Rapport zhp diag, merci !
Bonjour,
pouvez vous me dire s'il y a y un prob avec mon pc qui rame à fond... :(
voici le rapport de zhp diag
merci d'avance
~ Rapport de ZHPDiag v2014.12.21.176 - Nicolas Coolman (21/12/2014)
~ Lancé par toshiba (21/12/2014 10:39:55)
~ Facebook : https://www.facebook.com/nicolascoolman1
~ Adresse du Forum https://nicolascoolman.eu
~ Traduit par Nicolas Coolman
~ Etat de la version : Version à jour.
~ Liste blanche : Activée par le programme
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Deactivate by program
---\\ Navigateurs Internet
MSIE: Internet Explorer v11.0.9600.17501
MFIE: Mozilla Firefox 32.0.3
GCIE: Google Chrome v37.0.2062.120 (Defaut)
---\\ Informations sur les produits Windows
~ Langage: Français
Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows Operating System - Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : W8DQG
Windows License : OK
~ Windows Remaining Initializations Number : 2
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ Logiciels de protection du système
avast! Free Antivirus v9.0.2018
Trusteer Sécurité des points d'accès v3.5.1404.34
Malwarebytes Anti-Malware version 2.0.2.1012
Microsoft Security Client v4.6.0305.0
Ad-Aware Browsing Protection v1.0.1.94
Windows Defender W7 (Deactivate)
---\\ Logiciels d'optimisation du système
CCleaner v4.07
---\\ Logiciels de partage PeerToPeer
---\\ Surveillance de Logiciels
Adobe Flash Player 15 Plugin
Adobe Reader X
---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 4055 MB (23% free)
System Restore: Activé (Enable)
System drive C: has 230 GB (39%) free of 579 GB
---\\ Mode de connexion au système
~ Computer Name: TOSHIBA-TOSH
~ User Name: toshiba
~ All Users Names: toshiba, HomeGroupUser$, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator
---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\toshiba\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\toshiba\AppData\Roaming\
~ %Desktop% : C:\Users\toshiba\Desktop\
~ %Favorites% : C:\Users\toshiba\Favorites\
~ %LocalAppData% : C:\Users\toshiba\AppData\Local\
~ %StartMenu% : C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 230 Go of 579 Go)
D: CD-ROM drive (Free 0 Go of 4 Go)
Q: Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go)
---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
~ Security Center: 41 Legitimates Filtered in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.4AF089160FE082E5EA5C4AA72782DCA2] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.22/11/2014 - 02:28:21.) -- C:\Windows\System32\wininet.dll [2358272]
[MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - (.Microsoft Corporation - Application dâ€(TM)ouverture de session Windows.) (.17/07/2014 - 03:07:24.) -- C:\Windows\System32\Winlogon.exe [455168]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/11/2010 - 04:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.FA886682CFC5D36718D3E436AACF10B9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.30/05/2014 - 07:45:52.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21/11/2010 - 04:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24/01/2014 - 03:37:55.) -- C:\Windows\system32\Drivers\ntfs.sys [1684928]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/11/2010 - 04:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.70988118145F5F10EF24720B97F35F65] - (.Microsoft Corporation - TDI Translation Driver.) (.11/11/2014 - 02:46:26.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.DF8126BD41180351A093A3AD2FC8903B] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.25/02/2011 - 07:25:38.) -- C:\Windows\system32\Drivers\volsnap.sys [296320]
~ Generic Processes: Scanned in 00mn 04s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/4
~ Mes musiques (My Musics) : 1/18
~ Mes Videos (My Videos) : 1/19
~ Mes Favoris (My Favorites) : 1/19
~ Mes Documents (My Documents) : 2/378
~ Mon Bureau (My Desktop) : 1/61683
~ Menu demarrer (Programs) : 1/56
~ Hidden Files: Scanned in 01mn 08s
---\\ Processus lancés
[MD5.C904FA421783697934CE43F80E880CC9] - (.IBM Corp. - RapportService.) -- C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe [2607384] [PID.2256]
[MD5.4F9236BE13917B89F7A03DEA85F220FA] - (.Pas de propriétaire - WebPlayer.) -- C:\Users\toshiba\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe [202752] [PID.2712] =>Adware.SocialSkinz
[MD5.3FAFBCCE3F066EDCC263E25A786FFD50] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [21650016] [PID.2728]
[MD5.E986D1068AEF099CA3BE2AEAB4C8D643] - (.Hewlett-Packard Co. - HP Digital Imaging Monitor.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [270336] [PID.2756]
[MD5.21B8FAAFA5CCD89663AAD5833ABF4B35] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe [3890208] [PID.2844]
[MD5.52EA6C0C8A124BFB1065482392C8E1F5] - (.Wondershare - Wondershare Studio.) -- C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1743648] [PID.2520]
[MD5.308F2EE28005510DE616409148CF077B] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896] [PID.4372]
[MD5.F12FF2ECB2F6F7D9C5062D67D8334AE9] - (.Hewlett-Packard Co. - HP CUE Status Root.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe [168960] [PID.5332]
[MD5.0335B80F0C3F3D2BE9E1F34292A33D98] - (.Hewlett-Packard Co. - HP CUE Alert Popup Window Objects.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe [559104] [PID.5852]
[MD5.883008A9B5BFF94A153D99DBA54CB5C1] - (.Hewlett-Packard - GPCore COM object.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe [362496] [PID.5816]
[MD5.6226810F26227F083929AC5584122951] - (.Dropbox, Inc. - Dropbox.) -- C:\Users\toshiba\AppData\Roaming\Dropbox\bin\Dropbox.exe [39207112] [PID.4888]
[MD5.45D5AFF33A714C7FA5837C13C318A06A] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [296520] [PID.9512]
[MD5.AC08A03D7E579E2903925736E7AB48F2] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [852808] [PID.5780]
[MD5.97EEE26B60EBC5A2AFFF84AEB3F44968] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8141824] [PID.8968]
[MD5.6BA0E2EED2C1C65A7FBFE26467AF5013] - (.IBM Corp. - RapportMgmtService.) -- C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [1919256] [PID.1160]
[MD5.37D17AE2936867F88EB3C4CBCBC6B8A1] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344] [PID.1692]
[MD5.D858BA2EE718B1DB1CED20646E641D08] - (.globalUpdate - globalUpdate Update.) -- C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608] [PID.2652] =>PUP.GlobalUpdate
[MD5.D2BADE6776A96ED602F1319146749EDA] - (.app - Browsers+_App+s+ exe.) -- C:\Program Files (x86)\Browsers+_App+s+\d3a7adb0-8776-4f25-bb54-5bacb797e6ed.exe [382368] [PID.2856] =>PUP.CrossRider
[MD5.1F79342D9EB530A48742F651E570983A] - (.Microsoft Corporation - Updates Skype Click to Call.) -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176] [PID.2272]
[MD5.CB8C1CC4F46FBAC78150754D77460C73] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe [230792] [PID.1324]
[MD5.E4938E0A376CF0B9D989EE5C0A146891] - (.Microsoft Corporation - Phone Number Recognition (PNR) module.) -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520] [PID.4136]
[MD5.20372BE109FEE1C37E2D5216680DB9EB] - (.pdfforge GmbH - PDF Architect Helper Service.) -- C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496] [PID.2300]
[MD5.5DDAB1319ACA5F9DAED11F27D8B615BB] - (...) -- C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39568] [PID.4924]
[MD5.A1AC400C87A5B819285899645FE12DAE] - (...) -- C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [23552] [PID.2264]
[MD5.0CADE4EF6D26F9FE974ED7CE959E8CF6] - (...) -- C:\Users\toshiba\AppData\Roaming\VOPackage\VOsrv.exe [73216] [PID.5004] =>Adware.Downware
[MD5.39B1D0A636A400304565D4521FAD6D77] - (.Microsoft Corporation - Microsoft Application Virtualization Virtua.) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [207528] [PID.4608]
[MD5.77C5A741A7452812F278EF2C18478862] - (.Microsoft Corporation - Microsoft Application Virtualization Client.) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [523944] [PID.5740]
[MD5.FD557A50A65E44041CD2FCEF4BEB04DB] - (.Microsoft Corporation - Microsoft Office Client Virtualization Serv.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.exe [822504] [PID.4788]
[MD5.DFE14D63F0F649EE94A9E3442B7C8F2C] - (.Nero AG - NeroUpdate.) -- C:\Program Files (x86)\Nero\Update\NASvc.exe [687400] [PID.4200]
~ Processes Running: Scanned in 00mn 07s
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\toshiba\AppData\Local\Google\Chrome\User Data\Default\Preferences
---\\ Liste des dossiers d'extension Google Chrome
~ Google Lines Browser: 0 Legitimates Filtered in 00mn 00s
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\kv59zm6l.default\prefs.js
M3 - MFPP: Plugins - [toshiba] -- C:\Users\toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\kv59zm6l.default\searchplugins\Web Search.xml =>Parasite.Pugi
M3 - MFPP: Plugins - [toshiba] -- C:\Users\toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\kv59zm6l.default\searchplugins\yahoo-avast.xml
M2 - MFEP: RegExtension {8D150B8F-EFE8-45a3-A4A3-053020F48FAC} . (...) -- C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRFirefoxExt\ (.not file.)
M2 - MFEP: RegExtension {B64D9B05-48E1-4CEB-BF58-E0643994E900} . (...) -- C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ (.not file.)
M0 - MFSP: prefs.js [toshiba - kv59zm6l.default] http://istart.webssearches.com =>Hijacker.WebsSearches
M2 - MFEP: prefs.js [toshiba - kv59zm6l.default\cacaoweb@cacaoweb.org] [] cacaoweb v1.0.34 (..) =>PUP.CacaoWeb
M2 - MFEP: prefs.js [toshiba - kv59zm6l.default\wrigtdamon@yahoo.com] [] Browsers+_App+s+ v1.0.34 (..) =>PUP.CrossRider
M2 - MFEP: prefs.js [toshiba - kv59zm6l.default\{908d038c-5d70-cc76-cbc1-4a31032c9d43}] [] Shopping Helper Smartbar v1.0.34 (..) =>Hijacker.SmartBar
~ Firefox Browser: 9 Legitimates Filtered in 00mn 01s
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://istart.webssearches.com =>Hijacker.WebsSearches
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com =>Hijacker.WebsSearches
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com =>Hijacker.WebsSearches
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://istart.webssearches.com =>Hijacker.WebsSearches
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = https://search.safefinder.com/?q= =>Hijacker.SmartBar
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = https://search.safefinder.com/?q= =>Hijacker.SmartBar
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = about:newtab
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com =>Hijacker.WebsSearches
~ IE Browser: 22 Legitimates Filtered in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (21)
~ Hosts File: Scanned in 00mn 00s
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer [64Bits] - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealDownloader - RealPlayer Video Downloader.) -- C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O2 - BHO: Shopping Helper SmartbarEngine [64Bits] - {31ad400d-1b06-4e33-a59a-90c2c140cba0} . (...) -- mscoree.dll (.not file.) =>Hijacker.SmartBar
O2 - BHO: (no name) [64Bits] - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} Clé orpheline
O2 - BHO: WsSVRIEHelper [64Bits] - {65DEE40A-3E93-4cae-9F98-B8E06DCEE2BF} . (.Wondershare Software Co., Ltd. - Wondershare Video Converter Ultimate Plugin.) -- C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRIEPlugin.dll
~ BHO: 21 Legitimates Filtered in 00mn 01s
---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: avast! Online Security - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} . (...) -- (.not file.)
O3 - Toolbar: (no name) - [HKLM]{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} Clé orpheline
O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
O3 - Toolbar: Shopping Helper Smartbar - [HKLM]{ae07101b-46d4-4a98-af68-0333ea26e113} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>Hijacker.SmartBar
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{8E5025C2-8EA3-430D-80B8-A14151068A6D} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{9B53772A-8259-495D-A6B2-FA5966FE52E1} Clé orpheline
~ Toolbar: Scanned in 00mn 00s
---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop [Public]: FLVConverter.lnk . (.http://www.savevideoplugin.com/ - FLV Converter allows to convert FLV videos.) -- C:\Program Files (x86)\SaveVideo plugin For IE\FLVConverter.exe =>Adware.Bandoo
O4 - GS\Desktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\Desktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\Desktop [Public]: VAFPlayer.lnk . (...) -- C:\windows\Installer\{EBE677C0-CBCB-4EBF-8098-E27E1B5271CF}\_AAA051C67F9CDDC2624EB5.exe =>PUP.VAFPlayer
O4 - GS\Program [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\QuickLaunch [toshiba]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\QuickLaunch [toshiba]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\QuickLaunch [toshiba]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\toshiba\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O4 - GS\TaskBar [toshiba]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\TaskBar [toshiba]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\TaskBar [toshiba]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\Program [toshiba]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\Program [toshiba]: Search.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\SystemTools [toshiba]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\Desktop [toshiba]: Gestionnaire de téléchargements musicMe.lnk . (...) -- C:\Users\toshiba\AppData\Roaming\Microsoft\Installer\{3245B3E9-6A16-41F4-8E5F-6DA4FDACD26F}\DesktopIcon.exe =>Adware.ADON
O4 - GS\Desktop [toshiba]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\Desktop [toshiba]: Search.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\Desktop [toshiba]: Sync Folder.lnk . (.MyPCBackup.com - MyPC Backup.) -- C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe =>PUP.MyPCBackup
O4 - GS\Desktop [toshiba]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\toshiba\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
~ Global Startup: 24 Legitimates Filtered in 00mn 15s
---\\ Applications lancées au démarrage du système (O4)
O4 - GS\Startup [toshiba]: MyPC Backup.lnk . (.MyPCBackup.com - MyPC Backup.) -- C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe =>PUP.MyPCBackup
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe
O4 - HKCU\..\Run: [TOPI.EXE] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe =>.Toshiba Corporation
O4 - HKCU\..\Run: [KiesPDLR] . (.Pas de propriétaire - KiesPDLR.) -- C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [FLV Player] . (.Pas de propriétaire - WebPlayer.) -- C:\Users\toshiba\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe =>Adware.SocialSkinz
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] . (.Adobe Systems Incorporated - Adobe® Flash® Player Installer/Uninstaller.) -- C:\windows\SysWOW64\Macromed\Flash\FlashUtil32_15_0_0_246_Plugin.exe
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKLM\..\Wow6432Node\Run: [Wondershare Helper Compact.exe] . (.Wondershare - Wondershare Studio.) -- C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
O4 - HKLM\..\Wow6432Node\Run: [BrowserPlugInHelper] . (...) -- C:\Program Files (x86)\Wondershare\Video Converter Ultimate\BrowserPlugInHelper.exe
