Visual C# commande line compiler a cessé de fonctionner... suite

polette1973 -  
Bonjour,

j'avais posté un message suite à un pb de "commande c liner a cessé de fonctionner" qui s'ouvrait apparemment en lien avec le site matisseo.fr.
J'ai suivi les conseils d'Edaward : Malwarebytes en scan complet....
Le problème semblait résolu mais en fait rebelote, le message d'erreur réapparaît , malgré le fait que j'ai refait des scan et nettoyages avec Malewarebytes...
De plus réapparaît le message " google installer a cessé de fonctionner".
je suis bloquée donc !

Je suis bien ennuyée car le dossier matisseo qui semble en cause contient un album photo quasiment finalisé que je dois envoyer pour impression (genre 200 heures de travail :)

Je vous transmets les résultats du dernier scan complet de Malwarebytes avant nettoyage (c'est très long, j'espère que je dois bien le colle ci-dessous sinon désolée)

Merci de me dire ce que je dois faire, sachant que je ne suis pas experte du tout ! (aargh)

Malwarebytes Anti-Malware (Essai) 1.75.0.1300
www.malwarebytes.org

Version de la base de données: v2013.09.27.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16686
Gaëlle Baud :: GAGAPC [administrateur]

Protection: Activé

29/09/2013 15:46:58
MBAM-log-2013-09-29 (17-51-22).txt

Type d'examen: Examen complet (C:\|)
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 524507
Temps écoulé: 1 heure(s), 54 minute(s), 47 seconde(s)

Processus mémoire détecté(s): 2
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe (PUP.Optional.PerformerSoft.A) -> 2092 -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe (PUP.Optional.PerformerSoft.A) -> 4332 -> Aucune action effectuée.

Module(s) mémoire détecté(s): 1
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.dll (PUP.Optional.PerformerSoft.A) -> Aucune action effectuée.

Clé(s) du Registre détectée(s): 43
HKLM\SYSTEM\CurrentControlSet\Services\BitGuard (PUP.Optional.PerformerSoft.A) -> Aucune action effectuée.
HKCR\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE} (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\escort.escortIEPane.1 (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\escort.escortIEPane (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\delta.deltaHlpr.1 (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\delta.deltaHlpr (PUP.Optional.Delta) -> Aucune action effectuée.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} (PUP.Optional.Delta) -> Aucune action effectuée.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} (PUP.Optional.Delta) -> Aucune action effectuée.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKCR\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8} (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D} (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\esrv.deltaESrvc.1 (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\esrv.deltaESrvc (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKCR\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921} (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKCR\delta.deltadskBnd.1 (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKCR\delta.deltadskBnd (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKCR\Typelib\{4599D05A-D545-4069-BB42-5895B4EAE05B} (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKCR\Interface\{1231839B-064E-4788-B865-465A1B5266FD} (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{100EB1FD-D03E-47FD-81F3-EE91287F9465} (Adware.ShopperReports) -> Aucune action effectuée.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110111991162} (PUP.Optional.Crossrider) -> Aucune action effectuée.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110111991162} (PUP.Optional.Crossrider) -> Aucune action effectuée.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85} (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKCR\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26} (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800} (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\delta.deltaappCore.1 (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\delta.deltaappCore (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B} (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\d (PUP.Optional.Delta) -> Aucune action effectuée.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693} (PUP.Optional.PerformerSoft.A) -> Aucune action effectuée.
HKCU\SOFTWARE\BabylonToolbar (PUP.Optional.BabylonToolBar.A) -> Aucune action effectuée.
HKCU\SOFTWARE\DataMngr_Toolbar (PUP.Optional.DataMngr.A) -> Aucune action effectuée.
HKCU\SOFTWARE\DELTA\DELTA (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKCU\Software\DataMngr (PUP.Optional.DataMngr.A) -> Aucune action effectuée.
HKCU\Software\BabSolution\Updater (PUP.Optional.Babylon.A) -> Aucune action effectuée.
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings (PUP.Optional.BProtector.A) -> Aucune action effectuée.
HKLM\SOFTWARE\Delta\delta\Instl (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar (PUP.Optional.BabSolution.A) -> Aucune action effectuée.

