Buscar protección
Resuelto
ardechoiselyonaise
-
Malekal_morte- Mensajes publicados 178136 Fecha de registro Estado Moderador, Colaborador de seguridad Última intervención -
Malekal_morte- Mensajes publicados 178136 Fecha de registro Estado Moderador, Colaborador de seguridad Última intervención -
Hola, tengo Windows 8 en mi computadora, estoy probando y no sé qué hice, hay un search protect que me está causando problemas, gracias por su ayuda
Configuración: Windows / Chrome 40.0.2214.93
Configuración: Windows / Chrome 40.0.2214.93
4 respuestas
Hola,
Has instalado adwares y programas no deseados en tu PC.
Aquí está el procedimiento a seguir para eliminarlos:
Comienza por esto:
Sigue el tutorial de AdwCleaner https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= AdwCleaner (de Xplode)
Descarga AdwCleaner en tu escritorio.
Ejecuta AdwCleaner, haz clic en [Escanear].
El escaneo puede durar varios minutos, paciencia.
Una vez completado el escaneo, haz clic en [Limpiar]
Una vez que la limpieza esté terminada, se abrirá un informe. Copia/pega el contenido del informe en tu próxima respuesta.
Si eso no funciona, utiliza el sitio http://pjjoint.malekal.com para alojar el informe, proporciona el enlace del informe en un nuevo mensaje.
Nota: El informe también se guarda en C:\AdwCleaner[S1].txt
y luego:
Sigue este tutorial: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
Esto generará dos informes de FRST.
Envía como se explica, estos dos informes al sitio http://pjjoint.malekal.com y proporciona los tres enlaces pjjoint de esos informes para que puedan ser consultados.
--
Como el ángel que eres, ríes creando una ligereza en mi pecho,
Tus ojos me penetran,
(Tu respuesta siempre es 'quizás')
Ahí fue cuando me levanté y me fui.
Has instalado adwares y programas no deseados en tu PC.
Aquí está el procedimiento a seguir para eliminarlos:
Comienza por esto:
Sigue el tutorial de AdwCleaner https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= AdwCleaner (de Xplode)
Descarga AdwCleaner en tu escritorio.
Ejecuta AdwCleaner, haz clic en [Escanear].
El escaneo puede durar varios minutos, paciencia.
Una vez completado el escaneo, haz clic en [Limpiar]
Una vez que la limpieza esté terminada, se abrirá un informe. Copia/pega el contenido del informe en tu próxima respuesta.
Si eso no funciona, utiliza el sitio http://pjjoint.malekal.com para alojar el informe, proporciona el enlace del informe en un nuevo mensaje.
Nota: El informe también se guarda en C:\AdwCleaner[S1].txt
y luego:
Sigue este tutorial: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
Esto generará dos informes de FRST.
Envía como se explica, estos dos informes al sitio http://pjjoint.malekal.com y proporciona los tres enlaces pjjoint de esos informes para que puedan ser consultados.
--
Como el ángel que eres, ríes creando una ligereza en mi pecho,
Tus ojos me penetran,
(Tu respuesta siempre es 'quizás')
Ahí fue cuando me levanté y me fui.
# AdwCleaner v4.111 - Informe creado el 28/02/2015 a las 19:41:47
# Actualizado el 18/02/2015 por Xplode
# Base de datos: 2015-02-18.3 [Servidor]
# Sistema operativo: Windows 8.1 (x64)
# Nombre de usuario: Nicole - PC-NICOLE
# Ejecutado desde: C:\Users\Nicole\Downloads\AdwCleaner-4.111.exe
# Opción: Limpiar
Servicio Eliminado: CltMngSvc
Servicio Eliminado: Orbiter
Servicio Eliminado: IHProtect Service
[#] Servicio Eliminado: Update StormVade
[#] Servicio Eliminado: Util StormVade
Servicio Eliminado: {f55c73c7-c2d9-4e96-9cca-424f4afb4b50}Gw64
Servicio Eliminado: {fb3a37cb-c236-44ed-9a3e-dde48437809b}Gw64
Carpeta Eliminada: C:\ProgramData\ZombieNews
Carpeta Eliminada: C:\ProgramData\IHProtectUpDate
Carpeta Eliminada: C:\ProgramData\52b2213000001fc2
Carpeta Eliminada: C:\ProgramData\b30a9b2400001fbe
Carpeta Eliminada: C:\ProgramData\f3843e2000007865
Carpeta Eliminada: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverWhiz
Carpeta Eliminada: C:\Program Files (x86)\predm
Carpeta Eliminada: C:\Program Files (x86)\SearchProtect
[!] Carpeta Eliminada: C:\Program Files (x86)\ORBTR
Carpeta Eliminada: C:\Program Files (x86)\XTab
[!] Carpeta Eliminada: C:\Program Files (x86)\StormVade
[!] Carpeta Eliminada: C:\Program Files (x86)\StormVade
Carpeta Eliminada: C:\Users\Nicole\AppData\Local\Temp\PlumoWeb
Carpeta Eliminada: C:\Users\Nicole\AppData\Local\Temp\StormVade
Carpeta Eliminada: C:\Users\Nicole\AppData\Local\Boxore
Carpeta Eliminada: C:\Users\Nicole\AppData\Local\SearchProtect
Carpeta Eliminada: C:\Users\Nicole\AppData\Local\ZombieNews
Carpeta Eliminada: C:\Users\Nicole\AppData\Local\StormWatch
Carpeta Eliminada: C:\Users\Nicole\AppData\Local\BoBrowser
Carpeta Eliminada: C:\Users\Nicole\AppData\Local\Vosteran
Carpeta Eliminada: C:\Users\Nicole\AppData\Roaming\key-find
Carpeta Eliminada: C:\Users\Nicole\AppData\Roaming\Nosibay
Carpeta Eliminada: C:\Users\Nicole\AppData\Roaming\OpenCandy
Carpeta Eliminada: C:\Users\Nicole\AppData\Roaming\mystartsearch
Carpeta Eliminada: C:\Users\Nicole\AppData\Roaming\WTools
Carpeta Eliminada: C:\Users\Nicole\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StormWatch
Carpeta Eliminada: C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Archivo Eliminado: C:\Windows\System32\drivers\{f55c73c7-c2d9-4e96-9cca-424f4afb4b50}Gw64.sys
Archivo Eliminado: C:\Windows\System32\drivers\{fb3a37cb-c236-44ed-9a3e-dde48437809b}Gw64.sys
Archivo Eliminado: C:\Users\Nicole\AppData\Roaming\Bubble Dock.boostrap.log
Archivo Eliminado: C:\Users\Nicole\AppData\Roaming\WindApp.boostrap.log
Archivo Eliminado: C:\Users\Nicole\AppData\Roaming\Bubble Dock.installation.log
Archivo Eliminado: C:\Users\Nicole\AppData\Roaming\Selection Tools.installation.log
Archivo Eliminado: C:\Users\Nicole\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StormWatchApp.lnk