O4 - HKLM\..\Wow6432Node\Run: [hpqSRMon] . (.Hewlett-Packard - HpqSRmon.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation
O4 - HKLM\..\Wow6432Node\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- c:\program files (x86)\real\realplayer\Update\realsched.exe =>.RealNetworks, Inc
O4 - HKUS\.DEFAULT\..\Run: [TOPI.EXE] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe =>.Toshiba Corporation
O4 - HKUS\S-1-5-18\..\Run: [TOPI.EXE] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe =>.Toshiba Corporation
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\Run: [TOPI.EXE] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe =>.Toshiba Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [TOPI.EXE] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe =>.Toshiba Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-2809402794-2372651033-1740309217-1001\..\Run: [TOPI.EXE] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe =>.Toshiba Corporation
O4 - HKUS\S-1-5-21-2809402794-2372651033-1740309217-1001\..\Run: [KiesPDLR] . (.Pas de propriétaire - KiesPDLR.) -- C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKUS\S-1-5-21-2809402794-2372651033-1740309217-1001\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-21-2809402794-2372651033-1740309217-1001\..\Run: [FLV Player] . (.Pas de propriétaire - WebPlayer.) -- C:\Users\toshiba\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe =>Adware.SocialSkinz
O4 - HKUS\S-1-5-21-2809402794-2372651033-1740309217-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O4 - HKUS\S-1-5-21-2809402794-2372651033-1740309217-1001\..\RunOnce: [FlashPlayerUpdate] . (.Adobe Systems Incorporated - Adobe® Flash® Player Installer/Uninstaller.) -- C:\windows\SysWOW64\Macromed\Flash\FlashUtil32_15_0_0_246_Plugin.exe
~ Application: Scanned in 00mn 00s
---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Skype Click to Call settings [64Bits] - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- c:\program files (x86)\skype\toolbars\internet explorer x64\icon.ico
O9 - Extra button: Free YouTube Download [64Bits] - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} . (...) -- C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\dvdvideosoft.ico
~ IE Extra Buttons: Scanned in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{3954515A-BCE6-4D16-B844-B80B9F1236B1}: NameServer = 5.79.84.141,8.38.77.107
O17 - HKLM\System\CCS\Services\Tcpip\..\{819C5EC7-C536-47B5-92FA-1EB634938737}: NameServer = 5.79.84.141,8.38.77.107
O17 - HKLM\System\CCS\Services\Tcpip\..\{27973BA0-A3E9-4182-A4C7-201ACA8C57D3}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{3954515A-BCE6-4D16-B844-B80B9F1236B1}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\..\{819C5EC7-C536-47B5-92FA-1EB634938737}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\..\{3954515A-BCE6-4D16-B844-B80B9F1236B1}: DhcpDomain = bouyguesbox.fr
O17 - HKLM\System\CCS\Services\Tcpip\..\{819C5EC7-C536-47B5-92FA-1EB634938737}: DhcpDomain = bouyguesbox.fr
O17 - HKLM\System\CS1\Services\Tcpip\..\{3954515A-BCE6-4D16-B844-B80B9F1236B1}: NameServer = 5.79.84.141,8.38.77.107
O17 - HKLM\System\CS1\Services\Tcpip\..\{819C5EC7-C536-47B5-92FA-1EB634938737}: NameServer = 5.79.84.141,8.38.77.107
O17 - HKLM\System\CS1\Services\Tcpip\..\{27973BA0-A3E9-4182-A4C7-201ACA8C57D3}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{3954515A-BCE6-4D16-B844-B80B9F1236B1}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{819C5EC7-C536-47B5-92FA-1EB634938737}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{3954515A-BCE6-4D16-B844-B80B9F1236B1}: DhcpDomain = bouyguesbox.fr
O17 - HKLM\System\CS1\Services\Tcpip\..\{819C5EC7-C536-47B5-92FA-1EB634938737}: DhcpDomain = bouyguesbox.fr
O17 - HKLM\System\CS2\Services\Tcpip\..\{3954515A-BCE6-4D16-B844-B80B9F1236B1}: NameServer = 5.79.84.141,8.38.77.107
O17 - HKLM\System\CS2\Services\Tcpip\..\{819C5EC7-C536-47B5-92FA-1EB634938737}: NameServer = 5.79.84.141,8.38.77.107
O17 - HKLM\System\CS2\Services\Tcpip\..\{27973BA0-A3E9-4182-A4C7-201ACA8C57D3}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{819C5EC7-C536-47B5-92FA-1EB634938737}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS2\Services\Tcpip\..\{819C5EC7-C536-47B5-92FA-1EB634938737}: DhcpDomain = bouyguesbox.fr
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
~ Domain: Scanned in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (.Skytech Co., Ltd. - Skytech.) - C:\Program Files (x86)\SupTab\SearchProtect64.dll =>PUP.SearchProtect
~ AppInit DLL: Scanned in 00mn 00s
---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Computer Backup (MyPC Backup) (BackupStack) . (.Just Develop It - Backup Stack.) - C:\Program Files (x86)\MyPC Backup\BackupStack.exe =>PUP.MyPCBackup
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) . (.globalUpdate - globalUpdate Update.) - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe =>PUP.GlobalUpdate
O23 - Service: IePlugin Services (IePluginServices) . (.Cherished Technololgy LIMITED - IePlugin Service.) - C:\ProgramData\IePluginServices\PluginService.exe =>PUP.IePluginService
O23 - Service: Mobile Broadband HL Service (Mobile Broadband HL Service) . (...) - C:\ProgramData\MobileBrServ\mbbservice.exe
O23 - Service: Protect Monitor (ProtectMonitor) . (...) - C:\monitorsvc.exe
O23 - Service: RealPlayer Update Service (RealPlayerUpdateSvc) . (...) - C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
O23 - Service: VO Service component (servervo) . (...) - C:\Users\toshiba\AppData\Roaming\VOPackage\VOsrv.exe =>Adware.Downware
~ Services: 20 Legitimates Filtered in 00mn 28s
---\\ Tâches planifiées en automatique (O39)
[MD5.07D70BB0B2B92FD967CE8A216A892F4D] [APT] [21e3d187-f27b-4325-94bd-115282fc8941-1] (.app.) -- C:\Program Files (x86)\Browsers+_App+s+\Browsers+_App+s+-codedownloader.exe [1130912] =>PUP.CrossRider
[MD5.2E996BA06C76F1D717C8790475CCAA6D] [APT] [21e3d187-f27b-4325-94bd-115282fc8941-11] (.app.) -- C:\Program Files (x86)\Browsers+_App+s+\21e3d187-f27b-4325-94bd-115282fc8941-11.exe [1989024] =>PUP.CrossRider
[MD5.E6AC11D205F27802E4316C458B9F2162] [APT] [21e3d187-f27b-4325-94bd-115282fc8941-2] (.app.) -- C:\Program Files (x86)\Browsers+_App+s+\21e3d187-f27b-4325-94bd-115282fc8941-2.exe [952736] =>PUP.CrossRider
[MD5.2E996BA06C76F1D717C8790475CCAA6D] [APT] [21e3d187-f27b-4325-94bd-115282fc8941-3] (.app.) -- C:\Program Files (x86)\Browsers+_App+s+\21e3d187-f27b-4325-94bd-115282fc8941-3.exe [1989024] =>PUP.CrossRider
[MD5.003312E250B84736514EE9F0B219AAAE] [APT] [21e3d187-f27b-4325-94bd-115282fc8941-4] (.app.) -- C:\Program Files (x86)\Browsers+_App+s+\21e3d187-f27b-4325-94bd-115282fc8941-4.exe [1536928] =>PUP.CrossRider
[MD5.AE50B376D37F72AF58F08535012D8AE5] [APT] [21e3d187-f27b-4325-94bd-115282fc8941-5] (.app.) -- C:\Program Files (x86)\Browsers+_App+s+\21e3d187-f27b-4325-94bd-115282fc8941-5.exe [885152] =>PUP.CrossRider
[MD5.AE50B376D37F72AF58F08535012D8AE5] [APT] [21e3d187-f27b-4325-94bd-115282fc8941-5_user] (.app.) -- C:\Program Files (x86)\Browsers+_App+s+\21e3d187-f27b-4325-94bd-115282fc8941-5.exe [885152] =>PUP.CrossRider
[MD5.756AAFF9640533D86CB93F8395331C00] [APT] [21e3d187-f27b-4325-94bd-115282fc8941-6] (.app.) -- C:\Program Files (x86)\Browsers+_App+s+\21e3d187-f27b-4325-94bd-115282fc8941-6.exe [1298848] =>PUP.CrossRider
[MD5.07D70BB0B2B92FD967CE8A216A892F4D] [APT] [21e3d187-f27b-4325-94bd-115282fc8941-7] (.app.) -- C:\Program Files (x86)\Browsers+_App+s+\21e3d187-f27b-4325-94bd-115282fc8941-7.exe [1130912] =>PUP.CrossRider
[MD5.0C92DADC072A378370F4A86E60661818] [APT] [31e367ae-b9cb-4a8d-84f8-fdf4c51ca41e] (...) -- C:\Program Files (x86)\Browsers+_App+s+\31e367ae-b9cb-4a8d-84f8-fdf4c51ca41e.exe [32160] =>PUP.CrossRider
[MD5.00000000000000000000000000000000] [APT] [Ad-Aware Antivirus Scheduled Scan] (...) -- C:\Program Files (x86)\AD-AWA~1\AdAwareLauncher.exe (.not file.) [0]
[MD5.D2BADE6776A96ED602F1319146749EDA] [APT] [d3a7adb0-8776-4f25-bb54-5bacb797e6ed] (.app.) -- C:\Program Files (x86)\Browsers+_App+s+\d3a7adb0-8776-4f25-bb54-5bacb797e6ed.exe [382368] =>PUP.CrossRider
[MD5.A7BA480E03ACDCA4FAEFE89B214AC51B] [APT] [LaunchSignup] (.MyPC Backup.) -- C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe [1191024] =>PUP.JDIBackup
[MD5.2080F4200FF1A73AC2D92CC661D22798] [APT] [{FD48F38F-B4AE-4B80-B0FF-75E0EEB16863}] (...) -- C:\Users\toshiba\Downloads\AppCleaner_installer.exe [469424]
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-1 - (.app.) -- C:\Windows\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-1.job [2770] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-1 - (.app.) -- C:\Windows\System32\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-1 [2770] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-11 - (.app.) -- C:\Windows\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-11.job [4490] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-11 - (.app.) -- C:\Windows\System32\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-11 [4490] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-2 - (.app.) -- C:\Windows\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-2.job [2104] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-2 - (.app.) -- C:\Windows\System32\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-2 [2104] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-3 - (.app.) -- C:\Windows\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-3.job [3808] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-3 - (.app.) -- C:\Windows\System32\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-3 [3808] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-4 - (.app.) -- C:\Windows\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-4.job [3808] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-4 - (.app.) -- C:\Windows\System32\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-4 [3808] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-5 - (.app.) -- C:\Windows\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-5.job [2440] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-5 - (.app.) -- C:\Windows\System32\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-5 [2440] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-5_user - (.app.) -- C:\Windows\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-5_user.job [2440] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-5_user - (.app.) -- C:\Windows\System32\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-5_user [2440] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-6 - (.app.) -- C:\Windows\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-6.job [3464] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-6 - (.app.) -- C:\Windows\System32\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-6 [3464] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-7 - (.app.) -- C:\Windows\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-7.job [3464] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-7 - (.app.) -- C:\Windows\System32\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-7 [3464] =>PUP.CrossRider
O39 - APT: 31e367ae-b9cb-4a8d-84f8-fdf4c51ca41e - (...) -- C:\Windows\Tasks\31e367ae-b9cb-4a8d-84f8-fdf4c51ca41e.job [632]
O39 - APT: 31e367ae-b9cb-4a8d-84f8-fdf4c51ca41e - (...) -- C:\Windows\System32\Tasks\31e367ae-b9cb-4a8d-84f8-fdf4c51ca41e [632]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
O39 - APT: d3a7adb0-8776-4f25-bb54-5bacb797e6ed - (.app.) -- C:\Windows\Tasks\d3a7adb0-8776-4f25-bb54-5bacb797e6ed.job [1460] =>PUP.CrossRider
O39 - APT: d3a7adb0-8776-4f25-bb54-5bacb797e6ed - (.app.) -- C:\Windows\System32\Tasks\d3a7adb0-8776-4f25-bb54-5bacb797e6ed [1460] =>PUP.CrossRider
O39 - APT: - (..) -- C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job [890] =>PUP.GlobalUpdate
O39 - APT: - (..) -- C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore [890] =>PUP.GlobalUpdate
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1066]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1070]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon [830]
O39 - APT: APT: - (..) -- C:\Windows\System32\System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon [830] - (..) -- C:\Windows\System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d [832]
O39 - APT: - (..) -- C:\Windows\Tasks\SpeedUpMyPC Maintenance.job [282] =>PUP.SpeedUpMyPC
O39 - APT: - (..) -- C:\Windows\System32\Tasks\SpeedUpMyPC Maintenance [282] =>PUP.SpeedUpMyPC
O39 - APT: - (..) -- C:\Windows\Tasks\SpeedUpMyPC Startup.job [282] =>PUP.SpeedUpMyPC
O39 - APT: - (..) -- C:\Windows\System32\Tasks\SpeedUpMyPC Startup [282] =>PUP.SpeedUpMyPC
~ Scheduled Task: 69 Legitimates Filtered in 00mn 20s
---\\ Logiciels installés (O42)
O42 - Logiciel: BestPractice (remove only) - (...) [HKLM][64Bits] -- BestPractice
O42 - Logiciel: Boxore Client - (.Boxore OU.) [HKLM][64Bits] -- {0E365FDA-909F-4939-838A-261DD468D862} =>Adware.Boxore
O42 - Logiciel: Browsers+_App+s+ - (.app.) [HKLM][64Bits] -- Browsers+_App+s+ =>PUP.CrossRider
O42 - Logiciel: DomaIQ - (.Tuguu SLU.) [HKLM][64Bits] -- DomaIQ Uninstaller =>PUP.VAFPlayer
O42 - Logiciel: Extended Update - (...) [HKCU][64Bits] -- AffiliatedUpdate =>PUP.Dealply
O42 - Logiciel: Iminent - (.Iminent.) [HKLM][64Bits] -- {491C9A4E-6E50-4B53-911D-861BA8DA3C21} =>Adware.IMBooster
O42 - Logiciel: MyPC Backup - (.JDi Backup Ltd.) [HKLM][64Bits] -- MyPC Backup =>PUP.MyPCBackup
O42 - Logiciel: NewPlayer - (.NewPlayer-software.) [HKLM][64Bits] -- 119E4BDA-F023-280E-77B9-027A97BD23AD =>Adware.NewPlayer
O42 - Logiciel: OXYBOO version 8.0.0.25 - (.OXYBOO.) [HKLM][64Bits] -- {315AFBF0-9CAC-4F86-8850-B7AB02CB2D93}_is1
O42 - Logiciel: PokerStars.fr - (.PokerStars.fr.) [HKLM][64Bits] -- PokerStars.fr
O42 - Logiciel: Rummyworld - (...) [HKLM][64Bits] -- Rummyworld
O42 - Logiciel: Save Video plugin for IE (ver. 4.2) - (.SVSoftware, LTD..) [HKLM][64Bits] -- {8F094FCD-3085-4145-9D30-F7808995AFAC}_is1
O42 - Logiciel: Shopping Helper Smartbar - (.ReSoft Ltd..) [HKLM][64Bits] -- {C64BEB42-B25D-4674-BB55-4099CB720110} =>Hijacker.SmartBar
O42 - Logiciel: Shopping Helper Smartbar Engine - (.ReSoft Ltd..) [HKCU][64Bits] -- {d2be58c2-20ab-43a1-97c7-80496c985742} =>Hijacker.SmartBar
O42 - Logiciel: SweetPacks bundle uninstaller - (.SweetIM Technologies Ltd..) [HKLM][64Bits] -- {0C43FE6B-E881-4AFC-B384-4AEBC90047E8} =>PUP.SweetIM
O42 - Logiciel: Update Manager for SweetPacks 1.1 - (.SweetIM Technologies Ltd..) [HKLM][64Bits] -- {EA8FA6BE-29BE-4AF2-9352-841F83215EB0} =>PUP.SweetIM
O42 - Logiciel: VAFPlayer - (.Tuguu SL.) [HKLM][64Bits] -- {EBE677C0-CBCB-4EBF-8098-E27E1B5271CF} =>PUP.VAFPlayer
O42 - Logiciel: Video Clip Grab Toolbar - (.Video Clip Grab.) [HKLM][64Bits] -- Video_Clip_Grab Toolbar
O42 - Logiciel: Web Protect for Windows - (.PC Publishing.) [HKLM][64Bits] -- wp-dcollect-tgu =>PUP.WebProtect
O42 - Logiciel: Webplayer - (.Kreapixel.) [HKLM][64Bits] -- {9937E55B-6331-4804-93EF-77E992F204BD} =>Adware.SocialSkinz
O42 - Logiciel: Yahoo! Toolbar - (...) [HKLM][64Bits] -- Yahoo! Companion
O42 - Logiciel: Yontoo 1.10.03 - (.Yontoo LLC.) [HKLM][64Bits] -- {889DF117-14D1-44EE-9F31-C5FB5D47F68B} =>Adware.Yontoo
O42 - Logiciel: rrsavings - (.rrsavings.) [HKLM][64Bits] -- rrsavings =>PUP.SupraSavings
O42 - Logiciel: webssearches uninstaller - (.webssearches.) [HKLM][64Bits] -- webssearches uninstaller =>Hijacker.WebsSearches
