Virus

Résolu
titicrominet -  
Bonjour, cher internaute

Pouvez-vous m'aider parce que a chaque démarrage de mon ordinateur portable il y a un vpn qui s'ouvre et c'est spot flux et je ne sais pas le viré de mon pc??
Comment faire svp??
Merci d'avance pour votre aide..
Marc

56 réponses

Résumé de la discussion

Le démarrage automatique d'un VPN, Spotflux, survient à chaque démarrage de l'ordinateur et nécessite une intervention pour en retirer les composants afin d'éviter les connexions indésirables. Plusieurs solutions proposées mettent en avant la suppression du pilote réseau Spotflux via le Centre Réseau et partage et les paramètres de l'adaptateur, puis l'option de désinstallation et la suppression du pilote. D'autres interventions recommandent des outils de détection et de nettoyage tels que RogueKiller, USBFix, ZHPFix, et des analyses antivirus comme Malwarebytes, afin d'éliminer les composants malveillants et les entrées de démarrage. En dernier recours, certains évoquent le démarrage en mode sans échec et des procédures de suppression plus poussées, sans conclure sur l'état final du système ni sur une solution universelle.

Bobot (l’IA à votre service)
  1. Fish66 Contributeur sécurité
    Bonsoir,
    * Télécharge puis enregistre sur le bureau de ton PC ZHPDiag

    (de Nicolas Coolman) à partir : ce lien

    * Lance-le, (Clic droit "exécuter en tant qu'administrateur" si tu es sous Vista/7)

    * Clique sur l'icône en forme de loupe pour lancer le diagnostique

    * Héberge le rapport ZHPDiag.txt de ton bureau sur : FEC Upload ou malekal.com

    * Fais copier/coller le lien fourni dans ta prochaine réponse

    * Aide ZHPDiag : <<< ICI >>>

    2. Fish66 Contributeur sécurité
      Bonjour,
      1/
      Télécharge AdwCleaner (merci à Xplode)

      Lance AdwCleaner

      Clique sur le bouton [ Suppression ]

      Patiente...

      Poste le rapport qui apparait en fin de recherche.

      (Le rapport est sauvegardé aussi sous C:\ AdwCleaner[SX].Txt)

      2/
      * Telecharge et install link officiel : >>>USBFix ICI<<<

      ou : >>> ICI <<<

      (!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir

      * Double clique sur le raccourci UsbFix sur ton Bureau (clique droit avec la souris

      :exécuter en tant qu'administrateur pour vista/seven), l'installation se fera

      automatiquement

      * Clique sur "Recherche"

      * Laisse travailler l'outil

      * A la fin, le rapport va s'afficher : poste le dans ta prochaine réponse (il est aussi sauvegardé a la racine du disque dur : C:\UsbFix.txt )

      @+
      1. titicrominet Auteur
        merci voici
        # AdwCleaner v2.303 - Rapport créé le 30/06/2013 à 13:30:48
        # Mis à jour le 08/06/2013 par Xplode
        # Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
        # Nom d'utilisateur : marc - MARC-PC
        # Mode de démarrage : Normal
        # Exécuté depuis : C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FDN46FVN\adwcleaner.exe
        # Option [Suppression]

        ***** [Services] *****

        Arrêté & Supprimé : desksvc
        Arrêté & Supprimé : eSafeSvc

        ***** [Fichiers / Dossiers] *****

        Dossier Supprimé : C:\Program Files (x86)\Common Files\337
        Dossier Supprimé : C:\ProgramData\BrowserProtect
        Dossier Supprimé : C:\ProgramData\eSafe
        Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Desk 365
        Dossier Supprimé : C:\Users\marc\AppData\Local\Temp\Desk365
        Dossier Supprimé : C:\Users\marc\AppData\Roaming\Desk 365
        Dossier Supprimé : C:\Users\marc\AppData\Roaming\eIntaller
        Fichier Désinfecté : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
        Fichier Désinfecté : C:\Users\marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
        Fichier Désinfecté : C:\Users\marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
        Fichier Désinfecté : C:\Users\marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk
        Fichier Désinfecté : C:\Users\marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
        Fichier Désinfecté : C:\Users\marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
        Fichier Désinfecté : C:\Users\marc\Desktop\Internet Explorer (64-bit) (2).lnk
        Fichier Désinfecté : C:\Users\Public\Desktop\Google Chrome.lnk
        Supprimé au redémarrage : C:\Program Files (x86)\Desk 365

        ***** [Registre] *****

        Clé Supprimée : HKCU\Software\InstallCore
        Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C510DFFB-0AFE-484C-BA40-CED5B74C4EEF}
        Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DFF9B2DA-EF99-4B26-83CB-7058299999D8}
        Clé Supprimée : HKLM\Software\Conduit
        Clé Supprimée : HKLM\Software\Desksvc
        Clé Supprimée : HKLM\Software\eSafeSecControl
        Clé Supprimée : HKLM\Software\qvo6Software
        Clé Supprimée : HKLM\Software\V9
        Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
        Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Desk 365
        Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\eSafeSecControl
        Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
        Donnée Supprimée : HKLM\...\StartMenuInternet\Google Chrome [(Default)] = "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD5000BPVT-24HXZT3_WD-WXM1A91V2657V2657&ts=1372577727
        Donnée Supprimée : HKLM\...\StartMenuInternet\IEXPLORE.EXE [(Default)] = C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD5000BPVT-24HXZT3_WD-WXM1A91V2657V2657&ts=1372577727
        Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Desk 365]

        ***** [Navigateurs] *****

        -\\ Internet Explorer v10.0.9200.16611

        Remplacé : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Default_Page_URL] = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD5000BPVT-24HXZT3_WD-WXM1A91V2657V2657&ts=1372577727 --> hxxp://www.google.com
        Remplacé : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD5000BPVT-24HXZT3_WD-WXM1A91V2657V2657&ts=1372577727 --> hxxp://www.google.com
        Remplacé : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Default_Page_URL] = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD5000BPVT-24HXZT3_WD-WXM1A91V2657V2657&ts=1372577727 --> hxxp://www.google.com
        Remplacé : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD5000BPVT-24HXZT3_WD-WXM1A91V2657V2657&ts=1372577727 --> hxxp://www.google.com

        -\\ Google Chrome v27.0.1453.116

        Fichier : C:\Users\marc\AppData\Local\Google\Chrome\User Data\Default\Preferences

        [OK] Le fichier ne contient aucune entrée illégitime.

        *************************

        AdwCleaner[S1].txt - [6436 octets] - [16/06/2013 18:55:29]
        AdwCleaner[S2].txt - [4673 octets] - [30/06/2013 13:30:48]

        ########## EOF - C:\AdwCleaner[S2].txt - [4733 octets] ##########
        1. Fish66 Contributeur sécurité
          Bonsoir,
          Il manque le rapport USBFix! :-)

          A demain

          Bonne nuit
      3. titicrominet Auteur
        bonjour, Fish 66
        Voici
        ############################## | UsbFix V 7.129 | [Recherche]

        Utilisateur: marc (Administrateur) # MARC-PC
        Mis à jour le 24/06/2013 par El Desaparecido
        Lancé à 18:55:59 | 01/07/2013

        Site Web: https://www.sosvirus.net/
        Upload Malware: http://www.sosvirus.net/upload-malware-pour-analyse-t489.html
        Contact: contact@sosvirus.net

        PC: ASUSTeK Computer Inc. (K53SV) (x64-based PC)
        CPU: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz (2301)
        RAM -> [Total : 8104 | Free : 5893]
        BIOS: BIOS Date: 07/14/11 18:12:11 Ver: 04.06.03
        BOOT: Normal boot

        OS: Microsoft Windows 7 Édition Familiale Premium (6.1.7601 64-Bit) # Service Pack 1
        WB: Windows Internet Explorer 10.0.9200.16618

        SC: Security Center Service [Enabled]
        WU: Windows Update Service [Enabled]
        AV: Microsoft Security Essentials [Enabled | Updated]
        FW: Windows FireWall Service [Enabled]

        C:\ (%systemdrive%) -> Disque fixe # 466 Go (282 Go libre(s) - 60%) [] # NTFS
        D:\ -> CD-ROM
        E:\ -> CD-ROM
        F:\ -> CD-ROM

        ################## | Processus Actif |

        C:\Windows\system32\csrss.exe (496)
        C:\Windows\system32\wininit.exe (616)
        C:\Windows\system32\csrss.exe (640)
        C:\Windows\system32\services.exe (684)
        C:\Windows\system32\lsass.exe (708)
        C:\Windows\system32\lsm.exe (716)
        C:\Windows\system32\winlogon.exe (776)
        C:\Windows\system32\svchost.exe (860)
        C:\Windows\system32\svchost.exe (944)
        c:\Program Files\Microsoft Security Client\MsMpEng.exe (284)
        C:\Windows\System32\svchost.exe (548)
        C:\Windows\System32\svchost.exe (348)
        C:\Windows\system32\svchost.exe (564)
        C:\Windows\system32\svchost.exe (1040)
        C:\Windows\system32\svchost.exe (1224)
        C:\Windows\System32\spoolsv.exe (1404)
        C:\Windows\system32\svchost.exe (1512)
        C:\Windows\system32\svchost.exe (1544)
        C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1644)
        C:\Windows\system32\taskhost.exe (1948)
        C:\Program Files\Intel\iCLS Client\HeciServer.exe (2024)
        C:\Program Files\ma-config.com\MaConfigAgent.exe (1148)
        C:\Windows\system32\Dwm.exe (1216)
        C:\Windows\system32\taskeng.exe (1540)
        C:\Windows\system32\taskeng.exe (1504)
        C:\Windows\system32\taskeng.exe (808)
        C:\Windows\Explorer.EXE (1764)
        C:\Program Files\P4G\BatteryLife.exe (1984)
        C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe (1728)
        C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (1420)
        C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe (1340)
        C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (2052)
        C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (2200)
        C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (2312)
        C:\Windows\SysWOW64\PnkBstrA.exe (2352)
        C:\Windows\SysWOW64\PnkBstrB.exe (2376)
        C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (2424)
        C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (2436)
        C:\Windows\SysWOW64\ACEngSvr.exe (2796)
        C:\Program Files\Microsoft Security Client\msseces.exe (2852)
        C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (2864)
        C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (2936)
        C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe (2144)
        C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (2624)
        C:\Windows\system32\svchost.exe (3528)
        C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (3596)
        C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (3948)
        C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (4056)
        C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (3760)
        c:\Program Files\Microsoft Security Client\NisSrv.exe (3644)
        C:\Windows\system32\svchost.exe (3796)
        C:\Windows\system32\svchost.exe (3408)
        C:\Program Files\Windows Media Player\wmpnetwk.exe (3564)
        C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (4608)
        C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (492)
        C:\Windows\system32\wbem\wmiprvse.exe (4972)
        C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (4340)
        C:\Windows\system32\svchost.exe (3508)
        C:\Program Files\Internet Explorer\iexplore.exe (792)
        C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE (4656)
        C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe (1652)
        C:\Windows\system32\Macromed\Flash\FlashUtil64_11_7_700_224_ActiveX.exe (4216)
        C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE (2980)
        C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE (3664)
        C:\UsbFix\Go.exe (4388)
        C:\Windows\system32\DllHost.exe (3348)

        ################## | El Desaparecido Section |

        HKLM\SOFTWARE | Run : [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
        HKLM\SOFTWARE | Run : [VirtualCloneDrive] - "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
        HKLM\SOFTWARE\wow6432Node | Run : [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
        HKLM\SOFTWARE\wow6432Node | Run : [VirtualCloneDrive] - "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
        HKLM\SOFTWARE | RunOnce : [] -
        HKLM\SOFTWARE\wow6432Node | RunOnce : [] -
        HKU\S-1-5-19\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
        HKU\S-1-5-20\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
        HKU\S-1-5-21-882527398-2222475609-3722137400-1001\SOFTWARE | Run : [swg] - "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
        HKU\S-1-5-19\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe
        HKU\S-1-5-20\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe

        ################## | Éléments infectieux |

        ################## | Registre |

        ################## | Mountpoints2 |

        HKCU\.\.\.\.\Explorer\MountPoints2\{010d1dc6-a4c7-11e2-a7b6-742f6836cecd}
        Shell\AutoRun\Command = F:\iLinker.exe

        HKCU\.\.\.\.\Explorer\MountPoints2\{15682d7a-c11f-11e2-b2d6-806e6f6e6963}
        Shell\AutoRun\Command = D:\Setup.exe

        ################## | Vaccin |

        C:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)

        ################## | E.O.F | https://www.sosvirus.net/ |
        1. Fish66 Contributeur sécurité
          Bonsoir,
          Lance ZHPDiag depuis le bureau,ensuite coche tout au tournevis (aide ici) puis lance l'analyse, ferme le et héberge le rapport. colle le lien dans ta prochaine réponse
          1. titicrominet Auteur
            bonsoir,

            voici problème pour poster
            Rapport de ZHPDiag v2013.7.3.4 par Nicolas Coolman, Update du 3/07/2013
            Run by marc at 4/07/2013 19:36:53
            WebSite: https://nicolascoolman.webs.com/
            State : Version à jour.
            WhiteList : Enable
            High Elevated Privileges : OK
            UAC : Activate by user

            ---\\ Web Browser
            MSIE: Internet Explorer v10.0.9200.16618 (Defaut)
            GCIE: Google Chrome v27.0.1453.116

            ---\\ Windows Product Information
            ~ Langage: Français
            Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
            Windows Server License Manager Script : OK
            ~ Windows(R) 7, OEM_COA_NSLP channel
            Windows ID Activation : OK
            ~ Windows Partial Key : KR7H8
            Windows License : OK
            ~ Windows Remaining Initializations Number : 1
            Software Protection Service (Protection logicielle) : OK
            Windows Automatic Updates : OK
            Windows Activation Technologies : OK

            ---\\ System Protection
            Malwarebytes Anti-Malware version 1.75.0.1300
            Microsoft Security Client FR-FR Language Pack v2.1.1116.0
            Windows Defender W7

            ---\\ System Optimizer
            CCleaner v4.02 =>Piriform Ltd

            ---\\ Peer To Peer (P2P)
            µTorrent v3.3.0.29677 =>P2P.µTorrent

            ---\\ Software Update
            Adobe Flash Player 11 ActiveX
            Adobe Reader X
            Java 7 Update 21
            Java 7 Update 21

            ---\\ System Information
            ~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
            ~ Operating System: 64 Bits
            Boot mode: Normal (Normal boot)
            Total RAM: 8103 MB (75% free)
            System Restore: Activé (Enable)
            System drive C: has 282 GB (60%) free of 466 GB

            ---\\ Logged in mode
            ~ Computer Name: MARC-PC
            ~ User Name: marc
            ~ All Users Names: UpdatusUser, marc, Administrateur,
            ~ Unselected Option: None
            Logged in as Administrator

            ---\\ Environnement Variables
            ~ System Unit : C:\
            ~ %AppData% : C:\Users\marc\AppData\Roaming\
            ~ %Desktop% : C:\Users\marc\Desktop\
            ~ %Favorites% : C:\Users\marc\Favorites\
            ~ %LocalAppData% : C:\Users\marc\AppData\Local\
            ~ %StartMenu% : C:\Users\marc\AppData\Roaming\Microsoft\Windows\Start Menu\
            ~ %Windir% : C:\Windows\
            ~ %System% : C:\Windows\System32\

            ---\\ DOS/Devices
            C:\ Hard drive, Flash drive, Thumb drive (Free 282 Go of 466 Go)
            D:\ CD-ROM drive (Not Inserted)
            E:\ CD-ROM drive (Not Inserted)
            F:\ CD-ROM drive (Not Inserted)
            Q:\ Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go)

            ---\\ Security Center & Tools Informations
            [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
            ~ Security Center: 34 Legitimates Filtered in 00mn 00s

            ---\\ Recherche particulière de fichiers génériques
            [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
            [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
            [MD5.12716D987D475B051F35895659159705] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.17/05/2013 - 01:59:03.) -- C:\Windows\System32\wininet.dll [2241024]
            [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.20/11/2010 - 05:25:32.) -- C:\Windows\System32\Winlogon.exe [390656]
            [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 05:27:28.) -- C:\Windows\System32\sppcomapi.dll [232448]
            [MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
            [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
            [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
            [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 01:19:22.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
            [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 01:26:34.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
            [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 02:43:44.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
            [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
            [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
            [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
            [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 01:23:22.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
            [MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 15:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680]
            [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
            [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 02:52:36.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
            [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
            [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 01:21:58.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
            [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 05:34:04.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
            ~ Generic Processes: Scanned in 00mn 00s

            ---\\ Etat des fichiers cachés (Caché/Total)
            ~ Mes images (My Pictures) : 1/799
            ~ Mes musiques (My Musics) : 1/7
            ~ Mes Videos (My Videos) : 1/6
            ~ Mes Favoris (My Favorites) : 1/49
            ~ Mes Documents (My Documents) : 1/145
            ~ Mon Bureau (My Desktop) : 1/154455
            ~ Menu demarrer (Programs) : 1/40
            ~ Hidden Files: Scanned in 00mn 52s

            ---\\ Processus lancés
            [MD5.D1D5DAB39DCB4BE0359943738D87409B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [532040] [PID.2180]
            [MD5.DE3B04D5AF8A1578F5430697546EB157] - (.ASUSTeK Computer Inc. - LiveUpdate.) -- C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [1545856] [PID.2872]
            [MD5.5BB1F77C8AF725A15EC9366498D275BB] - (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992] [PID.2264]
            [MD5.BC3DA234CDA880578526DAB028F40268] - (.ASUS - SmartLogon Application.) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [305792] [PID.2360]
            [MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408] [PID.3436]
            [MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816] [PID.3328]
            [MD5.3BD79A1F6D2EA0FDDEA3F8914B2A6A0C] - (.Elaborate Bytes AG - Virtual CloneDrive Daemon.) -- C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984] [PID.3792]
            [MD5.07DFD28E57879554D054464EE4A5662D] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\IEXPLORE.exe [770648] [PID.4936]
            [MD5.10B01048B1DA075CD1EE27E30B4CF342] - (.Google Inc. - Google Toolbar Broker.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe [308816] [PID.5060]
            [MD5.94753463EE96A4B975FCFC3D0E098945] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [7646208] [PID.4796]
            [MD5.ADDA5E1951B90D3D23C56D3CF0622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65640] [PID.1724]
            [MD5.65085456FD9A74D7F1A999520C299ECB] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376] [PID.2032]
            [MD5.E0D7732F2D2E24B2DB3F67B6750295B8] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512] [PID.1168]
            [MD5.831883B107684301F48ACE752C963984] - (...) -- C:\Windows\SysWOW64\PnkBstrA.exe [66872] [PID.1484]
            [MD5.E24106A5EAECDDFF00B25497049DD65F] - (...) -- C:\Windows\SysWOW64\PnkBstrB.exe [107832] [PID.1752]
            [MD5.C3CDDD18F43D44AB713CF8C4916F7696] - (.Microsoft Corporation - Microsoft Application Virtualization Virtua.) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [219496] [PID.2916]
            [MD5.13693B6354DD6E72DC5131DA7D764B90] - (.Microsoft Corporation - Microsoft Application Virtualization Client.) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [508776] [PID.3672]
            [MD5.72794D112CBAFF3BC0C29BF7350D4741] - (.Microsoft Corporation - Microsoft Office Client Virtualization Serv.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.exe [822624] [PID.3480]
            [MD5.7281AED93FB30FDD1CBAF07591FA453A] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344] [PID.3264]
            [MD5.3EA307C51069BC72DD74A4964F2A30A9] - (.Intel Corporation - Intel(R) Local Management Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [366552] [PID.2712]
            ~ Processes Running: Scanned in 00mn 00s

            ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
            C:\Users\marc\AppData\Local\Google\Chrome\User Data\Default\Preferences
            G1 - GCS: Preference [User Data\Default] http://search.qvo6.com =>Hijacker.Qvo6
            G0 - GCSP: Preference [User Data\Default][HomePage] http://www.qvo6.com =>Hijacker.Qvo6
            G0 - GCSP: Preference [User Data\Default] http://www.qvo6.com =>Hijacker.Qvo6
            ~ Google Browser: 8 Legitimates Filtered in 00mn 05s

            ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
            R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com =>Hijacker.Qvo6
            ~ IE Browser: 17 Legitimates Filtered in 00mn 00s

            ---\\ Internet Explorer, Proxy Management (R5)
            R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
            R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
            R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
            R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
            R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
            R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
            ~ Proxy management: Scanned in 00mn 00s

            ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
            F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
            F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
            F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
            ~ Keys: Scanned in 00mn 00s

            ---\\ Redirection du fichier Hosts (O1)
            ~ Le fichier hosts est sain (The hosts file is clean).
            ~ Hosts File: Scanned in 00mn 00s
            ~ Nombre de lignes (Lines number): 21

            ---\\ Internet Explorer Toolbars (O3)
            O3 - Toolbar: Google Toolbar [64Bits] - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
            ~ Toolbar: Scanned in 00mn 00s

            ---\\ Applications démarrées par registre & par dossier (O4)
            O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe
            O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
            O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
            O4 - HKLM\..\Wow6432Node\Run: [VirtualCloneDrive] . (.Elaborate Bytes AG - Virtual CloneDrive Daemon.) -- C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
            O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
            O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
            O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
            O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
            O4 - HKUS\S-1-5-21-882527398-2222475609-3722137400-1001\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
            ~ Application: Scanned in 00mn 00s

            ---\\ Autres liens utilisateurs (O4)
            O4 - GS\QuickLaunch: MiPony.lnk . (.www.mipony.net - Mipony.) -- C:\Program Files (x86)\MiPony\MiPony.exe
            O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.) -- C:\Windows\system32\eudcedit.exe
            O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) -- C:\Windows\system32\WFS.exe
            O4 - GS\Desktop: Microsoft Office 2010.lnk . (...) -- C:\Windows\Installer\{95140000-0070-0000-0000-0000000FF1CE}\oobeicon.exe
            O4 - GS\Desktop: MiPony.lnk . (.www.mipony.net - Mipony.) -- C:\Program Files (x86)\MiPony\MiPony.exe
            O4 - GS\Desktop: Windows Live Family Safety.lnk . (...) -- C:\Windows\Installer\{46A5FBE9-ADB3-4493-A1CC-B4CFFD24D26A}\fssicon.ico (.not file.)
            O4 - GS\Desktop: Windows Live Mail.lnk . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
            O4 - GS\Desktop: Windows Live Mesh.lnk . (.Microsoft Corporation - Windows Live Mesh.) -- C:\Program Files (x86)\Windows Live\Mesh\WLSync.exe
            O4 - GS\Desktop: Windows Live Messenger.lnk . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
            O4 - GS\Desktop: Windows Live Movie Maker.lnk . (.Microsoft Corporation - Windows Live Movie Maker.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe
            O4 - GS\Desktop: Windows Live Writer.lnk . (.Microsoft Corp. - Windows Live Writer.) -- C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriter.exe
            O4 - GS\TaskBar: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
            O4 - GS\TaskBar: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe
            O4 - GS\TaskBar: Windows Live Mail.lnk . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
            O4 - GS\TaskBar: Windows Live Messenger.lnk . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
            O4 - GS\TaskBar: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
            O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
            O4 - GS\Programs: Voobys!.lnk . (...) -- C:\Users\marc\AppData\Roaming\Microsoft\Installer\{24EF2EDA-1224-4D3C-9C67-B45AF0C1D056}\_E40D707125391403EA87D4.exe
            O4 - GS\QuickLaunch: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
            O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
            O4 - GS\QuickLaunch: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\marc\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.µTorrent
            O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
            O4 - GS\SendTo: Desk 365.lnk . (...) -- C:\Program Files (x86)\Desk 365\desk365.exe (.not file.) =>Hijacker.22Find
            O4 - GS\SendTo: Format Factory.lnk . (.Free Time - FormatFactory.) -- C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe
            O4 - GS\SendTo: Skype.lnk . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
            O4 - GS\Desktop: 7-Zip File Manager.lnk . (.Igor Pavlov - 7-Zip File Manager.) -- C:\Program Files (x86)\7-Zip\7zFM.exe
            O4 - GS\Desktop: Alcatraz.lnk . (...) -- C:\Program Files (x86)\City Interactive\Alcatraz\Alcatraz.exe
            O4 - GS\Desktop: Documents - Raccourci.lnk . (...) -- C:\Users\marc\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms
            O4 - GS\Desktop: FarCry2 - Raccourci.lnk . (.Ubisoft Entertainment - Far Cry® 2.) -- C:\Program Files (x86)\Ubisoft\Far Cry 2\bin\FarCry2.exe
            O4 - GS\Desktop: Format Factory.lnk . (.Free Time - FormatFactory.) -- C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe
            O4 - GS\Desktop: Internet Explorer (64-bit) (2).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
            O4 - GS\Desktop: Medal of honor.lnk . (.Electronic Arts Inc. - Medal of Honor(TM).) -- C:\Program Files (x86)\Electronic Arts\Medal of Honor\Binaries\moh.exe
            O4 - GS\Desktop: VirtualDJ PRO Full.lnk . (.Atomix Productions - VirtualDJ.) -- C:\Program Files (x86)\VirtualDJ\virtualdj_pro.exe
            ~ Global Startup: Scanned in 00mn 00s