Archivo Eliminado: C:\Users\Nicole\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OptimizerProInstaller.lnk
Archivo Eliminado: C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
Archivo Eliminado: C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
Archivo Eliminado: C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.mystartsearch.com_0.localstorage
Archivo Eliminado: C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.mystartsearch.com_0.localstorage-journal
Tarea Eliminada: Run_Bobby_Browser
Tarea Eliminada: PostPoneInstall
Acceso directo Desinfectado: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Acceso directo Desinfectado: C:\Users\Nicole\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Clave Eliminada: HKLM\SOFTWARE\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Valor Eliminado: HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Selection Tools]
Clave Eliminada: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Update StormVade
Clave Eliminada: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Util StormVade
Clave Eliminada: HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Clave Eliminada: HKLM\SOFTWARE\Classes\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}
Clave Eliminada: HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Clave Eliminada: HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Clave Eliminada: HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Clave Eliminada: HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Clave Eliminada: HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Clave Eliminada: HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Clave Eliminada: HKLM\SOFTWARE\Classes\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}
Clave Eliminada: HKLM\SOFTWARE\Classes\CLSID\{3d5607cc-7814-46d1-bc4d-fc94740efdae}
Clave Eliminada: HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Clave Eliminada: HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Clave Eliminada: HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Clave Eliminada: HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Clave Eliminada: HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Clave Eliminada: HKLM\SOFTWARE\Classes\Interface\{8C1A1DE9-F4F2-4786-A0BB-B54E71D74513}
Clave Eliminada: HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Clave Eliminada: HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Clave Eliminada: HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Clave Eliminada: HKLM\SOFTWARE\Classes\TypeLib\{c8b54630-2914-4735-8753-afe1dd965fb6}
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3d5607cc-7814-46d1-bc4d-fc94740efdae}
Clave Eliminada: [x64] HKLM\SOFTWARE\Classes\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}
Clave Eliminada: [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Clave Eliminada: [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Clave Eliminada: [x64] HKLM\SOFTWARE\Classes\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}
Clave Eliminada: [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Clave Eliminada: [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Clave Eliminada: [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Clave Eliminada: [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Clave Eliminada: [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Clave Eliminada: [x64] HKLM\SOFTWARE\Classes\Interface\{8C1A1DE9-F4F2-4786-A0BB-B54E71D74513}
Clave Eliminada: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Dato Restaurado: HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command
Clave Eliminada: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Clave Eliminada: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Clave Eliminada: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Clave Eliminada: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Clave Eliminada: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77}
Clave Eliminada: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Clave Eliminada: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Clave Eliminada: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Clave Eliminada: HKCU\Software\APN PIP
Clave Eliminada: HKCU\Software\Boxore
Clave Eliminada: HKCU\Software\eSupport.com
Clave Eliminada: HKCU\Software\HomeTab
Clave Eliminada: HKCU\Software\InstallCore
Clave Eliminada: HKCU\Software\InstalledBrowserExtensions
Clave Eliminada: HKCU\Software\Myfree Codec
Clave Eliminada: HKCU\Software\Nosibay
Clave Eliminada: HKCU\Software\nuevos-programas.com
Clave Eliminada: HKCU\Software\Optimizer Pro
Clave Eliminada: HKCU\Software\simplytech
Clave Eliminada: HKCU\Software\Store
Clave Eliminada: HKCU\Software\StormVade
Clave Eliminada: HKCU\Software\TutoTag
Clave Eliminada: HKCU\Software\BoBrowser
Clave Eliminada: HKCU\Software\StormWatch
Clave Eliminada: HKCU\Software\Vosteran Browser
Clave Eliminada: HKCU\Software\WTools
Clave Eliminada: HKCU\Software\Super Optimizer
Clave Eliminada: HKCU\Software\DriverWhiz
Clave Eliminada: HKCU\Software\WajIntEnhance
Clave Eliminada: HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clave Eliminada: HKCU\Software\AppDataLow\Software\DynConIE
Clave Eliminada: HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clave Eliminada: HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Clave Eliminada: HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Clave Eliminada: HKLM\SOFTWARE\AskPartnerNetwork
Clave Eliminada: HKLM\SOFTWARE\Boxore
Clave Eliminada: HKLM\SOFTWARE\Cheat Engine\OpenCandy
Clave Eliminada: HKLM\SOFTWARE\Conduit
Clave Eliminada: HKLM\SOFTWARE\Iminent
Clave Eliminada: HKLM\SOFTWARE\InstalledBrowserExtensions
Clave Eliminada: HKLM\SOFTWARE\Myfree Codec
Clave Eliminada: HKLM\SOFTWARE\SearchProtect
Clave Eliminada: HKLM\SOFTWARE\StormVade
Clave Eliminada: HKLM\SOFTWARE\SupDp
