Lenteur surprenante. Fermé

Question

Bonjour, je possede un ordintaeur window8 acheté il y a moins de 1an et depuis quelque jours il as de gros probleme de lenteur.

Je sais bien qu'il vous faudras plus d'information que ca c'est pour cela que je reste en attente de vos reponse et dont ce de vous avez besoin, merci d'avance.
cordialement.

lilidurhone · Answer

Hello

 
 * Télécharge ZHPDiag (de Nicolas Coolman)
https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html ou https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

* Au cas où le premier lien ne marcherai pas, clique sur celui de dessous
ftp://zebulon.fr/ZHPDiag2.exe

* Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin.

* Surtout, n'oublie pas d'installer son icône sur le bureau l'icône est en forme de parchemin 
https://www.cjoint.com/13sp/CIvuQfap3YY_zhpdiag.png

* A l'ouverture du logiciel il te sera proposé deux options "rechercher" et "configurer"

* Cliques sur configurer 

* Options puis tous 

* Clique sur l'icône représentant une loupe + (« Lancer le diagnostic »)

* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette

* Pour héberger le rapport, rends toi sur cjoint.com
* Clique sur choisissez un fichier va chercher le rapport dans ton PC.

* Le rapport est sauvegardé dans C:\ZHP\ZHPDiag.txt

* Une fois le rapport trouvé, sélectionne le, et clique sur Ouvrir

* Choisis le type de diffusion(je te conseille privée 4 jours il sera détruit)

* Puis cliques sur créer le lien cjoint

* Une fois que tu auras obtenu le lien copies colle dans ta prochaine réponse

* Pour t'aider http://www.pc-infopratique.com/forum-informatique/tutoriel-heberger-rapport-vt-67934.html

titinino50 · Answer

J'ai telecharger sur un des lioen ce qui me donne une icone ZPHFix sous forme d'une seringue.

Dans ce logiciel, j'ai importer ou configurer, j'ai donc cliqué sur configurer mais ensuite je ne trouve pas option.

lilidurhone · Answer

Quittes zhpfix

C'est sur l'icône en forme de parchemin qu'il faut cliquer....

titinino50 · Answer

Excat je n'avais pas vu cette icone .. --'

c'est en cours de diagnostic (1%, cela vas doucement), je patiente en attendant la fin de ce dernier. Merci

titinino50 · Answer

il reste bloqué a 23% aprés multiples tentatives

lilidurhone · Answer

Arrête zhpdiag 

 
 * Désactives avast via la boule orange clic droit>gestion des agents>désactiver pour dix minutes

Relance zhpdiag

titinino50 · Answer

meme soucis .. bloqué a 23%

lilidurhone · Answer

Ok on fait autrement on va passer adwcleaner 

 
 Tu as dû installer des logiciels potentiellement indésirables


Pour éviter ce genre de problème :

- Ne télécharge aucun programme proposé dans des publicités ou sur des sites suspects. A noter que certains sites connus comme O1net, Softronic, Tuto4PC, etc modifient parfois les programmes proposés au téléchargement pour y ajouter des logiciels publicitaires ==> Préfère toujours le téléchargement directement sur le site de l'éditeur.


- Au cours de l'installation d'un programme gratuit, lis bien attentivement et décoche tous les programmes additionnels qui sont proposés, en particulier les barres d'outils.

Pour ton information lis ces dossier sur les Programmes Potentiellement Indésirables et Les Barres d'Outils ce n'est pas obligatoires

* Télécharge cet outil simple d'utlisation 

http://general-changelog-team.fr/fr/downloads/viewdownload/20-outils-de-xplode/2-adwcleaner (de Xplode) sur ton bureau.


* Si problème avec le 1er lien prends le ici https://www.commentcamarche.net/telecharger/securite/2759-adwcleaner/

* Lance le (Sous vista/seven/8 clic droit dessus,et sur exécuter en tant qu'administrateur)si tu es sous xp double cliques dessus

* Cliques sur scanner 
* Poste le rapport de recherche C:\Adwcleaner[R]

* Note le rapport de recherche est également sauvegardé sous C:\Adwcleaner[R1]

titinino50 · Answer

# AdwCleaner v3.005 - Rapport créé le 24/09/2013 à 21:18:40
# Mis à jour le 22/09/2013 par Xplode
# Système d'exploitation : Windows 8  (64 bits)
# Nom d'utilisateur : titinino - NINO
# Exécuté depuis : C:\Users	itinino\Downloads\AdwCleaner.exe
# Option : Scanner

***** [ Services ] *****

Service Présent : APNMCP
Service Présent : BitGuard

***** [ Fichiers / Dossiers ] *****

Dossier Présent : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff
Dossier Présent : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Dossier Présent : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Dossier Présent : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Dossier Présent C:\Kreapixel
Dossier Présent C:\Program Files (x86)\AskPartnerNetwork
Dossier Présent C:\Program Files (x86)\delta
Dossier Présent C:\Program Files (x86)\Iminent
Dossier Présent C:\Program Files (x86)\MyPC Backup
Dossier Présent C:\Program Files (x86)\MyPC Backup 
Dossier Présent C:\Program Files (x86)\Nosibay
Dossier Présent C:\Program Files (x86)\Pricora
Dossier Présent C:\Program Files (x86)\SweetIM
Dossier Présent C:\ProgramData\AlawarWrapper
Dossier Présent C:\ProgramData\apn
Dossier Présent C:\ProgramData\AskPartnerNetwork
Dossier Présent C:\ProgramData\Babylon
Dossier Présent C:\ProgramData\BitGuard
Dossier Présent C:\ProgramData\BrowserDefender
Dossier Présent C:\ProgramData\SweetIM
Dossier Présent C:\ProgramData\Tarma Installer
Dossier Présent C:\ProgramData\Trymedia
Dossier Présent C:\Users	itinino\AppData\Local\cre
Dossier Présent C:\Users	itinino\AppData\Local\Kreapixel
Dossier Présent C:\Users	itinino\AppData\Local\Temp\AirInstaller
Dossier Présent C:\Users	itinino\AppData\Local\Temp\apn
Dossier Présent C:\Users	itinino\AppData\LocalLow\Conduit
Dossier Présent C:\Users	itinino\AppData\LocalLow\delta
Dossier Présent C:\Users	itinino\AppData\LocalLow\SweetIM
Dossier Présent C:\Users	itinino\AppData\Roaming\Babylon
Dossier Présent C:\Users	itinino\AppData\Roaming\delta
Dossier Présent C:\Users	itinino\AppData\Roaming\file scout
Dossier Présent C:\Users	itinino\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
Dossier Présent C:\Users	itinino\AppData\Roaming\Mysearchdial
Dossier Présent C:\Users	itinino\AppData\Roaming\Nosibay
Dossier Présent C:\Users	itinino\AppData\Roaming\OpenCandy
Dossier Présent C:\Users	itinino\AppData\Roaming\Systweak
Dossier Présent C:\Users	itinino\AppData\Roaming\WebPlayerBdd
Fichier Présent : C:\END
Fichier Présent : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
Fichier Présent : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
Fichier Présent : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
Fichier Présent : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage-journal
Fichier Présent : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_apps.conduit.com_0.localstorage
Fichier Présent : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_apps.conduit.com_0.localstorage-journal
Fichier Présent : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_home.sweetim.com_0.localstorage
Fichier Présent : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_home.sweetim.com_0.localstorage-journal
Fichier Présent : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.sweetim.com_0.localstorage
Fichier Présent : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.sweetim.com_0.localstorage-journal
Fichier Présent : C:\Users	itinino\AppData\Local\mysearchdial.crx
Fichier Présent : C:\Users	itinino\Desktop\Search The Web.url
Fichier Présent : C:\Users	itinino\Desktop\sweetpcfix.url
Fichier Présent : C:\Windows\System32oboot64.exe
Fichier Présent : C:\Windows\System32\Tasks\BitGuard
Fichier Présent : C:\Windows\System32\Tasks\Pricora-codedownloader
Fichier Présent : C:\Windows\System32\Tasks\Pricora-enabler
Fichier Présent : C:\Windows\System32\Tasks\Pricora-updater
Fichier Présent : C:\Windows\Tasks\Pricora-codedownloader.job
Fichier Présent : C:\Windows\Tasks\Pricora-enabler.job
Fichier Présent : C:\Windows\Tasks\Pricora-updater.job

***** [ Raccourcis ] *****


***** [ Registre ] *****

Clé Présente : HKCU\Software\a0dd8fb36de515
Clé Présente : HKCU\Software\APN PIP
Clé Présente : HKCU\Software\AppDataLow\Software\Conduit
Clé Présente : HKCU\Software\AppDataLow\Software\Crossrider
Clé Présente : HKCU\Software\AppDataLow\Software\Pricora
Clé Présente : HKCU\Software\AppDataLow\Software\SmartBar
Clé Présente : HKCU\Software\AskPartnerNetwork
Clé Présente : HKCU\Software\BabSolution
Clé Présente : HKCU\Software\BI
Clé Présente : HKCU\Software\Conduit
Clé Présente : HKCU\Software\DataMngr
Clé Présente : HKCU\Software\DataMngr_Toolbar
Clé Présente : HKCU\Software\Delta
Clé Présente : HKCU\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Clé Présente : HKCU\Software\Iminent
Clé Présente : HKCU\Software\InstallCore
Clé Présente : HKCU\Software\InstalledBrowserExtensions
Clé Présente : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Clé Présente : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Clé Présente : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311531129}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Présente : HKCU\Software\mysearchdial
Clé Présente : HKCU\Software\Nosibay
Clé Présente : HKCU\Software\PIP
Clé Présente : HKCU\Software\Softonic
Clé Présente : [x64] HKCU\Software\APN PIP
Clé Présente : [x64] HKCU\Software\AskPartnerNetwork
Clé Présente : [x64] HKCU\Software\BabSolution
Clé Présente : [x64] HKCU\Software\BI
Clé Présente : [x64] HKCU\Software\Conduit
Clé Présente : [x64] HKCU\Software\DataMngr
Clé Présente : [x64] HKCU\Software\DataMngr_Toolbar
Clé Présente : [x64] HKCU\Software\Delta
Clé Présente : [x64] HKCU\Software\Iminent
Clé Présente : [x64] HKCU\Software\InstallCore
Clé Présente : [x64] HKCU\Software\InstalledBrowserExtensions
Clé Présente : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Clé Présente : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Clé Présente : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Clé Présente : [x64] HKCU\Software\mysearchdial
Clé Présente : [x64] HKCU\Software\Nosibay
Clé Présente : [x64] HKCU\Software\PIP
Clé Présente : [x64] HKCU\Software\Softonic
Clé Présente : HKLM\SOFTWARE\a0dd8fb36de515
Clé Présente : HKLM\Software\AskPartnerNetwork
Clé Présente : HKLM\Software\Babylon
Clé Présente : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Clé Présente : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Clé Présente : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Clé Présente : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Clé Présente : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Clé Présente : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Clé Présente : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Clé Présente : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Clé Présente : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Clé Présente : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Clé Présente : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Clé Présente : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Clé Présente : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311531129}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322532229}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{DF84E609-C3A4-49CB-A160-61767DAF8899}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Clé Présente : HKLM\SOFTWARE\Classes\CrossriderApp0035329.BHO
Clé Présente : HKLM\SOFTWARE\Classes\CrossriderApp0035329.BHO.1
Clé Présente : HKLM\SOFTWARE\Classes\CrossriderApp0035329.Sandbox
Clé Présente : HKLM\SOFTWARE\Classes\CrossriderApp0035329.Sandbox.1
Clé Présente : HKLM\SOFTWARE\Classes\delta.deltaappCore
Clé Présente : HKLM\SOFTWARE\Classes\delta.deltaappCore.1
Clé Présente : HKLM\SOFTWARE\Classes\delta.deltadskBnd
Clé Présente : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1
Clé Présente : HKLM\SOFTWARE\Classes\delta.deltaHlpr
Clé Présente : HKLM\SOFTWARE\Classes\delta.deltaHlpr.1
Clé Présente : HKLM\SOFTWARE\Classes\escort.escortIEPane
Clé Présente : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Clé Présente : HKLM\SOFTWARE\Classes\esrv.deltaESrvc
Clé Présente : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1
Clé Présente : HKLM\SOFTWARE\Classes\esrv.mysearchdialESrvc
Clé Présente : HKLM\SOFTWARE\Classes\esrv.mysearchdialESrvc.1
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{0AFD55C8-ADF8-4A33-A6E1-DEDB7A36AEB4}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355535529}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366536629}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{DF84E609-C3A4-49CB-A160-61767DAF8899}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Clé Présente : HKLM\SOFTWARE\Classes\Prod.cap
Clé Présente : HKLM\SOFTWARE\Classes\S
Clé Présente : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
Clé Présente : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
Clé Présente : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook
Clé Présente : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
Clé Présente : HKLM\SOFTWARE\Classes\Toolbar3.sweetie
Clé Présente : HKLM\SOFTWARE\Classes\Toolbar3.sweetie.1
Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}
Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344534429}
Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}
Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
Clé Présente : HKLM\Software\DataMngr
Clé Présente : HKLM\Software\Delta
Clé Présente : HKLM\SOFTWARE\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Clé Présente : HKLM\SOFTWARE\Google\Chrome\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Clé Présente : HKLM\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Clé Présente : HKLM\Software\Iminent
Clé Présente : HKLM\Software\InstallCore
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{219046AE-358F-4CF1-B1FD-2B4DE83642A8}
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311531129}
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0C43FE6B-E881-4AFC-B384-4AEBC90047E8}
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EA8FA6BE-29BE-4AF2-9352-841F83215EB0}
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Pricora
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Clé Présente : HKLM\Software\PIP
Clé Présente : HKLM\Software\Pricora
Clé Présente : HKLM\Software\systweak
Clé Présente : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Clé Présente : [x64] HKLM\SOFTWARE\Tarma Installer
Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Valeur Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Bubble Dock]
Valeur Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{82E1477C-B154-48D3-9891-33D83C26BCD3}]
Valeur Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Valeur Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]
Valeur Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe]
Valeur Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll]

***** [ Navigateurs ] *****

-\ Internet Explorer v10.0.9200.16688

Paramètre Présent : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://start.mysearchdial.com/?f=1&a=airmsd&cd=2XzuyEtN2Y1L1QzutAtDzzyD0Azy0AzzyE0F0BzzyB0Azy0DtN0D0Tzu0CyDtDyCtN1L2XzutBtFtBtFtCtFyCtCzztN1L1Czu1T1L1C1H1B1Q&cr=154960117&ir=
Paramètre Présent : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs] - hxxp://start.mysearchdial.com/?f=2&a=airmsd&cd=2XzuyEtN2Y1L1QzutAtDzzyD0Azy0AzzyE0F0BzzyB0Azy0DtN0D0Tzu0CyDtDyCtN1L2XzutBtFtBtFtCtFyCtCzztN1L1Czu1T1L1C1H1B1Q&cr=154960117&ir=
Paramètre Présent : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://start.mysearchdial.com/?f=1&a=airmsd&cd=2XzuyEtN2Y1L1QzutAtDzzyD0Azy0AzzyE0F0BzzyB0Azy0DtN0D0Tzu0CyDtDyCtN1L2XzutBtFtBtFtCtFyCtCzztN1L1Czu1T1L1C1H1B1Q&cr=154960117&ir=

-\ Google Chrome v29.0.1547.76

[ Fichier : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Trouvée : urls_to_restore_on_startup

*************************

AdwCleaner[R0].txt - [23265 octets] - [24/09/2013 21:18:40]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [23326 octets] ##########

lilidurhone · Answer

:)

Passe à l'option nettoyage poste le rapport puis passe JRT

 * Télécharge Junkware Removal Tool à cette adresse (ne clique pas sur télécharger, le téléchargement va débuter automatiquement) : https://www.bleepingcomputer.com/download/junkware-removal-tool/dl/131/ 

* Enregistre-le sur ton bureau. 

* Ferme toutes les applications en cours. 

* Ouvre JRT.exe et appuie sur Entrée : si tu es sous Windows Vista, 7 ou 8, ouvre-le en faisant : clic droit => Exécuter en tant qu'administrateur. 

* Patiente le temps que l'outil travaille : le bureau va disparaître quelques instants, c'est tout à fait normal. 

* À la fin de l'analyse, un rapport nommé JRT.txt va s'ouvrir. Héberge-le comme ceci et poste le lien obtenu dans ta prochaine réponse. 

Tutoriel : http://www.forum-entraide-informatique.com/support/junkware-removal-tool-tutoriel-t8260.html 

Si un contributeur peut le transférer dans VS merci

titinino50 · Answer

# AdwCleaner v3.005 - Rapport créé le 24/09/2013 à 21:27:49
# Mis à jour le 22/09/2013 par Xplode
# Système d'exploitation : Windows 8  (64 bits)
# Nom d'utilisateur : titinino - NINO
# Exécuté depuis : C:\Users	itinino\Downloads\AdwCleaner.exe
# Option : Nettoyer

***** [ Services ] *****

Service Supprimé : APNMCP
Service Supprimé : BitGuard

***** [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\Kreapixel
Dossier Supprimé : C:\ProgramData\apn
Dossier Supprimé : C:\ProgramData\AskPartnerNetwork
Dossier Supprimé : C:\ProgramData\Babylon
[!] Dossier Supprimé : C:\ProgramData\BitGuard
[!] Dossier Supprimé : C:\ProgramData\BrowserDefender
Dossier Supprimé : C:\ProgramData\SweetIM
Dossier Supprimé : C:\ProgramData\Tarma Installer
Dossier Supprimé : C:\ProgramData\Trymedia
Dossier Supprimé : C:\ProgramData\AlawarWrapper
Dossier Supprimé : C:\Program Files (x86)\AskPartnerNetwork
Dossier Supprimé : C:\Program Files (x86)\delta
Dossier Supprimé : C:\Program Files (x86)\Iminent
Dossier Supprimé : C:\Program Files (x86)\MyPC Backup 
Dossier Supprimé : C:\Program Files (x86)\Nosibay
Dossier Supprimé : C:\Program Files (x86)\Pricora
Dossier Supprimé : C:\Program Files (x86)\SweetIM
Dossier Supprimé : C:\Users	itinino\AppData\Local\cre
Dossier Supprimé : C:\Users	itinino\AppData\Local\Kreapixel
Dossier Supprimé : C:\Users	itinino\AppData\Local\Temp\AirInstaller
Dossier Supprimé : C:\Users	itinino\AppData\Local\Temp\apn
Dossier Supprimé : C:\Users	itinino\AppData\LocalLow\Conduit
Dossier Supprimé : C:\Users	itinino\AppData\LocalLow\delta
Dossier Supprimé : C:\Users	itinino\AppData\LocalLow\SweetIM
Dossier Supprimé : C:\Users	itinino\AppData\Roaming\Babylon
Dossier Supprimé : C:\Users	itinino\AppData\Roaming\delta
Dossier Supprimé : C:\Users	itinino\AppData\Roaming\file scout
Dossier Supprimé : C:\Users	itinino\AppData\Roaming\Mysearchdial
Dossier Supprimé : C:\Users	itinino\AppData\Roaming\Nosibay
Dossier Supprimé : C:\Users	itinino\AppData\Roaming\OpenCandy
Dossier Supprimé : C:\Users	itinino\AppData\Roaming\Systweak
Dossier Supprimé : C:\Users	itinino\AppData\Roaming\WebPlayerBdd
Dossier Supprimé : C:\Users	itinino\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
Dossier Supprimé : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff
Dossier Supprimé : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Dossier Supprimé : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Dossier Supprimé : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Fichier Supprimé : C:\END
Fichier Supprimé : C:\Windows\System32oboot64.exe
Fichier Supprimé : C:\Users	itinino\AppData\Local\mysearchdial.crx
Fichier Supprimé : C:\Users	itinino\Desktop\Search The Web.url
Fichier Supprimé : C:\Users	itinino\Desktop\sweetpcfix.url
Fichier Supprimé : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
Fichier Supprimé : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
Fichier Supprimé : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
Fichier Supprimé : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage-journal
Fichier Supprimé : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_apps.conduit.com_0.localstorage
Fichier Supprimé : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_apps.conduit.com_0.localstorage-journal
Fichier Supprimé : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_home.sweetim.com_0.localstorage
Fichier Supprimé : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_home.sweetim.com_0.localstorage-journal
Fichier Supprimé : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.sweetim.com_0.localstorage
Fichier Supprimé : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.sweetim.com_0.localstorage-journal
Fichier Supprimé : C:\Windows\System32\Tasks\BitGuard
Fichier Supprimé : C:\Windows\Tasks\Pricora-codedownloader.job
Fichier Supprimé : C:\Windows\System32\Tasks\Pricora-codedownloader
Fichier Supprimé : C:\Windows\Tasks\Pricora-enabler.job
Fichier Supprimé : C:\Windows\System32\Tasks\Pricora-enabler
Fichier Supprimé : C:\Windows\Tasks\Pricora-updater.job
Fichier Supprimé : C:\Windows\System32\Tasks\Pricora-updater

***** [ Raccourcis ] *****


***** [ Registre ] *****

Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Clé Supprimée : HKCU\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Clé Supprimée : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Bubble Dock]
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltaappCore
Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltaappCore.1
Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltadskBnd
Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1
Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltaHlpr
Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltaHlpr.1
Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escortIEPane
Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.deltaESrvc
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.mysearchdialESrvc
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.mysearchdialESrvc.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
Clé Supprimée : HKLM\SOFTWARE\Classes\S
Clé Supprimée : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
Clé Supprimée : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
Clé Supprimée : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook
Clé Supprimée : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.sweetie
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.sweetie.1
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll]
Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0035329.BHO
Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0035329.BHO.1
Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0035329.Sandbox
Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0035329.Sandbox.1
Clé Supprimée : HKCU\Software\a0dd8fb36de515
Clé Supprimée : HKLM\SOFTWARE\a0dd8fb36de515
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{DF84E609-C3A4-49CB-A160-61767DAF8899}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311531129}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322532229}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0AFD55C8-ADF8-4A33-A6E1-DEDB7A36AEB4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DF84E609-C3A4-49CB-A160-61767DAF8899}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355535529}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366536629}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344534429}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311531129}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311531129}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{219046AE-358F-4CF1-B1FD-2B4DE83642A8}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{82E1477C-B154-48D3-9891-33D83C26BCD3}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Clé Supprimée : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Clé Supprimée : HKCU\Software\APN PIP
Clé Supprimée : HKCU\Software\AskPartnerNetwork
Clé Supprimée : HKCU\Software\BabSolution
Clé Supprimée : HKCU\Software\BI
Clé Supprimée : HKCU\Software\Conduit
Clé Supprimée : HKCU\Software\DataMngr
[#] Clé Supprimée : HKCU\Software\DataMngr_Toolbar
Clé Supprimée : HKCU\Software\Delta
Clé Supprimée : HKCU\Software\Iminent
Clé Supprimée : HKCU\Software\InstallCore
Clé Supprimée : HKCU\Software\InstalledBrowserExtensions
Clé Supprimée : HKCU\Software\mysearchdial
Clé Supprimée : HKCU\Software\Nosibay
Clé Supprimée : HKCU\Software\PIP
Clé Supprimée : HKCU\Software\Softonic
Clé Supprimée : HKCU\Software\AppDataLow\Software\Conduit
Clé Supprimée : HKCU\Software\AppDataLow\Software\Crossrider
Clé Supprimée : HKCU\Software\AppDataLow\Software\Pricora
Clé Supprimée : HKCU\Software\AppDataLow\Software\SmartBar
Clé Supprimée : HKLM\Software\AskPartnerNetwork
Clé Supprimée : HKLM\Software\Babylon
Clé Supprimée : HKLM\Software\DataMngr
Clé Supprimée : HKLM\Software\Delta
Clé Supprimée : HKLM\Software\Iminent
Clé Supprimée : HKLM\Software\InstallCore
Clé Supprimée : HKLM\Software\PIP
Clé Supprimée : HKLM\Software\Pricora
Clé Supprimée : HKLM\Software\systweak
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0C43FE6B-E881-4AFC-B384-4AEBC90047E8}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EA8FA6BE-29BE-4AF2-9352-841F83215EB0}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Pricora
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Clé Supprimée : [x64] HKLM\SOFTWARE\Tarma Installer

***** [ Navigateurs ] *****

-\ Internet Explorer v10.0.9200.16688

Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]
Paramètre Restauré : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

-\ Google Chrome v29.0.1547.76

[ Fichier : C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Supprimée : urls_to_restore_on_startup

*************************

AdwCleaner[R0].txt - [23491 octets] - [24/09/2013 21:18:40]
AdwCleaner[S0].txt - [22143 octets] - [24/09/2013 21:27:49]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [22204 octets] ##########

lilidurhone · Answer

Nickel passe à JRT

titinino50 · Answer

https://www.cjoint.com/?3IyvTRaWBQX

lilidurhone · Answer

Peux tu réessayer zhpdiag maintenant?

titinino50 · Answer

je viens de le lancer, je vous redis si cela fonctionne, pour le moment c'est a 43% donc ca as l'air de mieux marcher.. Par contre, mes ralentissements se sont arretés ! probleme resolu du coup ?

lilidurhone · Answer

Tu avais pas mal d'adwares du coup ça ralentissait trop ta machine

Pas encore résolu

titinino50 · Answer

bloqué a 43%

lilidurhone · Answer

Avast désactivé?

