Prochaine étape après un rapport ZHPDiag Résolu/Fermé

Question

Bonjour , je suis un nouveau menbre et je voudrais de l'aide pour lire un rapport de ZHPDiag .
En effet , depuis quelques jours je panse avoir un vírus qui change et souligne certains mots en vert . J'ai fait un premier nettoyage avec Ccleaner , et jai ensuite télécharger ZHPDiag . Seulement voilà , je viens de recevoir le rapport et je ne sais pas quoi faire étant donner que je ne sais pas lire les rapports et ZHPfix ne l'accepte pas pour commencer le nettoyage . 
Merci d'avance pour vos réponces . Marc

cabrier · Answer

Marc,

Commence par faire ceci :


Utilise AdwCleaner (développé par Xplode) qui est un outil de désinfection spécifique aux logiciels publicitaires : 

*Il est à télécharger ICI pour obtenir la dernière version.

* Une fois téléchargé et lancé (clic droit : "Exécuter en tant qu'administrateur") clique sur [Scanner], laisse l'outil travailler.

* Lorsque le scan est terminé, dans les différents onglets apparaissent les infections trouvées.

* Clique sur l'onglet [Nettoyer], tous les éléments infectieux trouvés vont être supprimés.

* Clique sur [Rapport], le rapport apparait, tu peux le copier/coller dans ta prochaine réponse. 
Sinon héberge le sur :
cijoint ou  pjoint ou Up2Share et transmet moi le lien obtenu.


-----------------------------------------
 * Une fois AdwCleaner utilisé et posté son rapport :

Utilise cet autre outil pour  vérification :Télécharge: Junkware Removal Tool à partir ce lien : JRT

!!! Ne clique pas sur Download !!! , attends simplement que la fenêtre de téléchargement arrive pour confirmation

* Enregistre ce fichier sur le bureau et ferme tous tes navigateurs

Sous XP, double-clique sur l'icône et presse une touche lorsque cela te sera demandé.
Sous Vista/7/8, clic droit et Exécuter en temps qu'administrateur.

* NB: Le bureau disparaitra un instant, c'est normal.
* Laisse le programme travailler ne touche à rien

* Poste le rapport généré à la fin de l'analyse.

Tuto : http://hackinginterdit.blogspot.fr/2013/02/junkware-removal-tool.html



---------------------------------

On verra plus tard pour le rapport de ZHPDiag !

A+

Marc.de.saint-denis · Answer

Merci , Cabrier ...
Adwcleaner ,'est écrit en anglais , j'ai scanner et appuyé sur clean ! Mon ordinateur a été reintialiser et j'ai reçu ce rapport . 

# AdwCleaner v3.203 - Report created 26/04/2014 at 17:48:14
# Updated 26/04/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : kemar 93 - KEMAR93-TOSH
# Running from : C:\Users\kemar 93\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0OM22ETT\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : DefaultTabUpdate
Service Deleted : winzipersvc

***** [ Files / Folders ] *****

Folder Deleted : C:\Kreapixel
Folder Deleted : C:\ProgramData\apn
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\DealPlyLive
Folder Deleted : C:\ProgramData\speedypc software
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\ProgramData\Uniblue
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ShopperReports
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZipper
Folder Deleted : C:\Program Files (x86)\1ClickDownload
Folder Deleted : C:\Program Files (x86)\BasicScan
Folder Deleted : C:\Program Files (x86)\BearShare Applications
Folder Deleted : C:\Program Files (x86)\Boxore
Folder Deleted : C:\Program Files (x86)\buenosearch LTD
Folder Deleted : C:\Program Files (x86)\Complitly
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\DealPly
Folder Deleted : C:\Program Files (x86)\DealPlyLive
Folder Deleted : C:\Program Files (x86)\Desk 365
Folder Deleted : C:\Program Files (x86)\Free Games 111
Folder Deleted : C:\Program Files (x86)\MyPC Backup
Folder Deleted : C:\Program Files (x86)\Nosibay
Folder Deleted : C:\Program Files (x86)\Omiga Plus
Folder Deleted : C:\Program Files (x86)\Plus-HD-1.7
Folder Deleted : C:\Program Files (x86)\predm
Folder Deleted : C:\Program Files (x86)\SearchProtect
Folder Deleted : C:\Program Files (x86)\ShopperReports3
Folder Deleted : C:\Program Files (x86)\SimilarSites
Folder Deleted : C:\Program Files (x86)\Vittalia
Folder Deleted : C:\Program Files (x86)\WebexpEnhancedV1
Folder Deleted : C:\Program Files (x86)\Webplayer setup
Folder Deleted : C:\Program Files (x86)\WinZipper
Folder Deleted : C:\Program Files\Uninstaller
Folder Deleted : C:\Users\kemar 93\AppData\Local\Babylon
Folder Deleted : C:\Users\kemar 93\AppData\Local\Conduit
Folder Deleted : C:\Users\kemar 93\AppData\Local\DealPlyLive
Folder Deleted : C:\Users\kemar 93\AppData\Local\EoRezo
Folder Deleted : C:\Users\kemar 93\AppData\Local\ext_offermosquito
Folder Deleted : C:\Users\kemar 93\AppData\Local\iac
Folder Deleted : C:\Users\kemar 93\AppData\Local\Ilivid Player
Folder Deleted : C:\Users\kemar 93\AppData\Local\Kreapixel
Folder Deleted : C:\Users\kemar 93\AppData\Local\lollipop
Folder Deleted : C:\Users\kemar 93\AppData\Local\PackageAware
[!] Folder Deleted : C:\Users\kemar 93\AppData\Local\Pokki
Folder Deleted : C:\Users\kemar 93\AppData\Local\Popajar
Folder Deleted : C:\Users\kemar 93\AppData\Local\RavenBleuSA
Folder Deleted : C:\Users\kemar 93\AppData\Local\SearchProtect
Folder Deleted : C:\Users\kemar 93\AppData\Local\Smartbar
Folder Deleted : C:\Users\kemar 93\AppData\Local\SwvUpdater
Folder Deleted : C:\Users\kemar 93\AppData\LocalLow\BabylonToolbar
Folder Deleted : C:\Users\kemar 93\AppData\LocalLow\Bandoo
Folder Deleted : C:\Users\kemar 93\AppData\LocalLow\Claro LTD
Folder Deleted : C:\Users\kemar 93\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\kemar 93\AppData\LocalLow\DataMngr
Folder Deleted : C:\Users\kemar 93\AppData\LocalLow\searchquband
Folder Deleted : C:\Users\kemar 93\AppData\LocalLow\Searchqutoolbar
Folder Deleted : C:\Users\kemar 93\AppData\LocalLow\ShopperReports3
Folder Deleted : C:\Users\kemar 93\AppData\LocalLow\Smartbar
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\337
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\Babylon
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\Bandoo
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\buenosearch LTD
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\Common\LuaRT
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\Complitly
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\DataMgr
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\DealPly
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\DefaultTab
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\Desk 365
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\DriverCure
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\dvdvideosoftiehelpers
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\eUpdate
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\Intermediate
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\Nosibay
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\OfferBox
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\Omiga Plus
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\PerformerSoft
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\SCheck
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\ShopperReports3
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\SimilarSites
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\Snz
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\speedypc software
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\SSync
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\Systweak
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\WebPlayerBdd
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\WinZipper
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\ConduitCommon
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\Searchqutoolbar
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\Smartbar
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\CT2269050
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\CT2851643
Folder Deleted : C:\Program Files (x86)\Software
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\Extensions\{33E0DAA6-3AF3-D8B5-6752-10E949C61516}
Folder Deleted : C:\Program Files (x86)\Mozilla Firefox\Extensions\{6AA54174-C9E8-4B07-95A0-0FBC19CBE64C}
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\Extensions\{C2D64FF7-0AB8-4263-89C9-EA3B0F8F050C}
Folder Deleted : C:\Program Files (x86)\Mozilla Firefox\Extensions\{F0E1168A-B4B5-484C-B77E-0D28E6B64096}
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\Extensions\ffxtlbr@babylon.com
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\Extensions\ffxtlbr@buenosearch.com
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\Extensions	oolbar@boounce.com
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\Extensions\dcf3d940-5475-4c1f-9347-73a47512ee99@8520e31e-fc61-48c8-ae31-09d4d65bc369.com
Folder Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\Extensions\{e0301295-ab3e-4af3-979f-3d453c5f9f48}
Folder Deleted : C:\Users\kemar 93\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl
Folder Deleted : C:\Users\kemar 93\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjbbjfdilbioabojmcplalojlmdngbjl
Folder Deleted : C:\Users\kemar 93\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk
Folder Deleted : C:\Users\kemar 93\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo
Folder Deleted : C:\Users\kemar 93\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbpohikckhbcljgombipcdoinkaedlfa
Folder Deleted : C:\Users\kemar 93\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn
File Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi
File Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\Extensions\addon@defaulttab.com.xpi
File Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\Extensions\OneClickDownloader@OneClickDownloader.com.xpi
File Deleted : C:\END
File Deleted : C:\Windows\SysWOW64\conduitEngine.tmp
File Deleted : C:\Windows\System32oboot64.exe
File Deleted : C:\Users\kemar 93\AppData\Local\omesuperv.exe
File Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\bprotector_extensions.sqlite
File Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\bprotector_prefs.js
File Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\invalidprefs.js
File Deleted : C:\Program Files (x86)\Mozilla Firefox
sprotector.js
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\Babylon.xml
File Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\searchplugins\buenosearch.xml
File Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\searchplugins\dalesearch.xml
File Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\searchplugins\delta.xml
File Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\searchplugins\search.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\Search_Results.xml
File Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\searchplugins\search-here.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\SearchResults.xml
File Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\searchplugins\Web Search.xml
File Deleted : C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\user.js
File Deleted : C:\Users\kemar 93\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
File Deleted : C:\Users\kemar 93\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
File Deleted : C:\Users\kemar 93\AppData\Local\Google\Chrome\User Data\Default\Extensions
ewtab.crx
File Deleted : C:\Users\kemar 93\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage
File Deleted : C:\Windows\Tasks\AmiUpdXp.job
File Deleted : C:\Windows\System32\Tasks\AmiUpdXp
File Deleted : C:\Windows\Tasks\Dealply.job
File Deleted : C:\Windows\System32\Tasks\Dealply
File Deleted : C:\Windows\System32\Tasks\Desk 365 RunAsStdUser
File Deleted : C:\Windows\System32\Tasks\Omiga Plus RunAsStdUser
File Deleted : C:\Windows\System32\Tasks\RegClean Pro
File Deleted : C:\Windows\Tasks\Plus-HD-1.7-chromeinstaller.job
File Deleted : C:\Windows\System32\Tasks\Plus-HD-1.7-chromeinstaller
File Deleted : C:\Windows\Tasks\Plus-HD-1.7-codedownloader.job
File Deleted : C:\Windows\System32\Tasks\Plus-HD-1.7-codedownloader
File Deleted : C:\Windows\Tasks\Plus-HD-1.7-enabler.job
File Deleted : C:\Windows\System32\Tasks\Plus-HD-1.7-enabler
File Deleted : C:\Windows\Tasks\Plus-HD-1.7-firefoxinstaller.job
File Deleted : C:\Windows\System32\Tasks\Plus-HD-1.7-firefoxinstaller