Valeur(s) du Registre détectée(s): 6
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Données: Delta Toolbar -> Aucune action effectuée.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Données: -> Aucune action effectuée.
HKCU\SOFTWARE\Delta\Delta|tlbrSrchUrl (PUP.Optional.Delta.A) -> Données: -> Aucune action effectuée.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|bProtector Start Page (PUP.BProtector) -> Données: http://isearch.babylon.com/?affID=120519&babsrc=HP_ss_Btisdt4&mntrId=CA6D70F1A15E3904 -> Aucune action effectuée.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes|bProtectorDefaultScope (PUP.BProtector) -> Données: {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} -> Aucune action effectuée.
HKLM\SYSTEM\CurrentControlSet\Services\BitGuard|ImagePath (PUP.Optional.BitGuard.A) -> Données: C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe -> Aucune action effectuée.

Elément(s) de données du Registre détecté(s): 1
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|AppInit_DLLs (PUP.Optional.PerformerSoft.A) -> Mauvais: (c:\progra~3\bitguard\261673~1.238\{c16c1~1\bitguard.dll) Bon: () -> Aucune action effectuée.

Dossier(s) détecté(s): 10
C:\Users\Gaëlle Baud\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\AppData\Roaming\Delta (PUP.Optional.Delta.A) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\AppData\Roaming\BabSolution (PUP.Optional.BabSolution.A) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\AppData\Roaming\BabSolution\CR (PUP.Optional.BabSolution.A) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\AppData\Roaming\BabSolution\Shared (PUP.Optional.BabSolution.A) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\AppData\Roaming\File Scout (PUP.Optional.FileScout.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1673.238 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8} (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings (PUP.Optional.BitGuard.A) -> Aucune action effectuée.

Fichier(s) détecté(s): 45
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.dll (PUP.Optional.PerformerSoft.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe (PUP.Optional.PerformerSoft.A) -> Aucune action effectuée.
C:\Program Files (x86)\Delta\delta\1.8.16.16\bh\delta.dll (PUP.Optional.Delta) -> Aucune action effectuée.
C:\Program Files (x86)\Delta\delta\1.8.16.16\deltasrv.exe (PUP.Optional.Delta) -> Aucune action effectuée.
C:\Program Files (x86)\Delta\delta\1.8.16.16\deltaTlbr.dll (PUP.Optional.Delta.A) -> Aucune action effectuée.
C:\Program Files (x86)\Delta\delta\1.8.16.16\deltaApp.dll (PUP.Optional.Delta) -> Aucune action effectuée.
C:\Program Files (x86)\Delta\delta\1.8.16.16\deltaEng.dll (PUP.Optional.Delta) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\uninstall.exe (PUP.Optional.PerformerSoft.A) -> Aucune action effectuée.
C:\Users\Gaëlle Administratri\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X7KWBIZR\pack[1].7z (PUP.Optional.PerformerSoft.A) -> Aucune action effectuée.
C:\Users\Gaëlle Administratri\AppData\Local\Temp\589B.tmp (PUP.Babylon.A) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\AppData\Local\Temp\823A.tmp (PUP.Optional.PerformerSoft.A) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\AppData\Local\Temp\setup_fsu_cid.exe (PUP.Optional.FileScout.A) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\AppData\Roaming\BabSolution\Shared\BabMaint.exe (PUP.Optional.Babylon.A) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\AppData\Roaming\File Scout\filescout.exe (PUP.Optional.FileScout.A) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\Downloads\etypesetup.exe (PUP.Optional.Somoto) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\Downloads\iLividSetupV1.exe (PUP.Optional.Bandoo) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\AppData\Roaming\Delta\sqlite3.dll (PUP.Optional.Delta.A) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data (PUP.Optional.BProtector.A) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\AppData\Local\Google\Chrome\User Data\Default\bProtectorPreferences (PUP.Optional.BProtector.A) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage (PUP.Optional.BrowserDefender.A) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\AppData\Roaming\BabSolution\CR\Delta.crx (PUP.Optional.BabSolution.A) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\AppData\Roaming\BabSolution\Shared\BUSolution.dll (PUP.Optional.BabSolution.A) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\AppData\Roaming\BabSolution\Shared\BUSUninstall.exe (PUP.Optional.BabSolution.A) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\AppData\Roaming\BabSolution\Shared\chu.js (PUP.Optional.BabSolution.A) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\AppData\Roaming\BabSolution\Shared\Delta.ico (PUP.Optional.BabSolution.A) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\AppData\Roaming\BabSolution\Shared\GUninstaller.exe (PUP.Optional.BabSolution.A) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\AppData\Roaming\BabSolution\Shared\SetupParams.ini (PUP.Optional.BabSolution.A) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\AppData\Roaming\BabSolution\Shared\sqlite3.dll (PUP.Optional.BabSolution.A) -> Aucune action effectuée.
C:\Users\Gaëlle Baud\AppData\Roaming\File Scout\uninst.exe (PUP.Optional.FileScout.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.settings (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\bl (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\dm (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\00 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\01 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\02 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\03 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\10 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\11 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\12 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\13 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\20 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\21 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\22 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\23 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.

