Virus aidez moi s il vous plait Résolu/Fermé

Question

Bonjour, 

Bonjour, lorsque je l'allume mon ordi il met des mises à jour qui traine en longueur et lorsque que je finis par l éteindre pour le rallumer une fenêtre en anglais avec marquer system recovery options me bloque 
Mon fils jouant  et téléchargeant des jeux je me demande si mon ordi n à pas attrapé un virus ! Pourriez vous m aider en sachant que je suis vraiment débutante en informatique ! Merci beaucoup



Configuration: iPad / Safari 7.0

Configuration: iPad / Safari 7.0

kaori64 · Answer

Pour info l'ordi est un Pc Windows 7

Marou81 · Answer

Bonjour,


Bienvenue sur CCM !
Nous allons essayer de régler ton problème ensemble. D'abord, quelques rappels :

&#x25B6 N'ouvre pas d'autres sujets pour le même problème (que ce soit sur ce forum ou sur un autre)
&#x25B6 N'hésite pas à poser des questions en cas de besoin ;)
&#x25B6 Sois patient(e) quand tu postes un message, je ne réponds pas instantanément : je suis bénévole et je ne suis pas en permanence devant mon ordinateur. Mais rassure toi, je ne laisse jamais tomber personne ;)
&#x25B6 La désinfection (si nécessaire) va se dérouler en plusieurs étapes. Même si les symptômes de l'infection disparaissent, la désinfection ne sera terminée que quand je te le confirmerai --> Merci de revenir jusqu'au bout, sinon ce qu'on a fait n'aura servi à rien.


Commence par utiliser ce logiciel de diagnostic, ça me permettra de t'aider :

&#x25B6 Télécharge ZHPDiag (de Nicolas Coolman)
&#x25B6 Lance le (si tu es sous Windows Vista ou Windows 7, fais le par un clic-droit --> Exécuter en temps qu'administrateur)
&#x25B6 Laisse toi guider lors de l'installation (pense à cocher la case pour créer un raccourci sur le Bureau). Il se lancera automatiquement à la fin de l'installation.
&#x25B6 Vérifie si tu trouves une icône "UAC" en haut à droite de ZHPDiag : si c'est le cas clique dessus, sinon passe à l'étape suivante.
&#x25B6 Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
&#x25B6 Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
&#x25B6 Rends toi sur ce site, clique sur "Parcourir", sélectionne le rapport de ZHPDiag et clique sur Envoyer le fichier. Patiente pendant l'envoi du fichier, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum.

kaori64 · Answer

mille merci pour ton aide
voila le rapport
j'ai fais un copier coller et ensuite j'ai envoyé car en faisant parcourir il ne me le prenais pas
voici le lien donné après l'envoie
https://pjjoint.malekal.com/files.php?id=ZHPDiag_20131217_l15w11y10z13b7

Marou81 · Answer

Bonsoir,

Beaucoup de choses à retirer à ce que je vois.

Utilise cet outil de désinfection spécifique aux logiciels publicitaires : 

&#x25B6 Télécharge AdwCleaner (de Xplode) sur ton Bureau.
&#x25B6 Lance le, clique sur Suppression puis patiente le temps du scan.
&#x25B6 Une fois la suppression terminée, un message de prévention va s'afficher, je te conseille de le lire attentivement (n'hésite pas à me poser des questions si tu n'as pas compris certaines choses dans ce message).
&#x25B6 Ensuite, le rapport s'ouvrira : poste le dans ta prochaine réponse. 

Puis utilise JRT : http://www.bleepingcomputer.com/download/junkware-removal-tool 
Lance le programme puis appuie sur une touche.
Laisse l'outil travailler et envoie moi rapport.

Enfin Utilise ce logiciel de désinfection généraliste :

&#x25B6 Télécharge et installe Malwarebytes' Anti-Malware
&#x25B6 A la fin de l'installation, veille à ce que l'option « mettre a jour Malwarebyte's Anti-Malware » soit cochée. Par contre, il n'est pas nécessaire d'activer l'essai gratuit pour la protection.
&#x25B6 Lance MBAM et laisse les Mises à jour se télécharger (sinon fais les manuellement au lancement du programme)
&#x25B6 Puis va dans l'onglet "Recherche", coche "Exécuter un examen complet" puis "Rechercher"
&#x25B6 Sélectionne tes disques durs puis clique sur "Lancer l'examen" 
&#x25B6 A la fin de l'analyse, clique sur Afficher les résultats
&#x25B6 Coche tous les éléments  détectés puis clique sur Supprimer la sélection
&#x25B6 S'il t'est demandé de redémarrer l'ordinateur, accepte.
&#x25B6 Poste dans ta prochaine réponse le rapport apparaissant après la suppression.
 
Reposte à nouveau un rapport ZHPDiag quand tout sera fait. A+

kaori64 · Answer

bonsoir Marou81 
j'ai bien lu le message mais c'est mon beau fils de 13 ans qui est fan de jeux de guerre et qui utilise mon ordi pour télécharger des jeux ou jouer en ligne qui devrait le lire!!!lol
voila le premier rapport
# AdwCleaner v3.015 - Rapport créé le 17/12/2013 à 19:51:30
# Mis à jour le 10/12/2013 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : OLIVIER - OLIVIER-PC
# Exécuté depuis : C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CR7JDI66\adwcleaner.exe
# Option : Nettoyer

***** [ Services ] *****


***** [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\ProgramData\Babylon
Dossier Supprimé : C:\ProgramData\BonanzaDealsLive
Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
Dossier Supprimé : C:\Program Files (x86)\BonanzaDeals
Dossier Supprimé : C:\Program Files (x86)\BonanzaDealsLive
Dossier Supprimé : C:\Program Files (x86)\Conduit
Dossier Supprimé : C:\Program Files (x86)\myfree codec
Dossier Supprimé : C:\Program Files (x86)\MyPC Backup
Dossier Supprimé : C:\Program Files (x86)\PC Speed Maximizer
Dossier Supprimé : C:\Program Files (x86)\Vuze_Remote
Dossier Supprimé : C:\Program Files (x86)\Vuze
Dossier Supprimé : C:\Users\OLIVIER\AppData\Local\BonanzaDealsLive
Dossier Supprimé : C:\Users\OLIVIER\AppData\Local\PackageAware
Dossier Supprimé : C:\Users\OLIVIER\AppData\Local	orch
Dossier Supprimé : C:\Users\OLIVIER\AppData\LocalLow\Conduit
Dossier Supprimé : C:\Users\OLIVIER\AppData\LocalLow\Delta
Dossier Supprimé : C:\Users\OLIVIER\AppData\LocalLow\Vuze_Remote
Dossier Supprimé : C:\Users\OLIVIER\AppData\Roaming\BabSolution
Dossier Supprimé : C:\Users\OLIVIER\AppData\Roaming\Babylon
Dossier Supprimé : C:\Users\OLIVIER\AppData\Roaming\file scout
Dossier Supprimé : C:\Users\OLIVIER\AppData\Roaming\Mysearchdial
Dossier Supprimé : C:\Users\OLIVIER\AppData\Roaming\Systweak
Dossier Supprimé : C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
Dossier Supprimé : C:\Users\OLIVIER\Documents\PC Speed Maximizer
Fichier Supprimé : C:\Windows\System32oboot64.exe
Fichier Supprimé : C:\Users\OLIVIER\AppData\Local\mysearchdial-speeddial.crx
Fichier Supprimé : C:\Users\OLIVIER\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pflphaooapbgpeakohlggbpidpppgdff_0.localstorage
Fichier Supprimé : C:\Windows\Tasks\MySearchDial.job
Fichier Supprimé : C:\Windows\System32\Tasks\MySearchDial

***** [ Raccourcis ] *****


***** [ Registre ] *****

Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Clé Supprimée : HKCU\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Clé Supprimée : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Clé Supprimée : HKLM\SOFTWARE\Classes\*\shell\filescout
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\BrowserConnection.dll
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\DiscoveryHelper.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\GIFAnimator.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\IMTrProgress.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\IMWeb.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\WMHelper.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\BrowserConnection.Loader
Clé Supprimée : HKLM\SOFTWARE\Classes\BrowserConnection.Loader.1
Clé Supprimée : HKLM\SOFTWARE\Classes\DiscoveryHelper.iMesh6Discovery
Clé Supprimée : HKLM\SOFTWARE\Classes\DiscoveryHelper.iMesh6Discovery.1
Clé Supprimée : HKLM\SOFTWARE\Classes\imweb.imwebcontrol
Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
Clé Supprimée : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Clé Supprimée : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\updateBatBrowse_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\updateBatBrowse_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BonanzaDealsLive.exe
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [DataMngr]
Clé Supprimée : HKCU\Software\808cdebc3eec49
Clé Supprimée : HKLM\SOFTWARE\808cdebc3eec49
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT2504091
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{1FC41815-FA4C-4F8B-B143-2C045C8EA2FC}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{21493C1F-D071-496A-9C27-450578888291}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{403A885F-CB00-40C1-BDC1-EB09053194F7}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{55C1727F-5535-4C2A-9601-8C2458608B48}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{756C097C-6BDB-45DE-A8F1-83E01AB86BA4}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{A7DDCBDE-5C86-415C-8A37-763AE183E7E4}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{2656B92B-0207-4AFB-BEBF-F5FD231ECD39}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{27BF8F8D-58B8-D41C-F913-B7EEB57EF6F6}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{34CB0620-E343-4772-BBA8-D3074BC47516}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{412CD209-DDA4-4275-8C79-55F1C93FBD47}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{59570C1F-B692-48C9-91B4-7809E6945287}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{63A0F7FA-2C95-4D7E-AF25-EFCC303D20A1}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{6559E502-6EE1-46B8-A83C-F3A45BDA23EE}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A2858A72-758F-4486-B6A1-7F1DCC0924FA}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{B6F8DA9F-2696-419E-A8A3-19BE41EF51BD}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{B939CF93-F2CB-443D-956C-DC523D85C9DB}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{BA14329E-9550-4989-B3F2-9732E92D17CC}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C63CA8A4-AB4E-49E5-A6C0-33FC86D80205}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C6A7847E-8931-4A9A-B4EF-72A91E3CCF4D}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{DD0F1D24-E250-4E93-966C-65615720AEFB}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EC1277BB-1C71-4C0D-BA6D-BFEA16E773A6}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{30344103-727C-4AB4-A467-7768A3F0C5BF}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5E8CD073-21DF-4117-9BBD-D03C45D36CAE}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B37B4BA6-334E-72C1-B57E-6AFE8F8A5AF3}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B77AD4AC-C1C2-B293-7737-71E13A11FFEA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{CA1CE38C-F04C-471F-B9F3-083C58165C10}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E773F2CF-5E6E-FF2B-81A1-AC581A26B2B2}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{252C2315-CCE0-4446-8DA7-C00292A690BA}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{403A885F-CB00-40C1-BDC1-EB09053194F7}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{55C1727F-5535-4C2A-9601-8C2458608B48}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{96F7FABC-5789-EFA4-B6ED-1272F4C1D27B}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{C4C4F1F4-3074-4CB6-9FB8-0A64273166F0}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B939CF93-F2CB-443D-956C-DC523D85C9DB}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA14329E-9550-4989-B3F2-9732E92D17CC}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B939CF93-F2CB-443D-956C-DC523D85C9DB}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA14329E-9550-4989-B3F2-9732E92D17CC}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30344103-727C-4AB4-A467-7768A3F0C5BF}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B939CF93-F2CB-443D-956C-DC523D85C9DB}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BA14329E-9550-4989-B3F2-9732E92D17CC}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{872F3C0B-4462-424C-BB9F-74C6899B9F92}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B6F8DA9F-2696-419E-A8A3-19BE41EF51BD}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{30344103-727C-4AB4-A467-7768A3F0C5BF}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\59a3bad5-456d-4cad-a01c-436f72a7eda2
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{BA14329E-9550-4989-B3F2-9732E92D17CC}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{BA14329E-9550-4989-B3F2-9732E92D17CC}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{BA14329E-9550-4989-B3F2-9732E92D17CC}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{BA14329E-9550-4989-B3F2-9732E92D17CC}]
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{B939CF93-F2CB-443D-956C-DC523D85C9DB}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{5E8CD073-21DF-4117-9BBD-D03C45D36CAE}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{88CCA982-C030-4B27-8FBC-201189970FDE}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{B37B4BA6-334E-72C1-B57E-6AFE8F8A5AF3}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{B77AD4AC-C1C2-B293-7737-71E13A11FFEA}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{CA1CE38C-F04C-471F-B9F3-083C58165C10}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{E773F2CF-5E6E-FF2B-81A1-AC581A26B2B2}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B939CF93-F2CB-443D-956C-DC523D85C9DB}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}
Clé Supprimée : HKCU\Software\APN DTX
Clé Supprimée : HKCU\Software\BabSolution
Clé Supprimée : HKCU\Software\BabylonToolbar
Clé Supprimée : HKCU\Software\BonanzaDealsLive
Clé Supprimée : HKCU\Software\Conduit
Clé Supprimée : HKCU\Software\DataMngr
[#] Clé Supprimée : HKCU\Software\DataMngr_Toolbar
Clé Supprimée : HKCU\Software\filescout
Clé Supprimée : HKCU\Software\InstallCore
Clé Supprimée : HKCU\Software\Myfree Codec
Clé Supprimée : HKCU\Software\Softonic
Clé Supprimée : HKCU\Software	orch
Clé Supprimée : HKCU\Software\Vittalia
Clé Supprimée : HKCU\Software\YahooPartnerToolbar
Clé Supprimée : HKCU\Software\AppDataLow\Toolbar
Clé Supprimée : HKCU\Software\AppDataLow\Software\Conduit
Clé Supprimée : HKCU\Software\AppDataLow\Software\Vuze_Remote
Clé Supprimée : HKLM\Software\Babylon
Clé Supprimée : HKLM\Software\BonanzaDealsLive
Clé Supprimée : HKLM\Software\Conduit
Clé Supprimée : HKLM\Software\DataMngr
Clé Supprimée : HKLM\Software\Myfree Codec
Clé Supprimée : HKLM\Software\systweak
Clé Supprimée : HKLM\Software	orch
Clé Supprimée : HKLM\Software\Vuze_Remote
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Search Results Toolbar
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Vuze_Remote Toolbar
Clé Supprimée : [x64] HKLM\SOFTWARE\DataMngr
Donnée Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\BEARSH~1\Mediabar\Datamngr\x64\datamngr.dll
Donnée Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\BEARSH~1\Mediabar\Datamngr\x64\IEBHO.dll

***** [ Navigateurs ] *****

-\ Internet Explorer v10.0.9200.16736

Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]
Paramètre Restauré : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

*************************

AdwCleaner[R0].txt - [18475 octets] - [17/12/2013 19:49:07]
AdwCleaner[S0].txt - [15841 octets] - [17/12/2013 19:51:30]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [15902 octets] ##########

Marou81 · Answer

Bonsoir,

Me manque le rapport avec Junk Removal Tool (JRT) et le rapport MalwareBytes.

Merci de me les poster.

Bonne soirée

kaori64 · Answer

Marou81 bonjour
En faite lorsque j'ai voulu télécharger JRT j'ai télécharger carrément autre autre chose et je me suis retrouvé avec des tas de " merde" veuillez m'excuser du langage mais je commence à saturer contre l'informatique et pourtant je sais " en général " déjouer les pièges ! 
Bref j'ai du tout enlever et nettoyer je fais des ce matin le JRT en espérant télécharger le bon logiciel! Et je vous envoie le  Rapport. Merci pour votre patience! Et veuillez m'excuser :(

kaori64 · Answer

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by OLIVIER on 18/12/2013 at  7:05:03,53
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully stopped: [Service] isafekrnl 
Successfully deleted: [Service] isafekrnl 
Successfully stopped: [Service] isafeservice 
Successfully deleted: [Service] isafeservice 



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\{6e47d688-85ec-465a-9946-ec58220f14fc}



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\dynconie
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2412809502-3528070081-3099643911-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\isafe
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing	orchsetupfull_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing	orchsetupfull_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6e47d688-85ec-465a-9946-ec58220f14fc}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{6e47d688-85ec-465a-9946-ec58220f14fc}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6e47d688-85ec-465a-9946-ec58220f14fc}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\OLIVIER\AppData\Roaming\isafe"
Successfully deleted: [Folder] "C:\Users\OLIVIER\appdata\locallow\datamngr"
Failed to delete: [Folder] "C:\Program Files (x86)\bearshare applications"
Failed to delete: [Folder] "C:\Program Files (x86)\isafe"
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{0058B1A3-F594-4C57-94D6-143FE51CF1C1}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{01CDD472-7A47-400A-B6FE-29049C01BE68}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{0207A8A0-05DA-4C10-9593-1571F20A9F7D}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{0297132A-3D58-4603-B9A9-625C52BA7BED}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{02B68318-0D08-4028-9932-7DFCE3DEE88D}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{02C82B0C-04B0-45AF-82C7-CB78F850E7C0}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{03A5549D-C628-4130-860A-7DB28F2E10C2}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{03DC4935-758D-4C1A-8536-83B66ACA88DF}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{0705B025-C63B-4D5F-BCD8-2DF730A52D3E}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{07189563-F059-4A75-80FC-554C46A512B0}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{0AF75C85-B1E0-49B7-8720-013C4DA53F9F}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{0C1074F8-6538-43FB-92EC-4EE9D4A671AB}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{0E723C47-EE18-4121-92EE-DF6DAD690F0A}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{1066E753-8868-47FF-823B-B383C122C8C8}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{10BCA8F4-81B4-4A57-BB28-AB2C334C41CD}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{111FBE43-1CC8-4F9C-B397-9304EC244A4F}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{123050BC-98E2-44FB-BC2F-6C1E7125D86A}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{12AF8CB2-AA43-4965-9C44-A5DEE5F962DE}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{136E6889-3C0B-4E27-8766-4B8440ECA51E}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{15509689-D4B1-4591-847B-AFC9E7F62C7B}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{163EEB0A-1315-410D-AAB7-507E19C2D055}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{17D8463C-01E3-4A87-B676-9D14DFE97A66}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{198CAF62-A428-4DD0-912D-441D2FFB5099}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{1A9936AC-67BD-4E0D-BAEB-653D15DE3426}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{1CF26AB5-E1B9-4000-AF38-DAF27F878A96}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{1D5A14FF-2982-45C4-97EF-5669E59C6CE7}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{1D5BD3DB-3000-4E01-BB95-E23E250887C7}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{1E020E3F-246C-46F3-B420-3B4D2FEA8835}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{1E1EBC32-2DA1-46EE-80A2-2E733A45E25F}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{1ED6CF36-4438-47BD-8BBF-C48A4A3D62B0}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{1EE0AE78-3A57-40C5-85D1-860EAAB98D55}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{20242948-D90F-4A27-B2C7-0ABE1EB0995F}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{210D770E-87EC-44AD-8C64-3D236A4A5CDC}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{23769E46-8E73-4DF4-9D65-89CD23EFFF29}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{23F8881E-9ED6-4CB8-ADB4-53C47ACBCFE2}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{241EB2FD-F315-496E-B26A-71EB69FD1AC3}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{281C0D8F-6FF1-43F3-B637-517E4828A300}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{28E5516E-E2E4-41AC-B59C-D9B1EECA185C}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{2983579B-9F9C-4056-B931-53C6A1DA4A82}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{2AB7D144-8A4B-4692-802D-80B6369B9C04}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{2F8FF237-3DD4-4B84-B04F-1F2992498654}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{306D6654-5604-4949-A894-403B648A6BB4}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{31190C30-5FAE-4F61-855E-E88BC6556946}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{3123D36D-B933-4BD6-9FE2-BAE06CB6B21D}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{32CB87B0-BDC3-4D04-ACDF-8FE704779634}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{32D382CA-CCFB-44B7-B5C2-71757ABFD32F}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{330863B5-BA4F-466F-8521-78CFB3ADCF0F}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{3319E9F7-D09C-4173-B35C-3F4148EE8610}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{35D0D3E1-7F1A-44D4-9D96-A9F5A4C765E5}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{37936DFB-F156-4B74-B121-04B521D3DC41}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{3E07A18A-BF7F-4113-B202-1515174D75EE}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{3EECB20C-D317-4112-8626-A68C6DC9A3C8}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{3F145E59-B02E-4880-9928-56AD0FBE59DE}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{3F27BFCF-0855-4809-AFF4-B94D69BFF969}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{408337F5-34F1-434E-B45C-7A361C78BD05}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{437108FF-E97F-466A-830B-F607C3218581}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{443974AB-4EB9-45A0-B530-C5BDE5D75E60}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{49C6F347-BCD5-4C48-9E5E-1C93E710397F}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{4B24997F-E506-4128-ABD6-0CCF05880411}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{4B97F8D1-AE3D-4785-8098-7BB4E86E86BA}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{4C781FA4-833A-49F5-A7D2-F02422B5F439}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{4D0D87C2-3D65-49E6-BDA5-D5767F817CD2}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{4D1A4EB5-0683-45A5-A539-294807E9C832}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{51E07EB8-57C1-43F3-A84C-9E70AB814D93}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{562E689F-3511-4653-B1DA-C3DF11116670}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{57AC5F5E-5B86-48DA-8865-FE2D26C58B79}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{58CAF411-B79D-4DC5-86AE-94A069933D58}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{5D38FC87-0C53-435E-8D53-90865BDB5939}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{5DC6413F-C017-4973-A4DC-9678248CBF54}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{5DC8EC76-8C17-47AB-A79D-E7E5204DE890}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{5E2948E8-4124-4589-A299-E35CC51B039E}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{606A36C9-105A-4238-866A-67131509246A}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{60F289B5-7881-42DF-8299-50301068A4EB}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{638E901E-5D48-4D1B-97C4-6E6B6065F4C6}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{65448391-C710-4B1F-B9AD-2170E88E90BA}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{65DAD74F-B258-464E-8298-4CB9D291BD1A}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{66FC14B4-5996-42ED-BBFB-5CF9D8D49587}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{671A742A-014D-4BE3-BCC5-597B7FD725CC}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{679E033D-C420-455D-ACA7-23A81CB4B2CC}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{684B6E14-7326-4324-8388-B021E3483B33}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{69C86ABA-3DA8-4F82-B1AD-663B78DDC67E}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{6CE4A776-D84D-428C-A687-DB7E20291FAF}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{6D14115B-D598-4863-AC80-14A59D43F78F}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{6D4CC943-7F5F-4807-8228-A0D5FCBCDC72}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{6D5C69B6-EF3D-48B7-B638-E4FFC935B7C1}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{6D77F145-C187-4D01-9DB4-3CFF83361089}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{71EECE90-A894-4F68-8EEF-3AFBC435ED11}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{72392D03-FF9C-4012-A682-060CDFE29655}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{74326333-5991-482F-B31F-7C43BCC5F297}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{74555D24-3102-4D46-8F6E-A0D4E646C604}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{751626DD-BC76-4F8A-B10C-3137C76CF8AE}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{75BD731D-FE67-4C7E-85AB-DC2953FE919E}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{76312901-DCCA-4E25-878E-31323AB8ACE7}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{7668C3CB-7CB1-466C-ACE4-006F78500E06}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{78070E88-9BC6-4D07-A5C5-FE32B7DEFBB7}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{78754D8F-0448-4979-ADFD-BFE04D984B25}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{795795A2-C66A-42A9-84C6-C44D7F72A629}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{7BC8DBC5-B7CD-41B6-826D-9DA8613B53B5}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{7C293018-8C9C-4452-AEA1-1CF8A17C615D}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{7D26107D-EDB0-43D3-A871-C9196397CF49}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{7DADD46F-0CAC-450C-965B-614E9B5C0A77}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{809B55B9-D94F-491B-80F0-3A7E0F8C8700}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{81D03BDD-E15B-4E68-BB3F-BE45357AFD09}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{824325AC-83D9-413B-906E-2E0B84795199}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{82EA5C87-DC32-41CC-BDDB-AB0B5B7CC4EC}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{8342DB26-F26D-4A8C-A26E-0C5D4484705E}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{8353D2C6-3DEA-4E99-A45A-9EE712C9302F}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{83B15D46-1EC9-4D98-86FA-FAF021E21611}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{8411D530-235E-4E94-809F-E9F973C0C281}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{86F601F6-7B4F-4177-916F-AF6BBFC6CFDA}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{87D4BB53-F3D0-48C8-BD16-CEEA942F66FF}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{87EAEDA1-587A-45F4-923E-05D44BC8345B}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{880CB189-9F9F-4B3C-A1D6-373489F4F1B1}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{8839FF8B-D19D-4AE6-AF7E-956F3C74CC48}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{8A5CEB40-B527-45A7-96FE-EFF3E86939AA}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{8A9D0E52-DEC4-405B-AF44-8C3BEC44CDB0}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{8AEC7EDF-635A-4A26-A57F-D8C8BD8EB210}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{8AF12AB8-37D1-49C0-BE47-8646049B6D3B}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{8B642A4C-0A98-4934-A0D1-C538BEAA6406}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{8BDB6FF4-CA10-42E3-85BD-6C61947DE011}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{8C3F4EC4-46AB-41FA-9B08-00663A021F83}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{8EFA0A92-7CEF-4C8D-BD12-9FE70CD4937A}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{8F3602A0-5A02-4E14-ACE9-6DE04CB660D1}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{8F76D905-05B3-499C-86A4-84A3DAF4FDB9}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{8F86564E-504E-4D5D-84B6-760DBF5306D2}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{8FB04277-98EB-41CC-B186-DF352FD522FE}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{93BDF7DC-CAE0-476A-8A84-33274C7946E0}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{950560E8-FBD3-4434-BAD9-390BBE4CCAE4}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{95C2CAA3-EDE1-41B4-90DE-2DF567B9533E}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{98782DBB-9D76-4679-B621-F32D0DD77463}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{9B11DF95-C76E-45E1-8ACA-DE5D55AFCDD5}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{9C531D47-D497-44D8-923C-372930BB9A53}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{9D063625-961F-4743-9278-53F5F293E280}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{9D92E8C1-8A08-41D4-AF9D-2FD5ACF10530}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{9D99F9B9-3845-45EE-B62B-643B3564D83E}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{9DE32DCA-BD38-476C-B7C8-202B16F28BF4}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{9FDF43B1-800E-45C8-9575-79A483806881}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{9FE60003-DCE1-4679-8ED7-34B7E23EEC65}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{9FEF0B37-FCEA-43FC-BC76-44AD0D5D79C2}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{A1928696-D9C1-4E9F-A57C-FECF256E36B4}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{A3789602-2DEC-4F61-AFD4-C971EE538A2D}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{A4689C3A-B9EA-41CA-90C2-748CD7D11A72}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{A574197A-4E8D-424D-923C-8DC67D59E9D3}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{A5ACD419-3293-45D0-AF18-808582A8011E}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{A674D5FE-8D9B-4D35-A224-D25E22F6BE51}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{A7C8ABFF-1784-4E26-8CB7-2B5340C92B52}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{A8FC80D4-4E48-4A0A-BB1C-78894BD38375}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{A952F8F5-1A67-4536-BED0-80D3429FB4AF}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{A9E3D3BD-31B7-468C-ABE3-5EACF5BA455B}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{A9E78E23-92F2-4A01-BDD0-160D913C2BD9}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{AA424CB1-489A-439E-80E1-2E39C54116B3}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{ABE8A411-6759-4A21-A83A-20BF5DA417B7}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{AC14B497-4129-44C6-AE0F-30553BEAFA4D}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{AC4A9CBF-B2C6-4F27-820F-F4C2286A3147}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{AC9980A7-F5C3-465E-BAA3-92710CF78CED}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{ACB4A839-36F5-434B-A5A6-AEC1029B048D}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{AE6DA00A-1125-4F66-ADB5-385D4C6CAD8F}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{AF325606-5A5C-4A63-AD79-E96C2BB7E464}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{B06C77AB-6B31-4BB5-84FF-E5DEB7DD5336}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{B0CF44E9-1053-434D-90CE-E60A55F5374F}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{B2D2F396-6060-4769-A932-466B9F04D3DF}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{B3EF4ED6-F657-4619-BE4D-DC7615140543}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{B48B6A40-516B-40C6-8BA7-A30D4BC67805}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{B49361C5-14AE-4ABB-998A-77B1E973036B}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{B5B1D254-9401-41C6-A59D-B9E2F626DF2B}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{B606DEE0-56B3-4E59-BC80-01E739B3B940}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{B60854D3-E7C3-4288-A84F-7F5C15073539}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{B7A0D26D-C21C-4913-9AD1-48EA8B522CCD}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{B81828FF-F7D9-477D-A8F7-F67B1238B20F}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{B8AB4EDD-FA00-4770-83E4-D1AD310567B3}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{B97A7853-E5C5-4D1C-A009-51C3D9946D2C}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{BB80BDB9-E752-4D1B-9AFD-507E5A33B353}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{BD1EE274-FB88-4C2E-9213-E1876B8AC655}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{BF069B5F-795D-40C1-913B-14F9DBF96AAB}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{C08F11FD-5D61-4683-91DA-08394DB72CD8}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{C3483449-E80B-4A47-BF1D-9587B1EE44EF}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{C4AD6B9E-4FF7-4166-AB2E-8EFF61E18054}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{C513059A-DE0A-498C-92EF-0129ABEE0EF2}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{C53928A9-E17D-4376-9A2D-9EA7C4ECE436}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{C65273A8-D277-42E9-BCED-33D0CF6BED4B}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{C9C69FDD-F5A0-455F-B559-20BE3CF732E2}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{C9F6BBE9-32CE-4192-9AE2-846896F503EA}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{CB855B1B-9651-4E22-A422-92F32F75AF59}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{CD97444C-3A88-4CC3-8DF2-35F0C5137F33}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{CE5A5D54-9418-4366-9CBD-AECADAC63C1D}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{CEFCBC65-2389-4B45-94C5-6AF39B9CBFE2}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{CFBFD4E6-8175-48E9-B87D-EA64A8896EAB}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{D0303C0A-ED7A-4226-BDE8-DC924FB41CA7}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{D0DC0F72-9E4F-490A-9E23-ECFB2F6BF0B2}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{D24290BB-A7FE-419C-A56F-FDED155A9904}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{D2DD3ADD-5B38-4056-AE75-97E774214A5A}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{D2E3A063-C1B0-4E61-89E7-F78EBDB08D2B}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{D3C07AF0-E964-478E-9CCE-C4E53F7A82DC}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{D516E4DA-A204-4BB3-A07E-968BA567CBF0}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{D7EA5167-AA9E-4E03-9365-8761BA52BD43}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{DB0D6333-6396-4361-984B-634BA2EA6F9A}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{DB17E3BB-20CE-49BE-801B-D0DAEF99C783}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{DCFC335E-43EF-42E3-8D64-FAC3667AA0AD}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{DD54B1A8-3A06-4B73-80F2-856EA981812B}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{DDA445E2-4237-44C9-9762-E824DB02A248}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{DE510CE0-9300-421B-AF33-414E103E3B6F}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{DEAB7590-5206-4659-9C3B-69A0FDDA51D0}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{DF2A3C11-0470-485C-88C8-915508B775E4}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{DFE1FBF8-9B0E-451B-89E6-4CE18ED487D8}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{E0382C7F-BF24-402A-BABD-067DEF05B731}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{E191D183-1CFE-4EB8-8EA8-094932EF5491}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{E2B1D8F8-0C51-48B7-9F2D-B3C2F7111D5F}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{E45AC75D-E9A1-490B-B8B1-48C74F3634EA}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{E5DF41E8-617A-4256-901D-5F441F7026DE}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{E690FAF7-A223-4C5B-9DCC-2A4A7594F0C7}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{E7459270-F7D2-4B42-B2A6-AB552BABB4C6}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{E8B923DE-44CC-4464-95D1-AB79508B3C23}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{EB96885F-433C-49D6-8A79-4D7E5E7196C3}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{EBADAB3E-97CE-413A-81C9-7A4AD7753BD6}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{EC1DBB43-844A-4AF5-B9DA-27FCDBE12FBF}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{ECDC5171-BD1C-49E4-9799-F937EB684789}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{F0638A9B-488F-4599-A207-87D5CFC4AAC7}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{F15154C1-23C2-45BF-9528-4F94ABC793BF}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{F4FA0E3A-2F9A-4516-97C5-28C8F917FBBA}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{F5BCAB2F-6BE0-4A96-A18A-046FE76333B0}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{F6B93B41-2C75-4C1B-A5FB-9F290423737D}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{F70E81C3-E356-4D01-8474-98BC9B4CA9C0}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{F7BAA201-C816-4668-B2A6-95B5AA37722B}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{F8216AFB-754C-4D4D-83B7-8B3A1D0C426A}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{F877A896-9232-42CC-A9D4-7815E2EDF060}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{F9E671D8-99AF-4887-A673-A7C76E66E979}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{FA008C7E-4D3A-44C0-96D1-3F1BCAFCEAF8}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{FB2313D9-3080-4364-8872-26DC2193BEAD}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{FC04F07D-3127-4EB7-A35D-4E3B2539C59C}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{FD2F390B-2ED7-46CC-8D7D-FF0B841D4E02}
Successfully deleted: [Empty Folder] C:\Users\OLIVIER\appdata\local\{FFF320DD-4103-4703-AF63-B0ECAA320B81}



