Ordinateur infecté

bonjour;
j'ai recu un message sur mon ordinateur 2 fois dans la meme journée il s'agit de fata-xxx-dangerous-windows j'ai installer pas mal d'anti virus comme spyboat antimalwarbytes ccleaner et autres en plus de mon anti virus de base qui est avast... maisle pc fais des siennes et bloke bcp on me detecte encore des virus et fastagain pc booster que j'ai supprimer reviens a chaque fois despages de pub s'ouvre tout le temps le pc bug jecomprend rien pouvez vous me dire comment faire pour que tout ca s'arete??? merciii

12 réponses

  1. bonjour,

    désinstalle spybot, il est inutile !

    * Télécharge et enregistre ZHPDiag sur ton bureau :

    https://nicolascoolman.eu

    ou :

    https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/
    • Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin.


    /!\Utilisateur de Vista, Seven et W8 :
    • Clique droit sur le logo de ZHPdiag, « exécuter en tant qu'Administrateur »


    => L'icône est sous forme de parchemin.
    • Clique sur « complet »
    • Laisse travailler l'outil, même s'il semble bloqué !


    * Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette Héberge le rapport ZHPDiag.txt sur :</li></ul>
    https://www.cjoint.com/ à lire => https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers

    , puis copie/colle le lien fourni dans ta prochaine réponse sur le forum


    tuto zhpdiag :

    https://nicolascoolman.eu

  2. Modérateur
    Salut,

    Tu as installé des adwares et programmes parasites sur ton PC qui ouvrent des publicités et ralentissent l'ordinateur et les navigateurs WEB.
    Voici la procédure à suivre pour les supprimer :

    Commence par ceci :

    Suis le tutorial AdwCleaner https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= ( d'Xplode )
    Télécharge le sur ton bureau ou dossier de téléchargement.
    Lance AdwCleaner, clique sur [Scanner].
    L'analyse peux durer plusieurs minutes, patiente.
    Une fois le scan terminé, ne décoche rien, clique sur [Nettoyer]

    Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
    Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.

    Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

    puis :

    Suis ce tutoriel FRST: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
    (et bien prendre le temps de lire afin d'appliquer correctement - tout y est expliqué).
    Télécharge et lance le scan FRST, cela va générer trois rapports FRST :
    • FRST.txt
    • Shortcut.txt
    • Additionnal.txt


    Envoie, comme expliqué, ces trois rapports sur le site http://pjjoint.malekal.com et en retour donne les trois liens pjjoint qui mènent à ses rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.

  3. # AdwCleaner v4.200 - Rapport créé le 31/03/2015 à 01:06:11
    # Mis à jour le 29/03/2015 par Xplode
    # Base de données : 2015-03-29.1 [Serveur]
    # Système d'exploitation : Windows 8.1 (x64)
    # Nom d'utilisateur : BastienetYanis - SANDRINA
    # Exécuté depuis : C:\Users\BastienetYanis\Downloads\adwcleaner_4.200.exe
    # Option : Nettoyer
            • [ Services ] *****
            • [ Fichiers / Dossiers ] *****


    Dossier Supprimé : C:\Users\BastienetYanis\AppData\Roaming\Activeris
    Dossier Supprimé : C:\Users\BastienetYanis\AppData\Local\Google\Chrome\User Data\Default\Extensions\majjphhgppkndjjkmhhnbgafooenebhd
    Dossier Supprimé : C:\Users\BastienetYanis\AppData\Local\Google\Chrome\User Data\Default\Extensions\klhlfdbffplhpkpalkmacjejfbdeefaj
    Fichier Supprimé : C:\Users\BastienetYanis\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bakijjialdiiboeaknfpmflphhmljfkd
    Fichier Supprimé : C:\Users\BastienetYanis\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\iagcajndpnfncplednpbnkahadegklfa
    Fichier Supprimé : C:\Users\BastienetYanis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_joefdjpocengkmjmcnheijdogjafdbha_0.localstorage
    Fichier Supprimé : C:\Users\BastienetYanis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pbpohikckhbcljgombipcdoinkaedlfa_0.localstorage
    Fichier Supprimé : C:\WINDOWS\Reimage.ini
            • [ Tâches planifiées ] *****
            • [ Raccourcis ] *****
            • [ Registre ] *****


    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\REI_AxControl.DLL
    Clé Supprimée : HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine
    Clé Supprimée : HKLM\SOFTWARE\11131309-d168-4229-8d73-4f6b38041ffd
    Clé Supprimée : HKLM\SOFTWARE\adcb9d18-5396-4949-9e3b-00bb97ebba6e
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DD750F89-4987-70E3-EEEA-3D6135D889D2}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DD750F89-4987-70E3-EEEA-3D6135D889D2}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{10ECCE17-29B5-4880-A8F5-EAD298611484}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DD750F89-4987-70E3-EEEA-3D6135D889D2}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{10ECCE17-29B5-4880-A8F5-EAD298611484}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{801B440B-1EE3-49B0-B05D-2AB076D4E8CB}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DD750F89-4987-70E3-EEEA-3D6135D889D2}
    Clé Supprimée : HKCU\Software\AppDataLow\Software\adawarebp
    Clé Supprimée : [x64] HKLM\SOFTWARE\Reimage
            • [ Navigateurs ] *****


    -\\ Internet Explorer v11.0.9600.17416

    -\\ Google Chrome v41.0.2272.101

    [C:\Users\BastienetYanis\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Supprimée [Search Provider] : hxxp://search.certified-toolbar.com?si=77302&st=bs&tid=18195&ver=6.0&ts=1394838000000.000007&tguid=77302-18195-1394877973616-7E7EF3281B0C254330AB1957D1BE0917&q={searchTerms}
    [C:\Users\BastienetYanis\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Supprimée [Search Provider] : hxxp://vosteran.com/results.php?f=4&q={searchTerms}&a=vst_ggfc_15_02_ch&cd=2XzuyEtN2Y1L1Qzu0DzzyDtD0EyCtBtBtAtByDyDyCtBtD0FtN0D0Tzu0StCtCtDtCtN1L2XzutAtFyBtFtCtFtAtN1L1CzutCyEtBzytDyD1V1BtAtN1L1G1B1V1N2Y1L1Qzu2StD0C0CtC0BtA0FzztGtCtD0BzytGyBzzzyyDtGzztAyCzytGyDyBtDzy0D0FtAyC0FzztDtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0BtCyEzyyCyDyByDtGtBzy0F0FtGyE0A0C0BtGzy0A0BtCtG0BtDyBtB0DtDtAtD0DtCyDyD2Q&cr=750627549&ir=
    [C:\Users\BastienetYanis\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Supprimée [Search Provider] : hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=md_14_20_ch&cd=2XzuyEtN2Y1L1Qzu0DzzyDtD0EyCtBtBtAtByDyDyCtBtD0FtN0D0Tzu0SzzyCyBtN1L2XzutBtFtBtDtFtCtAtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StB0F0Czzzz0Ezz0AtGyEzyzzyEtG0B0ByC0DtG0F0FyEyCtGtD0A0E0EtC0D0AzzyCyCyBtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2StByCtByE0CyD0ByEtGtCyE0AtBtG0CtC0DtDtGyBtAzz0DtGtC0AtD0C0E0BtAtBtA0AtA0D2Q&cr=1945958739&ir=
    [C:\Users\BastienetYanis\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Supprimée [Extension] : acfoobbgoakpihljnfedbcfaipcdlfhk
    [C:\Users\BastienetYanis\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Supprimée [Extension] : bopakagnckmlgajfccecajhnimjiiedh
    [C:\Users\BastienetYanis\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Supprimée [Extension] : majjphhgppkndjjkmhhnbgafooenebhd
    [C:\Users\BastienetYanis\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Supprimée [Extension] : mnanplinmmnjhobaliikmelmmjpoogkb
    [C:\Users\BastienetYanis\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Supprimée [Extension] : oilkkkefbalmbfppgjmgjoefbclebkce
    [C:\Users\BastienetYanis\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Supprimée [Extension] : klhlfdbffplhpkpalkmacjejfbdeefaj
    [C:\Users\BastienetYanis\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Supprimée [Startup_URLs] : hxxp://search.conduit.com/?ctid=CT2269050&SearchSource=48
    [C:\Users\BastienetYanis\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Supprimée [Default_Search_Provider_Data] : {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}{google:contextualSearchVersion}ie={inputEncoding}",
    "usage_count": 0
    }
    },
    "extensions": {
    "settings": {
    "acfoobbgoakpihljnfedbcfaipcdlfhk": {
    "ack_external": true,
    "active_permissions": {
    "api": [ "tabs", "webNavigation" ],
    "explicit_host": [ "\u003Call_urls>", "chrome://favicon/*" ]
    },
    "creation_flags": 9,
    "from_bookmark": false,
    "from_webstore": true,
    "initial_keybindings_set": true,
    "install_time": "13046604241381886",
    "install_warning_on_enable": false,
    "lastpingday": "13046598012468886",
    "location": 6,
    "manifest": {
    "background": {
    "scripts": [ "background.js" ]
    },
    "chrome_url_overrides": {
    "newtab": "redirect.html"
    },
    "description": "Buenosearch Toolbar

    -\\ Opera v0.0.0.0

    AdwCleaner[R0].txt - [71989 octets] - [18/03/2015 14:59:26]
    AdwCleaner[R1].txt - [1121 octets] - [18/03/2015 17:28:43]
    AdwCleaner[R2].txt - [1490 octets] - [20/03/2015 09:36:40]
    AdwCleaner[R3].txt - [2229 octets] - [22/03/2015 20:54:21]
    AdwCleaner[R4].txt - [1241 octets] - [24/03/2015 19:02:33]
    AdwCleaner[R5].txt - [7854 octets] - [31/03/2015 00:57:04]
    AdwCleaner[S0].txt - [67067 octets] - [18/03/2015 15:10:56]
    AdwCleaner[S1].txt - [2109 octets] - [23/03/2015 01:25:19]
    AdwCleaner[S2].txt - [1308 octets] - [24/03/2015 20:49:12]
    AdwCleaner[S3].txt - [7829 octets] - [31/03/2015 01:06:11]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [7889 octets] ##########
    1. les pages fatal xxx dangerous windows s'ouvre sans arret depuis tout a l'heure j'ai envoyer les liens demander que dois je faire maintenant??
      1. que dois je faire ensuite??
    2. ~ Rapport de ZHPDiag v2015.3.29.33 - Nicolas Coolman (29/03/2015)
      ~ Lancé par BastienetYanis (31/03/2015 15:41:21)
      ~ Facebook : https://www.facebook.com/nicolascoolman1
      ~ Adresse du Forum https://nicolascoolman.eu
      ~ Traduit par Nicolas Coolman
      ~ Etat de la version : Version à jour.
      ~ Liste blanche : Désactivée par l'utilisateur
      ~ Elévation des Privilèges : OK
      ~ User Account Control (UAC): Deactivate by program

      ---\\ Navigateurs Internet
      MSIE: Internet Explorer v11.0.9600.17690
      GCIE: Google Chrome v41.0.2272.101 (Defaut)

      ---\\ Informations sur les produits Windows
      ~ Langage: Français
      Windows Server License Manager Script : OK
      ~ Windows(R) Operating System, OEM_DM channel
      Windows ID Activation : OK
      ~ Windows Partial Key : JHRD6
      Windows License : OK
      ~ Windows Remaining Initializations Number : 999
      Software Protection Service (Protection logicielle) : OK
      Windows Automatic Updates : OK
      Windows Activation Technologies : OK
      Windows 8.1, 64-bit (Build 9600)

      ---\\ Logiciels de protection du système
      Avast Free Antivirus v10.0.2208
      Malwarebytes Anti-Malware version 2.1.4.1018
      Ad-Aware Antivirus v11.6.306.7947
      McAfee Security Scan Plus v3.0.285.6
      Windows Defender W8 (Deactivate)

      ---\\ Logiciels d'optimisation du système
      CCleaner v5.04

      ---\\ Logiciels de partage PeerToPeer

      ---\\ Surveillance de Logiciels
      Adobe Flash Player 16 NPAPI
      Adobe Reader XI
      Java 7 Update 40 (64-bit)

      ---\\ Informations sur le système
      ~ Processor: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
      ~ Operating System: 64 Bits
      Boot mode: Normal (Normal boot)
      Total RAM: 3981 MB (39% free)
      System Restore: Activé (Enable)
      System drive C: has 91 GB (49%) free of 186 GB

      ---\\ Mode de connexion au système
      ~ Computer Name: SANDRINA
      ~ User Name: BastienetYanis
      ~ All Users Names: HomeGroupUser$, BastienetYanis, Administrateur,
      ~ Unselected Option: None
      Logged in as Administrator

      ---\\ Variables d'environnement
      ~ System Unit : C:\
      ~ %AppZHP% : C:\Users\BastienetYanis\AppData\Roaming\ZHP\
      ~ %AppData% : C:\Users\BastienetYanis\AppData\Roaming\
      ~ %Desktop% : C:\Users\BastienetYanis\Desktop\
      ~ %Favorites% : C:\Users\BastienetYanis\Favorites\
      ~ %LocalAppData% : C:\Users\BastienetYanis\AppData\Local\
      ~ %StartMenu% : C:\Users\BastienetYanis\AppData\Roaming\Microsoft\Windows\Start Menu\
      ~ %Windir% : C:\Windows\
      ~ %System% : C:\Windows\System32\

      ---\\ Enumération des unités disques
      C: Hard drive, Flash drive, Thumb drive (Free 91 Go of 186 Go)
      D: Hard drive, Flash drive, Thumb drive (Free 258 Go of 258 Go)
      E: CD-ROM drive (Not Inserted)