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{9CD2384C-143B-4790-A075-E7FEFE2A554B}]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [ClickPotatoLite@ClickPotatoLite.com]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [ShopperReports@ShopperReports.com]
Key Deleted : HKCU\Software\Google\Chrome\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bpegkgagfojjbcpkihigfmkojdmmimdf
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dlfienamagdnkekbbbocojppncdambda
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ehgldbbpchgpcfagfpfjgoomddhccfgh
Key Deleted : HKCU\Software\Google\Chrome\Extensions\fdkednngfjmpnljkolbapdednncafhen
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\fdkednngfjmpnljkolbapdednncafhen
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\fjglfdldpdljgfjkfgieaocdapejkdlh
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jplinpmadfkdgipabgcdchbdikologlh
Key Deleted : HKCU\Software\Classes\*\shell\pokki
Key Deleted : HKCU\Software\Classes\AllFileSystemObjects\shell\pokki
Key Deleted : HKCU\Software\Classes\Applications\lollipop.exe
Key Deleted : HKCU\Software\Classes\Directory\shell\pokki
Key Deleted : HKCU\Software\Classes\Drive\shell\pokki
Key Deleted : HKCU\Software\Classes\Folder\shell\pokki
Key Deleted : HKCU\Software\Classes\lnkfile\shell\pokki
Key Deleted : HKCU\Software\Classes\pokki
Key Deleted : HKCU\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\BabylonToolbar
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Translate this web page with Babylon
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Translate with Babylon
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Key Deleted : HKCU\Software\Microsoft\Office\Powerpoint\Addins\babylonofficeaddin.officeaddin
Key Deleted : HKCU\Software\Microsoft\Office\Word\Addins\babylonofficeaddin.officeaddin
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [DataMgr]
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Intermediate]
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Pokki]
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [scheck]
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [SearchProtect]
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Snoozer]
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ssync]
Key Deleted : HKLM\SOFTWARE\Classes\AmiBs.Installer
Key Deleted : HKLM\SOFTWARE\Classes\AmiBs.Installer.1
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\BabylonHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\BabylonIEPI.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\BabylonTC.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\BandooCore.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\BRNstIE.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\CmndFF.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\Complitly.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\DefaultTabBHO.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\DNSBHO.dll
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\mozillaps.dll
Key Deleted : HKLM\SOFTWARE\Classes\AppID\Pltfrm.DLL
Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Key Deleted : HKLM\SOFTWARE\Classes\b
Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\BabylonIEPI.BabylonIEBho
Key Deleted : HKLM\SOFTWARE\Classes\BabylonIEPI.BabylonIEBho.1
Key Deleted : HKLM\SOFTWARE\Classes\BabylonOfficeAddin.OfficeAddin
Key Deleted : HKLM\SOFTWARE\Classes\BabylonOfficeAddin.OfficeAddin.1
Key Deleted : HKLM\SOFTWARE\Classes\BabylonTC.GingerApplication
Key Deleted : HKLM\SOFTWARE\Classes\BabylonTC.GingerApplication.1
Key Deleted : HKLM\SOFTWARE\Classes\BandooCore.BandooCore
Key Deleted : HKLM\SOFTWARE\Classes\BandooCore.BandooCore.1
Key Deleted : HKLM\SOFTWARE\Classes\BandooCore.ResourcesMngr
Key Deleted : HKLM\SOFTWARE\Classes\BandooCore.ResourcesMngr.1
Key Deleted : HKLM\SOFTWARE\Classes\BandooCore.SettingsMngr
Key Deleted : HKLM\SOFTWARE\Classes\BandooCore.SettingsMngr.1
Key Deleted : HKLM\SOFTWARE\Classes\BandooCore.StatisticMngr
Key Deleted : HKLM\SOFTWARE\Classes\BandooCore.StatisticMngr.1
Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\buenosearch.buenosearchappCore
Key Deleted : HKLM\SOFTWARE\Classes\buenosearch.buenosearchappCore.1
Key Deleted : HKLM\SOFTWARE\Classes\buenosearch.buenosearchdskBnd
Key Deleted : HKLM\SOFTWARE\Classes\buenosearch.buenosearchdskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\buenosearch.buenosearchHlpr
Key Deleted : HKLM\SOFTWARE\Classes\buenosearch.buenosearchHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowser
Key Deleted : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowser.1
Key Deleted : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowserActiveX
Key Deleted : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowserActiveX.1
Key Deleted : HKLM\SOFTWARE\Classes\driverscanner
Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Key Deleted : HKLM\SOFTWARE\Classes\esrv.buenosearchESrvc
Key Deleted : HKLM\SOFTWARE\Classes\esrv.buenosearchESrvc.1
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.bho
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Key Deleted : HKLM\SOFTWARE\Classes\playerplus
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Deleted : HKLM\SOFTWARE\Classes\ShopperReports.AsyncReporter
Key Deleted : HKLM\SOFTWARE\Classes\ShopperReports.Dwnldr
Key Deleted : HKLM\SOFTWARE\Classes\ShopperReports.HbAx
Key Deleted : HKLM\SOFTWARE\Classes\ShopperReports.HbGuru
Key Deleted : HKLM\SOFTWARE\Classes\ShopperReports.HbInfoBand
Key Deleted : HKLM\SOFTWARE\Classes\ShopperReports.IEButton
Key Deleted : HKLM\SOFTWARE\Classes\ShopperReports.IEButtonA
Key Deleted : HKLM\SOFTWARE\Classes\ShopperReports.MozillaNvgtnTrpr
Key Deleted : HKLM\SOFTWARE\Classes\ShopperReports.MozillaNvgtnTrpr.1
Key Deleted : HKLM\SOFTWARE\Classes\ShopperReports.MozillaPSExecuter
Key Deleted : HKLM\SOFTWARE\Classes\ShopperReports.MozillaPSExecuter.1
Key Deleted : HKLM\SOFTWARE\Classes\ShopperReports.ReportData
Key Deleted : HKLM\SOFTWARE\Classes\ShopperReports.Reporter
Key Deleted : HKLM\SOFTWARE\Classes\ShopperReports.RprtCtrl
Key Deleted : HKLM\SOFTWARE\Classes\ShopperReports.Scopes
Key Deleted : HKLM\SOFTWARE\Classes\ShopperReports.Scopes.1
Key Deleted : HKLM\SOFTWARE\Classes\ShopperReports.Stock
Key Deleted : HKLM\SOFTWARE\Classes\ShopperReports.Stock.1
Key Deleted : HKLM\SOFTWARE\Classes\ShopperReports.TriggerImmidiate
Key Deleted : HKLM\SOFTWARE\Classes\ShopperReports.TriggerImmidiateOrRandomTS
Key Deleted : HKLM\SOFTWARE\Classes\ShopperReports.TriggerOnceInDay
Key Deleted : HKLM\SOFTWARE\Classes\speedupmypc
Key Deleted : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO
Key Deleted : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO.1
Key Deleted : HKLM\SOFTWARE\Classes\Updater.AmiUpd
Key Deleted : HKLM\SOFTWARE\Classes\Updater.AmiUpd.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\boxore_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\boxore_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ClickPotatoLiteSA_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ClickPotatoLiteSA_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\HomeTab_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\HomeTab_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividMediaBar_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividMediaBar_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetup_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetup_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\speedupmypc_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\speedupmypc_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\updateSaltarSmart_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\updateSaltarSmart_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dealplylive.exe
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\DeskSvc
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\omigaplussvc
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0032154.BHO
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0032154.BHO.1
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0032154.Sandbox
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0032154.Sandbox.1
Key Deleted : HKCU\Software\d53d7d0e23cbf17
Key Deleted : HKLM\SOFTWARE\d53d7d0e23cbf17
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_best-video-downloader_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_best-video-downloader_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_bs-player_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_bs-player_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_emule-xtreme_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_emule-xtreme_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_free-youtube-download_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_free-youtube-download_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0D82ACD6-A652-4496-A298-2BDE705F4227}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1301A8A5-3DFB-4731-A162-B357D00C9644}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{33CB14BC-58BB-4B3A-9877-7946A3F41BAE}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{37EB75F2-7392-4DBE-B5AD-147EC6D7BF5F}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{38495740-0035-4471-851E-F5BBB86AB085}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{6536801B-F50C-449B-9476-093DFD3789E3}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{67FCE87F-F3EF-4A3C-87C2-8BD46E68807B}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{7025E484-D4B0-441A-9F0B-69063BD679CE}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{8258B35C-05B8-4C0E-9525-9BCCC70F8F2D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{A89256AD-EC17-4A83-BEF5-4B8BC4F39306}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B16632F1-24E0-4D99-A68D-70BFB6447C48}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C0CEA572-2978-4DFC-A672-8100FF0E276A}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C3110516-8EFC-49D6-8B72-69354F332062}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2721A8E5-BFDB-4562-9912-9E0531CA616C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{27F69C85-64E1-43CE-98B5-3C9F22FB408E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{396CFC12-932D-496B-A0A8-5D7201E105E1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4CC15FBA-46A4-4CB5-BFAF-F2335365AE76}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5B6E533F-F78F-4525-B316-312BAF1295D1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6AC0BB10-C922-45E2-857D-2A368FE749E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{74C22317-5B90-471F-9AD2-FEC049870A16}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{828DC97A-2277-4E10-92A9-4907FA0922A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82B16A3D-F03E-4565-A532-666B219C9A53}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8322EB6E-B594-41F6-A30B-CF3F800E1874}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A6FEED89-3BCD-4D19-9DC2-3E613A80A2A4}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B543EF05-9758-464E-9F37-4C28525B4A4C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B63808A8-641E-4201-BFF7-4ADBC6F42FA4}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B939CF93-F2CB-443D-956C-DC523D85C9DB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BB76A90B-2B4C-4378-8506-9A2B6E16943C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C2D64FF7-0AB8-4263-89C9-EA3B0F8F050C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C3AB94A4-BFD0-4BBA-A331-DE504F07D2DB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DF390AA1-1E65-4825-B8E7-BE6B47BD56B8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F1C81E40-2485-4DB6-8C9D-04BD596B281E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311211154}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322212254}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0BDDE35F-64F7-49C3-99B2-404E899C49F7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{24236608-609C-42C5-B13C-A8A3EC921850}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{28B1A706-4B97-4EB1-8B32-125042685AD9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{33575A26-D9CF-40C6-8A3E-116F17201C7F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4BDFD19F-93D7-49CE-B554-5C215FDC0136}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5F339F0B-716F-408F-A627-DEEB5DEB4020}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{71E02280-5212-45C3-B174-4D5A35DA254F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7307CF0F-7173-4FBF-8649-B149916DD322}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{80A5E38C-5F6B-485F-BD97-0B5BE991FAD5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9544D727-A26F-4D57-AF38-4496088640EA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{95734BDE-B702-45B9-86E5-27676729F904}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AC4C30BF-7D5F-4EAB-9C2A-454178F079AA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B7EA2226-F876-4BE4-B478-76EBAE2A668A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BC6F9C26-93EA-4C6D-A4A7-C1FA333B4BBE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D0482C8E-BAEA-4943-911A-B661060F56A7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D54C859C-6066-4F31-8FE0-2AAEDCAE67D7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E975527B-ABE7-40B3-B5C1-385016913E3B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EFA4B5B1-6C76-4B20-BCDB-D41A93E79053}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FD8F79A0-D2E2-4FA2-AEAF-393EAC8064F7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355215554}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366216654}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{573F4ABB-A1A2-44ED-9BA9-A8DAD40AAC46}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{67FCE87F-F3EF-4A3C-87C2-8BD46E68807B}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E6772887-C1E1-405E-94BB-D8760A1CF8DF}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E69D4A59-73DE-4E38-9FB3-740EC4D9060D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FEB62B15-CC00-4736-AAEC-BA046C9DFF73}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344214454}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{82B16A3D-F03E-4565-A532-666B219C9A53}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B939CF93-F2CB-443D-956C-DC523D85C9DB}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C2D64FF7-0AB8-4263-89C9-EA3B0F8F050C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F1C81E40-2485-4DB6-8C9D-04BD596B281E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311211154}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3BC93E76-92F8-5FDA-B676-5AFEE3735BF1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6C1B9042-3D32-49A1-916B-0AA3A9CDDFD6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{828DC97A-2277-4E10-92A9-4907FA0922A9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82B16A3D-F03E-4565-A532-666B219C9A53}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A86782D8-7B41-452F-A217-1854F72DBA54}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B939CF93-F2CB-443D-956C-DC523D85C9DB}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C2D64FF7-0AB8-4263-89C9-EA3B0F8F050C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F1C81E40-2485-4DB6-8C9D-04BD596B281E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311211154}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4373E9B4-0A12-4112-8E3D-36DED19EE3DD}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{828DC97A-2277-4E10-92A9-4907FA0922A9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82B16A3D-F03E-4565-A532-666B219C9A53}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C2D64FF7-0AB8-4263-89C9-EA3B0F8F050C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D0F4A166-B8D4-48B8-9D63-80849FE137CB}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F1C81E40-2485-4DB6-8C9D-04BD596B281E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110311211154}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3BC93E76-92F8-5FDA-B676-5AFEE3735BF1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6087829B-114F-42A1-A72B-B4AEDCEA4E5B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6C1B9042-3D32-49A1-916B-0AA3A9CDDFD6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7555B87D-D711-48B2-B97D-04DF700652BA}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{89F88394-3828-4D03-A0CF-8203604C3DA6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D4233F04-1789-483C-A137-731E8F113DD5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311211154}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624F4-C5DD-4E1D-BDD0-1E9C9B7799CC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{708D0DD7-FBC0-4437-B525-C098F450A62C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7555B87D-D711-48B2-B97D-04DF700652BA}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F000001-DB8E-F89C-2FEC-49BF726F8C12}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C8A3CA5-889E-4554-BEEC-EC0876E4E96A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C2D64FF7-0AB8-4263-89C9-EA3B0F8F050C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CFD485F0-96BD-47CD-BB6D-CD7DDA95F102}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F34C9277-6577-4DFF-B2D7-7D58092F272F}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F9189560-573A-4FDE-B055-AE7B0F4CF080}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4c3dd22f-f66d-4531-8d0e-79f95721be87}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9a70d8e4-0f28-4194-91d9-f4f70bcbd014}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{b1088c26-d931-4f6d-862e-3b08b38371d3}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{e296e3be-2e74-4941-9ebe-24f80acc0a12}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{e438ee0e-196e-43b1-8a36-a9501335c7e4}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{828DC97A-2277-4E10-92A9-4907FA0922A9}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{99079A25-328F-4BD4-BE04-00955ACAA0A7}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{C2D64FF7-0AB8-4263-89C9-EA3B0F8F050C}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{64B00DAC-870D-4E6A-8D34-3A6E3E427A30}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{0BDDE35F-64F7-49C3-99B2-404E899C49F7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{17B10E59-09E1-4C39-A738-6774D7AB7778}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{21BA420E-161C-413A-B21E-4E42AE1F4226}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{23119123-0854-469D-807A-171568457991}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{24236608-609C-42C5-B13C-A8A3EC921850}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{28B1A706-4B97-4EB1-8B32-125042685AD9}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2D9083CE-8758-4704-BA57-3C891D7452BD}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{33575A26-D9CF-40C6-8A3E-116F17201C7F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3E9469AF-E866-4476-B767-810630F1F6E7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{419EDA30-6DFF-432C-B534-E15D899ABEE4}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{453DB0C5-F41C-4D97-8DD6-CC72ECD5F699}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{47700C35-9E3E-4DAD-934C-0CE28A87237C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{477F210A-2A86-4666-9C4B-1189634D2C84}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4AFC07D0-59BB-46B8-B097-1A46E88EEF71}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4BDFD19F-93D7-49CE-B554-5C215FDC0136}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{5F339F0B-716F-408F-A627-DEEB5DEB4020}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{6511CE4C-4722-40D0-AD3D-4AFA2F50978A}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{65A16874-2ED0-460E-A547-5FE2EC3A13A7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{6F43FA77-C18F-4D0C-9C7E-958876FE2061}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{716E443D-7CAA-44F1-866B-F45D00E712CC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{71E02280-5212-45C3-B174-4D5A35DA254F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{72063D77-7590-4DA9-A7F8-F5ECAF3632C4}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{7307CF0F-7173-4FBF-8649-B149916DD322}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{7FC87AC5-FA93-476E-A32C-A941229DED0B}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{80A5E38C-5F6B-485F-BD97-0B5BE991FAD5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9544D727-A26F-4D57-AF38-4496088640EA}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{95734BDE-B702-45B9-86E5-27676729F904}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9BEC9B38-BF39-4899-806E-A1C5DFEB60A2}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{AC4C30BF-7D5F-4EAB-9C2A-454178F079AA}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{AEBF09E2-0C15-43C8-99BF-928C645D98A0}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B3595550-5007-4AEB-BB04-D00E62E836A8}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B7EA2226-F876-4BE4-B478-76EBAE2A668A}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B86D82BF-D39F-439A-A07C-43EDDC6F6EA6}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{BC6F9C26-93EA-4C6D-A4A7-C1FA333B4BBE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D0482C8E-BAEA-4943-911A-B661060F56A7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D54C859C-6066-4F31-8FE0-2AAEDCAE67D7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{DA6305B9-0869-4235-8C1D-533A65E639E5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{DF948646-8BF4-450E-A059-CF8A4E0FE2BE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E6961C59-CFCE-4CCD-B794-BC78DB98413A}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E96B49B0-E11F-48FC-984A-EEC29A4F57E1}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E975527B-ABE7-40B3-B5C1-385016913E3B}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA4B5B1-6C76-4B20-BCDB-D41A93E79053}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F0786343-938E-456B-8798-DE7EEC08F820}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FD8F79A0-D2E2-4FA2-AEAF-393EAC8064F7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FF871E51-2655-4D06-AED5-745962A96B32}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355215554}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366216654}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}]
Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624F4-C5DD-4E1D-BDD0-1E9C9B7799CC}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F000001-DB8E-F89C-2FEC-49BF726F8C12}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C8A3CA5-889E-4554-BEEC-EC0876E4E96A}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F9189560-573A-4FDE-B055-AE7B0F4CF080}
Key Deleted : HKCU\Software\1ClickDownload
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\BabylonToolbar
Key Deleted : HKCU\Software\buenosearch LTD
Key Deleted : HKCU\Software\Complitly
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\DataMngr
Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\DealPlyLive
Key Deleted : HKCU\Software\Default Tab
Key Deleted : HKCU\Software\ilivid
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\installedbrowserextensions
Key Deleted : HKCU\Software\lollipop
Key Deleted : HKCU\Software\Nosibay
Key Deleted : HKCU\Software\Offerbox
Key Deleted : HKCU\Software\OfferMosquito
Key Deleted : HKCU\Software\PIP
Key Deleted : HKCU\Software\Pokki
Key Deleted : HKCU\Software\Popajar
Key Deleted : HKCU\Software\powerpack
Key Deleted : HKCU\Software\Protector
Key Deleted : HKCU\Software\ShopperReports3
Key Deleted : HKCU\Software\simplytech
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKCU\Software\smartbarbackup
Key Deleted : HKCU\Software\smartbarlog
Key Deleted : HKCU\Software\SmileysWeLove
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\speedypc software
Key Deleted : HKCU\Software\systweak
Key Deleted : HKCU\Software\Tutorials
Key Deleted : HKCU\Software\TutoTag
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\DefaultTab
Key Deleted : HKCU\Software\AppDataLow\Software\Lyrics_Monkey
Key Deleted : HKCU\Software\AppDataLow\Software\Plus-HD-1.7
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKCU\Software\AppDataLow\Software\searchqutoolbar
Key Deleted : HKCU\Software\AppDataLow\Software\ShopperReports3
Key Deleted : HKCU\Software\AppDataLow\Software\simplytech
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\Software\BabylonToolbar
Key Deleted : HKLM\Software\Bandoo
Key Deleted : HKLM\Software\bearsharemediabartb
Key Deleted : HKLM\Software\Boxore
Key Deleted : HKLM\Software\buenosearch LTD
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\DealPlyLive
Key Deleted : HKLM\Software\Default Tab
Key Deleted : HKLM\Software\Desksvc
Key Deleted : HKLM\Software\eSafeSecControl
Key Deleted : HKLM\Software\hdcode
Key Deleted : HKLM\Software\iLividSRTB
Key Deleted : HKLM\Software\Iminent
Key Deleted : HKLM\Software\Offerbox
Key Deleted : HKLM\Software\omigaplusSvc
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\Software\Plus-HD-1.7
Key Deleted : HKLM\Software\qvo6Software
Key Deleted : HKLM\Software\SearchProtect
Key Deleted : HKLM\Software\SearchquMediabarTb
Key Deleted : HKLM\Software\ShopperReports3
Key Deleted : HKLM\Software\SimplyGen
Key Deleted : HKLM\Software\SoftwareUpdater
Key Deleted : HKLM\Software\speedypc software
Key Deleted : HKLM\Software\systweak
Key Deleted : HKLM\Software\Tutorials
Key Deleted : HKLM\Software\Uniblue
Key Deleted : HKLM\Software\V9
Key Deleted : HKLM\Software\Vittalia
Key Deleted : HKLM\Software\winzipersvc
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_83453a3d886e527a470b5bb8291dd338de4b1e44
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4FFBB818-B13C-11E0-931D-B2664824019B}_is1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8D15E1B2-D2B7-4A17-B44B-D2DDE5981406}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-1.7
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Vittalia
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wincore MediaBar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winzipper
Key Deleted : [x64] HKLM\SOFTWARE\DataMngr
Key Deleted : [x64] HKLM\SOFTWARE\DomaIQ
Key Deleted : [x64] HKLM\SOFTWARE\Speedchecker Limited
Key Deleted : [x64] HKLM\SOFTWARE\Tarma Installer
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll
Key Deleted : HKLM\Software\Classes\Installer\Features\2B1E51D87B2D71A44BB42DDD5E894160
Key Deleted : HKLM\Software\Classes\Installer\Products\2B1E51D87B2D71A44BB42DDD5E894160

***** [ Browsers ] *****

-\ Internet Explorer v11.0.9600.16521

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Default_Page_URL]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Inte

cabrier · Answer

Hé bien dis donc, il y avait du nettoyage à faire !

Continue par l'autre tool que je t'ai indiqué !

