Case proxy qui se coche sans arret

Résolu
sarkis06 Messages postés 7 Date d'inscription   Statut Membre Dernière intervention   -  
Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   -
Bonjour ,

j'ai la case proxy qui se coche sans arrêt et me bloque entre autre la réception de ma messagerie Outlook
Après divers recherchent sur le web concernant mon problème , j ai téléchargé ZHPdial et ZHPFix, seulement mes capacité sont limitées et s'arrête là , j ai besoin d une expertise pour analyse mon script et essayer ainsi continuer à résoudre ce problème .
merci a vous pour votre aide.
sarkis06

10 réponses

  1. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Salut,

    Tu as installé des adwares et programmes parasites sur ton PC qui ouvrent des publicités et ralentissent l'ordinateur et les navigateurs WEB.
    Voici la procédure à suivre pour les supprimer :

    Commence par ceci :

    Suis le tutorial AdwCleaner https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= ( d'Xplode )
    Télécharge le sur ton bureau ou dossier de téléchargement.
    Lance AdwCleaner, clique sur [Scanner].
    L'analyse peux durer plusieurs minutes, patiente.
    Une fois le scan terminé, ne décoche rien, clique sur [Nettoyer]

    Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
    Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.

    Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

    puis :

    Suis ce tutoriel FRST: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
    Cela va générer trois rapports FRST :
    * FRST.txt
    * Shortcut.txt
    * Additionnal.txt

    Envoie comme expliqué, ces trois rapports sur le site pjjoint et donne les trois liens pjjoint de ces rapports afin qu'ils puissent être consultés.

    0
  2. sarkis06 Messages postés 7 Date d'inscription   Statut Membre Dernière intervention  
     
    Merci pour votre réponse rapide, voici ce que vous m avez demandé

    # AdwCleaner v4.108 - Rapport créé le 17/01/2015 à 13:39:47
    # Mis à jour le 17/01/2015 par Xplode
    # Database : 2015-01-13.2 [Live]
    # Système d'exploitation : Windows 7 Ultimate Service Pack 1 (64 bits)
    # Nom d'utilisateur : monster gamer - NAVAG
    # Exécuté depuis : C:\Users\monster gamer\Desktop\adwcleaner_4.108.exe
    # Option : Nettoyer

    ***** [ Services ] *****

    ***** [ Fichiers / Dossiers ] *****

    Dossier Supprimé : C:\ProgramData\apn
    Dossier Supprimé : C:\ProgramData\NCH Software
    Dossier Supprimé : C:\ProgramData\Premium
    Dossier Supprimé : C:\Program Files (x86)\1ClickDownload
    Dossier Supprimé : C:\Program Files (x86)\Conduit
    Dossier Supprimé : C:\Program Files (x86)\NCH Software
    Dossier Supprimé : C:\Program Files (x86)\Vuze_Remote
    Dossier Supprimé : C:\Program Files (x86)\WebAdSystem
    Dossier Supprimé : C:\Program Files (x86)\Search Extensions
    Dossier Supprimé : C:\Users\MONSTE~1\AppData\Local\Temp\apn
    Dossier Supprimé : C:\Users\MONSTE~1\AppData\Local\Temp\Spigot
    Dossier Supprimé : C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\DealPly
    Dossier Supprimé : C:\Users\Invité\AppData\Local\KalityWeb
    Dossier Supprimé : C:\Users\Invité\AppData\LocalLow\Conduit
    Dossier Supprimé : C:\Users\Invité\AppData\LocalLow\HPAppData
    Dossier Supprimé : C:\Users\Invité\AppData\LocalLow\PriceGong
    Dossier Supprimé : C:\Users\Invité\AppData\LocalLow\uTorrentBar_FR
    Dossier Supprimé : C:\Users\Invité\AppData\LocalLow\Vuze_Remote
    Dossier Supprimé : C:\Users\Invité\AppData\Roaming\HPAppData
    Dossier Supprimé : C:\Users\Invité\AppData\Roaming\OfferBox
    Dossier Supprimé : C:\Users\monster gamer\AppData\Local\Ilivid Player
    Dossier Supprimé : C:\Users\monster gamer\AppData\Local\KalityWeb
    Dossier Supprimé : C:\Users\monster gamer\AppData\LocalLow\Conduit
    Dossier Supprimé : C:\Users\monster gamer\AppData\LocalLow\HPAppData
    Dossier Supprimé : C:\Users\monster gamer\AppData\LocalLow\PriceGong
    Dossier Supprimé : C:\Users\monster gamer\AppData\LocalLow\Vuze_Remote
    Dossier Supprimé : C:\Users\monster gamer\AppData\Roaming\DealPly
    Dossier Supprimé : C:\Users\monster gamer\AppData\Roaming\NCH Software
    Dossier Supprimé : C:\Users\monster gamer\AppData\Roaming\OfferBox
    Dossier Supprimé : C:\Users\monster gamer\AppData\Roaming\OpenCandy
    Dossier Supprimé : C:\Users\monster gamer\AppData\Roaming\pdfforge
    Dossier Supprimé : C:\Users\monster gamer\AppData\Roaming\Search Protection
    Dossier Supprimé : C:\Users\monster gamer\AppData\Roaming\BrowserExtensions
    Dossier Supprimé : C:\Users\monster gamer\AppData\Roaming\Mozilla\Firefox\Profiles\bwaneuib.default\Extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}
    Dossier Supprimé : C:\Users\monster gamer\AppData\Roaming\Mozilla\Firefox\Profiles\zz0ul64r.default\Extensions\{54FBE89E-C878-46bb-A064-AB327EE26EBC}
    Dossier Supprimé : C:\Users\monster gamer\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojpijjmpahflnipadmlpgbjmagmjchkk
    Dossier Supprimé : C:\Users\Invité\AppData\Local\Google\Chrome\User Data\Default\Extensions\opldoklbgkdpfmogjpheabmldkcdkokn
    Dossier Supprimé : C:\Users\monster gamer\AppData\Local\Google\Chrome\User Data\Default\Extensions\opldoklbgkdpfmogjpheabmldkcdkokn
    Fichier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WebAdSystem.lnk
    Fichier Supprimé : C:\Users\monster gamer\AppData\Roaming\Mozilla\Firefox\Profiles\zz0ul64r.default\user.js
    Fichier Supprimé : C:\Users\monster gamer\AppData\Roaming\Mozilla\Firefox\Profiles\bwaneuib.default\searchplugins\yahoo_ff.xml
    Fichier Supprimé : C:\Users\monster gamer\AppData\Roaming\Mozilla\Firefox\Profiles\zz0ul64r.default\searchplugins\yahoo_ff.xml
    Fichier Supprimé : C:\Users\monster gamer\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage

    ***** [ Tâches planifiées ] *****

    Tâche Supprimée : Dealply
    Tâche Supprimée : DealPlyUpdate
    Tâche Supprimée : OfferBoxUpdate
    Tâche Supprimée : RocketTab Update Task
    Tâche Supprimée : RocketTab