            ---\\ Modification Domaine/Adresses DNS (O17)
            O17 - HKLM\System\CCS\Services\Tcpip\..\{BE8651DF-F4D0-48A2-AD35-5FE77E475229}: DhcpNameServer = 62.197.111.140 109.88.203.3
            O17 - HKLM\System\CCS\Services\Tcpip\..\{BE8651DF-F4D0-48A2-AD35-5FE77E475229}: DhcpDomain = teledisnet.be
            O17 - HKLM\System\CS1\Services\Tcpip\..\{BE8651DF-F4D0-48A2-AD35-5FE77E475229}: DhcpNameServer = 62.197.111.140 109.88.203.3
            O17 - HKLM\System\CS1\Services\Tcpip\..\{BE8651DF-F4D0-48A2-AD35-5FE77E475229}: DhcpDomain = teledisnet.be
            O17 - HKLM\System\CS2\Services\Tcpip\..\{9208673C-7AAF-4A20-B080-B0D62AE36C5B}: DhcpNameServer = 44.0.0.253 44.0.0.3 44.0.0.4 8.8.8.8
            O17 - HKLM\System\CS2\Services\Tcpip\..\{BE8651DF-F4D0-48A2-AD35-5FE77E475229}: DhcpNameServer = 62.197.111.140 109.88.203.3
            O17 - HKLM\System\CS2\Services\Tcpip\..\{BE8651DF-F4D0-48A2-AD35-5FE77E475229}: DhcpDomain = teledisnet.be
            O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.197.111.140 109.88.203.3
            ~ Domain: Scanned in 00mn 00s

            ---\\ Protocole additionnel (O18)
            O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
            O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
            ~ Protocole Additionnel: Scanned in 00mn 00s

            ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
            O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
            ~ Winlogon: Scanned in 00mn 00s

            ---\\ Liste des services NT non Microsoft et non désactivés (O23)
            O23 - Service: Intel(R) Management and Security Applica (LMS) . (.Intel Corporation - Intel(R) Local Management Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
            O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
            ~ Services: 11 Legitimates Filtered in 00mn 04s

            ---\\ Tâches planifiées en automatique (O39)
            [MD5.00000000000000000000000000000000] [APT] [Desk 365 RunAsStdUser] (...) -- C:\Program Files (x86)\Desk 365\desk365.exe (.not file.) [0] =>Hijacker.22Find
            [MD5.00000000000000000000000000000000] [APT] [EPUpdater] (...) -- C:\Users\marc\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe (.not file.) [0] =>Hijacker.BabSolution
            ~ Scheduled Task: 16 Legitimates Filtered in 00mn 03s

            ---\\ Logiciels installés (O42)
            O42 - Logiciel: Voobys - (.Voobys.) [HKLM][64Bits] -- {24EF2EDA-1224-4D3C-9C67-B45AF0C1D056}
            ~ Logic: 106 Legitimates Filtered in 00mn 00s

            ---\\ HKCU & HKLM Software Keys
            [HKCU\Software\PerformerSoft LLC]
            [HKCU\Software\Voobys]
            ~ Key Software: 186 Legitimates Filtered in 00mn 00s

            ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
            O43 - CFD: 30/06/2013 - 13:30:52 - [7,125] ----D C:\Program Files (x86)\Desk 365 =>Hijacker.22Find
            O43 - CFD: 19/05/2013 - 10:28:30 - [37,055] ----D C:\Program Files (x86)\Voobys
            ~ 50 Dossiers CLSID vides (CLSID Empty Folders)
            ~ Program Folder: 213 Legitimates Filtered in 00mn 02s

            ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
            O44 - LFC:[MD5.2CD573A4741DDED03476702F0394BFAB] - 1/07/2013 - 17:59:13 ---A- . (...) -- C:\UsbFix [Scan 2] MARC-PC.txt [6271]
            O44 - LFC:[MD5.6BCAF46E2B7FA9ACE92B4D39F3037C5C] - 4/07/2013 - 15:49:48 ---A- . (...) -- C:\Windows\SysNative\acovcnt.exe [45056]
            O44 - LFC:[MD5.6BCAF46E2B7FA9ACE92B4D39F3037C5C] - 4/07/2013 - 15:49:48 RSHAD . (...) -- C:\Windows\System32\acovcnt.exe [45056]
            O44 - LFC:[MD5.A36818425641A5671D4CE5BEB8F8BB68] - 30/06/2013 - 12:31:21 ---A- . (...) -- C:\Windows\DeleteOnReboot.bat [196]
            ~ Files: 24 Legitimates Filtered in 00mn 02s

            ---\\ MountPoints2 Shell Key (O51)
            O51 - MPSK:{010d1dc6-a4c7-11e2-a7b6-742f6836cecd}\AutoRun\command. (...) -- F:\iLinker.exe (.not file.)
            ~ Keys: Scanned in 00mn 00s

            ---\\ ShareTools MSconfig StartupReg (O53)
            O53 - SMSR:HKLM\...\startupreg\Video Performer63862.exe [Key] . (...) -- C:\Users\marc\AppData\Local\Temp\Video Performer63862.exe (.not file.)
            ~ SMSR Keys: 24 Legitimates Filtered in 00mn 00s

            ---\\ Microsoft Windows Policies System (O55)
            O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
            O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
            ~ MWPS: 17 Legitimates Filtered in 00mn 00s

            ---\\ Microsoft Windows Policies Explorer (O56)
            O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
            ~ MWPE Keys: 7 Legitimates Filtered in 00mn 00s

            ---\\ Liste des Drivers Système (O58)
            O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088]
            O58 - SDL:[MD5.DE8B9C3E0E09D918B394207F34AC16DD] - 8/07/2010 - 02:03:48 ---A- . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driver.) -- C:\Windows\System32\athrx.sys [2228736]
            O58 - SDL:[MD5.FD9FC82F134B1C91004FFC76A5AE494B] - 25/10/2004 - 20:02:58 ---A- . (.EnTech Taiwan - Pas de description.) -- C:\Windows\SysWOW64\drivers\Entech.sys [21664]
            ~ Drivers: Scanned in 00mn 00s

            ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
            O61 - LFC: 1/07/2013 - 08:41:46 ---A- C:\Users\marc\Downloads\challenge hesbignon mailing 2013.docx [26218]
            O61 - LFC: 1/07/2013 - 08:41:59 ---A- C:\Users\marc\Downloads\challenge hesbignon mailing 2013 (1).docx [26218]
            O61 - LFC: 1/07/2013 - 12:05:44 ---A- C:\Users\marc\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists [270335]
            O61 - LFC: 1/07/2013 - 12:18:23 ---A- C:\Users\marc\AppData\Local\Google\Chrome\User Data\Local State [37017]
            O61 - LFC: 2/07/2013 - 16:52:12 ---A- C:\Users\marc\AppData\Local\Google\Toolbar Cache\7.5.4209.2358\fr\translate_languages.json.content [1497]
            O61 - LFC: 3/07/2013 - 17:11:10 ---A- C:\Users\marc\AppData\Roaming\.spotflux\sfovpn1372867870344.ovpn [6517]
            O61 - LFC: 3/07/2013 - 17:11:50 ---A- C:\Users\marc\AppData\Roaming\.spotflux\updates\timestamp [10]
            O61 - LFC: 3/07/2013 - 20:09:51 ---A- C:\Users\marc\AppData\Roaming\.spotflux\sfovpn1372878591737.ovpn [6662]
            O61 - LFC: 3/07/2013 - 20:10:11 ---A- C:\Users\marc\AppData\Roaming\.spotflux\sfovpn1372878611422.ovpn [6662]
            O61 - LFC: 3/07/2013 - 20:13:38 ---A- C:\Users\marc\AppData\Roaming\.spotflux\sfovpn1372878818183.ovpn [6515]
            O61 - LFC: 3/07/2013 - 21:25:08 ---A- C:\Users\marc\Documents\poste extrait compte\BE84000315905859_20130626_000001.pdf [39677]
            O61 - LFC: 4/07/2013 - 16:17:57 ---A- C:\Users\marc\AppData\Roaming\.spotflux\spotflux.conf [599]
            O61 - LFC: 4/07/2013 - 16:17:58 ---A- C:\Users\marc\AppData\Roaming\.spotflux\autolaunch-flag [7]
            O61 - LFC: 4/07/2013 - 18:34:36 ---A- C:\Users\marc\AppData\Local\Google\Toolbar DNS data\data [115]
            O61 - LFC: 4/07/2013 - 18:34:48 ---A- C:\Users\marc\AppData\Roaming\Google\Local Search History\google%2Eweb.w [10]
            ~ 8 Fichiers temporaires (Temporary files)
            ~ Files: 104 Legitimates Filtered in 01mn 27s

            ---\\ Liste des outils de nettoyage (O63)
            O63 - Logiciel: UsbFix By El Desaparecido - (.El Desaparecido - SosVirus.net.) [HKLM] -- Usbfix
            O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
            ~ ADS: Scanned in 00mn 00s

            ---\\ Start Menu Internet (O68)
            O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
            O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
            ~ Keys: Scanned in 00mn 00s

            ---\\ Search Browser Infection (O69)
            O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - https://www.bing.com/?fdr=lc&toHttps=1&redig=FA6AD360E0BE4C719380F8C470A3D3A8
            O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - https://www.google.com/?gws_rd=ssl
            O69 - SBI: SearchScopes [HKCU] {80996669-999F-4DFE-BE91-8346038BB0C0} - (uTorrentBar_FR Customized Web Search) - http://search.conduit.com =>P2P.µTorrent
            ~ Keys: Scanned in 00mn 00s

            ---\\ Crack & Keygen Files (O82)
            C:\Users\marc\Desktop\JEUXPC\minecraft full installer 1.8.1 + des packs de textures\Minecraft_Beta_Cracked_v1.8.1.exe
            C:\Users\marc\Desktop\JEUXPC\minecraft full installer 1.8.1 + des packs de textures\Minecraft_Beta_Cracked_v1.8.1.exe
            ~ Files: Scanned in 00mn 54s