Clave Eliminada: HKLM\SOFTWARE\SupTab
Clave Eliminada: HKLM\SOFTWARE\Tutorials
Clave Eliminada: HKLM\SOFTWARE\Clara
Clave Eliminada: HKLM\SOFTWARE\mystartsearchSoftware
Clave Eliminada: HKLM\SOFTWARE\ORBTR
Clave Eliminada: HKLM\SOFTWARE\GAMESDESKTOP
Clave Eliminada: HKLM\SOFTWARE\IHProtect
Clave Eliminada: HKLM\SOFTWARE\SPPDCOM
Clave Eliminada: HKLM\SOFTWARE\WajIntEnhance
Clave Eliminada: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP
Clave Eliminada: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar
Clave Eliminada: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Clave Eliminada: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\StormWatch
Clave Eliminada: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance
Clave Eliminada: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdater
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZombieNews
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\I - Cinema
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\mystartsearch uninstall
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com
Clave Eliminada: [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Clave Eliminada: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\StormVade
Dato Eliminado: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~2\searchprotect\searchprotect\bin\vc32loader.dll
Dato Eliminado: [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL
Clave Eliminada: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SoftwareUpdate.exe
-\\ Internet Explorer v11.0.9600.17416
Parámetro Restaurado: HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Parámetro Restaurado: HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
Parámetro Restaurado: HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Parámetro Restaurado: HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Parámetro Restaurado: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Parámetro Restaurado: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
-\\ Google Chrome v40.0.2214.93
# Actualizado el 18/02/2015 por Xplode
# Base de datos: 2015-02-18.3 [Servidor]
# Sistema operativo: Windows 8.1 (x64)
# Nombre de usuario: Nicole - PC-NICOLE
# Ejecutado desde: C:\Users\Nicole\Downloads\AdwCleaner-4.111.exe
# Opción: Limpiar
- [ Servicios ] *****
Servicio Eliminado: CltMngSvc
Servicio Eliminado: Orbiter
Servicio Eliminado: IHProtect Service
[#] Servicio Eliminado: Update StormVade
[#] Servicio Eliminado: Util StormVade
Servicio Eliminado: {f55c73c7-c2d9-4e96-9cca-424f4afb4b50}Gw64
Servicio Eliminado: {fb3a37cb-c236-44ed-9a3e-dde48437809b}Gw64
- [ Archivos / Carpetas ] *****
Carpeta Eliminada: C:\ProgramData\ZombieNews
Carpeta Eliminada: C:\ProgramData\IHProtectUpDate
Carpeta Eliminada: C:\ProgramData\52b2213000001fc2
Carpeta Eliminada: C:\ProgramData\b30a9b2400001fbe
Carpeta Eliminada: C:\ProgramData\f3843e2000007865
Carpeta Eliminada: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverWhiz
Carpeta Eliminada: C:\Program Files (x86)\predm
Carpeta Eliminada: C:\Program Files (x86)\SearchProtect
[!] Carpeta Eliminada: C:\Program Files (x86)\ORBTR
Carpeta Eliminada: C:\Program Files (x86)\XTab
[!] Carpeta Eliminada: C:\Program Files (x86)\StormVade
[!] Carpeta Eliminada: C:\Program Files (x86)\StormVade
Carpeta Eliminada: C:\Users\Nicole\AppData\Local\Temp\PlumoWeb
Carpeta Eliminada: C:\Users\Nicole\AppData\Local\Temp\StormVade
Carpeta Eliminada: C:\Users\Nicole\AppData\Local\Boxore
Carpeta Eliminada: C:\Users\Nicole\AppData\Local\SearchProtect
Carpeta Eliminada: C:\Users\Nicole\AppData\Local\ZombieNews
Carpeta Eliminada: C:\Users\Nicole\AppData\Local\StormWatch
Carpeta Eliminada: C:\Users\Nicole\AppData\Local\BoBrowser
Carpeta Eliminada: C:\Users\Nicole\AppData\Local\Vosteran
Carpeta Eliminada: C:\Users\Nicole\AppData\Roaming\key-find
Carpeta Eliminada: C:\Users\Nicole\AppData\Roaming\Nosibay
Carpeta Eliminada: C:\Users\Nicole\AppData\Roaming\OpenCandy
Carpeta Eliminada: C:\Users\Nicole\AppData\Roaming\mystartsearch
Carpeta Eliminada: C:\Users\Nicole\AppData\Roaming\WTools
Carpeta Eliminada: C:\Users\Nicole\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StormWatch
Carpeta Eliminada: C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Archivo Eliminado: C:\Windows\System32\drivers\{f55c73c7-c2d9-4e96-9cca-424f4afb4b50}Gw64.sys
Archivo Eliminado: C:\Windows\System32\drivers\{fb3a37cb-c236-44ed-9a3e-dde48437809b}Gw64.sys
Archivo Eliminado: C:\Users\Nicole\AppData\Roaming\Bubble Dock.boostrap.log
Archivo Eliminado: C:\Users\Nicole\AppData\Roaming\WindApp.boostrap.log
Archivo Eliminado: C:\Users\Nicole\AppData\Roaming\Bubble Dock.installation.log
Archivo Eliminado: C:\Users\Nicole\AppData\Roaming\Selection Tools.installation.log
Archivo Eliminado: C:\Users\Nicole\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StormWatchApp.lnk
Archivo Eliminado: C:\Users\Nicole\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OptimizerProInstaller.lnk
Archivo Eliminado: C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
Archivo Eliminado: C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
Archivo Eliminado: C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.mystartsearch.com_0.localstorage
Archivo Eliminado: C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.mystartsearch.com_0.localstorage-journal
- [ Tareas programadas ] *****
Tarea Eliminada: Run_Bobby_Browser
Tarea Eliminada: PostPoneInstall
- [ Accesos directos ] *****
Acceso directo Desinfectado: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Acceso directo Desinfectado: C:\Users\Nicole\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
- [ Registro ] *****
Clave Eliminada: HKLM\SOFTWARE\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Valor Eliminado: HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Selection Tools]
