aidez moi google chrome Résolu

Question

Bonjour, j'utilise actuellement google chrome qui est un tres bon navigateur mais depuis peu quand je navige sur facebook youtube .. page web s'ouvre sans raison se qui est tres derangent j'ai installer un bloqueur de pub mais sa ne fais rien si quel qu'un pourais m'aider ? merci d'avance. 



Configuration: Windows 7 / Chrome 27.0.1453.94

billmaxime · Answer

salut

tu as télécharger sur des sites qui refilent des publiciels/adwares

pour ton problème, fais ceci

 télécharge adwcleaner sur ton bureau (clique sur la flèche verte)

le lien https://toolslib.net 

utlisateurs vista-w7-w8 exécuter en tant qu'administrateur (clic droit) 

choisis le mode suppression 

le rapport s'affichera sur ton bureau et dans C:\adw[S1].txt 

poste le rapport via 1 copier/coller 

@+

hugofouiny63! · Answer

merci beaucoup ! :
# AdwCleaner v2.301 - Rapport créé le 01/06/2013 à 17:13:56
# Mis à jour le 16/05/2013 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : Proprietaire - PROPRIETAIRE-PC
# Mode de démarrage : Normal
# Exécuté depuis : C:\Users\Proprietaire\Desktop\adwcleaner.exe
# Option [Suppression]


***** [Services] *****

Arrêté & Supprimé : BrowserProtect
Arrêté & Supprimé : dqupdate
Arrêté & Supprimé : dqupdatem
Arrêté & Supprimé : WajamUpdater
Arrêté & Supprimé : supt4pc_fr_36

***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Program Files (x86)\Ask.com
Dossier Supprimé : C:\Program Files (x86)\BrowserCompanion
Dossier Supprimé : C:\Program Files (x86)\DealPly
Dossier Supprimé : C:\Program Files (x86)\Delta
Dossier Supprimé : C:\Program Files (x86)\Duuqu
Dossier Supprimé : C:\Program Files (x86)\FrameFox
Dossier Supprimé : C:\Program Files (x86)\holasearch
Dossier Supprimé : C:\Program Files (x86)\Iminent
Dossier Supprimé : C:\Program Files (x86)\PutLockerDownloader
Dossier Supprimé : C:\Program Files (x86)\sweetpacks bundle uninstaller
Dossier Supprimé : C:\Program Files (x86)	uto4pc_fr_33
Dossier Supprimé : C:\Program Files (x86)	uto4pc_fr_36
Dossier Supprimé : C:\Program Files (x86)\Wajam
Dossier Supprimé : C:\Program Files (x86)\WebSearch
Dossier Supprimé : C:\Program Files\Babylon
Dossier Supprimé : C:\ProgramData\Babylon
Dossier Supprimé : C:\ProgramData\boost_interprocess
Dossier Supprimé : C:\ProgramData\Browsea22ssAAvve
Dossier Supprimé : C:\ProgramData\IBUpdaterService
Dossier Supprimé : C:\ProgramData\InstallMate
Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Browsea22ssAAvve
Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tuto4pc
Dossier Supprimé : C:\ProgramData\SoftSafe
Dossier Supprimé : C:\ProgramData\Tarma Installer
Dossier Supprimé : C:\Users\PROPRI~1\AppData\Local\Temp\Smartbar
Dossier Supprimé : C:\Users\Proprietaire\AppData\Local\AskToolbar
Dossier Supprimé : C:\Users\Proprietaire\AppData\Local\Bundled software uninstaller
Dossier Supprimé : C:\Users\Proprietaire\AppData\Local\Duuqu
Dossier Supprimé : C:\Users\Proprietaire\AppData\Local\EoRezo
Dossier Supprimé : C:\Users\Proprietaire\AppData\Local\Google\Chrome\User Data\Default\Extensions\bodddioamolcibagionmmobehnbhiakf
Dossier Supprimé : C:\Users\Proprietaire\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnnajmlhehgnkclpdlggknanmcplloej
Dossier Supprimé : C:\Users\Proprietaire\AppData\Local\Google\Chrome\User Data\Default\Extensions\jiofjbkodmcfkhmljgdmjcildliojoli
Dossier Supprimé : C:\Users\Proprietaire\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
Dossier Supprimé : C:\Users\Proprietaire\AppData\Local\PutLockerDownloader
Dossier Supprimé : C:\Users\Proprietaire\AppData\Local\Smartbar
Dossier Supprimé : C:\Users\Proprietaire\AppData\Local	uto4pc_fr_33
Dossier Supprimé : C:\Users\Proprietaire\AppData\Local	uto4pc_fr_36
Dossier Supprimé : C:\Users\Proprietaire\AppData\Local\Wajam
Dossier Supprimé : C:\Users\Proprietaire\AppData\LocalLow\AskToolbar
Dossier Supprimé : C:\Users\Proprietaire\AppData\LocalLow\BabylonToolbar
Dossier Supprimé : C:\Users\Proprietaire\AppData\LocalLow\bbrs_002.tb
Dossier Supprimé : C:\Users\Proprietaire\AppData\LocalLow\Browsea22ssAAvve
Dossier Supprimé : C:\Users\Proprietaire\AppData\LocalLow\Conduit
Dossier Supprimé : C:\Users\Proprietaire\AppData\LocalLow\Delta
Dossier Supprimé : C:\Users\Proprietaire\AppData\LocalLow\holasearch
Dossier Supprimé : C:\Users\Proprietaire\AppData\LocalLow\PriceGong
Dossier Supprimé : C:\Users\Proprietaire\AppData\LocalLow\Smartbar
Dossier Supprimé : C:\Users\Proprietaire\AppData\Roaming\BabSolution
Dossier Supprimé : C:\Users\Proprietaire\AppData\Roaming\Babylon
Dossier Supprimé : C:\Users\Proprietaire\AppData\Roaming\BrowserCompanion
Dossier Supprimé : C:\Users\Proprietaire\AppData\Roaming\DealPly
Dossier Supprimé : C:\Users\Proprietaire\AppData\Roaming\Delta
Dossier Supprimé : C:\Users\Proprietaire\AppData\Roaming\holasearch
Dossier Supprimé : C:\Users\Proprietaire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly
Dossier Supprimé : C:\Users\Proprietaire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PutLockerDownloader.com
Dossier Supprimé : C:\Users\Proprietaire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
Dossier Supprimé : C:\Users\Proprietaire\AppData\Roaming\Nosibay
Dossier Supprimé : C:\Users\Proprietaire\AppData\Roaming\OpenCandy
Dossier Supprimé : C:\Users\Proprietaire\AppData\Roaming\PerformerSoft
Dossier Supprimé : C:\Users\Proprietaire\AppData\Roaming\WebPlayerBdd
Dossier Supprimé : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Fichier Supprimé : C:\END
Fichier Supprimé : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
Fichier Supprimé : C:\user.js
Fichier Supprimé : C:\Users\Proprietaire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup	cbhn.lnk
Fichier Supprimé : C:\Windows\Tasks\DuuquUpdateTaskMachineCore.job
Fichier Supprimé : C:\Windows\Tasks\DuuquUpdateTaskMachineUA.job
Fichier Supprimé : C:\Windows\Tasks\PC Performer_DEFAULT.job
Supprimé au redémarrage : C:\ProgramData\BrowserProtect

***** [Registre] *****

Clé Supprimée : HKCU\Software\1ClickDownload
Clé Supprimée : HKCU\Software\APN
Clé Supprimée : HKCU\Software\AppDataLow\Software\AskToolbar
Clé Supprimée : HKCU\Software\AppDataLow\Software\PriceGong
Clé Supprimée : HKCU\Software\AppDataLow\SProtector
Clé Supprimée : HKCU\Software\Ask.com
Clé Supprimée : HKCU\Software\AskToolbar
Clé Supprimée : HKCU\Software\BabylonToolbar
Clé Supprimée : HKCU\Software\BI
Clé Supprimée : HKCU\Software\Blabbers
Clé Supprimée : HKCU\Software\BrowserMngr
Clé Supprimée : HKCU\Software\DataMngr
Clé Supprimée : HKCU\Software\DealPly
Clé Supprimée : HKCU\Software\Delta
Clé Supprimée : HKCU\Software\holasearch
Clé Supprimée : HKCU\Software\IM
Clé Supprimée : HKCU\Software\Iminent
Clé Supprimée : HKCU\Software\ImInstaller
Clé Supprimée : HKCU\Software\InstallCore
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{963B125B-8B21-49A2-A3A8-E37092276531}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9A956909-F97E-0567-3DDA-6A72125B2FF5}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C510DFFB-0AFE-484C-BA40-CED5B74C4EEF}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DFF9B2DA-EF99-4B26-83CB-7058299999D8}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF7BD87A-8024-11E2-F316-F3E56188709B}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9A956909-F97E-0567-3DDA-6A72125B2FF5}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C510DFFB-0AFE-484C-BA40-CED5B74C4EEF}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DFF9B2DA-EF99-4B26-83CB-7058299999D8}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF7BD87A-8024-11E2-F316-F3E56188709B}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Clé Supprimée : HKCU\Software\Nosibay
Clé Supprimée : HKCU\Software\pc optimizer pro
Clé Supprimée : HKCU\Software\PerformerSoft
Clé Supprimée : HKCU\Software\SmartBar
Clé Supprimée : HKCU\Software\SmartbarBackup
Clé Supprimée : HKCU\Software\SmartbarLog
Clé Supprimée : HKCU\Software\Softonic
Clé Supprimée : HKCU\Software\Tuto4PC
Clé Supprimée : HKCU\Software\Tutorials
Clé Supprimée : HKCU\Software\TutoTag
Clé Supprimée : HKCU\Software\Wajam
Clé Supprimée : HKCU\Software\5b6d68ce06ebe41
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Clé Supprimée : HKLM\Software\APN
Clé Supprimée : HKLM\Software\AskToolbar
Clé Supprimée : HKLM\Software\Babylon
Clé Supprimée : HKLM\Software\Boxore
Clé Supprimée : HKLM\Software\BrowserCompanion
Clé Supprimée : HKLM\Software\BrowserMngr
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{6536801B-F50C-449B-9476-093DFD3789E3}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\BabylonHelper.EXE
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\priam_bho.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID	dataprotocol.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\updatebho.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\wit4ie.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltaappCore
Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltaappCore.1
Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltadskBnd
Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1
Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltaHlpr
Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltaHlpr.1
Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escortIEPane
Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.deltaESrvc
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1
Clé Supprimée : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Clé Supprimée : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.BandObjectAttribute
Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.BHO
Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.DockingPanel
Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBar
Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBarBandObject
Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarDisplayState
Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarMenuForm
Clé Supprimée : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Clé Supprimée : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
Clé Supprimée : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\base64
Clé Supprimée : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\chrome
Clé Supprimée : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\prox
Clé Supprimée : HKLM\SOFTWARE\Classes\PutLockerDownloader
Clé Supprimée : HKLM\SOFTWARE\Classes	dataprotocol.CTData
Clé Supprimée : HKLM\SOFTWARE\Classes	dataprotocol.CTData.1
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{830B56CB-FD22-44AA-9887-7898F4F4158D}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{8830DDF0-3042-404D-A62C-384A85E34833}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{955B782E-CDC8-4CEE-B6F6-AD7D541A8D8A}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Clé Supprimée : HKLM\SOFTWARE\Classes\updatebho.TimerBHO
Clé Supprimée : HKLM\SOFTWARE\Classes\updatebho.TimerBHO.1
Clé Supprimée : HKLM\SOFTWARE\Classes\wajam.WajamBHO
Clé Supprimée : HKLM\SOFTWARE\Classes\wajam.WajamBHO.1
Clé Supprimée : HKLM\SOFTWARE\Classes\wajam.WajamDownloader
Clé Supprimée : HKLM\SOFTWARE\Classes\wajam.WajamDownloader.1
Clé Supprimée : HKLM\SOFTWARE\Classes\wit4ie.WitBHO
Clé Supprimée : HKLM\SOFTWARE\Classes\wit4ie.WitBHO.2
Clé Supprimée : HKLM\Software\DataMngr
Clé Supprimée : HKLM\Software\DealPly
Clé Supprimée : HKLM\Software\Delta
Clé Supprimée : HKLM\Software\holasearch
Clé Supprimée : HKLM\Software\Iminent
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\PutlockerDownloader_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\PutlockerDownloader_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@www.duuqu.com/omaha/tools//Duuqu Update;version=3
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@www.duuqu.com/omaha/tools//Duuqu Update;version=9
Clé Supprimée : HKLM\Software\PerformerSoft
Clé Supprimée : HKLM\Software\SP Global
Clé Supprimée : HKLM\Software\SProtector
Clé Supprimée : HKLM\Software\Tuto4PC
Clé Supprimée : HKLM\Software\Wajam
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\5b6d68ce06ebe41
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{5ACE96C0-C70A-4A4D-AF14-2E7B869345E1}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{5D64294B-1341-4FE7-B6D8-7C36828D4DD5}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{963B125B-8B21-49A2-A3A8-E37092276531}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{9A956909-F97E-0567-3DDA-6A72125B2FF5}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C510DFFB-0AFE-484C-BA40-CED5B74C4EEF}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DFF9B2DA-EF99-4B26-83CB-7058299999D8}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EF7BD87A-8024-11E2-F316-F3E56188709B}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\bodddioamolcibagionmmobehnbhiakf
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dnnajmlhehgnkclpdlggknanmcplloej
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F994E0D9-8335-48F1-99C2-A712C21F8D5F}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{963B125B-8B21-49A2-A3A8-E37092276531}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9A956909-F97E-0567-3DDA-6A72125B2FF5}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DFF9B2DA-EF99-4B26-83CB-7058299999D8}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EF7BD87A-8024-11E2-F316-F3E56188709B}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2CF1B20B-BE6A-4C4A-8F3A-590EBCF676C7}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C3F3165C-74D3-6FDB-3274-14FDA8698CFA}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BrowserCompanion
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DealPly
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Delta
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Hola Chrome Toolbar
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\holasearch
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SweetIM Bundle by SweetPacks
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall	uto4pc_fr_33_is1
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall	uto4pc_fr_36_is1
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Wajam
Clé Supprimée : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{64B00DAC-870D-4E6A-8D34-3A6E3E427A30}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Clé Supprimée : HKLM\SOFTWARE\Tarma Installer
Clé Supprimée : HKU\S-1-5-21-673010914-1396927425-3829106573-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Donnée Supprimée : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\261249~1.132\{c16c1~1\browse~1.dll
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Main [BrowserMngr Start Page]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [BrowserMngrDefaultScope]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Browser Infrastructure Helper]
Valeur Supprimée : HKCU\Software\Mozilla\Firefox\Extensions [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [FrameFox Extensions]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [tuto4pc_fr_33]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [tuto4pc_fr_36]
Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [webbooster@iminent.com]
Valeur Supprimée : HKLM\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist [1]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{82E1477C-B154-48D3-9891-33D83C26BCD3}]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{C510DFFB-0AFE-484C-BA40-CED5B74C4EEF}]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

***** [Navigateurs] *****

-\ Internet Explorer v10.0.9200.16576

Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Page] = hxxp://feed.snap.do/?publisher=TightropeYB&dpid=TightropeYB&co=FR&userid=002988ff-c223-4214-be25-8d5861bc5f49&searchtype=ds&q={searchTerms}&installDate=10/05/2013 --> hxxp://www.google.com
Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://feed.snap.do/?publisher=TightropeYB&dpid=TightropeYB&co=FR&userid=002988ff-c223-4214-be25-8d5861bc5f49&searchtype=hp&installDate=10/05/2013 --> hxxp://www.google.com
Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://feed.snap.do/?publisher=TightropeYB&dpid=TightropeYB&co=FR&userid=002988ff-c223-4214-be25-8d5861bc5f49&searchtype=ds&q={searchTerms}&installDate=10/05/2013 --> hxxp://www.google.com
Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://feed.snap.do/?publisher=TightropeYB&dpid=TightropeYB&co=FR&userid=002988ff-c223-4214-be25-8d5861bc5f49&searchtype=ds&q={searchTerms}&installDate=10/05/2013 --> hxxp://www.google.com
Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://feed.snap.do/?publisher=TightropeYB&dpid=TightropeYB&co=FR&userid=002988ff-c223-4214-be25-8d5861bc5f49&searchtype=ds&q={searchTerms}&installDate=10/05/2013 --> hxxp://www.google.com
Remplacé : [HKCU\Software\Microsoft\Internet Explorer\SearchUrl - Default] = hxxp://feed.snap.do/?publisher=TightropeYB&dpid=TightropeYB&co=FR&userid=002988ff-c223-4214-be25-8d5861bc5f49&searchtype=ds&q={searchTerms}&installDate=10/05/2013 --> hxxp://www.google.com
Remplacé : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl - Default] = hxxp://feed.snap.do/?publisher=TightropeYB&dpid=TightropeYB&co=FR&userid=002988ff-c223-4214-be25-8d5861bc5f49&searchtype=ds&q={searchTerms}&installDate=10/05/2013 --> hxxp://www.google.com

-\ Google Chrome v27.0.1453.94

Fichier : C:\Users\Proprietaire\AppData\Local\Google\Chrome\User Data\Default\Preferences

Supprimée [l.2954] : homepage = "hxxp://search.babylon.com/?affID=112670&tt=0113_4&babsrc=HP_sst&mntrId=008edbb000000[...]
Supprimée [l.3505] : urls_to_restore_on_startup = [ "hxxp://google.fr/", "hxxp://www.facebook.com/VICE", "hxxps://[...]

