Infection - Bin.doc

# AdwCleaner v3.308 - Rapport créé le 25/08/2014 à 13:06:33
# Mis à jour le 20/08/2014 par Xplode
# Système d'exploitation : Windows 8.1 Pro (64 bits)
# Nom d'utilisateur : Khalil - PROBOOK
# Exécuté depuis : C:\Users\Khalil\Downloads\adwcleaner_3.308.exe
# Option : Nettoyer

***** [ Services ] *****

***** [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\Program Files (x86)\Settings Manager
Dossier Supprimé : C:\Users\Khalil\AppData\Roaming\FirefoxToolbar
Dossier Supprimé : C:\Users\Khalil\AppData\Roaming\OpenCandy
Fichier Supprimé : C:\Users\Khalil\AppData\Roaming\Mozilla\Firefox\Profiles\9m4r0t7s.default\invalidprefs.js
Fichier Supprimé : C:\Users\Khalil\AppData\Roaming\Mozilla\Firefox\Profiles\9m4r0t7s.default\searchplugins\default-search.xml
Fichier Supprimé : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\default-search.xml

***** [ Tâches planifiées ] *****

***** [ Raccourcis ] *****

***** [ Registre ] *****

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{54739D49-AC03-4C57-9264-C5195596B3A1}
Clé Supprimée : HKCU\Software\Linkey
Clé Supprimée : HKLM\SOFTWARE\SystemK
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe

***** [ Navigateurs ] *****

-\\ Internet Explorer v11.0.9600.16384

-\\ Mozilla Firefox v31.0 (x86 fr)

[ Fichier : C:\Users\Khalil\AppData\Roaming\Mozilla\Firefox\Profiles\9m4r0t7s.default\prefs.js ]

-\\ Google Chrome v36.0.1985.143

[ Fichier : C:\Users\Khalil\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Supprimée [Startup_urls] : hxxp://www.default-search.net?sid=503&aid=100&itype=n&ver=13437&tm=421&src=hmp
Supprimée [Homepage] : hxxp://www.default-search.net?sid=503&aid=100&itype=n&ver=13437&tm=421&src=hmp

*************************

AdwCleaner[R0].txt - [5299 octets] - [25/08/2014 13:02:49]
AdwCleaner[R1].txt - [5359 octets] - [25/08/2014 13:04:59]
AdwCleaner[S0].txt - [4827 octets] - [25/08/2014 13:06:33]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4887 octets] ##########

exécuter + msconfig + démarrage +désactiver( bin ) = Game over

[b]############################## | UsbFix V 7.919 | [Recherche][/b]

Utilisateur: guiwurst (Administrateur) # GUIWURST-PC
Mis à jour le 08/04/2015 par El Desaparecido - SosVirus
Lancé à 17:56:45 | 08/04/2015

Site Web : [url=http://www.usbfix.net/]https://www.usbfix.net/[/url]
Changelog : [url=http://www.usbfix.net/maj/]https://www.usb-antivirus.com/fr/maj/[/url]
Assistance : [url=http://www.sosvirus.net/forum-virus-securite.html]https://depannageinformatique.org/acheter/reservation/?f=6[/url]
Détection en Live : [url=http://comment-supprimer.fr/]http://comment-supprimer.fr/[/url]
Contact : [url=http://www.usbfix.net/contact/]https://www.usb-antivirus.com/fr/contact/[/url]

[b]################## | System information |[/b]

MB: ASUSTeK Computer INC. (P7P55D)
CPU: Intel(R) Core(TM) i5 CPU 750 @ 2.67GHz
RAM -> [Total : 3063 Mo | Free : 1807 Mo]
Bios: American Megatrends Inc.
Boot: Normal boot

OS: Microsoft(TM) Windows 7 Professional (6.1.7600 32-Bit)
WB: Internet Explorer : 8.00.7600.16385
WB: Mozilla Firefox : 37.0.1

[b]################## | Security Information |[/b]

AV: Avira Antivirus [Actif |A jour]
AS: Avira Antivirus [Actif |A jour]
AS: Windows Defender [[b](!) Désactivé[/b] |A jour]
FW: Windows Firewall [Actif]
SC: Security Center [Actif]
WU: Windows Update [Actif]

[b]################## | Disk Information |[/b]

C:\ (%SystemDrive%) -> Disque fixe # 149 Go (33 Go libre(s) - 22%) [] # NTFS

[b]################## | Autorun |[/b]

[b]################## | Regedit Run |[/b]

F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] C:\Windows\System32\Userinit.exe,
04 - HKCU\..\Run : [uTorrent] "C:\Users\guiwurst\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
04 - HKLM\..\Run : [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
04 - HKLM\..\Run : [USB Storage Toolbox] C:\Program Files\USB Disk Win98 Driver\Res.EXE
04 - HKLM\..\Run : [Avira Systray] C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
04 - HKLM\..\Run : [bintin] C:\WINDOWS\system32\wscript.exe /e:VBScript.Encode D:\bin.doc
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-21-1502439574-2665838216-206721757-1000\..\Run : [uTorrent] "C:\Users\guiwurst\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04GS - Start.lnk : C:\Windows\system32\wscript.exe

[b]################## | Recherche générique |[/b]

Présent! C:\Users\guiwurst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Start.lnk

[b]################## | Registre |[/b]

Présent! HKLM\Software\Microsoft\Windows\CurrentVersion\Run|bintin

[b]################## | UsbFix - Information |[/b]

Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]Comment supprimer l'infection des raccourcis sur USB ? (Video)[/url]
Info : [url=http://www.usbfix.net/2014/10/supprimer-virus-raccourcis-usb/]L'infection des raccourcis USB, c'est quoi ?[/url]
Détection en Live : [url=http://comment-supprimer.fr/]http://comment-supprimer.fr/[/url]

[b]################## | Attrib - Restore |[/b]

[b]################## | E.O.F | [url=http://www.sosvirus.net/]https://www.sosvirus.net/[/url] | [url=http://www.usbfix.net/]https://www.usbfix.net/[/url] |[/b]

# AdwCleaner v4.204 - Rapport créé le 20/05/2015 à 17:59:41
# Mis à jour le 12/05/2015 par Xplode
# Base de données : 2015-05-20.1 [Serveur]
# Système d'exploitation : Windows 7 Professional Service Pack 1 (x86)
# Nom d'utilisateur : Abc - BENNANIYASSINE
# Exécuté depuis : C:\Users\Abc\Downloads\adwcleaner_4.204.exe
# Option : Scanner