    ***** [ Raccourcis ] *****

    ***** [ Registre ] *****

    Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [firefoxextensioninstaller@webadsystem.com]
    Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\defdhglnppeioeflggkmglipcecffkhk
    Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\elhjaoldnkkbifioodjndkijecdeinld
    Clé Supprimée : HKCU\Software\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje
    Clé Supprimée : HKCU\Software\Google\Chrome\Extensions\ojpijjmpahflnipadmlpgbjmagmjchkk
    Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\ojpijjmpahflnipadmlpgbjmagmjchkk
    Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\opldoklbgkdpfmogjpheabmldkcdkokn
    Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib
    Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Search Protection]
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\BHO.DLL
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\WebAdSystemBho.DLL
    Clé Supprimée : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
    Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
    Clé Supprimée : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
    Clé Supprimée : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\S
    Clé Supprimée : HKLM\SOFTWARE\Classes\WebAdSystemBho.WebAdSystemBhoObj
    Clé Supprimée : HKLM\SOFTWARE\Classes\WebAdSystemBho.WebAdSystemBhoObj.1
    Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Browser Extensions]
    Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT2504091
    Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT2849852
    Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT2851639
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{89637713-7F69-46BD-BF01-EF4F172D3DCE}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{25A3A431-30BB-47C8-AD6A-E1063801134F}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{BA14329E-9550-4989-B3F2-9732E92D17CC}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EC8FCB46-9F27-476E-B26A-93989316D2FB}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D9EDA72A-94DB-44CF-91C5-CBE30BB3F610}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4030C54B-D223-4798-B665-68767B0E843F}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA14329E-9550-4989-B3F2-9732E92D17CC}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EC8FCB46-9F27-476E-B26A-93989316D2FB}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25A3A431-30BB-47C8-AD6A-E1063801134F}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA14329E-9550-4989-B3F2-9732E92D17CC}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EC8FCB46-9F27-476E-B26A-93989316D2FB}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25A3A431-30BB-47C8-AD6A-E1063801134F}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BA14329E-9550-4989-B3F2-9732E92D17CC}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EC8FCB46-9F27-476E-B26A-93989316D2FB}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
    Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}]
    Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{25A3A431-30BB-47C8-AD6A-E1063801134F}]
    Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{99079A25-328F-4BD4-BE04-00955ACAA0A7}]
    Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{BA14329E-9550-4989-B3F2-9732E92D17CC}]
    Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}]
    Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}]
    Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{BA14329E-9550-4989-B3F2-9732E92D17CC}]
    Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{BA14329E-9550-4989-B3F2-9732E92D17CC}]
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}
    Clé Supprimée : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{10B4E706-0FB5-43BE-88B2-C3CC5CCFECC8}
    Clé Supprimée : HKCU\Software\Conduit
    Clé Supprimée : HKCU\Software\Iminent
    Clé Supprimée : HKCU\Software\InstallCore
    Clé Supprimée : HKCU\Software\KalityWeb
    Clé Supprimée : HKCU\Software\Offerbox
    Clé Supprimée : HKCU\Software\RocketTabInstalled
    Clé Supprimée : HKCU\Software\Search Extensions
    Clé Supprimée : HKCU\Software\Softonic
    Clé Supprimée : HKCU\Software\Surf Canyon
    Clé Supprimée : HKCU\Software\AppDataLow\Toolbar
    Clé Supprimée : HKCU\Software\AppDataLow\Software\Conduit
    Clé Supprimée : HKCU\Software\AppDataLow\Software\PriceGong
    Clé Supprimée : HKCU\Software\AppDataLow\Software\Search Protection
    Clé Supprimée : HKCU\Software\AppDataLow\Software\SmartBar
    Clé Supprimée : HKCU\Software\AppDataLow\Software\Browser Extensions
    Clé Supprimée : HKLM\SOFTWARE\AedgePerformanceBCN
    Clé Supprimée : HKLM\SOFTWARE\Conduit
    Clé Supprimée : HKLM\SOFTWARE\Iminent
    Clé Supprimée : HKLM\SOFTWARE\KalityWeb
    Clé Supprimée : HKLM\SOFTWARE\Offerbox
    Clé Supprimée : HKLM\SOFTWARE\RocketTab
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3A787631-66A2-4634-B928-A37E73B58FB6}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Search Protection
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Complitly_is1
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RocketTab
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0A9893CE-951C-4CD0-A31C-84CCDD7A0077}_is1
    Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
    Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375

    ***** [ Navigateurs ] *****

    -\\ Internet Explorer v11.0.9600.17496

    -\\ Mozilla Firefox v19.0.2 (fr)

    [bwaneuib.default\prefs.js] - Ligne Supprimée : user_pref("browser.startup.homepage", "hxxps://fr.search.yahoo.com/?type=994519&fr=spigot-yhp-ff");
    [zz0ul64r.default\prefs.js] - Ligne Supprimée : user_pref("browser.startup.homepage", "hxxps://fr.search.yahoo.com/?type=994519&fr=spigot-yhp-ff");

    -\\ Google Chrome v

    *************************

    AdwCleaner[R0].txt - [21811 octets] - [17/01/2015 13:24:18]
    AdwCleaner[S0].txt - [20608 octets] - [17/01/2015 13:39:47]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [20669 octets] ##########
    0
  3. sarkis06 Messages postés 7 Date d'inscription   Statut Membre Dernière intervention  
     
    Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-01-2015 01
    Ran by monster gamer (administrator) on NAVAG on 17-01-2015 14:32:40
    Running from C:\Users\monster gamer\Desktop
    Loaded Profiles: monster gamer (Available profiles: monster gamer & Invité)
    Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Français (France)
    Internet Explorer Version 11 (Default browser: Chrome)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
    (AMD) C:\Windows\System32\atiesrxx.exe
    (AMD) C:\Windows\System32\atieclxx.exe
    (Lavasoft Limited) C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
    (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    () C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
    (Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
    (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
    (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
    (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
    (CybelSoft) C:\Program Files\ma-config.com\MaConfigAgent.exe
    (pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
    (pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
    (VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
    (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    (Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
    (Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
    (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
    (Lavasoft Limited) C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
    (VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
    (AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
    (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
    (SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIIME.EXE
    (OVH) C:\Program Files\OVH\hubiC\hubiC.exe
    (AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
    (Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
    () C:\Program Files (x86)\PC Sync\Voxsync.exe
    (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    () C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
    () C:\Program Files (x86)\PC Sync\SyncManager.exe
    (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    (Google Inc.) C:\Users\monster gamer\AppData\Local\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Users\monster gamer\AppData\Local\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Users\monster gamer\AppData\Local\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Users\monster gamer\AppData\Local\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Users\monster gamer\AppData\Local\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Users\monster gamer\AppData\Local\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Users\monster gamer\AppData\Local\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Users\monster gamer\AppData\Local\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Users\monster gamer\AppData\Local\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Users\monster gamer\AppData\Local\Google\Chrome\Application\chrome.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe
    (Google Inc.) C:\Users\monster gamer\AppData\Local\Google\Chrome\Application\chrome.exe
    (Azureus Software, Inc) C:\Program Files (x86)\Vuze\Azureus.exe