      ---\\ Etat du Centre de Sécurité Windows
      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
      [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
      [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
      [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
      [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
      ~ Security Center: 49 Scanned in 00mn 00s

      ---\\ Recherche particulière de fichiers génériques
      [MD5.C10A66189DC8C090E7C84873EDCEBC88] - (.Microsoft Corporation - Explorateur Windows.) (.28/01/2015 - 00:47:12.) -- C:\Windows\Explorer.exe [2501368]
      [MD5.A570A64292214C43E0BA50E6A72A6380] - (.Microsoft Corporation - Application de démarrage de Windows.) (.29/10/2014 - 02:25:54.) -- C:\Windows\System32\Wininit.exe [145920]
      [MD5.36F99BD8A0F09BDBB7850A138845A014] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.20/02/2015 - 02:28:25.) -- C:\Windows\System32\wininet.dll [2358784]
      [MD5.EC498BAE1F0D3E0E401C963F8D76C437] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.29/10/2014 - 02:22:52.) -- C:\Windows\System32\Winlogon.exe [572416]
      [MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/12/2013 - 09:54:07.) -- C:\Windows\System32\sppcomapi.dll [447488]
      [MD5.374E27295F0A9DCAA8FC96370F9BEEA5] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.30/05/2014 - 04:03:03.) -- C:\Windows\system32\Drivers\AFD.sys [563200]
      [MD5.74B14192CF79A72F7536B27CB8814FBD] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.22/08/2013 - 13:43:41.) -- C:\Windows\system32\Drivers\atapi.sys [26464]
      [MD5.2FA6510E33F7DEFEC03658B74101A9B9] - (.Microsoft Corporation - CD-ROM File System Driver.) (.22/08/2013 - 12:40:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [88576]
      [MD5.C6796EA22B513E3457514D92DCDB1A3D] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.22/08/2013 - 09:46:35.) -- C:\Windows\system32\Drivers\Cdrom.sys [164352]
      [MD5.A03F362C5557E238CBFA914689C77248] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.06/03/2014 - 10:22:50.) -- C:\Windows\system32\Drivers\DfsC.sys [134144]
      [MD5.D4B7ED39C7900384D9E5C1283F1E7926] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.24/07/2014 - 12:45:39.) -- C:\Windows\system32\Drivers\HDAudBus.sys [76800]
      [MD5.D887446F3F6051C60C26F4FD1FC8D43F] - (.Microsoft Corporation - Pilote de port i8042.) (.07/10/2014 - 04:29:50.) -- C:\Windows\system32\Drivers\i8042prt.sys [107520]
      [MD5.B7342B3C58E91107F6E946A93D9D4EFD] - (.Microsoft Corporation - IP Network Address Translator.) (.27/11/2013 - 13:02:29.) -- C:\Windows\system32\Drivers\IpNat.sys [142848]
      [MD5.31233271EDE50D1BBB220F78AFA60486] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.08/10/2014 - 08:32:10.) -- C:\Windows\system32\Drivers\MRxSmb.sys [405504]
      [MD5.0217532E19A748F0E5D569307363D5FD] - (.Microsoft Corporation - MBT Transport driver.) (.22/08/2013 - 12:37:02.) -- C:\Windows\system32\Drivers\netBT.sys [282624]
      [MD5.7F68063A5A0461E02BC860CE0E6BFDDC] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.15/10/2014 - 09:32:37.) -- C:\Windows\system32\Drivers\ntfs.sys [2025792]
      [MD5.764B1121867B2D9B31C491668AC72B2B] - (.Microsoft Corporation - Pilote de port parallèle.) (.22/08/2013 - 12:40:02.) -- C:\Windows\system32\Drivers\Parport.sys [94208]
      [MD5.BBB6272B7F46C4640A8CDB8A70C3450F] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.22/08/2013 - 12:35:51.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [120832]
      [MD5.680C1DAE268B6FB67FA21B389A8B79EF] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) (.14/11/2013 - 08:16:40.) -- C:\Windows\system32\Drivers\rdpdr.sys [195584]
      [MD5.FFF28F9F6823EB1756C60F1649560BBF] - (.Microsoft Corporation - TDI Translation Driver.) (.22/08/2013 - 14:25:35.) -- C:\Windows\system32\Drivers\tdx.sys [107520]
      [MD5.64CA2B4A49A8EAF495E435623ECCE7DB] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.19/06/2014 - 03:13:36.) -- C:\Windows\system32\Drivers\volsnap.sys [310080]
      ~ Generic Processes: Scanned in 00mn 01s

      ---\\ Etat des fichiers cachés (Caché/Total)
      ~ Mes images (My Pictures) : 10/1860
      ~ Mes musiques (My Musics) : 27/220
      ~ Mes Videos (My Videos) : 1/21
      ~ Mes Favoris (My Favorites) : 1/11
      ~ Mes Documents (My Documents) : 2/341
      ~ Mon Bureau (My Desktop) : 2/309
      ~ Menu demarrer (Programs) : 1/27
      ~ Hidden Files: Scanned in 00mn 11s

      ---\\ Processus lancés
      [MD5.D0A518D233620D59A3D2D79511FBB736] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [6212408] [PID.3108]
      [MD5.F217EF2EA31D8F73504B1CD2F9787D9D] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [809288] [PID.5204]
      [MD5.96B182BCB95057D4C7B8E25811BF6D2A] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [22041192] [PID.5896]
      [MD5.B7995C675014EEBE77A0BEB7AFCCFC08] - (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432] [PID.2360]
      [MD5.DB0C938BC311B31CF90C13821AE682B3] - (.ASUSTeK Computer Inc. - ASUS Live Update.) -- C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [1559936] [PID.6936]
      [MD5.70BC8374217BFC5C24D4504C2459FEB6] - (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [111120] [PID.2964]
      [MD5.695BE0A3D240FFF4B876D9289110634A] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe [5227648] [PID.6840]
      [MD5.C570FD825751F7805CE226F68C4605DE] - (.ASUS - ACMON.) -- C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [54488] [PID.3604]
      [MD5.B07086D59443DAC6A668D691B27B968C] - (.ASUSTeK Computer Inc. - ASUS Color Engine.) -- C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [176240] [PID.3640]
      [MD5.97432AB9F1B3B3E63E778C1E69E71E91] - (.ASUSTek Computer Inc. - ASUS USB Charger Plus.) -- C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [1124032] [PID.2860]
      [MD5.F7AB23B768E0470EAA01353F7CCCDB4B] - (.ASUSTeK Computer Inc. - ASUS Quick Gesture Exe.) -- C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe [20280] [PID.7640]
      [MD5.2D32F0EF950AED6AD007D042676FD39E] - (.ASUSTek Computer Inc. - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [328064] [PID.7184]
      [MD5.0B50F07E63EE15383CDFDC26D7A3D3E3] - (.ASUSTek Computer Inc. - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [205184] [PID.7188]
      [MD5.1FF6EB4030CC1C5B49F333D4B45E5FCC] - (.Microsoft Corporation - Microsoft Office Document Cache Sync Client.) -- C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.exe [84200] [PID.5656]
      [MD5.06CC578BC150D9AAAE20672130A36CB9] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8190976] [PID.5292]
      ~ Processes Running: Scanned in 00mn 03s

      ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
      C:\Users\BastienetYanis\AppData\Local\Google\Chrome\User Data\Default\Preferences

      ---\\ Liste des dossiers d'extension Google Chrome
      ~ Google Lines Browser: 0 Scanned in 00mn 07s

      ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
      M2 - MFEP: RegExtension {0011ebb6-4390-4e21-a2e3-8dd2a85e92d2} . (...) -- C:\Program Files (x86)\DealsCompare\150.xpi (.not file.) =>PUP.DealsCompare
      P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll
      P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.67.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\WINDOWS\system32\npDeployJava1.dll
      P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.67.2] - (.Oracle Corporation - Next Generation Java Plug-in 10.67.2 for Mozilla browsers.) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
      P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (...) -- C:\Users\BastienetYanis\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (.not file.)
      P2 - FPN: [HKCU] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS - Unity Player 4.5.3f3.) -- C:\Users\BastienetYanis\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
      ~ Firefox Browser: 6 Scanned in 00mn 01s

      ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
      R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
      R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
      R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
      R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
      R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?gws_rd=ssl
      R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
      R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.com/?gws_rd=ssl
      R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
      R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
      R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.com/?gws_rd=ssl
      R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = about:newtab
      R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/?gws_rd=ssl
      R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
      R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
      R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.9600.17496 (winblue_r5.141121-1500)) -- C:\Windows\SysWOW64\ieframe.dll
      ~ IE Browser: 15 Scanned in 00mn 00s

      ---\\ Internet Explorer, Proxy Management (R5)
      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
      R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
      ~ Proxy management: Scanned in 00mn 00s

      ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
      F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
      F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
      F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
      ~ Keys: Scanned in 00mn 00s

      ---\\ Hosts file redirection (O1)
      O1 - Hosts: 54.225.95.126 dmcecclamecbinmplcolhaljlclhbgah
      ~ Nombre lignes détournées 1/23 (Hosts file redirected)
      ~ Hosts File: Scanned in 00mn 00s

      ---\\ Browser Helper Objects de navigateur (O2)
      O2 - BHO: Canon Easy-WebPrint EX BHO [64Bits] - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} . (.CANON INC. - Easy-WebPrint EX.) -- C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
      O2 - BHO: avast! Online Security [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
      O2 - BHO: Safe Money Plugin [64Bits] - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} . (...) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (.not file.)
      O2 - BHO: Lync Click to Call BHO [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} Clé orpheline
      O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} Clé orpheline
      O2 - BHO: (no name) [64Bits] - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} Clé orpheline
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} Clé orpheline
      ~ BHO: 10 Scanned in 00mn 00s

      ---\\ Internet Explorer Toolbars (O3)
      O3 - Toolbar: (no name) - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline
      O3 - Toolbar: Canon Easy-WebPrint EX - [HKLM]{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} . (.CANON INC. - Easy-WebPrint EX.) -- C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll
      O3 - Toolbar\WebBrowser: (no name) - [HKCU]{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} Clé orpheline
      ~ Toolbar: Scanned in 00mn 00s

      ---\\ Autres liens utilisateurs (O4)
      O4 - GS\QuickLaunch [BastienetYanis]: Launch Internet Explorer Browser.lnk . (...) -- C:\Program Files (x86)\speed browser\Application\chrome.exe (.not file.) =>PUP.SpeedBrowser
      O4 - GS\Program [BastienetYanis]: Aide.lnk . (...) -- C:\Program Files (x86)\Probit Software\Easy Speed PC\EasySpeedPC.chm (.not file.) =>PUP.ProbitSoftware
      O4 - GS\Program [BastienetYanis]: Search.lnk . (...) -- C:\Program Files (x86)\speed browser\Application\chrome.exe (.not file.) =>PUP.SpeedBrowser
      O4 - GS\Program [BastienetYanis]: Uninstall.lnk . (...) -- C:\Program Files (x86)\Probit Software\Easy Speed PC\uninstall.exe (.not file.) =>PUP.ProbitSoftware
      O4 - GS\Desktop [BastienetYanis]: SpyHunter.lnk . (...) -- C:\Program Files (x86)\Enigma Software Group\SpyHunter\SpyHunter4.exe (.not file.) =>PUP.EnigmaSoftware
      ~ Global Startup: 5 Scanned in 00mn 07s

      ---\\ Applications lancées au démarrage du système (O4)
      O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
      O4 - HKLM\..\Run: [V-bates] C:\Program Files\V-bates\notifier64.exe (.not file.) =>Adware.Incredibar
      O4 - HKLM\..\Run: [Zune Launcher] . (.Microsoft Corporation - Zune Auto-Launcher.) -- C:\Program Files\Zune\ZuneLauncher.exe
      O4 - HKLM\..\Run: [AdAwareTray] . (...) -- C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareTray.exe
      O4 - HKCU\..\Run: [Power2GoExpress] . (.CyberLink Corp. - Power2Go Desktop Burning Gadget.) -- C:\Program Files (x86)\CyberLink\Power2Go\Power2GoExpress.exe
      O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\BastienetYanis\AppData\Local\Facebook\Update\FacebookUpdate.exe
      O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_9F74275482CCA6BB132B2854FD98E9A5] . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      O4 - HKCU\..\Run: [Allmyapps] C:\Users\BastienetYanis\AppData\Roaming\Allmyapps\Allmyapps.exe (.not file.)
      O4 - HKCU\..\Run: [Allmyapps Update] C:\Users\BastienetYanis\AppData\Roaming\Allmyapps\AllmyappsUpdater.exe (.not file.)
      O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
      O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd
      O4 - HKLM\..\Wow6432Node\Run: [CLMLServer] . (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
      O4 - HKLM\..\Wow6432Node\Run: [CanonQuickMenu] . (.CANON INC. - Canon Quick Menu.) -- C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.exe
      O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
      O4 - HKUS\S-1-5-21-3911577134-1621002325-3162563356-1001\..\Run: [Power2GoExpress] . (.CyberLink Corp. - Power2Go Desktop Burning Gadget.) -- C:\Program Files (x86)\CyberLink\Power2Go\Power2GoExpress.exe
      O4 - HKUS\S-1-5-21-3911577134-1621002325-3162563356-1001\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\BastienetYanis\AppData\Local\Facebook\Update\FacebookUpdate.exe
      O4 - HKUS\S-1-5-21-3911577134-1621002325-3162563356-1001\..\Run: [GoogleChromeAutoLaunch_9F74275482CCA6BB132B2854FD98E9A5] . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      O4 - HKUS\S-1-5-21-3911577134-1621002325-3162563356-1001\..\Run: [Allmyapps] C:\Users\BastienetYanis\AppData\Roaming\Allmyapps\Allmyapps.exe (.not file.)
      O4 - HKUS\S-1-5-21-3911577134-1621002325-3162563356-1001\..\Run: [Allmyapps Update] C:\Users\BastienetYanis\AppData\Roaming\Allmyapps\AllmyappsUpdater.exe (.not file.)
      O4 - HKUS\S-1-5-21-3911577134-1621002325-3162563356-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
      O4 - HKUS\S-1-5-21-3911577134-1621002325-3162563356-1001\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd
      ~ Application: Scanned in 00mn 00s