*************************

AdwCleaner[S1].txt - [41856 octets] - [01/06/2013 17:13:56]

########## EOF - C:\AdwCleaner[S1].txt - [41917 octets] ##########

billmaxime · Answer

re

tu peux repasser adwcleaner 1 seconde fois en mode suppression et poster le rapport

merci

@+

hugofouiny63! · Answer

# AdwCleaner v2.301 - Rapport créé le 01/06/2013 à 17:52:06
# Mis à jour le 16/05/2013 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : Proprietaire - PROPRIETAIRE-PC
# Mode de démarrage : Normal
# Exécuté depuis : C:\Users\Proprietaire\Desktop\adwcleaner.exe
# Option [Suppression]


***** [Services] *****


***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\ProgramData\BrowserProtect

***** [Registre] *****

Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{963B125B-8B21-49A2-A3A8-E37092276531}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C510DFFB-0AFE-484C-BA40-CED5B74C4EEF}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DFF9B2DA-EF99-4B26-83CB-7058299999D8}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF7BD87A-8024-11E2-F316-F3E56188709B}

***** [Navigateurs] *****

-\ Internet Explorer v10.0.9200.16576

[OK] Le registre ne contient aucune entrée illégitime.

-\ Google Chrome v27.0.1453.94

Fichier : C:\Users\Proprietaire\AppData\Local\Google\Chrome\User Data\Default\Preferences

Supprimée [l.2602] : homepage = "hxxp://search.babylon.com/?affID=112670&tt=0113_4&babsrc=HP_sst&mntrId=008edbb000000[...]
Supprimée [l.3111] : urls_to_restore_on_startup = [ "hxxp://google.fr/", "hxxp://www.facebook.com/VICE", "hxxps://[...]

*************************

AdwCleaner[S1].txt - [41833 octets] - [01/06/2013 17:13:56]
AdwCleaner[S2].txt - [2600 octets] - [01/06/2013 17:52:06]

########## EOF - C:\AdwCleaner[S2].txt - [2660 octets] ##########

hugofouiny63! · Answer

merci !

billmaxime · Answer

re

de rien, mais ce n'est pas fini^^ relance adwcleaner et choisis désinstaller

puis, fais ceci s'il te plaît

télécharge MBAM sur ton bureau 

le lien https://www.malwarebytes.com/ (prend le free) 

le tuto https://www.donnemoilinfo.com/tuto/Malwarebytes-Anti-Malware/ 

exécute le en tant qu'administrateur (clic droit) 
met le a jour  (3ème bouton)

fais 1 scan complet (tous les disques) 

le scan peut durer +-2H (laisse le bosser) 

si MBAM trouve quelque chose supprime la sélection (voir tuto 2ème page)

poste le rapport via 1 copier/coller 

le rapport s'affichera sur ton bureau et dans rapport/log de MBAM 
====================================================

quand c'est fini avec MBAM, fais ceci s'il te plaît

télécharge zhpdiag sur ton bureau (outil de diagnostic)  

le lien https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/ 

le tuto http://www.security-helpzone.com/forum/Thread-ZHPDiag-Generer-un-rapport 

utilisateurs vista-w7-w8 exécuter en tant qu'administrateur (clic droit) 

pour lancer le scan clique sur la loupe avec le + (2ème bouton en haut a gauche) 

le rapport s'affichera sur ton bureau et dans C:\zhpdiag.txt 

poste le rapport via ce lien https://www.cjoint.com/ 

@+ 

ps: je pars, je regarderai tes rapports dans la soirée

hugofouiny63! · Answer

merci bien ces compliquer un peu :)

billmaxime · Answer

re

non, ce n'est pas compliqué^^ prends ton temps, lis bien les instructions et exécute

les (ça va le faire)

@+ tard dans la soirée, je dois partir 

ps:sorry, j'ai oublié de te remettre le lien des manipulations a effectuées

https://forums.commentcamarche.net/forum/affich-27929930-aidez-moi-google-chrome#6

@+
 
le taux de radiation est plus élevé au pôle emploi qu'à Tchernobyl

hugofouiny63! · Answer

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Version de la base de données: v2013.06.01.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16576
Proprietaire :: PROPRIETAIRE-PC [administrateur]

01/06/2013 18:28:27
mbam-log-2013-06-01 (18-28-27).txt

Type d'examen: Examen complet (C:\|D:\|E:\|)
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 410472
Temps écoulé: 1 heure(s), 40 minute(s), 13 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)

Fichier(s) détecté(s): 1
D:\autres\cl1.1.8outer\FRITZ!Box
c.exe (PUP.Netcat) -> Mis en quarantaine et supprimé avec succès.

(fin)

hugofouiny63! · Answer

pourquoi veu tu que je te donne les rapports a chaque fois ? ^^

billmaxime · Answer

re

pour voir ce qu'ils ont supprimés ( que diable) car j'ai cassé ma boule de cristal>>

et de ce fait, je ne peut pas savoir ce qu'il y a dans ton pc (crasses où pas crasses)

pour MBAM c'est ok, tu as supprimé ce qu'il a trouver mais tu n'as pas fait le zhpdiag