            ---\\ Recherche particuliere à la racine de certains dossiers (O84)
            [MD5.C3DAB70B8DFD36D161EDB5DD0A058681] [SPRF][1/07/2013] (.Java(TM) Native Access (JNA) - JNA native library.) -- C:\Users\marc\AppData\Local\Temp\jna2384052845568453363.dll [346987]
            [MD5.C3DAB70B8DFD36D161EDB5DD0A058681] [SPRF][3/07/2013] (.Java(TM) Native Access (JNA) - JNA native library.) -- C:\Users\marc\AppData\Local\Temp\jna8902997016477268828.dll [346987]
            ~ Files: Scanned in 00mn 00s

            ---\\ Scan Additionnel (O88)
            Database Version : v2.12641 - (3/07/2013)
            Clés trouvées (Keys found) : 5
            Valeurs trouvées (Values found) : 0
            Dossiers trouvés (Folders found) : 1
            Fichiers trouvés (Files found) : 0

            [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}] =>Toolbar.Conduit
            [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D6533F74-218B-41BE-9D91-5BD471FECFFD}] =>Toolbar.Conduit
            [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\desksvc] =>Hijacker.22find
            [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\eSafeSvc] =>PUP.eSafeSecurity
            [HKLM\Software\Wow6432Node\Google\Chrome\Extensions\fagpjgjmoaccgkkpjeoinehnoaimnbla] =>Hijacker.HolaSearch
            C:\Program Files (x86)\Desk 365 =>Hijacker.22find
            ~ Additionnel Scan: 185837 Items scanned in 00mn 11s

            ---\\ Product Upgrade Codes (O90)
            O90 - PUC: "D21EC9447C2E79B41BE9551D36AE4953" . (.Bing Bar.) -- C:\Windows\Installer\{449CE12D-E2C7-4B97-B19E-55D163EA9435}\icon_installer_ico
            ~ Update Products: 89 Legitimates Filtered in 00mn 00s

            ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
            SR - | Auto 10/05/2013 65640 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
            SS - | Disabled 16/06/2013 256904 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
            SS - | Disabled 3/03/2011 379520 | (AFBAgent) . (.ASUSTeK Computer Inc..) - C:\Windows\system32\FBAgent.exe
            SS - | Disabled 15/06/2009 84536 | (ASLDRService) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
            SS - | Disabled 13/03/2011 138400 | (Atheros Bt&Wlan Coex Agent) . (.Atheros.) - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
            SS - | Disabled 13/03/2011 74912 | (AtherosSvc) . (.Atheros Commnucations.) - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
            SS - | Disabled 15/12/2009 96896 | (ATKGFNEXSrv) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
            SS - | Demand 1/04/2011 183560 | (BBSvc) . (.Microsoft Corporation..) - C:\Program Files (x86)\Microsoft\BingBar\BBSvc.exe
            SS - | Demand 22/03/2013 279024 | (cphs) . (.Intel Corporation.) - C:\Windows\SysWow64\IntelCpHeciSvc.exe
            SS - | Disabled 14/12/2010 128928 | (Futuremark SystemInfo Service) . (.Futuremark Corporation.) - C:\Program Files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe
            SS - | Auto 24/04/2012 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
            SS - | Demand 24/04/2012 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
            SS - | Demand 10/02/2013 194032 | (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
            SR - | Auto 30/04/2013 15344 | (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
            SS - | Demand 24/04/2012 169752 | (ICCS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
            SR - | Auto 13/02/2013 731648 | (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
            SS - | Demand 13/02/2013 820184 | (Intel(R) Capability Licensing Service TCP IP Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
            SR - | Auto 12/03/2013 366552 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
            SR - | Auto 15/05/2013 1144144 | (MaConfigAgent) . (.CybelSoft.) - C:\Program Files\ma-config.com\MaConfigAgent.exe
            SR - | Auto 4/04/2013 418376 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
            SR - | Auto 4/04/2013 701512 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
            SS - | Disabled 18/02/2011 993896 | (NVSvc) . (.NVIDIA Corporation.) - C:\Windows\System32\nvvsvc.exe
            SS - | Disabled 22/02/2011 2009704 | (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
            SR - | Auto 0 | (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe
            SR - | Auto 0 | (PnkBstrB) . (...) - C:\Windows\system32\PnkBstrB.exe
            SS - | Disabled 17/08/2009 93848 | (SandraAgentSrv) . (.SiSoftware.) - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2011\RpcAgentSrv.exe
            SR - | Auto 28/03/2011 249648 | (SeaPort) . (.Microsoft Corporation.) - C:\Program Files (x86)\Microsoft\BingBar\SeaPort.exe
            SS - | Auto 1/03/2013 161384 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
            SS - | Disabled 7/01/2011 378984 | (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
            SS - | Disabled 16/04/2010 134928 | (TurboBoost) . (.Intel(R) Corporation.) - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
            SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
            SR - | Demand 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
            SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
            ~ Services: Scanned in 00mn 01s

            ---\\ Recherche Master Boot Record Infection (MBR)(O80)
            Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
            Run by marc at 4/07/2013 19:40:58

            device: opened successfully
            user: error reading MBR

            Disk trace:
            error: Read Descripteur non valide
            kernel: error reading MBR
            ~ MBR: 9 Legitimates Filtered in 00mn 02s

            ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
            Written by ad13, http://ad13.geekstog
            Run by marc at 4/07/2013 19:41:00

            ********* Dump file Name *********
            C:\PhysicalDisk0_MBR.bin
            ~ MBR: Scanned in 00mn 04s

            ---\\ Malicius Software Information
            ~ http://nicolascoolman.webs.com/apps/blog/show/26631242-hijacker-qvo6 =>Hijacker.Qvo6
            ~ http://nicolascoolman.webs.com/apps/blog/show/26630379-hijacker-22find =>Hijacker.22Find
            ~ http://nicolascoolman.webs.com/apps/blog/show/26678994-hijacker-babsolution =>Hijacker.BabSolution
            ~ http://nicolascoolman.webs.com/apps/blog/entries/show/29507721-toolbar-conduit =>Toolbar.Conduit
            ~ http://nicolascoolman.webs.com/apps/blog/show/27588628-pup-esafesecurity =>PUP.eSafeSecurity
            ~ http://nicolascoolman.webs.com/apps/blog/show/28136809-hijacker-holasearch =>Hijacker.HolaSearch
            ~ MSI: 6 link(s) detected in 00mn 04s

            ~ 1257 Legitimates filtered by white list
            End of the scan (502 lines in 04mn 07s)(2)
            1. Fish66 Contributeur sécurité
              Bonsoir,
              1/
              => Copie tout le texte présent en gras ci-dessous (Sélectionne-le, clique droit dessus et choisis "Copier").



              [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
              G1 - GCS: Preference [User Data\Default] http://search.qvo6.com
              G0 - GCSP: Preference [User Data\Default][HomePage] http://www.qvo6.com
              G0 - GCSP: Preference [User Data\Default] http://www.qvo6.com
              R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com =>Hijacker.Qvo6
              OPT:O4 - GS\Desktop: Windows Live Family Safety.lnk . (...) -- C:\Windows\Installer\{46A5FBE9-ADB3-4493-A1CC-B4CFFD24D26A}\fssicon.ico (.not file.) => Fichier absent
              O4 - GS\SendTo: Desk 365.lnk . (...) -- C:\Program Files (x86)\Desk 365\desk365.exe (.not file.) =>Hijacker.22Find
              [MD5.00000000000000000000000000000000] [APT] [Desk 365 RunAsStdUser] (...) -- C:\Program Files (x86)\Desk 365\desk365.exe (.not file.) [0] =>Hijacker.22Find
              [MD5.00000000000000000000000000000000] [APT] [EPUpdater] (...) -- C:\Users\marc\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe (.not file.) [0] =>Hijacker.BabSolution
              O43 - CFD: 30/06/2013 - 13:30:52 - [7,125] ----D C:\Program Files (x86)\Desk 365
              O51 - MPSK:{010d1dc6-a4c7-11e2-a7b6-742f6836cecd}\AutoRun\command. (...) -- F:\iLinker.exe (.not file.) => Fichier absent
              O61 - LFC: 2/07/2013 - 16:52:12 ---A- C:\Users\marc\AppData\Local\Google\Toolbar Cache\7.5.4209.2358\fr\translate_languages.json.content [1497] => Toolbar.Google
              O61 - LFC: 4/07/2013 - 18:34:36 ---A- C:\Users\marc\AppData\Local\Google\Toolbar DNS data\data [115] => Toolbar.Google
              [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}] =>Toolbar.Conduit
              [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D6533F74-218B-41BE-9D91-5BD471FECFFD}] =>Toolbar.Conduit
              O90 - PUC: "D21EC9447C2E79B41BE9551D36AE4953" . (.Bing Bar.) -- C:\Windows\Installer\{449CE12D-E2C7-4B97-B19E-55D163EA9435}\icon_installer_ico
              [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}] =>Toolbar.Conduit
              [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D6533F74-218B-41BE-9D91-5BD471FECFFD}] =>Toolbar.Conduit
              [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\desksvc] =>Hijacker.22find
              [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\eSafeSvc] =>PUP.eSafeSecurity
              [HKLM\Software\Wow6432Node\Google\Chrome\Extensions\fagpjgjmoaccgkkpjeoinehnoaimnbla] =>Hijacker.HolaSearch
              C:\Program Files (x86)\Desk 365 =>Hijacker.22find

              EmptyCLSID
              EmptyFlash
              EmptyTemp



              => Puis lance ZHPFix depuis le raccourci situé sur ton Bureau.

              (Sous Vista/Win7, il faut cliquer droit sur le raccourci de ZHPFix et choisir Exécuter en tant qu'administrateur)

              => Une fois ZHPFix ouvert, clique sur le bouton "Coller le presse-papier".

              => Dans l'encadré principal, tu verras donc les lignes que tu as copié précédemment apparaître. Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.

              => Clique sur "GO" pour lancer le nettoyage. Laisse l'outil travailler et ne touche à rien.

              => Une fois terminé, copie-colle le rapport dans ton prochain message.

              =========================================

              Aide : <<< ZHPFix ICI >>>

              2/
              Je te conseille de supprimer :
              C:\Users\marc\Desktop\JEUXPC\minecraft full installer 1.8.1 + des packs de textures\Minecraft_Beta_Cracked_v1.8.1.exe
              Tu peux lire : les dangers des cracks

              @+
              1. titicrominet Auteur
                Rapport de ZHPFix 2013.6.12.3 par Nicolas Coolman, Update du 12/06/2013
                Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-4-07-2013-22-46-35.txt
                Run by marc at 4/07/2013 22:46:35
                High Elevated Privileges : OK
                Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

                Corbeille vidée

                ========== Clé(s) du Registre ==========
                SUPPRIME CLSID MPSK: {010d1dc6-a4c7-11e2-a7b6-742f6836cecd}
                SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}
                SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D6533F74-218B-41BE-9D91-5BD471FECFFD}
                SUPPRIME Key: \Software\Classes\Installer\Products\\D21EC9447C2E79B41BE9551D36AE4953
                SUPPRIME Key: \Software\Classes\Installer\Features\D21EC9447C2E79B41BE9551D36AE4953
                SUPPRIME Key: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\desksvc
                SUPPRIME Key: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\eSafeSvc
                SUPPRIME Key: HKLM\Software\Wow6432Node\Google\Chrome\Extensions\fagpjgjmoaccgkkpjeoinehnoaimnbla

                ========== Elément(s) de donnée du Registre ==========
                REMPLACE Value NoActiveDesktopChanges : Good (0) - Bad (1)
                SUPPRIME R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL

                ========== Préférences navigateur ==========
                PRESENT Chrome File: C:\Users\marc\AppData\Local\Google\Chrome\User Data\Default\Preferences
                SUPPRIME Chrome Site: http://search.qvo6.com
                SUPPRIME Chrome Site: http://search.qvo6.com
                PRESENT Chrome File: C:\Users\marc\AppData\Local\Google\Chrome\User Data\Default\Preferences
                SUPPRIME Chrome Site: http://www.qvo6.com
                SUPPRIME Chrome Site: http://www.qvo6.com
                SUPPRIME Chrome Site: http://www.qvo6.com
                SUPPRIME Chrome Site: http://www.qvo6.com
                PRESENT Chrome File: C:\Users\marc\AppData\Local\Google\Chrome\User Data\Default\Preferences
                ABSENT Chrome Site: http://www.qvo6.com

                ========== Dossier(s) ==========
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{00E5CAFB-98CC-4BF3-BBD2-7FF7C2292B8E}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{05A18424-04F2-4402-86A9-799FF7B2DE9C}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{05F9BD0A-2E58-4E3F-919D-729ACCACEF63}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{0913B0CF-F878-44CA-BEE5-39B6420A9F23}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{0D0A4234-A241-49A7-851C-8A505E9EB18B}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{0E9F1DAA-D887-4EBA-80D0-22CEC38C670A}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{0FC65B16-2025-47D1-BAD5-84F98EB3EA6F}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{14B82B1B-B4F6-4AFF-AA0C-6AA5209EEC51}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{1D067047-F7B8-44BB-B554-97CBE002D76E}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{26118E10-DAC2-48EA-B2F9-C235EF54A8CF}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{289400EC-DF61-4198-9DE7-3EDDCAAA3562}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{3D768154-3F0D-49C7-BC22-432869A9CA69}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{3F4B49E7-D069-4D65-B3E7-499717F14214}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{40273DC4-45EE-4766-B8D1-40223ADFB858}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{496ED964-7103-4EB9-AA08-DCBB31B1AF8A}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{4AE5538D-28E9-455A-9A04-70D5D7EEF2B2}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{4E271262-F9A4-4BD6-9BEC-734E755E0296}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{5B782DD5-73A7-4E51-8CA6-B10E076C3BED}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{5C86B5B5-FF1F-4E55-867D-DD691A85A3B5}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{648B316F-6067-4DF8-A058-68BB7805635C}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{703AB5E6-029A-4367-9C5E-95B02B709311}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{721A0B82-C863-440A-9A28-8D1DDAE365B3}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{735404B0-0539-48F0-826C-68E5E9ECA443}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{767B3114-FD2F-4013-A096-31FAD10A476F}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{79B3DB83-01BB-4688-89EF-88157E6D2C86}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{7C75EF79-60A5-48D1-9EE6-401CF7AA215D}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{7E4448B1-64BC-4F37-9AE0-5584DE6F1917}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{8056B465-2A24-4CC3-AB45-E40D29FEE251}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{8644FE4D-89BE-45FE-8184-58F19E8D6E73}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{87E1D2C7-43DF-45C9-93E9-301C7787AA4C}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{8C624A59-6731-4C2C-BBFB-199934D80D8C}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{8C6BC218-C9BD-4E33-BD3C-8DBA5BDC7920}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{904CB795-FCB5-437E-863B-E403F4E5253C}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{92883626-2DD0-4011-AD72-F513733B3F54}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{97572952-6A20-45A3-86D5-05DE9E1660B1}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{AC547647-DC83-473C-B3DB-8AFB3F281D06}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{B99C4A52-A559-43C0-9B8B-81CC84160C82}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{BA849B47-C85B-4A63-A9B7-C62FC6B2E1A8}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{BE5C1D4D-14E9-4308-88EE-CB80764BD9CB}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{C466746F-3620-4826-80DB-CCE123D9FAB8}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{C6389695-F458-4AAE-B921-41279AF20D63}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{C72E04F4-3D4F-4C34-9E16-25AB0D3D5D4A}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{CE8048B4-5027-4871-86EE-58AB9D92394F}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{D2CCBDAD-2D3D-477B-8D3C-EA57080AAF26}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{D96F71C8-15E0-4A4A-8D2E-1FB3BEE9B818}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{DEF8127A-CF2F-43C5-8A14-D4641AD8D496}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{E0ECDE3E-EDE4-40FA-9853-2D674701EE3B}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{E5B07D4B-4E92-4147-A8A4-799EC71BD727}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{E67630A3-4AF9-4E52-92A7-B2E87F07C768}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{E6D8D50E-15A4-458D-B2D8-C121CC3637B0}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{E7669482-34B2-447A-947E-6E4C9AA31102}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{E81AB7A7-E843-49F0-9750-555CD3DE8394}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{E8C85215-F2B5-4125-82B7-5E2ACD862411}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{EBD45876-D206-4877-B022-618B1E6451CB}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{ECD9CEF7-7E3F-4D51-9E6E-A64661E20674}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{F6D7298A-ED8C-49D0-AF19-4C0CEB6F4D02}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{F7A95ECE-B2B3-4606-BC6E-4253A13E0964}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{F92562BD-89CF-42A6-ABCC-2ED8D3B3C228}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{F92D9323-4AF8-4753-BB1D-321DB622C3B9}
                SUPPRIME Folder: C:\Users\marc\AppData\Local\{FF330CB4-4036-4DD6-8B5F-2931F2FEB716}
                SUPPRIME Flash Cookies
                SUPPRIME Temporaires Windows

                ========== Fichier(s) ==========
                ABSENT File: c:\users\marc\desktop\windows live family safety.lnk
                ABSENT File: c:\users\marc\appdata\roaming\microsoft\windows\sendto\o4 - gs\sendto: desk 365.lnk
                ABSENT File: c:\program files (x86)\desk 365\desk365.exe
                SUPPRIME File: c:\users\marc\appdata\local\google\toolbar cache\7.5.4209.2358\fr\translate_languages.json.content
                SUPPRIME File: c:\users\marc\appdata\local\google\toolbar dns data\data
                ABSENT Folder/File: c:\program files (x86)\desk 365
                SUPPRIME Flash Cookies
                SUPPRIME Temporaires Windows

                ========== Tache planifiée ==========
                SUPPRIME Task: Desk 365 RunAsStdUser
                SUPPRIME Task: EPUpdater

                ========== Récapitulatif ==========
                8 : Clé(s) du Registre
                2 : Elément(s) de donnée du Registre
                62 : Dossier(s)
                8 : Fichier(s)
                10 : Préférences navigateur
                2 : Tache planifiée

                End of clean in 00mn 17s

                ========== Chemin de fichier rapport ==========
                C:\ZHP\ZHPFix[R1].txt - 16/06/2013 20:42:36 [733]
                C:\ZHP\ZHPFix[R2].txt - 4/07/2013 22:46:35 [8026]
                1. titicrominet Auteur
                  ceci je ne trouve pas
                  C:\Users\marc\Desktop\JEUXPC\minecraft full installer 1.8.1 + des packs de textures\Minecraft_Beta_Cracked_v1.8.1.exe
                  Merci
                  1. Fish66 Contributeur sécurité
                    D'accord!
                    Lance Malwarebytes, fais la mise à jour, choisis une analyse complète, supprime tout ce qu'il trouve puis poste le rapport stp

                    A demain

                    Bonne nuit
                    1. titicrominet Auteur
                      bonsoir,
                      merci, voici
                      Malwarebytes Anti-Malware (Essai) 1.75.0.1300
                      www.malwarebytes.org

                      Version de la base de données: v2013.07.04.08

                      Windows 7 Service Pack 1 x64 NTFS
                      Internet Explorer 10.0.9200.16618
                      marc :: MARC-PC [administrateur]

                      Protection: Activé

                      5/07/2013 20:40:54
                      mbam-log-2013-07-05 (20-40-54).txt

                      Type d'examen: Examen complet (C:\|Q:\|)
                      Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
                      Options d'examen désactivées: P2P
                      Elément(s) analysé(s): 519317
                      Temps écoulé: 1 heure(s), 33 minute(s), 18 seconde(s)

                      Processus mémoire détecté(s): 0
                      (Aucun élément nuisible détecté)

                      Module(s) mémoire détecté(s): 0
                      (Aucun élément nuisible détecté)

                      Clé(s) du Registre détectée(s): 0
                      (Aucun élément nuisible détecté)

                      Valeur(s) du Registre détectée(s): 0
                      (Aucun élément nuisible détecté)

                      Elément(s) de données du Registre détecté(s): 0
                      (Aucun élément nuisible détecté)

                      Dossier(s) détecté(s): 0
                      (Aucun élément nuisible détecté)

                      Fichier(s) détecté(s): 0
                      (Aucun élément nuisible détecté)

                      (fin)
                      1. Fish66 Contributeur sécurité
                        Bonsoir,
                        1/
                        Il me faut un nouveau rapport ZHPDiag

                        2/
                        Comment fonctionne ton PC maintenant ?

                        Bonne nuit
                    2. titicrominet Auteur
                      Bonsoir fish

                      Je te remercie pour ton aidre.
                      Voici le rapport
                      Et mon pc ca va, mais toujours le même souci avec spot flux QUI S'OUVRE AU DEMARRAGE DU PC??
                      Merci
                      Rapport de ZHPDiag v2013.7.5.7 par Nicolas Coolman, Update du 5/07/2013
                      Run by marc at 6/07/2013 21:56:00
                      WebSite: https://nicolascoolman.webs.com/
                      State : Version à jour.
                      WhiteList : Enable
                      High Elevated Privileges : OK
                      UAC : Activate by user

                      ---\\ Web Browser
                      MSIE: Internet Explorer v10.0.9200.16618 (Defaut)
                      GCIE: Google Chrome v27.0.1453.116

                      ---\\ Windows Product Information
                      ~ Langage: Français
                      Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
                      Windows Server License Manager Script : OK
                      ~ Windows(R) 7, OEM_COA_NSLP channel
                      Windows ID Activation : OK
                      ~ Windows Partial Key : KR7H8
                      Windows License : OK
                      ~ Windows Remaining Initializations Number : 1
                      Software Protection Service (Protection logicielle) : OK
                      Windows Automatic Updates : OK
                      Windows Activation Technologies : OK

                      ---\\ System Protection
                      Malwarebytes Anti-Malware version 1.75.0.1300
                      Microsoft Security Client FR-FR Language Pack v2.1.1116.0
                      Windows Defender W7

                      ---\\ System Optimizer
                      CCleaner v4.02 =>Piriform Ltd

                      ---\\ Peer To Peer (P2P)
                      µTorrent v3.3.0.29677 =>P2P.µTorrent

                      ---\\ Software Update
                      Adobe Flash Player 11 ActiveX
                      Adobe Reader X
                      Java 7 Update 21
                      Java 7 Update 25

                      ---\\ System Information
                      ~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
                      ~ Operating System: 64 Bits
                      Boot mode: Normal (Normal boot)
                      Total RAM: 8103 MB (66% free)
                      System Restore: Activé (Enable)
                      System drive C: has 283 GB (60%) free of 466 GB

                      ---\\ Logged in mode
                      ~ Computer Name: MARC-PC
                      ~ User Name: marc
                      ~ All Users Names: UpdatusUser, marc, Administrateur,
                      ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
                      Logged in as Administrator

                      ---\\ Environnement Variables
                      ~ System Unit : C:\
                      ~ %AppData% : C:\Users\marc\AppData\Roaming\
                      ~ %Desktop% : C:\Users\marc\Desktop\
                      ~ %Favorites% : C:\Users\marc\Favorites\
                      ~ %LocalAppData% : C:\Users\marc\AppData\Local\
                      ~ %StartMenu% : C:\Users\marc\AppData\Roaming\Microsoft\Windows\Start Menu\
                      ~ %Windir% : C:\Windows\
                      ~ %System% : C:\Windows\System32\

                      ---\\ DOS/Devices
                      C:\ Hard drive, Flash drive, Thumb drive (Free 283 Go of 466 Go)
                      D:\ CD-ROM drive (Not Inserted)
                      E:\ CD-ROM drive (Not Inserted)
                      F:\ CD-ROM drive (Not Inserted)
                      Q:\ Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go)

