Beaucoup de virus sur un PC :S

Bonjour,

Comment t'en es-tu rendu compte ?

Quels sont les symptômes ?

A+

OK

Ton PC est vraisemblablement infecté par des logiciels publicitaires.
Pour t'en débarrasser commence par faire ce qui suit :

Utilise AdwCleaner (développé par Xplode) qui est un outil de désinfection spécifique aux logiciels publicitaires :

*Sur ce tutoriel https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= tu trouveras le lien pour le télécharger et comment l'utiliser.

* Une fois téléchargé et lancé (clic droit : "Exécuter en tant qu'administrateur") clique sur [Scanner], laisse l'outil travailler.

* Lorsque le scan est terminé, dans les différents onglets apparaissent les infections trouvées.

* Clique sur l'onglet [Nettoyer], tous les éléments infectieux trouvés vont être supprimés.

* Clique sur [Rapport], le rapport apparait, tu peux le copier/coller dans ta prochaine réponse.
Sinon héberge le sur :
cijoint ou pjoint ou Up2Share et transmet moi le lien obtenu.

-----------------------------------------
* Une fois AdwCleaner utilisé et posté son rapport :

Utilise cet autre outil pour vérification :Télécharge: Junkware Removal Tool à partir ce lien : https://www.bleepingcomputer.com/download/junkware-removal-tool/dl/131/

!!! Ne clique pas sur Download !!! , attends simplement que la fenêtre de téléchargement arrive pour confirmation

* Enregistre ce fichier sur le bureau et ferme tous tes navigateurs

Sous Vista/7/8, clic droit et Exécuter en temps qu'administrateur.

* NB: Le bureau disparaitra un instant, c'est normal.
* Laisse le programme travailler ne touche à rien

* Poste le rapport généré à la fin de l'analyse.

A+

tout dabord,
-il y a des PUB
-le ventilateur du PC fait un bruit énorme
-il tourne au ralenti

bref, je pense avoir donné assez de raisons pour savoir qu'il y a des virus sur ce PC

j'espere que tu pourra m'aider

rebonjour, voila le rapport adwcleaner

# AdwCleaner v3.023 - Rapport créé le 14/04/2014 à 18:19:26
# Mis à jour le 01/04/2014 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : Lillo - LILLO-PC
# Exécuté depuis : C:\Users\Lillo\Downloads\adwcleaner (1).exe
# Option : Nettoyer

***** [ Services ] *****

***** [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\Users\DefaultAppPool\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbpohikckhbcljgombipcdoinkaedlfa

***** [ Raccourcis ] *****

***** [ Registre ] *****

***** [ Navigateurs ] *****

-\\ Internet Explorer v11.0.9600.16521

-\\ Mozilla Firefox v28.0 (fr)

[ Fichier : C:\Users\Lillo\AppData\Roaming\Mozilla\Firefox\Profiles\b0vnsw1p.default\prefs.js ]

-\\ Google Chrome v26.0.1410.43

[ Fichier : C:\Users\Lillo\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [36280 octets] - [16/01/2014 18:28:41]
AdwCleaner[R1].txt - [1195 octets] - [14/04/2014 18:16:25]
AdwCleaner[S0].txt - [35279 octets] - [16/01/2014 18:30:43]
AdwCleaner[S1].txt - [1118 octets] - [14/04/2014 18:19:26]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1178 octets] ##########

il n'a pas trouvé grand chose, je vais continuer avec l'autre programme

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Lillo on 14/04/2014 at 18:23:25,63
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3048084318-1880268581-2619964528-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3048084318-1880268581-2619964528-1000\Software\wajam
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\PricePeepInstaller_IronSource_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\PricePeepInstaller_IronSource_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\PricePeepInstaller_IronSource_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\PricePeepInstaller_IronSource_RASMANCS

~~~ Files

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\software"

~~~ FireFox

Successfully deleted the following from C:\Users\Lillo\AppData\Roaming\mozilla\firefox\profiles\b0vnsw1p.default\prefs.js

user_pref("extensions.tikatoolbar.lastB", "hxxp://www.tika-search.com/?babsrc=HP_ss&mntrId=E8F0CC52AF9AE447&affID=125903&tsp=5040");
user_pref("extensions.tikatoolbar.tb_url", "hxxp://www.tika-search.com/?q={searchTerms}&babsrc=TB_ss&mntrId=E8F0CC52AF9AE447&affID=125903&tsp=5040");
user_pref("extensions.tikatoolbar.tlbrSrchUrl", "hxxp://www.tika-search.com/?q={searchTerms}&babsrc=TB_ss&mntrId=E8F0CC52AF9AE447&affID=125903&tsp=5040");
Emptied folder: C:\Users\Lillo\AppData\Roaming\mozilla\firefox\profiles\b0vnsw1p.default\minidumps [32 files]

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 14/04/2014 at 18:29:23,49
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Re,

Bizarre, AdwCleaner aurait du nettoyer ça !

On va faire un scan plus approfondi !

* Télécharge http://general-changelog-team.fr/fr/downloads/viewdownload/49-outils-de-nicolas-coolman/124-zhpdiag (de Nicolas Coolman) sur ton bureau,
/!\Il est très important de l'enregistrer sur le bureau / !\
* Une fois le téléchargement achevé, double clique sur ZHPDiag.exe et laisse se dérouler l'installation
/!\L'outil a créé 2 icônes ZHPDiag , ZHPFix /!\
/!\Utilisateurs de Vista et Windows 7 : Clic droit sur le logo de ZHPDiag.exe, « exécuter en tant qu'Administrateur » /!\
* A l'ouverture le programme te proposes plusieurs options, cliques sur "Complet" et laisse travailler l'outil.

* ZHPDiag va alors analyser le contenu de ton ordinateur à la recherche d'informations sur ton système d'exploitation, la base de registre... Patiente jusqu'à la fin de l'analyse. Il peut arriver que le logiciel donne l'impression d'être bloqué ; patiente !
* Laisse l'outil travailler, il peut être assez long.
* Le rapport s'ouvre dans le bloc note, ferme le car il est aussi enregistré sur ton bureau sous le nom ZHPDiag.txt et dans le dossier où est installé ZHPDiag (en général C:\ZHP\).
* Transmets moi le lien du fichier par l'intermédiaire d'un dépôt de fichiers.
* Rappel des dépôts : cijoint ou pjoint

A+

~ Rapport de ZHPDiag v2014.4.14.26 - Nicolas Coolman (14/04/2014)
~ Lancé par Lillo (14/04/2014 18:37:57)
~ Adresse du Site Web http://nicolascoolman.webs.com
~ Forums gratuits d'Assistance à la désinfection : http://nicolascoolman.webs.com/apps/links/
~ Traduit par Nicolas Coolman
~ Etat de la version :
~ Liste blanche : Désactivée par l'utilisateur
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Deactivate by program

---\\ Navigateurs Internet
MSIE: Internet Explorer v11.0.9600.16659
MFIE: Mozilla Firefox 28.0 (Defaut)
GCIE: Google Chrome v26.0.1410.43
OBIE: Safari v5.34.57.2

---\\ Informations sur les produits Windows
~ Langage: Français
Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
Windows ID Activation : OK
~ Windows Partial Key : H3JWF
Windows License : OK
~ Windows Remaining Initializations Number : 3
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ Logiciels de protection du système
AVG 2013 v13.0.2793
Microsoft Security Client v4.5.0216.0
McAfee Security Scan Plus v3.0.318.3
Windows Defender W7

---\\ Logiciels d'optimisation du système
CCleaner v3.21 =>.Piriform Ltd

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels
Adobe Flash Player 11 Plugin
Adobe Reader X

---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 37 Stepping 5, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3893 MB (61% free)
System Restore: Activé (Enable)
System drive C: has 312 GB (71%) free of 437 GB

---\\ Mode de connexion au système
~ Computer Name: LILLO-PC
~ User Name: Lillo
~ All Users Names: Lillo, HomeGroupUser$, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\Lillo\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\Lillo\AppData\Roaming\
~ %Desktop% : C:\Users\Lillo\Desktop\
~ %Favorites% : C:\Users\Lillo\Favorites\
~ %LocalAppData% : C:\Users\Lillo\AppData\Local\
~ %StartMenu% : C:\Users\Lillo\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 312 Go of 437 Go)
D: CD-ROM drive (Free 0 Go of 0 Go)

---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Security Center: 44 Scanned in 00mn 00s

---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.DF79CE9B950C62677D232154E93A81C7] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.01/03/2014 - 04:10:28.) -- C:\Windows\System32\wininet.dll [2334208]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.21/11/2010 - 04:24:29.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/11/2010 - 04:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.79059559E89D06E8B80CE2944BE20228] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/09/2013 - 02:09:10.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21/11/2010 - 04:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24/01/2014 - 03:37:55.) -- C:\Windows\system32\Drivers\ntfs.sys [1684928]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/11/2010 - 04:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes: Scanned in 00mn 00s

