\support@Complitly.com\chrome\content\options.js
c:\program files (x86)\Complitly\support@Complitly.com\chrome\content\options.xul
c:\program files (x86)\Complitly\support@Complitly.com\chrome\content\utils.js
c:\program files (x86)\Complitly\support@Complitly.com\defaults\preferences\predictad.js
c:\program files (x86)\Complitly\support@Complitly.com\install.rdf
c:\program files (x86)\Complitly\unins000.dat
c:\program files (x86)\Complitly\unins000.exe
c:\program files (x86)\DealPly
c:\program files (x86)\DealPly\DealPly.crx
c:\program files (x86)\DealPly\DealPly.xpi
c:\program files (x86)\DealPly\DealPlyIE.dll
c:\program files (x86)\DealPly\DealPlyTune.dll
c:\program files (x86)\DealPly\DealPlyUpdate.exe
c:\program files (x86)\DealPly\DealPlyUpdate.log
c:\program files (x86)\DealPly\DealPlyUpdateRun.exe
c:\program files (x86)\DealPly\icon.ico
c:\program files (x86)\DealPly\uninst.exe
c:\program files (x86)\IMinent Toolbar	bHElper.dll
c:\program files (x86)\Incredibar.com
c:\program files (x86)\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll
c:\program files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarApp.dll
c:\program files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarEng.dll
c:\program files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarsrv.exe
c:\program files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll
c:\program files (x86)\Incredibar.com\incredibar\1.5.11.14\uninstall.exe
c:\program files (x86)\intellidownload\gunzip.exe
c:\program files (x86)\Object
c:\program files (x86)\Object\bhO_project.dll
c:\program files (x86)\Object\ChromeAddon.pem
c:\program files (x86)\Object\chromeaddon\._included.js
c:\program files (x86)\Object\chromeaddon\background.html
c:\program files (x86)\Object\chromeaddon\included.js
c:\program files (x86)\Object\chromeaddon\manifest.json
c:\program files (x86)\Object\config.ini
c:\program files (x86)\Object\facetheme-apl_uninstall.exe
c:\program files (x86)\Object\status.txt
c:\program files (x86)\Object\status2.txt
c:\program files (x86)\OfferBox
c:\program files (x86)\OfferBox\language.xml
c:\program files (x86)\OfferBox\OfferBox.exe
c:\program files (x86)\OfferBox\OfferBoxHTTPProxy.exe
c:\program files (x86)\OfferBox\uninstaller.exe
c:\program files (x86)\RelevantKnowledge
c:\program files (x86)\RelevantKnowledgells64.dll
c:\program files (x86)\RelevantKnowledgelvknlg64.exe
c:\program files (x86)\Vid-Saver
c:\program files (x86)\Vid-Saver\Uninstall.exe
c:\program files (x86)\Vid-Saver\Vid-Saver.ico
c:\program files (x86)\Vid-Saver\Vid-Saver.ini
c:\program files (x86)\Vid-Saver\Vid-SaverInstaller.log
c:\program files\Web Assistant\ExTEnsion32.dll
c:\programdata\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge
c:\programdata\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\About RelevantKnowledge.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Privacy Policy and User License Agreement.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Support.lnk
c:\users\loho\AppData\Local\Vid-Saver
c:\users\loho\AppData\Local\Vid-Saver\Chrome\Vid-Saver.crx
c:\users\loho\AppData\Roaming\msconfig.ini
c:\users\loho\AppData\Roaming\OfferBox
c:\users\loho\AppData\Roaming\OfferBox\config.dat
c:\users\loho\AppData\Roaming\OfferBox\config.xml
c:\users\loho\AppData\Roaming\OfferBoxun.log
c:\users\loho\AppData\Roaming\OfferBox	emp.ico
c:\windows\SysWow64\e318848b.exe
c:\windows\SysWow64\ijl11.dll
c:\windows\SysWow64\URTTemp
c:\windows\SysWow64\URTTempegtlib.exe
.
.
(((((((((((((((((((((((((((((   Fichiers créés du 2012-07-28 au 2012-08-29  ))))))))))))))))))))))))))))))))))))
.
.
2012-08-29 13:22 . 2012-08-29 13:22	--------	d-----w-	c:\users\UpdatusUser\AppData\Local	emp
2012-08-29 13:22 . 2012-08-29 13:22	--------	d-----w-	c:\users\UpdatusUser.loho-PC\AppData\Local	emp
2012-08-29 13:22 . 2012-08-29 13:22	--------	d-----w-	c:\users\Default\AppData\Local	emp
2012-08-29 08:12 . 2012-08-29 13:02	69000	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{B31603E4-61A9-4F2B-90B1-4CFFD57ABCF6}\offreg.dll
2012-08-29 06:48 . 2012-08-23 08:26	9310152	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{B31603E4-61A9-4F2B-90B1-4CFFD57ABCF6}\mpengine.dll
2012-08-27 16:53 . 2012-08-27 16:53	--------	d-----w-	c:\users\loho\AppData\Roaming\funkitron
2012-08-27 06:55 . 2012-08-27 07:04	--------	d-----w-	c:\program files (x86)\Cracked Steam
2012-08-22 07:39 . 2012-08-22 07:39	--------	d-----w-	c:\programdata\McAfee Security Scan
2012-08-22 07:39 . 2012-08-22 08:12	--------	d-----w-	c:\program files (x86)\McAfee Security Scan
2012-08-22 07:39 . 2012-08-22 07:39	--------	d-----w-	c:\programdata\McAfee
2012-08-21 10:57 . 2012-08-21 10:57	--------	d-----w-	c:\windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2012-08-21 10:56 . 2012-08-21 10:56	--------	d-----w-	c:\users\loho\AppData\Local\2K Games
2012-08-20 07:13 . 2012-07-18 18:15	3148800	----a-w-	c:\windows\system32\win32k.sys
2012-08-20 07:13 . 2012-05-05 08:36	503808	----a-w-	c:\windows\system32\srcore.dll
2012-08-20 07:13 . 2012-05-05 07:46	43008	----a-w-	c:\windows\SysWow64\srclient.dll
2012-08-20 07:13 . 2012-07-04 22:16	73216	----a-w-	c:\windows\system32
etapi32.dll
2012-08-20 07:13 . 2012-07-04 22:13	59392	----a-w-	c:\windows\system32\browcli.dll
2012-08-20 07:13 . 2012-07-04 22:13	136704	----a-w-	c:\windows\system32\browser.dll
2012-08-20 07:13 . 2012-07-04 21:14	41984	----a-w-	c:\windows\SysWow64\browcli.dll
2012-08-20 07:12 . 2012-02-11 06:43	751104	----a-w-	c:\windows\system32\win32spl.dll
2012-08-20 07:12 . 2012-02-11 06:36	559104	----a-w-	c:\windows\system32\spoolsv.exe
2012-08-20 07:12 . 2012-02-11 06:36	67072	----a-w-	c:\windows\splwow64.exe
2012-08-20 07:12 . 2012-02-11 05:43	492032	----a-w-	c:\windows\SysWow64\win32spl.dll
2012-08-20 07:12 . 2012-05-14 05:26	956928	----a-w-	c:\windows\system32\localspl.dll
.
.
.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-28 14:11 . 2012-01-02 19:00	283304	----a-w-	c:\windows\SysWow64\PnkBstrB.xtr
2012-08-28 14:11 . 2012-01-02 17:01	283304	----a-w-	c:\windows\SysWow64\PnkBstrB.exe
2012-08-28 14:10 . 2012-01-02 17:01	280904	----a-w-	c:\windows\SysWow64\PnkBstrB.ex0
2012-08-26 10:08 . 2012-07-23 12:58	73416	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-08-26 10:08 . 2012-07-23 12:58	696520	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2012-08-20 11:36 . 2011-12-03 17:56	62134624	----a-w-	c:\windows\system32\MRT.exe
2012-08-20 07:02 . 2012-05-09 10:26	56016	----a-w-	c:\windows\system32\drivers\fsbts.sys
2012-07-26 17:58 . 2012-07-26 17:58	0	----a-w-	c:\windows\SysWow64\sho5D62.tmp
2012-07-05 20:06 . 2012-07-18 20:28	772544	----a-w-	c:\windows\SysWow64
pDeployJava1.dll
2012-07-05 20:06 . 2011-12-17 17:08	687544	----a-w-	c:\windows\SysWow64\deployJava1.dll
2012-06-27 02:14 . 2012-06-27 02:14	4472832	----a-w-	c:\windows\SysWow64\GPhotos.scr
2012-06-09 13:49 . 2012-01-02 17:01	76888	----a-w-	c:\windows\SysWow64\PnkBstrA.exe
2012-06-09 05:43 . 2012-07-11 07:15	14172672	----a-w-	c:\windows\system32\shell32.dll
2012-06-06 06:49 . 2012-06-06 06:49	1070152	----a-w-	c:\windows\SysWow64\MSCOMCTL.OCX
2012-06-06 06:06 . 2012-07-11 07:15	2004480	----a-w-	c:\windows\system32\msxml6.dll
2012-06-06 06:06 . 2012-07-11 07:15	1881600	----a-w-	c:\windows\system32\msxml3.dll
2012-06-06 06:02 . 2012-07-11 07:14	1133568	----a-w-	c:\windows\system32\cdosys.dll
2012-06-06 05:05 . 2012-07-11 07:15	1390080	----a-w-	c:\windows\SysWow64\msxml6.dll
2012-06-06 05:05 . 2012-07-11 07:15	1236992	----a-w-	c:\windows\SysWow64\msxml3.dll
2012-06-06 05:03 . 2012-07-11 07:14	805376	----a-w-	c:\windows\SysWow64\cdosys.dll
2012-06-02 22:19 . 2012-06-19 15:25	38424	----a-w-	c:\windows\system32\wups.dll
2012-06-02 22:19 . 2012-06-19 15:25	2428952	----a-w-	c:\windows\system32\wuaueng.dll
2012-06-02 22:19 . 2012-06-19 15:25	57880	----a-w-	c:\windows\system32\wuauclt.exe
2012-06-02 22:19 . 2012-06-19 15:25	44056	----a-w-	c:\windows\system32\wups2.dll
2012-06-02 22:19 . 2012-06-19 15:25	701976	----a-w-	c:\windows\system32\wuapi.dll
2012-06-02 22:15 . 2012-06-19 15:25	2622464	----a-w-	c:\windows\system32\wucltux.dll
2012-06-02 22:15 . 2012-06-19 15:25	99840	----a-w-	c:\windows\system32\wudriver.dll
2012-06-02 13:19 . 2012-06-19 15:24	186752	----a-w-	c:\windows\system32\wuwebv.dll
2012-06-02 13:15 . 2012-06-19 15:24	36864	----a-w-	c:\windows\system32\wuapp.exe
2012-06-02 05:50 . 2012-07-11 07:14	458704	----a-w-	c:\windows\system32\drivers\cng.sys
2012-06-02 05:48 . 2012-07-11 07:14	151920	----a-w-	c:\windows\system32\drivers\ksecpkg.sys
2012-06-02 05:48 . 2012-07-11 07:14	95600	----a-w-	c:\windows\system32\drivers\ksecdd.sys
2012-06-02 05:45 . 2012-07-11 07:14	340992	----a-w-	c:\windows\system32\schannel.dll
2012-06-02 05:44 . 2012-07-11 07:14	307200	----a-w-	c:\windows\system32
crypt.dll
2012-06-02 04:40 . 2012-07-11 07:14	22016	----a-w-	c:\windows\SysWow64\secur32.dll
2012-06-02 04:40 . 2012-07-11 07:14	225280	----a-w-	c:\windows\SysWow64\schannel.dll
2012-06-02 04:39 . 2012-07-11 07:14	219136	----a-w-	c:\windows\SysWow64
crypt.dll
2012-06-02 04:34 . 2012-07-11 07:14	96768	----a-w-	c:\windows\SysWow64\sspicli.dll
.
.
(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2012-06-06 1519304]
"{4d51f677-2a0b-43e2-b444-a2b384d24b91}"= "c:\program files (x86)\SFT_France\prxtbSFT_.dll" [2011-03-28 176936]
"{ef79f67a-6ad7-4715-a0f8-932fca442023}"= "c:\program files (x86)\BittorrentBar_FR\prxtbBitt.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]
.
[HKEY_CLASSES_ROOT\clsid\{4d51f677-2a0b-43e2-b444-a2b384d24b91}]
.
[HKEY_CLASSES_ROOT\clsid\{ef79f67a-6ad7-4715-a0f8-932fca442023}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2011-03-28 16:22	176936	----a-w-	c:\program files (x86)\ConduitEngine\prxConduitEngin.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{4d51f677-2a0b-43e2-b444-a2b384d24b91}]
2011-03-28 16:22	176936	----a-w-	c:\program files (x86)\SFT_France\prxtbSFT_.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{58124A0B-DC32-4180-9BFF-E0E21AE34026}]
2010-07-02 08:54	2607872	----a-w-	c:\program files (x86)\IMinent Toolbar	bcore3.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2012-06-06 19:33	1519304	----a-w-	c:\program files (x86)\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
2011-08-24 16:21	1299248	----a-r-	c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{ef79f67a-6ad7-4715-a0f8-932fca442023}]
2011-05-09 08:49	176936	----a-w-	c:\program files (x86)\BittorrentBar_FR\prxtbBitt.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2012-06-06 1519304]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2011-08-24 1299248]
"{977AE9CC-AF83-45E8-9E03-E2798216E2D5}"= "c:\program files (x86)\IMinent Toolbar	bcore3.dll" [2010-07-02 2607872]
"{4d51f677-2a0b-43e2-b444-a2b384d24b91}"= "c:\program files (x86)\SFT_France\prxtbSFT_.dll" [2011-03-28 176936]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files (x86)\ConduitEngine\prxConduitEngin.dll" [2011-03-28 176936]
"{ef79f67a-6ad7-4715-a0f8-932fca442023}"= "c:\program files (x86)\BittorrentBar_FR\prxtbBitt.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]
.
[HKEY_CLASSES_ROOT\clsid\{977ae9cc-af83-45e8-9e03-e2798216e2d5}]
[HKEY_CLASSES_ROOT\TBSB01620.TBSB01620.3]
[HKEY_CLASSES_ROOT\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]
[HKEY_CLASSES_ROOT\TBSB01620.TBSB01620]
.
[HKEY_CLASSES_ROOT\clsid\{4d51f677-2a0b-43e2-b444-a2b384d24b91}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CLASSES_ROOT\clsid\{ef79f67a-6ad7-4715-a0f8-932fca442023}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Akamai NetSession Interface"="c:\users\loho\AppData\Local\Akamai
etsession_win.exe" [2012-08-10 4440896]
"Logitech Vid"="c:\program files (x86)\Logitech\Logitech Vid\vid.exe" [2009-07-16 5458704]
"Speech Recognition"="c:\windows\Speech\Common\sapisvr.exe" [2009-07-14 44544]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Norton Online Backup"="c:\program files (x86)\Symantec\Norton Online Backup\NOBuClient.exe" [2010-06-01 1155928]
"Hotkey Utility"="c:\program files (x86)\Packard Bell\Hotkey Utility\HotkeyUtility.exe" [2011-08-11 627304]
"ApnUpdater"="c:\program files (x86)\Ask.com\Updater\Updater.exe" [2012-06-06 1564872]
"LogitechQuickCamRibbon"="c:\program files\Logitech\Logitech WebCam Software\LWS.exe" [2009-10-14 2793304]
"SweetIM"="c:\program files (x86)\SweetIM\Messenger\SweetIM.exe" [2011-08-01 114992]
"F-Secure Manager"="c:\program files (x86)\Orange\Antivirus Firewall\Common\FSM32.EXE" [2009-10-28 199264]
"F-Secure TNB"="c:\program files (x86)\Orange\Antivirus Firewall\FSGUI\TNBUtil.exe" [2009-10-28 1653344]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-11-01 59240]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-12-08 421736]
"Boxore Client"="c:\program files (x86)\Boxore\BoxoreClient\boxore.exe" [2012-06-19 598320]
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-06-27 1996200]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-17 252296]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files (x86)\McAfee Security Scan\3.0.207\SSScheduler.exe [2011-6-17 272528]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~2\SEARCH~1\Datamngr\datamngr.dll c:\progra~2\WI3C8A~1\Datamngr\IEBHO.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages	REG_MULTI_SZ   	kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R1 FSES;F-Secure Email Scanning Driver;c:\windows\system32\drivers\fses.sys [2011-12-11 50384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Service Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-05-21 116648]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-02-29 158856]
R2 supdate;Software Update Service (supdate);c:\program files (x86)\Software\Update\SoftwareUpdate.exe [2012-07-16 140080]
R2 Web Assistant Updater;Web Assistant Updater;c:\program files\Web Assistant\ExtensionUpdaterService.exe [2012-06-06 185856]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-26 250568]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-06-07 191752]
R3 dump_wmimmc;dump_wmimmc;c:\aeriagames\WolfTeam-FR\GameGuard\dump_wmimmc.sys [x]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C;c:\windows\system32\DRIVERS\e1c62x64.sys [2010-12-20 316080]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
R3 gupdatem;Service Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-05-21 116648]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files (x86)\McAfee Security Scan\3.0.207\McCHSvc.exe [2011-06-17 237008]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-07-21 113120]
R3 netr7364;Pilote de carte LAN sans fil USB RT73 pour Vista;c:\windows\system32\DRIVERS
etr7364.sys [2009-06-10 707072]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [x]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers	susbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2011-08-02 51712]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2011-12-03 1255736]
R3 X6va008;X6va008;c:\windows\SysWOW64\Drivers\X6va008 [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S0 fsbts;fsbts;c:\windows\system32\Drivers\fsbts.sys [2012-08-20 56016]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS
vpciflt.sys [2011-03-18 23704]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]
S0 sptd;sptd;c:\windows\SystemRoot\System32\Drivers\sptd.sys [x]
S1 F-Secure HIPS;F-Secure HIPS Driver;c:\program files (x86)\Orange\Antivirus Firewall\HIPS\drivers\fshs.sys [2009-10-28 57920]
S1 FSFW;F-Secure Firewall Driver;c:\windows\system32\drivers\fsdfw.sys [2009-10-28 92160]
S1 fsvista;F-Secure Vista Support Driver;c:\program files (x86)\Orange\Antivirus Firewall\Anti-Virus\minifilter\fsvista.sys [2009-10-28 14904]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 AdobeActiveFileMonitor9.0;Adobe Active File Monitor V9;c:\program files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [2010-09-30 169408]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 27136]
S2 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-05-12 249648]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]
S2 GREGService;GREGService;c:\program files (x86)\Packard Bell\Registration\GREGsvc.exe [2011-05-30 36456]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-06-27 2369960]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-09-13 13336]
S2 Live Updater Service;Live Updater Service;c:\program files\Packard Bell\Packard Bell Updater\UpdaterService.exe [2011-04-22 244624]
S2 LVPrcS64;Process Monitor;c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [2009-10-07 191000]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2011-03-29 598312]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-02-10 2348352]
S2 PCSUService;PC Speed Up Service;c:\program files (x86)\Accelerer PC\PCSUService.exe [2011-10-24 235232]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision
vSCPAPISvr.exe [2012-02-09 382272]
S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-02-23 2886528]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]
S3 F-Secure Gatekeeper;F-Secure Gatekeeper;c:\program files (x86)\Orange\Antivirus Firewall\Anti-Virus\minifilter\fsgk.sys [2012-05-29 199848]
S3 FSORSPClient;F-Secure ORSP Client;c:\program files (x86)\Orange\Antivirus Firewall\ORSP Client\fsorsp.exe [2011-12-11 61088]
S3 LVPr2M64;Logitech LVPr2M64 Driver;c:\windows\system32\DRIVERS\LVPr2M64.sys [2009-10-07 30232]
S3 LVUVC64;Logitech QuickCam S5500(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys [2009-10-07 6379288]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers
vhda64v.sys [2012-01-17 188224]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
Akamai	REG_MULTI_SZ   	Akamai
.
Contenu du dossier 'Tâches planifiées'
.
2012-08-29 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-23 10:08]
.
2012-08-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-05-21 15:28]
.
2012-08-29 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-05-21 15:28]
.
2012-08-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3496322804-3287504975-2506799764-1001Core.job
- c:\users\loho\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-01 15:09]
.
2012-08-29 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3496322804-3287504975-2506799764-1001UA.job
- c:\users\loho\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-01 15:09]
.
2012-08-29 c:\windows\Tasks\SoftwareUpdateTaskMachineCore.job
- c:\program files (x86)\Software\Update\SoftwareUpdate.exe [2012-01-17 19:28]
.
2012-08-29 c:\windows\Tasks\SoftwareUpdateTaskMachineUA.job
- c:\program files (x86)\Software\Update\SoftwareUpdate.exe [2012-01-17 19:28]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}]
2012-06-06 07:14	201728	----a-w-	c:\program files\Web Assistant\Extension64.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9D717F81-9148-4f12-8568-69135F087DB0}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-11 11580520]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-07-28 497648]
"XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2009-10-01 825184]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
"AppInit_DLLs"=c:\progra~2\SEARCH~1\Datamngr\x64\datamngr.dll c:\progra~2\WI3C8A~1\Datamngr\x64\IEBHO.dll
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://search.babylon.com/?affID=113357&tt=3012_6&babsrc=HP_ss&mntrId=1ac3e114000000000000c89cdc2b50c0
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://packardbell.msn.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <local>
IE: &Envoyer à OneNote - c:\progra~2\MICROS~4\Office14\ONBttnIE.dll/105
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xporter vers Microsoft Excel - c:\progra~2\MICROS~4\Office14\EXCEL.EXE/3000
LSP: c:\program files (x86)\Orange\Antivirus Firewall\FSPS\program\FSLSP.DLL
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\loho\AppData\Roaming\Mozilla\Firefox\Profiles\6jr0vzha.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://hpp.orange.fr/
FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?affID=113357&tt=3012_6&babsrc=KW_ss&mntrId=1ac3e114000000000000c89cdc2b50c0&q=
FF - prefs.js: network.proxy.http - 127.0.0.1
FF - prefs.js: network.proxy.http_port - 56847
FF - prefs.js: network.proxy.type - 1
user_pref('extensions.autoDisableScopes', 0);user_pref('security.csp.enable', false);user_pref('security.OCSP.enabled', 0);
user_pref('extensions.dealply.partner', 'vita');
user_pref('extensions.dealply.channel', 'vitatelechargers');
user_pref('extensions.dealply.installId', 'v23500213292675597133662012072314581427');
user_pref('extensions.dealply.installIdSource', 'inst');
user_pref('extensions.dealply.sampleGroup', '7');
FF - user.js: extensions.incredibar_i.newTab - false
FF - user.js: extensions.incredibar_i.tlbrSrchUrl - hxxp://mystart.Incredibar.com/?a=6PQElDlQXb&loc=IB_TB&i=26&search=
FF - user.js: extensions.incredibar_i.id - 1ac3e114000000000000c89cdc2b50c0
FF - user.js: extensions.incredibar_i.instlDay - 15544
FF - user.js: extensions.incredibar_i.vrsn - 1.5.11.14
FF - user.js: extensions.incredibar_i.vrsni - 1.5.11.14
FF - user.js: extensions.incredibar_i.vrsnTs - 1.5.11.1417:24
FF - user.js: extensions.incredibar_i.prtnrId - Incredibar
FF - user.js: extensions.incredibar_i.prdct - incredibar
FF - user.js: extensions.incredibar_i.aflt - orgnl
FF - user.js: extensions.incredibar_i.smplGrp - none
FF - user.js: extensions.incredibar_i.tlbrId - base
FF - user.js: extensions.incredibar_i.instlRef - 
FF - user.js: extensions.incredibar_i.dfltLng - 
FF - user.js: extensions.incredibar_i.excTlbr - false
FF - user.js: extensions.incredibar_i.ms_url_id - 
FF - user.js: extensions.incredibar_i.upn2 - 6PQElDlQXb
FF - user.js: extensions.incredibar_i.upn2n - 92543280451632205
FF - user.js: extensions.incredibar_i.productid - 26
FF - user.js: extensions.incredibar_i.installerproductid - 26
FF - user.js: extensions.incredibar_i.did - 10662
FF - user.js: extensions.incredibar_i.ppd - 
FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=113357&tt=3012_6
FF - user.js: extensions.BabylonToolbar_i.babExt - 
FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
FF - user.js: extensions.BabylonToolbar.tlbrSrchUrl - hxxp://www.google.com/search?babsrc=TB_ggl&q=
FF - user.js: extensions.BabylonToolbar.id - 1ac3e114000000000000c89cdc2b50c0
FF - user.js: extensions.BabylonToolbar.instlDay - 15547
FF - user.js: extensions.BabylonToolbar.vrsn - 1.5.29.1
FF - user.js: extensions.BabylonToolbar.vrsni - 1.5.29.1
FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.29.116:50
FF - user.js: extensions.BabylonToolbar.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
FF - user.js: extensions.BabylonToolbar.tlbrId - tb9
FF - user.js: extensions.BabylonToolbar.instlRef - sst
FF - user.js: extensions.BabylonToolbar.dfltLng - en
FF - user.js: extensions.BabylonToolbar.excTlbr - false
FF - user.js: extensions.BabylonToolbar.admin - false
.
- - - - ORPHELINS SUPPRIMES - - - -
.
Toolbar-Locked - (no file)
Toolbar-10 - (no file)
Wow6432Node-HKCU-Run-Bubble Dock - c:\users\loho\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe
Wow6432Node-HKCU-Run-Desura - c:\users\loho\Desktop\Desura\Desura.exe
Wow6432Node-HKLM-Run-offerbox - c:\program files (x86)\OfferBox\OfferBox.exe
Wow6432Node-HKLM-Run-Nwpi - c:\Nwpi.exe
Toolbar-Locked - (no file)
Toolbar-10 - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
AddRemove-Battlelog Web Plugins - c:\program files (x86)\Battlelog Web Plugins\uninstall.exe
AddRemove-DealPly - c:\program files (x86)\DealPly\uninst.exe
AddRemove-Desura - c:\users\loho\Desktop\Desura\Desura_Uninstaller.exe
AddRemove-e318848b - c:\windows\system32\e318848b.exe
AddRemove-facetheme-apl - c:\program files (x86)\Object\facetheme-apl_uninstall.exe
AddRemove-incredibar - c:\program files (x86)\Incredibar.com\incredibar\1.5.11.14\uninstall.exe
AddRemove-OfferBox - c:\program files (x86)\OfferBox\uninstaller.exe
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
AddRemove-WolfTeam-FR - c:\aeriagames\WolfTeam-FR\Uninst.exe
AddRemove-{4FFBB818-B13C-11E0-931D-B2664824019B}_is1 - c:\program files (x86)\Complitly\unins000.exe
AddRemove-PDF Reader - c:\program files (x86)\PDFReader\Uninstall\Uninstall.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\Akamai]
"ServiceDll"="c:\program files (x86)\common files\akamai/netsession_win_4f7fccd.dll"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services
pggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\X6va008]
"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va008"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_USERS\S-1-5-21-3496322804-3287504975-2506799764-1001\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:f8,96,0d,42,2c,a7,78,99,37,81,14,8e,8c,13,8e,5d,c5,26,c8,e5,ea,e0,6a,
   98,8f,69,21,04,6b,ca,76,32,5d,08,6d,fc,7e,96,3f,d6,23,2d,83,7c,e0,cc,fa,ff,\
"??"=hex:a1,5e,47,db,25,65,bb,27,8b,92,55,34,10,3f,d9,49
.
[HKEY_USERS\S-1-5-21-3496322804-3287504975-2506799764-1001\Software\SecuROM\License information*]
"datasecu"=hex:5b,62,09,11,7f,06,dc,a4,af,04,8b,2a,41,0a,c7,31,a9,1e,ee,7e,f1,
   16,2f,d0,67,36,ff,b7,72,57,e0,dc,72,5d,28,97,9a,87,3b,de,32,5f,67,df,f3,6f,\
"rkeysecu"=hex:bd,6c,7c,a2,1f,0a,95,c0,cb,37,b8,96,ce,dd,fb,6f
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\Windows\system32\Macromed\Flash\FlashUtil64_11_4_402_265_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\Windows\system32\Macromed\Flash\FlashUtil64_11_4_402_265_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\Windows\SysWOW64\Macromed\Flash\Flash32_11_4_402_265.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\Windows\SysWOW64\Macromed\Flash\Flash32_11_4_402_265.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\Windows\SysWOW64\Macromed\Flash\Flash32_11_4_402_265.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\Windows\SysWOW64\Macromed\Flash\Flash32_11_4_402_265.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Heure de fin: 2012-08-29  15:25:40
ComboFix-quarantined-files.txt  2012-08-29 13:25
.
Avant-CF: 544 148 430 848 octets libres
Après-CF: 547 683 737 600 octets libres
.
- - End Of File - - A6BE33B8F931814ABDC92A2AC01ACAC5