Sinon fais un rapport tout simple

titinino50 · Answer

ca as marché avec la desactivation de avast donc voici le rapport :

https://www.cjoint.com/?3IywMgGe0fO

lilidurhone · Answer

Désinstalles ou vérifie dans ton disque dur si tu as pas un dossier venant de Trend Micro

Mets à jour avast via l'interface maintenance mettre à jour le programme

titinino50 · Answer

J'ai une icone sur mon bureau " Trend Micro Tintanium", protection expiré lorsque je clique dessus.

Mis a jour faite.

(Je reprend cette discusion demain aprés midi vers 15h30 dû a mon travail, merci pour votre aide de ce soir en tout cas !)

lilidurhone · Answer

Désinstalles dans ce cas là

On continue demain

titinino50 · Answer

désinstallation faite.

lilidurhone · Answer

Ok on reprend à 15h30

lilidurhone · Answer

Moi pas encore attends quelques secondes

lilidurhone · Answer

Refais moi un zhpdiag

titinino50 · Answer

~ Rapport de ZHPDiag v2013.9.23.44 - Nicolas Coolman (23/09/2013) ~ Lancé par titinino (25/09/2013 18:36:35) ~ Adresse du Site Web https://nicolascoolman.webs.com/ ~ Traduit par Nicolas Coolman ~ Etat de la version : ~ Liste blanche : Activée par le programme ~ Elévation des Privilèges : OK ~ User Account Control (UAC): Deactivate by program ---\ Navigateurs Internet MSIE: Internet Explorer v10.0.9200.16688 GCIE: Google Chrome v29.0.1547.76 (Defaut) ---\ Informations sur les produits Windows ~ Langage: Français Windows 8 Home Premium Edition, 64-bit (Build 9200) Windows Server License Manager Script : OK ~ ion : Windows(R) Operating System, OEM_DM channel Windows ID Activation : OK ~ Windows Partial Key : 27GBG Windows License : OK ~ Windows Remaining Initializations Number : 999 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\ Logiciels de protection du système avast! Internet Security v8.0.1497.0 Windows Defender W8 ---\ Logiciels d'optimisation du système ---\ Logiciels de partage PeerToPeer ---\ Surveillance de Logiciels Adobe Flash Player 11 Plugin Adobe Reader X Java 7 Update 25 ---\ Informations sur le système ~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 6098 MB (60% free) System Restore: Activé (Enable) System drive C: has 4 GB (2%) free of 150 GB ---\ Mode de connexion au système ~ Computer Name: NINO ~ User Name: titinino ~ All Users Names: titinino, Administrateur, ~ Unselected Option: None Logged in as Administrator ---\ Variables d'environnement ~ System Unit : C:\ ~ %AppData% : C:\Users itinino\AppData\Roaming\ ~ %Desktop% : C:\Users itinino\Desktop\ ~ %Favorites% : C:\Users itinino\Favorites\ ~ %LocalAppData% : C:\Users itinino\AppData\Local\ ~ %StartMenu% : C:\Users itinino\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\WINDOWS\ ~ %System% : C:\WINDOWS\System32\ ---\ Enumération des unités disques C: Hard drive, Flash drive, Thumb drive (Free 4 Go of 150 Go) D: Hard drive, Flash drive, Thumb drive (Free 764 Go of 765 Go) E: Floppy drive, Flash card reader, USB Key (Not Inserted) F: CD-ROM drive (Free 0 Go of 0 Go) ---\ Etat du Centre de Sécurité Windows [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified ~ Security Center: 29 Legitimates Filtered in 00mn 00s ---\ Recherche particulière de fichiers génériques [MD5.0E8E6463F81C80AFBED533E0F1F8895D] - (.Microsoft Corporation - Explorateur Windows.) (.01/06/2013 - 12:34:21.) -- C:\WINDOWS\Explorer.exe [2391280] [MD5.FE9AB232B56A12224E8A3F3F9878C9A3] - (.Microsoft Corporation - Application de démarrage de Windows.) (.26/07/2012 - 04:08:50.) -- C:\WINDOWS\System32\Wininit.exe [132608] [MD5.6DBE239FF1C9650A794C974B8C7913D7] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.21/08/2013 - 05:12:06.) -- C:\WINDOWS\System32\wininet.dll [2241024] [MD5.BCF2036A0DD579E47C008C133550283E] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.11/10/2012 - 06:46:58.) -- C:\WINDOWS\System32\Winlogon.exe [517120] [MD5.9448F5740A037EC0C18F0E9177232DD0] - (.Microsoft Corporation - Bibliothèque de licences.) (.26/07/2012 - 04:07:20.) -- C:\WINDOWS\System32\sppcomapi.dll [273408] [MD5.36D6A3201721558A8AFBCC09C2DA4C2C] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.06/11/2012 - 04:53:44.) -- C:\WINDOWS\system32\Drivers\AFD.sys [560640] [MD5.A721FF570C2387E383BDDEA9632863C9] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.26/07/2012 - 06:00:48.) -- C:\WINDOWS\system32\Drivers\atapi.sys [25840] [MD5.990B1BABE6E81FB18E65A87EBEFB1772] - (.Microsoft Corporation - CD-ROM File System Driver.) (.26/07/2012 - 03:30:10.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [108544] [MD5.339BFF85D788268752DA8C9644B188EE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.26/07/2012 - 03:26:36.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [174080] [MD5.09D9EB9E7898F8E6561473A20CC808B9] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.26/07/2012 - 03:26:53.) -- C:\WINDOWS\system32\Drivers\DfsC.sys [118784] [MD5.7D87B5B6C7188D553E11B59DC7F0B111] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/09/2012 - 07:08:44.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [71168] [MD5.C9E9CBF73AFFBFE3E801EFB516787BA3] - (.Microsoft Corporation - Pilote de port i8042.) (.26/07/2012 - 03:28:51.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [112640] [MD5.3969B9C218DD3FAA9F4ED2FFC3651C02] - (.Microsoft Corporation - IP Network Address Translator.) (.26/07/2012 - 03:23:01.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [145920] [MD5.93179D48066918323628CB016D8C94DC] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.05/02/2013 - 23:29:09.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [370688] [MD5.7CEC25C682D319D484630B3952C31A11] - (.Microsoft Corporation - MBT Transport driver.) (.26/07/2012 - 03:24:28.) -- C:\WINDOWS\system32\Drivers etBT.sys [331776] [MD5.76929F4A69E425911A63B407E26C2589] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.02/02/2013 - 11:54:54.) -- C:\WINDOWS\system32\Drivers tfs.sys [1933544] [MD5.4563DAF8C6A740AD7F501E219BD10766] - (.Microsoft Corporation - Pilote de port parallèle.) (.26/07/2012 - 03:29:53.) -- C:\WINDOWS\system32\Drivers\Parport.sys [105984] [MD5.A14D625C5AEE5FFE0F47D1A1D419FAAE] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.26/07/2012 - 03:23:17.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [124928] [MD5.B2A3AD74FF2E2FFA73AF2567108231B3] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) (.26/07/2012 - 03:25:18.) -- C:\WINDOWS\system32\Drivers dpdr.sys [179712] [MD5.73DC722CE5DF26D7638CE2446F2655C7] - (.Microsoft Corporation - TDI Translation Driver.) (.26/07/2012 - 06:26:47.) -- C:\WINDOWS\system32\Drivers dx.sys [117248] [MD5.78A5BBA3819FFFC62FFEC3E2220D102D] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.01/06/2013 - 12:26:33.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [327936] ~ Generic Processes: Scanned in 00mn 00s ---\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 1/12 ~ Mes musiques (My Musics) : 0/54 ~ Mes Videos (My Videos) : 1/35 ~ Mes Favoris (My Favorites) : 1/5 ~ Mes Documents (My Documents) : 1/542 ~ Mon Bureau (My Desktop) : 1/28814 ~ Menu demarrer (Programs) : 1/32 ~ Hidden Files: Scanned in 00mn 01s ---\ Processus lancés [MD5.8C9231025FAF86B78906B6C847531FFB] - (.ASUSTeK Computer Inc. - ASUS Routine Controller.) -- C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2935424] [PID.2692] [MD5.2D75851551D18878FADC21E166DEA3FA] - (.ASUSTek Computer Inc. - AiChargerAP MFC Application.) -- C:\Program Files (x86)\ASUS\ASUS Ai Charger\AiChargerAP.exe [547984] [PID.2800] [MD5.7D7D090E09D28AE68309D625C42B1C9B] - (.ASUSTeK Computer Inc. - ALU MFC Application.) -- C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe [195200] [PID.3464] [MD5.B7995C675014EEBE77A0BEB7AFCCFC08] - (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432] [PID.1036] [MD5.CBC7D8E5416AD30CF16DC2FD4A6AA399] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968] [PID.3024] [MD5.A9F9D081518AC03A51C1195986076F42] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392] [PID.3088] [MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816] [PID.2644] [MD5.E7148BB584830E51AFD414CE9AEAE74C] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [829392] [PID.1192] [MD5.D63791AEA2D98C5B3A2881A230613B8E] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8006144] [PID.4320] ~ Processes Running: Scanned in 00mn 00s ---\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users itinino\AppData\Local\Google\Chrome\User Data\Default\Preferences G2 - GCE: Preference [User Data\Default] [aaaaiopnfecjheficjcjfgjecfgdhbmc] Ask Toolbar v.21.51087, (Désactivé) =>Toolbar.Ask G2 - GCE: Preference [User Data\Default] [algmakeomkafjglfhpomolfhjppoojff] Pricora v.1.24.97, (Activé) =>Adware.Pricora G2 - GCE: Preference [User Data\Default] [amdcolnifoheinafllhaggmoojhmgldi] FLV2MP3Converter on Roozz v.0.1.0.2 (Activé) G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google\u00C2 Drive v.6.3 (Activé) G2 - GCE: Preference [User Data\Default] [dmdhkalcecemojegheiohcghkamlipof] Facebook Unseen v.0.0.0.1 (Activé) G2 - GCE: Preference [User Data\Default] [ifjamchknccokmaecnbknhbfhaicfafd] FileConverter 1.5 v.10.14.250.13 (Désactivé) ~ Google Browser: 20 Legitimates Filtered in 00mn 04s ---\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe F2 - REG:system.ini: VMApplet=C:\WINDOWS\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\ Hosts file redirection (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Hosts File: Scanned in 00mn 00s ~ Nombre de lignes (Lines number): 21 ---\ Internet Explorer Toolbars (O3) O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{4D594333-0076-A76A-76A7-7A786E7484D7} Clé orpheline ~ Toolbar: Scanned in 00mn 00s ---\ Autres liens utilisateurs (O4) O4 - GS\Desktop [Public]: AI Suite II.lnk . (.ASUSTeK Computer Inc. - AI Suite II.) -- C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe O4 - GS\Desktop [Public]: ASUS MX Suite.lnk . (.MAGIX AG - MAGIX Media Suite.) -- C:\Program Files (x86)\ASUS\ASUS MX Suite\ASUS MX Suite\MediaSuite.exe O4 - GS\Desktop [Public]: ASUSDVD.lnk . (.CyberLink Corp. - ASUSDVD.) -- C:\Program Files (x86)\CyberLink\PowerDVD10\PDVDLaunchPolicy.exe O4 - GS\Desktop [Public]: Battlefield 3.lnk . (.EA Digital Illusions CE AB - Battlefield 3(TM).) -- C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe O4 - GS\Desktop [Public]: eManual.lnk . (...) -- C:\Program Files (x86)\ASUS\eManual\eManual.exe O4 - GS\Desktop [Public]: HD VDeck.lnk . (.VIA - VIA HD Audio CPL.) -- C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe O4 - GS\Desktop [Public]: Restaurant Empire.lnk . (...) -- C:\Program Files (x86)\Enlight\Restaurant Empire\Restaurant Empire.exe O4 - GS\Desktop [Public]: SimCity 4.lnk . (.Maxis - SimCity 4.) -- C:\Program Files (x86)\Maxis\SimCity 4\Apps\SimCity 4.exe O4 - GS\Desktop [Public]: Tom Clancy's Splinter Cell® Blacklist(TM).lnk . (.Ubisoft - Autopatch system.) -- C:\Program Files (x86)\Ubisoft\Tom Clancy's Splinter Cell® Blacklist(TM)\src\SYSTEM\gu.exe O4 - GS\Desktop [Public]: Why ASUS PC.lnk . (.Adobe Systems, Inc. - Adobe Flash Player 9.0 r115.) -- C:\Program Files (x86)\ASUS\Why ASUS PC\Desktop.exe O4 - GS\Program [Public]: Desktop.lnk - Clé orpheline O4 - GS\Program [Public]: HD VDeck.lnk . (.VIA - VIA HD Audio CPL.) -- C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe O4 - GS\QuickLaunch [titinino]: VSO Image Resizer 4.lnk . (.VSO Software SARL - ImageResizer.) -- C:\Program Files (x86)\VSO\Image Resizer 4\Resize.exe O4 - GS\Desktop [titinino]: Bandizip.lnk . (.Bandisoft.com - Bandizip.) -- C:\Users itinino\AppData\Local\Bandizip\Bandizip64.exe O4 - GS\Desktop [titinino]: Enregistrement de produit ASUS.lnk - Clé orpheline O4 - GS\Desktop [titinino]: Torrent Opener.lnk . (.Denco Limited - Torrent Opener Module.) -- C:\Program Files (x86)\Torrent Opener\Torrent Opener.exe O4 - GS\Desktop [titinino]: VSO Image Resizer 4.lnk . (.VSO Software SARL - ImageResizer.) -- C:\Program Files (x86)\VSO\Image Resizer 4\Resize.exe ~ Global Startup: 65 Legitimates Filtered in 00mn 00s ---\ Applications lancées au démarrage du sytème (O4) O4 - HKCU\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper (buildbot_winslav.) -- C:\Program Files (x86)\Steam\Steam.exe O4 - HKCU\..\Run: [ManyCam] . (.ManyCam LLC - ManyCam Virtual Webcam.) -- C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe O4 - HKCU\..\Run: [EADM] . (.Electronic Arts - Origin.) -- C:\Program Files (x86)\Origin\Origin.exe O4 - HKLM\..\Wow6432Node\Run: [HDAudDeck] . (.VIA - VIA HD Audio CPL.) -- C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated O4 - HKLM\..\Wow6432Node\Run: [ASUS Ai Charger] . (.ASUSTek Computer Inc. - AiChargerAP MFC Application.) -- C:\Program Files (x86)\ASUS\ASUS Ai Charger\AiChargerAP.exe O4 - HKLM\..\Wow6432Node\Run: [ASUS Easy Update] . (.ASUSTeK Computer Inc. - ALU MFC Application.) -- C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe O4 - HKLM\..\Wow6432Node\Run: [ASUSPRP] . (.ASUSTek Computer Inc. - ASUS Product Register Program.) -- C:\Program Files (x86)\ASUS\APRP\APRP.exe O4 - HKLM\..\Wow6432Node\Run: [RemoteControl10] . (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation O4 - HKUS\S-1-5-21-1977527705-2680467548-2933568104-1001\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper (buildbot_winslav.) -- C:\Program Files (x86)\Steam\Steam.exe O4 - HKUS\S-1-5-21-1977527705-2680467548-2933568104-1001\..\Run: [ManyCam] . (.ManyCam LLC - ManyCam Virtual Webcam.) -- C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe O4 - HKUS\S-1-5-21-1977527705-2680467548-2933568104-1001\..\Run: [EADM] . (.Electronic Arts - Origin.) -- C:\Program Files (x86)\Origin\Origin.exe ~ Application: Scanned in 00mn 00s ---\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{4AC30D81-7A2D-48E5-997D-C055258F3CBC}: DhcpNameServer = 62.201.129.202 62.201.129.203 O17 - HKLM\System\CCS\Services\Tcpip\..\{9A299317-A6C7-42D7-9403-01A1910CCA89}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{F82BD721-D30B-42AC-AA04-802C231F4D6D}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{4AC30D81-7A2D-48E5-997D-C055258F3CBC}: DhcpNameServer = 62.201.129.202 62.201.129.203 O17 - HKLM\System\CS1\Services\Tcpip\..\{9A299317-A6C7-42D7-9403-01A1910CCA89}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{F82BD721-D30B-42AC-AA04-802C231F4D6D}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ~ Domain: Scanned in 00mn 00s ---\ Protocole additionnel (O18) O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ~ Protocole Additionnel: Scanned in 00mn 00s ---\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: Roozz Updater (Roozz Updater) . (.Roozz - Roozz Updater.) - C:\Program Files (x86)\Roozz\Updater.exe O23 - Service: oem3.inf (VIAKaraokeService) . (.VIA Technologies, Inc. - Service binary.) - C:\WINDOWS\System32\viakaraokesrv.exe ~ Services: 20 Legitimates Filtered in 00mn 06s ---\ Tâches planifiées en automatique (O39) [MD5.00000000000000000000000000000000] [APT] [GoforFilesUpdate] (...) -- C:\Program Files (x86)\GoforFiles\GFFUpdater.exe (.not file.) [0] =>P2P.GoforFiles [MD5.00000000000000000000000000000000] [APT] [{1912D43E-89E4-4AAC-811F-E4C465CDD2EB}] (...) -- F:\SC4_UNINST.exe (.not file.) [0] ~ Scheduled Task: 15 Legitimates Filtered in 00mn 01s ---\ Logiciels installés (O42) O42 - Logiciel: Ask Toolbar - (.APN, LLC.) [HKLM][64Bits] -- {42435041-332D-5637-00A7-A758B70C0300} =>Toolbar.Ask O42 - Logiciel: Restaurant Empire - (...) [HKLM][64Bits] -- {99A51EBF-47E0-11D7-B796-0050BFE4DB80} O42 - Logiciel: Torrent Opener - (.Torrent Opener.) [HKLM][64Bits] -- Torrent Opener O42 - Logiciel: Uninstall_PCMFranceDB_V1 - (.PCM France.) [HKLM][64Bits] -- VraisNoms Armada ~ Logic: 108 Legitimates Filtered in 00mn 00s ---\ HKCU & HKLM Software Keys [HKLM\Software\Wow6432Node\PCM France] [HKLM\Software\Wow6432Node\SweetIM] =>PUP.SweetIM ~ Key Software: 198 Legitimates Filtered in 00mn 00s ---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 14/09/2013 - 19:16:04 - [0,001] ----D C:\Program Files (x86)\FreeLiveTV O43 - CFD: 14/09/2013 - 19:04:47 - [0] ----D C:\Program Files (x86)\PokerStars.FR O43 - CFD: 27/06/2013 - 20:26:12 - [4,253] ----D C:\Program Files (x86)\Torrent Opener O43 - CFD: 26/02/2013 - 00:20:08 - [23,027] -SH-D C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} O43 - CFD: 27/06/2013 - 20:28:16 - [0,107] ----D C:\Users itinino\AppData\Roaming\Torrent Opener O43 - CFD: 14/09/2013 - 19:04:41 - [0] ----D C:\Users itinino\AppData\Local\PokerStars.FR O43 - CFD: 27/06/2013 - 20:26:12 - [0,002] ----D C:\Users itinino\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Torrent Opener O43 - CFD: 13/02/2013 - 15:37:29 - [0,001] ----D C:\Users itinino\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VraisNoms Armada ~ Program Folder: 177 Legitimates Filtered in 00mn 01s ---\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.9EB57EAA1DF047992E70F83FB9CFF03E] - 14/09/2013 - 23:07:04 ---A- . (...) -- C:\WINDOWS\DirectX.log [67033] O44 - LFC:[MD5.2CE63B3A60C54BF7421B090429C286B0] - 11/09/2013 - 06:05:57 ---A- . (...) -- C:\WINDOWS\SysNative\ApnDatabase.xml [387583] O44 - LFC:[MD5.2CE63B3A60C54BF7421B090429C286B0] - 11/09/2013 - 06:05:57 RSHAD . (...) -- C:\WINDOWS\System32\ApnDatabase.xml [387583] ~ Files: 160 Legitimates Filtered in 00mn 12s ---\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:[MD5.8D47AC1C2EE869BCDC8F9237BC474465] - 01/09/2013 - 11:15:14 ---A- - C:\WINDOWS\Prefetch\ZY-DELICIOUS5.EXE-61C7A30E.pf O45 - LFCP:[MD5.96127C2641DC3464F34F028C09C0BC2A] - 01/09/2013 - 11:45:56 ---A- - C:\WINDOWS\Prefetch\TORRENT OPENER.EXE-E292BB31.pf O45 - LFCP:[MD5.7D6E312CE18BD27FCFFE3264BF2A30A6] - 01/09/2013 - 12:34:08 ---A- - C:\WINDOWS\Prefetch\POGODGC.EXE-D9B23894.pf O45 - LFCP:[MD5.D465B65D1191B425DBAA0F7FB8CFE0C1] - 05/09/2013 - 16:34:41 ---A- - C:\WINDOWS\Prefetch\DELICIOUS SUPER PACK DELUXE.E-0FA4D1F7.pf O45 - LFCP:[MD5.FB959C8E93B034AB52E6E01D2A3EEAAF] - 06/09/2013 - 03:36:24 ---A- - C:\WINDOWS\Prefetch\PCM-PROTECTION.EXE-A265D998.pf O45 - LFCP:[MD5.4326CA87E8376B674A5D348397730652] - 07/09/2013 - 12:01:00 ---A- - C:\WINDOWS\Prefetch\POKERLAUNCHER8667612658142889-B24DF8B0.pf O45 - LFCP:[MD5.95CCFFD72CD89576ACD49B9BD9A17095] - 09/09/2013 - 19:16:37 ---A- - C:\WINDOWS\Prefetch\POKERLAUNCHER8859121135780286-C0725FFC.pf O45 - LFCP:[MD5.D496B8C3A49F06E0FBB652065C7852E2] - 11/09/2013 - 15:33:07 ---A- - C:\WINDOWS\Prefetch\POKERLAUNCHER1784445135425455-DE4F4205.pf O45 - LFCP:[MD5.EE43B73E8C773D8688E245E17492EB34] - 11/09/2013 - 16:57:55 ---A- - C:\WINDOWS\Prefetch\POKERLAUNCHER8489614168478496-8DA9C1A5.pf O45 - LFCP:[MD5.8A77A231B667B46DA5CBA1CECB9E5F61] - 13/09/2013 - 15:17:26 ---A- - C:\WINDOWS\Prefetch\POKERLAUNCHER5796738817140345-A33340EB.pf O45 - LFCP:[MD5.346ADFFD36DB2ED805743479AE3E5C5A] - 13/09/2013 - 16:15:13 ---A- - C:\WINDOWS\Prefetch\POKERLAUNCHER4606783278022017-EC2980DE.pf O45 - LFCP:[MD5.DC377A279A01F2222DA7DE7659DA0AD1] - 14/09/2013 - 17:52:08 ---A- - C:\WINDOWS\Prefetch\ORIGINLAUNCHER215984484.EXE-D15EAB00.pf O45 - LFCP:[MD5.A9224CAD7909FE46C0797D223B5BD448] - 14/09/2013 - 17:53:02 ---A- - C:\WINDOWS\Prefetch\UPDATETOOL.EXE-18BAEE18.pf O45 - LFCP:[MD5.1CC386C7FFACE6EE3E35117B7F199146] - 14/09/2013 - 18:04:49 ---A- - C:\WINDOWS\Prefetch\_UNPS.EXE-FC2F8EDA.pf O45 - LFCP:[MD5.8ACA9AE70952B9F6DF41490FFC7422E6] - 14/09/2013 - 18:17:46 ---A- - C:\WINDOWS\Prefetch\_IU14D2N.TMP-5517F222.pf O45 - LFCP:[MD5.AB5C08888BFC5F36EE3C4BE7CA3EB0DA] - 14/09/2013 - 18:17:50 ---A- - C:\WINDOWS\Prefetch\PCM-PROTECTION.EXE-A89F6425.pf O45 - LFCP:[MD5.A4B9CE4B5D34475AEAAC4D42D2C1D787] - 14/09/2013 - 18:24:32 ---A- - C:\WINDOWS\Prefetch\BANDIZIP64.EXE-B694B70F.pf O45 - LFCP:[MD5.D900D78B24333691E00B66E88D055441] - 17/09/2013 - 18:03:47 ---A- - C:\WINDOWS\Prefetch\AUTORUN.EXE-D28490C2.pf O45 - LFCP:[MD5.3B82316F18C7F0B69FB5AB61A7423CB6] - 17/09/2013 - 18:03:57 ---A- - C:\WINDOWS\Prefetch\AUTORUN.EXE-87AAD447.pf O45 - LFCP:[MD5.8D117B69F80E7D3EB7F7B0A8035A08C4] - 18/09/2013 - 06:00:10 ---A- - C:\WINDOWS\Prefetch\AUTHHOST.EXE-44C90B62.pf O45 - LFCP:[MD5.41BAEA0D901686A23D4D05DE9892D310] - 20/09/2013 - 15:41:37 ---A- - C:\WINDOWS\Prefetch\BLACKLIST_GAME.EXE-14326C3D.pf O45 - LFCP:[MD5.72ABF314C1386E393C1C142B49E2148F] - 20/09/2013 - 15:41:37 ---A- - C:\WINDOWS\Prefetch\GU.EXE-31C8662F.pf O45 - LFCP:[MD5.5E7DF93552A98A54952CAA8C9051E724] - 21/09/2013 - 10:27:05 ---A- - C:\WINDOWS\Prefetch\RE.EXE-4867EBB0.pf O45 - LFCP:[MD5.5CC3CB36821CC3159BD3F2E53C2B7731] - 23/09/2013 - 11:47:31 ---A- - C:\WINDOWS\Prefetch\dynreservedpri.db O45 - LFCP:[MD5.9EE9FB98F7108538453671E69221B403] - 23/09/2013 - 12:26:25 ---A- - C:\WINDOWS\Prefetch\GHDELICIOUSEMILYSCHILDHOODMEM-243A5E91.pf O45 - LFCP:[MD5.EFAD653AB430D99CAA5AC345BF47B8A5] - 24/09/2013 - 13:38:59 ---A- - C:\WINDOWS\Prefetch\DELICIOUS5.EXE-47279AFA.pf O45 - LFCP:[MD5.6F48BBEF7E3757685B774E127A8CEAAF] - 24/09/2013 - 13:46:51 ---A- - C:\WINDOWS\Prefetch\DELICIOUS4.EXE-B302C039.pf O45 - LFCP:[MD5.4E30D9FA5DC15D727FACF7A46FB8F0F0] - 24/09/2013 - 13:47:34 ---A- - C:\WINDOWS\Prefetch\DELICIOUS3.EXE-793857C0.pf O45 - LFCP:[MD5.4DC7559ECABE337263BFC5C91E9AE669] - 24/09/2013 - 22:09:26 ---A- - C:\WINDOWS\Prefetch\VIZORHTMLDIALOG.EXE-A91B4E31.pf O45 - LFCP:[MD5.5858DA454CFA126064CDB5410434F90B] - 24/09/2013 - 22:09:55 ---A- - C:\WINDOWS\Prefetch\VIZORHTMLDIALOG.EXE-7F59381E.pf O45 - LFCP:[MD5.17A4E0656C2BE9F5D845F195706C8012] - 25/09/2013 - 10:23:59 ---A- - C:\WINDOWS\Prefetch\DELICIOUS2.EXE-5BAFC0A6.pf O45 - LFCP:[MD5.EAAEFF64151C3667B17D2851B5A4D098] - 25/09/2013 - 14:46:33 ---A- - C:\WINDOWS\Prefetch\AICHARGERAP.EXE-60EB3008.pf O45 - LFCP:[MD5.DD9F4CCB7D95A5A1B8735E8C0A7D4356] - 25/09/2013 - 17:11:51 ---A- - C:\WINDOWS\Prefetch\LAUNCHTM.EXE-B444BC8E.pf O45 - LFCP:[MD5.64317E1670A0C26A5E641F12B7EA7B75] - 26/08/2013 - 19:07:21 ---A- - C:\WINDOWS\Prefetch\RESIZE.EXE-7D0FF9B0.pf ~ Prefetcher: 140 Legitimates Filtered in 00mn 01s ---\ Clé de registre Shell MountPoints2 (MPKS) (O51) O51 - MPSK:{d349517e-14e2-11e2-be6b-806e6f6e6963}\AutoRun\command. (.Pas de propriétaire - RESetup MFC Application.) -- F:\RESetup.exe ~ Keys: Scanned in 00mn 00s ---\ Enumération des clés de registre PoliciesSystem (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 ~ MWPS: 17 Legitimates Filtered in 00mn 00s ---\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 ~ MWPE Keys: 3 Legitimates Filtered in 00mn 00s ---\ Liste des pilotes du système (SDL) (O58) O58 - SDL:[MD5.D168AE57558A6174FB35E0F82B32F62B] - 21/02/2013 - 15:55:05 . (...) -- C:\WINDOWS\System32\Drivers\aswnet.sys.sum [175] O58 - SDL:[MD5.ADAA34740E9F6AFF94CC75D5CF8ED7E2] - 04/01/2008 - 06:34:42 ---A- . (...) -- C:\WINDOWS\SysWOW64\drivers\AsInsHelp32.sys [10216] ~ Drivers: 17 Legitimates Filtered in 00mn 00s ---\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC: 24/09/2013 - 18:30:17 ---A- . (.Conduit.) -- C:\Users itinino\Downloads\WiseConvert_1.5.exe [1094120] =>Toolbar.Conduit O61 - LFC: 24/09/2013 - 20:16:42 ---A- . (...) -- C:\Users itinino\Downloads\AdwCleaner.exe [1042066] O61 - LFC: 24/09/2013 - 20:28:06 ---A- . (...) -- C:\Users itinino\AppData\Local\avgchrome\avgp [174789] O61 - LFC: 24/09/2013 - 20:44:52 ---A- . (...) -- C:\Users itinino\Documents\JRT.txt [2102] O61 - LFC: 24/09/2013 - 21:34:45 ---A- . (...) -- C:\Users itinino\AppData\Roaming\ZHP\ZHPADSReport.txt [351] =>.Nicolas Coolman O61 - LFC: 24/09/2013 - 21:36:10 ---A- . (...) -- C:\Users itinino\AppData\Roaming\ZHP\ZHPDiag.txt [57455] =>.Nicolas Coolman O61 - LFC: 24/09/2013 - 21:37:37 ---A- . (...) -- C:\Users itinino\Documents\ZHPDiag.txt [57455] =>.Nicolas Coolman O61 - LFC: 25/09/2013 - 10:12:25 ---A- . (...) -- C:\Users itinino\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists [261102] O61 - LFC: 25/09/2013 - 17:36:03 ---A- . (...) -- C:\Users itinino\AppData\Local\Google\Chrome\User Data\Local State [43521] O61 - LFC: 25/09/2013 - 17:37:13 ---A- . (...) -- C:\Users itinino\AppData\Roaming\ZHP\Log.txt [102378] =>.Nicolas Coolman ~ 24 Fichiers temporaires (Temporary files) ~ Files: 213 Legitimates Filtered in 01mn 21s ---\ Liste des outils de désinfection (LATC) (O63) O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman ~ ADS: Scanned in 00mn 00s ---\ Associations Shell Spawning (O67) O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.) ~ FASS Keys: 19 Legitimates Filtered in 00mn 00s ---\ Menu de démarrage Internet (SMI) (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\ Recherche particulière à la racine du système (SPRF) (O84) [MD5.57184DC9CC12566012452A47FB63B83D] [SPRF][20/05/2013] (.Setup © - Setup.) -- C:\Users itinino\AppData\Local\Temp\1799uninstall.exe [410624] [MD5.0FAB00C8FF3586CF4A53E9A85DFD8C51] [SPRF][26/01/2013] (...) -- C:\Users itinino\AppData\Local\Temp\7z920.exe [21306] [MD5.34928768A32DD3B644CBF740DE73183B] [SPRF][20/05/2013] (.PC Health Labs - PC Health Kit.) -- C:\Users itinino\AppData\Local\Temp\air6C61.exe [3629968] =>PUP.DealPly [MD5.B8138BCA6A83E4F0D21E881C924E47B3] [SPRF][04/03/2013] (.Ask Partner Network - Stub Installer.) -- C:\Users itinino\AppData\Local\Temp\APNSetup.exe [519304] [MD5.B3A840E05F27DC6AE773A5D622BFA994] [SPRF][11/09/2012] (.Ask.com - Offercast - APN Install Manager.) -- C:\Users itinino\AppData\Local\Temp\AskPIP_FF_.exe [783560] [MD5.B28C334C03CEE7C5E829C43AE75DAE5A] [SPRF][28/01/2013] (.Ask.com - AskIC Dynamic Link Library.) -- C:\Users itinino\AppData\Local\Temp\AskSLib.dll [248008] [MD5.CBBD7290D746F07916E4A572540ED246] [SPRF][11/04/2003] (.Pas de propriétaire - AutoRunGUI6 DLL.) -- C:\Users itinino\AppData\Local\Temp\AutoRunGUI.dll [3534848] [MD5.6E1799926209C193FDB2E05A271C5B49] [SPRF][01/09/2013] (...) -- C:\Users itinino\AppData\Local\Temp\BackupSetup.exe [10340624] [MD5.239CFEF5FC6DE1BDA8396ACC19AA30C7] [SPRF][30/08/2013] (...) -- C:\Users itinino\AppData\Local\Temp\bandizip-setup-gl.exe [4249304] [MD5.6A18FCCAA07A3459B950389F5A5CEF36] [SPRF][24/09/2013] (...) -- C:\Users itinino\AppData\Local\Temp\chart_data.dat [20942] [MD5.3D7CDC3E67A97110321BF7453C649B1F] [SPRF][25/02/2013] (...) -- C:\Users itinino\AppData\Local\Temp\DeltaTB.exe [775664] =>Toolbar.DeltaSearch [MD5.B8D0E42594586243344C6F3341EF38F6] [SPRF][25/02/2013] (.Visicom Media Inc. - File Bulldog Toolbar Installer.) -- C:\Users itinino\AppData\Local\Temp\filebulldogTb_1.0.0.8.exe [2486648] =>Adware.SocialSkinz [MD5.1132E09D09C8792F1E3CB3EC471E1783] [SPRF][23/01/2013] (...) -- C:\Users itinino\AppData\Local\Temp\ICReinstall_Installation_Messenger.exe [667016] [MD5.AC009B96FAAD471EB2B1D9507010DF46] [SPRF][26/01/2013] (...) -- C:\Users itinino\AppData\Local\Temp\incredibar_installer.exe [21303] =>Adware.IncrediBar [MD5.8A4AF3B0695F29186AD02E2FD766FA3B] [SPRF][23/01/2013] (.SweetIM Technologies Ltd. - SQLite DLL.) -- C:\Users itinino\AppData\Local\Temp\mgsqlite3.dll [393016] =>PUP.SweetIM [MD5.9A4C7C7392721D18D80DA2A2EBF8B48E] [SPRF][16/12/2012] (.Yuna Software - Uninstaller - Messenger Plus! for Skype.) -- C:\Users itinino\AppData\Local\Temp\MsgPlusUninstall.exe [817152] [MD5.AC2F3647FD669EF50163078964186966] [SPRF][26/01/2013] (...) -- C:\Users itinino\AppData\Local\Temp\MyBabylonTB_google_20120807.exe [21312] =>Toolbar.Babylon [MD5.0E9EE08F0AD7D0473561EE4CA59B37AD] [SPRF][02/11/2012] (.Ask.com - Offercast - APN Install Manager.) -- C:\Users itinino\AppData\Local\Temp\PIP2691_MYC_.exe [877256] [MD5.02F0C000E96731A69B64A188067C4CC0] [SPRF][26/01/2013] (...) -- C:\Users itinino\AppData\Local\Temp\pricepeep_130001_0101.exe [21300] =>Adware.PricePeep [MD5.3BF79E6868B44D3ADB2796BA99521891] [SPRF][07/09/2013] (...) -- C:\Users itinino\AppData\Local\Temp\Quarantine.exe [344583] [MD5.B24EC19FA90E1985941D4BCE479322C6] [SPRF][24/07/2013] (.Systweak Inc - RegClean Pro.) -- C:\Users itinino\AppData\Local\Temp\RegClean2.exe [4372064] =>Rogue.RegistryPowerCleaner [MD5.F631DE75930099A17770F9F129403342] [SPRF][21/09/2013] (...) -- C:\Users itinino\AppData\Local\Temp\SCC.dll [134083] [MD5.245683BDEA19B8426100863404CAEE44] [SPRF][21/09/2013] (...) -- C:\Users itinino\AppData\Local\Temp\setup_fsu_cid.exe [182201] [MD5.D9DA3FDE1AEE64CEE57D4C57A538A53B] [SPRF][22/10/2012] (.SweetIM Technologies Ltd. - SweetIM Installer by SweetPacks.) -- C:\Users itinino\AppData\Local\Temp\Shortcut_bundlesweetimsetup.exe [7739736] =>PUP.SweetIM [MD5.C6D792E4583FC46DB0953FBF6E46348A] [SPRF][23/01/2013] (.SweetIM Technologies Lt - This installer.) -- C:\Users itinino\AppData\Local\Temp\SIMEEI2Installer.exe [2962432] =>PUP.SweetIM [MD5.7704B843006444B69486FD27D4660845] [SPRF][23/01/2013] (.SweetIM Technologies Lt - This installer.) -- C:\Users itinino\AppData\Local\Temp\SIMEEIInstaller.exe [3380216] =>PUP.SweetIM [MD5.F467645711172ECA7FCE253824A09179] [SPRF][29/05/2013] (...) -- C:\Users itinino\AppData\Local\Temp\sonarinst.exe [1786688] [MD5.5405413FFF79B8D9C747AA900F60F082] [SPRF][20/05/2013] (...) -- C:\Users itinino\AppData\Local\Temp\Sqlite3.dll [599419] [MD5.232AD40DF4D2A129B88A2411907DAA4A] [SPRF][01/09/2013] (...) -- C:\Users itinino\AppData\Local\Temp oolbar1108172390.exe [175208] [MD5.B151A333168D05AB0216AC0C7D11F8F4] [SPRF][01/09/2013] (...) -- C:\Users itinino\AppData\Local\Temp oolbar1108172843.exe [729128] [MD5.287E8C7B5D5ED63E829FAF9E88CE3FEC] [SPRF][01/09/2013] (.RegClean - RegClean.) -- C:\Users itinino\AppData\Local\Temp oolbar1108177250.exe [4361549] [MD5.FA37DA63F0E2B5531C6DCD8F05EA0376] [SPRF][12/09/2012] (...) -- C:\Users itinino\AppData\Local\Temp\TouchURL.exe [48640] [MD5.3C74C26999F2060BC6302448F173A342] [SPRF][28/08/2013] (.Babylon Ltd. - Uninstaller Application.) -- C:\Users itinino\AppData\Local\Temp\uninst1.exe [340464] =>Toolbar.Babylon [MD5.D3C06FF5973C912C61129C96B5948910] [SPRF][01/09/2013] (.http://www.goforfiles.com/ - GoforFiles.) -- C:\Users itinino\AppData\Local\Temp\uninstall1108600875.exe [6590600] =>P2P.GoforFiles [MD5.B82A71160DAF1E4D7A1D6EA4830D3EC9] [SPRF][01/09/2013] (.http://goforfiles.com/ - GoforFiles Application.) -- C:\Users itinino\AppData\Local\Temp\uninstall1108608562.exe [907856] =>P2P.GoforFiles [MD5.C3A3A4CDCF3D6A196201703E2288D8FC] [SPRF][30/01/2013] (.Yuna Software - Setup of Messenger Plus! 6.) -- C:\Users itinino\AppData\Local\Temp\Update_6e7b.exe [1161584] [MD5.225CCDCFE5625795647043679CB77112] [SPRF][30/01/2013] (...) -- C:\Users itinino\AppData\Local\Temp\wajam_install.exe [417256] =>Toolbar.Wajam [MD5.8CA2E2944BAF97A23A4183B67E4E80E4] [SPRF][04/03/2013] (...) -- C:\Users itinino\AppData\Local\Temp\_unps.exe [348160] [MD5.FEE1D58C6AD73F25EB0DAD4F690560AD] [SPRF][14/04/2013] (.Facebook Inc. - Setup.) -- C:\Users itinino\Desktop\FacebookVideoCallSetup_v1.2.205.0.exe [501248] [MD5.DB5DE86A81CF3A802D51A455F1878B99] [SPRF][09/03/2013] (.FLVMPlayer - FLV Media Player Setup.) -- C:\Users itinino\Desktop\FLVMPlayer2.exe [4958377] ~ Files: 59 Legitimates Filtered in 00mn 05s ---\ Liste des exceptions du parefeu (FirewallRules) (O87) O87 - FAEL: "{0EA52F56-E24C-46D5-BB7B-985AD498E1A4}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) =>PUP.SweetIM O87 - FAEL: "{1656FF78-A313-4475-AF49-02919FA466BF}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) =>PUP.SweetIM O87 - FAEL: "TCP Query User{2B6F7004-C35A-4884-AE1F-D7B5B37C0DC3}C:\program files (x86) orrent opener orrent opener.exe" | In - Public - P6 - TRUE | .(.Denco Limited.) -- C:\program files (x86) orrent opener orrent opener.exe O87 - FAEL: "UDP Query User{C7F90572-8A0B-4693-B005-DBF81EE8D0BE}C:\program files (x86) orrent opener orrent opener.exe" | In - Public - P17 - TRUE | .(.Denco Limited.) -- C:\program files (x86) orrent opener orrent opener.exe O87 - FAEL: "{4F38D31D-D973-492B-85D2-4C29298F4926}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\GoforFiles\goforfilesdl.exe (.not file.) =>P2P.GoforFiles O87 - FAEL: "{399E2502-2DE3-442C-B7D0-23BDB9337ADE}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\GoforFiles\goforfilesdl.exe (.not file.) =>P2P.GoforFiles O87 - FAEL: "{8E28A393-0BDE-4DF3-83B5-1B701ECA015F}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\GoforFiles\GoforFiles.exe (.not file.) =>P2P.GoforFiles O87 - FAEL: "{17726360-220C-4D6E-97D1-6E384B7BD827}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\GoforFiles\GoforFiles.exe (.not file.) =>P2P.GoforFiles ~ Firewall: 256 Legitimates Filtered in 00mn 00s ---\ Enumère les codes produits des logiciels (PUC) (O90) O90 - PUC: "14053424D2337365007A7A857BC03000" . (.Ask Toolbar.) -- C:\Windows\Installer\{42435041-332D-5637-00A7-A758B70C0300}\ToolbarIcon.exe =>Toolbar.Ask O90 - PUC: "5923976166327F040A543A4EA21863E5" . (.Bing Bar.) -- C:\WINDOWS\Installer\{16793295-2366-40F7-A045-A3E42A81365E}\icon_installer_ico =>Toolbar.Bing O90 - PUC: "9EE58E3C298524145B73CBBED3CAC4D3" . (.Internet Explorer Toolbar 4.6 by SweetPacks.) -- C:\Windows\Installer\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}\ARPPRODUCTICON.exe =>PUP.SweetIM ~ Update Products: 121 Legitimates Filtered in 00mn 00s ---\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS) [MD5.AF4D3E3C14A82065B15E1DE0DE29F79C] [WIS][16/08/2013] (.APN, LLC - Ask Toolbar.) -- C:\Windows\Installer\2ea368f.msi [461312] =>Toolbar.Ask [MD5.EDD21B7C504C7E3F36DE766B31BD3178] [WIS][23/01/2013] (.SweetIM Technologies Ltd. - SweetPacks Toolbar for Internet Explorer 4.0.) -- C:\Windows\Installer\c39290.msi [3304960] =>PUP.SweetIM [MD5.3CD19859CD377AD00B30E4BEE49D374E] [WIS][23/01/2013] (.SweetIM Technologies Ltd. - Sweetpacks Communicator 1.1.) -- C:\Windows\Installer\c39295.msi [2997248] =>PUP.SweetIM [MD5.BBF4134424D0556F36DC086028750937] [WIS][23/01/2013] (.SweetIM Technologies Ltd. - SweetPacks bundle uninstaller.) -- C:\Windows\Installer\c3929a.msi [2579456] =>PUP.SweetIM ~ WIS: 120 Legitimates Filtered in 00mn 09s ---\ Etat général des services not Microsoft (EGS) (SR=Running, SS=Stopped) SR - | Auto 03/09/2013 65640 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe SS - | Demand 10/09/2013 257416 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe SR - | Auto 21/12/2012 57008 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - | Auto 01/06/2012 920736 | (asComSvc) . (...) - C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe SR - | Auto 01/06/2012 951936 | (asHmComSvc) . (.ASUSTeK Computer Inc..) - C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe SR - | Auto 17/02/2012 149120 | (AsSysCtrlService) . (.ASUSTeK Computer Inc..) - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe SR - | Auto 30/08/2013 46808 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe SR - | Auto 30/08/2013 137960 | (avast! Firewall) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\afwServ.exe SS - | Auto 14/02/2012 193816 | (BBSvc) . (.Microsoft Corporation..) - C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BBSvc.exe SR - | Demand 14/02/2012 240408 | (BBUpdate) . (.Microsoft Corporation..) - C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\SeaPort.exe SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SR - | Auto 24/05/2011 1840128 | (Fabs) . (.MAGIX AG.) - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe SS - | Demand 26/04/2011 2702848 | (FirebirdServerMAGIXInstance) . (.MAGIX®.) - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe SS - | Auto 23/01/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 23/01/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SR - | Auto 20/04/2012 635104 | (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe SR - | Demand 31/05/2013 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 25/06/2012 166720 | (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe SR - | Auto 17/07/2012 277824 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe SR - | Auto 14/07/2012 769432 | (NAUpdate) . (.Nero AG.) - C:\Program Files (x86)\Nero\Update\NASvc.exe SR - | Auto 28/08/2012 891240 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32 vvsvc.exe SR - | Auto 10/07/1658 0 | (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe SR - | Auto 25/06/2013 427520 | (Roozz Updater) . (.Roozz.) - C:\Program Files (x86)\Roozz\Updater.exe SS - | Auto 01/03/2013 161384 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe SS - | Demand 28/08/2013 563624 | (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe SR - | Auto 17/07/2012 365376 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe SR - | Auto 06/07/2012 27792 | (VIAKaraokeService) . (.VIA Technologies, Inc..) - C:\WINDOWS\System32\viakaraokesrv.exe SS - | Demand 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation SS - | Auto 20/09/2012 29696 | C:\WINDOWS\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\WINDOWS\System32\svchost.exe ~ Services: Scanned in 00mn 11s ---\ Recherche d'infection sur le Master Boot Record (MBR)(O80) Run by titinino at 25/09/2013 18:39:46 ~ OS 64 not supported by MBR tool ~ MBR: 0 Legitimates Filtered in 00mn 00s ---\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by titinino at 25/09/2013 18:39:48 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ MBR: Scanned in 00mn 02s ---\ Scan Additionnel (O88) Database Version : 12930 - (23/09/2013) Clés trouvées (Keys found) : 97 Valeurs trouvées (Values found) : 0 Dossiers trouvés (Folders found) : 1 Fichiers trouvés (Files found) : 27 [HKLM\Software\Google\Chrome\Extensions\aaaaiopnfecjheficjcjfgjecfgdhbmc] =>Toolbar.Ask^ [HKLM\Software\Google\Chrome\Extensions\algmakeomkafjglfhpomolfhjppoojff] =>Adware.Pricora^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{42435041-332D-5637-00A7-A758B70C0300}] =>Toolbar.Ask^ [HKLM\Software\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}] =>PUP.RewardsArcade [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635] =>PUP.SweetIM [HKLM\Software\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}] =>PUP.RewardsArcade [HKLM\Software\Classes\Installer\Features\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM [HKLM\Software\Classes\Installer\Products\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Installer\Features\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Installer\Products\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM [HKLM\Software\Wow6432Node\SweetIM] =>PUP.SweetIM [HKLM\Software\Classes\Installer\Features\9EE58E3C298524145B73CBBED3CAC4D3] =>PUP.SweetIM [HKLM\Software\Classes\Installer\Products\9EE58E3C298524145B73CBBED3CAC4D3] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9EE58E3C298524145B73CBBED3CAC4D3] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Installer\Features\9EE58E3C298524145B73CBBED3CAC4D3] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Installer\Products\9EE58E3C298524145B73CBBED3CAC4D3] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>Toolbar.Tarma [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>Toolbar.Tarma [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420] =>PUP.SweetIM [HKCU\Software\iWinArcade] =>Adware.iWinArcade [HKLM\Software\Wow6432Node\iWinArcade] =>Adware.iWinArcade [HKLM\Software\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}] =>PUP.SweetIM^ [HKLM\Software\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}] =>PUP.SweetIM^ [HKLM\Software\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12BF94BD06C95F343A77631402B9556A] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2124D8A8CF720FD44866190AF560228E] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27A325ACED8CA4743A30127638591ADB] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\350D17402BD84234EAF7D32F08172D7C] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EE8C5F419057E1478A654868CEE60B5] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4735D908D66E1BA46B6C2D7185A12B2B] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76D8378E2DDAED3428720A631F6E3BF0] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A001B259DB7D694E818BE29B973992C] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE2EC163C6A68A48921573E0E7E199D] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C06C6662FA5B04646829E4A460857770] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEEB3E14ABE8270419B0FD762E18F7C6] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1B5E9A3BDB51349BF96E842C062D98] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FECBC2BC14DA6CD459BD59A041709836] =>PUP.SweetIM^ C:\Users itinino\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff =>Adware.Pricora C:\Users itinino\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaiopnfecjheficjcjfgjecfgdhbmc =>Toolbar.Ask^ C:\Users itinino\Downloads\WiseConvert_1.5.exe =>Toolbar.Conduit^ C:\Users itinino\AppData\Local\Temp\air6C61.exe =>PUP.DealPly^ C:\Users itinino\AppData\Local\Temp\DeltaTB.exe =>Toolbar.DeltaSearch^ C:\Users itinino\AppData\Local\Temp\filebulldogTb_1.0.0.8.exe =>Adware.SocialSkinz^ C:\Users itinino\AppData\Local\Temp\incredibar_installer.exe =>Adware.IncrediBar^ C:\Users itinino\AppData\Local\Temp\mgsqlite3.dll =>PUP.SweetIM^ C:\Users itinino\AppData\Local\Temp\MyBabylonTB_google_20120807.exe =>Toolbar.Babylon^ C:\Users itinino\AppData\Local\Temp\pricepeep_130001_0101.exe =>Adware.PricePeep^ C:\Users itinino\AppData\Local\Temp\RegClean2.exe =>Rogue.RegistryPowerCleaner^ C:\Users itinino\AppData\Local\Temp\Shortcut_bundlesweetimsetup.exe =>PUP.SweetIM^ C:\Users itinino\AppData\Local\Temp\SIMEEI2Installer.exe =>PUP.SweetIM^ C:\Users itinino\AppData\Local\Temp\SIMEEIInstaller.exe =>PUP.SweetIM^ C:\Users itinino\AppData\Local\Temp\uninst1.exe =>Toolbar.Babylon^ C:\Users itinino\AppData\Local\Temp\wajam_install.exe =>Toolbar.Wajam^ C:\Windows\Installer\{42435041-332D-5637-00A7-A758B70C0300}\ToolbarIcon.exe =>Toolbar.Ask^ C:\WINDOWS\Installer\{16793295-2366-40F7-A045-A3E42A81365E}\icon_installer_ico =>Toolbar.Bing^ C:\Windows\Installer\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}\ARPPRODUCTICON.exe =>PUP.SweetIM^ C:\Windows\Installer\2ea368f.msi =>Toolbar.Ask^ C:\Windows\Installer\c39290.msi =>PUP.SweetIM^ C:\Windows\Installer\c39295.msi =>PUP.SweetIM^ C:\Windows\Installer\c3929a.msi =>PUP.SweetIM^ ~ Additionnel Scan: 297133 Items scanned in 00mn 15s ---\ Récapitulatif des détections trouvées sur votre station ~ http://nicolascoolman.webs.com/apps/blog/show/28927746-toolbar-ask =>Toolbar.Ask ~ http://nicolascoolman.webs.com/apps/blog/show/29294184-adware-pricora =>Adware.Pricora ~ http://nicolascoolman.webs.com/apps/blog/show/29216159-pup-sweetim =>PUP.SweetIM ~ http://nicolascoolman.webs.com/apps/blog/show/29507721-toolbar-conduit =>Toolbar.Conduit ~ http://nicolascoolman.webs.com/apps/blog/show/28060597-pup-dealply =>PUP.DealPly ~ http://nicolascoolman.webs.com/apps/blog/show/27875657-toolbar-deltasearch =>Toolbar.DeltaSearch ~ http://nicolascoolman.webs.com/apps/blog/show/27480243-adware-socialskinz =>Adware.SocialSkinz ~ http://nicolascoolman.webs.com/apps/blog/show/26898222-adware-incredibar =>Adware.Incredibar ~ http://nicolascoolman.webs.com/apps/blog/show/26627369-toolbar-babylon =>Toolbar.Babylon ~ http://nicolascoolman.webs.com/apps/blog/show/29295819-rogue-registrypowercleaner =>Rogue.RegistryPowerCleaner ~ http://nicolascoolman.webs.com/apps/blog/show/27379491-toolbar-wajam =>Toolbar.Wajam ~ http://nicolascoolman.webs.com/apps/blog/show/31536787-toolbar-bing =>Toolbar.Bing ~ http://nicolascoolman.webs.com/apps/blog/show/26684723-adware-imbooster =>Adware.IMBooster ~ http://nicolascoolman.webs.com/apps/blog/show/28000037-pup-rewardsarcade =>PUP.RewardsArcade ~ http://nicolascoolman.webs.com/apps/blog/show/29637859-toolbar-tarma =>Toolbar.Tarma ~ http://nicolascoolman.webs.com/apps/blog/show/28766471-adware-iwinarcade =>Adware.iWinArcade ~ MSI: 16 link(s) detected in 00mn 15s ~ 1517 Legitimates filtered by white list End of the scan (667 lines in 03mn 29s)(0)