• • • • • [ Services ] *****

Service Trouvé : {c5e48979-bd7f-4cf7-9b73-2482a67a4f37}Gw

• • • • • [ Fichiers / Dossiers ] *****

Dossier Trouvé : C:\Program Files\Babylon
Dossier Trouvé : C:\Program Files\ChatZum Toolbar
Dossier Trouvé : C:\Program Files\GreenTree Applications
Dossier Trouvé : C:\Program Files\SoftwareUpdater
Dossier Trouvé : C:\ProgramData\Babylon
Dossier Trouvé : C:\ProgramData\IBUpdaterService
Dossier Trouvé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader
Dossier Trouvé : C:\ProgramData\Rightapp software
Dossier Trouvé : C:\ProgramData\ytd video downloader
Dossier Trouvé : C:\Users\Abc\AppData\Local\Giant Savings
Dossier Trouvé : C:\Users\Abc\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpcjmidkkgldeplajgnbpjkfpmpeepb
Dossier Trouvé : C:\Users\Abc\AppData\LocalLow\BabylonToolbar
Dossier Trouvé : C:\Users\Abc\AppData\Roaming\Babylon
Dossier Trouvé : C:\Users\Abc\AppData\Roaming\GrabPro
Dossier Trouvé : C:\Users\Abc\AppData\Roaming\OpenCandy
Dossier Trouvé : C:\Users\Abc\AppData\Roaming\PerformerSoft
Dossier Trouvé : C:\Users\Abc\AppData\Roaming\ProgSense
Dossier Trouvé : C:\Users\Abc\AppData\Roaming\SpeedAnalysis2
Dossier Trouvé : C:\Users\Abc\AppData\Roaming\zulagames
Fichier Trouvé : C:\Program Files\Mozilla Firefox\user.js
Fichier Trouvé : C:\Users\Abc\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gflandjopdloblmlcoiidmncpinmmacn
Fichier Trouvé : C:\Users\Abc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jbpcjmidkkgldeplajgnbpjkfpmpeepb_0.localstorage
Fichier Trouvé : C:\Users\Abc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jbpcjmidkkgldeplajgnbpjkfpmpeepb_0.localstorage-journal
Fichier Trouvé : C:\Users\Abc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
Fichier Trouvé : C:\Users\Abc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
Fichier Trouvé : C:\Users\Abc\AppData\Roaming\speedanalysis.ico
Fichier Trouvé : C:\Windows\system32\drivers\{c5e48979-bd7f-4cf7-9b73-2482a67a4f37}Gw.sys

• • • • • [ Tâches planifiées ] *****

Tâche Trouvée : 0b09b8b1-b267-4ac3-a1e3-c3f904efd354-4
Tâche Trouvée : 0b09b8b1-b267-4ac3-a1e3-c3f904efd354-4

• • • • • [ Raccourcis ] *****

Raccourci Infecté : C:\Users\Abc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Chrome.LNK
Raccourci Infecté : C:\Users\Abc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Internet Explorer.LNK

• • • • • [ Registre ] *****

Clé Trouvée : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Clé Trouvée : HKCU\Software\AppDataLow\Software\Crossrider
Clé Trouvée : HKCU\Software\AppDataLow\Software\Giant Savings
Clé Trouvée : HKCU\Software\BABSOLUTION
Clé Trouvée : HKCU\Software\ChatZum Toolbar
Clé Trouvée : HKCU\Software\ClearThink
Clé Trouvée : HKCU\Software\Cr_Installer
Clé Trouvée : HKCU\Software\DataMngr
Clé Trouvée : HKCU\Software\DataMngr_Toolbar
Clé Trouvée : HKCU\Software\filescout
Clé Trouvée : HKCU\Software\InstallCore
Clé Trouvée : HKCU\Software\InstalledBrowserExtensions
Clé Trouvée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\softonic.fr
Clé Trouvée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Clé Trouvée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\websearch.amaizingsearches.info
Clé Trouvée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.softonic.fr
Clé Trouvée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
Clé Trouvée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Clé Trouvée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B32AC770-5289-4262-97A7-E0E602AE4D2E}
Clé Trouvée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Clé Trouvée : HKCU\Software\Microsoft\Office\Powerpoint\Addins\babylonofficeaddin.officeaddin
Clé Trouvée : HKCU\Software\Microsoft\Office\Word\Addins\babylonofficeaddin.officeaddin
Clé Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Clé Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7E6D4E3E-FC66-4036-9799-CE5C625C4C56}
Clé Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7854F00C-DC77-477E-A10E-603F48442D3B}
Clé Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7E6D4E3E-FC66-4036-9799-CE5C625C4C56}
Clé Trouvée : HKCU\Software\Myfree Codec
Clé Trouvée : HKCU\Software\ProgSense
Clé Trouvée : HKCU\Software\Softonic
Clé Trouvée : HKCU\Software\WEDLMNGR
Clé Trouvée : HKLM\SOFTWARE\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Clé Trouvée : HKLM\SOFTWARE\ChatZum Toolbar
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\{90A52F08-64AC-4DC6-9D7D-4516670275D3}
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Clé Trouvée : HKLM\SOFTWARE\Classes\BabylonOfficeAddin.OfficeAddin
Clé Trouvée : HKLM\SOFTWARE\Classes\BabylonOfficeAddin.OfficeAddin.1
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{6AC0BB10-C922-45E2-857D-2A368FE749E5}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{7E6D4E3E-FC66-4036-9799-CE5C625C4C56}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{0BF91075-F457-4A8B-99EF-140B52D2F22A}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{37425600-CB21-49A0-8659-476FBAB0F8E8}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{431FB0E5-2CBB-4602-9FE6-F1D64488ADD7}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{5C9A230D-70A5-11D5-AFB0-0050DAC67890}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{8911483C-C00A-4183-9FBC-6C9C00946C15}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{B7EA2226-F876-4BE4-B478-76EBAE2A668A}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{C3F058A9-407D-4CD1-8F66-B75605B54B69}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{EFDCAF05-D29C-4D4D-9836-8CDCD606A6B2}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Clé Trouvée : HKLM\SOFTWARE\Classes\Prod.cap
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{5C9A2304-70A5-11D5-AFB0-0050DAC67890}
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{F310F027-15CB-4A7F-B10D-3A4AFB5013A5}
Clé Trouvée : HKLM\SOFTWARE\DataMngr
Clé Trouvée : HKLM\SOFTWARE\Google\Chrome\Extensions\fhokfmhpdoppcompklkineedkmhinhdf
Clé Trouvée : HKLM\SOFTWARE\Google\Chrome\Extensions\gflandjopdloblmlcoiidmncpinmmacn
Clé Trouvée : HKLM\SOFTWARE\Google\Chrome\Extensions\ndkhncnongaclekkbelchmeafffimifj
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E6D4E3E-FC66-4036-9799-CE5C625C4C56}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ClearThink
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdater
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Updater Service
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\zulagames
Clé Trouvée : HKLM\SOFTWARE\Myfree Codec
Clé Trouvée : HKLM\SOFTWARE\SoftwareUpdater
Clé Trouvée : HKLM\SOFTWARE\Taronja
Clé Trouvée : HKU\.DEFAULT\Software\IBUpdaterService
Donnée Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <-loopback>
Valeur Trouvée : HKCU\Software\Mozilla\Firefox\Extensions [speedanalysis02@SpeedAnalysis.com]
Valeur Trouvée : HKCU\Software\Mozilla\Firefox\Extensions [zulagames@ZulaGames.com]
Valeur Trouvée : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [speedanalysis02@SpeedAnalysis.com]
Valeur Trouvée : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [zulagames@ZulaGames.com]