      ---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
      O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
      ~ IE Control Panel: 1 Scanned in 00mn 00s

      ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
      O9 - Extra button: Se&nd to OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\ONBttnIE.dll =>.Microsoft Corporation
      O9 - Extra button: Lync Click to Call [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -- C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\lync.exe (.not file.)
      O9 - Extra button: OneNote Lin&ked Notes [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll =>.Microsoft Corporation
      ~ IE Extra Buttons: Scanned in 00mn 00s

      ---\\ Winsock hijacker (Layered Service Provider) (O10)
      O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\WINDOWS\system32\napinsp.dll
      O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\WINDOWS\system32\pnrpnsp.dll
      O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\WINDOWS\system32\pnrpnsp.dll
      O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\WINDOWS\system32\NLAapi.dll
      O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll =>.Microsoft Corporation
      O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
      ~ Winsock: 6 Scanned in 00mn 00s

      ---\\ Modification Domaine/Adresses DNS (O17)
      O17 - HKLM\System\CCS\Services\Tcpip\..\{5F1D33C0-D5C1-4D82-8C19-C19C96494532}: DhcpNameServer = 109.0.66.10 109.0.66.20
      O17 - HKLM\System\CCS\Services\Tcpip\..\{DD1A6843-CB00-4DCC-9A44-20F649F6D9CE}: DhcpNameServer = 77.234.40.79
      O17 - HKLM\System\CS1\Services\Tcpip\..\{5F1D33C0-D5C1-4D82-8C19-C19C96494532}: DhcpNameServer = 109.0.66.10 109.0.66.20
      O17 - HKLM\System\CS1\Services\Tcpip\..\{DD1A6843-CB00-4DCC-9A44-20F649F6D9CE}: DhcpNameServer = 77.234.40.79
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 109.0.66.10 109.0.66.20
      ~ Domain: Scanned in 00mn 00s

      ---\\ Protocole additionnel (O18)
      O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
      O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
      ~ Protocole Additionnel: Scanned in 00mn 00s

      ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
      O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
      ~ Winlogon: Scanned in 00mn 00s

      ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
      O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
      ~ SSODL: 1 Scanned in 00mn 00s

      ---\\ Liste des services NT non Microsoft et non désactivés (O23)
      O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
      O23 - Service: AFBAgent (AFBAgent) . (.ASUSTeK Computer Inc. - ASUS FastBoot.) - C:\Windows\system32\FBAgent.exe
      O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
      O23 - Service: Service de sauvegarde avast! BackUp (avastBackUpbackup) . (.avast! - Programme d'amorçage du service avast! Back.) - C:\Program Files\AVAST Software\BackUp\avastBackUpbackup.exe
      O23 - Service: Freemake Improver (Freemake Improver) . (.Freemake - FreemakeUtilsService.) - C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
      O23 - Service: GamesAppIntegrationService (GamesAppIntegrationService) . (.WildTangent - WildTangent Games App Integration Service.) - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
      O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc
      O23 - Service: Ad-Aware Service 11 (LavasoftAdAwareService11) . (...) - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareService.exe
      O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
      O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
      O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
      O23 - Service: SpyHunter 4 Service (SpyHunter 4 Service) . (.Enigma Software Group USA, LLC. - Service scanner interface.) - C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe =>PUP.EnigmaSoftware
      ~ Services: 12 Scanned in 00mn 45s

      ---\\ Enumération Active Desktop & MHTML Editor (O24)
      O24 - Default MHTML Editor: Last - .(...) - (.not file.)
      ~ Desktop Component: 4 Scanned in 00mn 00s

      ---\\ Enumère les données de BootExecute (BEX) (O34)
      O34 - HKLM BootExecute: (autocheck autochk *) - File not found
      O34 - HKLM BootExecute: (sdnclean64.exe) - File not found
      ~ BEX: 2 Scanned in 00mn 00s

      ---\\ Tâches planifiées en automatique (O39)
      [MD5.3E04F1E482357B1FC8B088197C3D9FF8] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152]
      [MD5.080255CDCB878813B481B8C348D47D8E] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [267440]
      [MD5.C6D3BB61E24F66EB976C6CC55346B5F2] [APT] [ASUS InstantOn Config] (.ASUS.) -- C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe [1196416]
      [MD5.DB0C938BC311B31CF90C13821AE682B3] [APT] [ASUS Live Update] (.ASUSTeK Computer Inc..) -- C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [1559936]
      [MD5.0BC5A4142F38A6BB35DECD01A2BC2ED7] [APT] [ASUS P4G] (.ASUS.) -- C:\Program Files\ASUS\P4G\BatteryLife.exe [1018240]
      [MD5.6B0C1049D98223D31165198D2DD3E062] [APT] [ASUS Smart Gesture Launcher] (.AsusTek.) -- C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [18232]
      [MD5.C570FD825751F7805CE226F68C4605DE] [APT] [ASUS Splendid ACMON] (.ASUS.) -- C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [54488]
      [MD5.B07086D59443DAC6A668D691B27B968C] [APT] [ASUS Splendid ColorU] (.ASUSTeK Computer Inc..) -- C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [176240]
      [MD5.97432AB9F1B3B3E63E778C1E69E71E91] [APT] [ASUS USB Charger Plus] (.ASUSTek Computer Inc..) -- C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [1124032]
      [MD5.7529BF17445E16315A95B450CE985C11] [APT] [AsusVibeSchedule] (...) -- C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [1957040]
      [MD5.4BB7714617D50D77FCDA6B0182FD8A9A] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [857888]
      [MD5.F217EF2EA31D8F73504B1CD2F9787D9D] [APT] [avastBCLRestartS-1-5-21-3911577134-1621002325-3162563356-1001] (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [809288]
      [MD5.A75228DE9117A017BC7A3B44953B2648] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [5529880]
      [MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-3911577134-1621002325-3162563356-1001Core] (.Facebook Inc..) -- C:\Users\BastienetYanis\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096]
      [MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-3911577134-1621002325-3162563356-1001UA] (.Facebook Inc..) -- C:\Users\BastienetYanis\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096]
      [MD5.6ACCFC315FF55C983934811451DDEE66] [APT] [FastAgain PC Booster] (.Activeris.) -- C:\Program Files (x86)\FastAgain PC Booster\PCBooster.exe [8034816] =>PUP.Activeris
      [MD5.6ACCFC315FF55C983934811451DDEE66] [APT] [FastAgain PC Booster_DEFAULT] (.Activeris.) -- C:\Program Files (x86)\FastAgain PC Booster\PCBooster.exe [8034816] =>PUP.Activeris
      [MD5.6ACCFC315FF55C983934811451DDEE66] [APT] [FastAgain PC Booster_UPDATES] (.Activeris.) -- C:\Program Files (x86)\FastAgain PC Booster\PCBooster.exe [8034816] =>PUP.Activeris
      [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
      [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]
      [MD5.F9D8F716896508EB088535DD4B4C296C] [APT] [Norton Security Scan for BastienetYanis] (.Symantec Corporation.) -- C:\Program Files (x86)\NORTON~2\Engine\410~1.28\Nss.exe [1419104]
      [MD5.00000000000000000000000000000000] [APT] [ParetoLogic Update Version3 Startup Task] (...) -- C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe (.not file.) [0] =>PUP.Paretologic
      [MD5.F845E730A534BA17372368372DF01579] [APT] [SpyHunter4Startup] (.Enigma Software Group USA, LLC..) -- C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe [8260480] =>PUP.EnigmaSoftware
      [MD5.00000000000000000000000000000000] [APT] [UpdateVO] (...) -- C:\Users\BastienetYanis\AppData\Roaming\VOPackage\VOPackage.exe (.not file.) [0] =>Adware.Downware
      [MD5.00000000000000000000000000000000] [APT] [{148A78C4-6AB6-4F04-B670-9373698B5E22}] (...) -- C:\Users\BastienetYanis\AppData\Roaming\Nosibay\Bubble Dock\Uninstall Bubble Dock.exe (.not file.) [0] =>PUP.BubbleDock
      [MD5.00000000000000000000000000000000] [APT] [{9B02FA26-A9DC-49AB-B067-F42CB88B2701}] (...) -- c:\program files (x86)\speed browser\application\chrome.exe (.not file.) [0] =>PUP.SpeedBrowser
      [MD5.00000000000000000000000000000000] [APT] [{9B1EACFF-21DD-4567-A7E4-7A77E88D07A8}] (...) -- c:\program files (x86)\speed browser\application\chrome.exe (.not file.) [0] =>PUP.SpeedBrowser
      [MD5.F217EF2EA31D8F73504B1CD2F9787D9D] [APT] [{AEAA0A87-9BAB-4EE4-A6FC-B00CFB7F5D9A}] (.Google Inc..) -- c:\program files (x86)\google\chrome\application\chrome.exe [809288]
      O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
      O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
      O39 - APT: - (..) -- C:\Windows\Tasks\AllmyappsUpdateTask.job [432]
      O39 - APT: FacebookUpdateTaskUserS-1-5-21-3911577134-1621002325-3162563356-1001Core - (.Facebook Inc..) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3911577134-1621002325-3162563356-1001Core.job [960]
      O39 - APT: FacebookUpdateTaskUserS-1-5-21-3911577134-1621002325-3162563356-1001Core - (.Facebook Inc..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3911577134-1621002325-3162563356-1001Core [960]
      O39 - APT: FacebookUpdateTaskUserS-1-5-21-3911577134-1621002325-3162563356-1001UA - (.Facebook Inc..) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3911577134-1621002325-3162563356-1001UA.job [982]
      O39 - APT: FacebookUpdateTaskUserS-1-5-21-3911577134-1621002325-3162563356-1001UA - (.Facebook Inc..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3911577134-1621002325-3162563356-1001UA [982]
      O39 - APT: FastAgain PC Booster_DEFAULT - (.Activeris.) -- C:\Windows\Tasks\FastAgain PC Booster_DEFAULT.job [324] =>PUP.Activeris
      O39 - APT: FastAgain PC Booster_DEFAULT - (.Activeris.) -- C:\Windows\System32\Tasks\FastAgain PC Booster_DEFAULT [324] =>PUP.Activeris
      O39 - APT: FastAgain PC Booster_UPDATES - (.Activeris.) -- C:\Windows\Tasks\FastAgain PC Booster_UPDATES.job [332] =>PUP.Activeris
      O39 - APT: FastAgain PC Booster_UPDATES - (.Activeris.) -- C:\Windows\System32\Tasks\FastAgain PC Booster_UPDATES [332] =>PUP.Activeris
      O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1090]
      O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1090]
      O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1094]
      O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1094]
      O39 - APT: Norton Security Scan for BastienetYanis - (.Symantec Corporation.) -- C:\Windows\Tasks\Norton Security Scan for BastienetYanis.job [488]
      O39 - APT: Norton Security Scan for BastienetYanis - (.Symantec Corporation.) -- C:\Windows\System32\Tasks\Norton Security Scan for BastienetYanis [488]
      O39 - APT: - (..) -- C:\Windows\Tasks\OWST.job [1380]
      O39 - APT: ParetoLogic Update Version3 Startup Task - (...) -- C:\Windows\Tasks\ParetoLogic Update Version3 Startup Task.job [530] =>PUP.Paretologic
      O39 - APT: ParetoLogic Update Version3 Startup Task - (...) -- C:\Windows\System32\Tasks\ParetoLogic Update Version3 Startup Task [530] =>PUP.Paretologic
      O39 - APT: - (..) -- C:\Windows\Tasks\RJIIB.job [1382]
      ~ Scheduled Task: 44 Scanned in 00mn 25s

      ---\\ Composants installés (ActiveSetup Installed Components) (O40)
      O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
      O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll =>.Microsoft Corporation
      O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
      O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe =>.Microsoft Corporation
      O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
      O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
      O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
      O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
      O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\System32\mscories.dll
      ~ Active Setup: 9 Scanned in 00mn 00s