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 18/12/2013 at  7:26:00,41
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

kaori64 · Answer

Malwarebytes Anti-Malware (Essai) 1.75.0.1300
www.malwarebytes.org

Version de la base de données: v2013.12.17.08

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16750
OLIVIER :: OLIVIER-PC [administrateur]

Protection: Activé

18/12/2013 07:43:22
mbam-log-2013-12-18 (07-43-22).txt

Type d'examen: Examen complet (C:\|D:\|E:\|)
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 407523
Temps écoulé: 1 heure(s), 35 minute(s), 20 seconde(s)

Processus mémoire détecté(s): 4
C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe (PUP.Optional.SearchDonkey.A) -> 4840 -> Suppression au redémarrage.
C:\ProgramData\RHelpers\FirefoxHelper\FirefoxHelper.exe (PUP.Optional.SearchDonkey.A) -> 4184 -> Suppression au redémarrage.
C:\ProgramData\RHelpers\IeHelper\IeHelper.exe (PUP.Optional.SearchDonkey.A) -> 4788 -> Suppression au redémarrage.
C:\ProgramData\Updater\updater.exe (Trojan.Agent) -> 2304 -> Suppression au redémarrage.

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 3
HKCR\CLSID\{74322BF9-DF26-493f-B0DA-6D2FC5E6429E} (PUP.Optional.BearshareTB.A) -> Mis en quarantaine et supprimé avec succès.
HKCR\BearShareIEHelper.DNSGuard (PUP.Optional.BearshareTB.A) -> Mis en quarantaine et supprimé avec succès.
HKCR\BearShareIEHelper.DNSGuard.1 (PUP.Optional.BearshareTB.A) -> Mis en quarantaine et supprimé avec succès.

Valeur(s) du Registre détectée(s): 2
HKCU\Software\Microsoft\Windows\CurrentVersion\Run|Updater (Trojan.Agent) -> Données: C:\ProgramData\Updater\updater.exe -> Mis en quarantaine et supprimé avec succès.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Updater (Trojan.Agent) -> Données: C:\ProgramData\Updater\Updater.exe -> Mis en quarantaine et supprimé avec succès.

Elément(s) de données du Registre détecté(s): 3
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Default_Page_URL (PUP.Optional.NationZoom.A) -> Mauvais: (http://ww7.nationzoom.com Bon: (http://www.google.com) -> Mis en quarantaine et réparé avec succès
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.NationZoom.A) -> Mauvais: (http://ww7.nationzoom.com Bon: (http://www.google.com) -> Mis en quarantaine et réparé avec succès
HKLM\Software\Microsoft\Internet Explorer\Main|Default_Page_URL (PUP.Optional.NationZoom.A) -> Mauvais: (http://ww7.nationzoom.com Bon: (http://www.google.com) -> Mis en quarantaine et réparé avec succès

Dossier(s) détecté(s): 8
C:\Users\OLIVIER\AppData\Local\Temp\mt_ffx\Delta (PUP.Optional.Delta.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\mt_ffx\Delta\delta (PUP.Optional.Delta.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\mt_ffx\Delta\delta\1.8.10.0 (PUP.Optional.Delta.A) -> Mis en quarantaine et supprimé avec succès.
C:\ProgramData\RHelpers\ChromeHelper (PUP.Optional.Searchagent) -> Suppression au redémarrage.
C:\ProgramData\RHelpers\FirefoxHelper (PUP.Optional.Searchagent) -> Suppression au redémarrage.
C:\ProgramData\RHelpers\IeHelper (PUP.Optional.Searchagent) -> Suppression au redémarrage.
C:\Users\OLIVIER\AppData\Roaming
ewnext.me (PUP.Optional.NextLive.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Roaming
ewnext.me\cache (PUP.Optional.NextLive.A) -> Mis en quarantaine et supprimé avec succès.

Fichier(s) détecté(s): 59
C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe (PUP.Optional.SearchDonkey.A) -> Suppression au redémarrage.
C:\ProgramData\RHelpers\FirefoxHelper\FirefoxHelper.exe (PUP.Optional.SearchDonkey.A) -> Suppression au redémarrage.
C:\ProgramData\RHelpers\IeHelper\IeHelper.exe (PUP.Optional.SearchDonkey.A) -> Suppression au redémarrage.
C:\AdwCleaner\Quarantine\C\Users\OLIVIER\AppData\Roaming\BabSolution\Shared\BabMaint.exe.vir (PUP.Optional.Babylon.A) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Users\OLIVIER\AppData\Roaming\Desk 365\components\component_libcef_1.1364.1123.exe.vir (PUP.Optional.Desk365.A) -> Mis en quarantaine et supprimé avec succès.
C:\AdwCleaner\Quarantine\C\Users\OLIVIER\AppData\Roaming\file scout\filescout.exe.vir (PUP.Optional.FileScout.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E178JMJ1\wajam_download[1].exe (PUP.Optional.Wajam) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HXHQFFZM\vbmz10[1].exe (MSIL.Solimba) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LNF6QDY3\wajam_install[1].exe (PUP.Optional.Wajam) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\896A.tmp (PUP.Optional.FileScout.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\GetCC.dll (MSIL.Solimba) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\ICReinstall_FlvPlayerSetup.exe (PUP.Optional.InstallCore) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\UpdateTask.exe.1833167 (PUP.Optional.MySearchDial.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\vbmz10.exe (MSIL.Solimba) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\8F6D6840-BAB0-7891-AD81-29D330AB821E\CrxInstaller.dll (PUP.Optional.Babylon.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\8F6D6840-BAB0-7891-AD81-29D330AB821E\MyBabylonTB.exe (PUP.Optional.Delta) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\bus1358\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\bus152F\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\bus1CA9\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\bus2290\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\bus25CB\BUSolution.dll (PUP.Optional.BabSolution.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\bus2810\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\bus2FCB\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\bus3212\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\bus397E\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\bus5C75\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\bus5FCB\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\bus71F0\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\bus71F1\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\bus7721\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\bus7776\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\bus7F9E\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\bus8005\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\bus897\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\bus9F6D\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\busB4E5\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\busBB74\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\busBC8F\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\busD7A9\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\busDAE4\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\busE885\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\busEB07\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\busEF7\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\busEF87\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\busFD19\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\is1668783924\DeltaTB.exe (PUP.Optional.Delta.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\is609929163\104401586_stp.EXE (PUP.Optional.InstallCore) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\is609929163\91677065_stp.EXE (PUP.Optional.InstallCore) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\is609929163\91677275_stp\BatBrowseSetup.exe (PUP.Optional.BatBrowse.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\is609929163\91677289_stpcpsetup_adppi5_adppi5.exe (PUP.Optional.RegCleanerPro) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\is609929163\91677294_stp\bd.exe (PUP.Optional.BonanzaDeals.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Local\Temp\upd77A1\BabMaint.x (PUP.Optional.Babylon.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\Downloads\installer_samsung_kies_French.exe (PUP.Optional.InstallCore.A) -> Mis en quarantaine et supprimé avec succès.
C:\Windows\Temp\BonanzaDealsLive.exe3330de98 (PUP.Optional.BonanzaDeals.A) -> Mis en quarantaine et supprimé avec succès.
C:\Windows\Temp\goopdate.dll3330de98 (PUP.Optional.BonanzaDeals.A) -> Mis en quarantaine et supprimé avec succès.
C:\ProgramData\Updater\updater.exe (Trojan.Agent) -> Suppression au redémarrage.
C:\Users\OLIVIER\AppData\Roaming
ewnext.me
engine.cookie (PUP.Optional.NextLive.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Roaming
ewnext.me
engine.dll (PUP.Optional.NextLive.A) -> Mis en quarantaine et supprimé avec succès.
C:\Users\OLIVIER\AppData\Roaming
ewnext.me\cache\spark.bin (PUP.Optional.NextLive.A) -> Mis en quarantaine et supprimé avec succès.

(fin)