3 réponses

  1.  Malekal_morte- Modérateur
    Salut,

    Télécharge https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= AdwCleaner ( d'Xplode ) sur ton bureau.
    Sur la page d'AdwCleaner, à droite, clic sur la disquette grise avec la flèche verte pour lancer le téléchargement.
    Lance AdwCleaner, clique sur [Scanner].
    Le scan peux durer plusieurs minutes, patienter.
    Une fois le scan terminé, clique sur [Nettoyer]

    Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
    Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.

    Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt
    1. polette1973
      Bonsoir
      j'ai fait ce que tu as dit et ô miracle cela a marché.... mais j'ai l'impression que le système se réinfecte tout seul.....

      Voici le rapport après scan de nettoyage
      il est très long :)
      Merci de tes lumières !

      # AdwCleaner v3.005 - Report created 29/09/2013 at 20:29:48
      # Updated 22/09/2013 by Xplode
      # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
      # Username : Gaëlle Baud - GAGAPC
      # Running from : C:\Users\Gaëlle Baud\Downloads\adwcleaner.exe
      # Option : Clean

      ***** [ Services ] *****

      Service Deleted : BitGuard

      ***** [ Files / Folders ] *****

      Folder Deleted : C:\ProgramData\AVG Secure Search
      Folder Deleted : C:\ProgramData\Babylon
      [!] Folder Deleted : C:\ProgramData\BitGuard
      Folder Deleted : C:\ProgramData\DSearchLink
      Folder Deleted : C:\Program Files (x86)\AVG Secure Search
      Folder Deleted : C:\Program Files (x86)\Conduit
      Folder Deleted : C:\Program Files (x86)\delta
      Folder Deleted : C:\Program Files (x86)\openit
      Folder Deleted : C:\Program Files (x86)\optimizer pro
      Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search
      Folder Deleted : C:\Program Files\DomaIQ Uninstaller
      Folder Deleted : C:\Users\Gaëlle Baud\AppData\Local\AVG Secure Search
      Folder Deleted : C:\Users\Gaëlle Baud\AppData\Local\Supreme Savings
      Folder Deleted : C:\Users\Gaëlle Baud\AppData\LocalLow\AVG Secure Search
      Folder Deleted : C:\Users\Gaëlle Baud\AppData\LocalLow\Conduit
      Folder Deleted : C:\Users\Gaëlle Baud\AppData\LocalLow\delta
      Folder Deleted : C:\Users\Gaëlle Baud\AppData\LocalLow\PriceGong
      Folder Deleted : C:\Users\Gaëlle Baud\AppData\LocalLow\ShopperReports3
      Folder Deleted : C:\Users\Gaëlle Baud\AppData\Roaming\BabSolution
      Folder Deleted : C:\Users\Gaëlle Baud\AppData\Roaming\Babylon
      Folder Deleted : C:\Users\Gaëlle Baud\AppData\Roaming\delta
      Folder Deleted : C:\Users\Gaëlle Baud\AppData\Roaming\file scout
      Folder Deleted : C:\Users\Gaëlle Baud\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
      Folder Deleted : C:\Users\Gaëlle Administratri\AppData\Local\AVG Secure Search
      Folder Deleted : C:\Users\Gaëlle Administratri\AppData\LocalLow\AVG Secure Search
      Folder Deleted : C:\Users\Gaëlle Administratri\AppData\LocalLow\Conduit
