pages de pub s'affichent de façon intempestive Résolu

Question

Bonjour,

J'ai un pb de pages de pub qui s'affichent de façon intempestive, sous google chrome et  windows 7, c'est très désagréable et ça fait ramer l'ordinateur. 
J'ai essayé de nettoyer avec super antispyware, qui trouve des fichiers infectés d'ailleurs, mais ça ne résout pas le pb.

Quelqu'un peut m'aider?

Merci

lilidurhone · Answer

Bonjour
Tu as dû installer des logiciels potentiellement indésirables


Pour éviter ce genre de problème :

- Ne télécharge aucun programme proposé dans des publicités ou sur des sites suspects. A noter que certains sites connus comme  Softronic, Tuto4PC, etc modifient parfois les programmes proposés au téléchargement pour y ajouter des logiciels publicitaires ==> Préfère toujours le téléchargement directement sur le site de l'éditeur.


- Au cours de l'installation d'un programme gratuit, lis bien attentivement et décoche tous les programmes additionnels qui sont proposés, en particulier les barres d'outils.

Pour ton information lis ces dossier sur les Programmes Potentiellement Indésirables et Les Barres d'Outils ce n'est pas obligatoires

Télécharge cet outil simple d'utilisation 

https://toolslib.net/downloads/viewdownload/1-adwcleaner/


Si problème avec le 1er lien prends le ici https://www.commentcamarche.net/telecharger/securite/2759-adwcleaner/


Lance le (Sous vista/seven/8 clic droit dessus,et sur exécuter en tant qu'administrateur)si tu es sous xp double cliques dessus


Cliques sur scanner 


Poste le rapport de recherche C:\Adwcleaner[R]


Note le rapport de recherche est également sauvegardé sous C:\Adwcleaner[R1]

Utilisateur anonyme · Answer

Salut, 

Dans un premier temps, télécharge Ccleaner à l'adresse suivante : 
https://www.commentcamarche.net/telecharger/utilitaires/5647-ccleaner/

Ensuite "Analyse" , dès que l'analyse est finie, décoche les cases que tu ne souhaite pas que Ccleaner supprime ( Un conseil supprime tout pour être bien sûr. Par contre les mots de passes que tu auras enregistré ( ce qui n'es pas conseillé ) seront supprimés aussi donc il faut que tu te souviennes de ces derniers ). 

Ensuite télécharge ADWCleaner : 

https://www.commentcamarche.net/telecharger/securite/2759-adwcleaner/

" Scanner " et ensuite " Supprimer " .  A la fin tu devra redémarrer ton Ordinateur. Tu pourras aussi désintaller ce logiciel en cliquant simplement sur " Désinstaller ". 

Une fois ton ordinateur redémarré, télécharges Adblock ( extension qui bloque les pubs sur google chrome ) :

https://chrome.google.com/webstore/detail/adblock-%E2%80%94-best-ad-blocker/gighmmpiobklfepjocnamgkkbiglidom?hl=fr

" Ajouter à Chrome ". 

Une fois cela fais, normalement, tu n'auras plus de pubs ...

Snorcky

djudjoo · Answer

voici le rapport d'adwcleaner :


# AdwCleaner v4.201 - Rapport créé le 19/04/2015 à 19:32:01
# Mis à jour le 08/04/2015 par Xplode
# Base de données : 2015-04-19.3 [Serveur]
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (x64)
# Nom d'utilisateur : felipe - FELIPE-PC
# Exécuté depuis : C:\Users\felipe\Downloads\adwcleaner_4.201.exe
# Option : Scanner

 [ Services ] *****

Service Trouvé : CltMngSvc
Service Trouvé : globalUpdate
Service Trouvé : globalUpdatem
Service Trouvé : IHProtect Service
Service Trouvé : Orbiter
Service Trouvé : SPPD
Service Trouvé : WindowsMangerProtect

 [ Fichiers / Dossiers ] *****

Dossier Trouvé : C:\Program Files (x86)\globalUpdate
Dossier Trouvé : C:\Program Files (x86)\Lights Cinema 1.3betaV15.04
Dossier Trouvé : C:\Program Files (x86)\ORBTR
Dossier Trouvé : C:\Program Files (x86)\SearchProtect
Dossier Trouvé : C:\Program Files (x86)\StormVade
Dossier Trouvé : C:\Program Files (x86)\XTab
Dossier Trouvé : C:\ProgramData\IHProtectUpDate
Dossier Trouvé : C:\ProgramData\Microsoft\Windows\Start Menu\HitsBlender
Dossier Trouvé : C:\ProgramData\WindowsMangerProtect
Dossier Trouvé : C:\Users\felipe\AppData\Local\globalUpdate
Dossier Trouvé : C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldikpdnngdmeceeameoaannjilbjppnm
Dossier Trouvé : C:\Users\felipe\AppData\Local\SearchProtect
Dossier Trouvé : C:\Users\felipe\AppData\Roaming\istartsurf
Dossier Trouvé : C:\Users\felipe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock
Dossier Trouvé : C:\Users\felipe\AppData\Roaming\Nosibay
Dossier Trouvé : C:\Users\felipe\AppData\Roaming\OpenCandy
Dossier Trouvé : C:\Users\felipe\AppData\Roaming\Store
Dossier Trouvé : C:\Users\felipe\AppData\Roaming\WTools
Fichier Trouvé : C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_istart.webssearches.com_0.localstorage
Fichier Trouvé : C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_istart.webssearches.com_0.localstorage-journal
Fichier Trouvé : C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.istartsurf.com_0.localstorage
Fichier Trouvé : C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.istartsurf.com_0.localstorage-journal
Fichier Trouvé : C:\Users\felipe\AppData\Roaming\Bubble Dock.boostrap.log
Fichier Trouvé : C:\Users\felipe\AppData\Roaming\Bubble Dock.installation.log
Fichier Trouvé : C:\Users\felipe\AppData\Roaming\Selection Tools.installation.log
Fichier Trouvé : C:\Users\felipe\AppData\Roaming\WindApp.boostrap.log
Fichier Trouvé : C:\Users\felipe\AppData\Roaming\WindApp.installation.log
Fichier Trouvé : C:\Windows\apppatch\apppatch64\vcldr64.dll
Fichier Trouvé : C:\Windows\AppPatch\Custom\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb
Fichier Trouvé : C:\Windows\AppPatch\Custom\Custom64\{cf2797aa-b7ec-e311-8ed9-005056c00008}.sdb
Fichier Trouvé : C:\Windows\AppPatch
bin\VC32Loader.dll
Fichier Trouvé : C:\Windows\System32\ColorMedia64.dll

 [ Tâches planifiées ] *****

Tâche Trouvée : globalUpdateUpdateTaskMachineCore
Tâche Trouvée : globalUpdateUpdateTaskMachineUA
Tâche Trouvée : 4a0add4e-8370-41d5-8c5f-519b7643df35-1-6
Tâche Trouvée : 4a0add4e-8370-41d5-8c5f-519b7643df35-1-7
Tâche Trouvée : 4a0add4e-8370-41d5-8c5f-519b7643df35-3
Tâche Trouvée : 4a0add4e-8370-41d5-8c5f-519b7643df35-5
Tâche Trouvée : 4a0add4e-8370-41d5-8c5f-519b7643df35-5_user
Tâche Trouvée : 4a0add4e-8370-41d5-8c5f-519b7643df35-6
Tâche Trouvée : 4a0add4e-8370-41d5-8c5f-519b7643df35-7

 [ Raccourcis ] *****

Raccourci Infecté : C:\Users\felipe\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk

 [ Registre ] *****

Clé Trouvée : HKCU\Software\AppDataLow\Software\Crossrider
Clé Trouvée : HKCU\Software\GlobalUpdate
Clé Trouvée : HKCU\Software\InstalledBrowserExtensions
Clé Trouvée : HKCU\Software\Lights Cinema 1.3betaV15.04
Clé Trouvée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Clé Trouvée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Clé Trouvée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{7FC19B35-5082-46C6-B92E-93810EA47356}
Clé Trouvée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
Clé Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{10ECCE17-29B5-4880-A8F5-EAD298611484}
Clé Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Bubble Dock
Clé Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Selection Tools
Clé Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\windapp
Clé Trouvée : HKCU\Software\Nosibay
Clé Trouvée : HKCU\Software\Store
Clé Trouvée : HKCU\Software\StormVade
Clé Trouvée : HKCU\Software\WTools
Clé Trouvée : [x64] HKCU\Software\GlobalUpdate
Clé Trouvée : [x64] HKCU\Software\InstalledBrowserExtensions
Clé Trouvée : [x64] HKCU\Software\Lights Cinema 1.3betaV15.04
Clé Trouvée : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Clé Trouvée : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Clé Trouvée : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Clé Trouvée : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{7FC19B35-5082-46C6-B92E-93810EA47356}
Clé Trouvée : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
Clé Trouvée : [x64] HKCU\Software\Nosibay
Clé Trouvée : [x64] HKCU\Software\Store
Clé Trouvée : [x64] HKCU\Software\StormVade
Clé Trouvée : [x64] HKCU\Software\WTools
Clé Trouvée : HKLM\SOFTWARE\5e7e021a-c0e8-46d7-bf72-602f7f8ae678
Clé Trouvée : HKLM\SOFTWARE\a6f67dfa-2d34-46ad-9a74-89fc7c746257
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Clé Trouvée : HKLM\SOFTWARE\Classes\AppID\REI_AxControl.DLL
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Clé Trouvée : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Clé Trouvée : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
Clé Trouvée : HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine
Clé Trouvée : HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine.1
Clé Trouvée : HKLM\SOFTWARE\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}
Clé Trouvée : HKLM\SOFTWARE\GlobalUpdate
Clé Trouvée : HKLM\SOFTWARE\HitsBlender
Clé Trouvée : HKLM\SOFTWARE\IHProtect
Clé Trouvée : HKLM\SOFTWARE\InstalledBrowserExtensions
Clé Trouvée : HKLM\SOFTWARE\istartsurfSoftware
Clé Trouvée : HKLM\SOFTWARE\Lights Cinema 1.3betaV15.04
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Lights Cinema 1.3betaV15.04
Clé Trouvée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Clé Trouvée : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Clé Trouvée : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Clé Trouvée : HKLM\SOFTWARE\ORBTR
Clé Trouvée : HKLM\SOFTWARE\SearchProtect
Clé Trouvée : HKLM\SOFTWARE\SPPDCOM
Clé Trouvée : HKLM\SOFTWARE\StormVade
Clé Trouvée : HKLM\SOFTWARE\SupDp
Clé Trouvée : HKLM\SOFTWARE\SupTab
Clé Trouvée : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Clé Trouvée : [x64] HKLM\SOFTWARE\Classes\CLSID\{10ECCE17-29B5-4880-A8F5-EAD298611484}
Clé Trouvée : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Clé Trouvée : [x64] HKLM\SOFTWARE\Classes\CLSID\{801B440B-1EE3-49B0-B05D-2AB076D4E8CB}
Clé Trouvée : [x64] HKLM\SOFTWARE\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
Clé Trouvée : [x64] HKLM\SOFTWARE\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
Clé Trouvée : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Clé Trouvée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\StormVade
Donnée Trouvée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll
Donnée Trouvée : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll
Valeur Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Bubble Dock]
Valeur Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [HitsBlender]
Valeur Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Selection Tools]
Valeur Trouvée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [WindApp]

