Ordi qui rame et CPU à 100% Heeeeeelp!!!!!
Fermé
managercherif
-
7 févr. 2015 à 16:08
lilidurhone Messages postés 43343 Date d'inscription lundi 25 avril 2011 Statut Contributeur sécurité Dernière intervention 19 juillet 2024 - 7 févr. 2015 à 17:34
lilidurhone Messages postés 43343 Date d'inscription lundi 25 avril 2011 Statut Contributeur sécurité Dernière intervention 19 juillet 2024 - 7 févr. 2015 à 17:34
A voir également:
- Ordi qui rame et CPU à 100% Heeeeeelp!!!!!
- Ordi qui rame - Guide
- Temperature cpu - Guide
- Comment reinitialiser un ordi - Guide
- Comment nettoyer un mac qui rame - Guide
- Cpu stress - Télécharger - Informations & Diagnostic
10 réponses
jeanbern
Messages postés
13770
Date d'inscription
vendredi 25 mars 2005
Statut
Contributeur
Dernière intervention
17 mars 2024
4 970
7 févr. 2015 à 16:18
7 févr. 2015 à 16:18
Salut,
fait CTRL+ALT+suprime va dans gestionnaire
regarde bien c'est pas plutôt svhost.exe et non svchost.exe. SVHOST.EXE EST UN VIRUS. Fais Ctrl Alt Delete et tu fais terminer le procésus.
Ensuite démarrer exécuter tu tape msconfig tu vas dans l'onglet démarrage et tu enlève la coche de svhost et non svchost
fait CTRL+ALT+suprime va dans gestionnaire
regarde bien c'est pas plutôt svhost.exe et non svchost.exe. SVHOST.EXE EST UN VIRUS. Fais Ctrl Alt Delete et tu fais terminer le procésus.
Ensuite démarrer exécuter tu tape msconfig tu vas dans l'onglet démarrage et tu enlève la coche de svhost et non svchost
lilidurhone
Messages postés
43343
Date d'inscription
lundi 25 avril 2011
Statut
Contributeur sécurité
Dernière intervention
19 juillet 2024
3 807
7 févr. 2015 à 16:25
7 févr. 2015 à 16:25
* Télécharge ZHPDiag (de Nicolas Coolman)
https://nicolascoolman.eu ou https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/
* Au cas où le premier lien ne marcherai pas, clique sur celui de dessous
ftp://zebulon.fr/ZHPDiag2.exe
* Double clic si tu es sous windows xp(sinon clic droit afin de l'exécuter en tant qu'admin à partir de Vista)
* Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin.
* Surtout, n'oublie pas d'installer son icône sur le bureau l'icône est en forme de parchemin
https://www.cjoint.com/13sp/CIvuQfap3YY_zhpdiag.png
* A l'ouverture du logiciel il te sera proposé 3 options "rechercher", "configurer" et complet
* Cliques sur "complet"
* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
* Pour héberger le rapport, rends toi sur cjoint.com
* Clique sur choisissez un fichier va chercher le rapport dans ton PC.
* Le rapport est hébergé:
- Pour XP : C:\Documents and Settings\username\Local Settings\Application Data\ZHP
- Depuis Vista : C:\Users\username\AppData\Roaming\ZHP
* Une fois le rapport trouvé, sélectionne le, et clique sur Ouvrir
* Choisis le type de diffusion (illimitée ou 21 jours)
* Puis cliques sur créer le lien cjoint
* Une fois que tu auras obtenu le lien copies colle dans ta prochaine réponse
* Pour t'aider https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers
https://nicolascoolman.eu ou https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/
* Au cas où le premier lien ne marcherai pas, clique sur celui de dessous
ftp://zebulon.fr/ZHPDiag2.exe
* Double clic si tu es sous windows xp(sinon clic droit afin de l'exécuter en tant qu'admin à partir de Vista)
* Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin.
* Surtout, n'oublie pas d'installer son icône sur le bureau l'icône est en forme de parchemin
https://www.cjoint.com/13sp/CIvuQfap3YY_zhpdiag.png
* A l'ouverture du logiciel il te sera proposé 3 options "rechercher", "configurer" et complet
* Cliques sur "complet"
* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
* Pour héberger le rapport, rends toi sur cjoint.com
* Clique sur choisissez un fichier va chercher le rapport dans ton PC.
* Le rapport est hébergé:
- Pour XP : C:\Documents and Settings\username\Local Settings\Application Data\ZHP
- Depuis Vista : C:\Users\username\AppData\Roaming\ZHP
* Une fois le rapport trouvé, sélectionne le, et clique sur Ouvrir
* Choisis le type de diffusion (illimitée ou 21 jours)
* Puis cliques sur créer le lien cjoint
* Une fois que tu auras obtenu le lien copies colle dans ta prochaine réponse
* Pour t'aider https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers
~ Rapport de ZHPDiag v2014.12.27.179 - Nicolas Coolman (27/12/2014)
~ Lancé par admin (07/02/2015 16:40:09)
~ Facebook : https://www.facebook.com/nicolascoolman1
~ Adresse du Forum http://forum.nicolascoolman.fr
~ Traduit par Nicolas Coolman
~ Etat de la version : Nouvelle version disponible
~ Liste blanche : Désactivée par l'utilisateur
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Deactivate by user
---\\ Navigateurs Internet
MSIE: Internet Explorer v11.0.9600.17501 (Defaut)
MFIE: Mozilla Firefox 35.0.1
GCIE: Google Chrome v40.0.2214.111
---\\ Informations sur les produits Windows
~ Langage: Français
Windows 7 Professional, 32-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows Operating System - Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 7TP9F
Windows License : OK
~ Windows Remaining Initializations Number : 3
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ Logiciels de protection du système
Avast Free Antivirus v10.0.2208
Malwarebytes Anti-Malware version 2.0.4.1028
Windows Defender W7 (Activate)
---\\ Logiciels d'optimisation du système
CCleaner v3.24
---\\ Logiciels de partage PeerToPeer
---\\ Surveillance de Logiciels
Adobe Flash Player 16 NPAPI
Adobe Reader XI
---\\ Informations sur le système
~ Processor: x86 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2669 MB (41% free)
System Restore: Activé (Enable)
System drive C: has 192 GB (78%) free of 243 GB
---\\ Mode de connexion au système
~ Computer Name: ADMIN-PC
~ User Name: admin
~ All Users Names: HomeGroupUser$, Administrateur, admin,
~ Unselected Option: None
Logged in as Administrator
---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\admin\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\admin\AppData\Roaming\
~ %Desktop% : C:\Users\admin\Desktop\
~ %Favorites% : C:\Users\admin\Favorites\
~ %LocalAppData% : C:\Users\admin\AppData\Local\
~ %StartMenu% : C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 192 Go of 243 Go)
D: CD-ROM drive (Not Inserted)
E: Hard drive, Flash drive, Thumb drive (Free 199 Go of 221 Go)
---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyGames: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
~ Security Center: 49 Scanned in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.40D777B7A95E00593EB1568C68514493] - (.Microsoft Corporation - Explorateur Windows.) (.20/11/2010 - 22:29:20.) -- C:\Windows\Explorer.exe [2616320]
[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:14:45.) -- C:\Windows\System32\Wininit.exe [96256]
[MD5.5E4E0E43E0A5BF9F089696DFA7A3D677] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.22/11/2014 - 02:00:20.) -- C:\Windows\System32\wininet.dll [1888256]
[MD5.52449FD429D6053B78AE564DEF303870] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.17/07/2014 - 02:39:27.) -- C:\Windows\System32\Winlogon.exe [304128]
[MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 22:29:24.) -- C:\Windows\System32\sppcomapi.dll [193536]
[MD5.D0B388DA1D111A34366E04EB4A5DD156] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.30/05/2014 - 07:36:07.) -- C:\Windows\system32\Drivers\AFD.sys [338944]
[MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:26:15.) -- C:\Windows\system32\Drivers\atapi.sys [21584]
[MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:11:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [70656]
[MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 22:29:03.) -- C:\Windows\system32\Drivers\Cdrom.sys [108544]
[MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 22:29:07.) -- C:\Windows\system32\Drivers\DfsC.sys [78336]
[MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 22:29:03.) -- C:\Windows\system32\Drivers\HDAudBus.sys [108544]
[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:11:24.) -- C:\Windows\system32\Drivers\i8042prt.sys [80896]
[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 00:54:29.) -- C:\Windows\system32\Drivers\IpNat.sys [101888]
[MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:17:22.) -- C:\Windows\system32\Drivers\MRxSmb.sys [123904]
[MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 22:29:08.) -- C:\Windows\system32\Drivers\netBT.sys [187904]
[MD5.5E43D2B0EE64123D4880DFA6626DEFDE] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 14:45:29.) -- C:\Windows\system32\Drivers\ntfs.sys [1211752]
[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 00:45:35.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.14/07/2009 - 00:54:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [78848]
[MD5.B973FCFC50DC1434E1970A146F7E3885] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.20/11/2010 - 22:29:49.) -- C:\Windows\system32\Drivers\rdpdr.sys [133632]
[MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 00:53:41.) -- C:\Windows\system32\Drivers\smb.sys [71168]
[MD5.B459575348C20E8121D6039DA063C704] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 22:29:07.) -- C:\Windows\system32\Drivers\tdx.sys [74752]
[MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 22:29:03.) -- C:\Windows\system32\Drivers\volsnap.sys [245632]
~ Generic Processes: Scanned in 00mn 00s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/250
~ Mes musiques (My Musics) : 1/16
~ Mes Videos (My Videos) : 1/2
~ Mes Favoris (My Favorites) : 1/50
~ Mes Documents (My Documents) : 1/40
~ Mon Bureau (My Desktop) : 1/8309
~ Menu demarrer (Programs) : 1/76
~ Hidden Files: Scanned in 00mn 14s
---\\ Processus lancés
[MD5.33D6A20AD733703938AC4C40880DFAE2] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe [6277736] [PID.3448]
[MD5.3F4A753CECDF268FEDCA66CF594C3475] - (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe [142616] [PID.3480]
[MD5.8843EE9726BD90D3B9721B9F31A2A142] - (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe [177432] [PID.3492]
[MD5.9074F7D20AF08F81722FB8C9441B561D] - (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe [176408] [PID.3500]
[MD5.9263CC35984DFF27D4C5AC7A726E3EF7] - (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2274600] [PID.2456]
[MD5.44ADDA5FB88EE14F57A246285775AC2F] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe [5227112] [PID.2476]
[MD5.57C635C41750117D206C90DA9C599777] - (.Pas de propriétaire - Status Monitor Application.) -- C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe [1163264] [PID.2996]
[MD5.C230AE7FD40B9104EB074B9EC0724DA8] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\Program Files\Synaptics\SynTP\SynTPHelper.exe [107816] [PID.1848]
[MD5.490F9A7948EF661DF32A9F0DC8534284] - (.Brother Industries, Ltd. - Brother Status Monitor (Local).) -- C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe [221184] [PID.3736]
[MD5.64A5D30EF57D4214DC9B27798DE2B19E] - (.Microsoft Corporation - Microsoft Office Outlook.) -- C:\Program Files\Microsoft Office\Office12\OUTLOOK.exe [13018808] [PID.4108]
[MD5.265B49EF94A5AA713192EE97A7D248B5] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [338032] [PID.4516]
[MD5.72E7A13372047CA67AB84FAF2F49EF06] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [243312] [PID.4624]
[MD5.FD965425319A2F00F38E86656112B7F0] - (.Google - Hangouts Plugin.) -- C:\Users\admin\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe [101192] [PID.4584]
[MD5.09B093BA5F2367CEB9CA6AB6B2B0A53A] - (.Pas de propriétaire - PSS(Pro Surveillance System).) -- C:\Program Files\Xenyum Pro Surveillance System\PSSProject.exe [4403200] [PID.4900]
[MD5.E47AC731D42B2452D4C0BF096DF3DD6E] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8145408] [PID.6044]
~ Processes Running: Scanned in 00mn 01s
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
---\\ Liste des dossiers d'extension Google Chrome
~ Google Lines Browser: 0 Scanned in 00mn 00s
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin] - (...) -- C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.9\npsitesafety.dll (.not file.) =>Toolbar.AVGSearch
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.30514.0.) -- C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3502.0922] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3555.0308] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.10.) -- C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
P2 - FPN: [HKCU] [@talk.google.com/GoogleTalkPlugin] - (.Google - Version 5.40.2.0.) -- C:\Users\admin\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
P2 - FPN: [HKCU] [@talk.google.com/O1DPlugin] - (.Google - Version 5.40.2.0.) -- C:\Users\admin\AppData\Roaming\Mozilla\plugins\npo1d.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\admin\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\admin\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll
~ Firefox Browser: 13 Scanned in 00mn 00s
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Google Inc. - Google Update.) (No version) -- (.not file.)