    ==================== Registry (Whitelisted) ==================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1331288 2014-08-22] (Microsoft Corporation)
    HKLM\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5299320 2012-10-25] (VIA)
    HKLM-x32\...\Run: [] => [X]
    HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-02-26] (Advanced Micro Devices, Inc.)
    HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
    HKU\S-1-5-21-3807812839-1167684665-398527219-1000\...\Run: [SpybotSD TeaTimer] => C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.)
    HKU\S-1-5-21-3807812839-1167684665-398527219-1000\...\Run: [Google Update] => C:\Users\monster gamer\AppData\Local\Google\Update\GoogleUpdate.exe [107912 2014-10-18] (Google Inc.)
    HKU\S-1-5-21-3807812839-1167684665-398527219-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2011-05-24] (AMD)
    HKU\S-1-5-21-3807812839-1167684665-398527219-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
    HKU\S-1-5-21-3807812839-1167684665-398527219-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIIME.EXE [283232 2012-02-29] (SEIKO EPSON CORPORATION)
    HKU\S-1-5-21-3807812839-1167684665-398527219-1000\...\Run: [hubiC] => C:\Program Files\OVH\hubiC\hubiC.exe [3507712 2014-10-21] (OVH)
    HKU\S-1-5-21-3807812839-1167684665-398527219-1000\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [468192 2014-10-15] (Sony)
    HKU\S-1-5-21-3807812839-1167684665-398527219-1000\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_9_900_117_ActiveX.exe -update activex
    HKU\S-1-5-18\...\RunOnce: [Application Restart #0] => C:\Windows\System32\Magnify.exe [652800 2009-07-14] (Microsoft Corporation)
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PC Sync.lnk
    ShortcutTarget: PC Sync.lnk -> C:\Program Files (x86)\PC Sync\Voxsync.exe ()
    ShellIconOverlayIdentifiers: [HubicBackupRootOverlayHandler] -> {2DF0C6DB-1E85-4894-9D4F-63CB0EAB17EA} => C:\Windows\system32\mscoree.dll (Microsoft Corporation)
    ShellIconOverlayIdentifiers: [HubicPublishedItemOverlayHandler] -> {7C76B697-27DF-4CFF-9909-863905561298} => C:\Windows\system32\mscoree.dll (Microsoft Corporation)
    ShellIconOverlayIdentifiers: [HubicSyncItemOverlayHandler] -> {9B497753-D273-4A80-9DE8-72248D7FA595} => C:\Windows\system32\mscoree.dll (Microsoft Corporation)
    ShellIconOverlayIdentifiers: [HubicUnsyncItemOverlayHandler] -> {D5454A6E-0904-4BA3-9E4A-240A5080259D} => C:\Windows\system32\mscoree.dll (Microsoft Corporation)
    ShellIconOverlayIdentifiers: [ID de superposition d'icônes des signatures numériques AutoCAD] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll (Autodesk, Inc.)
    BootExecute: autocheck autochk * lsdelete

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    ProxyServer: [S-1-5-21-3807812839-1167684665-398527219-1000] => http=127.0.0.1:49264;https=127.0.0.1:49264
    HKU\S-1-5-21-3807812839-1167684665-398527219-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://google/
    HKU\S-1-5-21-3807812839-1167684665-398527219-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = https://www.msn.com/fr-fr?ocid=iehp
    URLSearchHook: HKU\S-1-5-21-3807812839-1167684665-398527219-1000 - (No Name) - {ef79f67a-6ad7-4715-a0f8-932fca442023} - No File
    SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&form=MSSEDF&pc=MSSE
    SearchScopes: HKLM-x32 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&form=MSSEDF&pc=MSSE
    SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-21-3807812839-1167684665-398527219-1000 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&form=MSSEDF&pc=MSSE
    SearchScopes: HKU\S-1-5-21-3807812839-1167684665-398527219-1000 -> {AE3FC470-D924-44FF-A8C5-A942691B5477} URL = https://fr.search.yahoo.com/web?fr=chr-greentree_ie{searchTerms}
    BHO: SnagIt Toolbar Loader -> {00C6482D-C502-44C8-8409-FCE54AD9C208} -> C:\Program Files (x86)\TechSmith\SnagIt 8\DLLx64\SnagItBHO64.dll (TechSmith Corporation)
    BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
    BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
    BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
    BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
    BHO-x32: SnagIt Toolbar Loader -> {00C6482D-C502-44C8-8409-FCE54AD9C208} -> C:\Program Files (x86)\TechSmith\SnagIt 8\SnagItBHO.dll (TechSmith Corporation)
    BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
    BHO-x32: No Name -> {34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} -> No File
    BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
    BHO-x32: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
    BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
    BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
    BHO-x32: Programme d'aide de l'Assistant de connexion Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
    BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
    BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
    BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
    BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
    Toolbar: HKLM - SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\SnagIt 8\DLLx64\SnagItIEAddin64.dll (TechSmith Corporation)
    Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
    Toolbar: HKLM-x32 - SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\SnagIt 8\SnagItIEAddin.dll (TechSmith Corporation)
    Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
    Toolbar: HKU\S-1-5-21-3807812839-1167684665-398527219-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
    Toolbar: HKU\S-1-5-21-3807812839-1167684665-398527219-1000 -> No Name - {EF79F67A-6AD7-4715-A0F8-932FCA442023} - No File
    Toolbar: HKU\S-1-5-21-3807812839-1167684665-398527219-1000 -> No Name - {8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - No File
    DPF: HKLM {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://appldnld.apple.com/QuickTime/qtactivex/qtplugin.cab
    DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    DPF: HKLM-x32 {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}
    DPF: HKLM-x32 {07DD2D01-9A98-49A4-BB28-D20A4A72C963}
    DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
    DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    DPF: HKLM-x32 {AEA3991E-3109-4C98-989E-33994FEB1A91}
    DPF: HKLM-x32 {B4A41BDB-320A-4AF4-8DBC-846866A62657}
    DPF: HKLM-x32 {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
    DPF: HKLM-x32 {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
    DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.5.13.0.cab
    DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    DPF: HKLM-x32 {DAF7E6E6-D53A-439A-B28D-12271406B8A9} http://mobileapps.blackberry.com/devicesoftware/AxLoader.cab
    Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
    Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
    Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
    Winsock: Catalog5 10 C:\Windows\SysWOW64\PrxerNsp.dll [54000] ()
    Winsock: Catalog5-x64 10 C:\Windows\system32\PrxerNsp.dll [55024] ()
    Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
    Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