      Folder Deleted : C:\Users\Gaëlle Administratri\AppData\LocalLow\PriceGong
      Folder Deleted : C:\Users\Gaëlle Administratri\AppData\LocalLow\ShopperReports3
      Folder Deleted : C:\Users\Gaëlle Baud\AppData\Roaming\Mozilla\Firefox\Profiles\rbxwo15y.default\Conduit
      Folder Deleted : C:\Users\Gaëlle Baud\AppData\Roaming\Mozilla\Firefox\Profiles\rbxwo15y.default\ConduitCommon
      Folder Deleted : C:\Users\Gaëlle Baud\AppData\Roaming\Mozilla\Firefox\Profiles\rbxwo15y.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
      Folder Deleted : C:\Users\Gaëlle Baud\AppData\Roaming\Mozilla\Firefox\Profiles\rbxwo15y.default\Extensions\Avg@toolbar
      Folder Deleted : C:\Users\Gaëlle Baud\AppData\Roaming\Mozilla\Firefox\Profiles\rbxwo15y.default\Extensions\ffxtlbr@babylon.com
      Folder Deleted : C:\Users\Gaëlle Baud\AppData\Roaming\Mozilla\Firefox\Profiles\rbxwo15y.default\Extensions\ffxtlbr@delta.com
      File Deleted : C:\Users\Public\Desktop\Open It!.lnk
      File Deleted : C:\Users\Gaëlle Baud\AppData\Roaming\Mozilla\Firefox\Profiles\rbxwo15y.default\\invalidprefs.js
      File Deleted : C:\Users\Gaëlle Baud\AppData\Roaming\Mozilla\Firefox\Profiles\rbxwo15y.default\bProtector_extensions.rdf
      File Deleted : C:\Users\Gaëlle Baud\AppData\Roaming\Mozilla\Firefox\Profiles\rbxwo15y.default\bprotector_extensions.sqlite
      File Deleted : C:\Users\Gaëlle Administratri\AppData\Roaming\Mozilla\Firefox\Profiles\eqpn6ekw.default\bprotector_extensions.sqlite
      File Deleted : C:\Users\Gaëlle Baud\AppData\Roaming\Mozilla\Firefox\Profiles\rbxwo15y.default\bprotector_prefs.js
      File Deleted : C:\Users\Gaëlle Administratri\AppData\Roaming\Mozilla\Firefox\Profiles\eqpn6ekw.default\bprotector_prefs.js
      File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg-secure-search.xml
      File Deleted : C:\Users\Gaëlle Baud\AppData\Roaming\Mozilla\Firefox\Profiles\rbxwo15y.default\searchplugins\Babylon.xml
      File Deleted : C:\Users\Gaëlle Administratri\AppData\Roaming\Mozilla\Firefox\Profiles\eqpn6ekw.default\searchplugins\Babylon.xml
      File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\Babylon.xml
      File Deleted : C:\Users\Gaëlle Baud\AppData\Roaming\Mozilla\Firefox\Profiles\rbxwo15y.default\searchplugins\BrowserProtect.xml
      File Deleted : C:\Users\Gaëlle Baud\AppData\Roaming\Mozilla\Firefox\Profiles\rbxwo15y.default\searchplugins\Conduit.xml
      File Deleted : C:\Users\Gaëlle Baud\AppData\Roaming\Mozilla\Firefox\Profiles\rbxwo15y.default\searchplugins\delta.xml
      File Deleted : C:\Users\Gaëlle Baud\AppData\Roaming\Mozilla\Firefox\Profiles\rbxwo15y.default\user.js
      File Deleted : C:\Users\Gaëlle Baud\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
      File Deleted : C:\Users\Gaëlle Baud\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
      File Deleted : C:\Users\Gaëlle Baud\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage
      File Deleted : C:\Windows\System32\Tasks\BitGuard
      File Deleted : C:\Windows\System32\Tasks\EPUpdater