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0
~ IE Browser: 11 Scanned in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (21)
~ Hosts File: Scanned in 00mn 00s
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - GrooveShellExtensions Module.) -- C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} . (.AVG Secure Search - toolbar.dll.) -- C:\Program Files\AVG Secure Search\18.1.9.799\AVG Secure Search_toolbar.dll =>Toolbar.AVGSearch
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
~ BHO: 14 Scanned in 00mn 00s
---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: AVG Security Toolbar - [HKLM]{95B7759C-8C7F-4BF1-B163-73684A933233} . (.AVG Secure Search - toolbar.dll.) -- C:\Program Files\AVG Secure Search\18.1.9.799\AVG Secure Search_toolbar.dll =>Toolbar.AVGSearch
O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} Clé orpheline
~ Toolbar: Scanned in 00mn 00s
---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop [admin]: AppsHat.lnk . (...) -- C:\Users\admin\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe (.not file.) =>PUP.CrossRider
~ Global Startup: 1 Scanned in 00mn 04s
---\\ Applications lancées au démarrage du système (O4)
O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe =>.Realtek Semiconductor Corp
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\admin\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-1569152444-3501731407-3087061060-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-1569152444-3501731407-3087061060-1000\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\admin\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc
~ Application: Scanned in 00mn 00s
---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s
---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} . (.Microsoft Corporation - Windows Live Messenger Companion core resources.) -- C:\Program Files\Windows Live\Companion\companionres.dll
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO
~ IE Extra Buttons: Scanned in 00mn 00s
---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =>.Microsoft Corporation
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation
O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation
O10 - WLSP:\000000000010\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll
~ Winsock: 10 Scanned in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{A66531F7-76D3-47AC-9BF5-13850EF826BD}: NameServer = 8.8.8.8,8.8.4.4 =>.Google DNS Redirections
O17 - HKLM\System\CS1\Services\Tcpip\..\{A66531F7-76D3-47AC-9BF5-13850EF826BD}: NameServer = 8.8.8.8,8.8.4.4 =>.Google DNS Redirections
O17 - HKLM\System\CS2\Services\Tcpip\..\{A66531F7-76D3-47AC-9BF5-13850EF826BD}: NameServer = 8.8.8.8,8.8.4.4 =>.Google DNS Redirections
~ Domain: Scanned in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s
---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s
---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) - C:\Program Files\Realtek\Audio\HDA\AERTSrv.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc
O23 - Service: HP SI Service (HPSIService) . (.HP - HP Smart-Install Service.) - C:\Windows\system32\HPSIsvc.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: (vToolbarUpdater18.1.9) . (.AVG Secure Search - ToolbarU Application.) - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe =>Toolbar.AVGSearch
~ Services: 9 Scanned in 00mn 07s
---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s
---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
[MD5.3E04F1E482357B1FC8B088197C3D9FF8] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152]
[MD5.080255CDCB878813B481B8C348D47D8E] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [267440]
[MD5.4BB7714617D50D77FCDA6B0182FD8A9A] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [857888]
[MD5.00000000000000000000000000000000] [APT] [AVG-Secure-Search-Update_JUNE2013_HP_rmv] (...) -- C:\Windows\TEMP\{D0A10669-1052-447B-8956-630D99D5A751}.exe (.not file.) [0] =>Toolbar.AVGSearch
[MD5.00000000000000000000000000000000] [APT] [AVG-Secure-Search-Update_JUNE2013_TB_rmv] (...) -- C:\Windows\TEMP\{EA74D8CD-24C5-415E-A4AD-D497FCF6001A}.exe (.not file.) [0] =>Toolbar.AVGSearch
[MD5.A5062EA164067050F2DFA9DCA98CA63A] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [3157856]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskUserS-1-5-21-1569152444-3501731407-3087061060-1000Core] (.Google Inc..) -- C:\Users\admin\AppData\Local\Google\Update\GoogleUpdate.exe [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskUserS-1-5-21-1569152444-3501731407-3087061060-1000UA] (.Google Inc..) -- C:\Users\admin\AppData\Local\Google\Update\GoogleUpdate.exe [116648]
[MD5.D4AE5DE33F12D758B6E70433504D9082] [APT] [ROC_JAN2013_TB_rmv] (...) -- C:\Program Files\AVG Secure Search\PostInstall\ROC.exe [1197648] =>Toolbar.AVGSearch
[MD5.00000000000000000000000000000000] [APT] [{925A6D00-E8C4-46D5-9EDB-56FEB773D71A}] (...) -- C:\Users\admin\Local Settings\Application Data\Bundled software uninstaller\biclient.exe (.not file.) [0] =>Adware.MegaSearch
[MD5.F9CD2609E809E0DE9F3A462DB602A239] [APT] [{A42C3EFC-1F50-4CEF-803C-3B8C796BEABD}] (...) -- C:\yakdhane\install_remote_20080627_2.exe [3841382]
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [561984]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
O39 - APT: AVG-Secure-Search-Update_JUNE2013_HP_rmv - (...) -- C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job [352] =>Toolbar.AVGSearch
O39 - APT: AVG-Secure-Search-Update_JUNE2013_HP_rmv - (...) -- C:\Windows\System32\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv [352] =>Toolbar.AVGSearch
O39 - APT: AVG-Secure-Search-Update_JUNE2013_TB_rmv - (...) -- C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job [352] =>Toolbar.AVGSearch
O39 - APT: AVG-Secure-Search-Update_JUNE2013_TB_rmv - (...) -- C:\Windows\System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv [352] =>Toolbar.AVGSearch
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1054]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1054]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1058]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1058]
O39 - APT: GoogleUpdateTaskUserS-1-5-21-1569152444-3501731407-3087061060-1000Core - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1569152444-3501731407-3087061060-1000Core.job [1026]
O39 - APT: GoogleUpdateTaskUserS-1-5-21-1569152444-3501731407-3087061060-1000Core - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1569152444-3501731407-3087061060-1000Core [1026]
O39 - APT: GoogleUpdateTaskUserS-1-5-21-1569152444-3501731407-3087061060-1000UA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1569152444-3501731407-3087061060-1000UA.job [1078]
O39 - APT: GoogleUpdateTaskUserS-1-5-21-1569152444-3501731407-3087061060-1000UA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1569152444-3501731407-3087061060-1000UA [1078]
O39 - APT: ROC_JAN2013_TB_rmv - (...) -- C:\Windows\Tasks\ROC_JAN2013_TB_rmv.job [344]
O39 - APT: ROC_JAN2013_TB_rmv - (...) -- C:\Windows\System32\Tasks\ROC_JAN2013_TB_rmv [344]
~ Scheduled Task: 28 Scanned in 00mn 03s
---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 12.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Internet Explorer - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe =>.Microsoft Corporation
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Active Setup: 10 Scanned in 00mn 00s
---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\drivers\aswRdr2.sys
O41 - Driver: (aswSnx) . (.AVAST Software - avast! Virtualization Driver.) - C:\Windows\system32\drivers\aswSnx.sys
O41 - Driver: (aswSP) . (.AVAST Software - avast! self protection module.) - C:\Windows\system32\drivers\aswSP.sys
O41 - Driver: (avgtp) . (.AVG Technologies - Pas de description.) - C:\Windows\system32\drivers\avgtpx86.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (kl1) . (.Kaspersky Lab - Kaspersky Unified Driver.) - C:\Windows\System32\DRIVERS\kl1.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\System32\DRIVERS\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Drivers: 78 Scanned in 00mn 00s
---\\ Logiciels installés (O42)
O42 - Logiciel: AVG Security Toolbar - (.AVG Technologies.) [HKLM] -- AVG Secure Search =>Toolbar.AVGSearch
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {A0087DDE-69D0-11E2-AD57-43CA6188709B}
O42 - Logiciel: Adobe Download Assistant - (.Adobe Systems Incorporated.) [HKLM] -- com.adobe.downloadassistant.AdobeDownloadAssistant
O42 - Logiciel: Adobe Download Assistant - (.Adobe Systems Incorporated.) [HKLM] -- {E15BC10F-04AA-0AFD-A6C9-476730195F8B}
O42 - Logiciel: Adobe Flash Player 16 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 16 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI
O42 - Logiciel: Adobe Reader XI (11.0.10) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-0804-1033-1959-001802114130}
O42 - Logiciel: AnyBizSoft PDF to Excel (Build 2.0.0) - (.AnyBizSoft Software.) [HKLM] -- {9381506B-AAB3-45DF-BC6C-33D3BDF36876}_is1
O42 - Logiciel: AnyBizSoft PDF to Word (Build 3.0.0) - (.AnyBizSoft Software.) [HKLM] -- {44A69352-33DD-405E-ADB8-2D768643BBAE}_is1
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {46F044A5-CE8B-4196-984E-5BD6525E361D}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {0592EF96-69D8-4E4B-9CC9-88F58EA86F01}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} =>.Apple Inc
O42 - Logiciel: Archiveur WinRAR - (...) [HKLM] -- WinRAR archiver
O42 - Logiciel: Atheros Driver Installation Program - (.Atheros.) [HKLM] -- {C3A32068-8AB1-4327-BB16-BED9C6219DC7}
O42 - Logiciel: Avast Free Antivirus - (.AVAST Software.) [HKLM] -- Avast
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B}
O42 - Logiciel: Brother MFL-Pro Suite DCP-195C - (.Brother Industries, Ltd..) [HKLM] -- {6BF66AED-3EA4-4106-B240-5CE96C9B76B0}
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM] -- {64BF0187-F3D2-498B-99EA-163AF9AE6EC9}
O42 - Logiciel: Cisco LEAP Module - (.Cisco Systems, Inc..) [HKLM] -- {51C7AD07-C3F6-4635-8E8A-231306D810FE}
O42 - Logiciel: Cisco PEAP Module - (.Cisco Systems, Inc..) [HKLM] -- {ED5776D5-59B4-46B7-AF81-5F2D94D7C640}
O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}
O42 - Logiciel: Converter Pro - (...) [HKLM] -- ST6UNST #1
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKCU] -- Dropbox
O42 - Logiciel: Free Video Converter V 3.2 - (.Koyote Soft.) [HKLM] -- Free Video Converter_is1
O42 - Logiciel: Freez FLV to AVI/MPEG/WMV Converter - (.www.smallvideosoft.com.) [HKLM] -- Freez FLV to AVI/MPEG/WMV Converter 1.5_is1
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome
O42 - Logiciel: Google Talk Plugin - (.Google.) [HKLM] -- {C77CC230-7417-3F01-B70D-52583DC9FEC9}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: HP LaserJet Professional P1100-P1560-P1600 Series - (...) [HKLM] -- HP LaserJet Professional P1100-P1560-P1600 Series
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: MSVC90_x86 - (.Nokia.) [HKLM] -- {AF111648-99A1-453E-81DD-80DBBF6DAD0D}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Malwarebytes Anti-Malware version 2.0.4.1028 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: MediaConverter 1.3.2 - (.SoMud.) [HKLM] -- MediaConverter
O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft SkyDrive - (.Microsoft Corporation.) [HKCU] -- SkyDriveSetup.exe =>.Microsoft Corporation
O42 - Logiciel: Mozilla Firefox 35.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 35.0.1 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
O42 - Logiciel: Nero 8 Lite 8.3.6.0 - (.Updatepack.nl.) [HKLM] -- Nero8Lite_is1
O42 - Logiciel: Nokia Connectivity Cable Driver - (.Nokia.) [HKLM] -- {29373274-977E-413C-A4DE-DC0F8E80C429}
O42 - Logiciel: Nokia PC Suite - (.Nokia.) [HKLM] -- Nokia PC Suite
O42 - Logiciel: Nokia PC Suite - (.Nokia.) [HKLM] -- {866C4563-ED53-43F3-A29D-8BEE2BD1BA3C}
O42 - Logiciel: Optims.Visual Generation - (.OPTIMS GROUP.) [HKLM] -- Optims
O42 - Logiciel: PC Connectivity Solution - (.Nokia.) [HKLM] -- {644F4910-E812-49AD-93EC-86828CB81A0D}
O42 - Logiciel: PDFCreator - (.pdfforge.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}
O42 - Logiciel: Package de pilotes Windows - Nokia Modem (02/25/2011 4.7) - (.Nokia.) [HKLM] -- E0AC723A3DE3A04256288CADBBB011B112AED454
O42 - Logiciel: Package de pilotes Windows - Nokia Modem (02/25/2011 7.01.0.9) - (.Nokia.) [HKLM] -- 72A50F48CC5601190B9C4E74D81161693133E7F7
O42 - Logiciel: Package de pilotes Windows - Nokia pccsmcfd "LegacyDriver" (05/31/2012 7.1 - (.Nokia.) [HKLM] -- 17D063A0A9F5D5A225B76B1D9BCB5ADBE85C8382
O42 - Logiciel: Paint.NET v3.5.10 - (.dotPDN LLC.) [HKLM] -- {529125EF-E3AC-4B74-97E6-F688A7C0F1BF}
O42 - Logiciel: PaperPort Image Printer - (.Nuance Communications, Inc..) [HKLM] -- {2BC2781A-F7F6-452E-95EB-018A522F1B2C}
O42 - Logiciel: QuickShare - (.Linkury Inc..) [HKLM] -- {F7D739D1-B597-4802-A4CB-E1FBF326C9B0} =>PUP.QuickShare
O42 - Logiciel: QuickTime 7 - (.Apple Inc..) [HKLM] -- {3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Skype Click to Call - (.Skype Technologies S.A..) [HKLM] -- {B6CF2967-C81E-40C0-9815-C05774FEF120}
O42 - Logiciel: Skype(TM) 6.14 - (.Skype Technologies S.A..) [HKLM] -- {7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}
O42 - Logiciel: Synaptics TouchPad Driver - (.Synaptics Incorporated.) [HKLM] -- SynTPDeinstKey
O42 - Logiciel: VLC media player 1.1.5 - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN
O42 - Logiciel: Wondershare MobileTrans ( Version 4.3.0 ) - (.Wondershare.) [HKLM] -- {18CDCEAA-A9E4-4A4C-AC0E-C15E87C30EA5}_is1
O42 - Logiciel: Xenyum Pro Surveillance System - (.DH.) [HKLM] -- {B28C9804-BFCE-4ADB-8C18-1DD9DA1C530A}
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {C197BC08-3D82-4651-8886-E68C21578A38}
~ Logic: 46 Scanned in 00mn 00s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\5e55d9dcb13ab845] =>Hijacker.Eazel
[HKCU\Software\AC3Filter]
[HKCU\Software\APN PIP]
[HKCU\Software\AVAST Software]
[HKCU\Software\AVG Secure Search] =>Toolbar.AVGSearch
[HKCU\Software\Ad-Aware Search Protection]
[HKCU\Software\Adobe]
[HKCU\Software\AnyBizSoft]
[HKCU\Software\AppDataLow\Software\SingAlong] =>Adware.Singalng
[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Avg Secure Update]
[HKCU\Software\BI]
[HKCU\Software\BabSolution] =>Hijacker.BabSolution
[HKCU\Software\Brother]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\DSS]
[HKCU\Software\Delta]
[HKCU\Software\Gabest]
[HKCU\Software\Google]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\IM Providers]
[HKCU\Software\InstalledBrowserExtensions] =>Adware.VidSaver
[HKCU\Software\Intel]
[HKCU\Software\LANGAGENT]
[HKCU\Software\LBSU]
[HKCU\Software\Licenses]
[HKCU\Software\MCAFEE]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\Marvell]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\Nokia]
[HKCU\Software\OB]
[HKCU\Software\ODBC]
[HKCU\Software\ORACLE]
[HKCU\Software\PCCleaners] =>Rogue.PCCleanerPro
[HKCU\Software\PDF Architect]
[HKCU\Software\PDFCreator]
[HKCU\Software\Paint.NET]
[HKCU\Software\PasswordLastic]
[HKCU\Software\PasswordTools]
[HKCU\Software\PerformerSoft LLC]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Realtek]
[HKCU\Software\Rixler Software]
[HKCU\Software\Safer Networking Limited]
[HKCU\Software\Skype]
[HKCU\Software\Smartbar] =>Hijacker.SmartBar
[HKCU\Software\SoMud]
[HKCU\Software\Synaptics]
[HKCU\Software\ToolbarCleaner]
[HKCU\Software\ToolbarCleaneroptions]
[HKCU\Software\Trolltech]
[HKCU\Software\UniPDF]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\VirtualDub.org]
[HKCU\Software\WPI]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Wondershare]
[HKCU\Software\Wow6432Node]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\drpsu]
[HKCU\Software\flv2avi]
[HKCU\Software\golansoft]
[HKCU\Software\kde.org]
[HKCU\Software\sshelper6]
[HKLM\Software\5e55d9dcb13ab845] =>Hijacker.Eazel
[HKLM\Software\ATI Technologies]
[HKLM\Software\AVAST Software]
[HKLM\Software\AVG Security Toolbar] =>Toolbar.AVGSearch
[HKLM\Software\Adobe]
[HKLM\Software\AdwCleaner]
[HKLM\Software\Ahead]
[HKLM\Software\AnyBizSoft]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Ashmanov & Partners]
[HKLM\Software\Atheros]
[HKLM\Software\AviSynth]
[HKLM\Software\Babylon] =>PUP.Babylon
[HKLM\Software\Brother Industries, Ltd.]