    FireFox:
    ========
    FF ProfilePath: C:\Users\monster gamer\AppData\Roaming\Mozilla\Firefox\Profiles\zz0ul64r.default
    FF DefaultSearchEngine: Yahoo!
    FF SelectedSearchEngine: Yahoo!
    FF Keyword.URL: https://fr.search.yahoo.com/web?fr=greentree_ff1
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_257.dll ()
    FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
    FF Plugin: @microsoft.com/GENUINE -> disabled No File
    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_257.dll ()
    FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1207148.dll (Adobe Systems, Inc.)
    FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
    FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
    FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
    FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin-x32: @videolan.org/vlc,version=1.1.10 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
    FF Plugin HKU\S-1-5-21-3807812839-1167684665-398527219-1000: @tools.google.com/Google Update;version=3 -> C:\Users\monster gamer\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin HKU\S-1-5-21-3807812839-1167684665-398527219-1000: @tools.google.com/Google Update;version=9 -> C:\Users\monster gamer\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
    FF Extension: Start Page - C:\Users\monster gamer\AppData\Roaming\Mozilla\Firefox\Profiles\zz0ul64r.default\Extensions\{62DD0A97-FDD4-421b-94A5-D1A9434450C7} [2015-01-10]
    FF Extension: Ebay Shopping Assistant by Spigot - C:\Users\monster gamer\AppData\Roaming\Mozilla\Firefox\Profiles\zz0ul64r.default\Extensions\{CA8C84C6-3918-41b1-BE77-049B2BDD887C} [2015-01-10]
    FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14]
    FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
    FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-06-15]
    FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
    FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-10-04]
    FF HKU\S-1-5-21-3807812839-1167684665-398527219-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

    Chrome:
    =======
    CHR HomePage: Default ->
    CHR StartupUrls: Default -> "hxxp://www.lemonde.fr/", "hxxp://www.orange.fr/", "https://www.sfr.fr/cas/login?service=https%3A%2F%2Fwww.sfr.fr%2Faccueil%2Fj_spring_cas_security_check", "https://www.youtube.com/?gl=FR&tab=w1", "hxxp://www.google.fr/"
    CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
    CHR Plugin: (Shockwave Flash) - C:\Users\monster gamer\AppData\Local\Google\Chrome\Application\39.0.2171.99\PepperFlash\pepflashplayer.dll ()
    CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
    CHR Plugin: (Native Client) - C:\Users\monster gamer\AppData\Local\Google\Chrome\Application\39.0.2171.99\ppGoogleNaClPluginChrome.dll No File
    CHR Plugin: (Chrome PDF Viewer) - C:\Users\monster gamer\AppData\Local\Google\Chrome\Application\39.0.2171.99\pdf.dll ()
    CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
    CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
    CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
    CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
    CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
    CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
    CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll No File
    CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll No File
    CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
    CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
    CHR Plugin: (VLC Multimedia Plug-in) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
    CHR Plugin: (Windows Live(TM) Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
    CHR Plugin: (Ma-Config.com plugin) - C:\Program Files (x86)\ma-config.com\nphardwaredetection.dll No File
    CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
    CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\SysWOW64\npDeployJava1.dll No File
    CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
    CHR Profile: C:\Users\monster gamer\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\monster gamer\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-18]
    CHR Extension: (YouTube) - C:\Users\monster gamer\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-14]
    CHR Extension: (Recherche Google) - C:\Users\monster gamer\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-14]
    CHR Extension: (AdBlock) - C:\Users\monster gamer\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2012-07-28]
    CHR Extension: (Skype Click to Call) - C:\Users\monster gamer\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-11-18]
    CHR Extension: (Google Wallet) - C:\Users\monster gamer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-31]
    CHR Extension: (Gmail) - C:\Users\monster gamer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-14]
    CHR HKLM-x32\...\Chrome\Extension: [goalojoobcfkhddpbjcmhdceeegmaphh] - No Path
    CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
    CHR StartMenuInternet: Google Chrome - C:\Users\monster gamer\AppData\Local\Google\Chrome\Application\chrome.exe

    ==================== Services (Whitelisted) =================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [18656 2011-02-02] ()
    R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)
    R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
    R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
    R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-11] (Seiko Epson Corporation)
    R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [File not signed]
    R2 Lavasoft Ad-Aware Service; C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe [2152720 2012-05-23] (Lavasoft Limited)
    R2 MaConfigAgent; C:\Program Files\ma-config.com\MaConfigAgent.exe [2820424 2014-10-15] (CybelSoft)
    R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2014-08-22] (Microsoft Corporation)
    R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
    S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [368624 2014-08-22] (Microsoft Corporation)
    R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
    R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
    R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
    R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
    S3 SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [79360 2011-12-30] (SolidWorks) [File not signed]
    R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-10-22] (VIA Technologies, Inc.)
    S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

    ==================== Drivers (Whitelisted) ====================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    S3 cpudrv64; C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys [17864 2011-06-02] ()
    R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-10-26] (DT Soft Ltd)
    R3 Lavasoft Kernexplorer; C:\Program Files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys [17152 2011-11-12] ()
    R0 Lbd; C:\Windows\System32\DRIVERS\Lbd.sys [69376 2011-11-03] (Lavasoft AB)
    S3 ma-config_amd64; C:\Program Files\ma-config.com\Drivers\ma-config_amd64.sys [17568 2014-02-24] (CybelSoft)
    R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [269008 2014-07-17] (Microsoft Corporation)
    R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
    S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [125584 2014-07-17] (Microsoft Corporation)
    S3 usbio; C:\Windows\System32\Drivers\dsiarhwprog_x64.sys [51600 2007-02-08] (Thesycon GmbH, Germany)
    S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
    S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
    S3 VGPU; System32\drivers\rdvgkmd.sys [X]

    ==================== NetSvcs (Whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