Fish66 · Answer

Re, Réponds stp en cliquant sur l'onglet bleu juste en bas "Répondre au sujet" ==================== =>/!\Le script qui suit a été écrit spécialement cet ordinateur/!\ <= =>il est fort déconseillé de le transposer sur un autre ordinateur !<= ----------------------------------------------------------------------------------- Toujours avec toutes les protections désactivées, fais ceci : * Ouvre le bloc-notes (Menu démarrer --> programmes --> accessoires --> bloc-notes) * Copie/colle dans le bloc-notes ce qui entre les lignes ci dessous (sans les lignes) : * Crée un nouveau document texte : clic droit de souris sur le bureau > Nouveau > Document Texte, et copie dedans les lignes suivantes : __________________________________________________ KillAll:: Folder:: c:\program files (x86)\IMinent Toolbar File:: c:\program files (x86)\Software\Update\SoftwareUpdate.exe c:\aeriagames\WolfTeam-FR\GameGuard\dump_wmimmc.sys c:\windows\SysWOW64\Drivers\X6va008 c:\program files (x86)\Software\Update\SoftwareUpdate.exe Driver:: supdate dump_wmimmc;dump X6va008 DDS:: uStart Page = hxxp://search.babylon.com/?affID=113357&tt=3012_6&babsrc=HP_ss&mntrId=1ac3e114000000000000c89cdc2b50c0 Registry:: [-HKEY_CLASSES_ROOT\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}] [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9D717F81-9148-4f12-8568-69135F087DB0}] [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "ApnUpdater"=- "SweetIM"=--" Firefox:: FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?affID=113357&tt=3012_6&babsrc=KW_ss&mntrId=1ac3e114000000000000c89cdc2b50c0&q= __________________________________________________ * Enregistre ce fichier sous le nom CFScript * Fait un glisser/déposer de ce fichier CFScript sur le fichier ComboFix.exe comme sur : cette capture * Combofix se lance, laisse toi guider.. * Patiente le temps du scan. Le bureau va disparaître à plusieurs reprises: c'est normal! * Ne touche à rien tant que le scan n'est pas terminé. * Une fois le scan achevé, un rapport va s'afficher: poste son contenu, en précisant où en sont tes soucis * Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt _ _ _ Fish66_ _ _ I''"""""I_ _ membre contributeur sécurité_ _I''"""""I_ _ _ ¤¤¤ Le meilleur remède pour tous les problèmes, c'est la patience.... ¤¤¤

ronobo · Answer

merci beaucoup 
ca a marcher a merveille .
mon ordinateur n'est plus spammer de virus sauf que j'ai recu 4 attaque de fragmentation en 1 heure . je me suis renseigner est ce n'est pas grave mais se qui m'inquiete c'est qu'il vienne tous de la meme adresse ip et pareil pour les 5 intrusion que j'ai deja recus.
es-ce ca qui a amener le virus ?
sinon merci beaucoup d'avoir resolu ce probleme en une journee .