kaori64 · Answer

~ Rapport de ZHPDiag v2013.12.14.22 - Nicolas Coolman (14/12/2013) ~ Lancé par OLIVIER (18/12/2013 10:28:30) ~ Adresse du Site Web https://nicolascoolman.webs.com/ ~ Forums gratuits d'Assistance à la désinfection : https://nicolascoolman.webs.com/ ~ Traduit par Nicolas Coolman ~ Etat de la version : ~ Liste blanche : Activée par le programme ~ Elévation des Privilèges : OK ~ User Account Control (UAC): Deactivate by user ---\ Navigateurs Internet MSIE: Internet Explorer v10.0.9200.16750 (Defaut) OBIE: Safari v5.33.21.1 ---\ Informations sur les produits Windows ~ Langage: Français Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601) Windows Server License Manager Script : OK ~ Windows(R) 7, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : 9YQTR Windows License : OK ~ Windows Remaining Initializations Number : 3 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\ Logiciels de protection du système Malwarebytes Anti-Malware version 1.75.0.1300 Microsoft Security Client v4.4.0304.0 Windows Defender W7 ---\ Logiciels d'optimisation du système ---\ Logiciels de partage PeerToPeer eMule Vuze v4.3 =>P2P.Azureus ---\ Surveillance de Logiciels Adobe Flash Player 11 Plugin Adobe Reader 9.5.5 MUI Java 7 Update 45 ---\ Informations sur le système ~ Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 4061 MB (47% free) System Restore: Activé (Enable) System drive C: has 13 GB (17%) free of 75 GB ---\ Mode de connexion au système ~ Computer Name: OLIVIER-PC ~ User Name: OLIVIER ~ All Users Names: OLIVIER, LogMeInRemoteUser, HomeGroupUser$, Administrateur, ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89 Logged in as Administrator ---\ Variables d'environnement ~ System Unit : C:\ ~ %AppZHP% : C:\Users\OLIVIER\AppData\Roaming\ZHP\ ~ %AppData% : C:\Users\OLIVIER\AppData\Roaming\ ~ %Desktop% : C:\Users\OLIVIER\Desktop\ ~ %Favorites% : C:\Users\OLIVIER\Favorites\ ~ %LocalAppData% : C:\Users\OLIVIER\AppData\Local\ ~ %StartMenu% : C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\ Enumération des unités disques C: Hard drive, Flash drive, Thumb drive (Free 13 Go of 75 Go) D: Hard drive, Flash drive, Thumb drive (Free 209 Go of 209 Go) E: CD-ROM drive (Not Inserted) ---\ Etat du Centre de Sécurité Windows [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified ~ Security Center: 49 Legitimates Filtered in 00mn 00s ---\ Recherche particulière de fichiers génériques [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024] [MD5.E7099336BF7531B6FCC920DCB5101259] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.25/10/2013 - 07:19:22.) -- C:\Windows\System32\wininet.dll [2241536] [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656] [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448] [MD5.79059559E89D06E8B80CE2944BE20228] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/09/2013 - 02:09:10.) -- C:\Windows\system32\Drivers\AFD.sys [497152] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160] [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456] [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400] [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224] [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208] [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers etBT.sys [261632] [MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 15:45:08.) -- C:\Windows\system32\Drivers tfs.sys [1656680] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280] [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184] [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers dx.sys [119296] [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808] ~ Generic Processes: Scanned in 00mn 00s ---\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 2/13 ~ Mes musiques (My Musics) : 47/232 ~ Mes Favoris (My Favorites) : 1/33 ~ Mes Documents (My Documents) : 2/1880 ~ Mon Bureau (My Desktop) : 3/220 ~ Menu demarrer (Programs) : 1/43 ~ Hidden Files: Scanned in 00mn 06s ---\ Processus lancés [MD5.1971D838A88F58D59543E9B3CDA5FFC4] - (.ASUS - SmartLogon Application.) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [305720] [PID.1980] [MD5.BA2B4E07561CF877F61B0EEED654BC96] - (...) -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe [53888] [PID.2028] [MD5.F4DCD4912B185C3AAEB92A7040832AD1] - (.Pas de propriétaire - ALU.) -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [51768] [PID.2036] [MD5.A65BE6B71BDD85BB0BBB0F25E03AE586] - (.Pas de propriétaire - Wireless Console 3.) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1593344] [PID.2044] [MD5.7D677B93A0CFA26C8A4029ABA71C2EA6] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [20472992] [PID.2792] [MD5.5AEBF6FA9805C9101220AA4FB4FA17E7] - (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [105016] [PID.2920] [MD5.EBA7FEB924D04E718870B6E1E07D2465] - (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [8493624] [PID.2980] [MD5.29B129E019D5935C55541629677C2A69] - (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [159744] [PID.3000] [MD5.D1D5DAB39DCB4BE0359943738D87409B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [532040] [PID.1660] [MD5.F4F7C86191A981C804326E2EF6F3604F] - (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader eader_sl.exe [41056] [PID.1920] [MD5.53D96678FB89F056D5285101481297D9] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [421160] [PID.2384] [MD5.D3AC38E80E928CC61A22650E04423BB8] - (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [979328] [PID.1068] [MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336] [PID.868] [MD5.3ECCDD3FE310DD8F82D085447089ADB0] - (.ASUSTek Computer Inc. - ADSMTray.) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe [272952] [PID.368] [MD5.5C396DDE6AAFFB64ABC0E0FD88F53553] - (.ASUS - AsScrPro.) -- C:\Windows\AsScrPro.exe [3054136] [PID.2780] [MD5.74EF10CD035DE51171C98E60E53AE221] - (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [104936] [PID.3100] [MD5.83170B8E03213093B065A9638E146499] - (.OpenOffice.org - OpenOffice.org 3.1.) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe [7424000] [PID.3144] [MD5.873867A02F0E83F18CF871E776B651DC] - (.OpenOffice.org - OpenOffice.org 3.1.) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin [7418368] [PID.3716] [MD5.9ED469260687108F5F8FD544D56ABC54] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\IEXPLORE.exe [770736] [PID.4876] [MD5.2330B5A4A3824F042DC96D524893A6B5] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8295936] [PID.7124] [MD5.D7F82B30ED318E591E27C9C323846DD5] - (.ASUS - SmartLogon Application.) -- C:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exe [428600] [PID.1132] [MD5.18E5C2F937F9DEB8C282DF66A3761925] - (.ASUS - ASLDR Service.) -- C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe [84536] [PID.1172] [MD5.7C157574A181B19B9DCF5F339E25337E] - (.Pas de propriétaire - GFNEXSrv.) -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208] [PID.1252] [MD5.A434FB7C05F244E8E46C23F8075082ED] - (.ASUS - HControl.) -- C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe [178744] [PID.1680] [MD5.D62088F1C4E7B3477AD2A5F8F5C6DEF3] - (.Pas de propriétaire - Atouch64.) -- C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe [301624] [PID.1708] [MD5.ABDD5AD016AFFD34AD40E944CE94BF59] - (.SEIKO EPSON CORPORATION - eEBAPI Core Process module.) -- C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [94208] [PID.1896] [MD5.B33CF4DE909A5B30F526D82053A63C8E] - (.ABBYY - ABBYY network license server.) -- C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048] [PID.1864] [MD5.20F6F19FE9E753F2780DC2FA083AD597] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [37664] [PID.2112] [MD5.F2060A34C8A75BC24A9222EB4F8C07BD] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe [349472] [PID.2308] [MD5.65085456FD9A74D7F1A999520C299ECB] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376] [PID.2496] [MD5.E0D7732F2D2E24B2DB3F67B6750295B8] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512] [PID.2584] [MD5.11F714F85530A2BD134074DC30E99FCA] - (.Microsoft Corporation - Machine Debug Manager.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.exe [322120] [PID.2988] [MD5.FD306FBCCE7ADB1077B709742E7148E9] - (...) -- C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe [71096] [PID.324] [MD5.205E1B699FD3F2F9B036EEA2EC30C620] - (...) -- C:\Windows\SysWOW64\PnkBstrA.exe [76888] [PID.3492] [MD5.149126216A694E6BA84E92ECA77AAE3B] - (.ASUS - ATKOSD.) -- C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe [2488888] [PID.4500] [MD5.AA11E1368EEB237DD100BAC6AFFE1C57] - (.ASUS - KBFiltr.) -- C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe [113208] [PID.4924] [MD5.4A7C441D99D86704D194E7678873B95D] - (.ASUS - WDC.) -- C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe [174648] [PID.4832] [MD5.C0BF554D2277F7A4C735D475ADE2E3B2] - (.ASUSTek Computer Inc. - ADSMSrv.) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe [225280] [PID.4644] ~ Processes Running: Scanned in 00mn 01s ---\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ww7.nationzoom.com =>Hijacker.NationZoom R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ww7.nationzoom.com =>Hijacker.NationZoom ~ IE Browser: 24 Legitimates Filtered in 00mn 00s ---\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\ Hosts file redirection (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Hosts File: Scanned in 00mn 00s ~ Nombre de lignes (Lines number): 21 ---\ Internet Explorer Toolbars (O3) O3 - Toolbar: (no name) [64Bits] - [HKLM]{9421DD08-935F-4701-A9CA-22DF90AC4EA6} Clé orpheline O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{21FA44EF-376D-4D53-9B0F-8A89D3229068} Clé orpheline O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline ~ Toolbar: Scanned in 00mn 00s ---\ Autres liens utilisateurs (O4) O4 - GS\Desktop [Public]: BearShare.lnk . (...) -- C:\Program Files (x86)\BearShare Applications\BearShare\BearShare.exe (.not file.) =>PUP.BearShare O4 - GS\Desktop [Public]: Driver Detective.lnk . (.PC Drivers Headquarters - Driver Detective.) -- C:\Program Files (x86)\PC Drivers HeadQuarters\Driver Detective\DriversHQ.DriverDetective.Client.exe O4 - GS\Desktop [Public]: eMule.lnk . (.https://www.emule-project.net/home/perl/general.cgi?l=1 - eMule.) -- C:\Program Files (x86)\eMule\emule.exe O4 - GS\Desktop [Public]: Epson Easy Photo Print.lnk . (.SEIKO EPSON CORPORATION - Pas de description.) -- C:\Program Files (x86)\Epson Software\Easy Photo Print\EPQuicker.exe O4 - GS\Desktop [Public]: EPSON Scan.lnk . (.SEIKO EPSON CORP. - EPSON Scan.) -- C:\Windows wain_32\escndv\escndv.exe O4 - GS\Desktop [Public]: Game Park Console.lnk . (.Oberon Media - Game Park Console.) -- C:\Program Files (x86)\ASUS\Game Park\GameConsole\GameParkConsole.exe O4 - GS\Desktop [Public]: Guide d'utilisation EPSON SX235 Series.lnk . (...) -- C:\Program Files (x86)\Epson Software\Epson Manual\EPSON SX235 Series\fr\Useg\index.htm O4 - GS\Desktop [Public]: Guide réseau EPSON SX235 Series.lnk . (...) -- C:\Program Files (x86)\Epson Software\Epson Manual\EPSON SX235 Series\fr\Netg\index.htm O4 - GS\Desktop [Public]: Safari.lnk . (...) -- C:\Windows\Installer\{6C1E7AA1-44E9-446D-AAB2-0DE6D9EFEAB1}\SafariIco.exe O4 - GS\Desktop [Public]: Vuze.lnk . (...) -- C:\Program Files (x86)\Vuze\Azureus.exe (.not file.) =>P2P.Azureus O4 - GS\Desktop [Public]: YAC.lnk . (...) -- C:\Program Files (x86)\iSafe\iStart.exe (.not file.) =>Trojan.Staser O4 - GS\Program [Public]: HD VDeck.lnk . (.VIA - VIA HD Audio CPL.) -- C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe O4 - GS\Program [Public]: Safari.lnk . (...) -- C:\Windows\Installer\{6C1E7AA1-44E9-446D-AAB2-0DE6D9EFEAB1}\SafariIco.exe O4 - GS\Program [Public]: Vuze.lnk . (...) -- C:\Program Files (x86)\Vuze\Azureus.exe (.not file.) =>P2P.Azureus O4 - GS\QuickLaunch [OLIVIER]: Apple Safari.lnk . (...) -- C:\Windows\Installer\{6C1E7AA1-44E9-446D-AAB2-0DE6D9EFEAB1}\SafariIco.exe O4 - GS\QuickLaunch [OLIVIER]: BearShare.lnk . (...) -- C:\Program Files (x86)\BearShare Applications\BearShare\BearShare.exe (.not file.) =>PUP.BearShare O4 - GS\QuickLaunch [OLIVIER]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\QuickLaunch [OLIVIER]: MP Manager.lnk . (.MPMAN - MP Manager.) -- C:\Users\OLIVIER\AppData\Roaming\MPMAN\MP Manager\MP Manager.exe O4 - GS\QuickLaunch [OLIVIER]: Vuze.lnk . (...) -- C:\Program Files (x86)\Vuze\Azureus.exe (.not file.) =>P2P.Azureus O4 - GS\TaskBar [OLIVIER]: BearShare.lnk . (...) -- C:\Program Files (x86)\BearShare Applications\BearShare\BearShare.exe (.not file.) =>PUP.BearShare O4 - GS\TaskBar [OLIVIER]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\TaskBar [OLIVIER]: LifeFrame.lnk . (.ASUS - LifeFrame3.) -- C:\Program Files (x86)\ASUS\ASUS LifeFrame3\LifeFrame.exe O4 - GS\TaskBar [OLIVIER]: Safari.lnk . (.Apple Inc. - Safari.) -- C:\Program Files (x86)\Safari\Safari.exe O4 - GS\Program [OLIVIER]: Create Amazing Presentations.lnk - Clé orpheline O4 - GS\Program [OLIVIER]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\SystemTools [OLIVIER]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\Desktop [OLIVIER]: cpam marie.lnk . (...) -- C:\Users\OLIVIER\Desktop\justificatifs assedic\cpam marie O4 - GS\Desktop [OLIVIER]: Create Amazing Presentations.lnk - Clé orpheline O4 - GS\Desktop [OLIVIER]: Downloader.lnk . (.Metaboli - Metaboli Downloader.) -- C:\Program Files (x86)\Downloader\Downloader.exe O4 - GS\Desktop [OLIVIER]: Kies Air Discovery Service.lnk . (.Oracle Corporation - Java(TM) Web Start Launcher.) -- C:\Windows\SysWOW64\javaws.exe O4 - GS\Desktop [OLIVIER]: MP Manager.lnk . (.MPMAN - MP Manager.) -- C:\Users\OLIVIER\AppData\Roaming\MPMAN\MP Manager\MP Manager.exe O4 - GS\Desktop [OLIVIER]: Sniper Elite.lnk . (...) -- C:\Program Files (x86)\Microids\Sniper Elite\SniperElite.exe ~ Global Startup: 104 Legitimates Filtered in 00mn 12s ---\ Applications lancées au démarrage du sytème (O4) O4 - GS\Startup [Public]: FancyStart daemon.lnk . (...) -- C:\Windows\Installer\{60D6618B-153F-4353-8185-908E676E5888}\_DCE9A4DB2A5F2786140FA3.exe O4 - GS\Startup [OLIVIER]: OpenOffice.org 3.1.lnk . (...) -- C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe O4 - HKLM\..\Run: [EeeStorageBackup] . (...) -- C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe O4 - HKLM\..\Run: [AmIcoSinglun64] . (.AlcorMicro Co., Ltd. - Single LUN Icon Utility for VID 058F PID 63.) -- C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe O4 - HKLM\..\Run: [ETDWare] . (.ELAN Microelectronic Corp. - ETD Control Center.) -- C:\Program Files\Elantech\ETDCtrl.exe O4 - HKLM\..\Run: [LogMeIn GUI] . (.LogMeIn, Inc. - LogMeIn Desktop Application.) -- C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- C:\Program Files\Microsoft Security Client\msseces.exe O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation O4 - HKCU\..\Run: [EPLTarget\P0000000000000000] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHLE.exe =>.Epson Seiko Corporation O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A. O4 - HKCU\..\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe (.not file.) O4 - HKLM\..\Wow6432Node\Run: [UpdateLBPShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe O4 - HKLM\..\Wow6432Node\Run: [UpdateP2GoShortCut] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe O4 - HKLM\..\Wow6432Node\Run: [HDAudDeck] . (.VIA - VIA HD Audio CPL.) -- C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe O4 - HKLM\..\Wow6432Node\Run: [HControlUser] . (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe O4 - HKLM\..\Wow6432Node\Run: [ATKOSD2] . (.ASUS - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe O4 - HKLM\..\Wow6432Node\Run: [ATKMEDIA] . (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe O4 - HKLM\..\Wow6432Node\Run: [EEventManager] . (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation O4 - HKLM\..\Wow6432Node\Run: [mobilegeni daemon] C:\Program Files (x86)\Mobogenie\DaemonProcess.exe (.not file.) O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-2412809502-3528070081-3099643911-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-2412809502-3528070081-3099643911-1000\..\Run: [EPLTarget\P0000000000000000] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHLE.exe =>.Epson Seiko Corporation O4 - HKUS\S-1-5-21-2412809502-3528070081-3099643911-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A. O4 - HKUS\S-1-5-21-2412809502-3528070081-3099643911-1000\..\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe (.not file.) ~ Application: Scanned in 00mn 00s ---\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{38490F1A-161F-4C41-BC7A-7462AA63753E}: NameServer = 50.7.75.30,76.73.6.110 O17 - HKLM\System\CCS\Services\Tcpip\..\{3CF02565-8980-4BEE-A6D1-AFF689EC460D}: NameServer = 50.7.75.30,76.73.6.110 O17 - HKLM\System\CCS\Services\Tcpip\..\{846ee342-7039-11de-9d20-806e6f6e6963}: NameServer = 50.7.75.30,76.73.6.110 O17 - HKLM\System\CCS\Services\Tcpip\..\{C9B8F153-2557-44B7-B5F6-23D99EDF6144}: NameServer = 50.7.75.30,76.73.6.110 O17 - HKLM\System\CCS\Services\Tcpip\..\{38490F1A-161F-4C41-BC7A-7462AA63753E}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{3CF02565-8980-4BEE-A6D1-AFF689EC460D}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CS1\Services\Tcpip\..\{38490F1A-161F-4C41-BC7A-7462AA63753E}: NameServer = 50.7.75.30,76.73.6.110 O17 - HKLM\System\CS1\Services\Tcpip\..\{3CF02565-8980-4BEE-A6D1-AFF689EC460D}: NameServer = 50.7.75.30,76.73.6.110 O17 - HKLM\System\CS1\Services\Tcpip\..\{846ee342-7039-11de-9d20-806e6f6e6963}: NameServer = 50.7.75.30,76.73.6.110 O17 - HKLM\System\CS1\Services\Tcpip\..\{C9B8F153-2557-44B7-B5F6-23D99EDF6144}: NameServer = 50.7.75.30,76.73.6.110 O17 - HKLM\System\CS1\Services\Tcpip\..\{38490F1A-161F-4C41-BC7A-7462AA63753E}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{3CF02565-8980-4BEE-A6D1-AFF689EC460D}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CS2\Services\Tcpip\..\{38490F1A-161F-4C41-BC7A-7462AA63753E}: NameServer = 50.7.75.30,76.73.6.110 O17 - HKLM\System\CS2\Services\Tcpip\..\{3CF02565-8980-4BEE-A6D1-AFF689EC460D}: NameServer = 50.7.75.30,76.73.6.110 O17 - HKLM\System\CS2\Services\Tcpip\..\{846ee342-7039-11de-9d20-806e6f6e6963}: NameServer = 50.7.75.30,76.73.6.110 O17 - HKLM\System\CS2\Services\Tcpip\..\{C9B8F153-2557-44B7-B5F6-23D99EDF6144}: NameServer = 50.7.75.30,76.73.6.110 O17 - HKLM\System\CS2\Services\Tcpip\..\{38490F1A-161F-4C41-BC7A-7462AA63753E}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{3CF02565-8980-4BEE-A6D1-AFF689EC460D}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ~ Domain: Scanned in 00mn 00s ---\ Protocole additionnel (O18) O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation ~ Protocole Additionnel: Scanned in 00mn 00s ---\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll ~ Winlogon: Scanned in 00mn 00s ---\ Tâches planifiées en automatique (O39) [MD5.61107991ADF94ED8D464CD1052E5D35B] [APT] [{5503F5CC-E190-4985-B2B6-8F984D232AB4}] (...) -- C:\Program Files (x86)\asus\VirtualCamera\VirCam.exe [858680] [MD5.61107991ADF94ED8D464CD1052E5D35B] [APT] [{9514D1AA-B7A8-4AF2-8430-8554A24D2D4B}] (...) -- C:\Program Files (x86)\asus\VirtualCamera\VirCam.exe [858680] ~ Scheduled Task: 20 Legitimates Filtered in 00mn 05s ---\ Pilotes lancés au démarrage du système (O41) O41 - Driver: (drksmaaw) . (. - .) - C:\Windows\system32\drivers\drksmaaw.sys (.not file.) O41 - Driver: (euiplnkm) . (. - .) - C:\Windows\system32\drivers\euiplnkm.sys (.not file.) O41 - Driver: (exjwdcdr) . (. - .) - C:\Windows\system32\drivers\exjwdcdr.sys (.not file.) O41 - Driver: (iSafeNetFilter) . (. - .) - C:\Program Files (x86)\iSafe\iSafeNetFilter.sys (.not file.) =>Trojan.Staser ~ Drivers: 72 Legitimates Filtered in 00mn 00s ---\ Logiciels installés (O42) O42 - Logiciel: BearShare - (.Musiclab, LLC.) [HKLM][64Bits] -- BearShare =>PUP.BearShare O42 - Logiciel: BearShare - (.Musiclab, LLC.) [HKLM][64Bits] -- {5F624839-947D-46EA-BD63-FD847C1AC6F1} =>PUP.BearShare O42 - Logiciel: Search-Results Toolbar - (.APN LLC.) [HKLM][64Bits] -- bearsharetoolbarguid =>PUP.SearchResults O42 - Logiciel: YAC - (.ELEX DO BRASIL PARTICIPAÇÕES LTDA.) [HKLM][64Bits] -- iSafe =>Trojan.Staser ~ Logic: 31 Legitimates Filtered in 00mn 00s ---\ HKCU & HKLM Software Keys [HKCU\Software\BearShare] =>PUP.BearShare [HKCU\Software\BrowseForTheCause] =>Adware.BrowseForTheCause [HKCU\Software\bearsharetoolbarguid] =>PUP.BearShare [HKLM\Software\Wow6432Node\BearShareSRTB] =>PUP.BearShare [HKLM\Software\Wow6432Node\Lonely Cat Games] [HKLM\Software\Wow6432Node\MC2] [HKLM\Software\Wow6432Node\VBMZ] =>PUP.Duuqu [HKLM\Software\Wow6432Node\supWPM] =>PUP.WpManager ~ Key Software: 330 Legitimates Filtered in 00mn 00s ---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 18/12/2013 - 07:12:23 - [0] ----D C:\Program Files (x86)\iSafe =>Trojan.Staser O43 - CFD: 15/05/2010 - 20:25:05 - [0] ----D C:\Program Files (x86)\Piggly Christmas Edition O43 - CFD: 14/12/2013 - 18:21:24 - [0,004] ----D C:\ProgramData\18135 O43 - CFD: 15/12/2012 - 09:03:16 - [0,079] ----D C:\ProgramData\BearShare =>PUP.BearShare O43 - CFD: 18/12/2013 - 10:22:50 - [0] ----D C:\ProgramData\RHelpers =>PUP.SearchDonkey O43 - CFD: 17/12/2013 - 23:47:53 - [0,107] ----D C:\ProgramData\TubeDimmer =>PUP.TubeDimmer O43 - CFD: 18/12/2013 - 10:22:50 - [1,213] ----D C:\ProgramData\Updater =>PUP.CrossRider O43 - CFD: 17/12/2013 - 21:18:36 - [0] ----D C:\ProgramData\WPM =>PUP.WpManager O43 - CFD: 15/12/2012 - 09:05:50 - [9,269] --H-D C:\ProgramData\{3F488B3A-CAFC-4177-973B-B562F6436A81} O43 - CFD: 19/11/2013 - 11:04:01 - [1,063] ----D C:\Users\OLIVIER\AppData\Roaming\0V1L2Z2Z1T1I1L1T O43 - CFD: 14/12/2013 - 19:11:25 - [90,703] ----D C:\Users\OLIVIER\AppData\Local\BearShare =>PUP.BearShare O43 - CFD: 17/12/2013 - 20:09:29 - [1,224] ----D C:\Users\OLIVIER\AppData\Local\genienext ~ Program Folder: 203 Legitimates Filtered in 00mn 59s ---\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.EA8743913B8C902F14AC06B51B39C75D] - 17/12/2013 - 21:17:54 ---A- . (...) -- C:\Windows\System32\AutoRunFilter.ini [2234] O44 - LFC:[MD5.465CD6EC0C8C03E3F13C22904E700B40] - 17/12/2013 - 23:46:21 ---A- . (...) -- C:\Windows\System32\ServiceFilter.ini [1969] O44 - LFC:[MD5.E934C42C33C8A973F3647F36BDC8E00D] - 18/12/2013 - 06:45:34 ---A- . (...) -- C:\Windows\IE11_main.log [38135] ~ Files: 47 Legitimates Filtered in 00mn 10s ---\ Enumération des clés de registre PoliciesSystem (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 ~ MWPS: 18 Legitimates Filtered in 00mn 00s ---\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 ~ MWPE Keys: 5 Legitimates Filtered in 00mn 00s ---\ Liste des pilotes du système (SDL) (O58) O58 - SDL:[MD5.FC0E8778C000291CAF60EB88C011E931] - 11/10/2011 - 22:41:07 ---A- . (...) -- C:\Windows\System32\Drivers\atksgt.sys [314016] O58 - SDL:[MD5.DEF365F0F6E017888C4B869D3BA4B8E0] - 06/09/2010 - 08:19:54 ---A- . (.Devguru Co., Ltd - Device Error Recovery SDK(x64).) -- C:\Windows\System32\Drivers\dgderdrv.sys [20552] O58 - SDL:[MD5.0E5DA5369A0FCAEA12456DD852545184] - 14/07/2009 - 02:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496] O58 - SDL:[MD5.5CD1005B9BC241C3AB8501D5FBF09FD4] - 12/06/2009 - 04:41:55 ---A- . (.ELAN Microelectronic Corp. - ETD Control Center.) -- C:\Windows\System32\Drivers\ETD.sys [112128] O58 - SDL:[MD5.F2523EF6460FC42405B12248338AB2F0] - 10/06/2009 - 21:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232] O58 - SDL:[MD5.E63EF8C3271D014F14E2469CE75FECB4] - 20/07/2009 - 10:29:39 ---A- . (.Pas de propriétaire - Keyboard Filter Driver.) -- C:\Windows\System32\Drivers\kbfiltr.sys [15416] O58 - SDL:[MD5.156AB2E56DC3CA0B582E3362E07CDED7] - 11/10/2011 - 22:41:06 ---A- . (...) -- C:\Windows\System32\Drivers\lirsgt.sys [43680] O58 - SDL:[MD5.085435AE1A124361304044029B5CC644] - 18/06/2009 - 21:18:10 ---A- . (.Windows (R) Win 7 DDK provider - ASUS CopyProtect driver.) -- C:\Windows\System32\Drivers\lullaby.sys [15928] O58 - SDL:[MD5.19D8F6FF8344C47872BA351D04A190DD] - 05/06/2009 - 11:15:55 ---A- . (.Pas de propriétaire - USBCAMD for Sonix UVC.) -- C:\Windows\System32\Drivers\sncduvc.sys [42176] O58 - SDL:[MD5.1D8474722CDFFBB8FCA5FA12C50A05A2] - 05/06/2009 - 11:15:55 ---A- . (.Pas de propriétaire - UVC Camera Streaming Driver.) -- C:\Windows\System32\Drivers\snp2uvc.sys [1806400] O58 - SDL:[MD5.0B3F6C8F93C5C25977EA5A8B2E656357] - 21/06/2013 - 01:07:52 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudbus.sys [103448] O58 - SDL:[MD5.AAF6F247F1DC370C593B4430974EAD9C] - 20/08/2013 - 07:02:12 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudmdm.sys [204568] O58 - SDL:[MD5.F3817967ED533D08327DC73BC4D5542A] - 14/07/2009 - 02:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656] O58 - SDL:[MD5.CE4B6956E4E12492715A53076E58761F] - 06/09/2010 - 08:11:32 ---A- . (.Teruten Inc - File System Mini Filter Drvier.) -- C:\Windows\System32\Drivers\TFsExDisk.sys [16392] O58 - SDL:[MD5.CD03479F2DA26500B203ED075C146A7A] - 19/04/2010 - 19:47:42 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\Drivers\usbaapl64.sys [50688] O58 - SDL:[MD5.CE4B6956E4E12492715A53076E58761F] - 06/09/2010 - 08:11:32 ---A- . (.Teruten Inc - File System Mini Filter Drvier.) -- C:\Windows\SysWOW64\drivers\TFsExDisk.Sys [16392] O58 - SDL:[MD5.DDEE99DC54EFA20BD5A442CD733C4462] - 18/07/2013 - 06:34:28 ---A- . (...) -- C:\Windows\SysWOW64\FsUsbExDisk.Sys [37344] ~ Drivers: 18 Legitimates Filtered in 00mn 03s ---\ Liste des outils de désinfection (LATC) (O63) O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman ~ ADS: Scanned in 00mn 00s ---\ Associations Shell Spawning (O67) O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.) ~ FASS Keys: 11 Legitimates Filtered in 00mn 00s ---\ Menu de démarrage Internet (SMI) (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- c:\program files\internet explorer\iexplore.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Apple Inc. - Safari.) -- c:\program files (x86)\safari\safari.exe ~ Keys: Scanned in 00mn 00s ---\ Recherche d'infection sur les navigateurs internet (SBI) (O69) O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - https://www.google.com/?gws_rd=ssl O69 - SBI: SearchScopes [HKCU] {E46DF5BD-A1BA-404D-8559-76D7831EBE25} [DefaultScope] - (Google) - https://www.google.com/?gws_rd=ssl ~ Keys: Scanned in 00mn 00s ---\ Recherche particulière à la racine du système (SPRF) (O84) [MD5.1FE339E72FE03A27DD9D5A9A357CFE7D] [SPRF][10/09/2009] (...) -- C:\ProgramData\FullRemove.exe [131368] [MD5.C49A588C476A6FAA2FA5E98EE8A5F533] [SPRF][19/11/2013] (.Setup © - Setup.) -- C:\Users\OLIVIER\AppData\Local\Temp\98330uninstall.exe [305152] [MD5.6D73A5291FBA8E712D6D9DE89E2FFF25] [SPRF][15/12/2012] (...) -- C:\Users\OLIVIER\AppData\Local\Temp\apnuserid.dat [16] [MD5.2387337BA1E0B0249BA90F55B2BA2521] [SPRF][15/12/2012] (...) -- C:\Users\OLIVIER\AppData\Local\Temp\appid.dat [4] [MD5.858D895AD40DE9779E78C39A116F9553] [SPRF][19/11/2013] (...) -- C:\Users\OLIVIER\AppData\Local\Temp\BackupSetup.exe [10355400] [MD5.84CB697C4C0E036A78838CE641B27154] [SPRF][15/12/2012] (.Musiclab, LLC - BearShare.) -- C:\Users\OLIVIER\AppData\Local\Temp\BearShare_setup.exe [2482000] =>PUP.BearShare [MD5.5BB7F9160A555D16C1C4C8914C976043] [SPRF][15/12/2012] (...) -- C:\Users\OLIVIER\AppData\Local\Temp\BundleSweetIMSetup.exe [9] =>PUP.SweetIM [MD5.0B3E54C8ADCF731FBA2AF1A9E6B5B6AE] [SPRF][04/06/2002] (...) -- C:\Users\OLIVIER\AppData\Local\Temp\iiuninst.exe [163891] [MD5.1AC48C0EDB3D9124E6D1EE6979EE2D60] [SPRF][09/12/2012] (...) -- C:\Users\OLIVIER\AppData\Local\Temp\Installhelper.dll [1629872] [MD5.D2B48C62D4E77881DF37119BBADB8A0F] [SPRF][15/12/2012] (...) -- C:\Users\OLIVIER\AppData\Local\Temp\MybabylonTB.exe [11] =>PUP.Babylon [MD5.876758374902C84D0DB998E31FDCD08C] [SPRF][21/03/2011] (.Pas de propriétaire - Toolbar Offer.) -- C:\Users\OLIVIER\AppData\Local\Temp\Offer100.exe [15168] [MD5.1B80378EA920FCD0EA146B28C3DBA2AE] [SPRF][15/12/2012] (...) -- C:\Users\OLIVIER\AppData\Local\Temp\propsys.dll [6] [MD5.0D26EF8C01E3E1C77877C303A9317F69] [SPRF][10/12/2013] (...) -- C:\Users\OLIVIER\AppData\Local\Temp\Quarantine.exe [360051] [MD5.466C4732BC4B126B94B0E69C6B5A2348] [SPRF][28/11/2013] (.Pas de propriétaire - SendMsg.) -- C:\Users\OLIVIER\AppData\Local\Temp\SendMsg.dll [9216] [MD5.F5E79060D099AB8D02BB3B3FF0574C4E] [SPRF][17/12/2013] (.UpdaterResponse - Pas de description.) -- C:\Users\OLIVIER\AppData\Local\Temp\setup{276A8860-14EF-42E4-A1F5-8207C34846FB}.exe [1170808] [MD5.5405413FFF79B8D9C747AA900F60F082] [SPRF][19/11/2013] (...) -- C:\Users\OLIVIER\AppData\Local\Temp\Sqlite3.dll [599419] [MD5.72412B526BCC716382E62B7939DCFD8F] [SPRF][06/05/2012] (...) -- C:\Users\OLIVIER\AppData\Local\Temp\SRAssetsHelper.dll [1085952] [MD5.C81E728D9D4C2F636F067F89CC14862C] [SPRF][15/12/2012] (...) -- C:\Users\OLIVIER\AppData\Local\Temp\sysid.dat [1] [MD5.ACFA9609894A2E0DCD015F00549A78F2] [SPRF][15/12/2012] (...) -- C:\Users\OLIVIER\AppData\Local\Temp hanks.bat [99] [MD5.EE753E9B64DAFA9574CB540C76550126] [SPRF][15/12/2012] (.Torch Media Inc. - Torch Browser.) -- C:\Users\OLIVIER\AppData\Local\Temp\TorchSetupFull.exe [32279008] [MD5.B804CB981CD938A14888362BCB4313FF] [SPRF][15/12/2012] (...) -- C:\Users\OLIVIER\AppData\Local\Temp rackid.dat [6] [MD5.B85FAF58E8FC8EAC30E1EA65A252BD11] [SPRF][28/06/2010] (...) -- C:\Users\OLIVIER\AppData\Local\Temp _7kd69i.dll [3584] [MD5.B0F6507F8666E89DD9F192313D88EB98] [SPRF][16/06/2013] (.Babylon Ltd. - Uninstaller Application.) -- C:\Users\OLIVIER\AppData\Local\Temp\uninst1.exe [389632] =>PUP.Babylon [MD5.32C2EAC8B02BADB7A20E92C94DDF8D3E] [SPRF][17/12/2013] (...) -- C:\Users\OLIVIER\AppData\Local\Temp\Unipack_Installer.exe [168556] [MD5.1E06C7ED88DC3D9BA01DE0EC66247FFB] [SPRF][19/10/2012] (.Unity Technologies ApS - Unity Web Player Installer.) -- C:\Users\OLIVIER\AppData\Local\Temp\UnityWebPlayer7053396035010009672.exe [591224] [MD5.CBA63BC3C9979EACF13567754A1CC1CA] [SPRF][20/09/2013] (...) -- C:\Users\OLIVIER\AppData\Local\Temp\Xvid.dll [20992] [MD5.F26FCE8D559985732F365C065F4F0A7F] [SPRF][31/10/2013] (...) -- C:\Users\OLIVIER\AppData\Roaming\TheHunterSettings_live.bin [7909] [MD5.C0E253C5C4124C8B881CA44828839F5E] [SPRF][25/07/2013] (.The GIMP Team - GIMP Setup.) -- C:\Users\OLIVIER\Desktop he-gimp_2-8-6_fr_10178.exe [90139696] ~ Files: 61 Legitimates Filtered in 00mn 16s ---\ Liste des exceptions du parefeu (FirewallRules) (O87) O87 - FAEL: "TCP Query User{74905083-A028-4D90-BDF2-6A5A9CDF5F28}C:\program files (x86)\microids\sniper elite\sniperelite.exe" | In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\microids\sniper elite\sniperelite.exe O87 - FAEL: "UDP Query User{12554C29-272E-4FF5-BA91-A0769A2E74A3}C:\program files (x86)\microids\sniper elite\sniperelite.exe" | In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\microids\sniper elite\sniperelite.exe O87 - FAEL: "{A619BDED-1A52-456D-8EE8-831BAFAE95FA}" |In - Domain - P6 - TRUE | .(...) -- C:\Program Files (x86)\BearShare Applications\BearShare\BearShare.exe (.not file.) =>PUP.BearShare O87 - FAEL: "{52B1C9D6-26CB-40CD-BD8F-3B599118A12B}" |In - Domain - P17 - TRUE | .(...) -- C:\Program Files (x86)\BearShare Applications\BearShare\BearShare.exe (.not file.) =>PUP.BearShare O87 - FAEL: "{07000037-F7F5-4056-9C67-397BD0E588FE}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\BearShare Applications\BearShare\BearShare.exe (.not file.) =>PUP.BearShare O87 - FAEL: "{7D9B0BCD-0A29-4FC2-A55E-AAF710952731}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\BearShare Applications\BearShare\BearShare.exe (.not file.) =>PUP.BearShare O87 - FAEL: "{402E3F91-3B6C-46F6-9861-955D2EDE1B6C}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\BearShare Applications\Mediabar\Datamngr\SRTOOL~1\dtUser.exe (.not file.) =>PUP.BearShare O87 - FAEL: "{EE4AD70C-63A0-43CD-A6F1-10ADD8F8EDB6}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\BearShare Applications\Mediabar\Datamngr\SRTOOL~1\dtUser.exe (.not file.) =>PUP.BearShare O87 - FAEL: "{D72891E1-6085-4B19-8A59-B0F0E2AE786B}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\BearShare Applications\BearShare\BearShare.exe (.not file.) =>PUP.BearShare O87 - FAEL: "{52F98D08-358A-4FB9-B63D-238B2099F4D4}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\BearShare Applications\BearShare\BearShare.exe (.not file.) =>PUP.BearShare ~ Firewall: 246 Legitimates Filtered in 00mn 02s ---\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS) [MD5.EB3DB5F7DB015BB71CDF18D4BF73CDDB] [WIS][15/12/2012] (.Musiclab, LLC - BearShare.) -- C:\Windows\Installer\1b34bb.msi [335872] =>PUP.BearShare ~ WIS: 98 Legitimates Filtered in 00mn 15s ---\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Demand 14/12/2013 257416 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe SS - | Auto 07/11/2010 136176 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 07/11/2010 136176 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 24/08/2012 194032 | (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe SS - | Auto 05/09/2013 171680 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 14/05/2009 759048 | (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY.) - C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe SR - | Demand 31/03/2008 225280 | (ADSMService) . (.ASUSTek Computer Inc..) - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe SR - | Auto 17/09/2009 359552 | (AFBAgent) . (.ASUSTeK Computer Inc..) - C:\Windows\system32\FBAgent.exe SR - | Auto 25/05/2011 37664 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - | Auto 16/06/2009 84536 | (ASLDRService) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe SR - | Auto 08/08/2007 94208 | (ATKGFNEXSrv) . (...) - C:\Program Files\ATKGFNEX\GFNEXSrv.exe SR - | Auto 06/04/2011 349472 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files (x86)\Bonjour\mDNSResponder.exe SR - | Auto 19/12/2006 94208 | (EpsonBidirectionalService) . (.SEIKO EPSON CORPORATION.) - C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe SR - | Demand 07/06/2011 934176 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 17/12/2013 376144 | (LMIGuardianSvc) . (.LogMeIn, Inc..) - C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe SR - | Auto 17/12/2013 226640 | (LMIMaint) . (.LogMeIn, Inc..) - C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe SR - | Auto 08/11/2010 407424 | (LogMeIn) . (.LogMeIn, Inc..) - C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe SR - | Auto 04/04/2013 418376 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe SR - | Auto 04/04/2013 701512 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe SR - | Auto 23/10/2013 23808 | (MsMpSvc) . (.Microsoft Corporation.) - C:\Program Files\Microsoft Security Client\MsMpEng.exe SR - | Auto 20/10/2008 71096 | (NMSAccessU) . (...) - C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe SR - | Auto 15/09/2009 44312 | (OberonGameConsoleService) . (...) - C:\Program Files (x86)\Asus\Game Park\GameConsole\OberonGameConsoleService.exe SR - | Auto 10/07/1658 0 | (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe SR - | Auto 22/09/2010 249136 | (SeaPort) . (.Microsoft Corporation.) - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe SR - | Auto 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe ~ Services: Scanned in 00mn 17s ---\ Scan Additionnel (O88) Database Version : 13013 - (14/12/2013) Clés trouvées (Keys found) : 10 Valeurs trouvées (Values found) : 7 Dossiers trouvés (Folders found) : 8 Fichiers trouvés (Files found) : 12 [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\BearShare] =>PUP.BearShare^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F624839-947D-46EA-BD63-FD847C1AC6F1}] =>PUP.BearShare^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\bearsharetoolbarguid] =>PUP.SearchResults^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\iSafe] =>Trojan.Staser^ [HKLM\Software\Classes\AppID\BearShare.exe] =>PUP.BearShare [HKCU\Software\BrowseForTheCause] =>Adware.BrowseForTheCause [HKLM\Software\Wow6432Node\VBMZ] =>Toolbar.Conduit [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E47D688-85EC-465A-9946-EC58220F14FC}] =>PUP.SearchResults [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E47D688-85EC-465A-9946-EC58220F14FC}] =>PUP.SearchResults [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\bearsharetoolbarguid] =>PUP.SearchResults C:\Program Files (x86)\iSafe =>Trojan.Staser^ C:\ProgramData\BearShare =>PUP.BearShare^ C:\ProgramData\RHelpers =>PUP.SearchDonkey^ C:\ProgramData\TubeDimmer =>PUP.TubeDimmer^ C:\ProgramData\Updater =>PUP.CrossRider^ C:\ProgramData\WPM =>PUP.WpManager^ C:\Users\OLIVIER\AppData\Local\BearShare =>PUP.BearShare^ C:\Program Files (x86)\BearShare Applications =>PUP.BearShare [HKCU\Software\BearShare] =>PUP.BearShare^ [HKCU\Software\bearsharetoolbarguid] =>PUP.BearShare^ [HKLM\Software\Wow6432Node\BearShareSRTB] =>PUP.BearShare^ [HKLM\Software\Wow6432Node\supWPM] =>PUP.WpManager^ C:\Users\OLIVIER\AppData\Local\Temp\BearShare_setup.exe =>PUP.BearShare^ C:\Users\OLIVIER\AppData\Local\Temp\BundleSweetIMSetup.exe =>PUP.SweetIM^ C:\Users\OLIVIER\AppData\Local\Temp\MybabylonTB.exe =>PUP.Babylon^ C:\Users\OLIVIER\AppData\Local\Temp\uninst1.exe =>PUP.Babylon^ C:\Windows\Installer\1b34bb.msi =>PUP.BearShare^ C:\Users\OLIVIER\AppData\Local\Temp\GoogleToolbarInstaller1.log =>PUP.Babylon C:\Users\OLIVIER\AppData\Local\Temp\GoogleToolbarInstaller2.log =>PUP.Babylon ~ Additionnel Scan: 349570 Items scanned in 00mn 46s ---\ Récapitulatif des détections trouvées sur votre station ~ http://nicolascoolman.webs.com/apps/blog/show/38126906-hijacker-nationzoom =>Hijacker.NationZoom ~ http://nicolascoolman.webs.com/apps/blog/show/26705717-pup-bearshare =>PUP.BearShare ~ http://nicolascoolman.webs.com/apps/blog/show/32771797-trojan-staser =>Trojan.Staser ~ http://nicolascoolman.webs.com/apps/blog/show/30319724-pup-searchresults =>PUP.SearchResults ~ http://nicolascoolman.webs.com/apps/blog/show/26627928-adware-browseforthecause =>Adware.BrowseForTheCause ~ http://nicolascoolman.webs.com/apps/blog/show/37752731-pup-duuqu =>PUP.Duuqu ~ http://nicolascoolman.webs.com/apps/blog/show/38737316-pup-wpmanager =>PUP.WpManager ~ http://nicolascoolman.webs.com/apps/blog/show/38839825-pup-searchdonkey =>PUP.SearchDonkey ~ http://nicolascoolman.webs.com/apps/blog/show/37242682-pup-tubedimmer =>PUP.TubeDimmer ~ http://nicolascoolman.webs.com/apps/blog/show/27583526-pup-crossrider =>PUP.CrossRider ~ http://nicolascoolman.webs.com/apps/blog/show/29216159-pup-sweetim =>PUP.SweetIM ~ http://nicolascoolman.webs.com/apps/blog/show/26627369-toolbar-babylon =>PUP.Babylon ~ http://nicolascoolman.webs.com/apps/blog/show/29507721-toolbar-conduit =>Toolbar.Conduit ~ MSI: 13 link(s) detected in 00mn 46s ~ 1223 Legitimates filtered by white list End of the scan (594 lines in 03mn 37s)(0)