    ==================== One Month Created Files and Folders ========

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2015-01-17 14:22 - 2015-01-17 14:28 - 00056584 _____ () C:\Users\monster gamer\Desktop\Addition.txt
    2015-01-17 14:16 - 2015-01-17 14:32 - 00028191 _____ () C:\Users\monster gamer\Desktop\FRST.txt
    2015-01-17 14:16 - 2015-01-17 14:32 - 00000000 ____D () C:\FRST
    2015-01-17 14:15 - 2015-01-17 14:15 - 02125824 _____ (Farbar) C:\Users\monster gamer\Desktop\FRST64.exe
    2015-01-17 13:24 - 2015-01-17 13:40 - 00000000 ____D () C:\AdwCleaner
    2015-01-17 13:23 - 2015-01-17 13:23 - 02186752 _____ () C:\Users\monster gamer\Desktop\adwcleaner_4.108.exe
    2015-01-17 11:15 - 2015-01-17 11:15 - 00068909 _____ () C:\Users\monster gamer\Desktop\ZHPDiag.txt
    2015-01-17 10:43 - 2015-01-17 11:18 - 00000000 ____D () C:\Users\monster gamer\AppData\Roaming\ZHP
    2015-01-17 10:43 - 2015-01-17 10:43 - 00001987 _____ () C:\Users\monster gamer\Desktop\ZHPFix.lnk
    2015-01-17 10:43 - 2015-01-17 10:43 - 00001860 _____ () C:\Users\monster gamer\Desktop\ZHPDiag.lnk
    2015-01-17 10:43 - 2015-01-17 10:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
    2015-01-17 10:43 - 2015-01-17 10:43 - 00000000 ____D () C:\Program Files (x86)\ZHPDiag
    2015-01-17 10:42 - 2015-01-17 10:42 - 06866256 _____ (Nicolas Coolman ) C:\Users\monster gamer\Desktop\ZHPDiag2.exe
    2015-01-16 08:22 - 2015-01-17 13:45 - 00003622 _____ () C:\Windows\System32\Tasks\Ad-Aware Update (Weekly)
    2015-01-15 07:08 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
    2015-01-14 10:53 - 2015-01-14 10:53 - 05013680 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
    2015-01-14 10:28 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
    2015-01-14 10:28 - 2014-12-11 18:47 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
    2015-01-14 10:28 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
    2015-01-14 10:28 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
    2015-01-14 10:28 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
    2015-01-14 10:26 - 2014-12-12 06:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
    2015-01-14 10:26 - 2014-12-12 06:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
    2015-01-14 10:26 - 2014-12-12 06:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
    2015-01-14 10:26 - 2014-12-12 06:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
    2015-01-14 10:26 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
    2015-01-14 10:26 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
    2015-01-14 10:26 - 2014-12-12 06:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
    2015-01-13 19:03 - 2015-01-13 19:03 - 00376521 _____ () C:\Users\monster gamer\Desktop\mes_contacts_Outlook_20XX.csv
    2015-01-13 12:51 - 2015-01-14 10:20 - 00000000 ____D () C:\Users\monster gamer\Desktop\fact edith final 13-01-2015
    2015-01-12 11:23 - 2015-01-12 11:24 - 00000000 ____D () C:\Users\monster gamer\Desktop\symboles elec
    2015-01-12 02:18 - 2015-01-12 02:18 - 71561752 _____ () C:\Users\monster gamer\Desktop\reveil.wav
    2015-01-12 01:19 - 2015-01-13 14:59 - 00000000 ____D () C:\Users\monster gamer\Desktop\sons
    2015-01-10 10:57 - 2015-01-10 10:58 - 00000000 ____D () C:\Users\monster gamer\Desktop\seyssuel
    2015-01-09 20:16 - 2015-01-09 20:16 - 00001848 _____ () C:\Users\Public\Desktop\Vuze.lnk
    2015-01-08 18:11 - 2015-01-08 18:11 - 00014729 _____ () C:\Users\monster gamer\Desktop\Confrontation.dwg
    2015-01-06 15:45 - 2015-01-07 10:51 - 00000165 ____H () C:\Users\monster gamer\Desktop\~$Nouveau Feuille Microsoft Office Excel.xlsx
    2015-01-06 07:12 - 2015-01-12 02:19 - 00000000 ____D () C:\Users\monster gamer\Desktop\music cle
    2014-12-29 14:58 - 2014-12-29 14:27 - 36532201 _____ () C:\Users\monster gamer\Desktop\Compta-Sauvegarde Complète-20141229.zip
    2014-12-29 13:59 - 2015-01-13 13:48 - 00000000 ____D () C:\Users\monster gamer\Desktop\fact final edith - Copie
    2014-12-29 12:07 - 2015-01-10 12:44 - 00000000 ____D () C:\Users\monster gamer\Desktop\angleterre val 12-2014
    2014-12-29 01:16 - 2014-12-29 01:25 - 00000000 ____D () C:\VA
    2014-12-29 01:15 - 2014-12-29 01:15 - 00000000 ____D () C:\Robert Miles
    2014-12-29 01:13 - 2014-12-29 01:13 - 00000000 ____D () C:\Varios intérpretes
    2014-12-29 01:11 - 2014-12-29 01:11 - 00000000 ____D () C:\Hermes House Band
    2014-12-29 01:09 - 2015-01-12 02:19 - 00000000 ____D () C:\Bee Gees
    2014-12-29 01:08 - 2014-12-29 01:08 - 00000000 ____D () C:\Tom Tom Club
    2014-12-29 01:07 - 2014-12-29 01:07 - 00000000 ____D () C:\Whispers
    2014-12-29 01:07 - 2014-12-29 01:07 - 00000000 ____D () C:\Visage
    2014-12-29 01:01 - 2014-12-29 01:01 - 00000000 ____D () C:\Tears for Fears
    2014-12-29 00:59 - 2014-12-29 00:59 - 00000000 ____D () C:\Stephanie Mills
    2014-12-29 00:55 - 2014-12-29 00:55 - 00000000 ____D () C:\Shalamar
    2014-12-29 00:49 - 2014-12-29 00:49 - 00000000 ____D () C:\Pointer Sisters
    2014-12-29 00:46 - 2014-12-29 00:47 - 00000000 ____D () C:\Oliver Cheatham
    2014-12-29 00:38 - 2014-12-29 00:38 - 00000000 ____D () C:\Luther Vandross & Change
    2014-12-29 00:38 - 2014-12-29 00:38 - 00000000 ____D () C:\Love Unlimited Orchestra
    2014-12-29 00:37 - 2014-12-29 00:37 - 00000000 ____D () C:\Lipps Inc
    2014-12-29 00:34 - 2014-12-29 00:34 - 00000000 ____D () C:\Kool & The Gang
    2014-12-29 00:32 - 2014-12-29 00:32 - 00000000 ____D () C:\KC & The Sunshine Band
    2014-12-29 00:30 - 2014-12-29 00:30 - 00000000 ____D () C:\Jackson Five
    2014-12-29 00:28 - 2014-12-29 00:29 - 00000000 ____D () C:\Imagination
    2014-12-29 00:27 - 2014-12-29 00:27 - 00000000 ____D () C:\Hi Gloss
    2014-12-29 00:25 - 2014-12-29 00:25 - 00000000 ____D () C:\George Benson
    2014-12-29 00:24 - 2014-12-29 00:24 - 00000000 ____D () C:\Fat Larry's Band
    2014-12-29 00:23 - 2014-12-29 00:55 - 00000000 ____D () C:\Artiste inconnu
    2014-12-29 00:23 - 2014-12-29 00:23 - 00000000 ____D () C:\Eddy Grant
    2014-12-29 00:22 - 2014-12-29 00:22 - 00000000 ____D () C:\Earth Wind & Fire
    2014-12-29 00:22 - 2014-12-29 00:22 - 00000000 ____D () C:\Doobie Brothers
    2014-12-29 00:19 - 2014-12-29 00:19 - 00000000 ____D () C:\Commodores
    2014-12-29 00:18 - 2014-12-29 00:18 - 00000000 ____D () C:\Chic
    2014-12-29 00:17 - 2014-12-29 00:18 - 00000000 ____D () C:\Chaka Khan
    2014-12-29 00:16 - 2014-12-29 00:16 - 00000000 ____D () C:\James Brown
    2014-12-29 00:16 - 2014-12-29 00:16 - 00000000 ____D () C:\Candi Staton
    2014-12-29 00:15 - 2014-12-29 00:15 - 00000000 ____D () C:\Boney M
    2014-12-29 00:14 - 2014-12-29 00:14 - 00000000 ____D () C:\Billy Paul
    2014-12-29 00:13 - 2014-12-29 00:14 - 00000000 ____D () C:\Bill Withers
    2014-12-29 00:07 - 2014-12-29 00:08 - 00000000 ____D () C:\DJ Jazzy Jeff & the Fresh Prince
    2014-12-29 00:07 - 2014-12-29 00:07 - 00000000 ____D () C:\Vengaboys
    2014-12-29 00:06 - 2014-12-29 00:06 - 00000000 ____D () C:\The Bucketheads
    2014-12-29 00:04 - 2014-12-29 00:04 - 00000000 ____D () C:\Rozalla
    2014-12-29 00:03 - 2014-12-29 00:03 - 00000000 ____D () C:\The Blackout Allstars
    2014-12-29 00:03 - 2014-12-29 00:03 - 00000000 ____D () C:\K7
    2014-12-29 00:01 - 2014-12-29 00:02 - 00000000 ____D () C:\Lisa Stansfield
    2014-12-29 00:00 - 2014-12-29 00:00 - 00000000 ____D () C:\Enigma
    2014-12-29 00:00 - 2014-12-29 00:00 - 00000000 ____D () C:\Eiffel 65
    2014-12-28 23:58 - 2014-12-28 23:58 - 00000000 ____D () C:\Tony Little
    2014-12-28 23:57 - 2014-12-28 23:57 - 00000000 ____D () C:\The Four Seasons