en attente du rapport zhpdiag>>> a bientôt

@+

hugofouiny63! · Answer

Rapport de ZHPDiag v2013.6.1.2 par Nicolas Coolman, Update du 01/06/2013 Run by Proprietaire at 02/06/2013 20:06:33 WebSite: https://nicolascoolman.webs.com/ State : Version à jour. WhiteList : Enable High Elevated Privileges : OK UAC : Deactivate by program ---\ Web Browser MSIE: Internet Explorer v10.0.9200.16576 GCIE: Google Chrome v27.0.1453.94 (Defaut) ---\ Windows Product Information ~ Langage: Français Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601) Windows Server License Manager Script : OK ~ Windows(R) 7, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : 9YQTR Windows License : OK ~ Windows Remaining Initializations Number : 1 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\ System Protection Avira Free Antivirus v13.0.0.3640 Malwarebytes Anti-Malware version 1.75.0.1300 Windows Defender W7 ---\ System Optimizer CCleaner v4.02 =>Piriform Ltd ---\ Peer To Peer (P2P) ---\ Software Update Adobe Flash Player 11 Plugin Adobe Reader XI Java 7 Update 21 ---\ System Information ~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 4002 MB (57% free) System Restore: Activé (Enable) System drive C: has 58 GB (48%) free of 119 GB ---\ Logged in mode ~ Computer Name: PROPRIETAIRE-PC ~ User Name: Proprietaire ~ All Users Names: Proprietaire, HomeGroupUser$, Administrateur, ~ Unselected Option: None Logged in as Administrator ---\ Environnement Variables ~ System Unit : C:\ ~ %AppData% : C:\Users\Proprietaire\AppData\Roaming\ ~ %Desktop% : C:\Users\Proprietaire\Desktop\ ~ %Favorites% : C:\Users\Proprietaire\Favorites\ ~ %LocalAppData% : C:\Users\Proprietaire\AppData\Local\ ~ %StartMenu% : C:\Users\Proprietaire\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 58 Go of 119 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 53 Go of 154 Go) E:\ CD-ROM drive (Not Inserted) ---\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified ~ Security Center: 29 Legitimates Filtered in 00mn 00s ---\ Recherche particulière de fichiers génériques [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.19/10/2011 - 03:54:37.) -- C:\Windows\Explorer.exe [2871808] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024] [MD5.27A9000C534AA9BADC9EE74940F50C6D] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.29/05/2013 - 16:48:25.) -- C:\Windows\System32\wininet.dll [2242048] [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.20/11/2010 - 14:25:32.) -- C:\Windows\System32\Winlogon.exe [390656] [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:28.) -- C:\Windows\System32\sppcomapi.dll [232448] [MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160] [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:22.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456] [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:34.) -- C:\Windows\system32\Drivers\DfsC.sys [102400] [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:44.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224] [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.19/10/2011 - 04:02:02.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208] [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:22.) -- C:\Windows\system32\Drivers etBT.sys [261632] [MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 15:45:08.) -- C:\Windows\system32\Drivers tfs.sys [1656680] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280] [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:36.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184] [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:58.) -- C:\Windows\system32\Drivers dx.sys [119296] [MD5.DF8126BD41180351A093A3AD2FC8903B] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.19/10/2011 - 03:34:22.) -- C:\Windows\system32\Drivers\volsnap.sys [296320] ~ Generic Processes: Scanned in 00mn 00s ---\ Etat des fichiers cachés (Caché/Total) ~ Mes musiques (My Musics) : 1/224 ~ Mes Favoris (My Favorites) : 1/7 ~ Mes Documents (My Documents) : 3/42 ~ Mon Bureau (My Desktop) : 2/3607 ~ Menu demarrer (Programs) : 1/38 ~ Hidden Files: Scanned in 00mn 01s ---\ Processus lancés [MD5.63A0FE3B1B094DAE328F46FCADABDBE4] - (.ASUS - FaceLogon Application.) -- C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe [375424] [PID.2416] [MD5.7D2C5F5A9DF7AE26B4E62E2D7032B96B] - (.ASUS - ACMON.) -- C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [82944] [PID.2432] [MD5.A391896CD406E6377F5CEF31FDC12019] - (.ASUSTeK - ACEngSvr Module.) -- C:\Windows\SysWOW64\ACEngSvr.exe [155648] [PID.2496] [MD5.F05FC2C0FECF55B05351AA760166F18F] - (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5716608] [PID.2528] [MD5.86F0D0B3A07C142C81DAB47E8495A822] - (.Nero AG - Nero Home.) -- C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [152872] [PID.2148] [MD5.7EE22E13DEC8A6D18F4643C1EA34B0F0] - (.Virage Logic Corporation / Sonic Focus - ASUS_MATray.exe.) -- C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [984400] [PID.3372] [MD5.79A3B950988F8D2B81906D0C0473158B] - (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624] [PID.3388] [MD5.5AEBF6FA9805C9101220AA4FB4FA17E7] - (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016] [PID.3396] [MD5.B166415C55E416022B3339EBD6CB216E] - (.ASUS - Wireless Console 3.) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2317312] [PID.3404] [MD5.37DEB76A2CF005841C4E45DE2B94D84F] - (.ASUS - AsScrPro.) -- C:\Windows\AsScrPro.exe [3058304] [PID.3444] [MD5.35048D8E8A0BF7A797CD5757ACD7EED0] - (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816] [PID.3656] [MD5.8E2A7F1F62467A7DCB8AB2C0642F47CA] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392] [PID.3688] [MD5.FD579C25D253A47DF82A76B7EE96ADB5] - (.Avira Operations GmbH & Co. KG - Avira System Tray Tool.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345312] [PID.3712] [MD5.1568FF282E268082C67CF0C3EBCC9179] - (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [976320] [PID.3880] [MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816] [PID.3896] [MD5.CABF13F42347F917BE58C1826641AAB2] - (.Microsoft Corp. - Bing Desktop Application.) -- C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2387088] [PID.3952] [MD5.FFBD5650348D4F9E0AA8E72938DC6478] - (.Nero AG - Nero Home.) -- C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe [1213736] [PID.3352] [MD5.51C392EC9DA1119EC86D562FF3E7344F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [825808] [PID.1204] [MD5.9987636E1191907AB52F3A49FFB83393] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [7431168] [PID.6108] [MD5.18E5C2F937F9DEB8C282DF66A3761925] - (.ASUS - ASLDR Service.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [84536] [PID.1128] [MD5.7910158929571214A959D5A6D16DD9C0] - (.ASUS - GFNEXSrv.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [96896] [PID.1232] [MD5.E41F55D0B71734BB68FF26963EB250E4] - (.Avira Operations GmbH & Co. KG - Avira Scheduler.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [86752] [PID.1416] [MD5.3927397AC60D943DAF8808AFFED582B7] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65192] [PID.1588] [MD5.880AE0BEDE234F27AC252049373B8CB9] - (.Avira Operations GmbH & Co. KG - Avira On-Access Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [110816] [PID.1616] [MD5.4FE5C6D40664AE07BE5105874357D2ED] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [57008] [PID.1636] [MD5.85D5E6AC46A2AE4672C1AC813AE45B95] - (.Microsoft Corp. - Bing Desktop updating service.) -- C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [168592] [PID.1696] [MD5.506708142BC63DABA64F2D3AD1DCD5BF] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648] [PID.2628] [MD5.061C71A7BD897F28DB052E7AD2B284A1] - (.ASUS - HControl.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe [166528] [PID.2868] [MD5.76B35CB0F3A4E69D6DFF27F542B9F856] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.21.145\GoogleCrashHandler.exe [216968] [PID.2888] [MD5.8349419DFDA3F2F03EA4A655758290C2] - (.Avira Operations GmbH & Co. KG - Avira WebGuard Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.exe [562744] [PID.3616] [MD5.A328A46D87BB92CE4D8A4528E9D84787] - (.Nero AG - Nero Home.) -- C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [279848] [PID.3864] [MD5.149126216A694E6BA84E92ECA77AAE3B] - (.ASUS - ATKOSD.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe [2488888] [PID.3524] [MD5.AA11E1368EEB237DD100BAC6AFFE1C57] - (.ASUS - KBFiltr.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe [113208] [PID.3628] [MD5.4A7C441D99D86704D194E7678873B95D] - (.ASUS - WDC.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe [174648] [PID.4104] [MD5.0803906D607A9B83184447B75B60ECC2] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [325656] [PID.5156] [MD5.EB79C6C91A99930015EF29AE7FA802D1] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2655768] [PID.5280] ~ Processes Running: Scanned in 00mn 00s ---\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users\Proprietaire\AppData\Local\Google\Chrome\User Data\Default\Preferences G2 - GCE: Preference [User Data\Default] [djjdicogloiccgiandeocgphindanplc] Lyrics Kid v.1.111 (Désactivé) ~ Google Browser: 7 Legitimates Filtered in 00mn 07s ---\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) C:\Users\Proprietaire\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\prefs.js (.not file.) C:\Users\Proprietaire\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\user.js ~ Firefox Browser: 5 Legitimates Filtered in 00mn 00s ---\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\ Redirection du fichier Hosts (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Hosts File: Scanned in 00mn 00s ~ Nombre de lignes (Lines number): 21 ---\ Browser Helper Objects de navigateur (O2) O2 - BHO: Lyrics Kid [64Bits] - {BA146CF5-1875-4EA8-AAEA-A90142FC2EC9} . (.MPYT Software - Lyrics Kid.) -- C:\Program Files (x86)\LyricsKid\lkid.dll ~ BHO: 5 Legitimates Filtered in 00mn 00s ---\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [RtHDVBg] . (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe O4 - HKLM\..\Run: [AmIcoSinglun64] . (.Alcor Micro Corp. - Single LUN Icon Utility for VID 058F PID 63.) -- C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe O4 - HKLM\..\Run: [ETDCtrl] C:\Program Files (x86)\Elantech\ETDCtrl.exe (.not file.) O4 - HKLM\..\Run: [IntelliPoint] . (.Microsoft Corporation - IPoint.exe.) -- C:\Program Files\Microsoft IntelliPoint\ipoint.exe O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] . (.Nero AG - Nero Home.) -- C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\Proprietaire\AppData\Local\Facebook\Update\FacebookUpdate.exe O4 - HKCU\..\Run: [EPSON SX125 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGGE.exe O4 - HKLM\..\Wow6432Node\Run: [Nuance PDF Reader-reminder] . (.Nuance Communications, Inc. - Ereg.) -- C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe O4 - HKLM\..\Wow6432Node\Run: [ASUSPRP] . (.ASUSTek Computer Inc. - ASUS Product Register Program.) -- C:\Program Files (x86)\ASUS\APRP\APRP.exe O4 - HKLM\..\Wow6432Node\Run: [ASUSWebStorage] . (.ecareme - AsusWebStorage.) -- C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe O4 - HKLM\..\Wow6432Node\Run: [SonicMasterTray] . (.Virage Logic Corporation / Sonic Focus - ASUS_MATray.exe.) -- C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe O4 - HKLM\..\Wow6432Node\Run: [ATKOSD2] . (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe O4 - HKLM\..\Wow6432Node\Run: [ATKMEDIA] . (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe O4 - HKLM\..\Wow6432Node\Run: [HControlUser] . (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe O4 - HKLM\..\Wow6432Node\Run: [Wireless Console 3] . (.ASUS - Wireless Console 3.) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe O4 - HKLM\..\Wow6432Node\Run: [ASUS Screen Saver Protector] . (.ASUS - AsScrPro.) -- C:\Windows\AsScrPro.exe O4 - HKLM\..\Wow6432Node\Run: [CLMLServer] . (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Avira System Tray Tool.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe O4 - HKLM\..\Wow6432Node\Run: [EEventManager] . (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe O4 - HKLM\..\Wow6432Node\Run: [BingDesktop] . (.Microsoft Corp. - Bing Desktop Application.) -- C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-21-673010914-1396927425-3829106573-1000\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] . (.Nero AG - Nero Home.) -- C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe O4 - HKUS\S-1-5-21-673010914-1396927425-3829106573-1000\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe O4 - HKUS\S-1-5-21-673010914-1396927425-3829106573-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe O4 - HKUS\S-1-5-21-673010914-1396927425-3829106573-1000\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\Proprietaire\AppData\Local\Facebook\Update\FacebookUpdate.exe O4 - HKUS\S-1-5-21-673010914-1396927425-3829106573-1000\..\Run: [EPSON SX125 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGGE.exe ~ Application: Scanned in 00mn 00s ---\ Autres liens utilisateurs (O4) O4 - GS\TaskBar: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - GS\TaskBar: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\TaskBar: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe O4 - GS\TaskBar: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\Programs: Search.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe https://search.safefinder.com/?q= =>Hijacker.SmartBar O4 - GS\QuickLaunch: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\QuickLaunch: NetTools.lnk . (.Mohammad Ahmadi Bidakhvidi - Net Tools by Mohammad Ahmadi Bidakhvidi.) -- C:\Program Files (x86)\Net Tools ettools5.exe O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.) -- C:\Windows\system32\eudcedit.exe O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) -- C:\Windows\system32\WFS.exe O4 - GS\SendTo: Format Factory.lnk . (.Free Time - FormatFactory.) -- C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe O4 - GS\SendTo: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - Pas de description.) -- C:\Windows\System32\fsquirt.exe O4 - GS\Desktop: DATA (D) - Raccourci.lnk . (...) -- D:\ O4 - GS\Desktop: Dofus2.lnk . (...) -- C:\Program Files (x86)\Dofus2\app\UpLauncher.exe O4 - GS\Desktop: Format Factory.lnk . (.Free Time - FormatFactory.) -- C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe O4 - Global Startup: C:\Users\Proprietaire\Desktop\Generateur de starpass [Generateur de code starpass] [2013] - YouTube.url . (.Free Time - FormatFactory.) -- C:\Users\Proprietaire\Desktop\Generateur de starpass [Generateur de code starpass] [2013] - YouTube.url O4 - Global Startup: C:\Users\Proprietaire\Desktop\GLITCH - COD4 - Sortir de feux croisés (vieux mais funnnn !) - YouTube.url . (.Free Time - FormatFactory.) -- C:\Users\Proprietaire\Desktop\GLITCH - COD4 - Sortir de feux croisés (vieux mais funnnn !) - YouTube.url O4 - Global Startup: C:\Users\Proprietaire\Desktop\GLITCH - COD4 - Sortir de Terrain - YouTube.url . (.Free Time - FormatFactory.) -- C:\Users\Proprietaire\Desktop\GLITCH - COD4 - Sortir de Terrain - YouTube.url O4 - Global Startup: C:\Users\Proprietaire\Desktop\iOS 6.1.3 Jailbreak Semi Untethered et Hacktivation sans carte SIM - iPhone 4, 3GS, iPod touch 4G - YouTube.url . (.XboxMB - Horizon.) -- C:\Users\Proprietaire\Desktop\iOS 6.1.3 Jailbreak Semi Untethered et Hacktivation sans carte SIM - iPhone 4, 3GS, iPod touch 4G - YouTube.url O4 - GS\Desktop: Microsoft Office Word 2007.lnk . (...) -- C:\Windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe O4 - GS\Desktop: NetTools.lnk . (.Mohammad Ahmadi Bidakhvidi - Net Tools by Mohammad Ahmadi Bidakhvidi.) -- C:\Program Files (x86)\Net Tools ettools5.exe O4 - Global Startup: C:\Users\Proprietaire\Desktop\Prépacode, site d'entrainement au passage de l'examen du Code de la route.url . (...) -- C:\Users\Proprietaire\Desktop\Prépacode, site d'entrainement au passage de l'examen du Code de la route.url O4 - Global Startup: C:\Users\Proprietaire\Desktop\Skyrock en direct - SKYROCK - Les Dédicaces. Week-End.url . (...) -- C:\Users\Proprietaire\Desktop\Skyrock en direct - SKYROCK - Les Dédicaces. Week-End.url O4 - GS\Desktop: Windows Live Messenger.lnk . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe ~ Global Startup: Scanned in 00mn 00s ---\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{1A729A82-2841-4CBE-9895-89BADC9848FC}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CCS\Services\Tcpip\..\{6F3BEB23-464C-427B-8CB5-CD09B875044B}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CS1\Services\Tcpip\..\{1A729A82-2841-4CBE-9895-89BADC9848FC}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CS1\Services\Tcpip\..\{6F3BEB23-464C-427B-8CB5-CD09B875044B}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CS2\Services\Tcpip\..\{1A729A82-2841-4CBE-9895-89BADC9848FC}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CS2\Services\Tcpip\..\{6F3BEB23-464C-427B-8CB5-CD09B875044B}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.254 ~ Domain: Scanned in 00mn 00s ---\ Protocole additionnel (O18) O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll ~ Protocole Additionnel: Scanned in 00mn 00s ---\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll ~ Winlogon: Scanned in 00mn 00s ---\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\PC Optimizer Pro64 startups.job [428] =>PUP.OptimizerPro O39 - APT:Automatic Planified Task - C:\Windows\Tasks\PC Performer_UPDATES.job [298] =>Rogue.PCPerformer [MD5.00000000000000000000000000000000] [APT] [DealPlyUpdate] (...) -- C:\Program Files (x86)\DealPly\DealPlyUpdate.exe (.not file.) [0] =>PUP.DealPly [MD5.00000000000000000000000000000000] [APT] [PC Optimizer Pro64 startups] (...) -- C:\Program Files\PC Optimizer Pro\StartApps.exe (.not file.) [0] =>PUP.OptimizerPro [MD5.00000000000000000000000000000000] [APT] [PC Performer_UPDATES] (...) -- C:\Program Files (x86)\PC Performer\PCPerformer.exe (.not file.) [0] =>Rogue.PCPerformer [MD5.00000000000000000000000000000000] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files (x86)\Ask.com\UpdateTask.exe (.not file.) [0] =>Toolbar.Ask [MD5.86231ADE788EB80652B43AEE68C097C2] [APT] [{1D8997F9-E385-4D06-B526-F30BAD0FFEE5}] (.Nikk.) -- C:\Games\Counter-Strike Source un_css.exe [39424] [MD5.86231ADE788EB80652B43AEE68C097C2] [APT] [{3D7C9338-7401-4558-BD15-47F4431D5DBE}] (.Nikk.) -- C:\Games\Counter-Strike Source un_css.exe [39424] [MD5.00000000000000000000000000000000] [APT] [{4EE593B6-7429-41A4-9C0F-EFCFAA9BF659}] (...) -- C:\Users\Proprietaire\AppData\Roaming\BTLive\BTLive.exe (.not file.) [0] [MD5.86231ADE788EB80652B43AEE68C097C2] [APT] [{694EA1A3-C165-4FA5-933B-D220FDADD006}] (.Nikk.) -- C:\Games\Counter-Strike Source un_css.exe [39424] [MD5.00000000000000000000000000000000] [APT] [{7D4EEDF3-5E13-4F0E-A5FA-4894E3536F8F}] (...) -- C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.8.7.2\GUninstaller.exe (.not file.) [0] =>Toolbar.Babylon [MD5.86231ADE788EB80652B43AEE68C097C2] [APT] [{9FEA61B6-F0AC-4FFC-A361-429AA6FBD8EB}] (.Nikk.) -- C:\Games\Counter-Strike Source un_css.exe [39424] [MD5.86231ADE788EB80652B43AEE68C097C2] [APT] [{D4D3BC4B-C45F-4348-9C7D-8ED4D182778F}] (.Nikk.) -- C:\Games\Counter-Strike Source un_css.exe [39424] [MD5.86231ADE788EB80652B43AEE68C097C2] [APT] [{F3950750-4A5A-44D8-9499-233A210A6BC5}] (.Nikk.) -- C:\Games\Counter-Strike Source un_css.exe [39424] ~ Scheduled Task: 32 Legitimates Filtered in 00mn 01s ---\ Logiciels installés (O42) O42 - Logiciel: BrowseToSave - (...) [HKLM][64Bits] -- {C8E4AFCD-7340-477C-A597-3B6213078D3B} =>Adware.Browse2Save O42 - Logiciel: FrameFox Extensions 1.0.2.0 - (.QwertyBox Team.) [HKLM][64Bits] -- {A1D62CC4-1453-4245-9C6E-E9E8EF0B620C} =>Toolbar.DeltaSearch O42 - Logiciel: Horizon v2.6.6.3 - (.Daring Development Inc..) [HKLM][64Bits] -- d4cfeebc-b821-40b7-9f81-d366b1466f03_is1 O42 - Logiciel: Lyrics Kid - (.MPYT Software.) [HKLM][64Bits] -- lyricskid@mpytsoft.net O42 - Logiciel: NetTools 5.0 - (.Mohammad Ahmadi Bidakhvidi.) [HKLM][64Bits] -- NetTools_is1 O42 - Logiciel: Search Assistant WebSearch 1.74 - (...) [HKLM][64Bits] -- SP_4e24eecb O42 - Logiciel: Snap.Do Engine - (.ReSoft Ltd..) [HKCU][64Bits] -- {2a4ac257-642a-4804-b94b-80e28441992c} =>Hijacker.SmartBar ~ Logic: 113 Legitimates Filtered in 00mn 00s ---\ HKCU & HKLM Software Keys [HKCU\Software\Blabbers ] =>PUP.Blabbers [HKCU\Software\Duuqu] =>Toolbar.DeltaSearch [HKLM\Software\Boxore] =>Adware.Boxore [HKLM\Software\Wow6432Node\Duuqu] =>Toolbar.DeltaSearch ~ Key Software: 222 Legitimates Filtered in 00mn 00s ---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 10/04/2013 - 11:03:11 - [1,473] ----D C:\Program Files (x86)\BrowseToSave =>Adware.Browse2Save O43 - CFD: 10/05/2013 - 14:14:49 - [22,918] ----D C:\Program Files (x86)\Daring Development O43 - CFD: 20/05/2013 - 11:07:19 - [0,000] ----D C:\Users\Proprietaire\AppData\Local\supt4pc_fr_36 ~ 179 Dossiers CLSID vides (CLSID Empty Folders) ~ Program Folder: 396 Legitimates Filtered in 00mn 14s ---\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.8CF2B639F0324328B9902120198FF4AA] - 01/06/2013 - 16:15:24 ---A- . (...) -- C:\Windows\DeleteOnReboot.bat [97] O44 - LFC:[MD5.AF4150F0FA528EBEAF5686CE4DFAD385] - 01/06/2013 - 14:29:34 ---A- . (...) -- C:\Windows\SysNative\RaCoInst.log [8277] O44 - LFC:[MD5.AF4150F0FA528EBEAF5686CE4DFAD385] - 01/06/2013 - 14:29:34 RSHAD . (...) -- C:\Windows\System32\RaCoInst.log [8277] O44 - LFC:[MD5.1FF56AC32B38A94C3C88497BD6E00C96] - 29/05/2013 - 16:48:25 ---A- . (...) -- C:\Windows\SysNative\ieuinit.inf [25185] O44 - LFC:[MD5.1FF56AC32B38A94C3C88497BD6E00C96] - 29/05/2013 - 16:48:25 ---A- . (...) -- C:\Windows\System32\ieuinit.inf [25185] O44 - LFC:[MD5.A311AF088D80CB945714D44DEB92BF7A] - 26/05/2013 - 16:48:04 ---A- . (...) -- C:\Windows\setup.iss [306] O44 - LFC:[MD5.D419FA36E6CEA49BB4543471860034C4] - 23/05/2013 - 16:10:02 ---A- . (...) -- C:\error.log [45] ~ Files: 226 Legitimates Filtered in 00mn 56s ---\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:[MD5.A54E09C92DEF8FF0F8D7F8833B4FA8AE] - 01/06/2013 - 09:21:32 ---A- - C:\Windows\Prefetch\BATTERYLIFE.EXE-72906C84.pf ~ Prefetcher: 102 Legitimates Filtered in 00mn 00s ---\ MountPoints2 Shell Key (O51) O51 - MPSK:{11702fcc-4421-11e1-a417-806e6f6e6963}\AutoRun\command. (...) -- E:\EPSETUP.exe (.not file.) O51 - MPSK:{8f82ba1d-aa45-11e1-a3f8-c860001b17e9}\AutoRun\command. (...) -- F:\TotalLock.exe (.not file.) O51 - MPSK:{9e5e77ac-dd87-11e1-b1d8-c860001b17e9}\AutoRun\command. (...) -- G:\LGAutoRun.exe (.not file.) ~ Keys: Scanned in 00mn 00s ---\ Microsoft Windows Policies System (O55) O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 ~ MWPS: 16 Legitimates Filtered in 00mn 00s ---\ Microsoft Windows Policies Explorer (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 ~ MWPE Keys: 3 Legitimates Filtered in 00mn 00s ---\ Liste des Drivers Système (O58) O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088] O58 - SDL:[MD5.F498C5C3399A60933196FC215EF074F9] - 04/04/2003 - 14:07:20 ---A- . (.Politecnico di Torino - NPF Driver - TME extensions.) -- C:\Windows\SysWOW64\drivers pf.sys [30336] O58 - SDL:[MD5.9131FE60ADFAB595C8DA53AD6A06AA31] - 30/12/2004 - 22:43:08 ----- . (.INCA Internet Co., Ltd. - nProtect NPSC Kernel Mode Driver for NT.) -- C:\Windows\SysWOW64 pptNT2.sys [4682] ~ Drivers: Scanned in 00mn 00s ---\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC: 01/06/2013 - 13:07:43 ---A- C:\Users\Proprietaire\Downloads\Webplayer.exe [727560] O61 - LFC: 01/06/2013 - 13:08:01 ---A- C:\Users\Proprietaire\Downloads\Webplayer (1).exe [727560] O61 - LFC: 01/06/2013 - 13:15:17 ---A- C:\Users\Proprietaire\Downloads\OTL.exe [602112] O61 - LFC: 01/06/2013 - 13:30:39 ---A- C:\Users\Proprietaire\Downloads\OTL.Txt [207430] O61 - LFC: 01/06/2013 - 13:31:29 ---A- C:\Users\Proprietaire\Downloads\Extras.Txt [100514] O61 - LFC: 01/06/2013 - 13:34:55 ---A- C:\Users\Proprietaire\Downloads\ccsetup402.exe [4378864] O61 - LFC: 01/06/2013 - 14:02:28 ---A- C:\Users\Proprietaire\AppData\Roaming\ASUS WebStorage\Logs\AWS-CCleaner64.txt [0] =>Piriform Ltd O61 - LFC: 01/06/2013 - 14:02:36 ---A- C:\Users\Proprietaire\Documents\cc_20130601_150226.reg [144628] O61 - LFC: 01/06/2013 - 14:03:04 ---A- C:\Users\Proprietaire\Documents\cc_20130601_150300.reg [8254] O61 - LFC: 01/06/2013 - 14:11:01 ---A- C:\Users\Proprietaire\AppData\Local\Resmon.ResmonCfg [7605] O61 - LFC: 01/06/2013 - 14:41:20 ---A- C:\Users\Proprietaire\AppData\Local\Google\Chrome\User Data\First Run [0] O61 - LFC: 01/06/2013 - 14:44:03 ---A- C:\Users\Proprietaire\AppData\Local\Google\Chrome\User Data\fr-FR-3-0.bdic [1074744] O61 - LFC: 01/06/2013 - 14:45:23 ---A- C:\Users\Proprietaire\Documents\Documents - Raccourci.lnk [1202] O61 - LFC: 01/06/2013 - 17:23:47 ---A- C:\Users\Proprietaire\Downloads\mbam-setup-1.75.0.1300.exe [10285040] O61 - LFC: 02/06/2013 - 19:02:58 ---A- C:\Users\Proprietaire\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists [273240] O61 - LFC: 02/06/2013 - 19:08:06 ---A- C:\Users\Proprietaire\AppData\Local\Google\Chrome\User Data\Local State [33115] ~ 159 Fichiers temporaires (Temporary files) ~ Files: 362 Legitimates Filtered in 00mn 40s ---\ Liste des outils de nettoyage (O63) O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 ~ ADS: Scanned in 00mn 00s ---\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.) ~ FASS Keys: 19 Legitimates Filtered in 00mn 00s ---\ Start Menu Internet (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\ Crack & Keygen Files (O82) C:\Program Files (x86)\Net Tools\WepKeyGenerator.exe C:\Program Files (x86)\Net Tools\WepKeyGenerator.exe.manifest C:\Users\Proprietaire\Desktop\Nouveau dossier\UPDATE_Xbox_Generator_Gold_And_Mp_Points_FREE\Xbox Generator UPDATE\Xbox 360 Keygen - FreeCodesGenerator.com 2013.rar C:\Program Files (x86)\Net Tools\WepKeyGenerator.exe C:\Program Files (x86)\Net Tools\WepKeyGenerator.exe.manifest C:\Users\Proprietaire\Desktop\Nouveau dossier\UPDATE_Xbox_Generator_Gold_And_Mp_Points_FREE\Xbox Generator UPDATE\Xbox 360 Keygen - FreeCodesGenerator.com 2013.rar ~ Files: Scanned in 00mn 57s ---\ Recherche particuliere à la racine de certains dossiers (O84) [MD5.0D3B680986310AE5540578C0E481C6A0] [SPRF][06/10/2010] (...) -- C:\ProgramData\FullRemove.exe [131984] [MD5.61F7832597C16FBCC0FBA85D4F4E86C2] [SPRF][23/10/2009] (.Logitech, Inc. - Logitech Touch Mouse Server for Windows.) -- C:\Users\Proprietaire\AppData\Local\Temp\iTouch-Server-Win.exe [178688] [MD5.6C137D2BEF3CDD43F3AE2FD6705B9FED] [SPRF][05/04/2013] (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Users\Proprietaire\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe [904104] [MD5.8DF1A6C59ABA4B40FAEC90FCB264E447] [SPRF][26/01/2013] (.XboxMB - Horizon.) -- C:\Users\Proprietaire\Desktop\Horizon.exe [9611312] ~ Files: Scanned in 00mn 00s ---\ Firewall Active Exception List (FirewallRules) (O87) O87 - FAEL: "TCP Query User{B4BC6A80-B2F5-4699-AF39-8F88833A08CF}C:\program files (x86) et tools ettools5.exe" | In - Private - P6 - TRUE | .(.Mohammad Ahmadi Bidakhvidi.) -- C:\program files (x86) et tools ettools5.exe O87 - FAEL: "UDP Query User{EE424099-B570-44B1-BBB6-CAAF34AF015A}C:\program files (x86) et tools ettools5.exe" | In - Private - P17 - TRUE | .(.Mohammad Ahmadi Bidakhvidi.) -- C:\program files (x86) et tools ettools5.exe O87 - FAEL: "{619E8DA7-AD8B-4834-B0DD-A503835FD728}" | In - Private - P6 - TRUE | .(.Logitech, Inc. - Logitech Touch Mouse Server for Windows.) -- C:\Users\Proprietaire\AppData\Local\Temp\iTouch-Server-Win.exe O87 - FAEL: "{13D6241F-3740-4234-B7C1-1F74EEA5A8E5}" | In - Private - P17 - TRUE | .(.Logitech, Inc. - Logitech Touch Mouse Server for Windows.) -- C:\Users\Proprietaire\AppData\Local\Temp\iTouch-Server-Win.exe ~ Firewall: 208 Legitimates Filtered in 00mn 01s ---\ Scan Additionnel (O88) Database Version : v2.12368 - (01/06/2013) Clés trouvées (Keys found) : 20 Valeurs trouvées (Values found) : 0 Dossiers trouvés (Folders found) : 3 Fichiers trouvés (Files found) : 0 [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D6533F74-218B-41BE-9D91-5BD471FECFFD}] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Google\Chrome\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib] =>Toolbar.Conduit [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9] =>Adware.MyWebSearch [HKLM\Software\Boxore] =>Adware.Boxore [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>Toolbar.Agent [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>Toolbar.Agent [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2] =>Toolbar.Ask [HKLM\Software\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}] =>Adware.MagniPic [HKLM\Software\Wow6432Node\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}] =>Adware.MagniPic [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SP_f2a323db] =>Adware.Browse2Save [HKLM\Software\PC Optimizer Pro] =>Rogue.PCOptimizerPro [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A1D62CC4-1453-4245-9C6E-E9E8EF0B620C}] =>Toolbar.DeltaSearch C:\Program Files (x86)\BrowseToSave =>Adware.Browse2Save C:\ProgramData\PC Optimizer Pro =>Rogue.PCOptimizerPro C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Performer =>Rogue.PCPerformer ~ Additionnel Scan: 261230 Items scanned in 00mn 16s ---\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SR - | Auto 18/12/2012 65192 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe SS - | Demand 15/05/2013 256904 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe SR - | Auto 26/05/2013 86752 | (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe SR - | Auto 26/05/2013 110816 | (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe SR - | Auto 26/05/2013 562744 | (AntiVirWebService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.exe SR - | Auto 21/12/2012 57008 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - | Auto 16/06/2009 84536 | (ASLDRService) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe SR - | Auto 15/12/2009 96896 | (ATKGFNEXSrv) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SS - | Demand 14/12/2012 277616 | (cphs) . (.Intel Corporation.) - C:\Windows\SysWow64\IntelCpHeciSvc.exe SR - | Auto 14/09/2009 166400 | (EPSON_EB_RPCV4_04) . (.SEIKO EPSON CORPORATION.) - C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.exe SR - | Auto 14/09/2009 128512 | (EPSON_PM_RPCV4_04) . (.SEIKO EPSON CORPORATION.) - C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.exe SS - | Auto 01/06/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 01/06/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SR - | Demand 20/02/2013 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 06/10/2010 325656 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe SS - | Demand 28/11/2007 800040 | (NBService) . (.Nero AG.) - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe SR - | Demand 27/06/2007 279848 | (NMIndexingService) . (.Nero AG.) - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe SS - | Demand ??\??\???? 0 | (npggsvc) . (.INCA Internet Co., Ltd..) - C:\Windows\system32\GameMon.des SR - | Auto 06/10/2010 2655768 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe ~ Services: Scanned in 00mn 01s ---\ Recherche Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net ~ MBR: 1 Legitimates Filtered in 00mn 02s ---\ Recherche Master Boot Record Infection (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by Proprietaire at 02/06/2013 20:10:52 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ MBR: Scanned in 00mn 04s ~ 2144 Legitimates filtered by white list End of the scan (548 lines in 04mn 19s)(6)