Clave Eliminada: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Update StormVade
Clave Eliminada: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Util StormVade
Clave Eliminada: HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Clave Eliminada: HKLM\SOFTWARE\Classes\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}
Clave Eliminada: HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Clave Eliminada: HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Clave Eliminada: HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Clave Eliminada: HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Clave Eliminada: HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Clave Eliminada: HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Clave Eliminada: HKLM\SOFTWARE\Classes\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}
Clave Eliminada: HKLM\SOFTWARE\Classes\CLSID\{3d5607cc-7814-46d1-bc4d-fc94740efdae}
Clave Eliminada: HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Clave Eliminada: HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Clave Eliminada: HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Clave Eliminada: HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Clave Eliminada: HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Clave Eliminada: HKLM\SOFTWARE\Classes\Interface\{8C1A1DE9-F4F2-4786-A0BB-B54E71D74513}
Clave Eliminada: HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Clave Eliminada: HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Clave Eliminada: HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Clave Eliminada: HKLM\SOFTWARE\Classes\TypeLib\{c8b54630-2914-4735-8753-afe1dd965fb6}
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3d5607cc-7814-46d1-bc4d-fc94740efdae}
Clave Eliminada: [x64] HKLM\SOFTWARE\Classes\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}
Clave Eliminada: [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Clave Eliminada: [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Clave Eliminada: [x64] HKLM\SOFTWARE\Classes\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}
Clave Eliminada: [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Clave Eliminada: [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Clave Eliminada: [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Clave Eliminada: [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Clave Eliminada: [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Clave Eliminada: [x64] HKLM\SOFTWARE\Classes\Interface\{8C1A1DE9-F4F2-4786-A0BB-B54E71D74513}
Clave Eliminada: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Dato Restaurado: HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command
Clave Eliminada: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Clave Eliminada: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Clave Eliminada: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Clave Eliminada: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Clave Eliminada: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77}
Clave Eliminada: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Clave Eliminada: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Clave Eliminada: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Clave Eliminada: HKCU\Software\APN PIP
Clave Eliminada: HKCU\Software\Boxore
Clave Eliminada: HKCU\Software\eSupport.com
Clave Eliminada: HKCU\Software\HomeTab
Clave Eliminada: HKCU\Software\InstallCore
Clave Eliminada: HKCU\Software\InstalledBrowserExtensions
Clave Eliminada: HKCU\Software\Myfree Codec
Clave Eliminada: HKCU\Software\Nosibay
Clave Eliminada: HKCU\Software\nuevos-programas.com
Clave Eliminada: HKCU\Software\Optimizer Pro
Clave Eliminada: HKCU\Software\simplytech
Clave Eliminada: HKCU\Software\Store
Clave Eliminada: HKCU\Software\StormVade
Clave Eliminada: HKCU\Software\TutoTag
Clave Eliminada: HKCU\Software\BoBrowser
Clave Eliminada: HKCU\Software\StormWatch
Clave Eliminada: HKCU\Software\Vosteran Browser
Clave Eliminada: HKCU\Software\WTools
Clave Eliminada: HKCU\Software\Super Optimizer
Clave Eliminada: HKCU\Software\DriverWhiz
Clave Eliminada: HKCU\Software\WajIntEnhance
Clave Eliminada: HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clave Eliminada: HKCU\Software\AppDataLow\Software\DynConIE
Clave Eliminada: HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clave Eliminada: HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Clave Eliminada: HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Clave Eliminada: HKLM\SOFTWARE\AskPartnerNetwork
Clave Eliminada: HKLM\SOFTWARE\Boxore
Clave Eliminada: HKLM\SOFTWARE\Cheat Engine\OpenCandy
Clave Eliminada: HKLM\SOFTWARE\Conduit
Clave Eliminada: HKLM\SOFTWARE\Iminent
Clave Eliminada: HKLM\SOFTWARE\InstalledBrowserExtensions
Clave Eliminada: HKLM\SOFTWARE\Myfree Codec
Clave Eliminada: HKLM\SOFTWARE\SearchProtect
Clave Eliminada: HKLM\SOFTWARE\StormVade
Clave Eliminada: HKLM\SOFTWARE\SupDp
Clave Eliminada: HKLM\SOFTWARE\SupTab
Clave Eliminada: HKLM\SOFTWARE\Tutorials
Clave Eliminada: HKLM\SOFTWARE\Clara
Clave Eliminada: HKLM\SOFTWARE\mystartsearchSoftware
Clave Eliminada: HKLM\SOFTWARE\ORBTR
Clave Eliminada: HKLM\SOFTWARE\GAMESDESKTOP
Clave Eliminada: HKLM\SOFTWARE\IHProtect
Clave Eliminada: HKLM\SOFTWARE\SPPDCOM
Clave Eliminada: HKLM\SOFTWARE\WajIntEnhance
Clave Eliminada: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP
Clave Eliminada: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar
Clave Eliminada: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Clave Eliminada: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\StormWatch
Clave Eliminada: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance
Clave Eliminada: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdater
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZombieNews
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\I - Cinema
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\mystartsearch uninstall
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com
Clave Eliminada: [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Clave Eliminada: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\StormVade
Dato Eliminado: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~2\searchprotect\searchprotect\bin\vc32loader.dll
Dato Eliminado: [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL
Clave Eliminada: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC
Clave Eliminada: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SoftwareUpdate.exe
- [ Navegadores ] *****
-\\ Internet Explorer v11.0.9600.17416
Parámetro Restaurado: HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Parámetro Restaurado: HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
Parámetro Restaurado: HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Parámetro Restaurado: HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Parámetro Restaurado: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Parámetro Restaurado: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
-\\ Google Chrome v40.0.2214.93
-
AdwCleaner[R0].txt - [16305 bytes] - [28/02/2015 19:32:53]
AdwCleaner[S0].txt - [13371 bytes] - [28/02/2015 19:41:47]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [13432 bytes] ##########
Résultat du scan de Farbar Recovery Scan Tool (FRST.txt) (x64) Version : 25-02-2015 01
Exécuté par Nicole (administrateur) sur PC-NICOLE le 28-02-2015 20:03:42
Exécuté depuis C:\Users\Nicole\Downloads
Profils chargés : Nicole (Profils disponibles : Nicole)
Plateforme : Windows 8.1 (X64) Langue du système d'exploitation : Français (France)
Version d'Internet Explorer 11 (Navigateur par défaut : Chrome)
Mode de démarrage : Normal
Tutoriel pour Farbar Recovery Scan Tool : http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Blanchis) =================
(Si une entrée est incluse dans la liste de correction, le processus sera fermé. Le fichier ne sera pas déplacé.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe
() C:\Users\Nicole\AppData\Roaming\3190F6E6-1425129397-9943-9EA6-54A050B1CFA4\jnse6D0F.tmp
() C:\Users\Nicole\AppData\Roaming\3190F6E6-1425129397-9943-9EA6-54A050B1CFA4\nsu21D7.tmpfs
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Time Lapse Solutions) C:\ProgramData\WOByfFw\xsFuCWLq.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTek Computer INC.) C:\ProgramData\AsTouchPanel\AsPatchTouchPanel64.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE
(Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\APRP\aprp.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSPanel.exe
(Super PC Tools Ltd) C:\ProgramData\{7d900fb3-9301-6202-7d90-00fb39303ece}\SuperOptimizerInstaller.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\MSOSYNC.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe
==================== Registre (Blanchi) ==================
(Si une entrée est incluse dans la liste de correction, l'élément du registre sera restauré à sa valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-20] (NVIDIA Corporation)
HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [111976 2013-09-11] (Intel Corporation)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [3D BubbleSound] => "C:\Program Files\BubbleSound\3D BubbleSound.exe"
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [1080992 2014-05-15] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\ASUSWSLoader.exe [63296 2014-02-25] ()
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-30] (AVAST Software)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
HKLM-x32\...\Run: [gmsd_fr_256] => [X]
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [134784 2014-02-25] ( (Qualcomm®Atheros®))
HKU\S-1-5-21-639789147-2807618547-792758945-1001\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
AppInit_DLLs-x32: c:/progra~3/{927e7~1/171~1.0/dodo.dll => "c:\progra~3\{927e7~1\171~1.0\dodo.dll" Fichier introuvable
Démarrage : C:\Users\Nicole\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SuperOptimizerInstaller.lnk
ShortcutTarget: SuperOptimizerInstaller.lnk -> C:\ProgramData\{7d900fb3-9301-6202-7d90-00fb39303ece}\SuperOptimizerInstaller.exe (Super PC Tools Ltd)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
GroupPolicy: La stratégie de groupe sur Chrome détectée <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction de politique <======= ATTENTION
==================== Internet (Blanchi) ====================
(Si un élément est inclus dans la liste de correction, s'il s'agit d'un élément de registre, il sera supprimé ou restauré à sa valeur par défaut.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.com/?gws_rd=ssl
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.com/?gws_rd=ssl
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.com/?gws_rd=ssl
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.com/?gws_rd=ssl
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Roll Around -> {83c0e288-8fa0-43d3-acc7-c1e839d85abc} -> C:\Program Files (x86)\Roll Around\Extensions\83c0e288-8fa0-43d3-acc7-c1e839d85abc.dll Pas de fichier
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKU\S-1-5-21-639789147-2807618547-792758945-1001 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Pas de fichier
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-639789147-2807618547-792758945-1001: @citrixonline.com/appdetectorplugin -> C:\Users\Nicole\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-01-30]
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR DefaultSearchKeyword: Default -> trovi.search
CHR DefaultNewTabURL: Default -> http://www.trovi.com/...