      ***** [ Shortcuts ] *****

      ***** [ Registry ] *****

      Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
      Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
      Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
      Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
      Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
      Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
      Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
      Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
      Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
      Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
      Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaappCore
      Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaappCore.1
      Key Deleted : HKLM\SOFTWARE\Classes\delta.deltadskBnd
      Key Deleted : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1
      Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaHlpr
      Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaHlpr.1
      Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane
      Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
      Key Deleted : HKLM\SOFTWARE\Classes\esrv.deltaESrvc
      Key Deleted : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1
      Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
      Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
      Key Deleted : HKLM\SOFTWARE\Classes\S
      Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
      Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
      Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
      Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
      Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ClickPotatoLiteSA_RASAPI32
      Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ClickPotatoLiteSA_RASMANCS
      Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
      Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
      Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
      Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
      Key Deleted : HKCU\Software\857d88de23ae941
      Key Deleted : HKLM\SOFTWARE\857d88de23ae941
      Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2077543
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{453DB0C5-F41C-4D97-8DD6-CC72ECD5F699}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4AFC07D0-59BB-46B8-B097-1A46E88EEF71}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{618AAD04-921F-44C2-BE38-C0818AF69861}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6511CE4C-4722-40D0-AD3D-4AFA2F50978A}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{83B2FE06-BA20-4F7D-96C6-6FC3A4E877D3}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9BEC9B38-BF39-4899-806E-A1C5DFEB60A2}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AEBF09E2-0C15-43C8-99BF-928C645D98A0}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B32966A2-F7C2-4362-A6CF-399EC8B44110}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B5D2ED96-62F9-4C2C-956D-E425B1F67337}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B86D82BF-D39F-439A-A07C-43EDDC6F6EA6}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D3A412E8-1E4B-47D2-9B12-F88291F5AFBB}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DA6305B9-0869-4235-8C1D-533A65E639E5}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E6961C59-CFCE-4CCD-B794-BC78DB98413A}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F8B4EC8A-2407-4BE0-AEE2-0F430D65A90D}
      Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
      Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}
      Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}
      Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
      Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
      Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
      Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
      Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{100EB1FD-D03E-47FD-81F3-EE91287F9465}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{31111111-1111-1111-1111-110111991162}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
      Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
      Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
      Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
      Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{82E1477C-B154-48D3-9891-33D83C26BCD3}]
      Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
      Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
      Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
      Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
      Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
      Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
      Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
      Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
      Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
      Key Deleted : HKCU\Software\AVG Secure Search
      Key Deleted : HKCU\Software\BabSolution
      Key Deleted : HKCU\Software\Conduit
      Key Deleted : HKCU\Software\DataMngr
      [#] Key Deleted : HKCU\Software\DataMngr_Toolbar
      Key Deleted : HKCU\Software\Delta
      Key Deleted : HKCU\Software\InstallCore
      Key Deleted : HKCU\Software\YahooPartnerToolbar
      Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
      Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
      Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
      Key Deleted : HKCU\Software\AppDataLow\Software\ShopperReports3
      Key Deleted : HKLM\Software\AVG Secure Search
      Key Deleted : HKLM\Software\AVG Security Toolbar
      Key Deleted : HKLM\Software\Babylon
      Key Deleted : HKLM\Software\Conduit
      Key Deleted : HKLM\Software\DataMngr
      Key Deleted : HKLM\Software\Delta
      Key Deleted : HKLM\Software\Supreme Savings
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DomaIQ Uninstaller
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OpenIt Open It!
      Key Deleted : [x64] HKLM\SOFTWARE\DomaIQ