---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/1194
~ Mes musiques (My Musics) : 8/29
~ Mes Videos (My Videos) : 1/17
~ Mes Favoris (My Favorites) : 1/35
~ Mes Documents (My Documents) : 2/12
~ Mon Bureau (My Desktop) : 1/132
~ Menu demarrer (Programs) : 1/22
~ Hidden Files: Scanned in 00mn 00s

---\\ Processus lancés
[MD5.48C3EBD6D5E52AFCB1A0FA9B7F9802FA] - (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720] [PID.2252]
[MD5.DAB55357D9CC9A76052F4472EBD5C729] - (.Apple Inc. - Apple IE DAV.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe [1326408] [PID.2352]
[MD5.47833576F0BEE0AD7B45109982B769BD] - (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe [59720] [PID.2732]
[MD5.B0BF698030DB6561393AE753C6D3F936] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1312720] [PID.1936]
[MD5.775DDB699B40C42E1BD799CC0EBF3528] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8215552] [PID.1644]
[MD5.ADDA5E1951B90D3D23C56D3CF0622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65640] [PID.1420]
[MD5.A5299D04ED225D64CF07A568A3E1BF8C] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55184] [PID.1468]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648] [PID.1892]
[MD5.73A1F958FCAC3438046DBB829DC92FE6] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [325656] [PID.668]
[MD5.F51C224B79D338BDE125FD8035D2418B] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2533400] [PID.2972]
~ Processes Running: Scanned in 00mn 00s

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Lillo\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] None
G0 - GCSP: Preference [User Data\Default][HomePage] http://www.google.fr
G0 - GCSP: Preference [User Data\Default] http://www.google.com
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Chrome Web Store v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Documents Google v.0.5 (Activé)
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] GoogleDrive v.6.3 (Activé)
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] YouTube v.4.2.6 (Activé)
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Recherche Google v.0.0.0.20 (Activé)
G2 - GCE: Preference [User Data\Default] [dffhljlmcohcioeilbnpmbchdcbhifdh] WiseConvert 1.5 v.10.14.40.128 (Désactivé) =>Toolbar.Conduit
G2 - GCE: Preference [User Data\Default] [dhkplhfnhceodhffomolpfigojocbpcb] Babylon Toolbar v.1.8 (Désactivé) =>PUP.Babylon
G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [fndlhnanhedoklpdaacidomdnplcjcpj] AdBlock Premium v.2.6.4.3, (Activé)
G2 - GCE: Preference [User Data\Default] [licjnkifamhpbaefhdpacpmihicfbomb] PricePeep v.2.1.293.0 (Désactivé) =>Adware.PricePeep
G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [nchpfiddbhbdnagofhkjlaiaejmkdcla] Helper extension v.1.5 (Désactivé) =>Adware.CouponBar
G2 - GCE: Preference [User Data\Default] [pjfjiepcafjlmaopmmdfcmdjldjfhlki] iCloud v.1.0.0 (Désactivé)
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Gmail v.7 (Activé)
G2 - GCE: Preference [User Data\Default] [zzzzzzzzzzzzzzzzoibponkmmpgpmjgl] OKitSpace v.1.0, (Désactivé) =>PUP.Onekit

---\\ Liste des dossiers d'extension Google Chrome
G2 - EXT: C:\Users\Lillo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [Documents Google]
G2 - EXT: C:\Users\Lillo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [GoogleDrive]
G2 - EXT: C:\Users\Lillo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [YouTube]
G2 - EXT: C:\Users\Lillo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [Recherche Google]
G2 - EXT: C:\Users\Lillo\AppData\Local\Google\Chrome\User Data\Default\Extensions\fndlhnanhedoklpdaacidomdnplcjcpj [AdBlock Premium]
G2 - EXT: C:\Users\Lillo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjfjiepcafjlmaopmmdfcmdjldjfhlki [iCloud]
G2 - EXT: C:\Users\Lillo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [Gmail]

~ Google Lines Browser: 27 Scanned in 00mn 19s

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\Lillo\AppData\Roaming\Mozilla\Firefox\Profiles\b0vnsw1p.default\prefs.js
M3 - MFPP: Plugins - [Lillo] -- C:\Users\Lillo\AppData\Roaming\Mozilla\Firefox\Profiles\b0vnsw1p.default\searchplugins\tikatoolbar.xml =>Hijacker.TikaToolbar
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.30214.0.) -- c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll
P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (.Skype Limited - Facebook Video Calling Plugin.) -- C:\Users\Lillo\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
~ Firefox Browser: 4 Scanned in 00mn 00s

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.9600.16428 (winblue_gdr.131013-1700)) -- C:\Windows\SysWOW64\ieframe.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ IE Browser: 18 Scanned in 00mn 00s

---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost; 127.0.0.1; <local>
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s

---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s

---\\ Hosts file redirection (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 21

---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: MSS+ Identifier [64Bits] - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} . (.McAfee, Inc. - Quick Browser Identifier for MSS+ Tool.) -- C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll
O2 - BHO: dEala4mE [64Bits] - {B75B0550-30EA-882A-B9B7-DD531FB444F1} Clé orpheline
~ BHO: 2 Scanned in 00mn 00s

