Fenêtres publicitaires qui s'ouvrent, sous Google Chrome !
Résolu
Chany04
Messages postés
10
Statut
Membre
-
yoann090 Messages postés 10597 Statut Contributeur sécurité -
yoann090 Messages postés 10597 Statut Contributeur sécurité -
Bonjour,
J'ai des fenêtres publicitaires qui s'ouvrent tout le temps !!!! J'ai fais un scanne avec ZHPDiag, et voici le rapport :
http://cjoint.com/13ju/CGftEeyRoVB.htm
Aidez moi s'il vous plait, je n'en peux plus avec toutes ces fenêtres !! :(
Merci bien.
J'ai des fenêtres publicitaires qui s'ouvrent tout le temps !!!! J'ai fais un scanne avec ZHPDiag, et voici le rapport :
http://cjoint.com/13ju/CGftEeyRoVB.htm
Aidez moi s'il vous plait, je n'en peux plus avec toutes ces fenêtres !! :(
Merci bien.
4 réponses
-
Bonjour, tu as énormément d'adware dans ton pc.
* Télécharge AdwCleaner ( d'Xplode ) sur ton bureau :
-Lance le, clique sur [Suppression] puis patiente le temps du scan.
Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse.-
-
-
-
Voilà après le truc de Adwcleaner ça a donné cela:
# AdwCleaner v2.304 - Rapport
créé le 05/07/2013 à 19:30:03
# Mis à jour le 03/07/2013
par Xplode
# Système d'exploitation :
Windows 7 Home Premium
Service Pack 1 (64 bits)
# Nom d'utilisateur : usqger
- USQGER-PC
# Mode de démarrage : Normal
# Exécuté depuis : C:\Users
\usqger\Downloads
\adwcleaner.exe
# Option [Suppression]
***** [Services] *****
Arrêté & Supprimé :
IBUpdaterService
Arrêté & Supprimé : MAJTuto
***** [Fichiers / Dossiers]
*****
Dossier Supprimé : C:\Program
Files (x86)\1ClickDownload
Dossier Supprimé : C:\Program
Files (x86)\allsearch
Dossier Supprimé : C:\Program
Files (x86)\Gophoto.it
Dossier Supprimé : C:\Program
Files (x86)\Iminent
Dossier Supprimé : C:\Program
Files (x86)\PCtuto
Dossier Supprimé : C:\Program
Files (x86)\Services x86
Dossier Supprimé : C:\Program
Files (x86)\service-x86
Dossier Supprimé : C:\Program
Files (x86)\TornTV.com
Dossier Supprimé : C:\Program
Files (x86)\vShare
Dossier Supprimé : C:\Program
Files\Babylon
Dossier Supprimé : C:
\ProgramData\Babylon
Dossier Supprimé : C:
\ProgramData
\boost_interprocess
Dossier Supprimé : C:
\ProgramData\IBUpdaterService
Dossier Supprimé : C:\Users
\usqger\AppData\Local
\comnetwork
Dossier Supprimé : C:\Users
\usqger\AppData\Local\EoJet
Dossier Supprimé : C:\Users
\usqger\AppData\Local\Google
\Chrome\User Data\Default
\Extensions
\cfcbmgbfdbijmjgjihagbomfbjfj
mgon
Dossier Supprimé : C:\Users
\usqger\AppData\Local\Google
\Chrome\User Data\Default
\Extensions
\cnmdgidklhhnmppphpohildcefna
aflp
Dossier Supprimé : C:\Users
\usqger\AppData\Local\Google
\Chrome\User Data\Default
\Extensions
\pfmopbbadnfoelckkcmjjeaaegjp
jjbk
Dossier Supprimé : C:\Users
\usqger\AppData\Local
\Kreapixel
Dossier Supprimé : C:\Users
\usqger\AppData\Local\MAJTuto
Dossier Supprimé : C:\Users
\usqger\AppData\Local
\PackageAware
Dossier Supprimé : C:\Users
\usqger\AppData\Local\PCtuto
Dossier Supprimé : C:\Users
\usqger\AppData\Local
\service-x86
Dossier Supprimé : C:\Users
\usqger\AppData\Local\Temp
\boost_interprocess
Dossier Supprimé : C:\Users
\usqger\AppData\LocalLow
\Bandoo
Dossier Supprimé : C:\Users
\usqger\AppData\LocalLow
\searchquband
Dossier Supprimé : C:\Users
\usqger\AppData\LocalLow
\vShare
Dossier Supprimé : C:\Users
\usqger\AppData\Roaming
\Babylon
Dossier Supprimé : C:\Users
\usqger\AppData\Roaming
\Bandoo
Dossier Supprimé : C:\Users
\usqger\AppData\Roaming\file
scout
Dossier Supprimé : C:\Users
\usqger\AppData\Roaming\iWin
Dossier Supprimé : C:\Users
\usqger\AppData\Roaming
\Microsoft\Windows\Start
Menu\Programs\TornTV.com
Dossier Supprimé : C:\Users
\usqger\AppData\Roaming
\PCtuto
Dossier Supprimé : C:\Users
\usqger\AppData\Roaming
\PerformerSoft
Dossier Supprimé : C:\Users
\usqger\AppData\Roaming
\SpeedanAlysis
Dossier Supprimé : C:\Users
\usqger\AppData\Roaming
\WebPlayerBdd
Dossier Supprimé : C:\Users
\usqger\AppData\Roaming
\yourfiledownloader
Fichier Supprimé : C:
\ProgramData\Microsoft
\Windows\Start Menu\Programs
\eBay.lnk
Fichier Supprimé : C:
\ProgramData\Microsoft
\Windows\Start Menu\Programs
\WebPlayerV2.lnk
Fichier Supprimé : C:\user.js
Fichier Supprimé : C:\Users
\usqger\AppData\Local\Temp
\Searchqu.ini
Fichier Supprimé : C:\Users
\usqger\AppData\Local\Temp
\searchqutoolbar-manifest.xml
Fichier Supprimé : C:\Users
\usqger\AppData\Local\Temp
\SetupDataMngr_Searchqu.exe
Fichier Supprimé : C:\Users
\usqger\AppData\Roaming
\Microsoft\Windows\Start
Menu\Programs\WebPlayerV2.lnk
***** [Registre] *****
Clé Supprimée : HKCU
\Software\1ClickDownload
Clé Supprimée : HKCU
\Software\AppDataLow
\Software\Crossrider
Clé Supprimée : HKCU
\Software\AppDataLow
\Software\searchqutoolbar
Clé Supprimée : HKCU
\Software\AppDataLow
\Software\Services x86
Clé Supprimée : HKCU
\Software\AppDataLow
\Software\service-x86
Clé Supprimée : HKCU
\Software\BabylonToolbar
Clé Supprimée : HKCU
\Software\Cr_Installer
Clé Supprimée : HKCU
\Software\DataMngr
Clé Supprimée : HKCU
\Software\DataMngr_Toolbar
Clé Supprimée : HKCU
\Software\Iminent
Clé Supprimée : HKCU
\Software
\InstalledBrowserExtensions
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Settings
\{043C5167-00BB-4324-AF7E-
62013FAEDACF}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Settings
\{11111111-1111-1111-1111-
110211701196}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Settings
\{11111111-1111-1111-1111-
110211971101}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Settings
\{293A63F7-C3B6-423A-9845-
901AC0A7EE6E}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Settings
\{98889811-442D-49DD-99D7-
DC866BE87DBC}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Settings
\{99079A25-328F-4BD4-BE04-
00955ACAA0A7}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Settings
\{B939CF93-F2CB-443D-956C-
DC523D85C9DB}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Settings
\{C2D64FF7-0AB8-4263-89C9-
EA3B0F8F050C}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Settings
\{EEE6C35C-6118-11DC-9C72-
001320C79847}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Stats
\{043C5167-00BB-4324-AF7E-
62013FAEDACF}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Stats
\{11111111-1111-1111-1111-
110211701196}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Stats
\{11111111-1111-1111-1111-
110211971101}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Stats
\{293A63F7-C3B6-423A-9845-
901AC0A7EE6E}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Stats
\{3B7599DF-3D5D-4EF5-BF51-
9C2EDA788E83}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Stats
\{99079A25-328F-4BD4-BE04-
00955ACAA0A7}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Stats
\{B939CF93-F2CB-443D-956C-
DC523D85C9DB}
Clé Supprimée : HKCU
\Software\Microsoft\Windows
\CurrentVersion\Ext\Stats
\{C2D64FF7-0AB8-4263-89C9-
EA3B0F8F050C}
Clé Supprimée : HKCU
\Software\PCTuto
Clé Supprimée : HKCU
\Software\Softonic
Clé Supprimée : HKCU
\Software\vShare
Clé Supprimée : HKCU
\Software\YahooPartnerToolbar
Clé Supprimée : HKCU
\Software\YourFileDownloader
Clé Supprimée : HKCU
\Software\53578dd1bc68b843
Clé Supprimée : HKCU
\Software\Microsoft\Internet
Explorer\SearchScopes
\{0ECDF796-C2DC-4D79-A620-
CCE0C0A66CC9}
Clé Supprimée : HKCU
\Software\Microsoft\Internet
Explorer\SearchScopes
\{9BB47C17-9C68-4BB3-B188-
DD9AF0FD2101}
Clé Supprimée : HKCU
\Software\Microsoft\Internet
Explorer\SearchScopes
\{9BB47C17-9C68-4BB3-B188-
DD9AF0FD22}
Clé Supprimée : HKLM
\Software\Babylon
Clé Supprimée : HKLM
\Software\Bandoo
Clé Supprimée : HKLM
\SOFTWARE\Classes
\1ClicktorrentFile
Clé Supprimée : HKLM
\SOFTWARE\Classes
\1ClicktorrentFile1
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\{1301A8A5-3DFB-4731-A162-
B357D00C9644}
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\{18B9B16E-716F-43DF-A6AD-
512C7D2EB983}
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\{5B1881D1-D9C7-46DF-B041-
1E593282C7D0}
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\{608D3067-77E8-463D-9084-