lilidurhone · Answer

On va faire un scan généralisé pour voir si d'autres infections ne se cachent pas

Attention le scan peut durer assez longtemps environ 2h voire plus suivant la capacité des disques durs

* Télécharge MalwareBytes' anti-malware sur le bureau
https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/

* Cliques droit sur l'icône Download_mbam-setup.exe afin de l'exécuter en tant qu'admin pour lancer le processus d'installation

* Si le pare-feu demande l'autorisation de se connecter pour malwareBytes, accepte

* Décoche pour la version d'essai pour malwarebytes pro

* Il va se mettre à jour une fois faite

* Va dans l'onglet recherche

* Sélectionne exécuter un examen complet

* Clique sur rechercher

* Le scan démarre
 
* A la fin de l'analyse, le message s'affiche: L'examen s'est terminé normalement.

* Clique sur afficher les résultats pour afficher les objets trouvés

* Clique sur OK pour poursuivre

* Si des malwares ont été détectés, cliquer sur afficher les résultats

* Sélectionne tout (ou laisser coché)

* Clique sur tout supprimer

* MalwareBytes va détruire les fichiers et les clés de registre et en mettre une
copie dans la quarantaine

* Malwarebytes va ouvrir le bloc-note et y copier le rapport

* Redémarre le PC

* Une fois redémarré, double-clique sur MalwareBytes

* Va dans l'onglet rapport/log

* Clique dessus pour l'afficher une fois affiché, cliquer sur édition
en haut du bloc-note puis sur sélectionner tout

* Reviens sur édition, puis sur copier et reviens
sur le forum dans ta réponse

* Clic droit dans le cadre de la réponse et coller

Bonne chance

titinino50 · Answer

c'est en cours de scan, merci

titinino50 · Answer

Malwarebytes Anti-Malware (Essai) 1.75.0.1300
www.malwarebytes.org

Version de la base de données: v2013.09.25.06

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16688
titinino :: NINO [administrateur]

Protection: Activé

25/09/2013 20:52:15
mbam-log-2013-09-25 (20-52-15).txt

Type d'examen: Examen complet (C:\|D:\|)
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 629757
Temps écoulé: 1 heure(s), 10 minute(s), 23 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 5
HKCR\AppID\{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8} (PUP.Optional.MySearchDial.A) -> Mis en quarantaine et supprimé avec succès.
HKCR\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B} (PUP.Optional.MySearchDial.A) -> Mis en quarantaine et supprimé avec succès.
HKCR\TypeLib\{C292AD0A-C11F-479B-B8DB-743E72D283B0} (PUP.Optional.MySearchDial.A) -> Mis en quarantaine et supprimé avec succès.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847} (PUP.Optional.SweetPacks) -> Mis en quarantaine et supprimé avec succès.
HKLM\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> Mis en quarantaine et supprimé avec succès.

Valeur(s) du Registre détectée(s): 1
HKLM\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Données: {6B33CC92-659A-11E2-BE6F-3085A9A84FB8} -> Mis en quarantaine et supprimé avec succès.

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 7
C:\Users	itinino\AppData\Local\Temp\mt_ffx\Delta (PUP.Optional.Delta.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\mt_ffx\Delta\delta (PUP.Optional.Delta.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\mt_ffx\Delta\delta\1.8.10.0 (PUP.Optional.Delta.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\mt_ffx\Delta\delta\1.8.24.6 (PUP.Optional.Delta.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\CT3128284 (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\CT3241952 (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\CT3297966 (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.

Fichier(s) détecté(s): 78
C:\AdwCleaner\Quarantine\C\Program Files (x86)\delta\delta\1.8.24.6\deltaApp.dll.vir (PUP.Optional.Delta) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\delta\delta\1.8.24.6\deltaEng.dll.vir (PUP.Optional.Delta) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\delta\delta\1.8.24.6\deltasrv.exe.vir (PUP.Optional.Delta) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\delta\delta\1.8.24.6\deltaTlbr.dll.vir (PUP.Optional.Delta) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\delta\delta\1.8.24.6\bh\delta.dll.vir (PUP.Optional.Delta) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Communicator\mgcommon.dll.vir (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Communicator\mgcommunication.dll.vir (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Communicator\mgsimcommon.dll.vir (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Communicator\mgxml_wrapper.dll.vir (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe.vir (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Communicatoresources\sqlite\mgSqlite3.dll.vir (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\ClearHist.exe.vir (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgcommon.dll.vir (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgconfig.dll.vir (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelper.dll.vir (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe.vir (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mghooking.dll.vir (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mglogger.dll.vir (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgsimcommon.dll.vir (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll.vir (PUP.Optional.SweetPacks) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll.vir (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgxml_wrapper.dll.vir (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.exe.vir (PUP.Optional.Tarma.A) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.2.0.0_0\mgHelperGCFB.dll.vir (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.3.0.2_0\mgHelperGC.dll.vir (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Users	itinino\AppData\Roaming\file scout\filescout.exe.vir (PUP.Optional.FileScout.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\94YJ3ERP\Iminent-6.4.56.0[1].MSI (PUP.Optional.Iminent) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G242FMHQ\pack[1].7z (PUP.Optional.BrowserProtect.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JXL4K0BR\MinibarFirefox[1].exe (PUP.Optional.Iminent.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OGA3EESG\59347.Bubble_Dock.BBD023.no[1].exe (PUP.Optional.BubbleDock.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OGA3EESG\MinibarChrome[1].exe (PUP.Optional.Iminent.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PUKXUAUT\IminentMinibarIE[1].exe (PUP.Optional.Iminent.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VMK82L0F\Setup[1].exe (PUP.Optional.DiamonData.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\DeltaTB.exe (PUP.Optional.Delta.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\EE7E.tmp (PUP.Optional.PerformerSoft.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\ICReinstall_Installation_Messenger.exe (PUP.Optional.InstallCore) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\mgsqlite3.dll (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\OptimizerPro.exe (PUP.Optional.OptimizePro.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\RegClean2.exe (PUP.Optional.RegCleanerPro) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\setup_fsu_cid.exe (PUP.Optional.FileScout.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\Shortcut_bundlesweetimsetup.exe (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp	oolbar1108172843.exe (PUP.Optional.DeltaTB) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp	oolbar1108177250.exe (PUP.Optional.RegCleanerPro) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\uninstall1108600875.exe (PUP.Optional.GoForFiles.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\wajam_install.exe (PUP.Optional.Wajam.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\2827278562\chromeupdaterfull.exe (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\988F0AED-BAB0-7891-BDA2-328918F5BEDF\BabMaint.exe (PUP.Optional.Babylon.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\988F0AED-BAB0-7891-BDA2-328918F5BEDF\BUSolution.dll (PUP.Optional.BabSolution.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\988F0AED-BAB0-7891-BDA2-328918F5BEDF\CrxInstaller.dll (PUP.Optional.Babylon.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\988F0AED-BAB0-7891-BDA2-328918F5BEDF\MntrDLLInstall.dll (PUP.Optional.Babylon.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\988F0AED-BAB0-7891-BDA2-328918F5BEDF\MyDeltaTB.exe (PUP.Optional.Delta) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\DM2\4Free-Video-Converter_027\setup__120.exe (PUP.Optional.Amonetize.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\is1668783924\bundlesweetimsetup.exe (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\is180804277\DeltaTB.exe (PUP.Optional.Delta.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\TorrentOpener\PIPAskToolbar\Offercast2802_ADAP_.exe (PUP.Optional.BundledToolBar.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\Downloads\01net_Messenger_Plus!.exe (PUP.Optional.OpenCandy) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\Downloads\Delicious_5_-_Emily-'s_Holiday_Season_[FR]_[Gest._Temps]_downloader_fr_99080 (1).exe (PUP.Optional.GoForFiles.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\Downloads\Delicious_5_-_Emily-'s_Holiday_Season_[FR]_[Gest._Temps]_downloader_fr_99080 (2).exe (PUP.Optional.GoForFiles.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\Downloads\Delicious_5_-_Emily-'s_Holiday_Season_[FR]_[Gest._Temps]_downloader_fr_99080.exe (PUP.Optional.GoForFiles.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\Downloads\iMeshSetup-r333-w-bc.exe (PUP.Optional.iMeshMusicBoxTB.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\Downloads\SoftonicDownloader_pour_facebook-video-calling.exe (PUP.Optional.Softonic) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\Downloads\SoftonicDownloader_pour_format-factory (1).exe (PUP.Optional.Softonic) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\Downloads\SoftonicDownloader_pour_free-live-tv.exe (PUP.Optional.Softonic) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\Downloads	orrent.exe (PUP.Optional.BundledToolBar.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\Downloads\Webplayer (1).exe (PUP.Optional.KreaP) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\Downloads\Webplayer.exe (PUP.Optional.KreaP) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\Downloads\WiseConvert_1.5.exe (PUP.Optional.OpenCandy) -> Mis en quarantaine et supprimé avec succès.
C:\WINDOWS\Installer\c39290.msi (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\WINDOWS\Installer\c39295.msi (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\WINDOWS\Installer\c3929a.msi (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\WINDOWS\Temp\scoped_dir_2816_31625\CRX_INSTALL\mgHelperGCFB.dll (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\WINDOWS\Temp\scoped_dir_2816_9342\CRX_INSTALL\mgHelperGC.dll (PUP.Optional.SweetIM) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\CT3128284\ddt.csf (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\CT3241952\CT3241952.txt (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\CT3241952\dtime.csf (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\CT3241952\initData.json (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\CT3241952\manifest.json (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users	itinino\AppData\Local\Temp\CT3297966\ddt.csf (PUP.Optional.Conduit.A) -> Mis en quarantaine et supprimé avec succès.

(fin)

lilidurhone · Answer

Super

Refais moi la liste des soucis qui restent(ainsi qu'un zhpdiag)

lilidurhone · Answer

As tu ressenti un mieux?