~ Logic: 51 Legitimates Filtered in 00mn 02s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\5f2d9dae03be410] =>Hijacker.Eazel
[HKCU\Software\Alexa Internet]
[HKCU\Software\BearShare] =>PUP.BearShare
[HKCU\Software\Boxore] =>Adware.Boxore
[HKCU\Software\Conduit_Search_Protect]
[HKCU\Software\FileScout] =>PUP.FileScout
[HKCU\Software\GSC]
[HKCU\Software\IM]
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKCU\Software\InstalledBrowserExtensions] =>Adware.VidSaver
[HKCU\Software\OXYBOO]
[HKCU\Software\PCTRunner] =>PUP.WebProtect
[HKCU\Software\SmartbarBackup] =>Hijacker.SmartBar
[HKCU\Software\SmartbarLog] =>Hijacker.SmartBar
[HKCU\Software\Smartbar] =>Hijacker.SmartBar
[HKCU\Software\TutoTag] =>PUP.AgenceExclusive
[HKCU\Software\Tutorials] =>PUP.AgenceExclusive
[HKCU\Software\WNLT] =>Adware.IncrediBar
[HKCU\Software\WSVCUPlugin]
[HKCU\Software\cacaoweb] =>PUP.CacaoWeb
[HKCU\Software\lollipop] =>Adware.Lollipop
[HKCU\Software\wscontb]
[HKCU\Software\Ã"¦Ã"Ãf³ÃOEÃ?òÃ?òµ¼Éú³ÉµÃ"±¾µÃ~Ã"¦Ã"Ãf³ÃOEÃ?ò]
[HKLM\Software\InstalledBrowserExtensions] =>Adware.VidSaver
[HKLM\Software\Tarma Installer] =>PUP.Tarma
[HKLM\Software\WNLT] =>Adware.IncrediBar
[HKLM\Software\Wow6432Node\5f2d9dae03be410] =>Hijacker.Eazel
[HKLM\Software\Wow6432Node\86e96d07-fe6c-4d48-ab2e-1d28792b963f] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\AedgePerformanceBCN] =>Adware.SPointer
[HKLM\Software\Wow6432Node\Babylon] =>PUP.Babylon
[HKLM\Software\Wow6432Node\Browsers+_App+s+-nv] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\IncrediMail]
[HKLM\Software\Wow6432Node\InstalledBrowserExtensions] =>Adware.VidSaver
[HKLM\Software\Wow6432Node\PCTRunner] =>PUP.WebProtect
[HKLM\Software\Wow6432Node\Services x86] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\SupDp] =>PUP.SupTab
[HKLM\Software\Wow6432Node\Tutorials] =>PUP.AgenceExclusive
[HKLM\Software\Wow6432Node\Video_Clip_Grab]
[HKLM\Software\Wow6432Node\Wpm] =>PUP.WpManager
[HKLM\Software\Wow6432Node\cd0a9d2c-ca44-4603-bcd4-cb236c4e47a3] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\supTab] =>PUP.SupTab
[HKLM\Software\jumpshot.com]
~ Key Software: 566 Legitimates Filtered in 00mn 02s
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 26/06/2014 - 11:15:03 - [] ----D C:\Program Files (x86)\Any Video Recorder
O43 - CFD: 29/11/2012 - 12:30:03 - [] ----D C:\Program Files (x86)\BestPractice
O43 - CFD: 06/06/2014 - 08:23:43 - [0] ----D C:\Program Files (x86)\Boxore =>Adware.Boxore
O43 - CFD: 13/12/2014 - 09:34:37 - [] ----D C:\Program Files (x86)\Browsers+_App+s+ =>PUP.CrossRider
O43 - CFD: 14/04/2014 - 07:33:18 - [0] ----D C:\Program Files (x86)\File Scout =>PUP.FileScout
O43 - CFD: 13/12/2014 - 09:34:38 - [] ----D C:\Program Files (x86)\LPT =>Adware.Incredibar
O43 - CFD: 13/12/2014 - 09:42:40 - [] ----D C:\Program Files (x86)\MyPC Backup =>PUP.MyPCBackup
O43 - CFD: 26/11/2012 - 23:55:48 - [] ----D C:\Program Files (x86)\OfficialVideoConverter =>PUP.OfficialVideoConverter
O43 - CFD: 25/04/2013 - 18:35:43 - [] ----D C:\Program Files (x86)\Oxyboo
O43 - CFD: 13/12/2014 - 09:34:38 - [] ----D C:\Program Files (x86)\PCTRunner =>PUP.WebProtect
O43 - CFD: 28/08/2014 - 08:33:04 - [] ----D C:\Program Files (x86)\PokerStars.FR
O43 - CFD: 10/07/2013 - 16:53:30 - [] ----D C:\Program Files (x86)\Postit
O43 - CFD: 28/04/2013 - 18:24:07 - [] ----D C:\Program Files (x86)\SaveVideo plugin For IE =>Adware.Bandoo
O43 - CFD: 24/06/2014 - 16:15:13 - [] ----D C:\Program Files (x86)\SupTab =>PUP.SupTab
O43 - CFD: 06/06/2014 - 08:23:57 - [] ----D C:\Program Files (x86)\SweetIM =>PUP.SweetIM
O43 - CFD: 13/12/2014 - 09:34:57 - [] ----D C:\Program Files (x86)\ver6NewPlayer =>Adware.NewPlayer
O43 - CFD: 12/04/2013 - 14:23:02 - [] ----D C:\Program Files (x86)\Video_Clip_Grab
O43 - CFD: 09/03/2014 - 09:48:20 - [] ----D C:\ProgramData\14334
O43 - CFD: 14/02/2014 - 09:57:51 - [] ----D C:\ProgramData\3315A
O43 - CFD: 06/04/2013 - 17:55:33 - [] ----D C:\ProgramData\Ad-Aware Browsing Protection
O43 - CFD: 30/11/2012 - 08:30:10 - [] ----D C:\ProgramData\boost_interprocess
O43 - CFD: 12/03/2014 - 20:52:48 - [] ----D C:\ProgramData\BoxUpdChk =>Adware.Boxore
O43 - CFD: 06/06/2014 - 08:23:42 - [0] ----D C:\ProgramData\eSafe =>PUP.eSafeSecurity
O43 - CFD: 24/06/2014 - 16:15:38 - [] ----D C:\ProgramData\IePluginServices =>PUP.IePluginService
O43 - CFD: 06/06/2014 - 08:23:56 - [0] ----D C:\ProgramData\Iminent =>Adware.IMBooster
O43 - CFD: 26/11/2012 - 13:37:10 - [] ----D C:\ProgramData\Oxyboo
O43 - CFD: 11/05/2012 - 04:19:07 - [] ----D C:\ProgramData\Partner
O43 - CFD: 11/12/2013 - 02:24:46 - [] ----D C:\ProgramData\RegClean
O43 - CFD: 26/11/2012 - 15:51:53 - [] ----D C:\ProgramData\SweetIM =>PUP.SweetIM
O43 - CFD: 27/11/2012 - 00:00:56 - [] ----D C:\ProgramData\Tarma Installer =>PUP.Tarma
O43 - CFD: 26/06/2014 - 07:27:15 - [] ----D C:\ProgramData\WindowsProtectManger =>PUP.Fuyu
O43 - CFD: 23/01/2014 - 09:06:21 - [] ----D C:\ProgramData\WPM =>PUP.WpManager
O43 - CFD: 28/04/2014 - 16:53:00 - [] -SH-D C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
O43 - CFD: 11/09/2013 - 21:50:23 - [0] -SH-D C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
O43 - CFD: 26/06/2014 - 11:15:00 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Any Video Recorder
O43 - CFD: 29/11/2012 - 12:30:04 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BestPractice
O43 - CFD: 26/11/2012 - 13:29:16 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oxyboo
O43 - CFD: 28/04/2013 - 18:24:07 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Save Video plugin for IE
O43 - CFD: 21/11/2010 - 08:16:41 - [0] R-H-D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 28/04/2013 - 19:13:41 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAFPlayer =>PUP.VAFPlayer
O43 - CFD: 24/09/2014 - 15:36:24 - [] ----D C:\Users\toshiba\AppData\Roaming\Advanced Cleaner Pro
O43 - CFD: 08/07/2014 - 09:14:59 - [] ----D C:\Users\toshiba\AppData\Roaming\cacaoweb =>PUP.CacaoWeb
O43 - CFD: 24/06/2014 - 16:15:10 - [0] ----D C:\Users\toshiba\AppData\Roaming\SupTab =>PUP.SupTab
O43 - CFD: 26/06/2014 - 07:20:52 - [] ----D C:\Users\toshiba\AppData\Roaming\VOPackage =>Adware.Downware
O43 - CFD: 06/09/2014 - 21:10:51 - [] ----D C:\Users\toshiba\AppData\Roaming\wam
O43 - CFD: 06/09/2014 - 21:10:52 - [] ----D C:\Users\toshiba\AppData\Roaming\wam.04351C371E530C3762CBA45FA283ED972DCDEFB6.1
O43 - CFD: 26/06/2014 - 07:27:25 - [] ----D C:\Users\toshiba\AppData\Roaming\webssearches =>Hijacker.WebsSearches
O43 - CFD: 26/01/2014 - 15:39:19 - [0] ----D C:\Users\toshiba\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
O43 - CFD: 11/09/2013 - 08:05:34 - [] ----D C:\Users\toshiba\AppData\Local\AddLyrics =>Adware.AddLyrics
O43 - CFD: 15/11/2014 - 19:19:12 - [] -SH-D C:\Users\toshiba\AppData\Local\EmieBrowserModeList
O43 - CFD: 06/06/2014 - 08:23:30 - [0] ----D C:\Users\toshiba\AppData\Local\genienext =>PUP.NextLive
O43 - CFD: 13/12/2014 - 09:35:46 - [] ----D C:\Users\toshiba\AppData\Local\LPT =>Adware.Incredibar
O43 - CFD: 13/12/2014 - 09:35:46 - [] ----D C:\Users\toshiba\AppData\Local\OXYBOO
O43 - CFD: 06/09/2014 - 20:36:17 - [] ----D C:\Users\toshiba\AppData\Local\PokerStars.FR
O43 - CFD: 01/07/2013 - 11:37:17 - [0] ----D C:\Users\toshiba\AppData\Local\Services x86 =>PUP.CrossRider
O43 - CFD: 29/11/2012 - 12:30:03 - [0] ----D C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BestPractice
O43 - CFD: 15/10/2013 - 07:52:39 - [] ----D C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard =>PUP.BitGuard
O43 - CFD: 13/12/2014 - 09:35:48 - [] ----D C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup =>PUP.MyPCBackup
O43 - CFD: 28/08/2014 - 07:56:54 - [] ----D C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PokerStars.FR
O43 - CFD: 19/03/2014 - 09:44:25 - [] ----D C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rummyworld
O43 - CFD: 24/06/2014 - 16:30:57 - [] ----D C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage =>Adware.Downware
~ 69 Dossier CLSID vide (CLSID Empty Folder)
~ Program Folder: 469 Legitimates Filtered in 00mn 07s
---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.CCC29DC7339B2148C0B8953D8FEF690D] - 19/12/2014 - 23:51:08 ---A- . (...) -- C:\Windows\System32\prfc0816.dat [2207102]
O44 - LFC:[MD5.2C6A3840672ED1B5BE11489A9D4441B9] - 19/12/2014 - 23:51:08 ---A- . (...) -- C:\Windows\System32\prfh0816.dat [2894330]
~ Files: 64 Legitimates Filtered in 00mn 47s
---\\ Clé de registre Shell MountPoints2 (MPSK) (O51)
O51 - MPSK:{10e3b38b-ea74-11e2-9fcc-4c72b950f3c0}\AutoRun\command. (...) -- E:\AutoRun.exe (.not file.)
O51 - MPSK:{bbc8cf8e-4f6f-11e2-bd34-4c72b950f3c0}\AutoRun\command. (...) -- E:\AutoRun.exe (.not file.)
O51 - MPSK:{bbc8cfa1-4f6f-11e2-bd34-4c72b950f3c0}\AutoRun\command. (...) -- E:\AutoRun.exe (.not file.)
~ Keys: Scanned in 00mn 00s
---\\ Enumération des clés de registre StartupReg (SMSR) (O53)
O53 - SMSR:HKLM\...\startupreg\addlyrics@addlyrics.net [Key] . (...) -- C:\Program Files (x86)\AddLyrics\YTLUpdater.exe (.not file.) =>Adware.AddLyrics
O53 - SMSR:HKLM\...\startupreg\DATAMNGR [Key] . (...) -- C:\Program Files (x86)\SEARCH~1\Datamngr\DATAMN~1.exe (.not file.) =>PUP.Datamngr
O53 - SMSR:HKLM\...\startupreg\Iminent [Key] . (...) -- C:\Program Files (x86)\Iminent\Iminent.exe (.not file.) =>Adware.IMBooster
O53 - SMSR:HKLM\...\startupreg\IminentMessenger [Key] . (...) -- C:\Program Files (x86)\Iminent\Iminent.Messengers.exe (.not file.) =>Adware.IMBooster
O53 - SMSR:HKLM\...\startupreg\Optimizer Pro [Key] . (...) -- C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe (.not file.) =>PUP.OptimizerPro
O53 - SMSR:HKLM\...\startupreg\SearchProtection [Key] . (...) -- C:\ProgramData\Search Protection\_run.bat (.not file.) =>PUP.SearchProtect
O53 - SMSR:HKLM\...\startupreg\Sweetpacks Communicator [Key] . (...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) =>PUP.SweetIM
~ SMSR Keys: 41 Legitimates Filtered in 00mn 01s
---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLinkedConnections"=1
~ MWPS: 17 Legitimates Filtered in 00mn 00s
---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
~ MWPE Keys: 3 Legitimates Filtered in 00mn 00s
---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:09/04/2014 - 20:05:52 ---A- . (.Wondershare - Wondershare Virtual Audio Device.) -- C:\Windows\System32\Drivers\Apowersoft_AudioDevice.sys [31920]
O58 - SDL:28/04/2014 - 15:50:01 ---A- . (...) -- C:\Windows\System32\Drivers\aswHwid.sys [29208] =>.ALWIL Software
O58 - SDL:28/04/2014 - 15:50:01 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys [65776] =>.ALWIL Software
O58 - SDL:28/04/2014 - 15:50:02 ---A- . (...) -- C:\Windows\System32\Drivers\aswVmm.sys [208416] =>.ALWIL Software
O58 - SDL:14/07/2009 - 02:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496]
O58 - SDL:09/08/2007 - 04:10:54 ---A- . (.Huawei Tech. Co., Ltd. - HUAWEI USB Smart Card Driver.) -- C:\Windows\System32\Drivers\ewdcsc.sys [29696]
O58 - SDL:06/04/2013 - 17:53:43 ---A- . (.GFI Software - GFI Boot Time Operations Driver.) -- C:\Windows\System32\Drivers\gfibto.sys [14456]
O58 - SDL:10/06/2009 - 21:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232]
O58 - SDL:14/04/2008 - 09:36:30 ---A- . (.DiBcom SA - DiBcom AVSTREAM BDA driver.) -- C:\Windows\System32\Drivers\mod7700.sys [691712]
O58 - SDL:22/01/2014 - 08:52:10 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudbus.sys [108800]
O58 - SDL:22/01/2014 - 08:52:10 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudmdm.sys [206080]
O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656]
O58 - SDL:25/04/2012 - 12:11:36 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\Drivers\usbaapl64.sys [52736]
~ Drivers: 98 Legitimates Filtered in 00mn 14s
---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s
---\\ Liste les services legacy du registre (LALS) (O64)
O64 - Services: CurCS - 28/04/2014 - C:\Windows\system32\drivers\aswHwid.sys (aswHwid) .(...) - LEGACY_ASWHWID
~ Legacy: 115 Legitimates Filtered in 00mn 01s
---\\ Associations Shell Spawning (O67)
O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)
~ FASS Keys: 11 Legitimates Filtered in 00mn 00s
---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (...) -- C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com =>Hijacker.WebsSearches
~ Keys: Scanned in 00mn 00s
---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: prefs.js [toshiba - kv59zm6l.default] user_pref("extensions.crossrider.bic", "148ae5a934706070b3a23525687b642b"); =>PUP.CrossRider
O69 - SBI: prefs.js [toshiba - kv59zm6l.default] user_pref("extensions.helperbar.DockingPositionDown", false); =>PUP.HelperBar
O69 - SBI: prefs.js [toshiba - kv59zm6l.default] user_pref("extensions.helperbar.SmartbarDisabled", false); =>PUP.HelperBar
O69 - SBI: prefs.js [toshiba - kv59zm6l.default] user_pref("extensions.helperbar.SmartbarStateMinimaized", false); =>PUP.HelperBar
O69 - SBI: prefs.js [toshiba - kv59zm6l.default] user_pref("extensions.helperbar.Visibility", false); =>PUP.HelperBar
O69 - SBI: prefs.js [toshiba - kv59zm6l.default] user_pref("extensions.helperbar.keepAliveLastevent", "1411674433"); =>PUP.HelperBar
O69 - SBI: prefs.js [toshiba - kv59zm6l.default] user_pref("extensions.helperbar.lastExternalJsUpdate", "1411627668265"); =>PUP.HelperBar
O69 - SBI: SearchScopes [HKCU] {006ee092-9658-4fd6-bd8e-a21a348e59f5} - (Web Search) - https://search.safefinder.com/?q= =>Hijacker.SmartBar
O69 - SBI: SearchScopes [HKCU] {9CB96984-43C3-4D44-90EF-01466EFCF7BB} [DefaultScope] - (Yahoo! (Avast)) - https://fr.search.yahoo.com/
~ Keys: Scanned in 00mn 00s
---\\ Recherche particulière à la racine du système (SPRF) (O84)
[MD5.CE600D77AB6E9D9BD10CB7ECF675F32E] [SPRF][07/07/2014] (...) -- C:\Users\toshiba\Desktop\cacaoweb.exe [504320] =>PUP.CacaoWeb
[MD5.3080CBFFA3344FD224A614217961A1C0] [SPRF][29/11/2012] (.FLVMPlayer - FLV Media Player Setup.) -- C:\Users\toshiba\Desktop\FLVMPlayer.exe [4951030] =>PUP.FLVMPlayer
[MD5.4FB5110CFC25B056900692033B724732] [SPRF][30/01/2014] (...) -- C:\Users\toshiba\Desktop\metronom.exe [246784]
[MD5.5F3E6C5FF5BACB996D5EA683FE99CDE9] [SPRF][06/07/2011] (.Gérard Brochu - Romi.) -- C:\Users\toshiba\Desktop\Romi.exe [24500736]
~ Files: 4 Legitimates Filtered in 00mn 00s
---\\ Liste des exceptions du parefeu (FirewallRules) (O87)
O87 - FAEL: "{34865CDA-E514-4C20-8F34-45D3DA475C5B}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\toshiba\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O87 - FAEL: "{63EDF3E8-3966-4A0A-92BF-CB6809FFA4D3}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\toshiba\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
~ Firewall: 2 Legitimates Filtered in 00mn 09s
---\\ Enumère les codes produits des logiciels (PUC) (O90)
O90 - PUC: "0C776EBEBCBCFBE408892EE7B12517FC" . (.VAFPlayer.) -- C:\windows\Installer\{EBE677C0-CBCB-4EBF-8098-E27E1B5271CF}\_112D608FD02CD87FDC7735.exe =>PUP.VAFPl
pouvez vous me dire s'il y a y un prob avec mon pc qui rame à fond... :(
voici le rapport de zhp diag
merci d'avance
~ Rapport de ZHPDiag v2014.12.21.176 - Nicolas Coolman (21/12/2014)
~ Lancé par toshiba (21/12/2014 10:39:55)
~ Facebook : https://www.facebook.com/nicolascoolman1
~ Adresse du Forum https://nicolascoolman.eu
~ Traduit par Nicolas Coolman
~ Etat de la version : Version à jour.