• • • • • [ Navigateurs ] *****

-\\ Internet Explorer v11.0.9600.17801

Paramètre Trouvé : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://websearch.amaizingsearches.info/?pid=2387&r=2014/04/20&hid=2491269803443165202&lg=EN&cc=MA&unqvl=51
Paramètre Trouvé : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://websearch.amaizingsearches.info/?pid=2387&r=2014/04/20&hid=2491269803443165202&lg=EN&cc=MA&unqvl=51

-\\ Mozilla Firefox v

-\\ Google Chrome v

[C:\Users\Abc\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Trouvée [Extension] : fhokfmhpdoppcompklkineedkmhinhdf
[C:\Users\Abc\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Trouvée [Extension] : gflandjopdloblmlcoiidmncpinmmacn
[C:\Users\Abc\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Trouvée [Extension] : jbpcjmidkkgldeplajgnbpjkfpmpeepb
[C:\Users\Abc\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Trouvée [Extension] : ndkhncnongaclekkbelchmeafffimifj
[C:\Users\Abc\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Trouvée [Homepage] : hxxp://websearch.amaizingsearches.info/?pid=2387&r=2014/04/20&hid=2491269803443165202&lg=EN&cc=MA&unqvl=51
[C:\Users\Abc\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Trouvée [Default_Search_Provider_Data] : {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}{google:contextualSearchVersion}ie={inputEncoding}",
"usage_count": 0
}
},
"extensions": {
"settings": {
"ahfgeienlihckogmohjhadlkjgocpleb": {
"active_bit": true,
"active_permissions": {
"api": [ "management", "system.display", "system.storage", "webstorePrivate", "system.cpu", "system.memory", "system.network" ],
"manifest_permissions": [ ]
},
"app_launcher_index": -2,
"app_launcher_ordinal": "h",
"commands": {

},
"creation_flags": 1,
"events": [ ],
"from_bookmark": false,
"from_webstore": false,
"install_time": "13014560864291016",
"location": 5,
"manifest": {
"app": {
"launch": {
"web_url": "hxxps://chrome.google.com/webstore"
},
"urls": [ "hxxps://chrome.google.com/webstore" ]
},
"description": "Chrome Web Store",
"icons": {
"128": "webstore_icon_128.png",
"16": "webstore_icon_16.png"
},
"key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB",
"name": "Store",
"permissions": [ "webstorePrivate", "management" ],
"version": "0.2"
},
"page_index": 0,
"page_ordinal": "n",
"path": "C:\\Users\\Abc\\AppData\\Local\\Google\\Chrome\\Application\\27.0.1453.94\\resources\\web_store",
"was_installed_by_default": false
},
"bepbmhgboaologfdajaanbcjmnhjmhfn": {
"disable_reasons": 1,
"state": 0
},
"blpcfgokakmgnkcojhhkbfbldkacnbeo": {
"ack_external": true,
"active_bit": false,
"active_permissions": {
"api": [ ],
"manifest_permissions": [ ]
},
"app_launcher_ordinal": "n",
"commands": {

},
"content_settings": [ ],
"creation_flags": 153,
"events": [ ],
"from_bookmark": true,
"from_webstore": true,
"granted_permissions": {
"api": [ ],
"manifest_permissions": [ ]
},
"incognito_content_settings": [ ],
"incognito_preferences": {

},
"install_time": "13067522836062791",
"last_active_pingday": "13006252800885875",
"lastpingday": "13076492408034229",
"location": 1,
"manifest": {
"app": {
"launch": {
"container": "tab",
"web_url": "hxxp://www.youtube.com/?feature=ytca"
},
"web_content": {
"enabled": true,
"origin": "hxxp://www.youtube.com"
}
},
"current_locale": "fr",
"default_locale": "en",
"description": "La communauté de vidéos en ligne la plus populaire au monde.",
"icons": {
"128": "128.png"
},
"key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC/HotmFlyuz5FaHaIbVBhhL4BwbcUtsfWwzgUMpZt5ZsLB2nW/Y5xwNkkPANYGdVsJkT2GPpRRIKBO5QiJ7jPMa3EZtcZHpkygBlQLSjMhdrAKevpKgIl6YTkwzNvExY6rzVDzeE9zqnIs33eppY4S5QcoALMxuSWlMKqgFQjHQIDAQAB",
"manifest_version": 2,
"name": "YouTube",
"update_url": "hxxp://clients2.google.com/service/update2/crx",
"version": "4.2.7"
},
"page_ordinal": "n",
"path": "blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.7_0",
"preferences": {

},
"regular_only_preferences": {

},
"state": 1,
"was_installed_by_default": true,
"was_installed_by_oem": false
},
"coobgpohoikkiipiblmjeljniedjpjpf": {
"ack_external": true,
"active_bit": false,
"active_permissions": {
"api": [ ],
"manifest_permissions": [ ]
},
"app_launcher_ordinal": "w",
"commands": {

},
"content_settings": [ ],
"creation_flags": 153,
"events": [ ],
"from_bookmark": true,
"from_webstore": true,
"granted_permissions": {
"api": [ ],
"manifest_permissions": [ ]
},
"incognito_content_settings": [ ],
"incognito_preferences": {