---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop [Public]: Adobe Reader X.lnk . (.Adobe Systems Incorporated - Adobe Reader.) -- C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
O4 - GS\Desktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\Desktop [Public]: iTunes.lnk . (.Apple Inc. - iTunes.) -- C:\Program Files (x86)\iTunes\iTunes.exe
O4 - GS\Desktop [Public]: McAfee Security Scan Plus.lnk . (.McAfee, Inc. - McAfee.) -- C:\Program Files (x86)\McAfee Security Scan\3.0.318\mcuicnt.exe
O4 - GS\Desktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O4 - GS\Desktop [Public]: OpenOffice.org 3.4.lnk . (.OpenOffice.org - OpenOffice.org 3.4.) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
O4 - GS\Desktop [Public]: QuickTime Player.lnk . (.Apple Inc. - QuickTime Player.) -- C:\Program Files (x86)\QuickTime\QuickTimePlayer.exe =>.Apple Inc
O4 - GS\Desktop [Public]: Safari.lnk . (...) -- C:\Windows\Installer\{C779648B-410E-4BBA-B75B-5815BCEFE71D}\SafariIco.exe
O4 - GS\Desktop [Public]: Skype.lnk . (...) -- C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe
O4 - GS\Desktop [Public]: VLC media player.lnk . (...) -- C:\Program Files (x86)\VideoLAN\VLC\vlc.exe =>.VideoLAN
O4 - GS\Program [Public]: Adobe Reader X.lnk . (...) -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AA1000000001}\SC_Reader.ico
O4 - GS\Program [Public]: Apple Software Update.lnk . (...) -- C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe =>.Apple Inc
O4 - GS\Program [Public]: Media Center.lnk . (.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe =>.Microsoft Corporation
O4 - GS\Program [Public]: Microsoft Security Essentials.lnk . (...) -- C:\Program Files (x86)\Microsoft Security Client\msseces.exe (.not file.)
O4 - GS\Program [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O4 - GS\Program [Public]: Safari.lnk . (...) -- C:\Windows\Installer\{C779648B-410E-4BBA-B75B-5815BCEFE71D}\SafariIco.exe
O4 - GS\Program [Public]: Sidebar.lnk . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O4 - GS\Program [Public]: Windows Anytime Upgrade.lnk . (.Microsoft Corporation - Interface utilisateur de Mise à niveau expr.) -- C:\Windows\system32\WindowsAnytimeUpgradeUI.exe
O4 - GS\Program [Public]: Windows DVD Maker.lnk . (...) -- C:\Program Files (x86)\DVD Maker\DVDMaker.exe (.not file.)
O4 - GS\Program [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) -- C:\Windows\system32\WFS.exe =>.Microsoft Corporation
O4 - GS\Program [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe =>.Microsoft Corporation
O4 - GS\Program [Public]: XPS Viewer.lnk . (.Microsoft Corporation - Visionneuse XPS.) -- C:\Windows\system32\xpsrchvw.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Bluetooth File Transfer Wizard.lnk . (.Microsoft Corporation - Pas de description.) -- C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Calculator.lnk . (.Microsoft Corporation - Calculatrice de Windows.) -- C:\Windows\system32\calc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: displayswitch.lnk . (.Microsoft Corporation - Afficher le commutateur.) -- C:\Windows\system32\displayswitch.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - Accessoire du panneau de saisie mathématiqu.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Mobility Center.lnk . (.Microsoft Corporation - Centre de mobilité Windows.) -- C:\Windows\system32\mblctr.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) -- C:\Windows\system32\mspaint.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.) -- C:\Windows\system32\mstsc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture.) -- C:\Windows\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sound Recorder.lnk . (.Microsoft Corporation - Magnétophone Windows.) -- C:\Windows\system32\SoundRecorder.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sticky Notes.lnk . (.Microsoft Corporation - Pense-bête.) -- C:\Windows\system32\StikyNot.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sync Center.lnk . (.Microsoft Corporation - Microsoft Sync Center.) -- C:\Windows\System32\mobsync.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Welcome Center.lnk . (.Microsoft Corporation - Mise en route.) -- C:\Windows\system32\OobeFldr.dll =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) -- C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) -- C:\Windows\system32\charmap.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: dfrgui.lnk . (.Microsoft Corporation - Défragmenteur de disque Microsoft®.) -- C:\Windows\system32\dfrgui.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Disk Cleanup.lnk . (.Microsoft Corporation - Gestionnaire de nettoyage de disque pour Wi.) -- C:\Windows\system32\cleanmgr.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Resource Monitor.lnk . (.Microsoft Corporation - Moniteur de ressources et de performances.) -- C:\Windows\system32\perfmon.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: System Information.lnk . (.Microsoft Corporation - Informations système.) -- C:\Windows\system32\msinfo32.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: System Restore.lnk . (.Microsoft Corporation - Restauration du système de Microsoft® Windo.) -- C:\Windows\system32\rstrui.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Task Scheduler.lnk . (...) -- C:\Windows\system32\taskschd.msc
O4 - GS\SystemTools [Public]: Windows Easy Transfer Reports.lnk . (.Microsoft Corporation - Application post-migration de transfert de.) -- C:\Windows\system32\migwiz\postmig.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Windows Easy Transfer.lnk . (.Microsoft Corporation - Application Transfert de fichiers et paramè.) -- C:\Windows\system32\migwiz\migwiz.exe =>.Microsoft Corporation
O4 - GS\QuickLaunch [Lillo]: Apple Safari.lnk . (...) -- C:\Windows\Installer\{C779648B-410E-4BBA-B75B-5815BCEFE71D}\SafariIco.exe
O4 - GS\QuickLaunch [Lillo]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\QuickLaunch [Lillo]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\TaskBar [Lillo]: Safari.lnk . (.Apple Inc. - Safari.) -- C:\Program Files (x86)\Safari\Safari.exe
O4 - GS\TaskBar [Lillo]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe =>.Microsoft Corporation
O4 - GS\Program [Lillo]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Accessories [Lillo]: Command Prompt.lnk . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe =>.Microsoft Corporation
O4 - GS\Accessories [Lillo]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) -- C:\Windows\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Lillo]: Run.lnk - Clé orpheline
O4 - GS\Accessories [Lillo]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Lillo]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\SystemTools [Lillo]: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.) -- C:\Windows\system32\eudcedit.exe =>.Microsoft Corporation
O4 - GS\SendTo [Lillo]: Skype.lnk . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O4 - GS\SendTo [Lillo]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - Pas de description.) -- C:\Windows\System32\fsquirt.exe
O4 - GS\Desktop [Lillo]: AVG 2013.lnk . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe
O4 - GS\Desktop [Lillo]: HP psc 1600 series - Raccourci.lnk - Clé orpheline
O4 - GS\Desktop [Lillo]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files (x86)\ZHPDiag\ZHPhep.exe =>.Nicolas Coolman
O4 - GS\Desktop [Lillo]: ZHPFix.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe =>.Nicolas Coolman
~ Global Startup: 62 Scanned in 00mn 01s

---\\ Applications lancées au démarrage du système (O4)
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe
O4 - HKCU\..\Run: [iCloudServices] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [AppleIEDAV] . (.Apple Inc. - Apple IE DAV.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
O4 - HKLM\..\Wow6432Node\Run: [AVG_UI] . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe
O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-3048084318-1880268581-2619964528-1000\..\Run: [iCloudServices] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKUS\S-1-5-21-3048084318-1880268581-2619964528-1000\..\Run: [AppleIEDAV] . (.Apple Inc. - Apple IE DAV.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
~ Application: Scanned in 00mn 00s

---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s

---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =>.Microsoft Corporation
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll
~ Winsock: 8 Scanned in 00mn 00s

---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{0453AD67-B2F8-4E78-A4FF-341368F9E7C0}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{4191F482-A9C2-456C-A29B-1154C5E5B98D}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{0453AD67-B2F8-4E78-A4FF-341368F9E7C0}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{4191F482-A9C2-456C-A29B-1154C5E5B98D}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS2\Services\Tcpip\..\{0453AD67-B2F8-4E78-A4FF-341368F9E7C0}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{4191F482-A9C2-456C-A29B-1154C5E5B98D}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
~ Domain: Scanned in 00mn 00s

---\\ Protocole additionnel (O18)
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s

---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AVGIDSAgent (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) . (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc
O23 - Service: HP Service (hpsrv) . (.Hewlett-Packard Company - HpService.) - C:\Windows\System32\Hpservice.exe
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Intel(R) Management & Security Application User Notificatio (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
~ Services: 10 Scanned in 00mn 03s

---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s

---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s

---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3048084318-1880268581-2619964528-1000Core.job [906]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3048084318-1880268581-2619964528-1000UA.job [928]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [892]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [896]
[MD5.8887AA968FD3AA87F75D3EF20DB1AA46] [APT] [Apple Diagnostics] (.Apple Inc..) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [346440]
[MD5.13001914838576400EB9AFDE95AE71CE] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [3091296] =>.Piriform Ltd
[MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-3048084318-1880268581-2619964528-1000Core] (.Facebook Inc..) -- C:\Users\Lillo\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096]
[MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-3048084318-1880268581-2619964528-1000UA] (.Facebook Inc..) -- C:\Users\Lillo\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
[MD5.1A113EB5F555F55A031BFACF6A57DC6E] [APT] [{153D00AE-A8A2-4B98-B9B7-83BBDDE95398}] (.Apple Inc..) -- c:\program files (x86)\safari\safari.exe [2388336]
[MD5.2F4E142D455C7F78AEF17E0EE5807F92] [APT] [{3BCABE6C-25A8-428E-AFCC-F8DFD6C34507}] (...) -- C:\Users\Lillo\Downloads\rival-chess_rival_chess_1.8.29_shareware_anglais_10177\SETUP.exe [172032]
[MD5.1A113EB5F555F55A031BFACF6A57DC6E] [APT] [{56D54AE2-243B-4F05-9E46-D2FE2A36F736}] (.Apple Inc..) -- c:\program files (x86)\safari\safari.exe [2388336]
[MD5.00000000000000000000000000000000] [APT] [{AA14D77E-A46D-4DE0-BB9B-05BFEA75631C}] (...) -- c:\users\Lillo\appdata\local\google\chrome\application\chrome.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{C55B784A-FBED-431C-983A-BA688D53D20A}] (...) -- c:\users\Lillo\appdata\local\lollipop\lollipop_04261935.bat (.not file.) [0] =>Adware.Lollipop
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984]
~ Scheduled Task: 17 Scanned in 00mn 04s

---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Internet Explorer [64Bits] - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe =>.Microsoft Corporation
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Active Setup: 10 Scanned in 00mn 00s

---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (idlesooa) . (. - .) - C:\Windows\system32\drivers\idlesooa.sys (.not file.)
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\System32\DRIVERS\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: (ozgdeqxx) . (. - .) - C:\Windows\system32\drivers\ozgdeqxx.sys (.not file.)
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Drivers: 66 Scanned in 00mn 00s