908966806826}
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\{6536801B-F50C-449B-9476-
093DFD3789E3}
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\{759F1421-4D31-4C1F-8C51-
E4956A037676}
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\{AC662AF2-4601-4A68-84DF-
A3FE83F1A5F9}
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\{BDB69379-802F-4EAF-B541-
F8DE92DD98DB}
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\{C26644C4-2A12-4CA6-8F2E-
0EDE6CF018F3}
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\{D97A8234-F2A2-4AD4-91D5-
FECDB2C553AF}
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\{EA28B360-05E0-4F93-8150-
02891F1D8D3C}
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\BabylonHelper.EXE
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\BandooCore.EXE
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\BrowserConnection.dll
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\DNSBHO.dll
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\PCTutoBHO.DLL
Clé Supprimée : HKLM
\SOFTWARE\Classes\AppID
\PropertySync.EXE
Clé Supprimée : HKLM
\SOFTWARE\Classes
\BandooCore.BandooCore
Clé Supprimée : HKLM
\SOFTWARE\Classes
\BandooCore.BandooCore.1
Clé Supprimée : HKLM
\SOFTWARE\Classes
\BandooCore.ResourcesMngr
Clé Supprimée : HKLM
\SOFTWARE\Classes
\BandooCore.ResourcesMngr.1
Clé Supprimée : HKLM
\SOFTWARE\Classes
\BandooCore.SettingsMngr
Clé Supprimée : HKLM
\SOFTWARE\Classes
\BandooCore.SettingsMngr.1
Clé Supprimée : HKLM
\SOFTWARE\Classes
\BandooCore.StatisticMngr
Clé Supprimée : HKLM
\SOFTWARE\Classes
\BandooCore.StatisticMngr.1
Clé Supprimée : HKLM
\SOFTWARE\Classes
\BrowserConnection.Loader
Clé Supprimée : HKLM
\SOFTWARE\Classes
\BrowserConnection.Loader.1
Clé Supprimée : HKLM
\SOFTWARE\Classes
\CrossriderApp0027096.BHO
Clé Supprimée : HKLM
\SOFTWARE\Classes
\CrossriderApp0027096.BHO.1
Clé Supprimée : HKLM
\SOFTWARE\Classes
\CrossriderApp0027096.Sandbox
Clé Supprimée : HKLM
\SOFTWARE\Classes
\CrossriderApp0027096.Sandbox
.1
Clé Supprimée : HKLM
\SOFTWARE\Classes
\CrossriderApp0029701.BHO
Clé Supprimée : HKLM
\SOFTWARE\Classes
\CrossriderApp0029701.BHO.1
Clé Supprimée : HKLM
\SOFTWARE\Classes
\CrossriderApp0029701.Sandbox
Clé Supprimée : HKLM
\SOFTWARE\Classes
\CrossriderApp0029701.Sandbox
.1
Clé Supprimée : HKLM
\SOFTWARE\Classes\DnsBHO.BHO
Clé Supprimée : HKLM
\SOFTWARE\Classes
\DnsBHO.BHO.1
Clé Supprimée : HKLM
\SOFTWARE\Classes\oneclick
Clé Supprimée : HKLM
\SOFTWARE\Classes\oneclickmg
Clé Supprimée : HKLM
\SOFTWARE\Classes
\PCTutoBHO.PCTBHO
Clé Supprimée : HKLM
\SOFTWARE\Classes
\PCTutoBHO.PCTBHO.1
Clé Supprimée : HKLM
\SOFTWARE\Classes\Prod.cap
Clé Supprimée : HKLM
\SOFTWARE\Classes\PROTOCOLS
\Handler\vsharechrome
Clé Supprimée : HKLM
\SOFTWARE\Classes\TypeLib
\{05E242CB-338E-4A4F-A726-
80BAB386D079}
Clé Supprimée : HKLM
\SOFTWARE\Classes\TypeLib
\{0BF73E27-2734-4F7B-925A-
4BBB1457F5FA}
Clé Supprimée : HKLM
\SOFTWARE\Classes\TypeLib
\{2BF2028E-3F3C-4C05-AB45-
B2F1DCFE0759}
Clé Supprimée : HKLM
\SOFTWARE\Classes\TypeLib
\{3E315C81-442B-431C-AEC8-
ED189699EC24}
Clé Supprimée : HKLM
\SOFTWARE\Classes\TypeLib
\{44444444-4444-4444-4444-
440244704496}
Clé Supprimée : HKLM
\SOFTWARE\Classes\TypeLib
\{8F5F1CB6-EA9E-40AF-A5CA-
C7FD63CC1971}
Clé Supprimée : HKLM
\SOFTWARE\Classes\TypeLib
\{DB538320-D3C5-433C-BCA9-
C4081A054FCF}
Clé Supprimée : HKLM
\SOFTWARE\Classes
\vShare.IMedixProtocol
Clé Supprimée : HKLM
\SOFTWARE\Classes
\vShare.IMedixProtocol.1
Clé Supprimée : HKLM
\SOFTWARE\Classes
\vShare.PugiObj
Clé Supprimée : HKLM
\SOFTWARE\Classes
\vShare.PugiObj.1
Clé Supprimée : HKLM
\SOFTWARE\Classes
\vShare.ScriptHelpers
Clé Supprimée : HKLM
\SOFTWARE\Classes
\vShare.ScriptHelpers.1
Clé Supprimée : HKLM
\Software\DataMngr
Clé Supprimée : HKLM
\Software\Iminent
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\Babylon_RASAPI32
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\Babylon_RASMANCS
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\BabylonTC_RASAPI32
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\BabylonTC_RASMANCS
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\datamngrUI_RASAPI32
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\datamngrUI_RASMANCS
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\Iminent_RASAPI32
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\Iminent_RASMANCS
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\MyBabylontb_RASAPI32
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\MyBabylontb_RASMANCS
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\SearchquMediaBar_RASAPI32
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\SearchquMediaBar_RASMANCS
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\SweetIM_RASAPI32
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\SweetIM_RASMANCS
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\SweetPacksUpdateManager_RASA
PI32
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Tracing
\SweetPacksUpdateManager_RASM
ANCS
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Windows
\CurrentVersion\Ext
\PreApproved\{11111111-1111-
1111-1111-110211701196}
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Windows
\CurrentVersion\Ext
\PreApproved\{11111111-1111-
1111-1111-110211971101}
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Windows
\CurrentVersion\Ext
\PreApproved\{3B7599DF-3D5D-
4EF5-BF51-9C2EDA788E83}
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Windows
\CurrentVersion\Ext
\PreApproved\{6087829B-114F-
42A1-A72B-B4AEDCEA4E5B}
Clé Supprimée : HKLM
\Software\PCTuto
Clé Supprimée : HKLM
\Software\Services x86
Clé Supprimée : HKLM
\Software\service-x86
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\53578dd1bc68b843
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{02054E11-
5113-4BE3-8153-AA8DFB5D3761}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{043C5167-
00BB-4324-AF7E-62013FAEDACF}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{11111111-
1111-1111-1111-110211701196}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{11111111-
1111-1111-1111-110211971101}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{22222222-
2222-2222-2222-220222702296}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{27F69C85-
64E1-43CE-98B5-3C9F22FB408E}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{293A63F7-
C3B6-423A-9845-901AC0A7EE6E}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{3B7599DF-
3D5D-4EF5-BF51-9C2EDA788E83}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{3F3A4B8A-
86FC-43A4-BB00-6D7EBE9D4484}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{761F6A83-
F007-49E4-8EAC-CDB6808EF06F}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{97D69524-
BB57-4185-9C7F-5F05593B771A}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{99079A25-
328F-4BD4-BE04-00955ACAA0A7}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{B543EF05-
9758-464E-9F37-4C28525B4A4C}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{B939CF93-
F2CB-443D-956C-DC523D85C9DB}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{BB76A90B-
2B4C-4378-8506-9A2B6E16943C}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{C2D64FF7-
0AB8-4263-89C9-EA3B0F8F050C}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\CLSID\{C3AB94A4-
BFD0-4BBA-A331-DE504F07D2DB}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{021B4049
-F57D-4565-A693-FD3B04786BFA}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{0362AA09
-808D-48E9-B360-FB51A8CBCE09}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{06844020
-CD0B-3D3D-A7FE-371153013E49}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{06DE5702
-44CF-4B79-B4EF-3DDF653358F5}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{0ADC01BB-303B-3F8E-93DA-
12C140E85460}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{10D3722F-23E6-3901-B6C1-
FF6567121920}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{1675E62B-F911-3B7B-A046-