lilidurhone · Answer

C'est pas fini pour autant

Il me faudrait un zhpdiag

titinino50 · Answer

~ Rapport de ZHPDiag v2013.9.23.44 - Nicolas Coolman (23/09/2013) ~ Lancé par titinino (26/09/2013 20:47:28) ~ Adresse du Site Web https://nicolascoolman.webs.com/ ~ Traduit par Nicolas Coolman ~ Etat de la version : ~ Liste blanche : Activée par le programme ~ Elévation des Privilèges : OK ~ User Account Control (UAC): Activate by user ---\ Navigateurs Internet MSIE: Internet Explorer v10.0.9200.16688 GCIE: Google Chrome v29.0.1547.76 (Defaut) ---\ Informations sur les produits Windows ~ Langage: Français Windows 8 Home Premium Edition, 64-bit (Build 9200) Windows Server License Manager Script : OK ~ ion : Windows(R) Operating System, OEM_DM channel Windows ID Activation : OK ~ Windows Partial Key : 27GBG Windows License : OK ~ Windows Remaining Initializations Number : 999 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\ Logiciels de protection du système avast! Internet Security v8.0.1497.0 Malwarebytes Anti-Malware version 1.75.0.1300 Windows Defender W8 ---\ Logiciels d'optimisation du système ---\ Logiciels de partage PeerToPeer ---\ Surveillance de Logiciels Adobe Flash Player 11 Plugin Adobe Reader X Java 7 Update 25 ---\ Informations sur le système ~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 6098 MB (75% free) System Restore: Activé (Enable) System drive C: has 1 GB (0%) free of 150 GB ---\ Mode de connexion au système ~ Computer Name: NINO ~ User Name: titinino ~ All Users Names: titinino, Administrateur, ~ Unselected Option: None Logged in as Administrator ---\ Variables d'environnement ~ System Unit : C:\ ~ %AppData% : C:\Users itinino\AppData\Roaming\ ~ %Desktop% : C:\Users itinino\Desktop\ ~ %Favorites% : C:\Users itinino\Favorites\ ~ %LocalAppData% : C:\Users itinino\AppData\Local\ ~ %StartMenu% : C:\Users itinino\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\WINDOWS\ ~ %System% : C:\WINDOWS\System32\ ---\ Enumération des unités disques C: Hard drive, Flash drive, Thumb drive (Free 1 Go of 150 Go) D: Hard drive, Flash drive, Thumb drive (Free 764 Go of 765 Go) E: Floppy drive, Flash card reader, USB Key (Not Inserted) F: CD-ROM drive (Free 0 Go of 0 Go) ---\ Etat du Centre de Sécurité Windows [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified ~ Security Center: 29 Legitimates Filtered in 00mn 00s ---\ Recherche particulière de fichiers génériques [MD5.0E8E6463F81C80AFBED533E0F1F8895D] - (.Microsoft Corporation - Explorateur Windows.) (.01/06/2013 - 12:34:21.) -- C:\WINDOWS\Explorer.exe [2391280] [MD5.FE9AB232B56A12224E8A3F3F9878C9A3] - (.Microsoft Corporation - Application de démarrage de Windows.) (.26/07/2012 - 04:08:50.) -- C:\WINDOWS\System32\Wininit.exe [132608] [MD5.6DBE239FF1C9650A794C974B8C7913D7] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.21/08/2013 - 05:12:06.) -- C:\WINDOWS\System32\wininet.dll [2241024] [MD5.BCF2036A0DD579E47C008C133550283E] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.11/10/2012 - 06:46:58.) -- C:\WINDOWS\System32\Winlogon.exe [517120] [MD5.9448F5740A037EC0C18F0E9177232DD0] - (.Microsoft Corporation - Bibliothèque de licences.) (.26/07/2012 - 04:07:20.) -- C:\WINDOWS\System32\sppcomapi.dll [273408] [MD5.36D6A3201721558A8AFBCC09C2DA4C2C] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.06/11/2012 - 04:53:44.) -- C:\WINDOWS\system32\Drivers\AFD.sys [560640] [MD5.A721FF570C2387E383BDDEA9632863C9] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.26/07/2012 - 06:00:48.) -- C:\WINDOWS\system32\Drivers\atapi.sys [25840] [MD5.990B1BABE6E81FB18E65A87EBEFB1772] - (.Microsoft Corporation - CD-ROM File System Driver.) (.26/07/2012 - 03:30:10.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [108544] [MD5.339BFF85D788268752DA8C9644B188EE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.26/07/2012 - 03:26:36.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [174080] [MD5.09D9EB9E7898F8E6561473A20CC808B9] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.26/07/2012 - 03:26:53.) -- C:\WINDOWS\system32\Drivers\DfsC.sys [118784] [MD5.7D87B5B6C7188D553E11B59DC7F0B111] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/09/2012 - 07:08:44.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [71168] [MD5.C9E9CBF73AFFBFE3E801EFB516787BA3] - (.Microsoft Corporation - Pilote de port i8042.) (.26/07/2012 - 03:28:51.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [112640] [MD5.3969B9C218DD3FAA9F4ED2FFC3651C02] - (.Microsoft Corporation - IP Network Address Translator.) (.26/07/2012 - 03:23:01.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [145920] [MD5.93179D48066918323628CB016D8C94DC] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.05/02/2013 - 23:29:09.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [370688] [MD5.7CEC25C682D319D484630B3952C31A11] - (.Microsoft Corporation - MBT Transport driver.) (.26/07/2012 - 03:24:28.) -- C:\WINDOWS\system32\Drivers etBT.sys [331776] [MD5.76929F4A69E425911A63B407E26C2589] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.02/02/2013 - 11:54:54.) -- C:\WINDOWS\system32\Drivers tfs.sys [1933544] [MD5.4563DAF8C6A740AD7F501E219BD10766] - (.Microsoft Corporation - Pilote de port parallèle.) (.26/07/2012 - 03:29:53.) -- C:\WINDOWS\system32\Drivers\Parport.sys [105984] [MD5.A14D625C5AEE5FFE0F47D1A1D419FAAE] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.26/07/2012 - 03:23:17.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [124928] [MD5.B2A3AD74FF2E2FFA73AF2567108231B3] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) (.26/07/2012 - 03:25:18.) -- C:\WINDOWS\system32\Drivers dpdr.sys [179712] [MD5.73DC722CE5DF26D7638CE2446F2655C7] - (.Microsoft Corporation - TDI Translation Driver.) (.26/07/2012 - 06:26:47.) -- C:\WINDOWS\system32\Drivers dx.sys [117248] [MD5.78A5BBA3819FFFC62FFEC3E2220D102D] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.01/06/2013 - 12:26:33.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [327936] ~ Generic Processes: Scanned in 00mn 00s ---\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 1/12 ~ Mes musiques (My Musics) : 0/54 ~ Mes Videos (My Videos) : 1/35 ~ Mes Favoris (My Favorites) : 1/5 ~ Mes Documents (My Documents) : 1/544 ~ Mon Bureau (My Desktop) : 1/28814 ~ Menu demarrer (Programs) : 1/32 ~ Hidden Files: Scanned in 00mn 03s ---\ Processus lancés [MD5.D1D5DAB39DCB4BE0359943738D87409B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [532040] [PID.3560] [MD5.8C9231025FAF86B78906B6C847531FFB] - (.ASUSTeK Computer Inc. - ASUS Routine Controller.) -- C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2935424] [PID.844] [MD5.2D75851551D18878FADC21E166DEA3FA] - (.ASUSTek Computer Inc. - AiChargerAP MFC Application.) -- C:\Program Files (x86)\ASUS\ASUS Ai Charger\AiChargerAP.exe [547984] [PID.4020] [MD5.7D7D090E09D28AE68309D625C42B1C9B] - (.ASUSTeK Computer Inc. - ALU MFC Application.) -- C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe [195200] [PID.4144] [MD5.B7995C675014EEBE77A0BEB7AFCCFC08] - (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432] [PID.3540] [MD5.CBC7D8E5416AD30CF16DC2FD4A6AA399] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968] [PID.3712] [MD5.A9F9D081518AC03A51C1195986076F42] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392] [PID.2224] [MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816] [PID.2060] [MD5.DA55D8366D18E218072F87A623436B54] - (.Electronic Arts - Origin.) -- C:\Program Files (x86)\Origin\Origin.exe [3551576] [PID.4944] [MD5.A284E19A3781B50AB949D551B7F36DCA] - (.Electronic Arts - OriginClientService.) -- C:\Program Files (x86)\Origin\OriginClientService.exe [547696] [PID.1352] [MD5.E7148BB584830E51AFD414CE9AEAE74C] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [829392] [PID.2784] [MD5.D63791AEA2D98C5B3A2881A230613B8E] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8006144] [PID.300] ~ Processes Running: Scanned in 00mn 00s ---\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users itinino\AppData\Local\Google\Chrome\User Data\Default\Preferences G2 - GCE: Preference [User Data\Default] [aaaaiopnfecjheficjcjfgjecfgdhbmc] Ask Toolbar v.21.51087, (Désactivé) =>Toolbar.Ask G2 - GCE: Preference [User Data\Default] [algmakeomkafjglfhpomolfhjppoojff] Pricora v.1.24.97, (Activé) =>Adware.Pricora G2 - GCE: Preference [User Data\Default] [amdcolnifoheinafllhaggmoojhmgldi] FLV2MP3Converter on Roozz v.0.1.0.2 (Activé) G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google\u00C2 Drive v.6.3 (Activé) G2 - GCE: Preference [User Data\Default] [dmdhkalcecemojegheiohcghkamlipof] Facebook Unseen v.0.0.0.1 (Activé) G2 - GCE: Preference [User Data\Default] [ifjamchknccokmaecnbknhbfhaicfafd] FileConverter 1.5 v.10.14.250.13 (Désactivé) ~ Google Browser: 20 Legitimates Filtered in 00mn 04s ---\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe F2 - REG:system.ini: VMApplet=C:\WINDOWS\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\ Hosts file redirection (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Hosts File: Scanned in 00mn 00s ~ Nombre de lignes (Lines number): 21 ---\ Internet Explorer Toolbars (O3) O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{4D594333-0076-A76A-76A7-7A786E7484D7} Clé orpheline ~ Toolbar: Scanned in 00mn 00s ---\ Autres liens utilisateurs (O4) O4 - GS\Desktop [Public]: AI Suite II.lnk . (.ASUSTeK Computer Inc. - AI Suite II.) -- C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe O4 - GS\Desktop [Public]: ASUS MX Suite.lnk . (.MAGIX AG - MAGIX Media Suite.) -- C:\Program Files (x86)\ASUS\ASUS MX Suite\ASUS MX Suite\MediaSuite.exe O4 - GS\Desktop [Public]: ASUSDVD.lnk . (.CyberLink Corp. - ASUSDVD.) -- C:\Program Files (x86)\CyberLink\PowerDVD10\PDVDLaunchPolicy.exe O4 - GS\Desktop [Public]: Battlefield 3.lnk . (.EA Digital Illusions CE AB - Battlefield 3(TM).) -- C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe O4 - GS\Desktop [Public]: eManual.lnk . (...) -- C:\Program Files (x86)\ASUS\eManual\eManual.exe O4 - GS\Desktop [Public]: FIFA 14 Demo.lnk . (.Electronic Arts - FIFA 14 Demo.) -- C:\Program Files (x86)\Origin Games\FIFA 14 Demo\Game\fifa14_demo.exe O4 - GS\Desktop [Public]: HD VDeck.lnk . (.VIA - VIA HD Audio CPL.) -- C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe O4 - GS\Desktop [Public]: Restaurant Empire.lnk . (...) -- C:\Program Files (x86)\Enlight\Restaurant Empire\Restaurant Empire.exe O4 - GS\Desktop [Public]: SimCity 4.lnk . (.Maxis - SimCity 4.) -- C:\Program Files (x86)\Maxis\SimCity 4\Apps\SimCity 4.exe O4 - GS\Desktop [Public]: Tom Clancy's Splinter Cell® Blacklist(TM).lnk . (.Ubisoft - Autopatch system.) -- C:\Program Files (x86)\Ubisoft\Tom Clancy's Splinter Cell® Blacklist(TM)\src\SYSTEM\gu.exe O4 - GS\Desktop [Public]: Why ASUS PC.lnk . (.Adobe Systems, Inc. - Adobe Flash Player 9.0 r115.) -- C:\Program Files (x86)\ASUS\Why ASUS PC\Desktop.exe O4 - GS\Program [Public]: Desktop.lnk - Clé orpheline O4 - GS\Program [Public]: HD VDeck.lnk . (.VIA - VIA HD Audio CPL.) -- C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe O4 - GS\QuickLaunch [titinino]: VSO Image Resizer 4.lnk . (.VSO Software SARL - ImageResizer.) -- C:\Program Files (x86)\VSO\Image Resizer 4\Resize.exe O4 - GS\Desktop [titinino]: Bandizip.lnk . (.Bandisoft.com - Bandizip.) -- C:\Users itinino\AppData\Local\Bandizip\Bandizip64.exe O4 - GS\Desktop [titinino]: Enregistrement de produit ASUS.lnk - Clé orpheline O4 - GS\Desktop [titinino]: Torrent Opener.lnk . (.Denco Limited - Torrent Opener Module.) -- C:\Program Files (x86)\Torrent Opener\Torrent Opener.exe O4 - GS\Desktop [titinino]: VSO Image Resizer 4.lnk . (.VSO Software SARL - ImageResizer.) -- C:\Program Files (x86)\VSO\Image Resizer 4\Resize.exe ~ Global Startup: 67 Legitimates Filtered in 00mn 00s ---\ Applications lancées au démarrage du sytème (O4) O4 - HKCU\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper (buildbot_winslav.) -- C:\Program Files (x86)\Steam\Steam.exe O4 - HKCU\..\Run: [ManyCam] . (.ManyCam LLC - ManyCam Virtual Webcam.) -- C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe O4 - HKCU\..\Run: [EADM] . (.Electronic Arts - Origin.) -- C:\Program Files (x86)\Origin\Origin.exe O4 - HKLM\..\Wow6432Node\Run: [HDAudDeck] . (.VIA - VIA HD Audio CPL.) -- C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated O4 - HKLM\..\Wow6432Node\Run: [ASUS Ai Charger] . (.ASUSTek Computer Inc. - AiChargerAP MFC Application.) -- C:\Program Files (x86)\ASUS\ASUS Ai Charger\AiChargerAP.exe O4 - HKLM\..\Wow6432Node\Run: [ASUS Easy Update] . (.ASUSTeK Computer Inc. - ALU MFC Application.) -- C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe O4 - HKLM\..\Wow6432Node\Run: [ASUSPRP] . (.ASUSTek Computer Inc. - ASUS Product Register Program.) -- C:\Program Files (x86)\ASUS\APRP\APRP.exe O4 - HKLM\..\Wow6432Node\Run: [RemoteControl10] . (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation O4 - HKUS\S-1-5-21-1977527705-2680467548-2933568104-1001\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper (buildbot_winslav.) -- C:\Program Files (x86)\Steam\Steam.exe O4 - HKUS\S-1-5-21-1977527705-2680467548-2933568104-1001\..\Run: [ManyCam] . (.ManyCam LLC - ManyCam Virtual Webcam.) -- C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe O4 - HKUS\S-1-5-21-1977527705-2680467548-2933568104-1001\..\Run: [EADM] . (.Electronic Arts - Origin.) -- C:\Program Files (x86)\Origin\Origin.exe ~ Application: Scanned in 00mn 00s ---\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{4AC30D81-7A2D-48E5-997D-C055258F3CBC}: DhcpNameServer = 62.201.129.202 62.201.129.203 O17 - HKLM\System\CCS\Services\Tcpip\..\{9A299317-A6C7-42D7-9403-01A1910CCA89}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{F82BD721-D30B-42AC-AA04-802C231F4D6D}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{4AC30D81-7A2D-48E5-997D-C055258F3CBC}: DhcpNameServer = 62.201.129.202 62.201.129.203 O17 - HKLM\System\CS1\Services\Tcpip\..\{9A299317-A6C7-42D7-9403-01A1910CCA89}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{F82BD721-D30B-42AC-AA04-802C231F4D6D}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ~ Domain: Scanned in 00mn 00s ---\ Protocole additionnel (O18) O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ~ Protocole Additionnel: Scanned in 00mn 00s ---\ Tâches planifiées en automatique (O39) [MD5.00000000000000000000000000000000] [APT] [GoforFilesUpdate] (...) -- C:\Program Files (x86)\GoforFiles\GFFUpdater.exe (.not file.) [0] =>P2P.GoforFiles [MD5.00000000000000000000000000000000] [APT] [{1912D43E-89E4-4AAC-811F-E4C465CDD2EB}] (...) -- F:\SC4_UNINST.exe (.not file.) [0] ~ Scheduled Task: 15 Legitimates Filtered in 00mn 02s ---\ Logiciels installés (O42) O42 - Logiciel: Ask Toolbar - (.APN, LLC.) [HKLM][64Bits] -- {42435041-332D-5637-00A7-A758B70C0300} =>Toolbar.Ask O42 - Logiciel: Restaurant Empire - (...) [HKLM][64Bits] -- {99A51EBF-47E0-11D7-B796-0050BFE4DB80} O42 - Logiciel: Torrent Opener - (.Torrent Opener.) [HKLM][64Bits] -- Torrent Opener O42 - Logiciel: Uninstall_PCMFranceDB_V1 - (.PCM France.) [HKLM][64Bits] -- VraisNoms Armada ~ Logic: 110 Legitimates Filtered in 00mn 00s ---\ HKCU & HKLM Software Keys [HKLM\Software\Wow6432Node\PCM France] ~ Key Software: 202 Legitimates Filtered in 00mn 00s ---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 14/09/2013 - 19:16:04 - [0,001] ----D C:\Program Files (x86)\FreeLiveTV O43 - CFD: 14/09/2013 - 19:04:47 - [0] ----D C:\Program Files (x86)\PokerStars.FR O43 - CFD: 27/06/2013 - 20:26:12 - [4,253] ----D C:\Program Files (x86)\Torrent Opener O43 - CFD: 26/02/2013 - 00:20:08 - [23,027] -SH-D C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} O43 - CFD: 27/06/2013 - 20:28:16 - [0,107] ----D C:\Users itinino\AppData\Roaming\Torrent Opener O43 - CFD: 14/09/2013 - 19:04:41 - [0] ----D C:\Users itinino\AppData\Local\PokerStars.FR O43 - CFD: 27/06/2013 - 20:26:12 - [0,002] ----D C:\Users itinino\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Torrent Opener O43 - CFD: 13/02/2013 - 15:37:29 - [0,001] ----D C:\Users itinino\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VraisNoms Armada ~ Program Folder: 181 Legitimates Filtered in 00mn 09s ---\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.76A6A5EB0CA7A68A4257448C1FDA3BFB] - 26/09/2013 - 12:44:11 ---A- . (...) -- C:\WINDOWS\DirectX.log [85620] ~ Files: 24 Legitimates Filtered in 00mn 12s ---\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:[MD5.8D47AC1C2EE869BCDC8F9237BC474465] - 01/09/2013 - 11:15:14 ---A- - C:\WINDOWS\Prefetch\ZY-DELICIOUS5.EXE-61C7A30E.pf O45 - LFCP:[MD5.96127C2641DC3464F34F028C09C0BC2A] - 01/09/2013 - 11:45:56 ---A- - C:\WINDOWS\Prefetch\TORRENT OPENER.EXE-E292BB31.pf O45 - LFCP:[MD5.7D6E312CE18BD27FCFFE3264BF2A30A6] - 01/09/2013 - 12:34:08 ---A- - C:\WINDOWS\Prefetch\POGODGC.EXE-D9B23894.pf O45 - LFCP:[MD5.D465B65D1191B425DBAA0F7FB8CFE0C1] - 05/09/2013 - 16:34:41 ---A- - C:\WINDOWS\Prefetch\DELICIOUS SUPER PACK DELUXE.E-0FA4D1F7.pf O45 - LFCP:[MD5.FB959C8E93B034AB52E6E01D2A3EEAAF] - 06/09/2013 - 03:36:24 ---A- - C:\WINDOWS\Prefetch\PCM-PROTECTION.EXE-A265D998.pf O45 - LFCP:[MD5.4326CA87E8376B674A5D348397730652] - 07/09/2013 - 12:01:00 ---A- - C:\WINDOWS\Prefetch\POKERLAUNCHER8667612658142889-B24DF8B0.pf O45 - LFCP:[MD5.95CCFFD72CD89576ACD49B9BD9A17095] - 09/09/2013 - 19:16:37 ---A- - C:\WINDOWS\Prefetch\POKERLAUNCHER8859121135780286-C0725FFC.pf O45 - LFCP:[MD5.D496B8C3A49F06E0FBB652065C7852E2] - 11/09/2013 - 15:33:07 ---A- - C:\WINDOWS\Prefetch\POKERLAUNCHER1784445135425455-DE4F4205.pf O45 - LFCP:[MD5.EE43B73E8C773D8688E245E17492EB34] - 11/09/2013 - 16:57:55 ---A- - C:\WINDOWS\Prefetch\POKERLAUNCHER8489614168478496-8DA9C1A5.pf O45 - LFCP:[MD5.8A77A231B667B46DA5CBA1CECB9E5F61] - 13/09/2013 - 15:17:26 ---A- - C:\WINDOWS\Prefetch\POKERLAUNCHER5796738817140345-A33340EB.pf O45 - LFCP:[MD5.346ADFFD36DB2ED805743479AE3E5C5A] - 13/09/2013 - 16:15:13 ---A- - C:\WINDOWS\Prefetch\POKERLAUNCHER4606783278022017-EC2980DE.pf O45 - LFCP:[MD5.DC377A279A01F2222DA7DE7659DA0AD1] - 14/09/2013 - 17:52:08 ---A- - C:\WINDOWS\Prefetch\ORIGINLAUNCHER215984484.EXE-D15EAB00.pf O45 - LFCP:[MD5.1CC386C7FFACE6EE3E35117B7F199146] - 14/09/2013 - 18:04:49 ---A- - C:\WINDOWS\Prefetch\_UNPS.EXE-FC2F8EDA.pf O45 - LFCP:[MD5.8ACA9AE70952B9F6DF41490FFC7422E6] - 14/09/2013 - 18:17:46 ---A- - C:\WINDOWS\Prefetch\_IU14D2N.TMP-5517F222.pf O45 - LFCP:[MD5.AB5C08888BFC5F36EE3C4BE7CA3EB0DA] - 14/09/2013 - 18:17:50 ---A- - C:\WINDOWS\Prefetch\PCM-PROTECTION.EXE-A89F6425.pf O45 - LFCP:[MD5.A4B9CE4B5D34475AEAAC4D42D2C1D787] - 14/09/2013 - 18:24:32 ---A- - C:\WINDOWS\Prefetch\BANDIZIP64.EXE-B694B70F.pf O45 - LFCP:[MD5.D900D78B24333691E00B66E88D055441] - 17/09/2013 - 18:03:47 ---A- - C:\WINDOWS\Prefetch\AUTORUN.EXE-D28490C2.pf O45 - LFCP:[MD5.3B82316F18C7F0B69FB5AB61A7423CB6] - 17/09/2013 - 18:03:57 ---A- - C:\WINDOWS\Prefetch\AUTORUN.EXE-87AAD447.pf O45 - LFCP:[MD5.8D117B69F80E7D3EB7F7B0A8035A08C4] - 18/09/2013 - 06:00:10 ---A- - C:\WINDOWS\Prefetch\AUTHHOST.EXE-44C90B62.pf O45 - LFCP:[MD5.41BAEA0D901686A23D4D05DE9892D310] - 20/09/2013 - 15:41:37 ---A- - C:\WINDOWS\Prefetch\BLACKLIST_GAME.EXE-14326C3D.pf O45 - LFCP:[MD5.72ABF314C1386E393C1C142B49E2148F] - 20/09/2013 - 15:41:37 ---A- - C:\WINDOWS\Prefetch\GU.EXE-31C8662F.pf O45 - LFCP:[MD5.5E7DF93552A98A54952CAA8C9051E724] - 21/09/2013 - 10:27:05 ---A- - C:\WINDOWS\Prefetch\RE.EXE-4867EBB0.pf O45 - LFCP:[MD5.9EE9FB98F7108538453671E69221B403] - 23/09/2013 - 12:26:25 ---A- - C:\WINDOWS\Prefetch\GHDELICIOUSEMILYSCHILDHOODMEM-243A5E91.pf O45 - LFCP:[MD5.EFAD653AB430D99CAA5AC345BF47B8A5] - 24/09/2013 - 13:38:59 ---A- - C:\WINDOWS\Prefetch\DELICIOUS5.EXE-47279AFA.pf O45 - LFCP:[MD5.6F48BBEF7E3757685B774E127A8CEAAF] - 24/09/2013 - 13:46:51 ---A- - C:\WINDOWS\Prefetch\DELICIOUS4.EXE-B302C039.pf O45 - LFCP:[MD5.4E30D9FA5DC15D727FACF7A46FB8F0F0] - 24/09/2013 - 13:47:34 ---A- - C:\WINDOWS\Prefetch\DELICIOUS3.EXE-793857C0.pf O45 - LFCP:[MD5.4DC7559ECABE337263BFC5C91E9AE669] - 24/09/2013 - 22:09:26 ---A- - C:\WINDOWS\Prefetch\VIZORHTMLDIALOG.EXE-A91B4E31.pf O45 - LFCP:[MD5.5858DA454CFA126064CDB5410434F90B] - 24/09/2013 - 22:09:55 ---A- - C:\WINDOWS\Prefetch\VIZORHTMLDIALOG.EXE-7F59381E.pf O45 - LFCP:[MD5.17A4E0656C2BE9F5D845F195706C8012] - 25/09/2013 - 10:23:59 ---A- - C:\WINDOWS\Prefetch\DELICIOUS2.EXE-5BAFC0A6.pf O45 - LFCP:[MD5.2AC4B223573BC5FFE662CF828CEA35EF] - 26/09/2013 - 11:54:50 ---A- - C:\WINDOWS\Prefetch\AICHARGERAP.EXE-60EB3008.pf O45 - LFCP:[MD5.C843369EA56A924B0B279E7CD807C015] - 26/09/2013 - 12:00:57 ---A- - C:\WINDOWS\Prefetch\7.2.241.0OEMBINGBARSETUP-PART-9441ED70.pf O45 - LFCP:[MD5.428F980EE26892023AB25B7C5625B898] - 26/09/2013 - 12:08:20 ---A- - C:\WINDOWS\Prefetch\UPDATETOOL.EXE-18BAEE18.pf O45 - LFCP:[MD5.DBFED13E488726A1BD035AEBD604385A] - 26/09/2013 - 12:09:56 ---A- - C:\WINDOWS\Prefetch\ORIGINCLIENTSERVICE.EXE-AE2A26C3.pf O45 - LFCP:[MD5.C4BB69EC3EC3D8401E6ABA84F9787546] - 26/09/2013 - 12:19:34 ---A- - C:\WINDOWS\Prefetch\dynreservedpri.db O45 - LFCP:[MD5.1C88FF06A7DE5E6E5AA86028A7DAE376] - 26/09/2013 - 12:43:23 ---A- - C:\WINDOWS\Prefetch\EAPROXYINSTALLER.EXE-DCB791D1.pf O45 - LFCP:[MD5.38A23F40712A715BEA4E19845608DB50] - 26/09/2013 - 12:43:24 ---A- - C:\WINDOWS\Prefetch\TOUCHUP.EXE-36E2EE08.pf O45 - LFCP:[MD5.7900C28EBC4E708FB9D0ABFE868EC4C5] - 26/09/2013 - 14:51:11 ---A- - C:\WINDOWS\Prefetch\LAUNCHTM.EXE-B444BC8E.pf O45 - LFCP:[MD5.7794DF60861FAB238968A678366B6D36] - 26/09/2013 - 15:00:08 ---A- - C:\WINDOWS\Prefetch\ACTIVATIONUI.EXE-D8E82D7F.pf ~ Prefetcher: 222 Legitimates Filtered in 00mn 01s ---\ Clé de registre Shell MountPoints2 (MPKS) (O51) O51 - MPSK:{d349517e-14e2-11e2-be6b-806e6f6e6963}\AutoRun\command. (.Pas de propriétaire - RESetup MFC Application.) -- F:\RESetup.exe ~ Keys: Scanned in 00mn 01s ---\ Enumération des clés de registre PoliciesSystem (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 ~ MWPS: 17 Legitimates Filtered in 00mn 00s ---\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 ~ MWPE Keys: 3 Legitimates Filtered in 00mn 00s ---\ Liste des pilotes du système (SDL) (O58) O58 - SDL:[MD5.D168AE57558A6174FB35E0F82B32F62B] - 21/02/2013 - 15:55:05 . (...) -- C:\WINDOWS\System32\Drivers\aswnet.sys.sum [175] O58 - SDL:[MD5.ADAA34740E9F6AFF94CC75D5CF8ED7E2] - 04/01/2008 - 06:34:42 ---A- . (...) -- C:\WINDOWS\SysWOW64\drivers\AsInsHelp32.sys [10216] ~ Drivers: 17 Legitimates Filtered in 00mn 00s ---\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC: 24/09/2013 - 20:16:42 ---A- . (...) -- C:\Users itinino\Downloads\AdwCleaner.exe [1042066] O61 - LFC: 24/09/2013 - 20:28:06 ---A- . (...) -- C:\Users itinino\AppData\Local\avgchrome\avgp [174789] O61 - LFC: 24/09/2013 - 20:44:52 ---A- . (...) -- C:\Users itinino\Documents\JRT.txt [2102] O61 - LFC: 24/09/2013 - 21:37:37 ---A- . (...) -- C:\Users itinino\Documents\ZHPDiag.txt [57455] =>.Nicolas Coolman O61 - LFC: 25/09/2013 - 17:38:38 ---A- . (...) -- C:\Users itinino\AppData\Roaming\ZHP\ZHPADSReport.txt [351] =>.Nicolas Coolman O61 - LFC: 25/09/2013 - 17:40:04 ---A- . (...) -- C:\Users itinino\AppData\Roaming\ZHP\ZHPDiag.txt [56118] =>.Nicolas Coolman O61 - LFC: 26/09/2013 - 12:00:38 ---A- . (...) -- C:\Users itinino\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists [261440] O61 - LFC: 26/09/2013 - 19:46:57 ---A- . (...) -- C:\Users itinino\AppData\Local\Google\Chrome\User Data\Local State [43605] O61 - LFC: 26/09/2013 - 19:48:21 ---A- . (...) -- C:\Users itinino\AppData\Roaming\ZHP\Log.txt [121760] =>.Nicolas Coolman ~ 7 Fichiers temporaires (Temporary files) ~ Files: 362 Legitimates Filtered in 01mn 02s ---\ Liste des outils de désinfection (LATC) (O63) O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman ~ ADS: Scanned in 00mn 00s ---\ Associations Shell Spawning (O67) O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.) ~ FASS Keys: 19 Legitimates Filtered in 00mn 00s ---\ Menu de démarrage Internet (SMI) (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\ Recherche particulière à la racine du système (SPRF) (O84) [MD5.57184DC9CC12566012452A47FB63B83D] [SPRF][20/05/2013] (.Setup © - Setup.) -- C:\Users itinino\AppData\Local\Temp\1799uninstall.exe [410624] [MD5.0FAB00C8FF3586CF4A53E9A85DFD8C51] [SPRF][26/01/2013] (...) -- C:\Users itinino\AppData\Local\Temp\7z920.exe [21306] [MD5.34928768A32DD3B644CBF740DE73183B] [SPRF][20/05/2013] (.PC Health Labs - PC Health Kit.) -- C:\Users itinino\AppData\Local\Temp\air6C61.exe [3629968] =>PUP.DealPly [MD5.B8138BCA6A83E4F0D21E881C924E47B3] [SPRF][04/03/2013] (.Ask Partner Network - Stub Installer.) -- C:\Users itinino\AppData\Local\Temp\APNSetup.exe [519304] [MD5.B3A840E05F27DC6AE773A5D622BFA994] [SPRF][11/09/2012] (.Ask.com - Offercast - APN Install Manager.) -- C:\Users itinino\AppData\Local\Temp\AskPIP_FF_.exe [783560] [MD5.B28C334C03CEE7C5E829C43AE75DAE5A] [SPRF][28/01/2013] (.Ask.com - AskIC Dynamic Link Library.) -- C:\Users itinino\AppData\Local\Temp\AskSLib.dll [248008] [MD5.CBBD7290D746F07916E4A572540ED246] [SPRF][11/04/2003] (.Pas de propriétaire - AutoRunGUI6 DLL.) -- C:\Users itinino\AppData\Local\Temp\AutoRunGUI.dll [3534848] [MD5.6E1799926209C193FDB2E05A271C5B49] [SPRF][01/09/2013] (...) -- C:\Users itinino\AppData\Local\Temp\BackupSetup.exe [10340624] [MD5.239CFEF5FC6DE1BDA8396ACC19AA30C7] [SPRF][30/08/2013] (...) -- C:\Users itinino\AppData\Local\Temp\bandizip-setup-gl.exe [4249304] [MD5.6A18FCCAA07A3459B950389F5A5CEF36] [SPRF][24/09/2013] (...) -- C:\Users itinino\AppData\Local\Temp\chart_data.dat [20942] [MD5.B8D0E42594586243344C6F3341EF38F6] [SPRF][25/02/2013] (.Visicom Media Inc. - File Bulldog Toolbar Installer.) -- C:\Users itinino\AppData\Local\Temp\filebulldogTb_1.0.0.8.exe [2486648] =>Adware.SocialSkinz [MD5.AC009B96FAAD471EB2B1D9507010DF46] [SPRF][26/01/2013] (...) -- C:\Users itinino\AppData\Local\Temp\incredibar_installer.exe [21303] =>Adware.IncrediBar [MD5.9A4C7C7392721D18D80DA2A2EBF8B48E] [SPRF][16/12/2012] (.Yuna Software - Uninstaller - Messenger Plus! for Skype.) -- C:\Users itinino\AppData\Local\Temp\MsgPlusUninstall.exe [817152] [MD5.AC2F3647FD669EF50163078964186966] [SPRF][26/01/2013] (...) -- C:\Users itinino\AppData\Local\Temp\MyBabylonTB_google_20120807.exe [21312] =>Toolbar.Babylon [MD5.0E9EE08F0AD7D0473561EE4CA59B37AD] [SPRF][02/11/2012] (.Ask.com - Offercast - APN Install Manager.) -- C:\Users itinino\AppData\Local\Temp\PIP2691_MYC_.exe [877256] [MD5.02F0C000E96731A69B64A188067C4CC0] [SPRF][26/01/2013] (...) -- C:\Users itinino\AppData\Local\Temp\pricepeep_130001_0101.exe [21300] =>Adware.PricePeep [MD5.3BF79E6868B44D3ADB2796BA99521891] [SPRF][07/09/2013] (...) -- C:\Users itinino\AppData\Local\Temp\Quarantine.exe [344583] [MD5.F631DE75930099A17770F9F129403342] [SPRF][21/09/2013] (...) -- C:\Users itinino\AppData\Local\Temp\SCC.dll [134083] [MD5.C6D792E4583FC46DB0953FBF6E46348A] [SPRF][23/01/2013] (.SweetIM Technologies Lt - This installer.) -- C:\Users itinino\AppData\Local\Temp\SIMEEI2Installer.exe [2962432] =>PUP.SweetIM [MD5.7704B843006444B69486FD27D4660845] [SPRF][23/01/2013] (.SweetIM Technologies Lt - This installer.) -- C:\Users itinino\AppData\Local\Temp\SIMEEIInstaller.exe [3380216] =>PUP.SweetIM [MD5.F467645711172ECA7FCE253824A09179] [SPRF][29/05/2013] (...) -- C:\Users itinino\AppData\Local\Temp\sonarinst.exe [1786688] [MD5.5405413FFF79B8D9C747AA900F60F082] [SPRF][20/05/2013] (...) -- C:\Users itinino\AppData\Local\Temp\Sqlite3.dll [599419] [MD5.232AD40DF4D2A129B88A2411907DAA4A] [SPRF][01/09/2013] (...) -- C:\Users itinino\AppData\Local\Temp oolbar1108172390.exe [175208] [MD5.FA37DA63F0E2B5531C6DCD8F05EA0376] [SPRF][12/09/2012] (...) -- C:\Users itinino\AppData\Local\Temp\TouchURL.exe [48640] [MD5.3C74C26999F2060BC6302448F173A342] [SPRF][28/08/2013] (.Babylon Ltd. - Uninstaller Application.) -- C:\Users itinino\AppData\Local\Temp\uninst1.exe [340464] =>Toolbar.Babylon [MD5.B82A71160DAF1E4D7A1D6EA4830D3EC9] [SPRF][01/09/2013] (.http://goforfiles.com/ - GoforFiles Application.) -- C:\Users itinino\AppData\Local\Temp\uninstall1108608562.exe [907856] =>P2P.GoforFiles [MD5.C3A3A4CDCF3D6A196201703E2288D8FC] [SPRF][30/01/2013] (.Yuna Software - Setup of Messenger Plus! 6.) -- C:\Users itinino\AppData\Local\Temp\Update_6e7b.exe [1161584] [MD5.8CA2E2944BAF97A23A4183B67E4E80E4] [SPRF][04/03/2013] (...) -- C:\Users itinino\AppData\Local\Temp\_unps.exe [348160] [MD5.FEE1D58C6AD73F25EB0DAD4F690560AD] [SPRF][14/04/2013] (.Facebook Inc. - Setup.) -- C:\Users itinino\Desktop\FacebookVideoCallSetup_v1.2.205.0.exe [501248] [MD5.DB5DE86A81CF3A802D51A455F1878B99] [SPRF][09/03/2013] (.FLVMPlayer - FLV Media Player Setup.) -- C:\Users itinino\Desktop\FLVMPlayer2.exe [4958377] ~ Files: 48 Legitimates Filtered in 00mn 04s ---\ Liste des exceptions du parefeu (FirewallRules) (O87) O87 - FAEL: "{0EA52F56-E24C-46D5-BB7B-985AD498E1A4}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) =>PUP.SweetIM O87 - FAEL: "{1656FF78-A313-4475-AF49-02919FA466BF}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) =>PUP.SweetIM O87 - FAEL: "TCP Query User{2B6F7004-C35A-4884-AE1F-D7B5B37C0DC3}C:\program files (x86) orrent opener orrent opener.exe" | In - Public - P6 - TRUE | .(.Denco Limited.) -- C:\program files (x86) orrent opener orrent opener.exe O87 - FAEL: "UDP Query User{C7F90572-8A0B-4693-B005-DBF81EE8D0BE}C:\program files (x86) orrent opener orrent opener.exe" | In - Public - P17 - TRUE | .(.Denco Limited.) -- C:\program files (x86) orrent opener orrent opener.exe O87 - FAEL: "{4F38D31D-D973-492B-85D2-4C29298F4926}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\GoforFiles\goforfilesdl.exe (.not file.) =>P2P.GoforFiles O87 - FAEL: "{399E2502-2DE3-442C-B7D0-23BDB9337ADE}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\GoforFiles\goforfilesdl.exe (.not file.) =>P2P.GoforFiles O87 - FAEL: "{8E28A393-0BDE-4DF3-83B5-1B701ECA015F}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\GoforFiles\GoforFiles.exe (.not file.) =>P2P.GoforFiles O87 - FAEL: "{17726360-220C-4D6E-97D1-6E384B7BD827}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\GoforFiles\GoforFiles.exe (.not file.) =>P2P.GoforFiles ~ Firewall: 258 Legitimates Filtered in 00mn 00s ---\ Enumère les codes produits des logiciels (PUC) (O90) O90 - PUC: "14053424D2337365007A7A857BC03000" . (.Ask Toolbar.) -- C:\Windows\Installer\{42435041-332D-5637-00A7-A758B70C0300}\ToolbarIcon.exe =>Toolbar.Ask O90 - PUC: "3E9A223DB85706D47A4C568CF83D870D" . (.Bing Bar.) -- C:\Windows\Installer\{D322A9E3-758B-4D60-A7C4-65C88FD378D0}\icon_installer_ico =>Toolbar.Bing O90 - PUC: "9EE58E3C298524145B73CBBED3CAC4D3" . (.Internet Explorer Toolbar 4.6 by SweetPacks.) -- C:\Windows\Installer\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}\ARPPRODUCTICON.exe =>PUP.SweetIM ~ Update Products: 121 Legitimates Filtered in 00mn 00s ---\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS) [MD5.AF4D3E3C14A82065B15E1DE0DE29F79C] [WIS][16/08/2013] (.APN, LLC - Ask Toolbar.) -- C:\Windows\Installer\2ea368f.msi [461312] =>Toolbar.Ask ~ WIS: 117 Legitimates Filtered in 00mn 06s ---\ Etat général des services not Microsoft (EGS) (SR=Running, SS=Stopped) SR - | Auto 03/09/2013 65640 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe SS - | Demand 10/09/2013 257416 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe SR - | Auto 21/12/2012 57008 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - | Auto 01/06/2012 920736 | (asComSvc) . (...) - C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe SR - | Auto 01/06/2012 951936 | (asHmComSvc) . (.ASUSTeK Computer Inc..) - C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe SR - | Auto 17/02/2012 149120 | (AsSysCtrlService) . (.ASUSTeK Computer Inc..) - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe SR - | Auto 30/08/2013 46808 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe SR - | Auto 30/08/2013 137960 | (avast! Firewall) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\afwServ.exe SS - | Auto 23/07/2013 193696 | (BBSvc) . (.Microsoft Corporation..) - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.exe SS - | Demand 23/07/2013 240288 | (BBUpdate) . (.Microsoft Corporation..) - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SR - | Auto 24/05/2011 1840128 | (Fabs) . (.MAGIX AG.) - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe SS - | Demand 26/04/2011 2702848 | (FirebirdServerMAGIXInstance) . (.MAGIX®.) - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe SS - | Auto 23/01/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 23/01/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SR - | Auto 20/04/2012 635104 | (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe SR - | Demand 31/05/2013 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 25/06/2012 166720 | (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe SR - | Auto 17/07/2012 277824 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe SR - | Auto 04/04/2013 418376 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe SR - | Auto 04/04/2013 701512 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe SR - | Auto 14/07/2012 769432 | (NAUpdate) . (.Nero AG.) - C:\Program Files (x86)\Nero\Update\NASvc.exe SR - | Auto 28/08/2012 891240 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32 vvsvc.exe SR - | Auto 10/07/1658 0 | (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe SS - | Auto 01/03/2013 161384 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe SS - | Demand 28/08/2013 563624 | (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe SR - | Auto 17/07/2012 365376 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe SR - | Auto 06/07/2012 27792 | (VIAKaraokeService) . (.VIA Technologies, Inc..) - C:\WINDOWS\System32\viakaraokesrv.exe SS - | Demand 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation SS - | Auto 20/09/2012 29696 | C:\WINDOWS\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\WINDOWS\System32\svchost.exe ~ Services: Scanned in 00mn 07s ---\ Recherche d'infection sur le Master Boot Record (MBR)(O80) Run by titinino at 26/09/2013 20:50:14 ~ OS 64 not supported by MBR tool ~ MBR: 0 Legitimates Filtered in 00mn 00s ---\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by titinino at 26/09/2013 20:50:16 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ MBR: Scanned in 00mn 02s ---\ Scan Additionnel (O88) Database Version : 12930 - (23/09/2013) Clés trouvées (Keys found) : 96 Valeurs trouvées (Values found) : 0 Dossiers trouvés (Folders found) : 1 Fichiers trouvés (Files found) : 16 [HKLM\Software\Google\Chrome\Extensions\aaaaiopnfecjheficjcjfgjecfgdhbmc] =>Toolbar.Ask^ [HKLM\Software\Google\Chrome\Extensions\algmakeomkafjglfhpomolfhjppoojff] =>Adware.Pricora^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{42435041-332D-5637-00A7-A758B70C0300}] =>Toolbar.Ask^ [HKLM\Software\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}] =>PUP.RewardsArcade [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635] =>PUP.SweetIM [HKLM\Software\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}] =>PUP.RewardsArcade [HKLM\Software\Classes\Installer\Features\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM [HKLM\Software\Classes\Installer\Products\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Installer\Features\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Installer\Products\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM [HKLM\Software\Classes\Installer\Features\9EE58E3C298524145B73CBBED3CAC4D3] =>PUP.SweetIM [HKLM\Software\Classes\Installer\Products\9EE58E3C298524145B73CBBED3CAC4D3] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9EE58E3C298524145B73CBBED3CAC4D3] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Installer\Features\9EE58E3C298524145B73CBBED3CAC4D3] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Installer\Products\9EE58E3C298524145B73CBBED3CAC4D3] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>Toolbar.Tarma [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>Toolbar.Tarma [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420] =>PUP.SweetIM [HKCU\Software\iWinArcade] =>Adware.iWinArcade [HKLM\Software\Wow6432Node\iWinArcade] =>Adware.iWinArcade [HKLM\Software\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}] =>PUP.SweetIM^ [HKLM\Software\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}] =>PUP.SweetIM^ [HKLM\Software\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12BF94BD06C95F343A77631402B9556A] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2124D8A8CF720FD44866190AF560228E] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27A325ACED8CA4743A30127638591ADB] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\350D17402BD84234EAF7D32F08172D7C] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EE8C5F419057E1478A654868CEE60B5] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4735D908D66E1BA46B6C2D7185A12B2B] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76D8378E2DDAED3428720A631F6E3BF0] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A001B259DB7D694E818BE29B973992C] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE2EC163C6A68A48921573E0E7E199D] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C06C6662FA5B04646829E4A460857770] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEEB3E14ABE8270419B0FD762E18F7C6] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1B5E9A3BDB51349BF96E842C062D98] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FECBC2BC14DA6CD459BD59A041709836] =>PUP.SweetIM^ C:\Users itinino\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff =>Adware.Pricora C:\Users itinino\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaiopnfecjheficjcjfgjecfgdhbmc =>Toolbar.Ask^ C:\Users itinino\AppData\Local\Temp\air6C61.exe =>PUP.DealPly^ C:\Users itinino\AppData\Local\Temp\filebulldogTb_1.0.0.8.exe =>Adware.SocialSkinz^ C:\Users itinino\AppData\Local\Temp\incredibar_installer.exe =>Adware.IncrediBar^ C:\Users itinino\AppData\Local\Temp\MyBabylonTB_google_20120807.exe =>Toolbar.Babylon^ C:\Users itinino\AppData\Local\Temp\pricepeep_130001_0101.exe =>Adware.PricePeep^ C:\Users itinino\AppData\Local\Temp\SIMEEI2Installer.exe =>PUP.SweetIM^ C:\Users itinino\AppData\Local\Temp\SIMEEIInstaller.exe =>PUP.SweetIM^ C:\Users itinino\AppData\Local\Temp\uninst1.exe =>Toolbar.Babylon^ C:\Windows\Installer\{42435041-332D-5637-00A7-A758B70C0300}\ToolbarIcon.exe =>Toolbar.Ask^ C:\Windows\Installer\{D322A9E3-758B-4D60-A7C4-65C88FD378D0}\icon_installer_ico =>Toolbar.Bing^ C:\Windows\Installer\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}\ARPPRODUCTICON.exe =>PUP.SweetIM^ C:\Windows\Installer\2ea368f.msi =>Toolbar.Ask^ ~ Additionnel Scan: 299142 Items scanned in 00mn 12s ---\ Récapitulatif des détections trouvées sur votre station ~ http://nicolascoolman.webs.com/apps/blog/show/28927746-toolbar-ask =>Toolbar.Ask ~ http://nicolascoolman.webs.com/apps/blog/show/29294184-adware-pricora =>Adware.Pricora ~ http://nicolascoolman.webs.com/apps/blog/show/28060597-pup-dealply =>PUP.DealPly ~ http://nicolascoolman.webs.com/apps/blog/show/27480243-adware-socialskinz =>Adware.SocialSkinz ~ http://nicolascoolman.webs.com/apps/blog/show/26898222-adware-incredibar =>Adware.Incredibar ~ http://nicolascoolman.webs.com/apps/blog/show/26627369-toolbar-babylon =>Toolbar.Babylon ~ http://nicolascoolman.webs.com/apps/blog/show/29216159-pup-sweetim =>PUP.SweetIM ~ http://nicolascoolman.webs.com/apps/blog/show/31536787-toolbar-bing =>Toolbar.Bing ~ http://nicolascoolman.webs.com/apps/blog/show/26684723-adware-imbooster =>Adware.IMBooster ~ http://nicolascoolman.webs.com/apps/blog/show/28000037-pup-rewardsarcade =>PUP.RewardsArcade ~ http://nicolascoolman.webs.com/apps/blog/show/29637859-toolbar-tarma =>Toolbar.Tarma ~ http://nicolascoolman.webs.com/apps/blog/show/28766471-adware-iwinarcade =>Adware.iWinArcade ~ MSI: 12 link(s) detected in 00mn 12s ~ 1623 Legitimates filtered by white list End of the scan (639 lines in 03mn 01s)(0)