kaori64 · Answer

voila tous les rapports ont été effectués , j'attends votre message pour faire d'autres manip si nécessaire! encore merci

Marou81 · Answer

Bonjour,

Ton ordinateur est infecté par un rogue, c'est à dire un logiciel qui affiche de fausses alertes pour te faire peur et te pousser à payer (plus d'infos ici)... Ignore les fausses alertes du rogue et ne paye surtout pas, je vais t'aider à t'en débarrasser. Pour commencer, utilise cet outil :

&#x25B6 Télécharge RogueKiller (de Tigzy) sur le Bureau
&#x25B6 Quitte tous tes programmes en cours
&#x25B6 Lance le (si tu utilises Windows Vista ou 7 : fais un clic-droit dessus et choisis "Exécuter en tant qu'administrateur")
&#x25B6 Patiente pendant le pre-scan, puis clique sur le bouton "Scan"
&#x25B6 A la fin, vérifie que tous les éléments sont cochés puis clique sur "Suppression"
&#x25B6 Un rapport (RKreport.txt) doit être créé sur le Bureau, poste le dans ta prochaine réponse.

kaori64 · Answer

RogueKiller V8.7.12 [Dec 14 2013] par Tigzy mail : tigzyRKgmailcom Remontees : http://www.adlice.com/forum/ Site Web : https://www.luanagames.com/index.fr.html Blog : https://www.adlice.com/ Systeme d'exploitation : Windows 7 (6.1.7601 Service Pack 1) 64 bits version Demarrage : Mode normal Utilisateur : OLIVIER [Droits d'admin] Mode : Suppression -- Date : 12/18/2013 13:37:37 | ARK || FAK || MBR | ¤¤¤ Processus malicieux : 0 ¤¤¤ ¤¤¤ Entrees de registre : 8 ¤¤¤ [HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> SUPPRIMÉ [HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> SUPPRIMÉ [HJ POL][PUM] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> REMPLACÉ (2) [HJ POL][PUM] HKLM\[...]\System : EnableLUA (0) -> REMPLACÉ (1) [HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : ConsentPromptBehaviorAdmin (0) -> REMPLACÉ (2) [HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : EnableLUA (0) -> REMPLACÉ (1) [HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REMPLACÉ (0) [HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REMPLACÉ (0) ¤¤¤ Tâches planifiées : 0 ¤¤¤ ¤¤¤ Entrées Startup : 0 ¤¤¤ ¤¤¤ Navigateurs web : 0 ¤¤¤ ¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤ ¤¤¤ Driver : [NON CHARGE 0x0] ¤¤¤ ¤¤¤ Ruches Externes: ¤¤¤ ¤¤¤ Infection : ¤¤¤ ¤¤¤ Fichier HOSTS: ¤¤¤ --> %SystemRoot%\System32\drivers\etc\hosts ¤¤¤ MBR Verif: ¤¤¤ +++++ PhysicalDrive0: (\.\PHYSICALDRIVE0 @ IDE) Hitachi HTS545032B9A300 +++++ --- User --- [MBR] dacefda7334427c4ba596b95f4a2421b [BSP] 430eaf6ed8558d670d2c84579f07828f : Windows Vista MBR Code Partition table: 0 - [XXXXXX] FAT32-LBA (0x1c) [HIDDEN!] Offset (sectors): 2048 | Size: 14997 Mo 1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 30716280 | Size: 76308 Mo 2 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 186996600 | Size: 213935 Mo User = LL1 ... OK! User = LL2 ... OK! Termine : << RKreport[0]_D_12182013_133737.txt >> RKreport[0]_S_12182013_133701.txt

Marou81 · Answer

Re,

&#x25B6 Télécharge TDSSKiller (de Kaspersky Labs) sur ton Bureau.
&#x25B6 Lance le (si tu utilises Windows Vista ou 7 : fais un clic-droit dessus et choisis "Exécuter en tant qu'administrateur")
&#x25B6 Clique sur Start Scan pour démarrer l'analyse.
&#x25B6 Si des éléments néfastes sont identifiés par l'outil, vérifie que Cure est bien coché. S'il indique "suspicious", laisse l'option Skip.
&#x25B6 Ensuite, clique sur Continue puis sur Reboot Now si nécessaire.
&#x25B6 Un rapport s'ouvrira au redémarrage de l'ordinateur.
&#x25B6 Copie/colle son contenu dans ta prochaine réponse (il se trouve également sous C:\TDSSKiller.N°deversion_Date_Heure_log.txt)

kaori64 · Answer

aucun objet détecté et je n'ai pas de rapport

kaori64 · Answer

je ne sais pas si cela a un rapport avec les virus mais j'ai une icone sur mon bureau qui s'appelle create amazing prestations et je souhaiterais la supprimer et lorsque je me rend sur programmes et fonctionnalitées celle ci n'y est pas !

Marou81 · Answer

Bonsoir,

Tu peux la supprimer en appuyant sur l'icone clique droit supprimer.

En tout cas ton pc est désinfecté :)

On finalise télécharge SFTGC : http://www.archive-host.com

Clique droit pour ouvrir le programme.
Ferme tout tes programmes en cours
Lance go et attend

Poste moi le rapport

Puis télécharge DelFix, lance le programme puis coche suppression outils désinfection.

A te relire
 
Merci d'avoir suivi mes conseils étape par étape. N'oubliez pas de mettre sujet résolu.

kaori64 · Answer

bonjour marou 81
voici le rapport
Rapport de SFTGC (Pierre13) du Jeudi 19 Décembre 2013 à 07:54:02 version : 2.0.0.60
Mis à jour le 27/11/2013
Outil lancé en Mode normal et En tant qu'administrateur
 Windows 7 Home Premium Service Pack 1 64 bits 

Tool start in C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CR7JDI66

 3161 éléments supprimés => 3.1 Go libérés. (3 mn  33 s)