                      ---\\ Security Center & Tools Informations
                      ~ Security Center: 34 Legitimates Filtered in 00mn 00s

                      ---\\ Recherche particulière de fichiers génériques
                      [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
                      [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
                      [MD5.12716D987D475B051F35895659159705] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.17/05/2013 - 01:59:03.) -- C:\Windows\System32\wininet.dll [2241024]
                      [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.20/11/2010 - 05:25:32.) -- C:\Windows\System32\Winlogon.exe [390656]
                      [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 05:27:28.) -- C:\Windows\System32\sppcomapi.dll [232448]
                      [MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
                      [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
                      [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
                      [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 01:19:22.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
                      [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 01:26:34.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
                      [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 02:43:44.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
                      [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
                      [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
                      [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
                      [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 01:23:22.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
                      [MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 15:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680]
                      [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
                      [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 02:52:36.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
                      [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
                      [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 01:21:58.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
                      [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 05:34:04.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
                      ~ Generic Processes: Scanned in 00mn 01s

                      ---\\ Etat des fichiers cachés (Caché/Total)
                      ~ Mes images (My Pictures) : 1/799
                      ~ Mes musiques (My Musics) : 1/7
                      ~ Mes Videos (My Videos) : 1/6
                      ~ Mes Favoris (My Favorites) : 1/49
                      ~ Mes Documents (My Documents) : 1/145
                      ~ Mon Bureau (My Desktop) : 1/154455
                      ~ Menu demarrer (Programs) : 1/40
                      ~ Hidden Files: Scanned in 01mn 33s

                      ---\\ Processus lancés
                      [MD5.DE3B04D5AF8A1578F5430697546EB157] - (.ASUSTeK Computer Inc. - LiveUpdate.) -- C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [1545856] [PID.2136]
                      [MD5.5BB1F77C8AF725A15EC9366498D275BB] - (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992] [PID.2176]
                      [MD5.BC3DA234CDA880578526DAB028F40268] - (.ASUS - SmartLogon Application.) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [305792] [PID.2196]
                      [MD5.D1D5DAB39DCB4BE0359943738D87409B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [532040] [PID.2692]
                      [MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408] [PID.3292]
                      [MD5.3BD79A1F6D2EA0FDDEA3F8914B2A6A0C] - (.Elaborate Bytes AG - Virtual CloneDrive Daemon.) -- C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984] [PID.3816]
                      [MD5.07DFD28E57879554D054464EE4A5662D] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\IEXPLORE.exe [770648] [PID.2980]
                      [MD5.10B01048B1DA075CD1EE27E30B4CF342] - (.Google Inc. - Google Toolbar Broker.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe [308816] [PID.1256]
                      [MD5.E5A7EA8C5C063943231A071789956893] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [7667712] [PID.4628]
                      [MD5.ADDA5E1951B90D3D23C56D3CF0622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65640] [PID.1712]
                      [MD5.65085456FD9A74D7F1A999520C299ECB] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376] [PID.2016]
                      [MD5.E0D7732F2D2E24B2DB3F67B6750295B8] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512] [PID.2036]
                      [MD5.831883B107684301F48ACE752C963984] - (...) -- C:\Windows\SysWOW64\PnkBstrA.exe [66872] [PID.2476]
                      [MD5.E24106A5EAECDDFF00B25497049DD65F] - (...) -- C:\Windows\SysWOW64\PnkBstrB.exe [107832] [PID.2508]
                      [MD5.C3CDDD18F43D44AB713CF8C4916F7696] - (.Microsoft Corporation - Microsoft Application Virtualization Virtua.) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [219496] [PID.2316]
                      [MD5.13693B6354DD6E72DC5131DA7D764B90] - (.Microsoft Corporation - Microsoft Application Virtualization Client.) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [508776] [PID.3868]
                      [MD5.72794D112CBAFF3BC0C29BF7350D4741] - (.Microsoft Corporation - Microsoft Office Client Virtualization Serv.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.exe [822624] [PID.3152]
                      [MD5.7281AED93FB30FDD1CBAF07591FA453A] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344] [PID.4144]
                      [MD5.3EA307C51069BC72DD74A4964F2A30A9] - (.Intel Corporation - Intel(R) Local Management Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [366552] [PID.3336]
                      ~ Processes Running: Scanned in 00mn 00s

                      ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
                      C:\Users\marc\AppData\Local\Google\Chrome\User Data\Default\Preferences
                      G1 - GCS: Preference [User Data\Default] https://www.google.fr/?gws_rd=ssl
                      ~ Google Browser: 8 Legitimates Filtered in 00mn 05s

                      ---\\ Internet Explorer, Proxy Management (R5)
                      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
                      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
                      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
                      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
                      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
                      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
                      ~ Proxy management: Scanned in 00mn 00s

                      ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
                      F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
                      F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
                      F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
                      ~ Keys: Scanned in 00mn 00s

                      ---\\ Redirection du fichier Hosts (O1)
                      ~ Le fichier hosts est sain (The hosts file is clean).
                      ~ Hosts File: Scanned in 00mn 00s
                      ~ Nombre de lignes (Lines number): 21

                      ---\\ Internet Explorer Toolbars (O3)
                      O3 - Toolbar: Google Toolbar [64Bits] - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
                      ~ Toolbar: Scanned in 00mn 00s

                      ---\\ Applications démarrées par registre & par dossier (O4)
                      O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe
                      O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                      O4 - HKLM\..\Wow6432Node\Run: [VirtualCloneDrive] . (.Elaborate Bytes AG - Virtual CloneDrive Daemon.) -- C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
                      O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
                      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
                      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
                      O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
                      O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
                      O4 - HKUS\S-1-5-21-882527398-2222475609-3722137400-1001\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                      ~ Application: Scanned in 00mn 00s

                      ---\\ Autres liens utilisateurs (O4)
                      O4 - GS\QuickLaunch: MiPony.lnk . (.www.mipony.net - Mipony.) -- C:\Program Files (x86)\MiPony\MiPony.exe
                      O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.) -- C:\Windows\system32\eudcedit.exe
                      O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) -- C:\Windows\system32\WFS.exe
                      O4 - GS\Desktop: Microsoft Office 2010.lnk . (...) -- C:\Windows\Installer\{95140000-0070-0000-0000-0000000FF1CE}\oobeicon.exe
                      O4 - GS\Desktop: MiPony.lnk . (.www.mipony.net - Mipony.) -- C:\Program Files (x86)\MiPony\MiPony.exe
                      O4 - GS\Desktop: Windows Live Family Safety.lnk . (...) -- C:\Windows\Installer\{46A5FBE9-ADB3-4493-A1CC-B4CFFD24D26A}\fssicon.ico (.not file.)
                      O4 - GS\Desktop: Windows Live Mail.lnk . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
                      O4 - GS\Desktop: Windows Live Mesh.lnk . (.Microsoft Corporation - Windows Live Mesh.) -- C:\Program Files (x86)\Windows Live\Mesh\WLSync.exe
                      O4 - GS\Desktop: Windows Live Messenger.lnk . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
                      O4 - GS\Desktop: Windows Live Movie Maker.lnk . (.Microsoft Corporation - Windows Live Movie Maker.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe
                      O4 - GS\Desktop: Windows Live Writer.lnk . (.Microsoft Corp. - Windows Live Writer.) -- C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriter.exe
                      O4 - GS\TaskBar: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
                      O4 - GS\TaskBar: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe
                      O4 - GS\TaskBar: Windows Live Mail.lnk . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
                      O4 - GS\TaskBar: Windows Live Messenger.lnk . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
                      O4 - GS\TaskBar: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
                      O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
                      O4 - GS\Programs: Voobys!.lnk . (...) -- C:\Users\marc\AppData\Roaming\Microsoft\Installer\{24EF2EDA-1224-4D3C-9C67-B45AF0C1D056}\_E40D707125391403EA87D4.exe
                      O4 - GS\QuickLaunch: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
                      O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
                      O4 - GS\QuickLaunch: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\marc\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.µTorrent
                      O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
                      O4 - GS\SendTo: Desk 365.lnk . (...) -- C:\Program Files (x86)\Desk 365\desk365.exe (.not file.) =>Hijacker.22Find
                      O4 - GS\SendTo: Format Factory.lnk . (.Free Time - FormatFactory.) -- C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe
                      O4 - GS\SendTo: Skype.lnk . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
                      O4 - GS\Desktop: 7-Zip File Manager.lnk . (.Igor Pavlov - 7-Zip File Manager.) -- C:\Program Files (x86)\7-Zip\7zFM.exe
                      O4 - GS\Desktop: Alcatraz.lnk . (...) -- C:\Program Files (x86)\City Interactive\Alcatraz\Alcatraz.exe
                      O4 - GS\Desktop: Documents - Raccourci.lnk . (...) -- C:\Users\marc\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms
                      O4 - GS\Desktop: FarCry2 - Raccourci.lnk . (.Ubisoft Entertainment - Far Cry® 2.) -- C:\Program Files (x86)\Ubisoft\Far Cry 2\bin\FarCry2.exe
                      O4 - GS\Desktop: Format Factory.lnk . (.Free Time - FormatFactory.) -- C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe
                      O4 - GS\Desktop: Internet Explorer (64-bit) (2).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
                      O4 - GS\Desktop: Medal of honor.lnk . (.Electronic Arts Inc. - Medal of Honor(TM).) -- C:\Program Files (x86)\Electronic Arts\Medal of Honor\Binaries\moh.exe
                      O4 - GS\Desktop: VirtualDJ PRO Full.lnk . (.Atomix Productions - VirtualDJ.) -- C:\Program Files (x86)\VirtualDJ\virtualdj_pro.exe
                      ~ Global Startup: Scanned in 00mn 00s

                      ---\\ Modification Domaine/Adresses DNS (O17)
                      O17 - HKLM\System\CCS\Services\Tcpip\..\{BE8651DF-F4D0-48A2-AD35-5FE77E475229}: DhcpNameServer = 62.197.111.140 109.88.203.3
                      O17 - HKLM\System\CCS\Services\Tcpip\..\{BE8651DF-F4D0-48A2-AD35-5FE77E475229}: DhcpDomain = teledisnet.be
                      O17 - HKLM\System\CS1\Services\Tcpip\..\{BE8651DF-F4D0-48A2-AD35-5FE77E475229}: DhcpNameServer = 62.197.111.140 109.88.203.3
                      O17 - HKLM\System\CS1\Services\Tcpip\..\{BE8651DF-F4D0-48A2-AD35-5FE77E475229}: DhcpDomain = teledisnet.be
                      O17 - HKLM\System\CS2\Services\Tcpip\..\{BE8651DF-F4D0-48A2-AD35-5FE77E475229}: DhcpNameServer = 62.197.111.140 109.88.203.3
                      O17 - HKLM\System\CS2\Services\Tcpip\..\{BE8651DF-F4D0-48A2-AD35-5FE77E475229}: DhcpDomain = teledisnet.be
                      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.197.111.140 109.88.203.3
                      ~ Domain: Scanned in 00mn 00s

                      ---\\ Protocole additionnel (O18)
                      O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
                      O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
                      ~ Protocole Additionnel: Scanned in 00mn 00s

                      ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
                      O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
                      ~ Winlogon: Scanned in 00mn 00s

                      ---\\ Liste des services NT non Microsoft et non désactivés (O23)
                      O23 - Service: Intel(R) Management and Security Applica (LMS) . (.Intel Corporation - Intel(R) Local Management Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
                      O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
                      ~ Services: 11 Legitimates Filtered in 00mn 04s

                      ---\\ Logiciels installés (O42)
                      O42 - Logiciel: Voobys - (.Voobys.) [HKLM][64Bits] -- {24EF2EDA-1224-4D3C-9C67-B45AF0C1D056}
                      ~ Logic: 106 Legitimates Filtered in 00mn 00s