lilidurhone · Answer

Tu connais =>  Uninstall_PCMFranceDB_V1

Peux tu désinstaller ask toolbar?

Et enlever l'attribut résolu

titinino50 · Answer

j'ai desinstaller les 2 cité au dessus.

lilidurhone · Answer

Super refais moi un zhpdiag

titinino50 · Answer

~ Rapport de ZHPDiag v2013.9.23.44 - Nicolas Coolman (23/09/2013) ~ Lancé par titinino (27/09/2013 21:03:42) ~ Adresse du Site Web https://nicolascoolman.webs.com/ ~ Traduit par Nicolas Coolman ~ Etat de la version : ~ Liste blanche : Activée par le programme ~ Elévation des Privilèges : OK ~ User Account Control (UAC): Activate by user ---\ Navigateurs Internet MSIE: Internet Explorer v10.0.9200.16688 GCIE: Google Chrome v29.0.1547.76 (Defaut) ---\ Informations sur les produits Windows ~ Langage: Français Windows 8 Home Premium Edition, 64-bit (Build 9200) Windows Server License Manager Script : OK ~ ion : Windows(R) Operating System, OEM_DM channel Windows ID Activation : OK ~ Windows Partial Key : 27GBG Windows License : OK ~ Windows Remaining Initializations Number : 999 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\ Logiciels de protection du système avast! Internet Security v8.0.1497.0 Malwarebytes Anti-Malware version 1.75.0.1300 Windows Defender W8 ---\ Logiciels d'optimisation du système ---\ Logiciels de partage PeerToPeer ---\ Surveillance de Logiciels Adobe Flash Player 11 Plugin Adobe Reader X Java 7 Update 25 ---\ Informations sur le système ~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 6098 MB (70% free) System Restore: Activé (Enable) System drive C: has 3 GB (2%) free of 150 GB ---\ Mode de connexion au système ~ Computer Name: NINO ~ User Name: titinino ~ All Users Names: titinino, Administrateur, ~ Unselected Option: None Logged in as Administrator ---\ Variables d'environnement ~ System Unit : C:\ ~ %AppData% : C:\Users itinino\AppData\Roaming\ ~ %Desktop% : C:\Users itinino\Desktop\ ~ %Favorites% : C:\Users itinino\Favorites\ ~ %LocalAppData% : C:\Users itinino\AppData\Local\ ~ %StartMenu% : C:\Users itinino\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\WINDOWS\ ~ %System% : C:\WINDOWS\System32\ ---\ Enumération des unités disques C: Hard drive, Flash drive, Thumb drive (Free 3 Go of 150 Go) D: Hard drive, Flash drive, Thumb drive (Free 764 Go of 765 Go) E: Floppy drive, Flash card reader, USB Key (Not Inserted) F: CD-ROM drive (Free 0 Go of 0 Go) ---\ Etat du Centre de Sécurité Windows [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified ~ Security Center: 29 Legitimates Filtered in 00mn 00s ---\ Recherche particulière de fichiers génériques [MD5.0E8E6463F81C80AFBED533E0F1F8895D] - (.Microsoft Corporation - Explorateur Windows.) (.01/06/2013 - 12:34:21.) -- C:\WINDOWS\Explorer.exe [2391280] [MD5.FE9AB232B56A12224E8A3F3F9878C9A3] - (.Microsoft Corporation - Application de démarrage de Windows.) (.26/07/2012 - 04:08:50.) -- C:\WINDOWS\System32\Wininit.exe [132608] [MD5.6DBE239FF1C9650A794C974B8C7913D7] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.21/08/2013 - 05:12:06.) -- C:\WINDOWS\System32\wininet.dll [2241024] [MD5.BCF2036A0DD579E47C008C133550283E] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.11/10/2012 - 06:46:58.) -- C:\WINDOWS\System32\Winlogon.exe [517120] [MD5.9448F5740A037EC0C18F0E9177232DD0] - (.Microsoft Corporation - Bibliothèque de licences.) (.26/07/2012 - 04:07:20.) -- C:\WINDOWS\System32\sppcomapi.dll [273408] [MD5.36D6A3201721558A8AFBCC09C2DA4C2C] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.06/11/2012 - 04:53:44.) -- C:\WINDOWS\system32\Drivers\AFD.sys [560640] [MD5.A721FF570C2387E383BDDEA9632863C9] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.26/07/2012 - 06:00:48.) -- C:\WINDOWS\system32\Drivers\atapi.sys [25840] [MD5.990B1BABE6E81FB18E65A87EBEFB1772] - (.Microsoft Corporation - CD-ROM File System Driver.) (.26/07/2012 - 03:30:10.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [108544] [MD5.339BFF85D788268752DA8C9644B188EE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.26/07/2012 - 03:26:36.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [174080] [MD5.09D9EB9E7898F8E6561473A20CC808B9] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.26/07/2012 - 03:26:53.) -- C:\WINDOWS\system32\Drivers\DfsC.sys [118784] [MD5.7D87B5B6C7188D553E11B59DC7F0B111] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/09/2012 - 07:08:44.) -- C:\WINDOWS\system32\Drivers\HDAudBus.sys [71168] [MD5.C9E9CBF73AFFBFE3E801EFB516787BA3] - (.Microsoft Corporation - Pilote de port i8042.) (.26/07/2012 - 03:28:51.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [112640] [MD5.3969B9C218DD3FAA9F4ED2FFC3651C02] - (.Microsoft Corporation - IP Network Address Translator.) (.26/07/2012 - 03:23:01.) -- C:\WINDOWS\system32\Drivers\IpNat.sys [145920] [MD5.93179D48066918323628CB016D8C94DC] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.05/02/2013 - 23:29:09.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [370688] [MD5.7CEC25C682D319D484630B3952C31A11] - (.Microsoft Corporation - MBT Transport driver.) (.26/07/2012 - 03:24:28.) -- C:\WINDOWS\system32\Drivers etBT.sys [331776] [MD5.76929F4A69E425911A63B407E26C2589] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.02/02/2013 - 11:54:54.) -- C:\WINDOWS\system32\Drivers tfs.sys [1933544] [MD5.4563DAF8C6A740AD7F501E219BD10766] - (.Microsoft Corporation - Pilote de port parallèle.) (.26/07/2012 - 03:29:53.) -- C:\WINDOWS\system32\Drivers\Parport.sys [105984] [MD5.A14D625C5AEE5FFE0F47D1A1D419FAAE] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.26/07/2012 - 03:23:17.) -- C:\WINDOWS\system32\Drivers\Rasl2tp.sys [124928] [MD5.B2A3AD74FF2E2FFA73AF2567108231B3] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) (.26/07/2012 - 03:25:18.) -- C:\WINDOWS\system32\Drivers dpdr.sys [179712] [MD5.73DC722CE5DF26D7638CE2446F2655C7] - (.Microsoft Corporation - TDI Translation Driver.) (.26/07/2012 - 06:26:47.) -- C:\WINDOWS\system32\Drivers dx.sys [117248] [MD5.78A5BBA3819FFFC62FFEC3E2220D102D] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.01/06/2013 - 12:26:33.) -- C:\WINDOWS\system32\Drivers\volsnap.sys [327936] ~ Generic Processes: Scanned in 00mn 00s ---\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 1/12 ~ Mes musiques (My Musics) : 0/54 ~ Mes Videos (My Videos) : 1/35 ~ Mes Favoris (My Favorites) : 1/5 ~ Mes Documents (My Documents) : 1/544 ~ Mon Bureau (My Desktop) : 1/28814 ~ Menu demarrer (Programs) : 1/31 ~ Hidden Files: Scanned in 00mn 01s ---\ Processus lancés [MD5.D1D5DAB39DCB4BE0359943738D87409B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [532040] [PID.3368] [MD5.8C9231025FAF86B78906B6C847531FFB] - (.ASUSTeK Computer Inc. - ASUS Routine Controller.) -- C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2935424] [PID.5048] [MD5.2D75851551D18878FADC21E166DEA3FA] - (.ASUSTek Computer Inc. - AiChargerAP MFC Application.) -- C:\Program Files (x86)\ASUS\ASUS Ai Charger\AiChargerAP.exe [547984] [PID.1032] [MD5.7D7D090E09D28AE68309D625C42B1C9B] - (.ASUSTeK Computer Inc. - ALU MFC Application.) -- C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe [195200] [PID.3992] [MD5.B7995C675014EEBE77A0BEB7AFCCFC08] - (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432] [PID.4812] [MD5.CBC7D8E5416AD30CF16DC2FD4A6AA399] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968] [PID.4620] [MD5.A9F9D081518AC03A51C1195986076F42] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392] [PID.2236] [MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816] [PID.4944] [MD5.E7148BB584830E51AFD414CE9AEAE74C] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [829392] [PID.568] [MD5.D63791AEA2D98C5B3A2881A230613B8E] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8006144] [PID.2852] ~ Processes Running: Scanned in 00mn 00s ---\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users itinino\AppData\Local\Google\Chrome\User Data\Default\Preferences G2 - GCE: Preference [User Data\Default] [aaaaiopnfecjheficjcjfgjecfgdhbmc] Ask Toolbar v.21.51087, (Désactivé) =>Toolbar.Ask G2 - GCE: Preference [User Data\Default] [algmakeomkafjglfhpomolfhjppoojff] Pricora v.1.24.99, (Activé) =>Adware.Pricora G2 - GCE: Preference [User Data\Default] [amdcolnifoheinafllhaggmoojhmgldi] FLV2MP3Converter on Roozz v.0.1.0.2 (Activé) G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google\u00C2 Drive v.6.3 (Activé) G2 - GCE: Preference [User Data\Default] [dmdhkalcecemojegheiohcghkamlipof] Facebook Unseen v.0.0.0.1 (Activé) G2 - GCE: Preference [User Data\Default] [ifjamchknccokmaecnbknhbfhaicfafd] FileConverter 1.5 v.10.14.250.13 (Désactivé) ~ Google Browser: 20 Legitimates Filtered in 00mn 05s ---\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe F2 - REG:system.ini: VMApplet=C:\WINDOWS\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\ Hosts file redirection (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Hosts File: Scanned in 00mn 00s ~ Nombre de lignes (Lines number): 21 ---\ Internet Explorer Toolbars (O3) O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{4D594333-0076-A76A-76A7-7A786E7484D7} Clé orpheline ~ Toolbar: Scanned in 00mn 00s ---\ Autres liens utilisateurs (O4) O4 - GS\Desktop [Public]: AI Suite II.lnk . (.ASUSTeK Computer Inc. - AI Suite II.) -- C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe O4 - GS\Desktop [Public]: ASUS MX Suite.lnk . (.MAGIX AG - MAGIX Media Suite.) -- C:\Program Files (x86)\ASUS\ASUS MX Suite\ASUS MX Suite\MediaSuite.exe O4 - GS\Desktop [Public]: ASUSDVD.lnk . (.CyberLink Corp. - ASUSDVD.) -- C:\Program Files (x86)\CyberLink\PowerDVD10\PDVDLaunchPolicy.exe O4 - GS\Desktop [Public]: Battlefield 3.lnk . (.EA Digital Illusions CE AB - Battlefield 3(TM).) -- C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe O4 - GS\Desktop [Public]: eManual.lnk . (...) -- C:\Program Files (x86)\ASUS\eManual\eManual.exe O4 - GS\Desktop [Public]: HD VDeck.lnk . (.VIA - VIA HD Audio CPL.) -- C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe O4 - GS\Desktop [Public]: Restaurant Empire.lnk . (...) -- C:\Program Files (x86)\Enlight\Restaurant Empire\Restaurant Empire.exe O4 - GS\Desktop [Public]: SimCity 4.lnk . (.Maxis - SimCity 4.) -- C:\Program Files (x86)\Maxis\SimCity 4\Apps\SimCity 4.exe O4 - GS\Desktop [Public]: Tom Clancy's Splinter Cell® Blacklist(TM).lnk . (.Ubisoft - Autopatch system.) -- C:\Program Files (x86)\Ubisoft\Tom Clancy's Splinter Cell® Blacklist(TM)\src\SYSTEM\gu.exe O4 - GS\Desktop [Public]: Why ASUS PC.lnk . (.Adobe Systems, Inc. - Adobe Flash Player 9.0 r115.) -- C:\Program Files (x86)\ASUS\Why ASUS PC\Desktop.exe O4 - GS\Program [Public]: Desktop.lnk - Clé orpheline O4 - GS\Program [Public]: HD VDeck.lnk . (.VIA - VIA HD Audio CPL.) -- C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe O4 - GS\QuickLaunch [titinino]: VSO Image Resizer 4.lnk . (.VSO Software SARL - ImageResizer.) -- C:\Program Files (x86)\VSO\Image Resizer 4\Resize.exe O4 - GS\Desktop [titinino]: Bandizip.lnk . (.Bandisoft.com - Bandizip.) -- C:\Users itinino\AppData\Local\Bandizip\Bandizip64.exe O4 - GS\Desktop [titinino]: Enregistrement de produit ASUS.lnk - Clé orpheline O4 - GS\Desktop [titinino]: Torrent Opener.lnk . (.Denco Limited - Torrent Opener Module.) -- C:\Program Files (x86)\Torrent Opener\Torrent Opener.exe O4 - GS\Desktop [titinino]: VSO Image Resizer 4.lnk . (.VSO Software SARL - ImageResizer.) -- C:\Program Files (x86)\VSO\Image Resizer 4\Resize.exe ~ Global Startup: 66 Legitimates Filtered in 00mn 00s ---\ Applications lancées au démarrage du sytème (O4) O4 - HKCU\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper (buildbot_winslav.) -- C:\Program Files (x86)\Steam\Steam.exe O4 - HKCU\..\Run: [ManyCam] . (.ManyCam LLC - ManyCam Virtual Webcam.) -- C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe O4 - HKCU\..\Run: [EADM] . (.Electronic Arts - Origin.) -- C:\Program Files (x86)\Origin\Origin.exe O4 - HKLM\..\Wow6432Node\Run: [HDAudDeck] . (.VIA - VIA HD Audio CPL.) -- C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated O4 - HKLM\..\Wow6432Node\Run: [ASUS Ai Charger] . (.ASUSTek Computer Inc. - AiChargerAP MFC Application.) -- C:\Program Files (x86)\ASUS\ASUS Ai Charger\AiChargerAP.exe O4 - HKLM\..\Wow6432Node\Run: [ASUS Easy Update] . (.ASUSTeK Computer Inc. - ALU MFC Application.) -- C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe O4 - HKLM\..\Wow6432Node\Run: [ASUSPRP] . (.ASUSTek Computer Inc. - ASUS Product Register Program.) -- C:\Program Files (x86)\ASUS\APRP\APRP.exe O4 - HKLM\..\Wow6432Node\Run: [RemoteControl10] . (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation O4 - HKUS\S-1-5-21-1977527705-2680467548-2933568104-1001\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper (buildbot_winslav.) -- C:\Program Files (x86)\Steam\Steam.exe O4 - HKUS\S-1-5-21-1977527705-2680467548-2933568104-1001\..\Run: [ManyCam] . (.ManyCam LLC - ManyCam Virtual Webcam.) -- C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe O4 - HKUS\S-1-5-21-1977527705-2680467548-2933568104-1001\..\Run: [EADM] . (.Electronic Arts - Origin.) -- C:\Program Files (x86)\Origin\Origin.exe ~ Application: Scanned in 00mn 00s ---\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{4AC30D81-7A2D-48E5-997D-C055258F3CBC}: DhcpNameServer = 62.201.129.202 62.201.129.203 O17 - HKLM\System\CCS\Services\Tcpip\..\{9A299317-A6C7-42D7-9403-01A1910CCA89}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{F82BD721-D30B-42AC-AA04-802C231F4D6D}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{4AC30D81-7A2D-48E5-997D-C055258F3CBC}: DhcpNameServer = 62.201.129.202 62.201.129.203 O17 - HKLM\System\CS1\Services\Tcpip\..\{9A299317-A6C7-42D7-9403-01A1910CCA89}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{F82BD721-D30B-42AC-AA04-802C231F4D6D}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ~ Domain: Scanned in 00mn 00s ---\ Protocole additionnel (O18) O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ~ Protocole Additionnel: Scanned in 00mn 00s ---\ Tâches planifiées en automatique (O39) [MD5.00000000000000000000000000000000] [APT] [GoforFilesUpdate] (...) -- C:\Program Files (x86)\GoforFiles\GFFUpdater.exe (.not file.) [0] =>P2P.GoforFiles [MD5.00000000000000000000000000000000] [APT] [{1912D43E-89E4-4AAC-811F-E4C465CDD2EB}] (...) -- F:\SC4_UNINST.exe (.not file.) [0] ~ Scheduled Task: 15 Legitimates Filtered in 00mn 01s ---\ Logiciels installés (O42) O42 - Logiciel: Restaurant Empire - (...) [HKLM][64Bits] -- {99A51EBF-47E0-11D7-B796-0050BFE4DB80} O42 - Logiciel: Torrent Opener - (.Torrent Opener.) [HKLM][64Bits] -- Torrent Opener ~ Logic: 106 Legitimates Filtered in 00mn 00s ---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 14/09/2013 - 19:16:04 - [0,001] ----D C:\Program Files (x86)\FreeLiveTV O43 - CFD: 14/09/2013 - 19:04:47 - [0] ----D C:\Program Files (x86)\PokerStars.FR O43 - CFD: 27/06/2013 - 20:26:12 - [4,253] ----D C:\Program Files (x86)\Torrent Opener O43 - CFD: 26/02/2013 - 00:20:08 - [23,027] -SH-D C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} O43 - CFD: 27/06/2013 - 20:28:16 - [0,107] ----D C:\Users itinino\AppData\Roaming\Torrent Opener O43 - CFD: 14/09/2013 - 19:04:41 - [0] ----D C:\Users itinino\AppData\Local\PokerStars.FR O43 - CFD: 27/06/2013 - 20:26:12 - [0,002] ----D C:\Users itinino\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Torrent Opener ~ Program Folder: 180 Legitimates Filtered in 00mn 01s ---\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.76A6A5EB0CA7A68A4257448C1FDA3BFB] - 26/09/2013 - 12:44:11 ---A- . (...) -- C:\WINDOWS\DirectX.log [85620] ~ Files: 24 Legitimates Filtered in 00mn 01s ---\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:[MD5.8D47AC1C2EE869BCDC8F9237BC474465] - 01/09/2013 - 11:15:14 ---A- - C:\WINDOWS\Prefetch\ZY-DELICIOUS5.EXE-61C7A30E.pf O45 - LFCP:[MD5.96127C2641DC3464F34F028C09C0BC2A] - 01/09/2013 - 11:45:56 ---A- - C:\WINDOWS\Prefetch\TORRENT OPENER.EXE-E292BB31.pf O45 - LFCP:[MD5.7D6E312CE18BD27FCFFE3264BF2A30A6] - 01/09/2013 - 12:34:08 ---A- - C:\WINDOWS\Prefetch\POGODGC.EXE-D9B23894.pf O45 - LFCP:[MD5.D465B65D1191B425DBAA0F7FB8CFE0C1] - 05/09/2013 - 16:34:41 ---A- - C:\WINDOWS\Prefetch\DELICIOUS SUPER PACK DELUXE.E-0FA4D1F7.pf O45 - LFCP:[MD5.FB959C8E93B034AB52E6E01D2A3EEAAF] - 06/09/2013 - 03:36:24 ---A- - C:\WINDOWS\Prefetch\PCM-PROTECTION.EXE-A265D998.pf O45 - LFCP:[MD5.4326CA87E8376B674A5D348397730652] - 07/09/2013 - 12:01:00 ---A- - C:\WINDOWS\Prefetch\POKERLAUNCHER8667612658142889-B24DF8B0.pf O45 - LFCP:[MD5.95CCFFD72CD89576ACD49B9BD9A17095] - 09/09/2013 - 19:16:37 ---A- - C:\WINDOWS\Prefetch\POKERLAUNCHER8859121135780286-C0725FFC.pf O45 - LFCP:[MD5.D496B8C3A49F06E0FBB652065C7852E2] - 11/09/2013 - 15:33:07 ---A- - C:\WINDOWS\Prefetch\POKERLAUNCHER1784445135425455-DE4F4205.pf O45 - LFCP:[MD5.EE43B73E8C773D8688E245E17492EB34] - 11/09/2013 - 16:57:55 ---A- - C:\WINDOWS\Prefetch\POKERLAUNCHER8489614168478496-8DA9C1A5.pf O45 - LFCP:[MD5.8A77A231B667B46DA5CBA1CECB9E5F61] - 13/09/2013 - 15:17:26 ---A- - C:\WINDOWS\Prefetch\POKERLAUNCHER5796738817140345-A33340EB.pf O45 - LFCP:[MD5.346ADFFD36DB2ED805743479AE3E5C5A] - 13/09/2013 - 16:15:13 ---A- - C:\WINDOWS\Prefetch\POKERLAUNCHER4606783278022017-EC2980DE.pf O45 - LFCP:[MD5.DC377A279A01F2222DA7DE7659DA0AD1] - 14/09/2013 - 17:52:08 ---A- - C:\WINDOWS\Prefetch\ORIGINLAUNCHER215984484.EXE-D15EAB00.pf O45 - LFCP:[MD5.1CC386C7FFACE6EE3E35117B7F199146] - 14/09/2013 - 18:04:49 ---A- - C:\WINDOWS\Prefetch\_UNPS.EXE-FC2F8EDA.pf O45 - LFCP:[MD5.8ACA9AE70952B9F6DF41490FFC7422E6] - 14/09/2013 - 18:17:46 ---A- - C:\WINDOWS\Prefetch\_IU14D2N.TMP-5517F222.pf O45 - LFCP:[MD5.AB5C08888BFC5F36EE3C4BE7CA3EB0DA] - 14/09/2013 - 18:17:50 ---A- - C:\WINDOWS\Prefetch\PCM-PROTECTION.EXE-A89F6425.pf O45 - LFCP:[MD5.A4B9CE4B5D34475AEAAC4D42D2C1D787] - 14/09/2013 - 18:24:32 ---A- - C:\WINDOWS\Prefetch\BANDIZIP64.EXE-B694B70F.pf O45 - LFCP:[MD5.D900D78B24333691E00B66E88D055441] - 17/09/2013 - 18:03:47 ---A- - C:\WINDOWS\Prefetch\AUTORUN.EXE-D28490C2.pf O45 - LFCP:[MD5.3B82316F18C7F0B69FB5AB61A7423CB6] - 17/09/2013 - 18:03:57 ---A- - C:\WINDOWS\Prefetch\AUTORUN.EXE-87AAD447.pf O45 - LFCP:[MD5.8D117B69F80E7D3EB7F7B0A8035A08C4] - 18/09/2013 - 06:00:10 ---A- - C:\WINDOWS\Prefetch\AUTHHOST.EXE-44C90B62.pf O45 - LFCP:[MD5.41BAEA0D901686A23D4D05DE9892D310] - 20/09/2013 - 15:41:37 ---A- - C:\WINDOWS\Prefetch\BLACKLIST_GAME.EXE-14326C3D.pf O45 - LFCP:[MD5.72ABF314C1386E393C1C142B49E2148F] - 20/09/2013 - 15:41:37 ---A- - C:\WINDOWS\Prefetch\GU.EXE-31C8662F.pf O45 - LFCP:[MD5.5E7DF93552A98A54952CAA8C9051E724] - 21/09/2013 - 10:27:05 ---A- - C:\WINDOWS\Prefetch\RE.EXE-4867EBB0.pf O45 - LFCP:[MD5.9EE9FB98F7108538453671E69221B403] - 23/09/2013 - 12:26:25 ---A- - C:\WINDOWS\Prefetch\GHDELICIOUSEMILYSCHILDHOODMEM-243A5E91.pf O45 - LFCP:[MD5.EFAD653AB430D99CAA5AC345BF47B8A5] - 24/09/2013 - 13:38:59 ---A- - C:\WINDOWS\Prefetch\DELICIOUS5.EXE-47279AFA.pf O45 - LFCP:[MD5.6F48BBEF7E3757685B774E127A8CEAAF] - 24/09/2013 - 13:46:51 ---A- - C:\WINDOWS\Prefetch\DELICIOUS4.EXE-B302C039.pf O45 - LFCP:[MD5.4E30D9FA5DC15D727FACF7A46FB8F0F0] - 24/09/2013 - 13:47:34 ---A- - C:\WINDOWS\Prefetch\DELICIOUS3.EXE-793857C0.pf O45 - LFCP:[MD5.4DC7559ECABE337263BFC5C91E9AE669] - 24/09/2013 - 22:09:26 ---A- - C:\WINDOWS\Prefetch\VIZORHTMLDIALOG.EXE-A91B4E31.pf O45 - LFCP:[MD5.5858DA454CFA126064CDB5410434F90B] - 24/09/2013 - 22:09:55 ---A- - C:\WINDOWS\Prefetch\VIZORHTMLDIALOG.EXE-7F59381E.pf O45 - LFCP:[MD5.C843369EA56A924B0B279E7CD807C015] - 26/09/2013 - 12:00:57 ---A- - C:\WINDOWS\Prefetch\7.2.241.0OEMBINGBARSETUP-PART-9441ED70.pf O45 - LFCP:[MD5.428F980EE26892023AB25B7C5625B898] - 26/09/2013 - 12:08:20 ---A- - C:\WINDOWS\Prefetch\UPDATETOOL.EXE-18BAEE18.pf O45 - LFCP:[MD5.DBFED13E488726A1BD035AEBD604385A] - 26/09/2013 - 12:09:56 ---A- - C:\WINDOWS\Prefetch\ORIGINCLIENTSERVICE.EXE-AE2A26C3.pf O45 - LFCP:[MD5.C4BB69EC3EC3D8401E6ABA84F9787546] - 26/09/2013 - 12:19:34 ---A- - C:\WINDOWS\Prefetch\dynreservedpri.db O45 - LFCP:[MD5.1C88FF06A7DE5E6E5AA86028A7DAE376] - 26/09/2013 - 12:43:23 ---A- - C:\WINDOWS\Prefetch\EAPROXYINSTALLER.EXE-DCB791D1.pf O45 - LFCP:[MD5.38A23F40712A715BEA4E19845608DB50] - 26/09/2013 - 12:43:24 ---A- - C:\WINDOWS\Prefetch\TOUCHUP.EXE-36E2EE08.pf O45 - LFCP:[MD5.7900C28EBC4E708FB9D0ABFE868EC4C5] - 26/09/2013 - 14:51:11 ---A- - C:\WINDOWS\Prefetch\LAUNCHTM.EXE-B444BC8E.pf O45 - LFCP:[MD5.7794DF60861FAB238968A678366B6D36] - 26/09/2013 - 15:00:08 ---A- - C:\WINDOWS\Prefetch\ACTIVATIONUI.EXE-D8E82D7F.pf O45 - LFCP:[MD5.A30BAA4CA888AD9D5AFDA7C84880F074] - 27/09/2013 - 10:40:02 ---A- - C:\WINDOWS\Prefetch\PDVD10SERV.EXE-99C8A7B5.pf O45 - LFCP:[MD5.450DA06D08B5795F2369F3E8E7B4B908] - 27/09/2013 - 10:52:54 ---A- - C:\WINDOWS\Prefetch\DELICIOUS2.EXE-5BAFC0A6.pf O45 - LFCP:[MD5.14EFADA09B669A66A8B6A81867354E5A] - 27/09/2013 - 18:22:08 ---A- - C:\WINDOWS\Prefetch\AICHARGERAP.EXE-60EB3008.pf O45 - LFCP:[MD5.FB540D76511A54E9AB24E09F422D006B] - 27/09/2013 - 18:43:37 ---A- - C:\WINDOWS\Prefetch\VRAISNOMS ARMADA UNINSTALLER.