 [ Navigateurs ] *****

-\ Internet Explorer v0.0.0.0

Paramètre Trouvé : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.istartsurf.com/?type=hppp&ts=1429131715&from=smt&uid=ST9500420AS_5VJF7RP6XXXX5VJF7RP6
Paramètre Trouvé : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.istartsurf.com/?type=hppp&ts=1429131715&from=smt&uid=ST9500420AS_5VJF7RP6XXXX5VJF7RP6
Paramètre Trouvé : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.istartsurf.com/?type=hppp&ts=1429131715&from=smt&uid=ST9500420AS_5VJF7RP6XXXX5VJF7RP6
Paramètre Trouvé : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.istartsurf.com/?type=hppp&ts=1429131715&from=smt&uid=ST9500420AS_5VJF7RP6XXXX5VJF7RP6
Paramètre Trouvé : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.istartsurf.com/?type=hppp&ts=1429131715&from=smt&uid=ST9500420AS_5VJF7RP6XXXX5VJF7RP6

-\ Google Chrome v42.0.2311.90

[C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Trouvée [Extension] : booedmolknjekdopkepjjeckmjkdpfgl
[C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Trouvée [Extension] : flpcjncodpafbgdpnkljologafpionhb
[C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Trouvée [Extension] : ldikpdnngdmeceeameoaannjilbjppnm
[C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Trouvée [Extension] : aaaaabcbmongicmdegkmmfgdickgnnob
[C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Trouvée [Homepage] : hxxp://www.istartsurf.com/?type=hppp&ts=1429131715&from=smt&uid=ST9500420AS_5VJF7RP6XXXX5VJF7RP6
[C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Trouvée [Startup_URLs] : hxxp://www.trovi.com/?gd=&ctid=CT3332182&octid=EB_ORIGINAL_CTID&ISID=M5FF23460-8523-4F1D-A980-B496A680D136&SearchSource=55&CUI=&UM=8&UP=SP4C873EEC-0CAC-41F4-8A08-F74B4E977B3B&D=041515&SSPV=
[C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Trouvée [Default_Search_Provider_Data] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3332182&octid=EB_ORIGINAL_CTID&ISID=M5FF23460-8523-4F1D-A980-B496A680D136&SearchSource=58&CUI=&UM=8&UP=SP4C873EEC-0CAC-41F4-8A08-F74B4E977B3B&q={searchTerms}&D=041515&SSPV=



AdwCleaner[R0].txt - [3634 octets] - [23/01/2015 19:31:12]
AdwCleaner[R1].txt - [16262 octets] - [19/04/2015 19:32:01]
AdwCleaner[S0].txt - [3594 octets] - [23/01/2015 19:33:14]

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [16383 octets] ##########

lilidurhone · Answer

fais nettoyer puis

 &#9654 Télécharge ici : FRST (de Farbar)
!!! En fonction de ta version de Windows, prends la "32-Bit Version" ou la "64-Bit Version" !!!
Aide : va dans Démarrer > Panneau de configuration > Système pour savoir si tu es sous 32 bits ou 64 bits.

&#9654 Double-clique sur l'icône FRST.exe pour lancer le programme. (Sous Windows Vista, 7 et 8, il faut faire un clic droit dessus, puis exécuter en tant qu'administrateur.) Clique ensuite sur Oui lorsqu'un message d'avertissement (Disclaimer) s'affiche.

&#9654 Sur le menu principal, clique sur le bouton Scan et patiente le temps de l'analyse.

&#9654 A la fin du scan, deux rapports s'affichent, FRST.txt et Addition.txt Poste les rapports dans ta prochaine réponse.

Les rapport se trouvent ici : C:\FRST\Logs

&#9654 Envoie-les sur https://www.cjoint.com/ et poste les liens obtenus en échange.