---\\ Logiciels installés (O42)
O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- AVG
O42 - Logiciel: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- {9B305FB9-297D-4F86-BC8B-740E7A1EF200}
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {B92C2C6C-F70E-497B-88A7-1FEF9888272B}
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Reader X (10.1.7) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {46F044A5-CE8B-4196-984E-5BD6525E361D}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {7446FE8D-C1F9-4D42-AAAE-5DBCE58605A6}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} =>.Apple Inc
O42 - Logiciel: Architecture 3D 3.1 - Premium (demo) - (.Anuman Interactive.) [HKLM][64Bits] -- Architecture_3D_3-Premium_Demo_is1
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
O42 - Logiciel: Broadcom 802.11 Network Adapter - (.Broadcom Corporation.) [HKLM][64Bits] -- Broadcom 802.11 Network Adapter
O42 - Logiciel: BrowseToSave - (...) [HKLM][64Bits] -- {B208E628-31E8-4819-AAF2-79CA69EBC4DE} =>Adware.Browse2Save
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner =>.Piriform Ltd
O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {64BF0187-F3D2-498B-99EA-163AF9AE6EC9}
O42 - Logiciel: Cisco LEAP Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {51C7AD07-C3F6-4635-8E8A-231306D810FE}
O42 - Logiciel: Cisco PEAP Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {ED5776D5-59B4-46B7-AF81-5F2D94D7C640}
O42 - Logiciel: Facebook Video Calling 2.0.0.447 - (.Skype Limited.) [HKLM][64Bits] -- {8DF41A9F-FE13-43E8-A003-5F9B55A011EE}
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: H1n1Game 9.7 version H1n1Game 9.7 - (.H1n1Game 9.7.) [HKLM][64Bits] -- {7BE05B4E-49A2-4B08-AF39-D5C3A0E88A03}_is1
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Lollipop - (.Lollipop Network, S.L..) [HKCU][64Bits] -- lollipop_04261935 =>Adware.Lollipop
O42 - Logiciel: McAfee Security Scan Plus - (.McAfee, Inc..) [HKLM][64Bits] -- McAfee Security Scan
O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM][64Bits] -- {BFAE8D5B-F918-486F-B74E-90762DF11C5C}
O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Security Client
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Mozilla Firefox 28.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 28.0 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: OpenOffice.org 3.4 - (.OpenOffice.org.) [HKLM][64Bits] -- {2F90A789-DD1E-41CE-BFCA-BD78213BABC7}
O42 - Logiciel: QuickTime 7 - (.Apple Inc..) [HKLM][64Bits] -- {111EE7DF-FC45-40C7-98A7-753AC46B12FB}
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Rival Chess - Unregistered Version - (...) [HKLM][64Bits] -- Rival Chess - Unregistered Version
O42 - Logiciel: Safari - (.Apple Inc..) [HKLM][64Bits] -- {C779648B-410E-4BBA-B75B-5815BCEFE71D}
O42 - Logiciel: Skype(TM) 6.11 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}
O42 - Logiciel: VLC media player 2.0.1 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN
O42 - Logiciel: Visual Studio 2010 x64 Redistributables - (.AVG Technologies.) [HKLM][64Bits] -- {21B133D6-5979-47F0-BE1C-F6A6B304693F}
O42 - Logiciel: Webplayer setup version 1.0 - (...) [HKLM][64Bits] -- {758316CA-D092-4173-A7B8-64D002A6E7A6}_is1 =>Adware.SocialSkinz
O42 - Logiciel: dEala4mE - (.deal4mE.) [HKLM][64Bits] -- {09854D8E-46B5-057B-5B6E-BFD2A04AD5AB}
O42 - Logiciel: h1n1game9.8 version h1n1game9.8 - (.h1n1game9.8.) [HKLM][64Bits] -- {53DC4E1A-3D76-4323-A14B-C7F6D64DD9E8}_is1
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {1493B2AE-0261-47D2-B1AA-F4DAD0F6C48B}
~ Logic: 39 Scanned in 00mn 00s

---\\ HKCU & HKLM Software Keys
[HKCU\Software\ATI]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Cool-Lyrics] =>Adware.AddLyrics
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Avg]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Facebook]
[HKCU\Software\FlyOrDie]
[HKCU\Software\Google]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\MCAFEE]
[HKCU\Software\Macromedia]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\OpenOffice.org]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Polipo]
[HKCU\Software\Red Hot Pawn]
[HKCU\Software\SkypeRS]
[HKCU\Software\Skype]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\tikatoolbar LTD] =>Hijacker.TikaToolbar
[HKCU\Software\tikatoolbar] =>Hijacker.TikaToolbar
[HKLM\Software\AMD]
[HKLM\Software\ATI Technologies]
[HKLM\Software\ATI]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\CBSTEST]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\GEAR Software]
[HKLM\Software\IM Providers]
[HKLM\Software\Intel]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Sonic]
[HKLM\Software\WidCommUpdate]
[HKLM\Software\Wow6432Node\ATI Technologies]
[HKLM\Software\Wow6432Node\AdobeFlashPlayerUpdate]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\AdwCleaner]
[HKLM\Software\Wow6432Node\Apple Computer, Inc.]
[HKLM\Software\Wow6432Node\Apple Inc.]
[HKLM\Software\Wow6432Node\Avg]
[HKLM\Software\Wow6432Node\BcmSetup]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\Dofus2]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\IM Providers]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\Licenses]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\McAfee.com]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\OKitSpace] =>PUP.Onekit
[HKLM\Software\Wow6432Node\OpenOffice.org]
[HKLM\Software\Wow6432Node\PluginProtect]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\Realtek]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\Skype]
[HKLM\Software\Wow6432Node\Software]
[HKLM\Software\Wow6432Node\TrendMicro]
[HKLM\Software\Wow6432Node\VideoLAN]
[HKLM\Software\Wow6432Node\WidCommUpdate]
[HKLM\Software\Wow6432Node\mcafeeupdater]
[HKLM\Software\Wow6432Node\mozilla.org]
[HKLM\Software\Wow6432Node\tikatoolbar] =>Hijacker.TikaToolbar
[HKLM\Software\Wow6432Node]
~ Key Software: 172 Scanned in 00mn 00s