~ Liste blanche : Activée par le programme
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Deactivate by program
---\\ Navigateurs Internet
MSIE: Internet Explorer v11.0.9600.17501
MFIE: Mozilla Firefox 32.0.3
GCIE: Google Chrome v37.0.2062.120 (Defaut)
---\\ Informations sur les produits Windows
~ Langage: Français
Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows Operating System - Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : W8DQG
Windows License : OK
~ Windows Remaining Initializations Number : 2
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ Logiciels de protection du système
avast! Free Antivirus v9.0.2018
Trusteer Sécurité des points d'accès v3.5.1404.34
Malwarebytes Anti-Malware version 2.0.2.1012
Microsoft Security Client v4.6.0305.0
Ad-Aware Browsing Protection v1.0.1.94
Windows Defender W7 (Deactivate)
---\\ Logiciels d'optimisation du système
CCleaner v4.07
---\\ Logiciels de partage PeerToPeer
---\\ Surveillance de Logiciels
Adobe Flash Player 15 Plugin
Adobe Reader X
---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 4055 MB (23% free)
System Restore: Activé (Enable)
System drive C: has 230 GB (39%) free of 579 GB
---\\ Mode de connexion au système
~ Computer Name: TOSHIBA-TOSH
~ User Name: toshiba
~ All Users Names: toshiba, HomeGroupUser$, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator
---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\toshiba\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\toshiba\AppData\Roaming\
~ %Desktop% : C:\Users\toshiba\Desktop\
~ %Favorites% : C:\Users\toshiba\Favorites\
~ %LocalAppData% : C:\Users\toshiba\AppData\Local\
~ %StartMenu% : C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 230 Go of 579 Go)
D: CD-ROM drive (Free 0 Go of 4 Go)
Q: Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go)
---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
~ Security Center: 41 Legitimates Filtered in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.4AF089160FE082E5EA5C4AA72782DCA2] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.22/11/2014 - 02:28:21.) -- C:\Windows\System32\wininet.dll [2358272]
[MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - (.Microsoft Corporation - Application dâ€(TM)ouverture de session Windows.) (.17/07/2014 - 03:07:24.) -- C:\Windows\System32\Winlogon.exe [455168]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/11/2010 - 04:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.FA886682CFC5D36718D3E436AACF10B9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.30/05/2014 - 07:45:52.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21/11/2010 - 04:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24/01/2014 - 03:37:55.) -- C:\Windows\system32\Drivers\ntfs.sys [1684928]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/11/2010 - 04:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.70988118145F5F10EF24720B97F35F65] - (.Microsoft Corporation - TDI Translation Driver.) (.11/11/2014 - 02:46:26.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.DF8126BD41180351A093A3AD2FC8903B] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.25/02/2011 - 07:25:38.) -- C:\Windows\system32\Drivers\volsnap.sys [296320]
~ Generic Processes: Scanned in 00mn 04s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/4
~ Mes musiques (My Musics) : 1/18
~ Mes Videos (My Videos) : 1/19
~ Mes Favoris (My Favorites) : 1/19
~ Mes Documents (My Documents) : 2/378
~ Mon Bureau (My Desktop) : 1/61683
~ Menu demarrer (Programs) : 1/56
~ Hidden Files: Scanned in 01mn 08s
---\\ Processus lancés
[MD5.C904FA421783697934CE43F80E880CC9] - (.IBM Corp. - RapportService.) -- C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe [2607384] [PID.2256]
[MD5.4F9236BE13917B89F7A03DEA85F220FA] - (.Pas de propriétaire - WebPlayer.) -- C:\Users\toshiba\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe [202752] [PID.2712] =>Adware.SocialSkinz
[MD5.3FAFBCCE3F066EDCC263E25A786FFD50] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [21650016] [PID.2728]
[MD5.E986D1068AEF099CA3BE2AEAB4C8D643] - (.Hewlett-Packard Co. - HP Digital Imaging Monitor.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [270336] [PID.2756]
[MD5.21B8FAAFA5CCD89663AAD5833ABF4B35] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe [3890208] [PID.2844]
[MD5.52EA6C0C8A124BFB1065482392C8E1F5] - (.Wondershare - Wondershare Studio.) -- C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1743648] [PID.2520]
[MD5.308F2EE28005510DE616409148CF077B] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896] [PID.4372]
[MD5.F12FF2ECB2F6F7D9C5062D67D8334AE9] - (.Hewlett-Packard Co. - HP CUE Status Root.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe [168960] [PID.5332]
[MD5.0335B80F0C3F3D2BE9E1F34292A33D98] - (.Hewlett-Packard Co. - HP CUE Alert Popup Window Objects.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe [559104] [PID.5852]
[MD5.883008A9B5BFF94A153D99DBA54CB5C1] - (.Hewlett-Packard - GPCore COM object.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe [362496] [PID.5816]
[MD5.6226810F26227F083929AC5584122951] - (.Dropbox, Inc. - Dropbox.) -- C:\Users\toshiba\AppData\Roaming\Dropbox\bin\Dropbox.exe [39207112] [PID.4888]
[MD5.45D5AFF33A714C7FA5837C13C318A06A] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [296520] [PID.9512]
[MD5.AC08A03D7E579E2903925736E7AB48F2] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [852808] [PID.5780]
[MD5.97EEE26B60EBC5A2AFFF84AEB3F44968] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8141824] [PID.8968]
[MD5.6BA0E2EED2C1C65A7FBFE26467AF5013] - (.IBM Corp. - RapportMgmtService.) -- C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [1919256] [PID.1160]
[MD5.37D17AE2936867F88EB3C4CBCBC6B8A1] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344] [PID.1692]
[MD5.D858BA2EE718B1DB1CED20646E641D08] - (.globalUpdate - globalUpdate Update.) -- C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608] [PID.2652] =>PUP.GlobalUpdate
[MD5.D2BADE6776A96ED602F1319146749EDA] - (.app - Browsers+_App+s+ exe.) -- C:\Program Files (x86)\Browsers+_App+s+\d3a7adb0-8776-4f25-bb54-5bacb797e6ed.exe [382368] [PID.2856] =>PUP.CrossRider
[MD5.1F79342D9EB530A48742F651E570983A] - (.Microsoft Corporation - Updates Skype Click to Call.) -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176] [PID.2272]
[MD5.CB8C1CC4F46FBAC78150754D77460C73] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe [230792] [PID.1324]
[MD5.E4938E0A376CF0B9D989EE5C0A146891] - (.Microsoft Corporation - Phone Number Recognition (PNR) module.) -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520] [PID.4136]
[MD5.20372BE109FEE1C37E2D5216680DB9EB] - (.pdfforge GmbH - PDF Architect Helper Service.) -- C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496] [PID.2300]
[MD5.5DDAB1319ACA5F9DAED11F27D8B615BB] - (...) -- C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39568] [PID.4924]
[MD5.A1AC400C87A5B819285899645FE12DAE] - (...) -- C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [23552] [PID.2264]
[MD5.0CADE4EF6D26F9FE974ED7CE959E8CF6] - (...) -- C:\Users\toshiba\AppData\Roaming\VOPackage\VOsrv.exe [73216] [PID.5004] =>Adware.Downware
[MD5.39B1D0A636A400304565D4521FAD6D77] - (.Microsoft Corporation - Microsoft Application Virtualization Virtua.) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [207528] [PID.4608]
[MD5.77C5A741A7452812F278EF2C18478862] - (.Microsoft Corporation - Microsoft Application Virtualization Client.) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [523944] [PID.5740]
[MD5.FD557A50A65E44041CD2FCEF4BEB04DB] - (.Microsoft Corporation - Microsoft Office Client Virtualization Serv.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.exe [822504] [PID.4788]
[MD5.DFE14D63F0F649EE94A9E3442B7C8F2C] - (.Nero AG - NeroUpdate.) -- C:\Program Files (x86)\Nero\Update\NASvc.exe [687400] [PID.4200]
~ Processes Running: Scanned in 00mn 07s
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\toshiba\AppData\Local\Google\Chrome\User Data\Default\Preferences
---\\ Liste des dossiers d'extension Google Chrome
~ Google Lines Browser: 0 Legitimates Filtered in 00mn 00s
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\kv59zm6l.default\prefs.js
M3 - MFPP: Plugins - [toshiba] -- C:\Users\toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\kv59zm6l.default\searchplugins\Web Search.xml =>Parasite.Pugi
M3 - MFPP: Plugins - [toshiba] -- C:\Users\toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\kv59zm6l.default\searchplugins\yahoo-avast.xml
M2 - MFEP: RegExtension {8D150B8F-EFE8-45a3-A4A3-053020F48FAC} . (...) -- C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRFirefoxExt\ (.not file.)
M2 - MFEP: RegExtension {B64D9B05-48E1-4CEB-BF58-E0643994E900} . (...) -- C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ (.not file.)
M0 - MFSP: prefs.js [toshiba - kv59zm6l.default] http://istart.webssearches.com =>Hijacker.WebsSearches
M2 - MFEP: prefs.js [toshiba - kv59zm6l.default\cacaoweb@cacaoweb.org] [] cacaoweb v1.0.34 (..) =>PUP.CacaoWeb
M2 - MFEP: prefs.js [toshiba - kv59zm6l.default\wrigtdamon@yahoo.com] [] Browsers+_App+s+ v1.0.34 (..) =>PUP.CrossRider
M2 - MFEP: prefs.js [toshiba - kv59zm6l.default\{908d038c-5d70-cc76-cbc1-4a31032c9d43}] [] Shopping Helper Smartbar v1.0.34 (..) =>Hijacker.SmartBar
~ Firefox Browser: 9 Legitimates Filtered in 00mn 01s
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://istart.webssearches.com =>Hijacker.WebsSearches
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com =>Hijacker.WebsSearches
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com =>Hijacker.WebsSearches
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://istart.webssearches.com =>Hijacker.WebsSearches
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = https://search.safefinder.com/?q= =>Hijacker.SmartBar
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = https://search.safefinder.com/?q= =>Hijacker.SmartBar
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = about:newtab
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com =>Hijacker.WebsSearches
~ IE Browser: 22 Legitimates Filtered in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (21)
~ Hosts File: Scanned in 00mn 00s
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer [64Bits] - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealDownloader - RealPlayer Video Downloader.) -- C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O2 - BHO: Shopping Helper SmartbarEngine [64Bits] - {31ad400d-1b06-4e33-a59a-90c2c140cba0} . (...) -- mscoree.dll (.not file.) =>Hijacker.SmartBar
O2 - BHO: (no name) [64Bits] - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} Clé orpheline
O2 - BHO: WsSVRIEHelper [64Bits] - {65DEE40A-3E93-4cae-9F98-B8E06DCEE2BF} . (.Wondershare Software Co., Ltd. - Wondershare Video Converter Ultimate Plugin.) -- C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRIEPlugin.dll
~ BHO: 21 Legitimates Filtered in 00mn 01s
---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: avast! Online Security - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} . (...) -- (.not file.)