                      ---\\ HKCU & HKLM Software Keys
                      [HKCU\Software\PerformerSoft LLC]
                      [HKCU\Software\Voobys]
                      ~ Key Software: 186 Legitimates Filtered in 00mn 00s

                      ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
                      O43 - CFD: 19/05/2013 - 10:28:30 - [37,055] ----D C:\Program Files (x86)\Voobys
                      ~ 2 Dossiers CLSID vides (CLSID Empty Folders)
                      ~ Program Folder: 155 Legitimates Filtered in 00mn 04s

                      ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
                      O44 - LFC:[MD5.2CD573A4741DDED03476702F0394BFAB] - 1/07/2013 - 17:59:13 ---A- . (...) -- C:\UsbFix [Scan 2] MARC-PC.txt [6271]
                      O44 - LFC:[MD5.6BCAF46E2B7FA9ACE92B4D39F3037C5C] - 6/07/2013 - 06:38:11 ---A- . (...) -- C:\Windows\SysNative\acovcnt.exe [45056]
                      O44 - LFC:[MD5.6BCAF46E2B7FA9ACE92B4D39F3037C5C] - 6/07/2013 - 06:38:11 RSHAD . (...) -- C:\Windows\System32\acovcnt.exe [45056]
                      O44 - LFC:[MD5.A36818425641A5671D4CE5BEB8F8BB68] - 30/06/2013 - 12:31:21 ---A- . (...) -- C:\Windows\DeleteOnReboot.bat [196]
                      ~ Files: 24 Legitimates Filtered in 00mn 02s

                      ---\\ ShareTools MSconfig StartupReg (O53)
                      O53 - SMSR:HKLM\...\startupreg\Video Performer63862.exe [Key] . (...) -- C:\Users\marc\AppData\Local\Temp\Video Performer63862.exe (.not file.)
                      ~ SMSR Keys: 24 Legitimates Filtered in 00mn 00s

                      ---\\ Microsoft Windows Policies System (O55)
                      O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
                      O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
                      ~ MWPS: 17 Legitimates Filtered in 00mn 00s

                      ---\\ Liste des Drivers Système (O58)
                      O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088]
                      O58 - SDL:[MD5.DE8B9C3E0E09D918B394207F34AC16DD] - 8/07/2010 - 02:03:48 ---A- . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driver.) -- C:\Windows\System32\athrx.sys [2228736]
                      O58 - SDL:[MD5.FD9FC82F134B1C91004FFC76A5AE494B] - 25/10/2004 - 20:02:58 ---A- . (.EnTech Taiwan - Pas de description.) -- C:\Windows\SysWOW64\drivers\Entech.sys [21664]
                      ~ Drivers: Scanned in 00mn 00s

                      ---\\ Liste des outils de nettoyage (O63)
                      O63 - Logiciel: UsbFix By El Desaparecido - (.El Desaparecido - SosVirus.net.) [HKLM] -- Usbfix
                      O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
                      ~ ADS: Scanned in 00mn 00s

                      ---\\ Start Menu Internet (O68)
                      O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
                      O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
                      ~ Keys: Scanned in 00mn 00s

                      ---\\ Search Browser Infection (O69)
                      O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - https://www.bing.com/?fdr=lc&toHttps=1&redig=FA6AD360E0BE4C719380F8C470A3D3A8
                      O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - https://www.google.com/?gws_rd=ssl
                      O69 - SBI: SearchScopes [HKCU] {80996669-999F-4DFE-BE91-8346038BB0C0} - (uTorrentBar_FR Customized Web Search) - http://search.conduit.com =>P2P.µTorrent
                      ~ Keys: Scanned in 00mn 00s

                      ---\\ Recherche particuliere à la racine de certains dossiers (O84)
                      [MD5.B1957B038895642DF9F662326E7D4DDC] [SPRF][22/06/2013] (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Users\marc\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe [903080]
                      ~ Files: Scanned in 00mn 00s

                      ---\\ Scan Additionnel (O88)
                      Database Version : v2.12676 - (5/07/2013)
                      Clés trouvées (Keys found) : 0
                      Valeurs trouvées (Values found) : 0
                      Dossiers trouvés (Folders found) : 0
                      Fichiers trouvés (Files found) : 0

                      ~ Additionnel Scan: 184885 Items scanned in 00mn 11s

                      ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
                      SR - | Auto 10/05/2013 65640 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
                      SS - | Disabled 16/06/2013 256904 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
                      SS - | Disabled 3/03/2011 379520 | (AFBAgent) . (.ASUSTeK Computer Inc..) - C:\Windows\system32\FBAgent.exe
                      SS - | Disabled 15/06/2009 84536 | (ASLDRService) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
                      SS - | Disabled 13/03/2011 138400 | (Atheros Bt&Wlan Coex Agent) . (.Atheros.) - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
                      SS - | Disabled 13/03/2011 74912 | (AtherosSvc) . (.Atheros Commnucations.) - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
                      SS - | Disabled 15/12/2009 96896 | (ATKGFNEXSrv) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
                      SS - | Demand 1/04/2011 183560 | (BBSvc) . (.Microsoft Corporation..) - C:\Program Files (x86)\Microsoft\BingBar\BBSvc.exe
                      SS - | Demand 22/03/2013 279024 | (cphs) . (.Intel Corporation.) - C:\Windows\SysWow64\IntelCpHeciSvc.exe
                      SS - | Disabled 14/12/2010 128928 | (Futuremark SystemInfo Service) . (.Futuremark Corporation.) - C:\Program Files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe
                      SS - | Auto 24/04/2012 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
                      SS - | Demand 24/04/2012 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
                      SS - | Demand 10/02/2013 194032 | (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
                      SR - | Auto 30/04/2013 15344 | (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
                      SS - | Demand 24/04/2012 169752 | (ICCS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
                      SR - | Auto 13/02/2013 731648 | (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
                      SS - | Demand 13/02/2013 820184 | (Intel(R) Capability Licensing Service TCP IP Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
                      SR - | Auto 12/03/2013 366552 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
                      SR - | Auto 15/05/2013 1144144 | (MaConfigAgent) . (.CybelSoft.) - C:\Program Files\ma-config.com\MaConfigAgent.exe
                      SR - | Auto 4/04/2013 418376 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
                      SR - | Auto 4/04/2013 701512 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
                      SS - | Disabled 18/02/2011 993896 | (NVSvc) . (.NVIDIA Corporation.) - C:\Windows\System32\nvvsvc.exe
                      SS - | Disabled 22/02/2011 2009704 | (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
                      SR - | Auto 0 | (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe
                      SR - | Auto 0 | (PnkBstrB) . (...) - C:\Windows\system32\PnkBstrB.exe
                      SS - | Disabled 17/08/2009 93848 | (SandraAgentSrv) . (.SiSoftware.) - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2011\RpcAgentSrv.exe
                      SR - | Auto 28/03/2011 249648 | (SeaPort) . (.Microsoft Corporation.) - C:\Program Files (x86)\Microsoft\BingBar\SeaPort.exe
                      SS - | Auto 1/03/2013 161384 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
                      SS - | Disabled 7/01/2011 378984 | (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
                      SS - | Disabled 16/04/2010 134928 | (TurboBoost) . (.Intel(R) Corporation.) - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
                      SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
                      SR - | Demand 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
                      SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
                      ~ Services: Scanned in 00mn 02s

                      ---\\ Malicius Software Information
                      ~ http://nicolascoolman.webs.com/apps/blog/show/26630379-hijacker-22find =>Hijacker.22Find
                      ~ MSI: 1 link(s) detected in 00mn 02s

                      ~ 1023 Legitimates filtered by white list
                      End of the scan (401 lines in 02mn 20s)(0)
                      1. Fish66 Contributeur sécurité
                        Bonsoir,
                        1/
                        Supprime les extensions inutiles de ton navigateur .

                        Aide :

                        * Google chrome

                        * Firefox

                        * Internet explorer

                        2/
                        * Télécharge sur le bureau RogueKiller (par tigzy)

                        https://www.luanagames.com/index.fr.html


                        * ( Sous Vista/Seven,clique droit, lancer en tant qu'administrateur )

                        * Quitte tous tes programmes en cours

                        * Lance RogueKiller.exe

                        Si l'infection bloque le programme, il faut le relancer plusieurs fois ou le renommer en winlogon.exe

                        * Laisse le prescan se terminer, clique sur Scan

                        * Clique sur Rapport pour l'ouvrir puis copie/colle le sur le dans ton prochain message

                        @+
                        1. titicrominet Auteur
                          RogueKiller V8.6.2 _x64_ [Jul 2 2013] par Tigzy
                          mail : tigzyRK<at>gmail<dot>com
                          Remontees : hxxp://www.adlice.com/forum/
                          Site Web : https://www.luanagames.com/index.fr.html
                          Blog : http://tigzyrk.blogspot.com/

                          Systeme d'exploitation : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
                          Demarrage : Mode normal
                          Utilisateur : marc [Droits d'admin]
                          Mode : Recherche -- Date : 07/06/2013 23:20:14
                          | ARK || FAK || MBR |

                          ¤¤¤ Processus malicieux : 0 ¤¤¤

                          ¤¤¤ Entrees de registre : 2 ¤¤¤
                          [HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> TROUVÉ
                          [HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> TROUVÉ

                          ¤¤¤ Tâches planifiées : 0 ¤¤¤

                          ¤¤¤ Entrées Startup : 0 ¤¤¤

                          ¤¤¤ Navigateurs web : 0 ¤¤¤

                          ¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

                          ¤¤¤ Driver : [NON CHARGE 0x0] ¤¤¤

                          ¤¤¤ Ruches Externes: ¤¤¤

                          ¤¤¤ Infection : ¤¤¤

                          ¤¤¤ Fichier HOSTS: ¤¤¤
                          --> %SystemRoot%\System32\drivers\etc\hosts

                          ¤¤¤ MBR Verif: ¤¤¤

                          +++++ PhysicalDrive0: WDC WD5000BPVT-24HXZ SCSI Disk Device +++++
                          --- User ---
                          [MBR] 64c77b42075fe9305be41772eb7333fd
                          [BSP] 92c323c5964c29d84c3314d60f2d6375 : Legit.C MBR Code
                          Partition table:
                          0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 476937 Mo
                          User = LL1 ... OK!
                          Error reading LL2 MBR!

                          Termine : << RKreport[0]_S_07062013_232014.txt >>
                          1. Fish66 Contributeur sécurité
                            D'accord!
                            1/
                            Est ce que tu as supprimé les extensions inutiles?
                            ( https://forums.commentcamarche.net/forum/affich-28140450-virus#20 )

                            2/
                            * Télécharge OTM (OldTimer) ICI >> OTM (OldTimer) sur ton Bureau

                            * Double clic "OTMoveIt3.exe"

                            * Utilisateurs Windows Vista / 7 Clic droit sur "OTMoveIt3.exe" choisis "exécuter en tant qu'administrateur" afin de le lancer.

                            * Copie (Ctrl+C) le texte suivant en gras ci-dessous :

                            :files
                            C:\Users\marc\AppData\Roaming\.spotflux
                            C:\Users\marc\AppData\Roaming\Microsoft\Installer\{24EF2EDA-1224-4D3C-9C67-B45AF0C1D056}\_E40D707125391403EA87D4.exe


                            - Colle (Ctrl+V) le texte précédemment copié dans le cadre: Paste Instructions for Items to be Moved.

                            - Clique maintenant sur le bouton MoveIt!

                            Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.

                            Accepte en cliquant sur YES.

                            - Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\

                            Le nom du rapport correspond au moment de sa création : date_heure.log

                            3/
                            * Tu peux suivre les indications de cette page pour t'aider : https://www.malekal.com/tutorial-otl/

                            * Télécharge http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ sur ton bureau.

                            (Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur)

                            * Lance OTL

                            * Sous Personnalisation, copie-colle le texte en gras ci-dessous :

                            netsvcs

                            msconfig

                            safebootminimal

                            safebootnetwork

                            activex

                            drivers32

                            %ALLUSERSPROFILE%\Application Data\*.