C:\Users\OLIVIER\AppData\Local\Temp\+~JF1503323247768531796.tmp
C:\Users\OLIVIER\AppData\Local\Temp\+~JF1547205132019644763.tmp
C:\Users\OLIVIER\AppData\Local\Temp\+~JF182990191504418232.tmp
C:\Users\OLIVIER\AppData\Local\Temp\+~JF3078640304317927069.tmp
C:\Users\OLIVIER\AppData\Local\Temp\+~JF3497374641971454166.tmp
C:\Users\OLIVIER\AppData\Local\Temp\+~JF3549436159947490408.tmp
C:\Users\OLIVIER\AppData\Local\Temp\+~JF4724905637730436523.tmp
C:\Users\OLIVIER\AppData\Local\Temp\+~JF5119368462291852961.tmp
C:\Users\OLIVIER\AppData\Local\Temp\+~JF562916955927143160.tmp
C:\Users\OLIVIER\AppData\Local\Temp\+~JF5761478838466916823.tmp
C:\Users\OLIVIER\AppData\Local\Temp\+~JF5915675642387095076.tmp
C:\Users\OLIVIER\AppData\Local\Temp\+~JF6339392248883449775.tmp
C:\Users\OLIVIER\AppData\Local\Temp\+~JF6361246061666923977.tmp
C:\Users\OLIVIER\AppData\Local\Temp\+~JF7034002643464960422.tmp
C:\Users\OLIVIER\AppData\Local\Temp\+~JF859285986030817967.tmp
C:\Users\OLIVIER\AppData\Local\Temp\+~JF8698058189913579706.tmp
C:\Users\OLIVIER\AppData\Local\Temp\030114450000088c0mp99e5wgu
C:\Users\OLIVIER\AppData\Local\Temp\030114450000088c81pl2z3efz
C:\Users\OLIVIER\AppData\Local\Temp\030114450000088c9ailz87pi1
C:\Users\OLIVIER\AppData\Local\Temp\030114450000088cls7z61nzca
C:\Users\OLIVIER\AppData\Local\Temp\030114450000088cmftkzy3ujw
C:\Users\OLIVIER\AppData\Local\Temp\030114450000088ct3levwr74e
C:\Users\OLIVIER\AppData\Local\Temp\030114460000088cabhxazn4gg
C:\Users\OLIVIER\AppData\Local\Temp\030114460000088cfvatc4aqoy
C:\Users\OLIVIER\AppData\Local\Temp\030114470000088c8bdu3ejmhg
C:\Users\OLIVIER\AppData\Local\Temp\030114470000088cc614rhlkei
C:\Users\OLIVIER\AppData\Local\Temp\030114470000088cpjyor1hg8m
C:\Users\OLIVIER\AppData\Local\Temp\030114480000088cca7jtk81dp
C:\Users\OLIVIER\AppData\Local\Temp\030114480000088cjzxdadek6x
C:\Users\OLIVIER\AppData\Local\Temp\030114480000088com3pkcw8sz
C:\Users\OLIVIER\AppData\Local\Temp\030114480000088cqmbqvdpojc
C:\Users\OLIVIER\AppData\Local\Temp\04130640-00000980-t6vtfgabsv
C:\Users\OLIVIER\AppData\Local\Temp\0517dmwg.tmp
C:\Users\OLIVIER\AppData\Local\Temp\06t7w0ma.tmp
C:\Users\OLIVIER\AppData\Local\Temp\07121824-00001bb4-zhh2025jf8
C:\Users\OLIVIER\AppData\Local\Temp\08311720-000016e8-sijdjl63hs
C:\Users\OLIVIER\AppData\Local\Temp\0v068fgt.tmp
C:\Users\OLIVIER\AppData\Local\Temp\10-05-SAP-0983_xm-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\10224_1124170671383_1440605766_30292067_7179224_n-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\1116.tmp
C:\Users\OLIVIER\AppData\Local\Temp\11FB.dir
C:\Users\OLIVIER\AppData\Local\Temp\11FB.tmp
C:\Users\OLIVIER\AppData\Local\Temp\1360.tmp
C:\Users\OLIVIER\AppData\Local\Temp\14A6.tmp
C:\Users\OLIVIER\AppData\Local\Temp\1807879.Uninstall
C:\Users\OLIVIER\AppData\Local\Temp\1861.tmp
C:\Users\OLIVIER\AppData\Local\Temp\18647_1184788506791_1440605766_30418639_2239186_n-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\18C9.tmp
C:\Users\OLIVIER\AppData\Local\Temp\19F9.tmp
C:\Users\OLIVIER\AppData\Local\Temp\19j8m04i.tmp
C:\Users\OLIVIER\AppData\Local\Temp\19yr3bfc.tmp
C:\Users\OLIVIER\AppData\Local\Temp\1dnkphgo.tmp
C:\Users\OLIVIER\AppData\Local\Temp\2131373-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\22443_1301881435423_1482070012_865927_7231243_n-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\2264377116.od
C:\Users\OLIVIER\AppData\Local\Temp\2356CEA5-48CC-408F-B7A7-9BF806E30ABC.Diagnose.Admin.0.etl
C:\Users\OLIVIER\AppData\Local\Temp\23F2.tmp
C:\Users\OLIVIER\AppData\Local\Temp\24218_1394906187141_1066780043_31139407_3868915_n-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\2482.tmp
C:\Users\OLIVIER\AppData\Local\Temp\24BC.tmp
C:\Users\OLIVIER\AppData\Local\Temp\24CC.tmp
C:\Users\OLIVIER\AppData\Local\Temp\26093_409839282428_543897428_5025836_2441611_n-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\26093_409839282428_543897428_5025836_2441611_n-2.jpg
C:\Users\OLIVIER\AppData\Local\Temp\26608_389369359172_758509172_3658334_3714834_n-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\27026_395106367280_798522280_3585389_115106_n-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\27092_388049644556_831609556_3737084_221305_n-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\27092_388049989556_831609556_3737100_1004269_n-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\29064_10150197672190228_859475227_12654346_6053672_n-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\29963_1277326740189_1440605766_30597230_2067723_n-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\2B99.tmp
C:\Users\OLIVIER\AppData\Local\Temp\2C05.tmp
C:\Users\OLIVIER\AppData\Local\Temp\2E54.tmp
C:\Users\OLIVIER\AppData\Local\Temp\2kx0fkyx.tmp
C:\Users\OLIVIER\AppData\Local\Temp\30204_10150185784505018_677290017_12097541_5603109_n-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\30501_1461471697516_1255146230_31309335_2456266_s-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\31059_393998889077_583804077_3852787_4938117_n-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\31059_393998974077_583804077_3852800_4230963_n-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\31059_393998974077_583804077_3852800_4230963_n-2.jpg
C:\Users\OLIVIER\AppData\Local\Temp\31059_393998989077_583804077_3852803_7295532_n-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\319439706.Uninstall
C:\Users\OLIVIER\AppData\Local\Temp\319475055.Uninstall
C:\Users\OLIVIER\AppData\Local\Temp\31C3.tmp
C:\Users\OLIVIER\AppData\Local\Temp\32AA.tmp
C:\Users\OLIVIER\AppData\Local\Temp\34284_10150217990305364_563145363_13214292_174186_n-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\34783_1320854188348_1440605766_30706103_3248758_n-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\366B.tmp
C:\Users\OLIVIER\AppData\Local\Temp\37A2.tmp
C:\Users\OLIVIER\AppData\Local\Temp\388D.tmp
C:\Users\OLIVIER\AppData\Local\Temp\3C45.dir
C:\Users\OLIVIER\AppData\Local\Temp\3C45.tmp
C:\Users\OLIVIER\AppData\Local\Temp\3DC7A0C6-0CCE-40F9-AA99-D699F107589F.Diagnose.Admin.0.etl
C:\Users\OLIVIER\AppData\Local\Temp\3DC7A0C6-0CCE-40F9-AA99-D699F107589F.Repair.Admin.1.etl
C:\Users\OLIVIER\AppData\Local\Temp\3DC7A0C6-0CCE-40F9-AA99-D699F107589F.Verify.Admin.2.etl
C:\Users\OLIVIER\AppData\Local\Temp\3dcf2df1-2a83-477c-a7dd-858967792357
C:\Users\OLIVIER\AppData\Local\Temp\3nr9pe5b.tmp
C:\Users\OLIVIER\AppData\Local\Temp\4.tmp
C:\Users\OLIVIER\AppData\Local\Temp\417E.tmp
C:\Users\OLIVIER\AppData\Local\Temp\44DC.tmp
C:\Users\OLIVIER\AppData\Local\Temp\4805.tmp
C:\Users\OLIVIER\AppData\Local\Temp\4A1D.tmp
C:\Users\OLIVIER\AppData\Local\Temp\4D96.tmp
C:\Users\OLIVIER\AppData\Local\Temp\5347.tmp
C:\Users\OLIVIER\AppData\Local\Temp\54ez6whs.tmp
C:\Users\OLIVIER\AppData\Local\Temp\585C.tmp
C:\Users\OLIVIER\AppData\Local\Temp\58D3.tmp
C:\Users\OLIVIER\AppData\Local\Temp\5EAE.dir
C:\Users\OLIVIER\AppData\Local\Temp\5EAE.tmp
C:\Users\OLIVIER\AppData\Local\Temp\5eddc231-1827-4ae5-9963-3004768a5852
C:\Users\OLIVIER\AppData\Local\Temp\62C7.tmp
C:\Users\OLIVIER\AppData\Local\Temp\66cas56j.tmp
C:\Users\OLIVIER\AppData\Local\Temp\68DC.tmp
C:\Users\OLIVIER\AppData\Local\Temp\69A4.tmp
C:\Users\OLIVIER\AppData\Local\Temp\6C3C.tmp
C:\Users\OLIVIER\AppData\Local\Temp\7077.tmp
C:\Users\OLIVIER\AppData\Local\Temp\718b73339a145044064f
C:\Users\OLIVIER\AppData\Local\Temp\71E5.tmp
C:\Users\OLIVIER\AppData\Local\Temp\72C2.tmp
C:\Users\OLIVIER\AppData\Local\Temp\7551.tmp
C:\Users\OLIVIER\AppData\Local\Temp\763A.tmp
C:\Users\OLIVIER\AppData\Local\Temp\7787.tmp
C:\Users\OLIVIER\AppData\Local\Temp\77AA.tmp
C:\Users\OLIVIER\AppData\Local\Temp\7894.tmp
C:\Users\OLIVIER\AppData\Local\Temp\79DD.tmp
C:\Users\OLIVIER\AppData\Local\Temp\7C4C.tmp
C:\Users\OLIVIER\AppData\Local\Temp\7C6A.tmp
C:\Users\OLIVIER\AppData\Local\Temp\7D62.tmp
C:\Users\OLIVIER\AppData\Local\Temp\7FB3.tmp
C:\Users\OLIVIER\AppData\Local\Temp\7zpnlaxv.tmp
C:\Users\OLIVIER\AppData\Local\Temp\8063563073-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\8127114208-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\8127114208-2.jpg
C:\Users\OLIVIER\AppData\Local\Temp\8197325898-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\821B.tmp
C:\Users\OLIVIER\AppData\Local\Temp\8239.tmp
C:\Users\OLIVIER\AppData\Local\Temp\841482D4-95B7-4450-B438-98FA5913644C.Diagnose.Admin.0.etl
C:\Users\OLIVIER\AppData\Local\Temp\8604.tmp
C:\Users\OLIVIER\AppData\Local\Temp\864F.tmp
C:\Users\OLIVIER\AppData\Local\Temp\8819593246-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\8848863535-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\8DD4.tmp
C:\Users\OLIVIER\AppData\Local\Temp\8F6D6840-BAB0-7891-AD81-29D330AB821E
C:\Users\OLIVIER\AppData\Local\Temp\8swyhjah.tmp
C:\Users\OLIVIER\AppData\Local\Temp\9135.tmp
C:\Users\OLIVIER\AppData\Local\Temp\92D.tmp
C:\Users\OLIVIER\AppData\Local\Temp\96ED.tmp
C:\Users\OLIVIER\AppData\Local\Temp\97FD.tmp
C:\Users\OLIVIER\AppData\Local\Temp\9833.tmp
C:\Users\OLIVIER\AppData\Local\Temp\98330uninstall.exe
C:\Users\OLIVIER\AppData\Local\Temp\9E2D00F8-BAB0-7891-BAD9-6EB056F1CF9E
C:\Users\OLIVIER\AppData\Local\Temp\9EAF.dir
C:\Users\OLIVIER\AppData\Local\Temp\9EAF.tmp
C:\Users\OLIVIER\AppData\Local\Temp\9hcgkhz4.tmp
C:\Users\OLIVIER\AppData\Local\Temp\A7DE.tmp
C:\Users\OLIVIER\AppData\Local\Temp\ABBYY Licensing Install.log
C:\Users\OLIVIER\AppData\Local\Temp\ABBYY-Licensing-FineReader-Sprint-9.0.rollback
C:\Users\OLIVIER\AppData\Local\Temp\ABBYY.Sprint.Registrator.log
C:\Users\OLIVIER\AppData\Local\Temp\AbbyyMsiLog.txt
C:\Users\OLIVIER\AppData\Local\Temp\ABP_InstallChecker.exe
C:\Users\OLIVIER\AppData\Local\Temp\ABP_TB0001.exe
C:\Users\OLIVIER\AppData\Local\Temp\ACC9.tmp
C:\Users\OLIVIER\AppData\Local\Temp\ADA1.dir
C:\Users\OLIVIER\AppData\Local\Temp\ADA1.tmp
C:\Users\OLIVIER\AppData\Local\Temp\adb.log
C:\Users\OLIVIER\AppData\Local\Temp\Administrateur.bmp
C:\Users\OLIVIER\AppData\Local\Temp\AdobeARM.log
C:\Users\OLIVIER\AppData\Local\Temp\AdobeARM_NotLocked.log
C:\Users\OLIVIER\AppData\Local\Temp\AdwCleaner.jpg
C:\Users\OLIVIER\AppData\Local\Temp\AEA6.tmp
C:\Users\OLIVIER\AppData\Local\Temp\amline_data.xml
C:\Users\OLIVIER\AppData\Local\Temp\amline_settings.xml
C:\Users\OLIVIER\AppData\Local\Temp\anglet_20101010_1930-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\apnPixel.txt
C:\Users\OLIVIER\AppData\Local\Temp\apnuserid.dat
C:\Users\OLIVIER\AppData\Local\Temp\appid.dat
C:\Users\OLIVIER\AppData\Local\Temp\atl80.dll
C:\Users\OLIVIER\AppData\Local\Temp\au-descriptor-1.7.0_25-b16.xml
C:\Users\OLIVIER\AppData\Local\Temp\au-descriptor-1.7.0_45-b18.xml
C:\Users\OLIVIER\AppData\Local\Temp\AUCHECK_CORE.txt
C:\Users\OLIVIER\AppData\Local\Temp\AUCHECK_PARSER.txt
C:\Users\OLIVIER\AppData\Local\Temp\AZU2370891698471747715.tmp
C:\Users\OLIVIER\AppData\Local\Temp\AZU3228269950078327842.tmp
C:\Users\OLIVIER\AppData\Local\Temp\AZU4360259967274669941.tmp
C:\Users\OLIVIER\AppData\Local\Temp\AZU5239355265561087701.tmp
C:\Users\OLIVIER\AppData\Local\Temp\Azureus4.6.0.2.jar
C:\Users\OLIVIER\AppData\Local\Temp\b01d42a6-0948-4bd0-8dea-54d68f50a791
C:\Users\OLIVIER\AppData\Local\Temp\B55.tmp
C:\Users\OLIVIER\AppData\Local\Temp\B579.tmp
C:\Users\OLIVIER\AppData\Local\Temp\B9A3.tmp
C:\Users\OLIVIER\AppData\Local\Temp\BAB4.tmp
C:\Users\OLIVIER\AppData\Local\Temp\BackupSetup.exe
C:\Users\OLIVIER\AppData\Local\Temp\BB4C.tmp
C:\Users\OLIVIER\AppData\Local\Temp\BD5E.tmp
C:\Users\OLIVIER\AppData\Local\Temp\BearShare.ico
C:\Users\OLIVIER\AppData\Local\Temp\BearShare.ini
C:\Users\OLIVIER\AppData\Local\Temp\BearSharePreview
C:\Users\OLIVIER\AppData\Local\Temp\bearsharetoolbarguid-manifest.xml
C:\Users\OLIVIER\AppData\Local\Temp\BearShare_setup.exe
C:\Users\OLIVIER\AppData\Local\Temp\BED9.tmp
C:\Users\OLIVIER\AppData\Local\Temp\BFHUpdater.log
C:\Users\OLIVIER\AppData\Local\Temp\BFHUpdaterLauncher.log
C:\Users\OLIVIER\AppData\Local\Temp\BingBarInstallerLogs
C:\Users\OLIVIER\AppData\Local\Temp\bouton_bid_big_1-1.gif
C:\Users\OLIVIER\AppData\Local\Temp\bouton_bid_big_1-2.gif
C:\Users\OLIVIER\AppData\Local\Temp\bouton_bid_big_1-3.gif
C:\Users\OLIVIER\AppData\Local\Temp\BP4FUpdater.log
C:\Users\OLIVIER\AppData\Local\Temp\BP4FUpdaterLauncher.log
C:\Users\OLIVIER\AppData\Local\Temp\BundleSweetIMSetup.exe
C:\Users\OLIVIER\AppData\Local\Temp\bus1358
C:\Users\OLIVIER\AppData\Local\Temp\bus1358.tmp
C:\Users\OLIVIER\AppData\Local\Temp\bus152F
C:\Users\OLIVIER\AppData\Local\Temp\bus152F.tmp
C:\Users\OLIVIER\AppData\Local\Temp\bus1CA9
C:\Users\OLIVIER\AppData\Local\Temp\bus1CA9.tmp
C:\Users\OLIVIER\AppData\Local\Temp\bus2290
C:\Users\OLIVIER\AppData\Local\Temp\bus2290.tmp
C:\Users\OLIVIER\AppData\Local\Temp\bus25CB
C:\Users\OLIVIER\AppData\Local\Temp\bus25CB.tmp
C:\Users\OLIVIER\AppData\Local\Temp\bus2810
C:\Users\OLIVIER\AppData\Local\Temp\bus2810.tmp
C:\Users\OLIVIER\AppData\Local\Temp\bus2FCB
C:\Users\OLIVIER\AppData\Local\Temp\bus2FCB.tmp
C:\Users\OLIVIER\AppData\Local\Temp\bus3212
C:\Users\OLIVIER\AppData\Local\Temp\bus3212.tmp
C:\Users\OLIVIER\AppData\Local\Temp\bus397E
C:\Users\OLIVIER\AppData\Local\Temp\bus397E.tmp
C:\Users\OLIVIER\AppData\Local\Temp\bus43E1
C:\Users\OLIVIER\AppData\Local\Temp\bus43E1.tmp
C:\Users\OLIVIER\AppData\Local\Temp\bus5C75
C:\Users\OLIVIER\AppData\Local\Temp\bus5C75.tmp
C:\Users\OLIVIER\AppData\Local\Temp\bus5FCB
C:\Users\OLIVIER\AppData\Local\Temp\bus5FCB.tmp
C:\Users\OLIVIER\AppData\Local\Temp\bus642F
C:\Users\OLIVIER\AppData\Local\Temp\bus642F.tmp
C:\Users\OLIVIER\AppData\Local\Temp\bus71F0
C:\Users\OLIVIER\AppData\Local\Temp\bus71F0.tmp
C:\Users\OLIVIER\AppData\Local\Temp\bus71F1
C:\Users\OLIVIER\AppData\Local\Temp\bus71F1.tmp
C:\Users\OLIVIER\AppData\Local\Temp\bus7721
C:\Users\OLIVIER\AppData\Local\Temp\bus7721.tmp
C:\Users\OLIVIER\AppData\Local\Temp\bus7776
C:\Users\OLIVIER\AppData\Local\Temp\bus7776.tmp
C:\Users\OLIVIER\AppData\Local\Temp\bus7F9E
C:\Users\OLIVIER\AppData\Local\Temp\bus7F9E.tmp
C:\Users\OLIVIER\AppData\Local\Temp\bus8005
C:\Users\OLIVIER\AppData\Local\Temp\bus8005.tmp
C:\Users\OLIVIER\AppData\Local\Temp\bus8403
C:\Users\OLIVIER\AppData\Local\Temp\bus8403.tmp
C:\Users\OLIVIER\AppData\Local\Temp\bus897
C:\Users\OLIVIER\AppData\Local\Temp\bus897.tmp
C:\Users\OLIVIER\AppData\Local\Temp\bus9795
C:\Users\OLIVIER\AppData\Local\Temp\bus9795.tmp
C:\Users\OLIVIER\AppData\Local\Temp\bus9F6D
C:\Users\OLIVIER\AppData\Local\Temp\bus9F6D.tmp
C:\Users\OLIVIER\AppData\Local\Temp\busB4E5
C:\Users\OLIVIER\AppData\Local\Temp\busB4E5.tmp
C:\Users\OLIVIER\AppData\Local\Temp\busBB74
C:\Users\OLIVIER\AppData\Local\Temp\busBB74.tmp
C:\Users\OLIVIER\AppData\Local\Temp\busBC72
C:\Users\OLIVIER\AppData\Local\Temp\busBC72.tmp
C:\Users\OLIVIER\AppData\Local\Temp\busBC8F
C:\Users\OLIVIER\AppData\Local\Temp\busBC8F.tmp
C:\Users\OLIVIER\AppData\Local\Temp\busD7A9
C:\Users\OLIVIER\AppData\Local\Temp\busD7A9.tmp
C:\Users\OLIVIER\AppData\Local\Temp\busDAE4
C:\Users\OLIVIER\AppData\Local\Temp\busDAE4.tmp
C:\Users\OLIVIER\AppData\Local\Temp\busE885
C:\Users\OLIVIER\AppData\Local\Temp\busE885.tmp
C:\Users\OLIVIER\AppData\Local\Temp\busEB07
C:\Users\OLIVIER\AppData\Local\Temp\busEB07.tmp
C:\Users\OLIVIER\AppData\Local\Temp\busEF7
C:\Users\OLIVIER\AppData\Local\Temp\busEF7.tmp
C:\Users\OLIVIER\AppData\Local\Temp\busEF87
C:\Users\OLIVIER\AppData\Local\Temp\busEF87.tmp
C:\Users\OLIVIER\AppData\Local\Temp\busFD19
C:\Users\OLIVIER\AppData\Local\Temp\busFD19.tmp
C:\Users\OLIVIER\AppData\Local\Temp\C211.tmp
C:\Users\OLIVIER\AppData\Local\Temp\C27B.tmp
C:\Users\OLIVIER\AppData\Local\Temp\C4A7E483-847E-4117-9A54-7A34625DF96F.Diagnose.Admin.0.etl
C:\Users\OLIVIER\AppData\Local\Temp\C5BE.tmp
C:\Users\OLIVIER\AppData\Local\Temp\C76F.tmp
C:\Users\OLIVIER\AppData\Local\Temp\C7EC.tmp
C:\Users\OLIVIER\AppData\Local\Temp\C894.tmp
C:\Users\OLIVIER\AppData\Local\Temp\C90E.tmp
C:\Users\OLIVIER\AppData\Local\Temp\CFG392.tmp
C:\Users\OLIVIER\AppData\Local\Temp\Cleaning.ico
C:\Users\OLIVIER\AppData\Local\Temp\cm3qbcme.tmp
C:\Users\OLIVIER\AppData\Local\Temp\connect_result.log
C:\Users\OLIVIER\AppData\Local\Temp\CRX_75DAF8CB7768
C:\Users\OLIVIER\AppData\Local\Temp\CRX_DF399A9B283A
C:\Users\OLIVIER\AppData\Local\Temp\cvfra3ip.tmp
C:\Users\OLIVIER\AppData\Local\Temp\CVRA71C.tmp.cvr
C:\Users\OLIVIER\AppData\Local\Temp\D0F2.tmp
C:\Users\OLIVIER\AppData\Local\Temp\D31D.tmp
C:\Users\OLIVIER\AppData\Local\Temp\D4E0.tmp
C:\Users\OLIVIER\AppData\Local\Temp\D522.tmp
C:\Users\OLIVIER\AppData\Local\Temp\D605.tmp
C:\Users\OLIVIER\AppData\Local\Temp\D61.tmp
C:\Users\OLIVIER\AppData\Local\Temp\D67B.tmp
C:\Users\OLIVIER\AppData\Local\Temp\D74E.tmp
C:\Users\OLIVIER\AppData\Local\Temp\D94CB95F.TMP
C:\Users\OLIVIER\AppData\Local\Temp\dat6484.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat6495.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat6496.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat64A7.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat64B7.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat64C8.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat64D8.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat6A.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat6D84.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat6D85.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat6D95.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat6D96.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat6DA7.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat6DE6.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat6DF7.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat7B.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat7C.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat872E.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat8739.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat873E.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat874A.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat874B.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat874F.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat875F.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat8770.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat8781.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat87B0.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat8D.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat9603.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat9613.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat9624.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat9634.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat9645.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat9646.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat9657.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat9D.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dat9E.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datAF.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datamngr.dll.318557146
C:\Users\OLIVIER\AppData\Local\Temp\datB5B3.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datB5C3.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datB5D4.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datB5D5.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datB5E6.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datB5F6.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datB607.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datBE13.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datBE24.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datBE34.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datBE35.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datBE46.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datBE56.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datBE57.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datE91E.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datE93E.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datE94F.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datE95F.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datE960.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datE981.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datE991.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datEB96.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datEBA6.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datEBE6.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datEBF6.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datEBF7.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datEC46.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datEC57.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datF193.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datF1B3.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datF1C4.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datF1F4.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datF204.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datF215.tmp
C:\Users\OLIVIER\AppData\Local\Temp\datF225.tmp
C:\Users\OLIVIER\AppData\Local\Temp\DBAA.tmp
C:\Users\OLIVIER\AppData\Local\Temp\DBED.tmp
C:\Users\OLIVIER\AppData\Local\Temp\dd_vstor40_x64MSI47EC.txt
C:\Users\OLIVIER\AppData\Local\Temp\dd_vstor40_x64UI47EC.txt
C:\Users\OLIVIER\AppData\Local\Temp\DE0E.tmp
C:\Users\OLIVIER\AppData\Local\Temp\default-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\DF28.tmp
C:\Users\OLIVIER\AppData\Local\Temp\DMI132A.tmp
C:\Users\OLIVIER\AppData\Local\Temp\DMI1479.tmp
C:\Users\OLIVIER\AppData\Local\Temp\DMI264C.tmp
C:\Users\OLIVIER\AppData\Local\Temp\DMI271C.tmp
C:\Users\OLIVIER\AppData\Local\Temp\DMI2BBD.tmp
C:\Users\OLIVIER\AppData\Local\Temp\DMI2FC8.tmp
C:\Users\OLIVIER\AppData\Local\Temp\DMI34B6.tmp
C:\Users\OLIVIER\AppData\Local\Temp\DMI62B5.tmp
C:\Users\OLIVIER\AppData\Local\Temp\DMIC7DD.tmp
C:\Users\OLIVIER\AppData\Local\Temp\DMIFDBF.tmp
C:\Users\OLIVIER\AppData\Local\Temp\Donate.ico
C:\Users\OLIVIER\AppData\Local\Temp\E1F0.tmp
C:\Users\OLIVIER\AppData\Local\Temp\E2BF.tmp
C:\Users\OLIVIER\AppData\Local\Temp\e4jC9E8.tmp_dir6323
C:\Users\OLIVIER\AppData\Local\Temp\e4jECCE.tmp_dir25040
C:\Users\OLIVIER\AppData\Local\Temp\E79A.tmp
C:\Users\OLIVIER\AppData\Local\Temp\E8F6.tmp
C:\Users\OLIVIER\AppData\Local\Temp\E91A.tmp
C:\Users\OLIVIER\AppData\Local\Temp\EAB9.tmp
C:\Users\OLIVIER\AppData\Local\Temp\Easy Photo Print2EPQuicker.log
C:\Users\OLIVIER\AppData\Local\Temp\EBBF.tmp
C:\Users\OLIVIER\AppData\Local\Temp\EFA4.tmp
C:\Users\OLIVIER\AppData\Local\Temp\error.dmp
C:\Users\OLIVIER\AppData\Local\Temp\error.log
C:\Users\OLIVIER\AppData\Local\Temp\ev_1191362-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\ev_1218703-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\ev_1242364-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\ev_1463831-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\ez4ty3w2.tmp
C:\Users\OLIVIER\AppData\Local\Temp\E_S3147.tmp
C:\Users\OLIVIER\AppData\Local\Temp\E_SBA90.tmp
C:\Users\OLIVIER\AppData\Local\Temp\E_SF719.tmp
C:\Users\OLIVIER\AppData\Local\Temp\F48B.tmp
C:\Users\OLIVIER\AppData\Local\Temp\F99A.tmp
C:\Users\OLIVIER\AppData\Local\Temp\FEA7.tmp
C:\Users\OLIVIER\AppData\Local\Temp\FFF5.tmp
C:\Users\OLIVIER\AppData\Local\Temp\flaD2A9.tmp
C:\Users\OLIVIER\AppData\Local\Temp\flaDE94.tmp
C:\Users\OLIVIER\AppData\Local\Temp\FXSTIFFDebugLogFile.txt
C:\Users\OLIVIER\AppData\Local\Temp\g5jhzgv0.tmp
C:\Users\OLIVIER\AppData\Local\Temp\GimmeSetup(201302081623401AE0).log
C:\Users\OLIVIER\AppData\Local\Temp\GimmeSetup(2013051010022619FC).log
C:\Users\OLIVIER\AppData\Local\Temp\GimmeSetup(2013051416452322B0).log
C:\Users\OLIVIER\AppData\Local\Temp\GimmeSetup(20130515071006788).log
C:\Users\OLIVIER\AppData\Local\Temp\GimmeSetup(20130915100940199C).log
C:\Users\OLIVIER\AppData\Local\Temp\GimmeSetup(2013091510173020C8).log
C:\Users\OLIVIER\AppData\Local\Temp\GimmeSetup(201309151024392964).log
C:\Users\OLIVIER\AppData\Local\Temp\GimmeSetup(201310210852001F9C).log
C:\Users\OLIVIER\AppData\Local\Temp\GimmeSetup(2013102108560127BC).log
C:\Users\OLIVIER\AppData\Local\Temp\GimmeSetup(201310310851516A7C).log
C:\Users\OLIVIER\AppData\Local\Temp\GimmeSetup(201311041559385D4).log
C:\Users\OLIVIER\AppData\Local\Temp\GimmeSetup(2013110510403932D4).log
C:\Users\OLIVIER\AppData\Local\Temp\GimmeSetup(20131107140341F6C).log
C:\Users\OLIVIER\AppData\Local\Temp\GimmeSetup(201311191032532CB0).log
C:\Users\OLIVIER\AppData\Local\Temp\GimmeSetup(20131119103602326C).log
C:\Users\OLIVIER\AppData\Local\Temp\GimmeSetup(201311191057471804).log
C:\Users\OLIVIER\AppData\Local\Temp\GimmeSetup(201311191104282594).log
C:\Users\OLIVIER\AppData\Local\Temp\GimmeSetup(2013111911095010F8).log
C:\Users\OLIVIER\AppData\Local\Temp\GimmeSetup(2013111911273317D8).log
C:\Users\OLIVIER\AppData\Local\Temp\GimmeSetup(201311191150465C4).log
C:\Users\OLIVIER\AppData\Local\Temp\go9876.html
C:\Users\OLIVIER\AppData\Local\Temp\Google Toolbar
C:\Users\OLIVIER\AppData\Local\Temp\GoogleToolbarInstaller1.log
C:\Users\OLIVIER\AppData\Local\Temp\GoogleToolbarInstaller2.log
C:\Users\OLIVIER\AppData\Local\Temp\gyz1g0f6.tmp
C:\Users\OLIVIER\AppData\Local\Temp\hc9v1hgt.tmp
C:\Users\OLIVIER\AppData\Local\Temp\HomeGroupUser$.bmp
C:\Users\OLIVIER\AppData\Local\Temp\hsperfdata_OLIVIER
C:\Users\OLIVIER\AppData\Local\Temp\i4j4228186112154286186.tmp
C:\Users\OLIVIER\AppData\Local\Temp\ibtmp7c69303
C:\Users\OLIVIER\AppData\Local\Temp\ibtmp92fd302
C:\Users\OLIVIER\AppData\Local\Temp\ibtmp94d3285
C:\Users\OLIVIER\AppData\Local\Temp\ibtmpa27e462
C:\Users\OLIVIER\AppData\Local\Temp\ibtmpc2f8301
C:\Users\OLIVIER\AppData\Local\Temp\ibtmpdd36304
C:\Users\OLIVIER\AppData\Local\Temp\ic3tjlqg.tmp
C:\Users\OLIVIER\AppData\Local\Temp\iiuninst.exe
C:\Users\OLIVIER\AppData\Local\Temp\ijuzgv95.tmp
C:\Users\OLIVIER\AppData\Local\Temp\install.log
C:\Users\OLIVIER\AppData\Local\Temp\Installhelper.dll
C:\Users\OLIVIER\AppData\Local\Temp\Invité.bmp
C:\Users\OLIVIER\AppData\Local\Temp\is1373634743
C:\Users\OLIVIER\AppData\Local\Temp\is1668783924
C:\Users\OLIVIER\AppData\Local\Temp\is256538528
C:\Users\OLIVIER\AppData\Local\Temp\iSa4A4A.tmp
C:\Users\OLIVIER\AppData\Local\Temp\iSaD2BA.tmp
C:\Users\OLIVIER\AppData\Local\Temp\jar_cache1964487704287109564.tmp
C:\Users\OLIVIER\AppData\Local\Temp\JAUReg.log
C:\Users\OLIVIER\AppData\Local\Temp\java_install.log
C:\Users\OLIVIER\AppData\Local\Temp\java_install_reg.log
C:\Users\OLIVIER\AppData\Local\Temp\java_install_sp.log
C:\Users\OLIVIER\AppData\Local\Temp\jawshtml.html
C:\Users\OLIVIER\AppData\Local\Temp\jinstall.cfg
C:\Users\OLIVIER\AppData\Local\Temp\jre-6u19-windows-i586-iftw-rv.exe
C:\Users\OLIVIER\AppData\Local\Temp\jre-6u21-windows-i586-iftw-rv.exe
C:\Users\OLIVIER\AppData\Local\Temp\jre-6u22-windows-i586-iftw-rv.exe
C:\Users\OLIVIER\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe
C:\Users\OLIVIER\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe
C:\Users\OLIVIER\AppData\Local\Temp\jre-6u39-windows-i586-iftw.exe
C:\Users\OLIVIER\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\OLIVIER\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\OLIVIER\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\OLIVIER\AppData\Local\Temp\JRT.txt
C:\Users\OLIVIER\AppData\Local\Temp\jusched.log
C:\Users\OLIVIER\AppData\Local\Temp\KB2461678_20110903_190145591-Microsoft .NET Framework 4 Client Profile FRA Language Pack-MSP1.txt
C:\Users\OLIVIER\AppData\Local\Temp\KB2461678_20110903_190145591-Microsoft .NET Framework 4 Client Profile-MSP0.txt
C:\Users\OLIVIER\AppData\Local\Temp\KB2461678_20110903_190145591.html
C:\Users\OLIVIER\AppData\Local\Temp\KiesInstall.Log
C:\Users\OLIVIER\AppData\Local\Temp\KiesLiveupdateTemp
C:\Users\OLIVIER\AppData\Local\Temp\KiesSilentUpdateAgent.log
C:\Users\OLIVIER\AppData\Local\Temp\LogMeInRemoteUser.bmp
C:\Users\OLIVIER\AppData\Local\Temp\logs
C:\Users\OLIVIER\AppData\Local\Temp\lunchbtn-1.jpg
C:\Users\OLIVIER\AppData\Local\Temp\lunchbtn-2.jpg
C:\Users\OLIVIER\AppData\Local\Temp\lunchbtn-3.jpg
C:\Users\OLIVIER\AppData\LocalLow\bearsharetoolbarguid
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\History\desktop.ini
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\History\Low\desktop.ini
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\History\Low\History.IE5
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\History\Low\History.IE5\container.dat
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\History\Low\History.IE5\desktop.ini
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\History\History.IE5\container.dat
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.ini
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012013111820131125
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012013120220131209
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012013120920131216
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012013121720131218
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012013121820131219
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012013121920131220
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012013121920131220\container.dat
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012013121820131219\container.dat
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012013121720131218\container.dat
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012013120920131216\container.dat
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012013120220131209\container.dat
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\AntiPhishing
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\BatBrowse_iels
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Sqm
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\C\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\PrivacIE\Low
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\C\ProgramData\Microsoft\Search Enhancement Pack\Search Box Extension
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\C\ProgramData\Microsoft\Search Enhancement Pack\Search Helper
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Sqm\iesqmdata0.sqm
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Sqm\iesqmdata1.sqm
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Sqm\iesqmdata2.sqm
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Sqm\iesqmdata3.sqm
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Sqm\iesqmdata4.sqm
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Sqm\iesqmdata5.sqm
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Sqm\iesqmdata6.sqm
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Sqm\iesqmdata7.sqm
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Sqm\iesqmdata8.sqm
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\desktop.ini
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\MSIMGSIZ.DAT
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\1QBYLGBQ
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9MTE7OXF
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\container.dat
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\desktop.ini
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\GRCUZ0JK
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\index.dat
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PY5W9U5P
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PY5W9U5P\desktop.ini
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\GRCUZ0JK\desktop.ini
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9MTE7OXF\desktop.ini
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\1QBYLGBQ\desktop.ini
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\4A72F430-B40C-4D36-A068-CE33ADA5ADF9.dat
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\ED8654D5-B9F0-4DD9-B3E8-F8F560086FDF.dat
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRF0001.tmp
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRF0002.tmp
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRF{6579F1C8-49E9-4963-9759-AB7CCAC967D8}.tmp
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRF{BB9B3AB7-9EF1-4F14-859F-2A9CBD58F71D}.tmp
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRF{EDEE83A8-3F75-4571-90F2-FEEA5DDF55CB}.tmp
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS0000.tmp
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS0001.tmp
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0440S6AI
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3GZN3BP4
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\400PUU3X
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5RVNTKDV
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\866BGOB1
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C56WBHXF
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\container.dat
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E178JMJ1
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HAF4IULZ
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HXHQFFZM
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I6HQFYPR
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KT1TDKIB
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NT8EVCCR
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O2OE2916
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OKIETGDP
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QXR8Y62V
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QYMD1F45
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V9BC1R9D
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VW6PY79R
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X3CGXHEK
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\-aO_JnhitSs[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\-fcFjVZzv1m[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\-ppZ84nZkgy[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\01net-barre-flottante[1].css
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\02_table_espace_perso[1].css
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\02_table_identification[1].css
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\04_common_de[1].css
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\05888c121940302cc74773a8fdc2f511[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\06_print[1].css
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1076413_582668199_282837569_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1076856_1027808858_1345003374_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1085839_100002594535824_750528552_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1085919_100000867467699_316211049_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\11106[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1115819_100000921831222_370279446_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1116825_100005282644800_301935284_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1117275_1770388471_3183788_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1117920_609752657_963854242_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1117961_1253933144_176309566_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1118304_100001640861499_553411198_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1118305_667099329_1202984324_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1119054_551659768_477945767_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1119240_1428857509_775695625_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\11OAE6dPMcK[1].css
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1209819_350132835112651_1801550499_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1254011023@Top,Top1,Right,Position1,Position2,Position3,Position4,x01,x02,TopLeft[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1391636_10202222707908485_1367590968_a[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1440_900[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1440_900[2].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1456321925@x88[1].htm
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1456321925@x95[1].htm
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1456508_10152153066769017_414640310_n[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1471169_758557247504994_1024483652_n[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1475864_758557090838343_220842325_n[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1480549_10202151540944340_483002236_n[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1510800_689869584380280_1481102720_n[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1525166_758557154171670_575393310_n[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1526997_781643841861262_1761752942_n[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1553d4da21de2187[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\161671_100000481566152_639281698_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\172-51098458t[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\174079_1361216423_1390371530_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\174079_1361216423_1390371530_q[2].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\174476_1158278722_6630561_q[2].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\185661_10150103062413599_4146197_a[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\188029_411009519000619_1762900780_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\1ymuehES2GT[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\2011619376@x95[1].htm
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\2013_06_26_CCM_system_test03_juillet13[1].gif
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\211489_1639323116_3946958_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\211518_616236482_1007930652_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\227s[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\261053_537372953_1052026168_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\273331_583804077_333056242_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\274299_100004758271382_1693690202_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\274936_631011527_1491635355_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\276058_100003026194698_1150347175_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\276380_598003372_222520696_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\276900_221589874536338_3825625_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\2sQDHOjfSsa[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\3-728x90_FR_HIVERN_2013[1].swf
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\308999_457206137684912_18525055_s[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\34055042-4ca78587s[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\34060910-4a3e0be6s[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\36469[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\371663_576895124_2091682488_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\3Nma3JOGQ-3[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\41372_1238280900_294839954_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\41472_1188550995_272_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\41627_703556472_2193_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\41661_1640325555_4084_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\4300ae64-546c-4bbe-9026-6779b3684fb8_32[1].png
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\4300ae64-546c-4bbe-9026-6779b3684fb9_18[1].png
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\4499[1].gif
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\45397ef5454ae6e682d49fff3e6ec047[1].htm
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\468x60_manpower27086[1].gif
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\49151_1820564250_75_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\49217_1164384156_5583_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\49302_100003585043479_1237428809_q[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\4WSewcWboV8[1].png
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\5-banners-bg[1].png
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\5863689-52af0433t[1].png
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\5863698-52b092a7s[1].png
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\5c3f2ced0937fa14bbb011bc8087f94f[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\5Sgn-3WKnie[1].css
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\5vdmAFTChHH[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\635221973887556372_tree[1].png
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\69-4b5e3ee0s[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\6evVkCOGPlz[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\73-104-222[1].png
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\79jfpchNoD9[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\7CM4iHx2wqm[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\800000206960[1].gif
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\800000206960[2].gif
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\800000206960[3].gif
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\800000206960[4].gif
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\800000206960[5].gif
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\851564_539993092729178_1922155812_n[1].png
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\851564_605100996176091_564455213_n[1].png
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\851579_384013675036040_1524257448_n[1].png
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\9782100511778tiny[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\9782100525690tiny[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\98616-15[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\9aHbm0MBaJo[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\9IWDuu39Vw0[1].css
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\a37078527a34983a6fe994cc25edffa3[1].htm
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\adBar[1].css
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\adks_NationZoom[1].exe
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\adperf_launch_1.0.0_scrambled[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\ads[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\ads[2].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\adtrk[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\adwcleaner_1[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\affich-29316054-virus-aidez-moi-s-il-vous-plait[1].htm
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\ai[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\ajax-loaderForum[1].gif
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\animations_2g3XS0rRrCQcqjUAbWvw4w2[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\ANX_async_usersync[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\arc.xd[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\AudioPlayer_IbSj2ROBoiFlNpwTMGi7Ug2[1].css
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\ave3S-m6qr4jSZadbi-bnq[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\AXbdtQOFsWr[1].css
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\bba035bbf2d39cb56832aa0cb5eadaf8[1].htm
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\bg-h2-carrousel-actu[1].png
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\bg_input[1].gif
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\bg_spinner[1].jpg
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\bg_whiteOpa50[1].png
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\blank[1].htm
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\bluemanmxl[1].png
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\blue_cube[1].gif
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\bl_typ10_midd[1].png
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\BoVxv34AKD4[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\BraILklg7c4[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\btn-more-games-origindark[1].png
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\btn_bandeau_back[1].gif
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\btn_donate_LG[1].gif
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\bundle-bundle_jquery_ui_adapte_head[1].css
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\buttons[1].png
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\B_600x300_1[1].gif
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\c0a_Ru1-lYrwgcvupVT3jTdFkw2[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\c3a_UrstjKT1QN8Wi3sp7mSbWA2[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\CA1S78LQ
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\CA6W1X9T
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\CA8C4E68
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\CA8Z0C1W
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\Candy[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\CAOHCG2Q
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\CAX939H2
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\cb=gapi[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\cb=gapi[2].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\cb=gapi[3].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\cb=gapi[4].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\cedexis[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\CFDKbxtNEGO[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\chat[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\cL0p8ezyTfT[1].css
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\clientstring[1].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\clientstring[2].js
C:\Users\OLIVIER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU6C1KCI\clientstring[3].js
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\- Black eyes peas - I gotta feeling.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\100NIKON.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\11F6F962-2A06-4CD7-B988-CB6F3B373CAF-1 - Copie.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\137___04.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\2013-06-28 11.04.23.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\28AD78D6-1767-4EAB-AF37-A81F4C523F0B.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\6677Game.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\Adh_telereg.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\AK000107.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\AK000108.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\AK000109.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\AK000110.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\AK000111.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\AK000113.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\AK000119.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\AK000126.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\AK000127.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\AK000130.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\app.config.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\arret de travail fevrier.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\Attestation-Vierge-a-imprimer---page-1.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\Attestation-Vierge-a-imprimer---page-2.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\AttestationCESU.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\atur ecole.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\black_ops_2_bg_by_bobbygfx-d5mv31w.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\Brouillo inscription chomage 4nov2013.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\Camera.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\cpam marie.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\devoir informatique Romain.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\Documents.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\download.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\démo skorpion.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\f arthur.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\Faune.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\free style dimanche.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\guide micr crèche.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\hip hop skorpion 2.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\hip hop skorpion.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\hoff 2013.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\Images.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\IMG_3000.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\IMG_3001.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\IMG_3009.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\index.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\justificatifs assedic.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\Kies.exe.config.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\Kies.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\LanguagePack.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\les clés hip hop.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\Les garçons.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\lettre envoyée mr Farhat rar du 03.05.13.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\lettre pole emploi.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\LifeFrame.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\MANUAL.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\MARSEILLAISE.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\mbam-log-2013-12-18 (07-43-22).lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\Melle Alves Marie Christine.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\Mes images.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\Netg.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\OLIVIER CV 2011.lnk
C:\Users\OLIVIER\AppData\Roaming\Microsoft\Windows\Recent\OLIVIER CV 2013.lnk
C:\Users\OLIVIER\