O3 - Toolbar: (no name) - [HKLM]{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} Clé orpheline
O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
O3 - Toolbar: Shopping Helper Smartbar - [HKLM]{ae07101b-46d4-4a98-af68-0333ea26e113} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>Hijacker.SmartBar
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{8E5025C2-8EA3-430D-80B8-A14151068A6D} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{9B53772A-8259-495D-A6B2-FA5966FE52E1} Clé orpheline
~ Toolbar: Scanned in 00mn 00s
---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop [Public]: FLVConverter.lnk . (.http://www.savevideoplugin.com/ - FLV Converter allows to convert FLV videos.) -- C:\Program Files (x86)\SaveVideo plugin For IE\FLVConverter.exe =>Adware.Bandoo
O4 - GS\Desktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\Desktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\Desktop [Public]: VAFPlayer.lnk . (...) -- C:\windows\Installer\{EBE677C0-CBCB-4EBF-8098-E27E1B5271CF}\_AAA051C67F9CDDC2624EB5.exe =>PUP.VAFPlayer
O4 - GS\Program [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\QuickLaunch [toshiba]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\QuickLaunch [toshiba]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\QuickLaunch [toshiba]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\toshiba\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O4 - GS\TaskBar [toshiba]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\TaskBar [toshiba]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\TaskBar [toshiba]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\Program [toshiba]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\Program [toshiba]: Search.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\SystemTools [toshiba]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\Desktop [toshiba]: Gestionnaire de téléchargements musicMe.lnk . (...) -- C:\Users\toshiba\AppData\Roaming\Microsoft\Installer\{3245B3E9-6A16-41F4-8E5F-6DA4FDACD26F}\DesktopIcon.exe =>Adware.ADON
O4 - GS\Desktop [toshiba]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\Desktop [toshiba]: Search.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://istart.webssearches.com =>Hijacker.WebsSearches
O4 - GS\Desktop [toshiba]: Sync Folder.lnk . (.MyPCBackup.com - MyPC Backup.) -- C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe =>PUP.MyPCBackup
O4 - GS\Desktop [toshiba]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\toshiba\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
~ Global Startup: 24 Legitimates Filtered in 00mn 15s
---\\ Applications lancées au démarrage du système (O4)
O4 - GS\Startup [toshiba]: MyPC Backup.lnk . (.MyPCBackup.com - MyPC Backup.) -- C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe =>PUP.MyPCBackup
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe
O4 - HKCU\..\Run: [TOPI.EXE] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe =>.Toshiba Corporation
O4 - HKCU\..\Run: [KiesPDLR] . (.Pas de propriétaire - KiesPDLR.) -- C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [FLV Player] . (.Pas de propriétaire - WebPlayer.) -- C:\Users\toshiba\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe =>Adware.SocialSkinz
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] . (.Adobe Systems Incorporated - Adobe® Flash® Player Installer/Uninstaller.) -- C:\windows\SysWOW64\Macromed\Flash\FlashUtil32_15_0_0_246_Plugin.exe
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKLM\..\Wow6432Node\Run: [Wondershare Helper Compact.exe] . (.Wondershare - Wondershare Studio.) -- C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
O4 - HKLM\..\Wow6432Node\Run: [BrowserPlugInHelper] . (...) -- C:\Program Files (x86)\Wondershare\Video Converter Ultimate\BrowserPlugInHelper.exe
O4 - HKLM\..\Wow6432Node\Run: [hpqSRMon] . (.Hewlett-Packard - HpqSRmon.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation
O4 - HKLM\..\Wow6432Node\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- c:\program files (x86)\real\realplayer\Update\realsched.exe =>.RealNetworks, Inc
O4 - HKUS\.DEFAULT\..\Run: [TOPI.EXE] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe =>.Toshiba Corporation
O4 - HKUS\S-1-5-18\..\Run: [TOPI.EXE] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe =>.Toshiba Corporation
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\Run: [TOPI.EXE] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe =>.Toshiba Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [TOPI.EXE] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe =>.Toshiba Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-2809402794-2372651033-1740309217-1001\..\Run: [TOPI.EXE] . (.TOSHIBA - TOSHIBA Online Product Information.) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe =>.Toshiba Corporation
O4 - HKUS\S-1-5-21-2809402794-2372651033-1740309217-1001\..\Run: [KiesPDLR] . (.Pas de propriétaire - KiesPDLR.) -- C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKUS\S-1-5-21-2809402794-2372651033-1740309217-1001\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-21-2809402794-2372651033-1740309217-1001\..\Run: [FLV Player] . (.Pas de propriétaire - WebPlayer.) -- C:\Users\toshiba\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe =>Adware.SocialSkinz
O4 - HKUS\S-1-5-21-2809402794-2372651033-1740309217-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O4 - HKUS\S-1-5-21-2809402794-2372651033-1740309217-1001\..\RunOnce: [FlashPlayerUpdate] . (.Adobe Systems Incorporated - Adobe® Flash® Player Installer/Uninstaller.) -- C:\windows\SysWOW64\Macromed\Flash\FlashUtil32_15_0_0_246_Plugin.exe
~ Application: Scanned in 00mn 00s
---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Skype Click to Call settings [64Bits] - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- c:\program files (x86)\skype\toolbars\internet explorer x64\icon.ico
O9 - Extra button: Free YouTube Download [64Bits] - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} . (...) -- C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\dvdvideosoft.ico
~ IE Extra Buttons: Scanned in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{3954515A-BCE6-4D16-B844-B80B9F1236B1}: NameServer = 5.79.84.141,8.38.77.107
O17 - HKLM\System\CCS\Services\Tcpip\..\{819C5EC7-C536-47B5-92FA-1EB634938737}: NameServer = 5.79.84.141,8.38.77.107
O17 - HKLM\System\CCS\Services\Tcpip\..\{27973BA0-A3E9-4182-A4C7-201ACA8C57D3}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{3954515A-BCE6-4D16-B844-B80B9F1236B1}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\..\{819C5EC7-C536-47B5-92FA-1EB634938737}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\..\{3954515A-BCE6-4D16-B844-B80B9F1236B1}: DhcpDomain = bouyguesbox.fr
O17 - HKLM\System\CCS\Services\Tcpip\..\{819C5EC7-C536-47B5-92FA-1EB634938737}: DhcpDomain = bouyguesbox.fr
O17 - HKLM\System\CS1\Services\Tcpip\..\{3954515A-BCE6-4D16-B844-B80B9F1236B1}: NameServer = 5.79.84.141,8.38.77.107
O17 - HKLM\System\CS1\Services\Tcpip\..\{819C5EC7-C536-47B5-92FA-1EB634938737}: NameServer = 5.79.84.141,8.38.77.107
O17 - HKLM\System\CS1\Services\Tcpip\..\{27973BA0-A3E9-4182-A4C7-201ACA8C57D3}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{3954515A-BCE6-4D16-B844-B80B9F1236B1}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{819C5EC7-C536-47B5-92FA-1EB634938737}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{3954515A-BCE6-4D16-B844-B80B9F1236B1}: DhcpDomain = bouyguesbox.fr
O17 - HKLM\System\CS1\Services\Tcpip\..\{819C5EC7-C536-47B5-92FA-1EB634938737}: DhcpDomain = bouyguesbox.fr
O17 - HKLM\System\CS2\Services\Tcpip\..\{3954515A-BCE6-4D16-B844-B80B9F1236B1}: NameServer = 5.79.84.141,8.38.77.107
O17 - HKLM\System\CS2\Services\Tcpip\..\{819C5EC7-C536-47B5-92FA-1EB634938737}: NameServer = 5.79.84.141,8.38.77.107
O17 - HKLM\System\CS2\Services\Tcpip\..\{27973BA0-A3E9-4182-A4C7-201ACA8C57D3}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{819C5EC7-C536-47B5-92FA-1EB634938737}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS2\Services\Tcpip\..\{819C5EC7-C536-47B5-92FA-1EB634938737}: DhcpDomain = bouyguesbox.fr
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
~ Domain: Scanned in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (.Skytech Co., Ltd. - Skytech.) - C:\Program Files (x86)\SupTab\SearchProtect64.dll =>PUP.SearchProtect
~ AppInit DLL: Scanned in 00mn 00s
---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Computer Backup (MyPC Backup) (BackupStack) . (.Just Develop It - Backup Stack.) - C:\Program Files (x86)\MyPC Backup\BackupStack.exe =>PUP.MyPCBackup
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) . (.globalUpdate - globalUpdate Update.) - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe =>PUP.GlobalUpdate
O23 - Service: IePlugin Services (IePluginServices) . (.Cherished Technololgy LIMITED - IePlugin Service.) - C:\ProgramData\IePluginServices\PluginService.exe =>PUP.IePluginService
O23 - Service: Mobile Broadband HL Service (Mobile Broadband HL Service) . (...) - C:\ProgramData\MobileBrServ\mbbservice.exe
O23 - Service: Protect Monitor (ProtectMonitor) . (...) - C:\monitorsvc.exe
O23 - Service: RealPlayer Update Service (RealPlayerUpdateSvc) . (...) - C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
O23 - Service: VO Service component (servervo) . (...) - C:\Users\toshiba\AppData\Roaming\VOPackage\VOsrv.exe =>Adware.Downware
~ Services: 20 Legitimates Filtered in 00mn 28s
---\\ Tâches planifiées en automatique (O39)
[MD5.07D70BB0B2B92FD967CE8A216A892F4D] [APT] [21e3d187-f27b-4325-94bd-115282fc8941-1] (.app.) -- C:\Program Files (x86)\Browsers+_App+s+\Browsers+_App+s+-codedownloader.exe [1130912] =>PUP.CrossRider
[MD5.2E996BA06C76F1D717C8790475CCAA6D] [APT] [21e3d187-f27b-4325-94bd-115282fc8941-11] (.app.) -- C:\Program Files (x86)\Browsers+_App+s+\21e3d187-f27b-4325-94bd-115282fc8941-11.exe [1989024] =>PUP.CrossRider
[MD5.E6AC11D205F27802E4316C458B9F2162] [APT] [21e3d187-f27b-4325-94bd-115282fc8941-2] (.app.) -- C:\Program Files (x86)\Browsers+_App+s+\21e3d187-f27b-4325-94bd-115282fc8941-2.exe [952736] =>PUP.CrossRider
[MD5.2E996BA06C76F1D717C8790475CCAA6D] [APT] [21e3d187-f27b-4325-94bd-115282fc8941-3] (.app.) -- C:\Program Files (x86)\Browsers+_App+s+\21e3d187-f27b-4325-94bd-115282fc8941-3.exe [1989024] =>PUP.CrossRider
[MD5.003312E250B84736514EE9F0B219AAAE] [APT] [21e3d187-f27b-4325-94bd-115282fc8941-4] (.app.) -- C:\Program Files (x86)\Browsers+_App+s+\21e3d187-f27b-4325-94bd-115282fc8941-4.exe [1536928] =>PUP.CrossRider
[MD5.AE50B376D37F72AF58F08535012D8AE5] [APT] [21e3d187-f27b-4325-94bd-115282fc8941-5] (.app.) -- C:\Program Files (x86)\Browsers+_App+s+\21e3d187-f27b-4325-94bd-115282fc8941-5.exe [885152] =>PUP.CrossRider
[MD5.AE50B376D37F72AF58F08535012D8AE5] [APT] [21e3d187-f27b-4325-94bd-115282fc8941-5_user] (.app.) -- C:\Program Files (x86)\Browsers+_App+s+\21e3d187-f27b-4325-94bd-115282fc8941-5.exe [885152] =>PUP.CrossRider
[MD5.756AAFF9640533D86CB93F8395331C00] [APT] [21e3d187-f27b-4325-94bd-115282fc8941-6] (.app.) -- C:\Program Files (x86)\Browsers+_App+s+\21e3d187-f27b-4325-94bd-115282fc8941-6.exe [1298848] =>PUP.CrossRider
[MD5.07D70BB0B2B92FD967CE8A216A892F4D] [APT] [21e3d187-f27b-4325-94bd-115282fc8941-7] (.app.) -- C:\Program Files (x86)\Browsers+_App+s+\21e3d187-f27b-4325-94bd-115282fc8941-7.exe [1130912] =>PUP.CrossRider
[MD5.0C92DADC072A378370F4A86E60661818] [APT] [31e367ae-b9cb-4a8d-84f8-fdf4c51ca41e] (...) -- C:\Program Files (x86)\Browsers+_App+s+\31e367ae-b9cb-4a8d-84f8-fdf4c51ca41e.exe [32160] =>PUP.CrossRider
[MD5.00000000000000000000000000000000] [APT] [Ad-Aware Antivirus Scheduled Scan] (...) -- C:\Program Files (x86)\AD-AWA~1\AdAwareLauncher.exe (.not file.) [0]
[MD5.D2BADE6776A96ED602F1319146749EDA] [APT] [d3a7adb0-8776-4f25-bb54-5bacb797e6ed] (.app.) -- C:\Program Files (x86)\Browsers+_App+s+\d3a7adb0-8776-4f25-bb54-5bacb797e6ed.exe [382368] =>PUP.CrossRider
[MD5.A7BA480E03ACDCA4FAEFE89B214AC51B] [APT] [LaunchSignup] (.MyPC Backup.) -- C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe [1191024] =>PUP.JDIBackup
[MD5.2080F4200FF1A73AC2D92CC661D22798] [APT] [{FD48F38F-B4AE-4B80-B0FF-75E0EEB16863}] (...) -- C:\Users\toshiba\Downloads\AppCleaner_installer.exe [469424]
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-1 - (.app.) -- C:\Windows\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-1.job [2770] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-1 - (.app.) -- C:\Windows\System32\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-1 [2770] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-11 - (.app.) -- C:\Windows\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-11.job [4490] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-11 - (.app.) -- C:\Windows\System32\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-11 [4490] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-2 - (.app.) -- C:\Windows\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-2.job [2104] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-2 - (.app.) -- C:\Windows\System32\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-2 [2104] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-3 - (.app.) -- C:\Windows\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-3.job [3808] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-3 - (.app.) -- C:\Windows\System32\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-3 [3808] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-4 - (.app.) -- C:\Windows\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-4.job [3808] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-4 - (.app.) -- C:\Windows\System32\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-4 [3808] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-5 - (.app.) -- C:\Windows\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-5.job [2440] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-5 - (.app.) -- C:\Windows\System32\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-5 [2440] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-5_user - (.app.) -- C:\Windows\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-5_user.job [2440] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-5_user - (.app.) -- C:\Windows\System32\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-5_user [2440] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-6 - (.app.) -- C:\Windows\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-6.job [3464] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-6 - (.app.) -- C:\Windows\System32\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-6 [3464] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-7 - (.app.) -- C:\Windows\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-7.job [3464] =>PUP.CrossRider