djudjoo · Answer

voici les rapports du scan : Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-04-2015 01 Ran by felipe (administrator) on FELIPE-PC on 19-04-2015 20:09:17 Running from C:\Users\felipe\Downloads Loaded Profiles: UpdatusUser & felipe (Available profiles: UpdatusUser & felipe) Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Français (France) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe (Microsoft Corporation) C:\WINDOWS\System32\wlanext.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe (SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe (McAfee, Inc.) C:\WINDOWS\System32\mfevtps.exe (Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Microsoft Corporation) C:\WINDOWS\SysWOW64\rundll32.exe (Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Intel Corporation) C:\WINDOWS\System32\igfxtray.exe (Intel Corporation) C:\WINDOWS\System32\hkcmd.exe (Intel Corporation) C:\WINDOWS\System32\igfxpers.exe () C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe (Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe (CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE (SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Micro Application) C:\Program Files (x86)\Micro Application\LauncherMA.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Intel® Corporation) C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe (SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe () C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe (Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe () C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe () C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE () C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McUICnt.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE (McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mcshield.exe (CANON INC.) C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\WINDOWS\splwow64.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmd.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe (Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe (Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) C:\WINDOWS\System32\dllhost.exe (Oracle Corporation) C:\Users\felipe\AppData\Local\Temp\jre-8u45-windows-au.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\CSP\1.3.336.0\McCSPServiceHost.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2531624 2010-12-17] (Synaptics Incorporated) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6611048 2011-02-19] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2188904 2011-01-19] (Realtek Semiconductor) HKLM\...\Run: [NVHotkey] => rundll32.exe C:\Windows\system32\nvHotkey.dll,Start HKLM\...\Run: [FreeFallProtection] => C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe [686704 2010-12-17] () HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-09-16] (Intel(R) Corporation) HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [4479648 2011-01-25] (Dell Inc.) HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" HKLM\...\Run: [DellStage] => C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe [2055016 2011-04-30] () HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2726728 2010-03-24] (CANON INC.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [41336 2014-05-08] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [840568 2014-05-08] (Adobe Systems Inc.) HKLM-x32\...\Run: [Dell Webcam Central] => C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [503942 2011-04-13] (Creative Technology Ltd) HKLM-x32\...\Run: [Dell DataSafe Online] => C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe [1117528 2010-08-26] (Dell, Inc.) HKLM-x32\...\Run: [RoxWatchTray] => C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe [240112 2010-11-25] (Sonic Solutions) HKLM-x32\...\Run: [Desktop Disc Tool] => C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe [514544 2010-11-17] () HKLM-x32\...\Run: [mcui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [533872 2015-01-13] (McAfee, Inc.) HKLM-x32\...\Run: [NeroLauncher] => C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe [75064 2011-07-08] () HKLM-x32\...\Run: [AccuWeatherWidget] => C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe [885760 2011-04-30] () HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.) HKLM-x32\...\Run: [IJNetworkScanUtility] => C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe [140640 2010-03-02] (CANON INC.) HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\mcafee\Platform\McUICnt.exe [643064 2014-09-17] (McAfee, Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer: [NoControlPanel] 0 HKLM\...\Policies\Explorer: [NoFolderOptions] 0 HKU\S-1-5-21-2219889945-1969133021-1125444305-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd) HKU\S-1-5-21-2219889945-1969133021-1125444305-1001\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7806232 2015-04-04] (SUPERAntiSpyware) HKU\S-1-5-21-2219889945-1969133021-1125444305-1001\...\Run: [GoogleChromeAutoLaunch_239A726801CC6A79D0CA02E993FF821C] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872 2015-04-13] (Google Inc.) HKU\S-1-5-21-2219889945-1969133021-1125444305-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-27] (Disc Soft Ltd) HKU\S-1-5-21-2219889945-1969133021-1125444305-1001\...\MountPoints2: {080cee20-e349-11e4-9f21-4c809362b87a} - E:\AUTORUN.EXE Startup: C:\Users\felipe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Lanceur.lnk [2015-04-15] ShortcutTarget: Lanceur.lnk -> C:\Program Files (x86)\Micro Application\LauncherMA.exe (Micro Application) Startup: C:\Users\felipe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Moniteur de la technologie Intel® Turbo Boost 2.0.lnk [2013-12-06] ShortcutTarget: Moniteur de la technologie Intel® Turbo Boost 2.0.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation) GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.com/?gws_rd=ssl HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.com/?gws_rd=ssl HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = HKU\S-1-5-21-2219889945-1969133021-1125444305-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM-x32 -> {7FC19B35-5082-46C6-B92E-93810EA47356} URL = https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-2219889945-1969133021-1125444305-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-12-24] (Sun Microsystems, Inc.) BHO-x32: StormVade 1.0.0.7 -> {3d5607cc-7814-46d1-bc4d-fc94740efdae} -> C:\Program Files (x86)\StormVade\StormVadebho.dll No File BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-07-25] (Oracle Corporation) BHO-x32: Programme d'aide de l'Assistant de connexion Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.) BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-07-25] (Oracle Corporation) BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2014-05-08] (Adobe Systems Incorporated) Toolbar: HKU\S-1-5-21-2219889945-1969133021-1125444305-1001 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2015-01-28] (McAfee, Inc.) Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2015-01-28] (McAfee, Inc.) Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2015-01-28] (McAfee, Inc.) Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2015-01-28] (McAfee, Inc.) Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2015-01-13] (McAfee, Inc.) Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2015-01-13] (McAfee, Inc.) Tcpip\Parameters: [DhcpNameServer] 195.49.132.1 195.49.132.193 FireFox: ======== FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll [2011-12-24] (Sun Microsystems, Inc.) FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-01-13] () FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2010-04-14] (CANON INC.) FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-09-05] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-07-25] (Oracle Corporation) FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-01-13] () FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2011-04-21] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2011-04-21] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2014-05-08] (Adobe Systems Inc.) FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2011-12-24] FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2015-02-03] FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2011-12-24] Chrome: ======= CHR HomePage: Default -> hxxp://www.istartsurf.com/?type=hppp&ts=1429131715&from=smt&uid=ST9500420AS_5VJF7RP6XXXX5VJF7RP6 CHR StartupUrls: Default -> "hxxp://www.trovi.com/?gd=&ctid=CT3332182&octid=EB_ORIGINAL_CTID&ISID=M5FF23460-8523-4F1D-A980-B496A680D136&SearchSource=55&CUI=&UM=8&UP=SP4C873EEC-0CAC-41F4-8A08-F74B4E977B3B&D=041515&SSPV=", "hxxp://www.search.ask.com/?o=APN10645A&gct=hp&d=406-1142&v=a12712-345&t=4", "hxxp://www.search.ask.com/?o=APN10645A&gct=hp&d=406-1142&v=a13251-345&t=4", "hxxp://istart.webssearches.com/?type=hp&ts=1419632016&from=exp&uid=ST9500420AS_5VJF7RP6XXXX5VJF7RP6", "hxxp://www.istartsurf.com/?type=hp&ts=1429131695&from=smt&uid=ST9500420AS_5VJF7RP6XXXX5VJF7RP6", "hxxp://www.istartsurf.com/?type=hppp&ts=1429131715&from=smt&uid=ST9500420AS_5VJF7RP6XXXX5VJF7RP6" CHR Profile: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Docs) - C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-07] CHR Extension: (Google Drive) - C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-07] CHR Extension: (YouTube) - C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-07] CHR Extension: (Box Rock) - C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgmglcabdecnhopoocdkniaecgenkjdn [2014-12-27] CHR Extension: (Google Search) - C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-07] CHR Extension: (SiteAdvisor) - C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2015-02-12] CHR Extension: (Chrome Hotword Shared Module) - C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-14] CHR Extension: (Lights Cinema 1.3betaV15.04) - C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi [2015-04-15] CHR Extension: (Google Wallet) - C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-07] CHR Extension: (pioclpoplcdbaefihamjohnefbikjilc) - C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2015-04-19] CHR Extension: (Gmail) - C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-07] CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-02-24] CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-02-24] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-23] (SUPERAntiSpyware.com) R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272592 2015-02-27] (Disc Soft Ltd) R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.) R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [155368 2015-02-19] (McAfee, Inc.) R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [562200 2015-01-13] (McAfee, Inc.) S3 McAWFwk; c:\Program Files\mcafee\msc\McAWFwk.exe [224704 2011-03-09] (McAfee, Inc.) R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.3.336.0\McCSPServiceHost.exe [422632 2014-11-21] (McAfee, Inc.) R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.) R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.) S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [601864 2015-01-07] (McAfee, Inc.) S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [249936 2011-01-28] (McAfee, Inc.) R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.) R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.) R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe [199304 2012-05-25] (McAfee, Inc.) R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1050952 2014-11-06] (McAfee, Inc.) R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe [221832 2014-10-01] (McAfee, Inc.) R2 mfevtp; C:\Windows\system32\mfevtps.exe [189920 2014-10-01] (McAfee, Inc.) R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-09-16] () S2 WajWebE Monitor; C:\Program Files\WajWebE\wajam_64.exe [1965568 2015-04-13] () [File not signed] S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) S2 Update StormVade; "C:\Program Files (x86)\StormVade\updateStormVade.exe" [X] S2 Util StormVade; "C:\Program Files (x86)\StormVade\bin\utilStormVade.exe" [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72136 2014-10-01] (McAfee, Inc.) R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30352 2015-04-15] (Disc Soft Ltd) S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.) R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181584 2014-10-01] (McAfee, Inc.) U3 mfeapfk01; No ImagePath R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313680 2014-10-01] (McAfee, Inc.) U3 mfeavfk01; No ImagePath R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [526360 2014-10-01] (McAfee, Inc.) R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786304 2014-10-01] (McAfee, Inc.) R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [447440 2014-09-19] (McAfee, Inc.) S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [96600 2014-09-19] (McAfee, Inc.) S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [100912 2012-02-22] (McAfee, Inc.) R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348560 2014-10-01] (McAfee, Inc.) S3 NvStUSB; C:\Windows\system32\drivers\nvstusb.sys [121960 2010-12-12] () R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com) R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com) S3 cpuz134; \??\C:\Users\felipe\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-19 20:09 - 2015-04-19 20:10 - 00027105 _____ () C:\Users\felipe\Downloads\FRST.txt 2015-04-19 20:09 - 2015-04-19 20:09 - 00000000 ____D () C:\FRST 2015-04-19 20:08 - 2015-04-19 20:08 - 02098176 _____ (Farbar) C:\Users\felipe\Downloads\FRST64.exe 2015-04-19 20:04 - 2015-04-19 20:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee 2015-04-19 19:58 - 2015-04-19 19:58 - 00000446 _____ () C:\Windows\PFRO.log 2015-04-19 19:31 - 2015-04-19 19:31 - 02217984 _____ () C:\Users\felipe\Downloads\adwcleaner_4.201.exe 2015-04-17 19:05 - 2015-04-19 19:59 - 00000168 _____ () C:\Windows\setupact.log 2015-04-17 19:05 - 2015-04-17 19:05 - 00000000 _____ () C:\Windows\setuperr.log 2015-04-17 19:02 - 2015-04-17 19:02 - 00000000 ____D () C:\SUPERDelete 2015-04-15 23:41 - 2015-04-17 02:41 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 2015-04-15 23:21 - 2015-04-15 23:21 - 00000000 ____D () C:\Users\felipe\AppData\Roaming\Micro Application 2015-04-15 23:13 - 2015-04-15 23:13 - 00002215 _____ () C:\Users\Public\Desktop\Code de la Route Deluxe.lnk 2015-04-15 23:13 - 2015-04-15 23:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Micro Application 2015-04-15 23:07 - 2015-04-15 23:07 - 00000000 ____D () C:\Program Files (x86)\Micro Application 2015-04-15 23:06 - 2015-04-15 23:13 - 00000000 ____D () C:\ProgramData\Micro Application 2015-04-15 23:05 - 2015-04-15 23:05 - 00003752 _____ () C:\Windows\System32\Tasks\Selection Tools Update 2015-04-15 23:04 - 2015-04-15 23:04 - 00003718 _____ () C:\Windows\System32\Tasks\WindApp Update 2015-04-15 23:00 - 2015-04-17 19:01 - 00000000 ____D () C:\Users\felipe\AppData\Roaming\DAEMON Tools Lite 2015-04-15 23:00 - 2015-04-15 23:01 - 00000000 ____D () C:\Program Files\DAEMON Tools Lite 2015-04-15 23:00 - 2015-04-15 23:00 - 00030352 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys 2015-04-15 23:00 - 2015-04-15 23:00 - 00001705 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2015-04-15 23:00 - 2015-04-15 23:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite 2015-04-15 22:58 - 2015-04-15 22:59 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite 2015-04-15 22:56 - 2015-04-15 22:58 - 13146016 _____ (Disc Soft Ltd) C:\Users\felipe\Downloads\DTLite501-0406.exe 2015-04-15 22:54 - 2015-04-15 22:54 - 00000121 _____ () C:\Users\felipe\Desktop\Download Free Software.url 2015-04-15 22:41 - 2015-04-15 22:42 - 00000000 ____D () C:\Program Files (x86)\47e7063b-5807-4c0a-bb75-fb5fe32deeb1 2015-04-15 22:38 - 2015-04-15 22:38 - 00003152 _____ () C:\Windows\System32\Tasks\{C0899641-06DC-4DF2-B902-38C9C77B9616} 2015-04-15 22:35 - 2015-04-16 05:46 - 00000000 ____D () C:\Users\felipe\AppData\Local\avaavaevy 2015-04-15 22:35 - 2015-04-15 22:38 - 01746520 _____ (BitTorrent Inc.) C:\Users\felipe\Downloads\BitTorrent (2).exe 2015-04-15 22:35 - 2015-04-15 22:35 - 00003472 _____ () C:\Windows\System32\Tasks\avaavaevy 2015-04-15 22:18 - 2015-04-15 22:18 - 00000000 ____D () C:\Users\felipe\AppData\Roaming\Macrovision 2015-04-15 22:18 - 2015-04-15 22:18 - 00000000 ____D () C:\Users\felipe\AppData\Local\Sonic_Solutions 2015-04-15 14:22 - 2015-04-15 14:22 - 00000000 ____D () C:\Users\felipe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WajWebE 2015-04-15 14:22 - 2015-04-15 14:22 - 00000000 ____D () C:\Program Files\WajWebE 2015-04-15 14:21 - 2015-04-15 14:21 - 00000000 ____D () C:\Users\felipe\Downloads\[Micro Application] Code De La Route 2010-2011 édition Deluxe 2015-04-15 14:20 - 2015-04-15 14:20 - 00030986 _____ () C:\Users\felipe\Downloads\code-de-la-route-2010-2011-edition-deluxe.torrent 2015-04-15 14:15 - 2015-04-15 14:17 - 01746520 _____ (BitTorrent Inc.) C:\Users\felipe\Downloads\BitTorrent (1).exe 2015-04-15 14:01 - 2015-04-15 14:02 - 01490768 _____ (Micro Application) C:\Users\felipe\Downloads\Non confirmé 93335.crdownload 2015-04-15 10:41 - 2015-04-15 10:41 - 05724921 _____ () C:\Users\felipe\Downloads\PERMUTBAR-2015 (2).xlsx 2015-04-15 10:38 - 2015-04-15 10:39 - 00309033 _____ () C:\Users\felipe\Downloads\PERMUT 2015 mails pros.xlsx 2015-04-15 10:38 - 2015-04-15 10:38 - 00102912 _____ () C:\Users\felipe\Downloads\Permutations 2015_Snudi.xls 2015-04-15 10:06 - 2015-04-15 10:06 - 00000000 ___RD () C:\Program Files (x86)\Skype 2015-04-15 10:06 - 2015-04-15 10:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-04-15 10:01 - 2015-04-02 02:17 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-04-15 10:01 - 2015-04-02 01:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-04-15 10:01 - 2015-03-23 05:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-04-15 10:01 - 2015-03-23 05:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-04-15 10:01 - 2015-03-23 05:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-04-15 10:01 - 2015-03-23 05:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-04-15 10:01 - 2015-03-23 05:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-04-15 10:01 - 2015-03-23 05:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2015-04-15 10:01 - 2015-03-23 05:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-04-15 10:01 - 2015-03-23 05:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-04-15 10:01 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-04-15 10:01 - 2015-03-13 06:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-04-15 10:01 - 2015-03-13 06:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-04-15 10:01 - 2015-03-13 06:09 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-04-15 10:01 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-04-15 10:01 - 2015-03-13 06:08 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-04-15 10:01 - 2015-03-13 06:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-04-15 10:01 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-04-15 10:01 - 2015-03-13 06:06 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-04-15 10:01 - 2015-03-13 06:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-04-15 10:01 - 2015-03-13 05:59 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-04-15 10:01 - 2015-03-13 05:55 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-04-15 10:01 - 2015-03-13 05:54 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-04-15 10:01 - 2015-03-13 05:54 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-04-15 10:01 - 2015-03-13 05:53 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-04-15 10:01 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-04-15 10:01 - 2015-03-13 05:44 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-04-15 10:01 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-04-15 10:01 - 2015-03-13 05:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-04-15 10:01 - 2015-03-13 05:40 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-04-15 10:01 - 2015-03-13 05:32 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-04-15 10:01 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-04-15 10:01 - 2015-03-13 05:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-04-15 10:01 - 2015-03-13 05:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-04-15 10:01 - 2015-03-13 05:27 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-04-15 10:01 - 2015-03-13 05:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-04-15 10:01 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-04-15 10:01 - 2015-03-13 05:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-04-15 10:01 - 2015-03-13 05:23 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-04-15 10:01 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-04-15 10:01 - 2015-03-13 05:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-04-15 10:01 - 2015-03-13 05:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-04-15 10:01 - 2015-03-13 05:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-04-15 10:01 - 2015-03-13 05:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-04-15 10:01 - 2015-03-13 05:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-04-15 10:01 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-04-15 10:01 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-04-15 10:01 - 2015-03-13 05:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-04-15 10:01 - 2015-03-13 05:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-04-15 10:01 - 2015-03-13 05:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-04-15 10:01 - 2015-03-13 05:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-04-15 10:01 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-04-15 10:01 - 2015-03-13 04:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-04-15 10:01 - 2015-03-13 04:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-04-15 10:01 - 2015-03-13 04:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-04-15 10:01 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-04-15 10:01 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-04-15 10:01 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-04-15 10:01 - 2015-03-13 04:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-04-15 10:01 - 2015-03-13 04:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-04-15 10:01 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-04-15 10:01 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-04-15 10:01 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-04-15 10:01 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-04-15 10:01 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-04-15 10:01 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-04-15 09:58 - 2015-03-25 05:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-04-15 09:58 - 2015-03-25 05:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-04-15 09:58 - 2015-03-25 05:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-04-15 09:58 - 2015-03-25 05:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-04-15 09:58 - 2015-03-25 05:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-04-15 09:58 - 2015-03-25 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-04-15 09:58 - 2015-03-25 05:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-04-15 09:58 - 2015-03-25 05:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-04-15 09:58 - 2015-03-25 05:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-04-15 09:58 - 2015-03-25 05:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-04-15 09:58 - 2015-03-25 05:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-04-15 09:58 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-04-15 09:58 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-04-15 09:58 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-04-15 09:58 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-04-15 09:58 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-04-15 09:58 - 2015-03-17 07:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-04-15 09:58 - 2015-03-17 07:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-04-15 09:58 - 2015-03-17 07:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-04-15 09:58 - 2015-03-17 07:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-04-15 09:58 - 2015-03-17 07:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2015-04-15 09:58 - 2015-03-17 07:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-04-15 09:58 - 2015-03-17 07:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-04-15 09:58 - 2015-03-17 07:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2015-04-15 09:58 - 2015-03-17 07:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-04-15 09:58 - 2015-03-17 07:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-04-15 09:58 - 2015-03-17 07:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-04-15 09:58 - 2015-03-17 07:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-04-15 09:58 - 2015-03-17 07:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-04-15 09:58 - 2015-03-17 07:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-04-15 09:58 - 2015-03-17 07:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-04-15 09:58 - 2015-03-17 07:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2015-04-15 09:58 - 2015-03-17 07:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-04-15 09:58 - 2015-03-17 07:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-04-15 09:58 - 2015-03-17 07:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-04-15 09:58 - 2015-03-17 07:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2015-04-15 09:58 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2015-04-15 09:58 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2015-04-15 09:58 - 2015-03-17 06:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-04-15 09:58 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-04-15 09:58 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-04-15 09:58 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-04-15 09:58 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-04-15 09:58 - 2015-03-17 06:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2015-04-15 09:58 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2015-04-15 09:58 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2015-04-15 09:58 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2015-04-15 09:58 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2015-04-15 09:58 - 2015-03-05 07:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2015-04-15 09:58 - 2015-03-05 06:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2015-04-15 09:57 - 2015-03-17 07:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-04-15 09:57 - 2015-03-17 07:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2015-04-15 09:57 - 2015-03-17 07:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-04-15 09:57 - 2015-03-17 07:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2015-04-15 09:57 - 2015-03-17 07:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-04-15 09:57 - 2015-03-17 07:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-04-15 09:57 - 2015-03-17 07:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-04-15 09:57 - 2015-03-17 07:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2015-04-15 09:57 - 2015-03-17 07:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-04-15 09:57 - 2015-03-17 07:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-04-15 09:57 - 2015-03-17 07:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-04-15 09:57 - 2015-03-17 07:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-04-15 09:57 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-04-15 09:57 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2015-04-15 09:57 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-04-15 09:57 - 2015-03-17 06:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2015-04-15 09:57 - 2015-03-17 06:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2015-04-15 09:57 - 2015-03-17 06:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-04-15 09:57 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-04-15 09:57 - 2015-03-17 06:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2015-04-15 09:57 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-04-15 09:57 - 2015-03-17 06:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2015-04-15 09:57 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-04-15 09:57 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 05:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2015-04-15 09:57 - 2015-03-17 05:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2015-04-15 09:57 - 2015-03-17 05:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2015-04-15 09:57 - 2015-03-17 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2015-04-15 01:46 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys 2015-04-14 21:42 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys 2015-04-14 21:42 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll 2015-04-14 21:42 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll 2015-04-14 19:29 - 2015-04-14 19:29 - 00225647 _____ () C:\Users\felipe\Documents\puncho sud 14 04.igc 2015-04-12 22:01 - 2015-04-12 22:01 - 00173323 _____ () C:\Users\felipe\Documents\puncho sud 12 avril.igc 2015-04-09 18:52 - 2015-04-09 18:52 - 00000257 _____ () C:\Users\felipe\Downloads\puech-arnd.vcf 2015-04-06 18:18 - 2015-04-06 18:18 - 00029784 _____ () C:\Users\felipe\Downloads\150401 cden compte rendu.odt 2015-04-06 15:11 - 2015-04-06 15:11 - 00356758 _____ () C:\Users\felipe\Downloads\evaluation-enfant-ocean.zip 2015-04-06 14:59 - 2015-04-06 14:59 - 00014896 _____ () C:\Users\felipe\Downloads\verluisette.zip 2015-04-06 03:00 - 2015-04-06 03:00 - 00000000 ___SD () C:\Windows\SysWOW64\GWX 2015-04-06 03:00 - 2015-04-06 03:00 - 00000000 ___SD () C:\Windows\system32\GWX 2015-04-05 20:37 - 2015-04-05 20:37 - 00219421 _____ () C:\Users\felipe\Documents\brunas 03 avril 15.igc 2015-04-01 14:22 - 2015-04-01 14:22 - 00015755 _____ () C:\Users\felipe\Downloads\argumentaire.odt 2015-03-29 10:57 - 2015-03-29 10:57 - 00027091 _____ () C:\Users\felipe\Downloads\bilan CAAS 27 mars 15.odt 2015-03-28 21:22 - 2015-03-28 21:22 - 00003138 _____ () C:\Windows\System32\Tasks\{E76924A5-7B67-4B00-9E19-23F15C79115A} 2015-03-28 21:22 - 2015-03-28 21:22 - 00001871 _____ () C:\Users\Public\Desktop\Dialang.lnk 2015-03-28 21:21 - 2015-03-28 21:22 - 02923626 _____ () C:\Users\felipe\Downloads\dialang (1).zip 2015-03-28 21:20 - 2015-03-28 21:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dialang 2015-03-28 21:20 - 2015-03-28 21:20 - 00000000 ____D () C:\Program Files (x86)\Dialang 2015-03-28 21:19 - 2015-03-28 21:20 - 02923626 _____ () C:\Users\felipe\Downloads\dialang.zip 2015-03-28 15:07 - 2015-03-28 15:07 - 00034490 _____ () C:\Users\felipe\Downloads\150325 cden déclaration version def.odt 2015-03-22 16:52 - 2015-03-22 16:52 - 00036352 _____ () C:\Users\felipe\Downloads\Synd contacts ayant obtenu leur permutation.xls 2015-03-22 16:16 - 2015-03-22 16:16 - 00024151 _____ () C:\Users\felipe\Downloads\fermeture.odt 2015-03-22 13:56 - 2015-03-22 13:56 - 00026298 _____ () C:\Users\felipe\Downloads\CR-CTSD-mars2015 (2).odt 2015-03-22 13:55 - 2015-03-22 13:55 - 00026298 _____ () C:\Users\felipe\Downloads\CR-CTSD-mars2015 (1).odt 2015-03-20 22:15 - 2015-03-20 22:15 - 00000000 ____D () C:\Users\felipe\AppData\Roaming\TeamViewer 2015-03-20 22:14 - 2015-03-20 22:15 - 02781840 _____ (TeamViewer GmbH) C:\Users\felipe\Downloads\tv.exe ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-19 20:07 - 2014-11-15 18:30 - 00001070 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d000f17f38da52.job 2015-04-19 20:07 - 2013-12-06 21:57 - 00001066 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-04-19 20:06 - 2011-12-24 12:22 - 01442891 _____ () C:\Windows\WindowsUpdate.log 2015-04-19 20:00 - 2014-12-29 22:40 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware 2015-04-19 20:00 - 2011-12-24 20:09 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks 2015-04-19 20:00 - 2011-12-24 20:09 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks 2015-04-19 20:00 - 2011-12-24 20:05 - 00000000 ____D () C:\Program Files (x86)\Dell DataSafe Local Backup 2015-04-19 19:59 - 2011-12-24 12:22 - 00000000 ____D () C:\ProgramData\NVIDIA 2015-04-19 19:59 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-04-19 19:57 - 2015-01-23 19:31 - 00000000 ____D () C:\AdwCleaner 2015-04-19 19:35 - 2014-05-09 10:21 - 00001070 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf6b5fb9136396.job 2015-04-19 17:10 - 2013-12-06 21:52 - 00000422 _____ () C:\Windows\Tasks\SystemToolsDailyTest.job 2015-04-19 17:08 - 2013-12-15 19:11 - 00003488 _____ () C:\Windows\System32\Tasks\PCDEventLauncher 2015-04-19 17:08 - 2013-12-06 21:52 - 00003452 _____ () C:\Windows\System32\Tasks\SystemToolsDailyTest 2015-04-19 14:33 - 2010-11-21 08:19 - 00748346 _____ () C:\Windows\system32\perfh00C.dat 2015-04-19 14:33 - 2010-11-21 08:19 - 00150580 _____ () C:\Windows\system32\perfc00C.dat 2015-04-19 14:33 - 2009-07-14 07:13 - 01671200 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-04-19 11:36 - 2013-12-08 19:58 - 00000000 ____D () C:\Users\felipe\AppData\Local\Nero 2015-04-19 11:29 - 2009-07-14 06:45 - 00028352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-04-19 11:29 - 2009-07-14 06:45 - 00028352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-04-19 11:22 - 2014-12-25 02:47 - 00000000 ____D () C:\Users\felipe\AppData\Roaming\BitTorrent 2015-04-19 11:17 - 2013-12-06 22:10 - 00000000 ____D () C:\Users\felipe\AppData\Roaming\SoftGrid Client 2015-04-17 18:50 - 2014-02-07 23:00 - 00002213 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2015-04-17 18:40 - 2009-07-14 07:08 - 00032482 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2015-04-17 00:05 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat 2015-04-16 04:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2015-04-16 03:21 - 2014-12-12 04:24 - 00000000 ____D () C:\Windows\system32\appraiser 2015-04-16 03:21 - 2014-05-07 19:16 - 00000000 ___SD () C:\Windows\system32\CompatTel 2015-04-16 03:21 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2015-04-15 22:42 - 2011-12-24 20:03 - 00000000 ____D () C:\Program Files (x86)\Adobe 2015-04-15 22:20 - 2011-12-24 20:25 - 00000000 ____D () C:\ProgramData\Roxio 2015-04-15 22:18 - 2013-12-06 21:53 - 00000000 ____D () C:\Users\felipe\AppData\Roaming\Roxio 2015-04-15 22:18 - 2011-12-24 20:26 - 00000000 ____D () C:\ProgramData\Sonic 2015-04-15 10:26 - 2014-12-27 11:01 - 00000290 __RSH () C:\ProgramData\ntuser.pol 2015-04-15 10:24 - 2013-12-16 19:40 - 00000000 ____D () C:\ProgramData\CanonIJPLM 2015-04-15 10:07 - 2011-02-12 12:53 - 01646268 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2015-04-15 10:06 - 2011-12-24 20:07 - 00000000 ____D () C:\ProgramData\Skype 2015-04-15 10:05 - 2014-01-27 15:24 - 00000000 ____D () C:\Windows\system32\MRT 2015-04-15 09:59 - 2014-01-27 15:24 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-04-05 15:29 - 2013-12-06 19:45 - 00000000 ____D () C:\Users\felipe\Desktop\fo 2015-04-04 14:57 - 2013-12-06 21:52 - 00000564 _____ () C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job 2015-04-01 20:16 - 2013-12-06 21:49 - 00075640 _____ () C:\Users\felipe\AppData\Local\GDIPFONTCACHEV1.DAT 2015-04-01 07:58 - 2013-12-06 21:52 - 00004270 _____ () C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask 2015-03-28 21:20 - 2011-12-24 19:48 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2015-03-26 09:35 - 2011-12-24 20:29 - 00000000 ____D () C:\Program Files (x86)\McAfee ==================== Files in the root of some directories ======= 2014-04-20 15:08 - 2014-06-22 21:03 - 0000318 _____ () C:\Users\felipe\AppData\Roaming\Logfly.prf 2014-01-04 23:26 - 2014-01-09 04:43 - 0000071 _____ () C:\Users\felipe\AppData\Roaming\WB.CFG 2014-08-23 22:30 - 2014-08-23 23:05 - 0005632 _____ () C:\Users\felipe\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini Some content of TEMP: ==================== C:\Users\felipe\AppData\Local\Temp\cct.dll C:\Users\felipe\AppData\Local\Temp\JavaIC.dll C:\Users\felipe\AppData\Local\Temp\jre-8u45-windows-au.exe C:\Users\felipe\AppData\Local\Temp\msscct32.dll C:\Users\felipe\AppData\Local\Temp\Quarantine.exe C:\Users\felipe\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-04-15 12:20 ==================== End Of Log ============================ Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-04-2015 01 Ran by felipe (administrator) on FELIPE-PC on 19-04-2015 20:09:17 Running from C:\Users\felipe\Downloads Loaded Profiles: UpdatusUser & felipe (Available profiles: UpdatusUser & felipe) Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Français (France) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe (Microsoft Corporation)