},
"install_time": "13071970012909352",
"last_active_pingday": "0",
"lastpingday": "13076492408034229",
"location": 1,
"manifest": {
"app": {
"launch": {
"web_url": "hxxp://www.google.com/webhp?source=search_app"
},
"urls": [ "*://www.google.com/search", "*://www.google.com/webhp", "*://www.google.com/imgres" ]
},
"current_locale": "fr",
"default_locale": "en",
"description": "La recherche sur le Web à vitesse grand V",
"icons": {
"128": "128.png",
"16": "16.png",
"32": "32.png",
"48": "48.png"
},
"key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIiso3Loy5VJHL40shGhUl6it5ZG55XB9q/2EX6aa88jAxwPutbCgy5d9bm1YmBzLfSgpX4xcpgTU08ydWbd7b50fbkLsqWl1mRhxoqnN01kuNfv9Hbz9dWWYd+O4ZfD3L2XZs0wQqo0y6k64n+qeLkUMd1MIhf6MR8Xz1SOA8pwIDAQAB",
"manifest_version": 2,
"name": "Recherche Google",
"permissions": [ ],
"update_url": "hxxp://clients2.google.com/service/update2/crx",
"version": "0.0.0.30"
},
"page_ordinal": "n",
"path": "coobgpohoikkiipiblmjeljniedjpjpf\\0.0.0.30_0",
"preferences": {

},
"regular_only_preferences": {

},
"state": 1,
"was_installed_by_default": true,
"was_installed_by_oem": false
},
"dnhpdliibojhegemfjheidglijccjfmc": {
"active_permissions": {
"api": [ "hotwordPrivate", "tabs", "webConnectable" ],
"explicit_host": [ "*://*.google.co.uk/*", "*://*.google.com/*", "*://*.google.de/*", "*://*.google.fr/*", "*://*.google.ru/*", "chrome://newtab/*" ],
"manifest_permissions": [ ]
},
"commands": {

},
"content_settings": [ ],
"creation_flags": 1,
"ephemeral_app": false,
"events": [ ],
"from_bookmark": false,
"from_webstore": false,
"incognito_content_settings": [ ],
"incognito_preferences": {

},
"initial_keybindings_set": true,
"install_time": "13054302192807883",
"location": 5,
"manifest": {
"background": {
"persistent": false,
"scripts": [ "manager.js" ]
},
"externally_connectable": {
"matches": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "chrome://newtab/" ]
},
"key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDagiQy1VGkO2CHJSjVh7eU5GtuBuOlg2/cTZt7203AcevqpcDd+65S2/yd9KAELYcU6pK8nHVGYBMI6s0u+0RgXfIJ0eFOlTlgfAQWHvg8ovHtJlFJd1COrOkbntD9+s9Jobr3ldmow87aZF1bVHUY4khVP56cZe6adlVw2wK31QIDAQAB",
"manifest_version": 2,
"minimum_chrome_version": "32",
"name": "hotword helper",
"permissions": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "chrome://newtab/", "hotwordPrivate", "tabs" ],
"version": "0.0.2.0"
},
"path": "C:\\Users\\Abc\\AppData\\Local\\Google\\Chrome\\Application\\37.0.2062.103\\resources\\hotword_helper",
"preferences": {

},
"regular_only_preferences": {

},
"was_installed_by_default": false,
"was_installed_by_oem": false
},
"eemcgdkfndhakfknompkggombfjjjeno": {
"active_permissions": {
"api": [ "bookmarks", "bookmarkManagerPrivate", "metricsPrivate", "systemPrivate", "tabs" ],
"explicit_host": [ "chrome://favicon/*", "chrome://resources/*" ],
"manifest_permissions": [ ]
},
"commands": {

},
"creation_flags": 1,
"events": [ ],
"from_bookmark": false,
"from_webstore": false,
"initial_keybindings_set": true,
"install_time": "13006728512003891",
"location": 5,
"manifest": {
"chrome_url_overrides": {
"bookmarks": "main.html"
},
"content_security_policy": "object-src 'none'; script-src chrome://resources 'self'",
"description": "Bookmark Manager",
"incognito": "split",
"key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQcByy+eN9jzazWF/DPn7NW47sW7lgmpk6eKc0BQM18q8hvEM3zNm2n7HkJv/R6fU+X5mtqkDuKvq5skF6qqUF4oEyaleWDFhd1xFwV7JV+/DU7bZ00w2+6gzqsabkerFpoP33ZRIw7OviJenP0c0uWqDWF8EGSyMhB3txqhOtiQIDAQAB",
"manifest_version": 2,
"name": "Bookmark Manager",
"permissions": [ "bookmarks", "bookmarkManagerPrivate", "systemPrivate", "tabs", "chrome://favicon/", "chrome://resources/" ],
"version": "0.1"
},
"path": "C:\\Users\\Abc\\AppData\\Local\\Google\\Chrome\\Application\\25.0.1364.97\\resources\\bookmark_manager",
"was_installed_by_default": false
},
"ennkphjdgehloodpbhlhldgbnhmacadg": {
"active_permissions": {
"api": [ ],
"explicit_host": [ "chrome://settings-frame/*" ],
"manifest_permissions": [ ]
},
"app_launcher_ordinal": "x",
"commands": {

},
"creation_flags": 1,
"events": [ "app.runtime.onLaunched" ],
"from_bookmark": false,
"from_webstore": false,
"initial_keybindings_set": true,
"install_time": "13014560865171016",
"location": 5,
"manifest": {
"app": {
"background": {
"scripts": [ "settings_app.js" ]
}
},
"description": "Settings",
"display_in_launcher": false,
"icons": {
"128": "settings_app_icon_128.png",
"16": "settings_app_icon_16.png",
"32": "settings_app_icon_32.png",
"48": "settings_app_icon_48.png"
},
"key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDoVDPGX6fvKPVVgc+gnkYlGqHuuapgFDyKhsy4z7UzRLO/95zXPv8h8e5EacqbAQJLUbP6DERH5jowyNEYVxq9GJyntJMwP1ejvoz/52hnY3CCGGCmttmKzzpp5zwLuq3iZf8bslwywfflNUYtaCFSDa0TtrBZz0aOPrAAd/AhNwIDAQAB",
"manifest_version": 2,
"name": "Settings",
"permissions": [ "chrome://settings-frame/" ],
"version": "0.2"
},
"page_ordinal": "n",
"path": "C:\\Users\\Abc\\AppData\\Local\\Google\\Chrome\\Application\\27.0.1453.94\\resources\\settings_app",
"running": false,
"was_installed_by_default": false
},
"fhokfmhpdoppcompklkineedkmhinhdf": {
"ack_external": true,
"active_permissions": {
"api": [ "history", "tabs" ],
"explicit_host": [ "chrome://favicon/*", "hxxp://*/*", "hxxps://*/*" ],
"manifest_permissions": [ ],
"scriptable_host": [ "hxxp://*/*", "hxxps://*/*" ]
},
"content_settings": [ ],
"creation_flags": 1,
"events": [ "runtime.onInstalled" ],
"from_bookmark": false,
"from_webstore": false,
"incognito_content_settings": [ ],
"incognito_preferences": {