EB57261212F3}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{192929F2
-9273-3894-91B0-F54671C4C861}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{20ED5AF7
-D9C4-409E-9EB3-D2A44A77FB6D}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{2932897E-3036-43D9-8A64-
B06447992065}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{2DE92D29
-A042-3C37-BFF8-07C7D8893EFA}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{32B80AD6
-1214-45F4-994E-78A5D482C000}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{3A8E103F-B2B7-3BEF-B3B0-
88E29B2420E4}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{43969E3F-3E7C-4911-A8F1-
79C6CA6AC731}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{477F210A-2A86-4666-9C4B-
1189634D2C84}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{478CE5D3
-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{48B7DA4E-69ED-39E3-BAD5-
3E3EFF22CFB0}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{55555555
-5555-5555-5555-550255705596}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{5982F405
-44E4-3BBB-BAC4-CF8141CBBC5C}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{5D8C3CC3
-3C05-38A1-B244-924A23115FE9}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{641593AF-D9FD-30F7-B783-
36E16F7A2E08}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{66666666
-6666-6666-6666-660266706696}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{711FC48A-1356-3932-94D8-
A8B733DBC7E4}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{72227B7F-1F02-3560-95F5-
592E68BACC0C}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{7B5E8CE3
-4722-4C0E-A236-A6FF731BEF37}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{890D4F59
-5ED0-3CB4-8E0E-74A5A86E7ED0}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{8C68913C-AC3C-4494-8B9C-
984D87C85003}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{8D019513
-083F-4AA5-933F-7D43A6DA82C4}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{923F6FB8
-A390-370E-A0D2-DD505432481D}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{9BBB26EF-B178-35D6-9D3D-
B485F4279FE5}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{A62DDBE0
-8D2A-339A-B089-8CBCC5CD322A}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{A82AD04D-0B8E-3A49-947B-
6A69A8A9C96D}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{ADEB3CC9
-A05D-4FCC-BD09-9025456AA3EA}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{B06D4521
-D09C-3F41-8E39-9D784CCA2A75}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{C06DAD42
-6F39-4CE1-83CC-9A8B9105E556}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{C2E799D0
-43A5-3477-8A98-FC5F3677F35C}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{C815E3DA-0823-49B0-9270-
D1771D58B317}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{D16107CD-2AD5-46A8-BA59-
303B7C32C500}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{D25B101F-8188-3B43-9D85-
201F372BC205}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{D2BA7595
-5E44-3F1E-880F-03B3139FA5ED}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{D35F5C81
-17D9-3E1C-A1FC-4472542E1D25}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{D8FA96CA-B250-312C-AF34-
4FF1DD72589D}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{DAFC1E63
-3359-416D-9BC2-E7DCA6F7B0F3}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{DC5E5C44
-80FD-3697-9E65-9F286D92F3E7}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{E1B4C9DE-D741-385F-981E-
6745FACE6F01}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{E2ED56B6
-35FC-4484-9530-EC87FB458E78}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{E7B623F5
-9715-3F9F-A671-D1485A39F8A2}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{ED916A7B-7C68-3198-B87D-
2DABC30A5587}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{EFA1BDB2
-BB3D-3D9A-8EB5-D0D22E0F64F4}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{F4CBF4DD-F8FE-35BA-BB7E-
68304DAAB70B}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface
\{FC32005D-E27C-32E0-ADFA-
152F598B75E7}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Classes\Interface\{FF871E51
-2655-4D06-AED5-745962A96B32}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node\Google
\Chrome\Extensions
\cfcbmgbfdbijmjgjihagbomfbjfj
mgon
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node\Google
\Chrome\Extensions
\jcdgjdiieiljkfkdcloehkohchhp
ekkn
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node\Google
\Chrome\Extensions
\pfmopbbadnfoelckkcmjjeaaegjp
jjbk
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node\Google
\Chrome\Extensions
\pmlghpafmmnmmkjdhacccolfgnki
boco
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Low Rights\ElevationPolicy
\{11111111-1111-1111-1111-
110211971101}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Low Rights\ElevationPolicy
\{21111111-1111-1111-1111-
110211971101}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Low Rights\ElevationPolicy
\{424624F4-C5DD-4E1D-BDD0-
1E9C9B7799CC}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Low Rights\ElevationPolicy
\{628F3201-34D0-49C0-BB9A-
82A26AEFB291}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Low Rights\ElevationPolicy
\{68B81CCD-A80C-4060-8947-
5AE69ED01199}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Low Rights\ElevationPolicy
\{7F000001-DB8E-F89C-2FEC-
49BF726F8C12}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Low Rights\ElevationPolicy
\{9C8A3CA5-889E-4554-BEEC-
EC0876E4E96A}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Low Rights\ElevationPolicy
\{C2D64FF7-0AB8-4263-89C9-
EA3B0F8F050C}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Low Rights\ElevationPolicy
\{E6B969FB-6D33-48D2-9061-
8BBD4899EB08}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Low Rights\ElevationPolicy
\{F9189560-573A-4FDE-B055-
AE7B0F4CF080}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\SearchScopes\{9BB47C17-9C68
-4BB3-B188-DD9AF0FD2101}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\SearchScopes\{9BB47C17-9C68
-4BB3-B188-DD9AF0FD22}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Explorer
\Browser Helper Objects
\{043C5167-00BB-4324-AF7E-
62013FAEDACF}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Explorer
\Browser Helper Objects
\{11111111-1111-1111-1111-
110211701196}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Explorer
\Browser Helper Objects
\{11111111-1111-1111-1111-
110211971101}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Explorer
\Browser Helper Objects
\{293A63F7-C3B6-423A-9845-
901AC0A7EE6E}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Explorer
\Browser Helper Objects
\{B939CF93-F2CB-443D-956C-
DC523D85C9DB}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Explorer
\Browser Helper Objects
\{C2D64FF7-0AB8-4263-89C9-
EA3B0F8F050C}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Uninstall
\{77236F9C-987C-40EC-832B-
5BD6181E4846}
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Uninstall
\PCTuto Maj_is1
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Uninstall
\PcTuto_is1
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Uninstall
\SearchTheWebARP
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Uninstall
\Services x86
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Uninstall
\service-x86
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Uninstall
\UpdatePCTuto_is1
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Uninstall
\Updater Service
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Uninstall
\vShare
Clé Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Windows
\CurrentVersion\Uninstall
\Wincore MediaBar
Clé Supprimée : HKLM
\Software\YourFileDownloader
Clé Supprimée : HKLM
\SOFTWARE\Classes\CLSID
\{B939CF93-F2CB-443D-956C-
DC523D85C9DB}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{021B4049-F57D-4565-A693-
FD3B04786BFA}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{0362AA09-808D-48E9-B360-