billmaxime · Answer

salut hugo

fais ceci s'il te plaît

télécharge usbfix sur ton bureau (clique sur la flèche verte) 

le lien https://toolslib.net 

si ton pc émet 1 alerte, ignore la (désactive le si besoin)

branche toutes tes sources de données externe a ton pc (clé USB, disque dur externe, etc...) sans les ouvrir 

le tuto https://www.malekal.com/tutoriels-logiciels/ 

exécute le en tant qu'administrateur (clic droit) 

choisis le mode "suppression" 

le rapport s'affichera sur ton bureau et dans C:\UsbFix.txt 

poste le rapport via 1 copier/coller 

@+

hugofouiny63! · Answer

sa saire  quoi ? :)

billmaxime · Answer

salut hugo

ça sert a supprimer les crasses que tu as dans le pc 

lis le tuto

@+

hugofouiny63! · Answer

oui mais pourquoi fautq que je branche mes truc usb ?

billmaxime · Answer

re

parce que usbfix va te vacciner les ports usb (en mode suppression)

tu dois juste brancher tes clés DD externe etc sans les ouvrir

@+

hugofouiny63! · Answer

############################## | UsbFix V 7.126 | [Suppression]

Utilisateur: Proprietaire (Administrateur) # PROPRIETAIRE-PC
Mis à jour le 13/05/2013 par El Desaparecido
Lancé à 20:49:17 | 03/06/2013

Site Web: https://www.sosvirus.net/
Upload Malware: http://upload.sosvirus.org/
Contact: contact@sosvirus.org

PC: ASUSTeK Computer Inc. (K73E) (x64-based PC)
CPU: Intel(R) Pentium(R) CPU B960 @ 2.20GHz (2200)
RAM -> [Total : 4002 | Free : 2153]
BIOS: BIOS Date: 11/16/11 10:02:58 Ver: 04.06.03
BOOT: Normal boot

OS: Microsoft Windows 7 Édition Familiale Premium  (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 10.0.9200.16576

SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AV: Avira Desktop [Enabled | Updated]
FW: Windows FireWall Service [Enabled]

C:\ (%systemdrive%) -> Disque fixe # 119 Go (58 Go libre(s) - 49%) [OS] # NTFS
D:\ -> Disque fixe # 154 Go (53 Go libre(s) - 35%) [DATA] # NTFS
E:\ -> CD-ROM
G:\ -> Disque fixe # 298 Go (53 Go libre(s) - 18%) [USB-HDD] # FAT32

################## | El Desaparecido Section |

HKLM\SOFTWARE | Run : [Nuance PDF Reader-reminder] - "C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\PDF Reader\Ereg\Ereg.ini"
HKLM\SOFTWARE | Run : [ASUSPRP] - "C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
HKLM\SOFTWARE | Run : [ASUSWebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe /S
HKLM\SOFTWARE | Run : [SonicMasterTray] - C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
HKLM\SOFTWARE | Run : [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
HKLM\SOFTWARE | Run : [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
HKLM\SOFTWARE | Run : [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
HKLM\SOFTWARE | Run : [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
HKLM\SOFTWARE | Run : [] - 
HKLM\SOFTWARE | Run : [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
HKLM\SOFTWARE | Run : [ASUS Screen Saver Protector] - C:\Windows\AsScrPro.exe
HKLM\SOFTWARE | Run : [CLMLServer] - "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
HKLM\SOFTWARE | Run : [iTunesHelper] - "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
HKLM\SOFTWARE | Run : [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKLM\SOFTWARE | Run : [avgnt] - "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
HKLM\SOFTWARE | Run : [EEventManager] - "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
HKLM\SOFTWARE | Run : [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
HKLM\SOFTWARE | Run : [BingDesktop] - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe /fromkey
HKLM\SOFTWARE\wow6432Node | Run : [Nuance PDF Reader-reminder] - "C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\PDF Reader\Ereg\Ereg.ini"
HKLM\SOFTWARE\wow6432Node | Run : [ASUSPRP] - "C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
HKLM\SOFTWARE\wow6432Node | Run : [ASUSWebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe /S
HKLM\SOFTWARE\wow6432Node | Run : [SonicMasterTray] - C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
HKLM\SOFTWARE\wow6432Node | Run : [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
HKLM\SOFTWARE\wow6432Node | Run : [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
HKLM\SOFTWARE\wow6432Node | Run : [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
HKLM\SOFTWARE\wow6432Node | Run : [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
HKLM\SOFTWARE\wow6432Node | Run : [] - 
HKLM\SOFTWARE\wow6432Node | Run : [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
HKLM\SOFTWARE\wow6432Node | Run : [ASUS Screen Saver Protector] - C:\Windows\AsScrPro.exe
HKLM\SOFTWARE\wow6432Node | Run : [CLMLServer] - "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
HKLM\SOFTWARE\wow6432Node | Run : [iTunesHelper] - "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
HKLM\SOFTWARE\wow6432Node | Run : [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKLM\SOFTWARE\wow6432Node | Run : [avgnt] - "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
HKLM\SOFTWARE\wow6432Node | Run : [EEventManager] - "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
HKLM\SOFTWARE\wow6432Node | Run : [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
HKLM\SOFTWARE\wow6432Node | Run : [BingDesktop] - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe /fromkey
HKLM\SOFTWARE | RunOnce : [] - 
HKLM\SOFTWARE\wow6432Node | RunOnce : [] - 
HKU\S-1-5-19\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-21-673010914-1396927425-3829106573-1000\SOFTWARE | Run : [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] - "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
HKU\S-1-5-21-673010914-1396927425-3829106573-1000\SOFTWARE | Run : [msnmsgr] - "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
HKU\S-1-5-21-673010914-1396927425-3829106573-1000\SOFTWARE | Run : [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
HKU\S-1-5-21-673010914-1396927425-3829106573-1000\SOFTWARE | Run : [Facebook Update] - "C:\Users\Proprietaire\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
HKU\S-1-5-21-673010914-1396927425-3829106573-1000\SOFTWARE | Run : [EPSON SX125 Series] - C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGGE.EXE /FU "C:\Windows\TEMP\E_SEE96.tmp" /EF "HKCU"
HKU\S-1-5-19\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe
HKU\S-1-5-20\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe

################## | Processus Stoppés |

Stoppé! C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe (1156)
Stoppé! C:\Windows\system32\WLANExt.exe (1164)
Stoppé! C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (1264)
Stoppé! C:\Windows\system32\taskeng.exe (1352)
Stoppé! C:\Windows\System32\spoolsv.exe (1360)
Stoppé! C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (1460)
Stoppé! C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1608)
Stoppé! C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (1656)
Stoppé! C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (1676)
Stoppé! C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe (1712)
Stoppé! C:\Program Files\Bonjour\mDNSResponder.exe (1788)
Stoppé! C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE (1832)
Stoppé! C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE (1864)
Stoppé! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (1960)
Stoppé! C:\Windows\system32\taskhost.exe (2228)
Stoppé! C:\Windows\system32\taskeng.exe (2280)
Stoppé! C:\Program Files\ASUS\P4G\BatteryLife.exe (2392)
Stoppé! C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (2416)
Stoppé! C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe (2488)
Stoppé! C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (2512)
Stoppé! C:\Windows\system32\taskeng.exe (2524)
Stoppé! C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (2652)
Stoppé! C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe (2700)
Stoppé! C:\Program Files (x86)\Google\Update\1.3.21.145\GoogleCrashHandler.exe (2876)
Stoppé! C:\Program Files (x86)\Google\Update\1.3.21.145\GoogleCrashHandler64.exe (2888)
Stoppé! C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (2996)
Stoppé! C:\Windows\SysWOW64\ACEngSvr.exe (2128)
Stoppé! C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (2276)
Stoppé! C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (2384)
Stoppé! C:\Program Files\Elantech\ETDCtrl.exe (2564)
Stoppé! C:\Program Files\Microsoft IntelliPoint\ipoint.exe (2572)
Stoppé! C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (2612)
Stoppé! C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (2632)
Stoppé! C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE (2052)
Stoppé! C:\Windows\System32\igfxtray.exe (3244)
Stoppé! C:\Windows\System32\hkcmd.exe (3276)
Stoppé! C:\Windows\System32\igfxpers.exe (3308)
Stoppé! C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe (3340)
Stoppé! C:\Program Files\Windows Sidebar\sidebar.exe (3832)
Stoppé! C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (3864)
Stoppé! C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe (3912)
Stoppé! C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (3928)
Stoppé! C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (3940)
Stoppé! C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe (4048)
Stoppé! C:\Windows\system32\SearchIndexer.exe (3880)
Stoppé! C:\Users\Proprietaire\AppData\Local\Temp\iTouch-Server-Win.exe (488)
Stoppé! C:\Program Files\Windows Media Player\wmpnetwk.exe (4180)
Stoppé! C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe (4336)
Stoppé! C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (4424)
Stoppé! C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (4484)
Stoppé! C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (4556)
Stoppé! C:\Windows\AsScrPro.exe (4588)
Stoppé! C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (4596)
Stoppé! C:\Program Files (x86)\iTunes\iTunesHelper.exe (4628)
Stoppé! C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (4724)
Stoppé! C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (4760)
Stoppé! C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (4772)
Stoppé! C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe (4804)
Stoppé! C:\Program Files\Elantech\ETDCtrlHelper.exe (4984)
Stoppé! C:\Program Files\iPod\bin\iPodService.exe (920)
Stoppé! C:\Windows\system32\DllHost.exe (4124)
Stoppé! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (2340)
Stoppé! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (3688)
Stoppé! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (3756)
Stoppé! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (3636)
Stoppé! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (4112)
Stoppé! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5944)
Stoppé! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (4456)

################## | Éléments infectieux |


(!) Fichiers temporaires supprimés.

################## | Registre |


################## | Mountpoints2 |

Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{11702fcc-4421-11e1-a417-806e6f6e6963}
Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{8f82ba1d-aa45-11e1-a3f8-c860001b17e9}
Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{9e5e77ac-dd87-11e1-b1d8-c860001b17e9}

################## | Listing |

[13/03/2013 - 20:22:55 | SHD ] 	C:\$Recycle.Bin
[03/06/2013 - 16:58:49 | D ] 	C:\ASUS.DAT
[11/10/2011 - 13:18:45 | N | 44] 	C:\ASUS.md5
[25/08/2012 - 11:53:54 | D ] 	C:\AsusVibeData
[29/07/2009 - 08:03:34 | SHD ] 	C:\Boot
[14/07/2009 - 03:38:58 | RASH | 383562] 	C:\bootmgr
[29/07/2009 - 08:03:37 | N | 8192] 	C:\BOOTSECT.BAK
[01/06/2013 - 15:48:42 | D ] 	C:\Config.Msi
[21/01/2012 - 13:32:19 | N | 12553] 	C:\devlist.txt
[14/07/2009 - 07:08:56 | SHD ] 	C:\Documents and Settings
[23/05/2013 - 17:10:02 | N | 45] 	C:\error.log
[21/01/2012 - 13:19:44 | D ] 	C:\eSupport
[21/01/2012 - 13:32:19 | N | 9] 	C:\Finish.log
[02/04/2013 - 17:31:58 | D ] 	C:\Games
[03/06/2013 - 16:56:59 | ASH | 3147481088] 	C:\hiberfil.sys
[21/01/2012 - 13:13:09 | D ] 	C:\Intel
[16/11/2011 - 04:07:50 | N | 2621440] 	C:\K73E.BIN
[29/11/2011 - 09:10:00 | N | 19] 	C:\K73SD_K73E_K73SV_WIN7.50
[16/11/2011 - 03:51:26 | N | 2621440] 	C:\K73SV.BIN
[01/04/2012 - 11:51:49 | RHD ] 	C:\MSOCache
[03/05/2012 - 21:56:47 | D ] 	C:\Nexon
[03/06/2013 - 16:57:00 | ASH | 4196642816] 	C:\pagefile.sys
[21/01/2012 - 13:34:02 | N | 303] 	C:\Pass.txt
[14/07/2009 - 05:20:08 | D ] 	C:\PerfLogs
[02/06/2013 - 20:10:50 | N | 512] 	C:\PhysicalDisk0_MBR.bin
[01/06/2013 - 17:14:04 | D ] 	C:\Program Files
[02/06/2013 - 20:12:09 | D ] 	C:\Program Files (x86)
[02/06/2013 - 20:14:38 | HD ] 	C:\ProgramData
[31/03/2012 - 18:17:16 | SHD ] 	C:\Recovery
[29/11/2011 - 09:10:00 | N | 20] 	C:\RECOVERY.DAT
[21/01/2012 - 13:17:34 | N | 2500] 	C:\RHDSetup.log
[21/01/2012 - 13:18:23 | N | 171] 	C:\setup.log
[02/06/2013 - 20:14:06 | SHD ] 	C:\System Volume Information
[03/06/2013 - 20:58:52 | D ] 	C:\UsbFix
[03/06/2013 - 20:59:02 | A | 13175] 	C:\UsbFix [Clean 2] PROPRIETAIRE-PC.txt
[31/03/2012 - 18:19:05 | D ] 	C:\Users
[01/06/2013 - 17:14:03 | D ] 	C:\Windows
[02/06/2013 - 20:10:52 | D ] 	C:\ZHP
[02/04/2013 - 15:58:17 | SHD ] 	D:\$RECYCLE.BIN
[23/04/2013 - 19:56:43 | D ] 	D:\autres
[02/04/2013 - 16:05:32 | D ] 	D:\film
[23/04/2013 - 19:55:42 | D ] 	D:\music
[31/03/2012 - 10:17:07 | SHD ] 	D:\System Volume Information
[04/05/2009 - 16:01:28 | SHD ] 	G:\System Volume Information
[26/03/2010 - 17:54:06 | SHD ] 	G:\$RECYCLE.BIN
[16/12/2011 - 18:42:06 | D ] 	G:\Xbox360
[17/03/2010 - 14:41:52 | D ] 	G:\psp1
[26/03/2010 - 18:03:16 | D ] 	G:\VIDEO
[26/03/2010 - 18:08:26 | D ] 	G:\FILM
[28/02/2010 - 18:35:38 | D ] 	G:\one piece
[11/04/2010 - 12:39:10 | D ] 	G:\SIMPSON
[28/04/2010 - 16:47:58 | D ] 	G:\JEU
[22/08/2010 - 20:02:16 | D ] 	G:\happy tree friend
[31/08/2010 - 12:15:36 | D ] 	G:\SAMANTHA
[31/08/2010 - 12:17:10 | D ] 	G:\ACDC
[06/09/2010 - 19:31:56 | D ] 	G:\manga
[18/12/2010 - 13:20:58 | N | 7437249] 	G:\YouTube        - subaru drifting video.mp4
[18/12/2010 - 13:36:54 | N | 15114604] 	G:\YouTube        - Monster Energy - Subaru Impreza Drift.mp4
[26/06/2010 - 12:48:34 | D ] 	G:\south park
[06/03/2011 - 19:19:08 | D ] 	G:\scene de menage
[12/03/2011 - 11:56:20 | D ] 	G:\[2010] Soprano - La Colombe
[18/03/2011 - 10:39:56 | D ] 	G:\Soprano - Le Corbeau (2011)
[27/03/2011 - 19:00:08 | D ] 	G:\ALBUM DE LA FOUINE
[12/04/2011 - 20:49:48 | D ] 	G:\sexion_dassaut_en_attendant_lapogee (2011)
[03/04/2011 - 01:38:44 | D ] 	G:\Magic_System-Toute_Kale_2011-(WEB)-FR-2011-0MNi
[29/05/2011 - 12:25:36 | D ] 	G:\iso psp
[29/05/2011 - 14:10:24 | D ] 	G:\psp crake
[11/06/2011 - 14:17:32 | D ] 	G:\Sinik-Le_Cote_Malsain-(WEB)-FR-2011-PR0ZiK
[01/08/2011 - 18:15:16 | D ] 	G:\psp visdeo
[18/12/2011 - 19:14:50 | D ] 	G:\La_Fouine-Capitale_Du_Crime_3-FR-2011-MaxO
[24/11/2011 - 16:39:32 | D ] 	G:\concert de la fouine
[02/09/2011 - 19:31:48 | D ] 	G:\David_Guetta-Nothing_But_the_Beat-(US_Edition)-2011
[26/01/2012 - 18:34:26 | D ] 	G:\youssoupha noir desir
[13/02/2012 - 17:28:50 | D ] 	G:\Recycled
[31/03/2012 - 14:47:56 | D ] 	G:\sauvegarde
[08/07/2012 - 18:57:34 | D ] 	G:\film 2
[30/08/2012 - 14:10:14 | D ] 	G:\films
[26/05/2013 - 17:26:44 | N | 70144] 	G:\Composition1.pub
[27/05/2013 - 21:11:14 | D ] 	G:\francais

################## | Vaccin |

C:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)

################## | E.O.F | https://www.sosvirus.net/ |

billmaxime · Answer

re hugo

ok, tu peux me refaire 1 zhpdiag en cliquant sur la loupe avec le + (pour que je vérifie si tout est ok)

poste le rapport via ce lien https://www.cjoint.com/

merci

@+

hugofouiny63! · Answer

re oui je le fais :)

hugofouiny63! · Answer

pourquoi tu veu que je poste le rapport dans le lien ?

billmaxime · Answer

re

car il risque d'être trop long pour le forum et de ce fait je ne l'aurais pas en entier

@+

hugofouiny63! · Answer

daccord bin la jarrete lordi je continue demain merci :)