},
"initial_keybindings_set": true,
"install_time": "13040653205302028",
"install_warning_on_enable": false,
"lastpingday": "13040636416128000",
"location": 3,
"manifest": {
"background": {
"persistent": false,
"scripts": [ "background.js" ]
},
"content_scripts": [ {
"js": [ "background.js" ],
"matches": [ "hxxps://*/*", "hxxp://*/*" ]
} ],
"description": "BaseFlash",
"icons": {
"48": "icon.png"
},
"key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+AurBTXP9Dgfk2M/lWAht/fsGdFHSnmOukqGcp/rQVBtMsbGogNNolVjXNsJKPF2F7zzOwbaFIJk9skY1zBZVjWuPhTig2DXo6jOBmxwmho+8LAEjXi19QIGg/DbGRXeEXW/ecTSMadWOFklQqYvY00m8AzR9CbzCFdvGuHi6ng0jvxo4e8Z5HI0nvEBfaF52cHksGv8O7+j31a7tzXA1Ch2kp4UMMiYm9QVBzO1bTRRg/eFsH5jYzX7xbSj2XgXqeeHX4Mc4+uLteWuopM1Yp33Z72nugDp4n843aLZotGmlIL1h8PrYd4iHoRfrzCD5ETagDdnqsqgaTHmuKzOwIDAQAB",
"manifest_version": 2,
"name": "BaseFlash",
"permissions": [ "tabs", "history", "chrome://favicon/*", "hxxp://*/*", "hxxps://*/*" ],
"version": "1.0",
"web_accessible_resources": [ "js/*.js", "*.html", "*.htm", "*.js", "*.png", "*.jpg", "*.gif" ]
},
"path": "fhokfmhpdoppcompklkineedkmhinhdf\\1.0_0",
"preferences": {

},
"regular_only_preferences": {

},
"state": 2,
"was_installed_by_default": false
},
"flliilndjeohchalpbbcdekjklbdgfkk": {
"ack_external": true,
"active_permissions": {
"api": [ "cookies", "storage", "tabs", "webNavigation", "webRequest", "webRequestBlocking" ],
"explicit_host": [ "chrome://favicon/*", "hxxp://*/*", "hxxps://*/*" ],
"manifest_permissions": [ ],
"scriptable_host": [ "*://*/*" ]
},
"commands": {

},
"content_settings": [ ],
"creation_flags": 9,
"events": [ ],
"from_bookmark": false,
"from_webstore": true,
"incognito": true,
"incognito_content_settings": [ ],
"incognito_preferences": {

},
"initial_keybindings_set": true,
"install_time": "13067522842154558",
"install_warning_on_enable": false,
"lastpingday": "13069065610351121",
"location": 6,
"manifest": {
"background": {
"scripts": [ "js/bunches/background.js" ]
},
"browser_action": {
"default_icon": {
"16": "img/avira_icon16.png",
"19": "img/avira_logo.png",
"24": "img/avira_icon24.png",
"32": "img/avira_icon32.png",
"38": "img/avira_logo.png"
},
"default_title": "Avira Browser Safety"
},
"content_scripts": [ {
"css": [ "css/content/content.css" ],
"js": [ "js/bunches/content.js" ],
"matches": [ "*://*/*" ]
}, {
"css": [ "css/content/search.css" ],
"js": [ "js/bunches/search.js" ],
"matches": [ "*://*/*" ]
}, {
"js": [ "js/bunches/content_start.js" ],
"matches": [ "*://*/*" ],
"run_at": "document_start"
} ],
"content_security_policy": "script-src 'self' hxxps://cdn.mxpnl.com hxxp://localhost:4000 hxxps://localhost hxxps://avira.com hxxps://www.avira.com hxxps://www.tt.avira.com; object-src 'self'",
"current_locale": "fr",
"default_locale": "en",
"description": "Permet de protéger votre vie privée en bloquant les menaces en ligne.",
"icons": {
"128": "img/avira_icon128.png",
"16": "img/avira_icon16.png",
"48": "img/avira_icon48.png"
},
"key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl3UicGZTgzDr3crrsAxjwue3gjDfxGKIxaipQBP8smbkQ2GuKVO9nojCLRzdn7TkB+Xo60aTqHC2hQhby0MMyjAvgqjXR2cE+99PtB4Hpvf7k/EOO7VMT2ndm/lVM9cJUtNq3A7GUxTqmL78akNAxgjZK0n2onNqpmiVHxufCmq8tlU+5NtJkk6ioRATpjdsjAxqeuRyglwzx0cPVMpXg8fUXp2EhwFYsDevN6f+7Sm0QujCmjOy11yjlz8XfnX3ODVCwByureqJLuTJpw5SMOykz4LHmUwiIvPdOZXJ9eiduedncVqDMuPTMWwWpkD3uV95pnmFNKE/6GxIx2dhwIDAQAB",
"manifest_version": 2,
"name": "Protection Web Avira",
"options_page": "html/top.html#settings/General",
"options_ui": {
"chrome_style": true,
"open_in_tab": true,
"page": "html/top.html#settings/General"
},
"permissions": [ "tabs", "storage", "webNavigation", "webRequest", "webRequestBlocking", "cookies", "hxxp://*/*", "hxxps://*/*", "chrome://favicon/" ],
"update_url": "hxxps://clients2.google.com/service/update2/crx",
"version": "1.4.4",
"web_accessible_resources": [ "html/top.html", "html/blocked.html", "img/serp_info_safe.svg", "img/serp_info_unsafe.svg", "css/images/ui-bg_highlight-soft_100_eeeeee_1x100.png", "img/absb-checks.png", "img/absb-attention.png", "img/absb-close.png" ]
},
"path": "flliilndjeohchalpbbcdekjklbdgfkk\\1.4.4_0",
"preferences": {