    2014-12-28 23:57 - 2014-12-28 23:57 - 00000000 ____D () C:\Quad City DJ's
    2014-12-28 23:57 - 2014-12-28 23:57 - 00000000 ____D () C:\2 Unlimited
    2014-12-28 23:56 - 2014-12-28 23:57 - 00000000 ____D () C:\La Bouche
    2014-12-28 23:55 - 2014-12-28 23:57 - 00000000 ____D () C:\C+C Music Factory
    2014-12-28 22:16 - 2014-12-28 22:16 - 00000000 ____D () C:\Billy Idol
    2014-12-27 20:59 - 2014-12-27 20:59 - 00000000 __SHD () C:\Users\monster gamer\AppData\Local\EmieBrowserModeList
    2014-12-25 13:34 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
    2014-12-25 13:34 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
    2014-12-25 13:02 - 2014-12-25 13:02 - 00000953 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\hubiC.lnk
    2014-12-25 13:02 - 2014-12-25 13:02 - 00000000 ____D () C:\Program Files\OVH
    2014-12-24 22:34 - 2013-11-26 15:49 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
    2014-12-24 11:30 - 2014-12-24 11:30 - 00005007 _____ () C:\ProgramData\mtbjfghn.xbe
    2014-12-24 11:29 - 2014-12-24 11:29 - 00000000 ____D () C:\Users\monster gamer\AppData\Roaming\Carambis
    2014-12-24 11:07 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
    2014-12-24 11:07 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
    2014-12-24 11:07 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
    2014-12-24 11:07 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
    2014-12-24 11:07 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
    2014-12-24 11:07 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
    2014-12-24 11:07 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
    2014-12-24 11:07 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
    2014-12-24 11:07 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
    2014-12-24 11:07 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
    2014-12-24 11:07 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
    2014-12-24 11:07 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
    2014-12-24 11:07 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
    2014-12-24 11:07 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
    2014-12-24 11:07 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
    2014-12-24 11:07 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
    2014-12-24 11:07 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
    2014-12-24 11:07 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
    2014-12-24 11:07 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
    2014-12-24 11:07 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
    2014-12-24 11:07 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
    2014-12-24 11:07 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
    2014-12-24 11:07 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
    2014-12-24 11:07 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
    2014-12-24 11:07 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
    2014-12-24 11:07 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
    2014-12-24 11:07 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
    2014-12-24 11:07 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
    2014-12-24 11:07 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
    2014-12-24 11:07 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
    2014-12-24 11:07 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
    2014-12-24 11:07 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
    2014-12-24 11:07 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
    2014-12-24 11:07 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
    2014-12-24 11:07 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
    2014-12-24 11:07 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
    2014-12-24 11:07 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
    2014-12-24 11:07 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
    2014-12-24 11:07 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
    2014-12-24 11:07 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
    2014-12-24 11:07 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
    2014-12-24 11:07 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
    2014-12-24 11:07 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
    2014-12-24 11:07 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
    2014-12-24 11:07 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
    2014-12-24 11:07 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
    2014-12-24 11:07 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
    2014-12-24 11:07 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
    2014-12-24 11:07 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
    2014-12-24 11:07 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
    2014-12-24 11:07 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
    2014-12-24 11:07 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
    2014-12-24 11:07 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
    2014-12-24 11:07 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
    2014-12-23 14:42 - 2014-12-23 14:42 - 00000000 ____D () C:\Perfecto Presents Paul Oakenfold
    2014-12-23 14:41 - 2014-12-29 01:07 - 00000000 ____D () C:\The Whispers
    2014-12-23 14:41 - 2014-12-29 00:25 - 00000000 ____D () C:\Frankie Goes to Hollywood
    2014-12-23 14:41 - 2014-12-28 23:05 - 00000000 ____D () C:\Soft Cell
    2014-12-23 14:41 - 2014-12-23 14:42 - 00000000 ____D () C:\Third World
    2014-12-23 14:41 - 2014-12-23 14:42 - 00000000 ____D () C:\The Human League
    2014-12-23 14:41 - 2014-12-23 14:42 - 00000000 ____D () C:\The Belle Stars
    2014-12-23 14:41 - 2014-12-23 14:42 - 00000000 ____D () C:\Talk Talk
    2014-12-23 14:41 - 2014-12-23 14:42 - 00000000 ____D () C:\Sandy Marton
    2014-12-23 14:41 - 2014-12-23 14:42 - 00000000 ____D () C:\Rod Stewart
    2014-12-23 14:41 - 2014-12-23 14:42 - 00000000 ____D () C:\Nina Hagen
    2014-12-23 14:41 - 2014-12-23 14:42 - 00000000 ____D () C:\Millie Jackson & Isaac Hayes
    2014-12-23 14:41 - 2014-12-23 14:42 - 00000000 ____D () C:\Jimmy Somerville
    2014-12-23 14:41 - 2014-12-23 14:42 - 00000000 ____D () C:\Janis Joplin
    2014-12-23 14:41 - 2014-12-23 14:42 - 00000000 ____D () C:\Gerry Rafferty
    2014-12-23 14:40 - 2015-01-12 02:19 - 00000000 ____D () C:\Soundtrack
    2014-12-23 14:40 - 2014-12-29 00:14 - 00000000 ____D () C:\Blondie
    2014-12-23 14:40 - 2014-12-29 00:13 - 00000000 ____D () C:\Barry White
    2014-12-23 14:40 - 2014-12-23 14:42 - 00000000 ____D () C:\Duran Duran
    2014-12-23 14:40 - 2014-12-23 14:42 - 00000000 ____D () C:\David Bowie
    2014-12-23 14:40 - 2014-12-23 14:42 - 00000000 ____D () C:\Cock Robin
    2014-12-23 14:40 - 2014-12-23 14:42 - 00000000 ____D () C:\Christopher Cross
    2014-12-23 14:40 - 2014-12-23 14:42 - 00000000 ____D () C:\Burt Bacharach
    2014-12-23 14:40 - 2014-12-23 14:40 - 00000000 ____D () C:\Santana
    2014-12-23 14:40 - 2014-12-23 14:40 - 00000000 ____D () C:\Ricky Martin
    2014-12-23 14:40 - 2014-12-23 14:40 - 00000000 ____D () C:\Jennifer Lopez
    2014-12-23 14:40 - 2014-12-23 14:40 - 00000000 ____D () C:\Janet Jackson
    2014-12-23 14:40 - 2014-12-23 14:40 - 00000000 ____D () C:\Jamiroquai
    2014-12-23 14:40 - 2014-12-23 14:40 - 00000000 ____D () C:\Digital Underground
    2014-12-23 14:40 - 2014-12-23 14:40 - 00000000 ____D () C:\Daft Punk
    2014-12-23 14:40 - 2014-12-23 14:40 - 00000000 ____D () C:\Chris Rea
    2014-12-23 14:40 - 2014-12-23 14:40 - 00000000 ____D () C:\Chicago