billmaxime · Answer

re

pas de soucis

@ demain

hugofouiny63! · Answer

Rapport de ZHPDiag v2013.6.1.2 par Nicolas Coolman, Update du 01/06/2013 Run by Proprietaire at 05/06/2013 13:06:58 WebSite: https://nicolascoolman.webs.com/ State : Nouvelle version disponible WhiteList : Enable High Elevated Privileges : OK UAC : Activate by user ---\ Web Browser MSIE: Internet Explorer v10.0.9200.16576 GCIE: Google Chrome v27.0.1453.94 (Defaut) ---\ Windows Product Information ~ Langage: Français Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601) Windows Server License Manager Script : OK ~ Windows(R) 7, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : 9YQTR Windows License : OK ~ Windows Remaining Initializations Number : 1 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\ System Protection Avira Free Antivirus v13.0.0.3640 Malwarebytes Anti-Malware version 1.75.0.1300 Windows Defender W7 ---\ System Optimizer CCleaner v4.02 =>Piriform Ltd ---\ Peer To Peer (P2P) ---\ Software Update Adobe Flash Player 11 Plugin Adobe Reader XI Java 7 Update 21 ---\ System Information ~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 4002 MB (64% free) System Restore: Activé (Enable) System drive C: has 58 GB (48%) free of 119 GB ---\ Logged in mode ~ Computer Name: PROPRIETAIRE-PC ~ User Name: Proprietaire ~ All Users Names: Proprietaire, HomeGroupUser$, Administrateur, ~ Unselected Option: None Logged in as Administrator ---\ Environnement Variables ~ System Unit : C:\ ~ %AppData% : C:\Users\Proprietaire\AppData\Roaming\ ~ %Desktop% : C:\Users\Proprietaire\Desktop\ ~ %Favorites% : C:\Users\Proprietaire\Favorites\ ~ %LocalAppData% : C:\Users\Proprietaire\AppData\Local\ ~ %StartMenu% : C:\Users\Proprietaire\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 58 Go of 119 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 53 Go of 154 Go) E:\ CD-ROM drive (Not Inserted) ---\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified ~ Security Center: 34 Legitimates Filtered in 00mn 00s ---\ Recherche particulière de fichiers génériques [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.19/10/2011 - 03:54:37.) -- C:\Windows\Explorer.exe [2871808] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024] [MD5.27A9000C534AA9BADC9EE74940F50C6D] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.29/05/2013 - 16:48:25.) -- C:\Windows\System32\wininet.dll [2242048] [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.20/11/2010 - 14:25:32.) -- C:\Windows\System32\Winlogon.exe [390656] [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:28.) -- C:\Windows\System32\sppcomapi.dll [232448] [MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160] [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:22.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456] [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:34.) -- C:\Windows\system32\Drivers\DfsC.sys [102400] [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:44.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224] [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.19/10/2011 - 04:02:02.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208] [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:22.) -- C:\Windows\system32\Drivers etBT.sys [261632] [MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 15:45:08.) -- C:\Windows\system32\Drivers tfs.sys [1656680] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280] [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:36.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184] [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:58.) -- C:\Windows\system32\Drivers dx.sys [119296] [MD5.DF8126BD41180351A093A3AD2FC8903B] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.19/10/2011 - 03:34:22.) -- C:\Windows\system32\Drivers\volsnap.sys [296320] ~ Generic Processes: Scanned in 00mn 00s ---\ Etat des fichiers cachés (Caché/Total) ~ Mes musiques (My Musics) : 1/224 ~ Mes Favoris (My Favorites) : 1/7 ~ Mes Documents (My Documents) : 3/42 ~ Mon Bureau (My Desktop) : 2/3609 ~ Menu demarrer (Programs) : 1/38 ~ Hidden Files: Scanned in 00mn 02s ---\ Processus lancés [MD5.63A0FE3B1B094DAE328F46FCADABDBE4] - (.ASUS - FaceLogon Application.) -- C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe [375424] [PID.2644] [MD5.F05FC2C0FECF55B05351AA760166F18F] - (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5716608] [PID.2568] [MD5.7D2C5F5A9DF7AE26B4E62E2D7032B96B] - (.ASUS - ACMON.) -- C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [82944] [PID.1804] [MD5.C16EDEA635300AC0EE58E182A04D71B6] - (.Systweak - Advanced System Protector.) -- C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe [6563184] [PID.1684] =>PUP.AdvancedSystemProtector [MD5.86F0D0B3A07C142C81DAB47E8495A822] - (.Nero AG - Nero Home.) -- C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [152872] [PID.2100] [MD5.FFBD5650348D4F9E0AA8E72938DC6478] - (.Nero AG - Nero Home.) -- C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe [1213736] [PID.3484] [MD5.A391896CD406E6377F5CEF31FDC12019] - (.ASUSTeK - ACEngSvr Module.) -- C:\Windows\SysWOW64\ACEngSvr.exe [155648] [PID.3528] [MD5.7EE22E13DEC8A6D18F4643C1EA34B0F0] - (.Virage Logic Corporation / Sonic Focus - ASUS_MATray.exe.) -- C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [984400] [PID.3988] [MD5.79A3B950988F8D2B81906D0C0473158B] - (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624] [PID.3884] [MD5.5AEBF6FA9805C9101220AA4FB4FA17E7] - (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016] [PID.2628] [MD5.B166415C55E416022B3339EBD6CB216E] - (.ASUS - Wireless Console 3.) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2317312] [PID.1340] [MD5.37DEB76A2CF005841C4E45DE2B94D84F] - (.ASUS - AsScrPro.) -- C:\Windows\AsScrPro.exe [3058304] [PID.540] [MD5.35048D8E8A0BF7A797CD5757ACD7EED0] - (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816] [PID.4112] [MD5.8E2A7F1F62467A7DCB8AB2C0642F47CA] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392] [PID.4120] [MD5.FD579C25D253A47DF82A76B7EE96ADB5] - (.Avira Operations GmbH & Co. KG - Avira System Tray Tool.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345312] [PID.4288] [MD5.1568FF282E268082C67CF0C3EBCC9179] - (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [976320] [PID.4364] [MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816] [PID.4564] [MD5.CABF13F42347F917BE58C1826641AAB2] - (.Microsoft Corp. - Bing Desktop Application.) -- C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2387088] [PID.4620] [MD5.51C392EC9DA1119EC86D562FF3E7344F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [825808] [PID.5632] [MD5.9987636E1191907AB52F3A49FFB83393] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [7431168] [PID.4616] [MD5.18E5C2F937F9DEB8C282DF66A3761925] - (.ASUS - ASLDR Service.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [84536] [PID.1132] [MD5.7910158929571214A959D5A6D16DD9C0] - (.ASUS - GFNEXSrv.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [96896] [PID.1228] [MD5.E41F55D0B71734BB68FF26963EB250E4] - (.Avira Operations GmbH & Co. KG - Avira Scheduler.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [86752] [PID.1436] [MD5.3927397AC60D943DAF8808AFFED582B7] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65192] [PID.1624] [MD5.4FE5C6D40664AE07BE5105874357D2ED] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [57008] [PID.1668] [MD5.85D5E6AC46A2AE4672C1AC813AE45B95] - (.Microsoft Corp. - Bing Desktop updating service.) -- C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [168592] [PID.1748] [MD5.8349419DFDA3F2F03EA4A655758290C2] - (.Avira Operations GmbH & Co. KG - Avira WebGuard Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.exe [562744] [PID.2296] [MD5.506708142BC63DABA64F2D3AD1DCD5BF] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648] [PID.2640] [MD5.76B35CB0F3A4E69D6DFF27F542B9F856] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.21.145\GoogleCrashHandler.exe [216968] [PID.2028] [MD5.061C71A7BD897F28DB052E7AD2B284A1] - (.ASUS - HControl.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe [166528] [PID.2752] [MD5.A328A46D87BB92CE4D8A4528E9D84787] - (.Nero AG - Nero Home.) -- C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [279848] [PID.3148] [MD5.149126216A694E6BA84E92ECA77AAE3B] - (.ASUS - ATKOSD.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe [2488888] [PID.3552] [MD5.AA11E1368EEB237DD100BAC6AFFE1C57] - (.ASUS - KBFiltr.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe [113208] [PID.3600] [MD5.4A7C441D99D86704D194E7678873B95D] - (.ASUS - WDC.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe [174648] [PID.3624] [MD5.0803906D607A9B83184447B75B60ECC2] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [325656] [PID.4428] [MD5.EB79C6C91A99930015EF29AE7FA802D1] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2655768] [PID.5188] [MD5.880AE0BEDE234F27AC252049373B8CB9] - (.Avira Operations GmbH & Co. KG - Avira On-Access Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [110816] [PID.4404] ~ Processes Running: Scanned in 00mn 01s ---\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users\Proprietaire\AppData\Local\Google\Chrome\User Data\Default\Preferences ~ Google Browser: 0 Legitimates Filtered in 00mn 00s ---\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) C:\Users\Proprietaire\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\prefs.js (.not file.) C:\Users\Proprietaire\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\user.js ~ Firefox Browser: 5 Legitimates Filtered in 00mn 00s ---\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\ Redirection du fichier Hosts (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Hosts File: Scanned in 00mn 00s ~ Nombre de lignes (Lines number): 21 ---\ Browser Helper Objects de navigateur (O2) O2 - BHO: Lyrics Kid [64Bits] - {BA146CF5-1875-4EA8-AAEA-A90142FC2EC9} . (.MPYT Software - Lyrics Kid.) -- C:\Program Files (x86)\LyricsKid\lkid.dll ~ BHO: 5 Legitimates Filtered in 00mn 00s ---\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [RtHDVBg] . (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe O4 - HKLM\..\Run: [AmIcoSinglun64] . (.Alcor Micro Corp. - Single LUN Icon Utility for VID 058F PID 63.) -- C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe O4 - HKLM\..\Run: [ETDCtrl] C:\Program Files (x86)\Elantech\ETDCtrl.exe (.not file.) O4 - HKLM\..\Run: [IntelliPoint] . (.Microsoft Corporation - IPoint.exe.) -- C:\Program Files\Microsoft IntelliPoint\ipoint.exe O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] . (.Nero AG - Nero Home.) -- C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\Proprietaire\AppData\Local\Facebook\Update\FacebookUpdate.exe O4 - HKCU\..\Run: [EPSON SX125 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGGE.exe O4 - HKLM\..\Wow6432Node\Run: [Nuance PDF Reader-reminder] . (.Nuance Communications, Inc. - Ereg.) -- C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe O4 - HKLM\..\Wow6432Node\Run: [ASUSPRP] . (.ASUSTek Computer Inc. - ASUS Product Register Program.) -- C:\Program Files (x86)\ASUS\APRP\APRP.exe O4 - HKLM\..\Wow6432Node\Run: [ASUSWebStorage] . (.ecareme - AsusWebStorage.) -- C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe O4 - HKLM\..\Wow6432Node\Run: [SonicMasterTray] . (.Virage Logic Corporation / Sonic Focus - ASUS_MATray.exe.) -- C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe O4 - HKLM\..\Wow6432Node\Run: [ATKOSD2] . (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe O4 - HKLM\..\Wow6432Node\Run: [ATKMEDIA] . (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe O4 - HKLM\..\Wow6432Node\Run: [HControlUser] . (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe O4 - HKLM\..\Wow6432Node\Run: [Wireless Console 3] . (.ASUS - Wireless Console 3.) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe O4 - HKLM\..\Wow6432Node\Run: [ASUS Screen Saver Protector] . (.ASUS - AsScrPro.) -- C:\Windows\AsScrPro.exe O4 - HKLM\..\Wow6432Node\Run: [CLMLServer] . (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Avira System Tray Tool.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe O4 - HKLM\..\Wow6432Node\Run: [EEventManager] . (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe O4 - HKLM\..\Wow6432Node\Run: [BingDesktop] . (.Microsoft Corp. - Bing Desktop Application.) -- C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-21-673010914-1396927425-3829106573-1000\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] . (.Nero AG - Nero Home.) -- C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe O4 - HKUS\S-1-5-21-673010914-1396927425-3829106573-1000\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe O4 - HKUS\S-1-5-21-673010914-1396927425-3829106573-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe O4 - HKUS\S-1-5-21-673010914-1396927425-3829106573-1000\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\Proprietaire\AppData\Local\Facebook\Update\FacebookUpdate.exe O4 - HKUS\S-1-5-21-673010914-1396927425-3829106573-1000\..\Run: [EPSON SX125 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGGE.exe ~ Application: Scanned in 00mn 00s ---\ Autres liens utilisateurs (O4) O4 - GS\TaskBar: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - GS\TaskBar: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\TaskBar: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe O4 - GS\TaskBar: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\Programs: Search.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe https://search.safefinder.com/?q= =>Hijacker.SmartBar O4 - GS\QuickLaunch: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\QuickLaunch: NetTools.lnk . (.Mohammad Ahmadi Bidakhvidi - Net Tools by Mohammad Ahmadi Bidakhvidi.) -- C:\Program Files (x86)\Net Tools ettools5.exe O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.) -- C:\Windows\system32\eudcedit.exe O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) -- C:\Windows\system32\WFS.exe O4 - GS\SendTo: Format Factory.lnk . (.Free Time - FormatFactory.) -- C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe O4 - GS\SendTo: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - Pas de description.) -- C:\Windows\System32\fsquirt.exe O4 - GS\Desktop: DATA (D) - Raccourci.lnk . (...) -- D:\ O4 - GS\Desktop: Dofus2.lnk . (...) -- C:\Program Files (x86)\Dofus2\app\UpLauncher.exe O4 - GS\Desktop: Format Factory.lnk . (.Free Time - FormatFactory.) -- C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe O4 - Global Startup: C:\Users\Proprietaire\Desktop\Generateur de starpass [Generateur de code starpass] [2013] - YouTube.url . (.Free Time - FormatFactory.) -- C:\Users\Proprietaire\Desktop\Generateur de starpass [Generateur de code starpass] [2013] - YouTube.url O4 - Global Startup: C:\Users\Proprietaire\Desktop\GLITCH - COD4 - Sortir de feux croisés (vieux mais funnnn !) - YouTube.url . (.Free Time - FormatFactory.) -- C:\Users\Proprietaire\Desktop\GLITCH - COD4 - Sortir de feux croisés (vieux mais funnnn !) - YouTube.url O4 - Global Startup: C:\Users\Proprietaire\Desktop\GLITCH - COD4 - Sortir de Terrain - YouTube.url . (.Free Time - FormatFactory.) -- C:\Users\Proprietaire\Desktop\GLITCH - COD4 - Sortir de Terrain - YouTube.url O4 - Global Startup: C:\Users\Proprietaire\Desktop\iOS 6.1.3 Jailbreak Semi Untethered et Hacktivation sans carte SIM - iPhone 4, 3GS, iPod touch 4G - YouTube.url . (.XboxMB - Horizon.) -- C:\Users\Proprietaire\Desktop\iOS 6.1.3 Jailbreak Semi Untethered et Hacktivation sans carte SIM - iPhone 4, 3GS, iPod touch 4G - YouTube.url O4 - GS\Desktop: Microsoft Office Word 2007.lnk . (...) -- C:\Windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe O4 - GS\Desktop: NetTools.lnk . (.Mohammad Ahmadi Bidakhvidi - Net Tools by Mohammad Ahmadi Bidakhvidi.) -- C:\Program Files (x86)\Net Tools ettools5.exe O4 - GS\Desktop: Nettoyez votre registre gratuitement!.lnk - Clé orpheline O4 - Global Startup: C:\Users\Proprietaire\Desktop\Prépacode, site d'entrainement au passage de l'examen du Code de la route.url . (...) -- C:\Users\Proprietaire\Desktop\Prépacode, site d'entrainement au passage de l'examen du Code de la route.url O4 - Global Startup: C:\Users\Proprietaire\Desktop\Skyrock en direct - SKYROCK - Les Dédicaces. Week-End.url . (...) -- C:\Users\Proprietaire\Desktop\Skyrock en direct - SKYROCK - Les Dédicaces. Week-End.url O4 - GS\Desktop: Windows Live Messenger.lnk . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe ~ Global Startup: Scanned in 00mn 00s ---\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{1A729A82-2841-4CBE-9895-89BADC9848FC}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CCS\Services\Tcpip\..\{6F3BEB23-464C-427B-8CB5-CD09B875044B}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CS1\Services\Tcpip\..\{1A729A82-2841-4CBE-9895-89BADC9848FC}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CS1\Services\Tcpip\..\{6F3BEB23-464C-427B-8CB5-CD09B875044B}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CS2\Services\Tcpip\..\{1A729A82-2841-4CBE-9895-89BADC9848FC}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CS2\Services\Tcpip\..