CHR DefaultSuggestURL: Default -> http://suggest.seccint.com/CSuggestJson.ashx?prefix={searchTerms}
CHR Profile: C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-28]
CHR Extension: (Avast Online Security) - C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-01-30]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-01-30]
==================== Services (Blanchis) =================
(Si une entrée est incluse dans la liste de correction, le service sera supprimé du registre. Le fichier ne sera pas déplacé à moins qu'il soit listé séparément.)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe [71680 2014-02-25] (ASUS Cloud Corporation) [Fichier non signé]
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider) [Fichier non signé]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2015-01-30] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2015-01-30] (Avast Software)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2711736 2015-01-13] (Microsoft Corporation)
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [115632 2013-09-11] (Intel Corporation)
R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [116656 2013-09-11] (Intel Corporation)
R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [148688 2013-09-11] (Intel Corporation)
R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [124880 2013-09-11] (Intel Corporation)
R2 gugoroxi; C:\Users\Nicole\AppData\Roaming\3190F6E6-1425129397-9943-9EA6-54A050B1CFA4\jnse6D0F.tmp [194560 2015-02-28] () [Fichier non signé]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-09] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [Fichier non signé]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-10-23] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-20] (NVIDIA Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
R2 xsFuCWLq; C:\ProgramData\WOByfFw\xsFuCWLq.exe [2733032 2015-02-28] (Time Lapse Solutions)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-02-25] (Atheros) [Fichier non signé]
R2 lytuxicu; C:\Users\Nicole\AppData\Roaming\3190F6E6-1425129397-9943-9EA6-54A050B1CFA4\nsu21D7.tmpfs [X]
S2 Update PlumoWeb; "C:\Program Files (x86)\PlumoWeb\updatePlumoWeb.exe" [X]
==================== Pilotes (Blanchis) ====================
(Si une entrée est incluse dans la liste de correction, le service sera supprimé du registre. Le fichier ne sera pas déplacé à moins qu'il soit listé séparément.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2015-01-30] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [87912 2015-01-30] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2015-01-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2015-01-30] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2015-01-30] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2015-01-30] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2015-01-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2015-01-30] ()
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3892224 2014-03-06] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [71952 2014-03-31] (ASUS Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-25] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [143568 2013-09-11] (Intel Corporation)
R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [114680 2013-09-11] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [287160 2013-09-11] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [494272 2013-09-11] (Intel Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-10-23] (Intel Corporation)
R2 plctrl; C:\Program Files\ASUS\P4G\plctrl.sys [14136 2014-02-11] (Windows (R) Win 7 DDK provider)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [423128 2013-07-24] (Realsil Semiconductor Corporation)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2015-01-30] (Avast Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
U0 msahci; system32\drivers\msahci.sys
==================== NetSvcs (Blanchis) ===================
(Si une entrée est incluse dans la liste de correction, elle sera supprimée du registre. Tout fichier associé pourrait être répertorié séparément pour être déplacé.)
==================== Fichiers et dossiers créés le mois dernier ========
(Si une entrée est incluse dans la liste de correction, le fichier/dossier sera déplacé.)
2015-02-28 20:03 - 2015-02-28 20:04 - 00018365 _____ () C:\Users\Nicole\Downloads\FRST.txt
2015-02-28 20:03 - 2015-02-28 20:03 - 02087936 _____ (Farbar) C:\Users\Nicole\Downloads\FRST64.exe
2015-02-28 20:03 - 2015-02-28 20:03 - 00000000 ____D () C:\FRST
2015-02-28 19:45 - 2015-02-28 20:02 - 00000000 ____D () C:\Users\Nicole\AppData\Local\ZombieNews
2015-02-28 19:45 - 2015-02-28 19:46 - 00000197 _____ () C:\Windows\system32\2015-02-28-18-45-35.042-AvastVBoxSVC.exe-2788.log
2015-02-28 19:38 - 2015-02-28 19:38 - 01146608 _____ () C:\Users\Nicole\Downloads\Installation.exe
2015-02-28 19:25 - 2015-02-28 19:42 - 00000000 ____D () C:\AdwCleaner
2015-02-28 19:25 - 2015-02-28 19:25 - 02126848 _____ () C:\Users\Nicole\Downloads\AdwCleaner-4.111.exe
2015-02-28 18:54 - 2015-02-28 18:54 - 00003476 _____ () C:\Windows\System32\Tasks\avayvxvaxc
