Ordi infecté

R3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} . (.Facebook, Inc. - Facebook Desktop Plugin.) (No version) -- (.not file.)
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Facebook, Inc. - Facebook Desktop Plugin.) (No version) -- (.not file.)
O3 - Toolbar: Copernic Agent - [HKLM]{F2E259E8-0FC8-438C-A6E0-342DD80FA53E} . (.Copernic Technologies Inc. - Copernic Agent Extensions.) -- C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O4 - HKUS\S-1-5-21-856452835-615713164-1547628428-1000\..\Run: [MobileDocuments] C:\Program Files\Common Files\Apple\Internet Services\ubd.exe (.not file.) 
O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} . (...) -- C:\Program Files\Copernic Agent\Web\IEToolbarHotIcon.ico
O9 - Extra button: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} -- Clé orpheline
O9 - Extra button: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} -- Clé orpheline
[MD5.00000000000000000000000000000000] [APT] [{504D1611-336B-40AD-8D17-D157EA72DDC7}] (...) -- D:\EFFILOG\Son\MP3Gain (stabilisateur de volume)\mp3gain-win-full-1_2_5.exe (.not file.)   [0]
[MD5.00000000000000000000000000000000] [APT] [{664F803D-1213-45C8-AED7-EB29455C0C8A}] (...) -- D:\EFFILOG\Vid'o\Internet Video Converter (convertisseur)\internet_video_converter_fr.exe (.not file.)   [0]
[MD5.00000000000000000000000000000000] [APT] [{76135951-1E68-4DF0-863A-5E2FDBC13B37}] (...) -- D:\EFFILOG\Application\Dactylo (apprentissage clavier)\dacty.exe (.not file.)   [0]
[MD5.00000000000000000000000000000000] [APT] [{D2E8BBEC-F478-450B-BF61-BE0CD5812F94}] (...) -- D:\EFFILOG\Travail\AbiWord (TTexte)\AbiWord_Dictionary_Francais.exe (.not file.)   [0]
O87 - FAEL: "TCP Query User{E3095ABB-B2D2-4B3D-AA16-9DC7AD772CCA}C:\users\sophie\appdata\local\mediaget2\mediaget.exe" |In - Public - P6 - TRUE | .(...) -- C:\users\sophie\appdata\local\mediaget2\mediaget.exe (.not file.)
O87 - FAEL: "UDP Query User{8614AD00-7DCC-4A5D-A96C-1846F698561C}C:\users\sophie\appdata\local\mediaget2\mediaget.exe" |In - Public - P17 - TRUE | .(...) -- C:\users\sophie\appdata\local\mediaget2\mediaget.exe (.not file.)
O87 - FAEL: "TCP Query User{3417F5A8-3ABE-43F8-B3DD-927DCD095B5E}C:\program files\revolutv\revolutv.exe" | In - Public - P6 - TRUE | .(.Vinyl Software - RevoluTV.) -- C:\program files\revolutv\revolutv.exe
O87 - FAEL: "UDP Query User{B843B4BC-C3FF-412E-BA33-B459979B8D1A}C:\program files\revolutv\revolutv.exe" | In - Public - P17 - TRUE | .(.Vinyl Software - RevoluTV.) -- C:\program files\revolutv\revolutv.exe
O87 - FAEL: "TCP Query User{2B585707-4BD4-434C-A020-CE0BDDCD3EBE}C:\users\sophie\appdata\roaming\cacaoweb\cacaoweb.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\sophie\appdata\roaming\cacaoweb\cacaoweb.exe (.not file.)  =>PUP.CacaoWeb
O87 - FAEL: "UDP Query User{8DCD3466-26E9-4B64-AE3D-42DB0B6EEC57}C:\users\sophie\appdata\roaming\cacaoweb\cacaoweb.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\sophie\appdata\roaming\cacaoweb\cacaoweb.exe (.not file.)  =>PUP.CacaoWeb
[HKLM\Software\Classes\CLSID\{35b8892d-c3fb-4d88-990d-31db2ebd72bd}]   =>Adware.RecordNRip
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1AE46C09-2AB8-4EE5-88FB-08CD0FF7F2DF}]   =>Toolbar.Agent
[HKLM\Software\Microsoft\Tracing\OfferBoxUpdateService_RASAPI32]   =>PUP.OfferBox
[HKLM\Software\Microsoft\Tracing\OfferBoxUpdateService_RASMANCS]   =>PUP.OfferBox
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]   =>Toolbar.Bing
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]   =>Toolbar.Bing
[HKLM\Software\Adobe\OpenCandy]   =>Adware.OpenCandy
[HKLM\Software\Canneverbe Limited\OpenCandy]   =>Adware.OpenCandy
C:\ProgramData\Media Get LLC   =>PUP.MediaGet
C:\Users\Sophie\AppData\Roaming\Media Get LLC   =>PUP.MediaGet
C:\Users\Sophie\AppData\Local\Media Get LLC   =>PUP.MediaGet
C:\Users\Sophie\AppData\Local\MediaGet2   =>PUP.MediaGet
C:\Users\Sophie\AppData\Local\Temp\MyBabylonTB.exe  =>PUP.SweetIM
C:\Users\Sophie\AppData\Local\Temp\cacaonew3310a9.exe  =>Adware.PriceGong
C:\Users\Sophie\AppData\Local\Temp\cacaonew4f24ef.exe  =>Adware.PriceGong
C:\Users\Sophie\AppData\Local\Temp\cacaonew509cf0.exe  =>Adware.PriceGong
C:\Users\Sophie\AppData\Local\Temp\cacaonewb9a372.exe  =>Adware.PriceGong
C:\Users\Sophie\AppData\Local\Temp\cacaonewc1e3ad.exe  =>Adware.PriceGong
C:\Users\Sophie\AppData\Local\Temp\cacaonewd5fbad.exe  =>Adware.PriceGong
C:\Users\Sophie\AppData\Local\Temp\cacaonewd89347.exe  =>Adware.PriceGong
C:\Users\Sophie\AppData\Local\Temp\GoogleToolbarInstaller1.log  =>Toolbar.Babylon
C:\Users\Sophie\AppData\Local\Temp\GoogleToolbarInstaller2.log  =>Toolbar.Babylon
C:\Program Files\Copernic Agent
EmptyTemp
EmptyFlash
EMPTYCLSID