      ---\\ Pilotes lancés au démarrage du système (O41)
      O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) - C:\Windows\system32\drivers\afd.sys
      O41 - Driver: C:\Windows\System32\drivers\ahcache.sys (ahcache) . (.Microsoft Corporation - Application Compatibility Cache.) - C:\Windows\System32\DRIVERS\ahcache.sys
      O41 - Driver: (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\drivers\aswRdr2.sys
      O41 - Driver: (aswSnx) . (.AVAST Software - avast! Virtualization Driver.) - C:\Windows\system32\drivers\aswSnx.sys
      O41 - Driver: (aswSP) . (.AVAST Software - avast! self protection module.) - C:\Windows\system32\drivers\aswSP.sys
      O41 - Driver: (ATKWMIACPIIO) . (.ASUS - ATK WMIACPI Utility.) - C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys
      O41 - Driver: (avastBackUpFilter) . (.Mozy, Inc. - Mozy Change Monitor Filter Driver.) - C:\Windows\System32\DRIVERS\avastBackUp.sys
      O41 - Driver: (BasicDisplay) . (.Microsoft Corporation - Microsoft Basic Display Driver.) - C:\Windows\system32\drivers\BasicDisplay.sys
      O41 - Driver: (BasicRender) . (.Microsoft Corporation - Microsoft Basic Render Driver.) - C:\Windows\system32\drivers\BasicRender.sys
      O41 - Driver: cdrom.inf (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
      O41 - Driver: C:\Windows\System32\drivers\dam.sys (dam) . (.Microsoft Corporation - DAM Kernel Driver.) - C:\Windows\System32\drivers\dam.sys
      O41 - Driver: C:\Windows\System32\wkssvc.dll (Dfsc) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
      O41 - Driver: (eeCtrl) . (.Symantec Corporation - Symantec Eraser Control Driver.) - C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
      O41 - Driver: (mbamchameleon) . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) - C:\WINDOWS\system32\drivers\mbamchameleon.sys
      O41 - Driver: mssmbios.inf (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
      O41 - Driver: netnb.inf (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
      O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
      O41 - Driver: npsvctrig.inf (npsvctrig) . (.Microsoft Corporation - Named pipe service triggers.) - C:\Windows\system32\drivers\npsvctrig.sys
      O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
      O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
      O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
      O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys
      O41 - Driver: C:\Windows\System32\drivers\vwififlt.sys (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\system32\DRIVERS\vwififlt.sys
      ~ Drivers: 46 Scanned in 00mn 01s

      ---\\ Logiciels installés (O42)
      O42 - Logiciel: Ad-Aware Antivirus - (.Lavasoft.) [HKLM][64Bits] -- {FF054A8C-C0A4-4C78-8910-E2A459BEFF05}_AdAwareUpdater
      O42 - Logiciel: AdAwareInstaller - (.Lavasoft.) [HKLM][64Bits] -- {2676D270-8FE3-4C9F-ADDB-6A8D22FE5C4C}
      O42 - Logiciel: AdAwareUpdater - (.Lavasoft.) [HKLM][64Bits] -- {FF054A8C-C0A4-4C78-8910-E2A459BEFF05}
      O42 - Logiciel: Adobe Flash Player 16 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI
      O42 - Logiciel: Adobe Reader XI (11.0.10) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
      O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001802114130}
      O42 - Logiciel: Allmyapps - (.Allmyapps.) [HKCU][64Bits] -- Allmyapps
      O42 - Logiciel: AntimalwareEngine - (.Lavasoft.) [HKLM][64Bits] -- {6E5FAEC8-C3C1-44E8-B8DE-CE3F9568BF85}
      O42 - Logiciel: Avast Free Antivirus - (.AVAST Software.) [HKLM][64Bits] -- Avast
      O42 - Logiciel: Avast Packages - (...) [HKCU][64Bits] -- Avast Packages =>Adware.InstallCore
      O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner
      O42 - Logiciel: Freemake Video Converter version 4.1.5 - (.Ellora Assets Corporation.) [HKLM][64Bits] -- Freemake Video Converter_is1
      O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
      O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
      O42 - Logiciel: Image Resizer - (.Tweaks.) [HKLM][64Bits] -- Tweaks Image Resizer
      O42 - Logiciel: Image Resizer Packages - (...) [HKCU][64Bits] -- Image Resizer Packages =>Adware.InstallCore
      O42 - Logiciel: Java 7 Update 40 (64-bit) - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F86417040F0}
      O42 - Logiciel: Java 7 Update 67 (64-bit) - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F06417067FF}
      O42 - Logiciel: Java technology allows you to work and play in a secure computing environme - (...) [HKCU][64Bits] -- Java technology allows you to work and play in a secure computing environment. Packages
      O42 - Logiciel: Lollipop - (.Lollipop Network, S.L..) [HKCU][64Bits] -- lollipop_01070657 =>Adware.Lollipop
      O42 - Logiciel: Malwarebytes Anti-Malware version 2.1.4.1018 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1
      O42 - Logiciel: McAfee Security Scan Plus - (.McAfee, Inc..) [HKLM][64Bits] -- McAfee Security Scan
      O42 - Logiciel: Microsoft OneDrive - (.Microsoft Corporation.) [HKCU][64Bits] -- OneDriveSetup.exe
      O42 - Logiciel: Office 15 Click-to-Run Extensibility Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-008C-0000-0000-0000000FF1CE}
      O42 - Logiciel: Office 15 Click-to-Run Licensing Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-008F-0000-1000-0000000FF1CE}
      O42 - Logiciel: Office 15 Click-to-Run Localization Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-008C-040C-0000-0000000FF1CE}
      O42 - Logiciel: Snap.Do Engine - (.ReSoft Ltd..) [HKCU][64Bits] -- {b9b81f85-446e-4d45-aff5-d95c2be8fbf2} =>Hijacker.SmartBar
      O42 - Logiciel: SpyHunter 4 - (.Enigma Software Group, LLC.) [HKLM][64Bits] -- SpyHunter =>PUP.EnigmaSoftware
      O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU][64Bits] -- UnityWebPlayer
      O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN
      O42 - Logiciel: Visual Studio 2012 x64 Redistributables - (.AVG Technologies.) [HKLM][64Bits] -- {8C775E70-A791-4DA8-BCC3-6AB7136F4484}
      O42 - Logiciel: Visual Studio 2012 x86 Redistributables - (.AVG Technologies CZ, s.r.o..) [HKLM][64Bits] -- {98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}
      O42 - Logiciel: Windows Driver Package - ASUS (ATP) Mouse (05/09/2013 1.0.0.173) - (.ASUS.) [HKLM][64Bits] -- 1016059FBF327ED9E3BAE758BD08CF10D3C6252D
      O42 - Logiciel: Windows Mobile Device Updater Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {F2CB8C3C-9C9E-4FAB-9067-655601C5F748}
      O42 - Logiciel: Youtube Music Downloader V7.3.4 - (.Youtube Music Downloader.) [HKLM][64Bits] -- Youtube Music Downloader_is1
      O42 - Logiciel: Zune - (.Microsoft Corporation.) [HKLM][64Bits] -- Zune
      O42 - Logiciel: Zune - (.Microsoft Corporation.) [HKLM][64Bits] -- {9B75648B-6C30-4A0D-9DE6-0D09D20AF5A5}
      O42 - Logiciel: Zune Language Pack (CHS) - (.Microsoft Corporation.) [HKLM][64Bits] -- {2A9DFFD8-4E09-4B91-B957-454805B0D7C4}
      O42 - Logiciel: Zune Language Pack (CHT) - (.Microsoft Corporation.) [HKLM][64Bits] -- {A5A53EA8-A11E-49F0-BDF5-AE536426A31A}
      O42 - Logiciel: Zune Language Pack (CSY) - (.Microsoft Corporation.) [HKLM][64Bits] -- {A8F2E50B-86E2-4D96-9BD2-9758BCC6F9B3}
      O42 - Logiciel: Zune Language Pack (DAN) - (.Microsoft Corporation.) [HKLM][64Bits] -- {8B112338-2B08-4851-AF84-E7CAD74CEB32}
      O42 - Logiciel: Zune Language Pack (DEU) - (.Microsoft Corporation.) [HKLM][64Bits] -- {BE236D9A-52EC-4A17-82DA-84B5EAD31E3E}
      O42 - Logiciel: Zune Language Pack (ELL) - (.Microsoft Corporation.) [HKLM][64Bits] -- {3589A659-F732-4E65-A89A-5438C332E59D}
      O42 - Logiciel: Zune Language Pack (ESP) - (.Microsoft Corporation.) [HKLM][64Bits] -- {6B33492E-FBBC-4EC3-8738-09E16E395A10}
      O42 - Logiciel: Zune Language Pack (FIN) - (.Microsoft Corporation.) [HKLM][64Bits] -- {B4870774-5F3A-46D9-9DFE-06FB5599E26B}
      O42 - Logiciel: Zune Language Pack (FRA) - (.Microsoft Corporation.) [HKLM][64Bits] -- {C68D33B1-0204-4EBE-BC45-A6E432B1D13A}
      O42 - Logiciel: Zune Language Pack (HUN) - (.Microsoft Corporation.) [HKLM][64Bits] -- {C6BE19C6-B102-4038-B2A6-1C313872DBB4}
      O42 - Logiciel: Zune Language Pack (IND) - (.Microsoft Corporation.) [HKLM][64Bits] -- {92ECE3F9-591E-4C12-8A62-B9FCE38BF646}
      O42 - Logiciel: Zune Language Pack (ITA) - (.Microsoft Corporation.) [HKLM][64Bits] -- {C5D37FFA-7483-410B-982B-91E93FD3B7DA}
      O42 - Logiciel: Zune Language Pack (JPN) - (.Microsoft Corporation.) [HKLM][64Bits] -- {D8A781C9-3892-4E2E-9320-480CF896CFBB}
      O42 - Logiciel: Zune Language Pack (KOR) - (.Microsoft Corporation.) [HKLM][64Bits] -- {51C839E1-2BE4-4E77-A1BA-CCEA5DAFA741}
      O42 - Logiciel: Zune Language Pack (MSL) - (.Microsoft Corporation.) [HKLM][64Bits] -- {76BA306B-2AA0-47C0-AB6B-F313AB56C136}
      O42 - Logiciel: Zune Language Pack (NLD) - (.Microsoft Corporation.) [HKLM][64Bits] -- {6740BCB0-5863-47F4-80F4-44F394DE4FE2}
      O42 - Logiciel: Zune Language Pack (NOR) - (.Microsoft Corporation.) [HKLM][64Bits] -- {5DEFD397-4012-46C3-B6DA-E8013E660772}
      O42 - Logiciel: Zune Language Pack (PLK) - (.Microsoft Corporation.) [HKLM][64Bits] -- {8960A0A1-BB5A-479E-92CF-65AB9D684B43}
      O42 - Logiciel: Zune Language Pack (PTB) - (.Microsoft Corporation.) [HKLM][64Bits] -- {07EEE598-5F21-4B57-B40B-46592625B3D9}
      O42 - Logiciel: Zune Language Pack (PTG) - (.Microsoft Corporation.) [HKLM][64Bits] -- {5C93E291-A1CC-4E51-85C6-E194209FCDB4}
      O42 - Logiciel: Zune Language Pack (RUS) - (.Microsoft Corporation.) [HKLM][64Bits] -- {57C51D56-B287-4C11-9192-EC3C46EF76A4}
      O42 - Logiciel: Zune Language Pack (SVE) - (.Microsoft Corporation.) [HKLM][64Bits] -- {6EB931CD-A7DA-4A44-B74A-89C8EB50086F}
      ~ Logic: 51 Scanned in 00mn 00s