A+

Marc.de.saint-denis · Answer

Voilà le rapport JRT , Merci A+

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by kemar 93 on 26-04-2014 at 18:33:25,37
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\super_lyrics
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2710441035-953502237-1873598412-1001\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\Babylon Toolbar by Visicom uninstall_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\Babylon Toolbar by Visicom uninstall_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\MyBabylonTBVS1_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\MyBabylonTBVS1_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\Babylon Toolbar by Visicom uninstall_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\Babylon Toolbar by Visicom uninstall_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\MyBabylonTBVS1_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\MyBabylonTBVS1_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0A44C055-57F9-43B5-83A5-4108DCFEF98E}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{34e26447-bf30-4c78-a5b9-61dfa8a55e67}



~~~ Files

Successfully deleted: [File] "C:\Program Files (x86)\adobe\reader 10.0\reader\plug_ins\babylon\babylonrpi.api"



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\boost_interprocess"
Successfully deleted: [Folder] "C:\ProgramData\software"
Successfully deleted: [Folder] "C:\Users\kemar 93\appdata\locallow\wbtooltb"
Successfully deleted: [Folder] "C:\Program Files (x86)\sitefinder"
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{00FB6115-3B7F-40A6-8EB8-79581D295946}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{016E010A-B86E-4FBB-A2B3-352BE9587842}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{01DDF320-6A38-4666-B183-1196642874F4}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{0266F6E4-CB36-44F1-BEE2-9362DD5E233A}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{036AE2F1-8F75-4C9B-B5C5-6A3CAD980CBB}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{0408C4B0-06CF-4F44-A716-30180CB0DB81}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{05C9D7D8-446D-446B-BE8B-54FDBF6AC16A}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{062EF6FF-B762-4505-BC7F-1C474F350E79}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{06687AF0-A290-4A70-BAE5-7DA2DA23834E}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{06C3A662-C9C5-4A10-B285-155E2D213750}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{07528759-2DD7-493C-896A-8CD1F9560A6D}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{087E949C-4C6C-4B2A-BB5E-99DF6A2A0B24}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{08A5F80D-DD8C-4B43-858D-82782579D6CA}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{0AA16E30-C8FD-48E2-A1DC-26678A7E4176}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{0B0AB3BE-AFD0-4B9C-8F37-AD72D80EB84D}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{0BCA76C4-4A81-469C-BDD8-83AFD0B26356}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{0C0BA64D-E920-4F13-9143-C0B3CABF7E9A}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{0CCC642E-849F-4B15-8765-0A3CCEF73528}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{0EC05594-4F01-4A50-9E70-3AD495B42D2B}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{0EE0ED6E-6112-4673-BC9E-76E9D43EC487}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{11862E3A-B301-4C54-9CE7-C65CDFDFE885}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{12412413-731A-4510-9B26-5636304BD3B9}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{128F6DFE-2DDE-4F0E-9AA3-37FE87617C90}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{14155A1F-78C2-4892-874A-6928A009257A}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{1594F29E-8E4C-4F20-BBD7-5A84C3740D54}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{15B21816-7A1A-4E4B-95FF-D681DE71734E}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{1648D24C-6C48-48E3-AAEC-5241A9B82FA7}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{179935CE-4CA0-4610-ACD9-C21A746B4260}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{17D878A2-00F0-4377-8ACD-96CB8D2D9BBE}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{17E6DEA0-7ACA-4671-A5FD-B229D5D76B1F}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{1A9116A7-0BF4-46A1-AC8F-022FE4ED9146}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{1BA145C7-FDB5-4351-B624-9CF252D44567}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{1D138B7C-2CAE-4143-9143-0A228EC4FFD2}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{1D8971BC-E279-4005-B1A8-A7021A9488BA}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{1E43A5F3-C70F-489B-9CCB-1692735B4D84}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{1EC02918-3CBD-4087-9334-5B09E4C95EF7}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{1F156FB5-788C-4252-A964-9ED83F27CF82}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{1F2BA602-FF6B-4171-99F1-6A4969898B7E}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{1F45856E-ACEA-4F43-BC31-0BFB1CC83770}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{1FB51DDF-8889-4E91-A9E4-0FE55397CCD7}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{1FEA7F5A-F925-4DEA-9B18-E0E2D72FA23C}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{2027E198-662D-408A-82C6-609769EFF7AB}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{2043E26B-8CBF-41F4-9532-8A048F894724}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{2045CC5F-BCEA-46D3-99D9-9A1854EA8AA3}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{22BE0158-AD45-4135-B0B2-CC3369731C46}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{236C9336-6F2A-4825-B31A-D78D8E3336E2}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{23B64086-9528-4032-BEDE-514176289DDA}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{24ED1EB9-E75A-4EBB-88B8-51A9D263AC43}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{255F0D48-B13A-4A23-8136-EF39234E3B9E}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{26ED5900-4192-41DD-801C-09C10613C643}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{2A9881B2-DEEE-4485-9C26-F0AC05F459A4}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{2BD5EDAF-2041-466C-87E1-284F04E17405}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{2CB8B73F-7295-4203-A2D9-9D22D2386EA2}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{2CCEE86D-D127-4F16-8F6F-D1E08EC22EE1}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{2CEC2EC3-267B-4C0C-A913-2E45B1F81CD6}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{2D03CA17-8C35-4CF0-83CD-DA719C566088}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{2DBC6FAA-47F3-4FEA-B41C-5D3D158FEF30}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{2DD24BE8-CED1-4A22-8DD1-E02832924ADA}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{2E2A7815-E099-4A00-A0F6-BFC3827CFF33}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{2FD16B00-1ABF-4815-A482-46556D5EEB9E}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{30B1B3DA-C085-4CF9-A4DB-B7787D215D40}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{3211B0C0-B4E2-405E-95A4-0785A1D23F82}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{326F8798-43C0-422F-815D-8A8524DF8161}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{339A65FD-84C2-418D-9870-8599C43C21B9}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{33C6632C-F264-4D38-B7B2-E4E146FFAE24}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{348C672F-AC58-44AA-AF7A-CF2A8B524EA8}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{34D386A7-15AE-4CCB-8F6A-84D6BAE5991A}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{35AA8969-8F5E-4AB4-82A5-81F466E7061E}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{37F302FC-9113-4B58-BBF7-8CE7F4C39F33}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{3873CB8A-7610-49F8-A22C-DAA8DE124B7A}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{38B94EBD-BDBB-4C50-A0E9-59FD413C6D6C}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{38E17F20-4186-4040-B747-D2F249156037}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{390C3C2E-0D0A-4415-A15F-5A2E9F812C08}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{398F6FD6-EB0E-4895-84E1-5905E629592F}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{39EBE03A-036A-4580-BEAC-DB55292DCFD8}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{3A1914F7-EB50-402B-AB5D-B0F93EA1DC45}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{3ADE3C09-9230-4839-8F33-22FFF8AB4A53}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{3B7D7DA5-7855-4801-A400-CFFC37EDB62E}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{3C5F9D8B-2D3D-4627-B6C0-C924F8875695}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{3C88E227-31D8-4C7B-88AA-5C8DB91204B5}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{3D3F1BF6-7722-4672-AEA2-F348A2D336A4}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{3D5FD3C7-06F0-4CEE-8E94-3893F0E445E4}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{3EA67B41-1028-40BE-A0C2-D1315DD82F2A}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{409861CB-9AA6-424A-9252-8477C425D23B}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{40D2C282-D197-4E4B-90E9-9C1102F344F1}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{420192B9-7AB2-4849-8B9F-C89A7CE3159A}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{4538E2E1-5338-4FFD-91B4-0B0ECFB5224D}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{453EB35B-4507-482C-BB6D-E74AE658460D}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{459C5294-1783-4159-8EB3-CB986F97D3BC}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{460A6AF6-1D6D-4C4E-BB93-E947BFAFA89C}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{461A23D6-AD1F-4885-A4D7-89C73EBD481D}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{462E29A3-DA74-4CC8-8ADC-282943111589}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{47C7F60D-CD49-495E-9205-2F29A342208A}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{4811C609-3E24-41BE-B607-1F00AFBD7C5C}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{4868A0AC-9CC1-4148-8F5D-2E04EA9C9C05}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{48C60E97-C617-4FA6-911A-0DEA38AF3AA7}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{4CCAD43C-88B6-493F-986F-9C0337416A64}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{4D80A639-7942-476C-8F45-8CE36443D5F4}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{4D9A19DD-8103-44E0-84CF-3D4EE39EB430}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{4DC629ED-1683-48BD-B389-C8FA9E1A58A7}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{4E616DDC-2FCD-4DEF-A053-8134E7F74501}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{4F214C18-2B79-4404-B3B1-864A66C3D15B}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{503C60AD-5F02-466C-9E17-6EE99E20AD82}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{50A1B5C2-99E5-4E02-B14A-7625C74E66CD}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{50C8DBED-0B56-4654-82A3-92FAAEA02FCD}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{51432658-C81E-48A9-AD20-D44071948E26}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{52B4495F-BC91-43EF-9CE3-C440F61E739D}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{53AB8FC6-C6FB-40BC-9AA7-175C97A9B2A4}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{544180E6-3E28-45E3-8228-01353CBDD35C}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{54568C83-39D3-4ABE-89BF-58230FEF2E7B}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{5581A1EA-0930-4BC3-A69D-0EE4BB240AD9}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{558F1FD6-3737-4379-9D2D-E4E1874218A7}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{5657C114-71F3-4F7D-A7EF-69B5E42DA235}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{571E2D62-0AC9-4B03-9437-635E4864A93C}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{579547D7-C4F6-45D6-A0A3-523FFE7BD53F}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{57D92237-FC1E-4743-BCEC-7F09BAB0E9F3}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{592B440E-2D00-40FA-8F68-94D2D1C8AB3D}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{5931C24B-295C-4519-901D-01F443A10170}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{59E91883-4921-473D-8329-DF01039D8617}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{5A68F932-F78B-425B-A47D-04DD44D52F99}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{5B0BF604-566A-4911-941E-1FC67F2868D2}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{5B89B3BA-431B-4FAE-BB5D-DFE496D72B18}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{5B8EF211-7AA5-4BD7-A343-630525F08DF9}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{5BD1496D-70E6-46F6-A736-6D68CC5235C1}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{5C4BB871-6AC5-4E45-B2A7-9E60DB61C0AC}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{5D797D5F-90F1-45FB-9AC1-6F6BE7D5C293}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{5E618E0B-A803-4BE3-A5F6-F9B9766B6FB5}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{5ECF02FF-C849-425B-854E-60A2AE8E52A6}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{5F3F5C21-D9C4-43DA-B3E0-D0EC0C59B549}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{5F62A0DB-4D64-42F1-BFED-82F11633AE72}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{5FAEA005-B19B-4675-81BF-97D63DC18038}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{6083EC6A-83E7-4EE7-8EE9-538791075094}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{60CDD397-7E2D-48B8-8E09-219F40D525A6}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{6341D4F2-65CB-462E-92BC-E62478FEEEE2}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{637F7AE4-9CA4-49F8-8F89-8506327A930D}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{63B7C869-1025-485E-9452-A5345C87CF17}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{64CD321E-A1D9-42C3-8CF7-E16CF0EB264F}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{6506B00C-6233-4DA0-8014-A4042270CC0D}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{654205CB-DC03-4CD8-B60F-1D980635FF2C}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{6563910D-894C-4C83-A701-2D2F03C84F4C}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{659A40EA-D260-47A7-A79A-67BCEDDD790C}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{660B65F4-7191-4AEC-9CC6-B57E0B6F24CA}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{6665561D-8AA8-4592-A29E-A0FC35C649B9}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{674CAE66-8C42-48A9-AB71-DC9830559505}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{680CFD36-188A-4C45-B452-D56F7BEF2637}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{69318937-5320-40F3-B57E-58E35ECDB4BB}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{69C0322F-A6F5-4307-A364-D7AD21B210C2}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{69EA8FAD-783E-42C6-B4FC-BDDA5D47A5CD}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{6BC4DDFE-C2B0-47AD-B5B7-0E51017703E2}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{6C68B81D-BA5D-49E2-B07B-2FB3DE91FFC4}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{6D744FC3-692F-4B8C-B144-763B51868680}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{6E9F0B29-0BEC-4B65-84EC-5CA85B28D9F9}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{7007FB00-9ABF-47C3-8F94-12CD0AD8D9DA}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{702032DE-55B6-4449-900A-5B5E260678A9}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{7044DB65-2490-46E3-ABA3-CAD51E54434A}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{7075AE7C-456B-45E4-9FFB-6B060B6D7A1E}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{71641D0B-4B9F-4A45-A2BD-2C5522D18028}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{72545AC8-20FA-4848-929B-6DB87ABC1B31}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{73A9BC39-F41C-4CB4-9E87-B6139E3590D4}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{749CFF18-4FEE-488A-98C0-E549F6E5EA84}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{751F2ED6-F71F-4454-89D2-C1F61F97F5ED}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{75B95E14-8E36-465C-9F3F-D4A6E366D13C}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{777576ED-80EA-4DBF-914A-2F40075AC24B}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{795C99F2-112E-49D6-A881-21DEA19AFDFF}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{79AFA6F1-37FB-427D-931F-1363885190FA}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{7A46EC72-E974-4218-BD1B-122A1CED1432}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{7B0E4E0D-D0AB-42F4-A704-90B1CDD2D1FC}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{7C060670-95A2-48F8-AA5E-DE0344C47243}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{7CBD29E3-59F6-49E7-8A89-7E4D7453EA2A}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{7D167FA1-3FCC-4629-A79F-14F3AA150D78}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{7E2C514A-9843-449A-823E-A7857B8379FD}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{7EA4A6EF-FFD6-4D49-863A-68DD0727ACAC}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{7ED50313-874A-4F6E-B156-BAF097CEB62D}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{7F3F8405-32DD-481D-BDA4-9C05D3B5C316}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{80253D9F-88F6-4136-9E23-AFFF9AA62BAC}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{806050B6-09D6-4F78-9927-93C2B488D23E}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{814CB276-B62B-41FA-AC68-8E3B99F349D1}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{8153BEE9-9C0A-40CB-8CAD-377564AF80C4}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{81B705C4-8595-4928-9D6A-B1014BEB0A7C}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{81FF386F-01FD-4C21-B0C3-08D56AE0DE29}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{824CFC7A-EC62-4AE7-9CDB-FE86B0EF1B52}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{8259AB3E-E66A-4CD3-AD8D-01F004BD8273}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{82A677EB-44B1-41F8-99C6-750C15153D05}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{8301E640-260D-4839-A2B6-C7C323E8BD8D}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{85711F99-68DA-4FF9-8CD2-5A0DD592A91D}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{85A247B2-0C86-4DE8-B1A8-7A6A5838D312}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{8640FD41-C4ED-4372-B4A5-F3934C432425}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{86861095-E8EF-41F4-86D8-F7FC40602CE9}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{8776F184-EA35-42FA-ADBB-EB69BF8D203A}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{87F63AC0-8644-4274-A749-BC10962C3E41}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{89428F53-15F8-4F5C-89A7-2429BC2D1821}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{8A8BA84D-7C64-409D-864C-ED646A713021}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{8B190D64-F361-4E74-A7E2-92FF2E0C157E}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{8B9CDACB-0DAB-41B5-8271-FE8508274CA5}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{8E1D0CCF-09BC-43DE-9EB3-5A2D816418C2}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{8E825467-6DCC-4292-B49F-E79A62198FFC}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{8F659F7F-4AE1-4A83-8D33-1E03A7D1F8DE}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{92B0DF04-3688-46B0-BD9B-F98659F28C43}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{92C0847E-2F95-4729-81BE-01CB5E7559F8}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{95B4C843-6EC6-47F0-A1BD-C204D3738EFD}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{95F9D47B-CFFB-4841-8DA7-9686116A000E}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{96F3B4BA-4380-4149-A6C2-E2D1CF36E186}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{973E50C4-3255-4181-B395-4C6A63CBEA44}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{97E77FD0-C7EB-4674-B946-C0F3E18BA926}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{983542B9-6ABE-4CC5-8179-F0E01472CC64}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{992E638E-D7EC-462E-BD35-1A8C1427F7CE}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{9CCCEC27-7742-4546-B1AE-86F923B36935}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{9D189A15-9A16-4459-A4B4-BADF338691E9}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{9DDE698D-0B57-4AC5-8D37-57E98510B7AF}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{9DF81D27-67CF-4CBF-B6A5-F38B7670AB6C}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{A091EF21-B726-40D1-B51D-8045062C539D}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{A2551FF8-FD57-410B-B114-28616491EEEC}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{A270AE00-54FC-4E05-BE85-924AF2A7659E}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{A3ADAFFE-19C3-480D-951C-E1EC7764CACB}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{A49BF80F-917D-46E9-9270-71E337508AFB}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{A4D31C56-0147-41C6-8236-8486E670D446}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{A500CE1C-A978-4A4E-A1A2-76B79AEB9B29}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{A510362D-C513-4AB6-B96D-792626E6FF2F}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{A61071E9-D95F-4753-8A8A-D53A2C22078D}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{A62F2539-1E31-42F7-B464-495995F037D3}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{A79641AA-F663-461D-946A-A4E473DBD120}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{A7DA119A-76D6-43B9-94EA-DF780E799DD1}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