FB51A8CBCE09}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{06844020-CD0B-3D3D-A7FE-
371153013E49}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{06DE5702-44CF-4B79-B4EF-
3DDF653358F5}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{0ADC01BB-303B-3F8E-93DA-
12C140E85460}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{10D3722F-23E6-3901-B6C1-
FF6567121920}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{1675E62B-F911-3B7B-A046-
EB57261212F3}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{192929F2-9273-3894-91B0-
F54671C4C861}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{20ED5AF7-D9C4-409E-9EB3-
D2A44A77FB6D}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{2932897E-3036-43D9-8A64-
B06447992065}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{2DE92D29-A042-3C37-BFF8-
07C7D8893EFA}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{32B80AD6-1214-45F4-994E-
78A5D482C000}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{3A8E103F-B2B7-3BEF-B3B0-
88E29B2420E4}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{43969E3F-3E7C-4911-A8F1-
79C6CA6AC731}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{477F210A-2A86-4666-9C4B-
1189634D2C84}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{478CE5D3-D38E-3FFE-8DBE-
8C4A0F1C4D8D}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{4897BBA6-48D9-468C-8EFA-
846275D7701B}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{48B7DA4E-69ED-39E3-BAD5-
3E3EFF22CFB0}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{55555555-5555-5555-5555-
550255705596}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{5982F405-44E4-3BBB-BAC4-
CF8141CBBC5C}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{5D8C3CC3-3C05-38A1-B244-
924A23115FE9}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{641593AF-D9FD-30F7-B783-
36E16F7A2E08}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{66666666-6666-6666-6666-
660266706696}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{711FC48A-1356-3932-94D8-
A8B733DBC7E4}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{72227B7F-1F02-3560-95F5-
592E68BACC0C}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{7B5E8CE3-4722-4C0E-A236-
A6FF731BEF37}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{890D4F59-5ED0-3CB4-8E0E-
74A5A86E7ED0}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{8C68913C-AC3C-4494-8B9C-
984D87C85003}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{8D019513-083F-4AA5-933F-
7D43A6DA82C4}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{923F6FB8-A390-370E-A0D2-
DD505432481D}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{9BBB26EF-B178-35D6-9D3D-
B485F4279FE5}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{A62DDBE0-8D2A-339A-B089-
8CBCC5CD322A}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{A82AD04D-0B8E-3A49-947B-
6A69A8A9C96D}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{ADEB3CC9-A05D-4FCC-BD09-
9025456AA3EA}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{B06D4521-D09C-3F41-8E39-
9D784CCA2A75}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{C06DAD42-6F39-4CE1-83CC-
9A8B9105E556}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{C2E799D0-43A5-3477-8A98-
FC5F3677F35C}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{C815E3DA-0823-49B0-9270-
D1771D58B317}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{D16107CD-2AD5-46A8-BA59-
303B7C32C500}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{D25B101F-8188-3B43-9D85-
201F372BC205}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{D2BA7595-5E44-3F1E-880F-
03B3139FA5ED}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{D35F5C81-17D9-3E1C-A1FC-
4472542E1D25}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{D8FA96CA-B250-312C-AF34-
4FF1DD72589D}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{DAFC1E63-3359-416D-9BC2-
E7DCA6F7B0F3}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{DC5E5C44-80FD-3697-9E65-
9F286D92F3E7}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{E1B4C9DE-D741-385F-981E-
6745FACE6F01}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{E2ED56B6-35FC-4484-9530-
EC87FB458E78}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{E7B623F5-9715-3F9F-A671-
D1485A39F8A2}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{ED916A7B-7C68-3198-B87D-
2DABC30A5587}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{EFA1BDB2-BB3D-3D9A-8EB5-
D0D22E0F64F4}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{F4CBF4DD-F8FE-35BA-BB7E-
68304DAAB70B}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{FC32005D-E27C-32E0-ADFA-
152F598B75E7}
Clé Supprimée : HKLM
\SOFTWARE\Classes\Interface
\{FF871E51-2655-4D06-AED5-
745962A96B32}
Clé Supprimée : HKLM
\SOFTWARE\DataMngr
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Internet
Explorer\Low Rights
\ElevationPolicy\{424624F4-
C5DD-4E1D-BDD0-1E9C9B7799CC}
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Internet
Explorer\Low Rights
\ElevationPolicy\{7F000001-
DB8E-F89C-2FEC-49BF726F8C12}
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Internet
Explorer\Low Rights
\ElevationPolicy\{9C8A3CA5-
889E-4554-BEEC-EC0876E4E96A}
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Internet
Explorer\Low Rights
\ElevationPolicy\{F9189560-
573A-4FDE-B055-AE7B0F4CF080}
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Internet
Explorer\SearchScopes
\{9BB47C17-9C68-4BB3-B188-
DD9AF0FD2101}
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Internet
Explorer\SearchScopes
\{9BB47C17-9C68-4BB3-B188-
DD9AF0FD22}
Clé Supprimée : HKLM
\SOFTWARE\Microsoft\Windows
\CurrentVersion\Explorer
\Browser Helper Objects
\{B939CF93-F2CB-443D-956C-
DC523D85C9DB}
Donnée Supprimée : [x64]
HKLM\..\Windows
[AppInit_DLLs] = C:
\PROGRA~2\BEARSH~1\MediaBar
\Datamngr\x64\datamngr.dll
Donnée Supprimée : [x64]
HKLM\..\Windows
[AppInit_DLLs] = C:
\PROGRA~2\BEARSH~1\MediaBar
\Datamngr\x64\IEBHO.dll
Valeur Supprimée : HKCU
\Software\Microsoft\Internet
Explorer\Toolbar\WebBrowser
[{043C5167-00BB-4324-AF7E-
62013FAEDACF}]
Valeur Supprimée : HKCU
\Software\Mozilla\Firefox
\Extensions
[speedanalysis@SpeedAnalysis.
com]
Valeur Supprimée : HKLM
\SOFTWARE\Microsoft\Windows
\CurrentVersion\Run
[comnetwork]
Valeur Supprimée : HKLM
\SOFTWARE\Microsoft\Windows
\CurrentVersion\Run
[DataMngr]
Valeur Supprimée : HKLM
\SOFTWARE\Microsoft\Windows
\CurrentVersion\Run [PcTuto]
Valeur Supprimée : HKLM
\SOFTWARE\Mozilla\Firefox
\Extensions
[speedanalysis@SpeedAnalysis.
com]
Valeur Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Toolbar [{043C5167-00BB-
4324-AF7E-62013FAEDACF}]
Valeur Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Toolbar [{C2D64FF7-0AB8-
4263-89C9-EA3B0F8F050C}]
Valeur Supprimée : HKLM
\SOFTWARE\Wow6432Node
\Microsoft\Internet Explorer
\Toolbar [10]
Valeur Supprimée : HKLM
\SOFTWARE\Microsoft\Internet
Explorer\Toolbar [10]
***** [Navigateurs] *****
-\\ Internet Explorer
v10.0.9200.16611
Remplacé : [HKCU\Software
\Microsoft\Internet Explorer
\Main - Start Page] =
hxxp://www2.delta-
search.com/?
affID=119776&babsrc=HP_ss&mnt
rId=8AC8001E64782DBB -->
hxxp://www.google.com
-\\ Google Chrome
v27.0.1453.116
Fichier : C:\Users\usqger
\AppData\Local\Google\Chrome
\User Data\Default
\Preferences
Supprimée [l.2958] : homepage
= "hxxp://www2.delta-
search.com/?
affID=119776&babsrc=HP_ss&mnt
rId=8AC8001E64782DBB",
Supprimée [l.3650] :
urls_to_restore_on_startup =
[ "hxxp://www2.delta-
search.com/?
affID=119776&babsrc=HP_ss&mnt
rI[...]
*************************
AdwCleaner[S1].txt - [30895
octets] - [05/07/2013
19:30:03]
########## EOF - C:
\AdwCleaner[S1].txt - [30956
octets] ########## -
-
-
Tu mets en bas du truc qui te demande d'executer juste en bas y'a une case soit tu la decoche ou tu la decoche pas
-
-
-
-
Alors après avoir refait un ZHPDiag, voici le rapport :
Rapport de ZHPDiag v2013.7.5.7 par Nicolas Coolman, Update du 2013-07-05
Run by usqger at 2013-07-05 22:50:51
WebSite: https://nicolascoolman.webs.com/
State : Version à jour.