    2014-12-23 14:40 - 2014-12-23 14:40 - 00000000 ____D () C:\Alphaville
    2014-12-23 14:39 - 2015-01-12 02:19 - 00000000 ____D () C:\Original Soundtrack
    2014-12-23 14:39 - 2014-12-23 14:40 - 00000000 ____D () C:\Stereo MC's
    2014-12-23 14:39 - 2014-12-23 14:40 - 00000000 ____D () C:\Planet Soul
    2014-12-23 14:39 - 2014-12-23 14:39 - 00000000 ____D () C:\Wreckx-N-Effect
    2014-12-23 14:39 - 2014-12-23 14:39 - 00000000 ____D () C:\The Notorious B.I.G
    2014-12-23 14:39 - 2014-12-23 14:39 - 00000000 ____D () C:\No Mercy
    2014-12-23 14:39 - 2014-12-23 14:39 - 00000000 ____D () C:\Nicki French
    2014-12-23 14:39 - 2014-12-23 14:39 - 00000000 ____D () C:\Mariah Carey
    2014-12-23 14:39 - 2014-12-23 14:39 - 00000000 ____D () C:\Inoj
    2014-12-23 14:39 - 2014-12-23 14:39 - 00000000 ____D () C:\Ini Kamoze
    2014-12-23 14:39 - 2014-12-23 14:39 - 00000000 ____D () C:\EMF
    2014-12-23 14:39 - 2014-12-23 14:39 - 00000000 ____D () C:\Cher
    2014-12-23 09:47 - 2014-12-23 09:47 - 00000000 ____D () C:\Crystal Waters
    2014-12-23 03:38 - 2014-12-23 03:38 - 00000000 ____D () C:\Windows\system32\appraiser
    2014-12-23 03:14 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
    2014-12-23 03:14 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
    2014-12-23 03:14 - 2014-07-07 03:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
    2014-12-23 03:14 - 2014-07-07 03:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
    2014-12-23 03:14 - 2014-07-07 03:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
    2014-12-23 03:14 - 2014-07-07 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
    2014-12-23 03:14 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
    2014-12-23 03:14 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
    2014-12-23 03:14 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
    2014-12-23 03:14 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
    2014-12-22 19:52 - 2014-12-22 19:52 - 00000000 ____D () C:\Will Smith
    2014-12-22 19:51 - 2014-12-22 19:51 - 00000000 ____D () C:\Paperboy
    2014-12-22 19:50 - 2014-12-22 19:50 - 00000000 ____D () C:\Freak Nasty
    2014-12-22 19:43 - 2014-12-22 19:46 - 00000000 ____D () C:\Kris Kross
    2014-12-22 19:34 - 2014-12-22 19:46 - 00000000 ____D () C:\Everything But the Girl
    2014-12-22 18:53 - 2014-12-22 18:53 - 00001031 _____ () C:\Users\Invité\Desktop\WinDirStat.lnk
    2014-12-22 18:53 - 2014-12-22 18:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinDirStat
    2014-12-22 15:21 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
    2014-12-22 15:21 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
    2014-12-22 15:21 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
    2014-12-22 15:21 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
    2014-12-22 15:21 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
    2014-12-22 15:21 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
    2014-12-22 15:21 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
    2014-12-22 15:21 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
    2014-12-22 14:18 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
    2014-12-22 14:18 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
    2014-12-22 14:18 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
    2014-12-22 14:16 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
    2014-12-22 14:16 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
    2014-12-22 14:16 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
    2014-12-22 14:16 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
    2014-12-22 14:16 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
    2014-12-22 14:16 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
    2014-12-22 14:16 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
    2014-12-22 14:16 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
    2014-12-22 14:16 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
    2014-12-22 14:16 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
    2014-12-22 14:16 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
    2014-12-22 14:16 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
    2014-12-22 14:15 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
    2014-12-22 14:15 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
    2014-12-22 10:56 - 2014-12-27 10:46 - 00000000 ____D () C:\Users\monster gamer\Desktop\facture pour chris
    2014-12-22 10:38 - 2015-01-13 14:30 - 00028436 _____ () C:\Users\monster gamer\Desktop\Nouveau Feuille Microsoft Office Excel.xlsx
    2014-12-21 19:49 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
    2014-12-21 19:49 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
    2014-12-21 19:49 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
    2014-12-21 19:49 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
    2014-12-21 19:49 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
    2014-12-21 19:47 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
    2014-12-21 19:47 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
    2014-12-21 19:47 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
    2014-12-21 19:47 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
    2014-12-21 19:47 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
    2014-12-21 19:47 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
    2014-12-21 19:47 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
    2014-12-21 19:47 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
    2014-12-21 19:45 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
    2014-12-21 19:45 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
    2014-12-21 19:45 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
    2014-12-21 19:45 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
    2014-12-21 19:45 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
    2014-12-21 19:45 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
    2014-12-21 19:45 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
    2014-12-21 19:45 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
    2014-12-21 19:45 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
    2014-12-21 19:45 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
    2014-12-21 19:45 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
    2014-12-21 19:45 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
    2014-12-21 19:45 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
    2014-12-21 19:45 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
    2014-12-21 19:45 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
    2014-12-21 19:45 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
    2014-12-21 19:45 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
    2014-12-21 19:45 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
    2014-12-21 19:45 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
    2014-12-21 19:45 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
    2014-12-21 19:43 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
    2014-12-21 19:43 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
    2014-12-21 19:42 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
    2014-12-21 19:42 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
    2014-12-21 19:38 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
    2014-12-21 19:38 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
    2014-12-21 19:25 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