{A8D23C26-6B65-4462-A041-EC64D8B7F549}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{AB3618E9-7FFA-499F-A66C-F7A49289058D}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{AB6AEBF4-D9C9-4FC7-896A-5B06661B10F6}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{ABE974CF-F351-415C-9727-28603A5365B1}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{AD2805D0-C149-410A-BAE1-0417D53BF887}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{ADFA808E-861E-40D7-8709-6316F085DD3A}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{AE029663-FE23-4E6E-B222-326AB01CDB45}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{AE3FBDA9-D785-4EBD-B265-F44CB87BC066}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{AF165B00-5A57-4BE9-BF97-A94AAA3B96B0}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{AF62DE22-51F3-4683-A430-7FFDB947528C}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{AF8EBB73-506A-46F0-95C6-350FE0966CBB}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{B188352A-4A53-4007-ADB4-4CB7ABCA458C}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{B2941093-4C99-4547-888B-87546A4220C7}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{B3EC039C-82D2-40E4-9C30-ACEE21CEDA67}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{B4A3D921-54DA-4970-B903-CF4F21D5E45B}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{B611879D-B288-4E2C-9E32-4412E37F90E4}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{B63A31C0-8CB6-4EB1-ABAC-AC1DCF26C7B3}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{B65A935F-CAC4-4878-B52A-2293464C769E}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{B74256B2-0E14-42E2-8C8F-E3F609ED9D58}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{B87526EE-01DC-460A-8EBC-0180691E7CF1}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{B9AA5194-38E9-49AB-8960-51FBCB3D6365}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{B9DD85B8-DCA2-4FC4-B692-9AB6DDF3863E}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{BAB686E3-AA05-4ECA-84E6-51C5B6846BE1}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{BB0CE72C-9443-4982-88A0-CBDCA194B0E6}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{BC0B9AA6-C5A7-4BBB-928E-F64E141393F9}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{BC490FE0-DC2B-458D-B44D-21150959455A}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{BC666F40-D5B6-456F-9D1A-771021C991F3}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{BED105EB-A5EB-469E-88E2-C6C0B1524A20}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{BEDFE2A5-163C-46F6-9888-569A4332B1E8}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{C05C4588-5D04-4EFC-9CCF-EB342BFA9284}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{C0622EE9-7E4F-4CF1-8328-1DD8B6A08311}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{C0F5B368-0ADC-4E10-BE16-D5B8DA4166DC}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{C1421021-E691-4795-8253-866DD238DCB3}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{C373452D-6468-4DDE-A53A-67C7D28462AD}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{C3AE1C91-B495-4504-9C63-39977EE7E9DD}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{C3D6551A-2C2B-4065-AF0B-EA14F12D34C1}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{C6140DB9-97D3-4EB9-A970-4AEBA844BC90}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{C69594A8-BEAD-4B42-B072-A27B9EABAA9F}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{C6C6664D-E656-4FE0-A7CD-E0DDB268E449}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{C8CD1B7A-3A57-49FB-8AFE-EEA17CFC959C}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{C907D411-BB29-406D-8D69-0A20C1A1DDB0}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{C9D02711-FA8C-425F-B079-77E3BFB5DA80}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{CC3700F3-1167-4E46-B87D-F7A9FC6E9FE7}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{CCA28B92-1CAE-4E0A-87C5-D41EE705DA79}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{CF033A93-24FE-403A-8DF1-4B89A9498E7C}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{CF755433-2988-47E5-9A00-2793B8A18E63}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{CFE4E9D1-37A5-4739-BE53-A864B2478B26}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{D0D9F5DA-30D7-40C2-832D-8D564B17A545}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{D215B351-B52F-40E1-BFA3-9F0C41AE1611}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{D21A80AE-41FD-44F9-B7D5-16D095DDC133}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{D34C59BE-0562-414A-85FB-956C25874796}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{D6F4E520-D43F-4206-A353-6881659A9C7D}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{D77A24F2-AE69-425A-ACE9-F8E773563716}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{D8758279-D4BC-4A3B-BA2E-151398ED8943}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{D9B00DC2-3C26-4473-AC6C-241BE45D75B1}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{DAE68F58-0FC5-4799-9275-E6877383733D}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{DB08D291-EA56-4716-8D8C-0590BF2EDF4D}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{DB90A6CC-19F0-48AE-BEE4-34336F453F00}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{DD4AECF0-4E4B-4A29-84CA-345A45A2E7C0}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{DD50DEC6-86DD-4B06-A944-68DB2A4A41AB}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{DD6FF564-0E6C-451C-872D-8D68E1EB35BE}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{DEAF3E37-F7D6-4AA6-ABF4-6CEFA438E636}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{DFCFD888-9E6D-4D5B-9CF3-8944D9B40A31}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{DFD27B61-C29C-438F-86F3-7593D90B13D1}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{E0F6B2DA-C0EE-484D-9D17-9543547C4A93}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{E167A79E-9036-4656-93B6-C2F22D05F48B}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{E3A8B9C7-04CA-48EC-A508-109D07C22249}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{E3FB72D3-8799-4936-AEBC-CB8E93DF200F}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{E5502DC1-667F-4D55-9FBA-6B259FDA488D}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{E5C1538B-05D3-44DD-A276-FC7CB2FECBD1}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{EAD9DE2C-4968-45F2-A9B9-5795CE87136E}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{EB033CBB-FBCF-4AB6-9951-D72CD5425960}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{EBE36083-A5F0-4213-A359-BBD3E04A1F0A}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{EC9F2724-D62B-4A25-A685-8E855BDC0854}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{EDC280DE-89C6-4D0F-A4FE-DA45D7E94764}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{EDD58708-D087-44D9-A891-E30ADD59E10D}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{F1C3E9A4-4A92-4091-8EE2-8D5236A35FA3}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{F21782BB-3044-490D-8415-1A99990149ED}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{F297AE07-D203-4563-B6CE-B75B1ED7AEBD}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{F45230F5-12F4-4952-B172-0344BFCE95BF}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{F67B0B21-E9C1-41F8-ADCE-86B942667C0A}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{F74203D9-F598-45CA-BF67-C6B1B142BDC0}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{F761D7F2-432C-4625-B4C8-653E6FB3286A}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{F91F115B-A8E6-4CE0-A3BA-0FE071BE1AFA}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{F985D49B-2117-4B83-B398-DEF1DAA1F092}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{FBE1A398-B3EB-4E7A-A50A-143240777477}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{FBECBA33-5310-4AA0-AD3E-A8C59A45B0E7}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{FD90B5B3-269B-4D0D-99B6-73703C684261}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{FF550039-7B2A-4D89-A808-BE803F88F996}
Successfully deleted: [Empty Folder] C:\Users\kemar 93\appdata\local\{FFAF7796-346B-4050-B171-07B64ECDA479}



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 26-04-2014 at 18:40:38,02
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

cabrier · Answer

Marc,


1- Transmission des rapports :
 - Pour transmettre les rapports que tu obtiens à la suite du passage d'outils tu cliques sur un de ces liens : 
cijoint ou  pjoint
- Tu cliques ensuite sur Parcourir et cherches le fichier du rapport, en principe on t'indique ou il est.
- Tu cliques sur Ouvrir puis sur "Cliquez ici pour déposer le fichier".
Un lien de cette forme:  http://cjoint.com/index.php?file=cjge368/cijSKAP5fU.txt 
est ajouté dans la page ou (suivant le site) il faut cliquer sur "créer le lien".
- C'est ce lien que tu as à transmettre et uniquement cela.

2-On continue :

Attention de bien télécharger sur le lien que je te donne !

    Télécharge l' installeur de Malwarebytes (mbam-setup 2.0.xxx.exe)
    Installe-le en laissant les options par défaut, une icône sera créée sur le bureau et Malwarebytes démarrera.
    (décoche à l'installation "Activer l'essai gratuit de MBAM Premium")
    Il te sera demandé de mettre à jour la base de données, fais-le...


    Onglet Paramètres -> Détection et protection : Règle PUP/PUM "Traiter les détections comme des malveillants"


    Onglet [Examen] choisis "Menaces", clique sur [Examiner maintenant]


    Clique sur [Lancer l'examen]
    Patiente...l'analyse débutera après l'installation automatique des mises à jour.
Les infections sont automatiquement placées en quarantaine.

    Tu obtiendras

        Examen terminé avec succès : Aucun élément malveillant détecté
        ou
        Menaces potentielles détectées


    Dans ce dernier cas :

        Clique sur Tout mettre en quarantaine,
        Clique sur Appliquer les actions...
        Accepte le redémarrage.


    Après démarrage, relance Malwarebytes,
    Clique sur [Historique] -> Journaux de l'application
    Sélectionne le dernier Journal d'examen -> Afficher
    Clique en bas sur [Exporter] -> fichier texte (*.txt)


    Choisis le bureau comme emplacement
    Nomme-le mbam_log par exemple,
    Clique sur [Enregistrer]
    Copie/Colle le contenu du rapport dans ta réponse, ou
    Héberge le rapport sur ce site et Copie/Colle le lien créé dans ta réponse.



A+

Marc.de.saint-denis · Answer

Merci beaucoup !! J'ai envoyé les rapports JRT et ce dernier sur cijoint.com en mode prive ! voilà le dernier rapport ...  J'ai remarqué que l'ordinateur n'a pas fait de redémarage cette dernière fois , et aussi que je n'ai pas d'ícone de bureau pour AdwCleaner , normal ?? Bref voici le rapport mbam_log ....


Malwarebytes Anti-Malware
www.malwarebytes.org

Date de l'examen: 26-04-2014
Heure de l'examen: 19:53:55
Fichier journal: mbam_log.txt
Administrateur: Oui

Version: 2.00.1.1004
Base de données Malveillants: v2014.04.26.03
Base de données Rootkits: v2014.03.27.01
Licence: Gratuite
Protection contre les malveillants: Désactivé(e)
Protection contre les sites Web malveillants: Désactivé(e)
Chameleon: Désactivé(e)

Système d'exploitation: Windows 7 Service Pack 1
Processeur: x64
Système de fichiers: NTFS
Utilisateur: kemar 93

Type d'examen: Examen "Menaces"
Résultat: Terminé
Objets analysés: 270960
Temps écoulé: 15 min, 23 sec

Mémoire: Activé(e)
Démarrage: Activé(e)
Système de fichiers: Activé(e)
Archives: Activé(e)
Rootkits: Désactivé(e)
Shuriken: Activé(e)
PUP: Activé(e)
PUM: Activé(e)

Processus: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Clés du Registre: 15
Trojan.Agent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{dedbb410-30bd-5eb4-8555-c0ee0936e592}, Mis en quarantaine, [da111e10e497f93d21800428c83ab947], 
Adware.Zwangi, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33524C00-63FB-43DB-A6BF-0A4E14B24649}, Mis en quarantaine, [b9327ab48af125115a5c30fdc43e768a], 
Adware.QuestScan, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{4B8C28A7-A9BC-45F8-990D-21499EED643C}, Mis en quarantaine, [ca2155d9aecdf343b49ca68805fdd22e], 
PUP.Optional.DefaultTab.A, HKU\S-1-5-21-2710441035-953502237-1873598412-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{7F6AFBF1-E065-4627-A2FD-810366367D01}, Mis en quarantaine, [da11e04e90eb23136d2326f70af88d73], 
PUP.Optional.DefaultTab.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{7F6AFBF1-E065-4627-A2FD-810366367D01}, Mis en quarantaine, [da11e04e90eb23136d2326f70af88d73], 
PUP.Optional.DefaultTab.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{7F6AFBF1-E065-4627-A2FD-810366367D01}, Mis en quarantaine, [da11e04e90eb23136d2326f70af88d73], 
PUP.Optional.QuickShare.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, Mis en quarantaine, [7a71d15d77041026c8f25df2ea1814ec], 
PUP.Optional.QuickShare.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, Mis en quarantaine, [7a71d15d77041026c8f25df2ea1814ec], 
PUP.Optional.Bandoo.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{9D717F81-9148-4F12-8568-69135F087DB0}, Mis en quarantaine, [16d50b23512adb5b88c85ef255adce32], 
PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BAD84EE2-624D-4e7c-A8BB-41EFD720FD77}, Mis en quarantaine, [15d60c229fdcd3633f25fe1fe31fbe42], 
PUP.Optional.Webexp, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Webexp Enhanced, Mis en quarantaine, [5596a38bec8f270ff37b13721ce61de3], 
PUP.Optional.DefaultTab.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\DefaultTab, Mis en quarantaine, [e902ea44e497c96daec01573e022ee12], 
PUP.Optional.Feven.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Feven 1.7, Mis en quarantaine, [6685ef3f27541a1ccbeaa9d734ce15eb], 
PUP.Optional.PlusHD.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Plus-HD-1.7, Mis en quarantaine, [03e8dd5174078fa737f03b3dd52d7b85], 
PUP.Optional.PricePeep.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PricePeep, Mis en quarantaine, [d5161e10b7c4d85e5612493f5fa330d0], 

Valeurs du Registre: 3
Adware.HotBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\5.0\USER AGENT\POST PLATFORM|ShopperReports 3.2.7.0, Mis en quarantaine, [f9f28ba30d6e87af9cb324e74eb54db3], 
Malware.Trace, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\5.0\USER AGENT\POST PLATFORM|SRS_IT_E8790976BD76585A33AC90, Mis en quarantaine, [05e641ed4635cd690e43a665b44fa759], 
PUP.Optional.WebExpEnhanced.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|ext@WebexpEnhancedV1alpha949.net, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha949\ff, Mis en quarantaine, [e902939b0a7187af78d1077b758d24dc]

Données du Registre: 3
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Bon: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Mauvais: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Remplacé,[e5061d116c0fe74f11b9c66a64a006fa]
PUP.Optional.SearchCertifiedTB.A, HKU\S-1-5-21-2710441035-953502237-1873598412-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURI|(Default), http://search.certified-toolbar.com?si=70474&st=bs&tid=8096&ver=4.9&ts=1381960800000.000007&tguid=70474-8096-1382029123142-BB708D004B4F7B302804384D390E7037&q=%s, Bon: (http://www.google.com), Mauvais: (http://search.certified-toolbar.com?si=70474&st=bs&tid=8096&ver=4.9&ts=1381960800000.000007&tguid=70474-8096-1382029123142-BB708D004B4F7B302804384D390E7037&q=%s),Remplacé,[dd0ea38bb1cade5892fa30015ea63cc4]
Broken.OpenCommand, HKCR\regfile\shell\open\command, "regedit.exe" "Bon: (regedit.exe "Mauvais: ("regedit.exe" "%1"),Remplacé,[ffffffffffffffffffffffffffffffff]")", %4, %5

Dossiers: 3
PUP.Optional.FileHunter, C:\Users\kemar 93\AppData\Roaming\FileHunter, Mis en quarantaine, [41aa80aec2b9a98d906cae879a6954ac], 
PUP.Optional.FileHunter, C:\Users\kemar 93\AppData\Roaming\FileHunter\downloads, Mis en quarantaine, [41aa80aec2b9a98d906cae879a6954ac], 
PUP.Optional.FileHunter, C:\Users\kemar 93\AppData\Roaming\FileHunter\metafiles, Mis en quarantaine, [41aa80aec2b9a98d906cae879a6954ac], 

Fichiers: 3
PUP.Optional.Bubbledock.A, C:\Users\kemar 93\AppData\Roaming\Bubble Dock.boostrap.log, Mis en quarantaine, [4aa1e14db8c39a9c5b76a5df30d2c63a], 
PUP.Optional.FileHunter, C:\Users\kemar 93\AppData\Roaming\FileHunter\pumpa.state, Mis en quarantaine, [41aa80aec2b9a98d906cae879a6954ac], 
PUP.Optional.FileHunter, C:\Users\kemar 93\AppData\Roaming\FileHunter\version, Mis en quarantaine, [41aa80aec2b9a98d906cae879a6954ac], 

Secteurs physiques: 0
(No malicious items detected)


(end)  Merci encore (y)

cabrier · Answer

Ben dis donc, une vraie collection !

Maintenant tu peux faire un ZHPDiag pour que je vérifie s'il y a des restes puis je te donnerai de la lecture pour éviter toutes ces infections.

Tu arrivais à faire fonctionner ta machine ?


Attention le rapport est obligatoirement à héberger sinon il ne passera pas dans ton post.

* Télécharge https://toolslib.net (de Nicolas Coolman) sur ton bureau, c'est la dernière version !
/!\Il est très important de l'enregistrer sur le bureau / !\  
* Une fois le téléchargement achevé, double clique sur ZHPDiag.exe et laisse se dérouler l'installation
/!\L'outil a créé 2 icônes ZHPDiag , ZHPFix /!\
/!\Utilisateurs de Vista et Windows 7 : Clic droit sur le logo de ZHPDiag.exe, « exécuter en tant qu'Administrateur » /!\
* A l'ouverture le programme te proposes plusieurs options, cliques sur "Complet" et laisse travailler l'outil.


* ZHPDiag va alors analyser le contenu de ton ordinateur à la recherche d'informations sur ton système d'exploitation, la base de registre... Patiente jusqu'à la fin de l'analyse. Il peut arriver que le logiciel donne l'impression d'être bloqué ; patiente !
* Laisse l'outil travailler, il peut être assez long. 
* Le rapport s'ouvre dans le bloc note, ferme le car il est aussi enregistré sur ton bureau sous le nom ZHPDiag.txt et dans le dossier où est installé ZHPDiag (en général C:\ZHP\). 
* Transmets moi le lien du fichier par l'intermédiaire d'un dépôt de fichiers.
* Rappel des dépôts : cijoint ou  pjoint

PS Voici un tuto pour t'aider si besoin !
http://nicolascoolman.webs.com/tutorials.htm




A+

Marc.de.saint-denis · Answer

Merci , Ba aussi bizarre que sa puisse paraître je trouvais le PC pas si lent que ça ! mdrr  PS: Certains mot au début sont écrit en portugais , car j'ai acheté mon PC lábàs . Je ne pense pas  que tu en aura besoin mais si il te faut la traduction , ésite pas à demander ! Encore merci .     Voici le lien 

http://www.cjoint.com/data3/3DAvu6iknyI.htm

cabrier · Answer