Fish66 · Answer

Salut, De rien.. Est ce que tu peux m'envoyer le rapport combofix ? Ton PC est encore infecté! :-) =============== 1/ Télécharge AdwCleaner (merci à Xplode) Lance AdwCleaner Clique sur le bouton [ Suppression ] Patiente... Poste le rapport qui apparait en fin de recherche. (Le rapport est sauvegardé aussi sous C:\ AdwCleaner[SX].Txt) 2/ /!\ ATTENTION : cette analyse peut durer quelques heures /!\ * Télécharge MBAM et installe le selon l'emplacement par défaut https://www.malwarebytes.com/mwb-download/ * Installe-le puis configure-le comme indiqué : <<< ICI >>> * si tu n'as rien modifié fais directement quitter sinon enregistrer * Lance Malwarebytes' Anti-Malware ================================= Si MBAM est déjà installé, aller directement à la mise à jour puis à l'analyse. ==> Ce logiciel gratuit est à garder. ================================= * Fais la mise à jour * Clique dans l'onglet "Recherche" * Coche l'option "Exécuter un examen complet" puis sur le bouton "Rechercher" * Choisis de scanner tous tes disques durs, puis clique sur 'Lancer l'examen" A la fin de l'analyse, si MBAM n'a rien trouvé : * Clique sur OK, le rapport s'ouvre spontanément Si des menaces ont été détectées : * Clique sur OK puis "Afficher les résultats" *Vérifie que toutes les lignes sont cochées * Choisis l'option "Supprimer la sélection" * Si MBAM demande le redémarrage de Windows : Clique sur "Oui" * Le rapport s'ouvre automatiquement après la suppression, il se trouve aussi dans l'onglet "Rapports/Logs" * Copie/colle le rapport dans le prochain message Remarque : - S'il y'a un problème de mise à jour de mbam, tu peux la faire manuellement en téléchargeant ce fichier puis en l'exécutant.

ronobo · Answer

a reussi a plus buger sur firefox alors voici le compte rendu de adwclearner

# AdwCleaner v2.000 - Rapport créé le 31/08/2012 à 09:13:35
# Mis à jour le 30/08/2012 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : loho - LOHO-PC
# Mode de démarrage : Normal
# Exécuté depuis : C:\Users\loho\Desktop\autre\adwcleaner.exe
# Option [Suppression]


***** [Services] *****

Arrêté & Supprimé : Web Assistant Updater

***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Program Files (x86)\2YourFace
Dossier Supprimé : C:\Program Files (x86)\Ask.com
Dossier Supprimé : C:\Program Files (x86)\BabylonToolbar
Dossier Supprimé : C:\Program Files (x86)\BittorrentBar_FR
Dossier Supprimé : C:\Program Files (x86)\Boxore
Dossier Supprimé : C:\Program Files (x86)\Conduit
Dossier Supprimé : C:\Program Files (x86)\ConduitEngine
Dossier Supprimé : C:\Program Files (x86)\Funmoods
Dossier Supprimé : C:\Program Files (x86)\Ilivid
Dossier Supprimé : C:\Program Files (x86)\PriceGong
Dossier Supprimé : C:\Program Files (x86)\Searchqu Toolbar
Dossier Supprimé : C:\Program Files (x86)\SFT_France
Dossier Supprimé : C:\Program Files (x86)\Software
Dossier Supprimé : C:\Program Files (x86)\Surf Canyon
Dossier Supprimé : C:\Program Files (x86)\SweetIM
Dossier Supprimé : C:\Program Files (x86)\Widestream6
Dossier Supprimé : C:\Program Files (x86)\Windows iLivid Toolbar
Dossier Supprimé : C:\Program Files\Babylon
Dossier Supprimé : C:\Program Files\Web Assistant
Dossier Supprimé : C:\ProgramData\Ask
Dossier Supprimé : C:\ProgramData\Babylon
Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong
Dossier Supprimé : C:\ProgramData\SweetIM
Dossier Supprimé : C:\Users\loho\AppData\Local\Conduit
Dossier Supprimé : C:\Users\loho\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok
Dossier Supprimé : C:\Users\loho\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda
Dossier Supprimé : C:\Users\loho\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Dossier Supprimé : C:\Users\loho\AppData\Local\Google\Chrome\User Data\Default\Extensions\elhjaoldnkkbifioodjndkijecdeinld
Dossier Supprimé : C:\Users\loho\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdloijijlkoblmigdofommgnheckmaki
Dossier Supprimé : C:\Users\loho\AppData\Local\Google\Chrome\User Data\Default\Extensions\gaiilaahiahdejapggenmdmafpmbipje
Dossier Supprimé : C:\Users\loho\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeaihkehdlhkocphopopahkfjcfcphef
Dossier Supprimé : C:\Users\loho\AppData\Local\Google\Chrome\User Data\Default\Extensions\kincjchfokkeneeofpeefomkikfkiedl
Dossier Supprimé : C:\Users\loho\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmblfngognklgemafekefcdjcnkdhmdm
Dossier Supprimé : C:\Users\loho\AppData\Local\Ilivid Player
Dossier Supprimé : C:\Users\loho\AppData\Local\Software
Dossier Supprimé : C:\Users\loho\AppData\Local\widestream6 Air
Dossier Supprimé : C:\Users\loho\AppData\LocalLow\AskToolbar
Dossier Supprimé : C:\Users\loho\AppData\LocalLow\BabylonToolbar
Dossier Supprimé : C:\Users\loho\AppData\LocalLow\BittorrentBar_FR
Dossier Supprimé : C:\Users\loho\AppData\LocalLow\Conduit
Dossier Supprimé : C:\Users\loho\AppData\LocalLow\ConduitEngine
Dossier Supprimé : C:\Users\loho\AppData\LocalLow\Funmoods
Dossier Supprimé : C:\Users\loho\AppData\LocalLow\searchquband
Dossier Supprimé : C:\Users\loho\AppData\LocalLow\Searchqutoolbar
Dossier Supprimé : C:\Users\loho\AppData\LocalLow\SFT_France
Dossier Supprimé : C:\Users\loho\AppData\Roaming\Babylon
Dossier Supprimé : C:\Users\loho\AppData\Roaming\BabylonToolbar
Dossier Supprimé : C:\Users\loho\AppData\Roaming\Complitly
Dossier Supprimé : C:\Users\loho\AppData\Roaming\Mozilla\Firefox\Profiles\6jr0vzha.default\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}
Dossier Supprimé : C:\Users\loho\AppData\Roaming\Mozilla\Firefox\Profiles\6jr0vzha.default\extensions\ffxtlbr@incredibar.com
Dossier Supprimé : C:\Users\loho\AppData\Roaming\Nosibay
Dossier Supprimé : C:\Users\loho\AppData\Roaming\widestream
Dossier Supprimé : C:\Users\loho\Documents\widestream
Dossier Supprimé : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Fichier Supprimé : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
Fichier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Offerbox.lnk
Fichier Supprimé : C:\user.js
Fichier Supprimé : C:\Users\Public\Desktop\eBay.lnk
Fichier Supprimé : C:\Windows\SysWOW64\conduitEngine.tmp

***** [Registre] *****

Clé Supprimée : HKCU\Software\2YourFace
Clé Supprimée : HKCU\Software\APN
Clé Supprimée : HKCU\Software\AppDataLow\Software\AskToolbar
Clé Supprimée : HKCU\Software\AppDataLow\Software\BittorrentBar_FR
Clé Supprimée : HKCU\Software\AppDataLow\Software\Conduit
Clé Supprimée : HKCU\Software\AppDataLow\Software\conduitEngine
Clé Supprimée : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Clé Supprimée : HKCU\Software\AppDataLow\Software\Crossrider
Clé Supprimée : HKCU\Software\AppDataLow\Software\PriceGong
Clé Supprimée : HKCU\Software\AppDataLow\Software\searchqutoolbar
Clé Supprimée : HKCU\Software\AppDataLow\Software\SFT_France
Clé Supprimée : HKCU\Software\AppDataLow\Software\SmartBar
Clé Supprimée : HKCU\Software\AppDataLow\Toolbar
Clé Supprimée : HKCU\Software\Ask.com
Clé Supprimée : HKCU\Software\Babylon
Clé Supprimée : HKCU\Software\BabylonToolbar
Clé Supprimée : HKCU\Software\Complitly
Clé Supprimée : HKCU\Software\DataMngr
Clé Supprimée : HKCU\Software\DataMngr_Toolbar
Clé Supprimée : HKCU\Software\DealPly
Clé Supprimée : HKCU\Software\Funmoods
Clé Supprimée : HKCU\Software\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje
Clé Supprimée : HKCU\Software\ilivid
Clé Supprimée : HKCU\Software\IM
Clé Supprimée : HKCU\Software\ImInstaller
Clé Supprimée : HKCU\Software\InstalledBrowserExtensions
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4D51F677-2A0B-43E2-B444-A2B384D24B91}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{58124A0B-DC32-4180-9BFF-E0E21AE34026}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{5AB7104A-B71F-49AD-9154-F7F8806AE848}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF79F67A-6AD7-4715-A0F8-932FCA442023}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4D51F677-2A0B-43E2-B444-A2B384D24B91}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{58124A0B-DC32-4180-9BFF-E0E21AE34026}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5AB7104A-B71F-49AD-9154-F7F8806AE848}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF79F67A-6AD7-4715-A0F8-932FCA442023}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Clé Supprimée : HKCU\Software\Nosibay
Clé Supprimée : HKCU\Software\Softonic
Clé Supprimée : HKCU\Software\Surf Canyon
Clé Supprimée : HKCU\Software\SweetIm
Clé Supprimée : HKCU\Software\WideStream
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\Software\APN
Clé Supprimée : HKLM\Software\AskToolbar
Clé Supprimée : HKLM\Software\Babylon
Clé Supprimée : HKLM\Software\BabylonToolbar
Clé Supprimée : HKLM\Software\BittorrentBar_FR
Clé Supprimée : HKLM\Software\Boxore
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{32451DFC-C23B-4E12-866C-FC7982238504}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{835315FC-1BF6-4CA9-80CD-F6C158D40692}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{A3514F71-E63F-440B-8076-14226E21B2BF}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\PriceGongIE.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\surfcanyon.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE
Clé Supprimée : HKLM\SOFTWARE\Classes\b
Clé Supprimée : HKLM\SOFTWARE\Classes\BabyDict
Clé Supprimée : HKLM\SOFTWARE\Classes\BabyGloss
Clé Supprimée : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Clé Supprimée : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Clé Supprimée : HKLM\SOFTWARE\Classes\BabyOptFile
Clé Supprimée : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Clé Supprimée : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Conduit.Engine
Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0003491.FBApi
Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0003491.FBApi.1
Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escortIEPane
Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.funmoodsESrvc
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.funmoodsESrvc.1
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc.1
Clé Supprimée : HKLM\SOFTWARE\Classes\f
Clé Supprimée : HKLM\SOFTWARE\Classes\funmoodsApp.appCore
Clé Supprimée : HKLM\SOFTWARE\Classes\funmoodsApp.appCore.1
Clé Supprimée : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Clé Supprimée : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Clé Supprimée : HKLM\SOFTWARE\Classes\I
Clé Supprimée : HKLM\SOFTWARE\Classes\IncredibarApp.appCore
Clé Supprimée : HKLM\SOFTWARE\Classes\IncredibarApp.appCore.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Features\482AA67AD25E6E74E9F48BD5FBE8533C
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Features\64A6E60055D801F4BB8AC269354B72B8
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Products\482AA67AD25E6E74E9F48BD5FBE8533C
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Products\64A6E60055D801F4BB8AC269354B72B8
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\1C875DDE39636004CA8CDAEC335B4160
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\BA086F2D38A8E1A47912955A68B3AD24
Clé Supprimée : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils
Clé Supprimée : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils.1
Clé Supprimée : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator
Clé Supprimée : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator.1
Clé Supprimée : HKLM\SOFTWARE\Classes\MIME\Database\Content Type\application/x-vnd.software.oneclickctrl.8
Clé Supprimée : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard
Clé Supprimée : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1
Clé Supprimée : HKLM\SOFTWARE\Classes\sim-packages
Clé Supprimée : HKLM\SOFTWARE\Classes\Software.OneClickCtrl.8
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.CoreClass
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.CoreClass.1
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\surfcanyon.BhoSite
Clé Supprimée : HKLM\SOFTWARE\Classes\surfcanyon.BhoSite.1
Clé Supprimée : HKLM\SOFTWARE\Classes\surfcanyon.ShowSettings
Clé Supprimée : HKLM\SOFTWARE\Classes\surfcanyon.ShowSettings.1
Clé Supprimée : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
Clé Supprimée : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
Clé Supprimée : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook
Clé Supprimée : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
Clé Supprimée : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils
Clé Supprimée : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager.1
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager.1
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbRequest
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbRequest.1
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbTask
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbTask.1
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT2849852
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT3031774
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.sweetie
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.sweetie.1
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{1D085C0A-E4F4-4F66-BDBF-4BE51015BFC3}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{48C9C8B0-A546-46C1-A81F-47A31E623E9D}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{BA3105E9-5DE6-4A1E-A819-6F5046AB67F5}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\Software\Conduit
Clé Supprimée : HKLM\Software\conduitEngine
Clé Supprimée : HKLM\Software\DealPly
Clé Supprimée : HKLM\Software\Funmoods
Clé Supprimée : HKLM\Software\ilivid
Clé Supprimée : HKLM\Software\Iminent
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0842E22B-BF8F-4307-86F7-F812FB90BC62}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{486A70D5-226C-4D37-9FFA-7FF25866E03A}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63435521-BE15-44D9-A4BE-A5A0000D9662}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7555B87D-D711-48B2-B97D-04DF700652BA}
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@www.dlmanager.net/omaha/tools//Software Update;version=8
Clé Supprimée : HKLM\Software\SFT_France
Clé Supprimée : HKLM\Software\SweetIm
Clé Supprimée : HKLM\Software\Web Assistant
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{0842E22B-BF8F-4307-86F7-F812FB90BC62}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{092A2C6B-43EE-4F9F-8F8E-14ED5E11C14B}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{257A6158-1416-4B31-9BF8-29FF49F3814F}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{32451DFC-C23B-4E12-866C-FC7982238504}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{486A70D5-226C-4D37-9FFA-7FF25866E03A}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4D51F677-2A0B-43E2-B444-A2B384D24B91}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{58124A0B-DC32-4180-9BFF-E0E21AE34026}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{5AB7104A-B71F-49AD-9154-F7F8806AE848}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{63435521-BE15-44D9-A4BE-A5A0000D9662}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7555B87D-D711-48B2-B97D-04DF700652BA}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{75A4D144-506D-4BE5-81DB-EC7DA1E7F840}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{965B9DBE-B104-44AC-950A-8A5F97AFF439}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A9DB719C-7156-415E-B49D-BAD039DE4F13}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AAFFE112-08AB-4B91-8428-C008A22864FB}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AC5C4189-A8A0-4C9D-8910-C9CEF8360077}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C01315C7-B4E2-4864-B43D-5FAFC414D179}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C1545464-C77C-4130-A572-1C619E2895FE}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{ED0E67AD-926C-4008-87E5-03CF72AA2A7E}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EF79F67A-6AD7-4715-A0F8-932FCA442023}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EF7FEC6D-451B-4452-9D26-7E10C6B5DB6E}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F03FD9D0-4F2B-497C-8A71-DD41D70B07D9}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{68AD96A1-2A28-4841-ABD0-F5AA45F008C9}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{736EF78E-5A04-46F9-893E-EDEC6EA5DF45}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7A1BCE27-099C-4628-B63A-AEC00C6376B3}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AF3AFF7C-B9E9-48DD-9002-212B6DEAAC02}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DBE82879-914A-422F-BAE9-2ECC80BE536F}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E12D7149-73EF-45E4-A1E9-99FD7DAE62D3}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F2B184F1-547C-4EE9-BFC4-AC489C7077D9}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dlfienamagdnkekbbbocojppncdambda
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\elhjaoldnkkbifioodjndkijecdeinld
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\fdloijijlkoblmigdofommgnheckmaki
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\fjglfdldpdljgfjkfgieaocdapejkdlh
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jeaihkehdlhkocphopopahkfjcfcphef
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\kincjchfokkeneeofpeefomkikfkiedl
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\lmblfngognklgemafekefcdjcnkdhmdm
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{555712CC-2A0D-45F8-9536-2A21F22475C6}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{63435521-BE15-44D9-A4BE-A5A0000D9662}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{670270DF-9659-4CB1-8EC7-ECA3729AD2D8}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{74C36554-31F0-49DD-8857-ED6A64DF45BE}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7555B87D-D711-48B2-B97D-04DF700652BA}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F066054-4CBB-48C4-80B2-986527E287F2}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9AE509B4-3FB2-49BE-962E-A35FD1BD88AD}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B7FC10F2-2636-41BE-8F78-67F1F41DA07B}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C87FC351-A80D-43E9-9A86-CF1E29DC443A}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4D51F677-2A0B-43E2-B444-A2B384D24B91}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{58124A0B-DC32-4180-9BFF-E0E21AE34026}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5AB7104A-B71F-49AD-9154-F7F8806AE848}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EF79F67A-6AD7-4715-A0F8-932FCA442023}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{006E6A46-8D55-4F10-BBA8-2C9653B4278B}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4FFBB818-B13C-11E0-931D-B2664824019B}_is1
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{89601BB9-C8C0-493D-9912-AD7F51A918A3}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A76AA284-E52D-47E6-9E4F-B85DBF8E35C3}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A81A974F-8A22-43E6-9243-5198FF758DA1}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\2YourFace
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BittorrentBar_FR Toolbar
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Conduit Engine 
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DealPly
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Funmoods
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ilivid
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\incredibar
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Offerbox
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\PriceGong
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Searchqu Toolbar
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SFT_France Toolbar
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Surf Canyon
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Windows Searchqu Toolbar
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{68AD96A1-2A28-4841-ABD0-F5AA45F008C9}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\1C875DDE39636004CA8CDAEC335B4160
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\BA086F2D38A8E1A47912955A68B3AD24
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1
Clé Supprimée : HKLM\SOFTWARE\Web Assistant
Donnée Supprimée : HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~2\SEARCH~1\Datamngr\datamngr.dll C:\PROGRA~2\WI3C8A~1\Datamngr\IEBHO.dll
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{4D51F677-2A0B-43E2-B444-A2B384D24B91}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EF79F67A-6AD7-4715-A0F8-932FCA442023}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00000000-6E41-4FD3-8538-502F5495E5FC}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{4D51F677-2A0B-43E2-B444-A2B384D24B91}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{EF79F67A-6AD7-4715-A0F8-932FCA442023}]
Valeur Supprimée : HKCU\Software\Mozilla\Firefox\Extensions [{8a9386b4-e958-4c4c-adf4-8f26db3e4829}]
Valeur Supprimée : HKCU\Software\Mozilla\Firefox\Extensions [support@2yourface.com]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow [*.crossrider.com]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{4D51F677-2A0B-43E2-B444-A2B384D24B91}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{EF79F67A-6AD7-4715-A0F8-932FCA442023}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Boxore Client]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [DataMngr]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SweetIM]
Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [support@2yourface.com]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{30F9B915-B755-4826-820B-08FBA6BD249D}]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{4D51F677-2A0B-43E2-B444-A2B384D24B91}]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{977AE9CC-AF83-45E8-9E03-E2798216E2D5}]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{EF79F67A-6AD7-4715-A0F8-932FCA442023}]

***** [Navigateurs] *****

-\ Internet Explorer v9.0.8112.16421

Restauré : [HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restauré : [HKCU\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restauré : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restauré : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restauré : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restauré : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restauré : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restauré : [HKU\S-1-5-21-3496322804-3287504975-2506799764-1002\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Remplacé : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://start.funmoods.com/?f=2&a=ironto --> hxxp://www.google.com

-\ Mozilla Firefox v15.0 (fr)

Nom du profil : default 
Fichier : C:\Users\loho\AppData\Roaming\Mozilla\Firefox\Profiles\6jr0vzha.default\prefs.js

C:\Users\loho\AppData\Roaming\Mozilla\Firefox\Profiles\6jr0vzha.default\user.js ... Supprimé !