      ---\\ HKCU & HKLM Software Keys
      [HKCU\Software\ASKDefaultSearch]
      [HKCU\Software\ASKHomePage]
      [HKCU\Software\ASUS]
      [HKCU\Software\AVAST Software]
      [HKCU\Software\Activeris] =>PUP.Activeris
      [HKCU\Software\Adobe]
      [HKCU\Software\AppDataLow\Software\Adobe]
      [HKCU\Software\AppDataLow\Software\Apps Hat] =>PUP.CrossRider
      [HKCU\Software\AppDataLow\Software\Canon]
      [HKCU\Software\AppDataLow\Software\JavaSoft]
      [HKCU\Software\AppDataLow\Software\Macromedia]
      [HKCU\Software\AppDataLow\Software\Unity]
      [HKCU\Software\AppDataLow\Software\adawarebp]
      [HKCU\Software\AppDataLow]
      [HKCU\Software\Browser]
      [HKCU\Software\Canon]
      [HKCU\Software\Chromium]
      [HKCU\Software\Classes]
      [HKCU\Software\Clients]
      [HKCU\Software\ClkApp]
      [HKCU\Software\CoinisRevShare]
      [HKCU\Software\CyberLink]
      [HKCU\Software\ECAREME]
      [HKCU\Software\Facebook]
      [HKCU\Software\Freemake]
      [HKCU\Software\GamesClient]
      [HKCU\Software\GoldenGate]
      [HKCU\Software\Google]
      [HKCU\Software\HookNetwork]
      [HKCU\Software\IM Providers]
      [HKCU\Software\Intel]
      [HKCU\Software\JavaSoft]
      [HKCU\Software\KasperskyLab]
      [HKCU\Software\Lake]
      [HKCU\Software\Licenses]
      [HKCU\Software\Local AppWizard-Generated Applications]
      [HKCU\Software\MCAFEE]
      [HKCU\Software\Macromedia]
      [HKCU\Software\Mine]
      [HKCU\Software\MozillaPlugins]
      [HKCU\Software\Mozilla]
      [HKCU\Software\Netscape]
      [HKCU\Software\OB]
      [HKCU\Software\ODBC]
      [HKCU\Software\Opera Software]
      [HKCU\Software\Piriform]
      [HKCU\Software\Policies]
      [HKCU\Software\Probit Software] =>PUP.ProbitSoftware
      [HKCU\Software\Realtek]
      [HKCU\Software\RegisteredApplications]
      [HKCU\Software\SP20]
      [HKCU\Software\Safer Networking Limited]
      [HKCU\Software\SearchProtectINTSM] =>PUP.SearchProtect
      [HKCU\Software\ShieldPlus] =>Adware.ShieldPlus
      [HKCU\Software\SkypeRS]
      [HKCU\Software\Smartbar] =>Hijacker.SmartBar
      [HKCU\Software\Software]
      [HKCU\Software\TeleCharger]
      [HKCU\Software\Trolltech]
      [HKCU\Software\TuneUp]
      [HKCU\Software\Unity]
      [HKCU\Software\Waves Audio]
      [HKCU\Software\Wow6432Node]
      [HKCU\Software\ZebHelpProcess Helper]
      [HKCU\Software\avast]
      [HKCU\Software\kde.org]
      [HKCU\Software\skype]
      [HKCU\Software\telecharger-gratuit]
      [HKCU\Software\teras games]
      [HKLM\Software\ASUS]
      [HKLM\Software\ATI Technologies]
      [HKLM\Software\Agere]
      [HKLM\Software\Canon]
      [HKLM\Software\Classes]
      [HKLM\Software\Clients]
      [HKLM\Software\DTS]
      [HKLM\Software\Dolby]
      [HKLM\Software\ECAREME]
      [HKLM\Software\EnigmaSoftwareGroup] =>PUP.EnigmaSoftware
      [HKLM\Software\Google]
      [HKLM\Software\IM Providers]
      [HKLM\Software\Intel]
      [HKLM\Software\JavaSoft]
      [HKLM\Software\Khronos]
      [HKLM\Software\Knowles]
      [HKLM\Software\LSI]
      [HKLM\Software\Lavasoft]
      [HKLM\Software\Macromedia]
      [HKLM\Software\McAfee]
      [HKLM\Software\MozillaPlugins]
      [HKLM\Software\Mozilla]
      [HKLM\Software\ODBC]
      [HKLM\Software\Piriform]
      [HKLM\Software\Policies]
      [HKLM\Software\RTLSetup]
      [HKLM\Software\Realtek]
      [HKLM\Software\RegisteredApplications]
      [HKLM\Software\SRS Labs]
      [HKLM\Software\Safer Networking Limited]
      [HKLM\Software\SonicFocus]
      [HKLM\Software\Synaptics]
      [HKLM\Software\TuneUp]
      [HKLM\Software\Waves Audio]
      [HKLM\Software\Wow6432Node\ASIO]
      [HKLM\Software\Wow6432Node\ASUS]
      [HKLM\Software\Wow6432Node\AVAST Software]
      [HKLM\Software\Wow6432Node\Activeris] =>PUP.Activeris
      [HKLM\Software\Wow6432Node\Adobe]
      [HKLM\Software\Wow6432Node\AdwCleaner]
      [HKLM\Software\Wow6432Node\AppDataLow]
      [HKLM\Software\Wow6432Node\AsLdr]
      [HKLM\Software\Wow6432Node\Atheros]
      [HKLM\Software\Wow6432Node\Browser]
      [HKLM\Software\Wow6432Node\Canon]
      [HKLM\Software\Wow6432Node\Canon_Inc_IC]
      [HKLM\Software\Wow6432Node\Classes]
      [HKLM\Software\Wow6432Node\Clients]
      [HKLM\Software\Wow6432Node\CyberLink]
      [HKLM\Software\Wow6432Node\DVDVideoSoft]
      [HKLM\Software\Wow6432Node\ECAREME]
      [HKLM\Software\Wow6432Node\Freemake]
      [HKLM\Software\Wow6432Node\Google]
      [HKLM\Software\Wow6432Node\IM Providers]
      [HKLM\Software\Wow6432Node\InstallShield]
      [HKLM\Software\Wow6432Node\Intel]
      [HKLM\Software\Wow6432Node\JavaSoft]
      [HKLM\Software\Wow6432Node\JreMetrics]
      [HKLM\Software\Wow6432Node\KasperskyLab]
      [HKLM\Software\Wow6432Node\Khronos]
      [HKLM\Software\Wow6432Node\Lake]
      [HKLM\Software\Wow6432Node\Lavasoft]
      [HKLM\Software\Wow6432Node\Licenses]
      [HKLM\Software\Wow6432Node\Macromedia]
      [HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]
      [HKLM\Software\Wow6432Node\MaxPower]
      [HKLM\Software\Wow6432Node\McAfee.com]
      [HKLM\Software\Wow6432Node\McAfee]
      [HKLM\Software\Wow6432Node\MozillaPlugins]
      [HKLM\Software\Wow6432Node\Mozilla]
      [HKLM\Software\Wow6432Node\Norton]
      [HKLM\Software\Wow6432Node\Nuance]
      [HKLM\Software\Wow6432Node\ODBC]
      [HKLM\Software\Wow6432Node\Opera Software]
      [HKLM\Software\Wow6432Node\Policies]
      [HKLM\Software\Wow6432Node\Qualcomm Atheros]
      [HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.]
      [HKLM\Software\Wow6432Node\Realtek]
      [HKLM\Software\Wow6432Node\RegisteredApplications]
      [HKLM\Software\Wow6432Node\Safer Networking Limited]
      [HKLM\Software\Wow6432Node\Skype]
      [HKLM\Software\Wow6432Node\Software]
      [HKLM\Software\Wow6432Node\SuppHelpDir]
      [HKLM\Software\Wow6432Node\Symantec]
      [HKLM\Software\Wow6432Node\TuneUp]
      [HKLM\Software\Wow6432Node\VideoLAN]
      [HKLM\Software\Wow6432Node\Volatile]
      [HKLM\Software\Wow6432Node\WildTangent]
      [HKLM\Software\Wow6432Node\anset]
      [HKLM\Software\Wow6432Node\dotNetInstaller]
      [HKLM\Software\Wow6432Node\mamverifier]
      [HKLM\Software\Wow6432Node\mcafeeupdater]
      [HKLM\Software\Wow6432Node]
      [HKLM\Software\avast]
      [HKLM\Software\mcafeeupdater]
      ~ Key Software: 276 Scanned in 00mn 00s

      ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
      O43 - CFD: 17/01/2014 - 21:24:53 - [] ----D C:\Program Files (x86)\Adobe
      O43 - CFD: 15/03/2014 - 11:55:31 - [] ----D C:\Program Files (x86)\Advanced Disk Recovery
      O43 - CFD: 03/01/2014 - 20:52:29 - [] ----D C:\Program Files (x86)\ASUS
      O43 - CFD: 15/01/2014 - 17:33:03 - [] ----D C:\Program Files (x86)\Canon
      O43 - CFD: 18/03/2015 - 15:13:46 - [] ----D C:\Program Files (x86)\Common Files
      O43 - CFD: 03/01/2014 - 20:51:18 - [] ----D C:\Program Files (x86)\CyberLink
      O43 - CFD: 16/03/2015 - 13:36:27 - [] ----D C:\Program Files (x86)\DVDVideoSoft
      O43 - CFD: 29/03/2015 - 23:19:00 - [] ----D C:\Program Files (x86)\FastAgain PC Booster
      O43 - CFD: 13/01/2015 - 14:00:00 - [] ----D C:\Program Files (x86)\Freemake
      O43 - CFD: 04/01/2014 - 14:21:35 - [] ----D C:\Program Files (x86)\Google
      O43 - CFD: 04/01/2015 - 12:49:11 - [] ----D C:\Program Files (x86)\Image Resizer
      O43 - CFD: 07/04/2014 - 15:28:14 - [] --H-D C:\Program Files (x86)\InstallShield Installation Information
      O43 - CFD: 06/01/2014 - 15:37:48 - [] ----D C:\Program Files (x86)\Intel
      O43 - CFD: 13/03/2015 - 22:27:16 - [] ----D C:\Program Files (x86)\Internet Explorer
      O43 - CFD: 07/06/2014 - 22:19:16 - [] ----D C:\Program Files (x86)\Java
      O43 - CFD: 28/03/2015 - 15:57:54 - [] ----D C:\Program Files (x86)\Malwarebytes Anti-Malware
      O43 - CFD: 18/09/2014 - 10:59:35 - [] ----D C:\Program Files (x86)\McAfee Security Scan
      O43 - CFD: 26/04/2013 - 01:13:52 - [] ----D C:\Program Files (x86)\Microsoft Office
      O43 - CFD: 26/04/2013 - 01:16:41 - [] ----D C:\Program Files (x86)\Microsoft SkyDrive =>.Microsoft Corporation
      O43 - CFD: 26/04/2013 - 01:17:30 - [] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
      O43 - CFD: 09/01/2014 - 20:33:19 - [] ----D C:\Program Files (x86)\Microsoft.NET
      O43 - CFD: 15/03/2014 - 11:35:20 - [] ----D C:\Program Files (x86)\Mozilla Firefox
      O43 - CFD: 06/01/2014 - 15:19:19 - [] ----D C:\Program Files (x86)\MSBuild
      O43 - CFD: 29/08/2014 - 18:09:08 - [] ----D C:\Program Files (x86)\Norton Security Scan
      O43 - CFD: 29/08/2014 - 18:09:03 - [] ----D C:\Program Files (x86)\NortonInstaller
      O43 - CFD: 27/12/2014 - 22:46:22 - [] ----D C:\Program Files (x86)\Opera
      O43 - CFD: 07/04/2014 - 15:22:19 - [] ----D C:\Program Files (x86)\Qualcomm Atheros
      O43 - CFD: 07/04/2014 - 15:28:44 - [] ----D C:\Program Files (x86)\Realtek
      O43 - CFD: 06/01/2014 - 15:19:19 - [] ----D C:\Program Files (x86)\Reference Assemblies
      O43 - CFD: 07/09/2014 - 03:47:25 - [] R---D C:\Program Files (x86)\Skype
      O43 - CFD: 15/03/2014 - 13:34:05 - [] ----D C:\Program Files (x86)\Software
      O43 - CFD: 31/03/2015 - 13:49:24 - [] ----D C:\Program Files (x86)\Spybot - Search & Destroy 2
      O43 - CFD: 16/10/2013 - 20:40:45 - [0] --H-D C:\Program Files (x86)\Temp
      O43 - CFD: 21/05/2014 - 16:26:19 - [] ----D C:\Program Files (x86)\VideoLAN
      O43 - CFD: 26/04/2013 - 01:20:44 - [] ----D C:\Program Files (x86)\WildGames
      O43 - CFD: 22/07/2014 - 03:46:39 - [] ----D C:\Program Files (x86)\WildTangent Games
      O43 - CFD: 13/03/2015 - 22:31:54 - [] ----D C:\Program Files (x86)\Windows Defender
      O43 - CFD: 26/04/2013 - 01:17:29 - [] ----D C:\Program Files (x86)\Windows Live
      O43 - CFD: 13/03/2015 - 22:27:17 - [] ----D C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
      O43 - CFD: 13/03/2015 - 22:27:16 - [] ----D C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
      O43 - CFD: 13/03/2015 - 22:27:16 - [] ----D C:\Program Files (x86)\Windows Multimedia Platform
      O43 - CFD: 22/08/2013 - 17:36:30 - [] ----D C:\Program Files (x86)\Windows NT
      O43 - CFD: 13/03/2015 - 22:27:15 - [] ----D C:\Program Files (x86)\Windows Photo Viewer
      O43 - CFD: 13/03/2015 - 22:27:16 - [] ----D C:\Program Files (x86)\Windows Portable Devices
      O43 - CFD: 06/01/2014 - 15:37:53 - [] -SH-D C:\Program Files (x86)\Windows Sidebar
      O43 - CFD: 22/08/2013 - 17:36:30 - [] ----D C:\Program Files (x86)\WindowsPowerShell
      O43 - CFD: 27/12/2014 - 21:40:43 - [] ----D C:\Program Files (x86)\YouTubeMusicDownloader
      O43 - CFD: 31/03/2015 - 13:47:36 - [] ----D C:\Program Files (x86)\ZHPDiag =>.Nicolas Coolman
      O43 - CFD: 17/01/2014 - 21:25:15 - [] ----D C:\Program Files (x86)\Common Files\Adobe
      O43 - CFD: 09/01/2014 - 20:33:23 - [] ----D C:\Program Files (x86)\Common Files\DESIGNER
      O43 - CFD: 27/12/2014 - 19:14:29 - [] ----D C:\Program Files (x86)\Common Files\DVDVideoSoft
      O43 - CFD: 16/10/2013 - 20:40:11 - [] ----D C:\Program Files (x86)\Common Files\InstallShield
      O43 - CFD: 06/01/2014 - 15:27:52 - [] ----D C:\Program Files (x86)\Common Files\Intel
      O43 - CFD: 12/02/2014 - 18:17:04 - [] ----D C:\Program Files (x86)\Common Files\mcafee
      O43 - CFD: 09/01/2014 - 20:33:24 - [] ----D C:\Program Files (x86)\Common Files\Microsoft Shared
      O43 - CFD: 16/10/2013 - 20:36:45 - [] ----D C:\Program Files (x86)\Common Files\postureAgent
      O43 - CFD: 03/01/2014 - 20:52:18 - [] ----D C:\Program Files (x86)\Common Files\SceneSwitch
      O43 - CFD: 22/08/2013 - 17:36:33 - [] ----D C:\Program Files (x86)\Common Files\Services
      O43 - CFD: 07/09/2014 - 03:47:25 - [] ----D C:\Program Files (x86)\Common Files\Skype
      O43 - CFD: 13/01/2015 - 17:34:10 - [] ----D C:\Program Files (x86)\Common Files\Symantec Shared
      O43 - CFD: 13/03/2015 - 22:27:13 - [] ----D C:\Program Files (x86)\Common Files\System
      O43 - CFD: 26/04/2013 - 01:16:31 - [] ----D C:\Program Files (x86)\Common Files\Windows Live
      O43 - CFD: 30/01/2014 - 22:48:08 - [] ----D C:\ProgramData\Adobe
      O43 - CFD: 22/08/2013 - 16:45:52 - [] -SH-D C:\ProgramData\Application Data
      O43 - CFD: 26/04/2013 - 01:16:21 - [] ----D C:\ProgramData\ASUS WebStorage
      O43 - CFD: 26/04/2013 - 01:15:20 - [] ----D C:\ProgramData\ASUSLogos
      O43 - CFD: 16/10/2013 - 20:52:23 - [] ----D C:\ProgramData\ASUSVibe
      O43 - CFD: 10/05/2014 - 15:44:18 - [] ----D C:\ProgramData\AVAST Software
      O43 - CFD: 02/04/2014 - 12:25:34 - [] ----D C:\ProgramData\AVG2014
      O43 - CFD: 18/03/2015 - 17:18:58 - [] ----D C:\ProgramData\BdVhmPMe
      O43 - CFD: 22/07/2014 - 03:47:21 - [] ----D C:\ProgramData\BlueStacks
      O43 - CFD: 06/01/2014 - 15:53:42 - [] -SH-D C:\ProgramData\Bureau
      O43 - CFD: 15/01/2014 - 17:10:58 - [] --H-D C:\ProgramData\CanonBJ
      O43 - CFD: 30/01/2014 - 11:57:14 - [] --H-D C:\ProgramData\CanonIJMIG
      O43 - CFD: 17/01/2014 - 01:21:22 - [] --H-D C:\ProgramData\CanonIJMyPrinter
      O43 - CFD: 02/02/2015 - 10:56:09 - [] ----D C:\ProgramData\CanonIJPLM
      O43 - CFD: 15/01/2014 - 23:28:44 - [] --H-D C:\ProgramData\CanonIJQuickMenu
      O43 - CFD: 15/01/2014 - 17:31:46 - [] ----D C:\ProgramData\CanonIJWSpt
      O43 - CFD: 23/02/2014 - 22:32:23 - [] --H-D C:\ProgramData\Common Files
      O43 - CFD: 15/01/2014 - 20:46:27 - [] ----D C:\ProgramData\CyberLink
      O43 - CFD: 22/08/2013 - 16:45:52 - [] -SH-D C:\ProgramData\Desktop
      O43 - CFD: 22/08/2013 - 16:45:52 - [] -SH-D C:\ProgramData\Documents
      O43 - CFD: 13/01/2015 - 14:01:06 - [] ----D C:\ProgramData\Freemake
      O43 - CFD: 16/10/2013 - 20:37:08 - [] ----D C:\ProgramData\Intel
      O43 - CFD: 10/05/2014 - 15:07:36 - [] ----D C:\ProgramData\Kaspersky Lab
      O43 - CFD: 29/03/2015 - 00:01:52 - [] ----D C:\ProgramData\Lavasoft
      O43 - CFD: 17/03/2015 - 14:41:47 - [] ----D C:\ProgramData\Malwarebytes
      O43 - CFD: 04/03/2014 - 16:47:40 - [] ----D C:\ProgramData\McAfee
      O43 - CFD: 18/09/2014 - 10:59:47 - [] ----D C:\ProgramData\McAfee Security Scan
      O43 - CFD: 06/01/2014 - 15:53:42 - [] -SH-D C:\ProgramData\Menu Démarrer
      O43 - CFD: 02/04/2014 - 12:25:34 - [] ----D C:\ProgramData\MFAData
      O43 - CFD: 31/03/2015 - 13:47:51 - [] -S--D C:\ProgramData\Microsoft
      O43 - CFD: 26/04/2013 - 01:16:41 - [] ----D C:\ProgramData\Microsoft OneDrive
      O43 - CFD: 06/01/2014 - 15:53:42 - [] -SH-D C:\ProgramData\Modèles
      O43 - CFD: 29/08/2014 - 18:09:08 - [] ----D C:\ProgramData\Norton
      O43 - CFD: 29/08/2014 - 18:09:03 - [] ----D C:\ProgramData\NortonInstaller
      O43 - CFD: 19/10/2014 - 14:28:58 - [0] ----D C:\ProgramData\Oracle
      O43 - CFD: 03/11/2014 - 11:06:57 - [] ----D C:\ProgramData\P4G
      O43 - CFD: 06/01/2014 - 15:37:56 - [] ----D C:\ProgramData\PRICache
      O43 - CFD: 16/10/2013 - 20:32:48 - [] ----D C:\ProgramData\Qualcomm Atheros
      O43 - CFD: 18/03/2015 - 18:02:26 - [] ----D C:\ProgramData\regid.1991-06.com.microsoft
      O43 - CFD: 13/10/2014 - 21:40:45 - [] ----D C:\ProgramData\Skype
      O43 - CFD: 31/03/2015 - 13:47:52 - [] ----D C:\ProgramData\Spybot - Search & Destroy
      O43 - CFD: 22/08/2013 - 16:45:52 - [] -SH-D C:\ProgramData\Start Menu
      O43 - CFD: 26/05/2014 - 00:28:32 - [] ----D C:\ProgramData\Sun
      O43 - CFD: 19/05/2014 - 18:51:01 - [] ---AD C:\ProgramData\Temp
      O43 - CFD: 22/08/2013 - 16:45:52 - [] -SH-D C:\ProgramData\Templates
      O43 - CFD: 27/12/2014 - 19:34:27 - [] ----D C:\ProgramData\TuneUp Software
      O43 - CFD: 16/10/2013 - 20:58:50 - [] ----D C:\ProgramData\USBChargerPlus
      O43 - CFD: 22/07/2014 - 03:46:37 - [] ----D C:\ProgramData\WildTangent
      O43 - CFD: 27/12/2014 - 19:30:30 - [] -SH-D C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
      O43 - CFD: 13/03/2015 - 22:31:52 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
      O43 - CFD: 13/03/2015 - 22:31:56 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
      O43 - CFD: 13/03/2015 - 22:31:52 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
      O43 - CFD: 15/03/2014 - 11:55:31 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Disk Recovery
      O43 - CFD: 06/01/2014 - 15:42:16 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
      O43 - CFD: 06/01/2014 - 15:37:55 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUSDVD
      O43 - CFD: 15/03/2015 - 23:11:43 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
      O43 - CFD: 03/11/2014 - 11:06:56 - [] -S--D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! BackUp
      O43 - CFD: 15/01/2014 - 17:23:01 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG2400 series Manual
      O43 - CFD: 15/01/2014 - 17:31:51 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
      O43 - CFD: 29/03/2015 - 13:14:14 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
      O43 - CFD: 06/01/2014 - 15:37:55 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Media Suite
      O43 - CFD: 15/01/2014 - 17:33:05 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Enregistrement utilisateur de Canon MG2400 series =>.Canon Inc
      O43 - CFD: 29/03/2015 - 23:19:13 - [0] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastAgain PC Booster
      O43 - CFD: 13/01/2015 - 14:00:05 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake
      O43 - CFD: 23/03/2015 - 01:25:24 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
      O43 - CFD: 21/11/2014 - 22:59:15 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
      O43 - CFD: 04/01/2015 - 12:49:12 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image Resizer
      O43 - CFD: 06/01/2014 - 15:42:16 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
      O43 - CFD: 11/11/2014 - 19:23:04 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
      O43 - CFD: 29/03/2015 - 00:29:24 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
      O43 - CFD: 22/08/2013 - 17:36:33 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
      O43 - CFD: 28/03/2015 - 15:57:54 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
      O43 - CFD: 18/09/2014 - 10:59:40 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
      O43 - CFD: 24/04/2014 - 10:57:26 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
      O43 - CFD: 29/08/2014 - 18:09:17 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security Scan
      O43 - CFD: 13/10/2014 - 21:40:40 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
      O43 - CFD: 07/12/2014 - 14:32:53 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
      O43 - CFD: 13/03/2015 - 22:31:52 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
      O43 - CFD: 14/11/2013 - 09:16:50 - [0] R-H-D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
      O43 - CFD: 11/01/2015 - 19:39:17 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
      O43 - CFD: 27/12/2014 - 21:40:42 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Youtube Music Downloader
      O43 - CFD: 31/03/2015 - 13:47:36 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP =>.Nicolas Coolman
      O43 - CFD: 01/03/2015 - 23:08:51 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zune
      O43 - CFD: 31/03/2015 - 01:27:31 - [] ----D C:\Users\BastienetYanis\AppData\Roaming\Activeris =>PUP.Activeris
      O43 - CFD: 30/01/2014 - 16:32:58 - [] ----D C:\Users\BastienetYanis\AppData\Roaming\Adobe
      O43 - CFD: 03/01/2014 - 20:27:32 - [] ----D C:\Users\BastienetYanis\AppData\Roaming\ASUS WebStorage
      O43 - CFD: 10/05/2014 - 15:51:18 - [] ----D C:\Users\BastienetYanis\AppData\Roaming\AVAST Software
      O43 - CFD: 17/01/2014 - 21:22:41 - [] ----D C:\Users\BastienetYanis\AppData\R
      1. je pense que je serais plus rapide en passant les logiciels par la fenêtre vu que tu habites pas trop loin de chez moi ! :mdr:

        Télécharge et enregistre Zhpcleaner sur ton bureau :

        https://nicolascoolman.eu

        [*] Fais un clique droit dessus, lance le en tant qu'administrateur !
        [*] Accepte le contrat de licence d'utilisation finale (CLUF),
        [*] Clique sur "Nettoyer"
        [*] Clique sur rapport (normalement le rapport s'affiche)
        [*] Enregistre le rapport sur ton bureau
        [*] Héberge son rapport de modification qui se trouve sur le Bureau :

        https://www.cjoint.com/ à lire => https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers

        , puis copie/colle le lien fourni dans ta prochaine réponse sur le forum </gras>

        Note :
        - Cet outil ne nécessite pas d'installation !
        - Le rapport se trouve également dans ce répertoire "%AppData%".

        1. mdrrr attends alors jte les jettent rattrape les bien !mdr

          ~ ZHPCleaner v2015.3.31.148 by Nicolas Coolman (31/03/2015)
          ~ Run by BastienetYanis (Administrator) (31/03/2015 17:28:50)
          ~ Forum : https://nicolascoolman.eu
          ~ Facebook : https://www.facebook.com/nicolascoolman1
          ~ State version : Version OK
          ~ Type : Réparer
          ~ Report : C:\Users\BastienetYanis\Desktop\ZHPCleaner.txt
          ~ Quarantine : C:\Users\BastienetYanis\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
          ~ UAC : Activate
          ~ Boot Mode : Normal (Normal boot)
          ~ Windows 81, 64-bit (Build 9600)

          ---\\ Service. (0)
          ~ Aucun élément malicieux trouvé.

          ---\\ Navigateur internet. (5)
          DEPLACÉ fichier: C:\Users\BastienetYanis\Desktop\SpyHunter.lnk [Bad : C:\Program Files (x86)\Enigma Software Group\SpyHunter\SpyHunter4.exe] (Crapware.SpyHunter)
          DEPLACÉ fichier: C:\Users\BastienetYanis\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk [Bad : C:\Program Files (x86)\speed browser\Application\chrome.exe] (PUP.SpeedBrowser)
          DEPLACÉ fichier: C:\Users\BastienetYanis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aide.lnk [Bad : C:\Program Files (x86)\Probit Software\Easy Speed PC\EasySpeedPC.chm] (PUP.ProbitSoftware)
          DEPLACÉ fichier: C:\Users\BastienetYanis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk [Bad : C:\Program Files (x86)\speed browser\Application\chrome.exe] (PUP.SpeedBrowser)
          DEPLACÉ fichier: C:\Users\BastienetYanis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Uninstall.lnk [Bad : C:\Program Files (x86)\Probit Software\Easy Speed PC\uninstall.exe] (PUP.ProbitSoftware)

          ---\\ Fichier hôte. (2)
          REMPLACÉ: 54.225.95.126 dmcecclamecbinmplcolhaljlclhbgah
          ~ Nombre de redirections trouvées 1/24

          ---\\ Tâche planifiée. (7)
          SUPPRIMÉ tâche: [ParetoLogic Update Version3 Startup Task] [C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe (Not File) ] (PUP.Paretologic)
          SUPPRIMÉ tâche: [SpyHunter4Startup] [C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe] (Crapware.SpyHunter)
          SUPPRIMÉ tâche: [UpdateVO] [C:\Users\BastienetYanis\AppData\Roaming\VOPackage\VOPackage.exe (Not File) ] (Adware.Downware)
          SUPPRIMÉ tâche: [{148A78C4-6AB6-4F04-B670-9373698B5E22}] [C:\Users\BastienetYanis\AppData\Roaming\Nosibay\Bubble Dock\Uninstall Bubble Dock.exe (Not File) ] (PUP.BubbleDock)
          SUPPRIMÉ tâche: [{9B02FA26-A9DC-49AB-B067-F42CB88B2701}] [c:\program files (x86)\speed browser\application\chrome.exe (Not File) ] (PUP.SpeedBrowser)
          SUPPRIMÉ tâche: [{9B1EACFF-21DD-4567-A7E4-7A77E88D07A8}] [c:\program files (x86)\speed browser\application\chrome.exe (Not File) ] (PUP.SpeedBrowser)
          SUPPRIMÉ tâche: [ParetoLogic Update Version3 Startup Task] [C:\WINDOWS\Tasks\ParetoLogic Update Version3 Startup Task.job (Not File) ] (PUP.Paretologic)