marc, Aïe, un adepte du P2P et des Cr...ks ou Key...s ! Pas étonnant ! Il est impératif de maintenir à jour certains programmes installés sur ton ordinateur. Pourquoi ? Je t'invite à lire cet article : ===> https://www.malekal.com/maintenir-java-adobe-reader-et-le-player-flash-a-jour/ ------------------------------------ * Ta version de Java est obsolète et peut présenter une faille de sécurité, il te faut la désinstaller : Démarrer--->panneau de Configuration--->Programmes et Fonctionnalités --> Clic droit sur Java u 51 ---> Désinstaller ! Tu peux télécharger la nouvelle version : Java mais attention de décocher si la barre d'outil Ask t'est proposé ! ---------------------------------------------------- Ce script va cibler certains éléments à supprimer : * Ferme toutes tes applications en cours * Sélectionne et copie toutes les lignes en gras et italique suivantes depuis et y compris Script ZHPFIX : Script ZHPFix B0 - SPO: operaprefs.ini [kemar 93] Home URL=http://www.searchnu.com/406 B1 - OSP: search.ini [kemar 93] URL=http://dts.search-results.com/sr?src=opb&gct=ds&appid=390&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=4090225203604307&q=%s G2 - GCE: Preference [User Data\Default] [cedpcncnlfmkfcpiaebganedhpkadglc] x53ux70er Lx79rx69cs v.1.128 (Activé) G2 - GCE: Preference [User Data\Default] [cnofhjmfjmpcmdichcldjecimcfnmkem] Webexp Enhanced v.1.1 (Désactivé) G2 - GCE: Preference [User Data\Default] [pmgkeimkiojpjcoiiipekfjaopchhjga] Simple New Tab v.1.0.0 (Activé) G2 - EXT: C:\Users\kemar 93\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnofhjmfjmpcmdichcldjecimcfnmkem [Webexp Enhanced] M3 - MFPP: Plugins - [kemar 93] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\webblog.xml M2 - MFEP: prefs.js [kemar 93 - ib265xbz.default\OneClickDownloader@OneClickDownloader.com] [] 1Click Downloader v1.6 (..) M2 - MFEP: prefs.js [kemar 93 - ib265xbz.default\{b760284b-eec1-4c46-9adf-f5c9f76c82ff}] [] Linkury Smartbar v1.04.5 (..) M2 - MFEP: prefs.js [kemar 93 - ib265xbz.default\{C3947F4E-8894-4C04-98E0-DF182C706DDF}] [] Webblog v1.1 (..) R3 - URLSearchHook: SiteFinder [64Bits] - {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D} . (...) (No version) -- C:\Program Files (x86)\SiteFinder\SiteFinder.dll [MD5.00000000000000000000000000000000] [APT] [OMESupervisor] (...) -- C:\Users\kemar 93\AppData\Local\omesuperv.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [RunAsStdUser Task] (...) -- C:\Users\kemar 93\AppData\Local\RavenBleuSA\bin\1.0.11.0\RavenBleuSA.exe (.not file.) [0] O42 - Logiciel: Linkury Smartbar - (.Linkury Inc..) [HKLM][64Bits] -- {F04C4F83-D9C7-408C-9DEB-D5526E72108C} O42 - Logiciel: Linkury Smartbar Engine - (.Linkury Inc..) [HKCU][64Bits] -- {e5044e81-d4d6-4378-b68c-6182cf460127} O42 - Logiciel: SiteFinder - (.SiteFinder.) [HKLM][64Bits] -- SiteFinder O42 - Logiciel: WebPlayer - (.Kreapixel.) [HKLM][64Bits] -- {582E705F-1D5C-46E1-8FB7-DBE7BBDBA5CA} O42 - Logiciel: Webplayer setup version 1.0 - (...) [HKLM][64Bits] -- {74440C01-075E-4B10-AD97-60834BC4C2A0}_is1 [HKCU\Software\AppDataLow\Software\mediabarbs] [HKCU\Software\AppDataLow\Software\wbtooltb] [HKCU\Software\BearShare] [HKCU\Software\Snoozer] [HKLM\Software\Wow6432Node\Webexp Enhanced] =>PUP.WebexpEnhanced [HKLM\Software\Wow6432Node\WebexpEnhancedV1] O43 - CFD: 17-10-2013 - 17:40:16 - [0] --H-D C:\ProgramData\{9CD61942-8DA1-4781-925C-4FE1471E0820} O43 - CFD: 23-09-2013 - 08:05:56 - [] ----D C:\Users\kemar 93\AppData\Roaming\SmileysWeLove O43 - CFD: 17-08-2013 - 16:53:39 - [] ----D C:\Users\kemar 93\AppData\Local\YappyzUninstall O45 - LFCP:[MD5.894A3D648B53ADC9D5C2712C5A27BE47] - 26-04-2014 - 14:21:57 ---A- - C:\Windows\Prefetch\PLUS-HD-1.7-BG.EXE-A0AE9DAF.pf O45 - LFCP:[MD5.13760F4429AA206F6E788F4EF77ED95A] - 26-04-2014 - 13:12:01 ---A- - C:\Windows\Prefetch\PLUS-HD-1.7-CHROMEINSTALLER.E-6C559646.pf O45 - LFCP:[MD5.C1926E60BDA557573ECA0DA23119A535] - 26-04-2014 - 13:12:00 ---A- - C:\Windows\Prefetch\PLUS-HD-1.7-CODEDOWNLOADER.EX-7773B734.pf O45 - LFCP:[MD5.09BB522D835062BCE404EC0BB3520E0F] - 26-04-2014 - 13:12:00 ---A- - C:\Windows\Prefetch\PLUS-HD-1.7-ENABLER.EXE-8E51CD87.pf O45 - LFCP:[MD5.31804099CEAC65AE57B188B5575DA8DE] - 26-04-2014 - 13:12:01 ---A- - C:\Windows\Prefetch\PLUS-HD-1.7-FIREFOXINSTALLER.-A0A7065F.pf = O45 - LFCP:[MD5.5B446C3FE64DA0F349EA11313C455BDE] - 26-04-2014 - 15:58:24 ---A- - C:\Windows\Prefetch\PLUS-HD-1.7-HELPER.EXE-D9BFD9AA.pf O45 - LFCP:[MD5.64B70FC17D5EE2271A587FFC4B6C95EA] - 25-04-2014 - 21:19:43 ---A- - C:\Windows\Prefetch\SHSETUP.EXE-26386D7D.pf O45 - LFCP:[MD5.16692A27BCB4EF4A34E378FC70235888] - 25-04-2014 - 21:18:28 ---A- - C:\Windows\Prefetch\SPYHUNTER-INSTALLER.EXE-8C1F2B90.pf O45 - LFCP:[MD5.DC3929BF8C5A36CB3CBCE445FF0C6C0E] - 25-04-2014 - 21:24:05 ---A- - C:\Windows\Prefetch\SPYHUNTER4.EXE-7BD5E907.pf O45 - LFCP:[MD5.BDD0F429FAED021DB37070C0A653B944] - 25-04-2014 - 22:20:10 ---A- - C:\Windows\Prefetch\WISECUSTOMCALLA31.EXE-C5554ED8.pf = O45 - LFCP:[MD5.F64038D77B8C9257804D0E7F13DEC639] - 25-04-2014 - 21:20:40 ---A- - C:\Windows\Prefetch\WISECUSTOMCALLA32.EXE-D8AB095D.pf r O45 - LFCP:[MD5.F495F6DB641E738C1D25F1DEDF238E38] - 25-04-2014 - 21:20:52 ---A- - C:\Windows\Prefetch\WISECUSTOMCALLA33.EXE-EC00C3E2.pf O45 - LFCP:[MD5.9D2F3EAB5D358D8821E9A430BEDA6AC6] - 25-04-2014 - 21:20:54 ---A- - C:\Windows\Prefetch\WISECUSTOMCALLA34.EXE-FF567E67.pf =>Crapware.SpyHunter O45 - LFCP:[MD5.F84FCF883860C720ACD6CB06274ECFD4] - 25-04-2014 - 22:20:45 ---A- - C:\Windows\Prefetch\WISECUSTOMCALLA37.EXE-3957ADF6.pf =>Crapware.SpyHunter O61 - LFC: 25-04-2014 - 21:12:31 ---A- . (...) -- C:\Users\kemar 93\AppData\Local\Temp\SHSetup.exe [47329360] =>Crapware.SpyHunter O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files (x86)\Opera\Opera.exe" http://www.qvo6.com =>Hijacker.Qvo6 O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Users\kemar 93\AppData\Local\Yappyz\Application\yappyz.exe (.not file.) =>PUP.Yappyz O69 - SBI: SearchScopes [HKCR] {afdbddaa-5d3f-42ee-b79c-185a7020515b} - (Web Search) - http://ww7.certified-toolbar.com =>PUP.CertifiedToolbar [MD5.2F613B6F0C373F62A94FF45003546482] [WIS][14-08-2011] (.Bandoo Media Inc. - iLivid Installation.) -- C:\Windows\Installer\12f6bbb8.msi [266240] =>Adware.Bandoo HKLM\SOFTWARE\Microsoft\Tracing\InstTracker_RASAPI32 =>Adware.PredictAd HKLM\SOFTWARE\Microsoft\Tracing\InstTracker_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BandooV6_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\basicscan_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\basicscan_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BearShareMediaBar_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BearShareMediaBar_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BearShare_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BearShare_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BearShare_V10_en_Setup_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BearShare_V10_en_Setup_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\JFileManager_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\JFileManager_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\kujytuo_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\kujytuo_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LatestDLMgr_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LatestDLMgr_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\questscan_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\questscan_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SpeedyPC_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SpeedyPC_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SpeedyPC_Update3_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SpeedyPC_Update3_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilSaltarSmart_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilSaltarSmart_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Video Download Converter_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Video Download Converter_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-S-08F4_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-S-08F4_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-S-10E0_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-S-10E0_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-S-17A8_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-S-17A8_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-S-24E0_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-S-24E0_RASMANCS HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-Silent-0B44_RASAPI32 HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-Silent-0B44_RASMANCS [HKLM\Software\Google\Chrome\Extensions\cnofhjmfjmpcmdichcldjecimcfnmkem] [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SiteFinder] [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{582E705F-1D5C-46E1-8FB7-DBE7BBDBA5CA}] [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{74440C01-075E-4B10-AD97-60834BC4C2A0}_is1] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2B1E51D87B2D71A44BB42DDD5E894160] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E0C8759C69912A4485AD49572CE7CA3] [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\HssSrv] [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Dealply] [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] [HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks]:{CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D} C:\Users\kemar 93\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnofhjmfjmpcmdichcldjecimcfnmkem C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\extensions\OneClickDownloader@OneClickDownloader.com C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\extensions\{b760284b-eec1-4c46-9adf-f5c9f76c82ff} C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\extensions\{C3947F4E-8894-4C04-98E0-DF182C706DDF} C:\Users\kemar 93\AppData\Roaming\SmileysWeLove C:\Users\kemar 93\AppData\Local\YappyzUninstall C:\Users\kemar 93\AppData\LocalLow\wincorebsband C:\Users\kemar 93\AppData\LocalLow\mediabarbs C:\Program Files (x86)\AdwCleaner\Quarantine\C\Users\kemar 93\AppData\Roaming\OpenCandy C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\mediabarbs [HKCU\Software\AppDataLow\Software\wbtooltb] [HKCU\Software\BearShare] [HKCU\Software\Snoozer] [HKLM\Software\Wow6432Node\Webexp Enhanced] [HKLM\Software\Wow6432Node\WebexpEnhancedV1] C:\Windows\Installer\12f6bbb8.msi ShortcutFix PROXYFix EmptyFlash EmptyPrefetch EmptyTemp EmptyCLSID * Lance ZHPFix via le raccourci sur ton Bureau, (Si tu es sous Vista ou Windows 7 ou Windows 8 n'oublie pas clic droit ==> en tant qu'administrateur") * Si tu obtiens le message "Voulez-vous autoriser le programme suivant..."Tu réponds "Oui" * Clique sur le bouton "IMPORTER" * Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes * Clique sur le bouton «GO» pour le lancer le nettoyage * A la demande, confirme le nettoyage des données en cliquant sur [OK] * Patiente le temps du traitement. * ZHPFix va te demander si tu souhaites vider ta corbeille, clique sur ton choix (le traitement peut être long suivant la quantité de données à supprimer) * Un rapport nommé ZHPFixReport.txt sera créé et sauvegardé sur le bureau * Ce rapport se trouve aussi ici C:\ZHP\ZHPFix[R1].txt * Copie/colle la totalité du rapport dans ta prochaine réponse Mais ce n'est qu'un début ! A+

Marc.de.saint-denis · Answer

Je t'ai envoyé le rapport 2 fois mais ça n'apparaît pas ici j'espère que tu l'a reçu . 
Si ce n'ai pas le cas je te l'enverrai encore . Merci

cabrier · Answer

Marc,


Non pas reçu sinon tu le verrais apparaitre dans ta réponse !

Il ne doit pas être trés long. Tu peux le coller dans ton post.

A+

Marc.de.saint-denis · Answer

Dans mon post ? Ça serait pas mieux sur cijoint ? il est assez long !

Marc.de.saint-denis · Answer

J'arrête pas de le coller dans ma réponse ! (le rapport) !

Marc.de.saint-denis · Answer

Rapport de ZHPFix 2014.4.13.3 par Nicolas Coolman, Update du 13/04/2014
Fichier d'export Registre : 
Run by kemar 93 at 26-04-2014 23:20:30
High Elevated Privileges : OK
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Reciclagem vazia (00mn 03s)
Prefetcher vazio
Reparação de atalhos do navegador

========== Softwares ==========
ELIMINÉ: Linkury Smartbar
AUSENTE Uninstall Process: c:\program files (x86)\sitefinder\sitefinder_uninstaller.exe
ELIMINÉ: WebPlayer
AUSENTE Uninstall Process: c:\program files (x86)\webplayer setup\unins000.exe

========== Chaves do Registo ==========
ELIMINÉ: [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F04C4F83-D9C7-408C-9DEB-D5526E72108C}]
ELIMINÉ Logiciel Key: [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SiteFinder]
ELIMINÉ: [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{582E705F-1D5C-46E1-8FB7-DBE7BBDBA5CA}]
ELIMINÉ Logiciel Key: [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{74440C01-075E-4B10-AD97-60834BC4C2A0}_is1]
ELIMINÉ: HKCU\Software\AppDataLow\Software\mediabarbs
ELIMINÉ: HKCU\Software\AppDataLow\Software\wbtooltb
ELIMINÉ: HKCU\Software\BearShare
ELIMINÉ: HKCU\Software\Snoozer
ELIMINÉ: HKLM\Software\Wow6432Node\Webexp Enhanced
ELIMINÉ: HKLM\Software\Wow6432Node\WebexpEnhancedV1
ELIMINÉ: SearchScopes :{afdbddaa-5d3f-42ee-b79c-185a7020515b}
ELIMINÉ:* HKLM\SOFTWARE\Microsoft\Tracing\InstTracker_RASAPI32
ELIMINÉ:* HKLM\SOFTWARE\Microsoft\Tracing\InstTracker_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BandooV6_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\basicscan_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\basicscan_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BearShareMediaBar_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BearShareMediaBar_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BearShare_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BearShare_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BearShare_V10_en_Setup_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BearShare_V10_en_Setup_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\JFileManager_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\JFileManager_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\kujytuo_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\kujytuo_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LatestDLMgr_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LatestDLMgr_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\questscan_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\questscan_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SpeedyPC_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SpeedyPC_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SpeedyPC_Update3_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SpeedyPC_Update3_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilSaltarSmart_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilSaltarSmart_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Video Download Converter_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Video Download Converter_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-S-08F4_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-S-08F4_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-S-10E0_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-S-10E0_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-S-17A8_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-S-17A8_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-S-24E0_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-S-24E0_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-Silent-0B44_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooSetup-Silent-0B44_RASMANCS
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2B1E51D87B2D71A44BB42DDD5E894160
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E0C8759C69912A4485AD49572CE7CA3
ELIMINÉ: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\HssSrv
ELIMINÉ:* HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Dealply
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC

========== Valores do Registo ==========
ProxyFix : Configuração proxy removida com sucesso
ELIMINÉ ProxyServer Value
ELIMINÉ ProxyEnable Value
ELIMINÉ EnableHttp1_1 Value
ELIMINÉ ProxyHttp1.1 Value
ELIMINÉ ProxyOverride Value

========== Elementos dos dados do Registo ==========
ELIMINÉ: StartMenuInternet: C:\Program Files (x86)\Opera\Opera.exe" http://www.qvo6.com
ELIMINÉ: StartMenuInternet: C:\Users\kemar 93\AppData\Local\Yappyz\Application\yappyz.exe 

========== Preferências do navegador ==========
ELIMINÉ: Opera Start Page: http://www.searchnu.com/406
ELIMINÉ: Opera Search Page: http://dts.search-results.com/sr?src=opb&gct=ds&appid=390&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=4090225203604307&q=%s
ELIMINÉ Folder Chrome: C:\Users\kemar 93\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnofhjmfjmpcmdichcldjecimcfnmkem
ELIMINÉ Folder Chrome: C:\Users\kemar 93\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmgkeimkiojpjcoiiipekfjaopchhjga

========== Pastas ==========
Nenhuma pasta CLSID local utilizador vazia

========== Ficheiros ==========
ELIMINÉ: c:\users\kemar 93\appdata\local\google\chrome\user data\default\preferences
ELIMINÉ: c:\program files (x86)\mozilla firefox\searchplugins\webblog.xml
ELIMINÉ: c:\windows\prefetch\plus-hd-1.7-bg.exe-a0ae9daf.pf
ELIMINÉ: c:\windows\prefetch\plus-hd-1.7-chromeinstaller.e-6c559646.pf
ELIMINÉ: c:\windows\prefetch\plus-hd-1.7-codedownloader.ex-7773b734.pf
ELIMINÉ: c:\windows\prefetch\plus-hd-1.7-enabler.exe-8e51cd87.pf
ELIMINÉ: c:\windows\prefetch\plus-hd-1.7-firefoxinstaller.-a0a7065f.pf
ELIMINÉ: c:\windows\prefetch\plus-hd-1.7-helper.exe-d9bfd9aa.pf
ELIMINÉ: c:\windows\prefetch\shsetup.exe-26386d7d.pf
ELIMINÉ: c:\windows\prefetch\spyhunter-installer.exe-8c1f2b90.pf
ELIMINÉ: c:\windows\prefetch\spyhunter4.exe-7bd5e907.pf
ELIMINÉ: c:\windows\prefetch\wisecustomcalla31.exe-c5554ed8.pf
ELIMINÉ: c:\windows\prefetch\wisecustomcalla33.exe-ec00c3e2.pf
ELIMINÉ: c:\windows\prefetch\wisecustomcalla34.exe-ff567e67.pf
ELIMINÉ: c:\windows\prefetch\wisecustomcalla37.exe-3957adf6.pf
ELIMINÉ: c:\users\kemar 93\appdata\local	emp\shsetup.exe
ELIMINÉ: C:\Windows\Installer\12f6bbb8.msi
ELIMINÉ Flash Cookies (0) (0 octets)
ELIMINÉ Temporários windows (169) (5.027.148 octets)

========== Tarefa planificada ==========
ELIMINÉ: OMESupervisor
ELIMINÉ: RunAsStdUser Task


========== Recapitulativo ==========
53 : Chaves do Registo
6 : Valores do Registo
2 : Elementos dos dados do Registo
1 : Pastas
19 : Ficheiros
4 : Softwares
4 : Preferências do navegador
2 : Tarefa planificada


End of clean in 01mn 13s

========== Caminho do ficheiro do relatório ==========
C:\Users\kemar 93\AppData\Roaming\ZHP\ZHPFix[R1].txt - 26-04-2014 23:20:33 [7601]

cabrier · Answer

Marc, 

Tu ne me donnes pas le lien lorsque tu héberges le rapport sur cjoint !
Comment veux-tu que je le consulte ?

A+

Marc.de.saint-denis · Answer

Voilà , https://www.cjoint.com/?3DBoStsVynd ou 

http://cjoint.com/data3/3DBoStsVynd.htm   Merci

cabrier · Answer

OK Marc et merci à Baladur13 d'avoir débloqué la situation !


 Beaucoup de nettoyage de fait, mais un scan complet me semble nécessaire.


Va sur ce site : https://www.eset.com/fr/home/products/online-scanner/
et cliques sur : Lancer ESET Online scanner 

Poste moi le rapport résultant.

A+

Marc.de.saint-denis · Answer

Il me demande d'installer une extention/supplément j'accepte ?
Parce que le scan se lance pas ... :(

cabrier · Answer

Tu es bien sur le site de Eset ? si oui ---> ok

Marc.de.saint-denis · Answer

C'est bon ! il scan , encore merci . J'ai demandé une analyse ...COMPLÈTE .

Marc.de.saint-denis · Answer

Voilà le rapport cabrier !  https://www.cjoint.com/?3DBs031z0Yu

Marc.de.saint-denis · Answer

Au fait faut-il que je clique sur désinstaller l'appliction à la fermeture et que je supprime les fichiers mit en quarentaine ? Merci

cabrier · Answer

Marc,

Oui tu peux faire ça !

Il y a beaucoup de fichiers mis en quarantaine  par les tools.


Si pas d'autres problèmes on termine.

Les programmes que nous avons utilisés ne doivent pas être conservés. 
Beaucoup d'entre eux peuvent être dangereux et entrainer des dommages irréversibles sur ton système s'ils sont utilisés sans l'aide d'une personne qualifiée, de plus, fréquemment modifiés et mis à jour par leurs auteurs ils deviennent très rapidement obsolètes, en plus d'encombrer inutilement ton bureau.

1. Désinstallation des outils et purge de la Restauration système

- Télécharge DelFix (d'Xplode) sur ton bureau. 
- Lance le, (avec Vista/Seven, clic droit dessus, et sur exécuter en tant qu'administrateur) 
- Sélectionne "Réactiver l'UAC" 
- Sélectionne "Supprimer les outils de désinfection" 
- Sélectionne également "Purger la restauration système"
- Clique sur "Exécuter"
- Copie/colle le contenu du rapport qui s'ouvrira à l'écran dans ton prochain message.

Attention : Chaque fois que tu relances Delfix le rapport précédent est supprimé, alors ne l'exécute qu'une fois avec les options cochées.



Prévention :

-- Pourquoi et comment je me fais infecter ? (par Malekal_morte)

https://forum.malekal.com/viewtopic.php?t=3259&start=
https://www.malekal.com/virus-securite/
https://forum.malekal.com/viewtopic.php?t=6173&start=
https://www.malekal.com/fichiers/projetantimalwares/ProjetAntiMalware.pdf
https://stopransomware.fr/
https://www.ssi.gouv.fr/


-- il faut absolument faire attention lors de l'installation de logiciels. Ne télécharger les programme qu'à partir de sources sures, autant que possible sur le site de l'éditeur et SURTOUT lire et comprendre ce que vous proposent les différentes fenêtres qui vont s'ouvrit (Attention aux cases qu'il faut cocher ou décocher !!!)


-- Pour vérifier que tes programmes sont à jour :

*    Télécharge Update Checker : http://www.filehippo.com/updatechecker/FHSetup.exe
*    Lance-le (Sous Vista/7, fais un clic droit et choisis "Exécuter en tant qu'administrateur")
*   Installe-le (le logiciel est parfois en anglais)(décoche « run at startup » lors de l'installation)
*   Le logiciel vérifie tes programmes et t'annonce s'il y a des mises à jour
*    Si c'est le cas, télécharge les mises à jour
*    n'hésite pas à utiliser ce programme régulièrement


-- Pour naviguer sur Internet de façon plus sécurisée:

*    Privilégie Firefox : https://www.mozilla.org/fr/firefox/
*    Installe l'extension AdBlockPlus qui permet de bloquer les pubs : https://addons.mozilla.org/fr/firefox/addon/adblock-plus/
*    Installe l'extension WOT qui t'avertit des sites potentiellement dangereux :

    https://addons.mozilla.org/fr/firefox/addon/wot-safe-browsing-tool/?src=search
*    Tu peux enfin installer l'extension NoScript qui permet de réduire les risques liés à ta navigation, par contre c'est une extension pas toujours simple à configurer, à toi de voir :https://addons.mozilla.org/fr/firefox/addon/noscript/?src=search

    Aide : http://www.libellules.ch/noscript.php


-- Les pratiques à éviter

    https://forum.malekal.com/viewtopic.php?t=3208&start=
    https://forum.malekal.com/viewtopic.php?t=893&start=



-- Pense à marquer le fil comme résolu !
resolu

-- Sois plus vigilant(e) sur Internet à l'avenir !

Voilà pour moi c'est terminé. 

Si tu as des questions n'hésite pas.

Bonne journée


@+

Marc.de.saint-denis · Answer

Voilà le rapport delfix ... # DelFix v10.7 - Logfile created 27/04/2014 at 20:56:59
# Updated 27/04/2014 by Xplode
# Username : kemar 93 - KEMAR93-TOSH
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)

~ Activating UAC ... OK

~ Removing disinfection tools ...

Deleted : C:\AdwCleaner
Deleted : C:\Users\kemar 93\AppData\Roaming\ZHP
Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
Deleted : C:\Program Files (x86)\ZHPDiag
Deleted : C:\PhysicalDisk0_MBR.bin
Deleted : C:\Users\kemar 93\Desktop\JRT.exe
Deleted : C:\Users\kemar 93\Desktop\ZHPDiag.lnk
Deleted : C:\Users\kemar 93\Desktop\ZHPFix.lnk
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1

~ Cleaning system restore ...

Deleted : RP #374 [Installed Java 7 Update 55 | 04/26/2014 21:13:09]

New restore point created !

########## - EOF - ##########

Marc.de.saint-denis · Answer

MERCI BEAUCOUP pour le temps et l'aide que tu m'a fourni !! J'actualise les nouvelles versions . Je remarque que j'ai toujours les ícones des sites de nettoyage sur mon bureau , faut -il que je les désinstallent ou Delfix l'a déjà fait ?

Marc.de.saint-denis · Answer

Salut cabrier , devine quoi ? En faisant les mises à jour je viens de me choper Qone8 !!!! pfffff qu'est-ce que je peux faire ? Merci

Marc.de.saint-denis · Answer

C'est bon !! J'ai refait le circuit avec adwcleaner , JRT , et shorcut !! Merci encore . 
Si tu penses que j'ai besoin d'un nouveau ZHPDiag dit le moi stp sinon A+ (Y)

cabrier · Answer

Marc,

Oui si tu veux faire une ZHPDiag tu peux, je regarderai dans la journée !

A+