djudjoo · Answer

il me semble que le fichier additional scan n'a pas été postée, je la remet dans le doute : Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-04-2015 01 Ran by felipe at 2015-04-19 20:11:00 Running from C:\Users\felipe\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Protection antivirus et antispyware McAfee (Disabled - Up to date) {86355677-4064-3EA7-ABB3-1B136EB04637} AV: Protection antivirus et antispyware McAfee (Enabled - Up to date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Protection antivirus et antispyware McAfee (Disabled - Up to date) {3D54B793-665E-3129-9103-206115370C8A} AS: Protection antivirus et antispyware McAfee (Enabled - Up to date) {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB} FW: Pare-feu McAfee (Disabled) {E2A40FF5-9AB1-3894-DE05-F89EB212F22D} FW: Pare-feu McAfee (Disabled) {BE0ED752-0A0B-3FFF-80EC-B2269063014C} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) AccelerometerP11 (HKLM-x32\...\{87434D51-51DB-4109-B68F-A829ECDCF380}) (Version: 2.00.11.22 - STMicroelectronics) Adobe Acrobat X Standard - English, Français, Deutsch (HKLM-x32\...\{AC76BA86-1033-F400-BA7E-000000000005}) (Version: 10.1.10 - Adobe Systems) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.6.0.19120 - Adobe Systems Incorporated) Adobe Flash Player 11 ActiveX 64-bit (HKLM\...\Adobe Flash Player ActiveX) (Version: 11.0.1.152 - Adobe Systems Incorporated) Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd) Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: - ) Canon IJ Network Scan Utility (HKLM-x32\...\Canon_IJ_Network_Scan_UTILITY) (Version: - ) Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: - ) Canon MG5200 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5200_series) (Version: - ) Canon MP Navigator EX 4.0 (HKLM-x32\...\MP Navigator EX 4.0) (Version: - ) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: - ) Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version: - ) CCleaner (HKLM\...\CCleaner) (Version: 5.01 - PIRIFORM) CD-LabelPrint (HKLM-x32\...\MediaNavigation.CDLabelPrint) (Version: - ) Code de la Route Deluxe (HKLM-x32\...\Code de la Route Deluxe) (Version: - Micro Application) Contrôle ActiveX Windows Live Mesh pour connexions à distance (HKLM-x32\...\{55D003F4-9599-44BF-BA9E-95D060730DD3}) (Version: 15.4.5722.2 - Microsoft Corporation) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 5.0.1.0406 - Disc Soft Ltd) Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.61 - Dell Inc.) Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.61 - Dell Inc.) Dell DataSafe Online (HKLM-x32\...\{7EC66A95-AC2D-4127-940B-0445A526AB2F}) (Version: 2.1.19634 - Dell) Dell Digital Delivery (HKLM-x32\...\{D850CB7E-72BC-4510-BA4F-48932BFAB295}) (Version: 2.9.901.0 - Dell Products, LP) Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc) Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.) Dell MusicStage (HKLM-x32\...\{0EE30424-E151-4CC5-8421-9886D0FDDB67}) (Version: 1.5.201.0 - Fingertapps) Dell PhotoStage (HKLM-x32\...\{E4335E82-17B3-460F-9E70-39D9BC269DB3}) (Version: 1.5.0.65 - ArcSoft) Dell Stage (HKLM-x32\...\{14C2FE35-54E9-4909-93BF-B4FBEA074C56}) (Version: 1.5.201.0 - Fingertapps) Dell Support Center (HKLM\...\Dell Support Center) (Version: 3.1.5803.11 - Dell Inc.) Dell Support Center (Version: 3.1.5803.11 - PC-Doctor, Inc.) Hidden Dell VideoStage (HKLM-x32\...\InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.2.0.1712 - CyberLink Corp.) Dell VideoStage (x32 Version: 1.2.0.1712 - CyberLink Corp.) Hidden Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 2.00.44 - Creative Technology Ltd) Dialang V1 Beta (HKLM-x32\...\{97DF4674-AB43-11D5-91C9-005004F84FA1}) (Version: - ) DirectX 9 Runtime (x32 Version: 1.00.0000 - Sonic Solutions) Hidden Enregistrement utilisateur de Canon MG5200 series (HKLM-x32\...\Enregistrement utilisateur de Canon MG5200 series) (Version: - ) ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - ) Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.90 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) h1 - Ascent Control (HKLM-x32\...\{2D9B57F9-F544-48F0-A0B8-D21F5BA696A7}) (Version: 1.0.6 - Ascent) High-Definition Video Playback (x32 Version: 7.3.10000.0.0 - Nero AG) Hidden ImTOO 3GP Video Converter (HKLM-x32\...\ImTOO 3GP Video Converter) (Version: 5.1.26.0925 - ImTOO) Intel PROSet Wireless (x32 Version: - ) Hidden Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2455 - Intel Corporation) Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{2ABA2E8D-23CF-418F-BC8F-2EC99FA51A3F}) (Version: 1.2.1.0608 - Intel Corporation) Intel(R) WiDi (HKLM-x32\...\{0DD706AF-B542-438C-999E-B30C7F625C8D}) (Version: 2.1.39.0 - Intel Corporation) Intel(R) Wireless Display (HKLM\...\{28EF7372-9087-4AC3-9B9F-D9751FCDF830}) (Version: - ) Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.670 - Oracle) Java(TM) 6 Update 27 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416027FF}) (Version: 6.0.270 - Oracle) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden LauncherMA (HKLM-x32\...\{C06EFB22-B5DB-46C5-9215-BCB5C19C0858}) (Version: 1.00.0000 - Micro Application) Logfly (HKLM-x32\...\Logfly_is1) (Version: - ) Logiciel Intel(R) PROSet/Wireless WiFi (HKLM\...\{295AEB79-B53A-4F1B-860F-7800BB7E3681}) (Version: 14.2.1000 - Intel Corporation) MALWAREBYTES Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation) McAfee SecurityCenter (HKLM-x32\...\MSC) (Version: 13.6.1529 - McAfee, Inc.) McAfee SiteAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 3.7.194 - McAfee, Inc.) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) MICROSOFT OFFICE « Démarrer en un clic » 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Excel Viewer (HKLM-x32\...\{95120000-003F-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Starter 2010 - Français (HKLM-x32\...\{90140011-0066-040C-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation) Moniteur de la technologie Intel® Turbo Boost 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) NVIDIA Pilote 3D Vision 268.30 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 268.30 - NVIDIA Corporation) NVIDIA Pilote graphique 268.30 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 268.30 - NVIDIA Corporation) Panneau de configuration NVIDIA 268.30 (Version: 268.30 - NVIDIA Corporation) Hidden PhotoShowExpress (x32 Version: 2.0.063 - Sonic Solutions) Hidden Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 11.0.10 - Dell Inc.) RBVirtualFolder64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden Realtek High Definition AUDIO DRIVER (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6312 - Realtek Semiconductor Corp.) Roxio Creator Starter (HKLM-x32\...\{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}) (Version: 12.1.77.0 - Roxio) Roxio File Backup (Version: 1.3.2 - Roxio) Hidden Search App by Ask (HKLM-x32\...\{4F524A2D-5350-4500-76A7-A758B70C1001}) (Version: 12.16.1.25 - APN, LLC) <==== ATTENTION Skype(TM) 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.) Songr (HKU\S-1-5-21-2219889945-1969133021-1125444305-1001\...\Songr) (Version: 2.0.2330 - Xamasoft) Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0 - Sonic Solutions) Hidden SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1168 - SUPERAntiSpyware.com) Synaptics Pointing DEVICE DRIVER (HKLM\...\SynTPDeinstKey) (Version: 15.2.6.0 - Synaptics Incorporated) SyncUP (HKLM-x32\...\{40F06490-8C14-43AA-99D3-EEEFDBAC3CFC}) (Version: 1.10.11100.8.106 - Nero AG) SyncUP (HKLM-x32\...\{D92C9CCE-E5F0-4125-977A-0590F3225B74}) (Version: 10.2.15400 - Nero AG) VLC media player 2.1.2 (HKLM-x32\...\VLC media player) (Version: 2.1.2 - VideoLAN) Wajam (HKLM-x32\...\WajWebE) (Version: 1.43.5.6 (i1.0) - Wajam) <==== ATTENTION Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation) Windows Movie Maker 2.6 (HKLM-x32\...\{B3DAF54F-DB25-4586-9EF1-96D24BB14088}) (Version: 2.6.4037.0 - Microsoft Corporation) Zinio Reader 4 (HKLM-x32\...\ZinioReader4) (Version: 4.2.4164 - Zinio LLC) Zinio Reader 4 (x32 Version: 4.2.4164 - Zinio LLC) Hidden ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= ATTENTION: System Restore is disabled. ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {02C64BC4-0779-459C-B9CA-4FF51884F950} - System32\Tasks\GoogleUpdateTaskMachineUA1cf6b5fb9136396 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-06] (Google Inc.) Task: {079253A2-359B-4355-A3B4-1BFC72935FAC} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: {0B234BAF-07A2-4EB8-A298-C843D03B6457} - System32\Tasks\{C0899641-06DC-4DF2-B902-38C9C77B9616} => pcalua.exe -a "C:\Users\felipe\Downloads\daemon-tools (2).exe" -d C:\Users\felipe\Downloads Task: {36A965DD-1BF4-410E-9300-0076E89DCBD0} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd) Task: {39A06755-D981-4340-BFB1-93D55767AD8E} - System32\Tasks\Microsoft\Windows\Setup\gwx efreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation) Task: {4520C10E-06C6-434E-8A47-00DE20284028} - System32\Tasks\Microsoft\Windows\Setup\gwx efreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation) Task: {579CF08A-8CC2-48D0-BCD1-50DDD0CEBD70} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation) Task: {8380DDF2-A2D2-4196-8BE2-C88AFF4C5E11} - \SimpleFiles Installer Starter No Task File <==== ATTENTION Task: {8616B3FD-6466-4FB0-A5AC-3C7BC3EDEC85} - System32\Tasks\BlueLife\BlueLife => C:\ProgramData\BlueLife\BlueLife.exe Task: {9435B3E6-D555-40FE-9C07-7760D89295D6} - System32\Tasks\avaavaevy => C:\Users\felipe\AppData\Local\avaavaevy\avaavaevy.exe [2015-04-12] () <==== ATTENTION Task: {A85D2A42-2F87-4456-89F5-EE94C6609653} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\Dell Support Center\uaclauncher.exe [2011-03-22] (PC-Doctor, Inc.) Task: {B01A67A2-03BF-42D4-A71D-5EC01DF6DFE7} - System32\Tasks\Microsoft\Windows\Setup\gwx unappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation) Task: {B210B892-0CD2-4187-90EE-F327481DFEF3} - System32\Tasks\WindApp Update => C:\Users\felipe\AppData\Roaming\Store\WindApp\WindApp Update.exe <==== ATTENTION Task: {B4EE53DF-AD60-495A-A680-0155A539151F} - System32\Tasks\{E76924A5-7B67-4B00-9E19-23F15C79115A} => pcalua.exe -a "C:\Users\felipe\AppData\Local\Temp\Temp1_dialang (1).zip\dialang.exe" Task: {BCD8E247-1D3E-405F-ACE2-E84B5CB181E8} - System32\Tasks\Selection Tools Update => C:\Users\felipe\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe Task: {E8A80EE0-6A95-431F-8789-B19B418A2C8F} - System32\Tasks\{3BD26FCA-7849-4A30-8093-A49D36432DCA} => pcalua.exe -a C:\Users\felipe\AppData\Roaming\webssearches\UninstallManager.exe -c -ptid=exp <==== ATTENTION Task: {EADD65BE-D497-4B10-A80B-D655FE6D4A72} - System32\Tasks\SystemToolsDailyTest => C:\Program Files\Dell Support Center\pcdrcui.exe [2011-03-22] (PC-Doctor, Inc.) Task: {F1C1B99D-2F25-483C-A3B7-8F39980B817C} - System32\Tasks\GoogleUpdateTaskMachineUA1d000f17f38da52 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-06] (Google Inc.) Task: {FD1A95E5-411E-4C70-AB6F-4C84C3AC6E29} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-06] (Google Inc.) Task: {FFF71BCE-534C-4A82-A988-B47F713ECDD8} - System32\Tasks\PCDEventLauncher => C:\Program Files\Dell Support Center\sessionchecker.exe [2011-03-22] (PC-Doctor, Inc.) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf6b5fb9136396.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d000f17f38da52.