Supprimée : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Supprimée : user_pref("browser.newtab.url", "hxxp://search.babylon.com/?affID=113357&tt=3012_6&babsrc=NT_ss&mntr[...]
Supprimée : user_pref("browser.search.defaultengine", "Ask.com");
Supprimée : user_pref("browser.search.defaultenginename", "Search the web (Babylon)");
Supprimée : user_pref("browser.search.order.1", "Search the web (Babylon)");
Supprimée : user_pref("extensions.BabylonToolbar.admin", false);
Supprimée : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Supprimée : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Supprimée : user_pref("extensions.BabylonToolbar.excTlbr", false);
Supprimée : user_pref("extensions.BabylonToolbar.id", "1ac3e114000000000000c89cdc2b50c0");
Supprimée : user_pref("extensions.BabylonToolbar.instlDay", "15547");
Supprimée : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Supprimée : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Supprimée : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Supprimée : user_pref("extensions.BabylonToolbar.tlbrId", "tb9");
Supprimée : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://www.google.com/search?babsrc=TB_ggl&q=");
Supprimée : user_pref("extensions.BabylonToolbar.vrsn", "1.5.29.1");
Supprimée : user_pref("extensions.BabylonToolbar.vrsni", "1.5.29.1");
Supprimée : user_pref("extensions.BabylonToolbar_i.babExt", "");
Supprimée : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=113357&tt=3012_6");
Supprimée : user_pref("extensions.BabylonToolbar_i.newTab", true);
Supprimée : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=113357&tt=3012_[...]
Supprimée : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Supprimée : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Supprimée : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.29.116:50:53");
Supprimée : user_pref("extensions.asktb.ff-original-keyword-url", "");
Supprimée : user_pref("extensions.enabledAddons", "ffxtlbr@incredibar.com:1.5.0,plugin@videofiledownload.com:1.5[...]
Supprimée : user_pref("extensions.incredibar.actvtyRptTime", "1346145469126");
Supprimée : user_pref("extensions.incredibar.admin", false);
Supprimée : user_pref("extensions.incredibar.aflt", "orgnl");

ronobo · Answer

voila le rapport de mbam:

Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org

Version de la base de données: v2012.08.31.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
loho :: LOHO-PC [administrateur]

31/08/2012 09:22:33
mbam-log-2012-08-31 (09-22-33).txt

Type d'examen: Examen complet (C:\|D:\|)
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 447522
Temps écoulé: 57 minute(s), 51 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 3
HKCR\CLSID\{dedbb410-30bd-5eb4-8555-c0ee0936e592} (Trojan.Agent) -> Mis en quarantaine et supprimé avec succès.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9193fbaf-bdaf-4751-a99a-1f5ef255c35b} (PUP.FCTPlugin) -> Mis en quarantaine et supprimé avec succès.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011341191} (PUP.GamePlayLab) -> Mis en quarantaine et supprimé avec succès.

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)

Fichier(s) détecté(s): 7
C:\Qoobox\Quarantine\C\Program Files (x86)\RelevantKnowledge\rlls64.dll.vir (PUP.Adware.RelevantKnowledge) -> Mis en quarantaine et supprimé avec succès.
C:\Qoobox\Quarantine\C\Program Files (x86)\RelevantKnowledge\rlvknlg64.exe.vir (PUP.Adware.RelevantKnowledge) -> Mis en quarantaine et supprimé avec succès.
C:\Qoobox\Quarantine\C\Program Files (x86)\Vid-Saver\Uninstall.exe.vir (Adware.GamePlayLabs) -> Mis en quarantaine et supprimé avec succès.
C:\Users\loho\Desktop\autre\loic.exe (PUP.HackTool.LOIC) -> Mis en quarantaine et supprimé avec succès.
C:\Users\loho\Downloads\Lego Star Wars 2_ The Original Trilogy(1).exe (PUP.AdBundler) -> Mis en quarantaine et supprimé avec succès.
C:\Users\loho\Downloads\Lego Star Wars 2_ The Original Trilogy.exe (PUP.AdBundler) -> Mis en quarantaine et supprimé avec succès.
C:\Users\loho\Downloads\picasa.exe (Adware.Solimba.Lame) -> Mis en quarantaine et supprimé avec succès.

(fin)

Fish66 · Answer

Salut,
Lance ZHPDiag depuis le bureau, lance l'analyse et héberge le rapport. colle le lien dans  ta prochaine réponse