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 30/11/2012 - 17:17:43 - [114,359] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 31/10/2012 - 01:31:17 - [186,949] ----D C:\Program Files (x86)\Anuman Interactive
O43 - CFD: 23/08/2012 - 16:52:08 - [2,316] ----D C:\Program Files (x86)\Apple Software Update =>.Apple Inc
O43 - CFD: 19/08/2013 - 14:20:47 - [0] ----D C:\Program Files (x86)\ATI Technologies
O43 - CFD: 18/11/2012 - 11:37:45 - [94,207] ----D C:\Program Files (x86)\AVG
O43 - CFD: 23/08/2012 - 16:51:41 - [0,602] ----D C:\Program Files (x86)\Bonjour
O43 - CFD: 23/08/2012 - 10:26:05 - [3,432] ----D C:\Program Files (x86)\Cisco
O43 - CFD: 19/08/2013 - 14:25:32 - [352,222] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 16/01/2014 - 20:31:02 - [0] ----D C:\Program Files (x86)\deal2dealit =>PUP.Deal2Dealit
O43 - CFD: 28/02/2013 - 22:35:15 - [1522,691] ----D C:\Program Files (x86)\Dofus2
O43 - CFD: 27/10/2013 - 15:34:55 - [0,017] ----D C:\Program Files (x86)\Flyordie Plugin
O43 - CFD: 27/03/2013 - 21:54:43 - [307,113] ----D C:\Program Files (x86)\Google
O43 - CFD: 02/09/2012 - 16:34:58 - [1073,801] ----D C:\Program Files (x86)\H1n1Game 9.7
O43 - CFD: 02/09/2012 - 15:48:16 - [1384,489] ----D C:\Program Files (x86)\h1n1game9.8
O43 - CFD: 23/08/2012 - 10:13:31 - [5,141] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 23/08/2012 - 10:23:24 - [14,001] ----D C:\Program Files (x86)\Intel
O43 - CFD: 13/03/2014 - 11:32:45 - [10,937] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 03/10/2012 - 23:33:08 - [142,398] ----D C:\Program Files (x86)\iTunes
O43 - CFD: 11/02/2013 - 16:27:01 - [11,498] ----D C:\Program Files (x86)\McAfee Security Scan
O43 - CFD: 28/03/2014 - 09:22:55 - [1,485] ----D C:\Program Files (x86)\Microsoft Security Client
O43 - CFD: 13/03/2014 - 11:33:27 - [40,879] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 27/08/2012 - 09:39:01 - [0,023] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 29/03/2014 - 18:34:37 - [54,490] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 02/04/2014 - 17:39:01 - [0,216] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 14/07/2009 - 07:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 06/02/2013 - 19:33:09 - [285,319] ----D C:\Program Files (x86)\OpenOffice.org 3
O43 - CFD: 02/04/2014 - 23:54:03 - [70,197] ----D C:\Program Files (x86)\QuickTime
O43 - CFD: 23/08/2012 - 10:13:35 - [2,791] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 14/07/2009 - 07:32:38 - [37,357] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 11/05/2013 - 00:59:16 - [2,329] ----D C:\Program Files (x86)\Rival Chess
O43 - CFD: 01/04/2013 - 19:17:59 - [102,605] ----D C:\Program Files (x86)\Safari
O43 - CFD: 05/03/2014 - 12:08:07 - [19,916] R---D C:\Program Files (x86)\Skype
O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 20/11/2012 - 20:52:39 - [23,321] ----D C:\Program Files (x86)\Vidalia Bundle
O43 - CFD: 30/09/2012 - 19:59:56 - [88,797] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 12/07/2013 - 10:55:22 - [0,500] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 12/04/2011 - 11:16:36 - [5,895] ----D C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
O43 - CFD: 13/12/2013 - 12:48:37 - [4,791] ----D C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 12/04/2011 - 11:16:36 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 21/11/2010 - 05:31:38 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 12/04/2011 - 11:16:36 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 14/04/2014 - 18:37:55 - [17,156] ----D C:\Program Files (x86)\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 22/11/2012 - 15:49:31 - [3,812] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 14/03/2014 - 23:24:45 - [46,039] ----D C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 03/10/2012 - 23:35:00 - [233,853] ----D C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 01/11/2012 - 04:01:00 - [17,492] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 23/08/2012 - 10:23:26 - [0,154] ----D C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 14/07/2009 - 05:20:08 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 22/04/2013 - 15:51:17 - [1,904] ----D C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 25/08/2012 - 10:22:38 - [9,767] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 03/10/2012 - 23:33:11 - [2,775] ----D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
O43 - CFD: 16/01/2014 - 20:33:01 - [0,004] ----D C:\ProgramData\97b8c241b3577a8c
O43 - CFD: 02/05/2013 - 13:12:25 - [168,400] ----D C:\ProgramData\Adobe
O43 - CFD: 23/08/2012 - 16:51:56 - [170,699] ----D C:\ProgramData\Apple
O43 - CFD: 23/08/2012 - 16:52:29 - [113,696] ----D C:\ProgramData\Apple Computer
O43 - CFD: 14/07/2009 - 07:08:56 - [0] -SH-D C:\ProgramData\Application Data
O43 - CFD: 23/08/2012 - 09:37:49 - [0] -SH-D C:\ProgramData\Bureau
O43 - CFD: 18/11/2012 - 11:26:20 - [0] --H-D C:\ProgramData\Common Files
O43 - CFD: 16/01/2014 - 20:36:56 - [0] ----D C:\ProgramData\deal2dealit =>PUP.Deal2Dealit
O43 - CFD: 16/01/2014 - 20:40:15 - [0,937] ----D C:\ProgramData\dEala4mE
O43 - CFD: 14/07/2009 - 07:08:56 - [0] -SH-D C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 07:08:56 - [0] -SH-D C:\ProgramData\Documents
O43 - CFD: 23/08/2012 - 09:37:49 - [0] -SH-D C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - 07:08:56 - [0] -SH-D C:\ProgramData\Favorites
O43 - CFD: 29/01/2013 - 13:08:26 - [0,039] ----D C:\ProgramData\Hewlett-Packard
O43 - CFD: 30/03/2013 - 14:48:08 - [2,168] ----D C:\ProgramData\InstallMate =>PUP.Tarma
O43 - CFD: 22/11/2012 - 15:50:25 - [0,338] ----D C:\ProgramData\McAfee
O43 - CFD: 22/11/2012 - 15:50:27 - [0,001] ----D C:\ProgramData\McAfee Security Scan
O43 - CFD: 23/08/2012 - 09:37:49 - [0] -SH-D C:\ProgramData\Menu Démarrer
O43 - CFD: 30/03/2013 - 14:50:34 - [199,431] ----D C:\ProgramData\MFAData
O43 - CFD: 27/02/2014 - 11:32:27 - [604,440] -S--D C:\ProgramData\Microsoft
O43 - CFD: 23/08/2012 - 09:37:49 - [0] -SH-D C:\ProgramData\Modèles
O43 - CFD: 23/08/2012 - 09:54:06 - [0,036] ----D C:\ProgramData\Mozilla
O43 - CFD: 22/12/2013 - 01:13:27 - [0,007] ----D C:\ProgramData\nffkienckpjpnoaffdeobgjdmbkkdepo
O43 - CFD: 05/03/2014 - 12:08:11 - [66,547] ----D C:\ProgramData\Skype
O43 - CFD: 14/07/2009 - 07:08:56 - [0] -SH-D C:\ProgramData\Start Menu
O43 - CFD: 17/11/2013 - 16:08:27 - [0] ---AD C:\ProgramData\TEMP
O43 - CFD: 14/07/2009 - 07:08:56 - [0] -SH-D C:\ProgramData\Templates
O43 - CFD: 23/08/2012 - 16:52:53 - [0,004] ----D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
O43 - CFD: 30/11/2012 - 17:17:44 - [17,376] ----D C:\Users\Lillo\AppData\Roaming\Adobe
O43 - CFD: 15/12/2012 - 23:05:09 - [0] ----D C:\Users\Lillo\AppData\Roaming\AnkamaCertificates
O43 - CFD: 15/12/2012 - 23:03:29 - [0,005] ----D C:\Users\Lillo\AppData\Roaming\app
O43 - CFD: 02/04/2013 - 02:08:54 - [3,103] ----D C:\Users\Lillo\AppData\Roaming\Apple Computer
O43 - CFD: 23/08/2012 - 10:46:00 - [0] ----D C:\Users\Lillo\AppData\Roaming\ATI
O43 - CFD: 14/03/2014 - 23:19:54 - [0] ----D C:\Users\Lillo\AppData\Roaming\Dofus
O43 - CFD: 15/03/2014 - 02:19:41 - [0] ----D C:\Users\Lillo\AppData\Roaming\Dofus-2
O43 - CFD: 15/03/2014 - 14:18:59 - [0] ----D C:\Users\Lillo\AppData\Roaming\Dofus-3
O43 - CFD: 17/03/2014 - 01:48:45 - [77,837] ----D C:\Users\Lillo\AppData\Roaming\Dofus2
O43 - CFD: 15/12/2012 - 23:12:33 - [0] ----D C:\Users\Lillo\AppData\Roaming\DofusTesting
O43 - CFD: 15/12/2012 - 23:03:26 - [0] ----D C:\Users\Lillo\AppData\Roaming\DofusTesting-2
O43 - CFD: 16/12/2012 - 01:05:46 - [0] ----D C:\Users\Lillo\AppData\Roaming\DofusTesting-3
O43 - CFD: 23/08/2012 - 09:38:10 - [0] ----D C:\Users\Lillo\AppData\Roaming\Identities
O43 - CFD: 23/08/2012 - 10:25:24 - [0] ----D C:\Users\Lillo\AppData\Roaming\InstallShield
O43 - CFD: 31/10/2012 - 01:54:14 - [0,001] ----D C:\Users\Lillo\AppData\Roaming\LiveCAD3
O43 - CFD: 23/08/2012 - 11:06:38 - [0,076] ----D C:\Users\Lillo\AppData\Roaming\Macromedia
O43 - CFD: 12/04/2011 - 11:27:52 - [0] ----D C:\Users\Lillo\AppData\Roaming\Media Center Programs
O43 - CFD: 11/03/2014 - 20:53:08 - [3,008] -S--D C:\Users\Lillo\AppData\Roaming\Microsoft
O43 - CFD: 23/08/2012 - 09:54:27 - [41,333] ----D C:\Users\Lillo\AppData\Roaming\Mozilla
O43 - CFD: 09/02/2013 - 05:37:50 - [21,379] ----D C:\Users\Lillo\AppData\Roaming\OpenOffice.org
O43 - CFD: 15/03/2014 - 14:19:03 - [0] ----D C:\Users\Lillo\AppData\Roaming\Reg
O43 - CFD: 15/12/2012 - 23:03:29 - [0] ----D C:\Users\Lillo\AppData\Roaming\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
O43 - CFD: 14/07/2013 - 16:03:18 - [6,911] ----D C:\Users\Lillo\AppData\Roaming\Skype
O43 - CFD: 25/03/2014 - 10:11:11 - [4,929] ----D C:\Users\Lillo\AppData\Roaming\tor
O43 - CFD: 18/11/2012 - 11:38:52 - [0] ----D C:\Users\Lillo\AppData\Roaming\TuneUp Software
O43 - CFD: 22/02/2014 - 21:10:04 - [0,569] ----D C:\Users\Lillo\AppData\Roaming\vlc
O43 - CFD: 14/04/2014 - 18:38:32 - [0,186] ----D C:\Users\Lillo\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 30/11/2012 - 17:17:39 - [14,740] ----D C:\Users\Lillo\AppData\Local\Adobe
O43 - CFD: 02/04/2014 - 23:44:32 - [42,611] ----D C:\Users\Lillo\AppData\Local\Apple
O43 - CFD: 01/04/2013 - 22:41:23 - [323,748] ----D C:\Users\Lillo\AppData\Local\Apple Computer
O43 - CFD: 23/08/2012 - 09:37:57 - [0] -SH-D C:\Users\Lillo\AppData\Local\Application Data
O43 - CFD: 27/03/2013 - 21:44:58 - [1,557] ----D C:\Users\Lillo\AppData\Local\Apps
O43 - CFD: 23/08/2012 - 10:46:00 - [0,096] ----D C:\Users\Lillo\AppData\Local\ATI
O43 - CFD: 27/02/2013 - 13:08:36 - [0,569] ----D C:\Users\Lillo\AppData\Local\Avg2013
O43 - CFD: 18/09/2013 - 17:04:35 - [0,125] ----D C:\Users\Lillo\AppData\Local\avgchrome
O43 - CFD: 06/02/2013 - 18:18:40 - [2,412] ----D C:\Users\Lillo\AppData\Local\CRE
O43 - CFD: 27/03/2013 - 21:46:51 - [0] ----D C:\Users\Lillo\AppData\Local\Deployment
O43 - CFD: 30/03/2014 - 16:31:07 - [0] ----D C:\Users\Lillo\AppData\Local\Diagnostics
O

Non mon ami,

Le rapport de ZHPDiag est trop long pour être inséré dans ton post. Il est tronqué.