WhiteList : Disable
High Elevated Privileges : OK
UAC : Deactivate by program
---\\ Web Browser
MSIE: Internet Explorer v10.0.9200.16618
GCIE: Google Chrome v27.0.1453.116 (Defaut)
OBIE: Safari v5.34.57.2
---\\ Windows Product Information
~ Langage: Français
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 3Q6C9
Windows License : OK
~ Windows Remaining Initializations Number : 2
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ System Protection
Microsoft Security Client FR-FR Language Pack v2.1.1116.0
Windows Defender W7
---\\ System Optimizer
---\\ Peer To Peer (P2P)
---\\ Software Update
Adobe Flash Player 11 Plugin
Java 7 Update 21
---\\ System Information
~ Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3998 MB (53% free)
System Restore: Activé (Enable)
System drive C: has 141 GB (49%) free of 285 GB
---\\ Logged in mode
~ Computer Name: USQGER-PC
~ User Name: usqger
~ All Users Names: usqger, HomeGroupUser$, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator
---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\usqger\AppData\Roaming\
~ %Desktop% : C:\Users\usqger\Desktop\
~ %Favorites% : C:\Users\usqger\Favorites\
~ %LocalAppData% : C:\Users\usqger\AppData\Local\
~ %StartMenu% : C:\Users\usqger\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 141 Go of 285 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 13 Go)
E:\ CD-ROM drive (Not Inserted)
---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Security Center: 32 Scanned in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.2011-02-25 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.2009-07-14 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.12716D987D475B051F35895659159705] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.2013-05-17 - 01:59:03.) -- C:\Windows\System32\wininet.dll [2241024]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.2010-11-20 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.2010-11-20 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.2011-12-28 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.2009-07-14 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.2009-07-14 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.2010-11-20 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.2010-11-20 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.2010-11-20 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.2009-07-14 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.2009-07-14 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.2011-04-27 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.2010-11-20 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.2013-04-12 - 15:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.2009-07-14 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.2010-11-20 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.2009-07-14 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.2010-11-20 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.2010-11-20 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes: Scanned in 00mn 00s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/12
~ Mes musiques (My Musics) : 1/681
~ Mes Videos (My Videos) : 21/25
~ Mes Favoris (My Favorites) : 1/21
~ Mes Documents (My Documents) : 1/677
~ Mon Bureau (My Desktop) : 27/5949
~ Menu demarrer (Programs) : 1/50
~ Hidden Files: Scanned in 00mn 07s
---\\ Processus lancés
[MD5.9157189DC07511ECBBE1D2615D8A2FED] - (.Hewlett-Packard - HP Advisor.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe [1668664] [PID.2144]
[MD5.A605FA7299047381701A09B96C677721] - (.PC Remote - PC Remote Server.) -- C:\Program Files (x86)\PC Remote\PC Remote\PCRemote.exe [884376] [PID.3168]
[MD5.2FB81DD6DAAD0C123D5C4D00A2BF8094] - (.Pas de propriétaire - Viber.) -- C:\Users\usqger\AppData\Local\Viber\Viber.exe [906240] [PID.3252]
[MD5.32C26797AB646074A2BB562F9D10ADB5] - (.Microsoft Corporation - Microsoft Office OneNote Quick Launcher.) -- C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.exe [97680] [PID.3364]
[MD5.A2814FED5A47B00BBC99AC58F93B9337] - (.CyberLink Corp. - HP QuickPlay Resident Program.) -- C:\Program Files (x86)\HP\QuickPlay\QPService.exe [468264] [PID.3672]
[MD5.0771A5C3B78967F9F83C1C429334AD2A] - (. Hewlett-Packard Development Company, L.P. - Quick Launch Buttons.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe [320056] [PID.3700]
[MD5.5516C26A6AF8EB4E2CAB48EC98A74398] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [54576] [PID.3720]
[MD5.8E53B67FA3816E854B07C5DC66E10730] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [296056] [PID.3784]
[MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816] [PID.3892]
[MD5.3B01B800A43CF3FAF5AAA78315BC2148] - (.Nullsoft, Inc. - Winamp Agent.) -- C:\Program Files (x86)\Winamp\winampa.exe [74752] [PID.3988]
[MD5.A9F9D081518AC03A51C1195986076F42] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392] [PID.4016]
[MD5.0DE3C7622EC33126579B1742260F08C2] - (.Pas de propriétaire - HpqToaster Module.) -- C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe [632888] [PID.628]
[MD5.5521928AA79079565B7CB8FCE6806131] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [825808] [PID.2992]
[MD5.7E436B07C60B3A1D992648526732DB4F] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [19604072] [PID.3348]
[MD5.E5A7EA8C5C063943231A071789956893] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [7667712] [PID.932]
[MD5.4FE5C6D40664AE07BE5105874357D2ED] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [57008] [PID.1928]
[MD5.83D8BE94E1CBCBE2EA8372DB1A95A159] - (.Hewlett-Packard Company - LightScribe Service.) -- C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728] [PID.1356]
[MD5.C5052FB77AA42ED440F9F6B4E37145A9] - (.Nero AG - Nero BackItUp.) -- C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [869672] [PID.1988]
[MD5.498EB62A160674E793FA40FD65390625] - (.Pas de propriétaire - RichVideo Module.) -- C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152] [PID.2056]
[MD5.09C87F376507122A5FE1CBE06E015512] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.21.149\GoogleCrashHandler.exe [239496] [PID.2284]
[MD5.9B7EDD3FE7C211C36E921D34D18A3A0A] - (.Hewlett-Packard Company - HP Software Framework WMI Service.) -- C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [1001376] [PID.3128]
[MD5.F9A79C5B27037821112C50A9C8FB367A] - (.Hewlett-Packard Development Company, L.P. - Com for QLB application.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [228408] [PID.3872]
~ Processes Running: Scanned in 00mn 01s
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\usqger\AppData\Local\Google\Chrome\User Data\Default\Preferences
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Store v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [jfmjfhklogoienhpfnppmbcbjfjnkonk] RealPlayer HTML5Video Downloader Extension v.1.5 (Désactivé)
G2 - GCE: Preference [User Data\Default] [lifbcibllhkdhoafpjfnlhfpfgnpldfl] Skype Click to Call v.5.9.0.9216 (Désactivé)
G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activé)
~ Google Browser: 7 Scanned in 00mn 11s
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\usqger\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\prefs.js (.not file.)
C:\Users\usqger\AppData\Roaming\Mozilla\Firefox\Profiles\[opt]rs0\prefs.js
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.20125.0.) -- c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll
P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (.Skype Limited - Facebook Video Calling Plugin.) -- C:\Users\usqger\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
~ Firefox Browser: 3 Scanned in 00mn 00s
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
R0 - HKCU\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww25.allssearch.com/ =>Adware.SocialSkinz
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)) -- C:\Windows\SysWOW64\ieframe.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ IE Browser: 16 Scanned in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 0
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: HP Print Enhancer [64Bits] - {0347C33E-8762-4905-BF09-768834316C61} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer [64Bits] - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Groove GFS Browser Helper [64Bits] - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - GrooveShellExtensions Module.) -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper [64Bits] - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: SkypeIEPluginBHO [64Bits] - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Network Check Helper [64Bits] - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} . (.Hewlett-Packard - HP Network Check IE Plug-in.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O2 - BHO: HP Smart BHO Class [64Bits] - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
~ BHO: 10 Scanned in 00mn 00s
---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.)
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SysTrayApp] . (.IDT, Inc. - IDT PC Audio.) -- C:\Program Files\IDT\WDM\sttray64.exe
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe
O4 - HKCU\..\Run: [HPADVISOR] . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\usqger\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKCU\..\Run: [MobileDocuments] C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe (.not file.)
O4 - HKCU\..\Run: [Akamai NetSession Interface] C:\Users\usqger\AppData\Local\Akamai\netsession_win.exe (.not file.)
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] . (.Nero AG - Nero Home.) -- C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe
O4 - HKCU\..\Run: [PC Remote Server] . (.PC Remote - PC Remote Server.) -- C:\Program Files (x86)\PC Remote\PC Remote\PCRemote.exe
O4 - HKCU\..\Run: [Viber] . (.Pas de propriétaire - Viber.) -- C:\Users\usqger\AppData\Local\Viber\Viber.exe
O4 - HKLM\..\Wow6432Node\Run: [QPService] . (.CyberLink Corp. - HP QuickPlay Resident Program.) -- C:\Program Files (x86)\HP\QuickPlay\QPService.exe
O4 - HKLM\..\Wow6432Node\Run: [UCam_Menu] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Wow6432Node\Run: [QlbCtrl.exe] . (. Hewlett-Packard Development Company, L.P. - Quick Launch Buttons.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
O4 - HKLM\..\Wow6432Node\Run: [UpdatePRCShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe
O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Wow6432Node\Run: [WirelessAssistant] . (.Hewlett-Packard - HP Wireless Assistant Main Program.) -- C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Wow6432Node\Run: [GrooveMonitor] . (.Microsoft Corporation - GrooveMonitor Utility.) -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe
O4 - HKLM\..\Wow6432Node\Run: [AppleSyncNotifier] . (.Apple Inc. - AppleSyncNotifier.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Wow6432Node\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- c:\program files (x86)\real\realplayer\Update\realsched.exe
O4 - HKLM\..\Wow6432Node\Run: [NBKeyScan] . (.Nero AG - Nero BackItUp.) -- C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
O4 - HKLM\..\Wow6432Node\Run: [WinampAgent] . (.Nullsoft, Inc. - Winamp Agent.) -- C:\Program Files (x86)\Winamp\winampa.exe
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe
O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-21-3156846314-1895714274-2719764697-1000\..\Run: [HPADVISOR] . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
O4 - HKUS\S-1-5-21-3156846314-1895714274-2719764697-1000\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\usqger\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKUS\S-1-5-21-3156846314-1895714274-2719764697-1000\..\Run: [MobileDocuments] C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe (.not file.)