[HKLM\Software\Brother]
[HKLM\Software\BrowserChoice]
[HKLM\Software\C:]
[HKLM\Software\CBSTEST]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\DSS]
[HKLM\Software\Delta]
[HKLM\Software\EnigmaSoftwareGroup]
[HKLM\Software\GEAR Software]
[HKLM\Software\Google]
[HKLM\Software\HewlettPackard]
[HKLM\Software\IM Providers]
[HKLM\Software\InstallShield]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\Lavasoft]
[HKLM\Software\Licenses]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware (Trial)]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\Marvell]
[HKLM\Software\McAfee.com]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\Nero]
[HKLM\Software\Nokia]
[HKLM\Software\Nuance]
[HKLM\Software\ODBC]
[HKLM\Software\ORACLE]
[HKLM\Software\PC Connectivity Solution]
[HKLM\Software\PCSuite]
[HKLM\Software\PDF Architect]
[HKLM\Software\PDFCreator]
[HKLM\Software\PIP]
[HKLM\Software\Paint.NET]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SRS Labs]
[HKLM\Software\Safer Networking Limited]
[HKLM\Software\ScanSoft]
[HKLM\Software\Skype]
[HKLM\Software\Sonic]
[HKLM\Software\Synaptics]
[HKLM\Software\Systweak]
[HKLM\Software\Unreal]
[HKLM\Software\VideoLAN]
[HKLM\Software\Volatile]
[HKLM\Software\WOW6432Node]
[HKLM\Software\Wondershare]
[HKLM\Software\YourFileDownloader] =>PUP.YourFileDownloader
[HKLM\Software\fCoder]
[HKLM\Software\golansoft]
[HKLM\Software\instinno]
[HKLM\Software\mcafeeupdater]
[HKLM\Software\mozilla.org]
~ Key Software: 270 Scanned in 00mn 00s
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 11/04/2013 - 11:19:55 - [] ----D C:\Program Files\Adobe
O43 - CFD: 16/04/2014 - 20:48:29 - [] ----D C:\Program Files\Adobe Download Assistant
O43 - CFD: 29/03/2013 - 20:36:00 - [] ----D C:\Program Files\Advanced Word to Pdf Converter Free
O43 - CFD: 12/06/2014 - 11:39:04 - [] ----D C:\Program Files\AnyBizSoft
O43 - CFD: 23/08/2013 - 21:01:05 - [] ----D C:\Program Files\Apple Software Update =>.Apple Inc
O43 - CFD: 05/04/2014 - 12:45:51 - [0] ----D C:\Program Files\AppsHat Mobile Apps =>PUP.CrossRider
O43 - CFD: 29/03/2014 - 20:52:09 - [] ----D C:\Program Files\Arabic Calligrapher 1.0
O43 - CFD: 17/10/2012 - 10:03:56 - [] ----D C:\Program Files\Atheros
O43 - CFD: 05/09/2013 - 13:10:50 - [] ----D C:\Program Files\Aurora
O43 - CFD: 31/01/2015 - 18:23:16 - [] ----D C:\Program Files\AVAST Software
O43 - CFD: 26/08/2014 - 11:41:36 - [] ----D C:\Program Files\AVG Secure Search =>Toolbar.AVGSearch
O43 - CFD: 27/08/2014 - 13:39:01 - [] ----D C:\Program Files\AVG Security Toolbar =>Toolbar.AVGSearch
O43 - CFD: 30/11/2012 - 20:49:21 - [] ----D C:\Program Files\AviSynth 2.5
O43 - CFD: 23/08/2013 - 21:00:29 - [] ----D C:\Program Files\Bonjour
O43 - CFD: 12/11/2013 - 19:58:30 - [] ----D C:\Program Files\Brother
O43 - CFD: 22/11/2012 - 13:22:04 - [] ----D C:\Program Files\CCleaner
O43 - CFD: 17/10/2012 - 10:03:32 - [] ----D C:\Program Files\Cisco
O43 - CFD: 15/05/2014 - 09:18:20 - [] ----D C:\Program Files\Common Files
O43 - CFD: 14/12/2012 - 20:23:20 - [] ----D C:\Program Files\CONVERT
O43 - CFD: 08/10/2013 - 22:22:49 - [] ----D C:\Program Files\Delta
O43 - CFD: 22/09/2013 - 22:18:17 - [] ----D C:\Program Files\DIFX
O43 - CFD: 19/10/2012 - 14:40:57 - [] ----D C:\Program Files\DVD Maker
O43 - CFD: 01/12/2012 - 11:26:47 - [] ----D C:\Program Files\Enigma Software Group
O43 - CFD: 29/03/2013 - 22:11:56 - [0] ----D C:\Program Files\eRightSoft
O43 - CFD: 17/10/2012 - 09:39:06 - [] -SH-D C:\Program Files\Fichiers communs
O43 - CFD: 30/11/2012 - 13:31:47 - [] ----D C:\Program Files\Free FLV Converter
O43 - CFD: 10/01/2015 - 15:17:15 - [] ----D C:\Program Files\Free Video Converter
O43 - CFD: 16/04/2014 - 20:53:41 - [] ----D C:\Program Files\Google
O43 - CFD: 15/10/2013 - 04:48:02 - [] ----D C:\Program Files\GUM6BCA.tmp
O43 - CFD: 17/10/2012 - 09:49:36 - [] ----D C:\Program Files\Hewlett-Packard
O43 - CFD: 19/10/2012 - 10:16:39 - [] ----D C:\Program Files\Hotix Tunisie
O43 - CFD: 13/11/2012 - 13:15:16 - [] ----D C:\Program Files\HP
O43 - CFD: 29/03/2013 - 22:10:40 - [] ----D C:\Program Files\Iminent =>Adware.IMBooster
O43 - CFD: 27/11/2014 - 19:32:00 - [] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 17/10/2012 - 09:47:20 - [] ----D C:\Program Files\Intel
O43 - CFD: 17/12/2014 - 07:47:50 - [] ----D C:\Program Files\Internet Explorer
O43 - CFD: 08/11/2013 - 18:34:54 - [] ----D C:\Program Files\iPod
O43 - CFD: 08/11/2013 - 18:35:10 - [] ----D C:\Program Files\iTunes
O43 - CFD: 29/03/2013 - 22:09:34 - [0] ----D C:\Program Files\KaraFun Player
O43 - CFD: 21/03/2014 - 10:10:23 - [] ----D C:\Program Files\Kaspersky Lab
O43 - CFD: 04/02/2015 - 13:36:13 - [] ----D C:\Program Files\Malwarebytes Anti-Malware
O43 - CFD: 30/11/2012 - 13:25:36 - [] ----D C:\Program Files\MediaConverter
O43 - CFD: 11/10/2013 - 13:34:15 - [0] ----D C:\Program Files\Microsoft
O43 - CFD: 25/10/2012 - 09:40:18 - [] ----D C:\Program Files\Microsoft Office
O43 - CFD: 29/07/2014 - 10:52:43 - [] ----D C:\Program Files\Microsoft Silverlight
O43 - CFD: 30/11/2012 - 12:25:55 - [] ----D C:\Program Files\Microsoft SkyDrive =>.Microsoft Corporation
O43 - CFD: 30/11/2012 - 12:44:45 - [] ----D C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 17/10/2012 - 10:25:38 - [] ----D C:\Program Files\Microsoft Visual Studio
O43 - CFD: 17/10/2012 - 10:20:52 - [] ----D C:\Program Files\Microsoft Visual Studio 8
O43 - CFD: 23/10/2012 - 08:16:03 - [] ----D C:\Program Files\Microsoft Works
O43 - CFD: 30/11/2012 - 12:33:34 - [] ----D C:\Program Files\Microsoft.NET
O43 - CFD: 30/11/2012 - 16:42:12 - [] ----D C:\Program Files\Movie Maker 2.6
O43 - CFD: 30/01/2015 - 12:59:19 - [] ----D C:\Program Files\Mozilla Firefox
O43 - CFD: 30/01/2015 - 13:03:32 - [] ----D C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 17/10/2012 - 10:25:44 - [] ----D C:\Program Files\MSBuild
O43 - CFD: 17/10/2012 - 09:59:38 - [] ----D C:\Program Files\MSECache
O43 - CFD: 17/11/2013 - 09:29:03 - [0] ----D C:\Program Files\MSXML 4.0
O43 - CFD: 17/10/2012 - 10:00:38 - [] ----D C:\Program Files\Nero
O43 - CFD: 23/09/2013 - 22:01:41 - [] ----D C:\Program Files\Nokia
O43 - CFD: 12/11/2013 - 19:57:09 - [] ----D C:\Program Files\Nuance
O43 - CFD: 23/01/2013 - 11:29:48 - [] ----D C:\Program Files\Paint.NET
O43 - CFD: 31/10/2012 - 00:26:33 - [0] ----D C:\Program Files\PasswordLastic
O43 - CFD: 30/11/2012 - 16:01:43 - [] ----D C:\Program Files\pazera-software
O43 - CFD: 22/09/2013 - 22:17:37 - [] ----D C:\Program Files\PC Connectivity Solution
O43 - CFD: 11/04/2013 - 11:39:21 - [] ----D C:\Program Files\PDFCreator
O43 - CFD: 16/12/2014 - 15:01:03 - [] ----D C:\Program Files\QuickTime
O43 - CFD: 17/10/2012 - 09:45:59 - [] ----D C:\Program Files\Realtek
O43 - CFD: 14/07/2009 - 05:52:30 - [] ----D C:\Program Files\Reference Assemblies
O43 - CFD: 01/12/2014 - 16:46:29 - [] ----D C:\Program Files\remoteAP
O43 - CFD: 10/03/2014 - 09:56:36 - [] R---D C:\Program Files\Skype
O43 - CFD: 30/11/2012 - 15:34:56 - [] ----D C:\Program Files\Smallvideosoft
O43 - CFD: 29/03/2013 - 22:20:54 - [] ----D C:\Program Files\Spybot - Search & Destroy
O43 - CFD: 17/10/2012 - 09:48:55 - [] ----D C:\Program Files\Synaptics
O43 - CFD: 14/07/2009 - 05:53:23 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 17/10/2012 - 09:45:44 - [] ----D C:\Program Files\VideoLAN
O43 - CFD: 12/07/2013 - 08:40:32 - [] ----D C:\Program Files\Windows Defender
O43 - CFD: 10/07/2014 - 10:02:55 - [] ----D C:\Program Files\Windows Journal
O43 - CFD: 29/03/2013 - 22:10:38 - [] ----D C:\Program Files\Windows Live
O43 - CFD: 19/10/2012 - 14:41:25 - [] ----D C:\Program Files\Windows Mail =>.Microsoft Corporation
O43 - CFD: 19/10/2012 - 14:41:25 - [] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 17/10/2012 - 09:39:06 - [] ----D C:\Program Files\Windows NT
O43 - CFD: 19/10/2012 - 14:41:25 - [] ----D C:\Program Files\Windows Photo Viewer
O43 - CFD: 20/11/2010 - 22:33:48 - [] ----D C:\Program Files\Windows Portable Devices
O43 - CFD: 19/10/2012 - 14:41:26 - [] ----D C:\Program Files\Windows Sidebar
O43 - CFD: 17/10/2012 - 10:00:51 - [] ----D C:\Program Files\WinRAR
O43 - CFD: 16/05/2014 - 17:26:07 - [] ----D C:\Program Files\Wondershare
O43 - CFD: 31/10/2014 - 13:37:17 - [] ----D C:\Program Files\Xenyum Pro Surveillance System
O43 - CFD: 07/02/2015 - 16:39:27 - [] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 27/10/2012 - 16:07:14 - [] ----D C:\Program Files\Common Files\Adobe
O43 - CFD: 11/04/2013 - 11:19:55 - [] ----D C:\Program Files\Common Files\Adobe AIR
O43 - CFD: 08/11/2013 - 18:34:54 - [] ----D C:\Program Files\Common Files\Apple
O43 - CFD: 09/12/2013 - 09:41:32 - [] ----D C:\Program Files\Common Files\AVG Secure Search =>Toolbar.AVGSearch
O43 - CFD: 15/05/2014 - 09:18:20 - [] ----D C:\Program Files\Common Files\DESIGNER
O43 - CFD: 27/11/2014 - 19:32:23 - [] ----D C:\Program Files\Common Files\InstallShield
O43 - CFD: 17/10/2012 - 09:47:21 - [] ----D C:\Program Files\Common Files\Intel
O43 - CFD: 29/03/2013 - 21:39:01 - [] ----D C:\Program Files\Common Files\microsoft shared
O43 - CFD: 17/10/2012 - 10:00:28 - [] ----D C:\Program Files\Common Files\Nero
O43 - CFD: 22/09/2013 - 22:17:57 - [] ----D C:\Program Files\Common Files\Nokia
O43 - CFD: 22/09/2013 - 22:17:57 - [] ----D C:\Program Files\Common Files\PCSuite
O43 - CFD: 14/07/2009 - 03:37:05 - [] ----D C:\Program Files\Common Files\Services
O43 - CFD: 10/03/2014 - 09:56:36 - [] ----D C:\Program Files\Common Files\Skype
O43 - CFD: 14/07/2009 - 03:37:05 - [] ----D C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 25/10/2012 - 09:40:38 - [] ----D C:\Program Files\Common Files\System
O43 - CFD: 17/10/2012 - 09:47:24 - [] ----D C:\Program Files\Common Files\Windows Live
O43 - CFD: 01/12/2012 - 11:25:51 - [] ----D C:\Program Files\Common Files\Wise Installation Wizard
O43 - CFD: 22/09/2013 - 22:47:14 - [] ----D C:\Program Files\Common Files\Wondershare
O43 - CFD: 08/11/2013 - 18:35:10 - [] ----D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
O43 - CFD: 11/04/2013 - 11:19:58 - [] ----D C:\ProgramData\Adobe
O43 - CFD: 23/08/2013 - 21:01:03 - [] ----D C:\ProgramData\Apple
O43 - CFD: 23/08/2013 - 21:01:37 - [] ----D C:\ProgramData\Apple Computer
O43 - CFD: 14/07/2009 - 05:53:55 - [] -SH-D C:\ProgramData\Application Data
O43 - CFD: 17/10/2012 - 10:03:54 - [] ----D C:\ProgramData\Atheros
O43 - CFD: 31/01/2015 - 18:23:16 - [] ----D C:\ProgramData\AVAST Software
O43 - CFD: 12/08/2014 - 12:30:13 - [] ----D C:\ProgramData\AVG Secure Search =>Toolbar.AVGSearch
O43 - CFD: 27/08/2014 - 13:38:46 - [] ----D C:\ProgramData\Avg_Update_0814tb
O43 - CFD: 23/01/2013 - 11:28:02 - [0] ----D C:\ProgramData\Babylon =>PUP.Babylon
O43 - CFD: 12/11/2013 - 19:44:07 - [] ----D C:\ProgramData\Brother
O43 - CFD: 17/10/2012 - 09:39:06 - [] -SH-D C:\ProgramData\Bureau
O43 - CFD: 17/10/2012 - 10:34:41 - [] --H-D C:\ProgramData\Common Files
O43 - CFD: 14/07/2009 - 05:53:55 - [] -SH-D C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 05:53:55 - [] -SH-D C:\ProgramData\Documents
O43 - CFD: 29/03/2013 - 21:38:41 - [] ----D C:\ProgramData\Downloaded Installations
O43 - CFD: 17/10/2012 - 09:39:06 - [] -SH-D C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - 05:53:55 - [] -SH-D C:\ProgramData\Favorites
O43 - CFD: 11/04/2014 - 22:14:39 - [] ----D C:\ProgramData\Google
O43 - CFD: 22/09/2013 - 22:16:34 - [] ----D C:\ProgramData\Installations
O43 - CFD: 12/11/2013 - 19:56:42 - [] ----D C:\ProgramData\InstallShield
O43 - CFD: 04/02/2015 - 13:36:12 - [0] ----D C:\ProgramData\Kaspersky Lab
O43 - CFD: 08/07/2014 - 11:35:45 - [] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 16/12/2014 - 15:08:35 - [] ----D C:\ProgramData\McAfee
O43 - CFD: 17/10/2012 - 09:39:06 - [] -SH-D C:\ProgramData\Menu Démarrer
O43 - CFD: 21/03/2014 - 10:07:35 - [] ----D C:\ProgramData\MFAData
O43 - CFD: 11/10/2013 - 13:34:15 - [] -S--D C:\ProgramData\Microsoft
O43 - CFD: 16/12/2014 - 08:53:18 - [] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 30/11/2012 - 12:25:38 - [] ----D C:\ProgramData\Microsoft SkyDrive =>.Microsoft Corporation
O43 - CFD: 17/10/2012 - 09:39:06 - [] -SH-D C:\ProgramData\Modèles
O43 - CFD: 19/10/2012 - 11:41:36 - [] ----D C:\ProgramData\Mozilla
O43 - CFD: 17/10/2012 - 10:00:24 - [] ----D C:\ProgramData\Nero
O43 - CFD: 22/09/2013 - 22:23:56 - [] ----D C:\ProgramData\PC Suite
O43 - CFD: 01/12/2012 - 18:29:52 - [] ----D C:\ProgramData\PC1Data
O43 - CFD: 05/12/2013 - 16:20:27 - [] ----D C:\ProgramData\PDF Architect
O43 - CFD: 16/01/2014 - 14:51:43 - [0] ----D C:\ProgramData\Search Protection =>PUP.SearchProtect
O43 - CFD: 10/03/2014 - 09:56:40 - [] ----D C:\ProgramData\Skype
O43 - CFD: 29/03/2013 - 22:20:54 - [] ----D C:\ProgramData\Spybot - Search & Destroy
O43 - CFD: 14/07/2009 - 05:53:55 - [] -SH-D C:\ProgramData\Start Menu
O43 - CFD: 17/10/2012 - 10:32:25 - [] ----D C:\ProgramData\Synaptics
O43 - CFD: 08/10/2013 - 22:28:32 - [0] ----D C:\ProgramData\TEMP
O43 - CFD: 14/07/2009 - 05:53:55 - [] -SH-D C:\ProgramData\Templates