                            %ALLUSERSPROFILE%\Application Data\*.exe /s

                            %APPDATA%\*.

                            %APPDATA%\*.exe /s

                            %temp%\.exe /s

                            %SYSTEMDRIVE%\*.exe

                            %systemroot%\*. /mp /s

                            %systemroot%\system32\*.dll /lockedfiles

                            %systemroot%\Tasks\*.job /lockedfiles

                            %systemroot%\system32\drivers\*.sys /lockedfiles

                            %systemroot%\System32\config\*.sav

                            /md5start

                            explorer.exe

                            winlogon.exe

                            wininit.exe

                            /md5stop

                            CREATERESTOREPOINT

                            nslookup www.google.fr /c

                            * Clique sur le bouton Analyse.

                            * Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer les rapports.

                            Donnes le lien pjjoint ici ensuite pour pouvoir être consultés.

                            A demain

                            Bonne nuit

                            ¤¤¤ Le meilleur remède pour tous les problèmes, c'est la patience.... ¤¤¤
                            1. titicrominet Auteur
                              bonjour, fish

                              voici
                              les extentions Google grome il y a rien mais pour Firefox je pense pas installé et internet explorer trouve pas extention??

                              ========== FILES ==========
                              C:\Users\marc\AppData\Roaming\.spotflux\updates\dist\backup folder moved successfully.
                              C:\Users\marc\AppData\Roaming\.spotflux\updates\dist folder moved successfully.
                              C:\Users\marc\AppData\Roaming\.spotflux\updates folder moved successfully.
                              C:\Users\marc\AppData\Roaming\.spotflux folder moved successfully.
                              C:\Users\marc\AppData\Roaming\Microsoft\Installer\{24EF2EDA-1224-4D3C-9C67-B45AF0C1D056}\_E40D707125391403EA87D4.exe moved successfully.

                              OTM by OldTimer - Version 3.1.21.0 log created on 07072013_090425

                              https://pjjoint.malekal.com/files.php?read=OTL_20130707_r14h14y14g14f15
                              1. Fish66 Contributeur sécurité
                                Bonjour,
                                1/
                                Relance OTL

                                - Sous XP double-clic sur l'icône pour lancer l'outil.

                                - Sous Vista/Seven clic-droit sur l'icône et choisir "Exécuter en tant qu'administrateur" dans le menu contextuel.

                                * Dans la partie "Personnalisation", copie/colle les instructions suivantes :

                                :OTL
                                CHR - default_search_provider: qvo6 (Enabled)
                                DRV:[b]64bit:[/b] - [2013/05/29 01:12:28 | 000,039,104 | ---- | M] (Spotflux, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tapSF0901.sys -- (tapSF0901)
                                [2013/06/07 21:43:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spotflux
                                FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\speedanalysis02@SpeedAnalysis.com: C:\Users\marc\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com [2013/04/20 20:54:11 | 000,000,000 | ---D | M]
                                FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\SpecialSavings@SpecialSavings.com: C:\Users\marc\AppData\Roaming\Mozilla\Extensions\SpecialSavings@SpecialSavings.com [2013/04/20 20:57:00 | 000,000,000 | ---D | M]
                                FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\speedanalysis02@SpeedAnalysis.com: C:\Users\marc\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com [2013/04/20 20:54:11 | 000,000,000 | ---D | M]
                                FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\SpecialSavings@SpecialSavings.com: C:\Users\marc\AppData\Roaming\Mozilla\Extensions\SpecialSavings@SpecialSavings.com [2013/04/20 20:57:00 | 000,000,000 | ---D | M]
                                [2013/04/20 20:57:00 | 000,000,000 | ---D | M] (SpecialSavings) -- C:\Users\marc\AppData\Roaming\Mozilla\Extensions\SpecialSavings@SpecialSavings.com
                                [2013/04/20 20:54:11 | 000,000,000 | ---D | M] (Speed Analysis 2) -- C:\Users\marc\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com
                                [2013/06/07 21:41:43 | 001,122,896 | ---- | M] (BitTorrent Inc.) -- C:\Users\marc\AppData\Roaming\BitTorrent\updates\7.8.1_29783.exe

                                :Commands
                                [emptytemp]


                                * Clique sur le bouton Correction.

                                * Patiente pendant le travail de l'outil, il doit ensuite redémarrer le PC.

                                * Accepte en cliquant sur OK.

                                * Le rapport indiquant les actions réalisées par OTL doit s'ouvrir spontanément.

                                Tu peux le retrouver le fichier à la racine du disque : C:\_OTL\MovedFiles

                                2/
                                Spotflux est il encore présent?
                                Si oui sur quel navigateur?

                                1. titicrominet Auteur
                                  voici,
                                  All processes killed
                                  Error: Unable to interpret <DRV:[b]64bit:/b - [2013/05/29 01:12:28 | 000,039,104 | ---- | M] (Spotflux, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tapSF0901.sys -- (tapSF0901) > in the current context!
                                  Error: Unable to interpret <[2013/06/07 21:43:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spotflux > in the current context!
                                  Error: Unable to interpret < FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\speedanalysis02@SpeedAnalysis.com: C:\Users\marc\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com [2013/04/20 20:54:11 | 000,000,000 | ---D | M] > in the current context!
                                  Error: Unable to interpret <FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\SpecialSavings@SpecialSavings.com: C:\Users\marc\AppData\Roaming\Mozilla\Extensions\SpecialSavings@SpecialSavings.com [2013/04/20 20:57:00 | 000,000,000 | ---D | M] > in the current context!
                                  Error: Unable to interpret < FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\speedanalysis02@SpeedAnalysis.com: C:\Users\marc\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com [2013/04/20 20:54:11 | 000,000,000 | ---D | M] > in the current context!
                                  Error: Unable to interpret <FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\SpecialSavings@SpecialSavings.com: C:\Users\marc\AppData\Roaming\Mozilla\Extensions\SpecialSavings@SpecialSavings.com [2013/04/20 20:57:00 | 000,000,000 | ---D | M] > in the current context!
                                  Error: Unable to interpret < [2013/04/20 20:57:00 | 000,000,000 | ---D | M] (SpecialSavings) -- C:\Users\marc\AppData\Roaming\Mozilla\Extensions\SpecialSavings@SpecialSavings.com > in the current context!
                                  Error: Unable to interpret <[2013/04/20 20:54:11 | 000,000,000 | ---D | M] (Speed Analysis 2) -- C:\Users\marc\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com > in the current context!
                                  Error: Unable to interpret <CHR - default_search_provider: qvo6 (Enabled) > in the current context!
                                  ========== COMMANDS ==========

                                  [EMPTYTEMP]

                                  User: All Users

                                  User: Default
                                  ->Temp folder emptied: 0 bytes
                                  ->Temporary Internet Files folder emptied: 0 bytes

                                  User: Default User
                                  ->Temp folder emptied: 0 bytes
                                  ->Temporary Internet Files folder emptied: 0 bytes

                                  User: marc
                                  ->Temp folder emptied: 15027009 bytes
                                  ->Temporary Internet Files folder emptied: 272793190 bytes
                                  ->Java cache emptied: 0 bytes
                                  ->Google Chrome cache emptied: 19781503 bytes
                                  ->Flash cache emptied: 1887 bytes

                                  User: Public

                                  User: UpdatusUser
                                  ->Temp folder emptied: 0 bytes
                                  ->Temporary Internet Files folder emptied: 0 bytes

                                  %systemdrive% .tmp files removed: 0 bytes
                                  %systemroot% .tmp files removed: 0 bytes
                                  %systemroot%\System32 .tmp files removed: 0 bytes
                                  %systemroot%\System32 (64bit) .tmp files removed: 0 bytes
                                  %systemroot%\System32\drivers .tmp files removed: 0 bytes
                                  Windows Temp folder emptied: 101000 bytes
                                  %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 36058497 bytes
                                  RecycleBin emptied: 9145484 bytes

                                  Total Files Cleaned = 337,00 mb

                                  OTL by OldTimer - Version 3.2.69.0 log created on 07072013_140436

                                  Files\Folders moved on Reboot...
                                  C:\Users\marc\AppData\Local\Temp\Low\JavaDeployReg.log moved successfully.
                                  C:\Users\marc\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ZVIL3XJL\ai[6].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ZVIL3XJL\ai[7].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ZVIL3XJL\ai[8].htm moved successfully.
                                  File\Folder C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ZVIL3XJL\fastbutton[6].htm not found!
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ZVIL3XJL\hovercard[1].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ZVIL3XJL\xd_arbiter[1].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ZVIL3XJL\xd_arbiter[2].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XM57T8TF\afr[1].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XM57T8TF\ai[4].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XM57T8TF\emily[1].htm moved successfully.
                                  File\Folder C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XM57T8TF\ticker_h[1].htm not found!
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\SPK2K8IF\ai[6].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\SPK2K8IF\facebook_com[1].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\SPK2K8IF\frame[1].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\SPK2K8IF\lavenir_net[1].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\SF1Z3157\hub[1].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\QDKR6BU5\files[1].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\QDKR6BU5\hub[1].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PIP0L4G2\gplus_notifications_gadget[1].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PIP0L4G2\players[1].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ONZF5UYP\01[1].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ONZF5UYP\0[3].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ONZF5UYP\0[5].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ONZF5UYP\ads[6].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ONZF5UYP\affich-28140450-virus[1].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ONZF5UYP\d=1[1].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ONZF5UYP\frame[1].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\MB9RR2JB\ai[8].htm moved successfully.
                                  File\Folder C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\MB9RR2JB\onelocationsearch[1].htm not found!
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8M8IULTX\ai[6].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8M8IULTX\player_nost_hp[1].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8M8IULTX\player_nrj[1].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\6P8T2IS4\frame[3].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\6P8T2IS4\iframe[2].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\6CBF1VGB\ai[11].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\6CBF1VGB\clickBoxAdSelection[1].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\6CBF1VGB\odIeERVR1c5[1].dat moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\3DBFKGRT\ads[7].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\3DBFKGRT\follow_button.1372833608[1].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\3DBFKGRT\frame[1].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\22THW9N1\ai[6].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\22THW9N1\ave_siaff_zoekbox_static[1].htm moved successfully.
                                  File\Folder C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\22THW9N1\likeCA52YB89.htm not found!
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\22THW9N1\recentposts[1].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\22THW9N1\zrt_lookup[1].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\1XNP6YSJ\chat_message_52df20dbc4522c398abba5d0b6377131[1].dat moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\1XNP6YSJ\frame[1].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\1XNP6YSJ\ticker_307x300_fr[1].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0XK2V2B7\ai[7].htm moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\7A7E08C8-3FF5-45F2-873D-A84D669DC82F.dat moved successfully.
                                  C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\MSIMGSIZ.DAT moved successfully.
                                  File move failed. C:\Users\marc\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.

                                  PendingFileRenameOperations files...

                                  Registry entries deleted on Reboot...

                                  et pufff toujours la???
                                  1. Fish66 Contributeur sécurité
                                    Bonsoir,

                                    Est ce que tu peux m'envoyer une capture d'écran de ce Spotflux ?
                                2. titicrominet Auteur
                                  Bonjour,

                                  Ok merci comment dois-je faire pour mettre une image ici??
                                  Merci
                                  2. titicrominet Auteur
                                    fish,

                                    j'ai été voir dans les processus de démarrage et il n'est pas repris??
                                  5. titicrominet Auteur
                                    ok mais anglais connais pasmerci
                                • 1
                                • 2
                                • 3

                                Discussions similaires

                                Softonic,est-ce un virus ?
                                techmel1

                                6 réponses
                                Chrome://newtab
                                Nova

                                14 réponses
                                Désinstaller Softonic
                                Diguimette

                                5 réponses
                                Supprimer New Tab
                                tysaozon

                                8 réponses
                                Bouton pause/break
                                frans003

                                3 réponses