kaori64 · Answer

pour delfix il me demande de l'ouvrir sur un programme ?!

Marou81 · Answer

Bonjour,

Télécharge Delfix.

Clique droit sur le programme=> executer en administrateur puis coche suppression outils de désinfection.

A+

kaori64 · Answer

mon ordi ne le télécharge pas! car il dit que le fichier n'a pas pu être vérifier et lorsque je clique sur ouvrir il le stop !

Marou81 · Answer

Bonjour,

 Pour commencer, utilise cet outil :

? Télécharge RogueKiller (de Tigzy) sur le Bureau
? Quitte tous tes programmes en cours
? Lance le (si tu utilises Windows Vista ou 7 : fais un clic-droit dessus et choisis "Exécuter en tant qu'administrateur")
? Patiente pendant le pre-scan, puis clique sur le bouton "Scan"
? A la fin, vérifie que tous les éléments sont cochés puis clique sur "Suppression"
? Un rapport (RKreport.txt) doit être créé sur le Bureau, poste le dans ta prochaine réponse. 

Puis : 

* Télécharge TDSSKiller (de Kaspersky Labs) sur ton Bureau.
* Lance le (si tu utilises Windows Vista ou 7 : fais un clic-droit dessus et choisis "Exécuter en tant qu'administrateur")
* Clique sur [b]Start Scan/b pour démarrer l'analyse.
* Si des éléments néfastes sont identifiés par l'outil, vérifie que [b]Cure/b est bien coché. S'il indique "suspicious", laisse l'option [b]Skip/b.
* Ensuite, clique sur [b]Continue/b puis sur [b]Reboot Now/b si nécessaire.
* Un rapport s'ouvrira au redémarrage de l'ordinateur.
* Copie/colle son contenu dans ta prochaine réponse (il se trouve également sous C:\TDSSKiller.N°deversion_Date_Heure_log.txt)
 
Merci d'avoir suivi mes conseils étape par étape. N'oubliez pas de mettre sujet résolu.

kaori64 · Answer

bonjour et désolée pour l'attente
pour roguekiller même histoire que delfix je n'ai pas pu le télécharger mon ordi le bloc en revanche j'ai essayé tdsskiller et celui la marche ! dois je le faire sans roguekiller?

kaori64 · Answer

PS un bouclier rouge ce met devant le téléchargement et bloc en suite delfix et rogue killer

Marou81 · Answer

Bonjour,

Si tu as un message qui apparait valide et clique executer comme même. (essaie de le faire avec l'antivirus desactivé)

Sinon essaie de le télécharger depuis un autre navigateur pour voir. 

Un autre moyen existe, essaie le mode sans echec avec prise réseau.
 
Merci d'avoir suivi mes conseils étape par étape. N'oubliez pas de mettre sujet résolu.

kaori64 · Answer

j'ai réussi sur un autre navigateur pour rogue killer je ne peux pas selectionner les elements mais voici le rapportRogueKiller V8.7.13 [Dec 18 2013] par Tigzy mail : tigzyRKgmailcom Remontees : http://www.adlice.com/forum/ Site Web : https://www.luanagames.com/index.fr.html Blog : https://www.adlice.com/ Systeme d'exploitation : Windows 7 (6.1.7601 Service Pack 1) 64 bits version Demarrage : Mode normal Utilisateur : OLIVIER [Droits d'admin] Mode : Suppression -- Date : 12/20/2013 13:45:51 | ARK || FAK || MBR | ¤¤¤ Processus malicieux : 1 ¤¤¤ [Microsoft][HIDDEN] dllhost.exe -- \Device\HarddiskVolume2\Windows\System32\dllhost.exe [x] -> TUÉ [TermProc] ¤¤¤ Entrees de registre : 0 ¤¤¤ ¤¤¤ Tâches planifiées : 0 ¤¤¤ ¤¤¤ Entrées Startup : 0 ¤¤¤ ¤¤¤ Navigateurs web : 0 ¤¤¤ ¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤ ¤¤¤ Driver : [NON CHARGE 0x0] ¤¤¤ ¤¤¤ Ruches Externes: ¤¤¤ ¤¤¤ Infection : ¤¤¤ ¤¤¤ Fichier HOSTS: ¤¤¤ --> %SystemRoot%\System32\drivers\etc\hosts ¤¤¤ MBR Verif: ¤¤¤ +++++ PhysicalDrive0: (\.\PHYSICALDRIVE0 @ IDE) Hitachi HTS545032B9A300 +++++ --- User --- [MBR] dacefda7334427c4ba596b95f4a2421b [BSP] 430eaf6ed8558d670d2c84579f07828f : Windows Vista MBR Code Partition table: 0 - [XXXXXX] FAT32-LBA (0x1c) [HIDDEN!] Offset (sectors): 2048 | Size: 14997 Mo 1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 30716280 | Size: 76308 Mo 2 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 186996600 | Size: 213935 Mo User = LL1 ... OK! User = LL2 ... OK! Termine : << RKreport[0]_D_12202013_134551.txt >> RKreport[0]_D_12182013_133737.txt;RKreport[0]_S_12182013_133701.txt;RKreport[0]_S_12202013_134453.txt