O43 - CFD: 17/10/2012 - 09:36:11 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 17/10/2012 - 09:36:17 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 12/06/2014 - 11:39:06 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnyBizSoft
O43 - CFD: 31/01/2015 - 20:40:56 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
O43 - CFD: 12/11/2013 - 19:58:42 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
O43 - CFD: 14/12/2012 - 20:23:20 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Converter Pro
O43 - CFD: 20/05/2014 - 13:52:26 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Video Converter
O43 - CFD: 30/11/2012 - 15:34:56 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freez software
O43 - CFD: 21/11/2010 - 01:47:30 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 13/11/2012 - 13:18:56 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
O43 - CFD: 03/01/2014 - 18:28:03 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
O43 - CFD: 08/11/2013 - 18:35:16 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
O43 - CFD: 14/07/2009 - 05:42:30 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 04/02/2015 - 13:13:46 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
O43 - CFD: 30/11/2012 - 13:25:36 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MediaConverter
O43 - CFD: 13/09/2013 - 23:43:34 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 26/07/2014 - 23:22:34 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 17/10/2012 - 10:00:32 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
O43 - CFD: 22/09/2013 - 22:17:58 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia PC Suite
O43 - CFD: 11/04/2013 - 11:38:09 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
O43 - CFD: 16/12/2014 - 15:00:45 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
O43 - CFD: 10/03/2014 - 09:56:37 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 07/02/2015 - 15:41:25 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 21/11/2010 - 01:47:05 - [0] R-H-D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 12/06/2014 - 11:19:28 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UniPDF
O43 - CFD: 17/10/2012 - 09:45:55 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 30/11/2012 - 12:53:58 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
O43 - CFD: 17/10/2012 - 10:00:51 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 16/05/2014 - 17:26:09 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
O43 - CFD: 07/02/2015 - 16:39:27 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP =>.Nicolas Coolman
O43 - CFD: 30/09/2014 - 18:53:22 - [] ----D C:\Users\admin\AppData\Roaming\Adobe
O43 - CFD: 08/10/2014 - 19:37:18 - [] ----D C:\Users\admin\AppData\Roaming\Apple Computer
O43 - CFD: 31/01/2015 - 21:32:25 - [] ----D C:\Users\admin\AppData\Roaming\AVAST Software
O43 - CFD: 15/11/2013 - 10:14:06 - [] R---D C:\Users\admin\AppData\Roaming\Brother
O43 - CFD: 11/04/2013 - 11:19:59 - [] ----D C:\Users\admin\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
O43 - CFD: 20/05/2014 - 13:55:31 - [] ----D C:\Users\admin\AppData\Roaming\convertaudiofree
O43 - CFD: 02/02/2015 - 09:37:43 - [] ----D C:\Users\admin\AppData\Roaming\Dropbox
O43 - CFD: 30/11/2012 - 13:15:00 - [] ----D C:\Users\admin\AppData\Roaming\FreeFLVConverter
O43 - CFD: 31/01/2015 - 12:21:11 - [] ----D C:\Users\admin\AppData\Roaming\FreeVideoConverter
O43 - CFD: 17/10/2012 - 09:49:47 - [0] ----D C:\Users\admin\AppData\Roaming\Hewlett-Packard
O43 - CFD: 17/10/2012 - 09:49:35 - [] ----D C:\Users\admin\AppData\Roaming\hpqLog
O43 - CFD: 17/10/2012 - 09:39:58 - [] ----D C:\Users\admin\AppData\Roaming\Identities
O43 - CFD: 12/11/2013 - 19:57:46 - [] ----D C:\Users\admin\AppData\Roaming\InstallShield
O43 - CFD: 29/03/2013 - 21:45:24 - [] ----D C:\Users\admin\AppData\Roaming\LavasoftStatistics
O43 - CFD: 19/10/2012 - 10:42:50 - [] ----D C:\Users\admin\AppData\Roaming\Macromedia
O43 - CFD: 08/07/2014 - 11:35:55 - [0] ----D C:\Users\admin\AppData\Roaming\Malwarebytes
O43 - CFD: 21/11/2010 - 01:47:05 - [0] ----D C:\Users\admin\AppData\Roaming\Media Center Programs
O43 - CFD: 17/12/2014 - 17:19:56 - [] -S--D C:\Users\admin\AppData\Roaming\Microsoft
O43 - CFD: 23/08/2013 - 13:53:32 - [] ----D C:\Users\admin\AppData\Roaming\MixVibes
O43 - CFD: 30/01/2015 - 09:55:49 - [] ----D C:\Users\admin\AppData\Roaming\Mozilla
O43 - CFD: 25/11/2014 - 10:37:22 - [] ----D C:\User
~ Lancé par admin (07/02/2015 16:40:09)
~ Facebook : https://www.facebook.com/nicolascoolman1
~ Adresse du Forum http://forum.nicolascoolman.fr
~ Traduit par Nicolas Coolman
~ Etat de la version : Nouvelle version disponible
~ Liste blanche : Désactivée par l'utilisateur
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Deactivate by user
---\\ Navigateurs Internet
MSIE: Internet Explorer v11.0.9600.17501 (Defaut)
MFIE: Mozilla Firefox 35.0.1
GCIE: Google Chrome v40.0.2214.111
---\\ Informations sur les produits Windows
~ Langage: Français
Windows 7 Professional, 32-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows Operating System - Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 7TP9F
Windows License : OK
~ Windows Remaining Initializations Number : 3
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ Logiciels de protection du système
Avast Free Antivirus v10.0.2208
Malwarebytes Anti-Malware version 2.0.4.1028
Windows Defender W7 (Activate)
---\\ Logiciels d'optimisation du système
CCleaner v3.24
---\\ Logiciels de partage PeerToPeer
---\\ Surveillance de Logiciels
Adobe Flash Player 16 NPAPI
Adobe Reader XI
---\\ Informations sur le système
~ Processor: x86 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2669 MB (41% free)
System Restore: Activé (Enable)
System drive C: has 192 GB (78%) free of 243 GB
---\\ Mode de connexion au système
~ Computer Name: ADMIN-PC
~ User Name: admin
~ All Users Names: HomeGroupUser$, Administrateur, admin,
~ Unselected Option: None
Logged in as Administrator
---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\admin\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\admin\AppData\Roaming\
~ %Desktop% : C:\Users\admin\Desktop\
~ %Favorites% : C:\Users\admin\Favorites\
~ %LocalAppData% : C:\Users\admin\AppData\Local\
~ %StartMenu% : C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 192 Go of 243 Go)
D: CD-ROM drive (Not Inserted)
E: Hard drive, Flash drive, Thumb drive (Free 199 Go of 221 Go)
---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyGames: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
~ Security Center: 49 Scanned in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.40D777B7A95E00593EB1568C68514493] - (.Microsoft Corporation - Explorateur Windows.) (.20/11/2010 - 22:29:20.) -- C:\Windows\Explorer.exe [2616320]
[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:14:45.) -- C:\Windows\System32\Wininit.exe [96256]
[MD5.5E4E0E43E0A5BF9F089696DFA7A3D677] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.22/11/2014 - 02:00:20.) -- C:\Windows\System32\wininet.dll [1888256]
[MD5.52449FD429D6053B78AE564DEF303870] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.17/07/2014 - 02:39:27.) -- C:\Windows\System32\Winlogon.exe [304128]
[MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 22:29:24.) -- C:\Windows\System32\sppcomapi.dll [193536]
[MD5.D0B388DA1D111A34366E04EB4A5DD156] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.30/05/2014 - 07:36:07.) -- C:\Windows\system32\Drivers\AFD.sys [338944]
[MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:26:15.) -- C:\Windows\system32\Drivers\atapi.sys [21584]
[MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:11:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [70656]
[MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 22:29:03.) -- C:\Windows\system32\Drivers\Cdrom.sys [108544]
[MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 22:29:07.) -- C:\Windows\system32\Drivers\DfsC.sys [78336]
[MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 22:29:03.) -- C:\Windows\system32\Drivers\HDAudBus.sys [108544]
[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:11:24.) -- C:\Windows\system32\Drivers\i8042prt.sys [80896]
[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 00:54:29.) -- C:\Windows\system32\Drivers\IpNat.sys [101888]
[MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:17:22.) -- C:\Windows\system32\Drivers\MRxSmb.sys [123904]
[MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 22:29:08.) -- C:\Windows\system32\Drivers\netBT.sys [187904]
[MD5.5E43D2B0EE64123D4880DFA6626DEFDE] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 14:45:29.) -- C:\Windows\system32\Drivers\ntfs.sys [1211752]
[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 00:45:35.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.14/07/2009 - 00:54:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [78848]
[MD5.B973FCFC50DC1434E1970A146F7E3885] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.20/11/2010 - 22:29:49.) -- C:\Windows\system32\Drivers\rdpdr.sys [133632]
[MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 00:53:41.) -- C:\Windows\system32\Drivers\smb.sys [71168]
[MD5.B459575348C20E8121D6039DA063C704] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 22:29:07.) -- C:\Windows\system32\Drivers\tdx.sys [74752]
[MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 22:29:03.) -- C:\Windows\system32\Drivers\volsnap.sys [245632]
~ Generic Processes: Scanned in 00mn 00s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/250
~ Mes musiques (My Musics) : 1/16
~ Mes Videos (My Videos) : 1/2
~ Mes Favoris (My Favorites) : 1/50
~ Mes Documents (My Documents) : 1/40
~ Mon Bureau (My Desktop) : 1/8309
~ Menu demarrer (Programs) : 1/76
~ Hidden Files: Scanned in 00mn 14s
---\\ Processus lancés
[MD5.33D6A20AD733703938AC4C40880DFAE2] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe [6277736] [PID.3448]
[MD5.3F4A753CECDF268FEDCA66CF594C3475] - (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe [142616] [PID.3480]
[MD5.8843EE9726BD90D3B9721B9F31A2A142] - (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe [177432] [PID.3492]
[MD5.9074F7D20AF08F81722FB8C9441B561D] - (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe [176408] [PID.3500]
[MD5.9263CC35984DFF27D4C5AC7A726E3EF7] - (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2274600] [PID.2456]
[MD5.44ADDA5FB88EE14F57A246285775AC2F] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe [5227112] [PID.2476]
[MD5.57C635C41750117D206C90DA9C599777] - (.Pas de propriétaire - Status Monitor Application.) -- C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe [1163264] [PID.2996]
[MD5.C230AE7FD40B9104EB074B9EC0724DA8] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\Program Files\Synaptics\SynTP\SynTPHelper.exe [107816] [PID.1848]
[MD5.490F9A7948EF661DF32A9F0DC8534284] - (.Brother Industries, Ltd. - Brother Status Monitor (Local).) -- C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe [221184] [PID.3736]
[MD5.64A5D30EF57D4214DC9B27798DE2B19E] - (.Microsoft Corporation - Microsoft Office Outlook.) -- C:\Program Files\Microsoft Office\Office12\OUTLOOK.exe [13018808] [PID.4108]
[MD5.265B49EF94A5AA713192EE97A7D248B5] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [338032] [PID.4516]
[MD5.72E7A13372047CA67AB84FAF2F49EF06] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [243312] [PID.4624]
[MD5.FD965425319A2F00F38E86656112B7F0] - (.Google - Hangouts Plugin.) -- C:\Users\admin\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe [101192] [PID.4584]
[MD5.09B093BA5F2367CEB9CA6AB6B2B0A53A] - (.Pas de propriétaire - PSS(Pro Surveillance System).) -- C:\Program Files\Xenyum Pro Surveillance System\PSSProject.exe [4403200] [PID.4900]
[MD5.E47AC731D42B2452D4C0BF096DF3DD6E] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8145408] [PID.6044]
~ Processes Running: Scanned in 00mn 01s
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
---\\ Liste des dossiers d'extension Google Chrome
~ Google Lines Browser: 0 Scanned in 00mn 00s
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin] - (...) -- C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.9\npsitesafety.dll (.not file.) =>Toolbar.AVGSearch
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.30514.0.) -- C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3502.0922] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3555.0308] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.10.) -- C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
P2 - FPN: [HKCU] [@talk.google.com/GoogleTalkPlugin] - (.Google - Version 5.40.2.0.) -- C:\Users\admin\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
P2 - FPN: [HKCU] [@talk.google.com/O1DPlugin] - (.Google - Version 5.40.2.0.) -- C:\Users\admin\AppData\Roaming\Mozilla\plugins\npo1d.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\admin\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\admin\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll
~ Firefox Browser: 13 Scanned in 00mn 00s
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Google Inc. - Google Update.) (No version) -- (.not file.)