Marc.de.saint-denis · Answer

Voilà mon rapport ZHPDiag : https://www.cjoint.com/?3DCqlSPQrnh

cabrier · Answer

Marc,

De nouvelles infections !!!!


Retélécharges AdwCleaner et ----> nettoyer, poste le rapport puis  met à jour la base de données de MBAM et tu refais un scan.


Ensuite tu refais un ZHPDiag !


Attention possible cheval de Troie donc mots de passe à changer !

A+

Marc.de.saint-denis · Answer

rapport adwCleaner https://www.cjoint.com/?3DCvFJtogd7

Marc.de.saint-denis · Answer

MBAM n'a trouvé aucun objet ... voici le rapport SHPDiag 

https://www.cjoint.com/?3DCwe2YYNRw

Dit moi est ce Google a changé ? je remarque que lorsque je cherche quelque chose , une peite ícone verte avec une sorte de v à l'intérieur est presente à coté du nom des pages trouvées  . Il y a aussi le logo des paramètre qui est un peu plus à droite avec à coté de 2 ícones qui disent masquer et afficher résultats privés . Merci 

Au fait , il faut que je change tous mes mots de passe ???!!!

cabrier · Answer

Marc,



Plusieurs traces d'anciens antivirus ! Un seul sur une machine !



Pour effectuer ce script ---> désactive Avast au préalable



Ce script va cibler certains éléments à supprimer :

*    Ferme toutes tes applications en cours
*    Sélectionne et copie toutes les lignes en gras et italique suivantes depuis et y compris Script ZHPFIX :


Script ZHPFix
R3 - URLSearchHook: SiteFinder [64Bits] - {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D} . (...) (No version) -- C:\Program Files (x86)\SiteFinder\SiteFinder.dll  
O42 - Logiciel: Linkury Smartbar Engine - (.Linkury Inc..) [HKCU][64Bits] -- {e5044e81-d4d6-4378-b68c-6182cf460127}
[HKLM\Software\Wow6432Node\SiteFinder]  =>Adware.ShoppingReport
O45 - LFCP:[MD5.CA919F2193940A9EE7A2B99AE8FAFEAF] - 27-04-2014 - 20:42:44 ---A- - C:\Windows\Prefetch\KMPADDEDCODE_QONE8.EXE-6D82F9BE.pf 
O45 - LFCP:[MD5.6A0A5E7F7D4004EE6D7F9D78AC62587A] - 27-04-2014 - 20:42:44 ---A- - C:\Windows\Prefetch\KMP_QONE8.EXE-D0BD2F41.pf  
O45 - LFCP:[MD5.34DE661F09A2662BFF64C7CBE7430B57] - 27-04-2014 - 20:43:33 ---A- - C:\Windows\Prefetch\SUPIEPLUGINSERVICEUPDATE.EXE-D28F76E9.pf 
O45 - LFCP:[MD5.DA083BE53319DA4A4F914ACB8F7062DE] - 27-04-2014 - 20:43:33 ---A- - C:\Windows\Prefetch\SUPTAB.EXE-A2E21CCD.pf  
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BandooV6_RASAPI32  
[HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks]:{CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}
[HKLM\Software\Wow6432Node\SiteFinder] 
C:\Users\kemar 93\AppData\Local\Temp\GoogleToolbarInstaller1.log  
C:\Users\kemar 93\AppData\Local\Temp\GoogleToolbarInstaller2.log  
M3 - MFPP: Plugins - [kemar 93] -- C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\searchplugins\Muzeen.xml
M0 - MFSP: prefs.js [kemar 93 - ib265xbz.default] http://ww7.native-search.com
M2 - MFEP: prefs.js [kemar 93 - ib265xbz.default	oolbar@muzeen.com] [] Toolbar Muzeen v1.04.5 (..)
O2 - BHO: Simple New Tab [64Bits] - {5C2DD58F-613F-4580-8AC0-F10D760AF938} . (.Temp Company Ltd - TODO: <File description>.) -- C:\Users\kemar 93\AppData\Local\simple_new_tab\simple_new_tab.dll
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{E0301295-AB3E-4AF3-979F-3D453C5F9F48} Chave orfã
[HKCU\Software\AppDataLow\ae09b4ab]
[HKCU\Software\OMUPH]
O43 - CFD: 30-08-2013 - 14:54:32 - [] ----D C:\Users\kemar 93\AppData\Local\avgchrome
O4 - HKCU\..\RunOnce: [Application Restart #2] C:\Users\kemar 93\AppData\Local\Pokki\Engine\pokki.exe (.not file.)
O4 - HKCU\..\RunOnce: [Application Restart #1] C:\Users\kemar 93\AppData\Local\Pokki\Engine\pokki.exe (.not file.)
O4 - HKUS\S-1-5-21-2710441035-953502237-1873598412-1001\..\RunOnce: [Application Restart #2] C:\Users\kemar 93\AppData\Local\Pokki\Engine\pokki.exe (.not file.)
O4 - HKUS\S-1-5-21-2710441035-953502237-1873598412-1001\..\RunOnce: [Application Restart #1] C:\Users\kemar 93\AppData\Local\Pokki\Engine\pokki.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [4781] (...) -- C:\Users\kemar 93\AppData\Local\Temp\launchie.vbs \B (.not file.)   [0]
[MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-2710441035-953502237-1873598412-1001Core] (.Facebook Inc..) -- C:\Users\kemar 93\AppData\Local\Facebook\Update\FacebookUpdate.exe   [138096]
[MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-2710441035-953502237-1873598412-1001UA] (.Facebook Inc..) -- C:\Users\kemar 93\AppData\Local\Facebook\Update\FacebookUpdate.exe   [138096]
O39 - APT: FacebookUpdateTaskUserS-1-5-21-2710441035-953502237-1873598412-1001Core - (.Facebook Inc..) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2710441035-953502237-1873598412-1001Core.job   [918]
O39 - APT: FacebookUpdateTaskUserS-1-5-21-2710441035-953502237-1873598412-1001Core - (.Facebook Inc..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2710441035-953502237-1873598412-1001Core   [918]
O39 - APT: FacebookUpdateTaskUserS-1-5-21-2710441035-953502237-1873598412-1001UA - (.Facebook Inc..) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2710441035-953502237-1873598412-1001UA.job   [940]
O39 - APT: FacebookUpdateTaskUserS-1-5-21-2710441035-953502237-1873598412-1001UA - (.Facebook Inc..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2710441035-953502237-1873598412-1001UA   [940]
O41 - Driver:  (nvport) . (. - .) - C:\Windows\system32\Drivers
vport.sys (.not file.)
[HKCU\Software\IncrediMail]
O43 - CFD: 17-10-2013 - 17:40:16 - [0] --H-D C:\ProgramData\{51019853-129C-4EDE-9030-D5FD7BBD9AD0}
O61 - LFC: 28-04-2014 - 21:55:41 ---A- . (...) -- C:\Users\kemar 93\AppData\Local\Temp\Quarantine.exe   [385993]
[MD5.63C883DA6179D957C9709410DF6CB4D3] [SPRF][03-07-2012] (...) -- C:\ProgramData\1341347326.bdinstall.bin   [502]
[MD5.47402D90A2196DE1128F5F71A344EA4F] [SPRF][03-07-2012] (...) -- C:\ProgramData\1341347376.bdinstall.bin   [251033]
[MD5.6CC7A0D89B864C1EF6EA4DF248FFFADB] [SPRF][24-07-2012] (...) -- C:\ProgramData\1343159412.bdinstall.bin   [161822]
[MD5.BD19D4633354AD6BE50E54FC325E9AA5] [SPRF][24-07-2012] (...) -- C:\ProgramData\1343159529.bdinstall.bin   [15686]
[MD5.F2695471B07998E82CA64B6BDB9468CB] [SPRF][24-07-2012] (...) -- C:\ProgramData\1343159564.bdinstall.bin   [15686]
[MD5.4C9D76BDFD8A26CAA93BB508B1A8AA0F] [SPRF][24-07-2012] (...) -- C:\ProgramData\1343159822.bdinstall.bin   [223743]
[MD5.AFD3F18B934F2FC712B24311B7F4159B] [SPRF][24-07-2012] (...) -- C:\ProgramData\1343160194.bdinstall.bin   [169840]
[MD5.96A62CF6E7681048B6ED89075CD3ACAA] [SPRF][24-07-2012] (...) -- C:\ProgramData\1343164758.bdinstall.bin   [103571]
[MD5.4B3A85BC9735ECC02E19A38674DDA4EF] [SPRF][22-08-2012] (...) -- C:\ProgramData\1345666906.bdinstall.bin   [269193]
[MD5.9C6ACE06A003F53D36C37BD7583A6681] [SPRF][22-08-2012] (...) -- C:\ProgramData\1345667935.bdinstall.bin   [102650]
Windows Defender W7    
[HKCU\Software\ESET]    
[HKCU\Software\MCAFEE]
[HKLM\Software\McAfee]
[HKLM\Software\Wow6432Node\Eset]    
[HKLM\Software\Wow6432Node\McAfee]
O43 - CFD: 23-08-2012 - 21:10:18 - [] ----D C:\Program Files (x86)\McAfee
O43 - CFD: 22-08-2012 - 23:19:22 - [] ----D C:\ProgramData\McAfee
M3 - MFPP: Plugins - [kemar 93] -- C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\searchplugins\ADelta.xml  
P2 - FPN: [HKCU] [bebomedia.com/OfferMosquitoIEHelper] - (...) -- C:\Users\kemar 93\AppData\Local\ext_offermosquito
pOfferMosquitoIEHelper.dll (.not file.) 
O42 - Logiciel: eBay - (.eBay Inc..) [HKLM][64Bits] -- {FDE58148-57E7-43BF-879A-29CCE818C078}
[HKCU\Software\Mixi.DJ]    
O43 - CFD: 30-07-2011 - 21:52:38 - [] ----D C:\Program Files (x86)\eBay  
O43 - CFD: 17-10-2013 - 17:40:16 - [0] -SH-D C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}    
O43 - CFD: 11-04-2014 - 20:14:27 - [0] ----D C:\Users\kemar 93\AppData\Roaming\OfferMosquito 
O43 - CFD: 17-08-2013 - 22:38:02 - [] ----D C:\Users\kemar 93\AppData\Local\CRE    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{FDE58148-57E7-43BF-879A-29CCE818C078}]  
[HKCU\Software\AppDataLow\Software\entrusted] 
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FDE58148-57E7-43BF-879A-29CCE818C078}] 
[HKLM\Software\Classes\Installer\Features\84185EDF7E75FB3478A992CC8E810C87]  
[HKLM\Software\Classes\Installer\Products\84185EDF7E75FB3478A992CC8E810C87]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\84185EDF7E75FB3478A992CC8E810C87] 
[HKLM\Software\Wow6432Node\Classes\Installer\Features\84185EDF7E75FB3478A992CC8E810C87] 
[HKLM\Software\Wow6432Node\Classes\Installer\Products\84185EDF7E75FB3478A992CC8E810C87]  
[HKCU\Software\Mixi.DJ] 
C:\Program Files (x86)\eBay
C:\Users\kemar 93\AppData\Roaming\OfferMosquito   
C:\Users\kemar 93\AppData\LocalLow\entrusted 
http://nicolascoolman.webs.com/apps/blog/show/27875657-toolbar-deltasearch
ShortcutFix 
HOSTFix
PROXYFix
EmptyFlash
EmptyPrefetch
EmptyTemp
EmptyCLSID



*    Lance ZHPFix via le raccourci sur ton Bureau, (Si tu es sous Vista ou Windows 7 ou Windows 8 n'oublie pas clic droit ==> en tant qu'administrateur")
*    Si tu obtiens le message "Voulez-vous autoriser le programme suivant..."Tu réponds "Oui"
*    Clique sur le bouton "IMPORTER"
*    Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes

*    Clique sur le bouton «GO» pour le lancer le nettoyage
*    A la demande, confirme le nettoyage des données en cliquant sur [OK]
*    Patiente le temps du traitement.
*    ZHPFix va te demander si tu souhaites vider ta corbeille, clique sur ton choix (le traitement peut être long suivant la quantité de données à supprimer)
*    Un rapport nommé ZHPFixReport.txt sera créé et sauvegardé sur le bureau
*    Ce rapport se trouve aussi ici C:\ZHP\ZHPFix[R1].txt
*    Copie/colle la totalité du rapport dans ta prochaine réponse


Ensuite :

Reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprime/désactive les extensions inutiles/parasites :
* Internet Explorer et modules complémentaires / moteurs de recherche : https://forum.malekal.com/viewtopic.php?t=41399&start=
* Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start=
* Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start=


Attention - dans le cas de find22 / Portaldosites / QVO6.com : il faut nettoyer les raccourcis (icônes) de lancement des navigateurs WEB.
Comme expliqué dans les liens précédents, faire un clic droit sur les icônes de raccourcis de lancement des navigateurs puis propriétés.
Dans cible, à la fin, une adresse http a été ajoutée (exemple https://www.malekal.com/fichiers/forum/malavida_22find_7.png ) pour que le site s'ouvre au démarrage du navigateur, supprimer cette adresse http ET SEULEMENT cette adresse http.

Enfin,


Tu refais encore un ZHPDiag Complet pour vérification que ZHPFix à bien nettoyé !

A+

Marc.de.saint-denis · Answer

Pour les extentions et les ícones je l'ai toujours fait . Je comprends mm pas que ça puisse être sur le PC ! lol bref voilá le rapport ZHPDiag après nétoyage ! 

Rapport de ZHPFix 2014.4.13.3 par Nicolas Coolman, Update du 13/04/2014
Fichier d'export Registre : 
Run by kemar 93 at 29-04-2014 13:34:40
High Elevated Privileges : OK
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Reciclagem vazia (00mn 05s)
Prefetcher vazio
Reparação de atalhos do navegador

========== Softwares ==========
ELIMINÉ: eBay

========== Chaves do Registo ==========
ELIMINÉ: HKLM\Software\Wow6432Node\SiteFinder
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BandooV6_RASAPI32
ELIMINÉ: CLSID BHO: {5C2DD58F-613F-4580-8AC0-F10D760AF938}
ELIMINÉ: HKCU\Software\AppDataLow\ae09b4ab
ELIMINÉ: HKCU\Software\OMUPH
ELIMINÉ Driver Key: nvport
ELIMINÉ: HKCU\Software\IncrediMail
ELIMINÉ: HKCU\Software\ESET
ELIMINÉ: HKCU\Software\MCAFEE
ELIMINÉ: HKLM\Software\McAfee
ELIMINÉ: HKLM\Software\Wow6432Node\Eset
ELIMINÉ: Mozilla Plugin: bebomedia.com/OfferMosquitoIEHelper
ELIMINÉ: HKCU\Software\Mixi.DJ
ELIMINÉ: HKCU\Software\AppDataLow\Software\entrusted

========== Valores do Registo ==========
ELIMINÉ: Toolbar: {E0301295-AB3E-4AF3-979F-3D453C5F9F48}
ELIMINÉ RunValue: Application Restart #2
ELIMINÉ RunValue: Application Restart #1
ProxyFix : Configuração proxy removida com sucesso
ELIMINÉ ProxyServer Value
ELIMINÉ ProxyEnable Value
ELIMINÉ EnableHttp1_1 Value
ELIMINÉ ProxyHttp1.1 Value
ELIMINÉ ProxyOverride Value

========== Preferências do navegador ==========
ELIMINÉ Mozilla Pref: http://ww7.native-search.com
ELIMINÉ Mozilla Pref: http://ww7.native-search.com
ELIMINÉ Mozilla Pref: http://ww7.native-search.com
ELIMINÉ Mozilla Pref: http://ww7.native-search.com

========== Pastas ==========
Nenhuma pasta CLSID local utilizador vazia

========== Ficheiros ==========
ELIMINÉ: c:\windows\prefetch\kmpaddedcode_qone8.exe-6d82f9be.pf
ELIMINÉ: c:\windows\prefetch\kmp_qone8.exe-d0bd2f41.pf
ELIMINÉ: c:\windows\prefetch\supiepluginserviceupdate.exe-d28f76e9.pf
ELIMINÉ: c:\windows\prefetch\suptab.exe-a2e21ccd.pf
ELIMINÉ: C:\Users\kemar 93\AppData\Local\Temp\GoogleToolbarInstaller1.log
ELIMINÉ: C:\Users\kemar 93\AppData\Local\Temp\GoogleToolbarInstaller2.log
ELIMINÉ: c:\users\kemar 93\appdataoaming\mozilla\firefox\profiles\ib265xbz.default\searchplugins\muzeen.xml
ELIMINÉ: c:\users\kemar 93\appdata\local\simple_new_tab\simple_new_tab.dll
ELIMINÉ: c:\users\kemar 93\appdata\local	emp\quarantine.exe
ELIMINÉ: c:\users\kemar 93\appdataoaming\mozilla\firefox\profiles\ib265xbz.default\searchplugins\adelta.xml
ELIMINÉ Flash Cookies (0) (0 octets)
ELIMINÉ Temporários windows (333) (318.857.162 octets)

========== Ficheiro HOSTS ==========
O ficheiro Hosts não foi reparado, por favor, desative o seu antivírus.

========== Tarefa planificada ==========
ELIMINÉ: 4781
ELIMINÉ: FacebookUpdateTaskUserS-1-5-21-2710441035-953502237-1873598412-1001Core
ELIMINÉ: FacebookUpdateTaskUserS-1-5-21-2710441035-953502237-1873598412-1001UA

========== Outros ==========
NÃO-TRATADO Windows Defender W7
NÃO-TRATADO http://nicolascoolman.webs.com/apps/blog/show/27875657-toolbar-deltasearch


========== Recapitulativo ==========
14 : Chaves do Registo
9 : Valores do Registo
1 : Pastas
12 : Ficheiros
1 : Softwares
4 : Preferências do navegador
1 : Ficheiro HOSTS
3 : Tarefa planificada
2 : Outros


End of clean in 01mn 12s

========== Caminho do ficheiro do relatório ==========
C:\Users\kemar 93\AppData\Roaming\ZHP\ZHPFix[R1].txt - 29-04-2014 13:34:46 [3392]

Marc.de.saint-denis · Answer

Voilà le dernier rapport de confirmation ZHPDiag et encoe merci !

~ Relatório do ZHPDiag v2014.4.28.48 - Nicolas Coolman  (28-04-2014)
~ Iniciado por kemar 93 (29-04-2014 14:04:27)
~ Endereço do Website :  https://nicolascoolman.webs.com/
~ Fóruns de suporte gratuito para desinfecção : https://nicolascoolman.webs.com/
~ Tradução pelo utilizador
~ Estatuto da versão : 
~  Lista Branca : Desativado pelo Utilizador
~ Elevação dos Privilégios : OK
~ Controle de Conta de Utilizador : Activate by user


---\ Navegadores Internet
MSIE: Internet Explorer v11.0.9600.16659
GCIE: Google Chrome v25.0.1364.160 (Defaut)

---\ Informações sobre os produtos Windows
~ Langage: Portugais
Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK

---\ Softwares de proteçao do sistema
avast! Free Antivirus v9.0.2018
Windows Defender W7

---\ Softwares d'optimização do sistema
CCleaner v4.13

---\ Softwares de partilha do PeerToPeer (P2P)
eMule Plus 1.2e

---\ Monitoramento dos softwares
Adobe Flash Player 13 ActiveX
Adobe Reader XI

---\ Informações sobre o sistema
~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 6125 MB (64% free)
System Restore: Activé (Enable)
System drive C: has 159 GB (68%) free of 232 GB

---\ Modo de conexão ao sistema
~ Computer Name: KEMAR93-TOSH
~ User Name: kemar 93
~ All Users Names: kemar 93, HomeGroupUser$, Convidado, ASPNET, Administrador, 
~ Unselected Option: None
Logged in as Administrator

---\ As variáveis de ambiente
~ System Unit : C:\
~ %AppZHP% : C:\Users\kemar 93\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\kemar 93\AppData\Roaming\
~ %Desktop% : C:\Users\kemar 93\Desktop\
~ %Favorites% : C:\Users\kemar 93\Favorites\
~ %LocalAppData% : C:\Users\kemar 93\AppData\Local\
~ %StartMenu% : C:\Users\kemar 93\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\ Enumeração das unidades dos discos
C: Hard drive, Flash drive, Thumb drive (Free 159 Go of 232 Go)
D: Hard drive, Flash drive, Thumb drive (Free 169 Go of 233 Go)
E: CD-ROM drive (Not Inserted)
F: Hard drive, Flash drive, Thumb drive (Free 101 Go of 930 Go)



---\ Estado do Centro de Segurança do Windows
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  OK
~ Security Center: 49 Scanned in 00mn 00s



---\ Pesquisa particular de ficheiros genéricos
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorador do Windows.) (.25-02-2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Aplicação de Arranque do Windows.) (.14-07-2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.DF79CE9B950C62677D232154E93A81C7] - (.Microsoft Corporation - Extensões da Internet para Win32.) (.01-03-2014 - 04:10:28.) -- C:\Windows\System32\wininet.dll [2334208]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Aplicação de início de sessão do Windows.) (.20-11-2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Biblioteca de Licenciamento de Software.) (.20-11-2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.79059559E89D06E8B80CE2944BE20228] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28-09-2013 - 02:09:10.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14-07-2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14-07-2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20-11-2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20-11-2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20-11-2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Controlador de porta i8042.) (.14-07-2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14-07-2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27-04-2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20-11-2010 - 10:23:20.) -- C:\Windows\system32\Drivers
etBT.sys [261632]
[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Controlador de Sistema de Ficheiros NT.) (.24-01-2014 - 03:37:55.) -- C:\Windows\system32\Drivers
tfs.sys [1684928]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Controlador de porta paralela.) (.14-07-2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20-11-2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14-07-2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20-11-2010 - 10:21:56.) -- C:\Windows\system32\Drivers	dx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Controlador de cópia sombra do volume.) (.20-11-2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes:  Scanned in 00mn 00s



---\ Estatuto dos ficheiros ocultos (Oculto/Total)
~ Mes images (My Pictures) : 2/82
~ Mes musiques (My Musics) : 1/109
~ Mes Videos (My Videos) : 2/4
~ Mes Favoris (My Favorites) : 1/3
~ Mes Documents (My Documents) : 1/29
~ Mon Bureau (My Desktop) : 1/11
~ Menu demarrer (Programs) : 1/59
~ Hidden Files:  Scanned in 00mn 00s



---\ Processos lançados
[MD5.2372C05A27E888D256B5EE6C656E2F0D] - (.TOSHIBA CORPORATION. - No Comment.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe   [2475384] [PID.4776]
[MD5.90A3525C7399B7784D28F99EA1A51C4C] - (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe   [673616] [PID.4784]
[MD5.79C28DDF889C26FDD6162F796FD49BC4] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe   [152392] [PID.4824]
[MD5.3E364978E4C74D3BCEA29FB41743CB5A] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe   [3873704] [PID.4844]
[MD5.3A3BEA53F039CE2E997A918E26E30B1D] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\IEXPLORE.exe   [808152] [PID.6616]
[MD5.1780A53FCE5975B94604775CD9460F22] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [7865344] [PID.7128]
~ Processes Running:  Scanned in 00mn 00s



---\ Opera, Plugins,Arranque,Pesquisa (P1,B0,B1)
B0 - SPO: operaprefs.ini [kemar 93] Home URL=http://www.google.com/
B1 - OSP: search.ini [kemar 93] URL=http://www.google.com/
~ Opera Browser: 2 Scanned in 00mn 00s



---\ Google Chrome, Arranque,Pesquisa,Extensões (G0,G1,G2)
C:\Users\kemar 93\AppData\Local\Google\Chrome\User Data\Default\Preferences
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Chrome Web Store v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Docs v.0.0.0.6 (Activé)
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Drive v.6.2 (Activé)
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] YouTube v.4.2.5 (Activé)
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Pesquisa do Google v.0.0.0.19 (Activé)
G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [nikpibnbobmbdbheedjfogjlikpgpnhp] DVDVideoSoft Browser Extension v.1.2.3.3, (Désactivé)
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Gmail v.7 (Activé)

---\ Pasta de extensão do Google Chrome
G2 - EXT: C:\Users\kemar 93\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [Docs]
G2 - EXT: C:\Users\kemar 93\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [Google Drive]
G2 - EXT: C:\Users\kemar 93\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [YouTube]
G2 - EXT: C:\Users\kemar 93\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [Pesquisa do Google]
G2 - EXT: C:\Users\kemar 93\AppData\Local\Google\Chrome\User Data\Default\Extensions
ikpibnbobmbdbheedjfogjlikpgpnhp [DVDVideoSoft Browser Extension]
G2 - EXT: C:\Users\kemar 93\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [Gmail]
~ Google Lines Browser: 16 Scanned in 00mn 00s



---\ Mozilla Firefox, Plugins,Arranque,Pesquisa,Extensões (P2,M0,M1,M2,M3)
C:\Users\kemar 93\AppData\Roaming\Mozilla\Firefox\Profiles\ib265xbz.default\prefs.js
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.03.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins
ppdf32.dll
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=11.5.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Java\jre8\bin\dtplugin
pDeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=11.5.2] - (.Oracle Corporation - Next Generation Java Plug-in 11.5.2 for Mozilla browsers.) -- C:\Program Files\Java\jre8\bin\plugin2
pjp2.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.30214.0.) -- C:\Program Files\Microsoft Silverlight\5.1.30214.0
pctrl.dll
P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (.Skype Limited - Facebook Video Calling Plugin.) -- C:\Users\kemar 93\AppData\Local\Facebook\Video\Skype
pFacebookVideoCalling.dll
P2 - FPN: [HKCU] [vitzo.com/VDownloader] - (...) -- C:\Program Files (x86)\VDownloader\Addons
pVDownloader.dll (.not file.)
~ Firefox Browser: 7 Scanned in 00mn 00s



---\ Internet Explorer, Arranque, Pesquisa, URLSearchHook( gancho de URL), Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.com/?gws_rd=ssl
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.com/?gws_rd=ssl
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?gws_rd=ssl
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.com/?gws_rd=ssl
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.com/?gws_rd=ssl
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = https://www.google.com/?gws_rd=ssl
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.google.com/?gws_rd=ssl
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = https://www.google.com/?gws_rd=ssl
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.com/?gws_rd=ssl
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.com/?gws_rd=ssl
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Browser.) (11.00.9600.16428 (winblue_gdr.131013-1700)) -- C:\Windows\SysWOW64\ieframe.dll
R3 - URLSearchHook: SiteFinder [64Bits] - {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D} . (...) (No version) -- C:\Program Files (x86)\SiteFinder\SiteFinder.dll  =>Adware.ShoppingReport
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ IE Browser: 25 Scanned in 00mn 00s



---\ Internet Explorer, Gestão do Proxy (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management:  Scanned in 00mn 00s



---\ Análise das linhas F0, F1, F2, F3 - Ficheiros ini, Carregamento Automático de programas
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys:  Scanned in 00mn 00s



---\ Redireção do ficheiro Hosts (01)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File:  Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 0



---\ Browser Helper Objects do navegador (02)
O2 - BHO: IEExtension.VDownloaderBHO [64Bits] - {7b523e7c-f096-4e36-a0cb-7efeb5c675c1} . (...) -- mscoree.dll (.not file.)
O2 - BHO: avast! Online Security [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Programa Auxiliar de Início de Sessão da conta Microsoft [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll  =>Toolbar.Google
O2 - BHO: ChromeFrame BHO [64Bits] - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} . (.Google Inc. - Chrome Frame renders the Web of the future.) -- C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107
pchrome_frame.dll
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} Chave orfã
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} Chave orfã
~ BHO: 10 Scanned in 00mn 00s



---\ Barras do Internet Explorer (03))
O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll  =>Toolbar.Google
~ Toolbar:  Scanned in 00mn 00s



---\ Outras conexões do utilizador (04)
O4 - GS\QuickLaunch [kemar 93]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.)  -- C:\Users\kemar 93\AppData\Roaming\uTorrent\uTorrent.exe   =>P2P.BitTorrent
O4 - GS\Desktop [kemar 93]: eMule Plus.lnk . (.http://emuleplus.info - eMule Plus.)  -- C:\Program Files (x86)\eMule\eMule.exe   =>P2P.BitTorrent
O4 - GS\Desktop [kemar 93]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.)  -- C:\Users\kemar 93\AppData\Roaming\uTorrent\uTorrent.exe   =>P2P.BitTorrent
~ Global Startup: 3 Scanned in 00mn 01s



---\ Aplicações iniciadas por registo & pastas (04)
O4 - HKLM\..\Run: [TosNC] C:\Program Files (x86)\Toshiba\BulletinBoard\TosNcCore.exe (.not file.) 
O4 - HKLM\..\Run: [TosReelTimeMonitor] C:\Program Files (x86)\TOSHIBA\ReelTime\TosReelTimeMonitor.exe (.not file.) 
O4 - HKLM\..\Run: [Toshiba TEMPRO] . (.Toshiba Europe GmbH - Toshiba TEMPRO.) -- C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe   =>.Toshiba Corporation
O4 - HKLM\..\Run: [TPwrMain] . (.TOSHIBA Corporation - TOSHIBA Power Saver.) -- C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe 
O4 - HKLM\..\Run: [HSON] . (.TOSHIBA Corporation - HotStartOn.) -- C:\Program Files\TOSHIBA\TBS\HSON.exe 
O4 - HKLM\..\Run: [TCrdMain] . (.TOSHIBA Corporation - TOSHIBA Flash Cards Main Module.) -- C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe 
O4 - HKLM\..\Run: [SmartAudio] . (.Conexant systems, Inc. - SmartAudio Control Panel application.) -- C:\Program Files\CONEXANT\SAII\SAIICpl.exe 
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.) 
O4 - HKLM\..\Run: [Teco] . (.TOSHIBA Corporation - TOSHIBA eco Utility.) -- C:\Program Files\TOSHIBA\TECO\Teco.exe   =>.Toshiba Corporation
O4 - HKLM\..\Run: [TosSENotify] . (.TOSHIBA Corporation - No Comment.) -- C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe 
O4 - HKLM\..\Run: [TosWaitSrv] . (.TOSHIBA Corporation - No Comment.) -- C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe 
O4 - HKLM\..\Run: [TosVolRegulator] . (.TOSHIBA Corporation -  Toshiba Volume Regulator.) -- C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe   =>.Toshiba Corporation
O4 - HKLM\..\Run: [Toshiba Registration] . (.Toshiba Europe GmbH - Toshiba Notebook Registration Reminder.) -- C:\Program Files\Toshiba\Registration\ToshibaReminder.exe 
O4 - HKCU\..\Run: [FileHunter Check for updates] C:\Users\kemar 93\AppData\Roaming\FileHunter\update.exe (.not file.) 
O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe 
O4 - HKCU\..\Run: [Xvid] . (...) -- C:\Program Files (x86)\Xvid\CheckUpdate.exe 
O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Instalador do Facebook.) -- C:\Users\kemar 93\AppData\Local\Facebook\Update\FacebookUpdate.exe 
O4 - HKCU\..\Run: [EPSON SX210 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.exe   =>.Epson Seiko Corporation
O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\kemar 93\AppData\Roaming\uTorrent\uTorrent.exe   =>P2P.BitTorrent
O4 - HKLM\..\Wow6432Node\Run: [NBAgent] . (.Nero AG - Nero BackItUp.) -- c:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe 
O4 - HKLM\..\Wow6432Node\Run: [TSleepSrv] . (.TOSHIBA - TOSHIBA Sleep Service.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe 
O4 - HKLM\..\Wow6432Node\Run: [ToshibaServiceStation] . (.TOSHIBA Corporation - TOSHIBA Service Station.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe   =>.Toshiba Corporation
O4 - HKLM\..\Wow6432Node\Run: [TWebCamera] . (.TOSHIBA CORPORATION. - No Comment.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe 
O4 - HKLM\..\Wow6432Node\Run: [EEventManager] . (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe 
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe 
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe   =>.Adobe Systems Incorporated
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe 
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe 
O4 - HKLM\..\Wow6432Node\RunOnce: [20131224] . (.AVAST Software - avast! Emergency Update.) -- C:\Program Files\AVAST Software\Avast\setup\emupdate\e1c46690-df2e-4565-bd78-f7c181f0d36f.exe 
O4 - HKUS\.DEFAULT\..\Run: [TOPI.EXE] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information	opi.exe   =>.Toshiba Corporation
O4 - HKUS\S-1-5-18\..\Run: [TOPI.EXE] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information	opi.exe   =>.Toshiba Corporation
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Miniaplicações de Ambiente de Trabalho do W.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-19\..\Run: [TOPI.EXE] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information	opi.exe   =>.Toshiba Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Miniaplicações de Ambiente de Trabalho do W.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-20\..\Run: [TOPI.EXE] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information	opi.exe   =>.Toshiba Corporation
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] . (.Microsoft Corporation - SP Reviewer.) -- C:\Windows\System32\SPReview\SPReview.exe   =>.Microsoft Corporation
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] . (.Microsoft Corporation - SP Reviewer.) -- C:\Windows\System32\SPReview\SPReview.exe   =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe   =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe   =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-2710441035-953502237-1873598412-1001\..\Run: [FileHunter Check for updates] C:\Users\kemar 93\AppData\Roaming\FileHunter\update.exe (.not file.) 
O4 - HKUS\S-1-5-21-2710441035-953502237-1873598412-1001\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe 
O4 - HKUS\S-1-5-21-2710441035-953502237-1873598412-1001\..\Run: [Xvid] . (...) -- C:\Program Files (x86)\Xvid\CheckUpdate.exe 
O4 - HKUS\S-1-5-21-2710441035-953502237-1873598412-1001\..\Run: [Facebook Update] . (.Facebook Inc. - Instalador do Facebook.) -- C:\Users\kemar 93\AppData\Local\Facebook\Update\FacebookUpdate.exe 
O4 - HKUS\S-1-5-21-2710441035-953502237-1873598412-1001\..\Run: [EPSON SX210 Series] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.exe   =>.Epson Seiko Corporation
O4 - HKUS\S-1-5-21-2710441035-953502237-1873598412-1001\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\kemar 93\AppData\Roaming\uTorrent\uTorrent.exe   =>P2P.BitTorrent
~ Application:  Scanned in 00mn 00s



---\ Icones das opções IE invisiveis no painel das configurações (05)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s



---\ Boutões da barra de ferramentas principal do Internet Explorer (09)
O9 - Extra button: @C:\Program Files\TOSHIBA\BulletinBoard\TosNcUi.dll,-228 [64Bits] - {97F922BD-8563-4184-87EE-8C4ACA438823} . (...) -- C:\Program Files\TOSHIBA\BulletinBoard\images\pin.ico
O9 - Extra button: Free YouTube Download [64Bits] - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} . (...) -- C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\dvdvideosoft.ico
~ IE Extra Buttons:  Scanned in 00mn 00s



---\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fornecedor de Correcções de Compatibilidade de Nomenclatura de Correio El.) -- C:\Windows\system32
apinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fornecedor de Espaço de Nomes PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fornecedor de Espaço de Nomes PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fornecedor de serviços de Microsoft Windows Sockets 2.0.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll  =>.Microsoft Corporation
O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll  =>.Microsoft Corporation
~ Winsock: 9 Scanned in 00mn 00s



---\ Alteração Dominio/Clientes DNS (017)
O17 - HKLM\System\CCS\Services\Tcpip\..\{8F5107D5-66B8-4EDB-BF83-45F75578D275}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{8F5107D5-66B8-4EDB-BF83-45F75578D275}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{8F5107D5-66B8-4EDB-BF83-45F75578D275}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain:  Scanned in 00mn 00s



---\ Protocolo adicional (018)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- 
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll  =>.Microsoft Corporation
~ Protocole Additionnel:  Scanned in 00mn 00s



---\ Chave do Registo autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s



---\ Lista dos serviços NT não Microsoft e não desativados (023)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - YSLoader.exe.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Serviço de Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ConfigFree WiMAX Service (cfWiMAXService) . (.TOSHIBA CORPORATION - ConfigFree Service Process.) - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe
O23 - Service: ConfigFree Service (ConfigFree Service) . (.TOSHIBA CORPORATION - ConfigFree Service Process.) - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Serviço Google Update (gupdate) (gupdate) . (.Google Inc. - Instalador do Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: c:\Program Files (x86)\Nero\Update\NASvc.exe (NAUpdate) . (.Nero AG - NeroUpdate.) - c:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 301.4.) - C:\Windows\system32
vvsvc.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) . (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision
vSCPAPISvr.exe
O23 - Service: Notebook Performance Tuning Service (TEMPRO) (TemproMonitoringService) . (.Toshiba Europe GmbH - Toshiba TEMPRO.) - C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe  =>.Toshiba Corporation
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) . (.TOSHIBA Corporation - TDCSrv Application.) - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) . (.TOSHIBA Corporation - TOSHIBA Power Saver.) - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA eco Utility Service (TOSHIBA eco Utility Service) . (.TOSHIBA Corporation - TOSHIBA eco Utility Service.) - C:\Program Files\TOSHIBA\TECO\TecoService.exe  =>.Toshiba Corporation
O23 - Service: Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
~ Services: 17 Scanned in 00mn 04s



---\ Enumeração Ativa do Ambiente de trabalho & Editor MHTML (024)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s



---\ Listagem dos dados do BootExecute (Bex) (034)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s



---\ Tarefas planificadas automaticamente (039)
[MD5.C2CE3311D2477B1B24CFB67020AD49B6] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe   [257712]
[MD5.9E76CDD50C3DDDB739150D778EEC0B93] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe   [804304]
[MD5.00000000000000000000000000000000] [APT] [CCleanerSkipUAC] (...) -- C:\Program Files\CCleaner\CCleaner.exe (.not file.)   [0]
[MD5.97A1AFD42B8016D132C7BF38C955C6E1] [APT] [ConfigFree Startup Programs] (.TOSHIBA CORPORATION.) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe   [304560]
[MD5.E7FAF17B920ACCE36C191B9151B10AB4] [APT] [Epson Printer Software Downloader] (.SEIKO EPSON CORPORATION.) -- C:\Program Files (x86)\EPSON\EPAPDL\E_SAPDL2.exe   [395160]
[MD5.8265D200217AB15E5A917290CBF003E0] [APT] [Fifth] (...) -- C:\Users\kemar 93\AppData\Roaming\Fifth\Fifth.exe   [604080]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe   [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe   [116648]
[MD5.048EA4B978851788E9F5E8E4F081DF7A] [APT] [Programme de mise ... jour en ligne de Adobe] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe   [959904]
[MD5.00000000000000000000000000000000] [APT] [RealPlayerRealUpgradeLogonTaskS-1-5-21-2710441035-953502237-1873598412-1001] (...) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe (.not file.)   [0]
[MD5.00000000000000000000000000000000] [APT] [RealPlayerRealUpgradeScheduledTaskS-1-5-21-2710441035-953502237-1873598412-1001] (...) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe (.not file.)   [0]
[MD5.00000000000000000000000000000000] [APT] [{0027E2C5-C308-4B49-B7FB-5B9894DE4FD9}] (...) -- C:\Program Files (x86)\VideoLAN\VLC\vlc.exe (.not file.)   [0]
[MD5.00000000000000000000000000000000] [APT] [{6313AF51-0693-4AA0-AD8C-A262407F7B33}] (...) -- C:\Program Files (x86)\VideoLAN\VLC\vlc.exe (.not file.)   [0]
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe   [561984]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job   [830]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater   [830]
O39 - APT: Epson Printer Software Downloader - (.SEIKO EPSON CORPORATION.) -- C:\Windows\Tasks\Epson Printer Software Downloader.job   [258]
O39 - APT: Epson Printer Software Downloader - (.SEIKO EPSON CORPORATION.) -- C:\Windows\System32\Tasks\Epson Printer Software Downloader   [258]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job   [1008]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore   [1008]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job   [1012]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA   [1012]
~ Scheduled Task: 21 Scanned in 00mn 01s



---\ Componentes instalados (ActiveSetup Installed Components) (040)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Recursos do Windows Media Player.) -- C:\Windows\System32\wmploc.dll  =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll  =>.Microsoft Corporation
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API de tema do Windows.) -- C:\Windows\System32	hemeui.dll
O40 - ASIC: Internet Explorer [64Bits] - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Processador de comandos do Windows.) -- C:\Windows\system32\cmd.exe
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe  =>.Microsoft Corporation
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extensão da shell da pasta de FTP do Microsoft Internet Explore.) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Recursos do Windows Media Player.) -- C:\Windows\System32\wmploc.dll  =>.Microsoft Corporation
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL comum da shell do Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitário de Inicialização por utilizador do IE.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Active Setup: 10 Scanned in 00mn 00s



---\ Drivers lançados ao arranque do sistema (041)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver:  (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\drivers\aswRdr2.sys
O41 - Driver:  (aswSnx) . (.AVAST Software - avast! Virtualization Driver.) - C:\Windows\system32\drivers\aswSnx.sys
O41 - Driver:  (aswSP) . (.AVAST Software - avast! self protection module.) - C:\Windows\system32\drivers\aswSP.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys
O41 - Driver:  (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver:  (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS
etbios.sys
O41 - Driver: C:\Windows\System32\drivers
etbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS
etbt.sys
O41 - Driver: C:\Windows\System32\drivers
siproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers
siproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Agendador de pacotes QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Controlador de Subsistema de Colocação em M.) - C:\Windows\System32\DRIVERSdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\driversdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\driversdprefmp.sys
O41 - Driver: C:\Windows\System32	cpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS	dx.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers	ermdd.sys
O41 - Driver:  (Tosrfcom) . (.TOSHIBA Corporation - Bluetooth RFCOMM Driver.) - C:\Windows\System32\Drivers	osrfcom.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver:  (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32ascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver:  (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
O41 - Driver:  (nvport) . (. - .) - C:\Windows\system32\Drivers
vport.sys (.not file.)
~ Drivers: 73 Scanned in 00mn 00s



---\ Software instalados (042)
O42 - Logiciel: Adobe Flash Player 13 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Reader XI (11.0.06) - Português - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1046-7B44-AB0000000001}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {787136D2-F0F8-4625-AA3F-72D7795AC842}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}  =>.Apple Inc
O42 - Logiciel: Atheros Bluetooth Filter Driver Package - (.Atheros Communications.) [HKLM][64Bits] -- {65486209-5C54-439C-8383-8AC9BBE25932}
O42 - Logiciel: Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver - (.Atheros Communications Inc..) [HKLM][64Bits] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549}
O42 - Logiciel: Atheros Driver Installation Program - (.Atheros.) [HKLM][64Bits] -- {C3A32068-8AB1-4327-BB16-BED9C6219DC7}
O42 - Logiciel: Bluetooth Stack for Windows by Toshiba - (.TOSHIBA CORPORATION.) [HKLM][64Bits] -- {CEBB6BFB-D708-4F99-A633-BC2600E01EF6}
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner
O42 - Logiciel: CVitae - (...) [HKCU][64Bits] -- CVitae
O42 - Logiciel: Conexant HD Audio - (.Conexant.) [HKLM][64Bits] -- CNXT_AUDIO_HDA
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: Desinstalar Impressora EPSON SX210 Series - (.SEIKO EPSON Corporation.) [HKLM][64Bits] -- EPSON SX210 Series
O42 - Logiciel: EPSON Scan - (...) [HKLM][64Bits] -- EPSON Scanner
O42 - Logiciel: Epson Easy Photo Print 2 - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {87C2248A-C7DD-49ED-9BCD-B312A9D0819E}
O42 - Logiciel: Epson Event Manager - (.SEIKO EPSON Corporation.) [HKLM][64Bits] -- {48F22622-1CC2-4A83-9C1E-644DD96F832D}
O42 - Logiciel: Epson Printer Software Downloader - (...) [HKLM][64Bits] -- Epson Printer Software Downloader
O42 - Logiciel: Epson Printer Software Downloader - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {B6A98E5F-D6A7-46FB-9E9D-1F7BF4434001}
O42 - Logiciel: Epson Stylus SX210_SX410_TX210_TX410 Manual - (...) [HKLM][64Bits] -- Epson Stylus SX210_SX410_TX210_TX410 Guia do Utilizador
O42 - Logiciel: FL Studio 8 - (.Image-Line bvba.) [HKLM][64Bits] -- FL Studio 8
O42 - Logiciel: Facebook Video Calling 2.0.0.447 - (.Skype Limited.) [HKLM][64Bits] -- {8DF41A9F-FE13-43E8-A003-5F9B55A011EE}
O42 - Logiciel: FileHippo.com Update Checker - (...) [HKLM][64Bits] -- FileHippo.com
O42 - Logiciel: FormatFactory 3.0.1 - (.Free Time.) [HKLM][64Bits] -- FormatFactory
O42 - Logiciel: Foto?raf Galerisi - (.Microsoft Corporation.) [HKLM][64Bits] -- {B743ABDD-E681-4B32-A33E-6E7F3F845AEA}