-DE929A89.pf O45 - LFCP:[MD5.9858A99ABADF98EDD69986C9D78E0CE9] - 27/09/2013 - 18:45:13 ---A- - C:\WINDOWS\Prefetch\WAJAM_VALIDATE.EXE-961AA460.pf =>Toolbar.Wajam O45 - LFCP:[MD5.964A6A6F79F1BF7B6D2EDA7A33F45406] - 27/09/2013 - 18:45:16 ---A- - C:\WINDOWS\Prefetch\WMP11-WINDOWSXP-X86-FR-FR.EXE-E4DBB8E3.pf O45 - LFCP:[MD5.7852941EBA513665A2285AD8E3039EF9] - 27/09/2013 - 18:47:25 ---A- - C:\WINDOWS\Prefetch\CLEANUP.EXE-321C7613.pf ~ Prefetcher: 232 Legitimates Filtered in 00mn 00s ---\ Clé de registre Shell MountPoints2 (MPKS) (O51) O51 - MPSK:{d349517e-14e2-11e2-be6b-806e6f6e6963}\AutoRun\command. (.Pas de propriétaire - RESetup MFC Application.) -- F:\RESetup.exe ~ Keys: Scanned in 00mn 00s ---\ Enumération des clés de registre PoliciesSystem (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 ~ MWPS: 17 Legitimates Filtered in 00mn 00s ---\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 ~ MWPE Keys: 3 Legitimates Filtered in 00mn 00s ---\ Liste des pilotes du système (SDL) (O58) O58 - SDL:[MD5.D168AE57558A6174FB35E0F82B32F62B] - 21/02/2013 - 15:55:05 . (...) -- C:\WINDOWS\System32\Drivers\aswnet.sys.sum [175] O58 - SDL:[MD5.ADAA34740E9F6AFF94CC75D5CF8ED7E2] - 04/01/2008 - 06:34:42 ---A- . (...) -- C:\WINDOWS\SysWOW64\drivers\AsInsHelp32.sys [10216] ~ Drivers: 17 Legitimates Filtered in 00mn 00s ---\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC: 24/09/2013 - 20:16:42 ---A- . (...) -- C:\Users itinino\Downloads\AdwCleaner.exe [1042066] O61 - LFC: 24/09/2013 - 20:28:06 ---A- . (...) -- C:\Users itinino\AppData\Local\avgchrome\avgp [174789] O61 - LFC: 24/09/2013 - 20:44:52 ---A- . (...) -- C:\Users itinino\Documents\JRT.txt [2102] O61 - LFC: 24/09/2013 - 21:37:37 ---A- . (...) -- C:\Users itinino\Documents\ZHPDiag.txt [57455] =>.Nicolas Coolman O61 - LFC: 27/09/2013 - 10:45:49 ---A- . (...) -- C:\Users itinino\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists [262066] O61 - LFC: 27/09/2013 - 18:45:02 ---A- . (...) -- C:\Users itinino\Downloads\wmp11-windowsxp-x86-FR-FR.exe [613192] O61 - LFC: 27/09/2013 - 20:01:49 ---A- . (...) -- C:\Users itinino\AppData\Roaming\ZHP\ZHPADSReport.txt [351] =>.Nicolas Coolman O61 - LFC: 27/09/2013 - 20:02:50 ---A- . (...) -- C:\Users itinino\AppData\Roaming\ZHP\ZHPDiag.txt [52937] =>.Nicolas Coolman O61 - LFC: 27/09/2013 - 20:03:59 ---A- . (...) -- C:\Users itinino\AppData\Local\Google\Chrome\User Data\Local State [43559] O61 - LFC: 27/09/2013 - 20:03:59 ---A- . (...) -- C:\Users itinino\AppData\Local\Google\Chrome\User Data\chrome_shutdown_ms.txt [4] O61 - LFC: 27/09/2013 - 20:04:04 ---A- . (...) -- C:\Users itinino\AppData\Roaming\ZHP\Log.txt [160524] =>.Nicolas Coolman ~ 17 Fichiers temporaires (Temporary files) ~ Files: 432 Legitimates Filtered in 00mn 05s ---\ Liste des outils de désinfection (LATC) (O63) O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman ~ ADS: Scanned in 00mn 00s ---\ Associations Shell Spawning (O67) O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.) ~ FASS Keys: 19 Legitimates Filtered in 00mn 00s ---\ Menu de démarrage Internet (SMI) (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\ Recherche particulière à la racine du système (SPRF) (O84) [MD5.57184DC9CC12566012452A47FB63B83D] [SPRF][20/05/2013] (.Setup © - Setup.) -- C:\Users itinino\AppData\Local\Temp\1799uninstall.exe [410624] [MD5.0FAB00C8FF3586CF4A53E9A85DFD8C51] [SPRF][26/01/2013] (...) -- C:\Users itinino\AppData\Local\Temp\7z920.exe [21306] [MD5.34928768A32DD3B644CBF740DE73183B] [SPRF][20/05/2013] (.PC Health Labs - PC Health Kit.) -- C:\Users itinino\AppData\Local\Temp\air6C61.exe [3629968] =>PUP.DealPly [MD5.B8138BCA6A83E4F0D21E881C924E47B3] [SPRF][04/03/2013] (.Ask Partner Network - Stub Installer.) -- C:\Users itinino\AppData\Local\Temp\APNSetup.exe [519304] [MD5.B3A840E05F27DC6AE773A5D622BFA994] [SPRF][11/09/2012] (.Ask.com - Offercast - APN Install Manager.) -- C:\Users itinino\AppData\Local\Temp\AskPIP_FF_.exe [783560] [MD5.B28C334C03CEE7C5E829C43AE75DAE5A] [SPRF][28/01/2013] (.Ask.com - AskIC Dynamic Link Library.) -- C:\Users itinino\AppData\Local\Temp\AskSLib.dll [248008] [MD5.CBBD7290D746F07916E4A572540ED246] [SPRF][11/04/2003] (.Pas de propriétaire - AutoRunGUI6 DLL.) -- C:\Users itinino\AppData\Local\Temp\AutoRunGUI.dll [3534848] [MD5.6E1799926209C193FDB2E05A271C5B49] [SPRF][01/09/2013] (...) -- C:\Users itinino\AppData\Local\Temp\BackupSetup.exe [10340624] [MD5.239CFEF5FC6DE1BDA8396ACC19AA30C7] [SPRF][30/08/2013] (...) -- C:\Users itinino\AppData\Local\Temp\bandizip-setup-gl.exe [4249304] [MD5.6A18FCCAA07A3459B950389F5A5CEF36] [SPRF][24/09/2013] (...) -- C:\Users itinino\AppData\Local\Temp\chart_data.dat [20942] [MD5.B8D0E42594586243344C6F3341EF38F6] [SPRF][25/02/2013] (.Visicom Media Inc. - File Bulldog Toolbar Installer.) -- C:\Users itinino\AppData\Local\Temp\filebulldogTb_1.0.0.8.exe [2486648] =>Adware.SocialSkinz [MD5.7A23830BA9015CCD2BA1EEA446484E77] [SPRF][27/09/2013] (...) -- C:\Users itinino\AppData\Local\Temp\ICReinstall_wmp11-windowsxp-x86-FR-FR.exe [613192] [MD5.AC009B96FAAD471EB2B1D9507010DF46] [SPRF][26/01/2013] (...) -- C:\Users itinino\AppData\Local\Temp\incredibar_installer.exe [21303] =>Adware.IncrediBar [MD5.9A4C7C7392721D18D80DA2A2EBF8B48E] [SPRF][16/12/2012] (.Yuna Software - Uninstaller - Messenger Plus! for Skype.) -- C:\Users itinino\AppData\Local\Temp\MsgPlusUninstall.exe [817152] [MD5.AC2F3647FD669EF50163078964186966] [SPRF][26/01/2013] (...) -- C:\Users itinino\AppData\Local\Temp\MyBabylonTB_google_20120807.exe [21312] =>Toolbar.Babylon [MD5.0E9EE08F0AD7D0473561EE4CA59B37AD] [SPRF][02/11/2012] (.Ask.com - Offercast - APN Install Manager.) -- C:\Users itinino\AppData\Local\Temp\PIP2691_MYC_.exe [877256] [MD5.02F0C000E96731A69B64A188067C4CC0] [SPRF][26/01/2013] (...) -- C:\Users itinino\AppData\Local\Temp\pricepeep_130001_0101.exe [21300] =>Adware.PricePeep [MD5.3BF79E6868B44D3ADB2796BA99521891] [SPRF][07/09/2013] (...) -- C:\Users itinino\AppData\Local\Temp\Quarantine.exe [344583] [MD5.F631DE75930099A17770F9F129403342] [SPRF][21/09/2013] (...) -- C:\Users itinino\AppData\Local\Temp\SCC.dll [134083] [MD5.C6D792E4583FC46DB0953FBF6E46348A] [SPRF][23/01/2013] (.SweetIM Technologies Lt - This installer.) -- C:\Users itinino\AppData\Local\Temp\SIMEEI2Installer.exe [2962432] =>PUP.SweetIM [MD5.7704B843006444B69486FD27D4660845] [SPRF][23/01/2013] (.SweetIM Technologies Lt - This installer.) -- C:\Users itinino\AppData\Local\Temp\SIMEEIInstaller.exe [3380216] =>PUP.SweetIM [MD5.F467645711172ECA7FCE253824A09179] [SPRF][29/05/2013] (...) -- C:\Users itinino\AppData\Local\Temp\sonarinst.exe [1786688] [MD5.5405413FFF79B8D9C747AA900F60F082] [SPRF][20/05/2013] (...) -- C:\Users itinino\AppData\Local\Temp\Sqlite3.dll [599419] [MD5.232AD40DF4D2A129B88A2411907DAA4A] [SPRF][01/09/2013] (...) -- C:\Users itinino\AppData\Local\Temp oolbar1108172390.exe [175208] [MD5.FA37DA63F0E2B5531C6DCD8F05EA0376] [SPRF][12/09/2012] (...) -- C:\Users itinino\AppData\Local\Temp\TouchURL.exe [48640] [MD5.3C74C26999F2060BC6302448F173A342] [SPRF][28/08/2013] (.Babylon Ltd. - Uninstaller Application.) -- C:\Users itinino\AppData\Local\Temp\uninst1.exe [340464] =>Toolbar.Babylon [MD5.B82A71160DAF1E4D7A1D6EA4830D3EC9] [SPRF][01/09/2013] (.http://goforfiles.com/ - GoforFiles Application.) -- C:\Users itinino\AppData\Local\Temp\uninstall1108608562.exe [907856] =>P2P.GoforFiles [MD5.C3A3A4CDCF3D6A196201703E2288D8FC] [SPRF][30/01/2013] (.Yuna Software - Setup of Messenger Plus! 6.) -- C:\Users itinino\AppData\Local\Temp\Update_6e7b.exe [1161584] [MD5.8CA2E2944BAF97A23A4183B67E4E80E4] [SPRF][04/03/2013] (...) -- C:\Users itinino\AppData\Local\Temp\_unps.exe [348160] [MD5.FEE1D58C6AD73F25EB0DAD4F690560AD] [SPRF][14/04/2013] (.Facebook Inc. - Setup.) -- C:\Users itinino\Desktop\FacebookVideoCallSetup_v1.2.205.0.exe [501248] [MD5.DB5DE86A81CF3A802D51A455F1878B99] [SPRF][09/03/2013] (.FLVMPlayer - FLV Media Player Setup.) -- C:\Users itinino\Desktop\FLVMPlayer2.exe [4958377] ~ Files: 49 Legitimates Filtered in 00mn 01s ---\ Liste des exceptions du parefeu (FirewallRules) (O87) O87 - FAEL: "{0EA52F56-E24C-46D5-BB7B-985AD498E1A4}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) =>PUP.SweetIM O87 - FAEL: "{1656FF78-A313-4475-AF49-02919FA466BF}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) =>PUP.SweetIM O87 - FAEL: "TCP Query User{2B6F7004-C35A-4884-AE1F-D7B5B37C0DC3}C:\program files (x86) orrent opener orrent opener.exe" | In - Public - P6 - TRUE | .(.Denco Limited.) -- C:\program files (x86) orrent opener orrent opener.exe O87 - FAEL: "UDP Query User{C7F90572-8A0B-4693-B005-DBF81EE8D0BE}C:\program files (x86) orrent opener orrent opener.exe" | In - Public - P17 - TRUE | .(.Denco Limited.) -- C:\program files (x86) orrent opener orrent opener.exe O87 - FAEL: "{4F38D31D-D973-492B-85D2-4C29298F4926}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\GoforFiles\goforfilesdl.exe (.not file.) =>P2P.GoforFiles O87 - FAEL: "{399E2502-2DE3-442C-B7D0-23BDB9337ADE}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\GoforFiles\goforfilesdl.exe (.not file.) =>P2P.GoforFiles O87 - FAEL: "{8E28A393-0BDE-4DF3-83B5-1B701ECA015F}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\GoforFiles\GoforFiles.exe (.not file.) =>P2P.GoforFiles O87 - FAEL: "{17726360-220C-4D6E-97D1-6E384B7BD827}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\GoforFiles\GoforFiles.exe (.not file.) =>P2P.GoforFiles ~ Firewall: 256 Legitimates Filtered in 00mn 00s ---\ Enumère les codes produits des logiciels (PUC) (O90) O90 - PUC: "3E9A223DB85706D47A4C568CF83D870D" . (.Bing Bar.) -- C:\Windows\Installer\{D322A9E3-758B-4D60-A7C4-65C88FD378D0}\icon_installer_ico =>Toolbar.Bing O90 - PUC: "9EE58E3C298524145B73CBBED3CAC4D3" . (.Internet Explorer Toolbar 4.6 by SweetPacks.) -- C:\Windows\Installer\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}\ARPPRODUCTICON.exe =>PUP.SweetIM ~ Update Products: 120 Legitimates Filtered in 00mn 00s ---\ Etat général des services not Microsoft (EGS) (SR=Running, SS=Stopped) SR - | Auto 03/09/2013 65640 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe SS - | Demand 10/09/2013 257416 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe SR - | Auto 21/12/2012 57008 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - | Auto 01/06/2012 920736 | (asComSvc) . (...) - C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe SR - | Auto 01/06/2012 951936 | (asHmComSvc) . (.ASUSTeK Computer Inc..) - C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe SR - | Auto 17/02/2012 149120 | (AsSysCtrlService) . (.ASUSTeK Computer Inc..) - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe SR - | Auto 30/08/2013 46808 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe SR - | Auto 30/08/2013 137960 | (avast! Firewall) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\afwServ.exe SS - | Auto 23/07/2013 193696 | (BBSvc) . (.Microsoft Corporation..) - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.exe SS - | Demand 23/07/2013 240288 | (BBUpdate) . (.Microsoft Corporation..) - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SR - | Auto 24/05/2011 1840128 | (Fabs) . (.MAGIX AG.) - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe SS - | Demand 26/04/2011 2702848 | (FirebirdServerMAGIXInstance) . (.MAGIX®.) - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe SS - | Auto 23/01/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 23/01/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SR - | Auto 20/04/2012 635104 | (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe SR - | Demand 31/05/2013 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 25/06/2012 166720 | (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe SR - | Auto 17/07/2012 277824 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe SR - | Auto 04/04/2013 418376 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe SR - | Auto 04/04/2013 701512 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe SR - | Auto 14/07/2012 769432 | (NAUpdate) . (.Nero AG.) - C:\Program Files (x86)\Nero\Update\NASvc.exe SR - | Auto 28/08/2012 891240 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32 vvsvc.exe SR - | Auto 10/07/1658 0 | (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe SS - | Auto 01/03/2013 161384 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe SS - | Demand 28/08/2013 563624 | (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe SR - | Auto 17/07/2012 365376 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe SR - | Auto 06/07/2012 27792 | (VIAKaraokeService) . (.VIA Technologies, Inc..) - C:\WINDOWS\System32\viakaraokesrv.exe SS - | Demand 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation SS - | Auto 20/09/2012 29696 | C:\WINDOWS\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\WINDOWS\System32\svchost.exe ~ Services: Scanned in 00mn 01s ---\ Recherche d'infection sur le Master Boot Record (MBR)(O80) Run by titinino at 27/09/2013 21:04:35 ~ OS 64 not supported by MBR tool ~ MBR: 0 Legitimates Filtered in 00mn 00s ---\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by titinino at 27/09/2013 21:04:37 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ MBR: Scanned in 00mn 02s ---\ Scan Additionnel (O88) Database Version : 12930 - (23/09/2013) Clés trouvées (Keys found) : 95 Valeurs trouvées (Values found) : 0 Dossiers trouvés (Folders found) : 1 Fichiers trouvés (Files found) : 15 [HKLM\Software\Google\Chrome\Extensions\aaaaiopnfecjheficjcjfgjecfgdhbmc] =>Toolbar.Ask^ [HKLM\Software\Google\Chrome\Extensions\algmakeomkafjglfhpomolfhjppoojff] =>Adware.Pricora^ [HKLM\Software\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}] =>PUP.RewardsArcade [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635] =>PUP.SweetIM [HKLM\Software\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}] =>PUP.RewardsArcade [HKLM\Software\Classes\Installer\Features\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM [HKLM\Software\Classes\Installer\Products\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Installer\Features\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Installer\Products\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM [HKLM\Software\Classes\Installer\Features\9EE58E3C298524145B73CBBED3CAC4D3] =>PUP.SweetIM [HKLM\Software\Classes\Installer\Products\9EE58E3C298524145B73CBBED3CAC4D3] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9EE58E3C298524145B73CBBED3CAC4D3] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Installer\Features\9EE58E3C298524145B73CBBED3CAC4D3] =>PUP.SweetIM [HKLM\Software\Wow6432Node\Classes\Installer\Products\9EE58E3C298524145B73CBBED3CAC4D3] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>Toolbar.Tarma [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>Toolbar.Tarma [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA] =>PUP.SweetIM [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420] =>PUP.SweetIM [HKCU\Software\iWinArcade] =>Adware.iWinArcade [HKLM\Software\Wow6432Node\iWinArcade] =>Adware.iWinArcade [HKLM\Software\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}] =>PUP.SweetIM^ [HKLM\Software\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}] =>PUP.SweetIM^ [HKLM\Software\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12BF94BD06C95F343A77631402B9556A] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2124D8A8CF720FD44866190AF560228E] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27A325ACED8CA4743A30127638591ADB] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\350D17402BD84234EAF7D32F08172D7C] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EE8C5F419057E1478A654868CEE60B5] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4735D908D66E1BA46B6C2D7185A12B2B] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76D8378E2DDAED3428720A631F6E3BF0] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A001B259DB7D694E818BE29B973992C] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE2EC163C6A68A48921573E0E7E199D] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C06C6662FA5B04646829E4A460857770] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEEB3E14ABE8270419B0FD762E18F7C6] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1B5E9A3BDB51349BF96E842C062D98] =>PUP.SweetIM^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FECBC2BC14DA6CD459BD59A041709836] =>PUP.SweetIM^ C:\Users itinino\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff =>Adware.Pricora C:\Users itinino\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaiopnfecjheficjcjfgjecfgdhbmc =>Toolbar.Ask^ C:\WINDOWS\Prefetch\WAJAM_VALIDATE.EXE-961AA460.pf =>Toolbar.Wajam^ C:\Users itinino\AppData\Local\Temp\air6C61.exe =>PUP.DealPly^ C:\Users itinino\AppData\Local\Temp\filebulldogTb_1.0.0.8.exe =>Adware.SocialSkinz^ C:\Users itinino\AppData\Local\Temp\incredibar_installer.exe =>Adware.IncrediBar^ C:\Users itinino\AppData\Local\Temp\MyBabylonTB_google_20120807.exe =>Toolbar.Babylon^ C:\Users itinino\AppData\Local\Temp\pricepeep_130001_0101.exe =>Adware.PricePeep^ C:\Users itinino\AppData\Local\Temp\SIMEEI2Installer.exe =>PUP.SweetIM^ C:\Users itinino\AppData\Local\Temp\SIMEEIInstaller.exe =>PUP.SweetIM^ C:\Users itinino\AppData\Local\Temp\uninst1.exe =>Toolbar.Babylon^ C:\Windows\Installer\{D322A9E3-758B-4D60-A7C4-65C88FD378D0}\icon_installer_ico =>Toolbar.Bing^ C:\Windows\Installer\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}\ARPPRODUCTICON.exe =>PUP.SweetIM^ ~ Additionnel Scan: 298394 Items scanned in 00mn 11s ---\ Récapitulatif des détections trouvées sur votre station ~ http://nicolascoolman.webs.com/apps/blog/show/28927746-toolbar-ask =>Toolbar.Ask ~ http://nicolascoolman.webs.com/apps/blog/show/29294184-adware-pricora =>Adware.Pricora ~ http://nicolascoolman.webs.com/apps/blog/show/27379491-toolbar-wajam =>Toolbar.Wajam ~ http://nicolascoolman.webs.com/apps/blog/show/28060597-pup-dealply =>PUP.DealPly ~ http://nicolascoolman.webs.com/apps/blog/show/27480243-adware-socialskinz =>Adware.SocialSkinz ~ http://nicolascoolman.webs.com/apps/blog/show/26898222-adware-incredibar =>Adware.Incredibar ~ http://nicolascoolman.webs.com/apps/blog/show/26627369-toolbar-babylon =>Toolbar.Babylon ~ http://nicolascoolman.webs.com/apps/blog/show/29216159-pup-sweetim =>PUP.SweetIM ~ http://nicolascoolman.webs.com/apps/blog/show/31536787-toolbar-bing =>Toolbar.Bing ~ http://nicolascoolman.webs.com/apps/blog/show/26684723-adware-imbooster =>Adware.IMBooster ~ http://nicolascoolman.webs.com/apps/blog/show/28000037-pup-rewardsarcade =>PUP.RewardsArcade ~ http://nicolascoolman.webs.com/apps/blog/show/29637859-toolbar-tarma =>Toolbar.Tarma ~ http://nicolascoolman.webs.com/apps/blog/show/28766471-adware-iwinarcade =>Adware.iWinArcade ~ MSI: 13 link(s) detected in 00mn 11s ~ 1696 Legitimates filtered by white list End of the scan (627 lines in 01mn 06s)(0)