O39 - APT: 21e3d187-f27b-4325-94bd-115282fc8941-7 - (.app.) -- C:\Windows\System32\Tasks\21e3d187-f27b-4325-94bd-115282fc8941-7 [3464] =>PUP.CrossRider
O39 - APT: 31e367ae-b9cb-4a8d-84f8-fdf4c51ca41e - (...) -- C:\Windows\Tasks\31e367ae-b9cb-4a8d-84f8-fdf4c51ca41e.job [632]
O39 - APT: 31e367ae-b9cb-4a8d-84f8-fdf4c51ca41e - (...) -- C:\Windows\System32\Tasks\31e367ae-b9cb-4a8d-84f8-fdf4c51ca41e [632]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
O39 - APT: d3a7adb0-8776-4f25-bb54-5bacb797e6ed - (.app.) -- C:\Windows\Tasks\d3a7adb0-8776-4f25-bb54-5bacb797e6ed.job [1460] =>PUP.CrossRider
O39 - APT: d3a7adb0-8776-4f25-bb54-5bacb797e6ed - (.app.) -- C:\Windows\System32\Tasks\d3a7adb0-8776-4f25-bb54-5bacb797e6ed [1460] =>PUP.CrossRider
O39 - APT: - (..) -- C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job [890] =>PUP.GlobalUpdate
O39 - APT: - (..) -- C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore [890] =>PUP.GlobalUpdate
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1066]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1070]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon [830]
O39 - APT: APT: - (..) -- C:\Windows\System32\System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon [830] - (..) -- C:\Windows\System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d [832]
O39 - APT: - (..) -- C:\Windows\Tasks\SpeedUpMyPC Maintenance.job [282] =>PUP.SpeedUpMyPC
O39 - APT: - (..) -- C:\Windows\System32\Tasks\SpeedUpMyPC Maintenance [282] =>PUP.SpeedUpMyPC
O39 - APT: - (..) -- C:\Windows\Tasks\SpeedUpMyPC Startup.job [282] =>PUP.SpeedUpMyPC
O39 - APT: - (..) -- C:\Windows\System32\Tasks\SpeedUpMyPC Startup [282] =>PUP.SpeedUpMyPC
~ Scheduled Task: 69 Legitimates Filtered in 00mn 20s
---\\ Logiciels installés (O42)
O42 - Logiciel: BestPractice (remove only) - (...) [HKLM][64Bits] -- BestPractice
O42 - Logiciel: Boxore Client - (.Boxore OU.) [HKLM][64Bits] -- {0E365FDA-909F-4939-838A-261DD468D862} =>Adware.Boxore
O42 - Logiciel: Browsers+_App+s+ - (.app.) [HKLM][64Bits] -- Browsers+_App+s+ =>PUP.CrossRider
O42 - Logiciel: DomaIQ - (.Tuguu SLU.) [HKLM][64Bits] -- DomaIQ Uninstaller =>PUP.VAFPlayer
O42 - Logiciel: Extended Update - (...) [HKCU][64Bits] -- AffiliatedUpdate =>PUP.Dealply
O42 - Logiciel: Iminent - (.Iminent.) [HKLM][64Bits] -- {491C9A4E-6E50-4B53-911D-861BA8DA3C21} =>Adware.IMBooster
O42 - Logiciel: MyPC Backup - (.JDi Backup Ltd.) [HKLM][64Bits] -- MyPC Backup =>PUP.MyPCBackup
O42 - Logiciel: NewPlayer - (.NewPlayer-software.) [HKLM][64Bits] -- 119E4BDA-F023-280E-77B9-027A97BD23AD =>Adware.NewPlayer
O42 - Logiciel: OXYBOO version 8.0.0.25 - (.OXYBOO.) [HKLM][64Bits] -- {315AFBF0-9CAC-4F86-8850-B7AB02CB2D93}_is1
O42 - Logiciel: PokerStars.fr - (.PokerStars.fr.) [HKLM][64Bits] -- PokerStars.fr
O42 - Logiciel: Rummyworld - (...) [HKLM][64Bits] -- Rummyworld
O42 - Logiciel: Save Video plugin for IE (ver. 4.2) - (.SVSoftware, LTD..) [HKLM][64Bits] -- {8F094FCD-3085-4145-9D30-F7808995AFAC}_is1
O42 - Logiciel: Shopping Helper Smartbar - (.ReSoft Ltd..) [HKLM][64Bits] -- {C64BEB42-B25D-4674-BB55-4099CB720110} =>Hijacker.SmartBar
O42 - Logiciel: Shopping Helper Smartbar Engine - (.ReSoft Ltd..) [HKCU][64Bits] -- {d2be58c2-20ab-43a1-97c7-80496c985742} =>Hijacker.SmartBar
O42 - Logiciel: SweetPacks bundle uninstaller - (.SweetIM Technologies Ltd..) [HKLM][64Bits] -- {0C43FE6B-E881-4AFC-B384-4AEBC90047E8} =>PUP.SweetIM
O42 - Logiciel: Update Manager for SweetPacks 1.1 - (.SweetIM Technologies Ltd..) [HKLM][64Bits] -- {EA8FA6BE-29BE-4AF2-9352-841F83215EB0} =>PUP.SweetIM
O42 - Logiciel: VAFPlayer - (.Tuguu SL.) [HKLM][64Bits] -- {EBE677C0-CBCB-4EBF-8098-E27E1B5271CF} =>PUP.VAFPlayer
O42 - Logiciel: Video Clip Grab Toolbar - (.Video Clip Grab.) [HKLM][64Bits] -- Video_Clip_Grab Toolbar
O42 - Logiciel: Web Protect for Windows - (.PC Publishing.) [HKLM][64Bits] -- wp-dcollect-tgu =>PUP.WebProtect
O42 - Logiciel: Webplayer - (.Kreapixel.) [HKLM][64Bits] -- {9937E55B-6331-4804-93EF-77E992F204BD} =>Adware.SocialSkinz
O42 - Logiciel: Yahoo! Toolbar - (...) [HKLM][64Bits] -- Yahoo! Companion
O42 - Logiciel: Yontoo 1.10.03 - (.Yontoo LLC.) [HKLM][64Bits] -- {889DF117-14D1-44EE-9F31-C5FB5D47F68B} =>Adware.Yontoo
O42 - Logiciel: rrsavings - (.rrsavings.) [HKLM][64Bits] -- rrsavings =>PUP.SupraSavings
O42 - Logiciel: webssearches uninstaller - (.webssearches.) [HKLM][64Bits] -- webssearches uninstaller =>Hijacker.WebsSearches
~ Logic: 51 Legitimates Filtered in 00mn 02s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\5f2d9dae03be410] =>Hijacker.Eazel
[HKCU\Software\Alexa Internet]
[HKCU\Software\BearShare] =>PUP.BearShare
[HKCU\Software\Boxore] =>Adware.Boxore
[HKCU\Software\Conduit_Search_Protect]
[HKCU\Software\FileScout] =>PUP.FileScout
[HKCU\Software\GSC]
[HKCU\Software\IM]
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKCU\Software\InstalledBrowserExtensions] =>Adware.VidSaver
[HKCU\Software\OXYBOO]
[HKCU\Software\PCTRunner] =>PUP.WebProtect
[HKCU\Software\SmartbarBackup] =>Hijacker.SmartBar
[HKCU\Software\SmartbarLog] =>Hijacker.SmartBar
[HKCU\Software\Smartbar] =>Hijacker.SmartBar
[HKCU\Software\TutoTag] =>PUP.AgenceExclusive
[HKCU\Software\Tutorials] =>PUP.AgenceExclusive
[HKCU\Software\WNLT] =>Adware.IncrediBar
[HKCU\Software\WSVCUPlugin]
[HKCU\Software\cacaoweb] =>PUP.CacaoWeb
[HKCU\Software\lollipop] =>Adware.Lollipop
[HKCU\Software\wscontb]
[HKCU\Software\Ã"¦Ã"Ãf³ÃOEÃ?òÃ?òµ¼Éú³ÉµÃ"±¾µÃ~Ã"¦Ã"Ãf³ÃOEÃ?ò]
[HKLM\Software\InstalledBrowserExtensions] =>Adware.VidSaver
[HKLM\Software\Tarma Installer] =>PUP.Tarma
[HKLM\Software\WNLT] =>Adware.IncrediBar
[HKLM\Software\Wow6432Node\5f2d9dae03be410] =>Hijacker.Eazel
[HKLM\Software\Wow6432Node\86e96d07-fe6c-4d48-ab2e-1d28792b963f] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\AedgePerformanceBCN] =>Adware.SPointer
[HKLM\Software\Wow6432Node\Babylon] =>PUP.Babylon
[HKLM\Software\Wow6432Node\Browsers+_App+s+-nv] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\IncrediMail]
[HKLM\Software\Wow6432Node\InstalledBrowserExtensions] =>Adware.VidSaver
[HKLM\Software\Wow6432Node\PCTRunner] =>PUP.WebProtect
[HKLM\Software\Wow6432Node\Services x86] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\SupDp] =>PUP.SupTab
[HKLM\Software\Wow6432Node\Tutorials] =>PUP.AgenceExclusive
[HKLM\Software\Wow6432Node\Video_Clip_Grab]
[HKLM\Software\Wow6432Node\Wpm] =>PUP.WpManager
[HKLM\Software\Wow6432Node\cd0a9d2c-ca44-4603-bcd4-cb236c4e47a3] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\supTab] =>PUP.SupTab
[HKLM\Software\jumpshot.com]
~ Key Software: 566 Legitimates Filtered in 00mn 02s
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 26/06/2014 - 11:15:03 - [] ----D C:\Program Files (x86)\Any Video Recorder
O43 - CFD: 29/11/2012 - 12:30:03 - [] ----D C:\Program Files (x86)\BestPractice
O43 - CFD: 06/06/2014 - 08:23:43 - [0] ----D C:\Program Files (x86)\Boxore =>Adware.Boxore
O43 - CFD: 13/12/2014 - 09:34:37 - [] ----D C:\Program Files (x86)\Browsers+_App+s+ =>PUP.CrossRider
O43 - CFD: 14/04/2014 - 07:33:18 - [0] ----D C:\Program Files (x86)\File Scout =>PUP.FileScout
O43 - CFD: 13/12/2014 - 09:34:38 - [] ----D C:\Program Files (x86)\LPT =>Adware.Incredibar
O43 - CFD: 13/12/2014 - 09:42:40 - [] ----D C:\Program Files (x86)\MyPC Backup =>PUP.MyPCBackup
O43 - CFD: 26/11/2012 - 23:55:48 - [] ----D C:\Program Files (x86)\OfficialVideoConverter =>PUP.OfficialVideoConverter
O43 - CFD: 25/04/2013 - 18:35:43 - [] ----D C:\Program Files (x86)\Oxyboo
O43 - CFD: 13/12/2014 - 09:34:38 - [] ----D C:\Program Files (x86)\PCTRunner =>PUP.WebProtect
O43 - CFD: 28/08/2014 - 08:33:04 - [] ----D C:\Program Files (x86)\PokerStars.FR
O43 - CFD: 10/07/2013 - 16:53:30 - [] ----D C:\Program Files (x86)\Postit
O43 - CFD: 28/04/2013 - 18:24:07 - [] ----D C:\Program Files (x86)\SaveVideo plugin For IE =>Adware.Bandoo
O43 - CFD: 24/06/2014 - 16:15:13 - [] ----D C:\Program Files (x86)\SupTab =>PUP.SupTab
O43 - CFD: 06/06/2014 - 08:23:57 - [] ----D C:\Program Files (x86)\SweetIM =>PUP.SweetIM
O43 - CFD: 13/12/2014 - 09:34:57 - [] ----D C:\Program Files (x86)\ver6NewPlayer =>Adware.NewPlayer
O43 - CFD: 12/04/2013 - 14:23:02 - [] ----D C:\Program Files (x86)\Video_Clip_Grab
O43 - CFD: 09/03/2014 - 09:48:20 - [] ----D C:\ProgramData\14334
O43 - CFD: 14/02/2014 - 09:57:51 - [] ----D C:\ProgramData\3315A
O43 - CFD: 06/04/2013 - 17:55:33 - [] ----D C:\ProgramData\Ad-Aware Browsing Protection
O43 - CFD: 30/11/2012 - 08:30:10 - [] ----D C:\ProgramData\boost_interprocess
O43 - CFD: 12/03/2014 - 20:52:48 - [] ----D C:\ProgramData\BoxUpdChk =>Adware.Boxore
O43 - CFD: 06/06/2014 - 08:23:42 - [0] ----D C:\ProgramData\eSafe =>PUP.eSafeSecurity
O43 - CFD: 24/06/2014 - 16:15:38 - [] ----D C:\ProgramData\IePluginServices =>PUP.IePluginService
O43 - CFD: 06/06/2014 - 08:23:56 - [0] ----D C:\ProgramData\Iminent =>Adware.IMBooster
O43 - CFD: 26/11/2012 - 13:37:10 - [] ----D C:\ProgramData\Oxyboo
O43 - CFD: 11/05/2012 - 04:19:07 - [] ----D C:\ProgramData\Partner
O43 - CFD: 11/12/2013 - 02:24:46 - [] ----D C:\ProgramData\RegClean
O43 - CFD: 26/11/2012 - 15:51:53 - [] ----D C:\ProgramData\SweetIM =>PUP.SweetIM
O43 - CFD: 27/11/2012 - 00:00:56 - [] ----D C:\ProgramData\Tarma Installer =>PUP.Tarma
O43 - CFD: 26/06/2014 - 07:27:15 - [] ----D C:\ProgramData\WindowsProtectManger =>PUP.Fuyu
O43 - CFD: 23/01/2014 - 09:06:21 - [] ----D C:\ProgramData\WPM =>PUP.WpManager
O43 - CFD: 28/04/2014 - 16:53:00 - [] -SH-D C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
O43 - CFD: 11/09/2013 - 21:50:23 - [0] -SH-D C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
O43 - CFD: 26/06/2014 - 11:15:00 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Any Video Recorder
O43 - CFD: 29/11/2012 - 12:30:04 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BestPractice
O43 - CFD: 26/11/2012 - 13:29:16 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oxyboo
O43 - CFD: 28/04/2013 - 18:24:07 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Save Video plugin for IE
O43 - CFD: 21/11/2010 - 08:16:41 - [0] R-H-D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 28/04/2013 - 19:13:41 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAFPlayer =>PUP.VAFPlayer
O43 - CFD: 24/09/2014 - 15:36:24 - [] ----D C:\Users\toshiba\AppData\Roaming\Advanced Cleaner Pro
O43 - CFD: 08/07/2014 - 09:14:59 - [] ----D C:\Users\toshiba\AppData\Roaming\cacaoweb =>PUP.CacaoWeb
O43 - CFD: 24/06/2014 - 16:15:10 - [0] ----D C:\Users\toshiba\AppData\Roaming\SupTab =>PUP.SupTab
O43 - CFD: 26/06/2014 - 07:20:52 - [] ----D C:\Users\toshiba\AppData\Roaming\VOPackage =>Adware.Downware
O43 - CFD: 06/09/2014 - 21:10:51 - [] ----D C:\Users\toshiba\AppData\Roaming\wam
O43 - CFD: 06/09/2014 - 21:10:52 - [] ----D C:\Users\toshiba\AppData\Roaming\wam.04351C371E530C3762CBA45FA283ED972DCDEFB6.1
O43 - CFD: 26/06/2014 - 07:27:25 - [] ----D C:\Users\toshiba\AppData\Roaming\webssearches =>Hijacker.WebsSearches
O43 - CFD: 26/01/2014 - 15:39:19 - [0] ----D C:\Users\toshiba\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
O43 - CFD: 11/09/2013 - 08:05:34 - [] ----D C:\Users\toshiba\AppData\Local\AddLyrics =>Adware.AddLyrics
O43 - CFD: 15/11/2014 - 19:19:12 - [] -SH-D C:\Users\toshiba\AppData\Local\EmieBrowserModeList
O43 - CFD: 06/06/2014 - 08:23:30 - [0] ----D C:\Users\toshiba\AppData\Local\genienext =>PUP.NextLive
O43 - CFD: 13/12/2014 - 09:35:46 - [] ----D C:\Users\toshiba\AppData\Local\LPT =>Adware.Incredibar
O43 - CFD: 13/12/2014 - 09:35:46 - [] ----D C:\Users\toshiba\AppData\Local\OXYBOO
O43 - CFD: 06/09/2014 - 20:36:17 - [] ----D C:\Users\toshiba\AppData\Local\PokerStars.FR
O43 - CFD: 01/07/2013 - 11:37:17 - [0] ----D C:\Users\toshiba\AppData\Local\Services x86 =>PUP.CrossRider
O43 - CFD: 29/11/2012 - 12:30:03 - [0] ----D C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BestPractice
O43 - CFD: 15/10/2013 - 07:52:39 - [] ----D C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard =>PUP.BitGuard
O43 - CFD: 13/12/2014 - 09:35:48 - [] ----D C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup =>PUP.MyPCBackup
O43 - CFD: 28/08/2014 - 07:56:54 - [] ----D C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PokerStars.FR
O43 - CFD: 19/03/2014 - 09:44:25 - [] ----D C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rummyworld
O43 - CFD: 24/06/2014 - 16:30:57 - [] ----D C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage =>Adware.Downware
~ 69 Dossier CLSID vide (CLSID Empty Folder)
~ Program Folder: 469 Legitimates Filtered in 00mn 07s
---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.CCC29DC7339B2148C0B8953D8FEF690D] - 19/12/2014 - 23:51:08 ---A- . (...) -- C:\Windows\System32\prfc0816.dat [2207102]
O44 - LFC:[MD5.2C6A3840672ED1B5BE11489A9D4441B9] - 19/12/2014 - 23:51:08 ---A- . (...) -- C:\Windows\System32\prfh0816.dat [2894330]
~ Files: 64 Legitimates Filtered in 00mn 47s
---\\ Clé de registre Shell MountPoints2 (MPSK) (O51)
O51 - MPSK:{10e3b38b-ea74-11e2-9fcc-4c72b950f3c0}\AutoRun\command. (...) -- E:\AutoRun.exe (.not file.)
O51 - MPSK:{bbc8cf8e-4f6f-11e2-bd34-4c72b950f3c0}\AutoRun\command. (...) -- E:\AutoRun.exe (.not file.)
O51 - MPSK:{bbc8cfa1-4f6f-11e2-bd34-4c72b950f3c0}\AutoRun\command. (...) -- E:\AutoRun.exe (.not file.)