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0
~ IE Browser: 11 Scanned in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (21)
~ Hosts File: Scanned in 00mn 00s
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - GrooveShellExtensions Module.) -- C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} . (.AVG Secure Search - toolbar.dll.) -- C:\Program Files\AVG Secure Search\18.1.9.799\AVG Secure Search_toolbar.dll =>Toolbar.AVGSearch
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} . (.Microsoft Corporation - Windows Live Messenger Companion Core.) -- C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype Click to Call for Internet Explorer.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
~ BHO: 14 Scanned in 00mn 00s
---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: AVG Security Toolbar - [HKLM]{95B7759C-8C7F-4BF1-B163-73684A933233} . (.AVG Secure Search - toolbar.dll.) -- C:\Program Files\AVG Secure Search\18.1.9.799\AVG Secure Search_toolbar.dll =>Toolbar.AVGSearch
O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} Clé orpheline
~ Toolbar: Scanned in 00mn 00s
---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop [admin]: AppsHat.lnk . (...) -- C:\Users\admin\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe (.not file.) =>PUP.CrossRider
~ Global Startup: 1 Scanned in 00mn 04s
---\\ Applications lancées au démarrage du système (O4)
O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe =>.Realtek Semiconductor Corp
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\admin\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-1569152444-3501731407-3087061060-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-1569152444-3501731407-3087061060-1000\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\admin\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc
~ Application: Scanned in 00mn 00s
---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s
---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} . (.Microsoft Corporation - Windows Live Messenger Companion core resources.) -- C:\Program Files\Windows Live\Companion\companionres.dll
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\Program Files\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO
~ IE Extra Buttons: Scanned in 00mn 00s
---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =>.Microsoft Corporation
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation
O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation
O10 - WLSP:\000000000010\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll
~ Winsock: 10 Scanned in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{A66531F7-76D3-47AC-9BF5-13850EF826BD}: NameServer = 8.8.8.8,8.8.4.4 =>.Google DNS Redirections
O17 - HKLM\System\CS1\Services\Tcpip\..\{A66531F7-76D3-47AC-9BF5-13850EF826BD}: NameServer = 8.8.8.8,8.8.4.4 =>.Google DNS Redirections
O17 - HKLM\System\CS2\Services\Tcpip\..\{A66531F7-76D3-47AC-9BF5-13850EF826BD}: NameServer = 8.8.8.8,8.8.4.4 =>.Google DNS Redirections
~ Domain: Scanned in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s
---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s
---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) - C:\Program Files\Realtek\Audio\HDA\AERTSrv.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc
O23 - Service: HP SI Service (HPSIService) . (.HP - HP Smart-Install Service.) - C:\Windows\system32\HPSIsvc.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: (vToolbarUpdater18.1.9) . (.AVG Secure Search - ToolbarU Application.) - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe =>Toolbar.AVGSearch
~ Services: 9 Scanned in 00mn 07s
---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s
---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
[MD5.3E04F1E482357B1FC8B088197C3D9FF8] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152]
[MD5.080255CDCB878813B481B8C348D47D8E] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [267440]
[MD5.4BB7714617D50D77FCDA6B0182FD8A9A] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [857888]
[MD5.00000000000000000000000000000000] [APT] [AVG-Secure-Search-Update_JUNE2013_HP_rmv] (...) -- C:\Windows\TEMP\{D0A10669-1052-447B-8956-630D99D5A751}.exe (.not file.) [0] =>Toolbar.AVGSearch
[MD5.00000000000000000000000000000000] [APT] [AVG-Secure-Search-Update_JUNE2013_TB_rmv] (...) -- C:\Windows\TEMP\{EA74D8CD-24C5-415E-A4AD-D497FCF6001A}.exe (.not file.) [0] =>Toolbar.AVGSearch
[MD5.A5062EA164067050F2DFA9DCA98CA63A] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [3157856]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskUserS-1-5-21-1569152444-3501731407-3087061060-1000Core] (.Google Inc..) -- C:\Users\admin\AppData\Local\Google\Update\GoogleUpdate.exe [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskUserS-1-5-21-1569152444-3501731407-3087061060-1000UA] (.Google Inc..) -- C:\Users\admin\AppData\Local\Google\Update\GoogleUpdate.exe [116648]
[MD5.D4AE5DE33F12D758B6E70433504D9082] [APT] [ROC_JAN2013_TB_rmv] (...) -- C:\Program Files\AVG Secure Search\PostInstall\ROC.exe [1197648] =>Toolbar.AVGSearch
[MD5.00000000000000000000000000000000] [APT] [{925A6D00-E8C4-46D5-9EDB-56FEB773D71A}] (...) -- C:\Users\admin\Local Settings\Application Data\Bundled software uninstaller\biclient.exe (.not file.) [0] =>Adware.MegaSearch
[MD5.F9CD2609E809E0DE9F3A462DB602A239] [APT] [{A42C3EFC-1F50-4CEF-803C-3B8C796BEABD}] (...) -- C:\yakdhane\install_remote_20080627_2.exe [3841382]
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [561984]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
O39 - APT: AVG-Secure-Search-Update_JUNE2013_HP_rmv - (...) -- C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job [352] =>Toolbar.AVGSearch
O39 - APT: AVG-Secure-Search-Update_JUNE2013_HP_rmv - (...) -- C:\Windows\System32\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv [352] =>Toolbar.AVGSearch
O39 - APT: AVG-Secure-Search-Update_JUNE2013_TB_rmv - (...) -- C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job [352] =>Toolbar.AVGSearch
O39 - APT: AVG-Secure-Search-Update_JUNE2013_TB_rmv - (...) -- C:\Windows\System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv [352] =>Toolbar.AVGSearch
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1054]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1054]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1058]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1058]
O39 - APT: GoogleUpdateTaskUserS-1-5-21-1569152444-3501731407-3087061060-1000Core - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1569152444-3501731407-3087061060-1000Core.job [1026]
O39 - APT: GoogleUpdateTaskUserS-1-5-21-1569152444-3501731407-3087061060-1000Core - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1569152444-3501731407-3087061060-1000Core [1026]
O39 - APT: GoogleUpdateTaskUserS-1-5-21-1569152444-3501731407-3087061060-1000UA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1569152444-3501731407-3087061060-1000UA.job [1078]
O39 - APT: GoogleUpdateTaskUserS-1-5-21-1569152444-3501731407-3087061060-1000UA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1569152444-3501731407-3087061060-1000UA [1078]
O39 - APT: ROC_JAN2013_TB_rmv - (...) -- C:\Windows\Tasks\ROC_JAN2013_TB_rmv.job [344]
O39 - APT: ROC_JAN2013_TB_rmv - (...) -- C:\Windows\System32\Tasks\ROC_JAN2013_TB_rmv [344]
~ Scheduled Task: 28 Scanned in 00mn 03s
---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 12.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Internet Explorer - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe =>.Microsoft Corporation
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Active Setup: 10 Scanned in 00mn 00s
---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\drivers\aswRdr2.sys
O41 - Driver: (aswSnx) . (.AVAST Software - avast! Virtualization Driver.) - C:\Windows\system32\drivers\aswSnx.sys
O41 - Driver: (aswSP) . (.AVAST Software - avast! self protection module.) - C:\Windows\system32\drivers\aswSP.sys
O41 - Driver: (avgtp) . (.AVG Technologies - Pas de description.) - C:\Windows\system32\drivers\avgtpx86.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (kl1) . (.Kaspersky Lab - Kaspersky Unified Driver.) - C:\Windows\System32\DRIVERS\kl1.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\System32\DRIVERS\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Drivers: 78 Scanned in 00mn 00s
---\\ Logiciels installés (O42)
O42 - Logiciel: AVG Security Toolbar - (.AVG Technologies.) [HKLM] -- AVG Secure Search =>Toolbar.AVGSearch
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {A0087DDE-69D0-11E2-AD57-43CA6188709B}
O42 - Logiciel: Adobe Download Assistant - (.Adobe Systems Incorporated.) [HKLM] -- com.adobe.downloadassistant.AdobeDownloadAssistant
O42 - Logiciel: Adobe Download Assistant - (.Adobe Systems Incorporated.) [HKLM] -- {E15BC10F-04AA-0AFD-A6C9-476730195F8B}
O42 - Logiciel: Adobe Flash Player 16 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 16 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI
O42 - Logiciel: Adobe Reader XI (11.0.10) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-0804-1033-1959-001802114130}
O42 - Logiciel: AnyBizSoft PDF to Excel (Build 2.0.0) - (.AnyBizSoft Software.) [HKLM] -- {9381506B-AAB3-45DF-BC6C-33D3BDF36876}_is1
O42 - Logiciel: AnyBizSoft PDF to Word (Build 3.0.0) - (.AnyBizSoft Software.) [HKLM] -- {44A69352-33DD-405E-ADB8-2D768643BBAE}_is1
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {46F044A5-CE8B-4196-984E-5BD6525E361D}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {0592EF96-69D8-4E4B-9CC9-88F58EA86F01}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} =>.Apple Inc
O42 - Logiciel: Archiveur WinRAR - (...) [HKLM] -- WinRAR archiver
O42 - Logiciel: Atheros Driver Installation Program - (.Atheros.) [HKLM] -- {C3A32068-8AB1-4327-BB16-BED9C6219DC7}
O42 - Logiciel: Avast Free Antivirus - (.AVAST Software.) [HKLM] -- Avast
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {79155F2B-9895-49D7-8612-D92580E0DE5B}
O42 - Logiciel: Brother MFL-Pro Suite DCP-195C - (.Brother Industries, Ltd..) [HKLM] -- {6BF66AED-3EA4-4106-B240-5CE96C9B76B0}
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM] -- {64BF0187-F3D2-498B-99EA-163AF9AE6EC9}
O42 - Logiciel: Cisco LEAP Module - (.Cisco Systems, Inc..) [HKLM] -- {51C7AD07-C3F6-4635-8E8A-231306D810FE}
O42 - Logiciel: Cisco PEAP Module - (.Cisco Systems, Inc..) [HKLM] -- {ED5776D5-59B4-46B7-AF81-5F2D94D7C640}
O42 - Logiciel: Complément Messenger - (.Microsoft Corporation.) [HKLM] -- {6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}
O42 - Logiciel: Converter Pro - (...) [HKLM] -- ST6UNST #1
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKCU] -- Dropbox
O42 - Logiciel: Free Video Converter V 3.2 - (.Koyote Soft.) [HKLM] -- Free Video Converter_is1
O42 - Logiciel: Freez FLV to AVI/MPEG/WMV Converter - (.www.smallvideosoft.com.) [HKLM] -- Freez FLV to AVI/MPEG/WMV Converter 1.5_is1
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU] -- Google Chrome
O42 - Logiciel: Google Talk Plugin - (.Google.) [HKLM] -- {C77CC230-7417-3F01-B70D-52583DC9FEC9}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: HP LaserJet Professional P1100-P1560-P1600 Series - (...) [HKLM] -- HP LaserJet Professional P1100-P1560-P1600 Series
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: MSVC90_x86 - (.Nokia.) [HKLM] -- {AF111648-99A1-453E-81DD-80DBBF6DAD0D}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Malwarebytes Anti-Malware version 2.0.4.1028 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: MediaConverter 1.3.2 - (.SoMud.) [HKLM] -- MediaConverter
O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft SkyDrive - (.Microsoft Corporation.) [HKCU] -- SkyDriveSetup.exe =>.Microsoft Corporation
O42 - Logiciel: Mozilla Firefox 35.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 35.0.1 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
O42 - Logiciel: Nero 8 Lite 8.3.6.0 - (.Updatepack.nl.) [HKLM] -- Nero8Lite_is1
O42 - Logiciel: Nokia Connectivity Cable Driver - (.Nokia.) [HKLM] -- {29373274-977E-413C-A4DE-DC0F8E80C429}
O42 - Logiciel: Nokia PC Suite - (.Nokia.) [HKLM] -- Nokia PC Suite
O42 - Logiciel: Nokia PC Suite - (.Nokia.) [HKLM] -- {866C4563-ED53-43F3-A29D-8BEE2BD1BA3C}
O42 - Logiciel: Optims.Visual Generation - (.OPTIMS GROUP.) [HKLM] -- Optims
O42 - Logiciel: PC Connectivity Solution - (.Nokia.) [HKLM] -- {644F4910-E812-49AD-93EC-86828CB81A0D}
O42 - Logiciel: PDFCreator - (.pdfforge.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}
O42 - Logiciel: Package de pilotes Windows - Nokia Modem (02/25/2011 4.7) - (.Nokia.) [HKLM] -- E0AC723A3DE3A04256288CADBBB011B112AED454
O42 - Logiciel: Package de pilotes Windows - Nokia Modem (02/25/2011 7.01.0.9) - (.Nokia.) [HKLM] -- 72A50F48CC5601190B9C4E74D81161693133E7F7
O42 - Logiciel: Package de pilotes Windows - Nokia pccsmcfd "LegacyDriver" (05/31/2012 7.1 - (.Nokia.) [HKLM] -- 17D063A0A9F5D5A225B76B1D9BCB5ADBE85C8382
O42 - Logiciel: Paint.NET v3.5.10 - (.dotPDN LLC.) [HKLM] -- {529125EF-E3AC-4B74-97E6-F688A7C0F1BF}
O42 - Logiciel: PaperPort Image Printer - (.Nuance Communications, Inc..) [HKLM] -- {2BC2781A-F7F6-452E-95EB-018A522F1B2C}
O42 - Logiciel: QuickShare - (.Linkury Inc..) [HKLM] -- {F7D739D1-B597-4802-A4CB-E1FBF326C9B0} =>PUP.QuickShare
O42 - Logiciel: QuickTime 7 - (.Apple Inc..) [HKLM] -- {3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Skype Click to Call - (.Skype Technologies S.A..) [HKLM] -- {B6CF2967-C81E-40C0-9815-C05774FEF120}
O42 - Logiciel: Skype(TM) 6.14 - (.Skype Technologies S.A..) [HKLM] -- {7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}
O42 - Logiciel: Synaptics TouchPad Driver - (.Synaptics Incorporated.) [HKLM] -- SynTPDeinstKey
O42 - Logiciel: VLC media player 1.1.5 - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN
O42 - Logiciel: Wondershare MobileTrans ( Version 4.3.0 ) - (.Wondershare.) [HKLM] -- {18CDCEAA-A9E4-4A4C-AC0E-C15E87C30EA5}_is1
O42 - Logiciel: Xenyum Pro Surveillance System - (.DH.) [HKLM] -- {B28C9804-BFCE-4ADB-8C18-1DD9DA1C530A}
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {C197BC08-3D82-4651-8886-E68C21578A38}
~ Logic: 46 Scanned in 00mn 00s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\5e55d9dcb13ab845] =>Hijacker.Eazel
[HKCU\Software\AC3Filter]
[HKCU\Software\APN PIP]
[HKCU\Software\AVAST Software]
[HKCU\Software\AVG Secure Search] =>Toolbar.AVGSearch
[HKCU\Software\Ad-Aware Search Protection]
[HKCU\Software\Adobe]
[HKCU\Software\AnyBizSoft]
[HKCU\Software\AppDataLow\Software\SingAlong] =>Adware.Singalng
[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Avg Secure Update]
[HKCU\Software\BI]
[HKCU\Software\BabSolution] =>Hijacker.BabSolution
[HKCU\Software\Brother]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\DSS]
[HKCU\Software\Delta]
[HKCU\Software\Gabest]
[HKCU\Software\Google]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\IM Providers]
[HKCU\Software\InstalledBrowserExtensions] =>Adware.VidSaver
[HKCU\Software\Intel]
[HKCU\Software\LANGAGENT]
[HKCU\Software\LBSU]
[HKCU\Software\Licenses]
[HKCU\Software\MCAFEE]
[HKCU\Software\Macromedia]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\Marvell]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\Nokia]
[HKCU\Software\OB]
[HKCU\Software\ODBC]
[HKCU\Software\ORACLE]
[HKCU\Software\PCCleaners] =>Rogue.PCCleanerPro
[HKCU\Software\PDF Architect]
[HKCU\Software\PDFCreator]
[HKCU\Software\Paint.NET]
[HKCU\Software\PasswordLastic]
[HKCU\Software\PasswordTools]
[HKCU\Software\PerformerSoft LLC]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Realtek]
[HKCU\Software\Rixler Software]
[HKCU\Software\Safer Networking Limited]
[HKCU\Software\Skype]
[HKCU\Software\Smartbar] =>Hijacker.SmartBar
[HKCU\Software\SoMud]
[HKCU\Software\Synaptics]
[HKCU\Software\ToolbarCleaner]
[HKCU\Software\ToolbarCleaneroptions]
[HKCU\Software\Trolltech]
[HKCU\Software\UniPDF]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\VirtualDub.org]
[HKCU\Software\WPI]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Wondershare]
[HKCU\Software\Wow6432Node]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\drpsu]
[HKCU\Software\flv2avi]
[HKCU\Software\golansoft]
[HKCU\Software\kde.org]
[HKCU\Software\sshelper6]
[HKLM\Software\5e55d9dcb13ab845] =>Hijacker.Eazel
[HKLM\Software\ATI Technologies]
[HKLM\Software\AVAST Software]
[HKLM\Software\AVG Security Toolbar] =>Toolbar.AVGSearch
[HKLM\Software\Adobe]
[HKLM\Software\AdwCleaner]
[HKLM\Software\Ahead]
[HKLM\Software\AnyBizSoft]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Ashmanov & Partners]
[HKLM\Software\Atheros]
[HKLM\Software\AviSynth]
[HKLM\Software\Babylon] =>PUP.Babylon
[HKLM\Software\Brother Industries, Ltd.]