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\Dell Support Center\uaclauncher.exeo-backgroundmon scripts\defaultscan.xml Task: C:\Windows\Tasks\SystemToolsDailyTest.job => C:\Program Files\Dell Support Center\pcdrcui.exe ==================== Loaded Modules (whitelisted) ============== 2011-09-16 01:46 - 2011-09-16 01:46 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll 2011-12-24 20:48 - 2011-07-20 15:04 - 00094208 _____ () C:\WINDOWS\System32\IccLibDll_x64.dll 2011-12-24 19:50 - 2010-12-17 18:25 - 00686704 _____ () C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe 2011-09-16 01:46 - 2011-09-16 01:46 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll 2010-11-29 23:04 - 2010-11-29 23:04 - 00403968 _____ () C:\Program Files\Intel\TurboBoost\fr\SignalIslandUi.resources.dll 2011-12-24 20:05 - 2011-09-22 18:14 - 02751808 _____ () C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE 2010-11-17 18:35 - 2010-11-17 18:35 - 00514544 _____ () C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe 2011-07-08 01:16 - 2011-07-08 01:16 - 00075064 _____ () C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe 2011-04-30 02:18 - 2011-04-30 02:18 - 00885760 _____ () C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe 2014-12-13 00:25 - 2014-12-13 00:25 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1036.dll 2014-05-08 13:22 - 2014-05-08 13:22 - 00019968 _____ () C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\locale\fr_fr\acrotray.fra 2010-11-25 06:44 - 2010-11-25 06:44 - 00375280 _____ () c:\program files (x86)\common files oxio shared\dllshared\SQLite352.dll 2011-04-30 02:13 - 2011-04-30 02:13 - 07938048 _____ () C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\QtGui4.dll 2011-04-30 02:13 - 2011-04-30 02:13 - 02225664 _____ () C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\QtCore4.dll 2015-04-16 06:12 - 2015-04-13 23:55 - 01252680 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\libglesv2.dll 2015-04-16 06:12 - 2015-04-13 23:55 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\libegl.dll 2015-04-16 06:12 - 2015-04-13 23:55 - 14980424 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.90\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from THE REGISTRY. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver" ==================== EXE Association (whitelisted) =============== (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-2219889945-1969133021-1125444305-1001\Control Panel\Desktop\Wallpaper -> C:\Users\felipe\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 195.49.132.1 - 195.49.132.193 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== Accounts: ============================= Administrateur (S-1-5-21-2219889945-1969133021-1125444305-500 - Administrator - Disabled) felipe (S-1-5-21-2219889945-1969133021-1125444305-1001 - Administrator - Enabled) => C:\Users\felipe HomeGroupUser$ (S-1-5-21-2219889945-1969133021-1125444305-1003 - Limited - Enabled) Invité (S-1-5-21-2219889945-1969133021-1125444305-501 - Limited - Disabled) UpdatusUser (S-1-5-21-2219889945-1969133021-1125444305-1000 - Limited - Enabled) => C:\Users\UpdatusUser ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (04/19/2015 08:00:20 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (04/19/2015 08:00:08 PM) (Source: McLogEvent) (EventID: 5022) (User: AUTORITE NT) Description: MCSCAN32 Engine Initialisation failed. Engine returned error : 1 Error: (04/19/2015 11:20:41 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (04/19/2015 11:20:33 AM) (Source: McLogEvent) (EventID: 5022) (User: AUTORITE NT) Description: MCSCAN32 Engine Initialisation failed. Engine returned error : 1 Error: (04/19/2015 10:52:07 AM) (Source: SideBySide) (EventID: 80) (User: ) Description: La création du contexte d'activation a échoué pour « C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1 ». Erreur dans le fichier de manifeste ou de stratégie « C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2 » à la ligne C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3. Une version de composant nécessaire à l'application est en conflit avec une autre version de composant déjà active. Les composants en conflit sont : Composant 1 : C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Composant 2 : C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Error: (04/19/2015 10:51:50 AM) (Source: SideBySide) (EventID: 80) (User: ) Description: La création du contexte d'activation a échoué pour « C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1 ». Erreur dans le fichier de manifeste ou de stratégie « C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2 » à la ligne C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Une version de composant nécessaire à l'application est en conflit avec une autre version de composant déjà active. Les composants en conflit sont : Composant 1 : C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Composant 2 : C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (04/18/2015 04:23:45 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: La création du contexte d'activation a échoué pour « C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1 ». Erreur dans le fichier de manifeste ou de stratégie « C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2 » à la ligne C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Une version de composant nécessaire à l'application est en conflit avec une autre version de composant déjà active. Les composants en conflit sont : Composant 1 : C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Composant 2 : C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (04/18/2015 04:23:45 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: La création du contexte d'activation a échoué pour « C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1 ». Erreur dans le fichier de manifeste ou de stratégie « C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2 » à la ligne C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Une version de composant nécessaire à l'application est en conflit avec une autre version de composant déjà active. Les composants en conflit sont : Composant 1 : C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Composant 2 : C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (04/18/2015 04:23:45 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: La création du contexte d'activation a échoué pour « C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1 ». Erreur dans le fichier de manifeste ou de stratégie « C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2 » à la ligne C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Une version de composant nécessaire à l'application est en conflit avec une autre version de composant déjà active. Les composants en conflit sont : Composant 1 : C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Composant 2 : C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (04/18/2015 00:47:38 AM) (Source: SideBySide) (EventID: 80) (User: ) Description: La création du contexte d'activation a échoué pour « C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1 ». Erreur dans le fichier de manifeste ou de stratégie « C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2 » à la ligne C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3. Une version de composant nécessaire à l'application est en conflit avec une autre version de composant déjà active. Les composants en conflit sont : Composant 1 : C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Composant 2 : C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. System errors: ============= Error: (04/19/2015 07:59:55 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service WajWebE Monitor n'a pas pu démarrer en raison de l'erreur : %%1053 Error: (04/19/2015 07:59:55 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l'attente de la connexion du service WajWebE Monitor. Error: (04/19/2015 07:59:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service Util StormVade n'a pas pu démarrer en raison de l'erreur : %%2 Error: (04/19/2015 07:59:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service Update StormVade n'a pas pu démarrer en raison de l'erreur : %%2 Error: (04/19/2015 07:58:24 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: AUTORITE NT) Description: Le module d'extensibilité WLAN s'est arrêté de façon inattendue. Chemin d'accès du module : C:\Windows\System32\IWMSSvc.dll Error: (04/19/2015 07:58:24 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: AUTORITE NT) Description: Le module d'extensibilité WLAN s'est arrêté de façon inattendue. Chemin d'accès du module : C:\Windows\System32\IWMSSvc.dll Error: (04/19/2015 07:58:24 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: AUTORITE NT) Description: Le module d'extensibilité WLAN s'est arrêté de façon inattendue. Chemin d'accès du module : C:\Windows\System32\IWMSSvc.dll Error: (04/19/2015 07:58:24 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service n'a pas pu démarrer en raison de l'erreur : %%109 Error: (04/19/2015 07:58:24 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service Spouleur d'impression n'a pas pu démarrer en raison de l'erreur : %%1069 Error: (04/19/2015 07:58:24 PM) (Source: Service Control Manager) (EventID: 7038) (User: ) Description: Le service Spooler n'a pas pu ouvrir de session en tant que NT AUTHORITY\SYSTEM avec le mot de passe actuellement configuré en raison de l'erreur suivante : %%50 Pour vous assurer que le service est configuré correctement, utilisez le composant logiciel enfichable Services dans Microsoft Management Console (MMC). Microsoft Office Sessions: ========================= Error: (04/19/2015 08:00:20 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (04/19/2015 08:00:08 PM) (Source: McLogEvent) (EventID: 5022) (User: AUTORITE NT) Description: 1 Error: (04/19/2015 11:20:41 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (04/19/2015 11:20:33 AM) (Source: McLogEvent) (EventID: 5022) (User: AUTORITE NT) Description: 1 Error: (04/19/2015 10:52:07 AM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestc:\program files\CCleaner\CCleaner.exe Error: (04/19/2015 10:51:50 AM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe Error: (04/18/2015 04:23:45 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files\CCleaner\CCleaner64.exe Error: (04/18/2015 04:23:45 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files\CCleaner\CCleaner64.exe Error: (04/18/2015 04:23:45 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files\CCleaner\CCleaner64.exe Error: (04/18/2015 00:47:38 AM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestc:\program files\CCleaner\CCleaner.exe ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-2670QM CPU @ 2.20GHz Percentage of memory in use: 57% Total physical RAM: 3990.17 MB Available physical RAM: 1677.97 MB Total Pagefile: 7978.53 MB Available Pagefile: 4698.95 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:446.13 GB) (Free:217.73 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 07F2837E) Partition 1: (Not Active) - (Size=102 MB) - (Type=DE) Partition 2: (Active) - (Size=19.5 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=446.1 GB) - (Type=07 NTFS) ==================== End Of Log =============