~ Keys: Scanned in 00mn 00s
---\\ Enumération des clés de registre StartupReg (SMSR) (O53)
O53 - SMSR:HKLM\...\startupreg\addlyrics@addlyrics.net [Key] . (...) -- C:\Program Files (x86)\AddLyrics\YTLUpdater.exe (.not file.) =>Adware.AddLyrics
O53 - SMSR:HKLM\...\startupreg\DATAMNGR [Key] . (...) -- C:\Program Files (x86)\SEARCH~1\Datamngr\DATAMN~1.exe (.not file.) =>PUP.Datamngr
O53 - SMSR:HKLM\...\startupreg\Iminent [Key] . (...) -- C:\Program Files (x86)\Iminent\Iminent.exe (.not file.) =>Adware.IMBooster
O53 - SMSR:HKLM\...\startupreg\IminentMessenger [Key] . (...) -- C:\Program Files (x86)\Iminent\Iminent.Messengers.exe (.not file.) =>Adware.IMBooster
O53 - SMSR:HKLM\...\startupreg\Optimizer Pro [Key] . (...) -- C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe (.not file.) =>PUP.OptimizerPro
O53 - SMSR:HKLM\...\startupreg\SearchProtection [Key] . (...) -- C:\ProgramData\Search Protection\_run.bat (.not file.) =>PUP.SearchProtect
O53 - SMSR:HKLM\...\startupreg\Sweetpacks Communicator [Key] . (...) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (.not file.) =>PUP.SweetIM
~ SMSR Keys: 41 Legitimates Filtered in 00mn 01s
---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLinkedConnections"=1
~ MWPS: 17 Legitimates Filtered in 00mn 00s
---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
~ MWPE Keys: 3 Legitimates Filtered in 00mn 00s
---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:09/04/2014 - 20:05:52 ---A- . (.Wondershare - Wondershare Virtual Audio Device.) -- C:\Windows\System32\Drivers\Apowersoft_AudioDevice.sys [31920]
O58 - SDL:28/04/2014 - 15:50:01 ---A- . (...) -- C:\Windows\System32\Drivers\aswHwid.sys [29208] =>.ALWIL Software
O58 - SDL:28/04/2014 - 15:50:01 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys [65776] =>.ALWIL Software
O58 - SDL:28/04/2014 - 15:50:02 ---A- . (...) -- C:\Windows\System32\Drivers\aswVmm.sys [208416] =>.ALWIL Software
O58 - SDL:14/07/2009 - 02:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496]
O58 - SDL:09/08/2007 - 04:10:54 ---A- . (.Huawei Tech. Co., Ltd. - HUAWEI USB Smart Card Driver.) -- C:\Windows\System32\Drivers\ewdcsc.sys [29696]
O58 - SDL:06/04/2013 - 17:53:43 ---A- . (.GFI Software - GFI Boot Time Operations Driver.) -- C:\Windows\System32\Drivers\gfibto.sys [14456]
O58 - SDL:10/06/2009 - 21:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232]
O58 - SDL:14/04/2008 - 09:36:30 ---A- . (.DiBcom SA - DiBcom AVSTREAM BDA driver.) -- C:\Windows\System32\Drivers\mod7700.sys [691712]
O58 - SDL:22/01/2014 - 08:52:10 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudbus.sys [108800]
O58 - SDL:22/01/2014 - 08:52:10 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudmdm.sys [206080]
O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656]
O58 - SDL:25/04/2012 - 12:11:36 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\Drivers\usbaapl64.sys [52736]
~ Drivers: 98 Legitimates Filtered in 00mn 14s
---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s
---\\ Liste les services legacy du registre (LALS) (O64)
O64 - Services: CurCS - 28/04/2014 - C:\Windows\system32\drivers\aswHwid.sys (aswHwid) .(...) - LEGACY_ASWHWID
~ Legacy: 115 Legitimates Filtered in 00mn 01s
---\\ Associations Shell Spawning (O67)
O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)
~ FASS Keys: 11 Legitimates Filtered in 00mn 00s
---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (...) -- C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com =>Hijacker.WebsSearches
~ Keys: Scanned in 00mn 00s
---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: prefs.js [toshiba - kv59zm6l.default] user_pref("extensions.crossrider.bic", "148ae5a934706070b3a23525687b642b"); =>PUP.CrossRider
O69 - SBI: prefs.js [toshiba - kv59zm6l.default] user_pref("extensions.helperbar.DockingPositionDown", false); =>PUP.HelperBar
O69 - SBI: prefs.js [toshiba - kv59zm6l.default] user_pref("extensions.helperbar.SmartbarDisabled", false); =>PUP.HelperBar
O69 - SBI: prefs.js [toshiba - kv59zm6l.default] user_pref("extensions.helperbar.SmartbarStateMinimaized", false); =>PUP.HelperBar
O69 - SBI: prefs.js [toshiba - kv59zm6l.default] user_pref("extensions.helperbar.Visibility", false); =>PUP.HelperBar
O69 - SBI: prefs.js [toshiba - kv59zm6l.default] user_pref("extensions.helperbar.keepAliveLastevent", "1411674433"); =>PUP.HelperBar
O69 - SBI: prefs.js [toshiba - kv59zm6l.default] user_pref("extensions.helperbar.lastExternalJsUpdate", "1411627668265"); =>PUP.HelperBar
O69 - SBI: SearchScopes [HKCU] {006ee092-9658-4fd6-bd8e-a21a348e59f5} - (Web Search) - https://search.safefinder.com/?q= =>Hijacker.SmartBar
O69 - SBI: SearchScopes [HKCU] {9CB96984-43C3-4D44-90EF-01466EFCF7BB} [DefaultScope] - (Yahoo! (Avast)) - https://fr.search.yahoo.com/
~ Keys: Scanned in 00mn 00s
---\\ Recherche particulière à la racine du système (SPRF) (O84)
[MD5.CE600D77AB6E9D9BD10CB7ECF675F32E] [SPRF][07/07/2014] (...) -- C:\Users\toshiba\Desktop\cacaoweb.exe [504320] =>PUP.CacaoWeb
[MD5.3080CBFFA3344FD224A614217961A1C0] [SPRF][29/11/2012] (.FLVMPlayer - FLV Media Player Setup.) -- C:\Users\toshiba\Desktop\FLVMPlayer.exe [4951030] =>PUP.FLVMPlayer
[MD5.4FB5110CFC25B056900692033B724732] [SPRF][30/01/2014] (...) -- C:\Users\toshiba\Desktop\metronom.exe [246784]
[MD5.5F3E6C5FF5BACB996D5EA683FE99CDE9] [SPRF][06/07/2011] (.Gérard Brochu - Romi.) -- C:\Users\toshiba\Desktop\Romi.exe [24500736]
~ Files: 4 Legitimates Filtered in 00mn 00s
---\\ Liste des exceptions du parefeu (FirewallRules) (O87)
O87 - FAEL: "{34865CDA-E514-4C20-8F34-45D3DA475C5B}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\toshiba\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O87 - FAEL: "{63EDF3E8-3966-4A0A-92BF-CB6809FFA4D3}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\toshiba\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
~ Firewall: 2 Legitimates Filtered in 00mn 09s
---\\ Enumère les codes produits des logiciels (PUC) (O90)
O90 - PUC: "0C776EBEBCBCFBE408892EE7B12517FC" . (.VAFPlayer.) -- C:\windows\Installer\{EBE677C0-CBCB-4EBF-8098-E27E1B5271CF}\_112D608FD02CD87FDC7735.exe =>PUP.VAFPl
5 réponses
Résumé de la discussion
Le ralentissement important de l’ordinateur est attribué à une détection ZHPDiag d’adware et de hijackers dans les navigateurs, avec des PUP tels que CrossRider et WebsSearches. Plusieurs éléments signalés expliquent ce ralentissement, notamment des extensions et modules malveillants dans Chrome, Firefox et Internet Explorer, des programmes au démarrage et des outils publicitaires présents. Des mesures recommandées incluent la suppression des PUP et des barres d’outils indésirables, la désactivation de modules de démarrage suspects et la vérification des paramètres proxy et de recherche. En cas de persistance, une réinitialisation ciblée des navigateurs et une éradication complète des logiciels potentiellement indésirables pourraient être nécessaires pour retrouver des performances stables.
-
-
je l'ai fait !:) voici le lien:) merciiiiiiiiiiiiiii d'avance
http://cjoint.com/?DLvtfTqEKdP -
Ton Pc est bourré de programmes indésirables :
Télécharge AdwCleaner : https://www.commentcamarche.net/telecharger/securite/2759-adwcleaner/#q=adwcleaner&cur=1&url=%2F
Ensuite suis ces étapes :
- Lance le logiciel
- Clique sur "Scanner"
- Une fois le scan terminé, clique sur "Nettoyer"
- Le logiciel va redémarrer ton ordinateur
- Une fois ta session ouverte, tu devrais avoir un rapport de nettoyage
- Colle ce rapport dans ton prochain message -
bonjour,
est ce que mon fichier est bien passé ? l'avez vous reçu?
j'ai du m'y reprendre à 3 fois....
meerci d'avance pour votre aide -
voici les rapports adwcleaner. merci pour votre aide !!!
# AdwCleaner v4.106 - Rapport créé le 22/12/2014 à 10:04:33
# Mis à jour le 21/12/2014 par Xplode
# Database : 2014-12-21.4 [Live]
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : toshiba - TOSHIBA-TOSH
# Exécuté depuis : C:\Users\toshiba\Downloads\adwcleaner_4.106.exe
# Option : Nettoyer
***** [ Services ] *****
[#] Service Supprimé : BackupStack
[#] Service Supprimé : globalUpdate
[#] Service Supprimé : globalUpdatem
[#] Service Supprimé : IePluginServices
[#] Service Supprimé : Partner Service
[#] Service Supprimé : ProtectMonitor
Service Supprimé : servervo
***** [ Fichiers / Dossiers ] *****
Dossier Supprimé : C:\Kreapixel
Dossier Supprimé : C:\ProgramData\BoxUpdChk
Dossier Supprimé : C:\ProgramData\eSafe
Dossier Supprimé : C:\ProgramData\IePluginServices
Dossier Supprimé : C:\ProgramData\Iminent
Dossier Supprimé : C:\ProgramData\NCH Software
Dossier Supprimé : C:\ProgramData\Partner
Dossier Supprimé : C:\ProgramData\RegClean
Dossier Supprimé : C:\ProgramData\SweetIM
Dossier Supprimé : C:\ProgramData\Tarma Installer
Dossier Supprimé : C:\ProgramData\WindowsProtectManger
Dossier Supprimé : C:\ProgramData\WPM
Dossier Supprimé : C:\ProgramData\Yahoo! Companion
Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flash Player Pro
Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Video Converter
Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAFPlayer
Dossier Supprimé : C:\Program Files (x86)\Amazon Browser Bar
Dossier Supprimé : C:\Program Files (x86)\BearShare Applications
Dossier Supprimé : C:\Program Files (x86)\Boxore
Dossier Supprimé : C:\Program Files (x86)\file scout
Dossier Supprimé : C:\Program Files (x86)\Flash Player Pro
Dossier Supprimé : C:\Program Files (x86)\Free Video Converter
[!] Dossier Supprimé : C:\Program Files (x86)\globalUpdate
Dossier Supprimé : C:\Program Files (x86)\LPT
Dossier Supprimé : C:\Program Files (x86)\MyPC Backup
Dossier Supprimé : C:\Program Files (x86)\NCH Software
Dossier Supprimé : C:\Program Files (x86)\PCTRunner
Dossier Supprimé : C:\Program Files (x86)\Perion
Dossier Supprimé : C:\Program Files (x86)\predm
Dossier Supprimé : C:\Program Files (x86)\SmartTweak
Dossier Supprimé : C:\Program Files (x86)\SupTab
Dossier Supprimé : C:\Program Files (x86)\SweetIM
Dossier Supprimé : C:\Program Files (x86)\tuguu sl
Dossier Supprimé : C:\Program Files (x86)\Uniblue
Dossier Supprimé : C:\Program Files (x86)\VideoPerformer
Dossier Supprimé : C:\Program Files (x86)\Software
Dossier Supprimé : C:\Program Files (x86)\Browsers+_App+s+
Dossier Supprimé : C:\Program Files (x86)\ver6NewPlayer
Dossier Supprimé : C:\windows\SysWOW64\BrowserProtect
Dossier Supprimé : C:\windows\SysWOW64\WNLT
Dossier Supprimé : C:\Program Files\002
Dossier Supprimé : C:\Program Files\DomaIQ Uninstaller
Dossier Supprimé : C:\Program Files\RrSavings
Dossier Supprimé : C:\windows\System32\ARFC
Dossier Supprimé : C:\Users\toshiba\AppData\Local\AddLyrics
Dossier Supprimé : C:\Users\toshiba\AppData\Local\genienext
Dossier Supprimé : C:\Users\toshiba\AppData\Local\globalUpdate
Dossier Supprimé : C:\Users\toshiba\AppData\Local\LPT
Dossier Supprimé : C:\Users\toshiba\AppData\Local\Mobogenie
Dossier Supprimé : C:\Users\toshiba\AppData\Local\SearchProtect
Dossier Supprimé : C:\Users\toshiba\AppData\Local\Services x86
Dossier Supprimé : C:\Users\toshiba\AppData\Local\webplayer
Dossier Supprimé : C:\Users\toshiba\AppData\Local\Software
Dossier Supprimé : C:\Users\toshiba\AppData\LocalLow\BabylonToolbar
Dossier Supprimé : C:\Users\toshiba\AppData\LocalLow\Conduit
Dossier Supprimé : C:\Users\toshiba\AppData\LocalLow\DataMngr
Dossier Supprimé : C:\Users\toshiba\AppData\LocalLow\Delta
Dossier Supprimé : C:\Users\toshiba\AppData\LocalLow\HPAppData
Dossier Supprimé : C:\Users\toshiba\AppData\LocalLow\incredibar.com
Dossier Supprimé : C:\Users\toshiba\AppData\LocalLow\PriceGong
Dossier Supprimé : C:\Users\toshiba\AppData\LocalLow\searchquband
Dossier Supprimé : C:\Users\toshiba\AppData\Roaming\cacaoweb
Dossier Supprimé : C:\Users\toshiba\AppData\Roaming\PerformerSoft
Dossier Supprimé : C:\Users\toshiba\AppData\Roaming\SupTab
Dossier Supprimé : C:\Users\toshiba\AppData\Roaming\Systweak
Dossier Supprimé : C:\Users\toshiba\AppData\Roaming\Uniblue
Dossier Supprimé : C:\Users\toshiba\AppData\Roaming\VOPackage
Dossier Supprimé : C:\Users\toshiba\AppData\Roaming\WebPlayerBdd
Dossier Supprimé : C:\Users\toshiba\AppData\Roaming\webssearches
Dossier Supprimé : C:\Users\toshiba\AppData\Roaming\Advanced Cleaner Pro
Dossier Supprimé : C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
Dossier Supprimé : C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
Dossier Supprimé : C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTweak Software
Dossier Supprimé : C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VideoPerformer
Dossier Supprimé : C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
Dossier Supprimé : C:\Users\toshiba\Documents\Flash Player Pro
Dossier Supprimé : C:\Users\toshiba\Documents\Mobogenie
Dossier Supprimé : C:\Users\toshiba\Documents\PC Speed Maximizer
Dossier Supprimé : C:\Users\toshiba\Documents\Advanced Cleaner Pro
[!] Dossier Supprimé : C:\Users\toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\kv59zm6l.default\Extensions\boost@boost.net.xpi
Dossier Supprimé : C:\Users\toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\kv59zm6l.default\Extensions\cacaoweb@cacaoweb.org
Dossier Supprimé : C:\Users\toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\kv59zm6l.default\Extensions\wrigtdamon@yahoo.com
Dossier Supprimé : C:\Users\toshiba\AppData\Local\Google\Chrome\User Data\Default\Extensions\leahdjjpjmnamomgpojikeapflgbmjab
Dossier Supprimé : C:\Users\toshiba\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg
Dossier Supprimé : C:\Users\toshiba\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
Dossier Supprimé : C:\Users\toshiba\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
Fichier Supprimé : C:\Users\toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\kv59zm6l.default\Extensions\boost@boost.net.xpi
Fichier Supprimé : C:\monitorsvc.exe
Fichier Supprimé : C:\Users\Public\Desktop\eBay.lnk
Fichier Supprimé : C:\Users\Public\Desktop\Get The Best Facebook Chat Messenger.lnk
Fichier Supprimé : C:\Users\Public\Desktop\FLV Media Player.lnk
Fichier Supprimé : C:\windows\SysWOW64\MyOSProtect.ini
Fichier Supprimé : C:\windows\SysWOW64\MyOSProtectOff.ini
Fichier Supprimé : C:\windows\System32\dmwu.exe
Fichier Supprimé : C:\windows\System32\ImhxxpComm.dll
Fichier Supprimé : C:\windows\System32\MyOSProtectOff.ini
Fichier Supprimé : C:\windows\System32\roboot64.exe
Fichier Supprimé : C:\Users\toshiba\daemonprocess.txt
Fichier Supprimé : C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Webplayer.lnk
Fichier Supprimé : C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
Fichier Supprimé : C:\Users\toshiba\Desktop\cacaoweb.exe
Fichier Supprimé : C:\Users\toshiba\Desktop\MyPC Backup.lnk
Fichier Supprimé : C:\Users\toshiba\Desktop\sweetpcfix.url
Fichier Supprimé : C:\Users\toshiba\Desktop\Sync Folder.lnk
Fichier Supprimé : C:\Users\toshiba\Desktop\Webplayer.lnk
Fichier Supprimé : C:\Users\toshiba\Desktop\FLVMPlayer.exe
Fichier Supprimé : C:\Users\toshiba\AppData\Roaming\Mozilla\Firefox\Profiles\kv59zm6l.default\searchplugins\Web Search.xml
Fichier Supprimé : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\webssearches.xml
Fichier Supprimé : C:\Program Files (x86)\Mozilla Firefox\user.js
Fichier Supprimé : C:\Users\toshiba\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx
***** [ Tâches planifiées ] *****
Tâche Supprimée : globalUpdateUpdateTaskMachineCore
Tâche Supprimée : LaunchSignup
Tâche Supprimée : SpeedUpMyPC Maintenance
Tâche Supprimée : SpeedUpMyPC Startup
Tâche Supprimée : RunAsStdUser Task
Tâche Supprimée : 21e3d187-f27b-4325-94bd-115282fc8941-1
Tâche Supprimée : 21e3d187-f27b-4325-94bd-115282fc8941-11
Tâche Supprimée : 21e3d187-f27b-4325-94bd-115282fc8941-2
Tâche Supprimée : 21e3d187-f27b-4325-94bd-115282fc8941-3
Tâche Supprimée : 21e3d187-f27b-4325-94bd-115282fc8941-4
Tâche Supprimée : 21e3d187-f27b-4325-94bd-115282fc8941-5
Tâche Supprimée : 21e3d187-f27b-4325-94bd-115282fc8941-5_user
Tâche Supprimée : 21e3d187-f27b-4325-94bd-115282fc8941-6
Tâche Supprimée : 21e3d187-f27b-4325-94bd-115282fc8941-7
Tâche Supprimée : 31e367ae-b9cb-4a8d-84f8-fdf4c51ca41e
Tâche Supprimée : d3a7adb0-8776-4f25-bb54-5bacb797e6ed
***** [ Raccourcis ] *****
Raccourci Désinfecté : C:\Users\Public\Desktop\Google Chrome.lnk
Raccourci Désinfecté : C:\Users\Public\Desktop\Mozilla Firefox.lnk
Raccourci Désinfecté : C:\Users\toshiba\Desktop\Internet Explorer.lnk
Raccourci Désinfecté : C:\Users\toshiba\Desktop\Search.lnk
Raccourci Désinfecté : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Raccourci Désinfecté : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Raccourci Désinfecté : C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Raccourci Désinfecté : C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
Raccourci Désinfecté : C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLV Player\Uninstall.lnk
Raccourci Désinfecté : C:\Users\toshiba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Raccourci Désinfecté : C:\Users\toshiba\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
Raccourci Désinfecté : C:\Users\toshiba\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Raccourci Désinfecté : C:\Users\toshiba\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk
Raccourci Désinfecté : C:\Users\toshiba\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk
Raccourci Désinfecté : C:\Users\toshiba\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk
Raccourci Désinfecté : C:\Users\toshiba\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Google Chrome.lnk
***** [ Registre ] *****
Valeur Supprimée : HKCU\Software\Mozilla\Firefox\Extensions [addlyrics@addlyrics.net]
Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [faststartff@gmail.com]
Clé Supprimée : HKCU\Software\Google\Chrome\Extensions\leahdjjpjmnamomgpojikeapflgbmjab
Clé Supprimée : HKCU\Software\Google\Chrome\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\niogeckbkdcabhnapjbkeiklablhjoca
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
Clé Supprimée : HKCU\Software\Classes\Applications\lollipop.exe
Clé Supprimée : HKCU\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\BabylonToolbar
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [FLV Player]
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Clé Supprimée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Clé Supprimée : HKLM\SOFTWARE\Classes\iesmartbar.bho
Clé Supprimée : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Clé Supprimée : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Clé Supprimée : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Clé Supprimée : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Clé Supprimée : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
Clé Supprimée : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Clé Supprimée : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Software.OneClickCtrl.9
Clé Supprimée : HKLM\SOFTWARE\Classes\Software.OneClickProcessLauncherMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\Software.OneClickProcessLauncherMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\Software.Update3WebControl.3
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.CoCreateAsync
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.CoCreateAsync.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.CoreClass
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.CoreClass.1