          ---\\ Explorateur ( Dossiers, Fichiers ). (51)
          DEPLACÉ fichier: C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [Enigma Software Group USA, LLC. - Service scanner interface] (Crapware.SpyHunter)
          DEPLACÉ fichier: C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe [Enigma Software Group USA, LLC. - SpyHunter4 application] (Crapware.SpyHunter)
          DEPLACÉ dossier*: C:\Program Files\Enigma Software Group\SpyHunter (PUP.EnigmaSoftware)
          DEPLACÉ dossier*: C:\Program Files\Enigma Software Group (PUP.EnigmaSoftware)
          DEPLACÉ fichier: C:\Users\BastienetYanis\AppData\Roaming\Enigma Software Group\sh_installer.exe [Enigma Software Group USA, LLC. - Enigma Installer] (PUP.EnigmaSoftware)
          DEPLACÉ dossier: C:\Users\BastienetYanis\AppData\Roaming\Activeris\FastAgain PC Booster (PUP.Activeris)
          DEPLACÉ dossier: C:\Users\BastienetYanis\AppData\Roaming\Activeris (PUP.Activeris)
          DEPLACÉ dossier: C:\Users\BastienetYanis\AppData\Roaming\Enigma Software Group (PUP.EnigmaSoftware)
          DEPLACÉ dossier: C:\Users\BastienetYanis\AppData\Local\CrashRpt\UnsentCrashReports (LOG.CrashReports)
          DEPLACÉ dossier: C:\Users\BastienetYanis\AppData\Local\CrashRpt (LOG.CrashReports)
          DEPLACÉ dossier: C:\Users\BastienetYanis\AppData\Local\ShieldPlus (Adware.ShieldPlus)
          DEPLACÉ fichier: C:\WINDOWS\Prefetch\BUBBLE DOCK ADDONSUI.EXE-940225A3.pf (PUP.BubbleDock)
          DEPLACÉ fichier: C:\WINDOWS\Prefetch\BUBBLE DOCK.EXE-EA818FAD.pf (PUP.BubbleDock)
          DEPLACÉ fichier: C:\WINDOWS\Prefetch\CONSTASURF.PURBROWSE64.EXE-3C7AFB09.pf (PUP.ConstaSurf)
          DEPLACÉ fichier: C:\WINDOWS\Prefetch\PARETOLOGIC PC HEALTH ADVISOR-CEAC296A.pf (PUP.Paretologic)
          DEPLACÉ fichier: C:\WINDOWS\Prefetch\REIMAGE.EXE-BEE43FC1.pf (PUP.ReimageRepair)
          DEPLACÉ fichier: C:\WINDOWS\Prefetch\REIMAGEPACKAGE.EXE-6568545C.pf (PUP.ReimageRepair)
          DEPLACÉ fichier: C:\WINDOWS\Prefetch\REIMAGEREPAIR (1).EXE-58102378.pf (PUP.ReimageRepair)
          DEPLACÉ fichier: C:\WINDOWS\Prefetch\REIMAGEREPAIR.EXE-D755EC56.pf (PUP.ReimageRepair)
          DEPLACÉ fichier: C:\WINDOWS\Prefetch\SPYHUNTER-INSTALLER (1).EXE-65DB59B0.pf (Crapware.SpyHunter)
          DEPLACÉ fichier: C:\WINDOWS\Prefetch\SPYHUNTER-INSTALLER.EXE-A27CA18E.pf (Crapware.SpyHunter)
          DEPLACÉ fichier: C:\WINDOWS\Prefetch\SPYHUNTER4.EXE-3B4E3201.pf (Crapware.SpyHunter)
          DEPLACÉ fichier: C:\WINDOWS\Prefetch\UNINSTALL BUBBLE DOCK.EXE-02EC93A0.pf (PUP.BubbleDock)
          DEPLACÉ fichier: C:\WINDOWS\Prefetch\UNINSTALL BUBBLE DOCK.EXE-94BDCD0F.pf (PUP.BubbleDock)
          DEPLACÉ fichier: C:\WINDOWS\Prefetch\VOPACKAGE.EXE-D78136F8.pf (Adware.Downware)
          DEPLACÉ fichier: C:\Users\BastienetYanis\Downloads\Activeris AntiMalware.lnk (PUP.Activeris)
          DEPLACÉ fichier: C:\Users\BastienetYanis\Downloads\DriverRestore.vtsafe.exe [Driver Restore - This installer database contains the logic and data required to install Driver Restore.] (PUP.DriverRestore)
          DEPLACÉ fichier: C:\Users\BastienetYanis\Downloads\FlvPlayer.lnk (PUP.FLVPlayer)
          DEPLACÉ fichier: C:\Users\BastienetYanis\Downloads\NewPlayer.lnk (Adware.NewPlayer)
          DEPLACÉ fichier: C:\Users\BastienetYanis\Downloads\ParetoLogic PC Health Advisor.lnk (PUP.Paretologic)
          DEPLACÉ fichier: C:\Users\BastienetYanis\Downloads\ParetoLogic PC Health Advisor_fr.exe [ParetoLogic Inc. - PC Health Advisor Installer] (PUP.Paretologic)
          DEPLACÉ fichier: C:\Users\BastienetYanis\Downloads\SpyHunter-Installer.exe [Enigma Software Group USA, LLC. - Enigma Installer] (Crapware.SpyHunter)
          DEPLACÉ fichier: C:\Users\BASTIE~1\AppData\Local\Temp\Tsu514D98CA.dll [Tarma Software Research Pty Ltd - InstallMate® Setup Library] (PUP.Tarma)
          DEPLACÉ fichier: C:\Users\BASTIE~1\AppData\Local\Temp\TsuB8D44AF5.dll [Tarma Software Research Pty Ltd - InstallMate® Setup Library] (PUP.Tarma)
          DEPLACÉ fichier: C:\Users\BASTIE~1\AppData\Local\Temp\{E61B0B94-02FD-4F03-ADE8-4ADF3DF82962}\Setup.exe [Tarma Software Research Pty Ltd - InstallMate® Setup] (PUP.Tarma)
          DEPLACÉ fichier****: C:\Users\BASTIE~1\AppData\Local\Temp\{12B11AB1-2C55-4B6E-A985-6477C9523847}\Setup.exe [Tarma Software Research Pty Ltd - InstallMate® Setup] (PUP.Tarma)
          DEPLACÉ fichier*: C:\Users\BastienetYanis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.re-markit00.re-markit.co_0.localstorage (PUP.ReMarkIt)
          DEPLACÉ fichier*: C:\Users\BastienetYanis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.re-markit00.re-markit.co_0.localstorage-journal (PUP.ReMarkIt)
          DEPLACÉ fichier*: C:\Users\BastienetYanis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.re-markit00.re-markit.co_0.localstorage (PUP.ReMarkIt)
          DEPLACÉ fichier*: C:\Users\BastienetYanis\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.re-markit00.re-markit.co_0.localstorage-journal (PUP.ReMarkIt)
          DEPLACÉ fichier: C:\Users\BASTIE~1\AppData\Local\Temp\SearchTheWeb.ico13c288 (Adware.IMBooster)
          DEPLACÉ fichier: C:\Users\BASTIE~1\AppData\Local\Temp\SearchTheWeb.xml13c288 (Adware.IMBooster)
          DEPLACÉ fichier: C:\Users\BASTIE~1\AppData\Local\Temp\StartWeb.xml13c298 (Adware.IMBooster)
          DEPLACÉ fichier: C:\Users\BASTIE~1\AppData\Local\Temp\WinkHandler.exe13c298 (Adware.IMBooster)
          DEPLACÉ fichier: C:\WINDOWS\System32\Drivers\EsgScanner.sys (PUP.EnigmaSoftware)
          DEPLACÉ dossier: C:\Rei (PUP.ReimageRepair)
          DEPLACÉ dossier: C:\Program Files (x86)\Software (Adware.Boxore)
          DEPLACÉ dossier: C:\Users\BastienetYanis\AppData\Local\com (PUP.Optional)
          DEPLACÉ dossier: C:\Users\BastienetYanis\AppData\Local\Software (Adware.Boxore)
          DEPLACÉ dossier: C:\Users\BastienetYanis\AppData\Local\{0445CDBA-EF9B-4226-9114-1158288FC05B} (Empty)
          DEPLACÉ dossier: C:\Users\BastienetYanis\AppData\Local\{742A313D-D575-47B0-8D60-B84B84D8371C} (Empty)

          ---\\ Base de Registres ( Clés, Valeurs, Données ). (58)
          SUPPRIMÉ valeur: HKCU\Software\Mozilla\Firefox\Extensions\\{0011ebb6-4390-4e21-a2e3-8dd2a85e92d2} [C:\Program Files (x86)\DealsCompare\150.xpi] (PUP.DealsCompare)
          SUPPRIMÉ clé: HKCR\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} [http://ww7.certified-toolbar.com[...]] [Web Search] (PUP.CertifiedToolbar)
          SUPPRIMÉ clé: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{5428abe0-4c3e-40be-b6cb-4ca07f6180ea} http://www.secure-surf.com/web?q={searchTerms} [secure-surf] (PUP.SecureSurf)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Clients\StartMenuInternet\speed browser ["C:\Program Files (x86)\speed browser\Application\chrome.exe" (Not File)] (PUP.SpeedBrowser)
          SUPPRIMÉ valeur: [X64] HKLM\Software\Classes\.htm\OpenWithProgIDs\\BrowserHTM [] (PUP.SpeedBrowser)
          SUPPRIMÉ valeur: [X64] HKLM\Software\Classes\.html\OpenWithProgIDs\\BrowserHTM [] (PUP.SpeedBrowser)
          SUPPRIMÉ valeur: [X64] HKLM\Software\Classes\.shtml\OpenWithProgIDs\\BrowserHTM [] (PUP.SpeedBrowser)
          SUPPRIMÉ valeur: [X64] HKLM\Software\Classes\.webp\OpenWithProgIDs\\BrowserHTM [] (PUP.SpeedBrowser)
          SUPPRIMÉ valeur: [X64] HKLM\Software\Classes\.xht\OpenWithProgIDs\\BrowserHTM [] (PUP.SpeedBrowser)
          SUPPRIMÉ clé*: HKLM\SYSTEM\CurrentControlSet\Services\EsgScanner [system32\DRIVERS\EsgScanner.sys] (PUP.EnigmaSoftware)
          SUPPRIMÉ clé^: HKLM\SYSTEM\CurrentControlSet\Services\SpyHunter 4 Service [C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe (Not File)] (Crapware.SpyHunter)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422052294} [CrossriderApp0040594.Sandbox] (PUP.CrossRider)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422902284} [CrossriderApp0049084.Sandbox] (PUP.CrossRider)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444054494} [] (PUP.CrossRider)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444904484} [] (PUP.CrossRider)
          SUPPRIMÉ valeur: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_9F74275482CCA6BB132B2854FD98E9A5 ["C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window] (PUP.Vosteran)
          SUPPRIMÉ valeur: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\V-bates [C:\Program Files\V-bates\notifier64.exe] (Adware.Incredibar)
          SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-3911577134-1621002325-3162563356-1001\Software\Activeris [] (PUP.Activeris)
          SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-3911577134-1621002325-3162563356-1001\Software\Probit Software [] (PUP.ProbitSoftware)
          SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-3911577134-1621002325-3162563356-1001\Software\SearchProtectINTSM [] (PUP.SearchProtect)
          SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-3911577134-1621002325-3162563356-1001\Software\ShieldPlus [] (Adware.ShieldPlus)
          SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-3911577134-1621002325-3162563356-1001\Software\Smartbar [] (PUP.QuickShare)
          SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-3911577134-1621002325-3162563356-1001\Software\Classes\.bubbledock [bubbledock] (PUP.BubbleDock)
          SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-3911577134-1621002325-3162563356-1001\Software\Classes\BoBrowser.FK4QXPKUK653NSRMP4WZRVY554 [] (PUP.BoBrowser)
          SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-3911577134-1621002325-3162563356-1001\Software\Classes\BoBrowsHTML.FK4QXPKUK653NSRMP4WZRVY554 [BoBrowser HTML Document] (PUP.BoBrowser)
          SUPPRIMÉ clé*: HKEY_USERS\S-1-5-21-3911577134-1621002325-3162563356-1001\Software\Classes\bubbledock [Bubble Dock add-in] (PUP.BubbleDock)
          SUPPRIMÉ clé*: HKCU\Software\AppDataLow\Software\adawarebp [] (PUP.ToolbarCleaner)
          SUPPRIMÉ clé*: HKCU\Software\AppDataLow\Software\Apps Hat [] (PUP.CrossRider)
          SUPPRIMÉ clé*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Avast Packages [Avast Packages] (Adware.InstallCore)
          SUPPRIMÉ clé*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Image Resizer Packages [Image Resizer Packages] (Adware.InstallCore)
          SUPPRIMÉ clé*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_01070657 [Lollipop Network, S.L.] (Adware.Lollipop)
          SUPPRIMÉ clé*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{b9b81f85-446e-4d45-aff5-d95c2be8fbf2} [Snap.Do Engine] (Hijacker.SmartBar)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\BrowserHTM [Browser HTML Document] (PUP.SpeedBrowser)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{738C1447-DF84-92AE-76BF-F84A7E3C12E6} [tOpbuyeur] (PUP.TopBuyer)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\Record\{181480C8-90AC-3430-B39A-CD121E034A1A} [IESmartBar.MSG] (Hijacker.SmartBar)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6} [IESmartBar.BandObjectStyle] (Hijacker.SmartBar)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E} [IESmartBar.POINT] (Hijacker.SmartBar)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\Record\{8F54FA54-1DF8-3B20-890C-CDD95364BC95} [IESmartBar.DBIM] (Hijacker.SmartBar)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24} [IESmartBar.DESKBANDINFO] (Hijacker.SmartBar)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9} [IESmartBar.DBIMF] (Hijacker.SmartBar)
          SUPPRIMÉ clé*: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Update ConstaSurf [] (PUP.ConstaSurf)
          SUPPRIMÉ clé*: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Util ConstaSurf [] (PUP.ConstaSurf)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\EnigmaSoftwareGroup [] (PUP.EnigmaSoftware)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0F81D0DC-1355-4fac-800F-2467CF365CCD} [C:\Program Files\HomeTab\IE (Not File)] (PUP.CertifiedToolbar)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Reimage.exe [C:\Program Files\Reimage\Reimage Repair\Reimage.exe (Not File)] (PUP.ReimageRepair)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\spprt.exe [C:\Users\BastienetYanis\AppData\Local\ShieldPlus\spprt\spprt.exe (Not File)] (Adware.ShieldPlus)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-3911577134-1621002325-3162563356-1001\Products\CB600452ED7928C41A1A2AAB2D250038 [Snap.Do] (Hijacker.SmartBar)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\016A7206F164D5243BE66200904CD4AC [01:\Software\Smartbar\version (Not File)] (Hijacker.SmartBar)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\016A7206F164D5243BE662E09C4CD4AC [01:\Software\Smartbar\version (Not File)] (Hijacker.SmartBar)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Activeris [] (PUP.Activeris)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\mamverifier [] (Toolbar.Mamverifier)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SpyHunter [Enigma Software Group, LLC] (Crapware.SpyHunter)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{816dbd76-48e0-4bdc-9051-24958bca5ef5}\InprocServer32 [C:\Program Files\HomeTab\IE\HomeTab.dll (Not File)] (PUP.CertifiedToolbar)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{986fe2c6-7ab7-4337-b0f2-568542d8b628}\InprocServer32 [C:\Program Files\HomeTab\IE\HomeTab.dll (Not File)] (PUP.CertifiedToolbar)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{e74a487b-dfe6-493e-8f16-0bc551137039}\InprocServer32 [C:\Program Files\HomeTab\IE\HomeTab.dll (Not File)] (PUP.CertifiedToolbar)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{816dbd76-48e0-4bdc-9051-24958bca5ef5} [SourceSinkImpl Class] (PUP.CertifiedToolbar)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{986fe2c6-7ab7-4337-b0f2-568542d8b628} [NotificationSource Class] (PUP.CertifiedToolbar)
          SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\CLSID\{e74a487b-dfe6-493e-8f16-0bc551137039} [ToolbarInfo Class] (PUP.CertifiedToolbar)