lilidurhone · Answer

héberge les rapports

djudjoo · Answer

comme ça? :


https://www.cjoint.com/c/EDtvA35Ue0q

https://www.cjoint.com/c/EDtvCG23pbp

lilidurhone · Answer

ZHPCleaner




Désactiver l'Anti-virus

Ton moteur de recherche va se fermer il faudra le réouvrir pour poster les rapports

téléchargement : https://nicolascoolman.eu




- Cet outil ne nécessite aucune installation, il est très rapide car basé sur l'éxécution de scripts.
- Clique droit sur le dossier téléchargé


- Clique sur Scanner :

- Savoir que tous les navigateurs ou onglets ouvert seront fermés et qu'il faudra les remettre

- En cas de présence d'un proxy, un message apparaît avec la question suivante
- Avez-vous installé ce proxy ? suivi de l'adresse IP du proxy
- Si vous n'avez pas installé de Proxy, cliquer sur "NON" pour accepter la réparation du proxy.

- En cas de présence d'un serveur inconnu, un message peut apparaître avec la question suivante 
- Avez-vous installé ce serveur ? suivi du nom du serveur 
- Si vous n'avez pas installé de serveur,, cliquer sur "NON" pour accepter la réparation 



- Fournir le rapport

djudjoo · Answer

voici le rapport : 


~ ZHPCleaner v2015.4.18.174 by Nicolas Coolman (19/04/2015)
~ Run by felipe (Administrator)  (19/04/2015 22:50:01)
~ Forum : https://nicolascoolman.eu
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Scanner
~ Report : C:\Users\felipe\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\felipe\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
~ Windows 7, 64-bit Service Pack 1 (Build 7601)


---\  Service. (1)
[S] TROUVÉ : WajWebE Monitor (PUP.Wajam)


---\  Navigateur internet. (1)
TROUVÉ Chrome URL: hxxp://www.trovi.com/?gd=&ctid=CT3332182&octid=EB_ORIGINAL_CTID&ISID=M5FF23460-8523-4F1D-A980-B496A6[...] (PUP.IsStart)


---\  Fichier hôte. (1)
~ Le fichier hôte est légitime. (21)


---\  Tâche planifiée. (3)
TROUVÉ tâche: [avaavaevy] [C:\Users\felipe\AppData\Local\avaavaevy\avaavaevy.exe] (PUP.SearchProtect)
TROUVÉ tâche: [Selection Tools Update] [C:\Users\felipe\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe (Not File) ] (PUP.Nosibay)
TROUVÉ tâche: [WindApp Update] [C:\Users\felipe\AppData\Roaming\Store\WindApp\WindApp Update.exe (Not File) ] (PUP.Nosibay)


---\  Explorateur  ( Dossiers, Fichiers ). (33)
TROUVÉ fichier: C:\Program Files (x86)\47e7063b-5807-4c0a-bb75-fb5fe32deeb1\36540b9d-cd6b-46e5-8ee6-6b651b841703.dll   (Adware.CrossRider)
TROUVÉ fichier: C:\Program Files (x86)\47e7063b-5807-4c0a-bb75-fb5fe32deeb1\883cd162-4d03-4208-a97a-8baa390b4ac0.dll   (Adware.CrossRider)
TROUVÉ dossier: C:\Program Files (x86)\47e7063b-5807-4c0a-bb75-fb5fe32deeb1 (Adware.CrossRider)
TROUVÉ dossier: C:\Program Files (x86)\6B7DC17E-34CB-4F0C-9B97-B74986711EDF (Adware.CrossRider)
TROUVÉ fichier: C:\Users\felipe\AppData\Local\avaavaevy\avaavaevy.exe  (PUP.SearchProtect)
TROUVÉ fichier: C:\Users\felipe\AppData\Local\avaavaevy\bahvxfk  (PUP.SearchProtect)
TROUVÉ fichier: C:\Users\felipe\AppData\Local\avaavaevy\mkfvxfk  (PUP.SearchProtect)
TROUVÉ fichier: C:\Users\felipe\AppData\Local\avaavaevy\pbqrmvbub [Client Connect LTD - Search Protect](PUP.SearchProtect)
TROUVÉ fichier: C:\Users\felipe\AppData\Local\avaavaevy\pvpqbjobmlpfqlovvawq  (PUP.SearchProtect)
TROUVÉ fichier: C:\Users\felipe\AppData\Local\avaavaevy\qokvxfk  (PUP.SearchProtect)
TROUVÉ fichier: C:\Users\felipe\AppData\Local\avaavaevyfobmlpfqlovvawq  (PUP.SearchProtect)
TROUVÉ fichier: C:\Users\felipe\AppData\Local\avaavaevypboobmlpfqlovvawq  (PUP.SearchProtect)
TROUVÉ fichier: C:\Users\felipe\AppData\Local\avaavaevy\stb.dat  (PUP.SearchProtect)
TROUVÉ fichier: C:\Users\felipe\AppData\Local\avaavaevy\ycfvxfk  (PUP.SearchProtect)
TROUVÉ dossier: C:\Users\felipe\AppData\Local\avaavaevy (PUP.SearchProtect)
TROUVÉ fichier: C:\Windows\Prefetch\SELECTION TOOLS UPDATE.EXE-7B3F329C.pf  (PUP.Nosibay)
TROUVÉ fichier: C:\Windows\Installer\39601.msi [APN, LLC - Ask.com ® - Install Builder](Adware.Bandoo)
TROUVÉ fichier: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage  (PUP.SpecialSavings)
TROUVÉ fichier: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal  (PUP.SpecialSavings)
TROUVÉ fichier: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_cdncache-a.akamaihd.net_0.localstorage  (PUP.AkamaiHD)
TROUVÉ fichier: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_cdncache-a.akamaihd.net_0.localstorage-journal  (PUP.AkamaiHD)
TROUVÉ fichier: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_istart.webssearches.com_0.localstorage  (Hijacker.WebsSearches)
TROUVÉ fichier: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_istart.webssearches.com_0.localstorage-journal  (Hijacker.WebsSearches)
TROUVÉ fichier: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.select-n-go00.select-n-go.com_0.localstorage  (PUP.SelectNGo)
TROUVÉ fichier: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.select-n-go00.select-n-go.com_0.localstorage-journal  (PUP.SelectNGo)
TROUVÉ fichier: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.istartsurf.com_0.localstorage  (PUP.IsStart)
TROUVÉ fichier: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.istartsurf.com_0.localstorage-journal  (PUP.IsStart)
TROUVÉ fichier: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage  (PUP.SpecialSavings)
TROUVÉ fichier: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal  (PUP.SpecialSavings)
TROUVÉ fichier: C:\Users\felipe\AppData\Local\Temp\Bubble Dock.txt  (PUP.BubbleDock)
TROUVÉ fichier: C:\Users\felipe\AppData\Local\Temp\LBubble Dock.txt  (PUP.BubbleDock)
TROUVÉ fichier: C:\Windows\Installer\{4F524A2D-5350-4500-76A7-A758B70C1001}\ToolbarIcon.exe  (PUP.BrowserTabSearch)


---\  Base de Registres ( Clés, Valeurs, Données ). (23)
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3d5607cc-7814-46d1-bc4d-fc94740efdae} [StormVade 1.0.0.7] (PUP.StormVade)
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3d5607cc-7814-46d1-bc4d-fc94740efdae} [StormVade 1.0.0.7] (PUP.StormVade)
TROUVÉ clé: HKCU\Software\Lights Cinema 1.3betaV15.04-nv [] (Heuristic.CrossRider)
TROUVÉ clé: HKCU\Software\Lights Cinema 1.3betaV15.04-nv-ie [] (Heuristic.CrossRider)
TROUVÉ clé: [X64] HKLM\SOFTWARE\Lights Cinema 1.3betaV15.04-nv [] (Heuristic.CrossRider)
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Lights Cinema 1.3betaV15.04-nv [] (Heuristic.CrossRider)
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Lights Cinema 1.3betaV15.04-nv-ie [] (Heuristic.CrossRider)
TROUVÉ clé: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Update StormVade ["C:\Program Files (x86)\StormVade\updateStormVade.exe" (Not File)] (PUP.StormVade)
TROUVÉ clé: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Util StormVade ["C:\Program Files (x86)\StormVade\bin\utilStormVade.exe" (Not File)] (PUP.StormVade)
TROUVÉ clé: [X64] HKLM\SYSTEM\CurrentControlSet\Services\WajWebE Monitor ["C:\Program Files\WajWebE\wajam_64.exe" (Not File)] (PUP.Wajam)
TROUVÉ valeur: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\GoogleChromeAutoLaunch_239A726801CC6A79D0CA02E993FF821C ["C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window] (PUP.Vosteran)
TROUVÉ clé: [X64] HKLM\Software\Classes\Installer\Products\D2A425F405350054677A7A857BC00110 [Search App by Ask] (PUP.BrowserTabSearch)
TROUVÉ clé: [X64] HKLM\SOFTWARE\Classes\Applications\iLividSetup-r1142-n-bc.exe [] (Adware.Bandoo)
TROUVÉ clé: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Update Faster Light [] (Adware.Sambreel)
TROUVÉ clé: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Util Faster Light [] (Adware.Sambreel)
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WajWebE [Wajam] (PUP.Wajam)
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4F524A2D-5350-4500-76A7-A758B70C1001} [APN, LLC] (Adware.Bandoo)
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4F524A2D-5350-4500-76A7-A758B70C1001} [Search App by Ask] (PUP.BrowserTabSearch)
TROUVÉ clé: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DA92B9AA-0E91-4B7C-8A58-4FE1F294842D} [C:\PROGRA~2\MOVIES~1\Datamngr\SRTOOL~1\IE (Not File)] (PUP.Datamngr)

TROUVÉ clé: [X64] HKLM\Software\Classes\Installer\Features\D2A425F405350054677A7A857BC00110 [Search App by Ask] (PUP.BrowserTabSearch)


---\ Bilan de la réparation
~ Aucune réparation effectuée.
~ Ce navigateur est absent  (Mozilla Firefox)
~ Ce navigateur est absent  (Opera Software)


---\ Statistiques
~ Items scannés : 72321
~ Items trouvés : 63
~ Items réparés : 0


End of clean at 22:58:53
===================
ZHPCleaner-[S]-19042015-22_58_53.txt

lilidurhone · Answer

fais nettoyer

djudjoo · Answer

j'ai "réparé" :


~ ZHPCleaner v2015.4.18.174 by Nicolas Coolman (19/04/2015)
~ Run by felipe (Administrator)  (19/04/2015 23:42:54)
~ Forum : https://nicolascoolman.eu
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Netttoyer
~ Report : C:\Users\felipe\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\felipe\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
~ Windows 7, 64-bit Service Pack 1 (Build 7601)


---\  Service. (3)



---\  Navigateur internet. (1)
REMPLACÉ Chrome URL: hxxp://www.trovi.com/?gd=&ctid=CT3332182&octid=EB_ORIGINAL_CTID&ISID=M5FF23460-8523-4F1D-A980-B496A6[...] (PUP.IsStart)


---\  Fichier hôte. (1)
~ Le fichier hôte est légitime. (21)


---\  Tâche planifiée. (3)
SUPPRIMÉ tâche: [avaavaevy] [C:\Users\felipe\AppData\Local\avaavaevy\avaavaevy.exe (Not File) ] (PUP.SearchProtect)
SUPPRIMÉ tâche: [Selection Tools Update] [C:\Users\felipe\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe (Not File) ] (PUP.Nosibay)
SUPPRIMÉ tâche: [WindApp Update] [C:\Users\felipe\AppData\Roaming\Store\WindApp\WindApp Update.exe (Not File) ] (PUP.Nosibay)