},
"regular_only_preferences": {

},
"state": 2,
"was_installed_by_default": false,
"was_installed_by_oem": false
},
"gfdkimpbcpahaombhbimeihdjnejgicl": {
"active_permissions": {
"api": [ "feedbackPrivate" ],
"explicit_host": [ "chrome://resources/*" ],
"manifest_permissions": [ ]
},
"commands": {

},
"creation_flags": 1,
"events": [ "feedbackPrivate.onFeedbackRequested", "runtime.onMessageExternal" ],
"from_bookmark": false,
"from_webstore": false,
"initial_keybindings_set": true,
"install_time": "13029198702805502",
"location": 5,
"manifest": {
"app": {
"background": {
"scripts": [ "js/event_handler.js" ]
},
"content_security_policy": "default-src 'none'; script-src 'self' chrome://resources; style-src 'unsafe-inline' *; img-src *; media-src 'self'"
},
"description": "User feedback extension",
"display_in_launcher": false,
"display_in_new_tab_page": false,
"icons": {
"32": "images/icon32.png",
"64": "images/icon64.png"
},
"key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMZElzFX2J1g1nRQ/8S3rg/1CjFyDltWOxQg+9M8aVgNVxbutEWFQz+oQzIP9BB67mJifULgiv12ToFKsae4NpEUR8sPZjiKDIHumc6pUdixOm8SJ5Rs16SMR6+VYxFUjlVW+5CA3IILptmNBxgpfyqoK0qRpBDIhGk1KDEZ4zqQIDAQAB",
"manifest_version": 2,
"name": "Feedback",
"permissions": [ "feedbackPrivate", "chrome://resources/" ],
"version": "1.0"
},
"path": "C:\\Users\\Abc\\AppData\\Local\\Google\\Chrome\\Application\\31.0.1650.57\\resources\\feedback",
"running": false,
"was_installed_by_default": false
},
"gflandjopdloblmlcoiidmncpinmmacn": {
"ack_external": true,
"active_permissions": {
"api": [ "contextMenus", "storage", "tabs", "webNavigation", "webRequest", "webRequestInternal" ],
"explicit_host": [ "\u003Call_urls>", "chrome://favicon/*" ],
"manifest_permissions": [ ],
"scriptable_host": [ "\u003Call_urls>" ]
},
"creation_flags": 1,
"events": [ ],
"exclude_from_sideload_wipeout": true,
"from_bookmark": false,
"from_webstore": false,
"granted_permissions": {
"api": [ "tabs", "webNavigation", "\u003Call_urls>" ]
},
"has_declarative_rules": {
"declarativeContent": {
"onPageChanged": false
},
"declarativeWebRequest": {
"onRequest": false
}
},
"initial_keybindings_set": true,
"install_time": "13032918761009779",
"install_warning_on_enable": false,
"lastpingday": "13038134410040098",
"location": 3,
"manifest": {
"background": {
"page": "background.html"
},
"browser_action": {
"default_icon": "icon18.png",
"default_title": "Open the Free Gaming Portal"
},
"content_scripts": [ {
"all_frames": false,
"js": [ "ci.content.pack.js", "rjs.js" ],
"matches": [ "\u003Call_urls>" ],
"run_at": "document_start"
}, {
"all_frames": false,
"js": [ "ci.browser.helper.js" ],
"matches": [ "\u003Call_urls>" ],
"run_at": "document_end"
} ],
"description": "Play fun games online... for free",
"homepage_url": "hxxp://www.zulagames.com/",
"icons": {
"128": "icon128.png",
"16": "icon16.png",
"18": "icon18.png",
"24": "icon24.png",
"32": "icon32.png",
"48": "icon48.png"
},
"key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCky6k+AbWdydJMwvcOOcX3C8cXMjlRIGIgIzPjKBo+ms5L0XTwlvnFxAC3pielqPSuh0+HPJEnWoZ+6rKhBkc5WijXqxuSzBLIFkQMexUbYLaddpRKfxKMMDlbSUA1JkdZBxveowKFHZqG4AVs9dT+bLUfTuGwyGNAvGPK9pMRmwIDAQAB",
"manifest_version": 2,
"name": "Zula Games",
"permissions": [ "tabs", "webNavigation", "contextMenus", "webRequest", "storage", "\u003Call_urls>" ],
"update_url": "hxxps://clients2.google.com/service/update2/crx",
"version": "3.0.0.0"
},
"path": "gflandjopdloblmlcoiidmncpinmmacn\\3.0.0.0_0",
"state": 2,
"was_installed_by_default": false
},
"gmlllbghnfkpflemihljekbapjopfjik": {
"ack_external": true,
"active_permissions": {
"api": [ "activeTab", "bookmarks", "bookmarkManagerPrivate", "fileSystem", "fileSystem.write", "identity", "identity.email", "management", "metricsPrivate", "notifications", "preferencesPrivate", "storage", "tabs", "webConnectable" ],
"explicit_host": [ "*://*.google.com/*", "chrome://favicon/*" ],
"manifest_permissions": [ {
"chrome_ui_overrides": true
} ]
},
"commands": {
"_execute_page_action": {
"suggested_key": "Ctrl+D",
"was_assigned": true
}
},
"content_settings": [ ],
"creation_flags": 137,
"events": [ ],
"from_bookmark": false,
"from_webstore": true,
"granted_permissions": {
"api": [ "activeTab", "bookmarks", "bookmarkManagerPrivate", "fileSystem", "fileSystem.write", "identity", "identity.email", "management", "metricsPrivate", "notifications", "preferencesPrivate", "storage", "tabs", "webConnectable" ],
"explicit_host": [ "*://*.google.com/*", "chrome://favicon/*" ],
"manifest_permissions": [ {
"chrome_ui_overrides": true
} ]
},
"incognito_content_settings": [ ],
"incognito_preferences": {