      ***** [ Browsers ] *****

      -\\ Internet Explorer v10.0.9200.16686

      -\\ Mozilla Firefox v23.0.1 (fr)

      [ File : C:\Users\Gaëlle Baud\AppData\Roaming\Mozilla\Firefox\Profiles\rbxwo15y.default\prefs.js ]

      Line Deleted : user_pref("avg.install.userSPSettings", "Delta Search");
      Line Deleted : user_pref("browser.search.defaultenginename", "Delta Search");
      Line Deleted : user_pref("browser.search.defaultthis.engineName", "ToggleEN Customized Web Search");
      Line Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2077543&SearchSource=3&q={searchTerms}");
      Line Deleted : user_pref("browser.search.order.1", "Delta Search");
      Line Deleted : user_pref("browser.search.selectedEngine", "Delta Search");
      Line Deleted : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Mon Mar 28 2011 16:33:35 GMT+0200 (Romance Daylight Time)");
      Line Deleted : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
      Line Deleted : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Thu Jun 30 2011 10:14:52 GMT+0200 (Romance Daylight Time)");
      Line Deleted : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
      Line Deleted : user_pref("CommunityToolbar.alert.locale", "en");
      Line Deleted : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
      Line Deleted : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Thu Jun 30 2011 18:49:04 GMT+0200 (Romance Daylight Time)");
      Line Deleted : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
      Line Deleted : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
      Line Deleted : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
      Line Deleted : user_pref("CommunityToolbar.alert.showTrayIcon", false);
      Line Deleted : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
      Line Deleted : user_pref("CommunityToolbar.alert.userId", "d5121f66-3bb9-4225-a519-b0a8dfba0233");
      Line Deleted : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2077543&SearchSource=13,hxxp://search.conduit.com/?ctid=CT2077543&SearchSource=13,hxxp://search.conduit.com/?ctid=[...]
      Line Deleted : user_pref("CommunityToolbar.ConduitSearchList", "ToggleEN Customized Web Search,ToggleEN Customized Web Search,ToggleEN Customized Web Search");
      Line Deleted : user_pref("CommunityToolbar.EngineOwner", "");
      Line Deleted : user_pref("CommunityToolbar.EngineOwnerGuid", "{038cb5c7-48ea-4af9-94e0-a1646542e62b}");
      Line Deleted : user_pref("CommunityToolbar.EngineOwnerToolbarId", "toggleen");
      Line Deleted : user_pref("extensions.delta.admin", false);
      Line Deleted : user_pref("extensions.delta.aflt", "babsst");
      Line Deleted : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
      Line Deleted : user_pref("extensions.delta.autoRvrt", "false");
      Line Deleted : user_pref("extensions.delta.dfltLng", "en");
      Line Deleted : user_pref("extensions.delta.excTlbr", false);
      Line Deleted : user_pref("extensions.delta.ffxUnstlRst", true);
      Line Deleted : user_pref("extensions.delta.id", "ca6df65000000000000070f1a15e3904");
      Line Deleted : user_pref("extensions.delta.instlDay", "15816");
      Line Deleted : user_pref("extensions.delta.instlRef", "sst");
      Line Deleted : user_pref("extensions.delta.newTab", false);
      Line Deleted : user_pref("extensions.delta.prdct", "delta");
      Line Deleted : user_pref("extensions.delta.prtnrId", "delta");
      Line Deleted : user_pref("extensions.delta.rvrt", "false");
      Line Deleted : user_pref("extensions.delta.smplGrp", "none");
      Line Deleted : user_pref("extensions.delta.tlbrId", "base");
      Line Deleted : user_pref("extensions.delta.tlbrSrchUrl", "");
      Line Deleted : user_pref("extensions.delta.vrsn", "1.8.16.16");
      Line Deleted : user_pref("extensions.delta.vrsni", "1.8.16.16");
      Line Deleted : user_pref("extensions.delta.vrsnTs", "1.8.16.1621:48:32");