ronobo · Answer

salut j'ai pas trop compris comment on heberge le rapport donc je te le passe : ---\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 1/8857 ~ Mes musiques (My Musics) : 1/7 ~ Mes Videos (My Videos) : 1/17 ~ Mes Favoris (My Favorites) : 1/378 ~ Mes Documents (My Documents) : 1/2465 ~ Mon Bureau (My Desktop) : 1/875 ~ Menu demarrer (Programs) : 0/44 ~ Scan Hidden Files in 00mn 03s ---\ Processus lancés [MD5.A0946E1D50DD86B25CBDF170D32FA700] - (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\loho\AppData\Local\Akamai etsession_win.exe [4440896] [PID.4716] [MD5.E1473471169EC64C57B49F9C984DFB1A] - (.Logitech Inc. - Logitech Vid.) -- C:\Program Files (x86)\Logitech\Logitech Vid\Vid.exe [5458704] [PID.2764] [MD5.278C64B644C224B28E601381103811A6] - (.Pas de propriétaire - Hotkey Utility.) -- C:\Program Files (x86)\Packard Bell\Hotkey Utility\HotkeyUtility.exe [627304] [PID.5268] [MD5.2589FFE360BED8F824CBC6171CB5B874] - (...) -- C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe [2793304] [PID.5280] [MD5.4D0EA5E07531DB16B49B4C7C3363C806] - (.F-Secure Corporation - F-Secure Settings and Statistics.) -- C:\Program Files (x86)\Orange\Antivirus Firewall\Common\FSM32.exe [199264] [PID.5292] [MD5.444EB38A256BE60F2013488C49D2AB3F] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [421736] [PID.5404] [MD5.8AC44F0E443974442B574E1DE77C8877] - (.McAfee, Inc. - McAfee Security Scanner Scheduler.) -- C:\Program Files (x86)\McAfee Security Scan\3.0.207\SSScheduler.exe [272528] [PID.5540] [MD5.995BEB69AE5C50D354894354F5A6CD5A] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [252296] [PID.5964] [MD5.AD474D48CC9F32213F5DC395761031F6] - (.LogMeIn Inc. - Hamachi Client Application.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [1996200] [PID.5976] [MD5.98D472ECFBC0E8ED25A0483E765F42B6] - (...) -- C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe [560472] [PID.5116] [MD5.D2BF8B1568789A25CE8889A645499FD8] - (.CyberLink - MediaEspresso DeviceDetector.) -- C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [986208] [PID.5936] [MD5.93569D46D79F9756ED077156496AFE23] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe [748664] [PID.1752] [MD5.B6080F3A1CA495190D1583C2202CAA61] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [17148552] [PID.5196] [MD5.FCB13D9E3D55075C8FACA9CA3C55B263] - (...) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [3763200] [PID.6808] ~ Scan Processes Running in 00mn 00s ---\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users\loho\AppData\Local\Google\Chrome\User Data\Default\Preferences G0 - GCSP: Preference [User Data\Default][HomePage] https://www.google.com/?gws_rd=ssl G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] YouTube v.4.2.5 (Activé) G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Recherche Google v.0.0.0.19 (Activé) G2 - GCE: Preference [User Data\Default] [dlfienamagdnkekbbbocojppncdambda] Complitly plugin for chrome v.1.1 (Activé) G2 - GCE: Preference [User Data\Default] [dlnembnfbcpjnepmfjmngjenhhajpdfd] Web Assistant v.2.0.0.455 (Activé) G2 - GCE: Preference [User Data\Default] [elhjaoldnkkbifioodjndkijecdeinld] BittorrentBar_FR v.2.3.3.3 (Activé) G2 - GCE: Preference [User Data\Default] [fdloijijlkoblmigdofommgnheckmaki] Funmoods v.1.4.5 (Activé) G2 - GCE: Preference [User Data\Default] [gaiilaahiahdejapggenmdmafpmbipje] DealPly v.3.0.7.2 (Activé) G2 - GCE: Preference [User Data\Default] [icmijdhkcgeclpfjmibnginbbkfcbpep] SearchGBY v.0.9.55 (Activé) G2 - GCE: Preference [User Data\Default] [jeaihkehdlhkocphopopahkfjcfcphef] Smart Display v.1.1 (Activé) G2 - GCE: Preference [User Data\Default] [kincjchfokkeneeofpeefomkikfkiedl] VideoFileDownload v.1.0 (Activé) G2 - GCE: Preference [User Data\Default] [lmblfngognklgemafekefcdjcnkdhmdm] 2YourFace v.1.0 (Activé) G2 - GCE: Preference [User Data\Default] [pgmfkblbflahhponhjmkcnpjinenhlnc] Vid-Saver v.1.17.20 (Activé) G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Gmail v.7 (Activé) ~ Scan Google Browser in 00mn 00s ---\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) C:\Users\loho\AppData\Roaming\Mozilla\Firefox\Profiles\6jr0vzha.default\prefs.js M3 - MFPP: Plugins - [loho] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\amazon-france.xml M3 - MFPP: Plugins - [loho] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\bing.xml M3 - MFPP: Plugins - [loho] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml M3 - MFPP: Plugins - [loho] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\eBay-france.xml M3 - MFPP: Plugins - [loho] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\google.xml M3 - MFPP: Plugins - [loho] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\wikipedia-fr.xml M3 - MFPP: Plugins - [loho] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\yahoo-france.xml P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\loho\AppData\Local\Google\Update\1.3.21.115 pGoogleUpdate3.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\loho\AppData\Local\Google\Update\1.3.21.115 pGoogleUpdate3.dll P2 - FPN: [HKCU] [ubisoft.com/uplaypc] - (.Ubisoft - Uplay PC Plugin.) -- C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher puplaypc.dll ~ Scan Firefox Browser in 00mn 00s ---\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/ R3 - URLSearchHook: (no name) [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Ubisoft - Uplay PC Plugin.) (No version) -- (.not file.) R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2 ~ Scan IE Browser in 00mn 00s ---\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Scan Proxy management in 00mn 00s ---\ Redirection du fichier Hosts (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Scan Hosts File in 00mn 00s ~ Nombre de lignes (Lines number): 1 ---\ Applications démarrées par registre & par dossier (O4) O4 - HKCU\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\loho\AppData\Local\Akamai etsession_win.exe O4 - HKCU\..\Run: [Logitech Vid] . (.Logitech Inc. - Logitech Vid.) -- C:\Program Files (x86)\Logitech\Logitech Vid\vid.exe O4 - HKCU\..\Run: [Speech Recognition] . (.Microsoft Corporation - Reconnaissance vocale.) -- C:\Windows\Speech\Common\sapisvr.exe ~ Scan Application in 00mn 00s ---\ Autres liens utilisateurs (O4) O4 - Global Startup: C:\Users\loho\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\loho\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\loho\Desktop\Accelerer PC.lnk . (...) -- C:\Program Files (x86)\Accelerer PC\PCSpeedUp-Start.bat O4 - Global Startup: C:\Users\loho\Desktop\Microsoft Word Starter 2010.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVH.EXE O4 - Global Startup: C:\Users\loho\Desktop\Notepad.lnk . (.Microsoft Corporation.) -- C:\Windows\system32 otepad.exe O4 - Global Startup: C:\Users\loho\Desktop\OPTGui - Raccourci.lnk . (.Orange.) -- C:\Program Files (x86)\Controle Parental\bin\OPTGui.exe O4 - Global Startup: C:\Users\loho\Desktop\PDF Reader.lnk . (.Krzysztof Kowalczyk.) -- C:\Program Files (x86)\PDFReader\SumatraPDF.exe O4 - Global Startup: C:\Users\loho\Desktop\Ubisoft Product Registration.lnk . (.Ubisoft.) -- C:\Program Files (x86)\Ubisoft\Register egister.exe O4 - Global Startup: C:\Users\loho\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe ~ Scan Global Startup in 00mn 00s ---\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8) O8 - Extra context menu item: &Envoyer à OneNote . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~4\Office14\ONBttnIE.dll O8 - Extra context menu item: Add to Google Photos Screensa&ver - (.not file.) - C:\Windows\system32\GPhotos.scr O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Excel.) -- C:\Program Files (x86)\MICROS~4\Office14\EXCEL.exe ~ Scan IE Menu Contextuel in 00mn 00s ---\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(...) - (.not file.) ~ Scan Desktop Component in 00mn 00s ---\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3496322804-3287504975-2506799764-1001Core.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3496322804-3287504975-2506799764-1001UA.job O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Scheduled scanning task.job [MD5.BB7481A1306823D1B6592263F1AB8DD7] [APT] [AdobeAAMUpdater-1.0-loho-PC-loho] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [MD5.D2BF8B1568789A25CE8889A645499FD8] [APT] [DeviceDetector] (.CyberLink.) -- C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskUserS-1-5-21-3496322804-3287504975-2506799764-1001Core] (.Google Inc..) -- C:\Users\loho\AppData\Local\Google\Update\GoogleUpdate.exe [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskUserS-1-5-21-3496322804-3287504975-2506799764-1001UA] (.Google Inc..) -- C:\Users\loho\AppData\Local\Google\Update\GoogleUpdate.exe [MD5.00000000000000000000000000000000] [APT] [OfferBoxUpdateTask] (...) -- C:\Program Files (x86)\OfferBox\OfferBox.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files (x86)\Ask.com\UpdateTask.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{0D3E537B-743E-4FB8-9898-E8825ED5AFF3}] (...) -- C:\Users\loho\Desktop\275.33-desktop-win7-winvista-64bit-international-whql.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{3E26281D-345D-4485-8E38-9B881DAF3289}] (...) -- C:\Users\loho\Downloads\Windows_Movie_Maker_2.0.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{C1A3D31C-7965-4DCF-BA85-ED0107002B84}] (...) -- C:\Users\loho\Desktop\Windows_Movie_Maker_2.0.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{E00AE345-A07D-4F82-B6B8-56EABBB6DD3E}] (...) -- C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\uninstbb.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{FED3A430-EA9D-4D50-9A22-B2A021B42A47}] (...) -- C:\Users\loho\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XR1B2WMK\Windows_Movie_Maker_2.0.exe (.not file.) [MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe ~ Scan Scheduled Task in 00mn 01s ---\ Composants installés (ActiveSetup Installed Components) (O40) (None) ---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 17/01/2012 - 12:11:09 - [5,248] ----D C:\Program Files (x86)\Accelerer PC O43 - CFD: 20/09/2011 - 06:57:56 - [-1669,905] ----D C:\Program Files (x86)\Adobe O43 - CFD: 11/01/2012 - 16:48:25 - [2,316] ----D C:\Program Files (x86)\Apple Software Update O43 - CFD: 01/02/2012 - 17:52:32 - [64,689] ----D C:\Program Files (x86)\AVS4YOU O43 - CFD: 09/06/2012 - 20:48:55 - [10,938] ----D C:\Program Files (x86)\Battlelog Web Plugins O43 - CFD: 11/01/2012 - 16:47:41 - [0,602] ----D C:\Program Files (x86)\Bonjour O43 - CFD: 31/08/2012 - 08:39:22 - [1546,448] ----D C:\Program Files (x86)\Common Files O43 - CFD: 30/01/2012 - 16:46:10 - [154,295] ----D C:\Program Files (x86)\Controle Parental O43 - CFD: 27/08/2012 - 09:04:01 - [0,064] ----D C:\Program Files (x86)\Cracked Steam O43 - CFD: 11/07/2011 - 13:13:07 - [157,120] ----D C:\Program Files (x86)\CyberLink O43 - CFD: 14/02/2012 - 11:13:00 - [0,014] ----D C:\Program Files (x86)\EA GAMES O43 - CFD: 20/06/2012 - 13:14:01 - [1469,134] ----D C:\Program Files (x86)\EA Sports O43 - CFD: 04/04/2012 - 11:36:38 - [-1455,666] ----D C:\Program Files (x86)\Electronic Arts O43 - CFD: 07/01/2012 - 18:03:39 - [7,884] ----D C:\Program Files (x86)\epson O43 - CFD: 24/08/2012 - 17:19:26 - [160,991] ----D C:\Program Files (x86)\Google O43 - CFD: 24/05/2012 - 15:29:26 - [141,650] --H-D C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 20/09/2011 - 06:51:07 - [28,468] ----D C:\Program Files (x86)\Intel O43 - CFD: 30/08/2012 - 15:43:36 - [0,302] ----D C:\Program Files (x86)\intellidownload O43 - CFD: 20/08/2012 - 14:36:59 - [4,933] ----D C:\Program Files (x86)\Internet Explorer O43 - CFD: 11/01/2012 - 16:49:23 - [140,752] ----D C:\Program Files (x86)\iTunes O43 - CFD: 18/07/2012 - 22:27:50 - [254,671] ----D C:\Program Files (x86)\Java O43 - CFD: 12/03/2012 - 17:27:50 - [53,129] ----D C:\Program Files (x86)\K-Lite Codec Pack O43 - CFD: 05/12/2011 - 20:03:34 - [39,410] ----D C:\Program Files (x86)\Logitech O43 - CFD: 30/08/2012 - 08:27:41 - [4,407] ----D C:\Program Files (x86)\LogMeIn Hamachi O43 - CFD: 31/08/2012 - 09:20:31 - [11,720] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware O43 - CFD: 22/08/2012 - 10:12:49 - [9,973] ----D C:\Program Files (x86)\McAfee Security Scan O43 - CFD: 20/09/2011 - 06:53:59 - [19,933] ----D C:\Program Files (x86)\Microsoft O43 - CFD: 30/04/2012 - 19:37:54 - [38,002] ----D C:\Program Files (x86)\Microsoft Analysis Services O43 - CFD: 19/02/2012 - 22:47:58 - [12,399] ----D C:\Program Files (x86)\Microsoft Application Virtualization Client O43 - CFD: 05/12/2011 - 21:22:27 - [0,764] ----D C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2 O43 - CFD: 30/04/2012 - 19:39:56 - [956,819] ----D C:\Program Files (x86)\Microsoft Office O43 - CFD: 10/05/2012 - 17:37:37 - [36,641] ----D C:\Program Files (x86)\Microsoft Silverlight O43 - CFD: 30/04/2012 - 19:39:55 - [3,467] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition O43 - CFD: 30/04/2012 - 19:39:55 - [0,757] ----D C:\Program Files (x86)\Microsoft Sync Framework O43 - CFD: 30/04/2012 - 19:40:20 - [0,312] ----D C:\Program Files (x86)\Microsoft Synchronization Services O43 - CFD: 30/04/2012 - 19:38:53 - [1,314] ----D C:\Program Files (x86)\Microsoft Visual Studio 8 O43 - CFD: 04/07/2012 - 14:32:59 - [5,795] ----D C:\Program Files (x86)\Microsoft XNA O43 - CFD: 30/04/2012 - 19:39:55 - [7,797] ----D C:\Program Files (x86)\Microsoft.NET O43 - CFD: 20/02/2012 - 12:05:11 - [8,904] ----D C:\Program Files (x86)\Movie Maker 2.6 O43 - CFD: 30/08/2012 - 20:48:06 - [39,804] ----D C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 31/08/2012 - 08:29:01 - [0,319] ----D C:\Program Files (x86)\Mozilla Maintenance Service O43 - CFD: 30/04/2012 - 19:41:01 - [0,025] ----D C:\Program Files (x86)\MSBuild O43 - CFD: 03/12/2011 - 20:05:58 - [0] ----D C:\Program Files (x86)\MSXML 4.0 O43 - CFD: 13/02/2012 - 10:02:05 - [5,972] ----D C:\Program Files (x86)\MyTorrentClient O43 - CFD: 11/07/2011 - 13:06:12 - [456,984] ----D C:\Program Files (x86)\Nero O43 - CFD: 19/03/2012 - 17:48:48 - [10,960] ----D C:\Program Files (x86)\Notepad++ O43 - CFD: 10/03/2012 - 13:16:55 - [114,389] ----D C:\Program Files (x86)\NVIDIA Corporation O43 - CFD: 21/08/2012 - 18:40:26 - [0,120] ----D C:\Program Files (x86)\OApps O43 - CFD: 03/12/2011 - 15:51:19 - [0,105] ----D C:\Program Files (x86)\OEM O43 - CFD: 18/07/2012 - 22:28:36 - [33,207] ----D C:\Program Files (x86)\Oracle O43 - CFD: 11/12/2011 - 21:31:58 - [767,856] ----D C:\Program Files (x86)\Orange O43 - CFD: 20/08/2012 - 09:20:02 - [128,177] ----D C:\Program Files (x86)\Origin O43 - CFD: 11/05/2012 - 11:16:55 - [-102,331] ----D C:\Program Files (x86)\Origin Games O43 - CFD: 20/09/2011 - 07:04:47 - [71,812] ----D C:\Program Files (x86)\Packard Bell O43 - CFD: 20/09/2011 - 07:00:10 - [408,100] ----D C:\Program Files (x86)\Packard Bell Games O43 - CFD: 28/01/2012 - 18:57:45 - [4,350] ----D C:\Program Files (x86)\PDFReader O43 - CFD: 19/04/2012 - 15:11:29 - [57,956] ----D C:\Program Files (x86)\PlayerPlus O43 - CFD: 13/02/2012 - 16:19:25 - [2,403] ----D C:\Program Files (x86)\Project64 v1.5 O43 - CFD: 20/09/2011 - 06:46:37 - [3,205] ----D C:\Program Files (x86)\Realtek O43 - CFD: 14/07/2009 - 07:32:38 - [37,349] ----D C:\Program Files (x86)\Reference Assemblies O43 - CFD: 05/05/2012 - 14:36:41 - [-277,471] ----D C:\Program Files (x86)\SEGA O43 - CFD: 25/04/2012 - 13:08:46 - [16,513] R---D C:\Program Files (x86)\Skype O43 - CFD: 23/12/2011 - 14:08:43 - [42,557] ----D C:\Program Files (x86)\SMPlayer O43 - CFD: 03/12/2011 - 18:04:35 - [192,568] ----D C:\Program Files (x86)\Softnyx O43 - CFD: 20/02/2012 - 12:01:31 - [53,410] ----D C:\Program Files (x86)\Sony O43 - CFD: 02/09/2012 - 20:11:10 - [-103,322] ----D C:\Program Files (x86)\Steam O43 - CFD: 11/07/2011 - 13:09:08 - [6,154] ----D C:\Program Files (x86)\Symantec O43 - CFD: 11/07/2011 - 13:10:52 - [0,727] ----D C:\Program Files (x86)\SymSilent O43 - CFD: 21/02/2012 - 09:32:27 - [50,089] ----D C:\Program Files (x86)\TeamSpeak 3 Client O43 - CFD: 08/01/2012 - 15:03:59 - [26,034] ----D C:\Program Files (x86)\TeamViewer O43 - CFD: 18/03/2012 - 12:28:02 - [9,711] ----D C:\Program Files (x86)\TechSmith O43 - CFD: 20/09/2011 - 06:46:49 - [0] --H-D C:\Program Files (x86)\Temp O43 - CFD: 03/12/2011 - 16:41:07 - [-861,682] ----D C:\Program Files (x86)\THQ O43 - CFD: 04/07/2012 - 14:11:18 - [0] ----D C:\Program Files (x86)\TorrentSearch O43 - CFD: 24/05/2012 - 15:29:28 - [316,778] ----D C:\Program Files (x86)\Ubisoft O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information O43 - CFD: 17/01/2012 - 12:07:21 - [0,497] ----D C:\Program Files (x86)\VideoLAN O43 - CFD: 11/07/2011 - 12:24:12 - [10,157] ----D C:\Program Files (x86)\WildTangent Games O43 - CFD: 27/08/2011 - 20:13:08 - [0,500] ----D C:\Program Files (x86)\Windows Defender O43 - CFD: 29/01/2012 - 15:27:13 - [542,084] ----D C:\Program Files (x86)\Windows Live O43 - CFD: 27/08/2011 - 20:13:08 - [5,895] ----D C:\Program Files (x86)\Windows Mail O43 - CFD: 18/03/2012 - 12:28:21 - [2,667] ----D C:\Program Files (x86)\Windows Media Components O43 - CFD: 27/08/2011 - 20:13:08 - [4,791] ----D C:\Program Files (x86)\Windows Media Player O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT O43 - CFD: 27/08/2011 - 20:13:08 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 21/11/2010 - 05:31:38 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 27/08/2011 - 20:13:08 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar O43 - CFD: 12/12/2011 - 19:56:35 - [4,104] ----D C:\Program Files (x86)\WinRAR O43 - CFD: 03/09/2012 - 08:45:28 - [12,789] ----D C:\Program Files (x86)\ZHPDiag O43 - CFD: 23/07/2012 - 14:47:14 - [887,008] ----D C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 20/09/2011 - 06:57:31 - [30,668] ----D C:\Program Files (x86)\Common Files\Adobe AIR O43 - CFD: 03/09/2012 - 08:35:45 - [20,988] ----D C:\Program Files (x86)\Common Files\Akamai O43 - CFD: 11/01/2012 - 16:49:13 - [98,968] ----D C:\Program Files (x86)\Common Files\Apple O43 - CFD: 01/02/2012 - 17:52:24 - [92,263] ----D C:\Program Files (x86)\Common Files\AVSMedia O43 - CFD: 03/12/2011 - 16:16:23 - [0,095] ----D C:\Program Files (x86)\Common Files\DESIGNER O43 - CFD: 11/05/2012 - 13:32:54 - [2,481] --H-D C:\Program Files (x86)\Common Files\EAInstaller O43 - CFD: 20/09/2011 - 06:46:35 - [3,522] ----D C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 18/07/2012 - 22:29:17 - [118,834] ----D C:\Program Files (x86)\Common Files\Java O43 - CFD: 05/12/2011 - 20:03:26 - [10,097] ----D C:\Program Files (x86)\Common Files\LogiShrd O43 - CFD: 04/07/2012 - 14:32:59 - [215,944] ----D C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD: 11/07/2011 - 13:05:29 - [8,612] ----D C:\Program Files (x86)\Common Files\Nero O43 - CFD: 20/09/2011 - 06:51:09 - [0,155] ----D C:\Program Files (x86)\Common Files\postureAgent O43 - CFD: 20/09/2011 - 06:58:06 - [4,340] ----D C:\Program Files (x86)\Common Files\PX Storage Engine O43 - CFD: 14/07/2009 - 05:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services O43 - CFD: 25/04/2012 - 13:08:46 - [2,056] ----D C:\Program Files (x86)\Common Files\Skype O43 - CFD: 20/09/2011 - 06:54:47 - [0,356] ----D C:\Program Files (x86)\Common Files\Sonic Shared O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 27/08/2012 - 09:05:38 - [0,505] ----D C:\Program Files (x86)\Common Files\Steam O43 - CFD: 11/12/2011 - 21:29:38 - [0] ----D C:\Program Files (x86)\Common Files\Symantec Shared O43 - CFD: 30/04/2012 - 19:43:19 - [10,355] ----D C:\Program Files (x86)\Common Files\System O43 - CFD: 11/07/2011 - 12:53:26 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live O43 - CFD: 26/08/2012 - 12:09:20 - [-1850,506] ----D C:\ProgramData\Adobe O43 - CFD: 11/01/2012 - 16:48:15 - [34,717] ----D C:\ProgramData\Apple O43 - CFD: 11/01/2012 - 16:49:13 - [43,117] ----D C:\ProgramData\Apple Computer O43 - CFD: 14/07/2009 - 07:08:56 - [0] ----D C:\ProgramData\Application Data O43 - CFD: 01/02/2012 - 17:52:43 - [0] ----D C:\ProgramData\AVS4YOU O43 - CFD: 03/12/2011 - 15:50:50 - [0] ----D C:\ProgramData\Bureau O43 - CFD: 11/01/2012 - 16:58:43 - [0,014] ----D C:\ProgramData\CyberLink O43 - CFD: 14/07/2009 - 07:08:56 - [0] ----D C:\ProgramData\Desktop O43 - CFD: 04/07/2012 - 14:13:14 - [0,000] ----D C:\ProgramData\Desura O43 - CFD: 14/07/2009 - 07:08:56 - [0] ----D C:\ProgramData\Documents O43 - CFD: 02/01/2012 - 19:51:20 - [0] ----D C:\ProgramData\EA Core O43 - CFD: 20/02/2012 - 13:20:03 - [0,002] ----D C:\ProgramData\EA Logs O43 - CFD: 02/01/2012 - 19:51:24 - [1,819] ----D C:\ProgramData\Electronic Arts O43 - CFD: 07/01/2012 - 18:04:12 - [8,370] ----D C:\ProgramData\EPSON O43 - CFD: 11/12/2011 - 21:32:46 - [8,044] ----D C:\ProgramData\f-secure O43 - CFD: 03/12/2011 - 15:50:50 - [0] ----D C:\ProgramData\Favoris O43 - CFD: 14/07/2009 - 07:08:56 - [0] ----D C:\ProgramData\Favorites O43 - CFD: 11/12/2011 - 21:31:22 - [0,109] ----D C:\ProgramData\fssg O43 - CFD: 23/05/2012 - 19:24:36 - [1,163] ----D C:\ProgramData\Google O43 - CFD: 16/03/2012 - 17:33:55 - [0,179] ----D C:\ProgramData\Hewlett-Packard O43 - CFD: 09/12/2011 - 17:13:01 - [12,349] ----D C:\ProgramData\LogiShrd O43 - CFD: 31/08/2012 - 09:20:29 - [6,613] ----D C:\ProgramData\Malwarebytes O43 - CFD: 22/08/2012 - 09:39:18 - [0,025] ----D C:\ProgramData\McAfee O43 - CFD: 22/08/2012 - 09:39:19 - [0,001] ----D C:\ProgramData\McAfee Security Scan O43 - CFD: 07/12/2011 - 13:59:59 - [0,001] ----D C:\ProgramData\Media Center Programs O43 - CFD: 03/12/2011 - 15:50:50 - [0] ----D C:\ProgramData\Menu Démarrer O43 - CFD: 30/04/2012 - 19:39:55 - [-1893,497] -S--D C:\ProgramData\Microsoft O43 - CFD: 20/08/2012 - 13:40:37 - [0,179] ----D C:\ProgramData\Microsoft Help O43 - CFD: 03/12/2011 - 15:50:50 - [0] ----D C:\ProgramData\Modèles O43 - CFD: 01/07/2012 - 14:31:32 - [0,007] ----D C:\ProgramData\Mozilla O43 - CFD: 11/07/2011 - 13:06:13 - [2,469] ----D C:\ProgramData\Nero O43 - CFD: 11/12/2011 - 21:30:35 - [0,014] ----D C:\ProgramData\Norton O43 - CFD: 11/07/2011 - 13:10:22 - [13,414] ----D C:\ProgramData\NortonInstaller O43 - CFD: 03/09/2012 - 08:35:03 - [2,796] ----D C:\ProgramData\NVIDIA O43 - CFD: 20/09/2011 - 06:45:53 - [0,981] ----D C:\ProgramData\NVIDIA Corporation O43 - CFD: 03/12/2011 - 15:52:24 - [0,001] ----D C:\ProgramData\oem O43 - CFD: 20/08/2012 - 09:21:12 - [9,251] ----D C:\ProgramData\Origin O43 - CFD: 11/07/2011 - 12:52:44 - [0,545] ----D C:\ProgramData\Packard Bell O43 - CFD: 22/07/2012 - 22:34:40 - [0,005] ----D C:\ProgramData egid.1986-12.com.adobe O43 - CFD: 25/04/2012 - 13:08:45 - [53,765] ----D C:\ProgramData\Skype O43 - CFD: 20/01/2012 - 15:40:19 - [0,004] ----D C:\ProgramData\Sony O43 - CFD: 14/07/2009 - 07:08:56 - [0] ----D C:\ProgramData\Start Menu O43 - CFD: 03/12/2011 - 17:36:03 - [0,000] ----D C:\ProgramData\Sun O43 - CFD: 11/07/2011 - 13:09:08 - [0,061] ----D C:\ProgramData\Symantec O43 - CFD: 11/07/2011 - 13:12:36 - [0] ----D C:\ProgramData\Temp O43 - CFD: 14/07/2009 - 07:08:56 - [0] ----D C:\ProgramData\Templates O43 - CFD: 24/05/2012 - 15:30:10 - [0] ----D C:\ProgramData\Ubisoft O43 - CFD: 03/12/2011 - 19:01:46 - [26,391] ----D C:\ProgramData\VirtualizedApplications O43 - CFD: 05/12/2011 - 20:49:02 - [1407,435] ----D C:\ProgramData\WildTangent O43 - CFD: 11/01/2012 - 16:49:23 - [0] ----D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001} O43 - CFD: 31/08/2012 - 11:47:12 - [77,081] ----D C:\Users\loho\AppData\Roaming\.minecraft O43 - CFD: 04/06/2012 - 10:34:42 - [6,354] ----D C:\Users\loho\AppData\Roaming\Adobe O43 - CFD: 11/01/2012 - 16:50:00 - [0,692] ----D C:\Users\loho\AppData\Roaming\Apple Computer O43 - CFD: 01/02/2012 - 17:52:43 - [0] ----D C:\Users\loho\AppData\Roaming\AVS4YOU O43 - CFD: 29/08/2012 - 08:56:59 - [4,055] ----D C:\Users\loho\AppData\Roaming\BitTorrent O43 - CFD: 23/05/2012 - 19:25:51 - [0,031] ----D C:\Users\loho\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 O43 - CFD: 27/08/2012 - 18:53:48 - [0,000] ----D C:\Users\loho\AppData\Roaming\funkitron O43 - CFD: 11/03/2012 - 20:53:55 - [0] ----D C:\Users\loho\AppData\Roaming\GetRightToGo O43 - CFD: 29/08/2012 - 15:30:16 - [0] ----D C:\Users\loho\AppData\Roaming\Google O43 - CFD: 03/12/2011 - 15:52:12 - [0] ----D C:\Users\loho\AppData\Roaming\Identities O43 - CFD: 05/05/2012 - 14:35:31 - [0] ----D C:\Users\loho\AppData\Roaming\InstallShield O43 - CFD: 05/12/2011 - 20:03:30 - [0,000] ----D C:\Users\loho\AppData\Roaming\Leadertech O43 - CFD: 20/09/2011 - 06:57:32 - [0,041] ----D C:\Users\loho\AppData\Roaming\Macromedia O43 - CFD: 31/08/2012 - 09:20:40 - [0,005] ----D C:\Users\loho\AppData\Roaming\Malwarebytes O43 - CFD: 21/11/2010 - 09:16:41 - [0] ----D C:\Users\loho\AppData\Roaming\Media Center Programs O43 - CFD: 26/03/2012 - 17:14:48 - [0,000] ----D C:\Users\loho\AppData\Roaming\Media Player Classic O43 - CFD: 23/07/2012 - 09:06:25 - [28,684] -S--D C:\Users\loho\AppData\Roaming\Microsoft O43 - CFD: 01/07/2012 - 17:03:20 - [26,315] ----D C:\Users\loho\AppData\Roaming\Mozilla O43 - CFD: 13/02/2012 - 16:10:56 - [0,044] ----D C:\Users\loho\AppData\Roaming\Nero O43 - CFD: 19/03/2012 - 17:49:09 - [0,405] ----D C:\Users\loho\AppData\Roaming\Notepad++ O43 - CFD: 29/01/2012 - 17:20:20 - [5,477] ----D C:\Users\loho\AppData\Roaming\NVIDIA O43 - CFD: 03/12/2011 - 15:52:25 - [13,705] ----D C:\Users\loho\AppData\Roaming\OEM O43 - CFD: 27/08/2012 - 20:24:36 - [0,054] ----D C:\Users\loho\AppData\Roaming\Origin O43 - CFD: 29/01/2012 - 17:20:33 - [0] ----D C:\Users\loho\AppData\Roaming\Publish Providers O43 - CFD: 22/06/2012 - 15:54:43 - [0,002] ----D C:\Users\loho\AppData\Roaming\RotMG.Production O43 - CFD: 03/12/2011 - 17:40:47 - [0,016] R-H-D C:\Users\loho\AppData\Roaming\SecuROM O43 - CFD: 03/09/2012 - 08:41:12 - [19,408] ----D C:\Users\loho\AppData\Roaming\Skype O43 - CFD: 26/08/2012 - 18:38:43 - [5,859] ----D C:\Users\loho\AppData\Roaming\SoftGrid Client O43 - CFD: 21/08/2012 - 12:29:28 - [1,609] ----D C:\Users\loho\AppData\Roaming\Sony O43 - CFD: 07/04/2012 - 11:42:48 - [369,644] ----D C:\Users\loho\AppData\Roaming\SPORE O43 - CFD: 28/01/2012 - 18:58:21 - [0,005] ----D C:\Users\loho\AppData\Roaming\SumatraPDF O43 - CFD: 18/01/2012 - 10:38:10 - [0,001] ----D C:\Users\loho\AppData\Roaming\TeamViewer O43 - CFD: 03/12/2011 - 16:16:57 - [0] ----D C:\Users\loho\AppData\Roaming\TP O43 - CFD: 21/02/2012 - 11:45:08 - [0,607] ----D C:\Users\loho\AppData\Roaming\TS3Client O43 - CFD: 17/12/2011 - 17:58:48 - [6,396] ----D C:\Users\loho\AppData\Roaming\U3 O43 - CFD: 24/05/2012 - 16:20:46 - [2,327] ----D C:\Users\loho\AppData\Roaming\Ubisoft O43 - CFD: 04/06/2012 - 10:28:38 - [0,001] ----D C:\Users\loho\AppData\Roaming\vlc O43 - CFD: 07/12/2011 - 13:32:36 - [0,000] ----D C:\Users\loho\AppData\Roaming\WinRAR O43 - CFD: 21/08/2012 - 12:56:25 - [4,265] ----D C:\Users\loho\AppData\Local\2K Games O43 - CFD: 03/05/2012 - 16:34:53 - [16,869] ----D C:\Users\loho\AppData\Local\Activision O43 - CFD: 22/07/2012 - 22:34:57 - [16,156] ----D C:\Users\loho\AppData\Local\Adobe O43 - CFD: 28/08/2012 - 09:40:05 - [35,185] ----D C:\Users\loho\AppData\Local\Akamai O43 - CFD: 11/01/2012 - 16:48:25 - [0] ----D C:\Users\loho\AppData\Local\Apple O43 - CFD: 11/01/2012 - 16:49:27 - [2,306] ----D C:\Users\loho\AppData\Local\Apple Computer O43 - CFD: 03/12/2011 - 15:50:54 - [0] ----D C:\Users\loho\AppData\Local\Application Data O43 - CFD: 12/05/2012 - 17:51:36 - [0] ----D C:\Users\loho\AppData\Local\ApplicationHistory O43 - CFD: 07/03/2012 - 16:26:57 - [0] ----D C:\Users\loho\AppData\Local\Apps O43 - CFD: 29/08/2012 - 15:17:17 - [55,879] ----D C:\Users\loho\AppData\Local\CrashDumps O43 - CFD: 11/01/2012 - 16:41:28 - [0,103] ----D C:\Users\loho\AppData\Local\Cyberlink O43 - CFD: 07/03/2012 - 16:26:59 - [0] ----D C:\Users\loho\AppData\Local\Deployment O43 - CFD: 27/08/2012 - 20:24:10 - [0,830] ----D C:\Users\loho\AppData\Local\Diagnostics O43 - CFD: 22/04/2012 - 14:28:12 - [0] ----D C:\Users\loho\AppData\Local\ElevatedDiagnostics O43 - CFD: 10/03/2012 - 13:17:57 - [0,028] ----D C:\Users\loho\AppData\Local\ESN Sonar O43 - CFD: 29/08/2012 - 15:30:18 - [1341,079] ----D C:\Users\loho\AppData\Local\Google O43 - CFD: 13/02/2012 - 15:15:37 - [0,022] ----D C:\Users\loho\AppData\Local\Halite O43 - CFD: 03/12/2011 - 15:50:54 - [0] ----D C:\Users\loho\AppData\Local\Historique O43 - CFD: 05/12/2011 - 20:03:37 - [5,208] ----D C:\Users\loho\AppData\Local\LogiShrd O43 - CFD: 03/09/2012 - 08:35:58 - [0,772] ----D C:\Users\loho\AppData\Local\LogMeIn Hamachi O43 - CFD: 02/07/2012 - 10:51:44 - [0] ----D C:\Users\loho\AppData\Local\Macromedia O43 - CFD: 08/05/2012 - 09:49:30 - [1016,265] ----D C:\Users\loho\AppData\Local\Microsoft O43 - CFD: 03/03/2012 - 12:37:22 - [0] ----D C:\Users\loho\AppData\Local\Microsoft Help O43 - CFD: 01/07/2012 - 17:03:07 - [70,141] ----D C:\Users\loho\AppData\Local\Mozilla O43 - CFD: 23/08/2012 - 19:44:53 - [1,342] ----D C:\Users\loho\AppData\Local\MPlayer O43 - CFD: 23/07/2012 - 09:09:51 - [100,645] ----D C:\Users\loho\AppData\Local\Origin O43 - CFD: 13/01/2012 - 17:28:01 - [0] ----D C:\Users\loho\AppData\Local\PackageAware O43 - CFD: 24/05/2012 - 16:20:48 - [13,155] ----D C:\Users\loho\AppData\Local\PunkBuster O43 - CFD: 24/06/2012 - 13:31:04 - [0] ----D C:\Users\loho\AppData\Local\Skyrim O43 - CFD: 03/12/2011 - 16:16:52 - [5,031] ----D C:\Users\loho\AppData\Local\SoftGrid Client O43 - CFD: 20/01/2012 - 15:41:10 - [5,291] ----D C:\Users\loho\AppData\Local\Sony O43 - CFD: 04/07/2012 - 14:33:55 - [0,061] ----D C:\Users\loho\AppData\Local\SSDD O43 - CFD: 18/03/2012 - 12:28:52 - [0,390] ----D C:\Users\loho\AppData\Local\TechSmith O43 - CFD: 03/09/2012 - 08:43:33 - [7,921] ----D C:\Users\loho\AppData\Local\Temp O43 - CFD: 03/12/2011 - 15:50:54 - [0] ----D C:\Users\loho\AppData\Local\Temporary Internet Files O43 - CFD: 04/07/2012 - 10:32:48 - [0,048] ----D C:\Users\loho\AppData\Local\Ubisoft Game Launcher O43 - CFD: 31/08/2012 - 11:45:54 - [7,954] ----D C:\Users\loho\AppData\Local\VirtualStore O43 - CFD: 12/02/2012 - 17:51:57 - [0,305] ----D C:\Users\loho\AppData\Local\Windows Live O43 - CFD: 31/08/2012 - 11:46:15 - [0] ----D C:\Users\loho\AppData\Local\WMTools Downloaded Files O43 - CFD: 17/01/2012 - 09:36:51 - [0] ----D C:\Users\loho\AppData\Local\{07DF2D1A-CA64-4E9F-B063-98FDCAD1780B} O43 - CFD: 17/01/2012 - 11:42:26 - [0] ----D C:\Users\loho\AppData\Local\{0B97FABC-3E44-410D-8928-BE220AB5EEC9} O43 - CFD: 17/01/2012 - 13:51:23 - [0] ----D C:\Users\loho\AppData\Local\{0CC0306A-F776-4C08-9D58-0C0DA98A5828} O43 - CFD: 21/12/2011 - 14:08:00 - [0] ----D C:\Users\loho\AppData\Local\{1B97B589-594B-407A-AA72-7362D8055C29} O43 - CFD: 20/12/2011 - 11:34:41 - [0] ----D C:\Users\loho\AppData\Local\{2298C97C-4CBE-4D0A-93AD-BF43299E7E1C} O43 - CFD: 11/01/2012 - 16:43:59 - [0] ----D C:\Users\loho\AppData\Local\{2DE54CBC-0FD2-4C47-833A-3B89B7127731} O43 - CFD: 17/01/2012 - 12:54:40 - [0] ----D C:\Users\loho\AppData\Local\{2F531BB3-13A5-40AF-8409-CA89AA90B174} O43 - CFD: 17/01/2012 - 11:52:51 - [0] ----D C:\Users\loho\AppData\Local\{3DE85CE7-7B41-4689-B5E6-CD738F1774CB} O43 - CFD: 20/01/2012 - 15:37:10 - [0] ----D C:\Users\loho\AppData\Local\{4062FD09-7AC9-41AF-95ED-7E80158193C2} O43 - CFD: 11/01/2012 - 16:42:53 - [0] ----D C:\Users\loho\AppData\Local\{41A48956-B691-4983-B326-D7F90C4ED323} O43 - CFD: 20/01/2012 - 15:37:10 - [0] ----D C:\Users\loho\AppData\Local\{4682E5DC-1056-4C98-89DF-5C7AE6EE30C2} O43 - CFD: 29/01/2012 - 16:12:49 - [0] ----D C:\Users\loho\AppData\Local\{5150C784-5357-4443-ACCF-18B7064CCC8B} O43 - CFD: 17/01/2012 - 13:52:07 - [0] ----D C:\Users\loho\AppData\Local\{576AD5FF-6A12-4B87-9D3F-6BE898B85A6D} O43 - CFD: 11/01/2012 - 16:43:14 - [0] ----D C:\Users\loho\AppData\Local\{5DEB0089-2112-4E54-9792-D1A6F3CDF896} O43 - CFD: 11/01/2012 - 16:43:04 - [0] ----D C:\Users\loho\AppData\Local\{63530204-F839-448D-8309-8C3692DE08BC} O43 - CFD: 17/01/2012 - 12:54:29 - [0] ----D C:\Users\loho\AppData\Local\{6A21EF40-F0F3-4336-BCBF-E86B89023016} O43 - CFD: 17/01/2012 - 11:42:36 - [0] ----D C:\Users\loho\AppData\Local\{6C84CCA7-E4C1-4D1F-8721-3A5ABA1D27F9} O43 - CFD: 17/01/2012 - 13:52:18 - [0] ----D C:\Users\loho\AppData\Local\{8A10D574-E124-4DE1-90D4-7AA5B12323F3} O43 - CFD: 17/01/2012 - 09:37:02 - [0] ----D C:\Users\loho\AppData\Local\{A38660DC-1E0C-41D8-88D6-CB47E7500E3E} O43 - CFD: 29/01/2012 - 16:12:48 - [0] ----D C:\Users\loho\AppData\Local\{A669D2DA-2BC8-4504-8904-03E12818D778} O43 - CFD: 11/01/2012 - 16:43:59 - [0] ----D C:\Users\loho\AppData\Local\{ABE9C4E0-8513-4C4E-9DBA-919AF9545C47} O43 - CFD: 17/01/2012 - 11:52:40 - [0] ----D C:\Users\loho\AppData\Local\{AE1822F8-3846-4134-A6C4-F9ADD37F30FD} O43 - CFD: 11/01/2012 - 16:43:35 - [0] ----D C:\Users\loho\AppData\Local\{B64224C1-0BCC-40EB-A518-1D395C59EC28} O43 - CFD: 18/01/2012 - 17:22:28 - [0] ----D C:\Users\loho\AppData\Local\{BA60F7BF-A15B-4E97-B098-A26A6FB14F5D} O43 - CFD: 18/01/2012 - 17:22:28 - [0] ----D C:\Users\loho\AppData\Local\{DCD589ED-A384-4C96-BDF3-552AD8C9943D} O43 - CFD: 20/12/2011 - 11:22:00 - [0] ----D C:\Users\loho\AppData\Local\{E97562BD-94F1-4E0E-89D9-D31E78485B28} O43 - CFD: 17/01/2012 - 13:51:23 - [0] ----D C:\Users\loho\AppData\Local\{FC0A6F8D-6CA9-43CE-A6E5-E409393151C2} O43 - CFD: 14/07/2009 - 06:54:32 - [0,014] R---D C:\Users\loho\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 12/07/2012 - 19:36:29 - [0,000] R---D C:\Users\loho\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 04/12/2011 - 19:17:58 - [0,002] ----D C:\Users\loho\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames O43 - CFD: 01/02/2012 - 17:52:29 - [0,001] ----D C:\Users\loho\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU O43 - CFD: 21/12/2011 - 11:11:18 - [0,003] ----D C:\Users\loho\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps O43 - CFD: 31/03/2012 - 21:03:44 - [0,000] ----D C:\Users\loho\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 01/07/2012 - 17:10:34 - [0,005] ----D C:\Users\loho\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome O43 - CFD: 20/02/2012 - 14:16:12 - [0,003] ----D C:\Users\loho\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HYBRID GAMEPLAY TOOL V.1.0 O43 - CFD: 14/07/2009 - 06:49:38 - [0,001] R---D