},
"initial_keybindings_set": true,
"install_time": "13075583332857472",
"lastpingday": "13076492408034229",
"location": 10,
"manifest": {
"background": {
"persistent": true,
"scripts": [ "bootstrap.js", "background_compiled.js" ]
},
"chrome_ui_overrides": {
"bookmarks_ui": {
"remove_bookmark_shortcut": true,
"remove_button": true
}
},
"chrome_url_overrides": {
"bookmarks": "bookmarks.html"
},
"commands": {
"_execute_page_action": {
"description": "Stars popup",
"suggested_key": {
"default": "Ctrl+D"
}
}
},
"content_security_policy": "script-src 'self' hxxps://*.google.com hxxps://*.gstatic.com; object-src 'self'",
"current_locale": "fr",
"default_locale": "en",
"description": "Bookmark Manager",
"externally_connectable": {
"matches": [ "*://*.google.com/*" ]
},
"icons": {
"16": "icons/bookmarks16.png",
"32": "icons/bookmarks32.png"
},
"key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDO1rEc7Du17LBzIOf1nXMC4JM4suAzgaswHRjJhaE4/fNIXxrTjqaDH5tpU7huX8RdVyuu3zggdP36mpqhLYNzCf9fgnvhZEGpsXYqedWXapQ4nrVca4Xg5SB8/K7oRS+dnMwwxYjED434qTyfiSiJoXVo7MXa+qBckMQ6Wf0t0QIDAQAB",
"manifest_version": 2,
"minimum_chrome_version": "42",
"name": "Bookmark Manager",
"oauth2": {
"client_id": "610799782257-avhfi6rijk0n02t94linmllq54ool5kf.apps.googleusercontent.com",
"scopes": [ "hxxps://www.googleapis.com/auth/chromesync" ]
},
"page_action": {
"default_icon": {
"19": "icons/collected19.png"
},
"default_title": "Star Page"
},
"permissions": [ "activeTab", "bookmarks", "bookmarkManagerPrivate", "chrome://favicon/", "identity", "identity.email", "management", "metricsPrivate", "notifications", "preferencesPrivate", "storage", "tabs", "*://*.google.com/*", {
"fileSystem": [ "write" ]
} ],
"update_url": "hxxps://clients2.google.com/service/update2/crx",
"version": "2.2015.506.11355"
},
"path": "gmlllbghnfkpflemihljekbapjopfjik\\2.2015.506.11355_0",
"preferences": {

},
"regular_only_preferences": {

},
"state": 1,
"was_installed_by_default": true,
"was_installed_by_oem": false
},
"hkacjpbfdknhflllbcmjibkdeoafencn": {
"active_permissions": {
"api": [ ],
"manifest_permissions": [ ]
},
"content_settings": [ ],
"creation_flags": 9,
"events": [ ],
"from_bookmark": false,
"from_webstore": true,
"granted_permissions": {
"api": [ ],
"manifest_permissions": [ ]
},
"incognito_content_settings": [ ],
"incognito_preferences": {

},
"install_time": "13042116740038857",
"lastpingday": "13076492408034229",
"location": 1,
"manifest": {
"current_locale": "fr",
"default_locale": "en",
"key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCycmVJSXAf57FMqFmmTdmQtbvhYHx7850dYFcU9zyPMGgbpqDJ4PG8zFv3vqiVIwEkxoSCK/JbVdGUyenu5H4F8/e4+18rAjCMZffYEkXLme1ZkuirdhUD9KNobP+Y8wBUpQRsOEg8vpThjQaOovEI/u2AlSh9ckwDRKphqqwMNwIDAQAB",
"name": "Classic",
"theme": {
"colors": {
"null": [ 0, 0, 0 ]
},
"images": {
"null": "notused.png"
}
},
"update_url": "hxxp://clients2.google.com/service/update2/crx",
"version": "1.1"
},
"path": "hkacjpbfdknhflllbcmjibkdeoafencn\\1.1_0",
"preferences": {

},
"regular_only_preferences": {

},
"state": 1,
"was_installed_by_default": false
},
"jbpcjmidkkgldeplajgnbpjkfpmpeepb": {
"active_permissions": {
"api": [ "bookmarks", "clipboardRead", "clipboardWrite", "contentSettings", "contextMenus", "cookies", "history", "management", "notifications", "pageCapture", "plugin", "tabs", "webNavigation", "webRequest", "webRequestBlocking", "webRequestInternal" ],
"explicit_host": [ "*://*/*", "\u003Call_urls>", "chrome://favicon/*" ],
"scriptable_host": [ "*://developer.apple.com/*", "*://www.facebook.com/*", "*://www.google.com/*", "\u003Call_urls>", "hxxp://*/*", "hxxps://*/*" ]
},
"creation_flags": 1,
"exclude_from_sideload_wipeout": true,
"from_bookmark": false,
"from_webstore": false,
"granted_permissions": {
"api": [ "bookmarks", "clipboardRead", "clipboardWrite", "contentSettings", "contextMenus", "cookies", "history", "management", "notifications", "pageCapture", "plugin", "tabs", "webNavigation", "webRequest", "webRequestBlocking", "webRequestInternal" ],
"explicit_host": [ "*://*/*", "\u003Call_urls>" ],
"scriptable_host": [ "*://developer.apple.com/*", "*://www.facebook.com/*", "*://www.google.com/*", "\u003Call_urls>", "hxxp://*/*", "hxxps://*/*" ]
},
"install_time": "13020788665211372",
"location": 1,
"manifest": {
"background": {
"page": "background.html"
},
"chrome_url_overrides": {
"newtab": "nt.html"
},
"content_scripts": [ {
"all_frames": false,
"css": [ "css/smoothness/jquery-ui-1.8.6.custom.css", "css/style.css", "css/combobox.css" ],
"js": [ "js/jquery-1.7.1.min.js", "js/jquery-ui-1.8.6.custom.min.js", "js/jqueryclient.js", "js/jquery.toolbar.js", "js/jquery.searchbox.js", "js/jquery.bubble.js", "js/jquery.bubble2.js", "js/jquery.popupMenu.js", "js/jquery.popupSubMenu.js", "js/content.js", "js/jquery.form.js" ],
"matches": [ "\u003Call_urls>" ],
"run_at": "document_start"
}, {
"all_frames": false,
"css": [ "css/layouts/developer.apple.com.css" ],
"js": [ "css/layouts/developer.apple.com.js" ],
"matches": [ "*://developer.apple.com/*" ],
"run_at": "document_idle"
}, {
"all_frames": false,
"css": [ "css/layouts/google.com.css" ],
"matches": [ "*://www.google.com/*" ],
"run_at": "document_idle"
}, {
"all_frames": false,
"css": [ "css/layouts/facebook.com.css" ],
"js": [ "css/layouts/facebook.com.js" ],
"matches": [ "*://www.facebook.com/*" ],
"run_at": "document_idle"
}, {
"all_frames": true,
"js": [ "js/loadjs.js" ],
"matches": [ "hxxp://*/*", "hxxps://*/*" ],
"run_at": "document_idle"
} ],
"content_security_policy": "script-src 'self' 'unsafe-eval'; object-src 'self'",
"description": "ChatZum.com - Easy Pictures zoom.",
"homepage_url": "hxxp://search.chatzum.com