[HKLM\Software\Brother]
[HKLM\Software\BrowserChoice]
[HKLM\Software\C:]
[HKLM\Software\CBSTEST]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\DSS]
[HKLM\Software\Delta]
[HKLM\Software\EnigmaSoftwareGroup]
[HKLM\Software\GEAR Software]
[HKLM\Software\Google]
[HKLM\Software\HewlettPackard]
[HKLM\Software\IM Providers]
[HKLM\Software\InstallShield]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\Lavasoft]
[HKLM\Software\Licenses]
[HKLM\Software\Macromedia]
[HKLM\Software\Malwarebytes' Anti-Malware (Trial)]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\Marvell]
[HKLM\Software\McAfee.com]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\Nero]
[HKLM\Software\Nokia]
[HKLM\Software\Nuance]
[HKLM\Software\ODBC]
[HKLM\Software\ORACLE]
[HKLM\Software\PC Connectivity Solution]
[HKLM\Software\PCSuite]
[HKLM\Software\PDF Architect]
[HKLM\Software\PDFCreator]
[HKLM\Software\PIP]
[HKLM\Software\Paint.NET]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SRS Labs]
[HKLM\Software\Safer Networking Limited]
[HKLM\Software\ScanSoft]
[HKLM\Software\Skype]
[HKLM\Software\Sonic]
[HKLM\Software\Synaptics]
[HKLM\Software\Systweak]
[HKLM\Software\Unreal]
[HKLM\Software\VideoLAN]
[HKLM\Software\Volatile]
[HKLM\Software\WOW6432Node]
[HKLM\Software\Wondershare]
[HKLM\Software\YourFileDownloader] =>PUP.YourFileDownloader
[HKLM\Software\fCoder]
[HKLM\Software\golansoft]
[HKLM\Software\instinno]
[HKLM\Software\mcafeeupdater]
[HKLM\Software\mozilla.org]
~ Key Software: 270 Scanned in 00mn 00s
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 11/04/2013 - 11:19:55 - [] ----D C:\Program Files\Adobe
O43 - CFD: 16/04/2014 - 20:48:29 - [] ----D C:\Program Files\Adobe Download Assistant
O43 - CFD: 29/03/2013 - 20:36:00 - [] ----D C:\Program Files\Advanced Word to Pdf Converter Free
O43 - CFD: 12/06/2014 - 11:39:04 - [] ----D C:\Program Files\AnyBizSoft
O43 - CFD: 23/08/2013 - 21:01:05 - [] ----D C:\Program Files\Apple Software Update =>.Apple Inc
O43 - CFD: 05/04/2014 - 12:45:51 - [0] ----D C:\Program Files\AppsHat Mobile Apps =>PUP.CrossRider
O43 - CFD: 29/03/2014 - 20:52:09 - [] ----D C:\Program Files\Arabic Calligrapher 1.0
O43 - CFD: 17/10/2012 - 10:03:56 - [] ----D C:\Program Files\Atheros
O43 - CFD: 05/09/2013 - 13:10:50 - [] ----D C:\Program Files\Aurora
O43 - CFD: 31/01/2015 - 18:23:16 - [] ----D C:\Program Files\AVAST Software
O43 - CFD: 26/08/2014 - 11:41:36 - [] ----D C:\Program Files\AVG Secure Search =>Toolbar.AVGSearch
O43 - CFD: 27/08/2014 - 13:39:01 - [] ----D C:\Program Files\AVG Security Toolbar =>Toolbar.AVGSearch
O43 - CFD: 30/11/2012 - 20:49:21 - [] ----D C:\Program Files\AviSynth 2.5
O43 - CFD: 23/08/2013 - 21:00:29 - [] ----D C:\Program Files\Bonjour
O43 - CFD: 12/11/2013 - 19:58:30 - [] ----D C:\Program Files\Brother
O43 - CFD: 22/11/2012 - 13:22:04 - [] ----D C:\Program Files\CCleaner
O43 - CFD: 17/10/2012 - 10:03:32 - [] ----D C:\Program Files\Cisco
O43 - CFD: 15/05/2014 - 09:18:20 - [] ----D C:\Program Files\Common Files
O43 - CFD: 14/12/2012 - 20:23:20 - [] ----D C:\Program Files\CONVERT
O43 - CFD: 08/10/2013 - 22:22:49 - [] ----D C:\Program Files\Delta
O43 - CFD: 22/09/2013 - 22:18:17 - [] ----D C:\Program Files\DIFX
O43 - CFD: 19/10/2012 - 14:40:57 - [] ----D C:\Program Files\DVD Maker
O43 - CFD: 01/12/2012 - 11:26:47 - [] ----D C:\Program Files\Enigma Software Group
O43 - CFD: 29/03/2013 - 22:11:56 - [0] ----D C:\Program Files\eRightSoft
O43 - CFD: 17/10/2012 - 09:39:06 - [] -SH-D C:\Program Files\Fichiers communs
O43 - CFD: 30/11/2012 - 13:31:47 - [] ----D C:\Program Files\Free FLV Converter
O43 - CFD: 10/01/2015 - 15:17:15 - [] ----D C:\Program Files\Free Video Converter
O43 - CFD: 16/04/2014 - 20:53:41 - [] ----D C:\Program Files\Google
O43 - CFD: 15/10/2013 - 04:48:02 - [] ----D C:\Program Files\GUM6BCA.tmp
O43 - CFD: 17/10/2012 - 09:49:36 - [] ----D C:\Program Files\Hewlett-Packard
O43 - CFD: 19/10/2012 - 10:16:39 - [] ----D C:\Program Files\Hotix Tunisie
O43 - CFD: 13/11/2012 - 13:15:16 - [] ----D C:\Program Files\HP
O43 - CFD: 29/03/2013 - 22:10:40 - [] ----D C:\Program Files\Iminent =>Adware.IMBooster
O43 - CFD: 27/11/2014 - 19:32:00 - [] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 17/10/2012 - 09:47:20 - [] ----D C:\Program Files\Intel
O43 - CFD: 17/12/2014 - 07:47:50 - [] ----D C:\Program Files\Internet Explorer
O43 - CFD: 08/11/2013 - 18:34:54 - [] ----D C:\Program Files\iPod
O43 - CFD: 08/11/2013 - 18:35:10 - [] ----D C:\Program Files\iTunes
O43 - CFD: 29/03/2013 - 22:09:34 - [0] ----D C:\Program Files\KaraFun Player
O43 - CFD: 21/03/2014 - 10:10:23 - [] ----D C:\Program Files\Kaspersky Lab
O43 - CFD: 04/02/2015 - 13:36:13 - [] ----D C:\Program Files\Malwarebytes Anti-Malware
O43 - CFD: 30/11/2012 - 13:25:36 - [] ----D C:\Program Files\MediaConverter
O43 - CFD: 11/10/2013 - 13:34:15 - [0] ----D C:\Program Files\Microsoft
O43 - CFD: 25/10/2012 - 09:40:18 - [] ----D C:\Program Files\Microsoft Office
O43 - CFD: 29/07/2014 - 10:52:43 - [] ----D C:\Program Files\Microsoft Silverlight
O43 - CFD: 30/11/2012 - 12:25:55 - [] ----D C:\Program Files\Microsoft SkyDrive =>.Microsoft Corporation
O43 - CFD: 30/11/2012 - 12:44:45 - [] ----D C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 17/10/2012 - 10:25:38 - [] ----D C:\Program Files\Microsoft Visual Studio
O43 - CFD: 17/10/2012 - 10:20:52 - [] ----D C:\Program Files\Microsoft Visual Studio 8
O43 - CFD: 23/10/2012 - 08:16:03 - [] ----D C:\Program Files\Microsoft Works
O43 - CFD: 30/11/2012 - 12:33:34 - [] ----D C:\Program Files\Microsoft.NET
O43 - CFD: 30/11/2012 - 16:42:12 - [] ----D C:\Program Files\Movie Maker 2.6
O43 - CFD: 30/01/2015 - 12:59:19 - [] ----D C:\Program Files\Mozilla Firefox
O43 - CFD: 30/01/2015 - 13:03:32 - [] ----D C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 17/10/2012 - 10:25:44 - [] ----D C:\Program Files\MSBuild
O43 - CFD: 17/10/2012 - 09:59:38 - [] ----D C:\Program Files\MSECache
O43 - CFD: 17/11/2013 - 09:29:03 - [0] ----D C:\Program Files\MSXML 4.0
O43 - CFD: 17/10/2012 - 10:00:38 - [] ----D C:\Program Files\Nero
O43 - CFD: 23/09/2013 - 22:01:41 - [] ----D C:\Program Files\Nokia
O43 - CFD: 12/11/2013 - 19:57:09 - [] ----D C:\Program Files\Nuance
O43 - CFD: 23/01/2013 - 11:29:48 - [] ----D C:\Program Files\Paint.NET
O43 - CFD: 31/10/2012 - 00:26:33 - [0] ----D C:\Program Files\PasswordLastic
O43 - CFD: 30/11/2012 - 16:01:43 - [] ----D C:\Program Files\pazera-software
O43 - CFD: 22/09/2013 - 22:17:37 - [] ----D C:\Program Files\PC Connectivity Solution
O43 - CFD: 11/04/2013 - 11:39:21 - [] ----D C:\Program Files\PDFCreator
O43 - CFD: 16/12/2014 - 15:01:03 - [] ----D C:\Program Files\QuickTime
O43 - CFD: 17/10/2012 - 09:45:59 - [] ----D C:\Program Files\Realtek
O43 - CFD: 14/07/2009 - 05:52:30 - [] ----D C:\Program Files\Reference Assemblies
O43 - CFD: 01/12/2014 - 16:46:29 - [] ----D C:\Program Files\remoteAP
O43 - CFD: 10/03/2014 - 09:56:36 - [] R---D C:\Program Files\Skype
O43 - CFD: 30/11/2012 - 15:34:56 - [] ----D C:\Program Files\Smallvideosoft
O43 - CFD: 29/03/2013 - 22:20:54 - [] ----D C:\Program Files\Spybot - Search & Destroy
O43 - CFD: 17/10/2012 - 09:48:55 - [] ----D C:\Program Files\Synaptics
O43 - CFD: 14/07/2009 - 05:53:23 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 17/10/2012 - 09:45:44 - [] ----D C:\Program Files\VideoLAN
O43 - CFD: 12/07/2013 - 08:40:32 - [] ----D C:\Program Files\Windows Defender
O43 - CFD: 10/07/2014 - 10:02:55 - [] ----D C:\Program Files\Windows Journal
O43 - CFD: 29/03/2013 - 22:10:38 - [] ----D C:\Program Files\Windows Live
O43 - CFD: 19/10/2012 - 14:41:25 - [] ----D C:\Program Files\Windows Mail =>.Microsoft Corporation
O43 - CFD: 19/10/2012 - 14:41:25 - [] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 17/10/2012 - 09:39:06 - [] ----D C:\Program Files\Windows NT
O43 - CFD: 19/10/2012 - 14:41:25 - [] ----D C:\Program Files\Windows Photo Viewer
O43 - CFD: 20/11/2010 - 22:33:48 - [] ----D C:\Program Files\Windows Portable Devices
O43 - CFD: 19/10/2012 - 14:41:26 - [] ----D C:\Program Files\Windows Sidebar
O43 - CFD: 17/10/2012 - 10:00:51 - [] ----D C:\Program Files\WinRAR
O43 - CFD: 16/05/2014 - 17:26:07 - [] ----D C:\Program Files\Wondershare
O43 - CFD: 31/10/2014 - 13:37:17 - [] ----D C:\Program Files\Xenyum Pro Surveillance System
O43 - CFD: 07/02/2015 - 16:39:27 - [] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 27/10/2012 - 16:07:14 - [] ----D C:\Program Files\Common Files\Adobe
O43 - CFD: 11/04/2013 - 11:19:55 - [] ----D C:\Program Files\Common Files\Adobe AIR
O43 - CFD: 08/11/2013 - 18:34:54 - [] ----D C:\Program Files\Common Files\Apple
O43 - CFD: 09/12/2013 - 09:41:32 - [] ----D C:\Program Files\Common Files\AVG Secure Search =>Toolbar.AVGSearch
O43 - CFD: 15/05/2014 - 09:18:20 - [] ----D C:\Program Files\Common Files\DESIGNER
O43 - CFD: 27/11/2014 - 19:32:23 - [] ----D C:\Program Files\Common Files\InstallShield
O43 - CFD: 17/10/2012 - 09:47:21 - [] ----D C:\Program Files\Common Files\Intel
O43 - CFD: 29/03/2013 - 21:39:01 - [] ----D C:\Program Files\Common Files\microsoft shared
O43 - CFD: 17/10/2012 - 10:00:28 - [] ----D C:\Program Files\Common Files\Nero
O43 - CFD: 22/09/2013 - 22:17:57 - [] ----D C:\Program Files\Common Files\Nokia
O43 - CFD: 22/09/2013 - 22:17:57 - [] ----D C:\Program Files\Common Files\PCSuite
O43 - CFD: 14/07/2009 - 03:37:05 - [] ----D C:\Program Files\Common Files\Services
O43 - CFD: 10/03/2014 - 09:56:36 - [] ----D C:\Program Files\Common Files\Skype
O43 - CFD: 14/07/2009 - 03:37:05 - [] ----D C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 25/10/2012 - 09:40:38 - [] ----D C:\Program Files\Common Files\System
O43 - CFD: 17/10/2012 - 09:47:24 - [] ----D C:\Program Files\Common Files\Windows Live
O43 - CFD: 01/12/2012 - 11:25:51 - [] ----D C:\Program Files\Common Files\Wise Installation Wizard