C:\Users\loho\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 19/03/2012 - 17:48:46 - [0] ----D C:\Users\loho\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++ O43 - CFD: 28/01/2012 - 18:57:45 - [0,002] ----D C:\Users\loho\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PDF Reader O43 - CFD: 19/04/2012 - 15:11:29 - [0,004] ----D C:\Users\loho\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PlayerPlus O43 - CFD: 03/09/2012 - 08:39:50 - [0] R---D C:\Users\loho\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 28/06/2012 - 09:11:09 - [0,002] ----D C:\Users\loho\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam O43 - CFD: 12/12/2011 - 15:19:42 - [0,003] ----D C:\Users\loho\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 17/01/2012 - 12:11:09 - [5,248] ----D C:\Program Files (x86)\Accelerer PC O43 - CFD: 20/09/2011 - 06:57:56 - [-1669,905] ----D C:\Program Files (x86)\Adobe O43 - CFD: 11/01/2012 - 16:48:25 - [2,316] ----D C:\Program Files (x86)\Apple Software Update O43 - CFD: 01/02/2012 - 17:52:32 - [64,689] ----D C:\Program Files (x86)\AVS4YOU O43 - CFD: 09/06/2012 - 20:48:55 - [10,938] ----D C:\Program Files (x86)\Battlelog Web Plugins O43 - CFD: 11/01/2012 - 16:47:41 - [0,602] ----D C:\Program Files (x86)\Bonjour O43 - CFD: 31/08/2012 - 08:39:22 - [1546,448] ----D C:\Program Files (x86)\Common Files O43 - CFD: 30/01/2012 - 16:46:10 - [154,295] ----D C:\Program Files (x86)\Controle Parental O43 - CFD: 27/08/2012 - 09:04:01 - [0,064] ----D C:\Program Files (x86)\Cracked Steam O43 - CFD: 11/07/2011 - 13:13:07 - [157,120] ----D C:\Program Files (x86)\CyberLink O43 - CFD: 14/02/2012 - 11:13:00 - [0,014] ----D C:\Program Files (x86)\EA GAMES O43 - CFD: 20/06/2012 - 13:14:01 - [1469,134] ----D C:\Program Files (x86)\EA Sports O43 - CFD: 04/04/2012 - 11:36:38 - [-1455,666] ----D C:\Program Files (x86)\Electronic Arts O43 - CFD: 07/01/2012 - 18:03:39 - [7,884] ----D C:\Program Files (x86)\epson O43 - CFD: 24/08/2012 - 17:19:26 - [160,991] ----D C:\Program Files (x86)\Google O43 - CFD: 24/05/2012 - 15:29:26 - [141,650] --H-D C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 20/09/2011 - 06:51:07 - [28,468] ----D C:\Program Files (x86)\Intel O43 - CFD: 30/08/2012 - 15:43:36 - [0,302] ----D C:\Program Files (x86)\intellidownload O43 - CFD: 20/08/2012 - 14:36:59 - [4,933] ----D C:\Program Files (x86)\Internet Explorer O43 - CFD: 11/01/2012 - 16:49:23 - [140,752] ----D C:\Program Files (x86)\iTunes O43 - CFD: 18/07/2012 - 22:27:50 - [254,671] ----D C:\Program Files (x86)\Java O43 - CFD: 12/03/2012 - 17:27:50 - [53,129] ----D C:\Program Files (x86)\K-Lite Codec Pack O43 - CFD: 05/12/2011 - 20:03:34 - [39,410] ----D C:\Program Files (x86)\Logitech O43 - CFD: 30/08/2012 - 08:27:41 - [4,407] ----D C:\Program Files (x86)\LogMeIn Hamachi O43 - CFD: 31/08/2012 - 09:20:31 - [11,720] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware O43 - CFD: 22/08/2012 - 10:12:49 - [9,973] ----D C:\Program Files (x86)\McAfee Security Scan O43 - CFD: 20/09/2011 - 06:53:59 - [19,933] ----D C:\Program Files (x86)\Microsoft O43 - CFD: 30/04/2012 - 19:37:54 - [38,002] ----D C:\Program Files (x86)\Microsoft Analysis Services O43 - CFD: 19/02/2012 - 22:47:58 - [12,399] ----D C:\Program Files (x86)\Microsoft Application Virtualization Client O43 - CFD: 05/12/2011 - 21:22:27 - [0,764] ----D C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2 O43 - CFD: 30/04/2012 - 19:39:56 - [956,819] ----D C:\Program Files (x86)\Microsoft Office O43 - CFD: 10/05/2012 - 17:37:37 - [36,641] ----D C:\Program Files (x86)\Microsoft Silverlight O43 - CFD: 30/04/2012 - 19:39:55 - [3,467] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition O43 - CFD: 30/04/2012 - 19:39:55 - [0,757] ----D C:\Program Files (x86)\Microsoft Sync Framework O43 - CFD: 30/04/2012 - 19:40:20 - [0,312] ----D C:\Program Files (x86)\Microsoft Synchronization Services O43 - CFD: 30/04/2012 - 19:38:53 - [1,314] ----D C:\Program Files (x86)\Microsoft Visual Studio 8 O43 - CFD: 04/07/2012 - 14:32:59 - [5,795] ----D C:\Program Files (x86)\Microsoft XNA O43 - CFD: 30/04/2012 - 19:39:55 - [7,797] ----D C:\Program Files (x86)\Microsoft.NET O43 - CFD: 20/02/2012 - 12:05:11 - [8,904] ----D C:\Program Files (x86)\Movie Maker 2.6 O43 - CFD: 30/08/2012 - 20:48:06 - [39,804] ----D C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 31/08/2012 - 08:29:01 - [0,319] ----D C:\Program Files (x86)\Mozilla Maintenance Service O43 - CFD: 30/04/2012 - 19:41:01 - [0,025] ----D C:\Program Files (x86)\MSBuild O43 - CFD: 03/12/2011 - 20:05:58 - [0] ----D C:\Program Files (x86)\MSXML 4.0 O43 - CFD: 13/02/2012 - 10:02:05 - [5,972] ----D C:\Program Files (x86)\MyTorrentClient O43 - CFD: 11/07/2011 - 13:06:12 - [456,984] ----D C:\Program Files (x86)\Nero O43 - CFD: 19/03/2012 - 17:48:48 - [10,960] ----D C:\Program Files (x86)\Notepad++ O43 - CFD: 10/03/2012 - 13:16:55 - [114,389] ----D C:\Program Files (x86)\NVIDIA Corporation O43 - CFD: 21/08/2012 - 18:40:26 - [0,120] ----D C:\Program Files (x86)\OApps O43 - CFD: 03/12/2011 - 15:51:19 - [0,105] ----D C:\Program Files (x86)\OEM O43 - CFD: 18/07/2012 - 22:28:36 - [33,207] ----D C:\Program Files (x86)\Oracle O43 - CFD: 11/12/2011 - 21:31:58 - [767,856] ----D C:\Program Files (x86)\Orange O43 - CFD: 20/08/2012 - 09:20:02 - [128,177] ----D C:\Program Files (x86)\Origin O43 - CFD: 11/05/2012 - 11:16:55 - [-102,331] ----D C:\Program Files (x86)\Origin Games O43 - CFD: 20/09/2011 - 07:04:47 - [71,812] ----D C:\Program Files (x86)\Packard Bell O43 - CFD: 20/09/2011 - 07:00:10 - [408,100] ----D C:\Program Files (x86)\Packard Bell Games O43 - CFD: 28/01/2012 - 18:57:45 - [4,350] ----D C:\Program Files (x86)\PDFReader O43 - CFD: 19/04/2012 - 15:11:29 - [57,956] ----D C:\Program Files (x86)\PlayerPlus O43 - CFD: 13/02/2012 - 16:19:25 - [2,403] ----D C:\Program Files (x86)\Project64 v1.5 O43 - CFD: 20/09/2011 - 06:46:37 - [3,205] ----D C:\Program Files (x86)\Realtek O43 - CFD: 14/07/2009 - 07:32:38 - [37,349] ----D C:\Program Files (x86)\Reference Assemblies O43 - CFD: 05/05/2012 - 14:36:41 - [-277,471] ----D C:\Program Files (x86)\SEGA O43 - CFD: 25/04/2012 - 13:08:46 - [16,513] R---D C:\Program Files (x86)\Skype O43 - CFD: 23/12/2011 - 14:08:43 - [42,557] ----D C:\Program Files (x86)\SMPlayer O43 - CFD: 03/12/2011 - 18:04:35 - [192,568] ----D C:\Program Files (x86)\Softnyx O43 - CFD: 20/02/2012 - 12:01:31 - [53,410] ----D C:\Program Files (x86)\Sony O43 - CFD: 02/09/2012 - 20:11:10 - [-103,322] ----D C:\Program Files (x86)\Steam O43 - CFD: 11/07/2011 - 13:09:08 - [6,154] ----D C:\Program Files (x86)\Symantec O43 - CFD: 11/07/2011 - 13:10:52 - [0,727] ----D C:\Program Files (x86)\SymSilent O43 - CFD: 21/02/2012 - 09:32:27 - [50,089] ----D C:\Program Files (x86)\TeamSpeak 3 Client O43 - CFD: 08/01/2012 - 15:03:59 - [26,034] ----D C:\Program Files (x86)\TeamViewer O43 - CFD: 18/03/2012 - 12:28:02 - [9,711] ----D C:\Program Files (x86)\TechSmith O43 - CFD: 20/09/2011 - 06:46:49 - [0] --H-D C:\Program Files (x86)\Temp O43 - CFD: 03/12/2011 - 16:41:07 - [-861,682] ----D C:\Program Files (x86)\THQ O43 - CFD: 04/07/2012 - 14:11:18 - [0] ----D C:\Program Files (x86)\TorrentSearch O43 - CFD: 24/05/2012 - 15:29:28 - [316,778] ----D C:\Program Files (x86)\Ubisoft O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information O43 - CFD: 17/01/2012 - 12:07:21 - [0,497] ----D C:\Program Files (x86)\VideoLAN O43 - CFD: 11/07/2011 - 12:24:12 - [10,157] ----D C:\Program Files (x86)\WildTangent Games O43 - CFD: 27/08/2011 - 20:13:08 - [0,500] ----D C:\Program Files (x86)\Windows Defender O43 - CFD: 29/01/2012 - 15:27:13 - [542,084] ----D C:\Program Files (x86)\Windows Live O43 - CFD: 27/08/2011 - 20:13:08 - [5,895] ----D C:\Program Files (x86)\Windows Mail O43 - CFD: 18/03/2012 - 12:28:21 - [2,667] ----D C:\Program Files (x86)\Windows Media Components O43 - CFD: 27/08/2011 - 20:13:08 - [4,791] ----D C:\Program Files (x86)\Windows Media Player O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT O43 - CFD: 27/08/2011 - 20:13:08 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 21/11/2010 - 05:31:38 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 27/08/2011 - 20:13:08 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar O43 - CFD: 12/12/2011 - 19:56:35 - [4,104] ----D C:\Program Files (x86)\WinRAR O43 - CFD: 03/09/2012 - 08:45:28 - [12,789] ----D C:\Program Files (x86)\ZHPDiag O43 - CFD: 23/07/2012 - 14:47:14 - [887,008] ----D C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 20/09/2011 - 06:57:31 - [30,668] ----D C:\Program Files (x86)\Common Files\Adobe AIR O43 - CFD: 03/09/2012 - 08:35:45 - [20,988] ----D C:\Program Files (x86)\Common Files\Akamai O43 - CFD: 11/01/2012 - 16:49:13 - [98,968] ----D C:\Program Files (x86)\Common Files\Apple O43 - CFD: 01/02/2012 - 17:52:24 - [92,263] ----D C:\Program Files (x86)\Common Files\AVSMedia O43 - CFD: 03/12/2011 - 16:16:23 - [0,095] ----D C:\Program Files (x86)\Common Files\DESIGNER O43 - CFD: 11/05/2012 - 13:32:54 - [2,481] --H-D C:\Program Files (x86)\Common Files\EAInstaller O43 - CFD: 20/09/2011 - 06:46:35 - [3,522] ----D C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 18/07/2012 - 22:29:17 - [118,834] ----D C:\Program Files (x86)\Common Files\Java O43 - CFD: 05/12/2011 - 20:03:26 - [10,097] ----D C:\Program Files (x86)\Common Files\LogiShrd O43 - CFD: 04/07/2012 - 14:32:59 - [215,944] ----D C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD: 11/07/2011 - 13:05:29 - [8,612] ----D C:\Program Files (x86)\Common Files\Nero O43 - CFD: 20/09/2011 - 06:51:09 - [0,155] ----D C:\Program Files (x86)\Common Files\postureAgent O43 - CFD: 20/09/2011 - 06:58:06 - [4,340] ----D C:\Program Files (x86)\Common Files\PX Storage Engine O43 - CFD: 14/07/2009 - 05:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services O43 - CFD: 25/04/2012 - 13:08:46 - [2,056] ----D C:\Program Files (x86)\Common Files\Skype O43 - CFD: 20/09/2011 - 06:54:47 - [0,356] ----D C:\Program Files (x86)\Common Files\Sonic Shared O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 27/08/2012 - 09:05:38 - [0,505] ----D C:\Program Files (x86)\Common Files\Steam O43 - CFD: 11/12/2011 - 21:29:38 - [0] ----D C:\Program Files (x86)\Common Files\Symantec Shared O43 - CFD: 30/04/2012 - 19:43:19 - [10,355] ----D C:\Program Files (x86)\Common Files\System O43 - CFD: 11/07/2011 - 12:53:26 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live ~ Scan Program Folder in 00mn 02s ---\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.CBAB7811B6BC14E211276F9E22A80EEC] - 03/09/2012 - 07:38:47 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1445926] O44 - LFC:[MD5.EED8D2AF5BA3714C3CA3EEA80079B777] - 03/09/2012 - 07:35:07 ---A- . (...) -- C:\Windows\setupact.log [100384] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 03/09/2012 - 07:35:06 . (...) -- C:\Windows\System32\Drivers\lvuvc.hs [56016]] O44 - LFC:[MD5.8970F02B995E8FDCF7084B31C66E11C4] - 03/09/2012 - 07:35:03 -S-A- . (...) -- C:\Windows\bootstat.dat [67584] O44 - LFC:[MD5.FE8DE9A39CD86D938248443E5E4D1341] - 03/09/2012 - 07:34:59 ---A- . (...) -- C:\Windows\PFRO.log [947780] O44 - LFC:[MD5.5FB0A8E6294E5FE34585A353AC76B2E2] - 31/08/2012 - 08:13:45 ---A- . (...) -- C:\AdwCleaner[S1].txt [66576] O44 - LFC:[MD5.A5AAB321A97FB9C8632AA99E176DA211] - 31/08/2012 - 07:46:49 ---A- . (...) -- C:\ComboFix.txt [35959] O44 - LFC:[MD5.3CF3D4A45CC2AF973DBC30EC8D33252B] - 31/08/2012 - 07:42:43 ---A- . (...) -- C:\Windows\system.ini [215] O44 - LFC:[MD5.753BC16326FEE4A421ACB636CCD602F4] - 29/08/2012 - 14:16:00 ---A- . (.NirSoft - NirCmd.) -- C:\Windows\NIRCMD.exe [60416] O44 - LFC:[MD5.A46842C9B0C567A5A9584E83A163560C] - 29/08/2012 - 14:16:00 ---A- . (.SteelWerX - Freeware implementation of REG.EXE.) -- C:\Windows\SWREG.exe [518144] O44 - LFC:[MD5.0297C72529807322B152F517FDB0A9FC] - 29/08/2012 - 14:16:00 ---A- . (.SteelWerX - Freeware implementation of SC.EXE.) -- C:\Windows\SWSC.exe [406528] O44 - LFC:[MD5.5E744A717ECB311A6B883C84D6F91E89] - 21/08/2012 - 17:14:53 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat [128562] O44 - LFC:[MD5.F1BB1CFEDA3547674304DFFEAC062820] - 21/08/2012 - 17:14:53 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat [157102] O44 - LFC:[MD5.4EE4B090A1D5265B8D412BB195C9EF37] - 21/08/2012 - 17:14:53 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat [668514] O44 - LFC:[MD5.1FC73A36EB6A009DAA9C14006E28499A] - 21/08/2012 - 17:14:53 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat [762716] O44 - LFC:[MD5.3DA0F7C858BE2B34E7567AF5A7BBD04F] - 21/08/2012 - 17:14:52 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI [1714220] O44 - LFC:[MD5.3DA0F7C858BE2B34E7567AF5A7BBD04F] - 21/08/2012 - 17:14:52 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1714220] O44 - LFC:[MD5.C93DECD1D8DB971069861D337F359154] - 21/08/2012 - 11:56:51 ---A- . (...) -- C:\Windows\DirectX.log [536320] O44 - LFC:[MD5.55A541C01E09096FFFC1C2385B57ED04] - 20/08/2012 - 13:38:19 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT [413880] O44 - LFC:[MD5.F59F2C574AA5D84477EB89F87C938F16] - 20/08/2012 - 08:02:45 ---A- . (...) -- C:\Windows\System32\Drivers\fsbts.sys [56016] O44 - LFC:[MD5.DC8490812A3B72811AE534F423B4C206] - 03/07/2012 - 12:46:44 . (...) -- C:\Windows\System32\Drivers\mbam.sys [56016]]] O44 - LFC:[MD5.D5164131D596A070FF9C82BC4A488F1F] - 05/05/2012 - 09:36:55 . (...) -- C:\Windows\System32\srcore.dll [1714220]]] O44 - LFC:[MD5.85DAA09A98C9286D4EA2BA8D0E644377] - 11/02/2012 - 07:36:02 . (...) -- C:\Windows\System32\spoolsv.exe [1714220]] O44 - LFC:[MD5.F042EE4C8D66248D9B86DCF52ABAE416] - 26/06/2011 - 07:45:56 ---A- . (...) -- C:\Windows\PEV.exe [256000] O44 - LFC:[MD5.0277C027A26428DB64EF4F64F52BB4FD] - 07/11/2010 - 18:20:24 ---A- . (...) -- C:\Windows\MBR.exe [208896] O44 - LFC:[MD5.9E05A9C264C8A908A8E79450FCBFF047] - 31/08/2000 - 01:00:00 ---A- . (...) -- C:\Windows\grep.exe [80412] O44 - LFC:[MD5.2B657A67AEBB84AEA5632C53E61E23BF] - 31/08/2000 - 01:00:00 ---A- . (...) -- C:\Windows\sed.exe [98816] O44 - LFC:[MD5.5E832F4FAF5F481F2EAF3B3A48F603B8] - 31/08/2000 - 01:00:00 ---A- . (...) -- C:\Windows\zip.exe [68096] ~ Scan Files in 00mn 04s ---\ Contrôle du Safe Boot (CSB) (O49) (None) ---\ MountPoints2 Shell Key (O51) (None) ---\ ShareTools MSconfig StartupReg (O53) (None) ---\ Liste des Drivers Système (O58) O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088] O58 - SDL:[MD5.1E6438D4EA6E1174A3B3B1EDC4DE660B] - 30/12/1899 - 16:35:42 --HA- . (.LogMeIn, Inc. - Hamachi Virtual Network Interface Driver.) -- C:\Windows\System32\hamachi.sys [33856] O58 - SDL:[MD5.343786E182B9C9AE3066E00DEC650F50] - 11/12/2011 - 20:40:24 ---A- . (...) -- C:\Windows\SysWOW64\drivers\fsbts.sys [42672] O58 - SDL:[MD5.9131FE60ADFAB595C8DA53AD6A06AA31] - 01/01/2005 - 10:43:08 ---A- . (.INCA Internet Co., Ltd. - nProtect NPSC Kernel Mode Driver for NT.) -- C:\Windows\SysWOW64 pptNT2.sys [4682] ~ Scan Drivers in 00mn 00s ---\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.html> [HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe ~ Scan Keys in 00mn 00s ---\ Start Menu Internet (O68) (None) ---\ Search Browser Infection (O69) O69 - SBI: SearchScopes [HKCU] {49C17061-3268-4C09-BD5D-D531363E3497} [DefaultScope] - (Ask Search) - http://www.search.ask.com/?o=10148&l=dis O69 - SBI: SearchScopes [HKCU] {56288E4E-EB32-4CD4-81BA-068B92174535} - (Search) - http://start.funmoods.com O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - https://www.google.com/?gws_rd=ssl O69 - SBI: SearchScopes [HKCU] {882A6649-6EE4-4CBA-A0FC-FDB4F04857F7} - (BittorrentBar_FR Customized Web Search) - http://search.conduit.com ~ Scan Keys in 00mn 00s ---\ Internet Feature Controls (O81) O81 - IFC: Internet Feature Controls [HKCU] [FEATURE_BROWSER_EMULATION] -- svchost.exe ~ Scan Keys in 00mn 00s ---\ Recherche des services démarrés par Svchost (O83) (None) ---\ Recherche particuliere à la racine de certains dossiers (O84) [MD5.16C4362B40624A1C5DE0ABE3A2D7684C] [SPRF][12/05/2012] (...) -- C:\Users\loho\AppData\Local\fusioncache.dat [92] [MD5.24F6D923EF6956ABD0449C879F36D7C7] [SPRF][31/08/2012] (...) -- C:\Users\loho\AppData\Local\Temp\i4jdel0.exe [27411] [MD5.64281AF23447705DAB84E1A198D920C7] [SPRF][17/01/2012] (.Microsoft Corporation - Windows Live Installer.) -- C:\Users\loho\Desktop\wlsetup-web.exe [1289576] [MD5.64281AF23447705DAB84E1A198D920C7] [SPRF][17/01/2012] (.Microsoft Corporation - Windows Live Installer.) -- C:\Users\loho\Desktop\wlsetup-web[1].exe [1289576] ~ Scan Files in 00mn 00s ---\ Scan Additionnel (O88) Database Version : 9183 - (31/07/2012) Clés trouvées (Keys found) : 1 Valeurs trouvées (Values found) : 0 Dossiers trouvés (Folders found) : 3 Fichiers trouvés (Files found) : 0 [HKCU\Software\Incredibar.com] =>Toolbar.Conduit C:\Users\loho\AppData\LocalLow\Incredibar.com =>Toolbar.Conduit C:\Users\loho\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda =>Adware.PredictAd C:\Users\loho\AppData\Local\Google\Chrome\User Data\Default\Extensions\kincjchfokkeneeofpeefomkikfkiedl =>PUP.FCTPlugin ~ Scan Additionnel in 00mn 03s End of the scan (739 lines in 00mn 21s)(0)