          ---\\ Bilan de la réparation
          ~ Réparation réalisée avec succès.
          ~ Ce navigateur est absent (Mozilla Firefox)
          ~ Le système a été redémarré.

          ---\\ Statistiques
          ~ Items scannés : 85708
          ~ Items trouvés : 1
          ~ Items réparés : 123

          End of clean at 17:55:24
          ===================
          ZHPCleaner-[R]-31032015-17_55_24.txt
      2. installe la dernière version d'Adobe flash player et java depuis
        leurs sites dédiés, attention à l'installation des barres d'outils !

        désinstalle Ad-Aware Antivirus et McAfee Security Scan Plus !!

        /!\ Avertissement /!\, </li> ce script est seulement valable pour ce pc, en cours du nettoyage, à ne pas utiliser sur un autre pc, risque de plantage ! </li></ul> Lance ZHPFix via le raccourci sur ton Bureau, l'icône est sous forme de seringue.

        /!\Utilisateur de Vista, Seven et W8 :
        • Clique droit sur le logo de ZHPfix, « exécuter en tant qu'Administrateur »


        Clique sur « importer »

        Tu vas voir apparaitre un message d'avertissement, clique sur Ok.
        • * Copie ( Ctrl + C ) et colle ( Ctrl + V ) les lignes suivantes en gras dans la fenêtre de Zhpfix :

        ---------------------------------------------------------

        Script Zhpfix
        M2 - MFEP: RegExtension {0011ebb6-4390-4e21-a2e3-8dd2a85e92d2} . (...) -- C:\Program Files (x86)\DealsCompare\150.xpi (.not file.)
        O1 - Hosts: 54.225.95.126 dmcecclamecbinmplcolhaljlclhbgah
        O4 - GS\QuickLaunch [BastienetYanis]: Launch Internet Explorer Browser.lnk . (...) -- C:\Program Files (x86)\speed browser\Application\chrome.exe (.not file.)
        O4 - GS\Program [BastienetYanis]: Aide.lnk . (...) -- C:\Program Files (x86)\Probit Software\Easy Speed PC\EasySpeedPC.chm (.not file.)
        O4 - GS\Program [BastienetYanis]: Search.lnk . (...) -- C:\Program Files (x86)\speed browser\Application\chrome.exe (.not file.)
        O4 - GS\Program [BastienetYanis]: Uninstall.lnk . (...) -- C:\Program Files (x86)\Probit Software\Easy Speed PC\uninstall.exe (.not file.)
        O4 - GS\Desktop [BastienetYanis]: SpyHunter.lnk . (...) -- C:\Program Files (x86)\Enigma Software Group\SpyHunter\SpyHunter4.exe (.not file.)
        O4 - HKLM\..\Run: [V-bates] C:\Program Files\V-bates\notifier64.exe (.not file.)
        O23 - Service: SpyHunter 4 Service (SpyHunter 4 Service) . (.Enigma Software Group USA, LLC. - Service scanner interface.) - C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe
        [MD5.6ACCFC315FF55C983934811451DDEE66] [APT] [FastAgain PC Booster] (.Activeris.) -- C:\Program Files (x86)\FastAgain PC Booster\PCBooster.exe [8034816]
        [MD5.6ACCFC315FF55C983934811451DDEE66] [APT] [FastAgain PC Booster_DEFAULT] (.Activeris.) -- C:\Program Files (x86)\FastAgain PC Booster\PCBooster.exe [8034816]
        [MD5.6ACCFC315FF55C983934811451DDEE66] [APT] [FastAgain PC Booster_UPDATES] (.Activeris.) -- C:\Program Files (x86)\FastAgain PC Booster\PCBooster.exe [8034816]
        [MD5.00000000000000000000000000000000] [APT] [ParetoLogic Update Version3 Startup Task] (...) -- C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe (.not file.) [0]
        [MD5.F845E730A534BA17372368372DF01579] [APT] [SpyHunter4Startup] (.Enigma Software Group USA, LLC..) -- C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe [8260480]
        [MD5.00000000000000000000000000000000] [APT] [UpdateVO] (...) -- C:\Users\BastienetYanis\AppData\Roaming\VOPackage\VOPackage.exe (.not file.) [0]
        [MD5.00000000000000000000000000000000] [APT] [{148A78C4-6AB6-4F04-B670-9373698B5E22}] (...) -- C:\Users\BastienetYanis\AppData\Roaming\Nosibay\Bubble Dock\Uninstall Bubble Dock.exe (.not file.) [0]
        [MD5.00000000000000000000000000000000] [APT] [{9B02FA26-A9DC-49AB-B067-F42CB88B2701}] (...) -- c:\program files (x86)\speed browser\application\chrome.exe (.not file.) [0]
        [MD5.00000000000000000000000000000000] [APT] [{9B1EACFF-21DD-4567-A7E4-7A77E88D07A8}] (...) -- c:\program files (x86)\speed browser\application\chrome.exe (.not file.) [0]
        O39 - APT: FastAgain PC Booster_DEFAULT - (.Activeris.) -- C:\Windows\Tasks\FastAgain PC Booster_DEFAULT.job [324]
        O39 - APT: FastAgain PC Booster_DEFAULT - (.Activeris.) -- C:\Windows\System32\Tasks\FastAgain PC Booster_DEFAULT [324]
        O39 - APT: FastAgain PC Booster_UPDATES - (.Activeris.) -- C:\Windows\Tasks\FastAgain PC Booster_UPDATES.job [332]
        O39 - APT: FastAgain PC Booster_UPDATES - (.Activeris.) -- C:\Windows\System32\Tasks\FastAgain PC Booster_UPDATES [332]
        O39 - APT: ParetoLogic Update Version3 Startup Task - (...) -- C:\Windows\Tasks\ParetoLogic Update Version3 Startup Task.job [530]
        O42 - Logiciel: Avast Packages - (...) [HKCU][64Bits] -- Avast Packages
        O42 - Logiciel: Image Resizer - (.Tweaks.) [HKLM][64Bits] -- Tweaks Image Resizer
        O42 - Logiciel: Image Resizer Packages - (...) [HKCU][64Bits] -- Image Resizer Packages
        O42 - Logiciel: Lollipop - (.Lollipop Network, S.L..) [HKCU][64Bits] -- lollipop_01070657
        O42 - Logiciel: Snap.Do Engine - (.ReSoft Ltd..) [HKCU][64Bits] -- {b9b81f85-446e-4d45-aff5-d95c2be8fbf2}
        O42 - Logiciel: SpyHunter 4 - (.Enigma Software Group, LLC.) [HKLM][64Bits] -- SpyHunter
        [HKCU\Software\Activeris]
        [HKCU\Software\AppDataLow\Software\Apps Hat]
        [HKCU\Software\Probit Software]
        [HKCU\Software\Smartbar]
        [HKLM\Software\EnigmaSoftwareGroup]
        [HKLM\Software\Wow6432Node\Activeris]
        C:\Program Files (x86)\Software
        C:\Users\BastienetYanis\AppData\Roaming\Activeris
        C:\Users\BastienetYanis\AppData\Roaming\Enigma Software Group
        C:\Users\BastienetYanis\AppData\Local\Apps
        C:\Users\BastienetYanis\AppData\Local\com
        C:\Users\BastienetYanis\AppData\Local\Software
        O44 - LFC:[MD5.3B32CAA07D672F8A2E0DF5CB3A873F45] - 30/03/2015 - 22:30:40 ---A- . (...) -- C:\Windows\System32\Drivers\EsgScanner.sys [22704]
        O45 - LFCP:[MD5.623B15D8C83942EC578E84B910065636] - 30/03/2015 - 22:27:27 ---A- - C:\Windows\Prefetch\SPYHUNTER-INSTALLER.EXE-A27CA18E.pf
        O45 - LFCP:[MD5.D7AA1CFB11083E4DD331528555103B30] - 30/03/2015 - 22:40:52 ---A- - C:\Windows\Prefetch\SPYHUNTER4.EXE-3B4E3201.pf
        O58 - SDL:30/03/2015 - 22:30:40 ---A- . (...) -- C:\Windows\System32\Drivers\EsgScanner.sys [22704]
        O61 - LFC: 30/03/2015 - 14:11:38 ---A- . (.Enigma Software Group USA, LLC..) -- C:\Users\BastienetYanis\AppData\Roaming\Enigma Software Group\sh_installer.exe [3109248]
        O61 - LFC: 30/03/2015 - 14:11:44 ---A- . (.Enigma Software Group USA, LLC..) -- C:\Users\BastienetYanis\Downloads\SpyHunter-Installer.exe [3109248]
        O68 - StartMenuInternet: <speed browser> <speed browser> [HKLM\..\Shell\open\Command] (...) -- C:\Program Files (x86)\speed browser\Application\chrome.exe (.not file.)
        O69 - SBI: SearchScopes [HKCU] {5428abe0-4c3e-40be-b6cb-4ca07f6180ea} - (secure-surf) - http://www.secure-surf.com
        O69 - SBI: SearchScopes [HKCR] {afdbddaa-5d3f-42ee-b79c-185a7020515b} [DefaultScope] - (Web Search) - http://ww7.certified-toolbar.com
        [HKCR\CLSID\{22222222-2222-2222-2222-220422052294}] (CrossriderApp0040594.Sandbox)
        [HKCR\CLSID\{22222222-2222-2222-2222-220422902284}] (CrossriderApp0049084.Sandbox)
        SR - | Auto 30/03/2015 1026432 | (SpyHunter 4 Service) . (.Enigma Software Group USA, LLC..) - C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe
        [HKLM\SYSTEM\CurrentControlSet\Services\SpyHunter 4 Service]
        [HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Avast Packages]
        [HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Image Resizer Packages]
        [HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_01070657]
        [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SpyHunter]
        [HKLM\Software\Classes\CLSID\{22222222-2222-2222-2222-220422052294}]
        [HKLM\Software\Classes\CLSID\{22222222-2222-2222-2222-220422902284}]
        C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe
        C:\Windows\Tasks\ParetoLogic Update Version3 Startup Task.job
        O39 - APT: - (..) -- C:\Windows\Tasks\OWST.job [1380]
        O43 - CFD: 29/03/2015 - 23:19:00 - [] ----D C:\Program Files (x86)\FastAgain PC Booster
        [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FastAgain PC Booster_DEFAULT]
        [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FastAgain PC Booster_UPDATES]
        C:\Program Files (x86)\FastAgain PC Booster\PCBooster.exe
        C:\Windows\Tasks\FastAgain PC Booster_DEFAULT.job
        C:\Windows\System32\Tasks\FastAgain PC Booster_DEFAULT
        C:\Windows\Tasks\FastAgain PC Booster_UPDATES.job
        C:\Windows\System32\Tasks\FastAgain PC Booster_UPDATES
        [HKCU\Software\SearchProtectINTSM]
        C:\Users\BastienetYanis\Desktop\SpyHunter.lnk
        O3 - Toolbar: (no name) - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline
        [HKCU\Software\ASKDefaultSearch]
        [HKCU\Software\ASKHomePage]
        [HKLM\Software\Wow6432Node\mamverifier]
        Hostfix
        EmptyPrefetch
        ShortcutFix
        Emptytemp
        EmptyClsid


        ----------------------------------------------------------
        - Clique sur le bouton « GO » pour lancer le nettoyage,
        - confirme le nettoyage
        - Héberge le rapport ZHPFIX.txt sur
        https://www.cjoint.com/

        puis copie/colle le lien fourni dans ta prochaine réponse sur le forum.

        Tuto en bas de cette page :
        https://nicolascoolman.eu