La procédure c'est l'hébergement :

- Pour transmettre les rapports que tu obtiens à la suite du passage d'outils tu cliques sur un de ces liens :
cijoint ou pjoint
- Tu cliques ensuite sur Parcourir et cherches le fichier du rapport, en principe on t'indique ou il est.
- Tu cliques sur Ouvrir puis sur "Cliquez ici pour déposer le fichier".
Un lien de cette forme: http://cjoint.com/index.php?file=cjge368/cijSKAP5fU.txt
est ajouté dans la page ou (suivant le site) il faut cliquer sur "créer le lien".
- C'est ce lien que tu as à transmettre et uniquement cela.

A+

http://cjoint.com/?DDqqU596IEg

je pence que c bon

http://pjjoint.malekal.com/files.php?id=ZHPDiag_20140416_f5d6l15u9v8

Bonjour,

Je vais examiner ton rapport et te donner la marche à suivre.

Mais tout d'abord.

1- Désinstalle les antivirus, Mc Afee et AVG. Tu as déjà MSE d'installé et il ne faut qu'un seul antivirus sur une machine.

2- Désinstalle ces programmes qui ne sont pas à jour :
- Adobe Reader
- Adobe flash player plugin et active x

3- Si tu as des programmes deal2dealit - dEala4mE
Désinstalle les aussi.

A+

--------Contributeur Sécurité---------
Heureux ceux qui peuvent donner sans s'en souvenir et prendre sans oublier !

OK on continue !

Ce script va cibler certains éléments à supprimer :

* Ferme toutes tes applications en cours
* Sélectionne et copie toutes les lignes en gras et italique suivantes :

Script ZHPFix
G2 - GCE: Preference [User Data\Default] [dhkplhfnhceodhffomolpfigojocbpcb] Babylon Toolbar v.1.8 (Désactivé)
G2 - GCE: Preference [User Data\Default] [licjnkifamhpbaefhdpacpmihicfbomb] PricePeep v.2.1.293.0 (Désactivé)
G2 - GCE: Preference [User Data\Default] [nchpfiddbhbdnagofhkjlaiaejmkdcla] Helper extension v.1.5 (Désactivé)
G2 - GCE: Preference [User Data\Default] [zzzzzzzzzzzzzzzzoibponkmmpgpmjgl] OKitSpace v.1.0, (Désactivé)
M3 - MFPP: Plugins - [Lillo] -- C:\Users\Lillo\AppData\Roaming\Mozilla\Firefox\Profiles\b0vnsw1p.default\searchplugins\tikatoolbar.xml
[MD5.00000000000000000000000000000000] [APT] [{C55B784A-FBED-431C-983A-BA688D53D20A}] (...) -- c:\users\Lillo\appdata\local\lollipop\lollipop_04261935.bat (.not file.) [0]
O42 - Logiciel: BrowseToSave - (...) [HKLM][64Bits] -- {B208E628-31E8-4819-AAF2-79CA69EBC4DE}
O42 - Logiciel: Lollipop - (.Lollipop Network, S.L..) [HKCU][64Bits] -- lollipop_04261935
O42 - Logiciel: Webplayer setup version 1.0 - (...) [HKLM][64Bits] -- {758316CA-D092-4173-A7B8-64D002A6E7A6}_is1
[HKCU\Software\AppDataLow\Software\Cool-Lyrics]
[HKCU\Software\tikatoolbar LTD]
[HKCU\Software\tikatoolbar]
[HKLM\Software\Wow6432Node\OKitSpace]
[HKLM\Software\Wow6432Node\tikatoolbar]
O43 - CFD: 16/01/2014 - 20:31:02 - [0] ----D C:\Program Files (x86)\deal2dealit
O43 - CFD: 16/01/2014 - 20:36:56 - [0] ----D C:\ProgramData\deal2dealit
O43 - CFD: 30/03/2013 - 14:48:08 - [2,168] ----D C:\ProgramData\InstallMate
O43 - CFD: 30/09/2012 - 19:45:05 - [0] ----D C:\Users\Lillo\AppData\Local\Software
O87 - FAEL: "{9D66285C-607D-48EB-ACB1-47B16F3489DB}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.)
O87 - FAEL: "{31362492-5180-4362-A6E0-E8B869701365}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.)
[MD5.EDD21B7C504C7E3F36DE766B31BD3178] [WIS][30/09/2012] (.SweetIM Technologies Ltd. - SweetPacks Toolbar for Internet Explorer 4.0.) -- C:\Windows\Installer\25d16c14.msi [3304960]
[MD5.3CD19859CD377AD00B30E4BEE49D374E] [WIS][30/09/2012] (.SweetIM Technologies Ltd. - Sweetpacks Communicator 1.1.) -- C:\Windows\Installer\25d16c19.msi [2997248]
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LollipopInstaller_kreapixel_14650_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LollipopInstaller_kreapixel_14650_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LollipopInstaller_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LollipopInstaller_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\lollipop_04090834_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\lollipop_04090834_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\lollipop_04111515_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\lollipop_04111515_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\lollipop_04192140_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\lollipop_04192140_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\lollipop_04230942_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\lollipop_04230942_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\lollipop_04261208_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\lollipop_04261208_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\lollipop_04261935_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\lollipop_04261935_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Lollipop_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Lollipop_RASMANCS
[HKLM\Software\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb]
[HKLM\Software\Google\Chrome\Extensions\licjnkifamhpbaefhdpacpmihicfbomb]
[HKLM\Software\Google\Chrome\Extensions\nchpfiddbhbdnagofhkjlaiaejmkdcla]
[HKLM\Software\Google\Chrome\Extensions\zzzzzzzzzzzzzzzzoibponkmmpgpmjgl]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{B208E628-31E8-4819-AAF2-79CA69EBC4DE}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_04261935]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{758316CA-D092-4173-A7B8-64D002A6E7A6}_is1] =>Adware.SocialSkinz^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EB6AF8AEEB922FA4392548F13812E50B] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9EE58E3C298524145B73CBBED3CAC4D3]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0] =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12BF94BD06C95F343A77631402B9556A]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2124D8A8CF720FD44866190AF560228E]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27A325ACED8CA4743A30127638591ADB]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\350D17402BD84234EAF7D32F08172D7C]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EE8C5F419057E1478A654868CEE60B5]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4735D908D66E1BA46B6C2D7185A12B2B]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76D8378E2DDAED3428720A631F6E3BF0]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A001B259DB7D694E818BE29B973992C]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE2EC163C6A68A48921573E0E7E199D]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C06C6662FA5B04646829E4A460857770]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEEB3E14ABE8270419B0FD762E18F7C6]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1B5E9A3BDB51349BF96E842C062D98]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FECBC2BC14DA6CD459BD59A041709836]
C:\Users\Lillo\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
C:\Users\Lillo\AppData\Local\Google\Chrome\User Data\Default\Extensions\licjnkifamhpbaefhdpacpmihicfbomb
C:\Users\Lillo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchpfiddbhbdnagofhkjlaiaejmkdcla
C:\Users\Lillo\AppData\Local\Google\Chrome\User Data\Default\Extensions\zzzzzzzzzzzzzzzzoibponkmmpgpmjgl
C:\Program Files (x86)\deal2dealit
C:\ProgramData\deal2dealit
C:\ProgramData\InstallMate
C:\Users\Lillo\AppData\Local\Software
[HKCU\Software\AppDataLow\Software\Cool-Lyrics]
[HKCU\Software\tikatoolbar LTD]
[HKCU\Software\tikatoolbar]
[HKLM\Software\Wow6432Node\OKitSpace]
[HKLM\Software\Wow6432Node\tikatoolbar]
C:\Windows\Installer\25d16c14.msi
C:\Windows\Installer\25d16c19.msi
C:\Users\Lillo\AppData\Local\Temp\instloffer.exe
C:\Users\Lillo\AppData\Local\Temp\uninst1.exe
C:\Users\Lillo\AppData\Local\Temp\Shortcut_bundlesweetimsetup.exe
C:\Users\Lillo\AppData\Local\Temp\SIMEEIInstaller.exe
C:\Users\Lillo\AppData\Local\Temp\iminent_offerscreen_image.bmp
C:\Users\Lillo\AppData\Local\Temp\moreinfo_iminent.bmp
C:\Users\Lillo\AppData\Local\Temp\moreinfo_boxore.bmp
C:\Users\Lillo\AppData\Local\Temp\square_boxore.bmp
C:\Users\Lillo\AppData\Local\Temp\lollipop_moreinfo.bmp
C:\Users\Lillo\AppData\Local\Temp\square_lollipop.bmp
C:\Users\Lillo\AppData\Local\Temp\pricepeep_logo.bmp
C:\Users\Lillo\AppData\Local\Temp\square_pricepeep.bmp
C:\Users\Lillo\AppData\Local\Temp\mgsqlite3.dll
ShortcutFix
CTFFix
HOSTFix
PROXYFix
EmptyPrefetch
EmptyTemp
EmptyCLSID