Fish66 · Answer

Salut, 1/ Télécharge TDSSKiller sur ton Bureau. # Décompresse le (clic droit sur le fichier et extraire) sur le bureau. # dans le dossier crée, déplacer le fichier TDSSKiller.exe pour le mettre sur le Bureau # Faire un double clic sur TDSSKiller.exe pour le lancer. # Cliquer sur Start scan pour lancer l'analyse, # Lorsque l'outil a terminé son travail d'inspection, si des nuisibles ("Malicious objects") ont été trouvés, vérifier que l'option Cure est sélectionnée, # Si des objects suspects "Suspicious objects" ont été détectés, sur l'écran de demande de confirmation, laisser l'option sur Skip. # Puis cliquer sur le bouton Continue. # Attendre l'affichage du fichier rapport. # Si l'outil a besoin d'un redémarrage pour finaliser le nettoyage, cliquer sur le bouton Reboot computer. <<<<<< AIDE : ICI >>>>>> Envoyer en réponse le rapport de TDSSKiller Note : Il se trouve aussi en C:\TDSSKiller.Version_Date_Heure_log.txt 2/ Copie tout le texte présent ci-dessous ( tu le selectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C ) [MD5.00000000000000000000000000000000] [APT] [{0D3E537B-743E-4FB8-9898-E8825ED5AFF3}] (...) -- C:\Users\loho\Desktop\275.33-desktop-win7-winvista-64bit-international-whql.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{3E26281D-345D-4485-8E38-9B881DAF3289}] (...) -- C:\Users\loho\Downloads\Windows_Movie_Maker_2.0.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{C1A3D31C-7965-4DCF-BA85-ED0107002B84}] (...) -- C:\Users\loho\Desktop\Windows_Movie_Maker_2.0.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{FED3A430-EA9D-4D50-9A22-B2A021B42A47}] (...) -- C:\Users\loho\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XR1B2WMK\Windows_Movie_Maker_2.0.exe (.not file.) O43 - CFD: 20/09/2011 - 07:00:10 - [408,100] ----D C:\Program Files (x86)\Packard Bell Games => WildTangent Game O43 - CFD: 11/07/2011 - 12:24:12 - [10,157] ----D C:\Program Files (x86)\WildTangent Games => WildTangent O43 - CFD: 17/01/2012 - 09:36:51 - [0] ----D C:\Users\loho\AppData\Local\{07DF2D1A-CA64-4E9F-B063-98FDCAD1780B} O43 - CFD: 17/01/2012 - 11:42:26 - [0] ----D C:\Users\loho\AppData\Local\{0B97FABC-3E44-410D-8928-BE220AB5EEC9} O43 - CFD: 17/01/2012 - 13:51:23 - [0] ----D C:\Users\loho\AppData\Local\{0CC0306A-F776-4C08-9D58-0C0DA98A5828} O43 - CFD: 21/12/2011 - 14:08:00 - [0] ----D C:\Users\loho\AppData\Local\{1B97B589-594B-407A-AA72-7362D8055C29} O43 - CFD: 20/12/2011 - 11:34:41 - [0] ----D C:\Users\loho\AppData\Local\{2298C97C-4CBE-4D0A-93AD-BF43299E7E1C} O43 - CFD: 11/01/2012 - 16:43:59 - [0] ----D C:\Users\loho\AppData\Local\{2DE54CBC-0FD2-4C47-833A-3B89B7127731} O43 - CFD: 17/01/2012 - 12:54:40 - [0] ----D C:\Users\loho\AppData\Local\{2F531BB3-13A5-40AF-8409-CA89AA90B174} O43 - CFD: 17/01/2012 - 11:52:51 - [0] ----D C:\Users\loho\AppData\Local\{3DE85CE7-7B41-4689-B5E6-CD738F1774CB} O43 - CFD: 20/01/2012 - 15:37:10 - [0] ----D C:\Users\loho\AppData\Local\{4062FD09-7AC9-41AF-95ED-7E80158193C2} O43 - CFD: 11/01/2012 - 16:42:53 - [0] ----D C:\Users\loho\AppData\Local\{41A48956-B691-4983-B326-D7F90C4ED323} O43 - CFD: 20/01/2012 - 15:37:10 - [0] ----D C:\Users\loho\AppData\Local\{4682E5DC-1056-4C98-89DF-5C7AE6EE30C2} O43 - CFD: 29/01/2012 - 16:12:49 - [0] ----D C:\Users\loho\AppData\Local\{5150C784-5357-4443-ACCF-18B7064CCC8B} O43 - CFD: 17/01/2012 - 13:52:07 - [0] ----D C:\Users\loho\AppData\Local\{576AD5FF-6A12-4B87-9D3F-6BE898B85A6D} O43 - CFD: 11/01/2012 - 16:43:14 - [0] ----D C:\Users\loho\AppData\Local\{5DEB0089-2112-4E54-9792-D1A6F3CDF896} O43 - CFD: 11/01/2012 - 16:43:04 - [0] ----D C:\Users\loho\AppData\Local\{63530204-F839-448D-8309-8C3692DE08BC} O43 - CFD: 17/01/2012 - 12:54:29 - [0] ----D C:\Users\loho\AppData\Local\{6A21EF40-F0F3-4336-BCBF-E86B89023016} O43 - CFD: 17/01/2012 - 11:42:36 - [0] ----D C:\Users\loho\AppData\Local\{6C84CCA7-E4C1-4D1F-8721-3A5ABA1D27F9} O43 - CFD: 17/01/2012 - 13:52:18 - [0] ----D C:\Users\loho\AppData\Local\{8A10D574-E124-4DE1-90D4-7AA5B12323F3} O43 - CFD: 17/01/2012 - 09:37:02 - [0] ----D C:\Users\loho\AppData\Local\{A38660DC-1E0C-41D8-88D6-CB47E7500E3E} O43 - CFD: 29/01/2012 - 16:12:48 - [0] ----D C:\Users\loho\AppData\Local\{A669D2DA-2BC8-4504-8904-03E12818D778} O43 - CFD: 11/01/2012 - 16:43:59 - [0] ----D C:\Users\loho\AppData\Local\{ABE9C4E0-8513-4C4E-9DBA-919AF9545C47} O43 - CFD: 17/01/2012 - 11:52:40 - [0] ----D C:\Users\loho\AppData\Local\{AE1822F8-3846-4134-A6C4-F9ADD37F30FD} O43 - CFD: 11/01/2012 - 16:43:35 - [0] ----D C:\Users\loho\AppData\Local\{B64224C1-0BCC-40EB-A518-1D395C59EC28} O43 - CFD: 18/01/2012 - 17:22:28 - [0] ----D C:\Users\loho\AppData\Local\{BA60F7BF-A15B-4E97-B098-A26A6FB14F5D} O43 - CFD: 18/01/2012 - 17:22:28 - [0] ----D C:\Users\loho\AppData\Local\{DCD589ED-A384-4C96-BDF3-552AD8C9943D} O43 - CFD: 20/12/2011 - 11:22:00 - [0] ----D C:\Users\loho\AppData\Local\{E97562BD-94F1-4E0E-89D9-D31E78485B28} O43 - CFD: 17/01/2012 - 13:51:23 - [0] ----D C:\Users\loho\AppData\Local\{FC0A6F8D-6CA9-43CE-A6E5-E409393151C2} G2 - GCE: Preference [User Data\Default] [dlfienamagdnkekbbbocojppncdambda] Complitly plugin for chrome v.1.1 (Activé) => Infection BT (Adware.PredictAd) G2 - GCE: Preference [User Data\Default] [gaiilaahiahdejapggenmdmafpmbipje] DealPly v.3.0.7.2 (Activé) => Infection PUP (PUP.DealPly) [MD5.00000000000000000000000000000000] [APT] [OfferBoxUpdateTask] (...) -- C:\Program Files (x86)\OfferBox\OfferBox.exe (.not file.) => Infection PUP (PUP.OfferBox) [MD5.00000000000000000000000000000000] [APT] [{E00AE345-A07D-4F82-B6B8-56EABBB6DD3E}] (...) -- C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\uninstbb.exe (.not file.) => Infection BT (Toolbar.Babylon) O81 - IFC: Internet Feature Controls [HKCU] [FEATURE_BROWSER_EMULATION] -- svchost.exe => Infection Rootkit (tdssserv.Root) C:\Users\loho\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda => Infection BT (Adware.PredictAd) G2 - GCE: Preference [User Data\Default] [elhjaoldnkkbifioodjndkijecdeinld] BittorrentBar_FR v.2.3.3.3 (Activé) => Conduit BitTorrentBar [MD5.00000000000000000000000000000000] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files (x86)\Ask.com\UpdateTask.exe (.not file.) => Toolbar.Ask O69 - SBI: SearchScopes [HKCU] {882A6649-6EE4-4CBA-A0FC-FDB4F04857F7} - (BittorrentBar_FR Customized Web Search) - http://search.conduit.com [HKCU\Software\Incredibar.com] => Toolbar.Conduit C:\Users\loho\AppData\LocalLow\Incredibar.com => Toolbar.Conduit FirewallRAZ EmptyTemp EmptyFlash Puis Lance ZHPFix depuis le raccourci du bureau . * Une fois l'outil ZHPFix ouvert , clique sur le bouton [ H ] ( "coller les lignes Helper" ) . * Dans l'encadré principal tu verras donc les lignes que tu as copié précédemment apparaitrent . Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre. Clique sur le bouton GO Copie/Colle le rapport à l'écran dans ton prochain message. _ _ _ Fish66_ _ _ I''"""""I_ _ membre contributeur sécurité_ _I''"""""I_ _ _ ¤¤¤ Le meilleur remède pour tous les problèmes, c'est la patience.... ¤¤¤

Un virus impossible a supprimer, bloquer ...

10 réponses