Http://www.secure-surf.com et autres adwares

Bonjour,





RogueKiller V10.9.4.0 (x64) [Jul 30 2015] par Adlice Software
email : http://www.adlice.com/contact/
Remontées : http://forum.adlice.com
Site web : http://www.adlice.com/fr/logiciels/roguekiller/
Blog : http://www.adlice.com

Système d'exploitation : Windows 8 (6.2.9200 ) 64 bits version
Démarré en : Mode normal
Utilisateur : user [Administrateur]
Démarré depuis : C:\Users\user\Downloads\RogueKillerX64.exe
Mode : Scan -- Date : 08/03/2015 10:44:37

¤¤¤ Processus : 0 ¤¤¤

¤¤¤ Registre : 9 ¤¤¤
[PUP] (X86) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar | {9EDFF826-787E-422A-BB78-A0D654F030D0} : secure-surf Toolbar -> Trouvé(e)
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\iscFlash (\??\C:\Users\user\AppData\Local\Temp\7zSE43.tmp\iscflashx64.sys) -> Trouvé(e)
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PCDSRVC{D1725DDC-B2A2E59C-06020200}_0 (\??\c:\users\user\appdata\local\temp\h5vxs3tjxcle\pcdrdiag\bin\pcdsrvc_x64.pkms) -> Trouvé(e)
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\iscFlash (\??\C:\Users\user\AppData\Local\Temp\7zSE43.tmp\iscflashx64.sys) -> Trouvé(e)
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\PCDSRVC{D1725DDC-B2A2E59C-06020200}_0 (\??\c:\users\user\appdata\local\temp\h5vxs3tjxcle\pcdrdiag\bin\pcdsrvc_x64.pkms) -> Trouvé(e)
[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-2431100608-126773126-1938636562-1001\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.secure-surf.com/ -> Trouvé(e)
[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-2431100608-126773126-1938636562-1001\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.secure-surf.com/ -> Trouvé(e)
[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-2431100608-126773126-1938636562-1001\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://acer13.msn.com -> Trouvé(e)
[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-2431100608-126773126-1938636562-1001\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://acer13.msn.com -> Trouvé(e)

¤¤¤ Tâches : 0 ¤¤¤

¤¤¤ Fichiers : 0 ¤¤¤

¤¤¤ Fichier Hosts : 0 [Too big!] ¤¤¤

¤¤¤ Antirootkit : 1 (Driver: Chargé) ¤¤¤
[IAT:Inl(Hook.IEAT)] (***@***) msvcrt.dll - strchr : Unknown @ 0xf4e02b2 (jmp 0x18729e|call 0xffffffffe7ffaace)

¤¤¤ Navigateurs web : 0 ¤¤¤

¤¤¤ Vérification MBR : ¤¤¤
+++++ PhysicalDrive0: ST9500325AS +++++
--- User ---
[MBR] 86a594af70d0b3f2013b4e5c679f4c04
[BSP] be6b96564dfabd1ba6ff9741f610539b : Empty|VT.Unknown MBR Code
Partition table:
0 - [SYSTEM][MAN-MOUNT] | Offset (sectors): 2048 | Size: 400 MB
1 - [MAN-MOUNT] EFI system partition | Offset (sectors): 821248 | Size: 300 MB
2 - [MAN-MOUNT] Microsoft reserved partition | Offset (sectors): 1435648 | Size: 128 MB
3 - Basic data partition | Offset (sectors): 1697792 | Size: 455661 MB
4 - [SYSTEM][MAN-MOUNT] | Offset (sectors): 934891520 | Size: 450 MB
5 - [SYSTEM][MAN-MOUNT] | Offset (sectors): 935813120 | Size: 20000 MB
User = LL1 ... OK
User = LL2 ... OK