kaori64 · Answer

aucun élément trouvé13:48:13.0350 6648 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42 13:48:15.0971 6648 ============================================================ 13:48:15.0971 6648 Current date / time: 2013/12/20 13:48:15.0971 13:48:15.0971 6648 SystemInfo: 13:48:15.0972 6648 13:48:15.0972 6648 OS Version: 6.1.7601 ServicePack: 1.0 13:48:15.0972 6648 Product type: Workstation 13:48:15.0972 6648 ComputerName: OLIVIER-PC 13:48:15.0972 6648 UserName: OLIVIER 13:48:15.0972 6648 Windows directory: C:\Windows 13:48:15.0972 6648 System windows directory: C:\Windows 13:48:15.0972 6648 Running under WOW64 13:48:15.0972 6648 Processor architecture: Intel x64 13:48:15.0972 6648 Number of processors: 2 13:48:15.0972 6648 Page size: 0x1000 13:48:15.0972 6648 Boot type: Normal boot 13:48:15.0972 6648 ============================================================ 13:48:18.0314 6648 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 13:48:18.0343 6648 ============================================================ 13:48:18.0343 6648 \Device\Harddisk0\DR0: 13:48:18.0344 6648 MBR partitions: 13:48:18.0344 6648 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1D4B178, BlocksNum 0x950A600 13:48:18.0368 6648 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xB2557B7, BlocksNum 0x1A1D7F0A 13:48:18.0368 6648 ============================================================ 13:48:18.0369 6648 C: <-> \Device\Harddisk0\DR0\Partition1 13:48:18.0385 6648 D: <-> \Device\Harddisk0\DR0\Partition2 13:48:18.0385 6648 ============================================================ 13:48:18.0385 6648 Initialize success 13:48:18.0385 6648 ============================================================ 13:48:46.0988 11184 ============================================================ 13:48:46.0988 11184 Scan started 13:48:46.0988 11184 Mode: Manual; 13:48:46.0988 11184 ============================================================ 13:48:48.0023 11184 ================ Scan system memory ======================== 13:48:48.0024 11184 System memory - ok 13:48:48.0024 11184 ================ Scan services ============================= 13:48:48.0207 11184 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys 13:48:48.0210 11184 1394ohci - ok 13:48:48.0329 11184 [ B33CF4DE909A5B30F526D82053A63C8E ] ABBYY.Licensing.FineReader.Sprint.9.0 C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe 13:48:48.0337 11184 ABBYY.Licensing.FineReader.Sprint.9.0 - ok 13:48:48.0360 11184 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys 13:48:48.0363 11184 ACPI - ok 13:48:48.0407 11184 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys 13:48:48.0407 11184 AcpiPmi - ok 13:48:48.0517 11184 [ 1BA1AB4141A92EB34DA99F1249CA2D4D ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 13:48:48.0519 11184 AdobeFlashPlayerUpdateSvc - ok 13:48:48.0555 11184 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys 13:48:48.0558 11184 adp94xx - ok 13:48:48.0584 11184 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys 13:48:48.0587 11184 adpahci - ok 13:48:48.0614 11184 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys 13:48:48.0616 11184 adpu320 - ok 13:48:48.0703 11184 [ C0BF554D2277F7A4C735D475ADE2E3B2 ] ADSMService C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe 13:48:48.0705 11184 ADSMService - ok 13:48:48.0735 11184 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 13:48:48.0737 11184 AeLookupSvc - ok 13:48:48.0783 11184 [ FB2BE0BAE9B3F248080CDBF91EF16C7F ] AFBAgent C:\Windows\system32\FBAgent.exe 13:48:48.0790 11184 AFBAgent - ok 13:48:48.0828 11184 [ 79059559E89D06E8B80CE2944BE20228 ] AFD C:\Windows\system32\drivers\afd.sys 13:48:48.0832 11184 AFD - ok 13:48:48.0886 11184 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys 13:48:48.0887 11184 agp440 - ok 13:48:48.0918 11184 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe 13:48:48.0920 11184 ALG - ok 13:48:49.0065 11184 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys 13:48:49.0066 11184 aliide - ok 13:48:49.0177 11184 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys 13:48:49.0178 11184 amdide - ok 13:48:49.0341 11184 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys 13:48:49.0343 11184 AmdK8 - ok 13:48:49.0431 11184 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys 13:48:49.0432 11184 AmdPPM - ok 13:48:49.0478 11184 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys 13:48:49.0481 11184 amdsata - ok 13:48:49.0523 11184 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys 13:48:49.0526 11184 amdsbs - ok 13:48:49.0595 11184 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys 13:48:49.0596 11184 amdxata - ok 13:48:49.0661 11184 [ 391887990CDAA83DE5C56C3FDE966DA1 ] AmUStor C:\Windows\system32\drivers\AmUStor.SYS 13:48:49.0662 11184 AmUStor - ok 13:48:49.0746 11184 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys 13:48:49.0748 11184 AppID - ok 13:48:49.0807 11184 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll 13:48:49.0809 11184 AppIDSvc - ok 13:48:49.0879 11184 [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo C:\Windows\System32\appinfo.dll 13:48:49.0914 11184 Appinfo - ok 13:48:50.0016 11184 [ 20F6F19FE9E753F2780DC2FA083AD597 ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 13:48:50.0018 11184 Apple Mobile Device - ok 13:48:50.0088 11184 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys 13:48:50.0090 11184 arc - ok 13:48:50.0145 11184 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys 13:48:50.0147 11184 arcsas - ok 13:48:50.0222 11184 [ 88FBC8BEBFD38566235EAA5E4DBC4E05 ] AsDsm C:\Windows\system32\drivers\AsDsm.sys 13:48:50.0224 11184 AsDsm - ok 13:48:50.0289 11184 [ 18E5C2F937F9DEB8C282DF66A3761925 ] ASLDRService C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe 13:48:50.0291 11184 ASLDRService - ok 13:48:50.0360 11184 [ 2DB34EDD17D3A8DA7105A19C95A3DD68 ] ASMMAP64 C:\Program Files\ATKGFNEX\ASMMAP64.sys 13:48:50.0361 11184 ASMMAP64 - ok 13:48:50.0424 11184 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 13:48:50.0425 11184 AsyncMac - ok 13:48:50.0491 11184 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys 13:48:50.0492 11184 atapi - ok 13:48:50.0633 11184 [ 0ACC06FCF46F64ED4F11E57EE461C1F4 ] athr C:\Windows\system32\DRIVERS\athrx.sys 13:48:50.0648 11184 athr - ok 13:48:50.0708 11184 [ 7C157574A181B19B9DCF5F339E25337E ] ATKGFNEXSrv C:\Program Files\ATKGFNEX\GFNEXSrv.exe 13:48:50.0709 11184 ATKGFNEXSrv - ok 13:48:50.0835 11184 [ FC0E8778C000291CAF60EB88C011E931 ] atksgt C:\Windows\system32\DRIVERS\atksgt.sys 13:48:50.0839 11184 atksgt - ok 13:48:50.0962 11184 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 13:48:51.0037 11184 AudioEndpointBuilder - ok 13:48:51.0053 11184 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll 13:48:51.0061 11184 AudioSrv - ok 13:48:51.0125 11184 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll 13:48:51.0129 11184 AxInstSV - ok 13:48:51.0208 11184 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys 13:48:51.0213 11184 b06bdrv - ok 13:48:51.0298 11184 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys 13:48:51.0302 11184 b57nd60a - ok 13:48:51.0358 11184 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll 13:48:51.0384 11184 BDESVC - ok 13:48:51.0431 11184 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys 13:48:51.0433 11184 Beep - ok 13:48:51.0562 11184 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll 13:48:51.0582 11184 BFE - ok 13:48:51.0683 11184 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll 13:48:51.0744 11184 BITS - ok 13:48:51.0775 11184 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys 13:48:51.0776 11184 blbdrive - ok 13:48:51.0874 11184 [ F2060A34C8A75BC24A9222EB4F8C07BD ] Bonjour Service C:\Program Files (x86)\Bonjour\mDNSResponder.exe 13:48:51.0879 11184 Bonjour Service - ok 13:48:51.0934 11184 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys 13:48:51.0936 11184 bowser - ok 13:48:52.0040 11184 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys 13:48:52.0041 11184 BrFiltLo - ok 13:48:52.0086 11184 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys 13:48:52.0087 11184 BrFiltUp - ok 13:48:52.0116 11184 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll 13:48:52.0120 11184 Browser - ok 13:48:52.0208 11184 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys 13:48:52.0212 11184 Brserid - ok 13:48:52.0280 11184 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys 13:48:52.0282 11184 BrSerWdm - ok 13:48:52.0330 11184 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys 13:48:52.0331 11184 BrUsbMdm - ok 13:48:52.0372 11184 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys 13:48:52.0373 11184 BrUsbSer - ok 13:48:52.0408 11184 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys 13:48:52.0409 11184 BTHMODEM - ok 13:48:52.0487 11184 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll 13:48:52.0532 11184 bthserv - ok 13:48:52.0585 11184 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 13:48:52.0587 11184 cdfs - ok 13:48:52.0689 11184 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\drivers\cdrom.sys 13:48:52.0691 11184 cdrom - ok 13:48:52.0878 11184 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll 13:48:52.0881 11184 CertPropSvc - ok 13:48:52.0922 11184 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys 13:48:52.0924 11184 circlass - ok 13:48:53.0027 11184 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys 13:48:53.0034 11184 CLFS - ok 13:48:53.0159 11184 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 13:48:53.0161 11184 clr_optimization_v2.0.50727_32 - ok 13:48:53.0222 11184 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 13:48:53.0224 11184 clr_optimization_v2.0.50727_64 - ok 13:48:53.0269 11184 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 13:48:53.0271 11184 clr_optimization_v4.0.30319_32 - ok 13:48:53.0338 11184 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 13:48:53.0341 11184 clr_optimization_v4.0.30319_64 - ok 13:48:53.0364 11184 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys 13:48:53.0365 11184 CmBatt - ok 13:48:53.0395 11184 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys 13:48:53.0396 11184 cmdide - ok 13:48:53.0435 11184 [ EBF28856F69CF094A902F884CF989706 ] CNG C:\Windows\system32\Drivers\cng.sys 13:48:53.0440 11184 CNG - ok 13:48:53.0475 11184 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys 13:48:53.0476 11184 Compbatt - ok 13:48:53.0504 11184 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys 13:48:53.0505 11184 CompositeBus - ok 13:48:53.0511 11184 COMSysApp - ok 13:48:53.0529 11184 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys 13:48:53.0529 11184 crcdisk - ok 13:48:53.0571 11184 [ 6B400F211BEE880A37A1ED0368776BF4 ] CryptSvc C:\Windows\system32\cryptsvc.dll 13:48:53.0574 11184 CryptSvc - ok 13:48:53.0618 11184 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32 pcss.dll 13:48:53.0628 11184 DcomLaunch - ok 13:48:53.0662 11184 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll 13:48:53.0667 11184 defragsvc - ok 13:48:53.0698 11184 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys 13:48:53.0699 11184 DfsC - ok 13:48:53.0720 11184 [ DEF365F0F6E017888C4B869D3BA4B8E0 ] dgderdrv C:\Windows\system32\drivers\dgderdrv.sys 13:48:53.0721 11184 dgderdrv - ok 13:48:53.0751 11184 [ 0B3F6C8F93C5C25977EA5A8B2E656357 ] dg_ssudbus C:\Windows\system32\DRIVERS\ssudbus.sys 13:48:53.0753 11184 dg_ssudbus - ok 13:48:53.0788 11184 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll 13:48:53.0793 11184 Dhcp - ok 13:48:53.0813 11184 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys 13:48:53.0814 11184 discache - ok 13:48:53.0825 11184 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys 13:48:53.0826 11184 Disk - ok 13:48:53.0847 11184 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll 13:48:53.0851 11184 Dnscache - ok 13:48:53.0892 11184 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll 13:48:53.0897 11184 dot3svc - ok 13:48:53.0921 11184 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll 13:48:53.0924 11184 DPS - ok 13:48:53.0931 11184 drksmaaw - ok 13:48:53.0981 11184 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 13:48:53.0981 11184 drmkaud - ok 13:48:54.0051 11184 [ 88612F1CE3BF42256913BF6E61C70D52 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 13:48:54.0062 11184 DXGKrnl - ok 13:48:54.0181 11184 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll 13:48:54.0238 11184 EapHost - ok 13:48:54.0567 11184 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys 13:48:54.0592 11184 ebdrv - ok 13:48:54.0649 11184 [ 4D71227301DD8D09097B9E4CC6527E5A ] EFS C:\Windows\System32\lsass.exe 13:48:54.0655 11184 EFS - ok 13:48:54.0820 11184 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe 13:48:54.0827 11184 ehRecvr - ok 13:48:54.0900 11184 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe 13:48:54.0903 11184 ehSched - ok 13:48:54.0990 11184 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys 13:48:54.0996 11184 elxstor - ok 13:48:55.0106 11184 [ ABDD5AD016AFFD34AD40E944CE94BF59 ] EpsonBidirectionalService C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe 13:48:55.0107 11184 EpsonBidirectionalService - ok 13:48:55.0169 11184 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys 13:48:55.0170 11184 ErrDev - ok 13:48:55.0246 11184 [ 5CD1005B9BC241C3AB8501D5FBF09FD4 ] ETD C:\Windows\system32\DRIVERS\ETD.sys 13:48:55.0249 11184 ETD - ok 13:48:55.0256 11184 euiplnkm - ok 13:48:55.0365 11184 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll 13:48:55.0372 11184 EventSystem - ok 13:48:55.0447 11184 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys 13:48:55.0450 11184 exfat - ok 13:48:55.0505 11184 exjwdcdr - ok 13:48:55.0555 11184 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys 13:48:55.0557 11184 fastfat - ok 13:48:55.0634 11184 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe 13:48:55.0700 11184 Fax - ok 13:48:55.0769 11184 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys 13:48:55.0771 11184 fdc - ok 13:48:55.0832 11184 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll 13:48:55.0857 11184 fdPHost - ok 13:48:55.0885 11184 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll 13:48:55.0934 11184 FDResPub - ok 13:48:55.0973 11184 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 13:48:55.0975 11184 FileInfo - ok 13:48:56.0027 11184 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys 13:48:56.0029 11184 Filetrace - ok 13:48:56.0085 11184 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys 13:48:56.0087 11184 flpydisk - ok 13:48:56.0180 11184 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 13:48:56.0184 11184 FltMgr - ok 13:48:56.0307 11184 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\Windows\system32\FntCache.dll 13:48:56.0376 11184 FontCache - ok 13:48:56.0461 11184 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 13:48:56.0463 11184 FontCache3.0.0.0 - ok 13:48:56.0561 11184 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys 13:48:56.0562 11184 FsDepends - ok 13:48:56.0614 11184 [ 07DA62C960DDCCC2D35836AEAB4FC578 ] fssfltr C:\Windows\system32\DRIVERS\fssfltr.sys 13:48:56.0616 11184 fssfltr - ok 13:48:56.0813 11184 [ 28DDEEEC44E988657B732CF404D504CB ] fsssvc C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe 13:48:56.0828 11184 fsssvc - ok 13:48:57.0142 11184 [ DDEE99DC54EFA20BD5A442CD733C4462 ] FsUsbExDisk C:\Windows\SysWOW64\FsUsbExDisk.SYS 13:48:57.0145 11184 FsUsbExDisk - ok 13:48:57.0213 11184 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 13:48:57.0214 11184 Fs_Rec - ok 13:48:57.0278 11184 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys 13:48:57.0282 11184 fvevol - ok 13:48:57.0355 11184 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys 13:48:57.0356 11184 gagp30kx - ok 13:48:57.0451 11184 [ E403AACF8C7BB11375122D2464560311 ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 13:48:57.0453 11184 GEARAspiWDM - ok 13:48:57.0584 11184 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll 13:48:57.0636 11184 gpsvc - ok 13:48:57.0757 11184 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 13:48:57.0759 11184 gupdate - ok 13:48:57.0774 11184 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 13:48:57.0776 11184 gupdatem - ok 13:48:57.0809 11184 [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe 13:48:57.0811 11184 gusvc - ok 13:48:57.0886 11184 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys 13:48:57.0888 11184 hcw85cir - ok 13:48:57.0920 11184 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys 13:48:57.0924 11184 HdAudAddService - ok 13:48:57.0955 11184 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys 13:48:57.0957 11184 HDAudBus - ok 13:48:57.0974 11184 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys 13:48:57.0975 11184 HidBatt - ok 13:48:57.0999 11184 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys 13:48:58.0001 11184 HidBth - ok 13:48:58.0024 11184 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys 13:48:58.0026 11184 HidIr - ok 13:48:58.0052 11184 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll 13:48:58.0056 11184 hidserv - ok 13:48:58.0091 11184 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\drivers\hidusb.sys 13:48:58.0092 11184 HidUsb - ok 13:48:58.0125 11184 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll 13:48:58.0131 11184 hkmsvc - ok 13:48:58.0167 11184 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll 13:48:58.0174 11184 HomeGroupListener - ok 13:48:58.0202 11184 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll 13:48:58.0212 11184 HomeGroupProvider - ok 13:48:58.0249 11184 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys 13:48:58.0251 11184 HpSAMD - ok 13:48:58.0331 11184 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys 13:48:58.0338 11184 HTTP - ok 13:48:58.0371 11184 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys 13:48:58.0382 11184 hwpolicy - ok 13:48:58.0459 11184 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys 13:48:58.0461 11184 i8042prt - ok 13:48:58.0505 11184 [ 1D004CB1DA6323B1F55CAEF7F94B61D9 ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys 13:48:58.0509 11184 iaStor - ok 13:48:58.0543 11184 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys 13:48:58.0546 11184 iaStorV - ok 13:48:58.0626 11184 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 13:48:58.0632 11184 idsvc - ok 13:48:59.0352 11184 [ 677AA5991026A65ADA128C4B59CF2BAD ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys 13:48:59.0418 11184 igfx - ok 13:48:59.0521 11184 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys 13:48:59.0523 11184 iirsp - ok 13:48:59.0579 11184 [ 344789398EC3EE5A4E00C52B31847946 ] IKEEXT C:\Windows\System32\ikeext.dll 13:48:59.0643 11184 IKEEXT - ok 13:48:59.0691 11184 [ D485D3BD3E2179AA86853A182F70699F ] IntcHdmiAddService C:\Windows\system32\drivers\IntcHdmi.sys 13:48:59.0694 11184 IntcHdmiAddService - ok 13:48:59.0785 11184 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys 13:48:59.0787 11184 intelide - ok 13:48:59.0841 11184 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys 13:48:59.0843 11184 intelppm - ok 13:48:59.0897 11184 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll 13:48:59.0925 11184 IPBusEnum - ok 13:48:59.0997 11184 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 13:49:00.0000 11184 IpFilterDriver - ok 13:49:00.0068 11184 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 13:49:00.0171 11184 iphlpsvc - ok 13:49:00.0209 11184 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys 13:49:00.0210 11184 IPMIDRV - ok 13:49:00.0314 11184 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys 13:49:00.0317 11184 IPNAT - ok 13:49:00.0418 11184 [ D38469601B72D2DA4F847FC642174E21 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe 13:49:00.0427 11184 iPod Service - ok 13:49:00.0497 11184 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys 13:49:00.0498 11184 IRENUM - ok 13:49:00.0607 11184 iSafeNetFilter - ok 13:49:00.0671 11184 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys 13:49:00.0673 11184 isapnp - ok 13:49:00.0794 11184 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys 13:49:00.0798 11184 iScsiPrt - ok 13:49:00.0894 11184 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys 13:49:00.0896 11184 kbdclass - ok 13:49:00.0935 11184 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys 13:49:00.0937 11184 kbdhid - ok 13:49:01.0031 11184 [ E63EF8C3271D014F14E2469CE75FECB4 ] kbfiltr C:\Windows\system32\DRIVERS\kbfiltr.sys 13:49:01.0033 11184 kbfiltr - ok 13:49:01.0071 11184 [ 4D71227301DD8D09097B9E4CC6527E5A ] KeyIso C:\Windows\system32\lsass.exe 13:49:01.0077 11184 KeyIso - ok 13:49:01.0139 11184 [ 8F489706472F7E9A06BAAA198703FA64 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 13:49:01.0141 11184 KSecDD - ok 13:49:01.0227 11184 [ 868A2CAAB12EFC7A021682BCA0EEC54C ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys 13:49:01.0230 11184 KSecPkg - ok 13:49:01.0275 11184 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys 13:49:01.0277 11184 ksthunk - ok 13:49:01.0364 11184 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll 13:49:01.0376 11184 KtmRm - ok 13:49:01.0406 11184 [ 1541D77D3EB41177BD7026D49948AA95 ] L1E C:\Windows\system32\DRIVERS\L1E62x64.sys 13:49:01.0407 11184 L1E - ok 13:49:01.0512 11184 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll 13:49:01.0535 11184 LanmanServer - ok 13:49:01.0604 11184 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 13:49:01.0630 11184 LanmanWorkstation - ok 13:49:01.0688 11184 [ 156AB2E56DC3CA0B582E3362E07CDED7 ] lirsgt C:\Windows\system32\DRIVERS\lirsgt.sys 13:49:01.0690 11184 lirsgt - ok 13:49:01.0769 11184 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 13:49:01.0771 11184 lltdio - ok 13:49:01.0831 11184 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll 13:49:01.0841 11184 lltdsvc - ok 13:49:01.0896 11184 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll 13:49:01.0902 11184 lmhosts - ok 13:49:02.0022 11184 [ 0D24A12E77A115ED4B807A626EC039BE ] LMIGuardianSvc C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe 13:49:02.0026 11184 LMIGuardianSvc - ok 13:49:02.0167 11184 [ 0F28935ECF1FBDEC22BAF720A5A94564 ] LMIInfo C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys 13:49:02.0168 11184 LMIInfo - ok 13:49:02.0199 11184 [ 777C479BBB31FD1F8ED80BAA75F4AEC1 ] LMIMaint C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe 13:49:02.0203 11184 LMIMaint - ok 13:49:02.0263 11184 [ 413ECDCFAD9A82804D3674C8D7EEC24E ] lmimirr C:\Windows\system32\DRIVERS\lmimirr.sys 13:49:02.0264 11184 lmimirr - ok 13:49:02.0272 11184 LMIRfsClientNP - ok 13:49:02.0331 11184 [ C57D3FAA50E6F395759FFB7C709BD944 ] LMIRfsDriver C:\Windows\system32\drivers\LMIRfsDriver.sys 13:49:02.0334 11184 LMIRfsDriver - ok 13:49:02.0403 11184 [ D3760BC17E1755091B7120CF32DBF56B ] LogMeIn C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe 13:49:02.0406 11184 LogMeIn - ok 13:49:02.0463 11184 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys 13:49:02.0465 11184 LSI_FC - ok 13:49:02.0533 11184 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys 13:49:02.0535 11184 LSI_SAS - ok 13:49:02.0594 11184 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys 13:49:02.0596 11184 LSI_SAS2 - ok 13:49:02.0665 11184 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys 13:49:02.0667 11184 LSI_SCSI - ok 13:49:02.0706 11184 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys 13:49:02.0708 11184 luafv - ok 13:49:02.0769 11184 [ 085435AE1A124361304044029B5CC644 ] lullaby C:\Windows\system32\DRIVERS\lullaby.sys 13:49:02.0770 11184 lullaby - ok 13:49:02.0804 11184 [ 0BB97D43299910CBFBA59C461B99B910 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys 13:49:02.0805 11184 MBAMProtector - ok 13:49:02.0857 11184 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe 13:49:02.0860 11184 MBAMScheduler - ok 13:49:02.0909 11184 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe 13:49:02.0913 11184 MBAMService - ok 13:49:02.0941 11184 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll 13:49:02.0945 11184 Mcx2Svc - ok 13:49:03.0033 11184 [ 11F714F85530A2BD134074DC30E99FCA ] MDM C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE 13:49:03.0037 11184 MDM - ok 13:49:03.0070 11184 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys 13:49:03.0072 11184 megasas - ok 13:49:03.0109 11184 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys 13:49:03.0112 11184 MegaSR - ok 13:49:03.0148 11184 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll 13:49:03.0154 11184 MMCSS - ok 13:49:03.0191 11184 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys 13:49:03.0193 11184 Modem - ok 13:49:03.0211 11184 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys 13:49:03.0212 11184 monitor - ok 13:49:03.0236 11184 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\drivers\mouclass.sys 13:49:03.0237 11184 mouclass - ok 13:49:03.0251 11184 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 13:49:03.0252 11184 mouhid - ok 13:49:03.0292 11184 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys 13:49:03.0294 11184 mountmgr - ok 13:49:03.0340 11184 [ C6B88D62F20AC646C6BD5C032EC2FAF9 ] MpFilter C:\Windows\system32\DRIVERS\MpFilter.sys 13:49:03.0342 11184 MpFilter - ok 13:49:03.0375 11184 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys 13:49:03.0376 11184 mpio - ok 13:49:03.0415 11184 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 13:49:03.0417 11184 mpsdrv - ok 13:49:03.0457 11184 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll 13:49:03.0469 11184 MpsSvc - ok 13:49:03.0493 11184 [ 1A4F75E63C9FB84B85DFFC6B63FD5404 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 13:49:03.0495 11184 MRxDAV - ok 13:49:03.0541 11184 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 13:49:03.0543 11184 mrxsmb - ok 13:49:03.0596 11184 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 13:49:03.0599 11184 mrxsmb10 - ok 13:49:03.0620 11184 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 13:49:03.0622 11184 mrxsmb20 - ok 13:49:03.0644 11184 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys 13:49:03.0645 11184 msahci - ok 13:49:03.0672 11184 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys 13:49:03.0674 11184 msdsm - ok 13:49:03.0707 11184 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe 13:49:03.0727 11184 MSDTC - ok 13:49:03.0772 11184 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys 13:49:03.0774 11184 Msfs - ok 13:49:03.0865 11184 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys 13:49:03.0867 11184 mshidkmdf - ok 13:49:03.0990 11184 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys 13:49:03.0992 11184 msisadrv - ok 13:49:04.0125 11184 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll 13:49:04.0132 11184 MSiSCSI - ok 13:49:04.0141 11184 msiserver - ok 13:49:04.0190 11184 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 13:49:04.0192 11184 MSKSSRV - ok 13:49:04.0304 11184 [ 7675E15D1B2180745E4DA4D26AAD7385 ] MsMpSvc C:\Program Files\Microsoft Security Client\MsMpEng.exe 13:49:04.0306 11184 MsMpSvc - ok 13:49:04.0360 11184 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 13:49:04.0364 11184 MSPCLOCK - ok 13:49:04.0424 11184 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 13:49:04.0425 11184 MSPQM - ok 13:49:04.0506 11184 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 13:49:04.0510 11184 MsRPC - ok 13:49:04.0567 11184 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys 13:49:04.0569 11184 mssmbios - ok 13:49:04.0608 11184 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 13:49:04.0609 11184 MSTEE - ok 13:49:04.0680 11184 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys 13:49:04.0682 11184 MTConfig - ok 13:49:04.0757 11184 [ 032D35C996F21D19A205A7C8F0B76F3C ] MTsensor C:\Windows\system32\DRIVERS\ATK64AMD.sys 13:49:04.0759 11184 MTsensor - ok 13:49:04.0829 11184 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys 13:49:04.0831 11184 Mup - ok 13:49:04.0906 11184 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll 13:49:04.0957 11184 napagent - ok 13:49:05.0006 11184 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS wifi.sys 13:49:05.0011 11184 NativeWifiP - ok 13:49:05.0110 11184 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers dis.sys 13:49:05.0120 11184 NDIS - ok 13:49:05.0207 11184 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS discap.sys 13:49:05.0209 11184 NdisCap - ok 13:49:05.0268 11184 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS distapi.sys 13:49:05.0270 11184 NdisTapi - ok 13:49:05.0350 11184 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS disuio.sys 13:49:05.0352 11184 Ndisuio - ok 13:49:05.0474 11184 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS diswan.sys 13:49:05.0477 11184 NdisWan - ok 13:49:05.0513 11184 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 13:49:05.0515 11184 NDProxy - ok 13:49:05.0605 11184 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS etbios.sys 13:49:05.0607 11184 NetBIOS - ok 13:49:05.0695 11184 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS etbt.sys 13:49:05.0700 11184 NetBT - ok 13:49:05.0749 11184 [ 4D71227301DD8D09097B9E4CC6527E5A ] Netlogon C:\Windows\system32\lsass.exe 13:49:05.0754 11184 Netlogon - ok 13:49:05.0831 11184 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32 etman.dll 13:49:05.0881 11184 Netman - ok 13:49:05.0944 11184 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32 etprofm.dll 13:49:06.0033 11184 netprofm - ok 13:49:06.0074 11184 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe 13:49:06.0076 11184 NetTcpPortSharing - ok 13:49:06.0187 11184 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS frd960.sys 13:49:06.0189 11184 nfrd960 - ok 13:49:06.0245 11184 [ ACE8C64C57E4A711473C8BC10ADF692B ] NisDrv C:\Windows\system32\DRIVERS\NisDrvWFP.sys 13:49:06.0247 11184 NisDrv - ok 13:49:06.0344 11184 [ 6247E8B31ED0A9D6BC5A26276E49BEB3 ] NisSrv C:\Program Files\Microsoft Security Client\NisSrv.exe 13:49:06.0348 11184 NisSrv - ok 13:49:06.0426 11184 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32 lasvc.dll 13:49:06.0436 11184 NlaSvc - ok 13:49:06.0518 11184 [ FD306FBCCE7ADB1077B709742E7148E9 ] NMSAccessU C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe 13:49:06.0521 11184 NMSAccessU - ok 13:49:06.0588 11184 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys 13:49:06.0590 11184 Npfs - ok 13:49:06.0631 11184 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32 sisvc.dll 13:49:06.0653 11184 nsi - ok 13:49:06.0690 11184 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers siproxy.sys 13:49:06.0692 11184 nsiproxy - ok 13:49:06.0854 11184 [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 13:49:06.0871 11184 Ntfs - ok 13:49:06.0933 11184 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys 13:49:06.0935 11184 Null - ok 13:49:07.0044 11184 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers vraid.sys 13:49:07.0047 11184 nvraid - ok 13:49:07.0138 11184 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers vstor.sys 13:49:07.0142 11184 nvstor - ok 13:49:07.0186 11184 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers v_agp.sys 13:49:07.0188 11184 nv_agp - ok 13:49:07.0330 11184 [ 649791F5B905E6A8ECCED15AD8EFD436 ] OberonGameConsoleService C:\Program Files (x86)\Asus\Game Park\GameConsole\OberonGameConsoleService.exe 13:49:07.0332 11184 OberonGameConsoleService - ok 13:49:07.0376 11184 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys 13:49:07.0378 11184 ohci1394 - ok 13:49:07.0431 11184 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll 13:49:07.0452 11184 p2pimsvc - ok 13:49:07.0522 11184 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll 13:49:07.0534 11184 p2psvc - ok 13:49:07.0574 11184 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys 13:49:07.0576 11184 Parport - ok 13:49:07.0611 11184 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys 13:49:07.0613 11184 partmgr - ok 13:49:07.0646 11184 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll 13:49:07.0652 11184 PcaSvc - ok 13:49:07.0670 11184 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys 13:49:07.0671 11184 pci - ok 13:49:07.0718 11184 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys 13:49:07.0719 11184 pciide - ok 13:49:07.0788 11184 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys 13:49:07.0791 11184 pcmcia - ok 13:49:07.0818 11184 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys 13:49:07.0820 11184 pcw - ok 13:49:07.0872 11184 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys 13:49:07.0879 11184 PEAUTH - ok 13:49:07.0959 11184 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe 13:49:07.0965 11184 PerfHost - ok 13:49:08.0054 11184 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll 13:49:08.0073 11184 pla - ok 13:49:08.0128 11184 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll 13:49:08.0138 11184 PlugPlay - ok 13:49:08.0144 11184 PnkBstrA - ok 13:49:08.0174 11184 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll 13:49:08.0180 11184 PNRPAutoReg - ok 13:49:08.0209 11184 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll 13:49:08.0215 11184 PNRPsvc - ok 13:49:08.0258 11184 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 13:49:08.0267 11184 PolicyAgent - ok 13:49:08.0309 11184 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll 13:49:08.0316 11184 Power - ok 13:49:08.0349 11184 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS aspptp.sys 13:49:08.0350 11184 PptpMiniport - ok 13:49:08.0374 11184 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys 13:49:08.0376 11184 Processor - ok 13:49:08.0402 11184 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll 13:49:08.0410 11184 ProfSvc - ok 13:49:08.0437 11184 [ 4D71227301DD8D09097B9E4CC6527E5A ] ProtectedStorage C:\Windows\system32\lsass.exe 13:49:08.0441 11184 ProtectedStorage - ok 13:49:08.0470 11184 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys 13:49:08.0472 11184 Psched - ok 13:49:08.0591 11184 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys 13:49:08.0605 11184 ql2300 - ok 13:49:08.0727 11184 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys 13:49:08.0729 11184 ql40xx - ok 13:49:08.0880 11184 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll 13:49:08.0934 11184 QWAVE - ok 13:49:09.0077 11184 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 13:49:09.0079 11184 QWAVEdrv - ok 13:49:09.0143 11184 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS asacd.sys 13:49:09.0145 11184 RasAcd - ok 13:49:09.0219 11184 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys 13:49:09.0220 11184 RasAgileVpn - ok 13:49:09.0290 11184 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32 asauto.dll 13:49:09.0299 11184 RasAuto - ok 13:49:09.0379 11184 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS asl2tp.sys 13:49:09.0381 11184 Rasl2tp - ok 13:49:09.0459 11184 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32 asmans.dll 13:49:09.0495 11184 RasMan - ok 13:49:09.0578 11184 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS aspppoe.sys 13:49:09.0581 11184 RasPppoe - ok 13:49:09.0645 11184 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS assstp.sys 13:49:09.0648 11184 RasSstp - ok 13:49:09.0744 11184 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS dbss.sys 13:49:09.0748 11184 rdbss - ok 13:49:09.0815 11184 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS dpbus.sys 13:49:09.0817 11184 rdpbus - ok 13:49:09.0923 11184 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 13:49:09.0924 11184 RDPCDD - ok 13:49:09.0976 11184 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers dpencdd.sys 13:49:09.0978 11184 RDPENCDD - ok 13:49:10.0023 11184 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers dprefmp.sys 13:49:10.0025 11184 RDPREFMP - ok 13:49:10.0097 11184 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 13:49:10.0101 11184 RDPWD - ok 13:49:10.0195 11184 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers dyboost.sys 13:49:10.0199 11184 rdyboost - ok 13:49:10.0260 11184 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll 13:49:10.0289 11184 RemoteAccess - ok 13:49:10.0358 11184 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32 egsvc.dll 13:49:10.0369 11184 RemoteRegistry - ok 13:49:10.0415 11184 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll 13:49:10.0484 11184 RpcEptMapper - ok 13:49:10.0525 11184 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe 13:49:10.0530 11184 RpcLocator - ok 13:49:10.0631 11184 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32 pcss.dll 13:49:10.0643 11184 RpcSs - ok 13:49:10.0753 11184 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS spndr.sys 13:49:10.0755 11184 rspndr - ok 13:49:10.0782 11184 [ 4D71227301DD8D09097B9E4CC6527E5A ] SamSs C:\Windows\system32\lsass.exe 13:49:10.0787 11184 SamSs - ok 13:49:10.0884 11184 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys 13:49:10.0887 11184 sbp2port - ok 13:49:10.0982 11184 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll 13:49:11.0033 11184 SCardSvr - ok 13:49:11.0085 11184 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys 13:49:11.0087 11184 scfilter - ok 13:49:11.0199 11184 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll 13:49:11.0291 11184 Schedule - ok 13:49:11.0369 11184 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll 13:49:11.0371 11184 SCPolicySvc - ok 13:49:11.0438 11184 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll 13:49:11.0449 11184 SDRSVC - ok 13:49:11.0567 11184 [ 16A252022535B680046F6E34E136D378 ] SeaPort C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe 13:49:11.0570 11184 SeaPort - ok 13:49:11.0641 11184 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys 13:49:11.0643 11184 secdrv - ok 13:49:11.0700 11184 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll 13:49:11.0733 11184 seclogon - ok 13:49:11.0802 11184 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll 13:49:11.0831 11184 SENS - ok 13:49:11.0870 11184 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll 13:49:11.0891 11184 SensrSvc - ok 13:49:11.0933 11184 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys 13:49:11.0935 11184 Serenum - ok 13:49:12.0019 11184 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys 13:49:12.0022 11184 Serial - ok 13:49:12.0083 11184 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys 13:49:12.0085 11184 sermouse - ok 13:49:12.0162 11184 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll 13:49:12.0223 11184 SessionEnv - ok 13:49:12.0267 11184 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 13:49:12.0269 11184 sffdisk - ok 13:49:12.0290 11184 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 13:49:12.0292 11184 sffp_mmc - ok 13:49:12.0324 11184 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 13:49:12.0326 11184 sffp_sd - ok 13:49:12.0401 11184 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys 13:49:12.0403 11184 sfloppy - ok 13:49:12.0458 11184 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll 13:49:12.0468 11184 SharedAccess - ok 13:49:12.0520 11184 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll 13:49:12.0532 11184 ShellHWDetection - ok 13:49:12.0555 11184 [ 1BC348CF6BAA90EC8E533EF6E6A69933 ] SiSGbeLH C:\Windows\system32\DRIVERS\SiSG664.sys 13:49:12.0557 11184 SiSGbeLH - ok 13:49:12.0582 11184 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys 13:49:12.0584 11184 SiSRaid2 - ok 13:49:12.0608 11184 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys 13:49:12.0611 11184 SiSRaid4 - ok 13:49:12.0640 11184 [ F5BBEDF602C310B00036EB2DBF4348A5 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe 13:49:12.0642 11184 SkypeUpdate - ok 13:49:12.0670 11184 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys 13:49:12.0672 11184 Smb - ok 13:49:12.0707 11184 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe 13:49:12.0712 11184 SNMPTRAP - ok 13:49:12.0781 11184 [ 1D8474722CDFFBB8FCA5FA12C50A05A2 ] SNP2UVC C:\Windows\system32\DRIVERS\snp2uvc.sys 13:49:12.0794 11184 SNP2UVC - ok 13:49:12.0814 11184 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys 13:49:12.0815 11184 spldr - ok 13:49:12.0847 11184 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe 13:49:12.0863 11184 Spooler - ok 13:49:12.0954 11184 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe 13:49:13.0035 11184 sppsvc - ok 13:49:13.0080 11184 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll 13:49:13.0097 11184 sppuinotify - ok 13:49:13.0173 11184 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys 13:49:13.0179 11184 srv - ok 13:49:13.0229 11184 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 13:49:13.0233 11184 srv2 - ok 13:49:13.0555 11184 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 13:49:13.0559 11184 srvnet - ok 13:49:13.0613 11184 [ 52D6F40B50ECFC051979FEC68E74F0F8 ] ssadbus C:\Windows\system32\DRIVERS\ssadbus.sys 13:49:13.0616 11184 ssadbus - ok 13:49:13.0651 11184 [ D6CFD3B2EABCF9327DE39C62BABFA1E3 ] ssadmdfl C:\Windows\system32\DRIVERS\ssadmdfl.sys 13:49:13.0653 11184 ssadmdfl - ok 13:49:13.0775 11184 [ 5EB01E6148742C3EC2185AC92F6D16FD ] ssadmdm C:\Windows\system32\DRIVERS\ssadmdm.sys 13:49:13.0778 11184 ssadmdm - ok 13:49:13.0871 11184 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 13:49:13.0889 11184 SSDPSRV - ok 13:49:13.0931 11184 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll 13:49:13.0959 11184 SstpSvc - ok 13:49:14.0015 11184 [ AAF6F247F1DC370C593B4430974EAD9C ] ssudmdm C:\Windows\system32\DRIVERS\ssudmdm.sys 13:49:14.0018 11184 ssudmdm - ok 13:49:14.0098 11184 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys 13:49:14.0100 11184 stexstor - ok 13:49:14.0198 11184 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll 13:49:14.0256 11184 stisvc - ok 13:49:14.0325 11184 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys 13:49:14.0327 11184 swenum - ok 13:49:14.0390 11184 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll 13:49:14.0488 11184 swprv - ok 13:49:14.0629 11184 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll 13:49:14.0694 11184 SysMain - ok 13:49:14.0777 11184 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll 13:49:14.0816 11184 TabletInputService - ok 13:49:14.0853 11184 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32 apisrv.dll 13:49:14.0899 11184 TapiSrv - ok 13:49:14.0977 11184 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32 bssvc.dll 13:49:14.0987 11184 TBS - ok 13:49:15.0174 11184 [ 40AF23633D197905F03AB5628C558C51 ] Tcpip C:\Windows\system32\drivers cpip.sys 13:49:15.0193 11184 Tcpip - ok 13:49:15.0230 11184 [ 40AF23633D197905F03AB5628C558C51 ] TCPIP6 C:\Windows\system32\DRIVERS cpip.sys 13:49:15.0243 11184 TCPIP6 - ok 13:49:15.0317 11184 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers cpipreg.sys 13:49:15.0319 11184 tcpipreg - ok 13:49:15.0353 11184 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers dpipe.sys 13:49:15.0355 11184 TDPIPE - ok 13:49:15.0389 11184 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers dtcp.sys 13:49:15.0391 11184 TDTCP - ok 13:49:15.0489 11184 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS dx.sys 13:49:15.0491 11184 tdx - ok 13:49:15.0620 11184 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers ermdd.sys 13:49:15.0622 11184 TermDD - ok 13:49:15.0675 11184 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32 ermsrv.dll 13:49:15.0728 11184 TermService - ok 13:49:15.0776 11184 [ CE4B6956E4E12492715A53076E58761F ] TFsExDisk C:\Windows\System32\Drivers\TFsExDisk.sys 13:49:15.0778 11184 TFsExDisk - ok 13:49:15.0849 11184 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32 hemeservice.dll 13:49:15.0859 11184 Themes - ok 13:49:15.0915 11184 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll 13:49:15.0921 11184 THREADORDER - ok 13:49:16.0005 11184 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32 rkwks.dll 13:49:16.0016 11184 TrkWks - ok 13:49:16.0104 11184 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 13:49:16.0117 11184 TrustedInstaller - ok 13:49:16.0182 11184 [ 4CE278FC9671BA81A138D70823FCAA09 ] tssecsrv C:\Windows\system32\DRIVERS ssecsrv.sys 13:49:16.0184 11184 tssecsrv - ok 13:49:16.0242 11184 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers susbflt.sys 13:49:16.0244 11184 TsUsbFlt - ok 13:49:16.0311 11184 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS unnel.sys 13:49:16.0314 11184 tunnel - ok 13:49:16.0382 11184 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys 13:49:16.0384 11184 uagp35 - ok 13:49:16.0473 11184 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys 13:49:16.0478 11184 udfs - ok 13:49:16.0535 11184 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe 13:49:16.0562 11184 UI0Detect - ok 13:49:16.0594 11184 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys 13:49:16.0596 11184 uliagpkx - ok 13:49:16.0673 11184 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys 13:49:16.0675 11184 umbus - ok 13:49:16.0763 11184 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys 13:49:16.0765 11184 UmPass - ok 13:49:16.0799 11184 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll 13:49:16.0828 11184 upnphost - ok 13:49:16.0891 11184 [ CD03479F2DA26500B203ED075C146A7A ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys 13:49:16.0893 11184 USBAAPL64 - ok 13:49:16.0943 11184 [ ACCEA6BC68D0C9A78EB97EE159028B4E ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 13:49:16.0946 11184 usbccgp - ok 13:49:17.0020 11184 [ 80B0F7D5CCF86CEB5D402EAAF61FEC31 ] usbcir C:\Windows\system32\drivers\usbcir.sys 13:49:17.0023 11184 usbcir - ok 13:49:17.0071 11184 [ 311C1DD1088E55BEAE15954D17F50646 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys 13:49:17.0073 11184 usbehci - ok 13:49:17.0128 11184 [ 280E90CBF4B2DDD169F0728CB44D726F ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys 13:49:17.0132 11184 usbhub - ok 13:49:17.0171 11184 [ 9406D801042FAF859CF81B2C886413DC ] usbohci C:\Windows\system32\drivers\usbohci.sys 13:49:17.0172 11184 usbohci - ok 13:49:17.0205 11184 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys 13:49:17.0207 11184 usbprint - ok 13:49:17.0233 11184 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS 13:49:17.0235 11184 USBSTOR - ok 13:49:17.0267 11184 [ A83D0EC9AE4C31704442099D40BA2471 ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys 13:49:17.0268 11184 usbuhci - ok 13:49:17.0285 11184 [ 1F775DA4CF1A3A1834207E975A72E9D7 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys 13:49:17.0287 11184 usbvideo - ok 13:49:17.0315 11184 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll 13:49:17.0320 11184 UxSms - ok 13:49:17.0338 11184 [ 4D71227301DD8D09097B9E4CC6527E5A ] VaultSvc C:\Windows\system32\lsass.exe 13:49:17.0341 11184 VaultSvc - ok 13:49:17.0359 11184 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys 13:49:17.0360 11184 vdrvroot - ok 13:49:17.0416 11184 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe 13:49:17.0432 11184 vds - ok 13:49:17.0471 11184 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 13:49:17.0473 11184 vga - ok 13:49:17.0508 11184 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys 13:49:17.0510 11184 VgaSave - ok 13:49:17.0570 11184 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys 13:49:17.0573 11184 vhdmp - ok 13:49:17.0638 11184 [ FE595D1A1B781190BB483444B62CC607 ] VIAHdAudAddService C:\Windows\system32\drivers\viahduaa.sys 13:49:17.0647 11184 VIAHdAudAddService - ok 13:49:17.0678 11184 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys 13:49:17.0679 11184 viaide - ok 13:49:17.0710 11184 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\vo