    ==================== One Month Modified Files and Folders =======

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2015-01-17 14:32 - 2011-12-26 10:05 - 00000000 ____D () C:\Users\monster gamer\AppData\Roaming\Azureus
    2015-01-17 14:12 - 2011-06-14 21:21 - 00001070 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
    2015-01-17 14:11 - 2011-11-11 13:03 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3807812839-1167684665-398527219-1000UA.job
    2015-01-17 14:05 - 2011-06-06 14:03 - 01217071 _____ () C:\Windows\WindowsUpdate.log
    2015-01-17 13:55 - 2009-07-14 05:45 - 00020704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2015-01-17 13:55 - 2009-07-14 05:45 - 00020704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2015-01-17 13:53 - 2012-07-25 19:38 - 00001002 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
    2015-01-17 13:46 - 2011-06-14 21:21 - 00001066 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
    2015-01-17 13:44 - 2013-03-16 17:01 - 00023678 _____ () C:\Windows\setupact.log
    2015-01-17 13:44 - 2011-11-12 21:10 - 00151870 _____ () C:\aaw7boot.log
    2015-01-17 13:44 - 2011-10-31 08:09 - 00413352 _____ () C:\Windows\PFRO.log
    2015-01-17 13:44 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
    2015-01-17 12:11 - 2011-11-11 13:03 - 00001058 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3807812839-1167684665-398527219-1000Core.job
    2015-01-17 11:29 - 2011-11-15 19:40 - 00000064 _____ () C:\Windows\SysWOW64\rp_stats.dat
    2015-01-17 11:29 - 2011-11-15 19:40 - 00000044 _____ () C:\Windows\SysWOW64\rp_rules.dat
    2015-01-17 11:13 - 2012-10-11 09:25 - 00000040 _____ () C:\Users\monster
    2015-01-16 17:17 - 2013-09-11 11:54 - 00000000 ____D () C:\Users\monster gamer\hubiC
    2015-01-16 16:36 - 2013-08-09 14:14 - 02000384 ___SH () C:\Users\monster gamer\Desktop\Thumbs.db
    2015-01-16 16:09 - 2011-12-25 14:43 - 00000000 ____D () C:\Users\monster gamer\AppData\Local\cache
    2015-01-16 11:11 - 2013-03-24 12:20 - 00000000 ____D () C:\Users\monster gamer\Documents\Donnees e-bat Navag
    2015-01-16 11:11 - 2009-07-14 03:34 - 00000539 _____ () C:\Windows\win.ini
    2015-01-16 10:27 - 2013-09-11 11:45 - 00000000 ____D () C:\Users\monster gamer\AppData\Roaming\hubiC
    2015-01-15 03:04 - 2013-08-31 02:11 - 00000000 ____D () C:\Windows\system32\MRT
    2015-01-15 03:04 - 2011-06-27 09:07 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
    2015-01-14 12:51 - 2011-06-29 00:06 - 00709314 _____ () C:\Windows\system32\prfh0416.dat
    2015-01-14 12:51 - 2011-06-29 00:06 - 00504848 _____ () C:\Windows\system32\perfh006.dat
    2015-01-14 12:51 - 2011-06-29 00:06 - 00412212 _____ () C:\Windows\system32\perfh011.dat
    2015-01-14 12:51 - 2011-06-29 00:06 - 00396456 _____ () C:\Windows\system32\prfh0404.dat
    2015-01-14 12:51 - 2011-06-29 00:06 - 00149094 _____ () C:\Windows\system32\prfc0416.dat
    2015-01-14 12:51 - 2011-06-29 00:06 - 00123538 _____ () C:\Windows\system32\perfc011.dat
    2015-01-14 12:51 - 2011-06-29 00:06 - 00116528 _____ () C:\Windows\system32\prfc0404.dat
    2015-01-14 12:51 - 2011-06-29 00:06 - 00100096 _____ () C:\Windows\system32\perfc006.dat
    2015-01-14 12:51 - 2011-06-28 21:54 - 00724452 _____ () C:\Windows\system32\prfh0816.dat
    2015-01-14 12:51 - 2011-06-28 21:54 - 00154344 _____ () C:\Windows\system32\prfc0816.dat
    2015-01-14 12:51 - 2011-06-28 03:12 - 00735792 _____ () C:\Windows\system32\perfh015.dat
    2015-01-14 12:51 - 2011-06-28 03:12 - 00157310 _____ () C:\Windows\system32\perfc015.dat
    2015-01-14 12:51 - 2011-06-28 03:00 - 00652116 _____ () C:\Windows\system32\perfh01F.dat
    2015-01-14 12:51 - 2011-06-28 03:00 - 00141438 _____ () C:\Windows\system32\perfc01F.dat
    2015-01
    0
  4. sarkis06 Messages postés 7 Date d'inscription   Statut Membre Dernière intervention  
     
    voici je pense avoir exécuter ce que vous m avez dicté.
    en attendant votre analyse
    merci
    0
    1. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
       
      Les rapports FRST sont à donner via pjjoint.
      Lire les instructions.
      0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    c'est mieux ?

    Désinstalle Lavasoft, tu as déjà MSE.


    AV: Lavasoft Ad-Watch Live! Anti-Virus (Enabled - Up to date) {9FF26384-70D4-CE6B-3ECB-E759A6A40116}
    AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
    AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
    AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AS: Lavasoft Ad-Watch Live! (Enabled - Up to date) {24938260-56EE-C1E5-047B-DC2BDD234BAB}

    0
  7. sarkis06 Messages postés 7 Date d'inscription   Statut Membre Dernière intervention  
     
    je viens de désinstaller ad aware lavasoft
    0
  8. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    plus de proxy qui s'impose ?
    0
  9. sarkis06 Messages postés 7 Date d'inscription   Statut Membre Dernière intervention  
     
    pour l instant mais je ne sais pas si cela va durer faudrait peut être que je redémarre, si c'était de désinstaller ad aware pour regler ce probleme j en suis tres heureux j imaginai deja de devoir formater avec toute la galere qui suit .

    je vous remercie pour votre aide
    0
  10. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    ok :)

    Voila, c'est terminé, tu peux supprimer les programmes utilisés.

    Quelques conseils :

    Installe Malwarebyte's Anti-Malware : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
    Fais des scans réguliers avec, il est efficace.
    (sauf si tu es sur un netbook)

    Pour prévenir les sites malicieux, tu peux installer Blockulicious : https://forum.malekal.com/viewtopic.php?t=46656&start=

    Pour ne plus te faire avoir.
    A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/

    Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html

    0