O4 - HKUS\S-1-5-21-3156846314-1895714274-2719764697-1000\..\Run: [Akamai NetSession Interface] C:\Users\usqger\AppData\Local\Akamai\netsession_win.exe (.not file.)
O4 - HKUS\S-1-5-21-3156846314-1895714274-2719764697-1000\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] . (.Nero AG - Nero Home.) -- C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe
O4 - HKUS\S-1-5-21-3156846314-1895714274-2719764697-1000\..\Run: [PC Remote Server] . (.PC Remote - PC Remote Server.) -- C:\Program Files (x86)\PC Remote\PC Remote\PCRemote.exe
O4 - HKUS\S-1-5-21-3156846314-1895714274-2719764697-1000\..\Run: [Viber] . (.Pas de propriétaire - Viber.) -- C:\Users\usqger\AppData\Local\Viber\Viber.exe
~ Application: Scanned in 00mn 00s
---\\ Autres liens utilisateurs (O4)
O4 - GS\TaskBar: Adobe Photoshop CS5.lnk . (.Adobe Systems, Incorporated - Adobe Photoshop CS5.) -- C:\Program Files (x86)\Adobe\Adobe Photoshop CS5 Portable\Adobe Photoshop CS5.exe
O4 - GS\TaskBar: CopyTrans Manager (Gratuit).lnk . (.WindSolutions - CopyTrans Manager.) -- C:\Users\usqger\AppData\Roaming\WindSolutions\CopyTransControlCenter\Applications\CopyTransManager.exe
O4 - GS\TaskBar: DiskAid.lnk . (...) -- C:\Program Files (x86)\DigiDNA\DiskAid\DiskAid.exe
O4 - GS\TaskBar: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\TaskBar: HPAdvisor.lnk . (.Hewlett-Packard - HP Advisor.) -- C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
O4 - GS\TaskBar: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\TaskBar: Power2Go.lnk . (.CyberLink Corp. - Power2Go.) -- C:\Program Files (x86)\CyberLink\Power2Go\Power2Go.exe
O4 - GS\TaskBar: Safari.lnk . (...) -- C:\Windows\Installer\{C779648B-410E-4BBA-B75B-5815BCEFE71D}\SafariIco.exe
O4 - GS\TaskBar: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe
O4 - GS\TaskBar: Windows Live Movie Maker.lnk . (.Microsoft Corporation - Windows Live Movie Maker.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe
O4 - GS\TaskBar: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Programs: Viber.lnk . (...) -- C:\Users\usqger\AppData\Local\Viber\Viber.exe
O4 - GS\QuickLaunch: Apple Safari.lnk . (...) -- C:\Windows\Installer\{C779648B-410E-4BBA-B75B-5815BCEFE71D}\SafariIco.exe
O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\QuickLaunch: Microsoft Office Outlook.lnk . (.Microsoft Corporation - Microsoft Office Outlook.) -- C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.exe
O4 - GS\QuickLaunch: Nero Home.lnk . (.Nero AG - Nero Home.) -- C:\Program Files (x86)\Nero\Nero8\Nero Home\NeroHome.exe
O4 - GS\QuickLaunch: Nero StartSmart.lnk . (.Nero AG - Nero StartSmart 8 Application.) -- C:\Program Files (x86)\Nero\Nero8\Nero StartSmart\NeroStartSmart.exe
O4 - GS\QuickLaunch: Viber.lnk . (...) -- C:\Users\usqger\AppData\Local\Viber\Viber.exe
O4 - GS\QuickLaunch: WildTangent Games App - hp.lnk . (.WildTangent - WildTangent Games App.) -- C:\Program Files (x86)\WildTangent Games\App\GameConsole-wt.exe
O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.) -- C:\Windows\system32\eudcedit.exe
O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) -- C:\Windows\system32\WFS.exe
O4 - GS\SendTo: Format Factory.lnk . (.Free Time - FormatFactory.) -- C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe
O4 - GS\SendTo: Skype.lnk . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O4 - GS\Desktop: Freecell - Raccourci.lnk - Clé orpheline
O4 - GS\Desktop: Solitaire - Raccourci.lnk - Clé orpheline
O4 - GS\Desktop: Spider Solitaire - Raccourci.lnk - Clé orpheline
~ Global Startup: Scanned in 00mn 02s
---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s
---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll
~ Winsock: 9 Scanned in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{4A9D51E7-123C-482E-9953-08269987FF92}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{AB346EA4-9522-464B-BCE8-F8D148F217B1}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{4A9D51E7-123C-482E-9953-08269987FF92}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{AB346EA4-9522-464B-BCE8-F8D148F217B1}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{4A9D51E7-123C-482E-9953-08269987FF92}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{AB346EA4-9522-464B-BCE8-F8D148F217B1}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain: Scanned in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s
---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s
---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Andrea ST Filters Service (AESTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (64-bit).) - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) . (.LSI Corporation - LSI Soft Modem Call Progress Service.) - C:\Program Files\LSI SoftModem\agr64svc.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Support Assistant Service (HP Support Assistant Service) . (.Hewlett-Packard Company - HP Support Assistant Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: LightScribeService Direct Disc Labeling (LightScribeService) . (.Hewlett-Packard Company - LightScribe Service.) - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 3 (Nero BackItUp Scheduler 3) . (.Nero AG - Nero BackItUp.) - C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Pas de propriétaire - RichVideo Module.) - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Audio Service (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\STacSV64.exe
~ Services: 11 Scanned in 00mn 04s
---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s
---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3156846314-1895714274-2719764697-1000Core.job [1078]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3156846314-1895714274-2719764697-1000UA.job [1100]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1064]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1068]
[MD5.9915504F602D277EE47FD843A677FD15] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [256904]
[MD5.9EB925EDC8CF1C3D06E50E9348B54A0A] [APT] [FacebookUpdateTaskUserS-1-5-21-3156846314-1895714274-2719764697-1000Core] (.Facebook Inc..) -- C:\Users\usqger\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096]
[MD5.9EB925EDC8CF1C3D06E50E9348B54A0A] [APT] [FacebookUpdateTaskUserS-1-5-21-3156846314-1895714274-2719764697-1000UA] (.Facebook Inc..) -- C:\Users\usqger\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.D412AC27FE3C9F8BC19741DAC0E0329D] [APT] [RealUpgradeLogonTaskS-1-5-21-3156846314-1895714274-2719764697-1000] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [178800]
[MD5.D412AC27FE3C9F8BC19741DAC0E0329D] [APT] [RealUpgradeScheduledTaskS-1-5-21-3156846314-1895714274-2719764697-1000] (.RealNetworks, Inc..) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [178800]
[MD5.00000000000000000000000000000000] [APT] [Your File Updater] (...) -- C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe (.not file.) [0] =>PUP.YourFileDownloader
[MD5.5521928AA79079565B7CB8FCE6806131] [APT] [{9855A1E1-5153-4EDA-9CA4-5CF7B3890933}] (.Google Inc..) -- c:\program files (x86)\google\chrome\application\chrome.exe [825808]
[MD5.00000000000000000000000000000000] [APT] [{A1001EE2-35FD-473E-9870-18856DFAC401}] (...) -- c:\users\usqger\appdata\local\google\chrome\application\chrome.exe (.not file.) [0]
[MD5.5521928AA79079565B7CB8FCE6806131] [APT] [{A1687005-6750-4066-9BD2-5A13A629FE1C}] (.Google Inc..) -- c:\program files (x86)\google\chrome\application\chrome.exe [825808]
[MD5.00000000000000000000000000000000] [APT] [{E16E0529-0AEE-41B8-A96D-717ACEE787B7}] (...) -- C:\Users\usqger\Desktop\Serah v1.0\serah_setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{E848C6FF-7152-497D-B0D8-30DB6BEF6EE7}] (...) -- C:\Users\usqger\Desktop\AV Voice Changer Diamond Edition 5.0 Full\VCS_Diamond50.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{EE0547DF-98FE-46C6-83FF-BFFDF2366EA0}] (...) -- C:\Users\usqger\Desktop\PhotoshopCS3Portable\PhotoshopSetup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{FA83D1CF-6924-410B-8924-BA13F2047930}] (...) -- C:\Users\usqger\Downloads\PhotoshopCS3Portable\PhotoshopPortable.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{FC7F2588-C993-4437-BAE4-C50586BC561F}] (...) -- C:\Users\usqger\Desktop\PhotoshopCS3Portable\PhotoshopPortable.exe (.not file.) [0]