O43 - CFD: 22/09/2013 - 22:47:14 - [] ----D C:\Program Files\Common Files\Wondershare
O43 - CFD: 08/11/2013 - 18:35:10 - [] ----D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
O43 - CFD: 11/04/2013 - 11:19:58 - [] ----D C:\ProgramData\Adobe
O43 - CFD: 23/08/2013 - 21:01:03 - [] ----D C:\ProgramData\Apple
O43 - CFD: 23/08/2013 - 21:01:37 - [] ----D C:\ProgramData\Apple Computer
O43 - CFD: 14/07/2009 - 05:53:55 - [] -SH-D C:\ProgramData\Application Data
O43 - CFD: 17/10/2012 - 10:03:54 - [] ----D C:\ProgramData\Atheros
O43 - CFD: 31/01/2015 - 18:23:16 - [] ----D C:\ProgramData\AVAST Software
O43 - CFD: 12/08/2014 - 12:30:13 - [] ----D C:\ProgramData\AVG Secure Search =>Toolbar.AVGSearch
O43 - CFD: 27/08/2014 - 13:38:46 - [] ----D C:\ProgramData\Avg_Update_0814tb
O43 - CFD: 23/01/2013 - 11:28:02 - [0] ----D C:\ProgramData\Babylon =>PUP.Babylon
O43 - CFD: 12/11/2013 - 19:44:07 - [] ----D C:\ProgramData\Brother
O43 - CFD: 17/10/2012 - 09:39:06 - [] -SH-D C:\ProgramData\Bureau
O43 - CFD: 17/10/2012 - 10:34:41 - [] --H-D C:\ProgramData\Common Files
O43 - CFD: 14/07/2009 - 05:53:55 - [] -SH-D C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 05:53:55 - [] -SH-D C:\ProgramData\Documents
O43 - CFD: 29/03/2013 - 21:38:41 - [] ----D C:\ProgramData\Downloaded Installations
O43 - CFD: 17/10/2012 - 09:39:06 - [] -SH-D C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - 05:53:55 - [] -SH-D C:\ProgramData\Favorites
O43 - CFD: 11/04/2014 - 22:14:39 - [] ----D C:\ProgramData\Google
O43 - CFD: 22/09/2013 - 22:16:34 - [] ----D C:\ProgramData\Installations
O43 - CFD: 12/11/2013 - 19:56:42 - [] ----D C:\ProgramData\InstallShield
O43 - CFD: 04/02/2015 - 13:36:12 - [0] ----D C:\ProgramData\Kaspersky Lab
O43 - CFD: 08/07/2014 - 11:35:45 - [] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 16/12/2014 - 15:08:35 - [] ----D C:\ProgramData\McAfee
O43 - CFD: 17/10/2012 - 09:39:06 - [] -SH-D C:\ProgramData\Menu Démarrer
O43 - CFD: 21/03/2014 - 10:07:35 - [] ----D C:\ProgramData\MFAData
O43 - CFD: 11/10/2013 - 13:34:15 - [] -S--D C:\ProgramData\Microsoft
O43 - CFD: 16/12/2014 - 08:53:18 - [] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 30/11/2012 - 12:25:38 - [] ----D C:\ProgramData\Microsoft SkyDrive =>.Microsoft Corporation
O43 - CFD: 17/10/2012 - 09:39:06 - [] -SH-D C:\ProgramData\Modèles
O43 - CFD: 19/10/2012 - 11:41:36 - [] ----D C:\ProgramData\Mozilla
O43 - CFD: 17/10/2012 - 10:00:24 - [] ----D C:\ProgramData\Nero
O43 - CFD: 22/09/2013 - 22:23:56 - [] ----D C:\ProgramData\PC Suite
O43 - CFD: 01/12/2012 - 18:29:52 - [] ----D C:\ProgramData\PC1Data
O43 - CFD: 05/12/2013 - 16:20:27 - [] ----D C:\ProgramData\PDF Architect
O43 - CFD: 16/01/2014 - 14:51:43 - [0] ----D C:\ProgramData\Search Protection =>PUP.SearchProtect
O43 - CFD: 10/03/2014 - 09:56:40 - [] ----D C:\ProgramData\Skype
O43 - CFD: 29/03/2013 - 22:20:54 - [] ----D C:\ProgramData\Spybot - Search & Destroy
O43 - CFD: 14/07/2009 - 05:53:55 - [] -SH-D C:\ProgramData\Start Menu
O43 - CFD: 17/10/2012 - 10:32:25 - [] ----D C:\ProgramData\Synaptics
O43 - CFD: 08/10/2013 - 22:28:32 - [0] ----D C:\ProgramData\TEMP
O43 - CFD: 14/07/2009 - 05:53:55 - [] -SH-D C:\ProgramData\Templates
O43 - CFD: 17/10/2012 - 09:36:11 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 17/10/2012 - 09:36:17 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 12/06/2014 - 11:39:06 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnyBizSoft
O43 - CFD: 31/01/2015 - 20:40:56 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
O43 - CFD: 12/11/2013 - 19:58:42 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
O43 - CFD: 14/12/2012 - 20:23:20 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Converter Pro
O43 - CFD: 20/05/2014 - 13:52:26 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Video Converter
O43 - CFD: 30/11/2012 - 15:34:56 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freez software
O43 - CFD: 21/11/2010 - 01:47:30 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 13/11/2012 - 13:18:56 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
O43 - CFD: 03/01/2014 - 18:28:03 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
O43 - CFD: 08/11/2013 - 18:35:16 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
O43 - CFD: 14/07/2009 - 05:42:30 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 04/02/2015 - 13:13:46 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
O43 - CFD: 30/11/2012 - 13:25:36 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MediaConverter
O43 - CFD: 13/09/2013 - 23:43:34 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 26/07/2014 - 23:22:34 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 17/10/2012 - 10:00:32 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
O43 - CFD: 22/09/2013 - 22:17:58 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia PC Suite
O43 - CFD: 11/04/2013 - 11:38:09 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
O43 - CFD: 16/12/2014 - 15:00:45 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
O43 - CFD: 10/03/2014 - 09:56:37 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 07/02/2015 - 15:41:25 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 21/11/2010 - 01:47:05 - [0] R-H-D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 12/06/2014 - 11:19:28 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UniPDF
O43 - CFD: 17/10/2012 - 09:45:55 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 30/11/2012 - 12:53:58 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
O43 - CFD: 17/10/2012 - 10:00:51 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 16/05/2014 - 17:26:09 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
O43 - CFD: 07/02/2015 - 16:39:27 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP =>.Nicolas Coolman
O43 - CFD: 30/09/2014 - 18:53:22 - [] ----D C:\Users\admin\AppData\Roaming\Adobe
O43 - CFD: 08/10/2014 - 19:37:18 - [] ----D C:\Users\admin\AppData\Roaming\Apple Computer
O43 - CFD: 31/01/2015 - 21:32:25 - [] ----D C:\Users\admin\AppData\Roaming\AVAST Software
O43 - CFD: 15/11/2013 - 10:14:06 - [] R---D C:\Users\admin\AppData\Roaming\Brother
O43 - CFD: 11/04/2013 - 11:19:59 - [] ----D C:\Users\admin\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
O43 - CFD: 20/05/2014 - 13:55:31 - [] ----D C:\Users\admin\AppData\Roaming\convertaudiofree
O43 - CFD: 02/02/2015 - 09:37:43 - [] ----D C:\Users\admin\AppData\Roaming\Dropbox
O43 - CFD: 30/11/2012 - 13:15:00 - [] ----D C:\Users\admin\AppData\Roaming\FreeFLVConverter
O43 - CFD: 31/01/2015 - 12:21:11 - [] ----D C:\Users\admin\AppData\Roaming\FreeVideoConverter
O43 - CFD: 17/10/2012 - 09:49:47 - [0] ----D C:\Users\admin\AppData\Roaming\Hewlett-Packard
O43 - CFD: 17/10/2012 - 09:49:35 - [] ----D C:\Users\admin\AppData\Roaming\hpqLog
O43 - CFD: 17/10/2012 - 09:39:58 - [] ----D C:\Users\admin\AppData\Roaming\Identities
O43 - CFD: 12/11/2013 - 19:57:46 - [] ----D C:\Users\admin\AppData\Roaming\InstallShield
O43 - CFD: 29/03/2013 - 21:45:24 - [] ----D C:\Users\admin\AppData\Roaming\LavasoftStatistics
O43 - CFD: 19/10/2012 - 10:42:50 - [] ----D C:\Users\admin\AppData\Roaming\Macromedia
O43 - CFD: 08/07/2014 - 11:35:55 - [0] ----D C:\Users\admin\AppData\Roaming\Malwarebytes
O43 - CFD: 21/11/2010 - 01:47:05 - [0] ----D C:\Users\admin\AppData\Roaming\Media Center Programs
O43 - CFD: 17/12/2014 - 17:19:56 - [] -S--D C:\Users\admin\AppData\Roaming\Microsoft
O43 - CFD: 23/08/2013 - 13:53:32 - [] ----D C:\Users\admin\AppData\Roaming\MixVibes
O43 - CFD: 30/01/2015 - 09:55:49 - [] ----D C:\Users\admin\AppData\Roaming\Mozilla
O43 - CFD: 25/11/2014 - 10:37:22 - [] ----D C:\User
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
lilidurhone
Messages postés
43343
Date d'inscription
lundi 25 avril 2011
Statut
Contributeur sécurité
Dernière intervention
19 juillet 2024
3 807
7 févr. 2015 à 17:12
7 févr. 2015 à 17:12
ça donne que tu as des adwares
Tu as dû installer des logiciels potentiellement indésirables
Pour éviter ce genre de problème :
- Ne télécharge aucun programme proposé dans des publicités ou sur des sites suspects. A noter que certains sites connus comme Softronic, Tuto4PC, etc modifient parfois les programmes proposés au téléchargement pour y ajouter des logiciels publicitaires ==> Préfère toujours le téléchargement directement sur le site de l'éditeur.
- Au cours de l'installation d'un programme gratuit, lis bien attentivement et décoche tous les programmes additionnels qui sont proposés, en particulier les barres d'outils.
Pour ton information lis ces dossier sur les Programmes Potentiellement Indésirables et Les Barres d'Outils ce n'est pas obligatoires
* Télécharge cet outil simple d'utilisation
https://toolslib.net/downloads/viewdownload/1-adwcleaner/
* Si problème avec le 1er lien prends le ici https://www.commentcamarche.net/telecharger/securite/2759-adwcleaner/
* Lance le (Sous vista/seven/8 clic droit dessus,et sur exécuter en tant qu'administrateur)si tu es sous xp double cliques dessus
* Cliques sur scanner
* Poste le rapport de recherche C:\Adwcleaner[R]
* Note le rapport de recherche est également sauvegardé sous C:\Adwcleaner[R1]
* Héberge le rapport sur cjoint
* Pour t'aider https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers
Tu as dû installer des logiciels potentiellement indésirables
Pour éviter ce genre de problème :
- Ne télécharge aucun programme proposé dans des publicités ou sur des sites suspects. A noter que certains sites connus comme Softronic, Tuto4PC, etc modifient parfois les programmes proposés au téléchargement pour y ajouter des logiciels publicitaires ==> Préfère toujours le téléchargement directement sur le site de l'éditeur.
- Au cours de l'installation d'un programme gratuit, lis bien attentivement et décoche tous les programmes additionnels qui sont proposés, en particulier les barres d'outils.