\{6F3BEB23-464C-427B-8CB5-CD09B875044B}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.254 ~ Domain: Scanned in 00mn 00s ---\ Protocole additionnel (O18) O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll ~ Protocole Additionnel: Scanned in 00mn 00s ---\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll ~ Winlogon: Scanned in 00mn 00s ---\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\PC Optimizer Pro64 startups.job [428] =>PUP.OptimizerPro O39 - APT:Automatic Planified Task - C:\Windows\Tasks\PC Performer_UPDATES.job [298] =>Rogue.PCPerformer O39 - APT:Automatic Planified Task - C:\Windows\Tasks\RegClean Pro_DEFAULT.job [290] =>Rogue.RegistryPowerCleaner O39 - APT:Automatic Planified Task - C:\Windows\Tasks\RegClean Pro_UPDATES.job [298] =>Rogue.RegistryPowerCleaner [MD5.8FAACF0D634C999758A010F6D06D04BF] [APT] [Advanced System Protector] (.Systweak Inc.) -- C:\Program Files (x86)\RegClean Pro\SystweakASP.exe [610544] =>Rogue.RegistryPowerCleaner [MD5.C16EDEA635300AC0EE58E182A04D71B6] [APT] [Advanced System Protector_startup] (.Systweak.) -- C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe [6563184] =>PUP.AdvancedSystemProtector [MD5.00000000000000000000000000000000] [APT] [DealPlyUpdate] (...) -- C:\Program Files (x86)\DealPly\DealPlyUpdate.exe (.not file.) [0] =>PUP.DealPly [MD5.00000000000000000000000000000000] [APT] [PC Optimizer Pro64 startups] (...) -- C:\Program Files\PC Optimizer Pro\StartApps.exe (.not file.) [0] =>PUP.OptimizerPro [MD5.00000000000000000000000000000000] [APT] [PC Performer_UPDATES] (...) -- C:\Program Files (x86)\PC Performer\PCPerformer.exe (.not file.) [0] =>Rogue.PCPerformer [MD5.177EC6C4172F9B1731E6E7903A78186D] [APT] [RegClean Pro] (.Systweak Inc.) -- C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe [7853064] =>Rogue.RegistryPowerCleaner [MD5.177EC6C4172F9B1731E6E7903A78186D] [APT] [RegClean Pro_DEFAULT] (.Systweak Inc.) -- C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe [7853064] =>Rogue.RegistryPowerCleaner [MD5.177EC6C4172F9B1731E6E7903A78186D] [APT] [RegClean Pro_UPDATES] (.Systweak Inc.) -- C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe [7853064] =>Rogue.RegistryPowerCleaner [MD5.00000000000000000000000000000000] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files (x86)\Ask.com\UpdateTask.exe (.not file.) [0] =>Toolbar.Ask [MD5.86231ADE788EB80652B43AEE68C097C2] [APT] [{1D8997F9-E385-4D06-B526-F30BAD0FFEE5}] (.Nikk.) -- C:\Games\Counter-Strike Source un_css.exe [39424] [MD5.86231ADE788EB80652B43AEE68C097C2] [APT] [{3D7C9338-7401-4558-BD15-47F4431D5DBE}] (.Nikk.) -- C:\Games\Counter-Strike Source un_css.exe [39424] [MD5.00000000000000000000000000000000] [APT] [{4EE593B6-7429-41A4-9C0F-EFCFAA9BF659}] (...) -- C:\Users\Proprietaire\AppData\Roaming\BTLive\BTLive.exe (.not file.) [0] [MD5.86231ADE788EB80652B43AEE68C097C2] [APT] [{694EA1A3-C165-4FA5-933B-D220FDADD006}] (.Nikk.) -- C:\Games\Counter-Strike Source un_css.exe [39424] [MD5.00000000000000000000000000000000] [APT] [{7D4EEDF3-5E13-4F0E-A5FA-4894E3536F8F}] (...) -- C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.8.7.2\GUninstaller.exe (.not file.) [0] =>Toolbar.Babylon [MD5.86231ADE788EB80652B43AEE68C097C2] [APT] [{9FEA61B6-F0AC-4FFC-A361-429AA6FBD8EB}] (.Nikk.) -- C:\Games\Counter-Strike Source un_css.exe [39424] [MD5.86231ADE788EB80652B43AEE68C097C2] [APT] [{D4D3BC4B-C45F-4348-9C7D-8ED4D182778F}] (.Nikk.) -- C:\Games\Counter-Strike Source un_css.exe [39424] [MD5.86231ADE788EB80652B43AEE68C097C2] [APT] [{F3950750-4A5A-44D8-9499-233A210A6BC5}] (.Nikk.) -- C:\Games\Counter-Strike Source un_css.exe [39424] ~ Scheduled Task: 39 Legitimates Filtered in 00mn 08s ---\ Logiciels installés (O42) O42 - Logiciel: Advanced System Protector - (.Systweak Software.) [HKLM][64Bits] -- 00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1 =>PUP.AdvancedSystemProtector O42 - Logiciel: BrowseToSave - (...) [HKLM][64Bits] -- {C8E4AFCD-7340-477C-A597-3B6213078D3B} =>Adware.Browse2Save O42 - Logiciel: ContinueToSave 1.74 - (...) [HKLM][64Bits] -- SP_e14dcdfa =>PUP.Offerware O42 - Logiciel: FrameFox Extensions 1.0.2.0 - (.QwertyBox Team.) [HKLM][64Bits] -- {A1D62CC4-1453-4245-9C6E-E9E8EF0B620C} =>Toolbar.DeltaSearch O42 - Logiciel: Horizon v2.6.6.3 - (.Daring Development Inc..) [HKLM][64Bits] -- d4cfeebc-b821-40b7-9f81-d366b1466f03_is1 O42 - Logiciel: Lyrics Kid - (.MPYT Software.) [HKLM][64Bits] -- lyricskid@mpytsoft.net O42 - Logiciel: NetTools 5.0 - (.Mohammad Ahmadi Bidakhvidi.) [HKLM][64Bits] -- NetTools_is1 O42 - Logiciel: RegClean Pro - (.Systweak Inc.) [HKLM][64Bits] -- RegClean Pro_is1 =>Rogue.RegistryPowerCleaner O42 - Logiciel: Search Assistant WebSearch 1.74 - (...) [HKLM][64Bits] -- SP_4e24eecb O42 - Logiciel: Snap.Do Engine - (.ReSoft Ltd..) [HKCU][64Bits] -- {2a4ac257-642a-4804-b94b-80e28441992c} =>Hijacker.SmartBar ~ Logic: 118 Legitimates Filtered in 00mn 03s ---\ HKCU & HKLM Software Keys [HKCU\Software\AppDataLow\SProtector] =>PUP.Mocaflix [HKCU\Software\Blabbers ] =>PUP.Blabbers [HKCU\Software\Duuqu] =>Toolbar.DeltaSearch [HKLM\Software\Boxore] =>Adware.Boxore [HKLM\Software\Wow6432Node\Duuqu] =>Toolbar.DeltaSearch [HKLM\Software\Wow6432Node\SP Global] =>PUP.AdvancedSystemProtector [HKLM\Software\Wow6432Node\SProtector] =>PUP.Mocaflix ~ Key Software: 231 Legitimates Filtered in 00mn 03s ---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 02/06/2013 - 20:12:11 - [18,345] ----D C:\Program Files (x86)\Advanced System Protector =>PUP.AdvancedSystemProtector O43 - CFD: 10/04/2013 - 11:03:11 - [1,473] ----D C:\Program Files (x86)\BrowseToSave =>Adware.Browse2Save O43 - CFD: 02/06/2013 - 20:11:43 - [1,473] ----D C:\Program Files (x86)\ContinueToSave =>PUP.Offerware O43 - CFD: 10/05/2013 - 14:14:49 - [22,918] ----D C:\Program Files (x86)\Daring Development O43 - CFD: 02/06/2013 - 20:11:53 - [14,235] ----D C:\Program Files (x86)\RegClean Pro =>Rogue.RegistryPowerCleaner O43 - CFD: 02/06/2013 - 20:11:54 - [1,470] ----D C:\Program Files (x86)\WebSearch O43 - CFD: 02/06/2013 - 20:14:39 - [1,653] ----D C:\ProgramData\InstallMate O43 - CFD: 02/06/2013 - 20:14:38 - [0] ----D C:\ProgramData\StarApp O43 - CFD: 20/05/2013 - 11:07:19 - [0,000] ----D C:\Users\Proprietaire\AppData\Local\supt4pc_fr_36 ~ 179 Dossiers CLSID vides (CLSID Empty Folders) ~ Program Folder: 403 Legitimates Filtered in 00mn 34s ---\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.896CC7CEBCE7BADD6956A8EB10BFB7CC] - 03/06/2013 - 19:59:02 ---A- . (...) -- C:\UsbFix [Clean 2] PROPRIETAIRE-PC.txt [15814] O44 - LFC:[MD5.CB8572E790FCE09714143741C20E9934] - 02/06/2013 - 19:12:09 ---A- . (...) -- C:\Windows\SysNative\sasnative64.exe [16896] O44 - LFC:[MD5.CB8572E790FCE09714143741C20E9934] - 02/06/2013 - 19:12:09 RSHAD . (...) -- C:\Windows\System32\sasnative64.exe [16896] O44 - LFC:[MD5.8CF2B639F0324328B9902120198FF4AA] - 01/06/2013 - 16:15:24 ---A- . (...) -- C:\Windows\DeleteOnReboot.bat [97] O44 - LFC:[MD5.AF4150F0FA528EBEAF5686CE4DFAD385] - 01/06/2013 - 14:29:34 ---A- . (...) -- C:\Windows\SysNative\RaCoInst.log [8277] O44 - LFC:[MD5.AF4150F0FA528EBEAF5686CE4DFAD385] - 01/06/2013 - 14:29:34 RSHAD . (...) -- C:\Windows\System32\RaCoInst.log [8277] O44 - LFC:[MD5.1FF56AC32B38A94C3C88497BD6E00C96] - 29/05/2013 - 16:48:25 ---A- . (...) -- C:\Windows\SysNative\ieuinit.inf [25185] O44 - LFC:[MD5.1FF56AC32B38A94C3C88497BD6E00C96] - 29/05/2013 - 16:48:25 ---A- . (...) -- C:\Windows\System32\ieuinit.inf [25185] O44 - LFC:[MD5.A311AF088D80CB945714D44DEB92BF7A] - 26/05/2013 - 16:48:04 ---A- . (...) -- C:\Windows\setup.iss [306] O44 - LFC:[MD5.D419FA36E6CEA49BB4543471860034C4] - 23/05/2013 - 16:10:02 ----- . (...) -- C:\error.log [45] ~ Files: 230 Legitimates Filtered in 01mn 05s ---\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:[MD5.A54E09C92DEF8FF0F8D7F8833B4FA8AE] - 01/06/2013 - 09:21:32 ---A- - C:\Windows\Prefetch\BATTERYLIFE.EXE-72906C84.pf ~ Prefetcher: 103 Legitimates Filtered in 00mn 00s ---\ Microsoft Windows Policies System (O55) O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 ~ MWPS: 16 Legitimates Filtered in 00mn 00s ---\ Microsoft Windows Policies Explorer (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 ~ MWPE Keys: 7 Legitimates Filtered in 00mn 00s ---\ Liste des Drivers Système (O58) O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088] O58 - SDL:[MD5.F498C5C3399A60933196FC215EF074F9] - 04/04/2003 - 14:07:20 ---A- . (.Politecnico di Torino - NPF Driver - TME extensions.) -- C:\Windows\SysWOW64\drivers pf.sys [30336] O58 - SDL:[MD5.9131FE60ADFAB595C8DA53AD6A06AA31] - 30/12/2004 - 22:43:08 ----- . (.INCA Internet Co., Ltd. - nProtect NPSC Kernel Mode Driver for NT.) -- C:\Windows\SysWOW64 pptNT2.sys [4682] ~ Drivers: Scanned in 00mn 00s ---\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC: 02/06/2013 - 19:09:54 ---A- C:\Users\Proprietaire\Downloads\Amazon_Gift_Card_Generator_2013.rar.exe [310304] O61 - LFC: 02/06/2013 - 19:12:20 ---A- C:\Users\Proprietaire\AppData\Roaming\Systweak\Advanced System Protector\QDetail.db [4096] =>PUP.AdvancedSystemProtector O61 - LFC: 02/06/2013 - 19:19:57 ---A- C:\Users\Proprietaire\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\ExcludeList.rcp [6] =>Rogue.RegistryPowerCleaner O61 - LFC: 02/06/2013 - 19:19:57 ---A- C:\Users\Proprietaire\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\French_rcp.dat [50802] =>Rogue.RegistryPowerCleaner O61 - LFC: 02/06/2013 - 19:19:57 ---A- C:\Users\Proprietaire\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\TempHLList.rcp [6] =>Rogue.RegistryPowerCleaner O61 - LFC: 02/06/2013 - 19:19:57 ---A- C:\Users\Proprietaire\AppData\Roaming\Systweak\RegClean Pro\Version 6.1 esults.rcp [280664] =>Rogue.RegistryPowerCleaner O61 - LFC: 02/06/2013 - 19:22:56 ---A- C:\Users\Proprietaire\AppData\Roaming\Systweak\Advanced System Protector\Logs\log_02-06-13_08-22-54.xml [13520] =>PUP.AdvancedSystemProtector O61 - LFC: 02/06/2013 - 19:23:00 ---A- C:\Users\Proprietaire\AppData\Roaming\Systweak\Advanced System Protector\ASPStartupManagerErrorLog.txt [339] =>PUP.AdvancedSystemProtector O61 - LFC: 02/06/2013 - 19:23:15 ---A- C:\Users\Proprietaire\AppData\Roaming\Systweak\Advanced System Protector\Logs\SMLog.xml [14622] =>PUP.AdvancedSystemProtector O61 - LFC: 03/06/2013 - 19:47:21 ---A- C:\Users\Proprietaire\Downloads\UsbFix.exe [1047575] O61 - LFC: 04/06/2013 - 16:06:51 ---A- C:\Users\Proprietaire\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists [267487] O61 - LFC: 04/06/2013 - 17:53:06 ---A- C:\Users\Proprietaire\Downloads\Contest_LSDLS_Hypnotik.vcf [247] O61 - LFC: 05/06/2013 - 11:21:11 ---A- C:\Users\Proprietaire\AppData\Roaming\Systweak\Advanced System Protector\2.1.1000.10905\ASPLog.txt [5224] =>PUP.AdvancedSystemProtector O61 - LFC: 05/06/2013 - 11:21:35 ---A- C:\Users\Proprietaire\AppData\Roaming\Systweak\Advanced System Protector\Settings.db [12288] =>PUP.AdvancedSystemProtector O61 - LFC: 05/06/2013 - 12:09:06 ---A- C:\Users\Proprietaire\AppData\Local\Google\Chrome\User Data\Local State [34079] ~ 7 Fichiers temporaires (Temporary files) ~ Files: 127 Legitimates Filtered in 00mn 53s ---\ Liste des outils de nettoyage (O63) O63 - Logiciel: UsbFix By El Desaparecido - (.El Desaparecido - SosVirus.org.) [HKLM] -- Usbfix O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 ~ ADS: Scanned in 00mn 00s ---\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.) ~ FASS Keys: 19 Legitimates Filtered in 00mn 00s ---\ Start Menu Internet (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\ Search Browser Infection (O69) O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - https://www.bing.com/?fdr=lc&toHttps=1&redig=FA6AD360E0BE4C719380F8C470A3D3A8 O69 - SBI: SearchScopes [HKCU] {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} [DefaultScope] - (WebSearch) - http://websearch.a-searchpage.info ~ Keys: Scanned in 00mn 00s ---\ Crack & Keygen Files (O82) C:\Program Files (x86)\Net Tools\WepKeyGenerator.exe C:\Program Files (x86)\Net Tools\WepKeyGenerator.exe.manifest C:\Users\Proprietaire\Desktop\Nouveau dossier\UPDATE_Xbox_Generator_Gold_And_Mp_Points_FREE\Xbox Generator UPDATE\Xbox 360 Keygen - FreeCodesGenerator.com 2013.rar C:\Program Files (x86)\Net Tools\WepKeyGenerator.exe C:\Program Files (x86)\Net Tools\WepKeyGenerator.exe.manifest C:\Users\Proprietaire\Desktop\Nouveau dossier\UPDATE_Xbox_Generator_Gold_And_Mp_Points_FREE\Xbox Generator UPDATE\Xbox 360 Keygen - FreeCodesGenerator.com 2013.rar ~ Files: Scanned in 00mn 51s ---\ Recherche particuliere à la racine de certains dossiers (O84) [MD5.0D3B680986310AE5540578C0E481C6A0] [SPRF][06/10/2010] (...) -- C:\ProgramData\FullRemove.exe [131984] [MD5.8DF1A6C59ABA4B40FAEC90FCB264E447] [SPRF][26/01/2013] (.XboxMB - Horizon.) -- C:\Users\Proprietaire\Desktop\Horizon.exe [9611312] ~ Files: Scanned in 00mn 00s ---\ Firewall Active Exception List (FirewallRules) (O87) O87 - FAEL: "TCP Query User{B4BC6A80-B2F5-4699-AF39-8F88833A08CF}C:\program files (x86) et tools ettools5.exe" | In - Private - P6 - TRUE | .(.Mohammad Ahmadi Bidakhvidi.) -- C:\program files (x86) et tools ettools5.exe O87 - FAEL: "UDP Query User{EE424099-B570-44B1-BBB6-CAAF34AF015A}C:\program files (x86) et tools ettools5.exe" | In - Private - P17 - TRUE | .(.Mohammad Ahmadi Bidakhvidi.) -- C:\program files (x86) et tools ettools5.exe O87 - FAEL: "{619E8DA7-AD8B-4834-B0DD-A503835FD728}" |In - Private - P6 - TRUE | .(...) -- C:\Users\Proprietaire\AppData\Local\Temp\iTouch-Server-Win.exe (.not file.) O87 - FAEL: "{13D6241F-3740-4234-B7C1-1F74EEA5A8E5}" |In - Private - P17 - TRUE | .(...) -- C:\Users\Proprietaire\AppData\Local\Temp\iTouch-Server-Win.exe (.not file.) ~ Firewall: 208 Legitimates Filtered in 00mn 01s ---\ Scan Additionnel (O88) Database Version : v2.12368 - (01/06/2013) Clés trouvées (Keys found) : 23 Valeurs trouvées (Values found) : 0 Dossiers trouvés (Folders found) : 8 Fichiers trouvés (Files found) : 0 [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] =>Toolbar.Skype [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D6533F74-218B-41BE-9D91-5BD471FECFFD}] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Google\Chrome\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib] =>Toolbar.Conduit [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9] =>Adware.MyWebSearch [HKLM\Software\Boxore] =>Adware.Boxore [HKLM\Software\Wow6432Node\SP Global] =>PUP.AdvancedSystemProtector [HKCU\Software\AppDataLow\SProtector] =>PUP.AdvancedSystemProtector [HKLM\Software\Wow6432Node\SProtector] =>PUP.AdvancedSystemProtector [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>Toolbar.Agent [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>Toolbar.Agent [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2] =>Toolbar.Ask [HKLM\Software\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}] =>Adware.MagniPic [HKLM\Software\Wow6432Node\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}] =>Adware.MagniPic [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SP_f2a323db] =>Adware.Browse2Save [HKLM\Software\PC Optimizer Pro] =>Rogue.PCOptimizerPro [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A1D62CC4-1453-4245-9C6E-E9E8EF0B620C}] =>Toolbar.DeltaSearch C:\Program Files (x86)\BrowseToSave =>Adware.Browse2Save C:\Program Files (x86)\continuetosave =>PUP.Offerware C:\Program Files (x86)\WebSearch =>Adware.Browse2Save C:\Program Files (x86)\RegClean Pro =>Rogue.RegistryPowerCleaner C:\ProgramData\InstallMate =>Toolbar.Agent C:\ProgramData\PC Optimizer Pro =>Rogue.PCOptimizerPro C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Performer =>Rogue.PCPerformer C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro =>Rogue.RegistryPowerCleaner ~ Additionnel Scan: 260057 Items scanned in 00mn 23s ---\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SR - | Auto 18/12/2012 65192 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe SS - | Demand 15/05/2013 256904 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe SR - | Auto 26/05/2013 86752 | (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe SR - | Auto 26/05/2013 110816 | (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe SR - | Auto 26/05/2013 562744 | (AntiVirWebService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.exe SR - | Auto 21/12/2012 57008 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - | Auto 16/06/2009 84536 | (ASLDRService) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe SR - | Auto 15/12/2009 96896 | (ATKGFNEXSrv) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SS - | Demand 14/12/2012 277616 | (cphs) . (.Intel Corporation.) - C:\Windows\SysWow64\IntelCpHeciSvc.exe SR - | Auto 14/09/2009 166400 | (EPSON_EB_RPCV4_04) . (.SEIKO EPSON CORPORATION.) - C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.exe SR - | Auto 14/09/2009 128512 | (EPSON_PM_RPCV4_04) . (.SEIKO EPSON CORPORATION.) - C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.exe SS - | Auto 01/06/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 01/06/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SR - | Demand 20/02/2013 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 06/10/2010 325656 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe SS - | Demand 28/11/2007 800040 | (NBService) . (.Nero AG.) - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe SR - | Demand 27/06/2007 279848 | (NMIndexingService) . (.Nero AG.) - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe SS - | Demand ??\??\???? 0 | (npggsvc) . (.INCA Internet Co., Ltd..) - C:\Windows\system32\GameMon.des SR - | Auto 06/10/2010 2655768 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe ~ Services: Scanned in 00mn 02s ---\ Recherche Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net ~ MBR: 1 Legitimates Filtered in 00mn 02s ---\ Recherche Master Boot Record Infection (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by Proprietaire at 05/06/2013 13:12:25 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ MBR: Scanned in 00mn 04s ~ 1947 Legitimates filtered by white list End of the scan (576 lines in 05mn 26s)(6)