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984]
[MD5.0AE2C218A9AB6C16D79160CCE55B35FC] [APT] [HP Support Assistant Quick Start] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [525728]
[MD5.0AE2C218A9AB6C16D79160CCE55B35FC] [APT] [PC Health Analysis] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [525728]
[MD5.0AE2C218A9AB6C16D79160CCE55B35FC] [APT] [PC Health Analysis Install] (.Hewlett-Packard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [525728]
[MD5.28E1A34ED1B810BC2F4734F2DBFF2A76] [APT] [Update Check] (.Hewlett-Packard Company.) -- C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [615736]
~ Scheduled Task: 27 Scanned in 00mn 05s
---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Internet Explorer [64Bits] - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Active Setup: 10 Scanned in 00mn 00s
---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\system32\DRIVERS\serial.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Drivers: 63 Scanned in 00mn 00s
---\\ Logiciels installés (O42)
O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {287ECFA4-719A-2143-A09B-D6A12DE54E40}
O42 - Logiciel: Adobe Anchor Service CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {90176341-0A8B-4CCC-A78D-F862228A6B95}
O42 - Logiciel: Adobe Asset Services CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {8BC84ECC-EA87-49C0-93C0-2B5DF62745CD}
O42 - Logiciel: Adobe Bridge CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {68CF6DD2-8BA3-4A70-81D8-7CC5F24C9BA2}
O42 - Logiciel: Adobe Bridge Start Meeting - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {7F3A2319-79CF-4701-95FB-034E99281808}
O42 - Logiciel: Adobe CMaps - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
O42 - Logiciel: Adobe Camera Raw 4.0 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {183B7569-90FB-4C56-9761-0EEB002CAB83}
O42 - Logiciel: Adobe Default Language CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
O42 - Logiciel: Adobe Device Central CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {20B83B31-09C4-4F0E-9774-EF8A12A0A527}
O42 - Logiciel: Adobe Dreamweaver CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe_435a6af7459cb02a9c1138113a26e93
O42 - Logiciel: Adobe Dreamweaver CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {F01D5ED5-D53A-4468-B428-149DC2CB3110}
O42 - Logiciel: Adobe ExtendScript Toolkit 2 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {4DF98D0B-637E-42B4-B9D6-EB7693D2FBF8}
O42 - Logiciel: Adobe Extension Manager CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {2A539CD9-0F75-4875-9A32-E06DD93C4114}
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Help Viewer CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {733D84D6-AAFD-4368-A1D0-F2734F6B9082}
O42 - Logiciel: Adobe PDF Library Files - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
O42 - Logiciel: Adobe Photoshop CS5 Portable - (.Adobe.) [HKLM][64Bits] -- {61172A5D-60AA-43BE-958F-90451024E768}_is1
O42 - Logiciel: Adobe SVG Viewer 3.0 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe SVG Viewer
O42 - Logiciel: Adobe Setup - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {3A12C952-61D5-4C3B-B68B-8CFBE47E22F1}
O42 - Logiciel: Adobe Type Support - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
O42 - Logiciel: Adobe Update Manager CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {D1C59F81-66FD-4E8E-B9F7-F4B2442D5222}
O42 - Logiciel: Adobe Version Cue CS3 Client - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {41C3C974-EC5E-494C-AFE6-E31D92E2E6CB}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {5D09C772-ECB3-442B-9CC6-B4341C78FDC2}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {2F72F540-1F60-4266-9506-952B21D6640D}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {C6579A65-9CAE-4B31-8B6B-3306E0630A66}
O42 - Logiciel: Barn Yarn Collector's Edition - (.WildTangent.) [HKLM][64Bits] -- WTA-0c085747-6621-4f00-b236-c85682c12a23
O42 - Logiciel: Big City Adventures Paris - (.WildTangent.) [HKLM][64Bits] -- WTA-1c408e46-aad7-4724-9f6d-0fd91fb1f7bd
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
O42 - Logiciel: Brink of Consciousness: Lonely Hearts Murders - (.WildTangent.) [HKLM][64Bits] -- WTA-7100de58-bc0b-4a0a-bc9b-7805e25aee0d
O42 - Logiciel: Chiavetta Internet - (.Huawei Technologies Co.,Ltd.) [HKLM][64Bits] -- Chiavetta Internet
O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM][64Bits] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}
O42 - Logiciel: CopyTrans Suite - (...) [HKLM][64Bits] -- CopyTrans Suite
O42 - Logiciel: CopyTrans Suite désinstallation uniquement - (.WindSolutions.) [HKCU][64Bits] -- CopyTrans Suite
O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM][64Bits] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}
O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: Dark Lore Mysteries: The Hunt For Truth - (.WildTangent.) [HKLM][64Bits] -- WTA-48c68e87-bcc3-4f60-89b2-062830c1d933
O42 - Logiciel: DiskAid 5.08 - (.DigiDNA.) [HKLM][64Bits] -- DiskAid_is1
O42 - Logiciel: Détection de l'application Winamp - (.Nullsoft, Inc.) [HKCU][64Bits] -- Winamp Detect
O42 - Logiciel: Easter Eggztravaganza 2 - (.WildTangent.) [HKLM][64Bits] -- WTA-379dac36-9f8c-42c1-b27c-d510eb0931a7
O42 - Logiciel: Facebook Video Calling 1.2.0.287 - (.Skype Limited.) [HKLM][64Bits] -- {B92C5909-1D37-4C51-8397-A28BB28E5DC3}
O42 - Logiciel: Farm Mystery - (.WildTangent.) [HKLM][64Bits] -- WTA-cc383743-f1eb-4675-8695-a00b642d1631
O42 - Logiciel: Forbidden Secrets Alien Town - (.WildTangent.) [HKLM][64Bits] -- WTA-e1f3cddc-f7e2-4532-98dc-e5926eea68ef
O42 - Logiciel: FormatFactory 2.60 - (.Free Time.) [HKLM][64Bits] -- FormatFactory
O42 - Logiciel: Gardenscapes 2 Collector's Edition - (.WildTangent.) [HKLM][64Bits] -- WTA-fb2d5320-db37-4a45-9e58-c11a1635a6d2
O42 - Logiciel: Girls With Secrets - (.WildTangent.) [HKLM][64Bits] -- WTA-8b077fb9-3eaa-47d6-ac1c-bc5e75f381e7
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Google Earth - (.Google.) [HKLM][64Bits] -- {1B30DAC0-DE51-11E2-9A5B-B8AC6F98CCE3}
O42 - Logiciel: HP Advisor - (.Hewlett-Packard.) [HKLM][64Bits] -- {B53E61D7-7C80-40DF-82D2-CF5390D6D20A}
O42 - Logiciel: HP DVD Play 3.7 - (.Hewlett-Packard.) [HKLM][64Bits] -- {45D707E9-F3C4-11D9-A373-0050BAE317E1}
O42 - Logiciel: HP Games - (.WildTangent.) [HKLM][64Bits] -- WildTangent hp Master Uninstall
O42 - Logiciel: HP Quick Launch Buttons - (.Hewlett-Packard.) [HKLM][64Bits] -- {34D2AB40-150D-475D-AE32-BD23FB5EE355}
O42 - Logiciel: HP Setup - (.Hewlett-Packard.) [HKLM][64Bits] -- {F3B912F5-EB57-45AA-B3D1-EB532BCF6EF8}
O42 - Logiciel: HP Smart Web Printing - (.Hewlett-Packard.) [HKLM][64Bits] -- HP Smart Web Printing
O42 - Logiciel: HP Support Assistant - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {EE202411-2C26-49E8-9784-1BC1DBF7DE96}
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {D46D081B-F60E-467E-A7C4-117B70D76731}
O42 - Logiciel: HP User Guides 0148 - (.Hewlett-Packard.) [HKLM][64Bits] -- {9D3318E1-5A9F-4A95-A7A1-7E045403AE34}
O42 - Logiciel: HP Wireless Assistant - (.Hewlett-Packard.) [HKLM][64Bits] -- {54CC7901-804D-4155-B353-21F0CC9112AB}
O42 - Logiciel: Hewlett-Packard ACLM.NET v1.2.1.1 - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {6F340107-F9AA-47C6-B54C-C3A19F11553F}
O42 - Logiciel: IDT Audio - (.IDT.) [HKLM][64Bits] -- {E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}
O42 - Logiciel: In Search of the Lost Temple - (.WildTangent.) [HKLM][64Bits] -- WTA-3e83593d-9e9b-442a-961c-f6fc481acc95
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM][64Bits] -- HDMI
O42 - Logiciel: Java 7 Update 21 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217021FF}