2015-02-28 18:53 - 2015-02-28 18:53 - 00152504 _____ () C:\Users\Nicole\Downloads\adwcleaner (1).exe
2015-02-28 18:52 - 2015-02-28 18:52 - 00152504 _____ () C:\Users\Nicole\Downloads\adwcleaner.exe
2015-02-28 18:31 - 2015-02-28 18:32 - 00000197 _____ () C:\Windows\system32\2015-02-28-17-31-50.098-AvastVBoxSVC.exe-2612.log
2015-02-28 18:30 - 2015-02-28 18:30 - 00000000 ____D () C:\Users\Nicole\Documents\Bluetooth Folder
2015-02-28 18:06 - 2015-02-28 18:13 - 00002214 _____ () C:\Users\Nicole\Desktop\chrome.lnk
2015-02-28 18:00 - 2015-02-28 18:00 - 00003106 _____ () C:\Windows\System32\Tasks\{E6D004F1-A572-40BC-B9C9-D0863A76F180}
2015-02-28 15:53 - 2015-02-28 15:53 - 00000000 ____D () C:\Users\Nicole\AppData\Roaming\3190F6E6-1425138786-9943-9EA6-54A050B1CFA4
2015-02-28 15:51 - 2015-02-28 18:30 - 00000000 ____D () C:\ProgramData\{a2bd0957-2489-0924-a2bd-d0957248255c}
2015-02-28 15:44 - 2015-02-28 15:44 - 00000000 ____D () C:\ProgramData\WOByfFw
Exécuté par Nicole (administrateur) sur PC-NICOLE le 28-02-2015 20:03:42
Exécuté depuis C:\Users\Nicole\Downloads
Profils chargés : Nicole (Profils disponibles : Nicole)
Plateforme : Windows 8.1 (X64) Langue du système d'exploitation : Français (France)
Version d'Internet Explorer 11 (Navigateur par défaut : Chrome)
Mode de démarrage : Normal
Tutoriel pour Farbar Recovery Scan Tool : http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Blanchis) =================
(Si une entrée est incluse dans la liste de correction, le processus sera fermé. Le fichier ne sera pas déplacé.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe
() C:\Users\Nicole\AppData\Roaming\3190F6E6-1425129397-9943-9EA6-54A050B1CFA4\jnse6D0F.tmp
() C:\Users\Nicole\AppData\Roaming\3190F6E6-1425129397-9943-9EA6-54A050B1CFA4\nsu21D7.tmpfs
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Time Lapse Solutions) C:\ProgramData\WOByfFw\xsFuCWLq.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTek Computer INC.) C:\ProgramData\AsTouchPanel\AsPatchTouchPanel64.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE
(Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\APRP\aprp.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSPanel.exe
(Super PC Tools Ltd) C:\ProgramData\{7d900fb3-9301-6202-7d90-00fb39303ece}\SuperOptimizerInstaller.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\MSOSYNC.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe
==================== Registre (Blanchi) ==================
(Si une entrée est incluse dans la liste de correction, l'élément du registre sera restauré à sa valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-20] (NVIDIA Corporation)
HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [111976 2013-09-11] (Intel Corporation)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [3D BubbleSound] => "C:\Program Files\BubbleSound\3D BubbleSound.exe"
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [1080992 2014-05-15] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\ASUSWSLoader.exe [63296 2014-02-25] ()
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-30] (AVAST Software)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
HKLM-x32\...\Run: [gmsd_fr_256] => [X]
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [134784 2014-02-25] ( (Qualcomm®Atheros®))
HKU\S-1-5-21-639789147-2807618547-792758945-1001\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
AppInit_DLLs-x32: c:/progra~3/{927e7~1/171~1.0/dodo.dll => "c:\progra~3\{927e7~1\171~1.0\dodo.dll" Fichier introuvable
Démarrage : C:\Users\Nicole\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SuperOptimizerInstaller.lnk
ShortcutTarget: SuperOptimizerInstaller.lnk -> C:\ProgramData\{7d900fb3-9301-6202-7d90-00fb39303ece}\SuperOptimizerInstaller.exe (Super PC Tools Ltd)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
GroupPolicy: La stratégie de groupe sur Chrome détectée <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction de politique <======= ATTENTION
==================== Internet (Blanchi) ====================
(Si un élément est inclus dans la liste de correction, s'il s'agit d'un élément de registre, il sera supprimé ou restauré à sa valeur par défaut.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.com/?gws_rd=ssl
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.com/?gws_rd=ssl
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.com/?gws_rd=ssl
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.com/?gws_rd=ssl
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Roll Around -> {83c0e288-8fa0-43d3-acc7-c1e839d85abc} -> C:\Program Files (x86)\Roll Around\Extensions\83c0e288-8fa0-43d3-acc7-c1e839d85abc.dll Pas de fichier
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKU\S-1-5-21-639789147-2807618547-792758945-1001 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Pas de fichier
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-639789147-2807618547-792758945-1001: @citrixonline.com/appdetectorplugin -> C:\Users\Nicole\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-01-30]
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR DefaultSearchKeyword: Default -> trovi.search
CHR DefaultNewTabURL: Default -> http://www.trovi.com/...