AdwCleaner[R0].txt - [45609 octets] - [20/05/2015 17:59:41]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [45670 octets] ##########

# AdwCleaner v4.208 - Rapport créé le 16/07/2015 à 11:57:36
# Mis à jour le 09/07/2015 par Xplode
# Base de données : 2015-07-15.1 [Serveur]
# Système d'exploitation : Windows 8.1 Single Language (x64)
# Nom d'utilisateur : BECHAR ZINEB - BECHAR
# Exécuté depuis : C:\Users\BECHAR ZINEB\Downloads\adwcleaner_4.208.exe
# Option : Nettoyer

• • • • • [ Services ] *****

[#] Service Supprimé : Service Mgr StrongSignal

• • • • • [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\ProgramData\systemk
Dossier Supprimé : C:\ProgramData\0780f478-67ce-4ec3-98db-39a65f4618ce
Dossier Supprimé : C:\Program Files (x86)\Settings Manager
Dossier Supprimé : C:\Program Files (x86)\Strong Signal
Dossier Supprimé : C:\Program Files (x86)\Common Files\0780f478-67ce-4ec3-98db-39a65f4618ce
Dossier Supprimé : C:\Users\BECHAR~1\AppData\Local\Temp\allgenius
Dossier Supprimé : C:\Users\BECHAR~1\AppData\Local\Temp\Strong Signal
Fichier Supprimé : C:\Users\Public\Desktop\eBay.lnk
Fichier Supprimé : C:\Users\BECHAR ZINEB\AppData\Roaming\Mozilla\Firefox\Profiles\gv7py43i.default\user.js
Fichier Supprimé : C:\Users\BECHAR ZINEB\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_strongsignal-a.akamaihd.net_0.localstorage
Fichier Supprimé : C:\Users\BECHAR ZINEB\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_strongsignal-a.akamaihd.net_0.localstorage-journal
Fichier Supprimé : C:\Users\BECHAR ZINEB\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxps_strongsignal-a.akamaihd.net_0.localstorage
Fichier Supprimé : C:\Users\BECHAR ZINEB\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxps_strongsignal-a.akamaihd.net_0.localstorage-journal

• • • • • [ Tâches planifiées ] *****
        • [ Raccourcis ] *****

Raccourci Désinfecté : C:\Users\BECHAR ZINEB\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Internet Explorer.LNK

• • • • • [ Registre ] *****

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\iedll.dll
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{B853E835-9F24-4F4B-B55C-E554D15CCCD2}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E104B9E4-01BA-4AAF-9957-6A525CC5451A}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C723A437-2EAF-466D-A95B-3FA0966BF88C}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62155D33-3CE2-401E-8967-5A270628A3D5}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{E104B9E4-01BA-4AAF-9957-6A525CC5451A}
Clé Supprimée : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62155D33-3CE2-401E-8967-5A270628A3D5}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{32F73813-A895-4D50-B049-CAEF213BBCA0}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{32F73813-A895-4D50-B049-CAEF213BBCA0}
Clé Supprimée : HKCU\Software\UpdateStar
Clé Supprimée : HKCU\Software\PRODUCTSETUP
Clé Supprimée : HKLM\SOFTWARE\Linkey
Clé Supprimée : HKLM\SOFTWARE\StrongSignal
Clé Supprimée : [x64] HKLM\SOFTWARE\Linkey

• • • • • [ Navigateurs ] *****

-\\ Internet Explorer v11.0.9600.17840

Paramètre Restauré : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v39.0 (x86 fr)

-\\ Google Chrome v45.0.2454.6

[C:\Users\BECHAR ZINEB\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Supprimée [Homepage] : hxxp://www.default-search.net?sid=476&aid=171&itype=a&ver=13337&tm=401&src=hmp

-\\ Opera v30.0.1835.125

AdwCleaner[R0].txt - [5023 octets] - [16/07/2015 11:35:39]
AdwCleaner[S0].txt - [4375 octets] - [16/07/2015 11:57:36]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4435 octets] ##########

# AdwCleaner v5.015 - Rapport créé le 30/10/2015 à 18:32:06
# Mis à jour le 26/10/2015 par Xplode
# Base de données : 2015-10-29.1 [Serveur]
# Système d'exploitation : Windows Se7en Titan (x86)
# Nom d'utilisateur : Moha - MOHA-PC
# Exécuté depuis : C:\Users\Moha\Downloads\adwcleaner_5.015.exe
# Option : Nettoyer
# Support : http://toolslib.net/forum

• • • • • [ Services ] *****
        • [ Dossiers ] *****

[-] Dossier Supprimé : C:\Program Files\myfree codec

• • • • • [ Fichiers ] *****
        • [ DLLs ] *****
        • [ Raccourcis ] *****

[-] Raccourci Désinfecté : C:\Users\Moha\Desktop\Google Chrome.lnk
[-] Raccourci Désinfecté : C:\Users\Moha\Desktop\Internet Explorer.lnk
[-] Raccourci Désinfecté : C:\Users\Moha\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\chrome.LNK
[-] Raccourci Désinfecté : C:\Users\Moha\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Internet Explorer.LNK

• • • • • [ Tâches planifiées ] *****
        • [ Registre ] *****

[-] Clé Supprimée : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
[-] Clé Supprimée : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1

• • • • • [ Navigateurs ] *****

:: Paramètres Winsock réinitialisés

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1247 octets] ##########

AdwCleaner n'est pas adapté pour cette infection

Voir : https://www.supprimer-virus.com/erreur-bin-doc/

Salut,

Tu as installé des adwares et programmes parasites sur ton PC qui ouvrent des publicités et ralentissent l'ordinateur et les navigateurs WEB.
Voici la procédure à suivre pour les supprimer :

Télécharge https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= AdwCleaner ( d'Xplode ) sur ton bureau.
Sur la page d'AdwCleaner, à droite, clic sur la disquette grise avec la flèche verte pour lancer le téléchargement.
Lance AdwCleaner, clique sur [Scanner].
Le scan peux durer plusieurs minutes, patienter.
Une fois le scan terminé, clique sur [Nettoyer]

Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

puis fais une suppression USBFix avec tes clefs branchées : https://www.malekal.com/usbfix-supprimer-virus-usb/