      [ File : C:\Users\Gaëlle Administratri\AppData\Roaming\Mozilla\Firefox\Profiles\eqpn6ekw.default\prefs.js ]

      Line Deleted : user_pref("browser.newtab.url", "hxxp://www1.delta-search.com/?affID=120519&babsrc=NT_ss&mntrId=CA6D70F1A15E3904");
      Line Deleted : user_pref("browser.search.defaultenginename", "Delta Search");
      Line Deleted : user_pref("browser.search.order.1", "Delta Search");
      Line Deleted : user_pref("browser.search.selectedEngine", "Delta Search");

      -\\ Google Chrome v

      [ File : C:\Users\Gaëlle Baud\AppData\Local\Google\Chrome\User Data\Default\preferences ]

      *************************

      AdwCleaner[R0].txt - [24323 octets] - [29/09/2013 20:28:23]
      AdwCleaner[S0].txt - [24165 octets] - [29/09/2013 20:29:48]

      ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2
      1. Malekal_morte- Modérateur
        Faire un scan OTL pour diagnostiquer les programmes qui tournent et déceler des infections - Le programme va générer deux rapports OTL.txt et Extras.txt
        Fournir les deux rapports :

        Tu peux suivre les indications de cette page pour t'aider : https://www.malekal.com/tutorial-otl/

        * Télécharge http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ sur ton bureau.
        (Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur)

        Dans le cas d'Avast!, ne pas lancer le programme dans la Sandbox (voir lien d'aide ci-dessus).

        * Lance OTL
        * En haut à droite de Analyse rapide, coche "tous les utilisateurs"
        * Sur OTL, sous Personnalisation, copie-colle le script ci-dessous :

        netsvcs
        msconfig
        safebootminimal
        safebootnetwork
        activex
        drivers32
        %ALLUSERSPROFILE%\Application Data\*.
        %ALLUSERSPROFILE%\Application Data\*.exe /s
        %APPDATA%\*.
        %APPDATA%\*.exe /s
        %temp%\*.exe /s
        %SYSTEMDRIVE%\*.exe
        %systemroot%\*. /mp /s
        %systemroot%\system32\consrv.dll
        %systemroot%\system32\*.dll /lockedfiles
        %windir%\Tasks\*.job /lockedfiles
        %systemroot%\system32\drivers\*.sys /lockedfiles
        %systemroot%\System32\config\*.sav
        /md5start
        explorer.exe
        winlogon.exe
        services.exe
        wininit.exe
        /md5stop
        HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32 /s
        HKEY_LOCAL_MACHINE\SYSTEM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /s
        HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s
        HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls /s
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList /s
        HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor /s
        HKEY_CURRENT_USER\Software\Microsoft\Command Processor /s
        CREATERESTOREPOINT
        nslookup https://www.google.fr/?gws_rd=ssl /c
        SAVEMBR:0
        hklm\software\clients\startmenuinternet|command /rs
        hklm\software\clients\startmenuinternet|command /64 /rs

        * Clique sur le bouton Analyse.

        * Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer le rapport OTL.txt (et Extra.txt si présent).
        Donne le ou les liens pjjoint qui pointent vers ces rapports ici dans une réponse.
        Je répète : donne le lien du rapport pjjoint ici en réponse.

        NE PAS COPIER/COLLER LE RAPPORT ICI - DONNER LE LIEN PJJOINT DANS UN NOUVEAU MESSAGE

        Discussions similaires

        Site de confiance ou non ?
        mlle_so

        25 réponses
        Supprimer l'historique de commandes et d'achats sur Amazon
        Matthew5

        25 réponses
        Commande en ligne : paiement validé mais commande non confirmé
        Davazn

        12 réponses
        Masquer une commande amazon
        Akim

        4 réponses
        commande en cours de validation ?
        KiwiGigantesque45

        2 réponses