billmaxime · Answer

salut hugo

fais ceci s'il te plaît

lance zhpfix en tant qu'administrateur (clic droit) 

copie tout le texte depuis ce lien https://www.cjoint.com/c/CFfpbCqdZ6u

clique sur le 2ème bouton en haut a gauche (coller le presse papier) 

clic sur GO en bas de page et confirme par oui pour lancer le nettoyage des données 

le rapport s'affichera sur ton bureau et dans C:\zhpfix.txt 

poste le rapport via ce lien https://www.cjoint.com/ 
 
 @+

hugofouiny63! · Answer

Rapport de ZHPFix 2013.5.24.2 par Nicolas Coolman, Update du 24/05/2013
Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-08-06-2013-11-52-55.txt
Run by Proprietaire at 08/06/2013 11:52:54
High Elevated Privileges : OK
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Corbeille vidée

========== Logiciel(s) ==========
ABSENT Software Key: 00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1
ABSENT Software Key: {C8E4AFCD-7340-477C-A597-3B6213078D3B}
ABSENT Software Key: SP_e14dcdfa
ABSENT Software Key: {A1D62CC4-1453-4245-9C6E-E9E8EF0B620C}
ABSENT Software Key: RegClean Pro_is1
ABSENT Software Key: {2a4ac257-642a-4804-b94b-80e28441992c}

========== Clé(s) du Registre ==========
ABSENT Key: HKCU\Software\AppDataLow\SProtector
ABSENT Key: HKCU\Software\Blabbers 
ABSENT Key: HKCU\Software\Duuqu
ABSENT Key: HKLM\Software\Boxore
ABSENT Key: HKLM\Software\Wow6432Node\Duuqu
ABSENT Key: HKLM\Software\Wow6432Node\SP Global
ABSENT Key: HKLM\Software\Wow6432Node\SProtector
ABSENT SearchScopes :BI: SearchScopes [HKCU] ${searchCLSID}
ABSENT SearchScopes :{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D6533F74-218B-41BE-9D91-5BD471FECFFD}
ABSENT Key: HKLM\Software\Wow6432Node\Google\Chrome\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
ABSENT Key: HKLM\Software\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
ABSENT Key: HKLM\Software\Wow6432Node\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
ABSENT Key: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SP_f2a323db
ABSENT Key: HKLM\Software\PC Optimizer Pro
ABSENT Key: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A1D62CC4-1453-4245-9C6E-E9E8EF0B620C}

========== Valeur(s) du Registre ==========
ABSENT Valeur Standard Profile: FirewallRaz : 
ABSENT Valeur Domain Profile: FirewallRaz : 

========== Elément(s) de donnée du Registre ==========
REMPLACE Value NoActiveDesktopChanges :   Good (0) - Bad (1)

========== Dossier(s) ==========
Aucun dossiers CLSID Local utilisateur vide
SUPPRIME Temporaires Windows
SUPPRIME Flash Cookies

========== Fichier(s) ==========
ABSENT Folder/File: c:\program files (x86)\advanced system protector\advancedsystemprotector.exe
ABSENT File: c:\users\proprietaire\desktop\ search.lnk . (.google inc. - google chrome.) -- c:\program files (x86)\google\chrome\application\chrome.exe https://search.safefinder.com/?q= o4 - gs\desktop: nettoyez votre registre gratuitement!.lnk
ABSENT File: c:\windows	asks\pc optimizer pro64 startups.job
ABSENT File: c:\windows	asks\pc performer_updates.job
ABSENT File: c:\windows	asksegclean pro_default.job
ABSENT File: c:\windows	asksegclean pro_updates.job
ABSENT File: c:\users\proprietaire\appdataoaming\systweakegclean pro\version 6.1\excludelist.rcp
ABSENT File: c:\users\proprietaire\appdataoaming\systweakegclean pro\version 6.1\french_rcp.dat
ABSENT File: c:\users\proprietaire\appdataoaming\systweakegclean pro\version 6.1	emphllist.rcp
ABSENT File: c:\users\proprietaire\appdataoaming\systweakegclean pro\version 6.1esults.rcp
ABSENT File: c:\users\proprietaire\appdataoaming\systweak\advanced system protector\logs\log_02-06-13_08-22-54.xml
ABSENT File: c:\users\proprietaire\appdataoaming\systweak\advanced system protector\aspstartupmanagererrorlog.txt
ABSENT File: c:\users\proprietaire\appdataoaming\systweak\advanced system protector\logs\smlog.xml
ABSENT File: c:\users\proprietaire\appdataoaming\systweak\advanced system protector\2.1.1000.10905\asplog.txt
ABSENT File: c:\users\proprietaire\appdataoaming\systweak\advanced system protector\settings.db
ABSENT Folder/File: c:\users\proprietaire\desktop
ouveau dossier\update_xbox_generator_gold_and_mp_points_free\xbox generator update\xbox 360 keygen - freecodesgenerator.com 2013.rar
ABSENT Folder/File: c:\programdata\installmate
ABSENT Folder/File: c:\programdata\pc optimizer pro
ABSENT Folder/File: c:\programdata\microsoft\windows\start menu\programs\pc performer
ABSENT Folder/File: c:\programdata\microsoft\windows\start menu\programsegclean pro
SUPPRIME Temporaires Windows
SUPPRIME Flash Cookies

========== Tache planifiée ==========
ABSENT Task: Advanced System Protector
ABSENT Task: Advanced System Protector_startup
ABSENT Task: DealPlyUpdate
ABSENT Task: PC Optimizer Pro64 startups
ABSENT Task: PC Performer_UPDATES
ABSENT Task: RegClean Pro
ABSENT Task: RegClean Pro_DEFAULT
ABSENT Task: RegClean Pro_UPDATES
ABSENT Task: Scheduled Update for Ask Toolbar
ABSENT Task: {4EE593B6-7429-41A4-9C0F-EFCFAA9BF659}
ABSENT Task: {7D4EEDF3-5E13-4F0E-A5FA-4894E3536F8F}

========== Restauration Système ==========
Point de restauration du système créé avec succès


========== Récapitulatif ==========
28 : Clé(s) du Registre
2 : Valeur(s) du Registre
1 : Elément(s) de donnée du Registre
3 : Dossier(s)
22 : Fichier(s)
6 : Logiciel(s)
11 : Tache planifiée
1 : Restauration Système


End of clean in 00mn 33s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 05/06/2013 18:26:37 [27238]
C:\ZHP\ZHPFix[R2].txt - 08/06/2013 11:52:55 [6700]

billmaxime · Answer

salut hugo,

tu as fait 2 fois zhpfix, mais c'est ok

C:\ZHP\ZHPFix[R1].txt - 05/06/2013 18:26:37 [27238] 
C:\ZHP\ZHPFix[R2].txt - 08/06/2013 11:52:55 [6700]

dis moi comment va le pc?

@+

hugofouiny63! · Answer

bin ya plus les pub tres chiante donc je te remercie beaucoup :) mais il rame un peu

billmaxime · Answer

re hugo,

fais ceci s'il te plaît et coche bien les 2 cases

https://protuts.net/verifier-integrite-disque-dur-chkdsk/

@+

billmaxime · Answer

salut

tu n'as rien a télécharger

clique sur démarrer>ordinateur>clique droit sur C:\>propriété>outils>et dans la 1er

case "vérification des erreurs" clique sur "vérifier maintenant" et dans la fenêtre qui

s'ouvre coche les 2 cases et clique sur "démarrer"

laisse bosser le pc jusqu'au final

@+

billmaxime · Answer

re

qu'est-ce qui ne va pas?

@+

hugofouiny63! · Answer

le tuto quand je rentre les donner dans le truc sa me dit acces refuser

billmaxime · Answer

re

lis ceci, il n'y a pas de données a rentrer

https://forums.commentcamarche.net/forum/affich-27929930-aidez-moi-google-chrome?page=2#36

@+

hugofouiny63! · Answer

ha javais pas vue desoler merci je le ferais demain

billmaxime · Answer

re

ok, dis moi si tu vois 1 différence après la manipulation

@+

hugofouiny63! · Answer

oui il rame un peu moin merci beacoup

billmaxime · Answer

salut hugo,

refais moi 1 zhpdiag en cliquant sur la loupe avec le + et poste le rapport via ce lien

https://www.cjoint.com/

ps: accepte la mise a jour de zhpdiag et installe la

merci 

@+

hugofouiny63! · Answer

http://cjoint.com/data/0FpnRqE2pVE.htm

billmaxime · Answer

salut hugo,

fais ceci s'il te plaît

lance zhpfix en tant qu'administrateur (clic droit) 

copie tout le texte depuis ce lien https://www.cjoint.com/?CFppascn9oj

clique sur le 2ème bouton en haut a gauche (coller le presse papier) 

clic sur GO en bas de page et confirme par oui pour lancer le nettoyage des données 

le rapport s'affichera sur ton bureau et dans C:\zhpfix.txt 

poste le rapport via ce lien https://www.cjoint.com/ 

@+

hugofouiny63! · Answer

https://www.cjoint.com/?0FrlHkvcfj8 voila :)

billmaxime · Answer

salut hugo,

dis moi comment va le pc maintenant

@+

hugofouiny63! · Answer

il va assez bien merci beaucoup

billmaxime · Answer

salut hugo

fais encore ceci pour désinstaller les outils de désinfection

télécharge delfix sur ton bureau

le lien http://general-changelog-team.fr/fr/downloads/viewdownload/20-outils-de-xplode/9-delfix

exécute le en tant qu'administrateur (clic droit)

vérifie que toutes les cases soient cochées:5

clique sur exécuter

le rapport s'affichera sur ton bureau et dans C:\delfix.txt

poste le rapport via 1 copier/coller

@+

hugofouiny63! · Answer

# DelFix v10.3 - Rapport créé le 18/06/2013 à 12:27:52
# Mis à jour le 08/06/2013 par Xplode
# Nom d'utilisateur : Proprietaire - PROPRIETAIRE-PC
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)

~ Activation de l'UAC ... OK

~ Suppression des outils de désinfection ...

Supprimé : C:\USBFix
Supprimé : C:\ZHP
Supprimé : C:\Program Files (x86)\ZHPDiag
Supprimé : C:\PhysicalDisk0_MBR.bin
Supprimé : C:\UsbFix [Clean 2] PROPRIETAIRE-PC.txt
Supprimé : C:\Users\Proprietaire\Desktop\ZHPDiag.txt
Supprimé : C:\Users\Proprietaire\Desktop\ZHPFixReport.txt
Supprimé : C:\Users\Public\Desktop\MBRCheck.lnk
Supprimé : C:\Users\Public\Desktop\ZHPDiag.lnk
Supprimé : C:\Users\Public\Desktop\ZHPFix.lnk
Supprimé : C:\Users\Proprietaire\Downloads\Extras.Txt
Supprimé : C:\Users\Proprietaire\Downloads\OTL.Txt
Supprimé : C:\Users\Proprietaire\Downloads\OTL.exe
Supprimé : C:\Users\Proprietaire\Downloads\UsbFix.exe
Supprimé : C:\Users\Proprietaire\Downloads\ZHPDiag2.exe
Supprimé : C:\Users\Proprietaire\Downloads\ZHPFix.exe
Supprimée : HKCU\Software\USBFix
Supprimée : HKLM\SOFTWARE\OldTimer Tools
Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\USBFix
Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1

~ Sauvegarde de la base de registre ... OK

~ Purge de la restauration système ...

Supprimé : RP #237 [Windows Update | 06/16/2013 10:14:01]
Supprimé : RP #238 [P | 06/16/2013 10:24:24]
Supprimé : RP #239 [P | 06/16/2013 10:34:30]
Supprimé : RP #240 [P | 06/16/2013 10:47:17]
Supprimé : RP #241 [P | 06/17/2013 09:30:37]

Nouveau point de restauration créé !

~ Réinitialisation des paramètres système ... OK

########## - EOF - ##########

billmaxime · Answer

re

c'est ok, et si tu n'as plus de soucis tu peux mettre ton topic en résolu

https://www.commentcamarche.net/infos/25917-marquer-un-fil-de-discussion-comme-etant-resolu/

@+

hugofouiny63! · Answer

juste une derniere question tu saurais comment faire pour qu un pc chauffe moin ?

billmaxime · Answer

re

c'est 1 portable où 1 fixe (tour)

@+

hugofouiny63! · Answer

un portable

billmaxime · Answer

re

ok, dans le commerce il se vend des ventilateurs qui se mettent sous le pc et se

branche en usb (le mien a coûté 20 euros)

@+

hugofouiny63! · Answer

daccord merci mon pc marche super bien !

billmaxime · Answer

re

de rien, et si tu n'as plus de soucis tu peux mettre ton topic en résolu

https://www.commentcamarche.net/infos/25917-marquer-un-fil-de-discussion-comme-etant-resolu/

@+

Aidez moi google chrome - Page 3

Newsletters