CHR DefaultSuggestURL: Default -> http://suggest.seccint.com/CSuggestJson.ashx?prefix={searchTerms}
CHR Profile: C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-28]
CHR Extension: (Avast Online Security) - C:\Users\Nicole\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-01-30]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-01-30]
==================== Services (Blanchis) =================
(Si une entrée est incluse dans la liste de correction, le service sera supprimé du registre. Le fichier ne sera pas déplacé à moins qu'il soit listé séparément.)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe [71680 2014-02-25] (ASUS Cloud Corporation) [Fichier non signé]
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider) [Fichier non signé]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2015-01-30] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2015-01-30] (Avast Software)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2711736 2015-01-13] (Microsoft Corporation)
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [115632 2013-09-11] (Intel Corporation)
R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [116656 2013-09-11] (Intel Corporation)
R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [148688 2013-09-11] (Intel Corporation)
R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [124880 2013-09-11] (Intel Corporation)
R2 gugoroxi; C:\Users\Nicole\AppData\Roaming\3190F6E6-1425129397-9943-9EA6-54A050B1CFA4\jnse6D0F.tmp [194560 2015-02-28] () [Fichier non signé]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-09] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [Fichier non signé]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-10-23] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-20] (NVIDIA Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
R2 xsFuCWLq; C:\ProgramData\WOByfFw\xsFuCWLq.exe [2733032 2015-02-28] (Time Lapse Solutions)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-02-25] (Atheros) [Fichier non signé]
R2 lytuxicu; C:\Users\Nicole\AppData\Roaming\3190F6E6-1425129397-9943-9EA6-54A050B1CFA4\nsu21D7.tmpfs [X]
S2 Update PlumoWeb; "C:\Program Files (x86)\PlumoWeb\updatePlumoWeb.exe" [X]
==================== Pilotes (Blanchis) ====================
(Si une entrée est incluse dans la liste de correction, le service sera supprimé du registre. Le fichier ne sera pas déplacé à moins qu'il soit listé séparément.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2015-01-30] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [87912 2015-01-30] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2015-01-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2015-01-30] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2015-01-30] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2015-01-30] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2015-01-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2015-01-30] ()
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3892224 2014-03-06] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [71952 2014-03-31] (ASUS Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-25] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [143568 2013-09-11] (Intel Corporation)
R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [114680 2013-09-11] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [287160 2013-09-11] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [494272 2013-09-11] (Intel Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-10-23] (Intel Corporation)
R2 plctrl; C:\Program Files\ASUS\P4G\plctrl.sys [14136 2014-02-11] (Windows (R) Win 7 DDK provider)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [423128 2013-07-24] (Realsil Semiconductor Corporation)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2015-01-30] (Avast Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
U0 msahci; system32\drivers\msahci.sys
==================== NetSvcs (Blanchis) ===================
(Si une entrée est incluse dans la liste de correction, elle sera supprimée du registre. Tout fichier associé pourrait être répertorié séparément pour être déplacé.)
==================== Fichiers et dossiers créés le mois dernier ========
(Si une entrée est incluse dans la liste de correction, le fichier/dossier sera déplacé.)
2015-02-28 20:03 - 2015-02-28 20:04 - 00018365 _____ () C:\Users\Nicole\Downloads\FRST.txt
2015-02-28 20:03 - 2015-02-28 20:03 - 02087936 _____ (Farbar) C:\Users\Nicole\Downloads\FRST64.exe
2015-02-28 20:03 - 2015-02-28 20:03 - 00000000 ____D () C:\FRST
2015-02-28 19:45 - 2015-02-28 20:02 - 00000000 ____D () C:\Users\Nicole\AppData\Local\ZombieNews
2015-02-28 19:45 - 2015-02-28 19:46 - 00000197 _____ () C:\Windows\system32\2015-02-28-18-45-35.042-AvastVBoxSVC.exe-2788.log
2015-02-28 19:38 - 2015-02-28 19:38 - 01146608 _____ () C:\Users\Nicole\Downloads\Installation.exe
2015-02-28 19:25 - 2015-02-28 19:42 - 00000000 ____D () C:\AdwCleaner
2015-02-28 19:25 - 2015-02-28 19:25 - 02126848 _____ () C:\Users\Nicole\Downloads\AdwCleaner-4.111.exe
2015-02-28 18:54 - 2015-02-28 18:54 - 00003476 _____ () C:\Windows\System32\Tasks\avayvxvaxc
2015-02-28 18:53 - 2015-02-28 18:53 - 00152504 _____ () C:\Users\Nicole\Downloads\adwcleaner (1).exe
2015-02-28 18:52 - 2015-02-28 18:52 - 00152504 _____ () C:\Users\Nicole\Downloads\adwcleaner.exe
2015-02-28 18:31 - 2015-02-28 18:32 - 00000197 _____ () C:\Windows\system32\2015-02-28-17-31-50.098-AvastVBoxSVC.exe-2612.log
2015-02-28 18:30 - 2015-02-28 18:30 - 00000000 ____D () C:\Users\Nicole\Documents\Bluetooth Folder
2015-02-28 18:06 - 2015-02-28 18:13 - 00002214 _____ () C:\Users\Nicole\Desktop\chrome.lnk
2015-02-28 18:00 - 2015-02-28 18:00 - 00003106 _____ () C:\Windows\System32\Tasks\{E6D004F1-A572-40BC-B9C9-D0863A76F180}
2015-02-28 15:53 - 2015-02-28 15:53 - 00000000 ____D () C:\Users\Nicole\AppData\Roaming\3190F6E6-1425138786-9943-9EA6-54A050B1CFA4
2015-02-28 15:51 - 2015-02-28 18:30 - 00000000 ____D () C:\ProgramData\{a2bd0957-2489-0924-a2bd-d0957248255c}
2015-02-28 15:44 - 2015-02-28 15:44 - 00000000 ____D () C:\ProgramData\WOByfFw