Marou81 · Answer

Bonsoir,

Rapport ok.

Peux-tu utiliser ce logiciel de diagnostic, ça me permettra de t'aider :

&#x25B6 Télécharge ZHPDiag (de Nicolas Coolman)
&#x25B6 Lance le (si tu es sous Windows Vista ou Windows 7, fais le par un clic-droit --> Exécuter en temps qu'administrateur)
&#x25B6 Laisse toi guider lors de l'installation (pense à cocher la case pour créer un raccourci sur le Bureau). Il se lancera automatiquement à la fin de l'installation.
&#x25B6 Clique sur configurer puis sur l'icône représentant une loupe (« Lancer le diagnostic »)
&#x25B6 le rapport se trouve sur ton Bureau
&#x25B6 Rends toi sur ce site, clique sur "Parcourir", sélectionne le rapport de ZHPDiag et clique sur Envoyer le fichier. Patiente pendant l'envoi du fichier, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum.

kaori64 · Answer

bonjour Marou 81
et moi qui pensais que nous avions finis!!! je te donne du travail !!! avant tout merci pour ton aide et le temps que tu consacres à le faire!!!
voici le rapport
https://pjjoint.malekal.com/files.php?id=ZHPDiag_20131221_r15m5m7b6r7

loumax91 · Answer

Bonjour kaori64, 

Je vais prendre la suite, fais ce qui suis dans l'ordre indiqué.

1) A désinstaller via > menu démarrer > panneau de configuration > programmes et fonctionnalités :
-BearShare =>PUP.BearShare 

Il est aussi préférable pour la désinfection, de désinstaller ces deux logiciels de P2P:
-Vuze
-eMule 
Les risques sécuritaires du peer-to-peer en 10 points

--------------2)

&#x25B6; Attention : 

 /!\ Ce script est exclusivement réservé à l'utilisateur actuel du sujet, vous ne devez en aucun cas l'utiliser de votre propre chef sur un autre pc, sous risque d'endommager le système /!\ 

    &#x21D2;  Ce script va cibler certains éléments à supprimer :

     ¶ Ferme toutes tes applications en cours
     ¶ Ouvre ce lien, sélectionne et copie toutes les lignes.

     ¶ Lance ZHPFix via le raccourci sur ton Bureau, (Si tu es sous Vista ou Windows 7 ou Windows 8 n'oublie pas clic droit &#x2192; en tant qu'administrateur")
     ¶ Si tu obtiens le message "Voulez-vous autoriser le programme suivant..."Tu réponds Oui"
     ¶ Clique sur le bouton "IMPORTER"
     ¶ Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes
    
     ¶ Clique sur le bouton « GO »  pour lancer le nettoyage
     ¶ A la demande, confirme le nettoyage des données en cliquant sur [OK]
     ¶ Patiente le temps du traitement.
     ¶ ZHPFix va te demander si tu souhaites vider ta corbeille, clique sur oui (le traitement peut être long suivant la quantité de données à supprimer)
     ¶ Un rapport nommé ZHPFixReport.txt sera créé et sauvegardé sur le bureau

     ¶ Fais redémarrer le PC
     ¶ Copie/colle la totalité du rapport dans ta prochaine réponse
     ¶ Pour t'aider

kaori64 · Answer

bonsoir loumax91 
j'ai supprimé bear voici le rapport
Rapport de ZHPFix 2013.12.14.5 par Nicolas Coolman, Update du 06/12/2013
Fichier d'export Registre : 
Run by OLIVIER at 21/12/2013 19:07:54
High Elevated Privileges : OK
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Corbeille vidée (00mn 07s)

========== Clés du Registre ==========
SUPPRIMÉ Driver Key: drksmaaw
SUPPRIMÉ Driver Key: euiplnkm
SUPPRIMÉ Driver Key: exjwdcdr
SUPPRIMÉ Driver Key: iSafeNetFilter
SUPPRIMÉ: HKCU\Software\BrowseForTheCause
SUPPRIMÉ:* HKLM\Software\BrowserChoice
SUPPRIMÉ: HKLM\Software\Wow6432Node\VBMZ
SUPPRIMÉ: HKLM\Software\Wow6432Node\supWPM
SUPPRIMÉ: [HKLM\Software\Classes\Installer\Products\13E39F430A1EC124E868CB7F4C91A319]
SUPPRIMÉ: [HKLM\Software\Classes\Installer\Features\13E39F430A1EC124E868CB7F4C91A319]

========== Valeurs du Registre ==========
SUPPRIMÉ: Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F}
SUPPRIMÉ MWPS Value: EnableUIADesktopToggle
SUPPRIMÉ MWPS Value: PromptOnSecureDesktop
SUPPRIMÉ MWPS Value: FilterAdministratorToken
Aucune Valeur Standard Profile: FirewallRaz : 
Aucune Valeur Domain Profile: FirewallRaz : 
SUPPRIMÉ: FirewallRaz (Domain) : NetPres-In-TCP-NoScope
SUPPRIMÉ: FirewallRaz (Domain) : NetPres-Out-TCP-NoScope
SUPPRIMÉ: FirewallRaz (None) : NetPres-WSD-In-UDP
SUPPRIMÉ: FirewallRaz (None) : NetPres-WSD-Out-UDP
SUPPRIMÉ: FirewallRaz (Public) : NetPres-In-TCP
SUPPRIMÉ: FirewallRaz (Public) : NetPres-Out-TCP
SUPPRIMÉ: FirewallRaz (None) : {901D9EE1-E1FD-460F-8338-568C54F4DCDB}
SUPPRIMÉ: FirewallRaz (Private) : {6DEAA5BE-8210-4254-83CC-6E92CDB430A4}
SUPPRIMÉ: FirewallRaz (Private) : {F0F090DB-7DC8-41AB-A7E4-88A63399C6D9}
SUPPRIMÉ: FirewallRaz (Public) : TCP Query User{C44C5981-A127-4B7B-928C-F9B26344FDA8}C:\program files (x86)\vuze\azureus.exe
SUPPRIMÉ: FirewallRaz (Public) : UDP Query User{10229B0E-CF1B-4402-9FF0-DFB9F7F4FB19}C:\program files (x86)\vuze\azureus.exe
SUPPRIMÉ: FirewallRaz (Private) : {76AE7275-278B-4716-A550-DFB48DE8A7E3}
SUPPRIMÉ: FirewallRaz (Private) : {589685AE-C60C-4912-9BB4-E7765D760AE5}
SUPPRIMÉ: FirewallRaz (Private) : TCP Query User{74905083-A028-4D90-BDF2-6A5A9CDF5F28}C:\program files (x86)\microids\sniper elite\sniperelite.exe
SUPPRIMÉ: FirewallRaz (Private) : UDP Query User{12554C29-272E-4FF5-BA91-A0769A2E74A3}C:\program files (x86)\microids\sniper elite\sniperelite.exe
SUPPRIMÉ: FirewallRaz (Private) : {33BD78AB-15A3-46D1-B5B4-C54AA142F0B4}
SUPPRIMÉ: FirewallRaz (Private) : {42548D61-2069-4330-ACF7-C0CD56075BF3}
SUPPRIMÉ: FirewallRaz (Private) : TCP Query User{8C8A626E-C6F4-44A5-9F8A-B740262991F5}C:\program files (x86)\ea games\battlefield heroes\bfheroes.exe
SUPPRIMÉ: FirewallRaz (Private) : UDP Query User{8A75FF58-F1A7-4B29-8686-75055D426CC1}C:\program files (x86)\ea games\battlefield heroes\bfheroes.exe
SUPPRIMÉ: FirewallRaz (Domain) : {A619BDED-1A52-456D-8EE8-831BAFAE95FA}
SUPPRIMÉ: FirewallRaz (Domain) : {52B1C9D6-26CB-40CD-BD8F-3B599118A12B}
SUPPRIMÉ: FirewallRaz (Private) : {07000037-F7F5-4056-9C67-397BD0E588FE}
SUPPRIMÉ: FirewallRaz (Private) : {7D9B0BCD-0A29-4FC2-A55E-AAF710952731}
SUPPRIMÉ: FirewallRaz (Private) : {402E3F91-3B6C-46F6-9861-955D2EDE1B6C}
SUPPRIMÉ: FirewallRaz (Private) : {EE4AD70C-63A0-43CD-A6F1-10ADD8F8EDB6}
SUPPRIMÉ: FirewallRaz (Public) : {D72891E1-6085-4B19-8A59-B0F0E2AE786B}
SUPPRIMÉ: FirewallRaz (Public) : {52F98D08-358A-4FB9-B63D-238B2099F4D4}
SUPPRIMÉ: FirewallRaz (Private) : {CC91625A-A076-499F-88D8-59770F1C06C3}
SUPPRIMÉ: FirewallRaz (Private) : {C62A1641-C5AA-4D98-98AA-98A8308F4375}
SUPPRIMÉ: FirewallRaz (Private) : {F7CCD914-F9F9-467C-986F-2753336D4856}
SUPPRIMÉ: FirewallRaz (Private) : {805F5306-D91A-42EC-8306-4F04520256BC}
SUPPRIMÉ: FirewallRaz (Private) : TCP Query User{1C0E1699-1BD2-40FE-8B57-14CCCBFDDEBB}C:\program files (x86)\ea games\battlefield play4free\bfp4f.exe
SUPPRIMÉ: FirewallRaz (Private) : UDP Query User{47CA679A-7270-4299-BFE2-6BA66EB045EB}C:\program files (x86)\ea games\battlefield play4free\bfp4f.exe

========== Eléments de donnée du Registre ==========
REMPLACÉ Value NoActiveDesktopChanges :   Good (0) - Bad (1)
SUPPRIMÉ: R0 - Main,Start Page = KLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page
SUPPRIMÉ: R1 Search Page = 

========== Dossiers ==========
SUPPRIMÉ: C:\Users\OLIVIER\AppData\Local\{0AF9D978-318D-4CC3-9B9B-E86A4F0DEB3D}

========== Fichiers ==========
SUPPRIMÉ: c:\users\olivier\appdata\local	emp	mp08856.wmc\eula.txt
SUPPRIMÉ Redémarrage: c:\users\olivier\appdata\local	emp\fxstiffdebuglogfile.txt
SUPPRIMÉ: c:\users\olivier\appdata\local	empk_mtx
SUPPRIMÉS Temporaires Windows (16) (4 424 649 octets)

========== Tache planifiée ==========
SUPPRIMÉ: {3497B539-0482-44EE-9E59-8ECDB93773CD}
SUPPRIMÉ: {F1FE5AD2-74BC-4282-B23B-647C0B6E36C9}
SUPPRIMÉ: {FEEB33D3-7C78-4ECD-B39E-DA75D2140457}


========== Récapitulatif ==========
10 : Clés du Registre
39 : Valeurs du Registre
3 : Eléments de donnée du Registre
1 : Dossiers
4 : Fichiers
3 : Tache planifiée


End of clean in 00mn 20s

========== Chemin de fichier rapport ==========
C:\Users\OLIVIER\AppData\Roaming\ZHP\ZHPFix[R1].txt - 21/12/2013 19:08:02 [5085]

loumax91 · Answer

Impeccable, refais une analyse ZHPDiag stp, pense à héberger le rapport.

kaori64 · Answer

https://pjjoint.malekal.com/files.php?id=ZHPDiag_20131222_6k14t7e10o5

loumax91 · Answer

Bonjour,

&#x25B6; Attention : 

 /!\ Ce script est exclusivement réservé à l'utilisateur actuel du sujet, vous ne devez en aucun cas l'utiliser de votre propre chef sur un autre pc, sous risque d'endommager le système /!\ 

    &#x21D2;  Ce script va cibler certains éléments à supprimer :

     ¶ Ferme toutes tes applications en cours
     ¶ Ouvre ce lien, sélectionne et copie toutes les lignes.

     ¶ Lance ZHPFix via le raccourci sur ton Bureau, (Si tu es sous Vista ou Windows 7 ou Windows 8 n'oublie pas clic droit &#x2192; en tant qu'administrateur")
     ¶ Si tu obtiens le message "Voulez-vous autoriser le programme suivant..."Tu réponds Oui"
     ¶ Clique sur le bouton "IMPORTER"
     ¶ Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes
    
     ¶ Clique sur le bouton « GO »  pour lancer le nettoyage
     ¶ A la demande, confirme le nettoyage des données en cliquant sur [OK]
     ¶ Patiente le temps du traitement.
     ¶ ZHPFix va te demander si tu souhaites vider ta corbeille, clique sur oui (le traitement peut être long suivant la quantité de données à supprimer)
     ¶ Un rapport nommé ZHPFixReport.txt sera créé et sauvegardé sur le bureau

     ¶ Fais redémarrer le PC
     ¶ Copie/colle la totalité du rapport dans ta prochaine réponse
     ¶ Pour t'aider

kaori64 · Answer

Rapport de ZHPFix 2013.12.14.5 par Nicolas Coolman, Update du 06/12/2013
Fichier d'export Registre : 
Run by OLIVIER at 22/12/2013 08:23:20
High Elevated Privileges : OK
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Corbeille vidée (00mn 03s)
Réparation des raccourcis navigateur

========== Logiciels ==========
SUPPRIMÉ: Adobe Reader 9.5.5 MUI

========== Clés du Registre ==========
SUPPRIMÉ: [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-7AD7-FFFF-7B44-A91000000001}]
SUPPRIMÉ: HKCU\Software\BearShare
SUPPRIMÉ: HKCU\Software\bearsharetoolbarguid
SUPPRIMÉ: HKLM\Software\Wow6432Node\BearShareSRTB
SUPPRIMÉ: Service: Bonjour Service

========== Valeurs du Registre ==========
SUPPRIMÉ RunValue: QuickTime Task
SUPPRIMÉ RunValue: iTunesHelper

========== Dossiers ==========
SUPPRIMÉ: C:\Program Files (x86)\BearShare Applications
SUPPRIMÉ: C:\ProgramData\BearShare
SUPPRIMÉ: C:\Users\OLIVIER\AppData\Roaming\0V1L2Z2Z1T1I1L1T
SUPPRIMÉ: C:\Users\OLIVIER\AppData\Local\PackageAware
SUPPRIMÉ: C:\ProgramData\McAfee
SUPPRIMÉS Temporaires Windows (6)

========== Fichiers ==========
SUPPRIMÉ: c:\users\olivier\appdataoaming\microsoft\internet explorer\quick launch\vuze.lnk
SUPPRIMÉ: c:\users\olivier\appdata\local	emp\fxstiffdebuglogfile.txt
SUPPRIMÉ: c:\users\olivier\appdataoaming\microsoft\windows\start menu\programs\startup\openoffice.org 3.1.lnk
SUPPRIMÉS Temporaires Windows (8) (2 826 octets)


========== Récapitulatif ==========
5 : Clés du Registre
2 : Valeurs du Registre
6 : Dossiers
4 : Fichiers
1 : Logiciels


End of clean in 01mn 03s

========== Chemin de fichier rapport ==========
C:\Users\OLIVIER\AppData\Roaming\ZHP\ZHPFix[R1].txt - 21/12/2013 19:08:02 [5167]
C:\Users\OLIVIER\AppData\Roaming\ZHP\ZHPFix[R2].txt - 22/12/2013 08:23:24 [1790]

loumax91 · Answer

Ok, comment va le PC ? 

&lowast; Mises à jour :

-Télécharge et installe la dernière version de Adobe Reader.

&lowast; Sécuriser ses navigateurs :

&bull; Si ce n'est pas déjà fait, installe Wot sur tes navigateurs :
https://chrome.google.com/webstore/detail/wot-web-of-trust-website/bhmmomiinigofkjcapegjjndpbikblnp
&bull; Adblock plus > Firefox > Chrome > Internet Explorer

-Lire : L'importance de maintenir à jour son PC

kaori64 · Answer

ordi va bien j'ai l'impression en revanche lorsque j'essaye d'installer le fichier adobe un message d'erreur intervient et me dit qu'il est impossible de l'installer la raison est la suivante:
base de données: C:/WINDOWS/INSTALLER/15488eb.ipi.impossible d'ouvrir le fichier de base de données. erreur système-2147287035

kaori64 · Answer

idem pour wot message d'erreur: le programme d'installation à rencontrer une erreur innentandue lors de l'installation de ce packtage il s'agit peut etre d'une problème lié au packtage. Le code erreur est 2203

kaori64 · Answer

idem pour adblock le code erreur est comme pour le precedent 2203

kaori64 · Answer

ca y est tout est fait!

loumax91 · Answer

Impec, refais une dernière analyse ZHPDiag (héberge le rapport) et si plus de soucis on pourra finaliser :)

kaori64 · Answer

https://pjjoint.malekal.com/files.php?id=ZHPDiag_20131222_z7v15u11r12g10

loumax91 · Answer

Ton PC est clean, on termine :)

* Rends-toi sur cette page pour suivre la procédure de nettoyage.

Il est important de bien suivre les points 1 et 2.
_________________________________________________________________

*Prévention :
Je te conseille vivement de lire cet article qui t'apportera des informations de prévention et de protection contre les infections (environ 15 minutes de lecture très instructive et utile) : Prévention et sécurité sur internet

*Précautions :
Fais régulièrement une sauvegarde de tes documents importants sur un support externe (disque dur externe, CD/DVD réinscriptible...)
Ici, nous avons pu désinfecter ton ordinateur, mais ce n'est pas toujours le cas. Certaines infections cryptent les documents et demandent une rançon pour les récupérer, d'autres les modifient pour diffuser des infections, obligeant donc à les effacer... Il faut donc toujours avoir une sauvegarde saine de tes documents, sinon tu risques de les perdre.

*Conseils :
-Désinstalles tout ce qui ne te sert pas, ça te feras de l'espace en plus.
-Il est important d'avoir les dernières mises à jour sur ton PC. En effet, celles ci corrigent des failles de sécurité qui peuvent parfois être exploitées par un programme malveillant.
Programmes particulièrement visés par les malwares, à maintenir à jour régulièrement : Java, Adobe Reader.
- Garde Malwarebyte's et passe des scans complet de temps en temps, ne pas oublier de le mettre à jour avant un scan.  

Bonne lecture et bon courage, si tu as des questions n'hésites pas ;)

PS: J'attends le rapport de DelFix.

Virus aidez moi s il vous plait

43 réponses

Discussions similaires