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.CoreMachineClass
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.CoreMachineClass.1
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.CredentialDialogMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.CredentialDialogMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassMachineFallback
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassMachineFallback.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.ProcessLauncher
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.ProcessLauncher.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.Update3WebMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.Update3WebMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.Update3WebMachineFallback
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.Update3WebMachineFallback.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\speedupmypc
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@tools.Software.com/Software Update;version=3
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@tools.Software.com/Software Update;version=9
Clé Supprimée : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
Clé Supprimée : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater
Clé Supprimée : HKCU\Software\Mozilla\Extends
Clé Supprimée : HKCU\Software\5f2d9dae03be410
Clé Supprimée : HKLM\SOFTWARE\5f2d9dae03be410
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{32451DFC-C23B-4E12-866C-FC7982238504}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{02C9C7B0-C7C8-4AAC-A9E4-55295BF60F8F}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{0398B101-6DA7-473F-A290-17D2FBC88CC0}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{08230486-CBAF-4000-8036-447C3852D034}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{092A2C6B-43EE-4F9F-8F8E-14ED5E11C14B}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{0CC36196-8589-4B80-A771-D659411D7F90}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{13809C03-DE3B-47E5-96A3-2D8F83693A50}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{143D96F9-EB64-48B3-B192-91C2C41A1F43}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{14F7D91F-F669-45C9-9F42-BACBFDB86EAD}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1663C10B-0D55-438D-8496-19A3DBAEC0E4}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{187A6488-6E71-4A2A-B118-7BEFBFE58257}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220122992262}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{257A6158-1416-4B31-9BF8-29FF49F3814F}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{2D065204-A024-4C39-8A38-EE7078EC7ACF}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{30F5476C-677B-4DB0-B397-51F5BFD86840}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3223F2FB-D9B9-45FC-9D66-CD717FFA4EE5}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{32451DFC-C23B-4E12-866C-FC7982238504}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{351798B1-C1D2-45AB-92B4-4D6C2D6AB5AF}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3AEA1BEF-6195-46F4-ACA2-0ED14F7EFA1B}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3B96B5D3-4A8D-42DC-9CDE-E9B94B3CFE5D}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3D7F9AC3-BAC3-4E51-81D7-D121D79E550A}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3D976BD4-0B6A-4757-9D2B-65AA20F4B4EA}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{413002E0-930D-4EF9-9803-FC4B3EA4181E}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{4498C5E9-93C6-4142-B6BE-F0C6DC48B77A}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{479BF2D6-E362-4A99-B1AB-BC764D7B97AE}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{492A108F-51D0-4BD8-899D-AD4AB2893064}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{4B6D6E60-FBD2-4E79-BF4B-886BC98F1797}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{60893E02-2E5B-43F9-A93A-BAD60C2DF6EF}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{6D39931F-451E-4BDD-BAF4-37FB96DBBA5D}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{76894207-241A-473B-B111-FAA75608F1D9}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{76C684D2-C35D-4284-976A-D862F53ADB81}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{796D822A-C3F9-4A97-BAAB-42FE7628EA63}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{79EF3691-EC1A-4705-A01A-D2E36EC11758}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{7A7C8DA9-8660-460D-849F-01619B91C03F}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{82F41418-8E64-47EB-A7F1-4702A974D289}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{85D920CE-63A7-46DC-8992-41D1D2E07FAD}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{895ED5E8-ABB4-40C3-A0CA-2571964268E2}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{8AAC123A-1959-4A45-BFC5-E2D50783098A}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A07956CD-81F8-4A03-B524-5D87E690DC83}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A43DE495-3D00-47D4-9D2C-303115707939}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{ACCC747B-2A59-4F30-BA7C-D26333DE65F5}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{AE2506E3-0F75-44EE-B552-CFF3BFF4D50F}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{B5E3B26B-6E5C-4865-A63D-58D04B10E245}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{B6CD3C31-ABF4-4C7A-8CB7-29960BC7017C}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{B84D2DC5-42B2-4E5E-BF61-7B48152FF8EF}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{B89D5309-0367-4494-A92F-3D4C94F88307}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C014EBF8-8854-448B-B5A4-557C4090EDCE}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C24C3824-63D8-42CD-BB5A-77631072FDB2}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C31191DB-2F64-464C-B97C-6AC81ACB7AAC}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C342C7A7-F622-4EF3-8B7F-ABB9FBE73F14}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C4765B07-BC2F-477B-925C-B2BF24887823}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C875C0A1-09E3-48D5-9F8E-BD337796FD14}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CD126DA6-FF5B-4181-AC13-54A62240D2FA}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{DD438708-AAB4-422D-A322-B619589F5680}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E812AE43-7799-4E67-8CF8-4104297A2D16}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EB41B92A-3A76-4237-9E6B-A5DDC2EAA771}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{F0BAAEC7-9AE0-49FF-9C4B-86E774FF397F}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{F92193FD-2243-4401-9ACC-49FF30885898}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{F9A8326E-9C90-4BF2-ACC7-D0883D16AA82}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FD21B8A2-910B-45AC-9C10-45E6A8B84984}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{81017EA9-9AA8-4A6A-9734-7AF40E7D593F}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{28C02550-6572-401a-A2AE-5BC703C9BBA6}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A1CCCE0D-AE21-42A2-BE58-8E6109410995}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CD4D7B0F-45C6-4bb2-A1E7-54D1754E7FC5}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622502255}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{736EF78E-5A04-46F9-893E-EDEC6EA5DF45}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7A1BCE27-099C-4628-B63A-AEC00C6376B3}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{AF3AFF7C-B9E9-48DD-9002-212B6DEAAC02}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{CA17D76B-F91D-4659-A7FD-A9F7ED375CDD}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DBE82879-914A-422F-BAE9-2ECC80BE536F}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E12D7149-73EF-45E4-A1E9-99FD7DAE62D3}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F2B184F1-547C-4EE9-BFC4-AC489C7077D9}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550155995562}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655505555}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660166996662}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666506655}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{C4C4F1F4-3074-4CB6-9FB8-0A64273166F0}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644504455}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{37D4F18B-902D-4794-807B-D6C5314B4FF7}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4F37A8FE-00B3-430F-85AA-F97F12E8B651}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3B96B5D3-4A8D-42DC-9CDE-E9B94B3CFE5D}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7C3B01BC-53A5-48A0-A43B-0C67731134B9}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{ACCC747B-2A59-4F30-BA7C-D26333DE65F5}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0ABE0FED-50E7-4E42-A125-57C0A11DBCDE}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{31111111-1111-1111-1111-110111991162}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3B96B5D3-4A8D-42DC-9CDE-E9B94B3CFE5D}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3D976BD4-0B6A-4757-9D2B-65AA20F4B4EA}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ACCC747B-2A59-4F30-BA7C-D26333DE65F5}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c964fdd5-4469-4712-9919-473924f7a890}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{e84e81c3-0467-4511-852f-7f5cbb49b41c}
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{25A3A431-30BB-47C8-AD6A-E1063801134F}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622502255}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{CA17D76B-F91D-4659-A7FD-A9F7ED375CDD}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550155995562}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655505555}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660166996662}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666506655}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Valeur Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Valeur Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Clé Supprimée : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Clé Supprimée : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2410}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c964fdd5-4469-4712-9919-473924f7a890}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{e84e81c3-0467-4511-852f-7f5cbb49b41c}
Donnée Restaurée : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}
Clé Supprimée : HKCU\Software\Alexa Internet
Clé Supprimée : HKCU\Software\Boxore
Clé Supprimée : HKCU\Software\cacaoweb
Clé Supprimée : HKCU\Software\Conduit_Search_Protect
Clé Supprimée : HKCU\Software\distromatic
Clé Supprimée : HKCU\Software\filescout
Clé Supprimée : HKCU\Software\Free Video Converter
Clé Supprimée : HKCU\Software\GlobalUpdate
Clé Supprimée : HKCU\Software\IM
Clé Supprimée : HKCU\Software\ImInstaller
Clé Supprimée : HKCU\Software\InstallCore
Clé Supprimée : HKCU\Software\InstalledBrowserExtensions
Clé Supprimée : HKCU\Software\lollipop
Clé Supprimée : HKCU\Software\Myfree Codec
Clé Supprimée : HKCU\Software\performersoft llc
Clé Supprimée : HKCU\Software\SmartBar
Clé Supprimée : HKCU\Software\smartbarbackup
Clé Supprimée : HKCU\Software\smartbarlog
Clé Supprimée : HKCU\Software\smarttweak
Clé Supprimée : HKCU\Software\systweak
Clé Supprimée : HKCU\Software\tuguu sl
Clé Supprimée : HKCU\Software\Tutorials
Clé Supprimée : HKCU\Software\TutoTag
Clé Supprimée : HKCU\Software\Webplayer
Clé Supprimée : HKCU\Software\WNLT
Clé Supprimée : HKCU\Software\wscontb
Clé Supprimée : HKCU\Software\PCTRunner
Clé Supprimée : HKCU\Software\AffiliatedUpdate
Clé Supprimée : HKCU\Software\AppDataLow\Toolbar
Clé Supprimée : HKCU\Software\AppDataLow\Software\Crossrider
Clé Supprimée : HKCU\Software\AppDataLow\Software\RrSavings
Clé Supprimée : HKCU\Software\AppDataLow\Software\searchqutoolbar
Clé Supprimée : HKCU\Software\AppDataLow\Software\Browsers+_App+s+
Clé Supprimée : HKLM\SOFTWARE\AedgePerformanceBCN
Clé Supprimée : HKLM\SOFTWARE\Babylon
Clé Supprimée : HKLM\SOFTWARE\GlobalUpdate
Clé Supprimée : HKLM\SOFTWARE\InstalledBrowserExtensions
Clé Supprimée : HKLM\SOFTWARE\Myfree Codec
Clé Supprimée : HKLM\SOFTWARE\Services x86
Clé Supprimée : HKLM\SOFTWARE\SupDp
Clé Supprimée : HKLM\SOFTWARE\SupTab
Clé Supprimée : HKLM\SOFTWARE\supWindowsProtectManger
Clé Supprimée : HKLM\SOFTWARE\systweak
Clé Supprimée : HKLM\SOFTWARE\Tutorials
Clé Supprimée : HKLM\SOFTWARE\Uniblue
Clé Supprimée : HKLM\SOFTWARE\webssearchesSoftware
Clé Supprimée : HKLM\SOFTWARE\Wpm
Clé Supprimée : HKLM\SOFTWARE\PCTRunner
Clé Supprimée : HKLM\SOFTWARE\Browsers+_App+s+
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\FLV Player
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AffiliatedUpdate
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0C43FE6B-E881-4AFC-B384-4AEBC90047E8}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0E365FDA-909F-4939-838A-261DD468D862}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{491C9A4E-6E50-4B53-911D-861BA8DA3C21}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9937E55B-6331-4804-93EF-77E992F204BD}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{c3e85ee9-5892-4142-b537-bceb3dac4c3d}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{ea8fa6be-29be-4af2-9352-841f83215eb0}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EBE677C0-CBCB-4EBF-8098-E27E1B5271CF}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DomaIQ Uninstaller
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Toolbar Cleaner
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webssearches uninstaller
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\wp-dcollect-tgu
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0E08BAC8-845B-4327-8CDB-4B0F8C9857A5}_is1
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Toolbar
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Companion
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Browsers+_App+s+
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\119E4BDA-F023-280E-77B9-027A97BD23AD
Clé Supprimée : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Clé Supprimée : [x64] HKLM\SOFTWARE\RrSavings
Clé Supprimée : [x64] HKLM\SOFTWARE\Tarma Installer
Clé Supprimée : [x64] HKLM\SOFTWARE\WNLT
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RrSavings
Donnée Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SupTab\SEARCH~1.DLL
Donnée Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SupTab\SEARCH~2.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Features\0C776EBEBCBCFBE408892EE7B12517FC
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Features\64A6E60055D801F4BB8AC269354B72B8
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Features\9EE58E3C298524145B73CBBED3CAC4D3
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Features\ADF563E0F909939438A862D14D868D26
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Features\B6EF34C0188ECFA43B48A4BE9C00748E
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Features\EB6AF8AEEB922FA4392548F13812E50B
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Products\0C776EBEBCBCFBE408892EE7B12517FC
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Products\64A6E60055D801F4BB8AC269354B72B8
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Products\9EE58E3C298524145B73CBBED3CAC4D3
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Products\ADF563E0F909939438A862D14D868D26
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Products\B6EF34C0188ECFA43B48A4BE9C00748E
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Products\EB6AF8AEEB922FA4392548F13812E50B
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0124B064795BB484FA494FC7CF204C0C
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\01F8E7504D2D2644AB1185234D2AD5AC
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\04CDEDFDD6EF25443B78A49D1FE5B4F2
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\058911EBC07BAAE42B102E3F4B0D070D
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\05CE306CC244D284D8D8090E404CD7D3
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0702826FCAC36EE52AC0441EEEEE2170
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\089527E77AD22E345B0066D226E44F46
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0BD0B15D6F0C2BF428B339B2D2D732C9
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0C1AAA506D92B2D44BD6FEF6CDFB71E1
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0C776EBEBCBCFBE408892EE7B12517FC
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CAEC9AFF1716FF4DBACEED82F88C702
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0DD4444CBC682774C8E573CC73C5BC46
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0F68250201451D64EA71E91BA19832DC
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1198E28F40C3E185E9958608554D4253
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\126FFC99A0F214F41AE2D6C7A0FC09BF
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12BF94BD06C95F343A77631402B9556A
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12F72EF2521177A4BB467FF35A881382
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\14873772FE3926F4195C9280D52D3486
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\14C66209FCA938858B9729645C666684
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\14CF11D787D40BF458A3B5CB123733CE
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15A073601B9AEC3549BE4A9314794615
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\163A5460E4FB18343B4C0B781B27E813
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1705977FCB2F22F4D8A9AB847C3FB9CE
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\19F133B6A0BA9B14493CE47703DF4CF3
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1C735C7A54F53574CA5AEA93D0D1F01E
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1CE2260B068265A488410CA171D93778
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DF1DD2609A2135479C19D72E41B64AA
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1F72D9058D0863E4F8EB9FE6E980C385
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1F7C80F9CE5CDF44E9AADDC99402534C
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\206AF45B775E3A445B3B2273827DA85F
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2124D8A8CF720FD44866190AF560228E
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2217D47FAFB0AC547820199B3A026CFB
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-1-
-
@ArnaudLy6le voilou ! :) http://cjoint.com/?DLwnve3xUHE
-
-
Ok, merci.
Télécharge Malwarebytes Anti-Malware : https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/
- Décoche "Activer l'essai gratuit de Malwarebytes Anti-Malware Premium"
- Lance MalwareBytes
- Dans l'onglet Tableau de Bord, clique sur Mettre à jour
- Clique ensuite sur l'onglet " Examen "
- Coche " Examen Menaces "
- Clique sur " Examiner maintenant "
- Attends la fin de l'analyse
- Une fois l'analyse terminée, clique sur " Tout mettre en quarantaine "
- Accepte le redémarrage du PC si demandé
Une fois que ton ordinateur a redémarré, relance Malwarebytes Anti-Malware et cette fois-ci rends toi dans l'onglet " Historique ",
puis " Journaux de l'application ".
Sélectionne le rapport le plus récent, ouvre-le et clique en bas sur Coller dans le presse-papier.
Il ne te reste plus qu'à coller le rapport dans ton prochain message. -
-