Pour ton information lis ces dossier sur les Programmes Potentiellement Indésirables et Les Barres d'Outils ce n'est pas obligatoires
* Télécharge cet outil simple d'utilisation
https://toolslib.net/downloads/viewdownload/1-adwcleaner/
* Si problème avec le 1er lien prends le ici https://www.commentcamarche.net/telecharger/securite/2759-adwcleaner/
* Lance le (Sous vista/seven/8 clic droit dessus,et sur exécuter en tant qu'administrateur)si tu es sous xp double cliques dessus
* Cliques sur scanner
* Poste le rapport de recherche C:\Adwcleaner[R]
* Note le rapport de recherche est également sauvegardé sous C:\Adwcleaner[R1]
* Héberge le rapport sur cjoint
* Pour t'aider https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers
et voila le rapport:
# AdwCleaner v4.110 - Rapport créé le 07/02/2015 à 17:16:20
# Mis à jour le 05/02/2015 par Xplode
# Base de données : 2015-02-05.2 [Serveur]
# Système d'exploitation : Windows 7 Professional Service Pack 1 (x86)
# Nom d'utilisateur : admin - ADMIN-PC
# Exécuté depuis : C:\Users\admin\Downloads\adwcleaner_4.110.exe
# Option : Scanner
***** [ Services ] *****
Service Trouvé : vToolbarUpdater18.1.9
***** [ Fichiers / Dossiers ] *****
Dossier Trouvé : C:\Program Files\AppsHat Mobile Apps
Dossier Trouvé : C:\Program Files\AVG Secure Search
Dossier Trouvé : C:\Program Files\AVG Security Toolbar
Dossier Trouvé : C:\Program Files\Common Files\AVG Secure Search
Dossier Trouvé : C:\Program Files\Delta
Dossier Trouvé : C:\Program Files\Free Video Converter
Dossier Trouvé : C:\Program Files\Iminent
Dossier Trouvé : C:\ProgramData\AVG Secure Search
Dossier Trouvé : C:\ProgramData\Babylon
Dossier Trouvé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Video Converter
Dossier Trouvé : C:\ProgramData\Search Protection
Dossier Trouvé : C:\Users\admin\AppData\Local\AVG Secure Search
Dossier Trouvé : C:\Users\admin\AppData\Local\Bundled software uninstaller
Dossier Trouvé : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpcknfcdcgpffjddjeceioobdelceffo
Dossier Trouvé : C:\Users\admin\AppData\Local\Mobogenie
Dossier Trouvé : C:\Users\admin\AppData\LocalLow\AVG Secure Search
Dossier Trouvé : C:\Users\admin\AppData\LocalLow\Delta
Dossier Trouvé : C:\Users\admin\AppData\LocalLow\Minibar
Dossier Trouvé : C:\Users\admin\AppData\LocalLow\Softonic
Dossier Trouvé : C:\Users\admin\AppData\Roaming\pdfforge
Dossier Trouvé : C:\Users\admin\AppData\Roaming\PerformerSoft
Dossier Trouvé : C:\Users\admin\AppData\Roaming\Solvusoft
Dossier Trouvé : C:\Users\admin\AppData\Roaming\Systweak
Dossier Trouvé : C:\Users\admin\AppData\Roaming\YourFileDownloader
Dossier Trouvé : C:\Users\admin\Documents\Mobogenie
Fichier Trouvé : C:\Program Files\Mozilla Firefox\browser\searchplugins\Ask.xml
Fichier Trouvé : C:\Program Files\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml
Fichier Trouvé : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\admin\user.js
Fichier Trouvé : C:\Users\admin\daemonprocess.txt
Fichier Trouvé : C:\Users\admin\Desktop\AppsHat.lnk
Fichier Trouvé : C:\Windows\system32\roboot.exe
***** [ Tâches planifiées ] *****
Tâche Trouvée : EPUpdater
Tâche Trouvée : YourFile DownloaderUpdate
***** [ Raccourcis ] *****
***** [ Registre ] *****
Clé Trouvée : HKCU\Software\5e55d9dcb13ab845
Clé Trouvée : HKCU\Software\APN PIP
Clé Trouvée : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clé Trouvée : HKCU\Software\AVG Secure Search
Clé Trouvée : HKCU\Software\BABSOLUTION
Clé Trouvée : HKCU\Software\BI
Clé Trouvée : HKCU\Software\Delta
Clé Trouvée : HKCU\Software\InstalledBrowserExtensions
Clé Trouvée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}
Clé Trouvée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Clé Trouvée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2413}
Clé Trouvée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C2CEE549-E81F-427A-9B07-2D9EA6B3A62C}
Clé Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Clé Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{92780B25-18CC-41C8-B9BE-3C9C571A8263}
Clé Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Clé Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Clé Trouvée : HKCU\Software\performersoft llc
Clé Trouvée : HKCU\Software\YahooPartnerToolbar
Clé Trouvée : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clé Trouvée : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Clé Trouvée : HKLM\SOFTWARE\5e55d9dcb13ab845
Clé Trouvée : HKLM\SOFTWARE\AVG Secure Search
Clé Trouvée : HKLM\SOFTWARE\AVG Security Toolbar
Clé Trouvée : HKLM\SOFTWARE\Babylon
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\{C3110516-8EFC-49D6-8B72-69354F332062}
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\BackgroundHost.EXE
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Clé Trouvée : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Clé Trouvée : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Clé Trouvée : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Clé Trouvée : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522032201}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Clé Trouvée : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Clé Trouvée : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Clé Trouvée : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Clé Trouvée : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Clé Trouvée : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Clé Trouvée : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555035501}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566036601}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{A0207057-3461-4F7F-B689-D016B7A03964}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{A75ACCCD-3CC9-4865-8BE3-F523FDA2164F}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Clé Trouvée : HKLM\SOFTWARE\Classes\Prod.cap
Clé Trouvée : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Clé Trouvée : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Clé Trouvée : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Clé Trouvée : HKLM\SOFTWARE\Classes\S
Clé Trouvée : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Clé Trouvée : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544034401}
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Clé Trouvée : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Clé Trouvée : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Clé Trouvée : HKLM\SOFTWARE\Delta
Clé Trouvée : HKLM\SOFTWARE\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Clé Trouvée : HKLM\SOFTWARE\Google\Chrome\Extensions\lfffjahnfbocnaooecgijfnbpcfekoik
Clé Trouvée : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{92780B25-18CC-41C8-B9BE-3C9C571A8263}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{14066EE5-900D-461B-80CD-49307C016E6F}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{18D4140A-1A39-4B92-AAED-FF6819CCA719}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{67F844CC-3967-4999-8EF2-4EB264D23F9D}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C1E04818-1164-495A-AD23-15C9FC320A03}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2413}
Clé Trouvée : HKLM\SOFTWARE\microsoft\shared tools\msconfig\startupreg\mobilegeni daemon
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Toolbar Cleaner
Clé Trouvée : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Clé Trouvée : HKLM\SOFTWARE\PIP
Clé Trouvée : HKLM\SOFTWARE\systweak
Clé Trouvée : HKLM\SOFTWARE\YourFileDownloader
Donnée Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local
Valeur Trouvée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Valeur Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Valeur Trouvée : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
***** [ Navigateurs ] *****
-\\ Internet Explorer v11.0.9600.17496
-\\ Mozilla Firefox v35.0.1 (x86 fr)
-\\ Google Chrome v
[C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Web data] - Trouvée [Search Provider] : hxxp://isearch.avg.com/search?cid={02D8F36C-EE7E-42F0-8E06-D5D2ECEBEA57}&mid=34d71c4a0e4447d0857d95241177bf80-5358dc5b25c83e5241b18811cf5a9152cb552380&lang=fr&ds=AVG&pr=pr&d=2012-10-17 11:36:54&v=15.2.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms}
[C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Web data] - Trouvée [Search Provider] : hxxp://dts.search-results.com/sr?src=crb&appid=0&systemid=413&sr=0&q={searchTerms}
*************************
AdwCleaner[R0].txt - [17798 octets] - [07/02/2015 17:16:20]
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [17859 octets] ##########
# AdwCleaner v4.110 - Rapport créé le 07/02/2015 à 17:16:20
# Mis à jour le 05/02/2015 par Xplode
# Base de données : 2015-02-05.2 [Serveur]
# Système d'exploitation : Windows 7 Professional Service Pack 1 (x86)
# Nom d'utilisateur : admin - ADMIN-PC
# Exécuté depuis : C:\Users\admin\Downloads\adwcleaner_4.110.exe
# Option : Scanner
***** [ Services ] *****
Service Trouvé : vToolbarUpdater18.1.9
***** [ Fichiers / Dossiers ] *****
Dossier Trouvé : C:\Program Files\AppsHat Mobile Apps
Dossier Trouvé : C:\Program Files\AVG Secure Search
Dossier Trouvé : C:\Program Files\AVG Security Toolbar
Dossier Trouvé : C:\Program Files\Common Files\AVG Secure Search
Dossier Trouvé : C:\Program Files\Delta
Dossier Trouvé : C:\Program Files\Free Video Converter
Dossier Trouvé : C:\Program Files\Iminent
Dossier Trouvé : C:\ProgramData\AVG Secure Search
Dossier Trouvé : C:\ProgramData\Babylon
Dossier Trouvé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Video Converter
Dossier Trouvé : C:\ProgramData\Search Protection
Dossier Trouvé : C:\Users\admin\AppData\Local\AVG Secure Search
Dossier Trouvé : C:\Users\admin\AppData\Local\Bundled software uninstaller
Dossier Trouvé : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpcknfcdcgpffjddjeceioobdelceffo
Dossier Trouvé : C:\Users\admin\AppData\Local\Mobogenie
Dossier Trouvé : C:\Users\admin\AppData\LocalLow\AVG Secure Search
Dossier Trouvé : C:\Users\admin\AppData\LocalLow\Delta
Dossier Trouvé : C:\Users\admin\AppData\LocalLow\Minibar
Dossier Trouvé : C:\Users\admin\AppData\LocalLow\Softonic
Dossier Trouvé : C:\Users\admin\AppData\Roaming\pdfforge
Dossier Trouvé : C:\Users\admin\AppData\Roaming\PerformerSoft
Dossier Trouvé : C:\Users\admin\AppData\Roaming\Solvusoft
Dossier Trouvé : C:\Users\admin\AppData\Roaming\Systweak
Dossier Trouvé : C:\Users\admin\AppData\Roaming\YourFileDownloader
Dossier Trouvé : C:\Users\admin\Documents\Mobogenie
Fichier Trouvé : C:\Program Files\Mozilla Firefox\browser\searchplugins\Ask.xml
Fichier Trouvé : C:\Program Files\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml
Fichier Trouvé : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\admin\user.js
Fichier Trouvé : C:\Users\admin\daemonprocess.txt
Fichier Trouvé : C:\Users\admin\Desktop\AppsHat.lnk
Fichier Trouvé : C:\Windows\system32\roboot.exe
***** [ Tâches planifiées ] *****
Tâche Trouvée : EPUpdater
Tâche Trouvée : YourFile DownloaderUpdate
***** [ Raccourcis ] *****
***** [ Registre ] *****
Clé Trouvée : HKCU\Software\5e55d9dcb13ab845
Clé Trouvée : HKCU\Software\APN PIP
Clé Trouvée : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clé Trouvée : HKCU\Software\AVG Secure Search
Clé Trouvée : HKCU\Software\BABSOLUTION
Clé Trouvée : HKCU\Software\BI
Clé Trouvée : HKCU\Software\Delta
Clé Trouvée : HKCU\Software\InstalledBrowserExtensions
Clé Trouvée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}
Clé Trouvée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Clé Trouvée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2413}
Clé Trouvée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C2CEE549-E81F-427A-9B07-2D9EA6B3A62C}
Clé Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Clé Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{92780B25-18CC-41C8-B9BE-3C9C571A8263}
Clé Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Clé Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Clé Trouvée : HKCU\Software\performersoft llc
Clé Trouvée : HKCU\Software\YahooPartnerToolbar
Clé Trouvée : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clé Trouvée : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Clé Trouvée : HKLM\SOFTWARE\5e55d9dcb13ab845
Clé Trouvée : HKLM\SOFTWARE\AVG Secure Search
Clé Trouvée : HKLM\SOFTWARE\AVG Security Toolbar
Clé Trouvée : HKLM\SOFTWARE\Babylon
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\{C3110516-8EFC-49D6-8B72-69354F332062}
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\BackgroundHost.EXE
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Clé Trouvée : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Clé Trouvée : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Clé Trouvée : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Clé Trouvée : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522032201}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Clé Trouvée : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Clé Trouvée : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Clé Trouvée : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Clé Trouvée : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Clé Trouvée : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Clé Trouvée : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555035501}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566036601}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{A0207057-3461-4F7F-B689-D016B7A03964}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{A75ACCCD-3CC9-4865-8BE3-F523FDA2164F}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Clé Trouvée : HKLM\SOFTWARE\Classes\Prod.cap
Clé Trouvée : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Clé Trouvée : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Clé Trouvée : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Clé Trouvée : HKLM\SOFTWARE\Classes\S
Clé Trouvée : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Clé Trouvée : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544034401}
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Clé Trouvée : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Clé Trouvée : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Clé Trouvée : HKLM\SOFTWARE\Delta
Clé Trouvée : HKLM\SOFTWARE\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Clé Trouvée : HKLM\SOFTWARE\Google\Chrome\Extensions\lfffjahnfbocnaooecgijfnbpcfekoik
Clé Trouvée : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{92780B25-18CC-41C8-B9BE-3C9C571A8263}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{14066EE5-900D-461B-80CD-49307C016E6F}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{18D4140A-1A39-4B92-AAED-FF6819CCA719}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{67F844CC-3967-4999-8EF2-4EB264D23F9D}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C1E04818-1164-495A-AD23-15C9FC320A03}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2413}
Clé Trouvée : HKLM\SOFTWARE\microsoft\shared tools\msconfig\startupreg\mobilegeni daemon
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Toolbar Cleaner
Clé Trouvée : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Clé Trouvée : HKLM\SOFTWARE\PIP
Clé Trouvée : HKLM\SOFTWARE\systweak
Clé Trouvée : HKLM\SOFTWARE\YourFileDownloader
Donnée Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local
Valeur Trouvée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Valeur Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Valeur Trouvée : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
***** [ Navigateurs ] *****
-\\ Internet Explorer v11.0.9600.17496
-\\ Mozilla Firefox v35.0.1 (x86 fr)
-\\ Google Chrome v
[C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Web data] - Trouvée [Search Provider] : hxxp://isearch.avg.com/search?cid={02D8F36C-EE7E-42F0-8E06-D5D2ECEBEA57}&mid=34d71c4a0e4447d0857d95241177bf80-5358dc5b25c83e5241b18811cf5a9152cb552380&lang=fr&ds=AVG&pr=pr&d=2012-10-17 11:36:54&v=15.2.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms}
[C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Web data] - Trouvée [Search Provider] : hxxp://dts.search-results.com/sr?src=crb&appid=0&systemid=413&sr=0&q={searchTerms}
*************************
AdwCleaner[R0].txt - [17798 octets] - [07/02/2015 17:16:20]
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [17859 octets] ##########
lilidurhone
Messages postés
43343
Date d'inscription
lundi 25 avril 2011
Statut
Contributeur sécurité
Dernière intervention
19 juillet 2024
3 807
7 févr. 2015 à 17:22
7 févr. 2015 à 17:22
fais nettoyer
C bon c fait! le CPU est encore à 100% quand je démarre le programme PSS, je n'en peu plus!!!!!!!!!!!!!!!!!!!
lilidurhone
Messages postés
43343
Date d'inscription
lundi 25 avril 2011
Statut
Contributeur sécurité
Dernière intervention
19 juillet 2024
3 807
7 févr. 2015 à 17:34
7 févr. 2015 à 17:34
Refais zhpdiag en l'hébergeant