lilidurhone · Answer

Hello

Attention script personnalisé à ne pas reproduire sur un autre ordinateur risque de plantage !   

* Désactive le temps du nettoyage avast(clic droit sur la boule orange>gestion des agents>désactiver pour 10 minutes)

* Copies uniquement les lignes indiquées en gras ci-dessous (tu surlignes avec la souris puis clic droit copier de Script ZHPFix jusqu'à la fin soit sysrestore si jamais le bouton importer marche pas)



Script ZHPFix
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified 
G2 - GCE: Preference [User Data\Default] [aaaaiopnfecjheficjcjfgjecfgdhbmc] Ask Toolbar v.21.51087, (Désactivé) =>Toolbar.Ask 
G2 - GCE: Preference [User Data\Default] [algmakeomkafjglfhpomolfhjppoojff] Pricora v.1.24.99, (Activé) =>Adware.Pricora 
[MD5.00000000000000000000000000000000] [APT] [GoforFilesUpdate] (...) -- C:\Program Files (x86)\GoforFiles\GFFUpdater.exe (.not file.) [0] =>P2P.GoforFiles 
[MD5.00000000000000000000000000000000] [APT] [{1912D43E-89E4-4AAC-811F-E4C465CDD2EB}] (...) -- F:\SC4_UNINST.exe (.not file.) [0] 
O43 - CFD: 14/09/2013 - 19:04:47 - [0] ----D C:\Program Files (x86)\PokerStars.FR 
O43 - CFD: 14/09/2013 - 19:04:41 - [0] ----D C:\Users	itinino\AppData\Local\PokerStars.FR 
[MD5.34928768A32DD3B644CBF740DE73183B] [SPRF][20/05/2013] (.PC Health Labs - PC Health Kit.) -- C:\Users	itinino\AppData\Local\Temp\air6C61.exe [3629968] =>PUP.DealPly 
[MD5.B8138BCA6A83E4F0D21E881C924E47B3] [SPRF][04/03/2013] (.Ask Partner Network - Stub Installer.) -- C:\Users	itinino\AppData\Local\Temp\APNSetup.exe [519304] 
[MD5.B3A840E05F27DC6AE773A5D622BFA994] [SPRF][11/09/2012] (.Ask.com - Offercast - APN Install Manager.) -- C:\Users	itinino\AppData\Local\Temp\AskPIP_FF_.exe [783560] 
[MD5.B28C334C03CEE7C5E829C43AE75DAE5A] [SPRF][28/01/2013] (.Ask.com - AskIC Dynamic Link Library.) -- C:\Users	itinino\AppData\Local\Temp\AskSLib.dll [248008] 
[MD5.AC009B96FAAD471EB2B1D9507010DF46] [SPRF][26/01/2013] (...) -- C:\Users	itinino\AppData\Local\Temp\incredibar_installer.exe [21303] =>Adware.IncrediBar 
[MD5.9A4C7C7392721D18D80DA2A2EBF8B48E] [SPRF][16/12/2012] (.Yuna Software - Uninstaller - Messenger Plus! for Skype.) -- C:\Users	itinino\AppData\Local\Temp\MsgPlusUninstall.exe [817152] 
[MD5.AC2F3647FD669EF50163078964186966] [SPRF][26/01/2013] (...) -- C:\Users	itinino\AppData\Local\Temp\MyBabylonTB_google_20120807.exe [21312] =>Toolbar.Babylon 
[MD5.0E9EE08F0AD7D0473561EE4CA59B37AD] [SPRF][02/11/2012] (.Ask.com - Offercast - APN Install Manager.) -- C:\Users	itinino\AppData\Local\Temp\PIP2691_MYC_.exe [877256] 
[MD5.02F0C000E96731A69B64A188067C4CC0] [SPRF][26/01/2013] (...) -- C:\Users	itinino\AppData\Local\Temp\pricepeep_130001_0101.exe [21300] =>Adware.PricePeep 
[MD5.C6D792E4583FC46DB0953FBF6E46348A] [SPRF][23/01/2013] (.SweetIM Technologies Lt - This installer.) -- C:\Users	itinino\AppData\Local\Temp\SIMEEI2Installer.exe [2962432] =>PUP.SweetIM 
[MD5.7704B843006444B69486FD27D4660845] [SPRF][23/01/2013] (.SweetIM Technologies Lt - This installer.) -- C:\Users	itinino\AppData\Local\Temp\SIMEEIInstaller.exe [3380216] =>PUP.SweetIM 
[MD5.232AD40DF4D2A129B88A2411907DAA4A] [SPRF][01/09/2013] (...) -- C:\Users	itinino\AppData\Local\Temp	oolbar1108172390.exe [175208]
[MD5.3C74C26999F2060BC6302448F173A342] [SPRF][28/08/2013] (.Babylon Ltd. - Uninstaller Application.) -- C:\Users	itinino\AppData\Local\Temp\uninst1.exe [340464] =>Toolbar.Babylon 
[MD5.B82A71160DAF1E4D7A1D6EA4830D3EC9] [SPRF][01/09/2013] (.http://goforfiles.com/ - GoforFiles Application.) -- C:\Users	itinino\AppData\Local\Temp\uninstall1108608562.exe [907856] =>P2P.GoforFiles 
[MD5.C3A3A4CDCF3D6A196201703E2288D8FC] [SPRF][30/01/2013] (.Yuna Software - Setup of Messenger Plus! 6.) -- C:\Users	itinino\AppData\Local\Temp\Update_6e7b.exe [1161584] 
O87 - FAEL: "{0EA52F56-E24C-46D5-BB7B-985AD498E1A4}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) =>PUP.SweetIM 
O87 - FAEL: "{1656FF78-A313-4475-AF49-02919FA466BF}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) =>PUP.SweetIM 
O87 - FAEL: "{4F38D31D-D973-492B-85D2-4C29298F4926}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\GoforFiles\goforfilesdl.exe (.not file.) =>P2P.GoforFiles 
O87 - FAEL: "{399E2502-2DE3-442C-B7D0-23BDB9337ADE}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\GoforFiles\goforfilesdl.exe (.not file.) =>P2P.GoforFiles 
O87 - FAEL: "{8E28A393-0BDE-4DF3-83B5-1B701ECA015F}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\GoforFiles\GoforFiles.exe (.not file.) =>P2P.GoforFiles 
O87 - FAEL: "{17726360-220C-4D6E-97D1-6E384B7BD827}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\GoforFiles\GoforFiles.exe (.not file.) =>P2P.GoforFiles 
O90 - PUC: "3E9A223DB85706D47A4C568CF83D870D" . (.Bing Bar.) -- C:\Windows\Installer\{D322A9E3-758B-4D60-A7C4-65C88FD378D0}\icon_installer_ico =>Toolbar.Bing 
O90 - PUC: "9EE58E3C298524145B73CBBED3CAC4D3" . (.Internet Explorer Toolbar 4.6 by SweetPacks.) -- C:\Windows\Installer\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}\ARPPRODUCTICON.exe =>PUP.SweetIM 
[HKLM\Software\Google\Chrome\Extensions\aaaaiopnfecjheficjcjfgjecfgdhbmc] =>Toolbar.Ask^ 
[HKLM\Software\Google\Chrome\Extensions\algmakeomkafjglfhpomolfhjppoojff] =>Adware.Pricora^ 
[HKLM\Software\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}] =>Adware.IMBooster 
[HKLM\Software\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}] =>Adware.IMBooster 
[HKLM\Software\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}] =>Adware.IMBooster 
[HKLM\Software\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}] =>Adware.IMBooster 
[HKLM\Software\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}] =>PUP.RewardsArcade 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7] =>PUP.SweetIM 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D] =>PUP.SweetIM 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267] =>PUP.SweetIM 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058] =>PUP.SweetIM 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401] =>PUP.SweetIM 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6] =>PUP.SweetIM 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED] =>PUP.SweetIM 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81] =>PUP.SweetIM 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635] =>PUP.SweetIM 
[HKLM\Software\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}] =>PUP.RewardsArcade 
[HKLM\Software\Classes\Installer\Features\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM 
[HKLM\Software\Classes\Installer\Products\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM 
[HKLM\Software\Wow6432Node\Classes\Installer\Features\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM 
[HKLM\Software\Wow6432Node\Classes\Installer\Products\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM 
[HKLM\Software\Classes\Installer\Features\9EE58E3C298524145B73CBBED3CAC4D3] =>PUP.SweetIM 
[HKLM\Software\Classes\Installer\Products\9EE58E3C298524145B73CBBED3CAC4D3] =>PUP.SweetIM 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9EE58E3C298524145B73CBBED3CAC4D3] =>PUP.SweetIM 
[HKLM\Software\Wow6432Node\Classes\Installer\Features\9EE58E3C298524145B73CBBED3CAC4D3] =>PUP.SweetIM 
[HKLM\Software\Wow6432Node\Classes\Installer\Products\9EE58E3C298524145B73CBBED3CAC4D3] =>PUP.SweetIM 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>Toolbar.Tarma 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>Toolbar.Tarma 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D] =>PUP.SweetIM 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E] =>PUP.SweetIM 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0] =>PUP.SweetIM 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA] =>PUP.SweetIM 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420] =>PUP.SweetIM 
[HKCU\Software\iWinArcade] =>Adware.iWinArcade 
[HKLM\Software\Wow6432Node\iWinArcade] =>Adware.iWinArcade 
[HKLM\Software\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}] =>PUP.SweetIM^ 
[HKLM\Software\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}] =>PUP.SweetIM^ 
[HKLM\Software\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}] =>PUP.SweetIM^ 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12BF94BD06C95F343A77631402B9556A] =>PUP.SweetIM^ 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2124D8A8CF720FD44866190AF560228E] =>PUP.SweetIM^ 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27A325ACED8CA4743A30127638591ADB] =>PUP.SweetIM^ 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\350D17402BD84234EAF7D32F08172D7C] =>PUP.SweetIM^ 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EE8C5F419057E1478A654868CEE60B5] =>PUP.SweetIM^ 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4735D908D66E1BA46B6C2D7185A12B2B] =>PUP.SweetIM^ 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4] =>PUP.SweetIM^ 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76D8378E2DDAED3428720A631F6E3BF0] =>PUP.SweetIM^ 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2] =>PUP.SweetIM^ 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C] =>PUP.SweetIM^ 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A001B259DB7D694E818BE29B973992C] =>PUP.SweetIM^ 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789] =>PUP.SweetIM^ 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE2EC163C6A68A48921573E0E7E199D] =>PUP.SweetIM^ 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399] =>PUP.SweetIM^ 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C06C6662FA5B04646829E4A460857770] =>PUP.SweetIM^ 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156] =>PUP.SweetIM^ 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEEB3E14ABE8270419B0FD762E18F7C6] =>PUP.SweetIM^ 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1B5E9A3BDB51349BF96E842C062D98] =>PUP.SweetIM^ 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FECBC2BC14DA6CD459BD59A041709836] =>PUP.SweetIM^ 
C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff =>Adware.Pricora 
C:\Users	itinino\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaiopnfecjheficjcjfgjecfgdhbmc =>Toolbar.Ask^ 
C:\WINDOWS\Prefetch\WAJAM_VALIDATE.EXE-961AA460.pf =>Toolbar.Wajam^ 
C:\Users	itinino\AppData\Local\Temp\air6C61.exe =>PUP.DealPly^ 
C:\Users	itinino\AppData\Local\Temp\filebulldogTb_1.0.0.8.exe =>Adware.SocialSkinz^ 
C:\Users	itinino\AppData\Local\Temp\incredibar_installer.exe =>Adware.IncrediBar^ 
C:\Users	itinino\AppData\Local\Temp\MyBabylonTB_google_20120807.exe =>Toolbar.Babylon^ 
C:\Users	itinino\AppData\Local\Temp\pricepeep_130001_0101.exe =>Adware.PricePeep^ 
C:\Users	itinino\AppData\Local\Temp\SIMEEI2Installer.exe =>PUP.SweetIM^ 
C:\Users	itinino\AppData\Local\Temp\SIMEEIInstaller.exe =>PUP.SweetIM^ 
C:\Users	itinino\AppData\Local\Temp\uninst1.exe =>Toolbar.Babylon^ 
C:\Windows\Installer\{D322A9E3-758B-4D60-A7C4-65C88FD378D0}\icon_installer_ico =>Toolbar.Bing^ 
C:\Windows\Installer\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}\ARPPRODUCTICON.exe =>PUP.SweetIM^ 
Sysrestore





* Lance ZHPFix (icône seringue)en tant qu'administrateur(si tu es sous Vista/7/8)sinon double clique sur l'icône en forme de seringue  puis clique sur OK pour continuer.

* Cliques sur importer(Dans certains cas le script se colle automatiquement dans la zone de script et ne nécessite pas de cliquer sur le bouton "IMPORTER".)

* Si tu ne vois pas les lignes clic droit dans l'encadré puis coller

* Clique sur le bouton GO pour lancer le nettoyage, et laisse l'outil travailler.

* Zhpfix te proposera de vider la corbeille si tu le souhaites cliques sur oui si tu ne le souhaites pas cliques sur non

* Redémarre le PC et poste le rapport C:\ZHP\ZHPFixReport.txt

 
Si problème il y a il existe toujours une solution 
N'oubliez pas de mettre votre sujet en résolu

Lenteur surprenante.

39 réponses

Discussions similaires