O42 - Logiciel: Free YouTube Download version 3.2.17.1125 - (.DVDVideoSoft Ltd..) [HKLM][64Bits] -- Free YouTube Download_is1
O42 - Logiciel: Galeria de Fotografias - (.Microsoft Corporation.) [HKLM][64Bits] -- {23079EF2-2617-4BFC-BDFF-E6AE8D79B734}
O42 - Logiciel: Galerie de photos - (.Microsoft Corporation.) [HKLM][64Bits] -- {439B34FF-F74E-4807-B5E2-4B758551DA6B}
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Google Chrome Frame - (.Google, Inc..) [HKLM][64Bits] -- {8618AE04-1210-3C32-A8C3-45A5E44CD340}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}  =>Toolbar.Google
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}  =>Toolbar.Google
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: High-Definition Video Playback - (.Nero AG.) [HKLM][64Bits] -- {237CCB62-8454-43E3-B158-3ACD0134852E}
O42 - Logiciel: IL Download Manager - (.Image-Line bvba.) [HKLM][64Bits] -- IL Download Manager
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC}
O42 - Logiciel: Java 8 Update 5 (64-bit) - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F86418005FF}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {0BE9E708-5DC0-4963-9CFD-0AA519090E79}
O42 - Logiciel: Linkury Smartbar Engine - (.Linkury Inc..) [HKCU][64Bits] -- {e5044e81-d4d6-4378-b68c-6182cf460127}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSVCRT110 - (.Microsoft.) [HKLM][64Bits] -- {8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}
O42 - Logiciel: MSVCRT110_amd64 - (.Microsoft.) [HKLM][64Bits] -- {E9FA781F-3E80-4399-825A-AD3E11C28C77}
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Microsoft OneDrive - (.Microsoft Corporation.) [HKCU][64Bits] -- OneDriveSetup.exe
O42 - Logiciel: Microsoft Primary Interoperability Assemblies 2005 - (.Microsoft Corporation.) [HKLM][64Bits] -- {2C303EE0-A595-3543-A71A-931C7AC40EDE}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: NVIDIA Controlador gráfico 301.42 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver
O42 - Logiciel: NVIDIA Media Center Extensions - (...) [HKLM][64Bits] -- {4BE15737-07C5-4705-9DFC-D9D533939942}
O42 - Logiciel: NVIDIA O controlador de 3D Vision 301.42 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision
O42 - Logiciel: NVIDIA O controlador de HD Audio 1.3.16.0 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM][64Bits] -- {64467D47-FFE4-4FBC-ABBA-A0DB829A17EB}
O42 - Logiciel: NVIDIA PureVideo Decoder - (...) [HKLM][64Bits] -- {055FEF8E-4B86-400F-A5C6-8FAC0042DCD9}
O42 - Logiciel: NVIDIA Stereoscopic 3D Driver - (.NVIDIA Corporation.) [HKLM][64Bits] -- NVIDIAStereo
O42 - Logiciel: Nero 10 Movie ThemePack Basic - (.Nero AG.) [HKLM][64Bits] -- {F5CB822F-B365-43D1-BCC0-4FDA1A2017A7}
O42 - Logiciel: Nero BackItUp 10 - (.Nero AG.) [HKLM][64Bits] -- {68AB6930-5BFF-4FF6-923B-516A91984FE6}
O42 - Logiciel: Nero BackItUp 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {08C8666B-C502-4AB3-B4CB-D74AC42D14FE}
O42 - Logiciel: Nero BurnRights 10 - (.Nero AG.) [HKLM][64Bits] -- {943CFD7D-5336-47AF-9418-E02473A5A517}
O42 - Logiciel: Nero BurnRights 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {555868C6-49FB-484F-BB43-8980651A1B00}
O42 - Logiciel: Nero Control Center 10 - (.Nero AG.) [HKLM][64Bits] -- {6DFB899F-17A2-48F0-A533-ED8D6866CF38}
O42 - Logiciel: Nero ControlCenter 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {523B2B1B-D8DB-4B41-90FF-C4D799E2758A}
O42 - Logiciel: Nero Core Components 10 - (.Nero AG.) [HKLM][64Bits] -- {2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}
O42 - Logiciel: Nero Express 10 - (.Nero AG.) [HKLM][64Bits] -- {70550193-1C22-445C-8FA4-564E155DB1A7}
O42 - Logiciel: Nero Express 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {33643918-7957-4839-92C7-EA96CB621A98}
O42 - Logiciel: Nero InfoTool 10 - (.Nero AG.) [HKLM][64Bits] -- {F412B4AF-388C-4FF5-9B2F-33DB1C536953}
O42 - Logiciel: Nero InfoTool 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {66049135-9659-4AAD-9169-9CCA269EBB3E}
O42 - Logiciel: Nero MediaHub 10 - (.Nero AG.) [HKLM][64Bits] -- {1F7FB68F-52F6-46A3-B42F-38CE46295AE5}
O42 - Logiciel: Nero MediaHub 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {F467862A-D9CA-47ED-8D81-B4B3C9399272}
O42 - Logiciel: Nero Multimedia Suite 10 Essentials - (.Nero AG.) [HKLM][64Bits] -- {0FF68F26-416C-4954-ACA5-6AD5F9DE99C1}
O42 - Logiciel: Nero RescueAgent 10 - (.Nero AG.) [HKLM][64Bits] -- {E337E787-CF61-4B7B-B84F-509202A54023}
O42 - Logiciel: Nero RescueAgent 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {92E25238-61A3-4ACD-A407-3C480EEF47A7}
O42 - Logiciel: Nero StartSmart 10 - (.Nero AG.) [HKLM][64Bits] -- {F61D489E-6C44-49AC-AD02-7DA8ACA73A65}
O42 - Logiciel: Nero StartSmart 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {F6117F9C-ADB5-4590-9BE4-12C7BEC28702}
O42 - Logiciel: Nero Update - (.Nero AG.) [HKLM][64Bits] -- {65BB0407-4CC8-4DC7-952E-3EEFDF05602A}
O42 - Logiciel: Photo Service - powered by myphotobook - (.myphotobook GmbH.) [HKLM][64Bits] -- eu.myphotobook.001F9DF2D0BAABEB11F42CCEE43224607B61109C.1
O42 - Logiciel: Photo Service - powered by myphotobook - (.myphotobook GmbH.) [HKLM][64Bits] -- {3D047C6C-19EE-46E3-C14B-9FA84260DF9B}
O42 - Logiciel: PlayReady PC Runtime amd64 - (.Microsoft Corporation.) [HKLM][64Bits] -- {BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}
O42 - Logiciel: PoiZone - (.Image-Line bvba.) [HKLM][64Bits] -- PoiZone
O42 - Logiciel: Realtek USB 2.0 Reader Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {62BBB2F0-E220-4821-A564-730807D2C34D}
O42 - Logiciel: Renesas Electronics USB 3.0 Host Controller Driver - (.Renesas Electronics Corporation.) [HKLM][64Bits] -- InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}
O42 - Logiciel: Renesas Electronics USB 3.0 Host Controller Driver - (.Renesas Electronics Corporation.) [HKLM][64Bits] -- {5442DAB8-7177-49E1-8B22-09A049EA5996}
O42 - Logiciel: Skype(TM) 6.14 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}
O42 - Logiciel: Suporte para Aplicações Apple - (.Apple Inc..) [HKLM][64Bits] -- {AAC5D43E-816D-4C2D-8E51-55FFF35BE301}
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey
O42 - Logiciel: TOSHIBA Assist - (.TOSHIBA CORPORATION.) [HKLM][64Bits] -- {C2A276E3-154E-44DC-AAF1-FFDD7FD30E35}
O42 - Logiciel: TOSHIBA Bulletin Board - (.TOSHIBA Corporation.) [HKLM][64Bits] -- InstallShield_{229C190B-7690-40B7-8680-42530179F3E9}
O42 - Logiciel: TOSHIBA Bulletin Board - (.TOSHIBA Corporation.) [HKLM][64Bits] -- {229C190B-7690-40B7-8680-42530179F3E9}
O42 - Logiciel: TOSHIBA ConfigFree - (.TOSHIBA CORPORATION.) [HKLM][64Bits] -- {F52618B2-A995-4F8D-A6C8-9E235A470C68}
O42 - Logiciel: TOSHIBA Disc Creator - (.TOSHIBA Corporation.) [HKLM][64Bits] -- {5DA0E02F-970B-424B-BF41-513A5018E4C0}  =>.Toshiba Corporation
O42 - Logiciel: TOSHIBA Face Recognition - (.TOSHIBA Corporation.) [HKLM][64Bits] -- InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}
O42 - Logiciel: TOSHIBA Face Recognition - (.TOSHIBA Corporation.) [HKLM][64Bits] -- {F67FA545-D8E5-4209-86B1-AEE045D1003F}
O42 - Logiciel: TOSHIBA HDD/SSD Alert - (.TOSHIBA Corporation.) [HKLM][64Bits] -- InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}
O42 - Logiciel: TOSHIBA HDD/SSD Alert - (.TOSHIBA Corporation.) [HKLM][64Bits] -- {D4322448-B6AF-4316-B859-D8A0E84DCB38}
O42 - Logiciel: TOSHIBA Hardware Setup - (...) [HKLM][64Bits] -- InstallShield_{C4FFA951-9678-4D51-84B4-AFD15D3C45AD}
O42 - Logiciel: TOSHIBA Online Product Information - (.TOSHIBA.) [HKLM][64Bits] -- {2290A680-4083-410A-ADCC-7092C67FC052}  =>.Toshiba Corporation
O42 - Logiciel: TOSHIBA PC Health Monitor - (.TOSHIBA Corporation.) [HKLM][64Bits] -- {9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}
O42 - Logiciel: TOSHIBA Recovery Media Creator - (.TOSHIBA CORPORATION.) [HKLM][64Bits] -- {B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}
O42 - Logiciel: TOSHIBA Recovery Media Creator Reminder - (.TOSHIBA.) [HKLM][64Bits] -- InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}
O42 - Logiciel: TOSHIBA ReelTime - (.TOSHIBA Corporation.) [HKLM][64Bits] -- InstallShield_{24811C12-F4A9-4D0F-8494-A7B8FE46123C}
O42 - Logiciel: TOSHIBA ReelTime - (.TOSHIBA Corporation.) [HKLM][64Bits] -- {24811C12-F4A9-4D0F-8494-A7B8FE46123C}
O42 - Logiciel: TOSHIBA Service Station - (.TOSHIBA.) [HKLM][64Bits] -- {AC6569FA-6919-442A-8552-073BE69E247A}  =>.Toshiba Corporation
O42 - Logiciel: TOSHIBA Sleep Utility - (.TOSHIBA Corporation.) [HKLM][64Bits] -- {654F7484-88C5-46DC-AB32-C66BCB0E2102}
O42 - Logiciel: TOSHIBA Supervisor Password - (...) [HKLM][64Bits] -- InstallShield_{CBD6B23D-41D5-4A46-8019-6208516C9712}
O42 - Logiciel: TOSHIBA TEMPRO - (.Toshiba Europe GmbH.) [HKLM][64Bits] -- {F082CB11-4794-4259-99A1-D91BA762AD15}  =>.Toshiba Corporation
O42 - Logiciel: TOSHIBA Value Added Package - (.TOSHIBA Corporation.) [HKLM][64Bits] -- InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}
O42 - Logiciel: TOSHIBA Web Camera Application - (.TOSHIBA Corporation.) [HKLM][64Bits] -- InstallShield_{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}
O42 - Logiciel: TOSHIBA Web Camera Application - (.TOSHIBA Corporation.) [HKLM][64Bits] -- {6F3C8901-EBD3-470D-87F8-AC210F6E5E02}
O42 - Logiciel: TOSHIBA eco Utility - (.TOSHIBA Corporation.) [HKLM][64Bits] -- InstallShield_{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}  =>.Toshiba Corporation
O42 - Logiciel: TOSHIBA eco Utility - (.TOSHIBA Corporation.) [HKLM][64Bits] -- {B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}  =>.Toshiba Corporation
O42 - Logiciel: TRORMCLauncher - (...) [HKLM][64Bits] -- InstallShield_{E65C7D8E-186D-484B-BEA8-DEF0331CE600}
O42 - Logiciel: The KMPlayer (remove only) - (.PandoraTV.) [HKLM][64Bits] -- The KMPlayer
O42 - Logiciel: Toshiba Manuals - (.TOSHIBA.) [HKLM][64Bits] -- {90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}
O42 - Logiciel: Toxic Biohazard - (.Image-Line bvba.) [HKLM][64Bits] -- Toxic Biohazard
O42 - Logiciel: TuneUp Utilities 2014 - (.TuneUp Software.) [HKLM][64Bits] -- TuneUp Utilities 2014
O42 - Logiciel: VLC media player 2.1.3 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player  =>.VideoLAN
O42 - Logiciel: WinPcap 4.1.2 - (.CACE Technologies.) [HKLM][64Bits] -- WinPcapInst
O42 - Logiciel: WinRAR 5.10 beta 3 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: Wireless Audio Device Manager - (.Philips.) [HKLM][64Bits] -- {33565C22-2E44-4B36-9147-23912E838F81}
O42 - Logiciel: Xvid Video Codec - (.Xvid Team.) [HKLM][64Bits] -- Xvid Video Codec 1.3.1
O42 - Logiciel: avast! Free Antivirus v9.0.2018 - (.Avast Software.) [HKLM][64Bits] -- avast
O42 - Logiciel: eMule Plus 1.2e - (.eMule Plus Team.) [HKLM][64Bits] -- eMule Plus_is1
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {B8BA155B-1E75-405F-9CB4-8A99615D09DC}
O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU][64Bits] -- uTorrent  =>P2P.BitTorrent
O42 - Logiciel: ???? ????? - (.Microsoft Corporation.) [HKLM][64Bits] -- {CF15F988-98D4-479F-9750-85A495BF8233}
~ Logic: 61 Scanned in 00mn 00s



---\ HKCU & HKLM Software Keys
[HKCU\Software\ABBYY]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\LastScanTime]
[HKCU\Software\AppDataLow\Software\JavaSoft]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Avast Software]
[HKCU\Software\Baixaki]
[HKCU\Software\BitTorrent]  =>P2P.BitTorrent
[HKCU\Software\BrowserTemp]
[HKCU\Software\CDDB]
[HKCU\Software\Chromium]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\DVDVideoSoft]
[HKCU\Software\EPSON]
[HKCU\Software\Facebook]
[HKCU\Software\FileHippo.com]
[HKCU\Software\FreeTime]
[HKCU\Software\Freemake]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\Google]
[HKCU\Software\GotClip Downloader]
[HKCU\Software\Haali]
[HKCU\Software\HowardMedia]
[HKCU\Software\IM Providers]
[HKCU\Software\Image-Line]
[HKCU\Software\JavaSoft]
[HKCU\Software\KMPlayer]
[HKCU\Software\Lake]
[HKCU\Software\Licenses]
[HKCU\Software\Macromedia]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\Opera Software]
[HKCU\Software\Paltalk]
[HKCU\Software\Participatory Culture Foundation]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\RealNetworks]
[HKCU\Software\SEIKO EPSON]
[HKCU\Software\SecuROM]
[HKCU\Software\SimpleNewTab]
[HKCU\Software\SkypeRS]
[HKCU\Software\Skype]
[HKCU\Software\SoftVoice]
[HKCU\Software\SoulSeek]  =>P2P.SoulSeek
[HKCU\Software\Soulseek2]  =>P2P.SoulSeek
[HKCU\Software\SuperSoftwarePackage]
[HKCU\Software\Synaptics]
[HKCU\Software\TOSHIBA]
[HKCU\Software\Trolltech]
[HKCU\Software\TuneUp]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKLM\Software\AGEIA Technologies]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Atheros]
[HKLM\Software\BitdefenderSavedSettings]
[HKLM\Software\CXT]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Cnxt_Uiu_Parms]
[HKLM\Software\Conexant]
[HKLM\Software\Cyberlink]
[HKLM\Software\DVDVideoSoft]
[HKLM\Software\EPSON]
[HKLM\Software\EnigmaSoftwareGroup]
[HKLM\Software\GEAR Software]
[HKLM\Software\IM Providers]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\Khronos]
[HKLM\Software\Macromedia]
[HKLM\Software\McAfee.com]
[HKLM\Software\McAfee]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\ODBC]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SOFTWARE]
[HKLM\Software\Sonic]
[HKLM\Software\Synaptics]
[HKLM\Software\TOSHIBA]
[HKLM\Software\Toshiba Tempro]  =>.Toshiba Corporation
[HKLM\Software\TuneUp]
[HKLM\Software\UIU]
[HKLM\Software\VideoLAN]
[HKLM\Software\WinRAR]
[HKLM\Software\Wow6432Node\ABBYY]
[HKLM\Software\Wow6432Node\AGEIA Technologies]
[HKLM\Software\Wow6432Node\AVAST Software]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\AdwCleaner]
[HKLM\Software\Wow6432Node\Apple Computer, Inc.]
[HKLM\Software\Wow6432Node\Apple Inc.]
[HKLM\Software\Wow6432Node\Atheros Communications Inc.]
[HKLM\Software

Marc.de.saint-denis · Answer

Dernier rapport ZHPDiag de confirmation ... Et encore merci !! 

https://www.cjoint.com/?3DDolbKmEy9

cabrier · Answer

Marc,


Bon c'est déjà mieux, reste encore quelques bricoles !

Ce script va cibler certains éléments à supprimer :

*    Ferme toutes tes applications en cours
*    Sélectionne et copie toutes les lignes en gras et italique suivantes depuis et y compris Script ZHPFIX :


Script ZHPFix

O42 - Logiciel: ???? ????? - (.Microsoft Corporation.) [HKLM][64Bits] -- {CF15F988-98D4-479F-9750-85A495BF8233}
[HKCU\Software\SimpleNewTab]
R3 - URLSearchHook: SiteFinder [64Bits] - {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D} . (...) (No version) -- C:\Program Files (x86)\SiteFinder\SiteFinder.dll 
O42 - Logiciel: Linkury Smartbar Engine - (.Linkury Inc..) [HKCU][64Bits] -- {e5044e81-d4d6-4378-b68c-6182cf460127}
[HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks]:{CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D} 
O41 - Driver:  (nvport) . (. - .) - C:\Windows\system32\Drivers
vport.sys (.not file.)
[MD5.63C883DA6179D957C9709410DF6CB4D3] [SPRF][03-07-2012] (...) -- C:\ProgramData\1341347326.bdinstall.bin   [502]
[MD5.47402D90A2196DE1128F5F71A344EA4F] [SPRF][03-07-2012] (...) -- C:\ProgramData\1341347376.bdinstall.bin   [251033]
[MD5.6CC7A0D89B864C1EF6EA4DF248FFFADB] [SPRF][24-07-2012] (...) -- C:\ProgramData\1343159412.bdinstall.bin   [161822]
[MD5.BD19D4633354AD6BE50E54FC325E9AA5] [SPRF][24-07-2012] (...) -- C:\ProgramData\1343159529.bdinstall.bin   [15686]
[MD5.F2695471B07998E82CA64B6BDB9468CB] [SPRF][24-07-2012] (...) -- C:\ProgramData\1343159564.bdinstall.bin   [15686]
[MD5.4C9D76BDFD8A26CAA93BB508B1A8AA0F] [SPRF][24-07-2012] (...) -- C:\ProgramData\1343159822.bdinstall.bin   [223743]
[MD5.AFD3F18B934F2FC712B24311B7F4159B] [SPRF][24-07-2012] (...) -- C:\ProgramData\1343160194.bdinstall.bin   [169840]
[MD5.96A62CF6E7681048B6ED89075CD3ACAA] [SPRF][24-07-2012] (...) -- C:\ProgramData\1343164758.bdinstall.bin   [103571]
[MD5.4B3A85BC9735ECC02E19A38674DDA4EF] [SPRF][22-08-2012] (...) -- C:\ProgramData\1345666906.bdinstall.bin   [269193]
[MD5.9C6ACE06A003F53D36C37BD7583A6681] [SPRF][22-08-2012] (...) -- C:\ProgramData\1345667935.bdinstall.bin   [102650]
ShortcutFix 
PROXYFix
SysRestore
EmptyPrefetch
EmptyTemp
EmptyCLSID



*    Lance ZHPFix via le raccourci sur ton Bureau, (Si tu es sous Vista ou Windows 7 ou Windows 8 n'oublie pas clic droit ==> en tant qu'administrateur")
*    Si tu obtiens le message "Voulez-vous autoriser le programme suivant..."Tu réponds "Oui"
*    Clique sur le bouton "IMPORTER"
*    Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes

*    Clique sur le bouton «GO» pour le lancer le nettoyage
*    A la demande, confirme le nettoyage des données en cliquant sur [OK]
*    Patiente le temps du traitement.
*    ZHPFix va te demander si tu souhaites vider ta corbeille, clique sur ton choix (le traitement peut être long suivant la quantité de données à supprimer)
*    Un rapport nommé ZHPFixReport.txt sera créé et sauvegardé sur le bureau
*    Ce rapport se trouve aussi ici C:\ZHP\ZHPFix[R1].txt
*    Copie/colle la totalité du rapport dans ta prochaine réponse

A+

Marc.de.saint-denis · Answer

Voilà le dernier rapport 

Rapport de ZHPFix 2014.4.13.3 par Nicolas Coolman, Update du 13/04/2014
Fichier d'export Registre : 
Run by kemar 93 at 29-04-2014 18:21:50
High Elevated Privileges : OK
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Reciclagem vazia (00mn 25s)
Prefetcher vazio
Reparação de atalhos do navegador

========== Softwares ==========
ELIMINÉ: ???? ?????

========== Chaves do Registo ==========
ELIMINÉ: HKCU\Software\SimpleNewTab

========== Valores do Registo ==========
ProxyFix : Configuração proxy removida com sucesso
ELIMINÉ ProxyServer Value
ELIMINÉ ProxyEnable Value
ELIMINÉ EnableHttp1_1 Value
ELIMINÉ ProxyHttp1.1 Value
ELIMINÉ ProxyOverride Value

========== Pastas ==========
Nenhuma pasta CLSID local utilizador vazia

========== Ficheiros ==========
ELIMINÉ Temporários windows (151) (7.197.783 octets)

========== Restauração Sistema ==========
Ponto de restauro do sistema criado com sucesso


========== Recapitulativo ==========
1 : Chaves do Registo
6 : Valores do Registo
1 : Pastas
1 : Ficheiros
1 : Softwares
1 : Restauração Sistema


End of clean in 01mn 21s

========== Caminho do ficheiro do relatório ==========
C:\Users\kemar 93\AppData\Roaming\ZHP\ZHPFix[R1].txt - 29-04-2014 18:22:15 [1201]

cabrier · Answer

Marc,


Plus rien de particulier, on termine ?


Les programmes que nous avons utilisés ne doivent pas être conservés. 
Beaucoup d'entre eux peuvent être dangereux et entrainer des dommages irréversibles sur ton système s'ils sont utilisés sans l'aide d'une personne qualifiée, de plus, fréquemment modifiés et mis à jour par leurs auteurs ils deviennent très rapidement obsolètes, en plus d'encombrer inutilement ton bureau.

1. Désinstallation des outils et purge de la Restauration système

- Télécharge DelFix (d'Xplode) sur ton bureau. 
- Lance le, (avec Vista/Seven, clic droit dessus, et sur exécuter en tant qu'administrateur) 
- Sélectionne "Réactiver l'UAC" 
- Sélectionne "Supprimer les outils de désinfection" 
- Sélectionne également "Purger la restauration système"
- Clique sur "Exécuter"
- Copie/colle le contenu du rapport qui s'ouvrira à l'écran dans ton prochain message.

Attention : Chaque fois que tu relances Delfix le rapport précédent est supprimé, alors ne l'exécute qu'une fois avec les options cochées.


Prévention :

-- Pourquoi et comment je me fais infecter ? (par Malekal_morte)

https://forum.malekal.com/viewtopic.php?t=3259&start=
https://www.malekal.com/virus-securite/
https://forum.malekal.com/viewtopic.php?t=6173&start=
https://www.malekal.com/fichiers/projetantimalwares/ProjetAntiMalware.pdf
https://stopransomware.fr/
https://www.ssi.gouv.fr/


-- il faut absolument faire attention lors de l'installation de logiciels. Ne télécharger les programme qu'à partir de sources sures, autant que possible sur le site de l'éditeur et SURTOUT lire et comprendre ce que vous proposent les différentes fenêtres qui vont s'ouvrit (Attention aux cases qu'il faut cocher ou décocher !!!)


-- Pour vérifier que tes programmes sont à jour :

*    Télécharge Update Checker : http://www.filehippo.com/updatechecker/FHSetup.exe
*    Lance-le (Sous Vista/7, fais un clic droit et choisis "Exécuter en tant qu'administrateur")
*   Installe-le (le logiciel est parfois en anglais)(décoche « run at startup » lors de l'installation)
*   Le logiciel vérifie tes programmes et t'annonce s'il y a des mises à jour
*    Si c'est le cas, télécharge les mises à jour
*    n'hésite pas à utiliser ce programme régulièrement


-- Pour naviguer sur Internet de façon plus sécurisée:

*    Privilégie Firefox : https://www.mozilla.org/fr/firefox/
*    Installe l'extension AdBlockPlus qui permet de bloquer les pubs : https://addons.mozilla.org/fr/firefox/addon/adblock-plus/
*    Installe l'extension WOT qui t'avertit des sites potentiellement dangereux :

    https://addons.mozilla.org/fr/firefox/addon/wot-safe-browsing-tool/?src=search
*    Tu peux enfin installer l'extension NoScript qui permet de réduire les risques liés à ta navigation, par contre c'est une extension pas toujours simple à configurer, à toi de voir :https://addons.mozilla.org/fr/firefox/addon/noscript/?src=search

    Aide : http://www.libellules.ch/noscript.php


-- Les pratiques à éviter

    https://forum.malekal.com/viewtopic.php?t=3208&start=
    https://forum.malekal.com/viewtopic.php?t=893&start=



-- Pense à marquer le fil comme résolu !
resolu

-- Sois plus vigilant(e) sur Internet à l'avenir !

Voilà pour moi c'est terminé. 

Si tu as des questions n'hésite pas.

Bonne journée

@+

Marc.de.saint-denis · Answer

merci encore pour ton aide et pour le temps que tu m'a consacré ! A+

Prochaine étape après un rapport ZHPDiag

40 réponses

Discussions similaires