* Lance ZHPFix via le raccourci sur ton Bureau, (Si tu es sous Vista ou Windows 7 ou Windows 8 n'oublie pas clic droit ==> en tant qu'administrateur")
* Si tu obtiens le message "Voulez-vous autoriser le programme suivant..."Tu réponds "Oui"
* Clique sur le bouton "IMPORTER"
* Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes

* Clique sur le bouton «GO» pour le lancer le nettoyage
* A la demande, confirme le nettoyage des données en cliquant sur [OK]
* Patiente le temps du traitement.
* ZHPFix va te demander si tu souhaites vider ta corbeille, clique sur ton choix (le traitement peut être long suivant la quantité de données à supprimer)
* Un rapport nommé ZHPFixReport.txt sera créé et sauvegardé sur le bureau
* Ce rapport se trouve aussi ici C:\ZHP\ZHPFix[R1].txt
* Copie/colle la totalité du rapport dans ta prochaine réponse

A+

Rapport de ZHPFix 2014.4.13.3 par Nicolas Coolman, Update du 13/04/2014
Fichier d'export Registre :
Run by Lillo at 16/04/2014 17:58:41
High Elevated Privileges : OK
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Corbeille vidée (00mn 03s)
Dossier Prefetcher vidé
Réparation des raccourcis navigateur

========== Logiciels ==========
ABSENT Uninstall Process: c:\program files (x86)\webplayer setup\unins000.exe

========== Processus mémoire ==========
SUPPRIMÉ: Memory Process: C:\Users\Lillo\AppData\Local\Temp\instloffer.exe
SUPPRIMÉ: Memory Process: C:\Users\Lillo\AppData\Local\Temp\uninst1.exe
SUPPRIMÉ: Memory Process: C:\Users\Lillo\AppData\Local\Temp\Shortcut_bundlesweetimsetup.exe
SUPPRIMÉ: Memory Process: C:\Users\Lillo\AppData\Local\Temp\SIMEEIInstaller.exe

========== Modules mémoire ==========
SUPPRIMÉ: Memory Module: C:\Users\Lillo\AppData\Local\Temp\mgsqlite3.dll

========== Clés du Registre ==========
SUPPRIMÉ Logiciel Key: [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{758316CA-D092-4173-A7B8-64D002A6E7A6}_is1]
SUPPRIMÉ: HKCU\Software\AppDataLow\Software\Cool-Lyrics
SUPPRIMÉ: HKCU\Software\tikatoolbar LTD
SUPPRIMÉ: HKCU\Software\tikatoolbar
SUPPRIMÉ: HKLM\Software\Wow6432Node\OKitSpace
SUPPRIMÉ: HKLM\Software\Wow6432Node\tikatoolbar
SUPPRIMÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LollipopInstaller_kreapixel_14650_RASAPI32
SUPPRIMÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LollipopInstaller_kreapixel_14650_RASMANCS
SUPPRIMÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LollipopInstaller_RASAPI32
SUPPRIMÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LollipopInstaller_RASMANCS
SUPPRIMÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\lollipop_04090834_RASAPI32
SUPPRIMÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\lollipop_04090834_RASMANCS
SUPPRIMÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\lollipop_04111515_RASAPI32
SUPPRIMÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\lollipop_04111515_RASMANCS
SUPPRIMÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\lollipop_04192140_RASAPI32
SUPPRIMÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\lollipop_04192140_RASMANCS
SUPPRIMÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\lollipop_04230942_RASAPI32
SUPPRIMÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\lollipop_04230942_RASMANCS
SUPPRIMÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\lollipop_04261208_RASAPI32
SUPPRIMÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\lollipop_04261208_RASMANCS
SUPPRIMÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\lollipop_04261935_RASAPI32
SUPPRIMÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\lollipop_04261935_RASMANCS
SUPPRIMÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Lollipop_RASAPI32
SUPPRIMÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Lollipop_RASMANCS
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{B208E628-31E8-4819-AAF2-79CA69EBC4DE}
SUPPRIMÉ: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_04261935
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EB6AF8AEEB922FA4392548F13812E50B
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9EE58E3C298524145B73CBBED3CAC4D3
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12BF94BD06C95F343A77631402B9556A
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2124D8A8CF720FD44866190AF560228E
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27A325ACED8CA4743A30127638591ADB
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\350D17402BD84234EAF7D32F08172D7C
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EE8C5F419057E1478A654868CEE60B5
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4735D908D66E1BA46B6C2D7185A12B2B
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76D8378E2DDAED3428720A631F6E3BF0
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A001B259DB7D694E818BE29B973992C
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE2EC163C6A68A48921573E0E7E199D
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C06C6662FA5B04646829E4A460857770
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEEB3E14ABE8270419B0FD762E18F7C6
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1B5E9A3BDB51349BF96E842C062D98
SUPPRIMÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FECBC2BC14DA6CD459BD59A041709836
CTFFixCTFMon désactivé par défaut

========== Valeurs du Registre ==========
SUPPRIMÉ: {9D66285C-607D-48EB-ACB1-47B16F3489DB}
SUPPRIMÉ: {31362492-5180-4362-A6E0-E8B869701365}
ProxyFix : Configuration proxy supprimée avec succès
SUPPRIMÉ ProxyServer Value
SUPPRIMÉ ProxyEnable Value
SUPPRIMÉ EnableHttp1_1 Value
SUPPRIMÉ ProxyHttp1.1 Value
SUPPRIMÉ ProxyOverride Value

========== Dossiers ==========
Aucun dossiers CLSID Local utilisateur vide

========== Fichiers ==========
SUPPRIMÉ: c:\users\lillo\appdata\local\google\chrome\user data\default\preferences
SUPPRIMÉ: c:\users\lillo\appdata\roaming\mozilla\firefox\profiles\b0vnsw1p.default\searchplugins\tikatoolbar.xml
SUPPRIMÉ: C:\Windows\Installer\25d16c14.msi
SUPPRIMÉ: C:\Windows\Installer\25d16c19.msi
SUPPRIMÉ: C:\Users\Lillo\AppData\Local\Temp\iminent_offerscreen_image.bmp
SUPPRIMÉ: C:\Users\Lillo\AppData\Local\Temp\moreinfo_iminent.bmp
SUPPRIMÉ: C:\Users\Lillo\AppData\Local\Temp\moreinfo_boxore.bmp
SUPPRIMÉ: C:\Users\Lillo\AppData\Local\Temp\square_boxore.bmp
SUPPRIMÉ: C:\Users\Lillo\AppData\Local\Temp\lollipop_moreinfo.bmp
SUPPRIMÉ: C:\Users\Lillo\AppData\Local\Temp\square_lollipop.bmp
SUPPRIMÉ: C:\Users\Lillo\AppData\Local\Temp\pricepeep_logo.bmp
SUPPRIMÉ: C:\Users\Lillo\AppData\Local\Temp\square_pricepeep.bmp
SUPPRIMÉS Temporaires Windows (919) (681 607 025 octets)

========== Fichier HOSTS ==========
Le fichier Hosts n'est pas réparé, veuillez désactiver votre antivirus.

========== Tache planifiée ==========
SUPPRIMÉ: {C55B784A-FBED-431C-983A-BA688D53D20A}

========== Récapitulatif ==========
4 : Processus mémoire
1 : Modules mémoire
65 : Clés du Registre
8 : Valeurs du Registre
1 : Dossiers
13 : Fichiers
1 : Logiciels
1 : Fichier HOSTS
1 : Tache planifiée

End of clean in 00mn 18s

========== Chemin de fichier rapport ==========
C:\Users\Lillo\AppData\Roaming\ZHP\ZHPFix[R1].txt - 16/04/2014 17:58:44 [9850]

hello !