O42 - Logiciel: JavaFX 2.1.1 - (.Oracle Corporation.) [HKLM][64Bits] -- {1111706F-666A-4037-7777-211328764D10}
O42 - Logiciel: Jeux WildTangent - (.WildTangent.) [HKLM][64Bits] -- WildTangent wildgames Master Uninstall
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: LSI HDA Modem - (.LSI Corporation.) [HKLM][64Bits] -- LSI Soft Modem
O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}
O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243}
O42 - Logiciel: LightScribe System Software - (.LightScribe.) [HKLM][64Bits] -- {82EF29B1-9B60-4142-A155-0599216DD053}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Microsoft Antimalware Service FR-FR Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {32E9C1A5-0FDA-4483-987D-DBABF9CC1DD8}
O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM][64Bits] -- {D954C6C2-544B-4091-A47F-11E77162883E}
O42 - Logiciel: Microsoft Security Client FR-FR Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {DC911ADF-7B60-40F2-A112-FB1EB6402D07}
O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Security Client
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM][64Bits] -- {3B160861-7250-451E-B5EE-8B92BF30A710}
O42 - Logiciel: Microsoft XNA Framework Redistributable 4.0 - (.Microsoft Corporation.) [HKLM][64Bits] -- {2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}
O42 - Logiciel: Motor Town: Soul of the Machine - (.WildTangent.) [HKLM][64Bits] -- WTA-c1963036-a51e-4ab4-a619-a774407035b8
O42 - Logiciel: Murder She Wrote 2 - (.WildTangent.) [HKLM][64Bits] -- WTA-0112bbac-ecaa-43ac-9d08-7bbf06a2c5c1
O42 - Logiciel: Nero 8 - (.Nero AG.) [HKLM][64Bits] -- {5FCCD531-1B38-4A94-924C-127F722F1036}
O42 - Logiciel: OpenAL - (...) [HKLM][64Bits] -- OpenAL
O42 - Logiciel: PC Remote - (.PC Remote.) [HKLM][64Bits] -- {B44AF2D8-9A5D-4653-AF10-F1697C98019F}
O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- {40BF1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}
O42 - Logiciel: PowerDirector - (.CyberLink Corp..) [HKLM][64Bits] -- {CB099890-1D5F-11D5-9EA9-0050BAE317E1}
O42 - Logiciel: PowerRecover - (.CyberLink Corp..) [HKLM][64Bits] -- {44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}
O42 - Logiciel: QLBCASL - (.Hewlett-Packard.) [HKLM][64Bits] -- {F1D7AC58-554A-4A58-B784-B61558B1449A}
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM][64Bits] -- {B67BAFBA-4C9F-48FA-9496-933E3B255044}
O42 - Logiciel: RealPlayer - (.RealNetworks.) [HKLM][64Bits] -- RealPlayer 15.0
O42 - Logiciel: RealUpgrade 1.1 - (.RealNetworks, Inc..) [HKLM][64Bits] -- {28C2DED6-325B-4CC7-983A-1777C8F7FBAB}
O42 - Logiciel: Realtek 8136 8168 8169 Ethernet Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {96AE7E41-E34E-47D0-AC07-1091A8127911}
O42 - Logiciel: SHOUTcast DSP Plug-in v2 - (...) [HKLM][64Bits] -- SHOUTcast
O42 - Logiciel: Safari - (.Apple Inc..) [HKLM][64Bits] -- {C779648B-410E-4BBA-B75B-5815BCEFE71D}
O42 - Logiciel: Sandra Fleming Chronicles: Crystal Skulls - (.WildTangent.) [HKLM][64Bits] -- WTA-46977124-f5f5-4538-8426-06c1b802c7f3
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM][64Bits] -- KB931906
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM][64Bits] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
O42 - Logiciel: Skype Click to Call - (.Skype Technologies S.A..) [HKLM][64Bits] -- {B6CF2967-C81E-40C0-9815-C05774FEF120}
O42 - Logiciel: Skype(TM) 6.5 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey
O42 - Logiciel: The Lake House: Children of Silence - (.WildTangent.) [HKLM][64Bits] -- WTA-36f84047-acc1-41de-bf5b-fb622c84c5cf
O42 - Logiciel: Update Installer for WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App
O42 - Logiciel: VCRedistSetup - (.Nero AG.) [HKLM][64Bits] -- {3921A67A-5AB1-4E48-9444-C71814CF3027}
O42 - Logiciel: Viber - (.Viber Media Inc.) [HKCU][64Bits] -- Viber
O42 - Logiciel: WebPlayerV2 - (.Kreapixel.) [HKLM][64Bits] -- {7D41BC10-F03E-41EB-8E2D-B7006948332F} =>Adware.SocialSkinz
O42 - Logiciel: WildTangent Games App (HP Games) - (.WildTangent.) [HKLM][64Bits] -- {70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp
O42 - Logiciel: WinRAR 4.00 (32 bits) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: Winamp - (.Nullsoft, Inc.) [HKLM][64Bits] -- Winamp
O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM][64Bits] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
O42 - Logiciel: ffdshow v1.2.4422 [2012-04-09] - (...) [HKLM][64Bits] -- ffdshow_is1
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {76FF0F03-B707-4332-B5D1-A56C8303514E}
O42 - Logiciel: muvee Reveal - (.muvee Technologies Pte Ltd.) [HKLM][64Bits] -- {293F900D-3743-A8CC-46AD-5AFBFF8E29CF}
O42 - Logiciel: neroxml - (.Nero AG.) [HKLM][64Bits] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}
~ Logic: 233 Scanned in 00mn 00s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\AIST]
[HKCU\Software\AUTORUN]
[HKCU\Software\Adobe]
[HKCU\Software\Ahead]
[HKCU\Software\AppDataLow\Software\Adobe]
[HKCU\Software\AppDataLow\Software\JavaSoft]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Audacity]
[HKCU\Software\Auralog]
[HKCU\Software\BearShare] =>PUP.BearShare
[HKCU\Software\Binary Noise]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CyberLink]
[HKCU\Software\Facebook]
[HKCU\Software\FreeTime]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\GameHouse]
[HKCU\Software\Google]
[HKCU\Software\Haali]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\HipSoft]
[HKCU\Software\HookNetwork]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\Licenses]
[HKCU\Software\LightScribe]
[HKCU\Software\MAGIX AG]
[HKCU\Software\Macromedia]
[HKCU\Software\Magix]
[HKCU\Software\MainConcept (Muvee Consumer)]
[HKCU\Software\MainConcept (Muvee)]
[HKCU\Software\MainConcept (Muvee2)]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\NeroDigital]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\PC Remote]
[HKCU\Software\Policies]
[HKCU\Software\RealNetworks]
[HKCU\Software\RegisteredApplications]
[HKCU\Software\Server]
[HKCU\Software\SkypeRS]
[HKCU\Software\Skype]
[HKCU\Software\SweetIM] =>PUP.SweetIM
[HKCU\Software\Synaptics]
[HKCU\Software\SynergeticSoft]
[HKCU\Software\TeamViewer]
[HKCU\Software\Trolltech]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\ValuSoft]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Winamp]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\ej-technologies]
[HKCU\Software\itb]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Agere]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Audible]
[HKLM\Software\CXT]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\GEAR Software]
[HKLM\Software\HPQ]
[HKLM\Software\HaaliMkx]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\Huawei technologies]
[HKLM\Software\IDT]
[HKLM\Software\IM Providers]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\LSI]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\ODBC]
[HKLM\Software\Policies]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Sonic]
[HKLM\Software\Symantec]
[HKLM\Software\Synaptics]
[HKLM\Software\Windows]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\AdwCleaner]
[HKLM\Software\Wow6432Node\Ahead]
[HKLM\Software\Wow6432Node\Apple Computer, Inc.]
[HKLM\Software\Wow6432Node\Apple Inc.]
[HKLM\Software\Wow6432Node\Audible]
[HKLM\Software\Wow6432Node\Avg]
[HKLM\Software\Wow6432Node\AviSynth]
[HKLM\Software\Wow6432Node\BearShareMediabarTb] =>PUP.BearShare
[HKLM\Software\Wow6432Node\CDDB]
[HKLM\Software\Wow6432Node\Caphyon]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\Cyberlink]
[HKLM\Software\Wow6432Node\GNU]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\HPQLOG]
[HKLM\Software\Wow6432Node\HPQ]
[HKLM\Software\Wow6432Node\HP]
[HKLM\Software\Wow6432Node\Hewlett-Packard]
[HK -
-
-
-
Re,
Il y a des trucs qu'Adwcleaner doit encore supprimer.
Repasse le une fois en suppression (en démarrant ton pc en mode sans echec avec prise en charge réseau)