---\  Explorateur  ( Dossiers, Fichiers ). (21)
DEPLACÉ fichier: C:\Users\felipe\AppData\Local\avaavaevy\avaavaevy.exe   (PUP.SearchProtect)
DEPLACÉ fichier: C:\Windows\Prefetch\SELECTION TOOLS UPDATE.EXE-7B3F329C.pf   (PUP.Nosibay)
DEPLACÉ fichier: C:\Windows\Installer\39601.msi [APN, LLC - Ask.com ® - Install Builder] (Adware.Bandoo)
DEPLACÉ fichier*: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage   (PUP.SpecialSavings)
DEPLACÉ fichier*: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal   (PUP.SpecialSavings)
DEPLACÉ fichier*: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_cdncache-a.akamaihd.net_0.localstorage   (PUP.AkamaiHD)
DEPLACÉ fichier*: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_cdncache-a.akamaihd.net_0.localstorage-journal   (PUP.AkamaiHD)
DEPLACÉ fichier*: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_istart.webssearches.com_0.localstorage   (Hijacker.WebsSearches)
DEPLACÉ fichier*: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_istart.webssearches.com_0.localstorage-journal   (Hijacker.WebsSearches)
DEPLACÉ fichier*: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.select-n-go00.select-n-go.com_0.localstorage   (PUP.SelectNGo)
DEPLACÉ fichier*: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.select-n-go00.select-n-go.com_0.localstorage-journal   (PUP.SelectNGo)
DEPLACÉ fichier*: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.istartsurf.com_0.localstorage   (PUP.IsStart)
DEPLACÉ fichier*: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.istartsurf.com_0.localstorage-journal   (PUP.IsStart)
DEPLACÉ fichier*: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage   (PUP.SpecialSavings)
DEPLACÉ fichier*: C:\Users\felipe\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal   (PUP.SpecialSavings)
DEPLACÉ fichier: C:\Users\felipe\AppData\Local\Temp\Bubble Dock.txt   (PUP.BubbleDock)
DEPLACÉ fichier: C:\Users\felipe\AppData\Local\Temp\LBubble Dock.txt   (PUP.BubbleDock)
DEPLACÉ fichier: C:\Windows\Installer\{4F524A2D-5350-4500-76A7-A758B70C1001}\ToolbarIcon.exe   (PUP.BrowserTabSearch)
DEPLACÉ dossier: C:\Program Files (x86)\47e7063b-5807-4c0a-bb75-fb5fe32deeb1 (Adware.CrossRider)
DEPLACÉ dossier: C:\Program Files (x86)\6B7DC17E-34CB-4F0C-9B97-B74986711EDF (Adware.CrossRider)
DEPLACÉ dossier: C:\Users\felipe\AppData\Local\avaavaevy (PUP.SearchProtect)


---\  Base de Registres ( Clés, Valeurs, Données ). (23)
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3d5607cc-7814-46d1-bc4d-fc94740efdae} [StormVade 1.0.0.7] (PUP.StormVade)
SUPPRIMÉ clé^: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3d5607cc-7814-46d1-bc4d-fc94740efdae} [StormVade 1.0.0.7] (PUP.StormVade)
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3d5607cc-7814-46d1-bc4d-fc94740efdae} [StormVade 1.0.0.7] (PUP.StormVade)
SUPPRIMÉ clé*: HKCU\Software\Lights Cinema 1.3betaV15.04-nv [] (Adware.CrossRider)
SUPPRIMÉ clé*: HKCU\Software\Lights Cinema 1.3betaV15.04-nv-ie [] (Adware.CrossRider)
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Lights Cinema 1.3betaV15.04-nv [] (Adware.CrossRider)
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Lights Cinema 1.3betaV15.04-nv [] (Adware.CrossRider)
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Lights Cinema 1.3betaV15.04-nv-ie [] (Adware.CrossRider)
SUPPRIMÉ clé*: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Update StormVade ["C:\Program Files (x86)\StormVade\updateStormVade.exe" (Not File)] (PUP.StormVade)
SUPPRIMÉ clé*: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Util StormVade ["C:\Program Files (x86)\StormVade\bin\utilStormVade.exe" (Not File)] (PUP.StormVade)
SUPPRIMÉ clé*: [X64] HKLM\SYSTEM\CurrentControlSet\Services\WajWebE Monitor ["C:\Program Files\WajWebE\wajam_64.exe" (Not File)] (PUP.Wajam)
SUPPRIMÉ clé*: [X64] HKLM\Software\Classes\Installer\Products\D2A425F405350054677A7A857BC00110 [Search App by Ask] (PUP.BrowserTabSearch)
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Classes\Applications\iLividSetup-r1142-n-bc.exe [] (Adware.Bandoo)
SUPPRIMÉ clé*: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Update Faster Light [] (Adware.Sambreel)
SUPPRIMÉ clé*: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Util Faster Light [] (Adware.Sambreel)
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WajWebE [Wajam] (PUP.Wajam)
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4F524A2D-5350-4500-76A7-A758B70C1001} [APN, LLC] (Adware.Bandoo)
SUPPRIMÉ clé^: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WajWebE [Wajam] (PUP.Wajam)
SUPPRIMÉ clé^: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4F524A2D-5350-4500-76A7-A758B70C1001} [Search App by Ask] (PUP.BrowserTabSearch)
SUPPRIMÉ clé*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DA92B9AA-0E91-4B7C-8A58-4FE1F294842D} [C:\PROGRA~2\MOVIES~1\Datamngr\SRTOOL~1\IE (Not File)] (PUP.Datamngr)
SUPPRIMÉ clé^: [X64] HKLM\Software\Classes\Installer\Products\D2A425F405350054677A7A857BC00110 [Search App by Ask] (PUP.BrowserTabSearch)
SUPPRIMÉ clé*: [X64] HKLM\Software\Classes\Installer\Features\D2A425F405350054677A7A857BC00110 [] (PUP.BrowserTabSearch)
SUPPRIMÉ valeur: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\GoogleChromeAutoLaunch_239A726801CC6A79D0CA02E993FF821C ["C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window] (PUP.Vosteran)


---\ Bilan de la réparation
~ Réparation réalisée avec succès.
~ Ce navigateur est absent  (Mozilla Firefox)
~ Ce navigateur est absent  (Opera Software)
~ Le système a été redémarré.


---\ Statistiques
~ Items scannés : 3762
~ Items trouvés : 0
~ Items réparés : 51


End of clean at 23:43:15
===================
ZHPCleaner-[R]-19042015-23_43_15.txt
ZHPCleaner-[S]-19042015-22_58_53.txt

lilidurhone · Answer

Refais frst

djudjoo · Answer

voici le rapport FRST : 

https://www.cjoint.com/c/EDukBI9U4eG

lilidurhone · Answer

Coches additionnal pour avoir l'autre

djudjoo · Answer

Voilà les 2 rapports FRST: 


http://cjoint.com/?EDutnWIEbc7
http://cjoint.com/?EDutoLk2FLK

lilidurhone · Answer

ça m'a l'air pas mal ?

Tu peux désinstaller superantispyware

Tu as toujours des pubs?

djudjoo · Answer

non, plus de pub.

Merci pour ton aide, c'est super sympa, j'essaierais de me rappeler la marche à suivre si jamais je me refais piéger.

bonne continuation

lilidurhone · Answer

1)Désinstallation des outils de désinfection
Télécharges Delfix ici https://www.commentcamarche.net/telecharger/securite/7111-delfix/

Exécutes le en tant qu'administrateur(si tu es sous xp double clic sur le fichier téléchargé) puis une fois sur l'interface coches les cases suivantes


-supprimer les outils de désinfections
-purger la restauration du système

Cliques ensuite sur Exécuter puis patientes pendant le processus de suppression.

Le rapport sera enregistré dans le presse-papier et sur le disque dur (C:\DelFix.txt).
Poste le rapport

2)N'oublies pas de mettre à jour java adobe reader et flashplayer pour IE (chrome l'intègre déjà)
Un lien utile à lire https://www.commentcamarche.net/faq/13362-mettre-a-jour-son-pc-contre-les-failles-de-securite
N'oublies pas aussi de maintenir Windows à jour via Windows update 
https://www.java.com/fr/download/manual.jsp



3)Pour permettre de mettre à jour tes logiciels je te conseille d'utiliser Filehippo update checker

Tu peux le télécharger ici https://www.commentcamarche.net/telecharger/utilitaires/9771-filehippo-app-manager/

Pour l'installation de filehippo décoches seulement mettre l'icône dans la barre de lancement rapide 



4)Pour nettoyer les fichiers temporaires (attention pas de nettoyage registre ) tu peux utiliser Ccleaner avec tuto pour bien le configurer (https://www.commentcamarche.net/telecharger/utilitaires/5647-ccleaner/
Lien du téléchargement https://www.commentcamarche.net/telecharger/utilitaires/5647-ccleaner/
Tu peux aussi utiliser le nettoyeur de disque windows
N'oublies pas de défragmenter de temps en temps ton disque dur soit par le biais de l'utilitaire soit par le biais d'un logiciel tiers comme par exemple Deffagler ou auslogic Disk Defrag

Oublies les genres de nettoyeurs comme Tuneup ,Glary et autre nettoyeurs miracles ils ne te feront que ralentir ta machine et nettoyer plus blanc que blanc peut provoquer de graves dysfonctionnements



5)Sécurise tes navigateurs par exemple avec WOT et simple adblock pour Internet explorer
Pour télécharger WOT pour ie c'est par ici https://chrome.google.com/webstore/detail/wot-web-of-trust-website/bhmmomiinigofkjcapegjjndpbikblnp
https://adblockplus.org/
Pour chrome(si tu possèdes Chrome)

Wot disponible ici https://chrome.google.com/webstore/detail/wot-web-of-trust-website/bhmmomiinigofkjcapegjjndpbikblnp?hl=fr

Adblock disponible ici https://www.commentcamarche.net/telecharger/web-internet/2555-adblock-plus-pour-chrome/

Lien du téléchargement pour wot sur firefox
https://addons.mozilla.org/fr/firefox/addon/wot-safe-browsing-tool/

Lien pour télécharger adblock +

https://addons.mozilla.org/fr/firefox/addon/adblock-plus/?src=ss


6)Fais attention à ce que tu télécharges où et comment 
Evites si possible de télécharger sur O1net,tom's guide,télécharger.com et Softonic et compagnie car ils repackent les logiciels avec des programmes potientellement indésirables
A lire
http://www.stoppublicites.fr/
https://www.malekal.com/adwares-pup-protection/

7)Pourquoi faut-il éviter de télécharger sur du p2p

Les risques sont gros la machine risque de devenir un pc zombie
Un peu de lecture concernant les dangers et le risque
https://forum.malekal.com/viewtopic.php?t=3208&start=
https://forum.malekal.com/viewtopic.php?t=893&start=

8)Petit exercice pour éviter de se faire piéger 

https://forum.security-x.fr/tutoriels-317/s

djudjoo · Answer

voici le rapport Delfix : 

http://cjoint.com/?EDuvMuooewk

djudjoo · Answer

# DelFix v10.9 - Rapport créé le 20/04/2015 à 21:19:26
# Mis à jour le 27/02/2015 par Xplode
# Nom d'utilisateur : felipe - FELIPE-PC
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)

~ Suppression des outils de désinfection ...

Supprimé : C:\FRST
Supprimé : C:\AdwCleaner
Supprimé : C:\log.txt
Supprimé : C:\Users\felipe\Desktop\JRT.txt
Supprimé : C:\Users\felipe\Desktop\ZHPCleaner.lnk
Supprimé : C:\Users\felipe\Downloads\Addition.txt
Supprimé : C:\Users\felipe\Downloads\adwcleaner_4.108.exe
Supprimé : C:\Users\felipe\Downloads\adwcleaner_4.201.exe
Supprimé : C:\Users\felipe\Downloads\esetsmartinstaller_enu.exe
Supprimé : C:\Users\felipe\Downloads\FRST.txt
Supprimé : C:\Users\felipe\Downloads\FRST64.exe
Supprimé : C:\Users\felipe\Downloads\JRT (1).exe
Supprimé : C:\Users\felipe\Downloads\JRT.exe
Supprimé : C:\Users\felipe\Downloads\ZHPCleaner.exe
Supprimée : HKLM\SOFTWARE\AdwCleaner

~ Purge de la restauration système ...


Nouveau point de restauration créé !

########## - EOF - ##########

Pages de pub s'affichent de façon intempestive

21 réponses

Votre réponse

Discussions similaires

Newsletters