Tu as changé de pseudo ?

Refais moi un ZHPDiag pour voir ce qu'il reste !

A+

hey! ;)
oui j'ai changé de pseudo ^^ voici le rapport zhpdiag:

http://pjjoint.malekal.com/files.php?id=ZHPDiag_20140416_x14d12q11f9s13

Re,

Bon, c'est déjà plus clair.

- Attention tu n'as pas désinstallé Adobe reader X.
Fais le et remplace le par Sumatra (plus léger)
http://blog.kowalczyk.info/software/sumatrapdf/free-pdf-reader-fr.html

Ce script va cibler certains éléments à supprimer :

* Ferme toutes tes applications en cours
* Sélectionne et copie toutes les lignes en gras et italique suivantes depuis et y compris Script ZHPFIX :

Script ZHPFix
O42 - Logiciel: dEala4mE - (.deal4mE.) [HKLM][64Bits] -- {09854D8E-46B5-057B-5B6E-BFD2A04AD5AB}
O43 - CFD: 16/01/2014 - 20:33:01 - [0,004] ----D C:\ProgramData\97b8c241b3577a8c
O43 - CFD: 16/01/2014 - 20:40:15 - [0,937] ----D C:\ProgramData\dEala4mE
O43 - CFD: 22/12/2013 - 01:13:27 - [0,007] ----D C:\ProgramData\nffkienckpjpnoaffdeobgjdmbkkdepo
O2 - BHO: dEala4mE [64Bits] - {B75B0550-30EA-882A-B9B7-DD531FB444F1} Clé orpheline
O4 - GS\Accessories [Lillo]: Run.lnk - Clé orpheline
O4 - GS\Desktop [Lillo]: HP psc 1600 series - Raccourci.lnk - Clé orpheline
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3048084318-1880268581-2619964528-1000Core.job [906]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3048084318-1880268581-2619964528-1000UA.job [928]
[MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-3048084318-1880268581-2619964528-1000Core] (.Facebook Inc..) -- C:\Users\Lillo\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096]
[MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-3048084318-1880268581-2619964528-1000UA] (.Facebook Inc..) -- C:\Users\Lillo\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096]
O41 - Driver: (idlesooa) . (. - .) - C:\Windows\system32\drivers\idlesooa.sys (.not file.)
O41 - Driver: (ozgdeqxx) . (. - .) - C:\Windows\system32\drivers\ozgdeqxx.sys (.not file.)
O4 - GS\Desktop [Lillo]: AVG 2013.lnk . (...) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe (.not file.)
[HKCU\Software\MCAFEE]
O43 - CFD: 22/11/2012 - 15:50:25 - [0,379] ----D C:\ProgramData\McAfee
G2 - GCE: Preference [User Data\Default] [dffhljlmcohcioeilbnpmbchdcbhifdh] WiseConvert 1.5 v.10.14.40.128 (Désactivé) =>Toolbar.Conduit
G2 - EXT: C:\Users\Lillo\AppData\Local\Google\Chrome\User Data\Default\Extensions\dffhljlmcohcioeilbnpmbchdcbhifdh [WiseConvert 1.5]
O43 - CFD: 06/02/2013 - 18:18:40 - [2,412] ----D C:\Users\Lillo\AppData\Local\CRE
[HKLM\Software\Google\Chrome\Extensions\dffhljlmcohcioeilbnpmbchdcbhifdh]
C:\Users\Lillo\AppData\Local\Google\Chrome\User Data\Default\Extensions\dffhljlmcohcioeilbnpmbchdcbhifdh
http://nicolascoolman.webs.com/apps/blog/show/29507721-toolbar-conduit
OPT:O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe
OPT:O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
OPT:SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
PROXYFix
EmptyPrefetch
EmptyTemp
EmptyCLSID

* Lance ZHPFix via le raccourci sur ton Bureau, (Si tu es sous Vista ou Windows 7 ou Windows 8 n'oublie pas clic droit ==> en tant qu'administrateur")
* Si tu obtiens le message "Voulez-vous autoriser le programme suivant..."Tu réponds "Oui"
* Clique sur le bouton "IMPORTER"
* Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes

* Clique sur le bouton «GO» pour le lancer le nettoyage
* A la demande, confirme le nettoyage des données en cliquant sur [OK]
* Patiente le temps du traitement.
* ZHPFix va te demander si tu souhaites vider ta corbeille, clique sur ton choix (le traitement peut être long suivant la quantité de données à supprimer)
* Un rapport nommé ZHPFixReport.txt sera créé et sauvegardé sur le bureau
* Ce rapport se trouve aussi ici C:\ZHP\ZHPFix[R1].txt
* Copie/colle la totalité du rapport dans ta prochaine réponse

A+

salut ;)

voici le rapport

Rapport de ZHPFix 2014.4.13.3 par Nicolas Coolman, Update du 13/04/2014
Fichier d'export Registre :
Run by Lillo at 17/04/2014 17:46:56
High Elevated Privileges : OK
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Corbeille vidée (00mn 25s)
Dossier Prefetcher vidé

========== Logiciels ==========
ABSENT Uninstall Process: c:\programdata\deala4me\6ne.exe

========== Clés du Registre ==========
SUPPRIMÉ Logiciel Key: [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{09854D8E-46B5-057B-5B6E-BFD2A04AD5AB}]
SUPPRIMÉ Driver Key: idlesooa
SUPPRIMÉ Driver Key: ozgdeqxx
SUPPRIMÉ: HKCU\Software\MCAFEE
SUPPRIMÉ: Service: Bonjour Service

========== Valeurs du Registre ==========
SUPPRIMÉ RunValue: QuickTime Task
ProxyFix : Configuration proxy supprimée avec succès
SUPPRIMÉ ProxyServer Value
SUPPRIMÉ ProxyEnable Value
SUPPRIMÉ EnableHttp1_1 Value
SUPPRIMÉ ProxyHttp1.1 Value
SUPPRIMÉ ProxyOverride Value

========== Préférences navigateur ==========
SUPPRIMÉ Folder Chrome: C:\Users\Lillo\AppData\Local\Google\Chrome\User Data\Default\Extensions\dffhljlmcohcioeilbnpmbchdcbhifdh

========== Dossiers ==========
Aucun dossiers CLSID Local utilisateur vide

========== Fichiers ==========
SUPPRIMÉ: c:\windows\tasks\facebookupdatetaskusers-1-5-21-3048084318-1880268581-2619964528-1000core.job
SUPPRIMÉ: c:\windows\tasks\facebookupdatetaskusers-1-5-21-3048084318-1880268581-2619964528-1000ua.job
SUPPRIMÉ: c:\users\lillo\desktop\avg 2013.lnk
SUPPRIMÉ: c:\users\lillo\appdata\local\google\chrome\user data\default\preferences
SUPPRIMÉS Temporaires Windows (4) (6 832 octets)

========== Tache planifiée ==========
SUPPRIMÉ: FacebookUpdateTaskUserS-1-5-21-3048084318-1880268581-2619964528-1000Core
SUPPRIMÉ: FacebookUpdateTaskUserS-1-5-21-3048084318-1880268581-2619964528-1000UA

========== Autre ==========
NON TRAITÉ http://nicolascoolman.webs.com/apps/blog/show/29507721-toolbar-conduit

========== Récapitulatif ==========
5 : Clés du Registre
7 : Valeurs du Registre
1 : Dossiers
5 : Fichiers
1 : Logiciels
1 : Préférences navigateur
2 : Tache planifiée
1 : Autre

End of clean in 00mn 48s

========== Chemin de fichier rapport ==========
C:\Users\Lillo\AppData\Roaming\ZHP\ZHPFix[R1].txt - 16/04/2014 16:58:44 [9930]
C:\Users\Lillo\AppData\Roaming\ZHP\ZHPFix[R2].txt - 17/04/2014 17:47:22 [2326]

Hello,

Comment se porte ta machine maintenant ?

A+

bah ça à l'air de ce porter bien, mais quel logiciel faut-il que je réinstalle?

mon ventilo souffle toujours autant donc ce n'est pas à cause des virus......

Est ce qu'il faut que je réinstalle un logiciel anti-virus?

Faut-il que je réinstalle les adobe?

corsé,

Tu as déjà un antivirus c'est MSE, donc inutile d'en installer un autre (d'ailleurs surtout pas) !

Pour Adobe reader, c'est une usine à gaz.
Installe "Sumatra"
http://blog.kowalczyk.info/software/sumatrapdf/free-pdf-reader-fr.html

Puis tu me refais un ZHPDiag de contrôle.

A+